@rubytech/create-maxy-code 0.1.0

package/payload/platform/plugins/memory/mcp/dist/tools/memory-classify.js

@@ -0,0 +1,58 @@
+/**
+ * memory-classify MCP tool — classifies an unstructured document into typed
+ * sections via Claude Haiku, ready for memory-ingest to write as typed
+ * graph nodes (Task 737).
+ *
+ * Pairs with memory-ingest-extract (which produces the text) and memory-ingest
+ * (which consumes the typed structure). The classifier output is a deterministic
+ * JSON shape — every `kind` is verified against the live ontology label set
+ * before reaching this tool's caller, so a hallucinated label can never reach
+ * the graph writer.
+ */
+import { extractCache } from "./memory-ingest-extract.js";
+import { classifyDocument } from "../lib/llm-classifier.js";
+/**
+ * Natural-edge map pasted into the classifier prompt. Mirrors
+ * schema-base.md "Section kinds" table. Every section becomes a `:Section`
+ * node with the listed secondary label (e.g. `:Section:Position`).
+ *
+ * For identity kinds: anchorEdge points from the document subject to the
+ * multi-labeled section node. For structural and contract-clause kinds:
+ * anchorEdge is null — the section is anchored only via HAS_SECTION + NEXT.
+ * Special-case extras for Parties + Definitions are emitted via documentEdges
+ * and section-level related entries.
+ */
+const NATURAL_EDGE_MAP = `Section kind                     | Anchor edge (direction = from-anchor unless noted)
+Position (identity)              | (anchor:UserProfile)-[:HAS_POSITION]->(:Section:Position); section -[:AT]-> related:Organization (merge:true)
+Education (identity)             | (anchor:UserProfile)-[:ATTENDED {degree, startDate, endDate}]->(:Section:Education); section -[:ATTENDED]-> related:Organization {organizationCategory:'educational'} (merge:true)
+Credential (identity)            | (anchor:UserProfile)-[:HOLDS]->(:Section:Credential)
+Skill (identity)                 | (anchor:UserProfile)-[:HAS_SKILL]->(:Section:Skill)
+Biography (identity)             | (anchor:UserProfile)-[:DESCRIBED_BY]->(:Section:Biography)
+Project (standalone, not :Section) | (anchor:UserProfile)-[:CREATED]->(:Project); optional (:Project)-[:UNDER]->related:Organization (merge:true)
+Preface, Abstract, Introduction, TableOfContents, Chapter, Conclusion, Appendix, Bibliography, Glossary, Acknowledgments (structural)
+                                 | anchorEdge: null — anchored only via (:KnowledgeDocument)-[:HAS_SECTION]->(:Section:<Kind>) + (:Section)-[:NEXT]->(:Section)
+Parties, Recitals, Definitions, Scope, Term, Payment, Confidentiality, IntellectualProperty, Warranties, Indemnification, Liability, Termination, GoverningLaw, ForceMajeure, Notices, EntireAgreement, Amendment, Assignment, Severability, Signatures (contract-clause)
+                                 | anchorEdge: null — anchored via HAS_SECTION + NEXT; for Parties section, additionally emit top-level documentEdges PARTY entries; for Definitions, emit related DefinedTerm nodes with edge type DEFINES (direction outgoing from the Definitions section).
+Other (label fallback)           | anchorEdge: null — section-kind closure miss; you MUST also include 'classifierReason' (one-line about-what)
+
+Set "anchorEdge" to null for any kind whose row says "anchorEdge: null". For others, emit { "type": "<edge>", "direction": "from-anchor", "properties": { ... edge properties if any } }.`;
+export async function memoryClassify(params) {
+    const { accountId, attachmentId, anchorDescription, liveSchemaSource } = params;
+    const cached = extractCache.get(attachmentId);
+    if (!cached) {
+        throw new Error(`No cached extract found for attachment "${attachmentId}". ` +
+            `Call memory-ingest-extract first.`);
+    }
+    // Live ∪ declared labels — the gate the validator uses for memory-write.
+    // The classifier sees the same set so its output and the validator agree
+    // by construction.
+    const ontologyLabels = liveSchemaSource.recognisedLabels();
+    return classifyDocument({
+        accountId,
+        anchorDescription,
+        ontologyLabels,
+        naturalEdgeMap: NATURAL_EDGE_MAP,
+        documentText: cached.text,
+    });
+}
+//# sourceMappingURL=memory-classify.js.map

package/payload/platform/plugins/memory/mcp/dist/tools/memory-classify.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"memory-classify.js","sourceRoot":"","sources":["../../src/tools/memory-classify.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,EAAE,YAAY,EAAE,MAAM,4BAA4B,CAAC;AAC1D,OAAO,EAAE,gBAAgB,EAAuB,MAAM,0BAA0B,CAAC;AAwBjF;;;;;;;;;;GAUG;AACH,MAAM,gBAAgB,GAAG;;;;;;;;;;;;;0LAaiK,CAAC;AAE3L,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,MAA4B;IAE5B,MAAM,EAAE,SAAS,EAAE,YAAY,EAAE,iBAAiB,EAAE,gBAAgB,EAAE,GAAG,MAAM,CAAC;IAEhF,MAAM,MAAM,GAAG,YAAY,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;IAC9C,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,MAAM,IAAI,KAAK,CACb,2CAA2C,YAAY,KAAK;YAC5D,mCAAmC,CACpC,CAAC;IACJ,CAAC;IAED,yEAAyE;IACzE,yEAAyE;IACzE,mBAAmB;IACnB,MAAM,cAAc,GAAG,gBAAgB,CAAC,gBAAgB,EAAE,CAAC;IAE3D,OAAO,gBAAgB,CAAC;QACtB,SAAS;QACT,iBAAiB;QACjB,cAAc;QACd,cAAc,EAAE,gBAAgB;QAChC,YAAY,EAAE,MAAM,CAAC,IAAI;KAC1B,CAAC,CAAC;AACL,CAAC"}

