@prmichaelsen/remember-mcp 3.14.19 → 3.14.21

package/CHANGELOG.md

@@ -5,6 +5,14 @@ All notable changes to this project will be documented in this file.
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
 and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [3.14.21] - 2026-03-06
+
+### Added
+
+- Wire LLM auto-moderation into SpaceService publish/revise flow (task-202)
+- Create singleton `ModerationClient` from `ANTHROPIC_API_KEY` env var when present
+- Content published to spaces is now screened by Claude Haiku before storage
+
 ## [3.14.14] - 2026-03-04
 
 ### Changed

package/agent/progress.yaml

@@ -246,10 +246,10 @@ milestones:
     status: completed
     progress: 100%
     started: 2026-02-27
-    completed: 2026-02-27
+    completed: 2026-03-06
     estimated_weeks: 2
-    tasks_completed: 6
-    tasks_total: 6
+    tasks_completed: 7
+    tasks_total: 7
     notes: |
       ✅ Content moderation lifecycle and per-space/group behavioral config.
       ✅ Design: agent/design/local.moderation-and-space-config.md (Implemented)
@@ -702,6 +702,19 @@ tasks:
         ✅ CHANGELOG, design doc status, version bump 3.9.0→3.10.0
         📋 Verify all tests pass
 
+    - id: task-202
+      name: Wire LLM Moderation Client to SpaceService
+      status: completed
+      completed_date: 2026-03-06
+      file: agent/tasks/milestone-15-moderation-space-config/task-202-wire-llm-moderation-client.md
+      estimated_hours: 0.5
+      actual_hours: 0.25
+      dependencies: [task-179]
+      notes: |
+        📋 Connect createModerationClient (remember-core) to SpaceService in core-services.ts
+        📋 Auto-create when ANTHROPIC_API_KEY env var is present
+        📋 ~5 lines of code change
+
   milestone_7:
     - id: task-180
       name: Access Result & Permission Types

package/agent/tasks/milestone-15-moderation-space-config/task-202-wire-llm-moderation-client.md

@@ -0,0 +1,62 @@
+# Task 202: Wire LLM Moderation Client to SpaceService
+
+**Milestone**: M15 - Moderation & Space Config (follow-up)
+**Status**: completed
+**Estimated Hours**: 0.5
+**Priority**: P1
+**Dependencies**: M15 (completed), remember-core moderation.service.ts
+
+---
+
+## Objective
+
+Connect the `createModerationClient` from `@prmichaelsen/remember-core` to the `SpaceService` in `remember-mcp`, so that content published to spaces is automatically screened by Claude Haiku before being stored.
+
+Currently, all moderation infrastructure exists but is disconnected:
+- `remember-core` exports `createModerationClient()` (calls Anthropic Messages API with Haiku)
+- `SpaceService` accepts `{ moderationClient }` in its constructor options
+- `SpaceService.checkModeration()` calls `moderationClient.moderate()` on publish/revise
+- But `createCoreServices()` in `remember-mcp` never creates or passes a moderation client
+
+## Context
+
+- `remember-core/src/services/moderation.service.ts` — factory + types
+- `remember-core/src/services/space.service.ts:237` — constructor accepts `options?.moderationClient`
+- `remember-mcp/src/core-services.ts:50` — SpaceService created without moderation client
+- `remember-mcp-server/.env` already has `ANTHROPIC_API_KEY` set
+
+## Steps
+
+### 1. Edit `src/core-services.ts`
+
+- Import `createModerationClient` from `@prmichaelsen/remember-core`
+- Create a singleton moderation client (only when `ANTHROPIC_API_KEY` env var is present)
+- Pass `{ moderationClient }` as the 6th argument to `new SpaceService()`
+
+### 2. Build and verify
+
+- Run `npm run build` (or equivalent)
+- Verify TypeScript compiles without errors
+
+### 3. Run tests
+
+- Run existing test suite to ensure no regressions
+- Moderation client is optional, so existing tests should pass unaffected
+
+### 4. Version bump
+
+- Bump patch version in package.json
+- Update CHANGELOG.md
+
+## Verification
+
+- [ ] `createModerationClient` imported from remember-core
+- [ ] Moderation client created conditionally (only when `ANTHROPIC_API_KEY` is set)
+- [ ] Moderation client passed to SpaceService constructor
+- [ ] TypeScript compiles without errors
+- [ ] Existing tests pass
+- [ ] Version bumped
+
+## Downstream
+
+After this ships, `remember-mcp-server` just needs a dependency bump — no code changes required. `ANTHROPIC_API_KEY` is already configured in its `.env`.

