@jungjaehoon/mama-core 2.2.0 → 2.2.2

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (11) hide show
  1. package/db/migrations/065-create-principal-scope-grants.sql +24 -0
  2. package/dist/identity/principal-repository.d.ts +31 -0
  3. package/dist/identity/principal-repository.js +173 -1
  4. package/dist/index.d.ts +2 -1
  5. package/dist/index.js +6 -3
  6. package/dist/mama-api.d.ts +4 -2
  7. package/dist/mama-api.js +4 -1
  8. package/dist/memory/api.js +3 -0
  9. package/dist/memory/truth-store.js +8 -2
  10. package/dist/memory/types.d.ts +2 -2
  11. package/package.json +1 -1
package/db/migrations/065-create-principal-scope-grants.sql ADDED
@@ -0,0 +1,24 @@
1
+ CREATE TABLE IF NOT EXISTS principal_scope_grants (
2
+ principal_id TEXT NOT NULL REFERENCES principals(principal_id),
3
+ grant_kind TEXT NOT NULL CHECK (grant_kind IN ('source', 'memory')),
4
+ scope_kind TEXT NOT NULL CHECK (
5
+ length(trim(scope_kind)) > 0
6
+ AND scope_kind <> '*'
7
+ AND (grant_kind = 'source' OR scope_kind IN ('project', 'channel', 'global'))
8
+ ),
9
+ scope_id TEXT NOT NULL CHECK (length(trim(scope_id)) > 0 AND scope_id <> '*'),
10
+ granted_by_principal_id TEXT NOT NULL REFERENCES principals(principal_id),
11
+ created_at INTEGER NOT NULL,
12
+ revoked_at INTEGER CHECK (revoked_at IS NULL OR revoked_at >= created_at)
13
+ );
14
+
15
+ CREATE UNIQUE INDEX IF NOT EXISTS idx_principal_scope_grants_one_active
16
+ ON principal_scope_grants(principal_id, grant_kind, scope_kind, scope_id)
17
+ WHERE revoked_at IS NULL;
18
+
19
+ CREATE INDEX IF NOT EXISTS idx_principal_scope_grants_active_listing
20
+ ON principal_scope_grants(principal_id, created_at, grant_kind, scope_kind, scope_id)
21
+ WHERE revoked_at IS NULL;
22
+
23
+ INSERT OR IGNORE INTO schema_version (version, description)
24
+ VALUES (65, 'Create principal scope grants for human-team access');
package/dist/identity/principal-repository.d.ts CHANGED
@@ -4,6 +4,29 @@ export interface PrincipalRow {
4
4
  kind: 'owner' | 'member';
5
5
  status: 'active' | 'suspended' | 'offboarded';
6
6
  }
7
+ export declare const SHARED_MEMORY_SCOPE_KINDS: readonly ["project", "channel", "global"];
8
+ export type SharedMemoryScopeKind = (typeof SHARED_MEMORY_SCOPE_KINDS)[number];
9
+ export type PrincipalScopeGrantRef = {
10
+ kind: 'source';
11
+ connector: string;
12
+ channelId: string;
13
+ } | {
14
+ kind: 'memory';
15
+ scopeKind: SharedMemoryScopeKind;
16
+ scopeId: string;
17
+ };
18
+ export interface PrincipalScopeGrantRecord {
19
+ targetPrincipalId: string;
20
+ scope: PrincipalScopeGrantRef;
21
+ grantedByPrincipalId: string;
22
+ createdAt: number;
23
+ }
24
+ export interface PrincipalScopeGrantMutationInput {
25
+ targetPrincipalId: string;
26
+ ownerPrincipalId: string;
27
+ scope: PrincipalScopeGrantRef;
28
+ now: number;
29
+ }
7
30
  export interface PrincipalRepository {
8
31
  resolveByExternal(connector: string, namespace: string, externalId: string): PrincipalRow | null;
9
32
  registerMember(input: {
@@ -27,11 +50,19 @@ export interface PrincipalRepository {
27
50
  displayName?: string;
28
51
  status: string;
29
52
  }>;
53
+ grantScope(input: PrincipalScopeGrantMutationInput): 'created' | 'exists';
54
+ revokeScope(input: PrincipalScopeGrantMutationInput): 'revoked' | 'absent';
55
+ listActiveGrants(principalId: string): PrincipalScopeGrantRecord[];
30
56
  }
31
57
  export type PrincipalRegistrationErrorCode = 'identity_bound_to_owner' | 'member_not_active';
32
58
  export declare class PrincipalRegistrationError extends Error {
33
59
  readonly code: PrincipalRegistrationErrorCode;
34
60
  constructor(code: PrincipalRegistrationErrorCode, message: string);
35
61
  }
62
+ export type PrincipalScopeGrantErrorCode = 'target_not_active_member' | 'grantor_not_active_owner' | 'invalid_scope';
63
+ export declare class PrincipalScopeGrantError extends Error {
64
+ readonly code: PrincipalScopeGrantErrorCode;
65
+ constructor(code: PrincipalScopeGrantErrorCode, message: string);
66
+ }
36
67
  export declare function createPrincipalRepository(adapter: Pick<DBManagerAdapter, 'prepare' | 'transaction'>): PrincipalRepository;
37
68
  //# sourceMappingURL=principal-repository.d.ts.map
package/dist/identity/principal-repository.js CHANGED
@@ -1,8 +1,9 @@
1
1
  "use strict";
2
2
  Object.defineProperty(exports, "__esModule", { value: true });
3
- exports.PrincipalRegistrationError = void 0;
3
+ exports.PrincipalScopeGrantError = exports.PrincipalRegistrationError = exports.SHARED_MEMORY_SCOPE_KINDS = void 0;
4
4
  exports.createPrincipalRepository = createPrincipalRepository;
5
5
  const node_crypto_1 = require("node:crypto");
6
+ exports.SHARED_MEMORY_SCOPE_KINDS = ['project', 'channel', 'global'];
