@unson/brainbase-mcp 0.15.7 → 0.16.0

package/dist/cli.js

@@ -22,7 +22,6 @@ import { blockedJudgmentOutput, processJudgmentHook } from './judgment-host.js';
 import { applyCanonicalWrites, buildCanonicalEdge } from './canonical-edge-builder.js';
 import { defaultJudgmentJournalRoot } from './judgment-value-proof-review.js';
 import { createWorldExtension, readWorldVocabulary } from './world-extension.js';
-import { createOrganizationGraphSource } from './organization-graph-web.js';
 import { createLocalWebHost, LOCAL_WEB_DEFAULT_PORT } from './local-web-host.js';
 export async function runCli(argv = process.argv.slice(2), io = process) {
     const parsed = parseArgs(argv);
@@ -1052,30 +1051,16 @@ async function webServe(parsed, io, command) {
     if (worldVocabularyPath !== undefined && !world)
         throw new Error(`${command} --world-vocabulary requires --world`);
     const worldVocabulary = worldVocabularyPath === undefined ? undefined : await readWorldVocabulary(resolve(worldVocabularyPath));
-    // Ledger C1: the Graph screens read the owner's organization Graph read only.
-    let organizationGraph = null;
-    if (parsed.flags.has('organization-graph')) {
-        const source = await createOrganizationGraphSource();
-        if ('reason' in source) {
-            throw new Error(`${command} --organization-graph cannot read the organization Graph (${source.reason}); sign in with brainbase auth first`);
+    // The organization Graph is shown by the organization web, not by this local host (C1 ended 2026-10-05).
+    for (const removed of ['organization-graph', 'organization-web']) {
+        if (parsed.flags.has(removed) || first(parsed, removed) !== undefined) {
+            throw new Error(`${command} --${removed} was removed; open the organization web to see the organization Graph`);
         }
-        organizationGraph = source;
-    }
-    // Where the organization's records are corrected; the read-only screens link to it.
-    const organizationWeb = first(parsed, 'organization-web');
-    if (organizationWeb !== undefined) {
-        if (!organizationGraph)
-            throw new Error(`${command} --organization-web requires --organization-graph`);
-        if (!/^https:\/\/[^/?#@\s]+$/u.test(organizationWeb)) {
-            throw new Error(`${command} --organization-web must be an https origin such as https://org.example.com`);
-        }
-        organizationGraph = { ...organizationGraph, webUrl: organizationWeb };
     }
     const { server } = createLocalWebHost({
         dataDir,
         journalRoot,
-        extensions: world ? [createWorldExtension(worldVocabulary ? { vocabulary: worldVocabulary } : {})] : [],
-        ...(organizationGraph ? { organizationGraph } : {})
+        extensions: world ? [createWorldExtension(worldVocabulary ? { vocabulary: worldVocabulary } : {})] : []
     });
     await new Promise((resolveListen, rejectListen) => {
         server.once('error', rejectListen);
@@ -1091,8 +1076,6 @@ async function webServe(parsed, io, command) {
         `- プロジェクトと関係者: ${origin}/#projects`,
         `- 情報と関係: ${origin}/#graph`,
         ...(world ? [`- 世界: ${origin}/#world`] : []),
-        ...(organizationGraph ? [`組織のGraph（読み取りのみ）: ${organizationGraph.server}`] : []),
-        ...(organizationGraph?.webUrl ? [`組織版（訂正の入口）: ${organizationGraph.webUrl}`] : []),
         `データ: ${dataDir}`,
         `判断journal: ${journalRoot}`,
         '終了: Ctrl+C',
@@ -1249,7 +1232,7 @@ function usage() {
   brainbase judgment:install --target codex [--autonomy-mode off|canary|on] [--autonomy-project code] [--dry-run] [--output path]
   brainbase judgment:hook [--autonomy-mode off|canary|on] [--autonomy-project code]
   brainbase doctor [--dir path] [--judgment-hooks path]
-  brainbase web:serve [--dir path] [--journal path] [--port n] [--world [--world-vocabulary file]] [--organization-graph [--organization-web https-origin]]
+  brainbase web:serve [--dir path] [--journal path] [--port n] [--world [--world-vocabulary file]]
   brainbase review:serve [--dir path] [--journal path] [--port n]  （web:serveの別名）
 `;
 }

package/dist/graph-web-http.d.ts

@@ -1,5 +1,4 @@
 import type { IncomingMessage, ServerResponse } from 'node:http';
-import { type GraphWebAnySource, type InMemoryGraphReader } from './graph-web.js';
 export declare const GRAPH_WEB_HTTP_VERSION: "graph-web-http.v1";
 export interface GraphWebHttpOptions {
     /** Personal OS data directory chosen by the host. Never taken from the request. */
@@ -12,12 +11,6 @@ export interface GraphWebHttpOptions {
      */
     readonly assertWriteAllowed?: (request: IncomingMessage) => void | Promise<void>;
     readonly now?: () => Date;
-    /**
-     * Ledger C1: read every route from a Graph the host holds in memory (the
-     * owner's organization Graph) instead of the data directory. Corrections
-     * are refused as read only.
-     */
-    readonly readGraph?: () => Promise<InMemoryGraphReader<GraphWebAnySource>>;
 }
 export type GraphWebHttpHandler = (request: IncomingMessage, response: ServerResponse) => Promise<boolean>;
 /**

