@syndash/research-vault-mcp 1.1.4 → 1.1.6

package/CHANGELOG.md

@@ -2,6 +2,27 @@
 
 ## Unreleased
 
+## 1.1.6 — 2026-06-16
+
+### Fixed
+
+- Aligned npm package license metadata with the monorepo root `LICENSE`.
+- Added `LICENSE` to the published package artifact so npm installs include the governing license text.
+- Updated README package mechanics and license language to match the packaged artifact.
+
+## 1.1.5 — 2026-06-08
+
+### Changed
+
+- `vault_search` now separates read/index/analysis state with `readability_verdict`, `index_verdict`, and `analysis_verdict`.
+- Readable search hits without `lastAnalyzedAt` now return `analysis_verdict: "NOT_ANALYZED"` without turning the overall search guidance into a scary `FLAG`.
+- Exact-id search hits are marked with `matched_fields: ["id_exact"]`.
+- Slash-heavy titles/categories are easier to find through punctuation-normalized matching, such as `Music/Rhythm` via `music rhythm`.
+
+### Verified
+
+- `bun test packages/research-vault-mcp/__tests__/vault_evidence_metadata.test.ts`
+
 ## 1.1.4 — 2026-05-10
 
 ### Changed

package/LICENSE

@@ -0,0 +1,30 @@
+# CC BY-NC-ND 4.0 — Attribution-NonCommercial-NoDerivatives
+
+**Creative Commons License — Non-Commercial Use Only**
+
+## TL;DR
+
+You MAY:
+- Study this research privately
+- Share it with attribution (keep this license intact)
+- Build on it for personal/research purposes
+
+You MAY NOT:
+- **Commercialize** the content or any derivative works
+- Create derivative works (remixes, modifications, extensions)
+- Remove this license from any distribution
+- Claim authorship of original work
+
+## Full Legal Notice
+
+This work may not be used for commercial purposes. Redistribution and use in source and binary forms, with or without modification, are permitted provided that the following conditions are met:
+
+1. Redistributions of source code must retain the above copyright notice, this list of conditions and the following disclaimer.
+
+2. The name "ProjectAlpha" and the author's name may not be used to endorse or promote products derived from this software without specific prior written permission.
+
+3. This software is provided by the copyright holders "as is" and any express or implied warranties are disclaimed, including but not limited to implied warranties of merchantability and fitness for a particular purpose.
+
+## Jurisdiction
+
+This license is governed by the laws of the jurisdiction in which the original author resides.

package/README.md

@@ -95,6 +95,31 @@ Mutation tools are hidden and blocked in `readonly`. `MCP_PROFILE=full` enables
 
 `vault_get` is bounded by default: it returns an excerpt unless the operator approves `include_content:true`, and even full-content requests are capped by `max_chars`. Search, status, and batch responses include `agent_guidance` plus evidence metadata for provenance, freshness, profile, and public-safety state.
 
+## Search and read semantics
+
+`vault_search` is an index/readability surface. It answers whether the query matched saved knowledge entries and whether those entries are readable. It does not treat missing analysis metadata as missing content.
+
+Search matching covers:
+
+- exact note IDs, marked with `matched_fields: ["id_exact"]`
+- titles, note content, IDs, and categories
+- punctuation-normalized text, so slash-heavy categories such as `software-engineering/game-design` can be found with `software engineering game design`
+
+Search results separate the relevant states:
+
+```json
+{
+  "readability_verdict": "PASS",
+  "index_verdict": "PASS",
+  "analysis_verdict": "NOT_ANALYZED",
+  "freshness_verdict": "PASS"
+}
+```
+
+That means the note matched and is readable, but has no `lastAnalyzedAt` yet. Treat `NOT_ANALYZED` as an analysis caveat, not a broken read. Stale or invalid analysis timestamps still produce a `FLAG`.
+
+`vault_get` is the authoritative exact-ID read path for follow-up evidence. Call `vault_search` first, then pass the exact returned `id` to `vault_get`.
+
 ## Tools exposed
 
 Current MCP contract:
@@ -119,6 +144,7 @@ Published packages include:
 - `dist/server.js`
 - `src/**/*.ts` for source inspection
 - `README.md`
+- `LICENSE`
 - `CHANGELOG.md`
 - `package.json`
 
@@ -144,8 +170,8 @@ The package is intentionally Bun-native today because the server uses Bun APIs.
 
