blun-king-cli 9.1.386 → 9.1.388

package/bin/cognitive-attention-runtime.cjs

@@ -20,7 +20,7 @@ function safeId(value) {
   return SAFE_ID_RE.test(text) ? text : '';
 }
 
-function authorizeAttentionCandidate({ store, tenantId, currentAgent, now, input } = {}) {
+function authorizeAttentionCandidate({ store, tenantId, currentAgent, now, input, memoryAccess } = {}) {
   if (!store || typeof store.authorizeAttention !== 'function' || typeof now !== 'function'
       || !exactKeys(input, new Set(['candidate', 'channel', 'authorization']))) fail();
   const tenant = safeId(tenantId);
@@ -61,7 +61,7 @@ function authorizeAttentionCandidate({ store, tenantId, currentAgent, now, input
     receiptId,
     authority,
     authorizedAt: new Date(issuedAtMs).toISOString(),
-  });
+  }, memoryAccess);
   if (!admitted.claimed) {
     return {
       accepted: false,

package/bin/cognitive-memory-adapter.cjs

@@ -2,8 +2,13 @@
 
 const { openCognitiveStateStore } = require('./cognitive-state-store.cjs');
 
-const COGNITIVE_MEMORY_ADAPTER_VERSION = 1;
+const COGNITIVE_MEMORY_ADAPTER_VERSION = 3;
 const KIND_RE = /^[A-Za-z0-9][A-Za-z0-9._:-]{0,127}$/u;
+const ACCESS_KEYS = Object.freeze([
+  'actorId', 'agentId', 'channelId', 'conversationId', 'permissionContext',
+  'portalId', 'requestedScope', 'tenantId', 'userId',
+]);
+const PERMISSION_KEYS = Object.freeze(['authority', 'decision', 'receiptId']);
 const REQUIRED_METHODS = Object.freeze([
   'commit',
   'read',
@@ -20,6 +25,90 @@ function fail(code) {
   throw error;
 }
 
