@prmichaelsen/remember-mcp 3.15.1 → 3.15.3

package/dist/server-factory.js

@@ -1397,6 +1397,24 @@ var ValidationError = class extends AppError {
     this.fields = fields;
   }
 };
+var NotFoundError = class extends AppError {
+  resource;
+  id;
+  kind = "not_found";
+  constructor(resource, id) {
+    super(`${resource} not found: ${id}`, { resource, id });
+    this.resource = resource;
+    this.id = id;
+  }
+};
+var ForbiddenError = class extends AppError {
+  requiredRole;
+  kind = "forbidden";
+  constructor(message = "Access denied", requiredRole) {
+    super(message, { requiredRole });
+    this.requiredRole = requiredRole;
+  }
+};
 
 // node_modules/@prmichaelsen/remember-core/node_modules/uuid/dist/esm/regex.js
 var regex_default = /^(?:[0-9a-f]{8}-[0-9a-f]{4}-[1-8][0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$/i;
@@ -3272,32 +3290,32 @@ var SpaceService = class {
     const spaces = input.spaces || [];
     const groups = input.groups || [];
     if (spaces.length === 0 && groups.length === 0) {
-      throw new Error("Must specify at least one space or group to publish to");
+      throw new ValidationError("Must specify at least one space or group to publish to");
     }
     if (spaces.length > 0) {
       const invalidSpaces = spaces.filter((s) => !isValidSpaceId(s));
       if (invalidSpaces.length > 0) {
-        throw new Error(`Invalid space IDs: ${invalidSpaces.join(", ")}`);
+        throw new ValidationError(`Invalid space IDs: ${invalidSpaces.join(", ")}`, { spaces: invalidSpaces });
       }
     }
     if (groups.length > 0) {
       const invalidGroups = groups.filter((g) => !g || g.includes(".") || g.trim() === "");
       if (invalidGroups.length > 0) {
-        throw new Error("Group IDs cannot be empty or contain dots");
+        throw new ValidationError("Group IDs cannot be empty or contain dots");
       }
     }
     const memory = await fetchMemoryWithAllProperties(this.userCollection, input.memory_id);
     if (!memory)
-      throw new Error(`Memory not found: ${input.memory_id}`);
+      throw new NotFoundError("Memory", input.memory_id);
     if (memory.properties.user_id !== this.userId)
-      throw new Error("Permission denied: not memory owner");
+      throw new ForbiddenError("Permission denied: not memory owner");
     if (memory.properties.doc_type !== "memory")
-      throw new Error("Only memories can be published");
+      throw new ValidationError("Only memories can be published");
     const memoryContentType = memory.properties.content_type;
     for (const spaceId of spaces) {
       const requiredType = SPACE_CONTENT_TYPE_RESTRICTIONS[spaceId];
       if (requiredType && memoryContentType !== requiredType) {
-        throw new Error(`Space '${spaceId}' only accepts content_type '${requiredType}', got '${memoryContentType ?? "undefined"}'`);
+        throw new ValidationError(`Space '${spaceId}' only accepts content_type '${requiredType}', got '${memoryContentType ?? "undefined"}'`);
       }
     }
     await this.checkModeration(memory.properties.content);
@@ -3320,25 +3338,25 @@ var SpaceService = class {
     const spaces = input.spaces || [];
     const groups = input.groups || [];
     if (spaces.length === 0 && groups.length === 0) {
-      throw new Error("Must specify at least one space or group to retract from");
+      throw new ValidationError("Must specify at least one space or group to retract from");
     }
     if (groups.length > 0) {
       const invalidGroups = groups.filter((g) => g.includes("."));
       if (invalidGroups.length > 0) {
-        throw new Error(`Group IDs cannot contain dots: ${invalidGroups.join(", ")}`);
+        throw new ValidationError(`Group IDs cannot contain dots: ${invalidGroups.join(", ")}`);
       }
     }
     const memory = await fetchMemoryWithAllProperties(this.userCollection, input.memory_id);
     if (!memory)
-      throw new Error(`Memory not found: ${input.memory_id}`);
+      throw new NotFoundError("Memory", input.memory_id);
