@prmichaelsen/remember-mcp 3.14.18 → 3.14.20

package/.github/workflows/bump-remember-core.yml

@@ -0,0 +1,48 @@
+name: Bump remember-core
+
+on:
+  repository_dispatch:
+    types: [dependency-update]
+
+jobs:
+  bump:
+    if: github.event.client_payload.package == '@prmichaelsen/remember-core'
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+        with:
+          ref: mainline
+
+      - uses: actions/setup-node@v4
+        with:
+          node-version: 20
+          registry-url: https://registry.npmjs.org
+
+      - name: Bump remember-core
+        run: npm install @prmichaelsen/remember-core@${{ github.event.client_payload.version }} --save
+
+      - name: Bump package version
+        id: bump
+        run: |
+          CURRENT=$(node -p "require('./package.json').version")
+          NEW=$(echo "$CURRENT" | awk -F. '{print $1"."$2"."$3+1}')
+          npm version "$NEW" --no-git-tag-version
+          echo "version=$NEW" >> "$GITHUB_OUTPUT"
+
+      - name: Commit and tag
+        run: |
+          git config user.name "github-actions[bot]"
+          git config user.email "github-actions[bot]@users.noreply.github.com"
+          git add package.json package-lock.json
+          git commit -m "bump: remember core"
+          git commit --allow-empty -m "${{ steps.bump.outputs.version }}"
+          git tag "v${{ steps.bump.outputs.version }}"
+          git push --follow-tags
+
+      - name: Publish to npm
+        run: npm publish --access public
+        env:
+          NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}
+
+      - name: Summary
+        run: echo "Bumped remember-core to ${{ github.event.client_payload.version }}, published remember-mcp@${{ steps.bump.outputs.version }}"

package/agent/progress.yaml

@@ -1070,11 +1070,21 @@ tasks:
       notes: |
         Static imports for ghost-config and access-control
 
+  unassigned:
+    - id: task-201
+      name: Auto-bump remember-core via GitHub Actions
+      status: not_started
+      file: agent/tasks/unassigned/task-201-auto-bump-remember-core-ci.md
+      estimated_hours: 2
+      notes: |
+        Set up repository_dispatch CI/CD: remember-core publish triggers remember-mcp bump + publish.
+        Draft workflow files already created in both repos (not yet committed).
+
 documentation:
   design_documents: 31
   milestone_documents: 14
   pattern_documents: 7
-  task_documents: 91
+  task_documents: 92
 
 progress:
   planning: 100%

package/agent/tasks/unassigned/task-201-auto-bump-remember-core-ci.md

@@ -0,0 +1,85 @@
+# Task 201: Auto-bump remember-core via GitHub Actions
+
+**Milestone**: Unassigned
+**Estimated Time**: 1-2 hours
+**Dependencies**: None
+**Status**: Not Started
+
+---
+
+## Objective
+
+Set up GitHub Actions CI/CD so that when remember-core publishes a new version to npm, remember-mcp automatically bumps the dependency, patches its own version, and publishes to npm.
+
+---
+
+## Context
+
+Currently, bumping remember-core in remember-mcp is a manual process: update package.json, commit, tag, publish. This happens frequently (almost every remember-core release). Automating this eliminates toil and reduces lag between core changes and MCP availability.
+
+The approach uses `repository_dispatch` events: remember-core's publish workflow notifies remember-mcp after a successful npm publish, and remember-mcp's workflow handles the bump + publish.
+
+---
+
+## Steps
+
+### 1. Configure GitHub Secrets
+
+Add required secrets to both repositories:
+
+- **remember-core**: `REPO_DISPATCH_TOKEN` - a GitHub PAT with `repo` scope (to trigger dispatches on remember-mcp)
+- **remember-mcp**: `NPM_TOKEN` - an npm access token for publishing
+
+### 2. Add dispatch step to remember-core publish workflow
+
+File: `remember-core/.github/workflows/publish.yml`
+
+A "Notify remember-mcp" step has been drafted that sends a `repository_dispatch` event after successful npm publish. Review and merge.
+
+### 3. Add bump workflow to remember-mcp
+
+File: `remember-mcp/.github/workflows/bump-remember-core.yml`
+
+A workflow has been drafted that:
+- Triggers on `repository_dispatch` with `dependency-update` type
+- Filters to `@prmichaelsen/remember-core` events
+- Installs the new version
+- Patch-bumps remember-mcp version
+- Commits (`bump: remember core` then `{version}`)
+- Tags and pushes
+- Publishes to npm
+
+### 4. Fix remember-mcp git remote
+
+The remember-mcp git remote currently points to `remember-core.git` instead of `remember-mcp.git`. Fix with:
+
+```bash
+git remote set-url origin git@github.com:prmichaelsen/remember-mcp.git
+```
+
+### 5. Test end-to-end
+
+- Push a version bump to remember-core main
+- Verify remember-core publishes to npm
+- Verify dispatch fires
+- Verify remember-mcp bumps, commits, tags, publishes
+
+---
+
+## Verification
+
+- [ ] `REPO_DISPATCH_TOKEN` secret set in remember-core
+- [ ] `NPM_TOKEN` secret set in remember-mcp
+- [ ] remember-core publish.yml includes dispatch step
+- [ ] remember-mcp bump-remember-core.yml exists
+- [ ] remember-mcp git remote points to correct repo
+- [ ] End-to-end test: remember-core publish triggers remember-mcp bump + publish
+
+---
+
+## Notes
+
+- Draft workflow files already created in both repos (not yet committed)
+- remember-core publish.yml already has NPM_TOKEN configured
+- The bump workflow commits in the existing pattern: `bump: remember core` then `{version}`
+- Consider adding error notifications (GitHub Actions failure emails are on by default)

