wyrm-mcp 8.7.4 → 8.7.5

package/dist/autoconfig.js

@@ -4,7 +4,7 @@ import{existsSync as d,readFileSync as p,writeFileSync as l,mkdirSync as P,copyF
 `)[0];break}}}catch{}}function ee(e,t){switch(t.configFormat){case"vscode":return e.mcp?.servers?.wyrm!==void 0;case"mcp-json":return e[t.mcpKey]?.wyrm!==void 0;case"zed":return e[t.mcpKey]?.wyrm!==void 0;default:return!1}}function T(){try{const n=v("which",["wyrm-mcp"],{encoding:"utf-8",timeout:5e3});if(n.stdout?.trim())return n.stdout.trim()}catch{}try{const s=v("npm",["root","-g"],{encoding:"utf-8",timeout:5e3}).stdout?.trim();if(s){const r=c(s,"wyrm-mcp","dist","index.js");if(d(r))return r}}catch{}const e=V(__dirname,"index.js");if(d(e))return e;const t=c(m(),".wyrm","node_modules","wyrm-mcp","dist","index.js");if(d(t))return t;const o=[c(m(),"Git Projects","Wyrm","packages","mcp-server","dist","index.js"),c(m(),"projects","Wyrm","packages","mcp-server","dist","index.js"),c(m(),"dev","Wyrm","packages","mcp-server","dist","index.js")];for(const n of o)if(d(n))return n;return"wyrm-mcp"}function D(){return c(m(),".wyrm","wyrm.db")}function ye(e="mcp-json",t){const o=t?.serverPath??T(),n=t?.dbPath??D(),s=o==="wyrm-mcp",r={command:s?"npx":"node",args:s?["wyrm-mcp"]:[o],env:{WYRM_DB_PATH:n}};switch(e){case"stdio":return r;case"vscode":return{mcp:{servers:{wyrm:r}}};default:return{mcpServers:{wyrm:r}}}}function te(e,t){const o=t.serverPath,n=o==="wyrm-mcp",s=o.endsWith(".js");switch(e.configFormat){case"vscode":return{command:n?"npx":"node",args:n?["wyrm-mcp"]:[o],env:{WYRM_DB_PATH:t.dbPath}};case"mcp-json":return{command:n?"npx":"node",args:n?["wyrm-mcp"]:[o],env:{WYRM_DB_PATH:t.dbPath}};case"zed":return{command:n?"npx":"node",args:n?["wyrm-mcp"]:[o],env:{WYRM_DB_PATH:t.dbPath}};default:return{}}}function U(e,t){if(!e.detected)return{client:e,action:"skipped",message:`${e.name} not detected`};try{const o=w(e.configPath);d(o)||P(o,{recursive:!0});let n={},s=!1;if(d(e.configPath))try{const a=p(e.configPath,"utf-8");n=$(a),s=!0}catch{n={}}let r;if(s){r=`${e.configPath}.wyrm-backup`,l(r,p(e.configPath),{mode:384});try{j(r,384)}catch{}}const i=te(e,t);switch(e.configFormat){case"vscode":{n.mcp||(n.mcp={});const a=n.mcp;a.servers||(a.servers={});const f=a.servers;f.wyrm=i;break}case"mcp-json":{n[e.mcpKey]||(n[e.mcpKey]={});const a=n[e.mcpKey];a.wyrm=i;break}case"zed":{n[e.mcpKey]||(n[e.mcpKey]={});const a=n[e.mcpKey];a.wyrm=i;break}}l(e.configPath,JSON.stringify(n,null,2)+`
 `,"utf-8");const u=e.configured?"updated":"configured";return e.configured=!0,{client:e,action:u,message:`${e.name} ${u==="configured"?"configured":"updated"} successfully`,backup:r}}catch(o){return{client:e,action:"failed",message:`Failed to configure ${e.name}: ${o}`}}}function we(e,t){try{if(!d(e.configPath))return{client:e,action:"skipped",message:"No config file"};const o=p(e.configPath,"utf-8");let n;try{n=$(o)}catch{return{client:e,action:"failed",message:"Config file is not valid JSON; refusing to touch it"}}const r=(e.configFormat==="vscode"?n.mcp?.servers:n[e.mcpKey])?.wyrm;if(!r)return{client:e,action:"skipped",message:"Wyrm not configured in this client"};const i=`${e.configPath}.wyrm-backup`;l(i,o,{encoding:"utf-8",mode:384});try{j(i,384)}catch{}return r.env={...r.env,...t},l(e.configPath,JSON.stringify(n,null,2)+`