+function exactKeys(value, expected) {
+  return value && typeof value === 'object' && !Array.isArray(value)
+    && Object.keys(value).sort().join('\0') === [...expected].sort().join('\0');
+}
+
+function safeId(value) {
+  const text = String(value ?? '').trim();
+  return KIND_RE.test(text) ? text : '';
+}
+
+function normalizeMemoryAccess(access, request) {
+  if (!exactKeys(access, ACCESS_KEYS) || !exactKeys(access.permissionContext, PERMISSION_KEYS)) {
+    fail('COGNITIVE_MEMORY_ACCESS_INVALID');
+  }
+  const normalized = {
+    tenantId: safeId(access.tenantId),
+    userId: safeId(access.userId),
+    actorId: safeId(access.actorId),
+    agentId: safeId(access.agentId),
+    portalId: safeId(access.portalId),
+    channelId: safeId(access.channelId),
+    conversationId: safeId(access.conversationId),
+    requestedScope: safeId(access.requestedScope),
+    permissionContext: {
+      authority: safeId(access.permissionContext.authority),
+      decision: String(access.permissionContext.decision ?? ''),
+      receiptId: safeId(access.permissionContext.receiptId),
+    },
+  };
+  if (!normalized.tenantId || !normalized.userId || !normalized.actorId || !normalized.agentId
+      || !normalized.portalId || !normalized.channelId || !normalized.conversationId
+      || !normalized.requestedScope || !normalized.permissionContext.authority
+      || !normalized.permissionContext.receiptId) fail('COGNITIVE_MEMORY_ACCESS_INVALID');
+  if (normalized.permissionContext.decision !== 'passed') fail('COGNITIVE_MEMORY_ACCESS_DENIED');
+  const requestTenant = safeId(request?.tenantId);
+  const requestAgent = safeId(request?.agentId ?? request?.candidate?.responsible_agent ?? request?.claimedBy);
+  if (!requestTenant || !requestAgent
+      || requestTenant !== normalized.tenantId || requestAgent !== normalized.agentId) {
+    fail('COGNITIVE_MEMORY_ACCESS_SCOPE_MISMATCH');
+  }
+  normalized.permissionContext = Object.freeze(normalized.permissionContext);
+  return Object.freeze(normalized);
+}
+
+function isInternalAgentAccess(access) {
+  return access.userId === access.agentId
+    && access.actorId === access.agentId
+    && access.portalId === 'cli'
+    && access.channelId === 'runtime'
+    && access.requestedScope === 'agent:memory'
+    && access.permissionContext.authority === 'runtime_internal'
+    && access.permissionContext.receiptId === access.conversationId;
+}
+
+function assertVisibleScope(scope, access) {
+  if (!isInternalAgentAccess(access) && safeId(scope) !== access.requestedScope) {
+    fail('COGNITIVE_MEMORY_VISIBILITY_DENIED');
+  }
+}
+
+function assertCommitAccess(input, access) {
+  if (isInternalAgentAccess(access)) return;
+  if (!Array.isArray(input?.observations) || input.observations.length < 1) {
+    fail('COGNITIVE_MEMORY_VISIBILITY_DENIED');
+  }
+  for (const observation of input.observations) assertVisibleScope(observation?.scope, access);
+  if (safeId(input?.source?.provider) !== access.portalId
+      || safeId(input?.source?.actor_id) !== access.actorId
+      || safeId(input?.source?.context_id) !== access.conversationId) {
+    fail('COGNITIVE_MEMORY_SOURCE_MISMATCH');
+  }
+}
+
+function projectReadableState(state, access) {
+  if (isInternalAgentAccess(access)) return state;
+  if (!state || typeof state !== 'object' || !Array.isArray(state.observations)) {
+    fail('COGNITIVE_MEMORY_ADAPTER_INVALID');
+  }
+  return {
+    ...state,
+    observations: state.observations.filter((item) => safeId(item?.scope) === access.requestedScope),
+  };
+}
+
 function assertCognitiveMemoryAdapter(adapter) {
   if (!adapter || typeof adapter !== 'object' || Array.isArray(adapter)) {
     fail('COGNITIVE_MEMORY_ADAPTER_INVALID');
@@ -34,14 +123,62 @@ function assertCognitiveMemoryAdapter(adapter) {
   return adapter;
 }
 
