@traqr/memory 0.2.32 → 0.2.33

package/dist/lib/stdout-hygiene.test.d.ts

@@ -0,0 +1,32 @@
+/**
+ * stdout-hygiene — ban stdout-writing calls in MCP-reachable code.
+ *
+ * The memory MCP serves JSON-RPC over stdio: STDOUT is the protocol channel.
+ * A single non-JSON line on stdout desyncs framing — the client logs
+ * "Ignoring non-JSON line on stdout" and can drop the connection (TD-927's
+ * recurring manual-reconnect symptom). #2510 fixed four such calls in
+ * src/lib by routing them to stderr; this test is the durable version of
+ * that fix — the class can't recur unnoticed.
+ *
+ * Scope (code reachable from the stdio MCP process):
+ *   - packages/memory/src/lib/**        (excluding *.test.ts)
+ *   - packages/memory/src/vectordb/**   (excluding *.test.ts)
+ *   - packages/memory/src/index.ts
+ *   - packages/memory-mcp/src/**        (excluding cli/ and *.test.ts)
+ *
+ * Deliberately OUT of scope (stdout is the correct stream there):
+ *   server.ts + routes/ (HTTP surface), migrate.ts (CLI), memory-mcp/src/cli/.
+ *
+ * Banned: console.log / console.info / console.debug (all alias to stdout in
+ * Node) and process.stdout.write. console.error / console.warn go to stderr
+ * and are the correct diagnostics channel. A deliberate pre-transport stdout
+ * write (e.g. a --help/--print-* CLI early-exit block) is allowed with an
+ * inline `stdout-ok` comment naming why.
+ *
+ * The scanner also asserts it scanned a sane number of files — a moved
+ * directory or path typo must FAIL this test, not green it ("scanned 0
+ * files" is the Total:0≠empty proxy trap).
+ *
+ * Run: npx tsx packages/memory/src/lib/stdout-hygiene.test.ts
+ */
+export {};

package/dist/lib/stdout-hygiene.test.js

@@ -0,0 +1,110 @@
+/**
+ * stdout-hygiene — ban stdout-writing calls in MCP-reachable code.
+ *
+ * The memory MCP serves JSON-RPC over stdio: STDOUT is the protocol channel.
+ * A single non-JSON line on stdout desyncs framing — the client logs
+ * "Ignoring non-JSON line on stdout" and can drop the connection (TD-927's
+ * recurring manual-reconnect symptom). #2510 fixed four such calls in
+ * src/lib by routing them to stderr; this test is the durable version of
+ * that fix — the class can't recur unnoticed.
+ *
+ * Scope (code reachable from the stdio MCP process):
+ *   - packages/memory/src/lib/**        (excluding *.test.ts)
+ *   - packages/memory/src/vectordb/**   (excluding *.test.ts)
+ *   - packages/memory/src/index.ts
+ *   - packages/memory-mcp/src/**        (excluding cli/ and *.test.ts)
+ *
+ * Deliberately OUT of scope (stdout is the correct stream there):
+ *   server.ts + routes/ (HTTP surface), migrate.ts (CLI), memory-mcp/src/cli/.
+ *
+ * Banned: console.log / console.info / console.debug (all alias to stdout in
+ * Node) and process.stdout.write. console.error / console.warn go to stderr
+ * and are the correct diagnostics channel. A deliberate pre-transport stdout
+ * write (e.g. a --help/--print-* CLI early-exit block) is allowed with an
+ * inline `stdout-ok` comment naming why.
+ *
+ * The scanner also asserts it scanned a sane number of files — a moved
+ * directory or path typo must FAIL this test, not green it ("scanned 0
+ * files" is the Total:0≠empty proxy trap).