package/dist/server-factory.js

@@ -803,6 +803,64 @@ function handleToolError(error, context) {
   throw new Error(detailedMessage);
 }
 
+// node_modules/@prmichaelsen/remember-core/dist/types/trust.types.js
+var TrustLevel = {
+  /** Anyone can see this, including strangers */
+  PUBLIC: 1,
+  /** Friends and known users */
+  INTERNAL: 2,
+  /** Trusted friends only */
+  CONFIDENTIAL: 3,
+  /** Close/intimate contacts only */
+  RESTRICTED: 4,
+  /** Owner only (or explicitly granted) */
+  SECRET: 5
+};
+var TRUST_LABELS = {
+  [TrustLevel.PUBLIC]: "Public",
+  [TrustLevel.INTERNAL]: "Internal",
+  [TrustLevel.CONFIDENTIAL]: "Confidential",
+  [TrustLevel.RESTRICTED]: "Restricted",
+  [TrustLevel.SECRET]: "Secret"
+};
+var ALL_TRUST_LEVELS = [
+  TrustLevel.PUBLIC,
+  TrustLevel.INTERNAL,
+  TrustLevel.CONFIDENTIAL,
+  TrustLevel.RESTRICTED,
+  TrustLevel.SECRET
+];
+function isValidTrustLevel(value) {
+  return typeof value === "number" && Number.isInteger(value) && value >= 1 && value <= 5;
+}
+function normalizeTrustScore(value) {
+  if (value == null)
+    return TrustLevel.INTERNAL;
+  if (isValidTrustLevel(value))
+    return value;
+  const inverted = 1 - value;
+  if (inverted >= 0.875)
+    return TrustLevel.SECRET;
+  if (inverted >= 0.625)
+    return TrustLevel.RESTRICTED;
+  if (inverted >= 0.375)
+    return TrustLevel.CONFIDENTIAL;
+  if (inverted >= 0.125)
+    return TrustLevel.INTERNAL;
+  return TrustLevel.PUBLIC;
+}
+
+// node_modules/@prmichaelsen/remember-core/dist/types/ghost-config.types.js
+var DEFAULT_GHOST_CONFIG = {
+  enabled: false,
+  public_ghost_enabled: false,
+  default_friend_trust: TrustLevel.INTERNAL,
+  default_public_trust: TrustLevel.PUBLIC,
+  per_user_trust: {},
+  blocked_users: [],
+  enforcement_mode: "query"
+};
+
 // node_modules/@prmichaelsen/remember-core/dist/types/preferences.types.js
 var DEFAULT_PREFERENCES = {
   templates: {
@@ -828,7 +886,7 @@ var DEFAULT_PREFERENCES = {
     share_with_memories: true
   },
   privacy: {
-    default_trust_level: 0.25,
+    default_trust_level: 2,
     allow_cross_user_access: false,
     auto_approve_requests: false,
     audit_logging: true
@@ -847,6 +905,14 @@ var DEFAULT_PREFERENCES = {
   }
 };
 
+// node_modules/@prmichaelsen/remember-core/dist/types/rating.types.js
+var RATING_MIN_THRESHOLD = 5;
+function computeRatingAvg(ratingSum, ratingCount) {
+  if (ratingCount < RATING_MIN_THRESHOLD)
+    return null;
+  return ratingSum / ratingCount;
+}
+
 // node_modules/@prmichaelsen/remember-core/dist/types/space.types.js
 var SUPPORTED_SPACES = [
   "the_void",
@@ -1303,6 +1369,35 @@ var DebugLevel2;
   DebugLevel3[DebugLevel3["TRACE"] = 5] = "TRACE";
 })(DebugLevel2 || (DebugLevel2 = {}));
 
+// node_modules/@prmichaelsen/remember-core/dist/errors/base.error.js
+var AppError = class extends Error {
+  context;
+  constructor(message, context = {}) {
+    super(message);
+    this.context = context;
+    this.name = this.constructor.name;
+    Object.setPrototypeOf(this, new.target.prototype);
+  }
+  toJSON() {
+    return {
+      kind: this.kind,
+      name: this.name,
+      message: this.message,
+      context: this.context
+    };
+  }
+};
+
+// node_modules/@prmichaelsen/remember-core/dist/errors/app-errors.js
+var ValidationError = class extends AppError {
+  fields;
+  kind = "validation";
+  constructor(message, fields = {}) {
+    super(message, { fields });
+    this.fields = fields;
+  }
+};
+
 // node_modules/@prmichaelsen/remember-core/node_modules/uuid/dist/esm/regex.js
 var regex_default = /^(?:[0-9a-f]{8}-[0-9a-f]{4}-[1-8][0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$/i;
 
