@prmichaelsen/remember-mcp 3.14.0 → 3.14.1

package/CHANGELOG.md

@@ -5,6 +5,28 @@ All notable changes to this project will be documented in this file.
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
 and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [3.14.0] - 2026-02-28
+
+### Changed
+
+**remember-core Migration (M17)**
+
+- Migrate 18 tool handlers to `@prmichaelsen/remember-core` service layer — tools are now thin adapters delegating to core services
+- Replace local services (ConfirmationTokenService, PreferencesDatabaseService, SpaceConfigService) with remember-core equivalents
+- Replace local utilities (dot-notation, composite-ids, tracking-arrays, content-types) with remember-core exports
+
+### Removed
+
+- `src/services/confirmation-token.service.ts` — now provided by remember-core
+- `src/services/preferences-database.service.ts` — now provided by remember-core
+- `src/services/space-config.service.ts` — now provided by remember-core
+- `src/constants/content-types.ts` — now provided by remember-core
+- `src/collections/` directory (dot-notation, composite-ids, tracking-arrays) — now provided by remember-core
+
+### Fixed
+
+- Add `uuid` as direct dependency to resolve esbuild bundling error from remember-core transitive dependency
+
 ## [3.13.0] - 2026-02-28
 
 ### Changed

package/dist/server-factory.js

@@ -117,7 +117,7 @@ var require_main = __commonJS({
     var packageJson = require_package();
     var version = packageJson.version;
     var LINE = /(?:^|^)\s*(?:export\s+)?([\w.-]+)(?:\s*=\s*?|:\s+?)(\s*'(?:\\'|[^'])*'|\s*"(?:\\"|[^"])*"|\s*`(?:\\`|[^`])*`|[^#\r\n]+)?\s*(?:#.*)?(?:$|$)/mg;
-    function parse(src) {
+    function parse2(src) {
       const obj = {};
       let lines = src.toString();
       lines = lines.replace(/\r\n?/mg, "\n");
@@ -383,7 +383,7 @@ var require_main = __commonJS({
       _parseVault,
       config: config2,
       decrypt,
-      parse,
+      parse: parse2,
       populate
     };
     module.exports.configDotenv = DotenvModule.configDotenv;
@@ -1585,7 +1585,92 @@ var DebugLevel2;
   DebugLevel3[DebugLevel3["TRACE"] = 5] = "TRACE";
 })(DebugLevel2 || (DebugLevel2 = {}));
 
+// node_modules/uuid/dist-node/regex.js
+var regex_default = /^(?:[0-9a-f]{8}-[0-9a-f]{4}-[1-8][0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$/i;
+
+// node_modules/uuid/dist-node/validate.js
+function validate(uuid) {
+  return typeof uuid === "string" && regex_default.test(uuid);
+}
+var validate_default = validate;
+
+// node_modules/uuid/dist-node/parse.js
+function parse(uuid) {
+  if (!validate_default(uuid)) {
+    throw TypeError("Invalid UUID");
+  }
+  let v;
+  return Uint8Array.of((v = parseInt(uuid.slice(0, 8), 16)) >>> 24, v >>> 16 & 255, v >>> 8 & 255, v & 255, (v = parseInt(uuid.slice(9, 13), 16)) >>> 8, v & 255, (v = parseInt(uuid.slice(14, 18), 16)) >>> 8, v & 255, (v = parseInt(uuid.slice(19, 23), 16)) >>> 8, v & 255, (v = parseInt(uuid.slice(24, 36), 16)) / 1099511627776 & 255, v / 4294967296 & 255, v >>> 24 & 255, v >>> 16 & 255, v >>> 8 & 255, v & 255);
+}
+var parse_default = parse;
+
+// node_modules/uuid/dist-node/stringify.js
+var byteToHex = [];
+for (let i = 0; i < 256; ++i) {
+  byteToHex.push((i + 256).toString(16).slice(1));
+}
+function unsafeStringify(arr, offset = 0) {
+  return (byteToHex[arr[offset + 0]] + byteToHex[arr[offset + 1]] + byteToHex[arr[offset + 2]] + byteToHex[arr[offset + 3]] + "-" + byteToHex[arr[offset + 4]] + byteToHex[arr[offset + 5]] + "-" + byteToHex[arr[offset + 6]] + byteToHex[arr[offset + 7]] + "-" + byteToHex[arr[offset + 8]] + byteToHex[arr[offset + 9]] + "-" + byteToHex[arr[offset + 10]] + byteToHex[arr[offset + 11]] + byteToHex[arr[offset + 12]] + byteToHex[arr[offset + 13]] + byteToHex[arr[offset + 14]] + byteToHex[arr[offset + 15]]).toLowerCase();
+}
+
+// node_modules/uuid/dist-node/v35.js
+function stringToBytes(str) {
+  str = unescape(encodeURIComponent(str));
+  const bytes = new Uint8Array(str.length);
+  for (let i = 0; i < str.length; ++i) {
+    bytes[i] = str.charCodeAt(i);
+  }
+  return bytes;
+}
+var DNS = "6ba7b810-9dad-11d1-80b4-00c04fd430c8";
+var URL2 = "6ba7b811-9dad-11d1-80b4-00c04fd430c8";
+function v35(version, hash, value, namespace, buf, offset) {
+  const valueBytes = typeof value === "string" ? stringToBytes(value) : value;
+  const namespaceBytes = typeof namespace === "string" ? parse_default(namespace) : namespace;
+  if (typeof namespace === "string") {
+    namespace = parse_default(namespace);
