cortex-ai-memory 2.2.1__tar.gz → 2.3.0__tar.gz

{cortex_ai_memory-2.2.1 → cortex_ai_memory-2.3.0}/Cargo.lock

@@ -573,7 +573,7 @@ dependencies = [
 
 [[package]]
 name = "cortex-core"
-version = "2.2.1"
+version = "2.3.0"
 dependencies = [
  "aes-gcm",
  "argon2",
@@ -606,7 +606,7 @@ dependencies = [
 
 [[package]]
 name = "cortex-http"
-version = "2.2.1"
+version = "2.3.0"
 dependencies = [
  "axum",
  "chrono",
@@ -623,8 +623,9 @@ dependencies = [
 
 [[package]]
 name = "cortex-mcp-server"
-version = "2.2.1"
+version = "2.3.0"
 dependencies = [
+ "axum",
  "chrono",
  "clap",
  "cortex-core",
@@ -633,6 +634,8 @@ dependencies = [
  "serde",
  "serde_json",
  "tokio",
+ "tower",
+ "tower-http",
  "tracing",
  "tracing-subscriber",
  "uuid",
@@ -640,7 +643,7 @@ dependencies = [
 
 [[package]]
 name = "cortex-python"
-version = "2.2.1"
+version = "2.3.0"
 dependencies = [
  "cortex-core",
  "pyo3",
@@ -649,7 +652,7 @@ dependencies = [
 
 [[package]]
 name = "cortex-wasm"
-version = "2.2.1"
+version = "2.3.0"
 dependencies = [
  "chrono",
  "js-sys",
@@ -3485,6 +3488,7 @@ dependencies = [
  "pin-project-lite",
  "sync_wrapper",
  "tokio",
+ "tokio-util",
  "tower-layer",
  "tower-service",
  "tracing",
@@ -3503,6 +3507,7 @@ dependencies = [
  "http-body",
  "iri-string",
  "pin-project-lite",
+ "tokio",
  "tower",
  "tower-layer",
  "tower-service",

{cortex_ai_memory-2.2.1 → cortex_ai_memory-2.3.0}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: cortex-ai-memory
-Version: 2.2.1
+Version: 2.3.0
 Classifier: Development Status :: 5 - Production/Stable
 Classifier: Intended Audience :: Developers
 Classifier: License :: OSI Approved :: MIT License

{cortex_ai_memory-2.2.1 → cortex_ai_memory-2.3.0}/cortex-core/Cargo.toml

@@ -1,6 +1,6 @@
 [package]
 name = "cortex-core"
-version = "2.2.1"
+version = "2.3.0"
 edition = "2021"
 
 [features]

{cortex_ai_memory-2.2.1 → cortex_ai_memory-2.3.0}/cortex-core/src/lib.rs

@@ -562,7 +562,15 @@ impl Cortex {
     /// Auto-generate embedding if embedder is available and none provided.
     /// Lazily initializes the embedding model on first call.
     #[allow(unused_variables)]
+    /// Embed `text` with the local model, or `None` when embeddings are compiled out,
+    /// disabled via `CORTEX_NO_EMBEDDINGS`, or the model failed to load.
+    pub fn embed_query(&self, text: &str) -> Option<Vec<f32>> {
+        self.auto_embed(text, None)
+    }
+
     fn auto_embed(&self, text: &str, embedding: Option<Vec<f32>>) -> Option<Vec<f32>> {
+        #[cfg(not(feature = "embeddings"))]
+        let _ = text;
         if embedding.is_some() {
             return embedding;
         }
@@ -721,6 +729,12 @@ impl Cortex {
         people: &PeopleGraph<'_>,
         pending_hashes: &[String],
     ) -> Result<PrepareOutcome, CortexError> {
+        if namespace == Some(crate::types::MUSE_EXPORT_NAMESPACE) {
+            return Err(CortexError::InvalidInput(format!(
+                "namespace '{}' is reserved for `cortex-mcp-server gateway allow`",
+                crate::types::MUSE_EXPORT_NAMESPACE
+            )));
+        }
         let mut source = MemSource::new(channel);
         let embedding = self.auto_embed(text, embedding);
 

{cortex_ai_memory-2.2.1 → cortex_ai_memory-2.3.0}/cortex-core/src/sync/merge.rs

@@ -38,6 +38,12 @@ pub fn apply_op(
                     "Remote device attempted to sync Private memory — rejected".into(),
                 ));
             }
+            // The Muse export is local consent; a peer must never be able to add to it.
+            if memory.namespace.as_deref() == Some(crate::types::MUSE_EXPORT_NAMESPACE) {
+                return Err(CortexError::InvalidInput(
+                    "Remote device attempted to write the reserved Muse export namespace — rejected".into(),
+                ));
+            }
 
             let entity_type = EntityType::Memory;
             let entity_id = memory.id;
@@ -323,6 +329,26 @@ mod tests {
         ts
     }
 