     if (memory.properties.user_id !== this.userId)
-      throw new Error("Permission denied: not memory owner");
+      throw new ForbiddenError("Permission denied: not memory owner");
     const currentSpaceIds = Array.isArray(memory.properties.space_ids) ? memory.properties.space_ids : [];
     const currentGroupIds = Array.isArray(memory.properties.group_ids) ? memory.properties.group_ids : [];
     const notPublishedSpaces = spaces.filter((s) => !currentSpaceIds.includes(s));
     const notPublishedGroups = groups.filter((g) => !currentGroupIds.includes(g));
     if (notPublishedSpaces.length > 0 || notPublishedGroups.length > 0) {
-      throw new Error(`Memory is not published to some destinations. Not in spaces: [${notPublishedSpaces.join(", ")}], Not in groups: [${notPublishedGroups.join(", ")}]`);
+      throw new ValidationError(`Memory is not published to some destinations. Not in spaces: [${notPublishedSpaces.join(", ")}], Not in groups: [${notPublishedGroups.join(", ")}]`);
     }
     const { token } = await this.confirmationTokenService.createRequest(this.userId, "retract_memory", {
       memory_id: input.memory_id,
@@ -3359,13 +3377,13 @@ var SpaceService = class {
   async revise(input) {
     const memory = await fetchMemoryWithAllProperties(this.userCollection, input.memory_id);
     if (!memory)
-      throw new Error(`Memory not found: ${input.memory_id}`);
+      throw new NotFoundError("Memory", input.memory_id);
     if (memory.properties.user_id !== this.userId)
-      throw new Error("Permission denied: not memory owner");
+      throw new ForbiddenError("Permission denied: not memory owner");
     const spaceIds = Array.isArray(memory.properties.space_ids) ? memory.properties.space_ids : [];
     const groupIds = Array.isArray(memory.properties.group_ids) ? memory.properties.group_ids : [];
     if (spaceIds.length === 0 && groupIds.length === 0) {
-      throw new Error("Memory has no published copies to revise. Publish first with publish().");
+      throw new ValidationError("Memory has no published copies to revise. Publish first with publish().");
     }
     await this.checkModeration(memory.properties.content);
     const { token } = await this.confirmationTokenService.createRequest(this.userId, "revise_memory", {
@@ -3385,7 +3403,7 @@ var SpaceService = class {
   async confirm(input) {
     const request = await this.confirmationTokenService.confirmRequest(this.userId, input.token);
     if (!request) {
-      throw new Error("Invalid or expired confirmation token");
+      throw new ValidationError("Invalid or expired confirmation token");
     }
     if (request.action === "publish_memory") {
       return this.executePublish(request);
@@ -3396,31 +3414,31 @@ var SpaceService = class {
     if (request.action === "revise_memory") {
       return this.executeRevise(request);
     }
-    throw new Error(`Unknown action type: ${request.action}`);
+    throw new ValidationError(`Unknown action type: ${request.action}`);
   }
   // ── Deny ────────────────────────────────────────────────────────────
   async deny(input) {
     const success = await this.confirmationTokenService.denyRequest(this.userId, input.token);
     if (!success) {
-      throw new Error("Token not found or already used");
+      throw new NotFoundError("Token", input.token);
     }
     return { success: true };
   }
   // ── Moderate ────────────────────────────────────────────────────────
   async moderate(input, authContext) {
     if (!input.space_id && !input.group_id) {
-      throw new Error("Must specify either space_id or group_id");
+      throw new ValidationError("Must specify either space_id or group_id");
     }
     if (!ACTION_TO_STATUS[input.action]) {
-      throw new Error(`Invalid action: ${input.action}. Must be approve, reject, or remove`);
+      throw new ValidationError(`Invalid action: ${input.action}. Must be approve, reject, or remove`);
     }
     if (input.group_id) {
       if (!canModerate(authContext, input.group_id)) {
-        throw new Error(`Moderator access required for group ${input.group_id}`);