6
7
  class PrincipalRegistrationError extends Error {
7
8
  code;
8
9
  constructor(code, message) {
@@ -12,6 +13,90 @@ class PrincipalRegistrationError extends Error {
12
13
  }
13
14
  }
14
15
  exports.PrincipalRegistrationError = PrincipalRegistrationError;
16
+ class PrincipalScopeGrantError extends Error {
17
+ code;
18
+ constructor(code, message) {
19
+ super(message);
20
+ this.name = 'PrincipalScopeGrantError';
21
+ this.code = code;
22
+ }
23
+ }
24
+ exports.PrincipalScopeGrantError = PrincipalScopeGrantError;
25
+ const MAX_SCOPE_COMPONENT_LENGTH = 512;
26
+ function containsControlCharacter(value) {
27
+ return Array.from(value).some((character) => {
28
+ const codePoint = character.codePointAt(0) ?? 0;
29
+ return codePoint < 32 || codePoint === 127;
30
+ });
31
+ }
32
+ function canonicalizeScopeComponent(value, label, lowercase = false) {
33
+ if (typeof value !== 'string') {
34
+ throw new PrincipalScopeGrantError('invalid_scope', `${label} must be a string`);
35
+ }
36
+ const trimmed = value.trim();
37
+ const canonical = lowercase ? trimmed.toLowerCase() : trimmed;
38
+ if (canonical.length === 0 ||
39
+ canonical.length > MAX_SCOPE_COMPONENT_LENGTH ||
40
+ canonical === '*' ||
41
+ containsControlCharacter(canonical)) {
42
+ throw new PrincipalScopeGrantError('invalid_scope', `${label} is not a canonical scope value`);
43
+ }
44
+ return canonical;
45
+ }
46
+ function canonicalizeGrantScope(scope) {
47
+ if (typeof scope !== 'object' || scope === null) {
48
+ throw new PrincipalScopeGrantError('invalid_scope', 'Grant scope must be an object');
49
+ }
50
+ const candidate = scope;
51
+ if (candidate.kind === 'source') {
52
+ return {
53
+ kind: 'source',
54
+ connector: canonicalizeScopeComponent(candidate.connector, 'Source connector', true),
55
+ channelId: canonicalizeScopeComponent(candidate.channelId, 'Source channel ID'),
56
+ };
57
+ }
58
+ if (candidate.kind === 'memory') {
59
+ if (typeof candidate.scopeKind !== 'string' ||
60
+ !exports.SHARED_MEMORY_SCOPE_KINDS.includes(candidate.scopeKind)) {
61
+ throw new PrincipalScopeGrantError('invalid_scope', 'Memory grant kind must be project, channel, or global');
62
+ }
63
+ return {
64
+ kind: 'memory',
65
+ scopeKind: candidate.scopeKind,
66
+ scopeId: canonicalizeScopeComponent(candidate.scopeId, 'Memory scope ID'),
67
+ };
68
+ }
69
+ throw new PrincipalScopeGrantError('invalid_scope', 'Grant kind must be source or memory');
70
+ }
71
+ function scopeColumns(scope) {
72
+ if (scope.kind === 'source') {
73
+ return {
74
+ grantKind: 'source',
75
+ scopeKind: scope.connector,
76
+ scopeId: scope.channelId,
77
+ };
78
+ }
79
+ return {
80
+ grantKind: 'memory',
81
+ scopeKind: scope.scopeKind,
82
+ scopeId: scope.scopeId,
83
+ };
84
+ }
85
+ function mapPrincipalScopeGrant(row) {
86
+ const scope = row.grant_kind === 'source'
87
+ ? { kind: 'source', connector: row.scope_kind, channelId: row.scope_id }
88
+ : {
89
+ kind: 'memory',
90
+ scopeKind: row.scope_kind,
91
+ scopeId: row.scope_id,
92
+ };
93
+ return {
94
+ targetPrincipalId: row.principal_id,
95
+ scope,
96
+ grantedByPrincipalId: row.granted_by_principal_id,
97
+ createdAt: row.created_at,
98
+ };
99
+ }
15
100
  function mintPrincipalId(kind, connector, namespace, externalId) {
16
101
  const identityKey = JSON.stringify([kind, connector, namespace, externalId]);
17
102
  const digest = (0, node_crypto_1.createHash)('sha256').update(identityKey, 'utf8').digest('hex');
@@ -42,6 +127,63 @@ function createPrincipalRepository(adapter) {
42
127
  FROM principals
43
128
  WHERE kind = 'member'
44
129
  ORDER BY created_at ASC, principal_id ASC`);
130
+ const selectActiveMemberStatement = adapter.prepare(`SELECT 1
131
+ FROM principals
132
+ WHERE principal_id = ? AND kind = 'member' AND status = 'active'`);
133
+ const selectActiveGrantorStatement = adapter.prepare(`SELECT 1
134
+ FROM principals
135
+ WHERE principal_id = ? AND kind = 'owner' AND status = 'active'`);
136
+ const insertGrantStatement = adapter.prepare(`INSERT INTO principal_scope_grants (
137
+ principal_id, grant_kind, scope_kind, scope_id,
138
+ granted_by_principal_id, created_at, revoked_at
139
+ )
140
+ SELECT ?, ?, ?, ?, ?, ?, NULL
141
+ WHERE EXISTS (
142
+ SELECT 1 FROM principals
143
+ WHERE principal_id = ? AND kind = 'member' AND status = 'active'
144
+ )
145
+ AND EXISTS (
146
+ SELECT 1 FROM principals
147
+ WHERE principal_id = ? AND kind = 'owner' AND status = 'active'
148
+ )
149
+ ON CONFLICT (principal_id, grant_kind, scope_kind, scope_id)
150
+ WHERE revoked_at IS NULL
151
+ DO NOTHING`);
152
+ const revokeGrantStatement = adapter.prepare(`UPDATE principal_scope_grants
153
+ SET revoked_at = ?
