@cerefox/memory 1.1.0-beta.4 → 1.1.0-beta.6

package/dist/bin/cerefox.js

@@ -7438,7 +7438,7 @@ var exports_meta = {};
 __export(exports_meta, {
   PKG_VERSION: () => PKG_VERSION
 });
-var PKG_VERSION = "1.1.0-beta.4";
+var PKG_VERSION = "1.1.0-beta.6";
 var init_meta = () => {};
 
 // ../../_shared/config/paths.ts
@@ -78094,7 +78094,7 @@ async function action27(options) {
   println(c.bold(`Reindexing ${chunks.length} chunk(s) ${reindexAll ? "(--all)" : "(stale only)"}${dryRun ? " — DRY RUN" : ""}`));
   warnLargeBulkWrite({
     count: chunks.length,
-    threshold: 1000,
+    threshold: 5000,
     unit: "chunk",
     batchHint: "reindex in stages with --document-id"
   });
@@ -78189,9 +78189,9 @@ async function action28(options) {
   }
   warnLargeBulkWrite({
     count: targets.length,
-    threshold: 500,
+    threshold: 1000,
     unit: "document",
-    batchHint: "run it in batches with --limit 200"
+    batchHint: "run it in batches with --limit 100"
   });
   if (options.dryRun) {
     println(c.yellow("⚠  --dry-run: nothing was written."));
@@ -82384,6 +82384,107 @@ function registerAuditUsageRoutes(app, ctx) {
 }
 