+        throw new ForbiddenError(`Moderator access required for group ${input.group_id}`);
       }
     } else if (input.space_id) {
       if (!canModerateAny(authContext)) {
-        throw new Error("Moderator access required to moderate memories in spaces");
+        throw new ForbiddenError("Moderator access required to moderate memories in spaces");
       }
     }
     let collection;
@@ -3432,8 +3450,7 @@ var SpaceService = class {
     }
     const memory = await fetchMemoryWithAllProperties(collection, input.memory_id);
     if (!memory) {
-      const location2 = input.group_id ? `group ${input.group_id}` : `space ${input.space_id}`;
-      throw new Error(`Published memory ${input.memory_id} not found in ${location2}`);
+      throw new NotFoundError("Published memory", input.memory_id);
     }
     const newStatus = ACTION_TO_STATUS[input.action];
     const now = (/* @__PURE__ */ new Date()).toISOString();
@@ -3472,24 +3489,24 @@ var SpaceService = class {
     if (spaces.length > 0) {
       const invalidSpaces = spaces.filter((s) => !isValidSpaceId(s));
       if (invalidSpaces.length > 0) {
-        throw new Error(`Invalid space IDs: ${invalidSpaces.join(", ")}`);
+        throw new ValidationError(`Invalid space IDs: ${invalidSpaces.join(", ")}`, { spaces: invalidSpaces });
       }
     }
     if (groups.length > 0) {
       const invalidGroups = groups.filter((g) => !g || g.includes(".") || g.trim() === "");
       if (invalidGroups.length > 0) {
-        throw new Error("Group IDs cannot be empty or contain dots");
+        throw new ValidationError("Group IDs cannot be empty or contain dots");
       }
     }
     const moderationFilter = input.moderation_filter || "approved";
     if (moderationFilter !== "approved") {
       for (const groupId of groups) {
         if (!canModerate(authContext, groupId)) {
-          throw new Error(`Moderator access required to view ${moderationFilter} memories in group ${groupId}`);
+          throw new ForbiddenError(`Moderator access required to view ${moderationFilter} memories in group ${groupId}`);
         }
       }
       if ((spaces.length > 0 || groups.length === 0) && !canModerateAny(authContext)) {
-        throw new Error(`Moderator access required to view ${moderationFilter} memories in spaces`);
+        throw new ForbiddenError(`Moderator access required to view ${moderationFilter} memories in spaces`);
       }
     }
     const fetchLimit = (limit + offset) * Math.max(1, groups.length + (spaces.length > 0 || groups.length === 0 ? 1 : 0));
@@ -3549,16 +3566,16 @@ var SpaceService = class {
   // ── Query Space ─────────────────────────────────────────────────────
   async query(input, authContext) {
     if (!input.question?.trim())
-      throw new Error("Question cannot be empty");
+      throw new ValidationError("Question cannot be empty");
     if (input.spaces.length === 0)
-      throw new Error("Must specify at least one space to query");
+      throw new ValidationError("Must specify at least one space to query");
     const invalidSpaces = input.spaces.filter((s) => !isValidSpaceId(s));
     if (invalidSpaces.length > 0) {
-      throw new Error(`Invalid space IDs: ${invalidSpaces.join(", ")}`);
+      throw new ValidationError(`Invalid space IDs: ${invalidSpaces.join(", ")}`, { spaces: invalidSpaces });
     }
     const moderationFilterValue = input.moderation_filter || "approved";
     if (moderationFilterValue !== "approved" && !canModerateAny(authContext)) {
-      throw new Error(`Moderator access required to view ${moderationFilterValue} memories in spaces`);
+      throw new ForbiddenError(`Moderator access required to view ${moderationFilterValue} memories in spaces`);
     }
     const publicCollection = await ensurePublicCollection(this.weaviateClient);
     const filterList = [];
@@ -3609,13 +3626,13 @@ var SpaceService = class {
     const spaces = request.payload.spaces || [];
     const groups = request.payload.groups || [];