+  }
+  if (namespace?.length !== 16) {
+    throw TypeError("Namespace must be array-like (16 iterable integer values, 0-255)");
+  }
+  let bytes = new Uint8Array(16 + valueBytes.length);
+  bytes.set(namespaceBytes);
+  bytes.set(valueBytes, namespaceBytes.length);
+  bytes = hash(bytes);
+  bytes[6] = bytes[6] & 15 | version;
+  bytes[8] = bytes[8] & 63 | 128;
+  if (buf) {
+    offset = offset || 0;
+    for (let i = 0; i < 16; ++i) {
+      buf[offset + i] = bytes[i];
+    }
+    return buf;
+  }
+  return unsafeStringify(bytes);
+}
+
+// node_modules/uuid/dist-node/sha1.js
+import { createHash } from "node:crypto";
+function sha1(bytes) {
+  if (Array.isArray(bytes)) {
+    bytes = Buffer.from(bytes);
+  } else if (typeof bytes === "string") {
+    bytes = Buffer.from(bytes, "utf8");
+  }
+  return createHash("sha1").update(bytes).digest();
+}
+var sha1_default = sha1;
+
+// node_modules/uuid/dist-node/v5.js
+function v5(value, namespace, buf, offset) {
+  return v35(80, sha1_default, value, namespace, buf, offset);
+}
+v5.DNS = DNS;
+v5.URL = URL2;
+var v5_default = v5;
+
 // node_modules/@prmichaelsen/remember-core/dist/collections/composite-ids.js
+var WEAVIATE_UUID_NAMESPACE = v5_default.DNS;
 var InvalidCompositeIdError = class extends Error {
   constructor(message) {
     super(message);
@@ -1607,6 +1692,28 @@ function generateCompositeId(userId, memoryId) {
   }
   return `${userId}.${memoryId}`;
 }
+function parseCompositeId(compositeId) {
+  const parts = compositeId.split(".");
+  if (parts.length !== 2) {
+    throw new InvalidCompositeIdError(`Invalid composite ID format: ${compositeId}. Expected format: {userId}.{memoryId}`);
+  }
+  const [userId, memoryId] = parts;
+  if (!userId.trim()) {
+    throw new InvalidCompositeIdError(`Invalid composite ID: ${compositeId}. User ID is empty`);
+  }
+  if (!memoryId.trim()) {
+    throw new InvalidCompositeIdError(`Invalid composite ID: ${compositeId}. Memory ID is empty`);
+  }
+  return { userId, memoryId };
+}
+function validateCompositeId(id) {
+  parseCompositeId(id);
+  return true;
+}
+function compositeIdToUuid(compositeId) {
+  validateCompositeId(compositeId);
+  return v5_default(compositeId, WEAVIATE_UUID_NAMESPACE);
+}
 
 // node_modules/@prmichaelsen/remember-core/dist/collections/dot-notation.js
 var CollectionType;
@@ -2134,6 +2241,11 @@ async function fetchMemoryWithAllProperties(collection, memoryId) {
   }
 }
 
+// node_modules/@prmichaelsen/remember-core/dist/services/trust-enforcement.service.js
+function buildTrustFilter(collection, accessorTrustLevel) {
+  return collection.filter.byProperty("trust_score").lessThanOrEqual(accessorTrustLevel);
+}
+
 // node_modules/@prmichaelsen/remember-core/dist/services/memory.service.js
 var MemoryService = class {
   collection;
@@ -2191,7 +2303,14 @@ var MemoryService = class {
     const offset = input.offset ?? 0;
     const deletedFilter = buildDeletedFilter(this.collection, input.deleted_filter || "exclude");
     const searchFilters = includeRelationships ? buildCombinedSearchFilters(this.collection, input.filters) : buildMemoryOnlyFilters(this.collection, input.filters);
-    const combinedFilters = combineFiltersWithAnd([deletedFilter, searchFilters].filter((f) => f !== null));
+    const ghostFilters = [];
+    if (input.ghost_context) {
+      ghostFilters.push(buildTrustFilter(this.collection, input.ghost_context.accessor_trust_level));
+    }
+    if (!input.ghost_context?.include_ghost_content) {
+      ghostFilters.push(this.collection.filter.byProperty("content_type").notEqual("ghost"));
+    }
+    const combinedFilters = combineFiltersWithAnd([deletedFilter, searchFilters, ...ghostFilters].filter((f) => f !== null));
     const searchOptions = { alpha, limit: limit + offset };
     if (combinedFilters)
       searchOptions.filters = combinedFilters;
@@ -2223,6 +2342,14 @@ var MemoryService = class {
     const limit = input.limit ?? 10;
     const minSimilarity = input.min_similarity ?? 0.7;
     const deletedFilter = buildDeletedFilter(this.collection, input.deleted_filter || "exclude");
+    const ghostFilters = [];
+    if (input.ghost_context) {
+      ghostFilters.push(buildTrustFilter(this.collection, input.ghost_context.accessor_trust_level));
+    }
+    if (!input.ghost_context?.include_ghost_content) {
+      ghostFilters.push(this.collection.filter.byProperty("content_type").notEqual("ghost"));
+    }