 `,"utf-8"),{client:e,action:"updated",message:`env: ${Object.keys(t).join(", ")}`,backup:i}}catch(o){return{client:e,action:"failed",message:String(o)}}}function oe(e){if(!e.detected||!e.configured)return{client:e,action:"skipped",message:`${e.name} not configured`};try{if(!d(e.configPath))return{client:e,action:"skipped",message:`${e.name} config not found`};const t=p(e.configPath,"utf-8"),o=$(t),n=`${e.configPath}.wyrm-backup`;l(n,t,{mode:384});try{j(n,384)}catch{}switch(e.configFormat){case"vscode":{const r=o.mcp?.servers;r&&delete r.wyrm;break}case"mcp-json":case"zed":{const s=o[e.mcpKey];s&&delete s.wyrm;break}}return l(e.configPath,JSON.stringify(o,null,2)+`
-`,"utf-8"),e.configured=!1,{client:e,action:"configured",message:`Removed Wyrm from ${e.name}`,backup:n}}catch(t){return{client:e,action:"failed",message:`Failed to remove from ${e.name}: ${t}`}}}function A(){return{id:"claude-code-hooks",name:"Claude Code (auto-memory)",icon:"\u{1FA9D}",configPath:c(m(),".claude","settings.json"),configFormat:"mcp-json",mcpKey:"",detected:!0,configured:!1}}const R=[{script:"wyrm-session-capture.mjs",events:["SessionEnd","PreCompact"]},{script:"wyrm-session-rehydrate.mjs",events:["SessionStart"]},{script:"wyrm-session-prune.mjs",events:["SessionEnd"]},{script:"wyrm-tool-call-trace.mjs",events:["PostToolUse"]},{script:"wyrm-run-auto.mjs",events:["SessionStart",{event:"PreToolUse",matcher:"Task"},"SessionEnd"]}];function ne(){const e=c(m(),".claude");if(!d(e))return null;const t=A();try{const o=c(e,"hooks");d(o)||P(o,{recursive:!0});const n=w(N(import.meta.url)),s=c(n,"..","scripts","hooks"),r=t.configPath;let i={};if(d(r))try{i=JSON.parse(p(r,"utf-8"))}catch{i={}}const u=i.hooks??{};let a=!1;const f=[];for(const h of R){const g=c(s,h.script);if(!d(g)){f.push(h.script);continue}const W=c(o,h.script);q(g,W);try{j(W,493)}catch{}const O=`node ${W}`;for(const k of h.events){const x=typeof k=="string"?k:k.event,M=typeof k=="string"?void 0:k.matcher,E=Array.isArray(u[x])?u[x]:[];if(!E.some(S=>Array.isArray(S.hooks)&&S.hooks.some(Y=>Y.command===O))){const S=M?{matcher:M,hooks:[{type:"command",command:O,timeout:30}]}:{hooks:[{type:"command",command:O,timeout:30}]};E.push(S),a=!0}u[x]=E}}i.hooks=u,l(r,JSON.stringify(i,null,2)+`
+`,"utf-8"),e.configured=!1,{client:e,action:"configured",message:`Removed Wyrm from ${e.name}`,backup:n}}catch(t){return{client:e,action:"failed",message:`Failed to remove from ${e.name}: ${t}`}}}function A(){return{id:"claude-code-hooks",name:"Claude Code (auto-memory)",icon:"\u{1FA9D}",configPath:c(m(),".claude","settings.json"),configFormat:"mcp-json",mcpKey:"",detected:!0,configured:!1}}const R=[{script:"wyrm-session-capture.mjs",events:["SessionEnd","PreCompact"]},{script:"wyrm-session-rehydrate.mjs",events:["SessionStart"]},{script:"wyrm-session-prune.mjs",events:["SessionEnd"]},{script:"wyrm-tool-call-trace.mjs",events:["PostToolUse"]},{script:"wyrm-run-auto.mjs",events:["SessionStart",{event:"PreToolUse",matcher:"Task"},"SessionEnd"]},{script:"wyrm-citation-audit.mjs",events:["Stop"]}];function ne(){const e=c(m(),".claude");if(!d(e))return null;const t=A();try{const o=c(e,"hooks");d(o)||P(o,{recursive:!0});const n=w(N(import.meta.url)),s=c(n,"..","scripts","hooks"),r=t.configPath;let i={};if(d(r))try{i=JSON.parse(p(r,"utf-8"))}catch{i={}}const u=i.hooks??