@unson/brainbase-mcp 0.10.10 → 0.10.12

package/README.md

@@ -57,6 +57,8 @@ Brainbaseの価値は、情報を多く保存することではありません
 
 共通UIの最初の公開単位として、知識UIを `@unson/brainbase-mcp/ui/*` から利用できます。Mana委任UIはUnsonの実行基盤（Mana）に結びつくため組織版の画面とし、0.8.0の後に共通UIから外しました。
 
+私有版の画面は `createLocalWebHost({ extensions })` へ登録します。ホストが共通ナビ、静的ファイルの許可リスト、loopback Host検査、書込時の同一Origin・起動トークン検査を担います。拡張のAPIは `/api/extensions/<id>`、画面資産は `/ui/extensions/<id>` に限られ、私有コードはこの公開packageへ含めません。契約と受入条件は[拡張Story](docs/stories/story-local-web-private-extension-v1.md)に記録しています。
+
 実装済み・develop・計画中の境界は、[現在の状態](https://brainbase.pages.dev/guide/status)を参照してください。
 
 ## 10分で試す

package/contracts/judgment-dag/digest.json

@@ -25,8 +25,8 @@
     },
     {
       "path": "README.md",
-      "sha256": "bb90217590722381e3df17950e69e27e72aad25372f54a9a0767cc5c6d14c7d5"
+      "sha256": "c36fd404cbc6e9c2262e82b5d921ccbcef6617774f969dd1e0252cd9e7101af8"
     }
   ],
-  "digest": "8c7b66383e9bb30525c3a9a8e7f37c120209c17b1673ebe2a2a6769b076e94be"
+  "digest": "1beccdf5679b9b7f42375a498a76a661d87ba665f66657c93827dd8d6a938c28"
 }