154
+ WHERE principal_id = ? AND grant_kind = ? AND scope_kind = ? AND scope_id = ?
155
+ AND revoked_at IS NULL
156
+ AND EXISTS (
157
+ SELECT 1 FROM principals
158
+ WHERE principal_id = ? AND kind = 'member' AND status = 'active'
159
+ )
160
+ AND EXISTS (
161
+ SELECT 1 FROM principals
162
+ WHERE principal_id = ? AND kind = 'owner' AND status = 'active'
163
+ )`);
164
+ const listActiveGrantsStatement = adapter.prepare(`SELECT
165
+ grants.principal_id,
166
+ grants.grant_kind,
167
+ grants.scope_kind,
168
+ grants.scope_id,
169
+ grants.granted_by_principal_id,
170
+ grants.created_at
171
+ FROM principal_scope_grants AS grants
172
+ JOIN principals AS target ON target.principal_id = grants.principal_id
173
+ WHERE grants.principal_id = ?
174
+ AND grants.revoked_at IS NULL
175
+ AND target.kind = 'member'
176
+ AND target.status = 'active'
177
+ ORDER BY grants.created_at ASC, grants.grant_kind ASC,
178
+ grants.scope_kind ASC, grants.scope_id ASC`);
179
+ function assertGrantMutationPrincipals(targetPrincipalId, ownerPrincipalId) {
180
+ if (!selectActiveMemberStatement.get(targetPrincipalId)) {
181
+ throw new PrincipalScopeGrantError('target_not_active_member', 'Grant target must be an active member principal');
182
+ }
183
+ if (!selectActiveGrantorStatement.get(ownerPrincipalId)) {
184
+ throw new PrincipalScopeGrantError('grantor_not_active_owner', 'Grant mutation requires an active owner principal');
185
+ }
186
+ }
45
187
  function resolveByExternal(connector, namespace, externalId) {
46
188
  const row = resolveByExternalStatement.get(connector, namespace, externalId);
47
189
  return row ? mapPrincipal(row) : null;
@@ -101,6 +243,33 @@ function createPrincipalRepository(adapter) {
101
243
  return row.display_name === null ? member : { ...member, displayName: row.display_name };
102
244
  });
103
245
  }
246
+ function grantScope(input) {
247
+ const canonicalScope = canonicalizeGrantScope(input.scope);
248
+ const { grantKind, scopeKind, scopeId } = scopeColumns(canonicalScope);
249
+ return adapter.transaction(() => {
250
+ const result = insertGrantStatement.run(input.targetPrincipalId, grantKind, scopeKind, scopeId, input.ownerPrincipalId, input.now, input.targetPrincipalId, input.ownerPrincipalId);
251
+ if (result.changes === 1) {
252
+ return 'created';
253
+ }
254
+ assertGrantMutationPrincipals(input.targetPrincipalId, input.ownerPrincipalId);
255
+ return 'exists';
256
+ });
257
+ }
258
+ function revokeScope(input) {
259
+ const canonicalScope = canonicalizeGrantScope(input.scope);
260
+ const { grantKind, scopeKind, scopeId } = scopeColumns(canonicalScope);
261
+ return adapter.transaction(() => {
262
+ const result = revokeGrantStatement.run(input.now, input.targetPrincipalId, grantKind, scopeKind, scopeId, input.targetPrincipalId, input.ownerPrincipalId);
263
+ if (result.changes === 1) {
264
+ return 'revoked';
265
+ }
266
+ assertGrantMutationPrincipals(input.targetPrincipalId, input.ownerPrincipalId);
267
+ return 'absent';
268
+ });
269
+ }
270
+ function listActiveGrants(principalId) {
271
+ return listActiveGrantsStatement.all(principalId).map(mapPrincipalScopeGrant);
272
+ }
104
273
  return {
105
274
  resolveByExternal,
106
275
  registerMember,
@@ -113,6 +282,9 @@ function createPrincipalRepository(adapter) {
113
282
  },
114
283
  ensureOwner,
115
284
  listMembers,
285
+ grantScope,
286
+ revokeScope,
287
+ listActiveGrants,
116
288
  };
117
289
  }
118
290
  //# sourceMappingURL=principal-repository.js.map
package/dist/index.d.ts CHANGED
@@ -15,9 +15,10 @@ export { createAdapter, DatabaseAdapter, SQLiteAdapter, type AdapterConfig, type
15
15
  export { traverseDecisionChain, DB_PATH, DB_DIR, LEGACY_DB_PATH, DEFAULT_DB_PATH, } from './memory-store.js';
16
16
  import mama from './mama-api.js';
17
17
  export { mama };
18
- export { MEMORY_SCOPE_KINDS, MEMORY_KINDS, MEMORY_STATUSES, MEMORY_EDGE_TYPES, createEmptyRecallBundle, type MemoryScopeKind, type MemoryKind, type MemoryStatus, type MemoryEdgeType, type MemoryScopeRef, type MemorySourceRef, type MemoryRecord, type MemoryWriteProvenance, type MemoryProvenanceRecord, type PublicSaveMemoryInput, type PublicIngestMemoryInput, type PublicIngestConversationInput, type MemorySearchResultHit, type MemoryEdge, type ProfileSnapshot, type RecallBundle, type ConversationMessage, type IngestConversationInput, type ExtractedMemoryUnit, type IngestConversationResult, } from './memory/types.js';
18