{};let a=!1;const f=[];for(const h of R){const g=c(s,h.script);if(!d(g)){f.push(h.script);continue}const W=c(o,h.script);q(g,W);try{j(W,493)}catch{}const O=`node ${W}`;for(const k of h.events){const x=typeof k=="string"?k:k.event,M=typeof k=="string"?void 0:k.matcher,E=Array.isArray(u[x])?u[x]:[];if(!E.some(S=>Array.isArray(S.hooks)&&S.hooks.some(Y=>Y.command===O))){const S=M?{matcher:M,hooks:[{type:"command",command:O,timeout:30}]}:{hooks:[{type:"command",command:O,timeout:30}]};E.push(S),a=!0}u[x]=E}}i.hooks=u,l(r,JSON.stringify(i,null,2)+`
 `,"utf-8"),t.configured=!0;const y=f.length?` (missing from package: ${f.join(", ")})`:"";return{client:t,action:a?"configured":"skipped",message:(a?"auto-memory hooks installed":"already installed")+y}}catch(o){return{client:t,action:"failed",message:o instanceof Error?o.message:String(o)}}}function ve(){const e=c(m(),".claude");if(!d(e))return null;const t=A();try{const o=w(N(import.meta.url)),n=`node ${c(o,"wyrm-statusline.js")}`,s=t.configPath;let r={};if(d(s))try{r=JSON.parse(p(s,"utf-8"))}catch{r={}}const i=r.statusLine;if(i?.command&&!/wyrm-statusline/.test(i.command))return{client:t,action:"skipped",message:`a non-Wyrm statusLine is already set (${i.command}); not overwriting`};const u=i?.command===n;return r.statusLine={type:"command",command:n,padding:0},l(s,JSON.stringify(r,null,2)+`
 `,"utf-8"),{client:t,action:u?"skipped":"configured",message:u?"buddy statusline already installed":"Wyrm buddy statusline installed \u2014 persistent in the Claude Code TUI"}}catch(o){return{client:t,action:"failed",message:o instanceof Error?o.message:String(o)}}}function ke(){const e=c(m(),".claude","settings.json");if(!d(e))return null;const t=A();try{const o=JSON.parse(p(e,"utf-8")),n=o.statusLine;return n?.command&&/wyrm-statusline/.test(n.command)?(delete o.statusLine,l(e,JSON.stringify(o,null,2)+`
 `,"utf-8"),{client:t,action:"configured",message:"Wyrm statusline removed"}):{client:t,action:"skipped",message:"no Wyrm statusline set"}}catch(o){return{client:t,action:"failed",message:o instanceof Error?o.message:String(o)}}}function re(){const e=c(m(),".claude","settings.json");if(!d(e))return null;const t=A();try{const o=JSON.parse(p(e,"utf-8")),n=c(m(),".claude","hooks"),s=new Set(R.map(u=>`node ${c(n,u.script)}`)),r=new Set(R.flatMap(u=>u.events.map(a=>typeof a=="string"?a:a.event))),i=o.hooks;if(i){for(const u of r)Array.isArray(i[u])&&(i[u]=i[u].map(a=>({...a,hooks:Array.isArray(a.hooks)?a.hooks.filter(f=>!s.has(f.command??"")):a.hooks})).filter(a=>!Array.isArray(a.hooks)||a.hooks.length>0),i[u].length===0&&delete i[u]);Object.keys(i).length===0&&delete o.hooks}return l(e,JSON.stringify(o,null,2)+`