+    const combinedFilter = combineFiltersWithAnd([deletedFilter, ...ghostFilters].filter((f) => f !== null));
     let results;
     if (input.memory_id) {
       const memory = await this.collection.query.fetchObjectById(input.memory_id, {
@@ -2235,14 +2362,14 @@ var MemoryService = class {
       if (memory.properties.doc_type !== "memory")
         throw new Error("Can only find similar for memory documents");
       const opts = { limit: limit + 1, distance: 1 - minSimilarity, returnMetadata: ["distance"] };
-      if (deletedFilter)
-        opts.filters = deletedFilter;
+      if (combinedFilter)
+        opts.filters = combinedFilter;
       results = await this.collection.query.nearObject(input.memory_id, opts);
       results.objects = results.objects.filter((o) => o.uuid !== input.memory_id);
     } else {
       const opts = { limit, distance: 1 - minSimilarity, returnMetadata: ["distance"] };
-      if (deletedFilter)
-        opts.filters = deletedFilter;
+      if (combinedFilter)
+        opts.filters = combinedFilter;
       results = await this.collection.query.nearText(input.text, opts);
     }
     if (!input.include_relationships) {
@@ -2263,7 +2390,14 @@ var MemoryService = class {
     const minRelevance = input.min_relevance ?? 0.6;
     const deletedFilter = buildDeletedFilter(this.collection, input.deleted_filter || "exclude");
     const searchFilters = buildCombinedSearchFilters(this.collection, input.filters);
-    const combinedFilters = combineFiltersWithAnd([deletedFilter, searchFilters].filter((f) => f !== null));
+    const ghostFilters = [];
+    if (input.ghost_context) {
+      ghostFilters.push(buildTrustFilter(this.collection, input.ghost_context.accessor_trust_level));
+    }
+    if (!input.ghost_context?.include_ghost_content) {
+      ghostFilters.push(this.collection.filter.byProperty("content_type").notEqual("ghost"));
+    }
+    const combinedFilters = combineFiltersWithAnd([deletedFilter, searchFilters, ...ghostFilters].filter((f) => f !== null));
     const opts = { limit, distance: 1 - minRelevance, returnMetadata: ["distance"] };
     if (combinedFilters)
       opts.filters = combinedFilters;
@@ -3112,6 +3246,7 @@ var SpaceService = class {
     if (originalMemory.properties.user_id !== this.userId)
       throw new Error("Permission denied");
     const compositeId = generateCompositeId(this.userId, request.payload.memory_id);
+    const weaviateId = compositeIdToUuid(compositeId);
     const existingSpaceIds = Array.isArray(originalMemory.properties.space_ids) ? originalMemory.properties.space_ids : [];
     const existingGroupIds = Array.isArray(originalMemory.properties.group_ids) ? originalMemory.properties.group_ids : [];
     const originalTags = Array.isArray(originalMemory.properties.tags) ? originalMemory.properties.tags : [];
@@ -3124,7 +3259,7 @@ var SpaceService = class {
         const publicCollection = await ensurePublicCollection(this.weaviateClient);
         let existingSpaceMemory = null;
         try {
-          existingSpaceMemory = await fetchMemoryWithAllProperties(publicCollection, compositeId);
+          existingSpaceMemory = await fetchMemoryWithAllProperties(publicCollection, weaviateId);
         } catch {
         }
         const newSpaceIds = [.../* @__PURE__ */ new Set([...existingSpaceIds, ...spaces])];
@@ -3138,7 +3273,7 @@ var SpaceService = class {
         }
         const publishedMemory = {
           ...originalMemory.properties,
-          id: compositeId,
+          composite_id: compositeId,
           space_ids: newSpaceIds,
           group_ids: existingGroupIds,
           spaces,
@@ -3151,9 +3286,9 @@ var SpaceService = class {
         };
         delete publishedMemory._additional;
         if (existingSpaceMemory) {
-          await publicCollection.data.update({ id: compositeId, properties: publishedMemory });
+          await publicCollection.data.update({ id: weaviateId, properties: publishedMemory });
         } else {
-          await publicCollection.data.insert({ id: compositeId, properties: publishedMemory });
+          await publicCollection.data.insert({ id: weaviateId, properties: publishedMemory });
         }
         successfulPublications.push(`spaces: ${spaces.join(", ")}`);
       } catch (err2) {
@@ -3166,7 +3301,7 @@ var SpaceService = class {
         const groupCollection = this.weaviateClient.collections.get(groupCollectionName);
         let existingGroupMemory = null;
         try {
-          existingGroupMemory = await fetchMemoryWithAllProperties(groupCollection, compositeId);
