@unson/brainbase-mcp 0.23.4 → 0.23.6

package/dist/graph-foundation-reader.js

@@ -1,3 +1,4 @@
+import { assertPrivatePhilosophyRead, privatePhilosophyAcl } from './private-philosophy-graph.js';
 import { cloneFoundationDefinition, digestFoundationDefinition } from './foundation-catalog.js';
 import { canonicalPortableJson } from './portable-graph.js';
 import { FoundationStoreError } from './foundation-store.js';
@@ -295,7 +296,7 @@ function createPhilosophyRevisionRecord(validated, id, revision, principal) {
         applicability: validated.history.applicability,
         // This is a read-time projection of the current Graph permission. It
         // does not mutate the canonical philosophy payload or Graph ACL.
-        currentAcl: privateCurrentAcl(principal),
+        currentAcl: privatePhilosophyAcl(validated.current.payload) ?? privateCurrentAcl(principal),
         currentScope: cloneJudgmentScope(validated.history.applicability.scope)
     };
 }
@@ -337,7 +338,7 @@ async function readCanonicalPhilosophyRevision(input, trustedContext, query) {
                 applicability: validated.history.applicability,
                 // This is a read-time projection of the current Graph permission. It
                 // does not mutate the canonical philosophy payload or Graph ACL.
-                currentAcl: privateCurrentAcl(trustedContext.principal),
+                currentAcl: privatePhilosophyAcl(validated.current.payload) ?? privateCurrentAcl(trustedContext.principal),
                 currentScope: cloneJudgmentScope(validated.history.applicability.scope)
             }
         };
@@ -398,7 +399,7 @@ async function readPhilosophyRevision(input, trustedContext, query) {
                 applicability: validated.history.applicability,
                 // This is a read-time projection of the current Graph permission. It
                 // does not mutate the canonical philosophy payload or Graph ACL.
-                currentAcl: privateCurrentAcl(trustedContext.principal),
+                currentAcl: privatePhilosophyAcl(validated.current.payload) ?? privateCurrentAcl(trustedContext.principal),
                 currentScope: cloneJudgmentScope(reference.scope)
             }
         };
@@ -414,6 +415,10 @@ async function readPhilosophyRevision(input, trustedContext, query) {
 function validatePhilosophyHistoryAccess(row, id, revision, trustedContext) {
     const history = validatePhilosophyHistoryRow(row, { id, revision });
     const current = validateCurrentRow(row, id, 'philosophy');
+    const historicalAcl = assertPrivatePhilosophyRead(history.payload, trustedContext.principal);
+    const currentAcl = assertPrivatePhilosophyRead(current.payload, trustedContext.principal);
+    if (historicalAcl && !currentAcl)
+        throw new FoundationStoreError('authorization_denied', 'Private philosophy history cannot become legacy');
     const philosophy = current.philosophy;
     if (!philosophy) {
         throw corrupt('Current Graph philosophy applicability is missing');

package/dist/private-philosophy-graph.d.ts

@@ -0,0 +1,13 @@
+import type { FoundationAcl } from './ontology-foundation.js';
+/** An explicit ACL opts a philosophy into owner-only storage; absence is legacy. */
+export declare function privatePhilosophyAcl(payload: unknown): FoundationAcl | undefined;
+export declare function assertPrivatePhilosophyRead(payload: unknown, principal: string): FoundationAcl | undefined;
+/** Validate the existing Graph writer, without changing legacy organization philosophy. */
+export declare function assertPrivatePhilosophyWrite(input: {
+    payload: Record<string, unknown>;
+    currentPayload?: Record<string, unknown>;
+    principal: string;
+    projectCode: string;
+    currentVersion: number;
+    expectedVersion?: number;
+}): void;