+function guardCognitiveMemoryAdapter(adapter) {
+  const raw = assertCognitiveMemoryAdapter(adapter);
+  const guarded = {
+    contractVersion: raw.contractVersion,
+    kind: raw.kind,
+    commit: (input, access) => {
+      const normalizedAccess = normalizeMemoryAccess(access, input);
+      assertCommitAccess(input, normalizedAccess);
+      return raw.commit(input, normalizedAccess);
+    },
+    read: (input, access) => {
+      const normalizedAccess = normalizeMemoryAccess(access, input);
+      return projectReadableState(raw.read(input, normalizedAccess), normalizedAccess);
+    },
+    hasEvent: (input, access) => {
+      if (!exactKeys(input, ['agentId', 'eventId', 'tenantId', 'visibilityScope'])
+          || !safeId(input.eventId) || !safeId(input.visibilityScope)) {
+        fail('COGNITIVE_MEMORY_ACCESS_INVALID');
+      }
+      const normalizedAccess = normalizeMemoryAccess(access, input);
+      assertVisibleScope(input.visibilityScope, normalizedAccess);
+      return raw.hasEvent(input, normalizedAccess);
+    },
+    verify: (input, access) => {
+      const normalizedAccess = normalizeMemoryAccess(access, input);
+      const result = raw.verify(input, normalizedAccess);
+      if (isInternalAgentAccess(normalizedAccess)) return result;
+      if (!result || typeof result.valid !== 'boolean') fail('COGNITIVE_MEMORY_ADAPTER_INVALID');
+      return { valid: result.valid };
+    },
+    claimAttention: (input, access) => {
+      const normalizedAccess = normalizeMemoryAccess(access, input);
+      assertVisibleScope(input?.candidate?.evidence_scope, normalizedAccess);
+      return raw.claimAttention(input, normalizedAccess);
+    },
+    authorizeAttention: (input, access) => {
+      const normalizedAccess = normalizeMemoryAccess(access, input);
+      assertVisibleScope(input?.candidate?.evidence_scope, normalizedAccess);
+      return raw.authorizeAttention(input, normalizedAccess);
+    },
+    close: () => raw.close(),
+  };
+  return Object.freeze(guarded);
+}
+
 function createLocalCognitiveMemoryAdapter({ home } = {}) {
   const store = openCognitiveStateStore({ home });
-  return assertCognitiveMemoryAdapter({
+  return guardCognitiveMemoryAdapter({
     contractVersion: COGNITIVE_MEMORY_ADAPTER_VERSION,
     kind: 'local-cognitive-event-store',
     commit: (input) => store.commit(input),
-    read: (input) => store.read(input),
-    hasEvent: (eventId) => store.hasEvent(eventId),
+    read: (input, access) => store.read({
+      ...input,
+      visibilityScope: isInternalAgentAccess(access) ? 'agent:memory' : access.requestedScope,
+    }),
+    hasEvent: (input) => store.hasEvent(input),
     verify: (input) => store.verify(input),
     claimAttention: (input) => store.claimAttention(input),
     authorizeAttention: (input) => store.authorizeAttention(input),
@@ -52,7 +189,7 @@ function createLocalCognitiveMemoryAdapter({ home } = {}) {
 function openCognitiveMemoryAdapter({ home, adapter } = {}) {
   return adapter === undefined
     ? createLocalCognitiveMemoryAdapter({ home })
-    : assertCognitiveMemoryAdapter(adapter);
+    : guardCognitiveMemoryAdapter(adapter);
 }
 
 module.exports = {
@@ -60,5 +197,6 @@ module.exports = {
   REQUIRED_METHODS,
   assertCognitiveMemoryAdapter,
   createLocalCognitiveMemoryAdapter,
+  normalizeMemoryAccess,
   openCognitiveMemoryAdapter,
 };

package/bin/cognitive-state-store.cjs

@@ -167,6 +167,8 @@ function initialize(db) {
     );
     CREATE INDEX IF NOT EXISTS cognitive_observations_stream
       ON cognitive_observations (tenant_id, agent_id, occurred_at, observation_id);
+    CREATE INDEX IF NOT EXISTS cognitive_observations_visibility
+      ON cognitive_observations (tenant_id, agent_id, scope, occurred_at, observation_id);
     CREATE TABLE IF NOT EXISTS cognitive_attention_claims (
       tenant_id TEXT NOT NULL,
       candidate_id TEXT NOT NULL,
@@ -262,14 +264,20 @@ function openCognitiveStateStore({ home } = {}) {
     }
   }
 
-  function read({ tenantId, agentId } = {}) {
+  function read({ tenantId, agentId, visibilityScope } = {}) {
     const tenant = safeId(tenantId);
     const agent = safeId(agentId);
-    if (!tenant || !agent) fail('COGNITIVE_INVALID_EVENT');
+    const requestedVisibility = visibilityScope === undefined ? '' : safeId(visibilityScope);
+    if (!tenant || !agent || (visibilityScope !== undefined && !requestedVisibility)) {
+      fail('COGNITIVE_INVALID_EVENT');
+    }
     const stream = db.prepare('SELECT version, updated_at FROM cognitive_streams WHERE tenant_id = ? AND agent_id = ?').get(tenant, agent);
-    const rows = db.prepare(`SELECT domain, fact_key, value_text, confidence, epistemic_state, scope, source_json, occurred_at, observation_id,
-      supersedes_observation_id, withdraws_observation_id
-      FROM cognitive_observations WHERE tenant_id = ? AND agent_id = ? ORDER BY occurred_at, rowid`).all(tenant, agent);
+    const select = `SELECT domain, fact_key, value_text, confidence, epistemic_state, scope, source_json, occurred_at, observation_id,
+      supersedes_observation_id, withdraws_observation_id FROM cognitive_observations`;
+    const rows = requestedVisibility && requestedVisibility !== 'agent:memory'
+      ? db.prepare(`${select} WHERE tenant_id = ? AND agent_id = ? AND scope = ? ORDER BY occurred_at, rowid`)
+        .all(tenant, agent, requestedVisibility)
+      : db.prepare(`${select} WHERE tenant_id = ? AND agent_id = ? ORDER BY occurred_at, rowid`).all(tenant, agent);
     return {
       version: Number(stream?.version ?? 0),
       ...(stream?.updated_at ? { updated_at: stream.updated_at } : {}),
@@ -289,8 +297,26 @@ function openCognitiveStateStore({ home } = {}) {
     };
   }
 