     if (spaces.length === 0 && groups.length === 0) {
-      throw new Error("No destinations in publish request");
+      throw new ValidationError("No destinations in publish request");
     }
     const originalMemory = await fetchMemoryWithAllProperties(this.userCollection, request.payload.memory_id);
     if (!originalMemory)
-      throw new Error(`Memory ${request.payload.memory_id} no longer exists`);
+      throw new NotFoundError("Memory", request.payload.memory_id);
     if (originalMemory.properties.user_id !== this.userId)
-      throw new Error("Permission denied");
+      throw new ForbiddenError("Permission denied");
     const compositeId = generateCompositeId(this.userId, request.payload.memory_id);
     const weaviateId = compositeIdToUuid(compositeId);
     const existingSpaceIds = Array.isArray(originalMemory.properties.space_ids) ? originalMemory.properties.space_ids : [];
@@ -3751,7 +3768,7 @@ var SpaceService = class {
     const groups = request.payload.groups || [];
     const sourceMemory = await fetchMemoryWithAllProperties(this.userCollection, request.payload.memory_id);
     if (!sourceMemory)
-      throw new Error(`Source memory ${request.payload.memory_id} no longer exists`);
+      throw new NotFoundError("Memory", request.payload.memory_id);
     const currentSpaceIds = Array.isArray(sourceMemory.properties.space_ids) ? sourceMemory.properties.space_ids : [];
     const currentGroupIds = Array.isArray(sourceMemory.properties.group_ids) ? sourceMemory.properties.group_ids : [];
     const compositeId = generateCompositeId(this.userId, request.payload.memory_id);
@@ -3831,9 +3848,9 @@ var SpaceService = class {
     const { memory_id, space_ids = [], group_ids = [] } = request.payload;
     const sourceMemory = await fetchMemoryWithAllProperties(this.userCollection, memory_id);
     if (!sourceMemory)
-      throw new Error(`Source memory ${memory_id} no longer exists`);
+      throw new NotFoundError("Memory", memory_id);
     if (sourceMemory.properties.user_id !== this.userId)
-      throw new Error("Permission denied");
+      throw new ForbiddenError("Permission denied");
     const newContent = String(sourceMemory.properties.content ?? "");
     const revisedAt = (/* @__PURE__ */ new Date()).toISOString();
     const compositeId = generateCompositeId(this.userId, memory_id);
@@ -4064,10 +4081,14 @@ function createModerationClient(options) {
           })
         });
         if (!response.ok) {
-          return { pass: false, reason: "Content moderation unavailable. Please try again later." };
+          const errorBody = await response.text().catch(() => "");
+          const msg = `[moderation] Anthropic API error: ${response.status} ${response.statusText} ${errorBody}`;
+          console.error(msg);
+          return { pass: false, reason: msg };
         }
         const data = await response.json();
-        const text = data.content?.[0]?.text ?? "";
+        const rawText = data.content?.[0]?.text ?? "";
+        const text = rawText.replace(/^```(?:json)?\s*\n?/i, "").replace(/\n?```\s*$/i, "").trim();
         const parsed = JSON.parse(text);
         const result = {
           pass: parsed.pass === true,
@@ -4080,8 +4101,10 @@ function createModerationClient(options) {
         }
         cache.set(hash, result);
         return result;
-      } catch {
-        return { pass: false, reason: "Content moderation unavailable. Please try again later." };
+      } catch (err2) {
+        const msg = `[moderation] Unexpected error: ${err2 instanceof Error ? err2.message : String(err2)}`;
+        console.error(msg, err2);
+        return { pass: false, reason: msg };
       }
     }
   };

package/dist/server.js

@@ -1401,6 +1401,24 @@ var ValidationError = class extends AppError {
     this.fields = fields;
   }
 };
+var NotFoundError = class extends AppError {
+  resource;
+  id;
+  kind = "not_found";
+  constructor(resource, id) {
+    super(`${resource} not found: ${id}`, { resource, id });
+    this.resource = resource;
+    this.id = id;