package/dist/knowledge-promotion.d.ts

@@ -0,0 +1,410 @@
+export declare const KNOWLEDGE_PROMOTION_CONTRACT_VERSION: "knowledge_promotion.v1";
+/** Kept byte-compatible with brainbase-unson so stored hashes and receipts still verify. */
+export declare const NORMALIZED_PROMOTION_SCHEMA_VERSION: "personal_knowledge_normalized.v1";
+export type PromotionApprovalKind = 'personal_share' | 'organization_candidate';
+export type PromotionSourceKind = 'personal_knowledge_v1' | 'organization_candidate';
+export type PromotionStatus = 'pending_owner_approval' | 'pending_org_review' | 'owner_rejected' | 'org_rejected' | 'org_accepted' | 'source_stale';
+export type PromotionDecision = 'approve' | 'reject';
+export type PromotionReviewAction = 'request' | 'owner_consent' | 'organization_review';
+export declare class KnowledgePromotionError extends Error {
+    readonly code: string;
+    readonly status: number;
+    readonly details?: Record<string, unknown>;
+    constructor(code: string, status?: number, details?: Record<string, unknown>);
+}
+type JsonValue = null | boolean | number | string | JsonValue[] | {
+    [key: string]: JsonValue;
+};
+export interface NormalizedPromotionEntity {
+    id: string;
+    type: string;
+    payload: Record<string, JsonValue>;
+}
+export interface NormalizedPromotionEdge {
+    from_id: string;
+    to_id: string;
+    relation: string;
+    payload: Record<string, JsonValue>;
+}
+export interface NormalizedPromotionPayload {
+    schema_version: typeof NORMALIZED_PROMOTION_SCHEMA_VERSION;
+    kind: 'decision' | 'entity' | 'relation';
+    entity: NormalizedPromotionEntity;
+    edges: NormalizedPromotionEdge[];
+    context_entities: Array<{
+        id: string;
+        type: string;
+    }>;
+    decision_domain?: string;
+    sensitivity: string;
+    role_min: string;
+}
+export interface NormalizedPromotionResult {
+    normalized: NormalizedPromotionPayload;
+    normalized_payload_hash: string;
+    summary: string;
+}
+export declare function promotionSha256(value: unknown): string;
+/** Validate and canonicalize the structured content a person approves for the organization. */
+export declare function normalizePromotionPayload(input: unknown): NormalizedPromotionResult;
+/** Owner consent receipt, identical to brainbase-unson's `pkoc_` receipt. */
+export declare function ownerConsentReceipt(request: {
+    request_id: string;
+    owner_person_id: string | null;
+    owner_decided_by: string | null;
+    owner_decided_at: string | Date | null;
+    normalized_payload_hash: string;
+}): string;
+/** Organization review receipt of a personal share, identical to brainbase-unson's `pkor_` receipt. */
+export declare function organizationReviewReceipt(request: {
+    request_id: string;
+}, normalizedPayloadHash: string, reviewerPersonId: string, reviewedAt: string): string;
+/** Organization approval receipt of an organization candidate. */
+export declare function candidateApprovalReceipt(request: {
+    request_id: string;
+    source: PromotionSourceRef;
+    normalized_payload_hash: string;
+}, reviewerPersonId: string, reviewedAt: string): string;
+export interface PromotionSourceRef {
+    kind: PromotionSourceKind;
+    id: string;
+    version: string;
+    evidence_hash: string;
+}
+export interface PromotionDecisionRecord {
+    action: 'owner_consent' | 'organization_review';
+    decision: PromotionDecision;
+    actor_person_id: string;
+    decided_at: string;
+    receipt_id: string | null;
+    reason: string | null;
+}
+export interface KnowledgePromotionRequest {
+    request_id: string;
+    contract_version: typeof KNOWLEDGE_PROMOTION_CONTRACT_VERSION;
+    approval_kind: PromotionApprovalKind;
+    source: PromotionSourceRef;
+    source_event_ids: string[];
+    organization_id: string;
+    project_code: string;
+    owner_person_id: string | null;
+    requested_by_person_id: string;
+    status: PromotionStatus;
+    revision: number;
+    subject: {
+        type: string;
+        id: string;
+    };
+    sanitized_preview: string | null;
+    preview_hash: string | null;
+    normalized_payload: NormalizedPromotionPayload;
+    normalized_payload_hash: string;
+    normalization_contract_version: typeof NORMALIZED_PROMOTION_SCHEMA_VERSION;
+    owner_decided_by: string | null;
+    owner_decided_at: string | null;
+    owner_consent_receipt_id: string | null;
+    organization_review_receipt_id: string | null;
+    organization_event_id: string | null;
+    graph_entity_id: string | null;
+    decisions: PromotionDecisionRecord[];
+    created_at: string;
+    updated_at: string;
+}
+export interface KnowledgePromotionPrincipal {
+    personId: string;
+    /** The person who acts, when a service acts for `personId`. Defaults to `personId`. */
+    actorPersonId?: string;
+    organizationId: string;
+    projectCodes: string[];
+    role?: string;
+    principalType: 'person' | 'service';
+}
+/** Opaque signed authority. When present, the store records its single use. */
+export interface KnowledgePromotionAuthority {
+    operationId: string;
+    idempotencyKey: string;
+    [key: string]: unknown;
+}
+export interface PromotionContext {
+    tx: unknown;
+    principal: KnowledgePromotionPrincipal;
+}