package/dist/server-factory.js

@@ -886,7 +886,7 @@ var DEFAULT_PREFERENCES = {
     share_with_memories: true
   },
   privacy: {
-    default_trust_level: 0.25,
+    default_trust_level: 2,
     allow_cross_user_access: false,
     auto_approve_requests: false,
     audit_logging: true
@@ -905,6 +905,14 @@ var DEFAULT_PREFERENCES = {
   }
 };
 
+// node_modules/@prmichaelsen/remember-core/dist/types/rating.types.js
+var RATING_MIN_THRESHOLD = 5;
+function computeRatingAvg(ratingSum, ratingCount) {
+  if (ratingCount < RATING_MIN_THRESHOLD)
+    return null;
+  return ratingSum / ratingCount;
+}
+
 // node_modules/@prmichaelsen/remember-core/dist/types/space.types.js
 var SUPPORTED_SPACES = [
   "the_void",
@@ -1361,6 +1369,35 @@ var DebugLevel2;
   DebugLevel3[DebugLevel3["TRACE"] = 5] = "TRACE";
 })(DebugLevel2 || (DebugLevel2 = {}));
 
+// node_modules/@prmichaelsen/remember-core/dist/errors/base.error.js
+var AppError = class extends Error {
+  context;
+  constructor(message, context = {}) {
+    super(message);
+    this.context = context;
+    this.name = this.constructor.name;
+    Object.setPrototypeOf(this, new.target.prototype);
+  }
+  toJSON() {
+    return {
+      kind: this.kind,
+      name: this.name,
+      message: this.message,
+      context: this.context
+    };
+  }
+};
+
+// node_modules/@prmichaelsen/remember-core/dist/errors/app-errors.js
+var ValidationError = class extends AppError {
+  fields;
+  kind = "validation";
+  constructor(message, fields = {}) {
+    super(message, { fields });
+    this.fields = fields;
+  }
+};
+
 // node_modules/@prmichaelsen/remember-core/node_modules/uuid/dist/esm/regex.js
 var regex_default = /^(?:[0-9a-f]{8}-[0-9a-f]{4}-[1-8][0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$/i;
 
