@jungjaehoon/mama-os 0.68.1 → 0.69.0

package/dist/runtime/principal-access.js

@@ -0,0 +1,61 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.resolvePrincipalAccess = resolvePrincipalAccess;
+const mama_core_1 = require("@jungjaehoon/mama-core");
+const action_surface_js_1 = require("./action-surface.js");
+/** Registry-backed authority for future member turns; admission is wired separately. */
+function resolvePrincipalAccess(principalId, options) {
+    const { adapter, ownerAccess, agentId } = options;
+    const principal = adapter
+        .prepare('SELECT kind, status FROM principals WHERE principal_id = ?')
+        .get(principalId);
+    if (!principal)
+        throw new Error(`unknown principal: ${principalId}`);
+    if (principal.status !== 'active')
+        throw new Error(`principal ${principalId} is ${principal.status}`);
+    if (principal.kind === 'owner') {
+        if (principalId !== ownerAccess.principalId)
+            throw new Error(`principal ${principalId} is not the configured owner`);
+        return ownerAccess;
+    }
+    const identities = adapter
+        .prepare(`SELECT external_id FROM external_identities
+      WHERE principal_id = ? AND connector = 'telegram' AND namespace = 'private'`)
+        .all(principalId);
+    if (identities.length !== 1)
+        throw new Error(`member ${principalId} requires exactly one Telegram private identity`);
+    const dmId = identities[0].external_id;
+    // Every owner work item is bound to all of the owner's scopes, so a grant on one opens them all.
+    const ownerDefaults = new Set(ownerAccess.scopes.map((scope) => `${scope.kind}\0${scope.id}`));
+    const readScopes = [];
+    const connectors = new Set(['chat']);
+    // chat-sources stores gateway channelKey under the transport prefix.
+    const channels = { chat: [`telegram:${dmId}`] };
+    for (const { scope } of (0, mama_core_1.createPrincipalRepository)(adapter).listActiveGrants(principalId)) {
+        if (scope.kind === 'memory') {
+            if (ownerDefaults.has(`${scope.scopeKind}\0${scope.scopeId}`))
+                throw new Error(`member memory grant overlaps owner default scope: ${scope.scopeKind}:${scope.scopeId}`);
+            readScopes.push({ kind: scope.scopeKind, id: scope.scopeId });
+        }
+        else {
+            connectors.add(scope.connector);
+            const granted = channels[scope.connector] ?? [];
+            if (!granted.includes(scope.channelId))
+                granted.push(scope.channelId);
+            channels[scope.connector] = granted;
+        }
+    }
+    const personalScope = { kind: 'user', id: principalId };
+    return {
+        principalId,
+        agentId,
+        scopes: [personalScope],
+        defaultScopes: [personalScope],
+        readScopes,
+        connectors: [...connectors],
+        channels,
+        destinations: [{ kind: 'telegram', id: dmId }],
+        actions: action_surface_js_1.MEMBER_ACTIONS,
+    };
+}
+//# sourceMappingURL=principal-access.js.map