+export interface PersonalKnowledgeSourceRecord {
+    event_id: string;
+    owner_person_id: string;
+    organization_id: string;
+    body_hash: string;
+    version: string;
+    active: boolean;
+}
+export interface OrganizationCandidateSourceRecord {
+    candidate_id: string;
+    organization_id: string;
+    project_code: string;
+    version: string;
+    active: boolean;
+    evidence_hash: string;
+    source_event_ids?: string[];
+}
+export interface OrganizationCandidateOutcome {
+    candidate_id: string;
+    outcome: 'promoted' | 'rejected';
+    request_id: string;
+    actor_person_id: string;
+    receipt_id: string;
+    graph_entity_id: string | null;
+    organization_event_id: string | null;
+    decided_at: string;
+}
+export interface KnowledgePromotionLineage {
+    lineage_id: string;
+    contract_version: typeof KNOWLEDGE_PROMOTION_CONTRACT_VERSION;
+    approval_kind: PromotionApprovalKind;
+    promotion_request_id: string;
+    source: PromotionSourceRef;
+    source_event_ids: string[];
+    owner_person_id: string | null;
+    organization_id: string;
+    project_code: string;
+    organization_event_id: string;
+    graph_entity_id: string;
+    normalized_payload_hash: string;
+    receipts: {
+        owner_consent_receipt_id: string | null;
+        organization_review_receipt_id: string;
+    };
+    approved_by_person_id: string;
+    sanitization: {
+        raw_copied: false;
+        personal_body_copied: false;
+        sanitized_preview_copied: false;
+    };
+    created_at: string;
+}
+export interface KnowledgePromotionStore {
+    transaction<T>(work: (tx: unknown) => Promise<T>, options?: {
+        principal: KnowledgePromotionPrincipal;
+    }): Promise<T>;
+    /** Insert, or return the existing request with the same `request_id`. */
+    createRequest(request: KnowledgePromotionRequest, ctx: PromotionContext): Promise<KnowledgePromotionRequest>;
+    findRequest(requestId: string, ctx: PromotionContext): Promise<KnowledgePromotionRequest | null>;
+    /** Apply `patch` and increment `revision` only when the stored revision equals `expectedRevision`; otherwise `null`. */
+    updateRequest(requestId: string, patch: Partial<KnowledgePromotionRequest>, options: {
+        expectedRevision: number;
+    }, ctx: PromotionContext): Promise<KnowledgePromotionRequest | null>;
+    createLineage(lineage: KnowledgePromotionLineage, ctx: PromotionContext): Promise<void>;
+    claimAuthorityUse?(use: {
+        operation_id: string;
+        idempotency_key: string;
+        request_id: string;
+        action: PromotionReviewAction;
+        actor_person_id: string;
+        organization_id: string;
+        project_code: string;
+    }, ctx: PromotionContext): Promise<void>;
+}
+export interface KnowledgePromotionSources {
+    readPersonalKnowledgeEvent?(eventId: string, ctx: PromotionContext): Promise<PersonalKnowledgeSourceRecord | null>;
+    readOrganizationCandidate?(candidateId: string, ctx: PromotionContext): Promise<OrganizationCandidateSourceRecord | null>;
+    recordOrganizationCandidateOutcome?(outcome: OrganizationCandidateOutcome, ctx: PromotionContext): Promise<void>;
+}
+export type PromotionReviewDecisionResult = {
+    allowed: true;
+    decider_person_id?: string;
+} | {
+    allowed: false;
+    code: string;
+    status?: number;
+    details?: Record<string, unknown>;
+};
+export interface PromotionReviewInput {
+    action: PromotionReviewAction;
+    approvalKind: PromotionApprovalKind;
+    request: KnowledgePromotionRequest;
+    normalized: NormalizedPromotionPayload;
+    principal: KnowledgePromotionPrincipal;
+    authority: KnowledgePromotionAuthority | null;
+}
+/** Organization-owned review rules (brainbase-organization). */
+export interface PromotionReviewPolicy {
+    authorize(input: PromotionReviewInput, ctx: PromotionContext): Promise<PromotionReviewDecisionResult>;
+}
+export interface KnowledgeEventRecordResult {
+    event_id: string;
+    candidate_id?: string | null;
+    semantic_state?: string;
+    quarantine_reason?: string | null;
+}
+export interface KnowledgePromotionEventSink {
+    recordOrganizationEvent(event: OrganizationKnowledgeEvent, ctx: PromotionContext): Promise<KnowledgeEventRecordResult>;
+    reconcileGraphProjection?(input: {
+        candidate_id: string;
+        graph_entity_id: string;
+        event_id: string;
+        actor_person_id: string;
+        decision_owner_person_id: string;
+    }, ctx: PromotionContext): Promise<void>;
+}
+export interface KnowledgePromotionGraphWriter {
+    commitNormalizedPromotion(mutation: NormalizedGraphMutation, ctx: PromotionContext): Promise<{
+        id: string;
+    } | null>;
+}
+export interface KnowledgePromotionPorts {
+    store: KnowledgePromotionStore;
+    sources: KnowledgePromotionSources;
+    reviewPolicy: PromotionReviewPolicy | null;
+    knowledgeEvents: KnowledgePromotionEventSink;
+    graph: KnowledgePromotionGraphWriter;
+    now?: () => Date;
+}
+export interface PromotionEvidence {
+    contract_version: typeof NORMALIZED_PROMOTION_SCHEMA_VERSION;
+    approval_kind: PromotionApprovalKind;
+    promotion_request_id: string;
+    source_kind: PromotionSourceKind;
+    source_version: string;