+          existingGroupMemory = await fetchMemoryWithAllProperties(groupCollection, weaviateId);
         } catch {
         }
         const newGroupIds = [.../* @__PURE__ */ new Set([...existingGroupIds, groupId])];
@@ -3174,7 +3309,7 @@ var SpaceService = class {
         const groupModerationStatus = groupConfig.require_moderation ? "pending" : "approved";
         const groupMemory = {
           ...originalMemory.properties,
-          id: compositeId,
+          composite_id: compositeId,
           space_ids: existingSpaceIds,
           group_ids: newGroupIds,
           author_id: this.userId,
@@ -3186,9 +3321,9 @@ var SpaceService = class {
         };
         delete groupMemory._additional;
         if (existingGroupMemory) {
-          await groupCollection.data.update({ id: compositeId, properties: groupMemory });
+          await groupCollection.data.update({ id: weaviateId, properties: groupMemory });
         } else {
-          await groupCollection.data.insert({ id: compositeId, properties: groupMemory });
+          await groupCollection.data.insert({ id: weaviateId, properties: groupMemory });
         }
         successfulPublications.push(`group: ${groupId}`);
       } catch (err2) {
@@ -3236,17 +3371,18 @@ var SpaceService = class {
     const currentSpaceIds = Array.isArray(sourceMemory.properties.space_ids) ? sourceMemory.properties.space_ids : [];
     const currentGroupIds = Array.isArray(sourceMemory.properties.group_ids) ? sourceMemory.properties.group_ids : [];
     const compositeId = generateCompositeId(this.userId, request.payload.memory_id);
+    const weaviateId = compositeIdToUuid(compositeId);
     const successfulRetractions = [];
     const failedRetractions = [];
     if (spaces.length > 0) {
       try {
         const spacesCollectionName = getCollectionName(CollectionType.SPACES);
         const publicCollection = this.weaviateClient.collections.get(spacesCollectionName);
-        const publishedMemory = await fetchMemoryWithAllProperties(publicCollection, compositeId);
+        const publishedMemory = await fetchMemoryWithAllProperties(publicCollection, weaviateId);
         if (publishedMemory) {
           const newSpaceIds = currentSpaceIds.filter((id) => !spaces.includes(id));
           await publicCollection.data.update({
-            id: compositeId,
+            id: weaviateId,
             properties: { space_ids: newSpaceIds, retracted_at: (/* @__PURE__ */ new Date()).toISOString() }
           });
           successfulRetractions.push(`spaces: ${spaces.join(", ")}`);
@@ -3261,12 +3397,12 @@ var SpaceService = class {
       const groupCollectionName = getCollectionName(CollectionType.GROUPS, groupId);
       try {
         const groupCollection = this.weaviateClient.collections.get(groupCollectionName);
-        const groupMemory = await fetchMemoryWithAllProperties(groupCollection, compositeId);
+        const groupMemory = await fetchMemoryWithAllProperties(groupCollection, weaviateId);
         if (groupMemory) {
           const groupMemoryGroupIds = Array.isArray(groupMemory.properties.group_ids) ? groupMemory.properties.group_ids : [];
           const newGroupIds = groupMemoryGroupIds.filter((id) => id !== groupId);
           await groupCollection.data.update({
-            id: compositeId,
+            id: weaviateId,
             properties: { group_ids: newGroupIds, retracted_at: (/* @__PURE__ */ new Date()).toISOString() }
           });
           successfulRetractions.push(`group: ${groupId}`);
@@ -3317,11 +3453,12 @@ var SpaceService = class {
     const newContent = String(sourceMemory.properties.content ?? "");
     const revisedAt = (/* @__PURE__ */ new Date()).toISOString();
     const compositeId = generateCompositeId(this.userId, memory_id);
+    const weaviateId = compositeIdToUuid(compositeId);
     const results = [];
     const reviseInCollection = async (collectionName, locationLabel) => {
       try {
         const collection = this.weaviateClient.collections.get(collectionName);
-        const publishedMemory = await fetchMemoryWithAllProperties(collection, compositeId);
+        const publishedMemory = await fetchMemoryWithAllProperties(collection, weaviateId);
         if (!publishedMemory) {
           results.push({ location: locationLabel, status: "skipped", error: "Published copy not found" });
           return;
@@ -3333,7 +3470,7 @@ var SpaceService = class {
         }
