Merge branch 'main' into ship/gravity-slider-1to1

Author: Coding-Dev-Tools

.github/workflows/codeql.yml

@@ -28,14 +28,14 @@ jobs:
     steps:
       - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7
       - name: Initialize CodeQL
-        uses: github/codeql-action/init@ff2f1c621b7f889edc0d3c761ac2e6a3f8cdb0dd # v4
+        uses: github/codeql-action/init@db488ddef3bf6cb639b32c2e9a7c0a7ea8271d28 # v4
         with:
           languages: ${{ matrix.language }}
           build-mode: none
           config-file: ./.github/codeql/codeql-config.yml
       - name: Analyze
         id: analyze
-        uses: github/codeql-action/analyze@ff2f1c621b7f889edc0d3c761ac2e6a3f8cdb0dd # v4
+        uses: github/codeql-action/analyze@db488ddef3bf6cb639b32c2e9a7c0a7ea8271d28 # v4
         with:
           output: codeql-results
       - name: Require clean CodeQL results

.github/workflows/release.yml

@@ -678,14 +678,14 @@ jobs:
         with:
           python-version: "3.11"
       - name: Initialize CodeQL
-        uses: github/codeql-action/init@ff2f1c621b7f889edc0d3c761ac2e6a3f8cdb0dd # v4
+        uses: github/codeql-action/init@db488ddef3bf6cb639b32c2e9a7c0a7ea8271d28 # v4
         with:
           languages: ${{ matrix.language }}
           build-mode: none
           config-file: ./.github/codeql/codeql-config.yml
       - name: Analyze complete source tree
         id: analyze
-        uses: github/codeql-action/analyze@ff2f1c621b7f889edc0d3c761ac2e6a3f8cdb0dd # v4
+        uses: github/codeql-action/analyze@db488ddef3bf6cb639b32c2e9a7c0a7ea8271d28 # v4
         with:
           output: codeql-results
           upload: never

pyproject.toml

@@ -98,7 +98,7 @@ mcp = [
 code = [
     "tree-sitter>=0.23; python_version >= '3.10'",
     "tree-sitter-language-pack==0.9.0; python_version < '3.10'",
-    "tree-sitter-language-pack==1.14.3; python_version >= '3.10'",
+    "tree-sitter-language-pack==1.15.8; python_version >= '3.10'",
 ]
 # Local resource extraction. Text/code/HTML/DOCX remain stdlib-only; this adds PDF
 # extraction and image OCR bindings (the Tesseract executable is installed separately).
@@ -145,7 +145,7 @@ all = [
     "cryptography>=50.0.0; python_version >= '3.10'",
     "tree-sitter>=0.23; python_version >= '3.10'",
     "tree-sitter-language-pack==0.9.0; python_version < '3.10'",
-    "tree-sitter-language-pack==1.14.3; python_version >= '3.10'",
+    "tree-sitter-language-pack==1.15.8; python_version >= '3.10'",
     "pypdf>=6.15.0",
     "Pillow>=12.3.0; python_version >= '3.10'",
     "pytesseract>=0.3.10; python_version >= '3.10'",
@@ -188,7 +188,7 @@ test = [
     "cryptography>=50.0.0; python_version >= '3.10'",
     "tree-sitter>=0.23; python_version >= '3.10'",
     "tree-sitter-language-pack==0.9.0; python_version < '3.10'",
-    "tree-sitter-language-pack==1.14.3; python_version >= '3.10'",
+    "tree-sitter-language-pack==1.15.8; python_version >= '3.10'",
     "pypdf>=6.15.0",
     "Pillow>=12.3.0; python_version >= '3.10'",
     "pytesseract>=0.3.10; python_version >= '3.10'",

tests/test_mcp_server.py

@@ -1231,3 +1231,38 @@ def test_smart_gateway_unknown_exception_never_leaks_internals(monkeypatch):
     assert parsed["error"]["code"] == "E_INTERNAL"
     assert "SECRET" not in parsed["error"]["message"]
     assert "/home/user" not in parsed["error"]["message"]
+
+
+def test_classic_remember_persists_subject_key_and_claim_kind_to_chain(monkeypatch):
+    """Classic engraphis_remember must persist subject_key/claim_kind to the chain.
+
+    Regression guard for the class binding that powers every direct Command Code
+    caller: the SMART gateway now carries subject_key/claim_kind (PR #171) but the
+    classic binding had no end-to-end test that exercised these parameters. A
+    direct call must (a) return a memory id, not a delegation envelope, and
+    (b) round-trip the subject/claim metadata through the inspect chain.
+    """
+    srv = _module_with_memory_db(monkeypatch)
+
+    response = srv.engraphis_remember(
+        content="The deployment timeout is 30 seconds.",
+        workspace="w",
+        subject_key="deploy.timeout",
+        claim_kind="configured_value",
+    )
+    assert not response.startswith("Error:"), response
+    payload = json.loads(response)
+    assert payload["op"] == "add"
+    assert isinstance(payload.get("id"), str) and payload["id"]
+    # The id must be a memory id, not a Smart gateway delegation envelope.
+    assert not payload["id"].startswith("del_"), payload["id"]
+
+    fetched = srv.engraphis_get_memory(memory_id=payload["id"], workspace="w")
+    assert not fetched.startswith("Error:"), fetched
+    fetched_payload = json.loads(fetched)
+    assert fetched_payload["id"] == payload["id"]
+    assert fetched_payload["chain"], "inspect must return a non-empty chain"
+    head = fetched_payload["chain"][0]
+    assert head["id"] == payload["id"]
+    assert head["subject_key"] == "deploy.timeout"
+    assert head["claim_kind"] == "configured_value"