package/payload/platform/plugins/memory/mcp/dist/tools/memory-delete.d.ts

@@ -0,0 +1,57 @@
+/**
+ * memory-delete — soft-delete a single graph node by elementId.
+ *
+ * Adds the `:Trashed` label, snapshots unique-key properties, and writes
+ * provenance (`trashedAt`, `trashedBy`, `trashReason`). Relationships are
+ * preserved. The node disappears from `memory-search` and any read filtered
+ * via `notTrashed`. Hard removal happens later via `memory-empty-trash` after
+ * the grace period.
+ *
+ * For `KnowledgeDocument`, the trash cascades to linked `Section` and `Chunk`
+ * children so the entire document hierarchy disappears together; restore
+ * walks the same edges to bring it back.
+ *
+ * For `Conversation`, the cascade to attached `(m:Message)-[:PART_OF]->(c)`
+ * messages lives inside `trashNode` itself (Task 655) — `memory-delete` just
+ * calls through and reports the message count.
+ *
+ * Filter-token contract (Task 655): when the caller passes `filterToken`,
+ * the token is verified (HMAC, TTL) and the server re-runs the same canonical
+ * predicate that produced the token to confirm the target elementId still
+ * matches. A mismatch throws with `outcome=rejected` — no `force=true` path,
+ * no "trust me I already computed this" escape hatch. Tokens are minted by
+ * `memory-find-candidates`; a stale or forged token never deletes anything.
+ *
+ * GDPR cascade deletion (`contact-erase`) bypasses this primitive and
+ * hard-deletes per Article 17. Use that tool, not `force=true` here — there
+ * is no `force` here.
+ */
+export interface MemoryDeleteParams {
+    accountId: string;
+    elementId: string;
+    reason?: string;
+    /**
+     * Opaque token from `memory-find-candidates`. Required when the delete
+     * originates from a bulk-selector flow; the server re-runs the selection
+     * predicate on this elementId before trashing. Omit for single-node UI
+     * deletes (the `/graph` side-panel path, which goes through the Hono
+     * `graph-delete` route directly against `trashNode`, never via this tool).
+     */
+    filterToken?: string;
+}
+export interface MemoryDeleteResult {
+    elementId: string;
+    labels: string[];
+    trashedAt: string;
+    alreadyTrashed: boolean;
+    cascade: {
+        sections: number;
+        chunks: number;
+    };
+}
+export declare class FilterTokenError extends Error {
+    readonly reason: "malformed" | "bad-signature" | "expired" | "mismatch";
+    constructor(message: string, reason: "malformed" | "bad-signature" | "expired" | "mismatch");
+}
+export declare function memoryDelete(params: MemoryDeleteParams): Promise<MemoryDeleteResult>;
+//# sourceMappingURL=memory-delete.d.ts.map

package/payload/platform/plugins/memory/mcp/dist/tools/memory-delete.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"memory-delete.d.ts","sourceRoot":"","sources":["../../src/tools/memory-delete.ts"],"names":[],"mappings":"AAKA;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AAEH,MAAM,WAAW,kBAAkB;IACjC,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB;;;;;;OAMG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,WAAW,kBAAkB;IACjC,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB,cAAc,EAAE,OAAO,CAAC;IACxB,OAAO,EAAE;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC;CAC/C;AAED,qBAAa,gBAAiB,SAAQ,KAAK;aAGvB,MAAM,EAAE,WAAW,GAAG,eAAe,GAAG,SAAS,GAAG,UAAU;gBAD9E,OAAO,EAAE,MAAM,EACC,MAAM,EAAE,WAAW,GAAG,eAAe,GAAG,SAAS,GAAG,UAAU;CAKjF;AAED,wBAAsB,YAAY,CAChC,MAAM,EAAE,kBAAkB,GACzB,OAAO,CAAC,kBAAkB,CAAC,CAoH7B"}

package/payload/platform/plugins/memory/mcp/dist/tools/memory-delete.js

@@ -0,0 +1,106 @@
+import { getSession } from "../lib/neo4j.js";
+import { trashNode } from "../../../../../lib/graph-trash/dist/index.js";
+import { verifyFilterToken, filterTokenFingerprint } from "../lib/filter-token.js";
+import { reverifyCandidate } from "./memory-find-candidates.js";
+export class FilterTokenError extends Error {
+    reason;
+    constructor(message, reason) {
+        super(message);
+        this.reason = reason;
+        this.name = "FilterTokenError";
+    }
+}
+export async function memoryDelete(params) {
+    const t0 = Date.now();
+    const { accountId, elementId, reason, filterToken } = params;
+    const session = getSession();
+    try {
+        // Filter-token re-verification (Task 655). Must run before trashNode so a
+        // rejection never mutates the graph. Observable outcome: the
+        // `[memory-delete]` log line carries `reverified=true|false` and
+        // `outcome=trashed|rejected` — never silent.
+        let reverified = false;
+        if (filterToken) {
+            const verify = verifyFilterToken(filterToken);
+            if (!verify.ok) {
+                const ms = Date.now() - t0;
+                process.stderr.write(`[memory-delete] elementId=${elementId} filterToken=${filterTokenFingerprint(filterToken)} reverified=false outcome=rejected reason=${verify.reason} ms=${ms}\n`);
+                throw new FilterTokenError(`memory-delete: filter token rejected (${verify.reason})`, verify.reason);
+            }
+            if (verify.payload.accountId !== accountId) {
+                const ms = Date.now() - t0;
+                process.stderr.write(`[memory-delete] elementId=${elementId} filterToken=${filterTokenFingerprint(filterToken)} reverified=false outcome=rejected reason=account-mismatch ms=${ms}\n`);
+                throw new FilterTokenError(`memory-delete: filter token account mismatch`, "mismatch");
+            }
+            const stillMatches = await reverifyCandidate({
+                session,
+                accountId,
+                filter: verify.payload.filter,
+                agentType: verify.payload.agentType,
+                elementId,
+            });
+            if (!stillMatches) {
+                const ms = Date.now() - t0;
+                process.stderr.write(`[memory-delete] elementId=${elementId} filterToken=${filterTokenFingerprint(filterToken)} reverified=false outcome=rejected reason=predicate-no-longer-matches ms=${ms}\n`);
+                throw new FilterTokenError(`memory-delete: target ${elementId} no longer matches filter '${verify.payload.filter}'`, "mismatch");
+            }
+            reverified = true;
+        }
+        const root = await trashNode({
+            session,
+            accountId,
+            elementId,
+            by: "memory-delete",
+            reason,
+        });
+        let sections = 0;
+        let chunks = 0;
+        if (root.labels.includes("KnowledgeDocument")) {
+            const childResult = await session.run(`MATCH (d) WHERE elementId(d) = $eid
+         OPTIONAL MATCH (d)-[:HAS_SECTION]->(s:Section)
+         OPTIONAL MATCH (s)-[:HAS_CHUNK]->(c:Chunk)
+         WITH collect(DISTINCT s) AS sections, collect(DISTINCT c) AS chunks
+         RETURN [s IN sections WHERE s IS NOT NULL | elementId(s)] AS sectionIds,
+                [c IN chunks   WHERE c IS NOT NULL | elementId(c)] AS chunkIds`, { eid: elementId });
+            const sectionIds = childResult.records[0]?.get("sectionIds") ?? [];
+            const chunkIds = childResult.records[0]?.get("chunkIds") ?? [];
+            for (const sid of sectionIds) {
+                const r = await trashNode({
+                    session,
+                    accountId,
+                    elementId: sid,
+                    by: `memory-delete:cascade-from-${elementId}`,
+                    reason: reason ?? `cascade from KnowledgeDocument ${elementId}`,
+                });
+                if (r.trashed)
+                    sections++;
+            }
+            for (const cid of chunkIds) {
+                const r = await trashNode({
+                    session,
+                    accountId,
+                    elementId: cid,
+                    by: `memory-delete:cascade-from-${elementId}`,
+                    reason: reason ?? `cascade from KnowledgeDocument ${elementId}`,
+                });
+                if (r.trashed)
+                    chunks++;
+            }
+        }
+        const ms = Date.now() - t0;
+        const outcome = root.alreadyTrashed ? "already-trashed" : "trashed";
+        const tokenFp = filterToken ? filterTokenFingerprint(filterToken) : "none";
+        process.stderr.write(`[memory-delete] elementId=${elementId} filterToken=${tokenFp} reverified=${reverified} outcome=${outcome} ms=${ms}\n`);
+        return {
+            elementId,
+            labels: root.labels,
+            trashedAt: root.trashedAt,
+            alreadyTrashed: root.alreadyTrashed,
+            cascade: { sections, chunks },
+        };
+    }
+    finally {
+        await session.close();
+    }
+}
+//# sourceMappingURL=memory-delete.js.map