         const currentRevisionCount = typeof publishedMemory.properties.revision_count === "number" ? publishedMemory.properties.revision_count : 0;
         await collection.data.update({
-          id: compositeId,
+          id: weaviateId,
           properties: {
             content: newContent,
             revised_at: revisedAt,

package/dist/server.js

@@ -118,7 +118,7 @@ var require_main = __commonJS({
     var packageJson = require_package();
     var version = packageJson.version;
     var LINE = /(?:^|^)\s*(?:export\s+)?([\w.-]+)(?:\s*=\s*?|:\s+?)(\s*'(?:\\'|[^'])*'|\s*"(?:\\"|[^"])*"|\s*`(?:\\`|[^`])*`|[^#\r\n]+)?\s*(?:#.*)?(?:$|$)/mg;
-    function parse(src) {
+    function parse2(src) {
       const obj = {};
       let lines = src.toString();
       lines = lines.replace(/\r\n?/mg, "\n");
@@ -384,7 +384,7 @@ var require_main = __commonJS({
       _parseVault,
       config: config3,
       decrypt,
-      parse,
+      parse: parse2,
       populate
     };
     module.exports.configDotenv = DotenvModule.configDotenv;
@@ -1269,7 +1269,92 @@ var DebugLevel2;
   DebugLevel3[DebugLevel3["TRACE"] = 5] = "TRACE";
 })(DebugLevel2 || (DebugLevel2 = {}));
 
+// node_modules/uuid/dist-node/regex.js
+var regex_default = /^(?:[0-9a-f]{8}-[0-9a-f]{4}-[1-8][0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$/i;
+
+// node_modules/uuid/dist-node/validate.js
+function validate(uuid) {
+  return typeof uuid === "string" && regex_default.test(uuid);
+}
+var validate_default = validate;
+
+// node_modules/uuid/dist-node/parse.js
+function parse(uuid) {
+  if (!validate_default(uuid)) {
+    throw TypeError("Invalid UUID");
+  }
+  let v;
+  return Uint8Array.of((v = parseInt(uuid.slice(0, 8), 16)) >>> 24, v >>> 16 & 255, v >>> 8 & 255, v & 255, (v = parseInt(uuid.slice(9, 13), 16)) >>> 8, v & 255, (v = parseInt(uuid.slice(14, 18), 16)) >>> 8, v & 255, (v = parseInt(uuid.slice(19, 23), 16)) >>> 8, v & 255, (v = parseInt(uuid.slice(24, 36), 16)) / 1099511627776 & 255, v / 4294967296 & 255, v >>> 24 & 255, v >>> 16 & 255, v >>> 8 & 255, v & 255);
+}
+var parse_default = parse;
+
+// node_modules/uuid/dist-node/stringify.js
+var byteToHex = [];
+for (let i = 0; i < 256; ++i) {
+  byteToHex.push((i + 256).toString(16).slice(1));
+}
+function unsafeStringify(arr, offset = 0) {
+  return (byteToHex[arr[offset + 0]] + byteToHex[arr[offset + 1]] + byteToHex[arr[offset + 2]] + byteToHex[arr[offset + 3]] + "-" + byteToHex[arr[offset + 4]] + byteToHex[arr[offset + 5]] + "-" + byteToHex[arr[offset + 6]] + byteToHex[arr[offset + 7]] + "-" + byteToHex[arr[offset + 8]] + byteToHex[arr[offset + 9]] + "-" + byteToHex[arr[offset + 10]] + byteToHex[arr[offset + 11]] + byteToHex[arr[offset + 12]] + byteToHex[arr[offset + 13]] + byteToHex[arr[offset + 14]] + byteToHex[arr[offset + 15]]).toLowerCase();
+}
+
+// node_modules/uuid/dist-node/v35.js
+function stringToBytes(str) {
+  str = unescape(encodeURIComponent(str));
+  const bytes = new Uint8Array(str.length);
+  for (let i = 0; i < str.length; ++i) {
+    bytes[i] = str.charCodeAt(i);
+  }
+  return bytes;
+}
+var DNS = "6ba7b810-9dad-11d1-80b4-00c04fd430c8";
+var URL2 = "6ba7b811-9dad-11d1-80b4-00c04fd430c8";
+function v35(version, hash, value, namespace, buf, offset) {
+  const valueBytes = typeof value === "string" ? stringToBytes(value) : value;
+  const namespaceBytes = typeof namespace === "string" ? parse_default(namespace) : namespace;
+  if (typeof namespace === "string") {
+    namespace = parse_default(namespace);
+  }
+  if (namespace?.length !== 16) {
+    throw TypeError("Namespace must be array-like (16 iterable integer values, 0-255)");
+  }
+  let bytes = new Uint8Array(16 + valueBytes.length);
+  bytes.set(namespaceBytes);
+  bytes.set(valueBytes, namespaceBytes.length);
+  bytes = hash(bytes);
+  bytes[6] = bytes[6] & 15 | version;
+  bytes[8] = bytes[8] & 63 | 128;
+  if (buf) {
+    offset = offset || 0;
+    for (let i = 0; i < 16; ++i) {
+      buf[offset + i] = bytes[i];
+    }
+    return buf;
+  }
+  return unsafeStringify(bytes);
+}
+
+// node_modules/uuid/dist-node/sha1.js
+import { createHash } from "node:crypto";
+function sha1(bytes) {
+  if (Array.isArray(bytes)) {
+    bytes = Buffer.from(bytes);
+  } else if (typeof bytes === "string") {
+    bytes = Buffer.from(bytes, "utf8");
+  }
+  return createHash("sha1").update(bytes).digest();
+}
+var sha1_default = sha1;
+
+// node_modules/uuid/dist-node/v5.js
+function v5(value, namespace, buf, offset) {
