kodingo-cli 1.2.0 → 1.3.1

package/dist/adapters/cloud-adapter/cloud-persistence.js

@@ -104,6 +104,7 @@ function mapApiRecord(r) {
         },
         createdAt: new Date(r.createdAt),
         updatedAt: new Date(r.updatedAt),
+        evidenceKind: r.evidenceKind ?? "sourced",
         // Adapter-layer fields — not on core MemoryRecord but present in API responses
         externalId: r.externalId ?? null,
         correctsId: r.correctsId ?? null,
@@ -118,6 +119,8 @@ function mapApiRecord(r) {
         record.fingerprint = r.fingerprint;
     if (r.deniedAt)
         record.deniedAt = new Date(r.deniedAt);
+    if (r.contentAsOf)
+        record.contentAsOf = new Date(r.contentAsOf);
     return record;
 }
 // ── Public API (mirrors memory-persistence.ts) ────────────────────────────────
@@ -146,6 +149,7 @@ async function saveMemory(input) {
         status: input.status ?? "proposed",
         confidence: input.confidence ?? 0.3,
         tags: input.tags ?? [],
+        evidenceKind: input.evidenceKind,
     };
     if (input.title)
         body.title = input.title;
@@ -159,6 +163,8 @@ async function saveMemory(input) {
         body.correctsId = input.correctsId;
     if (input.correctedById)
         body.correctedById = input.correctedById;
+    if (input.contentAsOf)
+        body.contentAsOf = input.contentAsOf.toISOString();
     // Attribution
     try {
         const config = (0, persistence_config_1.readConfig)();

package/dist/adapters/db-adapter/memory-persistence.js

@@ -46,6 +46,26 @@ async function initDb() {
     ALTER TABLE kodingo_memory ADD COLUMN IF NOT EXISTS corrects_id uuid NULL;
     ALTER TABLE kodingo_memory ADD COLUMN IF NOT EXISTS corrected_by_id uuid NULL;
 