@@ -1579,9 +1674,15 @@ function buildDocTypeFilters(collection, docType, filters) {
   if (filters?.relationship_count_max !== void 0) {
     filterList.push(collection.filter.byProperty("relationship_count").lessOrEqual(filters.relationship_count_max));
   }
+  if (filters?.rating_min !== void 0) {
+    filterList.push(collection.filter.byProperty("rating_bayesian").greaterOrEqual(filters.rating_min));
+  }
   if (filters?.tags && filters.tags.length > 0) {
     filterList.push(collection.filter.byProperty("tags").containsAny(filters.tags));
   }
+  if (filters?.memory_ids && filters.memory_ids.length > 0) {
+    filterList.push(collection.filter.byId().containsAny(filters.memory_ids));
+  }
   return combineFiltersWithAnd(filterList);
 }
 function buildMemoryOnlyFilters(collection, filters) {
@@ -1943,6 +2044,9 @@ var ALL_MEMORY_PROPERTIES = [
   "observation",
   "strength",
   "source",
+  "rating_sum",
+  "rating_count",
+  "rating_bayesian",
   "access_count",
   "last_accessed_at",
   "tags",
@@ -1988,14 +2092,27 @@ function buildTrustFilter(collection, accessorTrustLevel) {
 }
 
 // node_modules/@prmichaelsen/remember-core/dist/services/memory.service.js
+function normalizeDoc(doc) {
+  if ("trust_score" in doc) {
+    doc.trust_score = normalizeTrustScore(doc.trust_score);
+  }
+  const ratingSum = doc.rating_sum;
+  const ratingCount = doc.rating_count;
+  if (ratingSum !== void 0 && ratingCount !== void 0) {
+    doc.rating_avg = computeRatingAvg(ratingSum, ratingCount);
+  }
+  return doc;
+}
 var MemoryService = class {
   collection;
   userId;
   logger;
-  constructor(collection, userId, logger2) {
+  options;
+  constructor(collection, userId, logger2, options) {
     this.collection = collection;
     this.userId = userId;
     this.logger = logger2;
+    this.options = options;
   }
   /**
    * Execute a search function, retrying without the deleted_at filter if
@@ -2018,7 +2135,31 @@ var MemoryService = class {
       throw new Error(`Memory not found: ${memoryId}`);
     if (existing.properties.user_id !== this.userId)
       throw new Error("Unauthorized");
-    return { memory: { id: existing.uuid, ...existing.properties } };
+    return { memory: normalizeDoc({ id: existing.uuid, ...existing.properties }) };
+  }
+  // ── Resolve by ID (cross-collection) ─────────────────────────────────
+  /**
+   * Resolve any memory by UUID alone using the Firestore index.
+   * Requires `memoryIndex` and `weaviateClient` in constructor options.
+   */
+  async resolveById(memoryId) {
+    if (!this.options?.weaviateClient) {
+      throw new Error("resolveById requires weaviateClient in options");
+    }
+    if (this.options?.memoryIndex) {
+      const collectionName = await this.options.memoryIndex.lookup(memoryId);
+      if (collectionName) {
+        const col = this.options.weaviateClient.collections.get(collectionName);
+        const memory = await fetchMemoryWithAllProperties(col, memoryId);
+        if (memory?.properties) {
+          return {
+            memory: normalizeDoc({ id: memory.uuid, ...memory.properties }),
+            collectionName
+          };
+        }
+      }
+    }
+    return { memory: null, collectionName: null };
   }
   // ── Create ──────────────────────────────────────────────────────────
   async create(input) {
@@ -2032,12 +2173,16 @@ var MemoryService = class {
       summary: input.title,
       content_type: contentType,
       weight: input.weight ?? 0.5,
-      trust_score: input.trust ?? 0.25,
+      trust_score: normalizeTrustScore(input.trust ?? TrustLevel.INTERNAL),
       confidence: 1,
       context_summary: input.context_summary || "Memory created",
       context_conversation_id: input.context_conversation_id,
       relationship_ids: [],
       relationship_count: 0,
+      rating_sum: 0,
+      rating_count: 0,
+      rating_bayesian: 3,
+      // (0 + 15) / (0 + 5) = 3.0 (prior mean)
       access_count: 0,
       last_accessed_at: now,
       created_at: now,
@@ -2057,6 +2202,14 @@ var MemoryService = class {
     };
     const memoryId = await this.collection.data.insert({ properties });
     this.logger.info("Memory created", { memoryId, userId: this.userId });
+    if (this.options?.memoryIndex) {
+      try {
+        const collectionName = this.collection.name;
+        await this.options.memoryIndex.index(memoryId, collectionName);
+      } catch (err2) {
+        this.logger.warn?.(`[MemoryService] Index write failed for ${memoryId}: ${err2}`);
+      }
+    }
     return { memory_id: memoryId, created_at: now };
   }
   // ── Search (hybrid) ─────────────────────────────────────────────────
@@ -2094,7 +2247,7 @@ var MemoryService = class {
     const memories = [];
     const relationships = [];
     for (const obj of paginated) {
-      const doc = { id: obj.uuid, ...obj.properties };
+      const doc = normalizeDoc({ id: obj.uuid, ...obj.properties });
       if (doc.doc_type === "memory")
         memories.push(doc);
       else if (doc.doc_type === "relationship")
@@ -2137,7 +2290,7 @@ var MemoryService = class {
     const paginated = results.objects.slice(offset);
     const memories = [];
     for (const obj of paginated) {
-      const doc = { id: obj.uuid, ...obj.properties };
+      const doc = normalizeDoc({ id: obj.uuid, ...obj.properties });
       if (doc.doc_type === "memory") {
         memories.push(doc);
       }
@@ -2181,7 +2334,48 @@ var MemoryService = class {
     const paginated = results.objects.slice(offset);
     const memories = [];
     for (const obj of paginated) {
-      const doc = { id: obj.uuid, ...obj.properties };
+      const doc = normalizeDoc({ id: obj.uuid, ...obj.properties });