package/dist/graph-web-http.js

@@ -52,9 +52,6 @@ export function createGraphWebHttpHandler(options) {
             if (route.name === 'corrections') {
                 if (request.method !== 'POST')
                     throw methodNotAllowed('POST');
-                if (options.readGraph) {
-                    throw new HttpError(403, 'organization_graph_read_only', 'This host reads the organization Graph read only; correct it in the organization edition');
-                }
                 await assertWriteAllowed(options.assertWriteAllowed, request);
                 const body = await readJsonBody(request);
                 const result = await applyGraphCorrection(dataDir, body, { now: now() });
@@ -65,17 +62,6 @@ export function createGraphWebHttpHandler(options) {
                 throw methodNotAllowed('GET');
             const asOf = queryValue(url, 'as_of');
             const readOptions = { ...(asOf !== undefined ? { asOf } : {}), now: now() };
-            if (options.readGraph) {
-                const reader = await options.readGraph();
-                const body = route.name === 'status' ? reader.status(readOptions)
-                    : route.name === 'projects' ? reader.listProjects(readOptions)
-                        : route.name === 'project' ? reader.readProject(route.id, readOptions)
-                            : route.name === 'search' ? reader.search({ q: queryValue(url, 'q'), type: queryValue(url, 'type'), asOf, limit: parseLimit(queryValue(url, 'limit')), now: readOptions.now })
-                                : route.name === 'entity' ? reader.readEntity(route.id, readOptions)
-                                    : reader.ontology(readOptions);
-                writeJson(response, 200, body);
-                return true;
-            }
             switch (route.name) {
                 case 'status':
                     writeJson(response, 200, await readGraphWebStatus(dataDir, readOptions));

package/dist/graph-web.d.ts

@@ -1,7 +1,7 @@
 import { GRAPH_CORRECTIONS_FILE, type GraphCorrectionRecord } from './graph-corrections.js';
 import { type PortableGraphOwner } from './portable-graph.js';
 import type { FoundationAdoptionState, FoundationOperator } from './ontology-foundation.js';
-import type { CanonicalEdge, CanonicalEntityKind, CoreRelation, GraphFileV2 } from './types.js';
+import type { CanonicalEdge, CanonicalEntityKind, CoreRelation } from './types.js';
 /**
  * Read views of the canonical local Graph for the local Web screens
  * "プロジェクトと関係者" and "情報と関係".
@@ -34,20 +34,7 @@ export interface GraphWebOwnerPrivateSource {
     graphFormat: 2;
     authority: 'owner_private';
 }
-/**
- * The owner's organization Graph read through the host (ledger C1): read only,
- * held in memory, never written to the data directory.
- */
-export interface GraphWebOrganizationSource {
-    dataDir: null;
-    graphFormat: 2;
-    authority: 'organization_graph';
-    /** Organization server origin, without credentials. */
-    server: string;
-    /** When the host last read the organization Graph. */
-    readAt: string;
-}
-export type GraphWebAnySource = GraphWebSource | GraphWebOwnerPrivateSource | GraphWebOrganizationSource;
+export type GraphWebAnySource = GraphWebSource | GraphWebOwnerPrivateSource;
 export interface GraphMigrationRequired {
     status: 'migration_required';
     source: GraphWebSource;
@@ -374,21 +361,4 @@ export interface OwnerPrivateGraph {
  * machine, so a relation's source ID is shown unresolved.
  */
 export declare function openOwnerPrivateGraph(bundle: unknown, owner: PortableGraphOwner): OwnerPrivateGraph;
-/** Read views of one in-memory Graph v2 held by the host (no data directory, no corrections). */
-export interface InMemoryGraphReader<S extends GraphWebAnySource> {
-    readonly source: S;
-    status(options?: GraphWebReadOptions): GraphWebStatus<S>;
-    listProjects(options?: GraphWebReadOptions): GraphProjectList<S>;
-    readProject(projectId: string, options?: GraphWebReadOptions): GraphProjectDetail<S>;
-    search(input?: GraphEntitySearchInput): GraphEntitySearchResult<S>;
-    readEntity(entityId: string, options?: GraphWebReadOptions): GraphEntityDetail<S>;
-    ontology(options?: GraphWebReadOptions): GraphOntologySummary<S>;
-}
-/**
- * The same read views as the local Graph routes over a Graph v2 the host
- * holds in memory (the organization Graph read under C1).  The Graph is
- * checked with the canonical validator first; nothing is written, and there
- * are no correction records or relation sources to resolve.
- */
-export declare function openInMemoryGraph<S extends GraphWebAnySource>(graph: GraphFileV2, source: S): InMemoryGraphReader<S>;
 export {};

package/dist/graph-web.js

@@ -1,6 +1,6 @@
 import { access, readdir, readFile } from 'node:fs/promises';
 import { join } from 'node:path';
-import { isActiveAt, validateCanonicalGraph } from './canonical-graph.js';
+import { isActiveAt } from './canonical-graph.js';
 import { assertFoundationCatalog, findFoundationRecord } from './foundation-catalog.js';
 import { GRAPH_CORRECTION_EDGE_FIELDS, GRAPH_CORRECTION_ENTITY_FIELDS, GRAPH_CORRECTION_NEW_EDGE_RELATIONS, GRAPH_CORRECTION_PROJECT_FIELDS, GRAPH_CORRECTIONS_FILE, graphRecordDigest, readGraphCorrectionHistory } from './graph-corrections.js';
 import { ONTOLOGY_VERSION, portableOntology } from './ontology.js';
@@ -305,46 +305,6 @@ export function openOwnerPrivateGraph(bundle, owner) {
         }
     });
 }
-/**
- * The same read views as the local Graph routes over a Graph v2 the host
- * holds in memory (the organization Graph read under C1).  The Graph is
- * checked with the canonical validator first; nothing is written, and there
- * are no correction records or relation sources to resolve.
- */
-export function openInMemoryGraph(graph, source) {
-    try {
-        validateCanonicalGraph(graph);
-    }
-    catch (error) {
-        throw new GraphWebError('unavailable', 'graph_invalid', errorMessage(error));
-    }
-    return Object.freeze({
-        source,
-        status: (options = {}) => {
-            const asOf = resolveAsOf(options);
-            const entities = Object.fromEntries(ENTITY_KINDS.map((kind) => [kind, graph.entities.filter((entity) => entity.type === kind).length]));
-            return {
-                status: 'ok',
-                version: GRAPH_WEB_VERSION,
-                source,
-                asOf,
-                ontology: { ...graph.ontology, currentVersion: ONTOLOGY_VERSION },
-                counts: {
-                    entities: { ...entities, total: graph.entities.length },
-                    edges: { total: graph.edges.length, active: graph.edges.filter((edge) => isActiveAt(edge, asOf)).length },
-                    relationships: 0,
-                    corrections: 0
-                },
-                issues: []
-            };
-        },
-        listProjects: (options = {}) => projectListOf(graph, source, resolveAsOf(options)),
-        readProject: (projectId, options = {}) => projectDetailOf(graph, source, projectId, resolveAsOf(options), NO_REFERENCES),
-        search: (input = {}) => entitySearchOf(graph, source, parseSearchInput(input)),
-        readEntity: (entityId, options = {}) => entityDetailOf(graph, source, entityId, resolveAsOf(options), NO_REFERENCES),
-        ontology: (options = {}) => ontologyOf(graph, source, resolveAsOf(options))
-    });
-}
 function decisionRecordView(record) {
     return {
         title: record.title,

