@prmichaelsen/remember-mcp 3.14.0 → 3.14.2

package/CHANGELOG.md

@@ -5,6 +5,28 @@ All notable changes to this project will be documented in this file.
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
 and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [3.14.0] - 2026-02-28
+
+### Changed
+
+**remember-core Migration (M17)**
+
+- Migrate 18 tool handlers to `@prmichaelsen/remember-core` service layer — tools are now thin adapters delegating to core services
+- Replace local services (ConfirmationTokenService, PreferencesDatabaseService, SpaceConfigService) with remember-core equivalents
+- Replace local utilities (dot-notation, composite-ids, tracking-arrays, content-types) with remember-core exports
+
+### Removed
+
+- `src/services/confirmation-token.service.ts` — now provided by remember-core
+- `src/services/preferences-database.service.ts` — now provided by remember-core
+- `src/services/space-config.service.ts` — now provided by remember-core
+- `src/constants/content-types.ts` — now provided by remember-core
+- `src/collections/` directory (dot-notation, composite-ids, tracking-arrays) — now provided by remember-core
+
+### Fixed
+
+- Add `uuid` as direct dependency to resolve esbuild bundling error from remember-core transitive dependency
+
 ## [3.13.0] - 2026-02-28
 
 ### Changed

package/dist/server-factory.js

@@ -117,7 +117,7 @@ var require_main = __commonJS({
     var packageJson = require_package();
     var version = packageJson.version;
     var LINE = /(?:^|^)\s*(?:export\s+)?([\w.-]+)(?:\s*=\s*?|:\s+?)(\s*'(?:\\'|[^'])*'|\s*"(?:\\"|[^"])*"|\s*`(?:\\`|[^`])*`|[^#\r\n]+)?\s*(?:#.*)?(?:$|$)/mg;
-    function parse(src) {
+    function parse2(src) {
       const obj = {};
       let lines = src.toString();
       lines = lines.replace(/\r\n?/mg, "\n");
@@ -383,7 +383,7 @@ var require_main = __commonJS({
       _parseVault,
       config: config2,
       decrypt,
-      parse,
+      parse: parse2,
       populate
     };
     module.exports.configDotenv = DotenvModule.configDotenv;
@@ -1585,7 +1585,92 @@ var DebugLevel2;
   DebugLevel3[DebugLevel3["TRACE"] = 5] = "TRACE";
 })(DebugLevel2 || (DebugLevel2 = {}));
 
+// node_modules/uuid/dist-node/regex.js
+var regex_default = /^(?:[0-9a-f]{8}-[0-9a-f]{4}-[1-8][0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$/i;
+
+// node_modules/uuid/dist-node/validate.js
+function validate(uuid) {
+  return typeof uuid === "string" && regex_default.test(uuid);
+}
+var validate_default = validate;
+
+// node_modules/uuid/dist-node/parse.js
+function parse(uuid) {
+  if (!validate_default(uuid)) {
+    throw TypeError("Invalid UUID");
+  }
+  let v;
+  return Uint8Array.of((v = parseInt(uuid.slice(0, 8), 16)) >>> 24, v >>> 16 & 255, v >>> 8 & 255, v & 255, (v = parseInt(uuid.slice(9, 13), 16)) >>> 8, v & 255, (v = parseInt(uuid.slice(14, 18), 16)) >>> 8, v & 255, (v = parseInt(uuid.slice(19, 23), 16)) >>> 8, v & 255, (v = parseInt(uuid.slice(24, 36), 16)) / 1099511627776 & 255, v / 4294967296 & 255, v >>> 24 & 255, v >>> 16 & 255, v >>> 8 & 255, v & 255);
+}
+var parse_default = parse;
+
+// node_modules/uuid/dist-node/stringify.js
+var byteToHex = [];
+for (let i = 0; i < 256; ++i) {
+  byteToHex.push((i + 256).toString(16).slice(1));
+}
+function unsafeStringify(arr, offset = 0) {
+  return (byteToHex[arr[offset + 0]] + byteToHex[arr[offset + 1]] + byteToHex[arr[offset + 2]] + byteToHex[arr[offset + 3]] + "-" + byteToHex[arr[offset + 4]] + byteToHex[arr[offset + 5]] + "-" + byteToHex[arr[offset + 6]] + byteToHex[arr[offset + 7]] + "-" + byteToHex[arr[offset + 8]] + byteToHex[arr[offset + 9]] + "-" + byteToHex[arr[offset + 10]] + byteToHex[arr[offset + 11]] + byteToHex[arr[offset + 12]] + byteToHex[arr[offset + 13]] + byteToHex[arr[offset + 14]] + byteToHex[arr[offset + 15]]).toLowerCase();
+}
+
+// node_modules/uuid/dist-node/v35.js
+function stringToBytes(str) {
+  str = unescape(encodeURIComponent(str));
+  const bytes = new Uint8Array(str.length);
+  for (let i = 0; i < str.length; ++i) {
+    bytes[i] = str.charCodeAt(i);
+  }
+  return bytes;
+}
+var DNS = "6ba7b810-9dad-11d1-80b4-00c04fd430c8";
+var URL2 = "6ba7b811-9dad-11d1-80b4-00c04fd430c8";
+function v35(version, hash, value, namespace, buf, offset) {
+  const valueBytes = typeof value === "string" ? stringToBytes(value) : value;
+  const namespaceBytes = typeof namespace === "string" ? parse_default(namespace) : namespace;
+  if (typeof namespace === "string") {
+    namespace = parse_default(namespace);
+  }
+  if (namespace?.length !== 16) {
+    throw TypeError("Namespace must be array-like (16 iterable integer values, 0-255)");
+  }
+  let bytes = new Uint8Array(16 + valueBytes.length);
+  bytes.set(namespaceBytes);
+  bytes.set(valueBytes, namespaceBytes.length);
+  bytes = hash(bytes);
+  bytes[6] = bytes[6] & 15 | version;
+  bytes[8] = bytes[8] & 63 | 128;
+  if (buf) {
+    offset = offset || 0;
+    for (let i = 0; i < 16; ++i) {
+      buf[offset + i] = bytes[i];
+    }
+    return buf;
+  }
+  return unsafeStringify(bytes);
+}
+
+// node_modules/uuid/dist-node/sha1.js
+import { createHash } from "node:crypto";
+function sha1(bytes) {
+  if (Array.isArray(bytes)) {
+    bytes = Buffer.from(bytes);
+  } else if (typeof bytes === "string") {
+    bytes = Buffer.from(bytes, "utf8");
+  }
+  return createHash("sha1").update(bytes).digest();
+}
+var sha1_default = sha1;
+
+// node_modules/uuid/dist-node/v5.js
+function v5(value, namespace, buf, offset) {
+  return v35(80, sha1_default, value, namespace, buf, offset);
