memory-journal-mcp 7.6.0 → 7.6.1

package/README.md

@@ -206,7 +206,6 @@ Control which tools are exposed via `MEMORY_JOURNAL_MCP_TOOL_FILTER` (or CLI: `-
 - `session-summary` - Create a session summary entry with accomplishments, pending items, and next-session context
 - `team-session-summary` - Create a retrospective team session summary entry securely isolated to the team database
 
-
 **[Complete prompts guide →](https://github.com/neverinfamous/memory-journal-mcp/wiki/Prompts)**
 
 ### 📡 **36 Resources** (27 Static + 9 Template)

package/dist/{chunk-NSEHC6MZ.js → chunk-DFQG7UR5.js}

@@ -1,4 +1,4 @@
-import { TOOL_GROUPS, logger, getGitHubIntegration, parseToolFilter, getFilterSummary, getToolFilterFromEnv, getTools, getRequiredScope, getEnabledGroups, callTool, MetricsAccumulator, getAuthContext, getRequestContext, ConfigurationError, sendProgress, SUPPORTED_SCOPES, enforceAccessBoundary, runWithAuthContext, isValidScope, requestContextStorage, ConnectionError, ResourceNotFoundError, QueryError, assertNoPathTraversal, ValidationError, resolveGitHubRepo, isResourceError, markUntrustedContentInline, milestoneCompletionPct, sanitizeAuthor, markUntrustedContent, parseFlagContext, DEFAULT_FLAG_VOCABULARY, parseScopes, BASE_SCOPES, validateDateFormatPattern, getAllToolNames, assertSafeFilePath, assertSafeDirectoryPath, MemoryJournalMcpError, sanitizeSearchQuery, DEFAULT_BRIEFING_CONFIG } from './chunk-SV3CKPMF.js';
+import { TOOL_GROUPS, logger, getGitHubIntegration, parseToolFilter, getFilterSummary, getToolFilterFromEnv, getTools, getRequiredScope, getEnabledGroups, callTool, MetricsAccumulator, getAuthContext, getRequestContext, ConfigurationError, sendProgress, SUPPORTED_SCOPES, enforceAccessBoundary, runWithAuthContext, isValidScope, requestContextStorage, ConnectionError, ResourceNotFoundError, QueryError, assertNoPathTraversal, ValidationError, resolveGitHubRepo, isResourceError, markUntrustedContentInline, milestoneCompletionPct, sanitizeAuthor, markUntrustedContent, parseFlagContext, DEFAULT_FLAG_VOCABULARY, parseScopes, BASE_SCOPES, validateDateFormatPattern, getAllToolNames, assertSafeFilePath, assertSafeDirectoryPath, MemoryJournalMcpError, sanitizeSearchQuery, DEFAULT_BRIEFING_CONFIG } from './chunk-SYTB5YNH.js';
 import { createRequire } from 'module';
 import { appendFile, open, mkdir, stat, rename } from 'fs/promises';
 import * as path4 from 'path';
@@ -5423,7 +5423,9 @@ var rulesResource = {
       return {
         data: cachedData ? cachedData.content : "",
         annotations: {
-          lastModified: new Date(cachedData ? cachedData.timestamp : Date.now()).toISOString()
+          lastModified: new Date(
+            cachedData ? cachedData.timestamp : Date.now()
+          ).toISOString()
         }
       };
     } catch (err) {
@@ -6908,7 +6910,7 @@ function getHelpResourceDefinitions() {
 var toolIndexModule = null;
 async function getAllToolDefinitionsAsync(context) {
   try {
-    toolIndexModule ??= await import('./tools-QF7CPU2H.js');
+    toolIndexModule ??= await import('./tools-JQPK5JFS.js');
     if (toolIndexModule === null) return [];
     const tools = toolIndexModule.getTools(context.db, null);
     return tools.map((t) => ({
@@ -8840,10 +8842,7 @@ var HttpTransport = class {
       const reqRecord = req;
       const d = reqRecord[["a", "u", "t", "h"].join("")];
       if (d !== void 0 && d !== null) {
-        runWithAuthContext(
-          { authenticated: true, claims: d, scopes: d.scopes },
-          next
-        );
+        runWithAuthContext({ authenticated: true, claims: d, scopes: d.scopes }, next);
       } else {
         next();
       }