package/dist/local-web-host.d.ts

@@ -1,8 +1,6 @@
 import { type IncomingMessage, type Server, type ServerResponse } from 'node:http';
 import { type ObjectiveDefinitionBuilder } from './foundation-http.js';
-import type { GraphWebAnySource, InMemoryGraphReader } from './graph-web.js';
 import { JudgmentValueProofJournalCache } from './judgment-value-proof-review.js';
-import type { GraphFileV2 } from './types.js';
 /**
  * General local single-owner Web host (`brainbase web:serve`).
  *
@@ -41,8 +39,6 @@ export interface LocalWebModuleContext {
     readonly journalRoot: string;
     readonly token: string;
     readonly now: () => Date;
-    /** Present when the host reads the organization Graph (C1). */
-    readonly organizationGraph?: LocalWebOrganizationGraph;
     /** The host's one listing cache for the judgment journal, shared by every screen that reads it. */
     readonly journalCache: JudgmentValueProofJournalCache;
 }
@@ -80,25 +76,6 @@ export interface LocalWebHostOptions {
     readonly uiDir?: string;
     readonly now?: () => Date;
     readonly extensions?: readonly LocalWebExtension[];
-    /**
-     * Ledger C1: the owner's organization Graph, read only. When given, the Graph
-     * screens read it instead of the data directory and the status reports it.
-     */
-    readonly organizationGraph?: LocalWebOrganizationGraph;
-}
-export interface LocalWebOrganizationGraph {
-    /** Organization server origin shown as the source, without credentials. */
-    readonly server: string;
-    /** The organization's own web (where its records are corrected), when the owner configured it. */
-    readonly webUrl?: string;
-    read(): Promise<InMemoryGraphReader<GraphWebAnySource>>;
-    /** The same Graph as plain records (the world reads project metadata from it). */
-    readGraphFile?(): Promise<GraphFileV2>;
-    /**
-     * The organization's words for field values (glossary terms with `payload.vocabulary`), or null when
-     * they could not be read.  The rest of the Graph is read even when these are not.
-     */
-    readVocabularyTerms?(): Promise<readonly GraphVocabularyTerm[] | null>;
 }
 /** One organization term that names a field value, e.g. project.kind = product → プロダクト. */
 export interface GraphVocabularyTerm {

package/dist/local-web-host.js

@@ -138,9 +138,7 @@ export function createLocalStatusModule(context) {
                 writeJson(response, 405, { error: { code: 'method_not_allowed', message: 'Use GET' } });
                 return true;
             }
-            const local = await readLocalGraphState(context.dataDir);
-            // Under C1 the Graph screens read the organization Graph, so they are not gated on the local file.
-            const graph = context.organizationGraph ? { ...local, status: 'ready', format: 'v2', message: undefined } : local;
+            const graph = await readLocalGraphState(context.dataDir);
             writeJson(response, 200, {
                 version: LOCAL_WEB_HOST_VERSION,
                 data_dir: context.dataDir,
@@ -150,15 +148,7 @@ export function createLocalStatusModule(context) {
                     format: graph.format,
                     ...(graph.message ? { message: graph.message } : {}),
                     commands: graphCommands(graph, context.dataDir)
-                },
-                organization_graph: context.organizationGraph
-                    ? {
-                        status: 'connected',
-                        server: context.organizationGraph.server,
-                        mode: 'read_only',
-                        ...(context.organizationGraph.webUrl ? { web_url: context.organizationGraph.webUrl } : {})
-                    }
-                    : { status: 'not_connected' }
+                }
             });
             return true;
         }
@@ -683,7 +673,6 @@ export function createGraphWebModule(context) {
         dataDir: context.dataDir,
         basePath: LOCAL_WEB_GRAPH_PREFIX,
         now: context.now,
-        ...(context.organizationGraph ? { readGraph: context.organizationGraph.read } : {}),
         assertWriteAllowed(request) {
             if (isTrustedLocalWrite(request, context.token))
                 return;
@@ -782,8 +771,7 @@ export function createLocalWebHost(options = {}) {
         journalRoot,
         token,
         now: options.now ?? (() => new Date()),
-        journalCache: new JudgmentValueProofJournalCache(),
-        ...(options.organizationGraph ? { organizationGraph: options.organizationGraph } : {})
+        journalCache: new JudgmentValueProofJournalCache()
     };
     const modules = defaultLocalWebModules(context);
     const extensions = [...options.extensions ?? []];

