@jungjaehoon/mama-os 0.53.0 → 0.57.0

package/dist/evidence/read.js

@@ -1,167 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.grantFromConnectorConfig = grantFromConnectorConfig;
-exports.liveBoundaryChannels = liveBoundaryChannels;
-exports.channelMemoryScopesFromGrant = channelMemoryScopesFromGrant;
-exports.mirrorReadScopes = mirrorReadScopes;
-exports.narrowGrantToEnvelope = narrowGrantToEnvelope;
-exports.writeEligiblePacketScopes = writeEligiblePacketScopes;
-const config_loader_js_1 = require("../connectors/config-loader.js");
-/**
- * Build a grant from the connector config, which already names every channel.
- *
- * A connector present with an EMPTY channel list is denied rather than granted everything -
- * that rule is stated and enforced in `isChannelGranted`, which is the only place it lives.
- */
-function grantFromConnectorConfig(config) {
-    const grant = {};
-    if (config === null || typeof config !== 'object') {
-        return grant;
-    }
-    for (const [connector, raw] of Object.entries(config)) {
-        if (raw === null || typeof raw !== 'object') {
-            continue;
-        }
-        const entry = raw;
-        // A disabled connector is not a grant. Reading its history because rows survive
-        // disabling would make "off" mean "off for new data only".
-        if (entry.enabled === false) {
-            continue;
-        }
-        if (entry.channels === null || typeof entry.channels !== 'object') {
-            continue;
-        }
-        grant[connector] = Object.keys(entry.channels);
-    }
-    return grant;
-}
-/**
- * The live grant, read fresh on every call.
- *
- * Not cached at boot: the owner adds and removes channels while the daemon runs, and a
- * grant captured once would keep reading a channel after it was removed - the failure
- * mode where turning something off does not turn it off.
- */
-function liveBoundaryChannels() {
-    const loaded = (0, config_loader_js_1.loadConnectorConfig)();
-    // A config that cannot be read is not a grant. Falling back to "everything" on a parse
-    // error is how a read path ends up wider precisely when the configuration is broken.
-    if (!loaded.ok)
-        return {};
-    return grantFromConnectorConfig(loaded.config);
-}
-/**
- * The channel grant, as MEMORY scopes.
- *
- * Memories extracted from a channel are stored under `channel:<connector>:<channelId>` -
- * the SAME key the grant declares.
- */
-function channelMemoryScopesFromGrant(grant, connectors) {
-    const scopes = [];
-    for (const connector of Object.keys(grant).sort()) {
-        if (!connectors.includes(connector))
-            continue;
-        for (const channelId of [...grant[connector]].sort()) {
-            scopes.push({ kind: 'channel', id: `${connector}:${channelId}` });
-        }
-    }
-    return scopes;
-}
-/**
- * The READ allowance a run's raw grant implies for memory: a run allowed to read a
- * channel's raw events may recall the memories extracted from it. This was the dominant
- * compile failure S2 named (memory_scope_out_of_scope, 2,700+ violations/morning):
- * envelopes carry identity scopes while retrieval asks for the real channels memories
- * are stored under.
- *
- * This is an ENFORCEMENT-LAYER allowance, never issued into the envelope. Envelope
- * channel scopes double as the raw-narrowing input (`narrowGrantToEnvelope`) and as
- * `mama_save`'s write binding - issuing the mirror widened a chat's raw reads back to
- * every sibling channel and bound every saved memory to all of them (PR #217 review,
- * blocking #2/#3). Read acceptance widens READS only, computed against the LIVE grant
- * at check time.
- *
- * A connector the envelope already narrows with an identity channel scope (a chat's own
- * channel, a temporal run's binding) keeps that narrowing: per-channel isolation is the
- * point of those scopes, and the mirror must not dissolve it.
