linksee-memory 0.13.0 → 0.13.1

package/dist/db/schema.sql

@@ -377,6 +377,25 @@ CREATE TABLE IF NOT EXISTS anchor_touch_log (
 CREATE INDEX IF NOT EXISTS idx_anchor_touch_time   ON anchor_touch_log(occurred_at);
 CREATE INDEX IF NOT EXISTS idx_anchor_touch_anchor ON anchor_touch_log(anchor_id, occurred_at);
 
+-- ============================================================
+-- v16: gate_dismissals — the human's "that was a false positive", made durable.
+-- resolve_drift(action:'dismiss') closed drift_edges but the GATE never read the verdict, so
+-- the same wrong match fired again on the next command. Observed: anchor #13 ("don't favour
+-- our own products in rankings", signals = the bare product names) fired 6× in two minutes
+-- because a temp file path contained "Sake-Navi". A verdict that does not change the next
+-- detection is not a feedback loop.
+-- hit_term NULL = silence this anchor at the gate entirely; otherwise only that match term.
+-- ============================================================
+CREATE TABLE IF NOT EXISTS gate_dismissals (
+  id          INTEGER PRIMARY KEY AUTOINCREMENT,
+  anchor_id   INTEGER NOT NULL REFERENCES drift_anchors(id) ON DELETE CASCADE,
+  hit_term    TEXT,                                  -- lowercased match term; NULL = whole anchor
+  rationale   TEXT,
+  created_at  INTEGER NOT NULL DEFAULT (unixepoch())
+);
+CREATE UNIQUE INDEX IF NOT EXISTS idx_gate_dismissal_uniq
+  ON gate_dismissals(anchor_id, COALESCE(hit_term, ''));
+
 -- ============================================================
 -- v11: Current Truth Map — journey-spine topology (Product Drift OS spec v3).
 -- map.yaml (git) is the desired-state SOURCE OF TRUTH (anchor #58); these tables
@@ -456,6 +475,6 @@ CREATE TABLE IF NOT EXISTS meta (
   value         TEXT NOT NULL
 );
 
-INSERT OR IGNORE INTO meta (key, value) VALUES ('schema_version', '15');
+INSERT OR IGNORE INTO meta (key, value) VALUES ('schema_version', '16');
 INSERT OR IGNORE INTO meta (key, value) VALUES ('created_at', CAST(unixepoch() AS TEXT));
-UPDATE meta SET value = '15' WHERE key = 'schema_version' AND value IN ('1', '2', '3', '4', '5', '6', '7', '8', '9', '10', '11', '12', '13', '14');
+UPDATE meta SET value = '16' WHERE key = 'schema_version' AND value IN ('1', '2', '3', '4', '5', '6', '7', '8', '9', '10', '11', '12', '13', '14', '15');

package/dist/lib/guard.d.ts

@@ -18,6 +18,8 @@ export interface GateMatch {
     verdict: 'contradicts' | 'in_scope';
     why: string;
     gate_mode: GateMode;
+    /** The exact term that matched, so the reader can dismiss precisely this match. */
+    hit_term?: string | null;
 }
 export interface GateResult {
     gate: GateLevel;

