chore(openmemory-js): security & test hardening (P1+P2 close-out)#172

Merged

nullure merged 23 commits into

CaviraOSS:mainfrom

machj8968-lab:feat/openmemory-js-hardening-2026-04

May 15, 2026

Commits on Apr 27, 2026

chore(openmemory-js): add vitest scaffolding and fix migrate script

authored and
AI
committed
test(openmemory-js): port ad-hoc tsx scripts to vitest specs

authored and
AI
committed
fix(openmemory-js): add SQL identifier and PG SSL safety helpers

AI
authored and
AI
committed
fix(openmemory-js/core/db): harden TLS, identifiers, init failures, FKs

AI
authored and
AI
committed
fix(openmemory-js/core/migrate): validate identifiers and reuse SSL helper

AI
authored and
AI
committed
fix(openmemory-js/core/vector/postgres): canonical default and validation

AI
authored and
AI
committed
fix(openmemory-js/temporal_graph): backend-portable confidence decay

AI
authored and
AI
committed
fix(server): fail-closed auth, tenant identity, JSON body, telemetry logs

authored and
AI
committed
fix(routes): derive user_id from req.tenant, validate input, surface errors

authored and
AI
committed
fix(routes): HMAC-verify source webhooks; tenant-scope temporal facts

authored and
AI
committed
merge: storage/DB hardening (Worktree B)

authored and
AI
committed
merge: test infrastructure (Worktree C)

authored and
AI
committed
merge: HTTP/auth hardening (Worktree A)

authored and
AI
committed
fix(openmemory-js/server): surface DbInitError as fatal exit

authored and
AI
committed
chore(openmemory-js): apply prettier --write across src and tests

AI
authored and
AI
committed
test(openmemory-js): un-skip verify spec via classifier snapshot

AI
authored and
AI
committed
fix(openmemory-js/temporal_graph): require user_id via options-bag

AI
authored and
AI
committed
fix(openmemory-js): drop JS-side tenant filter, quarantine orphans

AI
authored and
AI
committed
test(openmemory-js): pin webhook HMAC verifier behaviour

AI
authored and
AI
committed
chore(openmemory-js): port server.js to TypeScript and disable allowJs

AI
authored and
AI
committed
merge(openmemory-js): Phase 4 server.ts port + webhook test

AI
authored and
AI
committed
chore(openmemory-js): apply prettier --write to phase 2/3 additions

authored and
AI
committed
merge: compose user_id (this PR) and project_id (#171) isolation

machj8968-lab
and
claude
committed

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

chore(openmemory-js): security & test hardening (P1+P2 close-out)#172

chore(openmemory-js): security & test hardening (P1+P2 close-out)#172
nullure merged 23 commits into
CaviraOSS:mainfrom
machj8968-lab:feat/openmemory-js-hardening-2026-04

Commits on Apr 27, 2026

chore(openmemory-js): add vitest scaffolding and fix migrate script

test(openmemory-js): port ad-hoc tsx scripts to vitest specs

fix(openmemory-js): add SQL identifier and PG SSL safety helpers

fix(openmemory-js/core/db): harden TLS, identifiers, init failures, FKs

fix(openmemory-js/core/migrate): validate identifiers and reuse SSL helper

fix(openmemory-js/core/vector/postgres): canonical default and validation

fix(openmemory-js/temporal_graph): backend-portable confidence decay

fix(server): fail-closed auth, tenant identity, JSON body, telemetry logs

fix(routes): derive user_id from req.tenant, validate input, surface errors

fix(routes): HMAC-verify source webhooks; tenant-scope temporal facts

merge: storage/DB hardening (Worktree B)

merge: test infrastructure (Worktree C)

merge: HTTP/auth hardening (Worktree A)

fix(openmemory-js/server): surface DbInitError as fatal exit

chore(openmemory-js): apply prettier --write across src and tests

test(openmemory-js): un-skip verify spec via classifier snapshot

fix(openmemory-js/temporal_graph): require user_id via options-bag

fix(openmemory-js): drop JS-side tenant filter, quarantine orphans

test(openmemory-js): pin webhook HMAC verifier behaviour

chore(openmemory-js): port server.js to TypeScript and disable allowJs

merge(openmemory-js): Phase 4 server.ts port + webhook test

chore(openmemory-js): apply prettier --write to phase 2/3 additions

merge: compose user_id (this PR) and project_id (#171) isolation