+      if (doc.doc_type === "memory") {
+        memories.push(doc);
+      }
+    }
+    return {
+      memories,
+      total: memories.length,
+      offset,
+      limit
+    };
+  }
+  // ── By Rating (Bayesian average) ─────────────────────────────────
+  async byRating(input) {
+    const limit = input.limit ?? 50;
+    const offset = input.offset ?? 0;
+    const direction = input.direction ?? "desc";
+    const memoryFilters = buildMemoryOnlyFilters(this.collection, input.filters);
+    const ghostFilters = [];
+    if (input.ghost_context) {
+      ghostFilters.push(buildTrustFilter(this.collection, input.ghost_context.accessor_trust_level));
+    }
+    if (!input.ghost_context?.include_ghost_content) {
+      ghostFilters.push(this.collection.filter.byProperty("content_type").notEqual("ghost"));
+    }
+    const executeQuery = async (useDeletedFilter) => {
+      const deletedFilter = useDeletedFilter ? buildDeletedFilter(this.collection, input.deleted_filter || "exclude") : null;
+      const combinedFilters = combineFiltersWithAnd([deletedFilter, memoryFilters, ...ghostFilters].filter((f) => f !== null));
+      const queryOptions = {
+        limit: limit + offset,
+        sort: this.collection.sort.byProperty("rating_bayesian", direction === "asc")
+      };
+      if (combinedFilters) {
+        queryOptions.filters = combinedFilters;
+      }
+      return this.collection.query.fetchObjects(queryOptions);
+    };
+    const results = await this.retryWithoutDeletedFilter(executeQuery);
+    const paginated = results.objects.slice(offset);
+    const memories = [];
+    for (const obj of paginated) {
+      const doc = normalizeDoc({ id: obj.uuid, ...obj.properties });
       if (doc.doc_type === "memory") {
         memories.push(doc);
       }
@@ -2240,7 +2434,7 @@ var MemoryService = class {
     if (!input.include_relationships) {
       results.objects = results.objects.filter((o) => o.properties.doc_type === "memory");
     }
-    const items = results.objects.map((obj) => ({
+    const items = results.objects.map((obj) => normalizeDoc({
       id: obj.uuid,
       ...obj.properties,
       similarity: Math.max(0, Math.min(1, 1 - (obj.metadata?.distance ?? 0)))
@@ -2269,7 +2463,7 @@ var MemoryService = class {
         opts.filters = combinedFilters;
       return this.collection.query.nearText(input.query, opts);
     });
-    const items = results.objects.map((obj) => ({
+    const items = results.objects.map((obj) => normalizeDoc({
       id: obj.uuid,
       ...obj.properties,
       relevance: Math.max(0, Math.min(1, 1 - (obj.metadata?.distance ?? 0)))
@@ -2313,8 +2507,8 @@ var MemoryService = class {
       updatedFields.push("weight");
     }
     if (input.trust !== void 0) {
-      if (input.trust < 0 || input.trust > 1)
-        throw new Error("Trust must be between 0 and 1");
+      if (!isValidTrustLevel(input.trust))
+        throw new Error("Trust must be an integer between 1 and 5");
       updates.trust_score = input.trust;
       updatedFields.push("trust_score");
     }
@@ -2768,6 +2962,10 @@ var COMMON_MEMORY_PROPERTIES = [
   { name: "relationships", dataType: configure.dataType.TEXT_ARRAY },
   { name: "memory_ids", dataType: configure.dataType.TEXT_ARRAY },
   { name: "relationship_count", dataType: configure.dataType.INT },
+  // Rating aggregates (denormalized from Firestore individual ratings)
+  { name: "rating_sum", dataType: configure.dataType.INT },
+  { name: "rating_count", dataType: configure.dataType.INT },
+  { name: "rating_bayesian", dataType: configure.dataType.NUMBER },
   // Access tracking
   { name: "access_count", dataType: configure.dataType.NUMBER },
   { name: "last_accessed_at", dataType: configure.dataType.DATE },
@@ -2944,12 +3142,26 @@ var SpaceService = class {
   userId;
   confirmationTokenService;
   logger;
-  constructor(weaviateClient, userCollection, userId, confirmationTokenService, logger2) {
+  moderationClient;
+  constructor(weaviateClient, userCollection, userId, confirmationTokenService, logger2, options) {
     this.weaviateClient = weaviateClient;
     this.userCollection = userCollection;
     this.userId = userId;
     this.confirmationTokenService = confirmationTokenService;
     this.logger = logger2;
+    this.moderationClient = options?.moderationClient;
+  }
+  // ── Content moderation helper ────────────────────────────────────────
+  async checkModeration(content) {
+    if (!this.moderationClient)
+      return;
+    const result = await this.moderationClient.moderate(content);
+    if (!result.pass) {
+      throw new ValidationError(result.reason, {
+        moderation: ["blocked"],
+        ...result.category ? { category: [result.category] } : {}
+      });
+    }
   }
   // ── Publish (phase 1: generate confirmation token) ──────────────────
   async publish(input) {
@@ -2984,6 +3196,7 @@ var SpaceService = class {
         throw new Error(`Space '${spaceId}' only accepts content_type '${requiredType}', got '${memoryContentType ?? "undefined"}'`);
       }
     }
+    await this.checkModeration(memory.properties.content);
     const { token } = await this.confirmationTokenService.createRequest(this.userId, "publish_memory", {
       memory_id: input.memory_id,
       spaces,
@@ -3050,6 +3263,7 @@ var SpaceService = class {
     if (spaceIds.length === 0 && groupIds.length === 0) {
       throw new Error("Memory has no published copies to revise. Publish first with publish().");
     }
+    await this.checkModeration(memory.properties.content);
     const { token } = await this.confirmationTokenService.createRequest(this.userId, "revise_memory", {
       memory_id: input.memory_id,
       space_ids: spaceIds,

