@unson/brainbase-mcp 0.23.4 → 0.23.5

package/dist/graph-foundation-reader.js

@@ -1,3 +1,4 @@
+import { assertPrivatePhilosophyRead, privatePhilosophyAcl } from './private-philosophy-graph.js';
 import { cloneFoundationDefinition, digestFoundationDefinition } from './foundation-catalog.js';
 import { canonicalPortableJson } from './portable-graph.js';
 import { FoundationStoreError } from './foundation-store.js';
@@ -295,7 +296,7 @@ function createPhilosophyRevisionRecord(validated, id, revision, principal) {
         applicability: validated.history.applicability,
         // This is a read-time projection of the current Graph permission. It
         // does not mutate the canonical philosophy payload or Graph ACL.
-        currentAcl: privateCurrentAcl(principal),
+        currentAcl: privatePhilosophyAcl(validated.current.payload) ?? privateCurrentAcl(principal),
         currentScope: cloneJudgmentScope(validated.history.applicability.scope)
     };
 }
@@ -337,7 +338,7 @@ async function readCanonicalPhilosophyRevision(input, trustedContext, query) {
                 applicability: validated.history.applicability,
                 // This is a read-time projection of the current Graph permission. It
                 // does not mutate the canonical philosophy payload or Graph ACL.
-                currentAcl: privateCurrentAcl(trustedContext.principal),
+                currentAcl: privatePhilosophyAcl(validated.current.payload) ?? privateCurrentAcl(trustedContext.principal),
                 currentScope: cloneJudgmentScope(validated.history.applicability.scope)
             }
         };
@@ -398,7 +399,7 @@ async function readPhilosophyRevision(input, trustedContext, query) {
                 applicability: validated.history.applicability,
                 // This is a read-time projection of the current Graph permission. It
                 // does not mutate the canonical philosophy payload or Graph ACL.
-                currentAcl: privateCurrentAcl(trustedContext.principal),
+                currentAcl: privatePhilosophyAcl(validated.current.payload) ?? privateCurrentAcl(trustedContext.principal),
                 currentScope: cloneJudgmentScope(reference.scope)
             }
         };
@@ -414,6 +415,10 @@ async function readPhilosophyRevision(input, trustedContext, query) {
 function validatePhilosophyHistoryAccess(row, id, revision, trustedContext) {
     const history = validatePhilosophyHistoryRow(row, { id, revision });
     const current = validateCurrentRow(row, id, 'philosophy');
+    const historicalAcl = assertPrivatePhilosophyRead(history.payload, trustedContext.principal);
+    const currentAcl = assertPrivatePhilosophyRead(current.payload, trustedContext.principal);
+    if (historicalAcl && !currentAcl)
+        throw new FoundationStoreError('authorization_denied', 'Private philosophy history cannot become legacy');
     const philosophy = current.philosophy;
     if (!philosophy) {
         throw corrupt('Current Graph philosophy applicability is missing');

package/dist/private-philosophy-graph.d.ts

@@ -0,0 +1,13 @@
+import type { FoundationAcl } from './ontology-foundation.js';
+/** An explicit ACL opts a philosophy into owner-only storage; absence is legacy. */
+export declare function privatePhilosophyAcl(payload: unknown): FoundationAcl | undefined;
+export declare function assertPrivatePhilosophyRead(payload: unknown, principal: string): FoundationAcl | undefined;
+/** Validate the existing Graph writer, without changing legacy organization philosophy. */
+export declare function assertPrivatePhilosophyWrite(input: {
+    payload: Record<string, unknown>;
+    currentPayload?: Record<string, unknown>;
+    principal: string;
+    projectCode: string;
+    currentVersion: number;
+    expectedVersion?: number;
+}): void;