+ export { MEMORY_SCOPE_KINDS, MEMORY_KINDS, MEMORY_STATUSES, MEMORY_EDGE_TYPES, createEmptyRecallBundle, type MemoryScopeKind, type MemoryKind, type MemoryStatus, type MemoryEdgeType, type MemoryScopeRef, type MemorySourceRef, type MemoryRecord, type MemoryWriteProvenance, type MemoryProvenanceRecord, type PublicSaveMemoryInput, type PublicIngestMemoryInput, type PublicIngestConversationInput, type MemorySearchResultHit, type MemoryEdge, type ProfileSnapshot, type RecallBundle, type ConversationMessage, type IngestConversationInput, type ExtractedMemoryUnit, type IngestConversationResult, type AuditFindingRecord, } from './memory/types.js';
19
19
  export { saveMemory, saveMemoryWithTrustedProvenance, promoteMemoryStatus, recallMemory, buildProfile, ingestMemory, ingestWithTrustedProvenance, evolveMemory, buildMemoryBootstrap, createAuditAck, recordMemoryAudit, ingestConversation, ingestConversationWithTrustedProvenance, setExtractionFn, upsertChannelSummary, getChannelSummary, } from './memory/api.js';
20
20
  export { buildExtractionPrompt, parseExtractionResponse } from './memory/extraction-prompt.js';
21
+ export { createAuditFinding, listOpenAuditFindings } from './memory/finding-store.js';
21
22
  export { appendMemoryEvent, insertMemoryEventInTransaction, listMemoryEventsForMemory, listRecentMemoryEvents, } from './memory/event-store.js';
22
23
  export { createTrustedProvenanceCapability, assertTrustedProvenanceCapability, type TrustedProvenanceCapability, type TrustedMemoryWriteOptions, } from './memory/provenance.js';
23
24
  export { getMemoryProvenance, listMemoriesByEnvelopeHash, listMemoriesByGatewayCallId, listMemoriesByModelRunId, } from './memory/provenance-query.js';
package/dist/index.js CHANGED
@@ -27,9 +27,9 @@ var __importDefault = (this && this.__importDefault) || function (mod) {
27
27
  };
28
28
  Object.defineProperty(exports, "__esModule", { value: true });
29
29
  exports.createAuditAck = exports.buildMemoryBootstrap = exports.evolveMemory = exports.ingestWithTrustedProvenance = exports.ingestMemory = exports.buildProfile = exports.recallMemory = exports.promoteMemoryStatus = exports.saveMemoryWithTrustedProvenance = exports.saveMemory = exports.createEmptyRecallBundle = exports.MEMORY_EDGE_TYPES = exports.MEMORY_STATUSES = exports.MEMORY_KINDS = exports.MEMORY_SCOPE_KINDS = exports.mama = exports.DEFAULT_DB_PATH = exports.LEGACY_DB_PATH = exports.DB_DIR = exports.DB_PATH = exports.traverseDecisionChain = exports.SQLiteAdapter = exports.DatabaseAdapter = exports.createAdapter = exports.fts5Search = exports.getDbPath = exports.getPreparedStmt = exports.updateDecisionOutcome = exports.querySemanticEdges = exports.queryDecisionGraph = exports.insertDecisionWithEmbedding = exports.queryVectorSearch = exports.vectorSearch = exports.insertEmbedding = exports.closeDB = exports.getAdapter = exports.getDB = exports.initDB = exports.TIMEOUT_MS = exports.HOST = exports.DEFAULT_PORT = exports.getServerPort = exports.EmbeddingCache = exports.EMBEDDING_PREFIX_SCHEME = exports.MODEL_NAME = exports.EMBEDDING_DIM = exports.embeddingCache = exports.cosineSimilarity = exports.generateEnhancedEmbedding = exports.generateEmbedding = void 0;
30
- exports.selectTopDecisions = exports.calculateRelevance = exports.DEFAULT_CONFIG = exports.getConfigPath = exports.updateConfig = exports.getCacheDir = exports.getEmbeddingDim = exports.getModelName = exports.loadConfig = exports.CanonicalizeError = exports.targetRefHash = exports.canonicalizeJSON = exports.listVisibleTwinEdgesForRefs = exports.mapTwinEdgeRow = exports.listTwinEdgesForRefs = exports.getTwinEdge = exports.TWIN_REF_KINDS = exports.TWIN_EDGE_TYPES = exports.TWIN_EDGE_SOURCES = exports.listToolTracesForRun = exports.appendToolTrace = exports.getModelRunInAdapter = exports.getModelRun = exports.failModelRunInAdapter = exports.failModelRun = exports.commitModelRunInAdapter = exports.commitModelRun = exports.beginModelRunInAdapter = exports.beginModelRun = exports.MODEL_RUN_STATUSES = exports.listMemoryProvenanceAudit = exports.getMemoryProvenanceAudit = exports.listMemoriesByModelRunId = exports.listMemoriesByGatewayCallId = exports.listMemoriesByEnvelopeHash = exports.getMemoryProvenance = exports.assertTrustedProvenanceCapability = exports.createTrustedProvenanceCapability = exports.listRecentMemoryEvents = exports.listMemoryEventsForMemory = exports.insertMemoryEventInTransaction = exports.appendMemoryEvent = exports.parseExtractionResponse = exports.buildExtractionPrompt = exports.getChannelSummary = exports.upsertChannelSummary = exports.setExtractionFn = exports.ingestConversationWithTrustedProvenance = exports.ingestConversation = exports.recordMemoryAudit = void 0;