- */
-function mirrorReadScopes(envelope, grant = liveBoundaryChannels()) {
-    const channelScopedConnectors = new Set();
-    for (const scope of envelope.scope.memory_scopes) {
-        if (scope.kind !== 'channel')
-            continue;
-        const separator = scope.id.indexOf(':');
-        if (separator <= 0)
-            continue;
-        channelScopedConnectors.add(scope.id.slice(0, separator));
-    }
-    return channelMemoryScopesFromGrant(grant, envelope.scope.raw_connectors.filter((connector) => !channelScopedConnectors.has(connector)));
-}
-/**
- * Narrow the configured grant to what THIS envelope may read.
- *
- * Two independent narrowings, and the second is the whole reason this exists rather than a
- * one-line filter:
- *
- * 1. Connector - the envelope's `raw_connectors` is the standing permission.
- *
- * 2. CHANNEL - when the envelope names channel scopes, only those channels are readable.
- *    Raw visibility used to be decided by the scope columns, so a per-message envelope
- *    scoped to one channel could not reach another. Deciding it by connector alone silently
- *    dropped that isolation: reactive envelopes for two channels of the same connector
- *    carry identical `raw_connectors`, so every such run could have compiled 500-character
- *    excerpts out of every other configured channel of that connector. The scope columns
- *    were the wrong mechanism - populated on 37% of rows in three namespaces - but the
- *    isolation they attempted is real, and it belongs here, where the envelope's own
- *    channel scopes state it exactly.
- *
- * An envelope with no channel scope is a run that was never bound to one (a report, a
- * scheduled worker), and it keeps the connector-level ceiling.
- *
- * CALLERS MUST PASS THE ENVELOPE'S OWN SCOPES, never a caller-requested subset. A request
- * may narrow what it asks for; it must not be able to widen its grant by asking for less.
- * Two surfaces got that wrong before it was written down here.
- */
-function narrowGrantToEnvelope(configured, visibility) {
-    // Channel scope ids are `<connector>:<channelId>` (deriveMemoryScopes). Split on the
-    // FIRST separator only: channel ids contain colons of their own.
-    const scopedChannels = new Map();
-    for (const scope of visibility.scopes) {
-        if (scope.kind !== 'channel')
-            continue;
-        const separator = scope.id.indexOf(':');
-        if (separator <= 0)
-            continue;
-        const connector = scope.id.slice(0, separator);
-        const channelId = scope.id.slice(separator + 1);
-        if (channelId.length === 0)
-            continue;
-        const existing = scopedChannels.get(connector) ?? new Set();
-        existing.add(channelId);
-        scopedChannels.set(connector, existing);
-    }
-    const narrowed = {};
-    for (const [connector, channels] of Object.entries(configured)) {
-        if (!visibility.connectors.includes(connector))
-            continue;
-        const bound = scopedChannels.get(connector);
-        // A channel scope naming no configured channel leaves the connector with an empty
-        // grant, which reads nothing. That is the correct answer: the run is bound to a channel
-        // this system was not told to look at.
-        narrowed[connector] = bound ? channels.filter((channel) => bound.has(channel)) : channels;
-    }
-    return narrowed;
-}
-/**
- * WRITE authority never widens past the envelope. A context packet's scopes may
- * carry the READ allowance (the compile boundary defaults to it), but a save
- * binds permanently - one memory_scope_bindings row per scope - so only the
- * packet scopes the envelope itself names are write-eligible (PR #217
- * re-review, blocking #4: finding #3 through the packet back door). Pre-mirror
- * packets satisfied packet ⊆ envelope, so this is the identity for them.