package/dist/private-philosophy-graph.js

@@ -0,0 +1,60 @@
+import { FoundationStoreError } from './foundation-store.js';
+import { canonicalPortableJson } from './portable-graph.js';
+import { philosophyRevisionDigest } from './philosophy-revision-reader.js';
+const record = (value) => value !== null && typeof value === 'object' && !Array.isArray(value);
+const present = (value) => Object.hasOwn(value, 'acl');
+const fail = (code, message) => {
+    throw new FoundationStoreError(code, message);
+};
+/** An explicit ACL opts a philosophy into owner-only storage; absence is legacy. */
+export function privatePhilosophyAcl(payload) {
+    if (!record(payload))
+        return fail('invalid_input', 'Philosophy payload must be an object');
+    if (!present(payload))
+        return undefined;
+    const acl = payload.acl;
+    if (!record(acl) || typeof acl.ownerId !== 'string' || !acl.ownerId.trim()
+        || acl.visibility !== 'private' || !Array.isArray(acl.readerIds) || acl.readerIds.length !== 0
+        || !Array.isArray(acl.writerIds) || acl.writerIds.length !== 0) {
+        return fail('invalid_input', 'Private philosophy requires one owner and no additional readers or writers');
+    }
+    return { ownerId: acl.ownerId, visibility: 'private', readerIds: [], writerIds: [] };
+}
+export function assertPrivatePhilosophyRead(payload, principal) {
+    const acl = privatePhilosophyAcl(payload);
+    if (acl && acl.ownerId !== principal)
+        fail('authorization_denied', 'Private philosophy is owner-only');
+    return acl;
+}
+/** Validate the existing Graph writer, without changing legacy organization philosophy. */
+export function assertPrivatePhilosophyWrite(input) {
+    const currentAcl = input.currentPayload ? privatePhilosophyAcl(input.currentPayload) : undefined;
+    const nextAcl = privatePhilosophyAcl(input.payload);
+    if (!currentAcl && !nextAcl)
+        return;
+    if (!nextAcl || (currentAcl && currentAcl.ownerId !== input.principal)
+        || nextAcl.ownerId !== input.principal)
+        fail('authorization_denied', 'Private philosophy owner cannot change');
+    if (!Number.isSafeInteger(input.expectedVersion) || input.expectedVersion !== input.currentVersion) {
+        fail('revision_conflict', 'Private philosophy requires the exact current Graph version');
+    }
+    if (currentAcl && canonicalPortableJson(currentAcl) !== canonicalPortableJson(nextAcl)) {
+        fail('authorization_denied', 'Private philosophy ACL cannot change');
+    }
+    if (typeof input.payload.statement !== 'string' || !input.payload.statement.trim()) {
+        fail('invalid_input', 'Private philosophy statement is required');
+    }
+    const applicability = input.payload.judgmentApplicability;
+    if (!record(applicability) || !record(applicability.scope)
+        || applicability.scope.type !== 'project' || applicability.scope.id !== input.projectCode) {
+        fail('authorization_denied', 'Private philosophy must remain in its authenticated project');
+    }
+    // Reuse the immutable revision reader's strict applicability/date contract.
+    philosophyRevisionDigest({ kind: 'philosophy', id: 'private-philosophy-validation', revision: '1',
+        payload: input.payload, applicability: applicability });
+    if (currentAcl && canonicalPortableJson(input.currentPayload.judgmentApplicability)
+        !== canonicalPortableJson(applicability))
+        fail('authorization_denied', 'Private philosophy scope cannot change');
+    if (input.currentPayload && !currentAcl)
+        fail('authorization_denied', 'Legacy philosophy privacy requires a reviewed migration');
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@unson/brainbase-mcp",
-  "version": "0.23.4",
+  "version": "0.23.6",
   "description": "Local-first Brainbase judgment OS that lets supported AI agents reuse a user's approved goals, priorities, decisions, and judgment criteria.",
   "type": "module",
   "license": "MIT",
@@ -347,6 +347,10 @@
     "./meeting-minutes-storage-http": {
       "types": "./dist/meeting-minutes-storage-http.d.ts",
       "import": "./dist/meeting-minutes-storage-http.js"
+    },
+    "./private-philosophy-graph": {
+      "types": "./dist/private-philosophy-graph.d.ts",
+      "import": "./dist/private-philosophy-graph.js"
     }
   },
   "bin": {
@@ -419,5 +423,5 @@
   "engines": {
     "node": ">=20"
   },
-  "gitHead": "985c9ff2304a73b0010f86049d3420429cb2e50d"
+  "gitHead": "d475d6282eda01482255c0a234999e194560d3c8"
 }