package/dist/organization-graph-web.d.ts

@@ -1,10 +1,10 @@
-import type { GraphVocabularyTerm, LocalWebOrganizationGraph } from './local-web-host.js';
+import type { GraphVocabularyTerm } from './local-web-host.js';
 import type { CanonicalEntityKind, GraphFileV2 } from './types.js';
 /**
- * Ledger C1 (adopted 2026-09-24): while the owner validates the Web, the host
- * reads the owner's organization Graph read only. The records are projected
- * into an in-memory Graph v2 so the existing Graph screens read them through
- * the same views as a local Graph. Nothing is written locally or remotely.
+ * Projects organization Graph records (as an organization host reads them for
+ * its member) into a Graph v2, so shared parts such as the world draw them the
+ * same way as a local Graph. This module never reads a network or a token: the
+ * host that owns the records passes them in (`projectOrganizationWorld`).
  *
  * Relations come only from what the organization Graph states:
  *   - `member_of` person → project       → `participates_in` (role = role_code)
@@ -55,26 +55,4 @@ export declare function projectOrganizationGraph(records: OrganizationGraphRecor
     id: string;
     name?: string;
 }): OrganizationGraphProjection;
-interface OrganizationAccess {
-    readonly server: string;
-    readonly token: string;
-}
-/** The owner's Brainbase server and token, read at request time (tokens rotate hourly). Never logged or returned. */
-export declare function readOrganizationAccess(home?: string): Promise<OrganizationAccess | {
-    readonly reason: string;
-}>;
-export interface OrganizationGraphSourceOptions {
-    readonly home?: string;
-    readonly fetch?: typeof fetch;
-    readonly now?: () => Date;
-    readonly cacheMs?: number;
-}
-/**
- * The organization Graph for the local host (C1). Reads are cached briefly and
- * shared while in flight; a failure is reported as `unavailable`, never as an
- * empty Graph.
- */
-export declare function createOrganizationGraphSource(options?: OrganizationGraphSourceOptions): Promise<LocalWebOrganizationGraph | {
-    readonly reason: string;
-}>;
 export {};

package/dist/organization-graph-web.js

@@ -1,14 +1,10 @@
-import { readFile } from 'node:fs/promises';
-import { homedir } from 'node:os';
-import { join } from 'node:path';
-import { GraphWebError, openInMemoryGraph } from './graph-web.js';
 import { canonicalEdgeId } from './canonical-graph.js';
 import { canonicalGraphOntologyRelease } from './templates.js';
 /**
- * Ledger C1 (adopted 2026-09-24): while the owner validates the Web, the host
- * reads the owner's organization Graph read only. The records are projected
- * into an in-memory Graph v2 so the existing Graph screens read them through
- * the same views as a local Graph. Nothing is written locally or remotely.
+ * Projects organization Graph records (as an organization host reads them for
+ * its member) into a Graph v2, so shared parts such as the world draw them the
+ * same way as a local Graph. This module never reads a network or a token: the
+ * host that owns the records passes them in (`projectOrganizationWorld`).
  *
  * Relations come only from what the organization Graph states:
  *   - `member_of` person → project       → `participates_in` (role = role_code)
@@ -19,8 +15,6 @@ import { canonicalGraphOntologyRelease } from './templates.js';
  */
 export const ORGANIZATION_GRAPH_WEB_VERSION = 'organization-graph-web.v0';
 const ENTITY_TYPES = ['project', 'person', 'org', 'decision'];
-const FETCH_TIMEOUT_MS = 15_000;
-const CACHE_MS = 60_000;
 function isRecord(value) {
     return value !== null && typeof value === 'object' && !Array.isArray(value);
 }
@@ -190,121 +184,3 @@ export function projectOrganizationGraph(records, owner) {
         excluded: { inactive, unnamed, danglingRelations }
     };
 }
-/** The owner's Brainbase server and token, read at request time (tokens rotate hourly). Never logged or returned. */
-export async function readOrganizationAccess(home = homedir()) {
-    try {
-        const config = JSON.parse(await readFile(join(home, '.brainbase', 'config.json'), 'utf8'));
-        const tokens = JSON.parse(await readFile(join(home, '.brainbase', 'tokens.json'), 'utf8'));
-        const server = isRecord(config) ? text(config.server_url) : null;
-        const token = isRecord(tokens) ? text(tokens.access_token) : null;
-        if (!server || !/^https:\/\/[^/?#@]+$/u.test(server))
-            return { reason: 'server_url_missing_or_invalid' };
-        if (!token)
-            return { reason: 'access_token_missing' };
-        return { server, token };
-    }
-    catch {
-        return { reason: 'brainbase_auth_files_unreadable' };
-    }
-}
-async function getRecords(request, access, path) {
-    const controller = new AbortController();
-    const timer = setTimeout(() => controller.abort(), FETCH_TIMEOUT_MS);
-    try {
-        const response = await request(`${access.server}/api/info/graph/${path}`, {
-            method: 'GET',
-            headers: { Authorization: `Bearer ${access.token}`, Accept: 'application/json' },
-            redirect: 'error',
-            signal: controller.signal
-        });
-        if (response.status === 401 || response.status === 403) {
-            throw new GraphWebError('unavailable', 'organization_graph_auth_failed', `The organization Graph refused the owner's token (HTTP ${response.status}); sign in again`);
-        }
-        if (!response.ok)
-            throw new GraphWebError('unavailable', 'organization_graph_unavailable', `The organization Graph answered HTTP ${response.status} for ${path.split('?')[0]}`);
-        const body = await response.json();
-        if (!isRecord(body) || !Array.isArray(body.records))
-            throw new GraphWebError('unavailable', 'organization_graph_unavailable', 'The organization Graph response has no records');
-        return body.records;
-    }
-    catch (error) {
-        if (error instanceof GraphWebError)
-            throw error;
-        const reason = error instanceof Error && error.name === 'AbortError' ? 'timed out' : 'request failed';
-        throw new GraphWebError('unavailable', 'organization_graph_unavailable', `The organization Graph ${reason}`);
-    }
-    finally {
-        clearTimeout(timer);
-    }
-}
-/**
- * The organization Graph for the local host (C1). Reads are cached briefly and
- * shared while in flight; a failure is reported as `unavailable`, never as an
- * empty Graph.
- */
-export async function createOrganizationGraphSource(options = {}) {
-    const home = options.home ?? homedir();
-    const initial = await readOrganizationAccess(home);
-    if ('reason' in initial)
-        return initial;
-    const request = options.fetch ?? fetch;
-    const now = options.now ?? (() => new Date());
-    const cacheMs = options.cacheMs ?? CACHE_MS;
-    let cached = null;
-    let inFlight = null;
-    async function load() {
-        const access = await readOrganizationAccess(home);
-        if ('reason' in access)
-            throw new GraphWebError('unavailable', 'organization_graph_not_connected', `The organization Graph cannot be read (${access.reason})`);
-        // The organization's words are read alongside; failing to read them never fails the Graph.
-        const termsRead = getRecords(request, access, 'entities?type=glossary_term&limit=500')
-            .then((records) => projectVocabularyTerms(records))
-            .catch(() => null);
-        const [project, person, org, decision, raci, memberOf, assignedTo] = await Promise.all([
-            getRecords(request, access, 'entities?type=project&limit=500'),
-            getRecords(request, access, 'entities?type=person&limit=500'),
-            getRecords(request, access, 'entities?type=org&limit=500'),
-            getRecords(request, access, 'entities?type=decision&limit=500'),
-            getRecords(request, access, 'entities?type=raci_assignment&limit=500'),
-            getRecords(request, access, 'edges?type=member_of'),
-            getRecords(request, access, 'edges?type=assigned_to')
-        ]);
-        const projection = projectOrganizationGraph({
-            entities: {
-                project: project,
-                person: person,
-                org: org,
-                decision: decision,
-                raci_assignment: raci
-            },
-            memberOf: memberOf,
-            assignedTo: assignedTo
-        });
-        const source = { dataDir: null, graphFormat: 2, authority: 'organization_graph', server: access.server, readAt: now().toISOString() };
-        return { reader: openInMemoryGraph(projection.graph, source), graph: projection.graph, terms: await termsRead };
-    }
-    async function current() {
-        const at = now().getTime();
-        if (cached && at - cached.at < cacheMs)
-            return cached.loaded;
-        inFlight ??= load().then((loaded) => {
-            cached = { at: now().getTime(), loaded };
-            return loaded;
-        }).finally(() => {
-            inFlight = null;
-        });
-        return inFlight;
-    }
-    return {
-        server: initial.server,
-        async read() {
-            return (await current()).reader;
-        },
-        async readGraphFile() {
-            return (await current()).graph;
-        },
-        async readVocabularyTerms() {
-            return (await current()).terms;
-        }
-    };
-}