package/dist/lib/guard.js

@@ -67,9 +67,35 @@ function buildActionCtx(input) {
     const haystack = [...files.map(normPath), ...rawParts].join('\n').toLowerCase();
     return { tool: input.tool ?? 'unknown', files, lines, haystack };
 }
+/**
+ * What the human has already called a false positive.
+ *
+ * Keyed by anchor and (optionally) the exact term that matched, so dismissing "this anchor
+ * matched my file path" does not throw away the anchor's real detections.
+ */
+function dismissedFor(db) {
+    const out = new Map();
+    let rows = [];
+    try {
+        rows = db.prepare('SELECT anchor_id, hit_term FROM gate_dismissals').all();
+    }
+    catch {
+        return out; // table not migrated yet → nothing dismissed
+    }
+    for (const r of rows) {
+        if (!out.has(r.anchor_id))
+            out.set(r.anchor_id, new Set());
+        out.get(r.anchor_id).add((r.hit_term ?? '*').toLowerCase());
+    }
+    return out;
+}
 export function matchAction(db, act) {
     const out = [];
+    const dismissed = dismissedFor(db);
     for (const a of acceptedAnchors(db)) {
+        const dis = dismissed.get(a.id);
+        if (dis?.has('*'))
+            continue; // whole anchor silenced at the gate
         const gate_mode = jsonGet(a.card_policy, 'gate_mode', 'soft');
         if (gate_mode === 'off')
             continue;
@@ -98,17 +124,31 @@ export function matchAction(db, act) {
             }
         }
         // Scope. `affects` says WHERE a decision applies; `violation_signal` says WHAT is forbidden.
-        // An explicit signal hit is the stronger evidence, so it brings the anchor into scope on its
-        // own — otherwise a path-scoped anchor is blind to `Bash`, which carries no file path at all.
-        // That blindness was measured on a real machine: 21 of 42 active anchors declared forbidden
-        // strings and could never fire on a Bash command — including "ALTER TABLE memories DROP" on
-        // the anchor that exists to prevent exactly that. Bash is where the destructive things run.
+        //
+        // A path-scoped anchor is blind to `Bash`, which carries no file path — measured on a real
+        // machine, 21 of 42 active anchors could never fire on a Bash command, including "ALTER
+        // TABLE memories DROP" on the anchor that exists to prevent exactly that. So a signal hit
+        // counts on its own WHEN THERE IS NO PATH TO CHECK.
+        //
+        // But only then. Making signal hits scope-free outright (0.13.0) traded one failure for
+        // another: an anchor scoped to one repo started firing in every repo that happened to
+        // contain its term — "insert or ignore" is ordinary SQLite everywhere, and a temp file path
+        // containing "Sake-Navi" is not favouritism in a ranking. When the action names files, the
+        // anchor's own scope is the better evidence and it decides.
         //
         // (matchViolation already guards the obvious false positives: word boundaries, a negation
         // window, and citation-without-call — a naive substring test produced ~90% noise.)
-        const inScope = sigHit != null || (hasScope ? pathHit : termHit);
+        const actionNamesFiles = act.files.length > 0;
+        const inScope = hasScope
+            ? pathHit || (!actionNamesFiles && sigHit != null)
+            : termHit || sigHit != null;
         if (!inScope)
             continue;
+        // A dismissed term stops firing; the anchor's other terms keep working.
+        if (sigHit && dis?.has(sigHit.toLowerCase()))
+            continue;
+        if (!sigHit && dis?.has('*'))
+            continue;
         out.push({
             anchor_id: a.id,
             statement: a.statement,
@@ -120,6 +160,7 @@ export function matchAction(db, act) {
                     ? `touches a file under this decision's scope`
                     : `matches this decision's topic`,
             gate_mode,
+            hit_term: sigHit ?? null,
         });
     }
     // contradicts first (the headline), then in_scope.
@@ -178,9 +219,21 @@ export function formatReinject(matches, gate) {
         const tail = m.verdict === 'contradicts' ? `${m.why} → contradicts it.` : `${m.why}.`;
         return `• [#${m.anchor_id}] "${m.statement}"${rationale}\n  ↳ ${tail}`;
     });
+    // Offer both exits, because the reader is in one of two situations and only they know which:
+    // the decision changed (supersede), or the match was wrong (dismiss). Naming the exact term
+    // matters — dismissing a whole anchor to escape one bad match throws away its real work.
     const firstContra = matches.find((m) => m.verdict === 'contradicts');
     const foot = firstContra
-        ? `\nIf you are intentionally changing this decision, supersede it on the record:\n  resolve_drift(anchor_id: ${firstContra.anchor_id}, action: 'supersede', superseded_by: <new anchor>).`
+        ? `
+If you are intentionally changing this decision, supersede it on the record:
+` +
+            `  resolve_drift(anchor_id: ${firstContra.anchor_id}, action: 'supersede', superseded_by: <new anchor>).
+` +
+            `If this match is simply wrong, say so and it stops firing:
+` +
+            `  resolve_drift(anchor_id: ${firstContra.anchor_id}, action: 'dismiss'` +
+            (firstContra.hit_term ? `, hit_term: '${firstContra.hit_term}'` : '') +
+            `, rationale: '<why>').`
         : '';
     return [head, ...body, foot].filter(Boolean).join('\n');
 }

package/dist/lib/truth-engine.d.ts

@@ -88,6 +88,8 @@ export declare function getTruthView(db: Database.Database, opts?: {
 export declare function getDecisionDetail(db: Database.Database, anchorId: number): DecisionDetail | null;
 export type ResolutionAction = 'fix' | 'supersede' | 'acknowledge' | 'dismiss';
 export interface ResolveInput {
+    /** For dismiss: silence only this match term. Omitted → silence the anchor at the gate. */
+    hit_term?: string;
     anchor_id: number;
     action: ResolutionAction;
     rationale?: string;