31
- exports.extractQuickAnswer = exports.estimateTokens = exports.ensureTokenBudget = exports.formatTrustContext = exports.formatList = exports.formatRecall = exports.formatLegacyContext = exports.formatContext = exports.isMAMAError = exports.wrapError = exports.ErrorCodes = exports.TimeoutError = exports.RateLimitError = exports.LinkError = exports.ConfigurationError = exports.EmbeddingError = exports.DatabaseError = exports.ValidationError = exports.NotFoundError = exports.MAMAError = exports.formatTimeAgo = exports.DebugLogger = exports.error = exports.warn = exports.info = exports.debug = exports.logSearching = exports.logLoading = exports.logError = exports.logFailed = exports.logComplete = exports.logProgress = exports.getTierDescription = exports.checkDatabase = exports.checkEmbeddings = exports.checkSQLite = exports.checkNodeVersion = exports.VALID_EDGE_TYPES = exports.updateConfidence = exports.createEdgesFromReasoning = exports.parseReasoningForRelationships = exports.detectRefinement = exports.calculateCombinedConfidence = exports.markSuperseded = exports.createSupersedesEdge = exports.createEdge = exports.getPreviousDecision = exports.generateDecisionId = exports.learnDecision = exports.formatTopNContext = void 0;
32
- exports.notifyInsight = exports.FALLBACK_MODEL = exports.DEFAULT_MODEL = exports.listModels = exports.isAvailable = exports.generate = exports.analyzeIntent = exports.RECENT_WINDOW_MS = exports.PARTIAL_INDICATORS = exports.SUCCESS_INDICATORS = exports.FAILURE_INDICATORS = exports.markOutcome = exports.getEvidenceImpact = exports.calculateDurationDays = exports.getRecentDecision = exports.extractFailureReason = exports.matchesPartialIndicators = exports.matchesSuccessIndicators = exports.matchesFailureIndicators = exports.analyzeOutcome = exports.extractCodeExample = void 0;
30
+ exports.DEFAULT_CONFIG = exports.getConfigPath = exports.updateConfig = exports.getCacheDir = exports.getEmbeddingDim = exports.getModelName = exports.loadConfig = exports.CanonicalizeError = exports.targetRefHash = exports.canonicalizeJSON = exports.listVisibleTwinEdgesForRefs = exports.mapTwinEdgeRow = exports.listTwinEdgesForRefs = exports.getTwinEdge = exports.TWIN_REF_KINDS = exports.TWIN_EDGE_TYPES = exports.TWIN_EDGE_SOURCES = exports.listToolTracesForRun = exports.appendToolTrace = exports.getModelRunInAdapter = exports.getModelRun = exports.failModelRunInAdapter = exports.failModelRun = exports.commitModelRunInAdapter = exports.commitModelRun = exports.beginModelRunInAdapter = exports.beginModelRun = exports.MODEL_RUN_STATUSES = exports.listMemoryProvenanceAudit = exports.getMemoryProvenanceAudit = exports.listMemoriesByModelRunId = exports.listMemoriesByGatewayCallId = exports.listMemoriesByEnvelopeHash = exports.getMemoryProvenance = exports.assertTrustedProvenanceCapability = exports.createTrustedProvenanceCapability = exports.listRecentMemoryEvents = exports.listMemoryEventsForMemory = exports.insertMemoryEventInTransaction = exports.appendMemoryEvent = exports.listOpenAuditFindings = exports.createAuditFinding = exports.parseExtractionResponse = exports.buildExtractionPrompt = exports.getChannelSummary = exports.upsertChannelSummary = exports.setExtractionFn = exports.ingestConversationWithTrustedProvenance = exports.ingestConversation = exports.recordMemoryAudit = void 0;
31
+ exports.ensureTokenBudget = exports.formatTrustContext = exports.formatList = exports.formatRecall = exports.formatLegacyContext = exports.formatContext = exports.isMAMAError = exports.wrapError = exports.ErrorCodes = exports.TimeoutError = exports.RateLimitError = exports.LinkError = exports.ConfigurationError = exports.EmbeddingError = exports.DatabaseError = exports.ValidationError = exports.NotFoundError = exports.MAMAError = exports.formatTimeAgo = exports.DebugLogger = exports.error = exports.warn = exports.info = exports.debug = exports.logSearching = exports.logLoading = exports.logError = exports.logFailed = exports.logComplete = exports.logProgress = exports.getTierDescription = exports.checkDatabase = exports.checkEmbeddings = exports.checkSQLite = exports.checkNodeVersion = exports.VALID_EDGE_TYPES = exports.updateConfidence = exports.createEdgesFromReasoning = exports.parseReasoningForRelationships = exports.detectRefinement = exports.calculateCombinedConfidence = exports.markSuperseded = exports.createSupersedesEdge = exports.createEdge = exports.getPreviousDecision = exports.generateDecisionId = exports.learnDecision = exports.formatTopNContext = exports.selectTopDecisions = exports.calculateRelevance = void 0;