+}
+v5.DNS = DNS;
+v5.URL = URL2;
+var v5_default = v5;
+
 // node_modules/@prmichaelsen/remember-core/dist/collections/composite-ids.js
+var WEAVIATE_UUID_NAMESPACE = v5_default.DNS;
 var InvalidCompositeIdError = class extends Error {
   constructor(message) {
     super(message);
@@ -1607,6 +1692,28 @@ function generateCompositeId(userId, memoryId) {
   }
   return `${userId}.${memoryId}`;
 }
+function parseCompositeId(compositeId) {
+  const parts = compositeId.split(".");
+  if (parts.length !== 2) {
+    throw new InvalidCompositeIdError(`Invalid composite ID format: ${compositeId}. Expected format: {userId}.{memoryId}`);
+  }
+  const [userId, memoryId] = parts;
+  if (!userId.trim()) {
+    throw new InvalidCompositeIdError(`Invalid composite ID: ${compositeId}. User ID is empty`);
+  }
+  if (!memoryId.trim()) {
+    throw new InvalidCompositeIdError(`Invalid composite ID: ${compositeId}. Memory ID is empty`);
+  }
+  return { userId, memoryId };
+}
+function validateCompositeId(id) {
+  parseCompositeId(id);
+  return true;
+}
+function compositeIdToUuid(compositeId) {
+  validateCompositeId(compositeId);
+  return v5_default(compositeId, WEAVIATE_UUID_NAMESPACE);
+}
 
 // node_modules/@prmichaelsen/remember-core/dist/collections/dot-notation.js
 var CollectionType;
@@ -2134,6 +2241,11 @@ async function fetchMemoryWithAllProperties(collection, memoryId) {
   }
 }
 
+// node_modules/@prmichaelsen/remember-core/dist/services/trust-enforcement.service.js
+function buildTrustFilter(collection, accessorTrustLevel) {
+  return collection.filter.byProperty("trust_score").lessThanOrEqual(accessorTrustLevel);
+}
+
 // node_modules/@prmichaelsen/remember-core/dist/services/memory.service.js
 var MemoryService = class {
   collection;
@@ -2144,6 +2256,20 @@ var MemoryService = class {
     this.userId = userId;
     this.logger = logger2;
   }
+  /**
+   * Execute a search function, retrying without the deleted_at filter if
+   * the collection lacks indexNullState (created before soft-delete support).
+   */
+  async retryWithoutDeletedFilter(fn) {
+    try {
+      return await fn(true);
+    } catch (err2) {
+      if (err2?.message?.includes("Nullstate must be indexed")) {
+        return fn(false);
+      }
+      throw err2;
+    }
+  }
   // ── Create ──────────────────────────────────────────────────────────
   async create(input) {
     const now = (/* @__PURE__ */ new Date()).toISOString();
@@ -2189,13 +2315,29 @@ var MemoryService = class {
     const alpha = input.alpha ?? 0.7;
     const limit = input.limit ?? 10;
     const offset = input.offset ?? 0;
-    const deletedFilter = buildDeletedFilter(this.collection, input.deleted_filter || "exclude");
     const searchFilters = includeRelationships ? buildCombinedSearchFilters(this.collection, input.filters) : buildMemoryOnlyFilters(this.collection, input.filters);
-    const combinedFilters = combineFiltersWithAnd([deletedFilter, searchFilters].filter((f) => f !== null));
-    const searchOptions = { alpha, limit: limit + offset };
-    if (combinedFilters)
-      searchOptions.filters = combinedFilters;
-    const results = await this.collection.query.hybrid(input.query, searchOptions);
+    const ghostFilters = [];
+    if (input.ghost_context) {
+      ghostFilters.push(buildTrustFilter(this.collection, input.ghost_context.accessor_trust_level));
+    }
+    if (!input.ghost_context?.include_ghost_content) {
+      ghostFilters.push(this.collection.filter.byProperty("content_type").notEqual("ghost"));
+    }
+    const isWildcard = input.query === "*";
+    const executeSearch = async (useDeletedFilter) => {
+      const deletedFilter = useDeletedFilter ? buildDeletedFilter(this.collection, input.deleted_filter || "exclude") : null;
+      const combinedFilters = combineFiltersWithAnd([deletedFilter, searchFilters, ...ghostFilters].filter((f) => f !== null));
+      const searchOptions = { limit: limit + offset };
+      if (combinedFilters)
+        searchOptions.filters = combinedFilters;
+      if (isWildcard) {
+        return this.collection.query.fetchObjects(searchOptions);
+      } else {
+        searchOptions.alpha = alpha;
+        return this.collection.query.hybrid(input.query, searchOptions);
+      }
+    };
+    const results = await this.retryWithoutDeletedFilter(executeSearch);
     const paginated = results.objects.slice(offset);
     const memories = [];
     const relationships = [];
@@ -2222,29 +2364,42 @@ var MemoryService = class {
       throw new Error("Provide either memory_id or text, not both");
     const limit = input.limit ?? 10;
     const minSimilarity = input.min_similarity ?? 0.7;
-    const deletedFilter = buildDeletedFilter(this.collection, input.deleted_filter || "exclude");
-    let results;
+    const ghostFilters = [];
+    if (input.ghost_context) {
+      ghostFilters.push(buildTrustFilter(this.collection, input.ghost_context.accessor_trust_level));
+    }
+    if (!input.ghost_context?.include_ghost_content) {
+      ghostFilters.push(this.collection.filter.byProperty("content_type").notEqual("ghost"));
+    }
+    let memoryObj = null;
     if (input.memory_id) {
-      const memory = await this.collection.query.fetchObjectById(input.memory_id, {
+      memoryObj = await this.collection.query.fetchObjectById(input.memory_id, {
         returnProperties: ["user_id", "doc_type", "content"]
       });
-      if (!memory)
+      if (!memoryObj)
         throw new Error(`Memory not found: ${input.memory_id}`);