package/payload/platform/plugins/memory/mcp/dist/tools/memory-delete.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"memory-delete.js","sourceRoot":"","sources":["../../src/tools/memory-delete.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAC7C,OAAO,EAAE,SAAS,EAAoB,MAAM,8CAA8C,CAAC;AAC3F,OAAO,EAAE,iBAAiB,EAAE,sBAAsB,EAAE,MAAM,wBAAwB,CAAC;AACnF,OAAO,EAAE,iBAAiB,EAAE,MAAM,6BAA6B,CAAC;AAqDhE,MAAM,OAAO,gBAAiB,SAAQ,KAAK;IAGvB;IAFlB,YACE,OAAe,EACC,MAA8D;QAE9E,KAAK,CAAC,OAAO,CAAC,CAAC;QAFC,WAAM,GAAN,MAAM,CAAwD;QAG9E,IAAI,CAAC,IAAI,GAAG,kBAAkB,CAAC;IACjC,CAAC;CACF;AAED,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,MAA0B;IAE1B,MAAM,EAAE,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACtB,MAAM,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,EAAE,WAAW,EAAE,GAAG,MAAM,CAAC;IAC7D,MAAM,OAAO,GAAG,UAAU,EAAE,CAAC;IAE7B,IAAI,CAAC;QACH,0EAA0E;QAC1E,6DAA6D;QAC7D,iEAAiE;QACjE,6CAA6C;QAC7C,IAAI,UAAU,GAAG,KAAK,CAAC;QACvB,IAAI,WAAW,EAAE,CAAC;YAChB,MAAM,MAAM,GAAG,iBAAiB,CAAC,WAAW,CAAC,CAAC;YAC9C,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;gBACf,MAAM,EAAE,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,CAAC;gBAC3B,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,6BAA6B,SAAS,gBAAgB,sBAAsB,CAAC,WAAW,CAAC,6CAA6C,MAAM,CAAC,MAAM,OAAO,EAAE,IAAI,CACjK,CAAC;gBACF,MAAM,IAAI,gBAAgB,CACxB,yCAAyC,MAAM,CAAC,MAAM,GAAG,EACzD,MAAM,CAAC,MAAM,CACd,CAAC;YACJ,CAAC;YACD,IAAI,MAAM,CAAC,OAAO,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;gBAC3C,MAAM,EAAE,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,CAAC;gBAC3B,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,6BAA6B,SAAS,gBAAgB,sBAAsB,CAAC,WAAW,CAAC,iEAAiE,EAAE,IAAI,CACjK,CAAC;gBACF,MAAM,IAAI,gBAAgB,CACxB,8CAA8C,EAC9C,UAAU,CACX,CAAC;YACJ,CAAC;YACD,MAAM,YAAY,GAAG,MAAM,iBAAiB,CAAC;gBAC3C,OAAO;gBACP,SAAS;gBACT,MAAM,EAAE,MAAM,CAAC,OAAO,CAAC,MAAM;gBAC7B,SAAS,EAAE,MAAM,CAAC,OAAO,CAAC,SAAS;gBACnC,SAAS;aACV,CAAC,CAAC;YACH,IAAI,CAAC,YAAY,EAAE,CAAC;gBAClB,MAAM,EAAE,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,CAAC;gBAC3B,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,6BAA6B,SAAS,gBAAgB,sBAAsB,CAAC,WAAW,CAAC,4EAA4E,EAAE,IAAI,CAC5K,CAAC;gBACF,MAAM,IAAI,gBAAgB,CACxB,yBAAyB,SAAS,8BAA8B,MAAM,CAAC,OAAO,CAAC,MAAM,GAAG,EACxF,UAAU,CACX,CAAC;YACJ,CAAC;YACD,UAAU,GAAG,IAAI,CAAC;QACpB,CAAC;QAED,MAAM,IAAI,GAAgB,MAAM,SAAS,CAAC;YACxC,OAAO;YACP,SAAS;YACT,SAAS;YACT,EAAE,EAAE,eAAe;YACnB,MAAM;SACP,CAAC,CAAC;QAEH,IAAI,QAAQ,GAAG,CAAC,CAAC;QACjB,IAAI,MAAM,GAAG,CAAC,CAAC;QAEf,IAAI,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,mBAAmB,CAAC,EAAE,CAAC;YAC9C,MAAM,WAAW,GAAG,MAAM,OAAO,CAAC,GAAG,CACnC;;;;;+EAKuE,EACvE,EAAE,GAAG,EAAE,SAAS,EAAE,CACnB,CAAC;YACF,MAAM,UAAU,GAAI,WAAW,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,YAAY,CAAc,IAAI,EAAE,CAAC;YACjF,MAAM,QAAQ,GAAI,WAAW,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,UAAU,CAAc,IAAI,EAAE,CAAC;YAE7E,KAAK,MAAM,GAAG,IAAI,UAAU,EAAE,CAAC;gBAC7B,MAAM,CAAC,GAAG,MAAM,SAAS,CAAC;oBACxB,OAAO;oBACP,SAAS;oBACT,SAAS,EAAE,GAAG;oBACd,EAAE,EAAE,8BAA8B,SAAS,EAAE;oBAC7C,MAAM,EAAE,MAAM,IAAI,kCAAkC,SAAS,EAAE;iBAChE,CAAC,CAAC;gBACH,IAAI,CAAC,CAAC,OAAO;oBAAE,QAAQ,EAAE,CAAC;YAC5B,CAAC;YACD,KAAK,MAAM,GAAG,IAAI,QAAQ,EAAE,CAAC;gBAC3B,MAAM,CAAC,GAAG,MAAM,SAAS,CAAC;oBACxB,OAAO;oBACP,SAAS;oBACT,SAAS,EAAE,GAAG;oBACd,EAAE,EAAE,8BAA8B,SAAS,EAAE;oBAC7C,MAAM,EAAE,MAAM,IAAI,kCAAkC,SAAS,EAAE;iBAChE,CAAC,CAAC;gBACH,IAAI,CAAC,CAAC,OAAO;oBAAE,MAAM,EAAE,CAAC;YAC1B,CAAC;QACH,CAAC;QAED,MAAM,EAAE,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,CAAC;QAC3B,MAAM,OAAO,GAAG,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC,SAAS,CAAC;QACpE,MAAM,OAAO,GAAG,WAAW,CAAC,CAAC,CAAC,sBAAsB,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;QAC3E,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,6BAA6B,SAAS,gBAAgB,OAAO,eAAe,UAAU,YAAY,OAAO,OAAO,EAAE,IAAI,CACvH,CAAC;QAEF,OAAO;YACL,SAAS;YACT,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,cAAc,EAAE,IAAI,CAAC,cAAc;YACnC,OAAO,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE;SAC9B,CAAC;IACJ,CAAC;YAAS,CAAC;QACT,MAAM,OAAO,CAAC,KAAK,EAAE,CAAC;IACxB,CAAC;AACH,CAAC"}