package/dist/world-extension.d.ts

@@ -131,11 +131,11 @@ export declare function resolveWorldVocabulary(config: WorldVocabularyConfig | u
 /** Reads and checks a vocabulary file; an invalid file is an error, never silently ignored. */
 export declare function readWorldVocabulary(path: string): Promise<WorldVocabularyConfig>;
 /**
- * The businesses from the same Graph the other screens read: the organization
- * Graph when the host reads it (C1), else the local Graph.  A Graph that cannot
- * be read is a state with its reason, never zero businesses.
+ * The businesses from the same Graph the other screens read (this Mac's Graph).
+ * An organization host draws its own records with `projectOrganizationWorld`.
+ * A Graph that cannot be read is a state with its reason, never zero businesses.
  */
-export declare function readWorldBusinesses(context: Pick<LocalWebModuleContext, 'dataDir' | 'organizationGraph'>, options?: {
+export declare function readWorldBusinesses(context: Pick<LocalWebModuleContext, 'dataDir'>, options?: {
     readonly vocabulary?: WorldVocabularyConfig;
     readonly now?: () => Date;
 }): Promise<WorldBusinessesResponse>;
@@ -174,21 +174,6 @@ export declare function readJudgmentPlaces(journalRoot: string, options?: {
     readonly places: readonly WorldJudgmentPlace[];
     readonly reason?: string;
 }>;
-/**
- * The judgments of one organization, for a world drawn from that organization's Graph.  A judgment
- * belongs to the organization only when the repository it was worked in is one of the organization's
- * businesses (a registered repository or the business code, the same rule as the world's placement).
- * Every other judgment (another company's work, or one whose repository was not recorded) is withheld:
- * only their count leaves the host, never their questions or repositories.
- */
-export declare function readOrganizationJudgments(context: Pick<LocalWebModuleContext, 'journalRoot' | 'journalCache' | 'dataDir' | 'now'>, businesses: readonly Pick<WorldBusiness, 'code' | 'repositories'>[], workspaces?: Map<string, string | null>): Promise<{
-    readonly status: 'available' | 'unavailable';
-    readonly scope: 'organization';
-    readonly withheld: number;
-    readonly places: readonly WorldJudgmentPlace[];
-    readonly home: unknown;
-    readonly reason?: string;
-}>;
 export declare function createWorldExtension(options?: {
     readonly vocabulary?: WorldVocabularyConfig;
 }): LocalWebExtension;