+    -- Real evidence provenance (mirrors kodingo-api's schema.ts) — local-mode
+    -- writes go straight here via psql, bypassing the API's enforcement
+    -- entirely, so the same real constraint needs to exist on this table too.
+    ALTER TABLE kodingo_memory ADD COLUMN IF NOT EXISTS evidence_kind text NOT NULL DEFAULT 'sourced';
+    DO $$
+    BEGIN
+      IF NOT EXISTS (SELECT 1 FROM pg_constraint WHERE conname = 'kodingo_memory_evidence_kind_check') THEN
+        ALTER TABLE kodingo_memory ADD CONSTRAINT kodingo_memory_evidence_kind_check CHECK (evidence_kind IN ('sourced', 'derived'));
+      END IF;
+      IF NOT EXISTS (SELECT 1 FROM pg_constraint WHERE conname = 'kodingo_memory_sourced_requires_external_id') THEN
+        ALTER TABLE kodingo_memory ADD CONSTRAINT kodingo_memory_sourced_requires_external_id
+          CHECK (evidence_kind = 'derived' OR (external_id IS NOT NULL AND btrim(external_id) <> '')) NOT VALID;
+      END IF;
+    END $$;
+
+    -- Real, best-known age of the underlying decision/code, separate from
+    -- created_at (mirrors kodingo-api's schema.ts). NULL when genuinely
+    -- unknown — never defaulted to created_at.
+    ALTER TABLE kodingo_memory ADD COLUMN IF NOT EXISTS content_as_of timestamptz NULL;
+
     -- Indexes
     CREATE INDEX IF NOT EXISTS kodingo_memory_created_at_idx
       ON kodingo_memory (created_at);
@@ -97,11 +117,23 @@ async function saveMemory(input) {
     const id = (0, uuid_1.v4)();
     const status = input.status ?? "proposed";
     const confidence = clamp01(input.confidence ?? 0.3);
+    // Real mechanical enforcement (mirrors kodingo-core's
+    // validateMemoryProvenance) — local-mode writes go straight to Postgres
+    // via psql, bypassing kodingo-api's routes/memory.ts entirely, so this is
+    // the one place that enforcement can actually happen for this path. Same
+    // real, honest fallback as the API: a "sourced" capture with nothing
+    // client-supplied gets a real identifier naming the capture event itself,
+    // not a fabricated placeholder.
+    const externalId = input.externalId ??
+        (input.evidenceKind === "sourced" ? `manual:${input.repoPath ?? "unknown"}:${id}` : undefined);
+    if (input.evidenceKind === "sourced" && !externalId?.trim()) {
+        throw new Error("A 'sourced' memory must include a real externalId. If this genuinely has no single real source, use evidenceKind: 'derived' instead.");
+    }
     const sql = `
     WITH inserted AS (
       INSERT INTO kodingo_memory (
         id, type, title, content, tags, repo_path,
-        status, confidence, symbol, external_id,
+        status, confidence, symbol, external_id, evidence_kind, content_as_of,
         corrects_id, corrected_by_id
       )
       VALUES (
@@ -114,13 +146,15 @@ async function saveMemory(input) {
         ${sqlLiteral(status)},
         ${sqlNumberLiteral(confidence)},
         ${sqlNullableLiteral(input.symbol)},
-        ${sqlNullableLiteral(input.externalId)},
+        ${sqlNullableLiteral(externalId)},
+        ${sqlLiteral(input.evidenceKind)},
+        ${sqlNullableTimestampLiteral(input.contentAsOf)},
         ${sqlNullableUuidLiteral(input.correctsId)},
         ${sqlNullableUuidLiteral(input.correctedById)}
       )
       RETURNING
         id, type, title, content, tags, repo_path,
-        status, confidence, symbol, external_id,
+        status, confidence, symbol, external_id, evidence_kind, content_as_of,
         corrects_id, corrected_by_id,
         created_at
     )
@@ -137,7 +171,7 @@ async function getMemoryById(id) {
     SELECT row_to_json(result) FROM (
       SELECT
         id, type, title, content, tags, repo_path,
-        status, confidence, symbol, external_id,
+        status, confidence, symbol, external_id, evidence_kind, content_as_of,
         corrects_id, corrected_by_id,
         created_at
       FROM kodingo_memory
@@ -165,7 +199,7 @@ async function updateMemoryLifecycle(params) {
       WHERE id = ${sqlLiteral(params.id)}
       RETURNING
         id, type, title, content, tags, repo_path,
-        status, confidence, symbol, external_id,
+        status, confidence, symbol, external_id, evidence_kind, content_as_of,
         corrects_id, corrected_by_id,
         created_at
     )
@@ -218,7 +252,7 @@ async function getMemoryByExternalId(externalId, repoPath) {
     SELECT row_to_json(result) FROM (
       SELECT
         id, type, title, content, tags, repo_path,
-        status, confidence, symbol, external_id,
+        status, confidence, symbol, external_id, evidence_kind, content_as_of,
         corrects_id, corrected_by_id,
         created_at
       FROM kodingo_memory
@@ -243,7 +277,7 @@ async function getProposedOrIgnoredRecordBySymbol(params) {
     SELECT row_to_json(result) FROM (
       SELECT
         id, type, title, content, tags, repo_path,
-        status, confidence, symbol, external_id,
+        status, confidence, symbol, external_id, evidence_kind, content_as_of,
         corrects_id, corrected_by_id,
         created_at
       FROM kodingo_memory
@@ -275,7 +309,7 @@ async function updateMemoryConfidence(params) {
       WHERE id = ${sqlLiteral(params.id)}
       RETURNING
         id, type, title, content, tags, repo_path,
-        status, confidence, symbol, external_id,
+        status, confidence, symbol, external_id, evidence_kind, content_as_of,
         corrects_id, corrected_by_id,
         created_at
     )
@@ -318,7 +352,7 @@ async function queryMemory(text, limit = 10, repoPath, opts = {}) {
       SELECT row_to_json(result) FROM (
         SELECT DISTINCT ON (coalesce(symbol, id::text))
           id, type, title, content, tags, repo_path,
-          status, confidence, symbol, external_id,
+          status, confidence, symbol, external_id, evidence_kind, content_as_of,
           corrects_id, corrected_by_id,
           created_at
         FROM kodingo_memory
@@ -349,7 +383,7 @@ async function queryMemory(text, limit = 10, repoPath, opts = {}) {
     SELECT row_to_json(result) FROM (
       SELECT
         id, type, title, content, tags, repo_path,
-        status, confidence, symbol, external_id,
+        status, confidence, symbol, external_id, evidence_kind, content_as_of,
         corrects_id, corrected_by_id,
         created_at,
         CASE
@@ -413,7 +447,7 @@ async function queryMemoryBySymbol(params) {
     SELECT row_to_json(result) FROM (
       SELECT
         id, type, title, content, tags, repo_path,
-        status, confidence, symbol, external_id,
+        status, confidence, symbol, external_id, evidence_kind, content_as_of,
         corrects_id, corrected_by_id,
         created_at
       FROM kodingo_memory
@@ -444,6 +478,8 @@ function mapRow(row) {
         confidence,
         symbol: row.symbol ?? null,
         externalId: row.external_id ?? null,
+        evidenceKind: row.evidence_kind ?? "sourced",
+        contentAsOf: row.content_as_of ? new Date(row.content_as_of) : null,
         correctsId: row.corrects_id ?? null,
         correctedById: row.corrected_by_id ?? null,
         createdAt: new Date(row.created_at),
@@ -509,6 +545,11 @@ function sqlNullableUuidLiteral(value) {
         return "NULL";
     return `${sqlLiteral(value)}::uuid`;
 }
+function sqlNullableTimestampLiteral(value) {
+    if (!value)
+        return "NULL";
+    return `${sqlLiteral(value.toISOString())}::timestamptz`;
+}
 function sqlArrayLiteral(values) {
     if (!values || values.length === 0)
         return "NULL";