package/dist/{chunk-SV3CKPMF.js → chunk-SYTB5YNH.js}

@@ -7567,16 +7567,52 @@ var ResolveFlagOutputSchema = z.object({
   resolution: z.string().nullable().optional(),
   error: z.string().optional()
 }).extend(ErrorFieldsMixin.shape);
-
-// src/handlers/tools/team/core-tools.ts
-function parseFlagContext(autoContext) {
-  if (!autoContext) return void 0;
+var FlagContextSchema = z.object({
+  flag_type: z.string(),
+  target_user: z.string().nullable().optional(),
+  link: z.string().nullable().optional(),
+  resolved: z.boolean(),
+  resolved_at: z.string().nullable().optional(),
+  resolution: z.string().nullable().optional(),
+  author: z.string().optional()
+});
+var VersionedEnvelopeSchema = z.object({
+  version: z.string(),
+  data: z.unknown()
+});
+var AutoContextSchema = z.union([FlagContextSchema, VersionedEnvelopeSchema]);
+function parseAutoContext(autoContext) {
+  if (!autoContext) return null;
   try {
-    return JSON.parse(autoContext);
-  } catch {
-    return void 0;
+    const parsed = JSON.parse(autoContext);
+    if (typeof parsed !== "object" || parsed === null) {
+      return null;
+    }
+    const result = AutoContextSchema.safeParse(parsed);
+    if (result.success) {
+      return result.data;
+    }
+    logger.debug("AutoContext schema miss", {
+      module: "Validator",
+      issues: result.error.issues
+    });
+    return parsed;
+  } catch (error) {
+    logger.warning("Failed to parse auto_context JSON", {
+      module: "Validator",
+      error: error instanceof Error ? error.message : "Unknown error"
+    });
+    return null;
   }
 }
+function parseFlagContext(autoContext) {
+  const parsed = parseAutoContext(autoContext);
+  if (parsed === null) return null;
+  const result = FlagContextSchema.safeParse(parsed);
+  return result.success ? result.data : null;
+}
+
+// src/handlers/tools/team/core-tools.ts
 function getTeamCoreTools(context) {
   const { teamDb } = context;
   return [
@@ -7784,7 +7820,7 @@ function getTeamSearchTools(context) {
             return { ...TEAM_DB_ERROR_RESPONSE };
           }
           const { query, tags, limit, sort_by, project_number } = TeamSearchSchema.parse(params);
-          const isGlobalFlagSearch = tags?.some((t) => t.startsWith("flag:"));
+          const isGlobalFlagSearch = tags !== void 0 && tags.length > 0 && tags.every((t) => t.startsWith("flag:"));
           if (project_number == null && !isGlobalFlagSearch) {
             return {
               success: false,
@@ -7804,6 +7840,9 @@ function getTeamSearchTools(context) {
             sortBy: sort_by,
             projectNumber: project_number
           });
+          if (project_number == null) {
+            entries = entries.filter((e) => e.entryType === "flag");
+          }
           if (tags && tags.length > 0) {
             const entryIds = entries.map((e) => e.id);
             if (entryIds.length > 0) {
@@ -7856,7 +7895,7 @@ function getTeamSearchTools(context) {
             sort_by,
             project_number
           } = TeamSearchByDateRangeSchema.parse(params);
-          const isGlobalFlagSearch = entry_type === "flag" || tags?.some((t) => t.startsWith("flag:"));
+          const isGlobalFlagSearch = entry_type === "flag" || tags !== void 0 && tags.length > 0 && tags.every((t) => t.startsWith("flag:"));
           if (project_number == null && !isGlobalFlagSearch) {
             return {
               success: false,
@@ -7881,7 +7920,8 @@ function getTeamSearchTools(context) {
             };
           }
           const entries = teamDb.searchByDateRange(start_date, end_date, {
-            entryType: entry_type,
+            // Security: Enforce entryType constraint for cross-tenant searches
+            entryType: project_number == null ? "flag" : entry_type,
             tags,
             limit,
             sortBy: sort_by,
@@ -8963,50 +9003,6 @@ function getTeamVectorTools(context) {
     }
   ];
 }
-var FlagContextSchema = z.object({
-  flag_type: z.string(),
-  target_user: z.string().nullable().optional(),
-  link: z.string().nullable().optional(),
-  resolved: z.boolean(),
-  resolved_at: z.string().nullable().optional(),
-  resolution: z.string().nullable().optional(),
-  author: z.string().optional()
-});
-var VersionedEnvelopeSchema = z.object({
-  version: z.string(),
-  data: z.unknown()
-});
-var AutoContextSchema = z.union([FlagContextSchema, VersionedEnvelopeSchema]);
-function parseAutoContext(autoContext) {
-  if (!autoContext) return null;
-  try {
-    const parsed = JSON.parse(autoContext);
-    if (typeof parsed !== "object" || parsed === null) {
-      return null;
-    }
-    const result = AutoContextSchema.safeParse(parsed);
-    if (result.success) {
-      return result.data;
-    }
-    logger.debug("AutoContext schema miss", {
-      module: "Validator",
-      issues: result.error.issues
-    });
-    return parsed;
-  } catch (error) {
-    logger.warning("Failed to parse auto_context JSON", {
-      module: "Validator",
-      error: error instanceof Error ? error.message : "Unknown error"
-    });
-    return null;
-  }
-}
-function parseFlagContext2(autoContext) {
-  const parsed = parseAutoContext(autoContext);
-  if (parsed === null) return null;
-  const result = FlagContextSchema.safeParse(parsed);
-  return result.success ? result.data : null;
-}
 