package/dist/server.js

@@ -807,6 +807,64 @@ function handleToolError(error, context) {
   throw new Error(detailedMessage);
 }
 
+// node_modules/@prmichaelsen/remember-core/dist/types/trust.types.js
+var TrustLevel = {
+  /** Anyone can see this, including strangers */
+  PUBLIC: 1,
+  /** Friends and known users */
+  INTERNAL: 2,
+  /** Trusted friends only */
+  CONFIDENTIAL: 3,
+  /** Close/intimate contacts only */
+  RESTRICTED: 4,
+  /** Owner only (or explicitly granted) */
+  SECRET: 5
+};
+var TRUST_LABELS = {
+  [TrustLevel.PUBLIC]: "Public",
+  [TrustLevel.INTERNAL]: "Internal",
+  [TrustLevel.CONFIDENTIAL]: "Confidential",
+  [TrustLevel.RESTRICTED]: "Restricted",
+  [TrustLevel.SECRET]: "Secret"
+};
+var ALL_TRUST_LEVELS = [
+  TrustLevel.PUBLIC,
+  TrustLevel.INTERNAL,
+  TrustLevel.CONFIDENTIAL,
+  TrustLevel.RESTRICTED,
+  TrustLevel.SECRET
+];
+function isValidTrustLevel(value) {
+  return typeof value === "number" && Number.isInteger(value) && value >= 1 && value <= 5;
+}
+function normalizeTrustScore(value) {
+  if (value == null)
+    return TrustLevel.INTERNAL;
+  if (isValidTrustLevel(value))
+    return value;
+  const inverted = 1 - value;
+  if (inverted >= 0.875)
+    return TrustLevel.SECRET;
+  if (inverted >= 0.625)
+    return TrustLevel.RESTRICTED;
+  if (inverted >= 0.375)
+    return TrustLevel.CONFIDENTIAL;
+  if (inverted >= 0.125)
+    return TrustLevel.INTERNAL;
+  return TrustLevel.PUBLIC;
+}
+
+// node_modules/@prmichaelsen/remember-core/dist/types/ghost-config.types.js
+var DEFAULT_GHOST_CONFIG = {
+  enabled: false,
+  public_ghost_enabled: false,
+  default_friend_trust: TrustLevel.INTERNAL,
+  default_public_trust: TrustLevel.PUBLIC,
+  per_user_trust: {},
+  blocked_users: [],
+  enforcement_mode: "query"
+};
+
 // node_modules/@prmichaelsen/remember-core/dist/types/preferences.types.js
 var DEFAULT_PREFERENCES = {
   templates: {
@@ -832,7 +890,7 @@ var DEFAULT_PREFERENCES = {
     share_with_memories: true
   },
   privacy: {
-    default_trust_level: 0.25,
+    default_trust_level: 2,
     allow_cross_user_access: false,
     auto_approve_requests: false,
     audit_logging: true
@@ -851,6 +909,14 @@ var DEFAULT_PREFERENCES = {
   }
 };
 