-  function hasEvent(eventId) {
-    const event = safeId(eventId);
+  function hasEvent(input) {
+    if (input && typeof input === 'object' && !Array.isArray(input)) {
+      const keys = Object.keys(input);
+      const event = safeId(input.eventId);
+      const tenant = safeId(input.tenantId);
+      const agent = safeId(input.agentId);
+      const visibilityScope = safeId(input.visibilityScope);
+      if (keys.length !== 4
+          || !keys.every((key) => ['agentId', 'eventId', 'tenantId', 'visibilityScope'].includes(key))
+          || !event || !tenant || !agent || !visibilityScope) fail('COGNITIVE_INVALID_EVENT');
+      if (visibilityScope !== 'agent:memory') {
+        return Boolean(db.prepare(`SELECT 1 AS found FROM cognitive_events AS event
+          INNER JOIN cognitive_observations AS observation ON observation.event_id = event.event_id
+          WHERE event.event_id = ? AND event.tenant_id = ? AND event.agent_id = ? AND observation.scope = ?
+          LIMIT 1`).get(event, tenant, agent, visibilityScope));
+      }
+      return Boolean(db.prepare(`SELECT 1 AS found FROM cognitive_events
+        WHERE event_id = ? AND tenant_id = ? AND agent_id = ?`).get(event, tenant, agent));
+    }
+    const event = safeId(input);
     if (!event) fail('COGNITIVE_INVALID_EVENT');
     return Boolean(db.prepare('SELECT 1 AS found FROM cognitive_events WHERE event_id = ?').get(event));
   }

package/bin/cognitive-turn-lifecycle.cjs

@@ -82,6 +82,21 @@ function createCognitiveTurnLifecycle({
   const runtime = safeId(runtimeId ?? `runtime-${process.pid}-${Date.now()}`);
   if (!tenant || !agent || !runtime || typeof now !== 'function') fail('COGNITIVE_LIFECYCLE_INVALID');
   const store = openCognitiveMemoryAdapter({ home, adapter: memoryAdapter });
+  const internalMemoryAccess = Object.freeze({
+    tenantId: tenant,
+    userId: agent,
+    actorId: agent,
+    agentId: agent,
+    portalId: 'cli',
+    channelId: 'runtime',
+    conversationId: runtime,
+    requestedScope: 'agent:memory',
+    permissionContext: Object.freeze({
+      authority: 'runtime_internal',
+      decision: 'passed',
+      receiptId: runtime,
+    }),
+  });
   const stageTimes = new Map();
   const stageResults = new Map();
 