package/dist/commands/capture.js

@@ -17,10 +17,16 @@ async function captureCommand(options) {
     }
     const tags = parseTags(options.tags);
     const repoPath = findRepoRoot(process.cwd());
+    // A manual capture is genuinely sourced — to the real, specific event of
+    // this human's assertion, right now. Not tied to a pre-existing external
+    // artifact the way a commit or PR is, so no externalId is set here; both
+    // backends (local-mode saveMemory, kodingo-api's routes/memory.ts)
+    // construct a real one from the capture event's own identity when absent.
     const input = {
         type: options.type,
         content,
         repoPath,
+        evidenceKind: "sourced",
     };
     if (options.title)
         input.title = options.title;

package/dist/commands/deny.js

@@ -37,12 +37,16 @@ async function denyCommand(options) {
     }
     const userTags = parseTags(options.tags);
     const tags = mergeTags(existing.tags, userTags);
+    // A denial's corrected replacement is a new, real human assertion — the
+    // correction event itself — same class as manual capture, not simply
+    // inherited from whatever the original record's provenance was.
     const input = {
         type: existing.type,
         content: correctionContent,
         status: "proposed",
         confidence: 0.7,
         correctsId: existing.id,
+        evidenceKind: "sourced",
     };
     if (existing.repo)
         input.repoPath = existing.repo;

package/dist/commands/doctor.js

@@ -58,6 +58,7 @@ async function runDoctor(results) {
             content: "doctor saved",
             tags: ["smoke", "doctor"],
             repoPath: process.cwd(),
+            evidenceKind: "derived", // a throwaway diagnostic row, not a real capture
         });
         tempId = inserted.id;
     }, results);

package/dist/commands/scan-claude.js

@@ -104,6 +104,7 @@ function extractMemoriesFromSession(messages, sessionId, repoPath) {
                 repoPath,
                 status: "proposed",
                 confidence: Math.min(0.3 + score * 0.05, 0.6),
+                evidenceKind: "sourced",
                 externalId: `claude-session:${sessionId}:${Buffer.from(para.slice(0, 40)).toString("base64").slice(0, 16)}`,
             });
         }