@@ -1637,6 +1674,9 @@ function buildDocTypeFilters(collection, docType, filters) {
   if (filters?.relationship_count_max !== void 0) {
     filterList.push(collection.filter.byProperty("relationship_count").lessOrEqual(filters.relationship_count_max));
   }
+  if (filters?.rating_min !== void 0) {
+    filterList.push(collection.filter.byProperty("rating_bayesian").greaterOrEqual(filters.rating_min));
+  }
   if (filters?.tags && filters.tags.length > 0) {
     filterList.push(collection.filter.byProperty("tags").containsAny(filters.tags));
   }
@@ -2004,6 +2044,9 @@ var ALL_MEMORY_PROPERTIES = [
   "observation",
   "strength",
   "source",
+  "rating_sum",
+  "rating_count",
+  "rating_bayesian",
   "access_count",
   "last_accessed_at",
   "tags",
@@ -2053,6 +2096,11 @@ function normalizeDoc(doc) {
   if ("trust_score" in doc) {
     doc.trust_score = normalizeTrustScore(doc.trust_score);
   }
+  const ratingSum = doc.rating_sum;
+  const ratingCount = doc.rating_count;
+  if (ratingSum !== void 0 && ratingCount !== void 0) {
+    doc.rating_avg = computeRatingAvg(ratingSum, ratingCount);
+  }
   return doc;
 }
 var MemoryService = class {
@@ -2125,12 +2173,16 @@ var MemoryService = class {
       summary: input.title,
       content_type: contentType,
       weight: input.weight ?? 0.5,
-      trust_score: input.trust ?? TrustLevel.INTERNAL,
+      trust_score: normalizeTrustScore(input.trust ?? TrustLevel.INTERNAL),
       confidence: 1,
       context_summary: input.context_summary || "Memory created",
       context_conversation_id: input.context_conversation_id,
       relationship_ids: [],
       relationship_count: 0,
+      rating_sum: 0,
+      rating_count: 0,
+      rating_bayesian: 3,
+      // (0 + 15) / (0 + 5) = 3.0 (prior mean)
       access_count: 0,
       last_accessed_at: now,
       created_at: now,
@@ -2294,6 +2346,47 @@ var MemoryService = class {
       limit
     };
   }
+  // ── By Rating (Bayesian average) ─────────────────────────────────
+  async byRating(input) {
+    const limit = input.limit ?? 50;
+    const offset = input.offset ?? 0;
+    const direction = input.direction ?? "desc";
+    const memoryFilters = buildMemoryOnlyFilters(this.collection, input.filters);
+    const ghostFilters = [];
+    if (input.ghost_context) {
+      ghostFilters.push(buildTrustFilter(this.collection, input.ghost_context.accessor_trust_level));
+    }
+    if (!input.ghost_context?.include_ghost_content) {
+      ghostFilters.push(this.collection.filter.byProperty("content_type").notEqual("ghost"));
+    }
+    const executeQuery = async (useDeletedFilter) => {
+      const deletedFilter = useDeletedFilter ? buildDeletedFilter(this.collection, input.deleted_filter || "exclude") : null;
+      const combinedFilters = combineFiltersWithAnd([deletedFilter, memoryFilters, ...ghostFilters].filter((f) => f !== null));
+      const queryOptions = {
+        limit: limit + offset,
+        sort: this.collection.sort.byProperty("rating_bayesian", direction === "asc")
+      };
+      if (combinedFilters) {
+        queryOptions.filters = combinedFilters;
+      }
+      return this.collection.query.fetchObjects(queryOptions);
+    };
+    const results = await this.retryWithoutDeletedFilter(executeQuery);
+    const paginated = results.objects.slice(offset);
+    const memories = [];
+    for (const obj of paginated) {
+      const doc = normalizeDoc({ id: obj.uuid, ...obj.properties });
+      if (doc.doc_type === "memory") {
+        memories.push(doc);
+      }
+    }
+    return {
+      memories,
+      total: memories.length,
+      offset,
+      limit
+    };
+  }
   // ── Find Similar (vector) ──────────────────────────────────────────
   async findSimilar(input) {
     if (!input.memory_id && !input.text)
@@ -2869,6 +2962,10 @@ var COMMON_MEMORY_PROPERTIES = [
   { name: "relationships", dataType: configure.dataType.TEXT_ARRAY },
   { name: "memory_ids", dataType: configure.dataType.TEXT_ARRAY },
   { name: "relationship_count", dataType: configure.dataType.INT },
+  // Rating aggregates (denormalized from Firestore individual ratings)
+  { name: "rating_sum", dataType: configure.dataType.INT },
+  { name: "rating_count", dataType: configure.dataType.INT },
+  { name: "rating_bayesian", dataType: configure.dataType.NUMBER },
   // Access tracking
   { name: "access_count", dataType: configure.dataType.NUMBER },
   { name: "last_accessed_at", dataType: configure.dataType.DATE },
@@ -3045,12 +3142,26 @@ var SpaceService = class {
   userId;
   confirmationTokenService;
   logger;
-  constructor(weaviateClient, userCollection, userId, confirmationTokenService, logger2) {
+  moderationClient;
+  constructor(weaviateClient, userCollection, userId, confirmationTokenService, logger2, options) {
     this.weaviateClient = weaviateClient;
     this.userCollection = userCollection;
     this.userId = userId;
     this.confirmationTokenService = confirmationTokenService;
     this.logger = logger2;
+    this.moderationClient = options?.moderationClient;
+  }
+  // ── Content moderation helper ────────────────────────────────────────
+  async checkModeration(content) {
+    if (!this.moderationClient)
+      return;
+    const result = await this.moderationClient.moderate(content);
+    if (!result.pass) {
+      throw new ValidationError(result.reason, {
+        moderation: ["blocked"],
+        ...result.category ? { category: [result.category] } : {}
+      });
+    }
   }
   // ── Publish (phase 1: generate confirmation token) ──────────────────
   async publish(input) {
@@ -3085,6 +3196,7 @@ var SpaceService = class {
         throw new Error(`Space '${spaceId}' only accepts content_type '${requiredType}', got '${memoryContentType ?? "undefined"}'`);
       }
     }
+    await this.checkModeration(memory.properties.content);
     const { token } = await this.confirmationTokenService.createRequest(this.userId, "publish_memory", {
       memory_id: input.memory_id,
       spaces,
@@ -3151,6 +3263,7 @@ var SpaceService = class {
     if (spaceIds.length === 0 && groupIds.length === 0) {
       throw new Error("Memory has no published copies to revise. Publish first with publish().");
     }
+    await this.checkModeration(memory.properties.content);
     const { token } = await this.confirmationTokenService.createRequest(this.userId, "revise_memory", {
       memory_id: input.memory_id,
       space_ids: spaceIds,
@@ -3718,6 +3831,111 @@ var REM_STATE_COLLECTION = `${BASE}.rem_state`;
 // node_modules/@prmichaelsen/remember-core/dist/services/rem.clustering.js
 import { Filters as Filters5 } from "weaviate-client";
 