package/payload/platform/plugins/memory/mcp/dist/tools/memory-edit-attachment.d.ts

@@ -0,0 +1,16 @@
+export interface EditParams {
+    accountId: string;
+    attachmentId: string;
+    content: string;
+}
+export interface EditResult {
+    attachmentId: string;
+    filename: string;
+    mimeType: string;
+    oldSizeBytes: number;
+    newSizeBytes: number;
+    cachePopulated: boolean;
+    extractTextLength?: number;
+}
+export declare function memoryEditAttachment(params: EditParams): Promise<EditResult>;
+//# sourceMappingURL=memory-edit-attachment.d.ts.map

package/payload/platform/plugins/memory/mcp/dist/tools/memory-edit-attachment.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"memory-edit-attachment.d.ts","sourceRoot":"","sources":["../../src/tools/memory-edit-attachment.ts"],"names":[],"mappings":"AA4BA,MAAM,WAAW,UAAU;IACzB,SAAS,EAAE,MAAM,CAAC;IAClB,YAAY,EAAE,MAAM,CAAC;IACrB,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,UAAU;IACzB,YAAY,EAAE,MAAM,CAAC;IACrB,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;IACjB,YAAY,EAAE,MAAM,CAAC;IACrB,YAAY,EAAE,MAAM,CAAC;IACrB,cAAc,EAAE,OAAO,CAAC;IACxB,iBAAiB,CAAC,EAAE,MAAM,CAAC;CAC5B;AAED,wBAAsB,oBAAoB,CACxC,MAAM,EAAE,UAAU,GACjB,OAAO,CAAC,UAAU,CAAC,CAkGrB"}

package/payload/platform/plugins/memory/mcp/dist/tools/memory-edit-attachment.js

@@ -0,0 +1,91 @@
+import { writeFile } from "node:fs/promises";
+import { stat } from "node:fs/promises";
+import { assertUUID, readMeta, findDataFile, attachmentDir, } from "../lib/attachments.js";
+import { memoryIngestExtract } from "./memory-ingest-extract.js";
+import { resolve } from "node:path";
+// ---------------------------------------------------------------------------
+// memory-edit-attachment — edit a stored text/markdown attachment in place.
+//
+// VALIDATE MIME --> WRITE NEW CONTENT --> UPDATE META --> RE-EXTRACT
+//      │                   │                   │               │
+//      v                   v                   v               v
+//  [non-text?]        [disk write]       [timestamp]     [cache populated
+//   → reject           failure?           updated         for memory-ingest]
+//                       → throw
+//
+// After editing, the extract cache is populated so the agent can call
+// memory-ingest with updated summaries. The agent must still provide
+// summaries — this tool handles extract + cache, not the full pipeline.
+// ---------------------------------------------------------------------------
+const EDITABLE_MIME_TYPES = new Set(["text/plain", "text/markdown"]);
+export async function memoryEditAttachment(params) {
+    const { accountId, attachmentId, content } = params;
+    assertUUID(attachmentId, "attachmentId");
+    const t0 = Date.now();
+    const tag = attachmentId.slice(0, 8);
+    const log = (stage, detail) => console.error(`[memory-edit-attachment] [${tag}] ${stage}${detail ? ` — ${detail}` : ""} (${Date.now() - t0}ms)`);
+    log("start");
+    const meta = await readMeta(accountId, attachmentId);
+    if (!meta) {
+        throw new Error(`Attachment "${attachmentId}" not found. ` +
+            `No metadata file exists for this attachment in this account.`);
+    }
+    if (!EDITABLE_MIME_TYPES.has(meta.mimeType)) {
+        throw new Error(`Cannot edit "${meta.filename}" — only text/plain and text/markdown files are editable. ` +
+            `This file has MIME type "${meta.mimeType}".`);
+    }
+    const dataFile = await findDataFile(accountId, attachmentId);
+    if (!dataFile) {
+        throw new Error(`Attachment "${attachmentId}" metadata exists but the data file is missing.`);
+    }
+    const oldStat = await stat(dataFile);
+    const oldSizeBytes = oldStat.size;
+    // Write the updated content to disk
+    log("writing", `${content.length} chars`);
+    await writeFile(dataFile, content, "utf-8");
+    const newStat = await stat(dataFile);
+    const newSizeBytes = newStat.size;
+    // Update meta.json timestamp and size
+    const updatedMeta = {
+        ...meta,
+        sizeBytes: newSizeBytes,
+        storedAt: new Date().toISOString(),
+    };
+    const metaPath = resolve(attachmentDir(accountId, attachmentId), `${attachmentId}.meta.json`);
+    await writeFile(metaPath, JSON.stringify(updatedMeta, null, 2));
+    log("meta-updated", `${oldSizeBytes} → ${newSizeBytes} bytes`);
+    // Re-extract to populate the cache for memory-classify + memory-ingest.
+    // Post-Task-737: extract caches text only (no chunking); the typed-node
+    // ingest pipeline classifies and writes via memory-classify + memory-ingest.
+    let cachePopulated = false;
+    let extractTextLength;
+    try {
+        const extractResult = await memoryIngestExtract({
+            storagePath: dataFile,
+            filename: meta.filename,
+            mimeType: meta.mimeType,
+            attachmentId,
+        });
+        cachePopulated = true;
+        extractTextLength = extractResult.textLength;
+        log("cache-populated", `${extractTextLength} chars`);
+    }
+    catch (err) {
+        const msg = err instanceof Error ? err.message : String(err);
+        log("cache-failed", msg);
+        console.error(`[memory-edit-attachment] [${tag}] WARNING: file was updated on disk ` +
+            `but extract cache could not be populated. The agent will need to call ` +
+            `memory-ingest-extract manually before memory-classify / memory-ingest. Error: ${msg}`);
+    }
+    log("complete", `${meta.filename} — ${oldSizeBytes} → ${newSizeBytes} bytes — cache ${cachePopulated ? "populated" : "FAILED"}`);
+    return {
+        attachmentId,
+        filename: meta.filename,
+        mimeType: meta.mimeType,
+        oldSizeBytes,
+        newSizeBytes,
+        cachePopulated,
+        extractTextLength,
+    };
+}
+//# sourceMappingURL=memory-edit-attachment.js.map

