@kage-core/kage-graph-mcp 3.2.0 → 3.3.0

package/dist/okf.js

@@ -132,8 +132,10 @@ function okfVerifiedStatus(packet) {
         return "superseded";
     if (packet.status === "deprecated")
         return "deprecated";
-    const freshness = packet.freshness;
-    return freshness && freshness.last_verified_at ? "verified" : "unverified";
+    // "verified" is earned, not born: capture provenance (repo_local_agent_capture)
+    // is not a check of the claim. Only an actual recheck (evidence-backed
+    // reverification, validation pass) may carry the label.
+    return (0, kernel_js_1.packetVerificationLabel)(packet);
 }
 // ---- packet -> OKF concept document ----
 function packetToOkfConcept(packet) {
@@ -156,7 +158,8 @@ function packetToOkfConcept(packet) {
     fm.push(`x-kage-status: ${yamlScalar(packet.status)}`);
     fm.push(`x-kage-scope: ${yamlScalar(packet.scope)}`);
     fm.push(`x-kage-visibility: ${yamlScalar(packet.visibility)}`);
-    fm.push(`x-kage-confidence: ${packet.confidence}`);
+    // No x-kage-confidence: the field was a hardcoded 0.7 nobody computed or
+    // consumed — a number that means nothing must not ship as trust metadata.
     fm.push(`x-kage-verified: ${yamlScalar(okfVerifiedStatus(packet))}`);
     if (packet.paths?.length)
         fm.push(`x-kage-paths: ${yamlList(packet.paths)}`);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@kage-core/kage-graph-mcp",
-  "version": "3.2.0",
+  "version": "3.3.0",
   "description": "Agent memory on Google's Open Knowledge Format (OKF). Kage maintains your coding agents' OKF memory bundle in git and verifies every concept against your code, deterministically. The verification and freshness layer OKF leaves out. MCP server, no account, no API key.",
   "main": "dist/index.js",
   "files": [