-      if (memory.properties.user_id !== this.userId)
+      if (memoryObj.properties.user_id !== this.userId)
         throw new Error("Unauthorized");
-      if (memory.properties.doc_type !== "memory")
+      if (memoryObj.properties.doc_type !== "memory")
         throw new Error("Can only find similar for memory documents");
-      const opts = { limit: limit + 1, distance: 1 - minSimilarity, returnMetadata: ["distance"] };
-      if (deletedFilter)
-        opts.filters = deletedFilter;
-      results = await this.collection.query.nearObject(input.memory_id, opts);
-      results.objects = results.objects.filter((o) => o.uuid !== input.memory_id);
-    } else {
-      const opts = { limit, distance: 1 - minSimilarity, returnMetadata: ["distance"] };
-      if (deletedFilter)
-        opts.filters = deletedFilter;
-      results = await this.collection.query.nearText(input.text, opts);
     }
+    const results = await this.retryWithoutDeletedFilter(async (useDeletedFilter) => {
+      const deletedFilter = useDeletedFilter ? buildDeletedFilter(this.collection, input.deleted_filter || "exclude") : null;
+      const combinedFilter = combineFiltersWithAnd([deletedFilter, ...ghostFilters].filter((f) => f !== null));
+      if (input.memory_id) {
+        const opts = { limit: limit + 1, distance: 1 - minSimilarity, returnMetadata: ["distance"] };
+        if (combinedFilter)
+          opts.filters = combinedFilter;
+        const res = await this.collection.query.nearObject(input.memory_id, opts);
+        res.objects = res.objects.filter((o) => o.uuid !== input.memory_id);
+        return res;
+      } else {
+        const opts = { limit, distance: 1 - minSimilarity, returnMetadata: ["distance"] };
+        if (combinedFilter)
+          opts.filters = combinedFilter;
+        return this.collection.query.nearText(input.text, opts);
+      }
+    });
     if (!input.include_relationships) {
       results.objects = results.objects.filter((o) => o.properties.doc_type === "memory");
     }
@@ -2261,13 +2416,22 @@ var MemoryService = class {
       throw new Error("Query cannot be empty");
     const limit = input.limit ?? 5;
     const minRelevance = input.min_relevance ?? 0.6;
-    const deletedFilter = buildDeletedFilter(this.collection, input.deleted_filter || "exclude");
     const searchFilters = buildCombinedSearchFilters(this.collection, input.filters);
-    const combinedFilters = combineFiltersWithAnd([deletedFilter, searchFilters].filter((f) => f !== null));
-    const opts = { limit, distance: 1 - minRelevance, returnMetadata: ["distance"] };
-    if (combinedFilters)
-      opts.filters = combinedFilters;
-    const results = await this.collection.query.nearText(input.query, opts);
+    const ghostFilters = [];
+    if (input.ghost_context) {
+      ghostFilters.push(buildTrustFilter(this.collection, input.ghost_context.accessor_trust_level));
+    }
+    if (!input.ghost_context?.include_ghost_content) {
+      ghostFilters.push(this.collection.filter.byProperty("content_type").notEqual("ghost"));
+    }
+    const results = await this.retryWithoutDeletedFilter(async (useDeletedFilter) => {
+      const deletedFilter = useDeletedFilter ? buildDeletedFilter(this.collection, input.deleted_filter || "exclude") : null;
+      const combinedFilters = combineFiltersWithAnd([deletedFilter, searchFilters, ...ghostFilters].filter((f) => f !== null));
+      const opts = { limit, distance: 1 - minRelevance, returnMetadata: ["distance"] };
+      if (combinedFilters)
+        opts.filters = combinedFilters;
+      return this.collection.query.nearText(input.query, opts);
+    });
     const items = results.objects.map((obj) => ({
       id: obj.uuid,
       ...obj.properties,
@@ -3112,6 +3276,7 @@ var SpaceService = class {
     if (originalMemory.properties.user_id !== this.userId)
       throw new Error("Permission denied");
     const compositeId = generateCompositeId(this.userId, request.payload.memory_id);
+    const weaviateId = compositeIdToUuid(compositeId);
     const existingSpaceIds = Array.isArray(originalMemory.properties.space_ids) ? originalMemory.properties.space_ids : [];
     const existingGroupIds = Array.isArray(originalMemory.properties.group_ids) ? originalMemory.properties.group_ids : [];
     const originalTags = Array.isArray(originalMemory.properties.tags) ? originalMemory.properties.tags : [];
@@ -3124,7 +3289,7 @@ var SpaceService = class {
         const publicCollection = await ensurePublicCollection(this.weaviateClient);
         let existingSpaceMemory = null;
         try {
-          existingSpaceMemory = await fetchMemoryWithAllProperties(publicCollection, compositeId);
+          existingSpaceMemory = await fetchMemoryWithAllProperties(publicCollection, weaviateId);
         } catch {
         }
         const newSpaceIds = [.../* @__PURE__ */ new Set([...existingSpaceIds, ...spaces])];
@@ -3138,7 +3303,7 @@ var SpaceService = class {
         }
         const publishedMemory = {
           ...originalMemory.properties,
-          id: compositeId,
+          composite_id: compositeId,
           space_ids: newSpaceIds,
           group_ids: existingGroupIds,
           spaces,
@@ -3151,9 +3316,9 @@ var SpaceService = class {
         };
         delete publishedMemory._additional;
         if (existingSpaceMemory) {
-          await publicCollection.data.update({ id: compositeId, properties: publishedMemory });
+          await publicCollection.data.update({ id: weaviateId, properties: publishedMemory });