 ## License
 
-Apache-2.0 for package code. Research artifacts in the repository root may use separate licenses; check the repository root license files.
+Released under the same license as the monorepo root: [CC BY-NC-ND 4.0](./LICENSE). You may share unmodified copies with attribution for non-commercial use. For commercial licensing or research collaboration, open an issue in the source repository.
 
 ## Releases
 
-See [CHANGELOG.md](./CHANGELOG.md). Current npm release: `1.1.4`.
+See [CHANGELOG.md](./CHANGELOG.md). Current npm release: `1.1.6`.

package/dist/server.js

@@ -270,6 +270,9 @@ function clamp(value, min, max) {
 function lower(value) {
   return (value ?? "").toLowerCase();
 }
+function normalized(value) {
+  return lower(value).replace(/[^a-z0-9]+/g, " ").replace(/\s+/g, " ").trim();
+}
 function queryTerms(query) {
   return lower(query).split(/\s+/).map((term) => term.trim()).filter(Boolean);
 }
@@ -278,12 +281,17 @@ function includesQuery(value, query) {
   if (terms.length === 0)
     return false;
   const haystack = lower(value);
-  return terms.some((term) => haystack.includes(term));
+  const normalizedHaystack = normalized(value);
+  return terms.some((term) => haystack.includes(term)) || normalized(queryTerms(query).join(" ")).split(/\s+/).some((term) => normalizedHaystack.includes(term));
+}
+function equalsQuery(value, query) {
+  return Boolean(query?.trim()) && lower(value).trim() === lower(query).trim();
 }
 function matchedFields(entry, query) {
   if (!query?.trim())
     return [];
   const candidates = [
+    ["id_exact", equalsQuery(entry.id, query) ? entry.id : undefined],
     ["title", entry.title],
     ["content", entry.content],
     ["id", entry.id],
@@ -297,6 +305,8 @@ function whyMatched(entry, query, fields) {
   if (fields.length === 0)
     return "Result is included after filters; no direct field match was detected.";
   const labels = fields.map((field) => {
+    if (field === "id_exact")
+      return "exact id";
     if (field === "title")
       return "title";
     if (field === "content")
@@ -311,21 +321,21 @@ function snippetFromContent(content, query, maxChars = 240) {
   const limit = Math.max(0, Math.floor(maxChars));
   if (limit === 0)
     return "";
-  const normalized = content.replace(/\s+/g, " ").trim();
-  if (normalized.length <= limit)
-    return normalized;
+  const normalized2 = content.replace(/\s+/g, " ").trim();
+  if (normalized2.length <= limit)
+    return normalized2;
   const terms = queryTerms(query);
-  const lowerContent = lower(normalized);
+  const lowerContent = lower(normalized2);
   const hitIndex = terms.map((term) => lowerContent.indexOf(term)).filter((index) => index >= 0).sort((a, b) => a - b)[0];
   if (hitIndex === undefined)
-    return normalized.slice(0, limit).trimEnd();
+    return normalized2.slice(0, limit).trimEnd();
   const halfWindow = Math.floor(limit / 2);
-  const start = Math.max(0, Math.min(hitIndex - halfWindow, normalized.length - limit));
-  const end = Math.min(normalized.length, start + limit);
+  const start = Math.max(0, Math.min(hitIndex - halfWindow, normalized2.length - limit));
+  const end = Math.min(normalized2.length, start + limit);
   const prefix = start > 0 ? "..." : "";
-  const suffix = end < normalized.length ? "..." : "";
+  const suffix = end < normalized2.length ? "..." : "";
   const available = Math.max(0, limit - prefix.length - suffix.length);
-  return `${prefix}${normalized.slice(start, start + available).trim()}${suffix}`;
+  return `${prefix}${normalized2.slice(start, start + available).trim()}${suffix}`;
 }
 function staleVerdict(lastAnalyzedAt) {
   if (!lastAnalyzedAt) {
@@ -341,14 +351,46 @@ function staleVerdict(lastAnalyzedAt) {
   }
   return { verdict: "PASS", reason: "Analysis is fresh enough for the read surface." };
 }
+function analysisVerdict(lastAnalyzedAt) {
+  if (!lastAnalyzedAt) {
+    return {
+      verdict: "NOT_ANALYZED",
+      freshness_verdict: "PASS",