+  }
+};
+var ForbiddenError = class extends AppError {
+  requiredRole;
+  kind = "forbidden";
+  constructor(message = "Access denied", requiredRole) {
+    super(message, { requiredRole });
+    this.requiredRole = requiredRole;
+  }
+};
 
 // node_modules/@prmichaelsen/remember-core/node_modules/uuid/dist/esm/regex.js
 var regex_default = /^(?:[0-9a-f]{8}-[0-9a-f]{4}-[1-8][0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$/i;
@@ -3276,32 +3294,32 @@ var SpaceService = class {
     const spaces = input.spaces || [];
     const groups = input.groups || [];
     if (spaces.length === 0 && groups.length === 0) {
-      throw new Error("Must specify at least one space or group to publish to");
+      throw new ValidationError("Must specify at least one space or group to publish to");
     }
     if (spaces.length > 0) {
       const invalidSpaces = spaces.filter((s) => !isValidSpaceId(s));
       if (invalidSpaces.length > 0) {
-        throw new Error(`Invalid space IDs: ${invalidSpaces.join(", ")}`);
+        throw new ValidationError(`Invalid space IDs: ${invalidSpaces.join(", ")}`, { spaces: invalidSpaces });
       }
     }
     if (groups.length > 0) {
       const invalidGroups = groups.filter((g) => !g || g.includes(".") || g.trim() === "");
       if (invalidGroups.length > 0) {
-        throw new Error("Group IDs cannot be empty or contain dots");
+        throw new ValidationError("Group IDs cannot be empty or contain dots");
       }
     }
     const memory = await fetchMemoryWithAllProperties(this.userCollection, input.memory_id);
     if (!memory)
-      throw new Error(`Memory not found: ${input.memory_id}`);
+      throw new NotFoundError("Memory", input.memory_id);
     if (memory.properties.user_id !== this.userId)
-      throw new Error("Permission denied: not memory owner");
+      throw new ForbiddenError("Permission denied: not memory owner");
     if (memory.properties.doc_type !== "memory")
-      throw new Error("Only memories can be published");
+      throw new ValidationError("Only memories can be published");
     const memoryContentType = memory.properties.content_type;
     for (const spaceId of spaces) {
       const requiredType = SPACE_CONTENT_TYPE_RESTRICTIONS[spaceId];
       if (requiredType && memoryContentType !== requiredType) {
-        throw new Error(`Space '${spaceId}' only accepts content_type '${requiredType}', got '${memoryContentType ?? "undefined"}'`);
+        throw new ValidationError(`Space '${spaceId}' only accepts content_type '${requiredType}', got '${memoryContentType ?? "undefined"}'`);
       }
     }
     await this.checkModeration(memory.properties.content);
@@ -3324,25 +3342,25 @@ var SpaceService = class {
     const spaces = input.spaces || [];
     const groups = input.groups || [];
     if (spaces.length === 0 && groups.length === 0) {
-      throw new Error("Must specify at least one space or group to retract from");
+      throw new ValidationError("Must specify at least one space or group to retract from");
     }
     if (groups.length > 0) {
       const invalidGroups = groups.filter((g) => g.includes("."));
       if (invalidGroups.length > 0) {
-        throw new Error(`Group IDs cannot contain dots: ${invalidGroups.join(", ")}`);
+        throw new ValidationError(`Group IDs cannot contain dots: ${invalidGroups.join(", ")}`);
       }
     }
     const memory = await fetchMemoryWithAllProperties(this.userCollection, input.memory_id);
     if (!memory)
-      throw new Error(`Memory not found: ${input.memory_id}`);
+      throw new NotFoundError("Memory", input.memory_id);
     if (memory.properties.user_id !== this.userId)
-      throw new Error("Permission denied: not memory owner");
+      throw new ForbiddenError("Permission denied: not memory owner");
     const currentSpaceIds = Array.isArray(memory.properties.space_ids) ? memory.properties.space_ids : [];
     const currentGroupIds = Array.isArray(memory.properties.group_ids) ? memory.properties.group_ids : [];