@@ -104,7 +119,7 @@ function createCognitiveTurnLifecycle({
       ...item,
     }));
     for (let attempt = 0; attempt < 4; attempt += 1) {
-      const expectedVersion = store.read({ tenantId: tenant, agentId: agent }).version;
+      const expectedVersion = store.read({ tenantId: tenant, agentId: agent }, internalMemoryAccess).version;
       try {
         const result = store.commit({
           tenantId: tenant,
@@ -119,7 +134,7 @@ function createCognitiveTurnLifecycle({
             message_id: stageKey,
           },
           observations: normalized,
-        });
+        }, internalMemoryAccess);
         stageResults.set(stageKey, result);
         return result;
       } catch (error) {
@@ -132,7 +147,9 @@ function createCognitiveTurnLifecycle({
   function commitDurableStage(stageKey, observations) {
     if (stageResults.has(stageKey)) return { ...stageResults.get(stageKey), idempotent: true };
     const eventId = digestId('durable', [tenant, agent, stageKey]);
-    if (store.hasEvent(eventId)) {
+    if (store.hasEvent({
+      eventId, tenantId: tenant, agentId: agent, visibilityScope: 'agent:memory',
+    }, internalMemoryAccess)) {
       const result = { idempotent: true };
       stageResults.set(stageKey, result);
       return result;
@@ -143,12 +160,14 @@ function createCognitiveTurnLifecycle({
       ...item,
     }));
     for (let attempt = 0; attempt < 4; attempt += 1) {
-      if (store.hasEvent(eventId)) {
+      if (store.hasEvent({
+        eventId, tenantId: tenant, agentId: agent, visibilityScope: 'agent:memory',
+      }, internalMemoryAccess)) {
         const result = { idempotent: true };
         stageResults.set(stageKey, result);
         return result;
       }
-      const expectedVersion = store.read({ tenantId: tenant, agentId: agent }).version;
+      const expectedVersion = store.read({ tenantId: tenant, agentId: agent }, internalMemoryAccess).version;
       try {
         const result = store.commit({
           tenantId: tenant,
@@ -163,7 +182,7 @@ function createCognitiveTurnLifecycle({
             message_id: stageKey,
           },
           observations: normalized,
-        });
+        }, internalMemoryAccess);
         stageResults.set(stageKey, result);
         return result;
       } catch (error) {
@@ -288,8 +307,23 @@ function createCognitiveTurnLifecycle({
       ...(correction ? { supersedes: targetObservationId } : { withdraws: targetObservationId }),
     };
     const normalizedOccurredAt = new Date(occurredAt).toISOString();
+    const revisionMemoryAccess = {
+      tenantId: tenant,
+      userId: normalizedSource.actor_id,
+      actorId: normalizedSource.actor_id,
+      agentId: agent,
+      portalId: normalizedSource.provider,
+      channelId: normalizedSource.provider,
+      conversationId: normalizedSource.context_id,
+      requestedScope: scope,
+      permissionContext: {
+        authority: input.authority,
+        decision: 'passed',
+        receiptId: requestId,
+      },
+    };
     for (let attempt = 0; attempt < 4; attempt += 1) {
-      const current = store.read({ tenantId: tenant, agentId: agent });
+      const current = store.read({ tenantId: tenant, agentId: agent }, revisionMemoryAccess);
       const existing = current.observations.find((item) => item.observation_id === observationId);
       if (existing) {
         const matches = existing.domain === observation.domain && existing.key === observation.key
@@ -317,7 +351,7 @@ function createCognitiveTurnLifecycle({
           occurredAt: normalizedOccurredAt,
           source: normalizedSource,
           observations: [observation],
-        });
+        }, revisionMemoryAccess);
       } catch (error) {
         if (error?.code !== 'COGNITIVE_VERSION_CONFLICT' || attempt === 3) throw error;
       }
@@ -414,7 +448,7 @@ function createCognitiveTurnLifecycle({
     if (!exactKeys(input, new Set(['turnId', 'focusScopes']))) fail('COGNITIVE_LIFECYCLE_INVALID');
     const turnId = safeTurnId(input.turnId);
     if (turnId === null) fail('COGNITIVE_LIFECYCLE_INVALID');
-    const state = store.read({ tenantId: tenant, agentId: agent });
+    const state = store.read({ tenantId: tenant, agentId: agent }, internalMemoryAccess);
     const continuity = buildCognitiveContextProjection(state, {
       currentTurnId: turnId,
       currentRuntimeId: runtime,
@@ -424,12 +458,30 @@ function createCognitiveTurnLifecycle({
   }
 