+      reason: "No analysis timestamp was provided; content can still be readable."
+    };
+  }
+  const freshness = staleVerdict(lastAnalyzedAt);
+  if (freshness.verdict === "PASS") {
+    return {
+      verdict: "PASS",
+      freshness_verdict: "PASS",
+      reason: freshness.reason
+    };
+  }
+  if (freshness.reason.includes("could not be parsed")) {
+    return {
+      verdict: "INVALID",
+      freshness_verdict: "FLAG",
+      reason: freshness.reason
+    };
+  }
+  return {
+    verdict: "STALE",
+    freshness_verdict: "FLAG",
+    reason: freshness.reason
+  };
+}
 function itemFreshness(entry) {
   const lastAnalyzedAt = entry.score?.lastAnalyzedAt ?? null;
-  const verdict = staleVerdict(lastAnalyzedAt);
+  const analysis = analysisVerdict(lastAnalyzedAt);
   return {
     last_analyzed_at: lastAnalyzedAt,
     source_mtime: entry.modified || null,
-    freshness_verdict: verdict.verdict,
-    freshness_reason: verdict.reason
+    readability_verdict: "PASS",
+    index_verdict: "PASS",
+    analysis_verdict: analysis.verdict,
+    freshness_verdict: analysis.freshness_verdict,
+    freshness_reason: analysis.reason
   };
 }
 function queueFreshness(queueItems) {
@@ -672,9 +714,10 @@ var vaultTools = [
           ...freshness
         };
       });
-      const hasStale = results.some((result) => result.freshness_verdict === "FLAG");
-      const envelope = okEnvelope({ query, category, results, total: results.length }, hasStale ? flagGuidance("Search completed, but one or more results lack fresh analysis metadata.", "Use source_ref for readonly follow-up and refresh analysis metadata in the operator lane if needed.", "vault_get") : passGuidance("Search completed with provenance and freshness metadata.", "Use source_ref or vault_get for bounded follow-up evidence.", "vault_get"), {
-        freshness: hasStale ? "Some search results are missing or stale analysis timestamps." : "Search result analysis metadata is fresh.",
+      const hasAnalysisRisk = results.some((result) => ["STALE", "INVALID"].includes(result.analysis_verdict));
+      const hasNotAnalyzed = results.some((result) => result.analysis_verdict === "NOT_ANALYZED");
+      const envelope = okEnvelope({ query, category, results, total: results.length }, hasAnalysisRisk ? flagGuidance("Search completed, but one or more results have stale or invalid analysis metadata.", "Use source_ref for readonly follow-up and refresh stale analysis metadata in the operator lane if needed.", "vault_get") : passGuidance(hasNotAnalyzed ? "Search completed; one or more readable results have not been analyzed yet." : "Search completed with provenance and freshness metadata.", hasNotAnalyzed ? "Use source_ref or vault_get for bounded follow-up evidence; treat NOT_ANALYZED as an analysis caveat, not missing content." : "Use source_ref or vault_get for bounded follow-up evidence.", "vault_get"), {
+        freshness: hasAnalysisRisk ? "Some search results have stale or invalid analysis timestamps." : hasNotAnalyzed ? "Some readable search results do not have analysis timestamps yet." : "Search result analysis metadata is fresh.",
         provenance: "vault_search result source_ref values are vault:// references without local paths."
       });
       return {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@syndash/research-vault-mcp",
-  "version": "1.1.4",
+  "version": "1.1.6",
   "description": "DASH Research Vault MCP server — local-first semantic search, note persistence, and public-safe knowledge-base tools for MCP-compatible agents.",
   "type": "module",
   "bin": {
@@ -21,7 +21,7 @@
   "bugs": {
     "url": "https://github.com/Fearvox/dash-research-vault/issues"
   },
-  "license": "Apache-2.0",
+  "license": "CC-BY-NC-ND-4.0",
   "publishConfig": {
     "access": "public"
   },
@@ -30,6 +30,7 @@
     "dist/**/*.js",
     "bin/**/*.mjs",
     "README.md",
+    "LICENSE",
     "CHANGELOG.md",
     "package.json"
   ],