     const notPublishedSpaces = spaces.filter((s) => !currentSpaceIds.includes(s));
     const notPublishedGroups = groups.filter((g) => !currentGroupIds.includes(g));
     if (notPublishedSpaces.length > 0 || notPublishedGroups.length > 0) {
-      throw new Error(`Memory is not published to some destinations. Not in spaces: [${notPublishedSpaces.join(", ")}], Not in groups: [${notPublishedGroups.join(", ")}]`);
+      throw new ValidationError(`Memory is not published to some destinations. Not in spaces: [${notPublishedSpaces.join(", ")}], Not in groups: [${notPublishedGroups.join(", ")}]`);
     }
     const { token } = await this.confirmationTokenService.createRequest(this.userId, "retract_memory", {
       memory_id: input.memory_id,
@@ -3363,13 +3381,13 @@ var SpaceService = class {
   async revise(input) {
     const memory = await fetchMemoryWithAllProperties(this.userCollection, input.memory_id);
     if (!memory)
-      throw new Error(`Memory not found: ${input.memory_id}`);
+      throw new NotFoundError("Memory", input.memory_id);
     if (memory.properties.user_id !== this.userId)
-      throw new Error("Permission denied: not memory owner");
+      throw new ForbiddenError("Permission denied: not memory owner");
     const spaceIds = Array.isArray(memory.properties.space_ids) ? memory.properties.space_ids : [];
     const groupIds = Array.isArray(memory.properties.group_ids) ? memory.properties.group_ids : [];
     if (spaceIds.length === 0 && groupIds.length === 0) {
-      throw new Error("Memory has no published copies to revise. Publish first with publish().");
+      throw new ValidationError("Memory has no published copies to revise. Publish first with publish().");
     }
     await this.checkModeration(memory.properties.content);
     const { token } = await this.confirmationTokenService.createRequest(this.userId, "revise_memory", {
@@ -3389,7 +3407,7 @@ var SpaceService = class {
   async confirm(input) {
     const request = await this.confirmationTokenService.confirmRequest(this.userId, input.token);
     if (!request) {
-      throw new Error("Invalid or expired confirmation token");
+      throw new ValidationError("Invalid or expired confirmation token");
     }
     if (request.action === "publish_memory") {
       return this.executePublish(request);
@@ -3400,31 +3418,31 @@ var SpaceService = class {
     if (request.action === "revise_memory") {
       return this.executeRevise(request);
     }
-    throw new Error(`Unknown action type: ${request.action}`);
+    throw new ValidationError(`Unknown action type: ${request.action}`);
   }
   // ── Deny ────────────────────────────────────────────────────────────
   async deny(input) {
     const success = await this.confirmationTokenService.denyRequest(this.userId, input.token);
     if (!success) {
-      throw new Error("Token not found or already used");
+      throw new NotFoundError("Token", input.token);
     }
     return { success: true };
   }
   // ── Moderate ────────────────────────────────────────────────────────
   async moderate(input, authContext) {
     if (!input.space_id && !input.group_id) {
-      throw new Error("Must specify either space_id or group_id");
+      throw new ValidationError("Must specify either space_id or group_id");
     }
     if (!ACTION_TO_STATUS[input.action]) {
-      throw new Error(`Invalid action: ${input.action}. Must be approve, reject, or remove`);
+      throw new ValidationError(`Invalid action: ${input.action}. Must be approve, reject, or remove`);
     }
     if (input.group_id) {
       if (!canModerate(authContext, input.group_id)) {
-        throw new Error(`Moderator access required for group ${input.group_id}`);
+        throw new ForbiddenError(`Moderator access required for group ${input.group_id}`);
       }
     } else if (input.space_id) {
       if (!canModerateAny(authContext)) {
-        throw new Error("Moderator access required to moderate memories in spaces");
+        throw new ForbiddenError("Moderator access required to moderate memories in spaces");
       }