+    source_evidence_hash: string;
+    normalized_payload_hash: string;
+    owner_consent_receipt_id: string | null;
+    organization_review_receipt_id: string;
+    source_pointer: {
+        uri: string;
+        digest: string;
+    };
+}
+export interface OrganizationKnowledgeEvent {
+    schema_version: 'knowledge_event.v1';
+    event_id: string;
+    occurred_at: string;
+    captured_at: string;
+    source: {
+        type: string;
+        venue: string;
+        contract_version: string;
+    };
+    subject: {
+        type: string;
+        id: string;
+    };
+    decision?: {
+        statement: JsonValue;
+    };
+    decision_authority: {
+        authorized: true;
+        decider_id: string;
+        domain: string;
+    };
+    applicability_scope: {
+        scope: 'organization';
+        organization_id: string;
+        project_code: string;
+    };
+    permission_snapshot: Record<string, unknown>;
+    source_pointer: {
+        uri: string;
+        digest: string;
+    };
+    body_hash: string;
+    parent_episode_id: string;
+    payload: {
+        summary: string;
+        normalized_kind: string;
+        promotion_evidence: PromotionEvidence;
+    };
+    promotion_evidence: PromotionEvidence;
+    organization_id: string;
+    project_code: string;
+    sensitivity: string;
+    role_min: string;
+    venue: string;
+}
+export interface NormalizedGraphMutation {
+    project_code: string;
+    entity: {
+        id: string;
+        type: string;
+        payload: Record<string, unknown>;
+    };
+    edges: Array<NormalizedPromotionEdge & {
+        payload: Record<string, unknown>;
+    }>;
+    context_entities: Array<{
+        id: string;
+        type: string;
+    }>;
+    role_min: string;
+    sensitivity: string;
+    evidence: PromotionEvidence & {
+        organization_event_id: string;
+        candidate_id: string | null;
+    };
+}
+export declare function buildPromotionEvidence(request: KnowledgePromotionRequest, organizationReviewReceiptId: string): PromotionEvidence;
+/** The organization knowledge event that records the approval. The approval kind is never disguised. */
+export declare function buildOrganizationKnowledgeEvent(request: KnowledgePromotionRequest, normalized: NormalizedPromotionPayload, summary: string, evidence: PromotionEvidence, approverPersonId: string, occurredAt: string): OrganizationKnowledgeEvent;
+/** Graph mutation carrying only normalized content and provenance pointers. */
+export declare function buildNormalizedGraphMutation(request: KnowledgePromotionRequest, normalized: NormalizedPromotionPayload, evidence: PromotionEvidence, eventResult: KnowledgeEventRecordResult, organizationEvent: OrganizationKnowledgeEvent): NormalizedGraphMutation;
+export declare function promotionRequestId(input: {
+    approval_kind: PromotionApprovalKind;
+    source: PromotionSourceRef;
+    project_code: string;
+    normalized_payload_hash: string;
+}): string;
+export declare class KnowledgePromotionService {
+    readonly ports: KnowledgePromotionPorts;
+    private readonly now;
+    constructor(ports: KnowledgePromotionPorts);
+    /** D4: request sharing a Personal Knowledge v1 event owned by the authenticated person. */
+    requestPersonalShare(input: {
+        personal_event_id: string;
+        project_code: string;
+        summary: string;
+        subject?: {
+            type: string;
+            id: string;
+        };
+        normalized_payload: unknown;
+    }, context: {
+        principal: KnowledgePromotionPrincipal;
+        authority?: KnowledgePromotionAuthority | null;
+    }): Promise<KnowledgePromotionRequest>;
+    /** D12: request promoting an organization candidate waiting for the Graph promotion review. */
+    requestOrganizationCandidate(input: {
+        candidate_id: string;
+        project_code: string;
+        normalized_payload: unknown;
+    }, context: {
+        principal: KnowledgePromotionPrincipal;
+        authority?: KnowledgePromotionAuthority | null;
+    }): Promise<KnowledgePromotionRequest>;
+    /** D4: the owner approves or rejects sharing the exact normalized content. */
+    decideOwnerConsent(requestId: string, input: {
+        decision: PromotionDecision;
+        normalized_payload_hash?: string;
+        expected_revision: number;
+    }, context: {
+        principal: KnowledgePromotionPrincipal;
+        authority?: KnowledgePromotionAuthority | null;
+    }): Promise<KnowledgePromotionRequest>;
+    /**
+     * D4: organization review of an owner-approved personal share.
+     * D12: organization approval of an organization candidate.
+     * Only an approval commits the event, the Graph mutation, the lineage, and the request in one transaction.
+     */
+    reviewOrganization(requestId: string, input: {
+        decision: PromotionDecision;
+        reason?: string;
+        expected_revision: number;
+    }, context: {
+        principal: KnowledgePromotionPrincipal;
+        authority?: KnowledgePromotionAuthority | null;
+    }): Promise<KnowledgePromotionRequest>;
+    private requirePolicy;
+    private draftRequest;
+    private authorize;
+    private claimAuthority;
+    private sourceIsCurrent;
+    private recordCandidateOutcome;
+}
+export {};