   function authorizeAttention(input) {
+    const candidate = input?.candidate;
+    const authorization = input?.authorization;
+    const memoryAccess = {
+      tenantId: tenant,
+      userId: String(candidate?.subject_id ?? ''),
+      actorId: agent,
+      agentId: agent,
+      portalId: 'cli',
+      channelId: String(input?.channel ?? ''),
+      conversationId: runtime,
+      requestedScope: String(candidate?.evidence_scope ?? ''),
+      permissionContext: {
+        authority: String(authorization?.authority ?? ''),
+        decision: authorization?.decision === 'passed' ? 'passed' : 'blocked',
+        receiptId: String(authorization?.receiptId ?? ''),
+      },
+    };
     return authorizeAttentionCandidate({
       store,
       tenantId: tenant,
       currentAgent: agent,
       now,
       input,
+      memoryAccess,
     });
   }
 
@@ -445,8 +497,8 @@ function createCognitiveTurnLifecycle({
     authorizeAttention,
     projectForTurn,
     endTurn,
-    read: () => store.read({ tenantId: tenant, agentId: agent }),
-    verify: () => store.verify({ tenantId: tenant, agentId: agent }),
+    read: () => store.read({ tenantId: tenant, agentId: agent }, internalMemoryAccess),
+    verify: () => store.verify({ tenantId: tenant, agentId: agent }, internalMemoryAccess),
     close: () => store.close(),
   };
 }

package/bin/personality-memory-adapter.cjs

@@ -87,7 +87,27 @@ function createPersonalityMemoryAdapter({ identityRoot, memoryAdapter } = {}) {
       value.tenantId, value.agentId, value.actorId, value.sourcePortal, value.sourceChannel,
       value.conversationId, value.messageId, value.occurredAt, value.topic,
     ]);
-    if (store.hasEvent(eventId)) return { claimed: true, idempotent: true };
+    const memoryAccess = {
+      tenantId: value.tenantId,
+      userId: value.actorId,
+      actorId: value.actorId,
+      agentId: value.agentId,
+      portalId: value.sourcePortal,
+      channelId: value.sourceChannel,
+      conversationId: value.conversationId,
+      requestedScope: relationshipScope(value.actorId),
+      permissionContext: {
+        authority: 'runtime_personality_policy',
+        decision: 'passed',
+        receiptId: eventId,
+      },
+    };
+    if (store.hasEvent({
+      eventId, tenantId: value.tenantId, agentId: value.agentId,
+      visibilityScope: relationshipScope(value.actorId),
+    }, memoryAccess)) {
+      return { claimed: true, idempotent: true };
+    }
     const claim = store.claimAttention({
       tenantId: value.tenantId,
       candidate: {
@@ -107,10 +127,10 @@ function createPersonalityMemoryAdapter({ identityRoot, memoryAdapter } = {}) {
       },
       claimedBy: value.agentId,
       claimedAt: value.occurredAt,
-    });
+    }, memoryAccess);
     if (!claim.claimed) return { claimed: false, next_allowed_at: claim.next_allowed_at };
     for (let attempt = 0; attempt < 3; attempt += 1) {
-      const current = store.read({ tenantId: value.tenantId, agentId: value.agentId });
+      const current = store.read({ tenantId: value.tenantId, agentId: value.agentId }, memoryAccess);
       try {
         store.commit({
           tenantId: value.tenantId,
@@ -133,7 +153,7 @@ function createPersonalityMemoryAdapter({ identityRoot, memoryAdapter } = {}) {
             epistemic_state: 'verified',
             scope: relationshipScope(value.actorId),
           }],
-        });
+        }, memoryAccess);
         return { claimed: true, idempotent: false };
       } catch (error) {
         if (error?.code !== 'COGNITIVE_VERSION_CONFLICT' || attempt === 2) throw error;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "blun-king-cli",
-  "version": "9.1.386",
+  "version": "9.1.388",
   "description": "BLUN CLI - your own AI agent with a Telegram channel. Get it done. With BLUN.",
   "license": "MIT",
   "bin": {