     }
     let collection;
@@ -3436,8 +3454,7 @@ var SpaceService = class {
     }
     const memory = await fetchMemoryWithAllProperties(collection, input.memory_id);
     if (!memory) {
-      const location2 = input.group_id ? `group ${input.group_id}` : `space ${input.space_id}`;
-      throw new Error(`Published memory ${input.memory_id} not found in ${location2}`);
+      throw new NotFoundError("Published memory", input.memory_id);
     }
     const newStatus = ACTION_TO_STATUS[input.action];
     const now = (/* @__PURE__ */ new Date()).toISOString();
@@ -3476,24 +3493,24 @@ var SpaceService = class {
     if (spaces.length > 0) {
       const invalidSpaces = spaces.filter((s) => !isValidSpaceId(s));
       if (invalidSpaces.length > 0) {
-        throw new Error(`Invalid space IDs: ${invalidSpaces.join(", ")}`);
+        throw new ValidationError(`Invalid space IDs: ${invalidSpaces.join(", ")}`, { spaces: invalidSpaces });
       }
     }
     if (groups.length > 0) {
       const invalidGroups = groups.filter((g) => !g || g.includes(".") || g.trim() === "");
       if (invalidGroups.length > 0) {
-        throw new Error("Group IDs cannot be empty or contain dots");
+        throw new ValidationError("Group IDs cannot be empty or contain dots");
       }
     }
     const moderationFilter = input.moderation_filter || "approved";
     if (moderationFilter !== "approved") {
       for (const groupId of groups) {
         if (!canModerate(authContext, groupId)) {
-          throw new Error(`Moderator access required to view ${moderationFilter} memories in group ${groupId}`);
+          throw new ForbiddenError(`Moderator access required to view ${moderationFilter} memories in group ${groupId}`);
         }
       }
       if ((spaces.length > 0 || groups.length === 0) && !canModerateAny(authContext)) {
-        throw new Error(`Moderator access required to view ${moderationFilter} memories in spaces`);
+        throw new ForbiddenError(`Moderator access required to view ${moderationFilter} memories in spaces`);
       }
     }
     const fetchLimit = (limit + offset) * Math.max(1, groups.length + (spaces.length > 0 || groups.length === 0 ? 1 : 0));
@@ -3553,16 +3570,16 @@ var SpaceService = class {
   // ── Query Space ─────────────────────────────────────────────────────
   async query(input, authContext) {
     if (!input.question?.trim())
-      throw new Error("Question cannot be empty");
+      throw new ValidationError("Question cannot be empty");
     if (input.spaces.length === 0)
-      throw new Error("Must specify at least one space to query");
+      throw new ValidationError("Must specify at least one space to query");
     const invalidSpaces = input.spaces.filter((s) => !isValidSpaceId(s));
     if (invalidSpaces.length > 0) {
-      throw new Error(`Invalid space IDs: ${invalidSpaces.join(", ")}`);
+      throw new ValidationError(`Invalid space IDs: ${invalidSpaces.join(", ")}`, { spaces: invalidSpaces });
     }
     const moderationFilterValue = input.moderation_filter || "approved";
     if (moderationFilterValue !== "approved" && !canModerateAny(authContext)) {
-      throw new Error(`Moderator access required to view ${moderationFilterValue} memories in spaces`);
+      throw new ForbiddenError(`Moderator access required to view ${moderationFilterValue} memories in spaces`);
     }
     const publicCollection = await ensurePublicCollection(this.weaviateClient);
     const filterList = [];
@@ -3613,13 +3630,13 @@ var SpaceService = class {
     const spaces = request.payload.spaces || [];
     const groups = request.payload.groups || [];
     if (spaces.length === 0 && groups.length === 0) {
-      throw new Error("No destinations in publish request");
+      throw new ValidationError("No destinations in publish request");
     }
     const originalMemory = await fetchMemoryWithAllProperties(this.userCollection, request.payload.memory_id);
     if (!originalMemory)
-      throw new Error(`Memory ${request.payload.memory_id} no longer exists`);
