Document grant-tag access and quiet public vendor names - #26
Merged
TheGreatAxios merged 11 commits intoAug 5, 2026
Merged
Conversation
Align PRODUCT, README, ARCHITECTURE, IMPLEMENTATION, MIGRATION, CHANGELOG, and AUTHZ-DOCUMENT-ACCESS with access_tags + creator and share sugars. Public product surface speaks only of DocumentStore and host stores; third-party memory vendor names stay in packages/* adapter plugins only.
3 tasks
Fleet review (grant-tag tip): make multi-user share honest — tag minting is not grant minting; hosts must bootstrap find on knowledge.owner:<self>. Remove invented share.private sugar from MIGRATION; drop stale "visibility logic" wording in IMPLEMENTATION.
File and imports only — same resolveAccessTags / canAccessDocument API. Matches grant-tag product language; drops the mini-ACL filename.
Hard cutover: createMemory / mountMemory, Memory types, /api/memory routes, memory:add and memory:find grants, memory.* access tags. Side-channel is memoryProvider. Postgres schema knowledge stays for stability.
Remove packages/knowledge-adapter-mem0 and packages/knowledge-adapter-supermemory from this monorepo. Point PRODUCT/README/AGENTS/IMPLEMENTATION at sibling @corbits/mem0 and @corbits/supermemory (granola/linear layout). Staging dirs ignored (.staging-*/). Local extracts live at abklabs/corbits-mem0 and abklabs/corbits-supermemory.
createMemory({ grants, config?, documentStore?, ... }) only — no undefined
config slot. Docs/package links point at @corbits/mem0-memory-adapter,
@corbits/supermemory-memory-adapter, and @corbits/linear-tools.
Replace mountMemory/grants fragments with a complete Hono + @intx/authz in-memory grant store + fakes example (in-process and HTTP), plus curl and a short production-host note.
Drop the nested grants bag so hosts pass the same top-level fields Interchange hubs already have. resolveGrantConfig remains for route composition. Docs and tests updated; typecheck + src tests green.
Hard cutover for CL-5349: find→search, recent→list; remove ask, remember, recall, MemoryProvider, and generate from the product plane. HTTP grants are memory:add | memory:search. README/PRODUCT updated.
Scrub PRODUCT, MIGRATION, ARCHITECTURE, CHANGELOG, IMPLEMENTATION, AGENTS, and AUTHZ-DOCUMENT-ACCESS so grants, HTTP paths, and plane verbs match the hard cutover (no ask/find/recent product path).
Document-tag and capability checks use action search, not find.
TheGreatAxios
marked this pull request as ready for review
August 5, 2026 05:24
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Summary
Docs + public surface for the grant-tag cutover (depends on #25).
Covers Linear:
packages/*docs/AUTHZ-DOCUMENT-ACCESS.md(CL-5254 product direction)Changes
docs/AUTHZ-DOCUMENT-ACCESS.mdTest plan
Stack: base → … → #25 → #26