+// node_modules/@prmichaelsen/remember-core/dist/types/rating.types.js
+var RATING_MIN_THRESHOLD = 5;
+function computeRatingAvg(ratingSum, ratingCount) {
+  if (ratingCount < RATING_MIN_THRESHOLD)
+    return null;
+  return ratingSum / ratingCount;
+}
+
 // node_modules/@prmichaelsen/remember-core/dist/types/space.types.js
 var SUPPORTED_SPACES = [
   "the_void",
@@ -1307,6 +1373,35 @@ var DebugLevel2;
   DebugLevel3[DebugLevel3["TRACE"] = 5] = "TRACE";
 })(DebugLevel2 || (DebugLevel2 = {}));
 
+// node_modules/@prmichaelsen/remember-core/dist/errors/base.error.js
+var AppError = class extends Error {
+  context;
+  constructor(message, context = {}) {
+    super(message);
+    this.context = context;
+    this.name = this.constructor.name;
+    Object.setPrototypeOf(this, new.target.prototype);
+  }
+  toJSON() {
+    return {
+      kind: this.kind,
+      name: this.name,
+      message: this.message,
+      context: this.context
+    };
+  }
+};
+
+// node_modules/@prmichaelsen/remember-core/dist/errors/app-errors.js
+var ValidationError = class extends AppError {
+  fields;
+  kind = "validation";
+  constructor(message, fields = {}) {
+    super(message, { fields });
+    this.fields = fields;
+  }
+};
+
 // node_modules/@prmichaelsen/remember-core/node_modules/uuid/dist/esm/regex.js
 var regex_default = /^(?:[0-9a-f]{8}-[0-9a-f]{4}-[1-8][0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$/i;
 
@@ -1583,9 +1678,15 @@ function buildDocTypeFilters(collection, docType, filters) {
   if (filters?.relationship_count_max !== void 0) {
     filterList.push(collection.filter.byProperty("relationship_count").lessOrEqual(filters.relationship_count_max));
   }
+  if (filters?.rating_min !== void 0) {
+    filterList.push(collection.filter.byProperty("rating_bayesian").greaterOrEqual(filters.rating_min));
+  }
   if (filters?.tags && filters.tags.length > 0) {
     filterList.push(collection.filter.byProperty("tags").containsAny(filters.tags));
   }
+  if (filters?.memory_ids && filters.memory_ids.length > 0) {
+    filterList.push(collection.filter.byId().containsAny(filters.memory_ids));
+  }
   return combineFiltersWithAnd(filterList);
 }
 function buildMemoryOnlyFilters(collection, filters) {
@@ -1947,6 +2048,9 @@ var ALL_MEMORY_PROPERTIES = [
   "observation",
   "strength",
   "source",
+  "rating_sum",
+  "rating_count",
+  "rating_bayesian",
   "access_count",
   "last_accessed_at",
   "tags",
@@ -1992,14 +2096,27 @@ function buildTrustFilter(collection, accessorTrustLevel) {
 }
 