+ *
+ * Run: npx tsx packages/memory/src/lib/stdout-hygiene.test.ts
+ */
+import { readdirSync, readFileSync, existsSync } from 'node:fs';
+import { join, dirname, relative } from 'node:path';
+import { fileURLToPath } from 'node:url';
+const __dirname = dirname(fileURLToPath(import.meta.url));
+const memorySrc = join(__dirname, '..'); // packages/memory/src
+const packagesRoot = join(memorySrc, '..', '..'); // packages/
+const mcpSrc = join(packagesRoot, 'memory-mcp', 'src');
+const BANNED = /\b(?:console\.(?:log|info|debug)|process\.stdout\.write)\s*\(/;
+function walk(dir, files = []) {
+    for (const entry of readdirSync(dir, { withFileTypes: true })) {
+        const full = join(dir, entry.name);
+        if (entry.isDirectory()) {
+            walk(full, files);
+        }
+        else if (entry.name.endsWith('.ts') && !entry.name.endsWith('.test.ts')) {
+            files.push(full);
+        }
+    }
+    return files;
+}
+function scanFile(file, violations) {
+    const lines = readFileSync(file, 'utf-8').split('\n');
+    lines.forEach((line, i) => {
+        const trimmed = line.trim();
+        // Skip comment lines (doc examples like encryption.ts's key-gen one-liner)
+        if (trimmed.startsWith('//') || trimmed.startsWith('*') || trimmed.startsWith('/*'))
+            return;
+        if (!BANNED.test(line))
+            return;
+        if (line.includes('stdout-ok'))
+            return;
+        violations.push({ file, line: i + 1, text: trimmed.slice(0, 100) });
+    });
+}
+// Collect scope
+const targets = [];
+targets.push(...walk(join(memorySrc, 'lib')));
+targets.push(...walk(join(memorySrc, 'vectordb')));
+targets.push(join(memorySrc, 'index.ts'));
+if (existsSync(mcpSrc)) {
+    for (const entry of readdirSync(mcpSrc, { withFileTypes: true })) {
+        const full = join(mcpSrc, entry.name);
+        if (entry.isDirectory() && entry.name !== 'cli') {
+            walk(full, targets);
+        }
+        else if (entry.isFile() && entry.name.endsWith('.ts') && !entry.name.endsWith('.test.ts')) {
+            targets.push(full);
+        }
+    }
+}
+const violations = [];
+for (const file of targets)
+    scanFile(file, violations);
+let passed = 0;
+let failed = 0;
+function assert(label, condition) {
+    if (condition) {
+        console.log(`  PASS  ${label}`);
+        passed++;
+    }
+    else {
+        console.log(`  FAIL  ${label}`);
+        failed++;
+    }
+}
+console.log(`[stdout-hygiene] scanned ${targets.length} files`);
+assert(`scanned a sane file count (${targets.length} >= 20 — path typo would shrink this)`, targets.length >= 20);
+assert(`zero stdout-writing calls in MCP-reachable code (found ${violations.length})`, violations.length === 0);
+if (violations.length > 0) {
+    console.log('\n  Offending lines (route diagnostics to console.error, or mark deliberate');
+    console.log('  pre-transport CLI writes with an inline `stdout-ok` comment):');
+    for (const v of violations) {
+        console.log(`    ${relative(packagesRoot, v.file)}:${v.line}  ${v.text}`);
+    }
+}
+console.log(`\n${passed} passed, ${failed} failed`);
+if (failed > 0)
+    process.exit(1);
+//# sourceMappingURL=stdout-hygiene.test.js.map