package/ui/judgment-history.js

@@ -606,7 +606,9 @@ function aggregateNormalJudgmentHistory(home, { now = new Date(), period = PERIO
       confirmedOutcomes: null,
     },
     visibleCount: 0,
-    totalCount: home.coverage?.total ?? (home.coverage?.complete === true && home.records.length === 0 ? 0 : null),
+    retrievedCount: 0,
+    countComplete: false,
+    totalCount: home.status === 'available' && home.coverage?.complete === true ? nonNegativeInteger(home.coverage?.total) : null,
     period: normalizedPeriod(period),
     query: text(query),
     status: home.status,
@@ -660,7 +662,10 @@ function aggregateNormalJudgmentHistory(home, { now = new Date(), period = PERIO
     }
   }
   const metricsUnconfirmed = home.status === 'partial' && rows.length === 0;
-  const judgments = metricsUnconfirmed ? null : rows.length;
+  // A page length is a retrieved count, never proof of the whole range.
+  const countComplete = home.status === 'available' && home.coverage?.complete === true
+    && nonNegativeInteger(home.coverage?.total) !== null && !needle;
+  const judgments = countComplete ? home.coverage.total : null;
   const referenceCount = metricsUnconfirmed || referencesUnconfirmed ? null : references.size;
   const confirmedOutcomes = metricsUnconfirmed
     ? null
@@ -680,7 +685,9 @@ function aggregateNormalJudgmentHistory(home, { now = new Date(), period = PERIO
       confirmedOutcomes,
     },
     visibleCount: rows.length,
-    totalCount: home.coverage?.total ?? (home.coverage?.complete === true && home.records.length === 0 ? 0 : null),
+    retrievedCount: rows.length,
+    countComplete,
+    totalCount: home.status === 'available' && home.coverage?.complete === true ? nonNegativeInteger(home.coverage?.total) : null,
   };
 }
 
@@ -1328,7 +1335,7 @@ function paginationControls(doc, aggregate, onNext) {
   const total = aggregate?.totalCount;
   if (!pagination?.hasNext && total === null) return null;
   const wrap = makeWorkspaceElement(doc, 'div', { className: 'bb-jh-pagination' });
-  const count = total === null ? '同じ範囲の件数は未確認' : `同じ範囲の件数: ${total}件`;
+  const count = total === null ? '同じ範囲の件数は未確認' : `${aggregate.query ? '検索前の全件数' : '同じ範囲の件数'}: ${total}件`;
   wrap.append(makeWorkspaceElement(doc, 'span', { className: 'bb-jh-pagination-count', text: count }));
   if (pagination?.hasNext) {
     wrap.append(workspaceButton(doc, { text: '次のページ', variant: 'quiet', onClick: onNext, attrs: { 'data-action': 'next-page' } }));
@@ -1709,7 +1716,12 @@ export function createJudgmentHistoryUI({
     const stats = aggregate.stats ?? {};
     const metricCount = (value, suffix) => value === null || value === undefined ? '未確認' : `${value}${suffix}`;
     wrapper.append(workspaceMetrics(doc, normalMode() ? [
-      { label: '判断件数', value: metricCount(stats.judgments, '件'), note: 'この期間・絞り込みの履歴' },
+      {
+        label: aggregate.query ? '表示対象' : aggregate.countComplete ? '判断件数' : '取得済み',
+        value: metricCount(aggregate.countComplete ? stats.judgments : aggregate.retrievedCount, '件'),
+        note: aggregate.countComplete ? 'この期間・絞り込みの全件数'
+          : aggregate.query ? '取得済み履歴の検索結果・全件数未確認' : '全件数未確認',
+      },
       { label: '使った参照', value: metricCount(stats.references, '件'), note: '当時の記録にある一意の参照' },
       { label: '確認済みの結果', value: metricCount(stats.confirmedOutcomes, '件'), note: '成果が確認済みと記録された判断' },
     ] : [
@@ -1717,8 +1729,8 @@ export function createJudgmentHistoryUI({
       { label: 'そこで使った参照', value: metricCount(stats.references, '件'), note: '代理判断に含まれる一意の参照' },
       { label: '判断回数にすると', value: metricCount(stats.equivalent, '回分相当'), note: '代理判断1件を1回分として表示' },
     ], { ariaLabel: '判断履歴の集計' }));
-    const emptyText = state.home?.status === 'partial'
-      ? 'この期間に取得できた判断履歴はありません。未接続・一部取得のため0件とは確認できません。'
+    const emptyText = state.home?.status === 'partial' || (normalMode() && !aggregate.countComplete)
+      ? 'この期間に取得できた判断履歴はありません。全件数が未確認のため0件とは確認できません。'
       : 'この期間の判断履歴はありません。';
     wrapper.append(workspaceLedger(doc, {
       className: 'bb-jh-ledger',