@utaba/deep-memory 0.5.0 → 0.6.1

package/dist/providers/index.d.cts

@@ -81,20 +81,28 @@ interface LockHandle {
  */
 interface GraphTraversalProvider {
     /**
-     * Execute a structured traversal compiled from a TraversalSpec.
-     * The library may pass both the spec and a pre-compiled query string.
-     * The provider can use either — the compiled query is a suggestion,
-     * not a requirement.
+     * Execute a structured traversal described by a TraversalSpec.
+     * The provider owns compilation to its native dialect — the core
+     * never hands down a pre-compiled query string.
      */
-    traverse(repositoryId: string, spec: TraversalSpec, compiledQuery?: string): Promise<TraversalResult>;
+    traverse(repositoryId: string, spec: TraversalSpec): Promise<TraversalResult>;
     /**
      * Execute a native graph query (Gremlin, Cypher, etc.).
-     * The library passes the query string through without modification.
-     * The provider is responsible for execution and result mapping.
      *
-     * Implementers decide whether to expose this to agents.
-     * The library does not add safety guards — that is the implementer's
-     * responsibility.
+     * ⚠️  ELEVATED PRIVILEGE — SYSTEM-LEVEL OPERATION ⚠️
+     *
+     * This is an unscoped pass-through. The library does not rewrite the query,
+     * does not inject partition or repository scoping, and performs no
+     * validation on the query string or bindings. A single call may reach any
+     * data the underlying store exposes to the connection — across partitions,
+     * repositories, or tenants.
+     *
+     * DO NOT expose this method to AI agents, end users, or any untrusted
+     * caller. It is intended for administrative tooling, migrations,
+     * diagnostics, and trusted internal operations only.
+     *
+     * For agent-facing graph queries use {@link traverse}, which takes a
+     * structured TraversalSpec and lets the provider enforce repository scoping.
      */
     executeNativeQuery(repositoryId: string, query: string, params?: Record<string, unknown>): Promise<TraversalResult>;
     /**

package/dist/providers/index.d.ts

@@ -81,20 +81,28 @@ interface LockHandle {
  */
 interface GraphTraversalProvider {
     /**
-     * Execute a structured traversal compiled from a TraversalSpec.
-     * The library may pass both the spec and a pre-compiled query string.
-     * The provider can use either — the compiled query is a suggestion,
-     * not a requirement.
+     * Execute a structured traversal described by a TraversalSpec.
+     * The provider owns compilation to its native dialect — the core
+     * never hands down a pre-compiled query string.
      */
-    traverse(repositoryId: string, spec: TraversalSpec, compiledQuery?: string): Promise<TraversalResult>;
+    traverse(repositoryId: string, spec: TraversalSpec): Promise<TraversalResult>;
     /**
      * Execute a native graph query (Gremlin, Cypher, etc.).
-     * The library passes the query string through without modification.
-     * The provider is responsible for execution and result mapping.
      *
-     * Implementers decide whether to expose this to agents.
-     * The library does not add safety guards — that is the implementer's
-     * responsibility.
+     * ⚠️  ELEVATED PRIVILEGE — SYSTEM-LEVEL OPERATION ⚠️
+     *
+     * This is an unscoped pass-through. The library does not rewrite the query,
+     * does not inject partition or repository scoping, and performs no
+     * validation on the query string or bindings. A single call may reach any
+     * data the underlying store exposes to the connection — across partitions,
+     * repositories, or tenants.
+     *
+     * DO NOT expose this method to AI agents, end users, or any untrusted
+     * caller. It is intended for administrative tooling, migrations,
+     * diagnostics, and trusted internal operations only.
+     *
+     * For agent-facing graph queries use {@link traverse}, which takes a
+     * structured TraversalSpec and lets the provider enforce repository scoping.
      */
     executeNativeQuery(repositoryId: string, query: string, params?: Record<string, unknown>): Promise<TraversalResult>;
     /**

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@utaba/deep-memory",
-  "version": "0.5.0",
+  "version": "0.6.1",
   "description": "Vocabulary-driven graph memory for AI agents",
   "type": "module",
   "main": "./dist/index.cjs",