+      throw new NotFoundError("Memory", request.payload.memory_id);
     if (originalMemory.properties.user_id !== this.userId)
-      throw new Error("Permission denied");
+      throw new ForbiddenError("Permission denied");
     const compositeId = generateCompositeId(this.userId, request.payload.memory_id);
     const weaviateId = compositeIdToUuid(compositeId);
     const existingSpaceIds = Array.isArray(originalMemory.properties.space_ids) ? originalMemory.properties.space_ids : [];
@@ -3755,7 +3772,7 @@ var SpaceService = class {
     const groups = request.payload.groups || [];
     const sourceMemory = await fetchMemoryWithAllProperties(this.userCollection, request.payload.memory_id);
     if (!sourceMemory)
-      throw new Error(`Source memory ${request.payload.memory_id} no longer exists`);
+      throw new NotFoundError("Memory", request.payload.memory_id);
     const currentSpaceIds = Array.isArray(sourceMemory.properties.space_ids) ? sourceMemory.properties.space_ids : [];
     const currentGroupIds = Array.isArray(sourceMemory.properties.group_ids) ? sourceMemory.properties.group_ids : [];
     const compositeId = generateCompositeId(this.userId, request.payload.memory_id);
@@ -3835,9 +3852,9 @@ var SpaceService = class {
     const { memory_id, space_ids = [], group_ids = [] } = request.payload;
     const sourceMemory = await fetchMemoryWithAllProperties(this.userCollection, memory_id);
     if (!sourceMemory)
-      throw new Error(`Source memory ${memory_id} no longer exists`);
+      throw new NotFoundError("Memory", memory_id);
     if (sourceMemory.properties.user_id !== this.userId)
-      throw new Error("Permission denied");
+      throw new ForbiddenError("Permission denied");
     const newContent = String(sourceMemory.properties.content ?? "");
     const revisedAt = (/* @__PURE__ */ new Date()).toISOString();
     const compositeId = generateCompositeId(this.userId, memory_id);
@@ -4068,10 +4085,14 @@ function createModerationClient(options) {
           })
         });
         if (!response.ok) {
-          return { pass: false, reason: "Content moderation unavailable. Please try again later." };
+          const errorBody = await response.text().catch(() => "");
+          const msg = `[moderation] Anthropic API error: ${response.status} ${response.statusText} ${errorBody}`;
+          console.error(msg);
+          return { pass: false, reason: msg };
         }
         const data = await response.json();
-        const text = data.content?.[0]?.text ?? "";
+        const rawText = data.content?.[0]?.text ?? "";
+        const text = rawText.replace(/^```(?:json)?\s*\n?/i, "").replace(/\n?```\s*$/i, "").trim();
         const parsed = JSON.parse(text);
         const result = {
           pass: parsed.pass === true,
@@ -4084,8 +4105,10 @@ function createModerationClient(options) {
         }
         cache.set(hash, result);
         return result;
-      } catch {
-        return { pass: false, reason: "Content moderation unavailable. Please try again later." };
+      } catch (err2) {
+        const msg = `[moderation] Unexpected error: ${err2 instanceof Error ? err2.message : String(err2)}`;
+        console.error(msg, err2);
+        return { pass: false, reason: msg };
       }
     }
   };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@prmichaelsen/remember-mcp",
-  "version": "3.15.1",
+  "version": "3.15.3",
   "description": "Multi-tenant memory system MCP server with vector search and relationships",
   "main": "dist/server.js",
   "type": "module",
@@ -47,10 +47,12 @@
   "author": "Patrick Michaelsen",
   "license": "MIT",
   "dependencies": {
+    "@google-cloud/documentai": "^9.5.0",
+    "@google-cloud/vision": "^5.3.4",
     "@modelcontextprotocol/sdk": "^1.0.4",
     "@prmichaelsen/firebase-admin-sdk-v8": "^2.2.0",
     "@prmichaelsen/mcp-auth": "^7.0.4",
-    "@prmichaelsen/remember-core": "^0.33.3",
+    "@prmichaelsen/remember-core": "^0.34.14",
     "dotenv": "^16.4.5",
     "uuid": "^13.0.0",
     "weaviate-client": "^3.2.0"