32
+ exports.notifyInsight = exports.FALLBACK_MODEL = exports.DEFAULT_MODEL = exports.listModels = exports.isAvailable = exports.generate = exports.analyzeIntent = exports.RECENT_WINDOW_MS = exports.PARTIAL_INDICATORS = exports.SUCCESS_INDICATORS = exports.FAILURE_INDICATORS = exports.markOutcome = exports.getEvidenceImpact = exports.calculateDurationDays = exports.getRecentDecision = exports.extractFailureReason = exports.matchesPartialIndicators = exports.matchesSuccessIndicators = exports.matchesFailureIndicators = exports.analyzeOutcome = exports.extractCodeExample = exports.extractQuickAnswer = exports.estimateTokens = void 0;
33
33
  var embeddings_js_1 = require("./embeddings.js");
34
34
  Object.defineProperty(exports, "generateEmbedding", { enumerable: true, get: function () { return embeddings_js_1.generateEmbedding; } });
35
35
  Object.defineProperty(exports, "generateEnhancedEmbedding", { enumerable: true, get: function () { return embeddings_js_1.generateEnhancedEmbedding; } });
@@ -98,6 +98,9 @@ Object.defineProperty(exports, "getChannelSummary", { enumerable: true, get: fun
98
98
  var extraction_prompt_js_1 = require("./memory/extraction-prompt.js");
99
99
  Object.defineProperty(exports, "buildExtractionPrompt", { enumerable: true, get: function () { return extraction_prompt_js_1.buildExtractionPrompt; } });
100
100
  Object.defineProperty(exports, "parseExtractionResponse", { enumerable: true, get: function () { return extraction_prompt_js_1.parseExtractionResponse; } });
101
+ var finding_store_js_1 = require("./memory/finding-store.js");
102
+ Object.defineProperty(exports, "createAuditFinding", { enumerable: true, get: function () { return finding_store_js_1.createAuditFinding; } });
103
+ Object.defineProperty(exports, "listOpenAuditFindings", { enumerable: true, get: function () { return finding_store_js_1.listOpenAuditFindings; } });
101
104
  var event_store_js_1 = require("./memory/event-store.js");
102
105
  Object.defineProperty(exports, "appendMemoryEvent", { enumerable: true, get: function () { return event_store_js_1.appendMemoryEvent; } });
103
106
  Object.defineProperty(exports, "insertMemoryEventInTransaction", { enumerable: true, get: function () { return event_store_js_1.insertMemoryEventInTransaction; } });
package/dist/mama-api.d.ts CHANGED
@@ -20,7 +20,7 @@
20
20
  import { DecisionRecord } from './db-manager.js';
21
21
  import { SemanticEdges } from './decision-formatter.js';
22
22
  import { saveMemory, saveMemoryWithTrustedProvenance, recallMemory, buildProfile, ingestMemory, ingestWithTrustedProvenance, ingestConversation, ingestConversationWithTrustedProvenance, evolveMemory, buildMemoryBootstrap, createAuditAck, recordMemoryAudit, upsertChannelSummary, getChannelSummary } from './memory/api.js';
23
- import { listOpenAuditFindings } from './memory/finding-store.js';
23
+ import { createAuditFinding, listOpenAuditFindings } from './memory/finding-store.js';
24
24
  import { listMemoryEventsForMemory, listRecentMemoryEvents } from './memory/event-store.js';
25
25
  import type { TrustedMemoryWriteOptions } from './memory/provenance.js';
26
26
  import { getMemoryProvenance, listMemoriesByEnvelopeHash, listMemoriesByGatewayCallId, listMemoriesByModelRunId } from './memory/provenance-query.js';
@@ -1065,6 +1065,8 @@ declare const mama: {
1065
1065
  upsertChannelSummary: typeof upsertChannelSummary;
1066
1066
  getChannelSummary: typeof getChannelSummary;
1067
1067
  listAuditFindings: typeof listOpenAuditFindings;
1068
+ listOpenAuditFindings: typeof listOpenAuditFindings;
1069
+ createAuditFinding: typeof createAuditFinding;
1068
1070
  getMemoryProvenance: typeof getMemoryProvenance;
1069
1071
  listMemoriesByEnvelopeHash: typeof listMemoriesByEnvelopeHash;
1070
1072
  listMemoriesByGatewayCallId: typeof listMemoriesByGatewayCallId;
@@ -1105,6 +1107,6 @@ declare const mama: {
1105
1107
  validateCleanupResult: typeof validateCleanupResult;
1106
1108
  expandWithGraph: typeof expandWithGraph;
1107
1109
  };
1108