 // src/web/routes/config.ts
+import { homedir as homedir9 } from "node:os";
+import { sep } from "node:path";
+
+// ../../_shared/config-catalog/index.ts
+var CONFIG_CATALOG = [
+  {
+    key: "usage_tracking_enabled",
+    description: "Log reads and writes to cerefox_usage_log.",
+    kind: "boolean",
+    defaultValue: "false",
+    group: "Governance"
+  },
+  {
+    key: "require_requestor_identity",
+    description: "Require a requestor/author on MCP tool calls.",
+    kind: "boolean",
+    defaultValue: "false",
+    group: "Governance",
+    highImpact: true,
+    impactNote: "Agents that do not send a requestor will start getting errors. Confirm your MCP clients identify themselves before enabling."
+  },
+  {
+    key: "requestor_identity_format",
+    description: "Regex the requestor/author must match. Only enforced while “require requestor identity” is on.",
+    kind: "string",
+    defaultValue: "",
+    group: "Governance"
+  },
+  {
+    key: "min_search_score",
+    description: "Minimum cosine similarity for vector-side results. Use 0.6 with the local embedder.",
+    kind: "number",
+    defaultValue: "0.5",
+    min: 0,
+    max: 1,
+    group: "Retrieval"
+  },
+  {
+    key: "min_term_coverage",
+    description: "Fraction of a query's meaningful terms a keyword OR-fallback match must cover to count as confident.",
+    kind: "number",
+    defaultValue: "0.5",
+    min: 0,
+    max: 1,
+    group: "Retrieval"
+  },
+  {
+    key: "search_alpha",
+    description: "Hybrid fusion weight: 1 = pure semantic, 0 = pure keyword.",
+    kind: "number",
+    defaultValue: "0.7",
+    min: 0,
+    max: 1,
+    group: "Retrieval"
+  },
+  {
+    key: "relations_enabled",
+    description: "Expose the four document-relation tools to agents. The feature is dormant until enabled.",
+    kind: "boolean",
+    defaultValue: "false",
+    group: "Features",
+    highImpact: true,
+    impactNote: "This adds four tools (set/delete/get relations, get neighbours) to every connected agent's tool list — local MCP, remote MCP, and Edge Functions alike. Relations data and schema are always present; this switch only controls whether agents can see and use the tools. Turning it back off hides them again without deleting anything."
+  }
+];
+function configKeySpec(key) {
+  return CONFIG_CATALOG.find((k) => k.key === key);
+}
+var CONFIG_KEYS2 = CONFIG_CATALOG.map((k) => k.key);
+function validateConfigValue(key, value) {
+  const spec = configKeySpec(key);
+  if (!spec)
+    return `Unknown config key: ${key}`;
+  if (spec.kind === "boolean") {
+    return value === "true" || value === "false" ? null : `${key} must be "true" or "false" (got ${JSON.stringify(value)}).`;
+  }
+  if (spec.kind === "number") {
+    const n = Number(value);
+    if (!Number.isFinite(n)) {
+      return `${key} must be a number (got ${JSON.stringify(value)}).`;
+    }
+    if (spec.min !== undefined && n < spec.min) {
+      return `${key} must be ≥ ${spec.min} (got ${n}).`;
+    }
+    if (spec.max !== undefined && n > spec.max) {
+      return `${key} must be ≤ ${spec.max} (got ${n}).`;
+    }
+    return null;
+  }
+  if (key === "requestor_identity_format" && value.length > 0) {
+    try {
+      new RegExp(value);
+    } catch (err) {
+      return `${key} must be a valid regular expression: ${err instanceof Error ? err.message : String(err)}`;
+    }
+  }
+  return null;
+}
+
+// src/web/routes/config.ts
+init_config();
 function unwrapScalarRpc(data) {
   if (typeof data === "string")
     return data;
@@ -82393,7 +82494,43 @@ function unwrapScalarRpc(data) {
   }
   return null;
 }
+var ENV_OVERRIDES = {
+  min_search_score: "CEREFOX_MIN_SEARCH_SCORE",
+  min_term_coverage: "CEREFOX_MIN_TERM_COVERAGE",
+  search_alpha: "CEREFOX_SEARCH_ALPHA"
+};
 function registerConfigRoutes(app, ctx) {
+  app.get("/api/v1/config", async (c2) => {
+    const entries = await Promise.all(CONFIG_CATALOG.map(async (spec) => {
+      const { data, error: error3 } = await ctx.supabase.rpc("cerefox_get_config", {
+        p_key: spec.key
+      });
+      const stored = error3 ? null : unwrapScalarRpc(data);
+      const envVar = ENV_OVERRIDES[spec.key];
+      const envValue = envVar ? (process.env[envVar] ?? "").trim() : "";
+      return {
+        key: spec.key,
+        value: stored,
+        effective: stored ?? spec.defaultValue,
+        description: spec.description,
+        kind: spec.kind,
+        default: spec.defaultValue,
+        min: spec.min ?? null,
+        max: spec.max ?? null,
+        group: spec.group,
+        high_impact: spec.highImpact ?? false,
+        impact_note: spec.impactNote ?? null,
+        env_override: envValue ? { name: envVar, value: envValue } : null
+      };
+    }));
+    let configFile = null;
+    try {
+      const abs = resolveEnvFile();
+      const home = homedir9();
+      configFile = abs === home || abs.startsWith(home + sep) ? `~${abs.slice(home.length)}` : abs;
+    } catch {}
+    return c2.json({ keys: entries, config_file: configFile });
+  });
   app.get("/api/v1/config/:key", async (c2) => {
     const key = c2.req.param("key");
     const { data, error: error3 } = await ctx.supabase.rpc("cerefox_get_config", {
@@ -82412,6 +82549,9 @@ function registerConfigRoutes(app, ctx) {
       return c2.json({ detail: "Invalid JSON body" }, 400);
     }
     const value = typeof body.value === "string" ? body.value : String(body.value ?? "");
+    const invalid = validateConfigValue(key, value);
+    if (invalid)
+      return c2.json({ detail: invalid }, 400);
     const { error: error3 } = await ctx.supabase.rpc("cerefox_set_config", {
       p_key: key,
       p_value: value
@@ -84071,9 +84211,9 @@ import {
   rmSync,
   writeFileSync as writeFileSync7
 } from "node:fs";
-import { homedir as homedir9 } from "node:os";
+import { homedir as homedir10 } from "node:os";
 import { join as join18 } from "node:path";
-function resolveStateDir(override = process.env.CEREFOX_CONFIG_DIR, home = homedir9()) {
+function resolveStateDir(override = process.env.CEREFOX_CONFIG_DIR, home = homedir10()) {
   override = (override ?? "").trim();
   if (!override)
     return join18(home, ".cerefox");