package/dist/session-seen.js

@@ -1,11 +1,11 @@
-class d{db;constructor(e){this.db=e}mark(e,t,s,n){this.db.prepare(`
+class f{db;constructor(e){this.db=e}mark(e,i,s,a){this.db.prepare(`
       INSERT INTO session_seen_artifacts (session_id, artifact_id, artifact_kind, render_mode)
       VALUES (?, ?, ?, ?)
       ON CONFLICT(session_id, artifact_id, artifact_kind)
       DO UPDATE SET shown_at = datetime('now'), render_mode = excluded.render_mode
-    `).run(e,t,s,n)}markBulk(e,t){const s=this.db.prepare(`
+    `).run(e,i,s,a)}markBulk(e,i){const s=this.db.prepare(`
       INSERT INTO session_seen_artifacts (session_id, artifact_id, artifact_kind, render_mode)
       VALUES (?, ?, ?, ?)
       ON CONFLICT(session_id, artifact_id, artifact_kind)
       DO UPDATE SET shown_at = datetime('now'), render_mode = excluded.render_mode
-    `);this.db.transaction(i=>{for(const r of i)s.run(e,r.id,r.kind,r.mode)})(t)}getSeen(e){const t=this.db.prepare("SELECT artifact_id, artifact_kind FROM session_seen_artifacts WHERE session_id = ? AND render_mode = 'inline'").all(e);return new Set(t.map(s=>`${s.artifact_kind}:${s.artifact_id}`))}prune(e=7){return this.db.prepare("DELETE FROM session_seen_artifacts WHERE shown_at < datetime('now', ? || ' days')").run(`-${e}`).changes??0}count(){return this.db.prepare("SELECT COUNT(*) as n FROM session_seen_artifacts").get().n}}export{d as SessionSeen};
+    `);this.db.transaction(r=>{for(const n of r)s.run(e,n.id,n.kind,n.mode)})(i)}getSeen(e){const i=this.db.prepare("SELECT artifact_id, artifact_kind FROM session_seen_artifacts WHERE session_id = ? AND render_mode = 'inline'").all(e);return new Set(i.map(s=>`${s.artifact_kind}:${s.artifact_id}`))}attest(e,i){const s=this.db.prepare("SELECT artifact_id, artifact_kind FROM session_seen_artifacts WHERE session_id = ?").all(e),a=new Set(s.map(t=>`${t.artifact_kind}:${t.artifact_id}`)),r=[],n=[],d=new Set;for(const t of i){const o=`${t.kind}:${t.id}`;d.has(o)||(d.add(o),(a.has(o)?r:n).push({id:t.id,kind:t.kind}))}const c=s.filter(t=>!d.has(`${t.artifact_kind}:${t.artifact_id}`)).map(t=>({id:t.artifact_id,kind:t.artifact_kind}));return{served:r,unserved:n,unseen:c,ok:n.length===0}}prune(e=7){return this.db.prepare("DELETE FROM session_seen_artifacts WHERE shown_at < datetime('now', ? || ' days')").run(`-${e}`).changes??0}count(){return this.db.prepare("SELECT COUNT(*) as n FROM session_seen_artifacts").get().n}}export{f as SessionSeen};