- export { save, saveWithTrustedProvenance, suggest, annotateTopicCurrency, saveMemory, saveMemoryWithTrustedProvenance, recallMemory, listDecisions as list, listCheckpoints, updateOutcome, buildProfile, ingestMemory, ingestWithTrustedProvenance, ingestConversation, ingestConversationWithTrustedProvenance, evolveMemory, buildMemoryBootstrap, createAuditAck, recordMemoryAudit, upsertChannelSummary, getChannelSummary, listOpenAuditFindings, getMemoryProvenance, listMemoriesByEnvelopeHash, listMemoriesByGatewayCallId, listMemoriesByModelRunId, listMemoryEventsForMemory, listRecentMemoryEvents, beginModelRun, beginModelRunInAdapter, commitModelRun, commitModelRunInAdapter, failModelRun, failModelRunInAdapter, getModelRun, getModelRunInAdapter, appendToolTrace, listToolTracesForRun, saveCheckpoint, loadCheckpoint, recall, proposeLink, approveLink, rejectLink, getPendingLinks, deprecateAutoLinks, calculateCoverage, calculateQuality, generateQualityReport, logRestartAttempt, calculateRestartSuccessRate, calculateRestartLatency, getRestartMetrics, scanAutoLinks, createLinkBackup, generatePreCleanupReport, restoreLinkBackup, verifyBackupExists, deleteAutoLinks, validateCleanupResult, expandWithGraph, };
1110
+ export { save, saveWithTrustedProvenance, suggest, annotateTopicCurrency, saveMemory, saveMemoryWithTrustedProvenance, recallMemory, listDecisions as list, listCheckpoints, updateOutcome, buildProfile, ingestMemory, ingestWithTrustedProvenance, ingestConversation, ingestConversationWithTrustedProvenance, evolveMemory, buildMemoryBootstrap, createAuditAck, recordMemoryAudit, upsertChannelSummary, getChannelSummary, listOpenAuditFindings, createAuditFinding, getMemoryProvenance, listMemoriesByEnvelopeHash, listMemoriesByGatewayCallId, listMemoriesByModelRunId, listMemoryEventsForMemory, listRecentMemoryEvents, beginModelRun, beginModelRunInAdapter, commitModelRun, commitModelRunInAdapter, failModelRun, failModelRunInAdapter, getModelRun, getModelRunInAdapter, appendToolTrace, listToolTracesForRun, saveCheckpoint, loadCheckpoint, recall, proposeLink, approveLink, rejectLink, getPendingLinks, deprecateAutoLinks, calculateCoverage, calculateQuality, generateQualityReport, logRestartAttempt, calculateRestartSuccessRate, calculateRestartLatency, getRestartMetrics, scanAutoLinks, createLinkBackup, generatePreCleanupReport, restoreLinkBackup, verifyBackupExists, deleteAutoLinks, validateCleanupResult, expandWithGraph, };
1109
1111
  export default mama;
1110
1112
  //# sourceMappingURL=mama-api.d.ts.map
package/dist/mama-api.js CHANGED
@@ -22,7 +22,7 @@ var __importDefault = (this && this.__importDefault) || function (mod) {
22
22
  return (mod && mod.__esModule) ? mod : { "default": mod };
23
23
  };
24
24
  Object.defineProperty(exports, "__esModule", { value: true });
25
- exports.listToolTracesForRun = exports.appendToolTrace = exports.getModelRunInAdapter = exports.getModelRun = exports.failModelRunInAdapter = exports.failModelRun = exports.commitModelRunInAdapter = exports.commitModelRun = exports.beginModelRunInAdapter = exports.beginModelRun = exports.listRecentMemoryEvents = exports.listMemoryEventsForMemory = exports.listMemoriesByModelRunId = exports.listMemoriesByGatewayCallId = exports.listMemoriesByEnvelopeHash = exports.getMemoryProvenance = exports.listOpenAuditFindings = exports.getChannelSummary = exports.upsertChannelSummary = exports.recordMemoryAudit = exports.createAuditAck = exports.buildMemoryBootstrap = exports.evolveMemory = exports.ingestConversationWithTrustedProvenance = exports.ingestConversation = exports.ingestWithTrustedProvenance = exports.ingestMemory = exports.buildProfile = exports.recallMemory = exports.saveMemoryWithTrustedProvenance = exports.saveMemory = void 0;
25
+ exports.listToolTracesForRun = exports.appendToolTrace = exports.getModelRunInAdapter = exports.getModelRun = exports.failModelRunInAdapter = exports.failModelRun = exports.commitModelRunInAdapter = exports.commitModelRun = exports.beginModelRunInAdapter = exports.beginModelRun = exports.listRecentMemoryEvents = exports.listMemoryEventsForMemory = exports.listMemoriesByModelRunId = exports.listMemoriesByGatewayCallId = exports.listMemoriesByEnvelopeHash = exports.getMemoryProvenance = exports.createAuditFinding = exports.listOpenAuditFindings = exports.getChannelSummary = exports.upsertChannelSummary = exports.recordMemoryAudit = exports.createAuditAck = exports.buildMemoryBootstrap = exports.evolveMemory = exports.ingestConversationWithTrustedProvenance = exports.ingestConversation = exports.ingestWithTrustedProvenance = exports.ingestMemory = exports.buildProfile = exports.recallMemory = exports.saveMemoryWithTrustedProvenance = exports.saveMemory = void 0;
26
26
  exports.save = save;
27
27
  exports.saveWithTrustedProvenance = saveWithTrustedProvenance;
28
28
  exports.suggest = suggest;