package/dist/lib/stdout-hygiene.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"stdout-hygiene.test.js","sourceRoot":"","sources":["../../src/lib/stdout-hygiene.test.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8BG;AAEH,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,SAAS,CAAA;AAC/D,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAA;AACnD,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAA;AAExC,MAAM,SAAS,GAAG,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAA;AACzD,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,CAAA,CAAC,sBAAsB;AAC9D,MAAM,YAAY,GAAG,IAAI,CAAC,SAAS,EAAE,IAAI,EAAE,IAAI,CAAC,CAAA,CAAC,YAAY;AAC7D,MAAM,MAAM,GAAG,IAAI,CAAC,YAAY,EAAE,YAAY,EAAE,KAAK,CAAC,CAAA;AAEtD,MAAM,MAAM,GAAG,+DAA+D,CAAA;AAQ9E,SAAS,IAAI,CAAC,GAAW,EAAE,QAAkB,EAAE;IAC7C,KAAK,MAAM,KAAK,IAAI,WAAW,CAAC,GAAG,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;QAC9D,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,CAAC,CAAA;QAClC,IAAI,KAAK,CAAC,WAAW,EAAE,EAAE,CAAC;YACxB,IAAI,CAAC,IAAI,EAAE,KAAK,CAAC,CAAA;QACnB,CAAC;aAAM,IAAI,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC;YAC1E,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QAClB,CAAC;IACH,CAAC;IACD,OAAO,KAAK,CAAA;AACd,CAAC;AAED,SAAS,QAAQ,CAAC,IAAY,EAAE,UAAuB;IACrD,MAAM,KAAK,GAAG,YAAY,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAA;IACrD,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,CAAC,EAAE,EAAE;QACxB,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,CAAA;QAC3B,2EAA2E;QAC3E,IAAI,OAAO,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,OAAO,CAAC,UAAU,CAAC,IAAI,CAAC;YAAE,OAAM;QAC3F,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC;YAAE,OAAM;QAC9B,IAAI,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC;YAAE,OAAM;QACtC,UAAU,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,GAAG,CAAC,EAAE,IAAI,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC,CAAA;IACrE,CAAC,CAAC,CAAA;AACJ,CAAC;AAED,gBAAgB;AAChB,MAAM,OAAO,GAAa,EAAE,CAAA;AAC5B,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC,CAAC,CAAA;AAC7C,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,UAAU,CAAC,CAAC,CAAC,CAAA;AAClD,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,UAAU,CAAC,CAAC,CAAA;AACzC,IAAI,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;IACvB,KAAK,MAAM,KAAK,IAAI,WAAW,CAAC,MAAM,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;QACjE,MAAM,IAAI,GAAG,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC,IAAI,CAAC,CAAA;QACrC,IAAI,KAAK,CAAC,WAAW,EAAE,IAAI,KAAK,CAAC,IAAI,KAAK,KAAK,EAAE,CAAC;YAChD,IAAI,CAAC,IAAI,EAAE,OAAO,CAAC,CAAA;QACrB,CAAC;aAAM,IAAI,KAAK,CAAC,MAAM,EAAE,IAAI,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC;YAC5F,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QACpB,CAAC;IACH,CAAC;AACH,CAAC;AAED,MAAM,UAAU,GAAgB,EAAE,CAAA;AAClC,KAAK,MAAM,IAAI,IAAI,OAAO;IAAE,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAC,CAAA;AAEtD,IAAI,MAAM,GAAG,CAAC,CAAA;AACd,IAAI,MAAM,GAAG,CAAC,CAAA;AAEd,SAAS,MAAM,CAAC,KAAa,EAAE,SAAkB;IAC/C,IAAI,SAAS,EAAE,CAAC;QACd,OAAO,CAAC,GAAG,CAAC,WAAW,KAAK,EAAE,CAAC,CAAA;QAC/B,MAAM,EAAE,CAAA;IACV,CAAC;SAAM,CAAC;QACN,OAAO,CAAC,GAAG,CAAC,WAAW,KAAK,EAAE,CAAC,CAAA;QAC/B,MAAM,EAAE,CAAA;IACV,CAAC;AACH,CAAC;AAED,OAAO,CAAC,GAAG,CAAC,4BAA4B,OAAO,CAAC,MAAM,QAAQ,CAAC,CAAA;AAE/D,MAAM,CAAC,8BAA8B,OAAO,CAAC,MAAM,uCAAuC,EAAE,OAAO,CAAC,MAAM,IAAI,EAAE,CAAC,CAAA;AACjH,MAAM,CACJ,0DAA0D,UAAU,CAAC,MAAM,GAAG,EAC9E,UAAU,CAAC,MAAM,KAAK,CAAC,CACxB,CAAA;AAED,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;IAC1B,OAAO,CAAC,GAAG,CAAC,6EAA6E,CAAC,CAAA;IAC1F,OAAO,CAAC,GAAG,CAAC,iEAAiE,CAAC,CAAA;IAC9E,KAAK,MAAM,CAAC,IAAI,UAAU,EAAE,CAAC;QAC3B,OAAO,CAAC,GAAG,CAAC,OAAO,QAAQ,CAAC,YAAY,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,IAAI,EAAE,CAAC,CAAA;IAC3E,CAAC;AACH,CAAC;AAED,OAAO,CAAC,GAAG,CAAC,KAAK,MAAM,YAAY,MAAM,SAAS,CAAC,CAAA;AACnD,IAAI,MAAM,GAAG,CAAC;IAAE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@traqr/memory",
-  "version": "0.2.32",
+  "version": "0.2.33",
   "description": "Persistent memory for AI agents. Multi-strategy retrieval (semantic + BM25 + RRF), 3-zone cosine triage, type-aware lifecycle, entity canonicalization. Postgres + pgvector.",
   "type": "module",
   "main": "./dist/index.js",
@@ -15,7 +15,7 @@
   "scripts": {
     "build": "tsc",
     "dev": "tsc --watch",
-    "test": "tsx src/lib/quality-gate.test.ts && tsx src/lib/retrieval.test.ts && tsx src/lib/classification-ceiling.test.ts && tsx src/lib/classification-enforcement.integration.test.ts && tsx src/vectordb/converters.test.ts && tsx src/lib/context.test.ts && tsx src/lib/pii-detection.test.ts && tsx src/lib/health.test.ts",
+    "test": "tsx src/lib/quality-gate.test.ts && tsx src/lib/retrieval.test.ts && tsx src/lib/classification-ceiling.test.ts && tsx src/lib/classification-enforcement.integration.test.ts && tsx src/vectordb/converters.test.ts && tsx src/lib/context.test.ts && tsx src/lib/pii-detection.test.ts && tsx src/lib/health.test.ts && tsx src/lib/stdout-hygiene.test.ts",
     "migrate": "tsx src/migrate.ts"
   },
   "files": [