         } else {
-          await publicCollection.data.insert({ id: compositeId, properties: publishedMemory });
+          await publicCollection.data.insert({ id: weaviateId, properties: publishedMemory });
         }
         successfulPublications.push(`spaces: ${spaces.join(", ")}`);
       } catch (err2) {
@@ -3166,7 +3331,7 @@ var SpaceService = class {
         const groupCollection = this.weaviateClient.collections.get(groupCollectionName);
         let existingGroupMemory = null;
         try {
-          existingGroupMemory = await fetchMemoryWithAllProperties(groupCollection, compositeId);
+          existingGroupMemory = await fetchMemoryWithAllProperties(groupCollection, weaviateId);
         } catch {
         }
         const newGroupIds = [.../* @__PURE__ */ new Set([...existingGroupIds, groupId])];
@@ -3174,7 +3339,7 @@ var SpaceService = class {
         const groupModerationStatus = groupConfig.require_moderation ? "pending" : "approved";
         const groupMemory = {
           ...originalMemory.properties,
-          id: compositeId,
+          composite_id: compositeId,
           space_ids: existingSpaceIds,
           group_ids: newGroupIds,
           author_id: this.userId,
@@ -3186,9 +3351,9 @@ var SpaceService = class {
         };
         delete groupMemory._additional;
         if (existingGroupMemory) {
-          await groupCollection.data.update({ id: compositeId, properties: groupMemory });
+          await groupCollection.data.update({ id: weaviateId, properties: groupMemory });
         } else {
-          await groupCollection.data.insert({ id: compositeId, properties: groupMemory });
+          await groupCollection.data.insert({ id: weaviateId, properties: groupMemory });
         }
         successfulPublications.push(`group: ${groupId}`);
       } catch (err2) {
@@ -3236,17 +3401,18 @@ var SpaceService = class {
     const currentSpaceIds = Array.isArray(sourceMemory.properties.space_ids) ? sourceMemory.properties.space_ids : [];
     const currentGroupIds = Array.isArray(sourceMemory.properties.group_ids) ? sourceMemory.properties.group_ids : [];
     const compositeId = generateCompositeId(this.userId, request.payload.memory_id);
+    const weaviateId = compositeIdToUuid(compositeId);
     const successfulRetractions = [];
     const failedRetractions = [];
     if (spaces.length > 0) {
       try {
         const spacesCollectionName = getCollectionName(CollectionType.SPACES);
         const publicCollection = this.weaviateClient.collections.get(spacesCollectionName);
-        const publishedMemory = await fetchMemoryWithAllProperties(publicCollection, compositeId);
+        const publishedMemory = await fetchMemoryWithAllProperties(publicCollection, weaviateId);
         if (publishedMemory) {
           const newSpaceIds = currentSpaceIds.filter((id) => !spaces.includes(id));
           await publicCollection.data.update({
-            id: compositeId,
+            id: weaviateId,
             properties: { space_ids: newSpaceIds, retracted_at: (/* @__PURE__ */ new Date()).toISOString() }
           });
           successfulRetractions.push(`spaces: ${spaces.join(", ")}`);
@@ -3261,12 +3427,12 @@ var SpaceService = class {
       const groupCollectionName = getCollectionName(CollectionType.GROUPS, groupId);
       try {
         const groupCollection = this.weaviateClient.collections.get(groupCollectionName);
-        const groupMemory = await fetchMemoryWithAllProperties(groupCollection, compositeId);
+        const groupMemory = await fetchMemoryWithAllProperties(groupCollection, weaviateId);
         if (groupMemory) {
           const groupMemoryGroupIds = Array.isArray(groupMemory.properties.group_ids) ? groupMemory.properties.group_ids : [];
           const newGroupIds = groupMemoryGroupIds.filter((id) => id !== groupId);
           await groupCollection.data.update({
-            id: compositeId,
+            id: weaviateId,
             properties: { group_ids: newGroupIds, retracted_at: (/* @__PURE__ */ new Date()).toISOString() }
           });
           successfulRetractions.push(`group: ${groupId}`);
@@ -3317,11 +3483,12 @@ var SpaceService = class {
     const newContent = String(sourceMemory.properties.content ?? "");
     const revisedAt = (/* @__PURE__ */ new Date()).toISOString();
     const compositeId = generateCompositeId(this.userId, memory_id);
+    const weaviateId = compositeIdToUuid(compositeId);
     const results = [];
     const reviseInCollection = async (collectionName, locationLabel) => {
       try {
         const collection = this.weaviateClient.collections.get(collectionName);
-        const publishedMemory = await fetchMemoryWithAllProperties(collection, compositeId);
+        const publishedMemory = await fetchMemoryWithAllProperties(collection, weaviateId);
         if (!publishedMemory) {
           results.push({ location: locationLabel, status: "skipped", error: "Published copy not found" });
           return;
@@ -3333,7 +3500,7 @@ var SpaceService = class {
         }
         const currentRevisionCount = typeof publishedMemory.properties.revision_count === "number" ? publishedMemory.properties.revision_count : 0;
         await collection.data.update({
-          id: compositeId,
+          id: weaviateId,
           properties: {
             content: newContent,
             revised_at: revisedAt,
@@ -3373,7 +3540,6 @@ var SpaceService = class {
   // ── Private: Build Base Filters ─────────────────────────────────────
   buildBaseFilters(collection, input) {