package/payload/platform/plugins/memory/mcp/dist/tools/memory-edit-attachment.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"memory-edit-attachment.js","sourceRoot":"","sources":["../../src/tools/memory-edit-attachment.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAC7C,OAAO,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAC;AACxC,OAAO,EACL,UAAU,EACV,QAAQ,EACR,YAAY,EACZ,aAAa,GACd,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAE,mBAAmB,EAAE,MAAM,4BAA4B,CAAC;AACjE,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAEpC,8EAA8E;AAC9E,4EAA4E;AAC5E,EAAE;AACF,qEAAqE;AACrE,iEAAiE;AACjE,iEAAiE;AACjE,0EAA0E;AAC1E,6EAA6E;AAC7E,gCAAgC;AAChC,EAAE;AACF,sEAAsE;AACtE,qEAAqE;AACrE,wEAAwE;AACxE,8EAA8E;AAE9E,MAAM,mBAAmB,GAAG,IAAI,GAAG,CAAC,CAAC,YAAY,EAAE,eAAe,CAAC,CAAC,CAAC;AAkBrE,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,MAAkB;IAElB,MAAM,EAAE,SAAS,EAAE,YAAY,EAAE,OAAO,EAAE,GAAG,MAAM,CAAC;IAEpD,UAAU,CAAC,YAAY,EAAE,cAAc,CAAC,CAAC;IAEzC,MAAM,EAAE,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACtB,MAAM,GAAG,GAAG,YAAY,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IACrC,MAAM,GAAG,GAAG,CAAC,KAAa,EAAE,MAAe,EAAE,EAAE,CAC7C,OAAO,CAAC,KAAK,CACX,6BAA6B,GAAG,KAAK,KAAK,GAAG,MAAM,CAAC,CAAC,CAAC,MAAM,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,KAAK,CACnG,CAAC;IAEJ,GAAG,CAAC,OAAO,CAAC,CAAC;IAEb,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,SAAS,EAAE,YAAY,CAAC,CAAC;IACrD,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,MAAM,IAAI,KAAK,CACb,eAAe,YAAY,eAAe;YACxC,8DAA8D,CACjE,CAAC;IACJ,CAAC;IAED,IAAI,CAAC,mBAAmB,CAAC,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC5C,MAAM,IAAI,KAAK,CACb,gBAAgB,IAAI,CAAC,QAAQ,4DAA4D;YACvF,4BAA4B,IAAI,CAAC,QAAQ,IAAI,CAChD,CAAC;IACJ,CAAC;IAED,MAAM,QAAQ,GAAG,MAAM,YAAY,CAAC,SAAS,EAAE,YAAY,CAAC,CAAC;IAC7D,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,MAAM,IAAI,KAAK,CACb,eAAe,YAAY,iDAAiD,CAC7E,CAAC;IACJ,CAAC;IAED,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,CAAC;IACrC,MAAM,YAAY,GAAG,OAAO,CAAC,IAAI,CAAC;IAElC,oCAAoC;IACpC,GAAG,CAAC,SAAS,EAAE,GAAG,OAAO,CAAC,MAAM,QAAQ,CAAC,CAAC;IAC1C,MAAM,SAAS,CAAC,QAAQ,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;IAC5C,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,CAAC;IACrC,MAAM,YAAY,GAAG,OAAO,CAAC,IAAI,CAAC;IAElC,sCAAsC;IACtC,MAAM,WAAW,GAAG;QAClB,GAAG,IAAI;QACP,SAAS,EAAE,YAAY;QACvB,QAAQ,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;KACnC,CAAC;IACF,MAAM,QAAQ,GAAG,OAAO,CACtB,aAAa,CAAC,SAAS,EAAE,YAAY,CAAC,EACtC,GAAG,YAAY,YAAY,CAC5B,CAAC;IACF,MAAM,SAAS,CAAC,QAAQ,EAAE,IAAI,CAAC,SAAS,CAAC,WAAW,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;IAChE,GAAG,CAAC,cAAc,EAAE,GAAG,YAAY,MAAM,YAAY,QAAQ,CAAC,CAAC;IAE/D,wEAAwE;IACxE,wEAAwE;IACxE,6EAA6E;IAC7E,IAAI,cAAc,GAAG,KAAK,CAAC;IAC3B,IAAI,iBAAqC,CAAC;IAE1C,IAAI,CAAC;QACH,MAAM,aAAa,GAAG,MAAM,mBAAmB,CAAC;YAC9C,WAAW,EAAE,QAAQ;YACrB,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,YAAY;SACb,CAAC,CAAC;QACH,cAAc,GAAG,IAAI,CAAC;QACtB,iBAAiB,GAAG,aAAa,CAAC,UAAU,CAAC;QAC7C,GAAG,CAAC,iBAAiB,EAAE,GAAG,iBAAiB,QAAQ,CAAC,CAAC;IACvD,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,GAAG,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAC7D,GAAG,CAAC,cAAc,EAAE,GAAG,CAAC,CAAC;QACzB,OAAO,CAAC,KAAK,CACX,6BAA6B,GAAG,sCAAsC;YACpE,wEAAwE;YACxE,iFAAiF,GAAG,EAAE,CACzF,CAAC;IACJ,CAAC;IAED,GAAG,CACD,UAAU,EACV,GAAG,IAAI,CAAC,QAAQ,MAAM,YAAY,MAAM,YAAY,kBAAkB,cAAc,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,QAAQ,EAAE,CAChH,CAAC;IAEF,OAAO;QACL,YAAY;QACZ,QAAQ,EAAE,IAAI,CAAC,QAAQ;QACvB,QAAQ,EAAE,IAAI,CAAC,QAAQ;QACvB,YAAY;QACZ,YAAY;QACZ,cAAc;QACd,iBAAiB;KAClB,CAAC;AACJ,CAAC"}