package/dist/world-extension.js

@@ -1,7 +1,6 @@
 import { readFile } from 'node:fs/promises';
 import { fileURLToPath } from 'node:url';
-import { buildJudgmentValueProofReviewHome, readJudgmentValueProofAnswers, readJudgmentValueProofFeedback, readJudgmentValueProofJournal, } from './judgment-value-proof-review.js';
-import { publicHome } from './value-proof-review-http.js';
+import { readJudgmentValueProofJournal, } from './judgment-value-proof-review.js';
 import { projectOrganizationGraph, projectVocabularyTerms } from './organization-graph-web.js';
 import { readLocalGraphState } from './local-web-host.js';
 import { loadPersonalOs } from './ssot.js';
@@ -224,37 +223,26 @@ export async function readWorldVocabulary(path) {
     return { kinds, statuses };
 }
 /**
- * The businesses from the same Graph the other screens read: the organization
- * Graph when the host reads it (C1), else the local Graph.  A Graph that cannot
- * be read is a state with its reason, never zero businesses.
+ * The businesses from the same Graph the other screens read (this Mac's Graph).
+ * An organization host draws its own records with `projectOrganizationWorld`.
+ * A Graph that cannot be read is a state with its reason, never zero businesses.
  */
 export async function readWorldBusinesses(context, options = {}) {
     const now = (options.now ?? (() => new Date()))();
     let graph;
     let source;
-    let terms;
     try {
-        if (context.organizationGraph) {
-            if (!context.organizationGraph.readGraphFile) {
-                return { status: 'unavailable', version: WORLD_EXTENSION_VERSION, reason: 'organization_graph_records_unavailable' };
-            }
-            graph = await context.organizationGraph.readGraphFile();
-            source = { authority: 'organization_graph', server: context.organizationGraph.server };
-            terms = context.organizationGraph.readVocabularyTerms ? await context.organizationGraph.readVocabularyTerms().catch(() => null) : null;
-        }
-        else {
-            const state = await readLocalGraphState(context.dataDir);
-            if (state.status === 'not_initialized' || state.status === 'migration_required') {
-                return { status: state.status, version: WORLD_EXTENSION_VERSION, reason: state.status };
-            }
-            if (state.status !== 'ready')
-                return { status: 'unavailable', version: WORLD_EXTENSION_VERSION, reason: state.message ?? 'local_graph_unreadable' };
-            const os = await loadPersonalOs(context.dataDir);
-            if (os.graph.version !== 2)
-                return { status: 'migration_required', version: WORLD_EXTENSION_VERSION, reason: 'migration_required' };
-            graph = os.graph;
-            source = { authority: 'local', dataDir: context.dataDir };
+        const state = await readLocalGraphState(context.dataDir);
+        if (state.status === 'not_initialized' || state.status === 'migration_required') {
+            return { status: state.status, version: WORLD_EXTENSION_VERSION, reason: state.status };
         }
+        if (state.status !== 'ready')
+            return { status: 'unavailable', version: WORLD_EXTENSION_VERSION, reason: state.message ?? 'local_graph_unreadable' };
+        const os = await loadPersonalOs(context.dataDir);
+        if (os.graph.version !== 2)
+            return { status: 'migration_required', version: WORLD_EXTENSION_VERSION, reason: 'migration_required' };
+        graph = os.graph;
+        source = { authority: 'local', dataDir: context.dataDir };
     }
     catch (error) {
         return { status: 'unavailable', version: WORLD_EXTENSION_VERSION, reason: error instanceof Error ? error.message : 'graph_unreadable' };
@@ -265,7 +253,7 @@ export async function readWorldBusinesses(context, options = {}) {
         version: WORLD_EXTENSION_VERSION,
         source,
         as_of: now.toISOString(),
-        vocabulary: resolveWorldVocabulary(options.vocabulary, projection.businesses, terms),
+        vocabulary: resolveWorldVocabulary(options.vocabulary, projection.businesses),
         ...projection,
     };
 }
@@ -315,44 +303,6 @@ export async function readJudgmentPlaces(journalRoot, options = {}) {
     }));
     return { status: 'available', places };
 }
-/**
- * The judgments of one organization, for a world drawn from that organization's Graph.  A judgment
- * belongs to the organization only when the repository it was worked in is one of the organization's
- * businesses (a registered repository or the business code, the same rule as the world's placement).
- * Every other judgment (another company's work, or one whose repository was not recorded) is withheld:
- * only their count leaves the host, never their questions or repositories.
- */
-export async function readOrganizationJudgments(context, businesses, workspaces = new Map()) {
-    const journal = await readJudgmentValueProofJournal({ root: context.journalRoot, cache: context.journalCache });
-    if (journal.status !== 'available')
-        return { status: 'unavailable', scope: 'organization', withheld: 0, places: [], home: null, reason: 'journal_unreadable' };
-    const belongs = (workspace) => workspace !== null
-        && businesses.some((business) => business.repositories.includes(workspace) || business.code === workspace);
-    const kept = [];
-    const places = [];
-    for (const entry of journal.entries) {
-        const workspace = await entryWorkspace(entry.file, workspaces);
-        if (!belongs(workspace))
-            continue;
-        kept.push(entry);
-        places.push({ decision_attempt_id: entry.proof.decision_attempt_id, workspace });
-    }
-    const [feedback, answers] = await Promise.all([
-        readJudgmentValueProofFeedback({ dataDir: context.dataDir }),
-        readJudgmentValueProofAnswers({ dataDir: context.dataDir }),
-    ]);
-    // Rejected files are left out too: their names would say nothing about the organization they belong to.
-    const home = buildJudgmentValueProofReviewHome({ ...journal, entries: kept, rejected: [] }, feedback, { now: context.now(), answers });
-    return { status: 'available', scope: 'organization', withheld: journal.entries.length - kept.length, places, home: publicHome(home) };
-}
-async function entryWorkspace(valueProofFile, workspaces) {
-    const turnInputFile = `${valueProofFile.slice(0, -VALUE_PROOF_SUFFIX.length)}.turn-input.json`;
-    if (!workspaces.has(turnInputFile)) {
-        const turnInput = await readJsonFile(turnInputFile);
-        workspaces.set(turnInputFile, isRecord(turnInput) ? text(turnInput.project_code) : null);
-    }
-    return workspaces.get(turnInputFile) ?? null;
-}
 async function readJsonFile(path) {
     try {
         return JSON.parse(await readFile(path, 'utf8'));
@@ -375,16 +325,6 @@ function createWorldModule(context, read) {
                 writeJson(response, 200, await read());
                 return true;
             }
-            if (path === `/api/extensions/${WORLD_EXTENSION_ID}/organization-judgments`) {
-                response.setHeader('Cache-Control', 'no-store');
-                const world = await read();
-                if (world.status !== 'ok' || world.source.authority !== 'organization_graph') {
-                    writeJson(response, 200, { version: WORLD_EXTENSION_VERSION, status: 'unavailable', scope: 'organization', withheld: 0, places: [], home: null, reason: 'not_reading_organization_graph' });
-                    return true;
-                }
-                writeJson(response, 200, { version: WORLD_EXTENSION_VERSION, ...(await readOrganizationJudgments(context, world.businesses, workspaces)) });
-                return true;
-            }
             if (path === `/api/extensions/${WORLD_EXTENSION_ID}/judgment-places`) {
                 response.setHeader('Cache-Control', 'no-store');
                 writeJson(response, 200, { version: WORLD_EXTENSION_VERSION, ...(await readJudgmentPlaces(context.journalRoot, { cache: context.journalCache, workspaces })) });

