spine-framework 0.3.114 → 0.3.116

package/.framework/functions/_shared/agent-runner.ts

@@ -70,7 +70,7 @@ export interface AgentConfig {
  * Structured result from a single LLM inference call.
  *
  * @outputSpec content: string — agent response text
- * @outputSpec confidence: number — 0-1 score; derived from logprobs or 0.85 default
+ * @outputSpec confidence: number — 0-1 score; derived from logprobs or 0.70 default
  * @outputSpec tool_calls: ToolCall[] | undefined — tools the model wants to call
  * @outputSpec metadata: { model, usage, finish_reason } | undefined
  */
@@ -372,10 +372,14 @@ async function executeAgentInference(
 
     if (!inferenceResult.tool_calls || inferenceResult.tool_calls.length === 0) {
       // Composite confidence: 60% LLM logprobs + 40% retrieval similarity
+      // When logprobs are absent, be conservative: default 0.70 instead of 0.85
       // If mean retrieval similarity < 0.40, cap composite at 0.60
-      const llmConf = inferenceResult.confidence ?? 0.85
+      // If mean retrieval similarity < 0.25, cap composite at 0.45 (very poor retrieval)
+      const llmConf = inferenceResult.confidence ?? 0.70
       let compositeConf: number
-      if (meanSimilarity < 0.40 && meanSimilarity > 0) {
+      if (meanSimilarity < 0.25 && meanSimilarity > 0) {
+        compositeConf = Math.min(llmConf * 0.6 + meanSimilarity * 0.4, 0.45)
+      } else if (meanSimilarity < 0.40 && meanSimilarity > 0) {
         compositeConf = Math.min(llmConf * 0.6 + meanSimilarity * 0.4, 0.60)
       } else {
         compositeConf = llmConf * 0.6 + Math.min(meanSimilarity, 1) * 0.4
@@ -799,9 +803,11 @@ async function callInference(
   const message = result.choices?.[0]?.message
 
   // Extract confidence from logprobs if available, otherwise estimate
+  // Default is conservative (0.70) when logprobs are absent — retrieval quality
+  // should drive the final composite confidence, not an arbitrary high default.
   const confidence = result.choices?.[0]?.logprobs?.content?.[0]?.logprob 
     ? Math.exp(result.choices[0].logprobs.content[0].logprob)
-    : 0.85 // Default confidence when not provided
+    : 0.70
 
   return {
     content: message?.content || '',
@@ -1195,6 +1201,34 @@ async function handleEscalation(
     })
     .eq('id', threadId)
 
+  // If the thread targets an item (e.g., a support ticket), mark that item as
+  // human-assigned so it shows up in the human queue and stops AI responses.
+  const { data: thread } = await adminDb
+    .from('threads')
+    .select('target_type, target_id')
+    .eq('id', threadId)
+    .single()
+  if (thread?.target_type === 'items' && thread?.target_id) {
+    const { data: item } = await adminDb
+      .from('items')
+      .select('status, data')
+      .eq('id', thread.target_id)
+      .single()
+    if (item && item.status !== 'human_assigned' && item.status !== 'resolved') {
+      await adminDb
+        .from('items')
+        .update({
+          status: 'human_assigned',
+          data: {
+            ...(item.data || {}),
+            aim_escalation_reason: 'low_confidence'
+          },
+          updated_at: new Date().toISOString()
+        })
+        .eq('id', thread.target_id)
+    }
+  }
+
   // Fire trigger event
   await emitAudit(ctx, 'agent.inference.low_confidence', {
     type: 'thread',

package/.framework/functions/_shared/permissions.ts

@@ -1,3 +1,4 @@
+// ─── CHUNK_START: PERMISSIONS_OVERVIEW ──────────────────────────────────────────────
 /**
  * @module permissions
  * @audience both
@@ -32,12 +33,13 @@
  * @seeAlso index.ts (stable export surface for custom code)
  */
 
+// ─── CHUNK_END: PERMISSIONS_OVERVIEW ────────────────────────────────────────────────
+
+// ─── CHUNK_START: PERMISSIONS_TYPES ──────────────────────────────────────────────
 import { adminDb } from './db'
 import { Principal } from './principal'
 import { CoreContext } from './middleware'
 
-// ─── TYPES ────────────────────────────────────────────────────────────────────
-
 /**
  * Result of a permission resolution for a principal + record + action combination.
  *
@@ -66,9 +68,9 @@ export interface PermissionResult {
 }
 
 type RequestContext = CoreContext
+// ─── CHUNK_END: PERMISSIONS_TYPES ────────────────────────────────────────────────
 
-// ─── ENGINE CLASS ────────────────────────────────────────────────────────────
-
+// ─── CHUNK_START: PERMISSIONS_ENGINE_CLASS ──────────────────────────────────────────────
 /**
  * The single permission engine for all authorization in Spine.
  *
@@ -87,11 +89,12 @@ type RequestContext = CoreContext
  * @testUnit tests/unit/permissions.test.ts
  * @testIntegration tests/integration/isolation.test.ts, admin-data-accounts.test.ts
  */
+// ─── CHUNK_END: PERMISSIONS_ENGINE_CLASS ────────────────────────────────────────────────
+
+// ─── CHUNK_START: PERMISSIONS_SURFACE_CLASSIFICATION ──────────────────────────────────────────────
 class _PermissionEngineInternal {
   private static instance: _PermissionEngineInternal
 