package/payload/platform/plugins/memory/mcp/dist/tools/memory-empty-trash.d.ts

@@ -0,0 +1,22 @@
+import { type EmptyTrashResult } from "../../../../../lib/graph-trash/dist/index.js";
+/**
+ * memory-empty-trash — hard-delete trashed nodes whose `trashedAt` is older
+ * than the grace period. For `KnowledgeDocument` candidates, also removes the
+ * on-disk attachment directory (snapshotted `attachmentId` is read from
+ * `_trashedKeys`).
+ *
+ * Defaults: `graceDays=30`, `dryRun=false`, no label filter. `dryRun=true`
+ * lists candidates without mutating; the absence of `[trash:emptied]` lines
+ * after a `dryRun=true` `[trash:empty-run]` is the correct-behaviour signal.
+ */
+export interface MemoryEmptyTrashParams {
+    accountId: string;
+    graceDays?: number;
+    dryRun?: boolean;
+    labels?: string[];
+}
+export interface MemoryEmptyTrashResult extends EmptyTrashResult {
+    attachmentDirsRemoved: number;
+}
+export declare function memoryEmptyTrash(params: MemoryEmptyTrashParams): Promise<MemoryEmptyTrashResult>;
+//# sourceMappingURL=memory-empty-trash.d.ts.map

package/payload/platform/plugins/memory/mcp/dist/tools/memory-empty-trash.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"memory-empty-trash.d.ts","sourceRoot":"","sources":["../../src/tools/memory-empty-trash.ts"],"names":[],"mappings":"AACA,OAAO,EAAmC,KAAK,gBAAgB,EAAE,MAAM,8CAA8C,CAAC;AAGtH;;;;;;;;;GASG;AAEH,MAAM,WAAW,sBAAsB;IACrC,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;CACnB;AAED,MAAM,WAAW,sBAAuB,SAAQ,gBAAgB;IAC9D,qBAAqB,EAAE,MAAM,CAAC;CAC/B;AAED,wBAAsB,gBAAgB,CACpC,MAAM,EAAE,sBAAsB,GAC7B,OAAO,CAAC,sBAAsB,CAAC,CAgCjC"}

package/payload/platform/plugins/memory/mcp/dist/tools/memory-empty-trash.js

@@ -0,0 +1,36 @@
+import { getSession } from "../lib/neo4j.js";
+import { emptyTrash } from "../../../../../lib/graph-trash/dist/index.js";
+import { removeAttachmentDir } from "../lib/attachments.js";
+export async function memoryEmptyTrash(params) {
+    const { accountId, graceDays, dryRun, labels } = params;
+    const session = getSession();
+    let attachmentDirsRemoved = 0;
+    try {
+        const result = await emptyTrash({
+            session,
+            accountId,
+            graceDays,
+            dryRun,
+            labels,
+            onEmpty: async (c) => {
+                if (!c.labels.includes("KnowledgeDocument"))
+                    return;
+                const aid = typeof c.trashedKeys.attachmentId === "string"
+                    ? c.trashedKeys.attachmentId
+                    : null;
+                if (!aid)
+                    return;
+                const removed = await removeAttachmentDir(accountId, aid);
+                if (removed) {
+                    attachmentDirsRemoved++;
+                    process.stderr.write(`[trash:emptied:disk] accountId=${accountId} attachmentId=${aid}\n`);
+                }
+            },
+        });
+        return { ...result, attachmentDirsRemoved };
+    }
+    finally {
+        await session.close();
+    }
+}
+//# sourceMappingURL=memory-empty-trash.js.map

package/payload/platform/plugins/memory/mcp/dist/tools/memory-empty-trash.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"memory-empty-trash.js","sourceRoot":"","sources":["../../src/tools/memory-empty-trash.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAC7C,OAAO,EAAE,UAAU,EAA8C,MAAM,8CAA8C,CAAC;AACtH,OAAO,EAAE,mBAAmB,EAAE,MAAM,uBAAuB,CAAC;AAwB5D,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,MAA8B;IAE9B,MAAM,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,CAAC;IACxD,MAAM,OAAO,GAAG,UAAU,EAAE,CAAC;IAC7B,IAAI,qBAAqB,GAAG,CAAC,CAAC;IAE9B,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC;YAC9B,OAAO;YACP,SAAS;YACT,SAAS;YACT,MAAM;YACN,MAAM;YACN,OAAO,EAAE,KAAK,EAAE,CAAiB,EAAE,EAAE;gBACnC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,mBAAmB,CAAC;oBAAE,OAAO;gBACpD,MAAM,GAAG,GAAG,OAAO,CAAC,CAAC,WAAW,CAAC,YAAY,KAAK,QAAQ;oBACxD,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,YAAY;oBAC5B,CAAC,CAAC,IAAI,CAAC;gBACT,IAAI,CAAC,GAAG;oBAAE,OAAO;gBACjB,MAAM,OAAO,GAAG,MAAM,mBAAmB,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC;gBAC1D,IAAI,OAAO,EAAE,CAAC;oBACZ,qBAAqB,EAAE,CAAC;oBACxB,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,kCAAkC,SAAS,iBAAiB,GAAG,IAAI,CACpE,CAAC;gBACJ,CAAC;YACH,CAAC;SACF,CAAC,CAAC;QAEH,OAAO,EAAE,GAAG,MAAM,EAAE,qBAAqB,EAAE,CAAC;IAC9C,CAAC;YAAS,CAAC;QACT,MAAM,OAAO,CAAC,KAAK,EAAE,CAAC;IACxB,CAAC;AACH,CAAC"}

package/payload/platform/plugins/memory/mcp/dist/tools/memory-find-candidates.d.ts