 // node_modules/@prmichaelsen/remember-core/dist/services/memory.service.js
+function normalizeDoc(doc) {
+  if ("trust_score" in doc) {
+    doc.trust_score = normalizeTrustScore(doc.trust_score);
+  }
+  const ratingSum = doc.rating_sum;
+  const ratingCount = doc.rating_count;
+  if (ratingSum !== void 0 && ratingCount !== void 0) {
+    doc.rating_avg = computeRatingAvg(ratingSum, ratingCount);
+  }
+  return doc;
+}
 var MemoryService = class {
   collection;
   userId;
   logger;
-  constructor(collection, userId, logger2) {
+  options;
+  constructor(collection, userId, logger2, options) {
     this.collection = collection;
     this.userId = userId;
     this.logger = logger2;
+    this.options = options;
   }
   /**
    * Execute a search function, retrying without the deleted_at filter if
@@ -2022,7 +2139,31 @@ var MemoryService = class {
       throw new Error(`Memory not found: ${memoryId}`);
     if (existing.properties.user_id !== this.userId)
       throw new Error("Unauthorized");
-    return { memory: { id: existing.uuid, ...existing.properties } };
+    return { memory: normalizeDoc({ id: existing.uuid, ...existing.properties }) };
+  }
+  // ── Resolve by ID (cross-collection) ─────────────────────────────────
+  /**
+   * Resolve any memory by UUID alone using the Firestore index.
+   * Requires `memoryIndex` and `weaviateClient` in constructor options.
+   */
+  async resolveById(memoryId) {
+    if (!this.options?.weaviateClient) {
+      throw new Error("resolveById requires weaviateClient in options");
+    }
+    if (this.options?.memoryIndex) {
+      const collectionName = await this.options.memoryIndex.lookup(memoryId);
+      if (collectionName) {
+        const col = this.options.weaviateClient.collections.get(collectionName);
+        const memory = await fetchMemoryWithAllProperties(col, memoryId);
+        if (memory?.properties) {
+          return {
+            memory: normalizeDoc({ id: memory.uuid, ...memory.properties }),
+            collectionName
+          };
+        }
+      }
+    }
+    return { memory: null, collectionName: null };
   }
   // ── Create ──────────────────────────────────────────────────────────
   async create(input) {
@@ -2036,12 +2177,16 @@ var MemoryService = class {
       summary: input.title,
       content_type: contentType,
       weight: input.weight ?? 0.5,
-      trust_score: input.trust ?? 0.25,
+      trust_score: normalizeTrustScore(input.trust ?? TrustLevel.INTERNAL),
       confidence: 1,
       context_summary: input.context_summary || "Memory created",
       context_conversation_id: input.context_conversation_id,
       relationship_ids: [],
       relationship_count: 0,
+      rating_sum: 0,
+      rating_count: 0,
+      rating_bayesian: 3,
+      // (0 + 15) / (0 + 5) = 3.0 (prior mean)
       access_count: 0,
       last_accessed_at: now,
       created_at: now,
@@ -2061,6 +2206,14 @@ var MemoryService = class {
     };
     const memoryId = await this.collection.data.insert({ properties });
     this.logger.info("Memory created", { memoryId, userId: this.userId });
+    if (this.options?.memoryIndex) {
+      try {
+        const collectionName = this.collection.name;
+        await this.options.memoryIndex.index(memoryId, collectionName);
+      } catch (err2) {
+        this.logger.warn?.(`[MemoryService] Index write failed for ${memoryId}: ${err2}`);
+      }
+    }
     return { memory_id: memoryId, created_at: now };
   }
   // ── Search (hybrid) ─────────────────────────────────────────────────
@@ -2098,7 +2251,7 @@ var MemoryService = class {
     const memories = [];
     const relationships = [];
     for (const obj of paginated) {
-      const doc = { id: obj.uuid, ...obj.properties };
+      const doc = normalizeDoc({ id: obj.uuid, ...obj.properties });
       if (doc.doc_type === "memory")
         memories.push(doc);
       else if (doc.doc_type === "relationship")
@@ -2141,7 +2294,7 @@ var MemoryService = class {
     const paginated = results.objects.slice(offset);
     const memories = [];
     for (const obj of paginated) {
-      const doc = { id: obj.uuid, ...obj.properties };
+      const doc = normalizeDoc({ id: obj.uuid, ...obj.properties });
       if (doc.doc_type === "memory") {
         memories.push(doc);
       }
@@ -2185,7 +2338,48 @@ var MemoryService = class {
     const paginated = results.objects.slice(offset);
     const memories = [];
     for (const obj of paginated) {
-      const doc = { id: obj.uuid, ...obj.properties };
+      const doc = normalizeDoc({ id: obj.uuid, ...obj.properties });
+      if (doc.doc_type === "memory") {
+        memories.push(doc);
+      }
+    }
+    return {
+      memories,
+      total: memories.length,
+      offset,
+      limit
+    };
+  }
+  // ── By Rating (Bayesian average) ─────────────────────────────────
+  async byRating(input) {
+    const limit = input.limit ?? 50;
+    const offset = input.offset ?? 0;
+    const direction = input.direction ?? "desc";
+    const memoryFilters = buildMemoryOnlyFilters(this.collection, input.filters);
+    const ghostFilters = [];
+    if (input.ghost_context) {
+      ghostFilters.push(buildTrustFilter(this.collection, input.ghost_context.accessor_trust_level));
+    }
+    if (!input.ghost_context?.include_ghost_content) {
+      ghostFilters.push(this.collection.filter.byProperty("content_type").notEqual("ghost"));
+    }
+    const executeQuery = async (useDeletedFilter) => {
+      const deletedFilter = useDeletedFilter ? buildDeletedFilter(this.collection, input.deleted_filter || "exclude") : null;
+      const combinedFilters = combineFiltersWithAnd([deletedFilter, memoryFilters, ...ghostFilters].filter((f) => f !== null));
+      const queryOptions = {
+        limit: limit + offset,
+        sort: this.collection.sort.byProperty("rating_bayesian", direction === "asc")
+      };
+      if (combinedFilters) {
+        queryOptions.filters = combinedFilters;
+      }
+      return this.collection.query.fetchObjects(queryOptions);
+    };
+    const results = await this.retryWithoutDeletedFilter(executeQuery);
+    const paginated = results.objects.slice(offset);
+    const memories = [];
+    for (const obj of paginated) {
+      const doc = normalizeDoc({ id: obj.uuid, ...obj.properties });
       if (doc.doc_type === "memory") {
         memories.push(doc);
       }
@@ -2244,7 +2438,7 @@ var MemoryService = class {
     if (!input.include_relationships) {
       results.objects = results.objects.filter((o) => o.properties.doc_type === "memory");
     }
-    const items = results.objects.map((obj) => ({
+    const items = results.objects.map((obj) => normalizeDoc({
       id: obj.uuid,
       ...obj.properties,
       similarity: Math.max(0, Math.min(1, 1 - (obj.metadata?.distance ?? 0)))
@@ -2273,7 +2467,7 @@ var MemoryService = class {
         opts.filters = combinedFilters;
       return this.collection.query.nearText(input.query, opts);
     });
-    const items = results.objects.map((obj) => ({
+    const items = results.objects.map((obj) => normalizeDoc({
       id: obj.uuid,
       ...obj.properties,
       relevance: Math.max(0, Math.min(1, 1 - (obj.metadata?.distance ?? 0)))
@@ -2317,8 +2511,8 @@ var MemoryService = class {
       updatedFields.push("weight");
     }
     if (input.trust !== void 0) {
-      if (input.trust < 0 || input.trust > 1)
-        throw new Error("Trust must be between 0 and 1");
+      if (!isValidTrustLevel(input.trust))
+        throw new Error("Trust must be an integer between 1 and 5");
       updates.trust_score = input.trust;
       updatedFields.push("trust_score");
     }
@@ -2772,6 +2966,10 @@ var COMMON_MEMORY_PROPERTIES = [
   { name: "relationships", dataType: configure.dataType.TEXT_ARRAY },
   { name: "memory_ids", dataType: configure.dataType.TEXT_ARRAY },
   { name: "relationship_count", dataType: configure.dataType.INT },
+  // Rating aggregates (denormalized from Firestore individual ratings)
+  { name: "rating_sum", dataType: configure.dataType.INT },
+  { name: "rating_count", dataType: configure.dataType.INT },
+  { name: "rating_bayesian", dataType: configure.dataType.NUMBER },
   // Access tracking
   { name: "access_count", dataType: configure.dataType.NUMBER },
   { name: "last_accessed_at", dataType: configure.dataType.DATE },
@@ -2948,12 +3146,26 @@ var SpaceService = class {
   userId;
   confirmationTokenService;
   logger;
-  constructor(weaviateClient, userCollection, userId, confirmationTokenService, logger2) {
+  moderationClient;
+  constructor(weaviateClient, userCollection, userId, confirmationTokenService, logger2, options) {
     this.weaviateClient = weaviateClient;
     this.userCollection = userCollection;
     this.userId = userId;
     this.confirmationTokenService = confirmationTokenService;
     this.logger = logger2;
+    this.moderationClient = options?.moderationClient;
+  }
+  // ── Content moderation helper ────────────────────────────────────────
+  async checkModeration(content) {
+    if (!this.moderationClient)
+      return;
+    const result = await this.moderationClient.moderate(content);
+    if (!result.pass) {
+      throw new ValidationError(result.reason, {
+        moderation: ["blocked"],
+        ...result.category ? { category: [result.category] } : {}
+      });
+    }
   }
   // ── Publish (phase 1: generate confirmation token) ──────────────────
   async publish(input) {
@@ -2988,6 +3200,7 @@ var SpaceService = class {
         throw new Error(`Space '${spaceId}' only accepts content_type '${requiredType}', got '${memoryContentType ?? "undefined"}'`);
       }
     }
+    await this.checkModeration(memory.properties.content);
     const { token } = await this.confirmationTokenService.createRequest(this.userId, "publish_memory", {
       memory_id: input.memory_id,
       spaces,
@@ -3054,6 +3267,7 @@ var SpaceService = class {
     if (spaceIds.length === 0 && groupIds.length === 0) {
       throw new Error("Memory has no published copies to revise. Publish first with publish().");
     }
+    await this.checkModeration(memory.properties.content);
     const { token } = await this.confirmationTokenService.createRequest(this.userId, "revise_memory", {
       memory_id: input.memory_id,
       space_ids: spaceIds,