+// node_modules/@prmichaelsen/remember-core/dist/services/moderation.service.js
+import { createHash as createHash2 } from "crypto";
+function buildModerationPrompt(content) {
+  return `You are a content moderation classifier. Evaluate the following user-generated content and determine if it should be ALLOWED or BLOCKED from a public space.
+
+You must be LENIENT. Most content should pass. Only block content that is clearly and explicitly in one of these categories:
+
+BLOCK categories:
+
+1. HATE SPEECH \u2014 Explicit dehumanization of ethnic/racial/religious groups, calls for violence against protected groups, racial slurs used to demean.
+   Examples that FAIL:
+   - "All [ethnic group] should be exterminated. They are subhuman parasites."
+   - Explicit Nazi ideology or white supremacist recruitment
+   - "[Racial slur] don't deserve rights"
+   - Genocide celebration ("The Holocaust was a good thing")
+
+2. VIOLENCE INCITEMENT \u2014 Direct threats against specific people or locations, incitement to commit specific acts of mass violence.
+   Examples that FAIL:
+   - "I'm going to find [person] and make them pay. They won't see it coming."
+   - "Someone should shoot up [location]. That would teach them."
+   Examples that PASS:
+   - Instructions or information about weapons (legally protected speech without incitement)
+   - Historical/philosophical discussion of violence
+   - Fictional violence (games, stories, D&D campaigns)
+   - Colloquial expressions ("I could kill for a burger")
+
+3. CSAM \u2014 Any sexual content involving minors. Zero tolerance.
+
+4. SELF-HARM ENCOURAGEMENT \u2014 Detailed instructions or active encouragement for self-harm or suicide.
+   Examples that PASS:
+   - Discussions about depression or mental health struggles
+   - Jokes about suicide or dark humor about self-harm
+   - Journaling about difficult feelings
+
+ALWAYS ALLOW:
+- Harsh political opinions, criticism of governments or public figures
+- Edgy humor, dark comedy, offensive jokes (without targeted dehumanization)
+- Strong opinions about religion, ideology, or social issues
+- Profanity and vulgar language
+- Controversial or uncomfortable topics
+- Educational/historical content about atrocities
+- The French Revolution, violent revolution as philosophical concept
+
+Content to evaluate:
+---
+${content}
+---
+
+Respond with ONLY valid JSON:
+{"pass":true}
+OR
+{"pass":false,"reason":"<specific, human-friendly explanation of why this was blocked>","category":"<hate_speech|extremism|violence_incitement|csam|self_harm_encouragement>"}`;
+}
+var DEFAULT_CACHE_MAX = 1e3;
+function hashContent(content) {
+  return createHash2("sha256").update(content).digest("hex");
+}
+function createModerationClient(options) {
+  const model = options.model ?? "claude-haiku-4-5-20251001";
+  const cacheMax = options.cacheMax ?? DEFAULT_CACHE_MAX;
+  const cache = /* @__PURE__ */ new Map();
+  return {
+    async moderate(content) {
+      const hash = hashContent(content);
+      const cached = cache.get(hash);
+      if (cached)
+        return cached;
+      try {
+        const response = await fetch("https://api.anthropic.com/v1/messages", {
+          method: "POST",
+          headers: {
+            "Content-Type": "application/json",
+            "x-api-key": options.apiKey,
+            "anthropic-version": "2023-06-01"
+          },
+          body: JSON.stringify({
+            model,
+            max_tokens: 256,
+            messages: [{ role: "user", content: buildModerationPrompt(content) }]
+          })
+        });
+        if (!response.ok) {
+          return { pass: false, reason: "Content moderation unavailable. Please try again later." };
+        }
+        const data = await response.json();
+        const text = data.content?.[0]?.text ?? "";
+        const parsed = JSON.parse(text);
+        const result = {
+          pass: parsed.pass === true,
+          reason: parsed.reason ?? "",
+          category: parsed.pass ? void 0 : parsed.category
+        };
+        if (cache.size >= cacheMax) {
+          const oldest = cache.keys().next().value;
+          cache.delete(oldest);
+        }
+        cache.set(hash, result);
+        return result;
+      } catch {
+        return { pass: false, reason: "Content moderation unavailable. Please try again later." };
+      }
+    }
+  };
+}
+
 // src/weaviate/schema.ts
 init_logger();
 