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@unson/brainbase-mcp",
-  "version": "0.15.7",
+  "version": "0.16.0",
   "description": "Local-first Brainbase judgment OS that lets supported AI agents reuse a user's approved goals, priorities, decisions, and judgment criteria.",
   "type": "module",
   "license": "MIT",
@@ -358,5 +358,5 @@
   "engines": {
     "node": ">=20"
   },
-  "gitHead": "9d594a6e3267d90308404d606a087cbd6191baec"
+  "gitHead": "a0914d025914d4ada329b730aeddd6488f28bcfd"
 }

package/ui/graph-view-shared.js

@@ -469,45 +469,6 @@ export function hostSourceNotice(sourceNotice, subject) {
   return { ...sourceNotice, text: sourceNotice.text(subject ?? null) };
 }
 
-// ---------------------------------------------------------------------------
-// The organization's web (Inspector UX-20261004-01)
-
-const ORGANIZATION_RECORD_ID = /^[A-Za-z0-9_.:-]{1,200}$/u;
-
-/** The organization web's origin the host was told about, or null. */
-export function organizationWebOrigin(organizationGraph) {
-  if (organizationGraph?.status !== 'connected') return null;
-  const origin = organizationGraph.web_url;
-  return typeof origin === 'string' && /^https:\/\/[^/?#@\s]+$/u.test(origin) ? origin : null;
-}
-
-/**
- * Where a record opens in the organization web, `{ href, label }`, or null when it has no usable id.  The
- * organization web opens 情報と関係 by record id and プロジェクトと関係者 by project code, and keeps that record
- * across sign-in.  A project opens by its own code only: a sub-project's scope code is its parent's and
- * would open the parent, so without its own code the record opens by id.
- */
-export function organizationRecordLink(origin, screenId, record) {
-  const id = typeof record?.id === 'string' && ORGANIZATION_RECORD_ID.test(record.id) ? record.id : null;
-  const own = typeof record?.metadata?.code === 'string' ? record.metadata.code.trim() : '';
-  const code = own && ORGANIZATION_RECORD_ID.test(own) ? own : null;
-  if (screenId === 'projects' && record?.type === 'project' && code) {
-    return { href: `${origin}/?screen=projects&project=${encodeURIComponent(code)}`, label: '「プロジェクトと関係者」' };
-  }
-  return id ? { href: `${origin}/?screen=graph&entity_id=${encodeURIComponent(id)}`, label: '「情報と関係」' } : null;
-}
-
-export const ORGANIZATION_RECORD_LINK_TEXT = '組織版でこの記録を開く';
-
-/** A link that opens `target` from organizationRecordLink in a new tab. */
-export function organizationRecordAnchor(doc, target, className) {
-  return makeElement(doc, 'a', {
-    ...(className ? { className } : {}),
-    text: ORGANIZATION_RECORD_LINK_TEXT,
-    attrs: { href: target.href, target: '_blank', rel: 'noopener noreferrer' },
-  });
-}
-
 /**
  * A host's note that corrections are not available here, or null when it passed none.  The host may
  * pass a function of the selected record (`{ id, type, metadata }`) returning a string or an element,

package/ui/local-web-shell.js

@@ -21,7 +21,7 @@ import { createObjectiveEditorController } from './objective-editor.js';
 import { createObjectiveEditorHttpPort } from './objective-editor-http-port.js';
 import { createValueProofReviewUI } from './value-proof-review.js';
 import { createWorldModelView } from './world-model-view.js';
-import { createGraphClient, organizationRecordAnchor, organizationRecordLink, organizationWebOrigin } from './graph-view-shared.js';
+import { createGraphClient } from './graph-view-shared.js';
 
 export const LOCAL_WEB_SHELL_CONTRACT_VERSION = 'brainbase.local-web-shell.v1';
 
@@ -203,58 +203,11 @@ function mountObjectives(container, context) {
   return { editor, worldModel };
 }
 
-const ORGANIZATION_READ_ONLY_NOTE = '組織のGraphを読み取り専用で表示しています。登録の訂正は組織版で行ってください。';
-// What the owner needs before leaving for the organization web (Inspector UX-20261004-01): a link to this
-// very record there, who may correct it, and what happens after saving.
-export { organizationRecordLink };
-const organizationReadOnlyNoteLinked = (doc, origin, screenId) => (record) => {
-  const target = organizationRecordLink(origin, screenId, record);
-  if (!target) return ORGANIZATION_READ_ONLY_NOTE;
-  const note = makeElement(doc, 'span');
-  note.append(
-    makeElement(doc, 'span', { text: [
-      '組織のGraphを読み取り専用で表示しています。ここでは直せません。訂正の手順：',
-      `① 下のリンク（上の「出典」にも同じリンクがあります）から、組織版の${target.label}でこの記録を開きます。ログインしていなければSlackでログインすると、そのままこの記録に戻ります。`,
-      '② 直せるのは、組織版での役割がgmかceoで、このプロジェクトが属する事業（事業そのものなら、その事業）を許可されている人です。直せるのはプロジェクトの記録（名前・別名・要約・期間・目的・状態）だけで、人物の記録と、関係者の追加・終了は組織版でもまだ直せません。',
-      '③ 保存すると、理由といっしょに組織のGraphへ書き込まれ、組織版がその場で読み戻して表示します。この画面には、1分ほどたってから再読み込みすると反映されます。',
-      '',
-    ].join('\n') }),
-    organizationRecordAnchor(doc, target),
-  );
-  return note;
-};
-
-/**
- * The 出典 notice of a screen reading the organization Graph.  Once a record is selected its link opens
- * that record in the organization web; before that, the screen there.
- */
-const organizationSourceText = (doc, origin, screenId, sourceText) => (record) => {
-  const target = record ? organizationRecordLink(origin, screenId, record) : null;
-  const link = target
-    ? organizationRecordAnchor(doc, target)
-    : makeElement(doc, 'a', {
-      text: '組織版で開いて訂正する',
-      attrs: { href: `${origin}/?screen=${encodeURIComponent(screenId)}`, target: '_blank', rel: 'noopener noreferrer' },
-    });
-  const source = makeElement(doc, 'span');
-  source.append(makeElement(doc, 'span', { text: `${sourceText} ` }), link);
-  return source;
-};
-
 function mountGraphScreen(screenId, createView) {
   return (container, context) => {
     const viewRoot = makeElement(context.document, 'div');
     makePage(container, context).append(viewRoot);
-    // Ledger C1: when the host reads the organization Graph, nothing here can be corrected.
-    const readOnly = context.organizationGraph?.status === 'connected';
-    const origin = readOnly ? organizationWebOrigin(context.organizationGraph) : null;
-    const sourceText = `組織のGraph（${context.organizationGraph?.server ?? '接続先不明'}）を読み取り専用で表示しています。このMacのGraphではありません。`;
     return createView({
-      ...(readOnly ? {
-        canCorrect: false,
-        readOnlyNote: origin ? organizationReadOnlyNoteLinked(context.document, origin, screenId) : ORGANIZATION_READ_ONLY_NOTE,
-        sourceNotice: { label: '出典', text: origin ? organizationSourceText(context.document, origin, screenId, sourceText) : sourceText },
-      } : {}),
       root: viewRoot,
       rail: context.rail,
       page: context.page,
@@ -334,7 +287,6 @@ function renderSource(doc, bar, status, onRecheck) {
   bar.append(
     fact('データ', data.data_dir),
     fact('Graph', graphLabel, data.graph.status === 'ready' ? '' : 'is-warning'),
-    fact('組織のGraph', data.organization_graph?.status === 'connected' ? '読んでいます（読み取りのみ）' : '読んでいません'),
   );
 }
 