package/src/evidence_metadata.ts

@@ -1,12 +1,21 @@
 import type { DecayScore, VaultEntry } from './types.ts'
 
 export type FreshnessVerdict = 'PASS' | 'FLAG'
+export type ReadabilityVerdict = 'PASS' | 'MISSING'
+export type IndexVerdict = 'PASS' | 'NO_MATCH'
+export type AnalysisVerdict = 'PASS' | 'STALE' | 'NOT_ANALYZED' | 'INVALID'
 
 export interface FreshnessShape {
   verdict: FreshnessVerdict
   reason: string
 }
 
+export interface AnalysisShape {
+  verdict: AnalysisVerdict
+  freshness_verdict: FreshnessVerdict
+  reason: string
+}
+
 const STALE_AFTER_DAYS = 7
 const DAY_MS = 24 * 60 * 60 * 1000
 
@@ -18,6 +27,13 @@ function lower(value: string | undefined | null): string {
   return (value ?? '').toLowerCase()
 }
 
+function normalized(value: string | undefined | null): string {
+  return lower(value)
+    .replace(/[^a-z0-9]+/g, ' ')
+    .replace(/\s+/g, ' ')
+    .trim()
+}
+
 function queryTerms(query?: string): string[] {
   return lower(query)
     .split(/\s+/)
@@ -29,13 +45,20 @@ function includesQuery(value: string | undefined, query?: string): boolean {
   const terms = queryTerms(query)
   if (terms.length === 0) return false
   const haystack = lower(value)
+  const normalizedHaystack = normalized(value)
   return terms.some(term => haystack.includes(term))
+    || normalized(queryTerms(query).join(' ')).split(/\s+/).some(term => normalizedHaystack.includes(term))
+}
+
+function equalsQuery(value: string | undefined, query?: string): boolean {
+  return Boolean(query?.trim()) && lower(value).trim() === lower(query).trim()
 }
 
 export function matchedFields(entry: VaultEntry & { content?: string }, query?: string): string[] {
   if (!query?.trim()) return []
 
   const candidates: Array<[string, string | undefined]> = [
+    ['id_exact', equalsQuery(entry.id, query) ? entry.id : undefined],
     ['title', entry.title],
     ['content', entry.content],
     ['id', entry.id],
@@ -52,6 +75,7 @@ export function whyMatched(entry: VaultEntry & { content?: string }, query: stri
   if (fields.length === 0) return 'Result is included after filters; no direct field match was detected.'
 
   const labels = fields.map(field => {
+    if (field === 'id_exact') return 'exact id'
     if (field === 'title') return 'title'
     if (field === 'content') return 'note content'
     if (field === 'category') return 'category'
@@ -104,15 +128,51 @@ export function staleVerdict(lastAnalyzedAt?: string | null): FreshnessShape {
   return { verdict: 'PASS', reason: 'Analysis is fresh enough for the read surface.' }
 }
 