@@ -3834,6 +4052,7 @@ function getMemoryCollection(userId) {
 var coreLogger = createLogger("info");
 var tokenService = new ConfirmationTokenService(coreLogger);
 var preferencesService = new PreferencesDatabaseService(coreLogger);
+var moderationClient = process.env.ANTHROPIC_API_KEY ? createModerationClient({ apiKey: process.env.ANTHROPIC_API_KEY }) : void 0;
 var coreServicesCache = /* @__PURE__ */ new Map();
 function createCoreServices(userId) {
   const cached = coreServicesCache.get(userId);
@@ -3844,7 +4063,7 @@ function createCoreServices(userId) {
   const services = {
     memory: new MemoryService(collection, userId, coreLogger),
     relationship: new RelationshipService(collection, userId, coreLogger),
-    space: new SpaceService(weaviateClient, collection, userId, tokenService, coreLogger),
+    space: new SpaceService(weaviateClient, collection, userId, tokenService, coreLogger, { moderationClient }),
     preferences: preferencesService,
     token: tokenService
   };

package/dist/server.js

@@ -890,7 +890,7 @@ var DEFAULT_PREFERENCES = {
     share_with_memories: true
   },
   privacy: {
-    default_trust_level: 0.25,
+    default_trust_level: 2,
     allow_cross_user_access: false,
     auto_approve_requests: false,
     audit_logging: true
@@ -909,6 +909,14 @@ var DEFAULT_PREFERENCES = {
   }
 };
 
+// node_modules/@prmichaelsen/remember-core/dist/types/rating.types.js
+var RATING_MIN_THRESHOLD = 5;
+function computeRatingAvg(ratingSum, ratingCount) {
+  if (ratingCount < RATING_MIN_THRESHOLD)
+    return null;
+  return ratingSum / ratingCount;
+}
+
 // node_modules/@prmichaelsen/remember-core/dist/types/space.types.js
 var SUPPORTED_SPACES = [
   "the_void",
@@ -1365,6 +1373,35 @@ var DebugLevel2;
   DebugLevel3[DebugLevel3["TRACE"] = 5] = "TRACE";
 })(DebugLevel2 || (DebugLevel2 = {}));
 
+// node_modules/@prmichaelsen/remember-core/dist/errors/base.error.js
+var AppError = class extends Error {
+  context;
+  constructor(message, context = {}) {
+    super(message);
+    this.context = context;
+    this.name = this.constructor.name;
+    Object.setPrototypeOf(this, new.target.prototype);
+  }
+  toJSON() {
+    return {
+      kind: this.kind,
+      name: this.name,
+      message: this.message,
+      context: this.context
+    };
+  }
+};
+
+// node_modules/@prmichaelsen/remember-core/dist/errors/app-errors.js
+var ValidationError = class extends AppError {
+  fields;
+  kind = "validation";
+  constructor(message, fields = {}) {
+    super(message, { fields });
+    this.fields = fields;
+  }
+};
+
 // node_modules/@prmichaelsen/remember-core/node_modules/uuid/dist/esm/regex.js
 var regex_default = /^(?:[0-9a-f]{8}-[0-9a-f]{4}-[1-8][0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$/i;
 