     const filterList = [];
-    filterList.push(collection.filter.byProperty("deleted_at").isNull(true));
     filterList.push(collection.filter.byProperty("doc_type").equal("memory"));
     const moderationFilter = buildModerationFilter(collection, input.moderation_filter);
     if (moderationFilter)

package/dist/server.js

@@ -118,7 +118,7 @@ var require_main = __commonJS({
     var packageJson = require_package();
     var version = packageJson.version;
     var LINE = /(?:^|^)\s*(?:export\s+)?([\w.-]+)(?:\s*=\s*?|:\s+?)(\s*'(?:\\'|[^'])*'|\s*"(?:\\"|[^"])*"|\s*`(?:\\`|[^`])*`|[^#\r\n]+)?\s*(?:#.*)?(?:$|$)/mg;
-    function parse(src) {
+    function parse2(src) {
       const obj = {};
       let lines = src.toString();
       lines = lines.replace(/\r\n?/mg, "\n");
@@ -384,7 +384,7 @@ var require_main = __commonJS({
       _parseVault,
       config: config3,
       decrypt,
-      parse,
+      parse: parse2,
       populate
     };
     module.exports.configDotenv = DotenvModule.configDotenv;
@@ -1269,7 +1269,92 @@ var DebugLevel2;
   DebugLevel3[DebugLevel3["TRACE"] = 5] = "TRACE";
 })(DebugLevel2 || (DebugLevel2 = {}));
 
+// node_modules/uuid/dist-node/regex.js
+var regex_default = /^(?:[0-9a-f]{8}-[0-9a-f]{4}-[1-8][0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$/i;
+
+// node_modules/uuid/dist-node/validate.js
+function validate(uuid) {
+  return typeof uuid === "string" && regex_default.test(uuid);
+}
+var validate_default = validate;
+
+// node_modules/uuid/dist-node/parse.js
+function parse(uuid) {
+  if (!validate_default(uuid)) {
+    throw TypeError("Invalid UUID");
+  }
+  let v;
+  return Uint8Array.of((v = parseInt(uuid.slice(0, 8), 16)) >>> 24, v >>> 16 & 255, v >>> 8 & 255, v & 255, (v = parseInt(uuid.slice(9, 13), 16)) >>> 8, v & 255, (v = parseInt(uuid.slice(14, 18), 16)) >>> 8, v & 255, (v = parseInt(uuid.slice(19, 23), 16)) >>> 8, v & 255, (v = parseInt(uuid.slice(24, 36), 16)) / 1099511627776 & 255, v / 4294967296 & 255, v >>> 24 & 255, v >>> 16 & 255, v >>> 8 & 255, v & 255);
+}
+var parse_default = parse;
+
+// node_modules/uuid/dist-node/stringify.js
+var byteToHex = [];
+for (let i = 0; i < 256; ++i) {
+  byteToHex.push((i + 256).toString(16).slice(1));
+}
+function unsafeStringify(arr, offset = 0) {
+  return (byteToHex[arr[offset + 0]] + byteToHex[arr[offset + 1]] + byteToHex[arr[offset + 2]] + byteToHex[arr[offset + 3]] + "-" + byteToHex[arr[offset + 4]] + byteToHex[arr[offset + 5]] + "-" + byteToHex[arr[offset + 6]] + byteToHex[arr[offset + 7]] + "-" + byteToHex[arr[offset + 8]] + byteToHex[arr[offset + 9]] + "-" + byteToHex[arr[offset + 10]] + byteToHex[arr[offset + 11]] + byteToHex[arr[offset + 12]] + byteToHex[arr[offset + 13]] + byteToHex[arr[offset + 14]] + byteToHex[arr[offset + 15]]).toLowerCase();
+}
+
+// node_modules/uuid/dist-node/v35.js
+function stringToBytes(str) {
+  str = unescape(encodeURIComponent(str));
+  const bytes = new Uint8Array(str.length);
+  for (let i = 0; i < str.length; ++i) {
+    bytes[i] = str.charCodeAt(i);
+  }
+  return bytes;
+}
+var DNS = "6ba7b810-9dad-11d1-80b4-00c04fd430c8";
+var URL2 = "6ba7b811-9dad-11d1-80b4-00c04fd430c8";
+function v35(version, hash, value, namespace, buf, offset) {
+  const valueBytes = typeof value === "string" ? stringToBytes(value) : value;
+  const namespaceBytes = typeof namespace === "string" ? parse_default(namespace) : namespace;
+  if (typeof namespace === "string") {
+    namespace = parse_default(namespace);
+  }
+  if (namespace?.length !== 16) {
+    throw TypeError("Namespace must be array-like (16 iterable integer values, 0-255)");
+  }
+  let bytes = new Uint8Array(16 + valueBytes.length);
+  bytes.set(namespaceBytes);
+  bytes.set(valueBytes, namespaceBytes.length);
+  bytes = hash(bytes);
+  bytes[6] = bytes[6] & 15 | version;
+  bytes[8] = bytes[8] & 63 | 128;
+  if (buf) {
+    offset = offset || 0;
+    for (let i = 0; i < 16; ++i) {
+      buf[offset + i] = bytes[i];
+    }
+    return buf;
+  }
+  return unsafeStringify(bytes);
+}
+
+// node_modules/uuid/dist-node/sha1.js
+import { createHash } from "node:crypto";
+function sha1(bytes) {
+  if (Array.isArray(bytes)) {
+    bytes = Buffer.from(bytes);
+  } else if (typeof bytes === "string") {
+    bytes = Buffer.from(bytes, "utf8");
+  }
+  return createHash("sha1").update(bytes).digest();
+}
+var sha1_default = sha1;
+
+// node_modules/uuid/dist-node/v5.js
+function v5(value, namespace, buf, offset) {
+  return v35(80, sha1_default, value, namespace, buf, offset);
+}
+v5.DNS = DNS;
+v5.URL = URL2;
+var v5_default = v5;
+
 // node_modules/@prmichaelsen/remember-core/dist/collections/composite-ids.js
+var WEAVIATE_UUID_NAMESPACE = v5_default.DNS;
 var InvalidCompositeIdError = class extends Error {
   constructor(message) {
     super(message);
@@ -1291,6 +1376,28 @@ function generateCompositeId(userId, memoryId) {
   }
   return `${userId}.${memoryId}`;
 }
+function parseCompositeId(compositeId) {
+  const parts = compositeId.split(".");
+  if (parts.length !== 2) {
+    throw new InvalidCompositeIdError(`Invalid composite ID format: ${compositeId}. Expected format: {userId}.{memoryId}`);
+  }
+  const [userId, memoryId] = parts;
+  if (!userId.trim()) {
+    throw new InvalidCompositeIdError(`Invalid composite ID: ${compositeId}. User ID is empty`);
+  }
+  if (!memoryId.trim()) {
+    throw new InvalidCompositeIdError(`Invalid composite ID: ${compositeId}. Memory ID is empty`);
+  }
+  return { userId, memoryId };
+}
+function validateCompositeId(id) {
