signetai 0.197.13 → 0.197.14

package/dist/mcp-stdio.js

@@ -43345,6 +43345,28 @@ function readEpisodicSource(db, options) {
   }
   return readEpisodicMemory(db, options.agentId, from) ?? readEpisodicArtifact(db, options.agentId, from) ?? readEpisodicTranscript(db, options.agentId, from) ?? readEpisodicSummary(db, options.agentId, from);
 }
+function resolveStrictEpisodicSourceRef(db, params) {
+  if (typeof params.sourceRef !== "string")
+    return { status: "invalid", sourceRef: "" };
+  const sourceRef = params.sourceRef.trim();
+  const separator = sourceRef.indexOf(":");
+  if (separator <= 0 || separator === sourceRef.length - 1)
+    return { status: "invalid", sourceRef };
+  const kind = sourceRef.slice(0, separator);
+  const id = sourceRef.slice(separator + 1).trim();
+  if (!["memory", "artifact", "transcript", "summary"].includes(kind) || !id) {
+    return { status: "invalid", sourceRef };
+  }
+  const canonicalRef = `${kind}:${id}`;
+  const source = readEpisodicSource(db, { agentId: params.agentId, from: canonicalRef });
+  if (source !== null)
+    return { status: "resolved", source };
+  const owners = findEpisodicSourceAgentIds(db, canonicalRef);
+  if (owners.some((agentId) => agentId !== params.agentId)) {
+    return { status: "cross_agent", sourceRef: canonicalRef };
+  }
+  return { status: "not_found", sourceRef: canonicalRef };
+}
 function findEpisodicSourceAgentIds(db, from) {
   const trimmed = from.trim();
   const colon = trimmed.indexOf(":");
@@ -45941,6 +45963,26 @@ function readBackInTx(db, id, agentId) {
     throw new OntologyProposalError("Proposal not found", 404);
   return toProposal(row);
 }
+function requireStrictEpisodicSourceRefInTx(db, agentId, sourceRef) {
+  const resolved = resolveStrictEpisodicSourceRef(db, { agentId, sourceRef });
+  if (resolved.status === "resolved")
+    return resolved.source;
+  if (resolved.status === "invalid") {
+    throw new OntologyProposalError("Evidence source_ref must name a canonical episodic source", 409);
+  }
+  if (resolved.status === "cross_agent") {
+    throw new OntologyProposalError("Evidence source_ref crosses the authorized agent scope", 409);
+  }
+  throw new OntologyProposalError(`Evidence source_ref was not found: ${resolved.sourceRef}`, 409);
+}
+function validateProposalEvidenceSourcesInTx(db, agentId, evidence) {
+  for (const value of evidence) {
+    const ref3 = readOntologyEvidenceRef(value);
+    if (ref3 === null || !isRecord3(ref3.reference) || !("source_ref" in ref3.reference))
+      continue;
+    requireStrictEpisodicSourceRefInTx(db, agentId, ref3.reference.source_ref);
+  }
+}
 function insertProposalInTx(db, input, ts) {
   const id = crypto.randomUUID();
   const agentId = requireText(input.agentId, "agentId");
@@ -45948,6 +45990,7 @@ function insertProposalInTx(db, input, ts) {
   if (Object.keys(input.payload).length === 0)
     throw new OntologyProposalError("payload is required", 400);
   const evidence = input.evidence ?? [];
+  validateProposalEvidenceSourcesInTx(db, agentId, evidence);
   db.prepare(`INSERT INTO ontology_proposals
 		 (id, agent_id, operation, status, payload, confidence, rationale,
 		  evidence, risk, source_kind, source_id, source_path, source_root,
@@ -45977,22 +46020,20 @@ function proposalEvidenceRefs(proposal) {
 function proposalAuditEvidence(proposal) {
   return parseJsonArray3(proposal.evidence);
 }
-function derivedMemorySourcesForProposal(proposal) {
+function derivedMemorySourcesForProposalInTx(db, proposal) {
   const sources = [];
   for (const ref3 of proposalEvidenceRefs(toProposal(proposal))) {
     if (typeof ref3.reference !== "object" || ref3.reference === null || Array.isArray(ref3.reference))
       continue;
-    const sourceRef = readString2(ref3.reference, "source_ref");
-    if (sourceRef === null)
-      continue;
-    const separator = sourceRef.indexOf(":");
-    if (separator <= 0 || separator === sourceRef.length - 1)
+    const evidence = ref3.reference;
+    if (!("source_ref" in evidence))
       continue;
-    const sourceKind = sourceRef.slice(0, separator);
-    const sourceId = sourceRef.slice(separator + 1);
-    if (!["memory", "artifact", "transcript", "summary"].includes(sourceKind))
-      continue;
-    sources.push({ sourceKind, sourceId, sourcePath: ref3.sourcePath });
+    const source = requireStrictEpisodicSourceRefInTx(db, proposal.agent_id, evidence.source_ref);
+    sources.push({
+      sourceKind: source.kind,
+      sourceId: source.id,
+      sourcePath: source.sourcePath
+    });
   }
   return sources;
 }
@@ -46198,7 +46239,7 @@ function materializeAttributeMemoryInTx(db, input) {
   linkDerivedMemorySourcesInTx(db, {
     derivedMemoryId: input.attributeId,
     agentId: input.agentId,
-    sources: derivedMemorySourcesForProposal(input.proposal),
+    sources: derivedMemorySourcesForProposalInTx(db, input.proposal),
     createdAt: now()
   });
   return input.attributeId;
@@ -47015,6 +47056,7 @@ function applyArchiveEntityAlias(db, agentId, proposal, payload) {
 }
 function applyOperation(db, proposal, actor, writeCaps) {
   try {
+    validateProposalEvidenceSourcesInTx(db, proposal.agent_id, proposalAuditEvidence(proposal));
     const payload = parseJsonRecord(proposal.payload);
     if (proposal.operation === "create_entity")
       return applyCreateEntity(db, proposal.agent_id, proposal, payload);