@@ -0,0 +1,58 @@
+import { type CandidatesFilter } from "../lib/filter-token.js";
+/**
+ * memory-find-candidates — deterministic bulk-delete selector.
+ *
+ * Closes the 2026-04-22 failure class where the admin agent authored a
+ * selection cypher against a schema it had not loaded (`[:HAS_MESSAGE]`
+ * instead of `[:PART_OF]`), producing a vacuously-true filter that trashed
+ * 175 Conversation nodes (69 with real user content). The fix removes the
+ * LLM from the selection predicate: the agent chooses a filter name from a
+ * fixed set, and the server runs the canonical cypher.
+ *
+ * Two filters ship in v1 (Task 655):
+ * - `empty`              — zero `(m:Message)-[:PART_OF]->(c:Conversation)` Messages
+ * - `single-assistant`   — exactly one `:PART_OF` Message, with `role='assistant'`
+ *
+ * A third filter `no-real-user-input` is deferred to Task 656 (content-match
+ * predicate has a distinct false-positive risk profile).
+ *
+ * The returned `filterToken` is a signed opaque bundle that `memory-delete`
+ * re-verifies at trash time. There is no path by which the agent can feed a
+ * hand-rolled list to `memory-delete` with a token — the token only exists
+ * when `memory-find-candidates` minted it, and the server re-runs the same
+ * predicate on each elementId before trashing.
+ */
+export interface MemoryFindCandidatesParams {
+    accountId: string;
+    filter: CandidatesFilter;
+    agentType?: "admin" | "public";
+    limit?: number;
+    dryRun?: boolean;
+}
+export interface MemoryFindCandidatesItem {
+    elementId: string;
+    conversationId: string | null;
+    assistantMsgCount: number;
+    realUserMsgCount: number;
+    firstUserMsgPreview: string | null;
+    trashedAt: string | null;
+}
+export interface MemoryFindCandidatesResult {
+    filter: CandidatesFilter;
+    agentType?: "admin" | "public";
+    matched: number;
+    sampled: number;
+    items: MemoryFindCandidatesItem[];
+    filterToken: string;
+    dryRun: boolean;
+}
+/** Server-side re-check for `memory-delete` token verification. */
+export declare function reverifyCandidate(params: {
+    session: import("neo4j-driver").Session;
+    accountId: string;
+    filter: CandidatesFilter;
+    agentType?: "admin" | "public";
+    elementId: string;
+}): Promise<boolean>;
+export declare function memoryFindCandidates(params: MemoryFindCandidatesParams): Promise<MemoryFindCandidatesResult>;
+//# sourceMappingURL=memory-find-candidates.d.ts.map

package/payload/platform/plugins/memory/mcp/dist/tools/memory-find-candidates.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"memory-find-candidates.d.ts","sourceRoot":"","sources":["../../src/tools/memory-find-candidates.ts"],"names":[],"mappings":"AACA,OAAO,EAAmB,KAAK,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAEhF;;;;;;;;;;;;;;;;;;;;;;GAsBG;AAEH,MAAM,WAAW,0BAA0B;IACzC,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,gBAAgB,CAAC;IACzB,SAAS,CAAC,EAAE,OAAO,GAAG,QAAQ,CAAC;IAC/B,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,OAAO,CAAC;CAClB;AAED,MAAM,WAAW,wBAAwB;IACvC,SAAS,EAAE,MAAM,CAAC;IAClB,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,iBAAiB,EAAE,MAAM,CAAC;IAC1B,gBAAgB,EAAE,MAAM,CAAC;IACzB,mBAAmB,EAAE,MAAM,GAAG,IAAI,CAAC;IACnC,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;CAC1B;AAED,MAAM,WAAW,0BAA0B;IACzC,MAAM,EAAE,gBAAgB,CAAC;IACzB,SAAS,CAAC,EAAE,OAAO,GAAG,QAAQ,CAAC;IAC/B,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,EAAE,wBAAwB,EAAE,CAAC;IAClC,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,EAAE,OAAO,CAAC;CACjB;AAwDD,mEAAmE;AACnE,wBAAsB,iBAAiB,CAAC,MAAM,EAAE;IAC9C,OAAO,EAAE,OAAO,cAAc,EAAE,OAAO,CAAC;IACxC,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,gBAAgB,CAAC;IACzB,SAAS,CAAC,EAAE,OAAO,GAAG,QAAQ,CAAC;IAC/B,SAAS,EAAE,MAAM,CAAC;CACnB,GAAG,OAAO,CAAC,OAAO,CAAC,CA+BnB;AAED,wBAAsB,oBAAoB,CACxC,MAAM,EAAE,0BAA0B,GACjC,OAAO,CAAC,0BAA0B,CAAC,CA6CrC"}

package/payload/platform/plugins/memory/mcp/dist/tools/memory-find-candidates.js

@@ -0,0 +1,125 @@
+import { getSession } from "../lib/neo4j.js";
+import { mintFilterToken } from "../lib/filter-token.js";
+const DEFAULT_LIMIT = 200;
+const MAX_LIMIT = 1000;
+const PROJECT_AND_ORDER = `
+  WITH c,
+       size([x IN msgs WHERE x.role = 'assistant'])                   AS assistantMsgCount,
+       size([x IN msgs WHERE x.role = 'user' OR x.role IS NULL])      AS realUserMsgCount,
+       head([x IN msgs WHERE x.role = 'user' | x.content])            AS firstUserMsg
+  RETURN elementId(c)                           AS elementId,
+         c.conversationId                        AS conversationId,
+         assistantMsgCount                       AS assistantMsgCount,
+         realUserMsgCount                        AS realUserMsgCount,
+         CASE WHEN firstUserMsg IS NULL THEN NULL
+              WHEN size(firstUserMsg) > 120 THEN left(firstUserMsg, 120) + '…'
+              ELSE firstUserMsg
+         END                                     AS firstUserMsgPreview,
+         toString(c.trashedAt)                   AS trashedAt
+  ORDER BY c.createdAt ASC
+  LIMIT toInteger($limit)
+`;
+/**
+ * Canonical selection cypher per filter. Agent-authored cypher never reaches
+ * the DB; these literals are the only delete-selection path from the admin
+ * agent's tool surface.
+ */
+function buildSelectionCypher(filter) {
+    if (filter === "empty") {
+        return `
+      MATCH (c:Conversation)
+      WHERE c.accountId = $accountId
+        AND NOT c:Trashed
+        AND c.deletedAt IS NULL
+        AND ($agentTypeFilter IS NULL OR c.agentType = $agentTypeFilter)
+        AND NOT EXISTS { MATCH (:Message)-[:PART_OF]->(c) }
+      WITH c, [] AS msgs
+      ${PROJECT_AND_ORDER}
+    `;
+    }
+    // single-assistant
+    return `
+    MATCH (c:Conversation)
+    WHERE c.accountId = $accountId
+      AND NOT c:Trashed
+      AND c.deletedAt IS NULL
+      AND ($agentTypeFilter IS NULL OR c.agentType = $agentTypeFilter)
+    WITH c, [(m:Message)-[:PART_OF]->(c) | m] AS msgs
+    WHERE size(msgs) = 1
+      AND size([x IN msgs WHERE x.role = 'assistant']) = 1
+    ${PROJECT_AND_ORDER}
+  `;
+}
+/** Server-side re-check for `memory-delete` token verification. */
+export async function reverifyCandidate(params) {
+    const { session, accountId, filter, agentType, elementId } = params;
+    const cypher = filter === "empty"
+        ? `
+        MATCH (c:Conversation)
+        WHERE elementId(c) = $elementId
+          AND c.accountId = $accountId
+          AND NOT c:Trashed
+          AND c.deletedAt IS NULL
+          AND ($agentTypeFilter IS NULL OR c.agentType = $agentTypeFilter)
+          AND NOT EXISTS { MATCH (:Message)-[:PART_OF]->(c) }
+        RETURN elementId(c) AS eid
+      `
+        : `
+        MATCH (c:Conversation)
+        WHERE elementId(c) = $elementId
+          AND c.accountId = $accountId
+          AND NOT c:Trashed
+          AND c.deletedAt IS NULL
+          AND ($agentTypeFilter IS NULL OR c.agentType = $agentTypeFilter)
+        WITH c, [(m:Message)-[:PART_OF]->(c) | m] AS msgs
+        WHERE size(msgs) = 1 AND size([x IN msgs WHERE x.role = 'assistant']) = 1
+        RETURN elementId(c) AS eid
+      `;
+    const result = await session.run(cypher, {
+        elementId,
+        accountId,
+        agentTypeFilter: agentType ?? null,
+    });
+    return result.records.length === 1;
+}
+export async function memoryFindCandidates(params) {
+    const t0 = Date.now();
+    const { accountId, filter, agentType, dryRun = false } = params;
+    const limit = Math.min(params.limit ?? DEFAULT_LIMIT, MAX_LIMIT);
+    const session = getSession();
+    try {
+        const cypher = buildSelectionCypher(filter);
+        const result = await session.run(cypher, {
+            accountId,
+            agentTypeFilter: agentType ?? null,
+            limit,
+        });
+        const items = result.records.map((r) => ({
+            elementId: r.get("elementId"),
+            conversationId: r.get("conversationId") ?? null,
+            assistantMsgCount: Number(r.get("assistantMsgCount") ?? 0),
+            realUserMsgCount: Number(r.get("realUserMsgCount") ?? 0),
+            firstUserMsgPreview: r.get("firstUserMsgPreview") ?? null,
+            trashedAt: r.get("trashedAt") ?? null,
+        }));
+        // Under dryRun the caller wants to see what would match without receiving
+        // an actionable token — so the agent cannot "accidentally" feed a dryRun
+        // result to memory-delete. Returning an empty string rather than omitting
+        // the field keeps the result shape stable for the MCP surface.
+        const filterToken = dryRun ? "" : mintFilterToken({ filter, agentType, accountId });
+        process.stderr.write(`[memory-find-candidates] filter=${filter} agentType=${agentType ?? "any"} matched=${items.length} sampled=${items.length} dryRun=${dryRun} ms=${Date.now() - t0}\n`);
+        return {
+            filter,
+            agentType,
+            matched: items.length,
+            sampled: items.length,
+            items,
+            filterToken,
+            dryRun,
+        };
+    }
+    finally {
+        await session.close();
+    }
+}
+//# sourceMappingURL=memory-find-candidates.js.map