+  parseCompositeId(id);
+  return true;
+}
+function compositeIdToUuid(compositeId) {
+  validateCompositeId(compositeId);
+  return v5_default(compositeId, WEAVIATE_UUID_NAMESPACE);
+}
 
 // node_modules/@prmichaelsen/remember-core/dist/collections/dot-notation.js
 var CollectionType;
@@ -1818,6 +1925,11 @@ async function fetchMemoryWithAllProperties(collection, memoryId) {
   }
 }
 
+// node_modules/@prmichaelsen/remember-core/dist/services/trust-enforcement.service.js
+function buildTrustFilter(collection, accessorTrustLevel) {
+  return collection.filter.byProperty("trust_score").lessThanOrEqual(accessorTrustLevel);
+}
+
 // node_modules/@prmichaelsen/remember-core/dist/services/memory.service.js
 var MemoryService = class {
   collection;
@@ -1828,6 +1940,20 @@ var MemoryService = class {
     this.userId = userId;
     this.logger = logger2;
   }
+  /**
+   * Execute a search function, retrying without the deleted_at filter if
+   * the collection lacks indexNullState (created before soft-delete support).
+   */
+  async retryWithoutDeletedFilter(fn) {
+    try {
+      return await fn(true);
+    } catch (err2) {
+      if (err2?.message?.includes("Nullstate must be indexed")) {
+        return fn(false);
+      }
+      throw err2;
+    }
+  }
   // ── Create ──────────────────────────────────────────────────────────
   async create(input) {
     const now = (/* @__PURE__ */ new Date()).toISOString();
@@ -1873,13 +1999,29 @@ var MemoryService = class {
     const alpha = input.alpha ?? 0.7;
     const limit = input.limit ?? 10;
     const offset = input.offset ?? 0;
-    const deletedFilter = buildDeletedFilter(this.collection, input.deleted_filter || "exclude");
     const searchFilters = includeRelationships ? buildCombinedSearchFilters(this.collection, input.filters) : buildMemoryOnlyFilters(this.collection, input.filters);
-    const combinedFilters = combineFiltersWithAnd([deletedFilter, searchFilters].filter((f) => f !== null));
-    const searchOptions = { alpha, limit: limit + offset };
-    if (combinedFilters)
-      searchOptions.filters = combinedFilters;
-    const results = await this.collection.query.hybrid(input.query, searchOptions);
+    const ghostFilters = [];
+    if (input.ghost_context) {
+      ghostFilters.push(buildTrustFilter(this.collection, input.ghost_context.accessor_trust_level));
+    }
+    if (!input.ghost_context?.include_ghost_content) {
+      ghostFilters.push(this.collection.filter.byProperty("content_type").notEqual("ghost"));
+    }
+    const isWildcard = input.query === "*";
+    const executeSearch = async (useDeletedFilter) => {
+      const deletedFilter = useDeletedFilter ? buildDeletedFilter(this.collection, input.deleted_filter || "exclude") : null;
+      const combinedFilters = combineFiltersWithAnd([deletedFilter, searchFilters, ...ghostFilters].filter((f) => f !== null));
+      const searchOptions = { limit: limit + offset };
+      if (combinedFilters)
+        searchOptions.filters = combinedFilters;
+      if (isWildcard) {
+        return this.collection.query.fetchObjects(searchOptions);
+      } else {
+        searchOptions.alpha = alpha;
+        return this.collection.query.hybrid(input.query, searchOptions);
+      }
+    };
+    const results = await this.retryWithoutDeletedFilter(executeSearch);
     const paginated = results.objects.slice(offset);
     const memories = [];
     const relationships = [];
@@ -1906,29 +2048,42 @@ var MemoryService = class {
       throw new Error("Provide either memory_id or text, not both");
     const limit = input.limit ?? 10;
     const minSimilarity = input.min_similarity ?? 0.7;
-    const deletedFilter = buildDeletedFilter(this.collection, input.deleted_filter || "exclude");
-    let results;
+    const ghostFilters = [];
+    if (input.ghost_context) {
+      ghostFilters.push(buildTrustFilter(this.collection, input.ghost_context.accessor_trust_level));
+    }
+    if (!input.ghost_context?.include_ghost_content) {
+      ghostFilters.push(this.collection.filter.byProperty("content_type").notEqual("ghost"));
+    }
+    let memoryObj = null;
     if (input.memory_id) {
-      const memory = await this.collection.query.fetchObjectById(input.memory_id, {
+      memoryObj = await this.collection.query.fetchObjectById(input.memory_id, {
         returnProperties: ["user_id", "doc_type", "content"]
       });
-      if (!memory)
+      if (!memoryObj)
         throw new Error(`Memory not found: ${input.memory_id}`);
-      if (memory.properties.user_id !== this.userId)
+      if (memoryObj.properties.user_id !== this.userId)
         throw new Error("Unauthorized");
-      if (memory.properties.doc_type !== "memory")
+      if (memoryObj.properties.doc_type !== "memory")
         throw new Error("Can only find similar for memory documents");
-      const opts = { limit: limit + 1, distance: 1 - minSimilarity, returnMetadata: ["distance"] };
-      if (deletedFilter)
-        opts.filters = deletedFilter;
-      results = await this.collection.query.nearObject(input.memory_id, opts);
-      results.objects = results.objects.filter((o) => o.uuid !== input.memory_id);
-    } else {
-      const opts = { limit, distance: 1 - minSimilarity, returnMetadata: ["distance"] };
-      if (deletedFilter)
-        opts.filters = deletedFilter;
-      results = await this.collection.query.nearText(input.text, opts);
     }
+    const results = await this.retryWithoutDeletedFilter(async (useDeletedFilter) => {