package/esbuild.build.js

@@ -13,7 +13,10 @@ await esbuild.build({
   external: [
     'weaviate-client',
     '@prmichaelsen/firebase-admin-sdk-v8',
-    '@modelcontextprotocol/sdk'
+    '@modelcontextprotocol/sdk',
+    'unpdf',
+    'mammoth',
+    'turndown',
   ],
   banner: {
     js: "import { createRequire } from 'module'; const require = createRequire(import.meta.url);"
@@ -35,7 +38,10 @@ await esbuild.build({
   external: [
     'weaviate-client',
     '@prmichaelsen/firebase-admin-sdk-v8',
-    '@modelcontextprotocol/sdk'
+    '@modelcontextprotocol/sdk',
+    'unpdf',
+    'mammoth',
+    'turndown',
   ],
   banner: {
     js: "import { createRequire } from 'module'; const require = createRequire(import.meta.url);"

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@prmichaelsen/remember-mcp",
-  "version": "3.14.18",
+  "version": "3.14.20",
   "description": "Multi-tenant memory system MCP server with vector search and relationships",
   "main": "dist/server.js",
   "type": "module",
@@ -50,7 +50,7 @@
     "@modelcontextprotocol/sdk": "^1.0.4",
     "@prmichaelsen/firebase-admin-sdk-v8": "^2.2.0",
     "@prmichaelsen/mcp-auth": "^7.0.4",
-    "@prmichaelsen/remember-core": "^0.27.3",
+    "@prmichaelsen/remember-core": "^0.32.1",
     "dotenv": "^16.4.5",
     "uuid": "^13.0.0",
     "weaviate-client": "^3.2.0"