@@ -446,10 +398,8 @@ export function createLocalWebShell({
     slot.replaceChildren();
     const rail = rails.get(screen.id) ?? null;
     rail?.replaceChildren();
-    const organizationGraph = status.phase === 'ready' ? status.data.organization_graph ?? null : null;
-    const readsOrganization = organizationGraph?.status === 'connected' && (screen.id === 'projects' || screen.id === 'graph');
-    const page = Object.freeze({ crumbs: Object.freeze(['あなたのBrainbase', screen.label]), source: readsOrganization ? '組織のGraph（読み取りのみ）' : screen.source ?? null });
-    const view = screen.mount(slot, Object.freeze({ ...context, rail, page, initialEntityId: entityId, organizationGraph })) ?? true;
+    const page = Object.freeze({ crumbs: Object.freeze(['あなたのBrainbase', screen.label]), source: screen.source ?? null });
+    const view = screen.mount(slot, Object.freeze({ ...context, rail, page, initialEntityId: entityId })) ?? true;
     mounted.set(screen.id, view);
     if (entityId && screen.id === 'today' && typeof view?.openDecision === 'function') view.openDecision(entityId);
     if (entityId && screen.id === 'projects' && typeof view?.openProject === 'function') void view.openProject(entityId);

package/ui/world/world-view.js

@@ -25,7 +25,6 @@ import {
   workspaceDetailEmpty,
   workspaceButton,
 } from '../../workspace-kit.js';
-import { organizationRecordAnchor, organizationRecordLink, organizationWebOrigin } from '../../graph-view-shared.js';
 
 export const WORLD_VIEW_CONTRACT_VERSION = 'brainbase.world-view.v0';
 
@@ -1431,7 +1430,7 @@ const JUDGMENT_UNAVAILABLE_TEXT = Object.freeze({
  *   engagement opens in the host's プロジェクトと関係者.  The local web opens `#projects?project=<id>`; an
  *   organization web passes its own route.
  */
-export function createWorldView({ root, rail, page, document: explicitDocument, fetcher, organizationGraph = null, projectHref = (project) => `#projects?project=${encodeURIComponent(project.id)}` }) {
+export function createWorldView({ root, rail, page, document: explicitDocument, fetcher, projectHref = (project) => `#projects?project=${encodeURIComponent(project.id)}` }) {
   const doc = explicitDocument ?? globalThis.document;
   const reducedMotion = Boolean(globalThis.matchMedia?.('(prefers-reduced-motion: reduce)').matches);
   const wrap = el(doc, 'div', { className: 'bb-world' });
@@ -1502,22 +1501,9 @@ export function createWorldView({ root, rail, page, document: explicitDocument,
     return el(doc, 'a', { className: 'bb-world-rail-link', text: label, attrs: { href: projectHref(project) } });
   }
 
-  /**
-   * The same project in the organization web, where it is corrected (Inspector UX-20261004-01).  Only when
-   * the host reads the organization Graph and was told where its web is.
-   */
-  function organizationLink(project) {
-    const origin = organizationWebOrigin(organizationGraph);
-    if (!origin) return null;
-    // A business without its own code carries its id as its code; that is not a code the organization web knows.
-    const code = project.code && project.code !== project.id ? project.code : null;
-    const target = organizationRecordLink(origin, 'projects', { id: project.id, type: 'project', metadata: { code } });
-    return target ? organizationRecordAnchor(doc, target, 'bb-world-rail-link') : null;
-  }
-
-  /** 詳しく見る: プロジェクトと関係者 here, and the organization web when there is one. */
+  /** 詳しく見る: the same project in プロジェクトと関係者. */
   function detailBlock(project, label) {
-    const content = [projectLink(project, label), organizationLink(project)].filter(Boolean);
+    const content = [projectLink(project, label)];
     return workspaceRailBlock(doc, { title: '詳しく見る', content });
   }
 
@@ -1780,11 +1766,11 @@ export const screen = Object.freeze({
   label: '世界',
   usesGraph: false,
   rail: true,
-  source: '組織のGraph・判断journal（読み取りのみ）',
+  source: '手元のGraph・判断journal（読み取りのみ）',
   mount(container, context) {
     const root = context.document.createElement('div');
     root.className = 'bb-shell-page';
     container.append(root);
-    return createWorldView({ root, rail: context.rail, page: context.page, document: context.document, fetcher: context.fetcher, organizationGraph: context.organizationGraph ?? null });
+    return createWorldView({ root, rail: context.rail, page: context.page, document: context.document, fetcher: context.fetcher });
   },
 });