- */
-function writeEligiblePacketScopes(packetScopes, envelopeScopes) {
-    const envelopeKeys = new Set(envelopeScopes.map((scope) => `${scope.kind}:${scope.id}`));
-    return packetScopes.filter((scope) => envelopeKeys.has(`${scope.kind}:${scope.id}`));
-}
-//# sourceMappingURL=read.js.map

package/dist/evidence/read.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"read.js","sourceRoot":"","sources":["../../src/evidence/read.ts"],"names":[],"mappings":";;AAmCA,4DAqBC;AASD,oDAMC;AAQD,oEAYC;AAoBD,4CAoBC;AA2BD,sDAgCC;AAUD,8DAMC;AAnLD,qEAAqE;AAErE;;;;;GAKG;AACH,SAAgB,wBAAwB,CAAC,MAAe;IACtD,MAAM,KAAK,GAAiB,EAAE,CAAC;IAC/B,IAAI,MAAM,KAAK,IAAI,IAAI,OAAO,MAAM,KAAK,QAAQ,EAAE,CAAC;QAClD,OAAO,KAAK,CAAC;IACf,CAAC;IACD,KAAK,MAAM,CAAC,SAAS,EAAE,GAAG,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAiC,CAAC,EAAE,CAAC;QACjF,IAAI,GAAG,KAAK,IAAI,IAAI,OAAO,GAAG,KAAK,QAAQ,EAAE,CAAC;YAC5C,SAAS;QACX,CAAC;QACD,MAAM,KAAK,GAAG,GAAgD,CAAC;QAC/D,gFAAgF;QAChF,2DAA2D;QAC3D,IAAI,KAAK,CAAC,OAAO,KAAK,KAAK,EAAE,CAAC;YAC5B,SAAS;QACX,CAAC;QACD,IAAI,KAAK,CAAC,QAAQ,KAAK,IAAI,IAAI,OAAO,KAAK,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;YAClE,SAAS;QACX,CAAC;QACD,KAAK,CAAC,SAAS,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,QAAkB,CAAC,CAAC;IAC3D,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;;;GAMG;AACH,SAAgB,oBAAoB;IAClC,MAAM,MAAM,GAAG,IAAA,sCAAmB,GAAE,CAAC;IACrC,uFAAuF;IACvF,qFAAqF;IACrF,IAAI,CAAC,MAAM,CAAC,EAAE;QAAE,OAAO,EAAE,CAAC;IAC1B,OAAO,wBAAwB,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;AACjD,CAAC;AAED;;;;;GAKG;AACH,SAAgB,4BAA4B,CAC1C,KAAmB,EACnB,UAA6B;IAE7B,MAAM,MAAM,GAA2C,EAAE,CAAC;IAC1D,KAAK,MAAM,SAAS,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC;QAClD,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,SAAS,CAAC;YAAE,SAAS;QAC9C,KAAK,MAAM,SAAS,IAAI,CAAC,GAAG,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC;YACrD,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,EAAE,GAAG,SAAS,IAAI,SAAS,EAAE,EAAE,CAAC,CAAC;QACpE,CAAC;IACH,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,SAAgB,gBAAgB,CAC9B,QAKC,EACD,QAAsB,oBAAoB,EAAE;IAE5C,MAAM,uBAAuB,GAAG,IAAI,GAAG,EAAU,CAAC;IAClD,KAAK,MAAM,KAAK,IAAI,QAAQ,CAAC,KAAK,CAAC,aAAa,EAAE,CAAC;QACjD,IAAI,KAAK,CAAC,IAAI,KAAK,SAAS;YAAE,SAAS;QACvC,MAAM,SAAS,GAAG,KAAK,CAAC,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QACxC,IAAI,SAAS,IAAI,CAAC;YAAE,SAAS;QAC7B,uBAAuB,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC,CAAC;IAC5D,CAAC;IACD,OAAO,4BAA4B,CACjC,KAAK,EACL,QAAQ,CAAC,KAAK,CAAC,cAAc,CAAC,MAAM,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC,uBAAuB,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,CAC7F,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,SAAgB,qBAAqB,CACnC,UAAwB,EACxB,UAGC;IAED,qFAAqF;IACrF,iEAAiE;IACjE,MAAM,cAAc,GAAG,IAAI,GAAG,EAAuB,CAAC;IACtD,KAAK,MAAM,KAAK,IAAI,UAAU,CAAC,MAAM,EAAE,CAAC;QACtC,IAAI,KAAK,CAAC,IAAI,KAAK,SAAS;YAAE,SAAS;QACvC,MAAM,SAAS,GAAG,KAAK,CAAC,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QACxC,IAAI,SAAS,IAAI,CAAC;YAAE,SAAS;QAC7B,MAAM,SAAS,GAAG,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC;QAC/C,MAAM,SAAS,GAAG,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,SAAS,GAAG,CAAC,CAAC,CAAC;QAChD,