package/dist/lib/truth-engine.js

@@ -490,9 +490,18 @@ export function resolveDrift(db, input) {
     existing[`A${input.anchor_id}`] = resolution;
     db.prepare("INSERT INTO meta (key, value) VALUES (?, ?) ON CONFLICT(key) DO UPDATE SET value = ?")
         .run(key, JSON.stringify(existing), JSON.stringify(existing));
-    // If action is 'dismiss', also mark all open drift_edges for this anchor as dismissed
+    // 'dismiss' must change what happens NEXT time, not just tidy the current edges — otherwise
+    // the same wrong match fires on the next command and the verdict was theatre. Record it where
+    // the gate reads (gate_dismissals), keyed to the exact term when one was given so the anchor's
+    // real detections survive.
     if (input.action === 'dismiss') {
         db.prepare("UPDATE drift_edges SET status = 'dismissed' WHERE anchor_id = ? AND status = 'open'").run(input.anchor_id);
+        try {
+            db.prepare(`INSERT INTO gate_dismissals (anchor_id, hit_term, rationale) VALUES (?, ?, ?)
+         ON CONFLICT(anchor_id, COALESCE(hit_term, '')) DO UPDATE SET rationale = excluded.rationale`).run(input.anchor_id, input.hit_term ? input.hit_term.toLowerCase() : null, input.rationale ?? null);
+            resolution.gate_dismissed = input.hit_term ? input.hit_term.toLowerCase() : 'all matches';
+        }
+        catch { /* pre-v16 DB → edges-only dismiss, as before */ }
     }
     // If action is 'fix', mark open edges as resolved
     if (input.action === 'fix') {

package/dist/mcp/server.js

@@ -255,7 +255,7 @@ const TOOLS = [
     },
     {
         name: 'resolve_drift',
-        description: 'Record a resolution for a drifting anchor — the human feedback loop.\n\n6 actions:\n• fix — "we fixed the code/reality to match intent" → state becomes aligned\n• supersede — "intent evolved, this is the new direction" → state becomes aligned\n• acknowledge — "we know, parking it for now" → state becomes held (with optional review date)\n• dismiss — "false positive, not actually drifting" → edges dismissed\n• harden — "re-injected but still violated, enforce it" → card_policy.gate_mode=hard (PreToolUse will BLOCK)\n• soften — "back off to a warning" → gate_mode=soft\n\nWHEN TO CALL:\n• After drift_status shows 🔴 drift or 🟡 review items\n• When the user says "that\'s fixed" / "ignore that" / "we changed direction"\n• When acknowledging a known gap with a review date',
+        description: 'Record a resolution for a drifting anchor — the human feedback loop.\n\n6 actions:\n• fix — "we fixed the code/reality to match intent" → state becomes aligned\n• supersede — "intent evolved, this is the new direction" → state becomes aligned\n• acknowledge — "we know, parking it for now" → state becomes held (with optional review date)\n• dismiss — "false positive, not actually drifting" → edges dismissed AND the gate stops firing on it (pass hit_term to silence just that word)\n• harden — "re-injected but still violated, enforce it" → card_policy.gate_mode=hard (PreToolUse will BLOCK)\n• soften — "back off to a warning" → gate_mode=soft\n\nWHEN TO CALL:\n• After drift_status shows 🔴 drift or 🟡 review items\n• When the user says "that\'s fixed" / "ignore that" / "we changed direction"\n• When acknowledging a known gap with a review date',
         inputSchema: {
             type: 'object',
             properties: {
@@ -264,6 +264,7 @@ const TOOLS = [
                 rationale: { type: 'string', description: 'Why this resolution (recorded for audit trail)' },
                 review_after: { type: 'string', description: 'For acknowledge: ISO date to re-check (e.g. "2026-07-04")' },
                 superseded_by: { type: 'number', description: 'For supersede: the new anchor ID that replaces this one' },
+                hit_term: { type: 'string', description: "For dismiss: silence only this match term (the word the gate quoted back at you). Omit to silence the whole anchor at the gate — prefer the term, so the anchor's real detections keep working." },
             },
             required: ['anchor_id', 'action'],
         },
@@ -1485,6 +1486,7 @@ function handleResolveDrift(args) {
         rationale: args.rationale,
         review_after: args.review_after,
         superseded_by: args.superseded_by,
+        hit_term: args.hit_term,
     });
     return JSON.stringify(result);
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "linksee-memory",
-  "version": "0.13.0",
+  "version": "0.13.1",
   "mcpName": "io.github.michielinksee/linksee-memory",
   "description": "Local-first agent memory MCP — cross-agent brain with drift detection, 6-layer structured memory + token-saving file diff cache",
   "type": "module",