+  return v35(80, sha1_default, value, namespace, buf, offset);
+}
+v5.DNS = DNS;
+v5.URL = URL2;
+var v5_default = v5;
+
 // node_modules/@prmichaelsen/remember-core/dist/collections/composite-ids.js
+var WEAVIATE_UUID_NAMESPACE = v5_default.DNS;
 var InvalidCompositeIdError = class extends Error {
   constructor(message) {
     super(message);
@@ -1291,6 +1376,28 @@ function generateCompositeId(userId, memoryId) {
   }
   return `${userId}.${memoryId}`;
 }
+function parseCompositeId(compositeId) {
+  const parts = compositeId.split(".");
+  if (parts.length !== 2) {
+    throw new InvalidCompositeIdError(`Invalid composite ID format: ${compositeId}. Expected format: {userId}.{memoryId}`);
+  }
+  const [userId, memoryId] = parts;
+  if (!userId.trim()) {
+    throw new InvalidCompositeIdError(`Invalid composite ID: ${compositeId}. User ID is empty`);
+  }
+  if (!memoryId.trim()) {
+    throw new InvalidCompositeIdError(`Invalid composite ID: ${compositeId}. Memory ID is empty`);
+  }
+  return { userId, memoryId };
+}
+function validateCompositeId(id) {
+  parseCompositeId(id);
+  return true;
+}
+function compositeIdToUuid(compositeId) {
+  validateCompositeId(compositeId);
+  return v5_default(compositeId, WEAVIATE_UUID_NAMESPACE);
+}
 
 // node_modules/@prmichaelsen/remember-core/dist/collections/dot-notation.js
 var CollectionType;
@@ -1818,6 +1925,11 @@ async function fetchMemoryWithAllProperties(collection, memoryId) {
   }
 }
 
+// node_modules/@prmichaelsen/remember-core/dist/services/trust-enforcement.service.js
+function buildTrustFilter(collection, accessorTrustLevel) {
+  return collection.filter.byProperty("trust_score").lessThanOrEqual(accessorTrustLevel);
+}
+
 // node_modules/@prmichaelsen/remember-core/dist/services/memory.service.js
 var MemoryService = class {
   collection;
@@ -1875,7 +1987,14 @@ var MemoryService = class {
     const offset = input.offset ?? 0;
     const deletedFilter = buildDeletedFilter(this.collection, input.deleted_filter || "exclude");
     const searchFilters = includeRelationships ? buildCombinedSearchFilters(this.collection, input.filters) : buildMemoryOnlyFilters(this.collection, input.filters);
-    const combinedFilters = combineFiltersWithAnd([deletedFilter, searchFilters].filter((f) => f !== null));
+    const ghostFilters = [];
+    if (input.ghost_context) {
+      ghostFilters.push(buildTrustFilter(this.collection, input.ghost_context.accessor_trust_level));
+    }
+    if (!input.ghost_context?.include_ghost_content) {
+      ghostFilters.push(this.collection.filter.byProperty("content_type").notEqual("ghost"));
+    }
+    const combinedFilters = combineFiltersWithAnd([deletedFilter, searchFilters, ...ghostFilters].filter((f) => f !== null));
     const searchOptions = { alpha, limit: limit + offset };
     if (combinedFilters)
       searchOptions.filters = combinedFilters;
@@ -1907,6 +2026,14 @@ var MemoryService = class {
     const limit = input.limit ?? 10;
     const minSimilarity = input.min_similarity ?? 0.7;
     const deletedFilter = buildDeletedFilter(this.collection, input.deleted_filter || "exclude");
+    const ghostFilters = [];
+    if (input.ghost_context) {
+      ghostFilters.push(buildTrustFilter(this.collection, input.ghost_context.accessor_trust_level));
+    }
+    if (!input.ghost_context?.include_ghost_content) {
+      ghostFilters.push(this.collection.filter.byProperty("content_type").notEqual("ghost"));
+    }
+    const combinedFilter = combineFiltersWithAnd([deletedFilter, ...ghostFilters].filter((f) => f !== null));
     let results;
     if (input.memory_id) {
       const memory = await this.collection.query.fetchObjectById(input.memory_id, {
@@ -1919,14 +2046,14 @@ var MemoryService = class {
       if (memory.properties.doc_type !== "memory")
         throw new Error("Can only find similar for memory documents");
       const opts = { limit: limit + 1, distance: 1 - minSimilarity, returnMetadata: ["distance"] };
-      if (deletedFilter)
-        opts.filters = deletedFilter;
+      if (combinedFilter)
+        opts.filters = combinedFilter;
       results = await this.collection.query.nearObject(input.memory_id, opts);
       results.objects = results.objects.filter((o) => o.uuid !== input.memory_id);
     } else {
       const opts = { limit, distance: 1 - minSimilarity, returnMetadata: ["distance"] };
-      if (deletedFilter)
-        opts.filters = deletedFilter;
+      if (combinedFilter)
+        opts.filters = combinedFilter;