-  // ─── SURFACE CLASSIFICATION ───────────────────────────────────────────────
-
   // Surface classification tables
   private readonly SECOND_SURFACE_TABLES = new Set([
     'apps', 'app', 'pipelines', 'triggers', 'ai_agents', 'embeddings', 
@@ -189,7 +192,9 @@ class _PermissionEngineInternal {
     return _PermissionEngineInternal.instance
   }
 
-  // ─── FIRST SURFACE — RUNTIME DATA ──────────────────────────────────────────
+// ─── CHUNK_END: PERMISSIONS_SURFACE_CLASSIFICATION ────────────────────────────────────────────────
+
+// ─── CHUNK_START: PERMISSIONS_FIRST_SURFACE_RESOLVE ──────────────────────────────────────────────
 
   /**
    * Resolves record-level and field-level permissions for a human principal
@@ -334,7 +339,9 @@ class _PermissionEngineInternal {
     }
   }
 
-  // ─── SECOND SURFACE — CONFIG OBJECTS ────────────────────────────────────────
+// ─── CHUNK_END: PERMISSIONS_FIRST_SURFACE_RESOLVE ────────────────────────────────────────────────
+
+// ─── CHUNK_START: PERMISSIONS_SECOND_SURFACE_CONFIG_OBJECTS ──────────────────────────────────────────────
 
   /**
    * Checks whether the principal in `ctx` may perform `action` on a second-surface
@@ -465,7 +472,9 @@ class _PermissionEngineInternal {
     return { valid: false, error: 'Insufficient permissions for this operation' }
   }
 
-  // ─── THIRD SURFACE — SYSTEM METADATA ────────────────────────────────────────
+// ─── CHUNK_END: PERMISSIONS_SECOND_SURFACE_CONFIG_OBJECTS ────────────────────────────────────────────────
+
+// ─── CHUNK_START: PERMISSIONS_THIRD_SURFACE_SYSTEM_METADATA ──────────────────────────────────────────────
 
   /**
    * Checks whether the principal may access a third-surface system metadata record
@@ -584,7 +593,9 @@ class _PermissionEngineInternal {
     return { valid: false, error: 'Insufficient permissions for this operation' }
   }
 
-  // ─── SHARED HELPERS ──────────────────────────────────────────────────────────
+// ─── CHUNK_END: PERMISSIONS_THIRD_SURFACE_SYSTEM_METADATA ────────────────────────────────────────────────
+
+// ─── CHUNK_START: PERMISSIONS_SHARED_HELPERS ──────────────────────────────────────────────
 
   /**
    * Returns true if the principal in `ctx` holds the `system_admin` role.
@@ -608,7 +619,9 @@ class _PermissionEngineInternal {
     return ctx.principal?.roles?.includes('system_admin') || false
   }
 
-  // ─── PUBLIC SURFACE ROUTER METHODS ──────────────────────────────────────────
+// ─── CHUNK_END: PERMISSIONS_SHARED_HELPERS ────────────────────────────────────────────────
+
+// ─── CHUNK_START: PERMISSIONS_CAN_ACCESS_RECORD ──────────────────────────────────────────────
 
   /**
    * Checks whether the principal in `ctx` may perform `action` on `record`.
@@ -776,6 +789,9 @@ class _PermissionEngineInternal {
    * const safe = await sanitizeRecordData(ctx, rawRecord, 'ticket')
    * ```
    */
+// ─── CHUNK_END: PERMISSIONS_CAN_ACCESS_RECORD ────────────────────────────────────────────────
+
+// ─── CHUNK_START: PERMISSIONS_SANITIZE_RECORD_DATA ──────────────────────────────────────────────
   async sanitizeRecordData(
     ctx: RequestContext,
     record: any,
@@ -803,7 +819,9 @@ class _PermissionEngineInternal {
         return this.sanitizeFirstSurfaceRecordData(ctx, record, typeSlug || '')
     }
   }
+// ─── CHUNK_END: PERMISSIONS_SANITIZE_RECORD_DATA ────────────────────────────────────────────────
 
+// ─── CHUNK_START: PERMISSIONS_SANITIZE_FIRST_SURFACE ──────────────────────────────────────────────
   /**
    * Field-level filter and formatter for first-surface (runtime data) records.
    *
@@ -924,7 +942,9 @@ class _PermissionEngineInternal {
 
     return sanitized
   }
+// ─── CHUNK_END: PERMISSIONS_SANITIZE_FIRST_SURFACE ────────────────────────────────────────────────
 