package/dist/private-philosophy-graph.js

@@ -0,0 +1,60 @@
+import { FoundationStoreError } from './foundation-store.js';
+import { canonicalPortableJson } from './portable-graph.js';
+import { philosophyRevisionDigest } from './philosophy-revision-reader.js';
+const record = (value) => value !== null && typeof value === 'object' && !Array.isArray(value);
+const present = (value) => Object.hasOwn(value, 'acl');
+const fail = (code, message) => {
+    throw new FoundationStoreError(code, message);
+};
+/** An explicit ACL opts a philosophy into owner-only storage; absence is legacy. */
+export function privatePhilosophyAcl(payload) {
+    if (!record(payload))
+        return fail('invalid_input', 'Philosophy payload must be an object');
+    if (!present(payload))
+        return undefined;
+    const acl = payload.acl;
+    if (!record(acl) || typeof acl.ownerId !== 'string' || !acl.ownerId.trim()
+        || acl.visibility !== 'private' || !Array.isArray(acl.readerIds) || acl.readerIds.length !== 0
+        || !Array.isArray(acl.writerIds) || acl.writerIds.length !== 0) {
+        return fail('invalid_input', 'Private philosophy requires one owner and no additional readers or writers');
+    }
+    return { ownerId: acl.ownerId, visibility: 'private', readerIds: [], writerIds: [] };
+}
+export function assertPrivatePhilosophyRead(payload, principal) {
+    const acl = privatePhilosophyAcl(payload);
+    if (acl && acl.ownerId !== principal)
+        fail('authorization_denied', 'Private philosophy is owner-only');
+    return acl;
+}
+/** Validate the existing Graph writer, without changing legacy organization philosophy. */
+export function assertPrivatePhilosophyWrite(input) {
+    const currentAcl = input.currentPayload ? privatePhilosophyAcl(input.currentPayload) : undefined;
+    const nextAcl = privatePhilosophyAcl(input.payload);
+    if (!currentAcl && !nextAcl)
+        return;
+    if (!nextAcl || (currentAcl && currentAcl.ownerId !== input.principal)
+        || nextAcl.ownerId !== input.principal)
+        fail('authorization_denied', 'Private philosophy owner cannot change');
+    if (!Number.isSafeInteger(input.expectedVersion) || input.expectedVersion !== input.currentVersion) {
+        fail('revision_conflict', 'Private philosophy requires the exact current Graph version');
+    }
+    if (currentAcl && canonicalPortableJson(currentAcl) !== canonicalPortableJson(nextAcl)) {
+        fail('authorization_denied', 'Private philosophy ACL cannot change');
+    }
+    if (typeof input.payload.statement !== 'string' || !input.payload.statement.trim()) {
+        fail('invalid_input', 'Private philosophy statement is required');
+    }
+    const applicability = input.payload.judgmentApplicability;
+    if (!record(applicability) || !record(applicability.scope)
+        || applicability.scope.type !== 'project' || applicability.scope.id !== input.projectCode) {
+        fail('authorization_denied', 'Private philosophy must remain in its authenticated project');
+    }
+    // Reuse the immutable revision reader's strict applicability/date contract.
+    philosophyRevisionDigest({ kind: 'philosophy', id: 'private-philosophy-validation', revision: '1',
+        payload: input.payload, applicability: applicability });
+    if (currentAcl && canonicalPortableJson(input.currentPayload.judgmentApplicability)
+        !== canonicalPortableJson(applicability))
+        fail('authorization_denied', 'Private philosophy scope cannot change');
+    if (input.currentPayload && !currentAcl)
+        fail('authorization_denied', 'Legacy philosophy privacy requires a reviewed migration');
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@unson/brainbase-mcp",
-  "version": "0.23.4",
+  "version": "0.23.5",
   "description": "Local-first Brainbase judgment OS that lets supported AI agents reuse a user's approved goals, priorities, decisions, and judgment criteria.",
   "type": "module",
   "license": "MIT",
@@ -347,6 +347,10 @@
     "./meeting-minutes-storage-http": {
       "types": "./dist/meeting-minutes-storage-http.d.ts",
       "import": "./dist/meeting-minutes-storage-http.js"
+    },
+    "./private-philosophy-graph": {
+      "types": "./dist/private-philosophy-graph.d.ts",
+      "import": "./dist/private-philosophy-graph.js"
     }
   },
   "bin": {
@@ -419,5 +423,5 @@
   "engines": {
     "node": ">=20"
   },
-  "gitHead": "985c9ff2304a73b0010f86049d3420429cb2e50d"
+  "gitHead": "98835ea4b24370a96ea81e80716653b416bcd7c3"
 }