+    #[test]
+    fn test_peer_cannot_write_muse_export_namespace() {
+        use crate::types::{MemContent, MemObjectBuilder, MemSource, MemoryTier, PrivacyLevel, MUSE_EXPORT_NAMESPACE};
+        let s = SqliteStorage::open_in_memory().unwrap();
+        let idx = MemoryIndex::new();
+        let memory = MemObjectBuilder::new(MemoryTier::Semantic, MemContent::Text("injected".into()), MemSource::new("x"))
+            .privacy(PrivacyLevel::Public)
+            .namespace(MUSE_EXPORT_NAMESPACE)
+            .build();
+        let id = memory.id;
+        let op = SyncOp {
+            op_id: Uuid::new_v4(),
+            hlc: HlcTimestamp::new(100, 0, "dev-evil"),
+            payload: SyncPayload::MemoryUpsert { memory },
+            hmac: None,
+        };
+        assert!(apply_op(&op, &s, &idx).is_err());
+        assert!(s.get_memory(id).unwrap().is_none());
+    }
+
     #[test]
     fn test_belief_upsert_is_idempotent() {
         let s = SqliteStorage::open_in_memory().unwrap();

{cortex_ai_memory-2.2.1 → cortex_ai_memory-2.3.0}/cortex-core/src/types.rs

@@ -432,6 +432,11 @@ fn deserialize_arc_embedding<'de, D: serde::Deserializer<'de>>(
     Ok(opt.map(Arc::new))
 }
 
+/// Namespace reserved for memories the user explicitly exported to the Muse gateway
+/// (`cortex-mcp-server gateway allow`). Ordinary ingest and sync must never write into
+/// it: membership is the user's consent to disclose to a third-party cloud agent.
+pub const MUSE_EXPORT_NAMESPACE: &str = "muse-export";
+
 /// Compute SHA-256 hash of memory content for deduplication.
 pub fn compute_content_hash(content: &MemContent) -> String {
     let text = match content {

cortex_ai_memory-2.3.0/cortex-core/tests/test_reserved_namespace.rs

@@ -0,0 +1,35 @@
+//! The Muse export namespace is reserved: only `cortex-mcp-server gateway allow` may
+//! write it. Every ordinary ingest path must refuse.
+
+use cortex_core::types::{BatchIngestItem, MUSE_EXPORT_NAMESPACE};
+use cortex_core::Cortex;
+
+#[test]
+fn single_ingest_into_reserved_namespace_is_rejected() {
+    let c = Cortex::in_memory().unwrap();
+    let r = c.ingest_with_options("secret", "test", None, None, None, Some(MUSE_EXPORT_NAMESPACE), None);
+    assert!(r.is_err());
+    assert!(c.list_namespaces().unwrap().iter().all(|(ns, _)| ns != MUSE_EXPORT_NAMESPACE));
+}
+
+#[test]
+fn batch_ingest_never_writes_reserved_namespace() {
+    let c = Cortex::in_memory().unwrap();
+    let item = BatchIngestItem {
+        text: "secret".into(),
+        channel: "test".into(),
+        user_id: None,
+        salience_hint: None,
+        embedding: None,
+        namespace: Some(MUSE_EXPORT_NAMESPACE.into()),
+        privacy: None,
+    };
+    let _ = c.ingest_batch(vec![item]);
+    assert!(c.list_namespaces().unwrap().iter().all(|(ns, _)| ns != MUSE_EXPORT_NAMESPACE));
+}
+
+#[test]
+fn other_namespaces_still_work() {
+    let c = Cortex::in_memory().unwrap();
+    assert!(c.ingest_with_options("fine", "test", None, None, None, Some("work"), None).is_ok());
+}

{cortex_ai_memory-2.2.1 → cortex_ai_memory-2.3.0}/cortex-python/Cargo.toml

@@ -1,6 +1,6 @@
 [package]
 name = "cortex-python"
-version = "2.2.1"
+version = "2.3.0"
 edition = "2021"
 readme = "README.md"
 

{cortex_ai_memory-2.2.1 → cortex_ai_memory-2.3.0}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "maturin"
 
 [project]
 name = "cortex-ai-memory"
-version = "2.2.1"
+version = "2.3.0"
 description = "Private. Free. Local. — Memory engine for personal AI agents."
 requires-python = ">=3.9"
 license = "MIT"