+// ─── CHUNK_START: PERMISSIONS_VALIDATE_UPDATE ──────────────────────────────────────────────
   /**
    * Validates that the principal has write permission for every field in `updateData`,
    * and sanitizes the data using the validation schema before returning it.
@@ -992,7 +1012,9 @@ class _PermissionEngineInternal {
         return this.validateFirstSurfaceUpdatePermissions(ctx, updateData, existingRecord, typeSlug || '')
     }
   }
+// ─── CHUNK_END: PERMISSIONS_VALIDATE_UPDATE ────────────────────────────────────────────────
 
+// ─── CHUNK_START: PERMISSIONS_VALIDATE_FIRST_SURFACE ──────────────────────────────────────────────
   /**
    * Field-level write validation and sanitization for first-surface update payloads.
    *
@@ -1103,8 +1125,9 @@ class _PermissionEngineInternal {
 
     return { valid: true, sanitizedData }
   }
+// ─── CHUNK_END: PERMISSIONS_VALIDATE_FIRST_SURFACE ────────────────────────────────────────────────
 
-  // ─── UNIFIED PRINCIPAL METHODS ───────────────────────────────────────────────
+// ─── CHUNK_START: PERMISSIONS_CAN_PRINCIPAL_ACCESS_RECORD ──────────────────────────────────────────────
 
   /**
    * Unified permission check for all principal types (human, machine, cron, trigger).
@@ -1180,7 +1203,9 @@ class _PermissionEngineInternal {
     
     return false
   }
-  
+// ─── CHUNK_END: PERMISSIONS_CAN_PRINCIPAL_ACCESS_RECORD ────────────────────────────────────────────────
+
+// ─── CHUNK_START: PERMISSIONS_MACHINE_SCOPE ──────────────────────────────────────────────
   /**
    * Evaluates whether a machine principal's scopes permit the requested action.
    *
@@ -1227,7 +1252,9 @@ class _PermissionEngineInternal {
     
     return false
   }
-  
+// ─── CHUNK_END: PERMISSIONS_MACHINE_SCOPE ────────────────────────────────────────────────
+
+// ─── CHUNK_START: PERMISSIONS_PERMISSION_SUMMARY ──────────────────────────────────────────────
   /**
    * Returns a structured summary of a principal's permission posture for use
    * in audit log entries.
@@ -1274,7 +1301,9 @@ class _PermissionEngineInternal {
     return { type: 'unknown' }
   }
 }
+// ─── CHUNK_END: PERMISSIONS_PERMISSION_SUMMARY ────────────────────────────────────────────────
 
+// ─── CHUNK_START: PERMISSIONS_SINGLETON_AND_EXPORTS ──────────────────────────────────────────────
 // ─── SINGLETON EXPORT ────────────────────────────────────────────────────────
 
 /**
@@ -1317,3 +1346,4 @@ export const isSystemAdmin = PermissionEngine.isSystemAdmin.bind(PermissionEngin
 export const canAccessRecord = PermissionEngine.canAccessRecord.bind(PermissionEngine)
 export const sanitizeRecordData = PermissionEngine.sanitizeRecordData.bind(PermissionEngine)
 export const validateUpdatePermissions = PermissionEngine.validateUpdatePermissions.bind(PermissionEngine)
+// ─── CHUNK_END: PERMISSIONS_SINGLETON_AND_EXPORTS ────────────────────────────────────────────────

package/.framework/migrations/030_messages_updated_by.sql

@@ -0,0 +1,6 @@
+-- Migration 030: Add missing updated_by column to messages table
+-- The messages table was created without updated_by, causing PATCH requests
+-- via admin-data to fail when the audit stamp tries to set that field.
+
+ALTER TABLE public.messages
+  ADD COLUMN IF NOT EXISTS updated_by uuid REFERENCES public.people(id) ON DELETE SET NULL;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "spine-framework",
-  "version": "0.3.114",
+  "version": "0.3.116",
   "description": "Multi-tenant, modular application platform for modern SaaS systems",
   "type": "module",
   "bin": {
@@ -36,6 +36,7 @@
     ".framework/migrations/027_embedding_lifecycle.sql",
     ".framework/migrations/028_fix_message_data_permissions.sql",
     ".framework/migrations/029_tighten_support_triage_prompt.sql",
+    ".framework/migrations/030_messages_updated_by.sql",
     ".framework/public/",
     ".framework/scripts/",
     ".framework/seeds/",
@@ -92,7 +93,8 @@
     "test:core": "vitest run .framework/tests/unit/core-isolation.test.ts",
     "test:integration": "vitest run .framework/tests/integration",
     "test:boundary": "bash scripts/boundary-check.sh",
-    "docs": "typedoc --entryPoints .framework/functions/_shared/index.ts --out docs/generated"
+    "docs": "typedoc --entryPoints .framework/functions/_shared/index.ts --out docs/generated",
+    "mcp": "tsx custom/apps/cortex/mcp/index.ts"
   },
   "dependencies": {
     "@base-ui/react": "^1.4.1",
@@ -174,6 +176,7 @@
     "ws": "^8.18.0"
   },
   "devDependencies": {
+    "@modelcontextprotocol/sdk": "^1.29.0",
     "@netlify/functions": "^2.8.2",
     "@supabase/supabase-js": "^2.49.1",
     "@tailwindcss/typography": "^0.5.19",