@@ -1641,6 +1678,9 @@ function buildDocTypeFilters(collection, docType, filters) {
   if (filters?.relationship_count_max !== void 0) {
     filterList.push(collection.filter.byProperty("relationship_count").lessOrEqual(filters.relationship_count_max));
   }
+  if (filters?.rating_min !== void 0) {
+    filterList.push(collection.filter.byProperty("rating_bayesian").greaterOrEqual(filters.rating_min));
+  }
   if (filters?.tags && filters.tags.length > 0) {
     filterList.push(collection.filter.byProperty("tags").containsAny(filters.tags));
   }
@@ -2008,6 +2048,9 @@ var ALL_MEMORY_PROPERTIES = [
   "observation",
   "strength",
   "source",
+  "rating_sum",
+  "rating_count",
+  "rating_bayesian",
   "access_count",
   "last_accessed_at",
   "tags",
@@ -2057,6 +2100,11 @@ function normalizeDoc(doc) {
   if ("trust_score" in doc) {
     doc.trust_score = normalizeTrustScore(doc.trust_score);
   }
+  const ratingSum = doc.rating_sum;
+  const ratingCount = doc.rating_count;
+  if (ratingSum !== void 0 && ratingCount !== void 0) {
+    doc.rating_avg = computeRatingAvg(ratingSum, ratingCount);
+  }
   return doc;
 }
 var MemoryService = class {
@@ -2129,12 +2177,16 @@ var MemoryService = class {
       summary: input.title,
       content_type: contentType,
       weight: input.weight ?? 0.5,
-      trust_score: input.trust ?? TrustLevel.INTERNAL,
+      trust_score: normalizeTrustScore(input.trust ?? TrustLevel.INTERNAL),
       confidence: 1,
       context_summary: input.context_summary || "Memory created",
       context_conversation_id: input.context_conversation_id,
       relationship_ids: [],
       relationship_count: 0,
+      rating_sum: 0,
+      rating_count: 0,
+      rating_bayesian: 3,
+      // (0 + 15) / (0 + 5) = 3.0 (prior mean)
       access_count: 0,
       last_accessed_at: now,
       created_at: now,
@@ -2298,6 +2350,47 @@ var MemoryService = class {
       limit
     };
   }
+  // ── By Rating (Bayesian average) ─────────────────────────────────
+  async byRating(input) {
+    const limit = input.limit ?? 50;
+    const offset = input.offset ?? 0;
+    const direction = input.direction ?? "desc";
+    const memoryFilters = buildMemoryOnlyFilters(this.collection, input.filters);
+    const ghostFilters = [];
+    if (input.ghost_context) {
+      ghostFilters.push(buildTrustFilter(this.collection, input.ghost_context.accessor_trust_level));
+    }
+    if (!input.ghost_context?.include_ghost_content) {
+      ghostFilters.push(this.collection.filter.byProperty("content_type").notEqual("ghost"));
+    }
+    const executeQuery = async (useDeletedFilter) => {
+      const deletedFilter = useDeletedFilter ? buildDeletedFilter(this.collection, input.deleted_filter || "exclude") : null;
+      const combinedFilters = combineFiltersWithAnd([deletedFilter, memoryFilters, ...ghostFilters].filter((f) => f !== null));
+      const queryOptions = {
+        limit: limit + offset,
+        sort: this.collection.sort.byProperty("rating_bayesian", direction === "asc")
+      };
+      if (combinedFilters) {
+        queryOptions.filters = combinedFilters;
+      }
+      return this.collection.query.fetchObjects(queryOptions);
+    };
+    const results = await this.retryWithoutDeletedFilter(executeQuery);
+    const paginated = results.objects.slice(offset);
+    const memories = [];
+    for (const obj of paginated) {
+      const doc = normalizeDoc({ id: obj.uuid, ...obj.properties });
+      if (doc.doc_type === "memory") {
+        memories.push(doc);
+      }
+    }
+    return {
+      memories,
+      total: memories.length,
+      offset,
+      limit
+    };
+  }
   // ── Find Similar (vector) ──────────────────────────────────────────
   async findSimilar(input) {
     if (!input.memory_id && !input.text)
@@ -2873,6 +2966,10 @@ var COMMON_MEMORY_PROPERTIES = [
   { name: "relationships", dataType: configure.dataType.TEXT_ARRAY },
   { name: "memory_ids", dataType: configure.dataType.TEXT_ARRAY },
   { name: "relationship_count", dataType: configure.dataType.INT },
+  // Rating aggregates (denormalized from Firestore individual ratings)
+  { name: "rating_sum", dataType: configure.dataType.INT },
+  { name: "rating_count", dataType: configure.dataType.INT },
+  { name: "rating_bayesian", dataType: configure.dataType.NUMBER },
   // Access tracking
   { name: "access_count", dataType: configure.dataType.NUMBER },
   { name: "last_accessed_at", dataType: configure.dataType.DATE },
@@ -3049,12 +3146,26 @@ var SpaceService = class {
   userId;
   confirmationTokenService;
   logger;
-  constructor(weaviateClient, userCollection, userId, confirmationTokenService, logger2) {
+  moderationClient;
+  constructor(weaviateClient, userCollection, userId, confirmationTokenService, logger2, options) {
     this.weaviateClient = weaviateClient;
     this.userCollection = userCollection;
     this.userId = userId;
     this.confirmationTokenService = confirmationTokenService;
     this.logger = logger2;
+    this.moderationClient = options?.moderationClient;
+  }
+  // ── Content moderation helper ────────────────────────────────────────
+  async checkModeration(content) {
+    if (!this.moderationClient)
+      return;
+    const result = await this.moderationClient.moderate(content);
+    if (!result.pass) {
+      throw new ValidationError(result.reason, {
+        moderation: ["blocked"],
+        ...result.category ? { category: [result.category] } : {}
+      });
+    }
   }
   // ── Publish (phase 1: generate confirmation token) ──────────────────
   async publish(input) {
@@ -3089,6 +3200,7 @@ var SpaceService = class {
         throw new Error(`Space '${spaceId}' only accepts content_type '${requiredType}', got '${memoryContentType ?? "undefined"}'`);
       }
     }
+    await this.checkModeration(memory.properties.content);
     const { token } = await this.confirmationTokenService.createRequest(this.userId, "publish_memory", {
       memory_id: input.memory_id,
       spaces,
@@ -3155,6 +3267,7 @@ var SpaceService = class {
     if (spaceIds.length === 0 && groupIds.length === 0) {
       throw new Error("Memory has no published copies to revise. Publish first with publish().");
     }
+    await this.checkModeration(memory.properties.content);
     const { token } = await this.confirmationTokenService.createRequest(this.userId, "revise_memory", {
       memory_id: input.memory_id,
       space_ids: spaceIds,
@@ -3722,6 +3835,111 @@ var REM_STATE_COLLECTION = `${BASE}.rem_state`;
 // node_modules/@prmichaelsen/remember-core/dist/services/rem.clustering.js
 import { Filters as Filters5 } from "weaviate-client";
 