+      const deletedFilter = useDeletedFilter ? buildDeletedFilter(this.collection, input.deleted_filter || "exclude") : null;
+      const combinedFilter = combineFiltersWithAnd([deletedFilter, ...ghostFilters].filter((f) => f !== null));
+      if (input.memory_id) {
+        const opts = { limit: limit + 1, distance: 1 - minSimilarity, returnMetadata: ["distance"] };
+        if (combinedFilter)
+          opts.filters = combinedFilter;
+        const res = await this.collection.query.nearObject(input.memory_id, opts);
+        res.objects = res.objects.filter((o) => o.uuid !== input.memory_id);
+        return res;
+      } else {
+        const opts = { limit, distance: 1 - minSimilarity, returnMetadata: ["distance"] };
+        if (combinedFilter)
+          opts.filters = combinedFilter;
+        return this.collection.query.nearText(input.text, opts);
+      }
+    });
     if (!input.include_relationships) {
       results.objects = results.objects.filter((o) => o.properties.doc_type === "memory");
     }
@@ -1945,13 +2100,22 @@ var MemoryService = class {
       throw new Error("Query cannot be empty");
     const limit = input.limit ?? 5;
     const minRelevance = input.min_relevance ?? 0.6;
-    const deletedFilter = buildDeletedFilter(this.collection, input.deleted_filter || "exclude");
     const searchFilters = buildCombinedSearchFilters(this.collection, input.filters);
-    const combinedFilters = combineFiltersWithAnd([deletedFilter, searchFilters].filter((f) => f !== null));
-    const opts = { limit, distance: 1 - minRelevance, returnMetadata: ["distance"] };
-    if (combinedFilters)
-      opts.filters = combinedFilters;
-    const results = await this.collection.query.nearText(input.query, opts);
+    const ghostFilters = [];
+    if (input.ghost_context) {
+      ghostFilters.push(buildTrustFilter(this.collection, input.ghost_context.accessor_trust_level));
+    }
+    if (!input.ghost_context?.include_ghost_content) {
+      ghostFilters.push(this.collection.filter.byProperty("content_type").notEqual("ghost"));
+    }
+    const results = await this.retryWithoutDeletedFilter(async (useDeletedFilter) => {
+      const deletedFilter = useDeletedFilter ? buildDeletedFilter(this.collection, input.deleted_filter || "exclude") : null;
+      const combinedFilters = combineFiltersWithAnd([deletedFilter, searchFilters, ...ghostFilters].filter((f) => f !== null));
+      const opts = { limit, distance: 1 - minRelevance, returnMetadata: ["distance"] };
+      if (combinedFilters)
+        opts.filters = combinedFilters;
+      return this.collection.query.nearText(input.query, opts);
+    });
     const items = results.objects.map((obj) => ({
       id: obj.uuid,
       ...obj.properties,
@@ -2796,6 +2960,7 @@ var SpaceService = class {
     if (originalMemory.properties.user_id !== this.userId)
       throw new Error("Permission denied");
     const compositeId = generateCompositeId(this.userId, request.payload.memory_id);
+    const weaviateId = compositeIdToUuid(compositeId);
     const existingSpaceIds = Array.isArray(originalMemory.properties.space_ids) ? originalMemory.properties.space_ids : [];
     const existingGroupIds = Array.isArray(originalMemory.properties.group_ids) ? originalMemory.properties.group_ids : [];
     const originalTags = Array.isArray(originalMemory.properties.tags) ? originalMemory.properties.tags : [];
@@ -2808,7 +2973,7 @@ var SpaceService = class {
         const publicCollection = await ensurePublicCollection(this.weaviateClient);
         let existingSpaceMemory = null;
         try {
-          existingSpaceMemory = await fetchMemoryWithAllProperties(publicCollection, compositeId);
+          existingSpaceMemory = await fetchMemoryWithAllProperties(publicCollection, weaviateId);
         } catch {
         }
         const newSpaceIds = [.../* @__PURE__ */ new Set([...existingSpaceIds, ...spaces])];
@@ -2822,7 +2987,7 @@ var SpaceService = class {
         }
         const publishedMemory = {
           ...originalMemory.properties,
-          id: compositeId,
+          composite_id: compositeId,
           space_ids: newSpaceIds,
           group_ids: existingGroupIds,
           spaces,
@@ -2835,9 +3000,9 @@ var SpaceService = class {
         };
         delete publishedMemory._additional;
         if (existingSpaceMemory) {
-          await publicCollection.data.update({ id: compositeId, properties: publishedMemory });
+          await publicCollection.data.update({ id: weaviateId, properties: publishedMemory });
         } else {
-          await publicCollection.data.insert({ id: compositeId, properties: publishedMemory });
+          await publicCollection.data.insert({ id: weaviateId, properties: publishedMemory });
         }
         successfulPublications.push(`spaces: ${spaces.join(", ")}`);
       } catch (err2) {
@@ -2850,7 +3015,7 @@ var SpaceService = class {
         const groupCollection = this.weaviateClient.collections.get(groupCollectionName);
         let existingGroupMemory = null;
         try {
-          existingGroupMemory = await fetchMemoryWithAllProperties(groupCollection, compositeId);
+          existingGroupMemory = await fetchMemoryWithAllProperties(groupCollection, weaviateId);
         } catch {
         }
         const newGroupIds = [.../* @__PURE__ */ new Set([...existingGroupIds, groupId])];
@@ -2858,7 +3023,7 @@ var SpaceService = class {
         const groupModerationStatus = groupConfig.require_moderation ? "pending" : "approved";
         const groupMemory = {