+export function analysisVerdict(lastAnalyzedAt?: string | null): AnalysisShape {
+  if (!lastAnalyzedAt) {
+    return {
+      verdict: 'NOT_ANALYZED',
+      freshness_verdict: 'PASS',
+      reason: 'No analysis timestamp was provided; content can still be readable.',
+    }
+  }
+
+  const freshness = staleVerdict(lastAnalyzedAt)
+  if (freshness.verdict === 'PASS') {
+    return {
+      verdict: 'PASS',
+      freshness_verdict: 'PASS',
+      reason: freshness.reason,
+    }
+  }
+
+  if (freshness.reason.includes('could not be parsed')) {
+    return {
+      verdict: 'INVALID',
+      freshness_verdict: 'FLAG',
+      reason: freshness.reason,
+    }
+  }
+
+  return {
+    verdict: 'STALE',
+    freshness_verdict: 'FLAG',
+    reason: freshness.reason,
+  }
+}
+
 export function itemFreshness(entry: VaultEntry & { score?: DecayScore & { lastAnalyzedAt?: string } }) {
   const lastAnalyzedAt = entry.score?.lastAnalyzedAt ?? null
-  const verdict = staleVerdict(lastAnalyzedAt)
+  const analysis = analysisVerdict(lastAnalyzedAt)
 
   return {
     last_analyzed_at: lastAnalyzedAt,
     source_mtime: entry.modified || null,
-    freshness_verdict: verdict.verdict,
-    freshness_reason: verdict.reason,
+    readability_verdict: 'PASS' as ReadabilityVerdict,
+    index_verdict: 'PASS' as IndexVerdict,
+    analysis_verdict: analysis.verdict,
+    freshness_verdict: analysis.freshness_verdict,
+    freshness_reason: analysis.reason,
   }
 }
 

package/src/vault.ts

@@ -330,22 +330,31 @@ const vaultTools = [
         }
       })
 
-      const hasStale = results.some(result => result.freshness_verdict === 'FLAG')
+      const hasAnalysisRisk = results.some(result => ['STALE', 'INVALID'].includes(result.analysis_verdict))
+      const hasNotAnalyzed = results.some(result => result.analysis_verdict === 'NOT_ANALYZED')
       const envelope = okEnvelope(
         { query, category, results, total: results.length },
-        hasStale
+        hasAnalysisRisk
           ? flagGuidance(
-            'Search completed, but one or more results lack fresh analysis metadata.',
-            'Use source_ref for readonly follow-up and refresh analysis metadata in the operator lane if needed.',
+            'Search completed, but one or more results have stale or invalid analysis metadata.',
+            'Use source_ref for readonly follow-up and refresh stale analysis metadata in the operator lane if needed.',
             'vault_get',
           )
           : passGuidance(
-            'Search completed with provenance and freshness metadata.',
-            'Use source_ref or vault_get for bounded follow-up evidence.',
+            hasNotAnalyzed
+              ? 'Search completed; one or more readable results have not been analyzed yet.'
+              : 'Search completed with provenance and freshness metadata.',
+            hasNotAnalyzed
+              ? 'Use source_ref or vault_get for bounded follow-up evidence; treat NOT_ANALYZED as an analysis caveat, not missing content.'
+              : 'Use source_ref or vault_get for bounded follow-up evidence.',
             'vault_get',
           ),
         {
-          freshness: hasStale ? 'Some search results are missing or stale analysis timestamps.' : 'Search result analysis metadata is fresh.',
+          freshness: hasAnalysisRisk
+            ? 'Some search results have stale or invalid analysis timestamps.'
+            : hasNotAnalyzed
+              ? 'Some readable search results do not have analysis timestamps yet.'
+              : 'Search result analysis metadata is fresh.',
           provenance: 'vault_search result source_ref values are vault:// references without local paths.',
         },
       )