+// node_modules/@prmichaelsen/remember-core/dist/services/moderation.service.js
+import { createHash as createHash2 } from "crypto";
+function buildModerationPrompt(content) {
+  return `You are a content moderation classifier. Evaluate the following user-generated content and determine if it should be ALLOWED or BLOCKED from a public space.
+
+You must be LENIENT. Most content should pass. Only block content that is clearly and explicitly in one of these categories:
+
+BLOCK categories:
+
+1. HATE SPEECH \u2014 Explicit dehumanization of ethnic/racial/religious groups, calls for violence against protected groups, racial slurs used to demean.
+   Examples that FAIL:
+   - "All [ethnic group] should be exterminated. They are subhuman parasites."
+   - Explicit Nazi ideology or white supremacist recruitment
+   - "[Racial slur] don't deserve rights"
+   - Genocide celebration ("The Holocaust was a good thing")
+
+2. VIOLENCE INCITEMENT \u2014 Direct threats against specific people or locations, incitement to commit specific acts of mass violence.
+   Examples that FAIL:
+   - "I'm going to find [person] and make them pay. They won't see it coming."
+   - "Someone should shoot up [location]. That would teach them."
+   Examples that PASS:
+   - Instructions or information about weapons (legally protected speech without incitement)
+   - Historical/philosophical discussion of violence
+   - Fictional violence (games, stories, D&D campaigns)
+   - Colloquial expressions ("I could kill for a burger")
+
+3. CSAM \u2014 Any sexual content involving minors. Zero tolerance.
+
+4. SELF-HARM ENCOURAGEMENT \u2014 Detailed instructions or active encouragement for self-harm or suicide.
+   Examples that PASS:
+   - Discussions about depression or mental health struggles
+   - Jokes about suicide or dark humor about self-harm
+   - Journaling about difficult feelings
+
+ALWAYS ALLOW:
+- Harsh political opinions, criticism of governments or public figures
+- Edgy humor, dark comedy, offensive jokes (without targeted dehumanization)
+- Strong opinions about religion, ideology, or social issues
+- Profanity and vulgar language
+- Controversial or uncomfortable topics
+- Educational/historical content about atrocities
+- The French Revolution, violent revolution as philosophical concept
+
+Content to evaluate:
+---
+${content}
+---
+
+Respond with ONLY valid JSON:
+{"pass":true}
+OR
+{"pass":false,"reason":"<specific, human-friendly explanation of why this was blocked>","category":"<hate_speech|extremism|violence_incitement|csam|self_harm_encouragement>"}`;
+}
+var DEFAULT_CACHE_MAX = 1e3;
+function hashContent(content) {
+  return createHash2("sha256").update(content).digest("hex");
+}
+function createModerationClient(options) {
+  const model = options.model ?? "claude-haiku-4-5-20251001";
+  const cacheMax = options.cacheMax ?? DEFAULT_CACHE_MAX;
+  const cache = /* @__PURE__ */ new Map();
+  return {
+    async moderate(content) {
+      const hash = hashContent(content);
+      const cached = cache.get(hash);
+      if (cached)
+        return cached;
+      try {
+        const response = await fetch("https://api.anthropic.com/v1/messages", {
+          method: "POST",
+          headers: {
+            "Content-Type": "application/json",
+            "x-api-key": options.apiKey,
+            "anthropic-version": "2023-06-01"
+          },
+          body: JSON.stringify({
+            model,
+            max_tokens: 256,
+            messages: [{ role: "user", content: buildModerationPrompt(content) }]
+          })
+        });
+        if (!response.ok) {
+          return { pass: false, reason: "Content moderation unavailable. Please try again later." };
+        }
+        const data = await response.json();
+        const text = data.content?.[0]?.text ?? "";
+        const parsed = JSON.parse(text);
+        const result = {
+          pass: parsed.pass === true,
+          reason: parsed.reason ?? "",
+          category: parsed.pass ? void 0 : parsed.category
+        };
+        if (cache.size >= cacheMax) {
+          const oldest = cache.keys().next().value;
+          cache.delete(oldest);
+        }
+        cache.set(hash, result);
+        return result;
+      } catch {
+        return { pass: false, reason: "Content moderation unavailable. Please try again later." };
+      }
+    }
+  };
+}
+
 // src/weaviate/schema.ts
 init_logger();
 