package/dist/commands/scan-repo.js

@@ -112,6 +112,8 @@ async function extractSymbols(filePath) {
             code: n.body.slice(0, 2000), // cap to avoid huge payloads
             file: filePath,
             fingerprint: n.fingerprint,
+            startLine: n.startLine,
+            endLine: n.endLine,
         }));
     }
     catch {
@@ -197,6 +199,18 @@ async function inferAndCapture(token, symbol, repo, graph, repoRoot) {
                 machineId: (0, persistence_config_1.readConfig)().machineId ?? undefined,
                 displayName: os.hostname(),
                 fingerprint: symbol.fingerprint ?? undefined,
+                // An LLM's own inferred description of a function during a bulk scan
+                // — Kortex's own conclusion, not traceable to one real external
+                // event, same class as kodingo-api's githubScanner.ts.
+                evidenceKind: "derived",
+                // Real line range + repo-relative file path (Problem B) — lets
+                // kodingo-api resolve this symbol's real content age via git blame
+                // asynchronously after capture (it has the GitHub App token this
+                // CLI doesn't). Without these, content_as_of stays null — never
+                // guessed from scan timing.
+                startLine: symbol.startLine ?? undefined,
+                endLine: symbol.endLine ?? undefined,
+                filePath: path_1.default.relative(repoRoot, symbol.file).split(path_1.default.sep).join("/"),
             }),
         });
         return saveRes.ok;

package/dist/ports/cloud-event-port.js

@@ -58,6 +58,7 @@ class CloudEventPort {
                     content: existing.content,
                     symbol: existing.symbol ?? "",
                     tags: existing.tags ?? [],
+                    evidenceKind: existing.evidenceKind,
                     status: existing.status,
                     confidence: existing.confidence,
                     evidence: {
@@ -100,8 +101,10 @@ class CloudEventPort {
             repoPath: this.repoPath,
             status: "proposed",
             confidence: decision.confidence ?? 0.3,
+            evidenceKind: "sourced",
             externalId,
             tags: ["signal:git", "kind:decision"],
+            contentAsOf: decision.proposedAt,
         };
         if (title)
             input.title = title;

package/dist/ports/db-event-port.js

@@ -52,6 +52,7 @@ class DbEventPort {
                     content: existing.content,
                     symbol: existing.symbol ?? "",
                     tags: existing.tags ?? [],
+                    evidenceKind: existing.evidenceKind,
                     status: existing.status,
                     confidence: existing.confidence,
                     evidence: {
@@ -74,14 +75,21 @@ class DbEventPort {
                 return;
             }
         }
-        // No existing proposed/ignored record — insert new record as usual
+        // No existing proposed/ignored record — insert new record as usual.
+        // Git-signal-derived captures are genuinely sourced — externalId here is
+        // a real git:<commitHash> reference (see the caller). contentAsOf is the
+        // real commit's own author date (decision.proposedAt) — trivially in
+        // hand here, unlike bulk/autonomous scans which have no equivalent
+        // single real event to anchor to (see contentAge.ts, kodingo-api).
         const input = {
             type: "decision",
             content,
             repoPath: this.repoPath,
             status: "proposed",
             confidence: 0.3,
+            evidenceKind: "sourced",
             externalId,
+            contentAsOf: decision.proposedAt,
         };
         if (title)
             input.title = title;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "kodingo-cli",
-  "version": "1.2.0",
+  "version": "1.3.1",
   "description": "Kodingo CLI",
   "license": "MIT",
   "private": false,
@@ -26,7 +26,7 @@
     "@typescript-eslint/typescript-estree": "^8.61.1",
     "commander": "^12.1.0",
     "kodingo-agent": "^0.2.0",
-    "kodingo-core": "^0.2.1",
+    "kodingo-core": "^0.3.1",
     "open": "^11.0.0",
     "simple-git": "^3.30.0",
     "tree-sitter-wasms": "^0.1.13",