package/payload/platform/plugins/memory/mcp/dist/tools/memory-find-candidates.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"memory-find-candidates.js","sourceRoot":"","sources":["../../src/tools/memory-find-candidates.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAC7C,OAAO,EAAE,eAAe,EAAyB,MAAM,wBAAwB,CAAC;AAqDhF,MAAM,aAAa,GAAG,GAAG,CAAC;AAC1B,MAAM,SAAS,GAAG,IAAI,CAAC;AAEvB,MAAM,iBAAiB,GAAG;;;;;;;;;;;;;;;;CAgBzB,CAAC;AAEF;;;;GAIG;AACH,SAAS,oBAAoB,CAAC,MAAwB;IACpD,IAAI,MAAM,KAAK,OAAO,EAAE,CAAC;QACvB,OAAO;;;;;;;;QAQH,iBAAiB;KACpB,CAAC;IACJ,CAAC;IAED,mBAAmB;IACnB,OAAO;;;;;;;;;MASH,iBAAiB;GACpB,CAAC;AACJ,CAAC;AAED,mEAAmE;AACnE,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,MAMvC;IACC,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,SAAS,EAAE,GAAG,MAAM,CAAC;IACpE,MAAM,MAAM,GACV,MAAM,KAAK,OAAO;QAChB,CAAC,CAAC;;;;;;;;;OASD;QACD,CAAC,CAAC;;;;;;;;;;OAUD,CAAC;IACN,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE;QACvC,SAAS;QACT,SAAS;QACT,eAAe,EAAE,SAAS,IAAI,IAAI;KACnC,CAAC,CAAC;IACH,OAAO,MAAM,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC,CAAC;AACrC,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,MAAkC;IAElC,MAAM,EAAE,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACtB,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,KAAK,EAAE,GAAG,MAAM,CAAC;IAChE,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,KAAK,IAAI,aAAa,EAAE,SAAS,CAAC,CAAC;IAEjE,MAAM,OAAO,GAAG,UAAU,EAAE,CAAC;IAC7B,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,oBAAoB,CAAC,MAAM,CAAC,CAAC;QAC5C,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE;YACvC,SAAS;YACT,eAAe,EAAE,SAAS,IAAI,IAAI;YAClC,KAAK;SACN,CAAC,CAAC;QAEH,MAAM,KAAK,GAA+B,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YACnE,SAAS,EAAE,CAAC,CAAC,GAAG,CAAC,WAAW,CAAW;YACvC,cAAc,EAAG,CAAC,CAAC,GAAG,CAAC,gBAAgB,CAAmB,IAAI,IAAI;YAClE,iBAAiB,EAAE,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,mBAAmB,CAAC,IAAI,CAAC,CAAC;YAC1D,gBAAgB,EAAE,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,kBAAkB,CAAC,IAAI,CAAC,CAAC;YACxD,mBAAmB,EAAG,CAAC,CAAC,GAAG,CAAC,qBAAqB,CAAmB,IAAI,IAAI;YAC5E,SAAS,EAAG,CAAC,CAAC,GAAG,CAAC,WAAW,CAAmB,IAAI,IAAI;SACzD,CAAC,CAAC,CAAC;QAEJ,0EAA0E;QAC1E,yEAAyE;QACzE,0EAA0E;QAC1E,+DAA+D;QAC/D,MAAM,WAAW,GAAG,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,eAAe,CAAC,EAAE,MAAM,EAAE,SAAS,EAAE,SAAS,EAAE,CAAC,CAAC;QAEpF,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,mCAAmC,MAAM,cAAc,SAAS,IAAI,KAAK,YAAY,KAAK,CAAC,MAAM,YAAY,KAAK,CAAC,MAAM,WAAW,MAAM,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,CACrK,CAAC;QAEF,OAAO;YACL,MAAM;YACN,SAAS;YACT,OAAO,EAAE,KAAK,CAAC,MAAM;YACrB,OAAO,EAAE,KAAK,CAAC,MAAM;YACrB,KAAK;YACL,WAAW;YACX,MAAM;SACP,CAAC;IACJ,CAAC;YAAS,CAAC;QACT,MAAM,OAAO,CAAC,KAAK,EAAE,CAAC;IACxB,CAAC;AACH,CAAC"}