@@ -3838,6 +4056,7 @@ function getMemoryCollection(userId) {
 var coreLogger = createLogger("info");
 var tokenService = new ConfirmationTokenService(coreLogger);
 var preferencesService = new PreferencesDatabaseService(coreLogger);
+var moderationClient = process.env.ANTHROPIC_API_KEY ? createModerationClient({ apiKey: process.env.ANTHROPIC_API_KEY }) : void 0;
 var coreServicesCache = /* @__PURE__ */ new Map();
 function createCoreServices(userId) {
   const cached = coreServicesCache.get(userId);
@@ -3848,7 +4067,7 @@ function createCoreServices(userId) {
   const services = {
     memory: new MemoryService(collection, userId, coreLogger),
     relationship: new RelationshipService(collection, userId, coreLogger),
-    space: new SpaceService(weaviateClient, collection, userId, tokenService, coreLogger),
+    space: new SpaceService(weaviateClient, collection, userId, tokenService, coreLogger, { moderationClient }),
     preferences: preferencesService,
     token: tokenService
   };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@prmichaelsen/remember-mcp",
-  "version": "3.14.19",
+  "version": "3.14.21",
   "description": "Multi-tenant memory system MCP server with vector search and relationships",
   "main": "dist/server.js",
   "type": "module",
@@ -50,7 +50,7 @@
     "@modelcontextprotocol/sdk": "^1.0.4",
     "@prmichaelsen/firebase-admin-sdk-v8": "^2.2.0",
     "@prmichaelsen/mcp-auth": "^7.0.4",
-    "@prmichaelsen/remember-core": "^0.30.0",
+    "@prmichaelsen/remember-core": "^0.32.1",
     "dotenv": "^16.4.5",
     "uuid": "^13.0.0",
     "weaviate-client": "^3.2.0"

package/src/core-services.ts

@@ -12,8 +12,9 @@ import {
   PreferencesDatabaseService,
   ConfirmationTokenService,
   createLogger,
+  createModerationClient,
 } from '@prmichaelsen/remember-core';
-import type { Logger } from '@prmichaelsen/remember-core';
+import type { Logger, ModerationClient } from '@prmichaelsen/remember-core';
 import { getWeaviateClient } from './weaviate/client.js';
 import { getMemoryCollection } from './weaviate/schema.js';
 
@@ -29,6 +30,9 @@ export interface CoreServices {
 const coreLogger: Logger = createLogger('info');
 const tokenService = new ConfirmationTokenService(coreLogger);
 const preferencesService = new PreferencesDatabaseService(coreLogger);
+const moderationClient: ModerationClient | undefined = process.env.ANTHROPIC_API_KEY
+  ? createModerationClient({ apiKey: process.env.ANTHROPIC_API_KEY })
+  : undefined;
 
 /** Cached CoreServices per userId — avoids re-instantiation on every tool call */
 const coreServicesCache = new Map<string, CoreServices>();
@@ -47,7 +51,7 @@ export function createCoreServices(userId: string): CoreServices {
   const services: CoreServices = {
     memory: new MemoryService(collection, userId, coreLogger),
     relationship: new RelationshipService(collection, userId, coreLogger),
-    space: new SpaceService(weaviateClient, collection, userId, tokenService, coreLogger),
+    space: new SpaceService(weaviateClient, collection, userId, tokenService, coreLogger, { moderationClient }),
     preferences: preferencesService,
     token: tokenService,
   };