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC;YAAE,SAAS;QACrC,MAAM,QAAQ,GAAG,cAAc,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,IAAI,GAAG,EAAU,CAAC;QACpE,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QACxB,cAAc,CAAC,GAAG,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;IAC1C,CAAC;IAED,MAAM,QAAQ,GAAiB,EAAE,CAAC;IAClC,KAAK,MAAM,CAAC,SAAS,EAAE,QAAQ,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,CAAC;QAC/D,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,QAAQ,CAAC,SAAS,CAAC;YAAE,SAAS;QACzD,MAAM,KAAK,GAAG,cAAc,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QAC5C,kFAAkF;QAClF,wFAAwF;QACxF,uCAAuC;QACvC,QAAQ,CAAC,SAAS,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC;IAC5F,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED;;;;;;;GAOG;AACH,SAAgB,yBAAyB,CACvC,YAA0B,EAC1B,cAA2D;IAE3D,MAAM,YAAY,GAAG,IAAI,GAAG,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,GAAG,KAAK,CAAC,IAAI,IAAI,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;IACzF,OAAO,YAAY,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,YAAY,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC,IAAI,IAAI,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;AACvF,CAAC"}

package/dist/gateways/attachment-utils.d.ts

@@ -1,28 +0,0 @@
-/**
- * Shared attachment utilities for downloading, compressing, and building content blocks.
- * Used by Discord and Slack gateways.
- */
-import type { MessageAttachment, ContentBlock } from './types.js';
-/**
- * Download a file from URL to local inbound media directory.
- *
- * @param url - File URL to download
- * @param filename - Original filename
- * @param authHeaders - Optional auth headers (e.g., Slack Bearer token)
- * @returns Local file path
- */
-export declare function downloadFile(url: string, filename: string, authHeaders?: Record<string, string>): Promise<string>;
-/**
- * Compress an image buffer using sharp (progressive JPEG downscaling).
- */
-export declare function compressImage(buffer: Buffer, maxSizeBytes: number): Promise<Buffer>;
-/**
- * Detect actual image media type from magic bytes.
- */
-export declare function detectImageType(buffer: Buffer): string | null;
-/**
- * Build content blocks from attachments.
- * Images are base64-encoded for Claude Vision; documents are referenced by path.
- */
-export declare function buildContentBlocks(attachments: MessageAttachment[]): Promise<ContentBlock[]>;
-//# sourceMappingURL=attachment-utils.d.ts.map

package/dist/gateways/attachment-utils.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"attachment-utils.d.ts","sourceRoot":"","sources":["../../src/gateways/attachment-utils.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAMH,OAAO,KAAK,EAAE,iBAAiB,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAsVlE;;;;;;;GAOG;AACH,wBAAsB,YAAY,CAChC,GAAG,EAAE,MAAM,EACX,QAAQ,EAAE,MAAM,EAChB,WAAW,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GACnC,OAAO,CAAC,MAAM,CAAC,CAsCjB;AAED;;GAEG;AACH,wBAAsB,aAAa,CAAC,MAAM,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CA4BzF;AAED;;GAEG;AACH,wBAAgB,eAAe,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CA+B7D;AAID;;;GAGG;AACH,wBAAsB,kBAAkB,CACtC,WAAW,EAAE,iBAAiB,EAAE,GAC/B,OAAO,CAAC,YAAY,EAAE,CAAC,CAkEzB"}