       results = await this.collection.query.nearText(input.text, opts);
     }
     if (!input.include_relationships) {
@@ -1947,7 +2074,14 @@ var MemoryService = class {
     const minRelevance = input.min_relevance ?? 0.6;
     const deletedFilter = buildDeletedFilter(this.collection, input.deleted_filter || "exclude");
     const searchFilters = buildCombinedSearchFilters(this.collection, input.filters);
-    const combinedFilters = combineFiltersWithAnd([deletedFilter, searchFilters].filter((f) => f !== null));
+    const ghostFilters = [];
+    if (input.ghost_context) {
+      ghostFilters.push(buildTrustFilter(this.collection, input.ghost_context.accessor_trust_level));
+    }
+    if (!input.ghost_context?.include_ghost_content) {
+      ghostFilters.push(this.collection.filter.byProperty("content_type").notEqual("ghost"));
+    }
+    const combinedFilters = combineFiltersWithAnd([deletedFilter, searchFilters, ...ghostFilters].filter((f) => f !== null));
     const opts = { limit, distance: 1 - minRelevance, returnMetadata: ["distance"] };
     if (combinedFilters)
       opts.filters = combinedFilters;
@@ -2796,6 +2930,7 @@ var SpaceService = class {
     if (originalMemory.properties.user_id !== this.userId)
       throw new Error("Permission denied");
     const compositeId = generateCompositeId(this.userId, request.payload.memory_id);
+    const weaviateId = compositeIdToUuid(compositeId);
     const existingSpaceIds = Array.isArray(originalMemory.properties.space_ids) ? originalMemory.properties.space_ids : [];
     const existingGroupIds = Array.isArray(originalMemory.properties.group_ids) ? originalMemory.properties.group_ids : [];
     const originalTags = Array.isArray(originalMemory.properties.tags) ? originalMemory.properties.tags : [];
@@ -2808,7 +2943,7 @@ var SpaceService = class {
         const publicCollection = await ensurePublicCollection(this.weaviateClient);
         let existingSpaceMemory = null;
         try {
-          existingSpaceMemory = await fetchMemoryWithAllProperties(publicCollection, compositeId);
+          existingSpaceMemory = await fetchMemoryWithAllProperties(publicCollection, weaviateId);
         } catch {
         }
         const newSpaceIds = [.../* @__PURE__ */ new Set([...existingSpaceIds, ...spaces])];
@@ -2822,7 +2957,7 @@ var SpaceService = class {
         }
         const publishedMemory = {
           ...originalMemory.properties,
-          id: compositeId,
+          composite_id: compositeId,
           space_ids: newSpaceIds,
           group_ids: existingGroupIds,
           spaces,
@@ -2835,9 +2970,9 @@ var SpaceService = class {
         };
         delete publishedMemory._additional;
         if (existingSpaceMemory) {
-          await publicCollection.data.update({ id: compositeId, properties: publishedMemory });
+          await publicCollection.data.update({ id: weaviateId, properties: publishedMemory });
         } else {
-          await publicCollection.data.insert({ id: compositeId, properties: publishedMemory });
+          await publicCollection.data.insert({ id: weaviateId, properties: publishedMemory });
         }
         successfulPublications.push(`spaces: ${spaces.join(", ")}`);
       } catch (err2) {
@@ -2850,7 +2985,7 @@ var SpaceService = class {
         const groupCollection = this.weaviateClient.collections.get(groupCollectionName);
         let existingGroupMemory = null;
         try {
-          existingGroupMemory = await fetchMemoryWithAllProperties(groupCollection, compositeId);
+          existingGroupMemory = await fetchMemoryWithAllProperties(groupCollection, weaviateId);
         } catch {
         }
         const newGroupIds = [.../* @__PURE__ */ new Set([...existingGroupIds, groupId])];
@@ -2858,7 +2993,7 @@ var SpaceService = class {
         const groupModerationStatus = groupConfig.require_moderation ? "pending" : "approved";
         const groupMemory = {
           ...originalMemory.properties,
-          id: compositeId,
+          composite_id: compositeId,
           space_ids: existingSpaceIds,
           group_ids: newGroupIds,
           author_id: this.userId,
@@ -2870,9 +3005,9 @@ var SpaceService = class {
         };
         delete groupMemory._additional;
         if (existingGroupMemory) {
-          await groupCollection.data.update({ id: compositeId, properties: groupMemory });
+          await groupCollection.data.update({ id: weaviateId, properties: groupMemory });
         } else {