package/dist/tool-manifest-v2.json

@@ -1,6 +1,6 @@
 {
   "contract": "wyrm-cloud-memory-v2",
-  "version": "8.7.4",
+  "version": "8.7.5",
   "derivedFrom": "standard tier MINUS device-local/egress/subprocess (src/cloud-profile.ts)",
   "count": 20,
   "tools": [

package/dist/tool-manifest.json

@@ -1,6 +1,6 @@
 {
   "contract": "wyrm-cloud-memory-v1",
-  "version": "8.7.4",
+  "version": "8.7.5",
   "tools": [
     {
       "name": "wyrm_recall",

package/dist/wyrm-manifest.json

@@ -1,6 +1,6 @@
 {
   "contract": "wyrm-cloud-memory-v1",
-  "version": "8.7.4",
+  "version": "8.7.5",
   "generatedBy": "scripts/gen-tool-manifest.mjs (from the dist/ registry modules — never hand-edited)",
   "tiers": {
     "core": [

package/package.json

@@ -1,8 +1,8 @@
 {
   "name": "wyrm-mcp",
-  "version": "8.7.4",
+  "version": "8.7.5",
   "mcpName": "lk.ghosts/wyrm",
-  "description": "Local-first persistent memory for AI agents over MCP. Ground truths, negative learning (recorded failures block repeats), decision causality, hybrid recall, negotiated recall (clean-mode injection you steer), live memory streams, run-attributed fleet memory — a structured SQLite memory on your machine, no cloud or LLM required. Claude / Copilot / Cursor / Windsurf / Codex.",
+  "description": "Local-first persistent memory for AI agents over MCP. Ground truths, negative learning (recorded failures block repeats), decision causality, hybrid recall, negotiated recall (clean-mode injection you steer), live memory streams, run-attributed fleet memory \u2014 a structured SQLite memory on your machine, no cloud or LLM required. Claude / Copilot / Cursor / Windsurf / Codex.",
   "type": "module",
   "main": "dist/index.js",
   "bin": {
@@ -29,6 +29,7 @@
     "scripts/hooks/wyrm-session-prune.mjs",
     "scripts/hooks/wyrm-tool-call-trace.mjs",
     "scripts/hooks/wyrm-run-auto.mjs",
+    "scripts/hooks/wyrm-citation-audit.mjs",
     "README.md",
     "BENCHMARKS.md",
     "COMPARISON.md",