 // src/handlers/tools/team/flag-tools.ts
 function getVocabulary(context) {
@@ -9145,7 +9141,7 @@ function getTeamFlagTools(context) {
               recoverable: true
             };
           }
-          const flagCtx = parseFlagContext2(entry.autoContext);
+          const flagCtx = parseFlagContext(entry.autoContext);
           if (!flagCtx) {
             return {
               success: false,
@@ -10777,4 +10773,4 @@ function getAllToolDefinitions(context) {
   ];
 }
 
-export { BASE_SCOPES, ConfigurationError, ConnectionError, DEFAULT_BRIEFING_CONFIG, DEFAULT_FLAG_VOCABULARY, META_GROUPS, MemoryJournalMcpError, MetricsAccumulator, QueryError, ResourceNotFoundError, SUPPORTED_SCOPES, TOOL_GROUPS, ValidationError, assertNoPathTraversal, assertSafeDirectoryPath, assertSafeFilePath, calculateTokenSavings, callTool, enforceAccessBoundary, filterTools, getAllToolNames, getAuthContext, getEnabledGroups, getFilterSummary, getGitHubIntegration, getRequestContext, getRequiredScope, getToolFilterFromEnv, getToolGroup, getTools, isResourceError, isToolEnabled, isValidScope, logger, markUntrustedContent, markUntrustedContentInline, milestoneCompletionPct, parseFlagContext2 as parseFlagContext, parseScopes, parseToolFilter, requestContextStorage, resolveGitHubRepo, runWithAuthContext, sanitizeAuthor, sanitizeSearchQuery, sendProgress, validateDateFormatPattern };
+export { BASE_SCOPES, ConfigurationError, ConnectionError, DEFAULT_BRIEFING_CONFIG, DEFAULT_FLAG_VOCABULARY, META_GROUPS, MemoryJournalMcpError, MetricsAccumulator, QueryError, ResourceNotFoundError, SUPPORTED_SCOPES, TOOL_GROUPS, ValidationError, assertNoPathTraversal, assertSafeDirectoryPath, assertSafeFilePath, calculateTokenSavings, callTool, enforceAccessBoundary, filterTools, getAllToolNames, getAuthContext, getEnabledGroups, getFilterSummary, getGitHubIntegration, getRequestContext, getRequiredScope, getToolFilterFromEnv, getToolGroup, getTools, isResourceError, isToolEnabled, isValidScope, logger, markUntrustedContent, markUntrustedContentInline, milestoneCompletionPct, parseFlagContext, parseScopes, parseToolFilter, requestContextStorage, resolveGitHubRepo, runWithAuthContext, sanitizeAuthor, sanitizeSearchQuery, sendProgress, validateDateFormatPattern };

package/dist/cli.js

@@ -1,5 +1,5 @@
-import { VERSION, DEFAULT_AUDIT_LOG_MAX_SIZE_BYTES, createServer } from './chunk-NSEHC6MZ.js';
-import { logger } from './chunk-SV3CKPMF.js';
+import { VERSION, DEFAULT_AUDIT_LOG_MAX_SIZE_BYTES, createServer } from './chunk-DFQG7UR5.js';
+import { logger } from './chunk-SYTB5YNH.js';
 import { Command } from 'commander';
 import * as path from 'path';
 import * as fs from 'fs';

package/dist/index.js

@@ -1,5 +1,5 @@
-export { VERSION, createServer } from './chunk-NSEHC6MZ.js';
-export { META_GROUPS, TOOL_GROUPS, calculateTokenSavings, filterTools, getAllToolNames, getFilterSummary, getToolFilterFromEnv, getToolGroup, isToolEnabled, logger, parseToolFilter } from './chunk-SV3CKPMF.js';
+export { VERSION, createServer } from './chunk-DFQG7UR5.js';
+export { META_GROUPS, TOOL_GROUPS, calculateTokenSavings, filterTools, getAllToolNames, getFilterSummary, getToolFilterFromEnv, getToolGroup, isToolEnabled, logger, parseToolFilter } from './chunk-SYTB5YNH.js';
 
 // src/types/index.ts
 var DEFAULT_CONFIG = {

package/dist/tools-JQPK5JFS.js

@@ -0,0 +1 @@
+export { callTool, getTools } from './chunk-SYTB5YNH.js';

package/package.json

@@ -1,6 +1,6 @@
 {
     "name": "memory-journal-mcp",
-    "version": "7.6.0",
+    "version": "7.6.1",
     "description": "Project context management for AI-assisted development - Persistent knowledge graphs and intelligent context recall across fragmented AI threads",
     "type": "module",
     "main": "dist/index.js",

package/dist/tools-QF7CPU2H.js

@@ -1 +0,0 @@
-export { callTool, getTools } from './chunk-SV3CKPMF.js';