@@ -84,6 +84,7 @@ Object.defineProperty(exports, "recordMemoryAudit", { enumerable: true, get: fun
84
84
  Object.defineProperty(exports, "upsertChannelSummary", { enumerable: true, get: function () { return api_js_1.upsertChannelSummary; } });
85
85
  Object.defineProperty(exports, "getChannelSummary", { enumerable: true, get: function () { return api_js_1.getChannelSummary; } });
86
86
  const finding_store_js_1 = require("./memory/finding-store.js");
87
+ Object.defineProperty(exports, "createAuditFinding", { enumerable: true, get: function () { return finding_store_js_1.createAuditFinding; } });
87
88
  Object.defineProperty(exports, "listOpenAuditFindings", { enumerable: true, get: function () { return finding_store_js_1.listOpenAuditFindings; } });
88
89
  const event_store_js_1 = require("./memory/event-store.js");
89
90
  Object.defineProperty(exports, "listMemoryEventsForMemory", { enumerable: true, get: function () { return event_store_js_1.listMemoryEventsForMemory; } });
@@ -2813,6 +2814,8 @@ const mama = {
2813
2814
  upsertChannelSummary: api_js_1.upsertChannelSummary,
2814
2815
  getChannelSummary: api_js_1.getChannelSummary,
2815
2816
  listAuditFindings: finding_store_js_1.listOpenAuditFindings,
2817
+ listOpenAuditFindings: finding_store_js_1.listOpenAuditFindings,
2818
+ createAuditFinding: finding_store_js_1.createAuditFinding,
2816
2819
  getMemoryProvenance: provenance_query_js_1.getMemoryProvenance,
2817
2820
  listMemoriesByEnvelopeHash: provenance_query_js_1.listMemoriesByEnvelopeHash,
2818
2821
  listMemoriesByGatewayCallId: provenance_query_js_1.listMemoriesByGatewayCallId,
package/dist/memory/api.js CHANGED
@@ -647,6 +647,9 @@ async function saveMemoryInternal(input, options) {
647
647
  adapter
648
648
  .prepare(`UPDATE decisions SET superseded_by = ?, status = 'superseded', updated_at = ? WHERE id = ?`)
649
649
  .run(id, now, edge.to_id);
650
+ adapter
651
+ .prepare(`UPDATE memory_truth SET truth_status = 'superseded', superseded_by = ?, updated_at = ? WHERE memory_id = ?`)
652
+ .run(id, now, edge.to_id);
650
653
  }
651
654
  adapter
652
655
  .prepare(`
package/dist/memory/truth-store.js CHANGED
@@ -50,9 +50,15 @@ async function projectMemoryTruth(row) {
50
50
  memory_id, topic, truth_status, effective_summary, effective_details, trust_score,
51
51
  scope_refs, supporting_event_ids, superseded_by, contradicted_by, created_at, updated_at
52
52
  )
53
- VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, COALESCE((SELECT created_at FROM memory_truth WHERE memory_id = ?), ?), ?)
53
+ VALUES (
54
+ ?, ?,
55
+ COALESCE((SELECT status FROM decisions WHERE id = ?), ?),
56
+ ?, ?, ?, ?, ?,
57
+ COALESCE((SELECT superseded_by FROM decisions WHERE id = ?), ?),
58
+ ?, COALESCE((SELECT created_at FROM memory_truth WHERE memory_id = ?), ?), ?
59
+ )
54
60
  `)
55
- .run(row.memory_id, row.topic, row.truth_status, row.effective_summary, row.effective_details, row.trust_score, JSON.stringify(row.scope_refs), JSON.stringify(row.supporting_event_ids), row.superseded_by ?? null, row.contradicted_by ? JSON.stringify(row.contradicted_by) : null, row.memory_id, now, now);
61
+ .run(row.memory_id, row.topic, row.memory_id, row.truth_status, row.effective_summary, row.effective_details, row.trust_score, JSON.stringify(row.scope_refs), JSON.stringify(row.supporting_event_ids), row.memory_id, row.superseded_by ?? null, row.contradicted_by ? JSON.stringify(row.contradicted_by) : null, row.memory_id, now, now);
56
62
  }
57
63
  async function queryRelevantTruth(params) {
58
64
  await (0, db_manager_js_1.initDB)();
package/dist/memory/types.d.ts CHANGED
@@ -170,8 +170,8 @@ export interface PublicIngestMemoryInput {
170
170
  export type PublicIngestConversationInput = IngestConversationInput;
171
171
  export interface AuditFindingRecord {
172
172
  finding_id: string;
173
- kind: 'wrong_direction' | 'memory_conflict' | 'stale_memory' | 'unsupported_claim';
174
- severity: 'low' | 'medium' | 'high';
173
+ kind: 'wrong_direction' | 'memory_conflict' | 'stale_memory' | 'unsupported_claim' | 'memory_injection_suspect';
174
+ severity: 'low' | 'medium' | 'high' | 'warn';
175
175
  summary: string;
176
176
  evidence_refs: string[];
177
177
  affected_memory_ids: string[];
package/package.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "@jungjaehoon/mama-core",
3
- "version": "2.2.0",
3
+ "version": "2.2.2",
4
4
  "description": "MAMA Core - Shared modules for Memory-Augmented MCP Assistant",
5
5
  "main": "dist/index.js",
6
6
  "types": "dist/index.d.ts",