           ...originalMemory.properties,
-          id: compositeId,
+          composite_id: compositeId,
           space_ids: existingSpaceIds,
           group_ids: newGroupIds,
           author_id: this.userId,
@@ -2870,9 +3035,9 @@ var SpaceService = class {
         };
         delete groupMemory._additional;
         if (existingGroupMemory) {
-          await groupCollection.data.update({ id: compositeId, properties: groupMemory });
+          await groupCollection.data.update({ id: weaviateId, properties: groupMemory });
         } else {
-          await groupCollection.data.insert({ id: compositeId, properties: groupMemory });
+          await groupCollection.data.insert({ id: weaviateId, properties: groupMemory });
         }
         successfulPublications.push(`group: ${groupId}`);
       } catch (err2) {
@@ -2920,17 +3085,18 @@ var SpaceService = class {
     const currentSpaceIds = Array.isArray(sourceMemory.properties.space_ids) ? sourceMemory.properties.space_ids : [];
     const currentGroupIds = Array.isArray(sourceMemory.properties.group_ids) ? sourceMemory.properties.group_ids : [];
     const compositeId = generateCompositeId(this.userId, request.payload.memory_id);
+    const weaviateId = compositeIdToUuid(compositeId);
     const successfulRetractions = [];
     const failedRetractions = [];
     if (spaces.length > 0) {
       try {
         const spacesCollectionName = getCollectionName(CollectionType.SPACES);
         const publicCollection = this.weaviateClient.collections.get(spacesCollectionName);
-        const publishedMemory = await fetchMemoryWithAllProperties(publicCollection, compositeId);
+        const publishedMemory = await fetchMemoryWithAllProperties(publicCollection, weaviateId);
         if (publishedMemory) {
           const newSpaceIds = currentSpaceIds.filter((id) => !spaces.includes(id));
           await publicCollection.data.update({
-            id: compositeId,
+            id: weaviateId,
             properties: { space_ids: newSpaceIds, retracted_at: (/* @__PURE__ */ new Date()).toISOString() }
           });
           successfulRetractions.push(`spaces: ${spaces.join(", ")}`);
@@ -2945,12 +3111,12 @@ var SpaceService = class {
       const groupCollectionName = getCollectionName(CollectionType.GROUPS, groupId);
       try {
         const groupCollection = this.weaviateClient.collections.get(groupCollectionName);
-        const groupMemory = await fetchMemoryWithAllProperties(groupCollection, compositeId);
+        const groupMemory = await fetchMemoryWithAllProperties(groupCollection, weaviateId);
         if (groupMemory) {
           const groupMemoryGroupIds = Array.isArray(groupMemory.properties.group_ids) ? groupMemory.properties.group_ids : [];
           const newGroupIds = groupMemoryGroupIds.filter((id) => id !== groupId);
           await groupCollection.data.update({
-            id: compositeId,
+            id: weaviateId,
             properties: { group_ids: newGroupIds, retracted_at: (/* @__PURE__ */ new Date()).toISOString() }
           });
           successfulRetractions.push(`group: ${groupId}`);
@@ -3001,11 +3167,12 @@ var SpaceService = class {
     const newContent = String(sourceMemory.properties.content ?? "");
     const revisedAt = (/* @__PURE__ */ new Date()).toISOString();
     const compositeId = generateCompositeId(this.userId, memory_id);
+    const weaviateId = compositeIdToUuid(compositeId);
     const results = [];
     const reviseInCollection = async (collectionName, locationLabel) => {
       try {
         const collection = this.weaviateClient.collections.get(collectionName);
-        const publishedMemory = await fetchMemoryWithAllProperties(collection, compositeId);
+        const publishedMemory = await fetchMemoryWithAllProperties(collection, weaviateId);
         if (!publishedMemory) {
           results.push({ location: locationLabel, status: "skipped", error: "Published copy not found" });
           return;
@@ -3017,7 +3184,7 @@ var SpaceService = class {
         }
         const currentRevisionCount = typeof publishedMemory.properties.revision_count === "number" ? publishedMemory.properties.revision_count : 0;
         await collection.data.update({
-          id: compositeId,
+          id: weaviateId,
           properties: {
             content: newContent,
             revised_at: revisedAt,
@@ -3057,7 +3224,6 @@ var SpaceService = class {
   // ── Private: Build Base Filters ─────────────────────────────────────
   buildBaseFilters(collection, input) {
     const filterList = [];
-    filterList.push(collection.filter.byProperty("deleted_at").isNull(true));
     filterList.push(collection.filter.byProperty("doc_type").equal("memory"));
     const moderationFilter = buildModerationFilter(collection, input.moderation_filter);
     if (moderationFilter)

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@prmichaelsen/remember-mcp",
-  "version": "3.14.0",
+  "version": "3.14.2",
   "description": "Multi-tenant memory system MCP server with vector search and relationships",
   "main": "dist/server.js",
   "type": "module",
@@ -50,9 +50,10 @@
     "@modelcontextprotocol/sdk": "^1.0.4",
     "@prmichaelsen/firebase-admin-sdk-v8": "^2.2.0",
     "@prmichaelsen/mcp-auth": "^7.0.4",
-    "@prmichaelsen/remember-core": "^0.13.0",
+    "@prmichaelsen/remember-core": "^0.16.0",
     "@prmichaelsen/remember-mcp": "^2.7.3",
     "dotenv": "^16.4.5",
+    "uuid": "^13.0.0",
     "weaviate-client": "^3.2.0"
   },
   "devDependencies": {