package/dist/runtime/principal-access.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"principal-access.js","sourceRoot":"","sources":["../../src/runtime/principal-access.ts"],"names":[],"mappings":";;AAaA,wDA0DC;AAvED,sDAAsF;AAItF,2DAAqD;AAQrD,wFAAwF;AACxF,SAAgB,sBAAsB,CACpC,WAAmB,EACnB,OAA+B;IAE/B,MAAM,EAAE,OAAO,EAAE,WAAW,EAAE,OAAO,EAAE,GAAG,OAAO,CAAC;IAClD,MAAM,SAAS,GAAG,OAAO;SACtB,OAAO,CAAC,4DAA4D,CAAC;SACrE,GAAG,CAAC,WAAW,CAAsD,CAAC;IACzE,IAAI,CAAC,SAAS;QAAE,MAAM,IAAI,KAAK,CAAC,sBAAsB,WAAW,EAAE,CAAC,CAAC;IACrE,IAAI,SAAS,CAAC,MAAM,KAAK,QAAQ;QAC/B,MAAM,IAAI,KAAK,CAAC,aAAa,WAAW,OAAO,SAAS,CAAC,MAAM,EAAE,CAAC,CAAC;IACrE,IAAI,SAAS,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;QAC/B,IAAI,WAAW,KAAK,WAAW,CAAC,WAAW;YACzC,MAAM,IAAI,KAAK,CAAC,aAAa,WAAW,8BAA8B,CAAC,CAAC;QAC1E,OAAO,WAAW,CAAC;IACrB,CAAC;IAED,MAAM,UAAU,GAAG,OAAO;SACvB,OAAO,CACN;kFAC4E,CAC7E;SACA,GAAG,CAAC,WAAW,CAAmC,CAAC;IACtD,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC;QACzB,MAAM,IAAI,KAAK,CAAC,UAAU,WAAW,iDAAiD,CAAC,CAAC;IAC1F,MAAM,IAAI,GAAG,UAAU,CAAC,CAAC,CAAE,CAAC,WAAW,CAAC;IACxC,iGAAiG;IACjG,MAAM,aAAa,GAAG,IAAI,GAAG,CAAC,WAAW,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,GAAG,KAAK,CAAC,IAAI,KAAK,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;IAC/F,MAAM,UAAU,GAAqB,EAAE,CAAC;IACxC,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC;IACrC,qEAAqE;IACrE,MAAM,QAAQ,GAA6B,EAAE,IAAI,EAAE,CAAC,YAAY,IAAI,EAAE,CAAC,EAAE,CAAC;IAC1E,KAAK,MAAM,EAAE,KAAK,EAAE,IAAI,IAAA,qCAAyB,EAAC,OAAO,CAAC,CAAC,gBAAgB,CAAC,WAAW,CAAC,EAAE,CAAC;QACzF,IAAI,KAAK,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YAC5B,IAAI,aAAa,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC,SAAS,KAAK,KAAK,CAAC,OAAO,EAAE,CAAC;gBAC3D,MAAM,IAAI,KAAK,CACb,qDAAqD,KAAK,CAAC,SAAS,IAAI,KAAK,CAAC,OAAO,EAAE,CACxF,CAAC;YACJ,UAAU,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,SAAS,EAAE,EAAE,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;QAChE,CAAC;aAAM,CAAC;YACN,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;YAChC,MAAM,OAAO,GAAG,QAAQ,CAAC,KAAK,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC;YAChD,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,SAAS,CAAC;gBAAE,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;YACtE,QAAQ,CAAC,KAAK,CAAC,SAAS,CAAC,GAAG,OAAO,CAAC;QACtC,CAAC;IACH,CAAC;IACD,MAAM,aAAa,GAAG,EAAE,IAAI,EAAE,MAAe,EAAE,EAAE,EAAE,WAAW,EAAE,CAAC;IACjE,OAAO;QACL,WAAW;QACX,OAAO;QACP,MAAM,EAAE,CAAC,aAAa,CAAC;QACvB,aAAa,EAAE,CAAC,aAAa,CAAC;QAC9B,UAAU;QACV,UAAU,EAAE,CAAC,GAAG,UAAU,CAAC;QAC3B,QAAQ;QACR,YAAY,EAAE,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;QAC9C,OAAO,EAAE,kCAAc;KACxB,CAAC;AACJ,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@jungjaehoon/mama-os",
-  "version": "0.68.1",
+  "version": "0.69.0",
   "description": "MAMA OS - The local work agent behind your messenger.",
   "main": "./dist/index.js",
   "types": "./dist/index.d.ts",
@@ -52,7 +52,7 @@
     "@slack/web-api": "^7.13.0",
     "@slack/socket-mode": "^2.0.5",
     "discord.js": "^14.25.1",
-    "@jungjaehoon/mama-core": "^7.1.0",
+    "@jungjaehoon/mama-core": "^8.0.0",
     "better-sqlite3": "^12.8.0",
     "express": "^5.2.1",
     "grammy": "^1.42.0",

package/public/viewer/js/modules/memory-timeline.js

@@ -170,7 +170,7 @@ export class MemoryTimelineModule {
             return;
         }
         list.innerHTML = data.days
-            .map((day) => `<section class="mt-day"><h3 class="mt-day-head"><span>${escapeHtml(dayLabel(day.day))}</span><span class="mt-count">${day.total}</span></h3>${day.groups
+            .map((day) => `<section class="mt-day"><h3 class="mt-day-head"><span>${escapeHtml(day.day === null ? 'Erased records' : dayLabel(day.day))}</span><span class="mt-count">${day.total}</span></h3>${day.groups
             .map((group) => this.renderGroup(group))
             .join('')}</section>`)
             .join('');

package/public/viewer/src/modules/memory-timeline.ts

@@ -196,7 +196,7 @@ export class MemoryTimelineModule {
       .map(
         (day) =>
           `<section class="mt-day"><h3 class="mt-day-head"><span>${escapeHtml(
-            dayLabel(day.day)
+            day.day === null ? 'Erased records' : dayLabel(day.day)
           )}</span><span class="mt-count">${day.total}</span></h3>${day.groups
             .map((group) => this.renderGroup(group))
             .join('')}</section>`

package/public/viewer/src/utils/api.ts

@@ -92,7 +92,7 @@ export interface MemoryTimelineResponse {
   timeZone: string;
   total: number;
   counts: Record<string, number>;
-  days: Array<{ day: string; total: number; groups: TimelineGroup[] }>;
+  days: Array<{ day: string | null; total: number; groups: TimelineGroup[] }>;
 }
 
 export interface CheckpointSummary {