-          await groupCollection.data.insert({ id: compositeId, properties: groupMemory });
+          await groupCollection.data.insert({ id: weaviateId, properties: groupMemory });
         }
         successfulPublications.push(`group: ${groupId}`);
       } catch (err2) {
@@ -2920,17 +3055,18 @@ var SpaceService = class {
     const currentSpaceIds = Array.isArray(sourceMemory.properties.space_ids) ? sourceMemory.properties.space_ids : [];
     const currentGroupIds = Array.isArray(sourceMemory.properties.group_ids) ? sourceMemory.properties.group_ids : [];
     const compositeId = generateCompositeId(this.userId, request.payload.memory_id);
+    const weaviateId = compositeIdToUuid(compositeId);
     const successfulRetractions = [];
     const failedRetractions = [];
     if (spaces.length > 0) {
       try {
         const spacesCollectionName = getCollectionName(CollectionType.SPACES);
         const publicCollection = this.weaviateClient.collections.get(spacesCollectionName);
-        const publishedMemory = await fetchMemoryWithAllProperties(publicCollection, compositeId);
+        const publishedMemory = await fetchMemoryWithAllProperties(publicCollection, weaviateId);
         if (publishedMemory) {
           const newSpaceIds = currentSpaceIds.filter((id) => !spaces.includes(id));
           await publicCollection.data.update({
-            id: compositeId,
+            id: weaviateId,
             properties: { space_ids: newSpaceIds, retracted_at: (/* @__PURE__ */ new Date()).toISOString() }
           });
           successfulRetractions.push(`spaces: ${spaces.join(", ")}`);
@@ -2945,12 +3081,12 @@ var SpaceService = class {
       const groupCollectionName = getCollectionName(CollectionType.GROUPS, groupId);
       try {
         const groupCollection = this.weaviateClient.collections.get(groupCollectionName);
-        const groupMemory = await fetchMemoryWithAllProperties(groupCollection, compositeId);
+        const groupMemory = await fetchMemoryWithAllProperties(groupCollection, weaviateId);
         if (groupMemory) {
           const groupMemoryGroupIds = Array.isArray(groupMemory.properties.group_ids) ? groupMemory.properties.group_ids : [];
           const newGroupIds = groupMemoryGroupIds.filter((id) => id !== groupId);
           await groupCollection.data.update({
-            id: compositeId,
+            id: weaviateId,
             properties: { group_ids: newGroupIds, retracted_at: (/* @__PURE__ */ new Date()).toISOString() }
           });
           successfulRetractions.push(`group: ${groupId}`);
@@ -3001,11 +3137,12 @@ var SpaceService = class {
     const newContent = String(sourceMemory.properties.content ?? "");
     const revisedAt = (/* @__PURE__ */ new Date()).toISOString();
     const compositeId = generateCompositeId(this.userId, memory_id);
+    const weaviateId = compositeIdToUuid(compositeId);
     const results = [];
     const reviseInCollection = async (collectionName, locationLabel) => {
       try {
         const collection = this.weaviateClient.collections.get(collectionName);
-        const publishedMemory = await fetchMemoryWithAllProperties(collection, compositeId);
+        const publishedMemory = await fetchMemoryWithAllProperties(collection, weaviateId);
         if (!publishedMemory) {
           results.push({ location: locationLabel, status: "skipped", error: "Published copy not found" });
           return;
@@ -3017,7 +3154,7 @@ var SpaceService = class {
         }
         const currentRevisionCount = typeof publishedMemory.properties.revision_count === "number" ? publishedMemory.properties.revision_count : 0;
         await collection.data.update({
-          id: compositeId,
+          id: weaviateId,
           properties: {
             content: newContent,
             revised_at: revisedAt,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@prmichaelsen/remember-mcp",
-  "version": "3.14.0",
+  "version": "3.14.1",
   "description": "Multi-tenant memory system MCP server with vector search and relationships",
   "main": "dist/server.js",
   "type": "module",
@@ -50,9 +50,10 @@
     "@modelcontextprotocol/sdk": "^1.0.4",
     "@prmichaelsen/firebase-admin-sdk-v8": "^2.2.0",
     "@prmichaelsen/mcp-auth": "^7.0.4",
-    "@prmichaelsen/remember-core": "^0.13.0",
+    "@prmichaelsen/remember-core": "^0.16.0",
     "@prmichaelsen/remember-mcp": "^2.7.3",
     "dotenv": "^16.4.5",
+    "uuid": "^13.0.0",
     "weaviate-client": "^3.2.0"
   },
   "devDependencies": {