package/native-manifest.json

@@ -1,43 +1,43 @@
 {
   "schemaVersion": 1,
-  "version": "0.197.13",
+  "version": "0.197.14",
   "assets": [
     {
       "name": "signet-darwin-arm64",
       "platform": "darwin-arm64",
-      "sha256": "322b43064854d35b156996de2536ee6ecee88ad0eeb250a801e27e737f17a105",
+      "sha256": "d869bb6bbbeff3a4c03d3f11abcd81f52bc3918406808e427a4e6f17b26f576e",
       "size": 125102752
     },
     {
       "name": "signet-darwin-x64",
       "platform": "darwin-x64",
-      "sha256": "1fbf77acebcc676dfe8179460abf32e3a99c4392c3ca011e5182f7209e92e619",
-      "size": 130075200
+      "sha256": "6fbe48ad837f5c12b9c0027bc8fbe29e9d8b31e4331c7b4b4bf157b072022e9c",
+      "size": 130091584
     },
     {
       "name": "signet-linux-arm64",
       "platform": "linux-arm64",
-      "sha256": "a41e89c5209402a7dd5dbe83ac78240f1a5689b5b20d20f61607327a5e143d37",
-      "size": 169652960
+      "sha256": "93491905ee278494dc43fc3a9c31bc1a4cc4bc53ffc89627fe177c25f074653a",
+      "size": 169654957
     },
     {
       "name": "signet-linux-x64",
       "platform": "linux-x64",
-      "sha256": "a1277072d1a0a4af3685c390948f2b9a56d5576b9fa35f513c5ec915a7fde969",
-      "size": 172027542
+      "sha256": "5a2f294d8d1436fcf0ea14e47dcb8f469b34eaf7d848ff7559e10c4b0c6f861b",
+      "size": 172029539
     },
     {
       "name": "signet-win32-x64.exe",
       "platform": "win32-x64",
-      "sha256": "d5a23947ff022532429f9e7772a51e076debbef80f7221b217679d97ee08ee13",
-      "size": 180153856
+      "sha256": "d10d7388fc373a4a50b303878107f14a0c1ffdf978364883e0faa7e5af61d72e",
+      "size": 180155904
     }
   ],
   "components": {
     "connectors": {
-      "url": "signet-connectors-0.197.13.tar.gz",
-      "sha256": "de5d72502f27247e0f8d562c1cf3de2cec4f62b70141885814e63e5958188e5d",
-      "size": 21670
+      "url": "signet-connectors-0.197.14.tar.gz",
+      "sha256": "c92219dfac0862b1ec5997c780bf8e9286cb6aa5c1f923c260b3cdf08d353fd2",
+      "size": 21668
     }
   }
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "signetai",
-  "version": "0.197.13",
+  "version": "0.197.14",
   "description": "Signet native CLI installer wrapper",
   "type": "module",
   "bin": {
@@ -65,10 +65,10 @@
     "access": "public"
   },
   "optionalDependencies": {
-    "signetai-darwin-arm64": "https://github.com/Signet-AI/signetai/releases/download/v0.197.13/signetai-darwin-arm64-0.197.13.tgz",
-    "signetai-darwin-x64": "https://github.com/Signet-AI/signetai/releases/download/v0.197.13/signetai-darwin-x64-0.197.13.tgz",
-    "signetai-linux-arm64": "https://github.com/Signet-AI/signetai/releases/download/v0.197.13/signetai-linux-arm64-0.197.13.tgz",
-    "signetai-linux-x64": "https://github.com/Signet-AI/signetai/releases/download/v0.197.13/signetai-linux-x64-0.197.13.tgz",
-    "signetai-win32-x64": "https://github.com/Signet-AI/signetai/releases/download/v0.197.13/signetai-win32-x64-0.197.13.tgz"
+    "signetai-darwin-arm64": "https://github.com/Signet-AI/signetai/releases/download/v0.197.14/signetai-darwin-arm64-0.197.14.tgz",
+    "signetai-darwin-x64": "https://github.com/Signet-AI/signetai/releases/download/v0.197.14/signetai-darwin-x64-0.197.14.tgz",
+    "signetai-linux-arm64": "https://github.com/Signet-AI/signetai/releases/download/v0.197.14/signetai-linux-arm64-0.197.14.tgz",
+    "signetai-linux-x64": "https://github.com/Signet-AI/signetai/releases/download/v0.197.14/signetai-linux-x64-0.197.14.tgz",
+    "signetai-win32-x64": "https://github.com/Signet-AI/signetai/releases/download/v0.197.14/signetai-win32-x64-0.197.14.tgz"
   }
 }