package/scripts/hooks/wyrm-citation-audit.mjs

@@ -0,0 +1,120 @@
+#!/usr/bin/env node
+/**
+ * Wyrm citation audit (Stop hook) — enforcement for the grounding rules.
+ *
+ * 8.7.4 ships server instructions telling the model to cite the record id for
+ * anything it claims from memory and never to assert what it did not retrieve.
+ * Those are directives, and a directive is not a guarantee. This makes it a
+ * check.
+ *
+ * The transcript is the ledger. Everything Wyrm actually put in front of this
+ * session is in it: tool results, the SessionStart recall brief, injected
+ * prompt context. So a citation naming a record that never appeared in any of
+ * them was not retrieved — it was produced. That is decidable by set
+ * membership, with no model and no second opinion.
+ *
+ * Advisory by design: it reports, it does not block. A false accusation that
+ * silently eats a turn would be worse than the problem it polices.
+ *
+ * Claude Code passes a JSON payload on stdin including `transcript_path`.
+ */
+import { readFileSync } from 'node:fs';
+
+/**
+ * Canonical citation form the grounding rules mandate: `mem:5508`, `truth:921`.
+ *
+ * Horizontal whitespace only. `\s*` would span a newline and read prose like
+ * "...without being a JS failure:\n\n1. Phone with Data Saver" as `failure:1`,
+ * which is how the first version produced its only false positive across 25
+ * real transcripts. A citation never straddles a line break.
+ */
+const CITE = /\b(mem|memory|truth|quest|failure)[ \t]*[:#][ \t]*(\d{1,7})\b/gi;
+
+/** Normalize the aliases Wyrm renders (`mem:` and `memory #` are one kind). */
+function norm(kind) {
+  const k = kind.toLowerCase();
+  return k === 'memory' ? 'mem' : k;
+}
+
+function idsIn(text) {
+  const out = new Set();
+  if (!text) return out;
+  for (const m of String(text).matchAll(CITE)) out.add(`${norm(m[1])}:${m[2]}`);
+  return out;
+}
+
+let payload = {};
+try { payload = JSON.parse(readFileSync(0, 'utf8') || '{}'); } catch { /* no/invalid stdin */ }
+if (!payload || typeof payload !== 'object') payload = {};
+
+const tpath = payload.transcript_path;
+if (!tpath) process.exit(0);
+
+let lines;
+try { lines = readFileSync(tpath, 'utf8').split('\n'); } catch { process.exit(0); }
+
+const served = new Set();   // every id Wyrm put in front of this session
+const cited = new Set();    // every id the FINAL assistant turn asserted
+let lastAssistantText = [];
+
+for (const line of lines) {
+  if (!line.trim()) continue;
+  let o;
+  try { o = JSON.parse(line); } catch { continue; }
+  const type = o.type;
+
+  // Anything that is not the model's own prose is a hand-off TO the model:
+  // tool results, the SessionStart brief, injected context, attachments.
+  if (type === 'user' || type === 'system' || type === 'attachment') {
+    const content = o?.message?.content ?? o?.content ?? o?.text ?? '';
+    if (typeof content === 'string') {
+      for (const id of idsIn(content)) served.add(id);
+    } else if (Array.isArray(content)) {
+      for (const c of content) {
+        if (!c || typeof c !== 'object') continue;
+        const t = typeof c.content === 'string'
+          ? c.content
+          : Array.isArray(c.content)
+            ? c.content.map((x) => (typeof x === 'string' ? x : x?.text ?? '')).join('\n')
+            : (c.text ?? '');
+        for (const id of idsIn(t)) served.add(id);
+      }
+    }
+    continue;
+  }
+
+  if (type === 'assistant') {
+    const blocks = o?.message?.content;
+    if (!Array.isArray(blocks)) continue;
+    // A new assistant turn replaces the previous candidate: we audit the
+    // response the user actually ends up reading, not the whole conversation.
+    const texts = blocks.filter((c) => c?.type === 'text').map((c) => c.text ?? '');
+    if (texts.length) lastAssistantText = texts;
+    // A tool_use is the model asking, not asserting — its arguments echo ids
+    // it is looking up and must not count as a claim.
+  }
+}
+
+for (const t of lastAssistantText) for (const id of idsIn(t)) cited.add(id);
+
+const fabricated = [...cited].filter((id) => !served.has(id));
+
+if (fabricated.length === 0) process.exit(0);
+
+// Surface it. Exit 0 with context so the finding reaches the transcript
+// without killing the turn.
+const detail = fabricated.sort().join(', ');
+console.log(JSON.stringify({
+  hookSpecificOutput: {
+    hookEventName: 'Stop',
+    additionalContext:
+      `<wyrm-citation-audit>\n` +
+      `UNGROUNDED CITATION(S): ${detail}\n` +
+      `These record ids appear in the reply but were never returned by a Wyrm tool, ` +
+      `the SessionStart brief, or injected context in this session. ` +
+      `Per the grounding rules: cite only what was actually retrieved. ` +
+      `Retrieve them and correct the claim, or drop the citation.\n` +
+      `</wyrm-citation-audit>`,
+  },
+}));
+process.exit(0);