fix(memory): scope operator plugin retrieval

docs/tess/M4-003-OPERATOR-PLUGIN-SKETCH.md

@@ -2,7 +2,7 @@
 
 ## Memory/retrieval slice — TESS-MEM-001
 
-Introduce a transport-neutral `OperatorMemoryPlugin` in `packages/memory`. The plugin receives a server-derived `{tenantId, ownerId, sessionId}` scope and delegates to a registered `MemoryAdapter`; callers cannot select an adapter or namespace. Its operations are `capture`, `search`, `recent`, `stats`, and `startupContext`. Results carry provenance and namespace metadata. Capture/redaction occurs before adapter persistence; startup context is bounded and ordered so project/flat-file truth can take precedence over retrieved material.
+Introduce a transport-neutral `OperatorMemoryPlugin` in `packages/memory`. The plugin receives a server-derived `{tenantId, ownerId, sessionId}` scope and delegates to a registered `MemoryAdapter`; adapter and namespace are injected configuration, never caller input. Its operations are `capture`, `search`, `recent`, `stats`, and `startupContext`. Results carry configured instance, provenance, and namespace metadata. Capture/redaction occurs before adapter persistence; startup context is bounded and ordered so project/flat-file truth can take precedence over retrieved material.
 
 Registration remains replaceable-adapter based: `registerOperatorMemoryAdapter(kind, factory)` and `createOperatorMemoryPlugin(config)` resolve a configured adapter. Identity and namespace are configuration/scope data; no interaction-agent name is embedded in keys or defaults.
 

packages/memory/src/operator-memory-plugin.test.ts

@@ -1,12 +1,19 @@
 import { describe, expect, it, vi } from 'vitest';
 import { createOperatorMemoryPlugin } from './operator-memory-plugin.js';
+import type { Insight, InsightSearchResult, NewInsight } from './types.js';
 
 function adapter() {
   return {
     name: 'test',
     embedder: null,
-    storeInsight: vi.fn(async (value) => ({ ...value, id: '1', createdAt: new Date() })),
+    storeInsight: vi.fn(
-    searchInsights: vi.fn(async () => []),
+      async (value: NewInsight): Promise<Insight> => ({
+        ...value,
+        id: '1',
+        createdAt: new Date(),
+      }),
+    ),
+    searchInsights: vi.fn(async (): Promise<InsightSearchResult[]> => []),
     getInsight: vi.fn(),
     deleteInsight: vi.fn(),
     getPreference: vi.fn(),
@@ -18,24 +25,33 @@ function adapter() {
 }
 
 describe('OperatorMemoryPlugin', () => {
-  it('isolates adapter identity by server-derived tenant, owner, and namespace', async () => {
+  it('isolates configured namespace storage across server-derived tenant, owner, and session scopes', async () => {
     const memory = adapter();
     const plugin = createOperatorMemoryPlugin({
       adapter: memory,
       instanceId: 'Nova',
-      redact: (v) => v,
+      namespace: 'operator-memory',
+      redact: (value) => value,
     });
     await plugin.capture(
-      { tenantId: 'tenant-a', ownerId: 'owner-a', sessionId: 's', namespace: 'private' },
+      { tenantId: 'tenant-a', ownerId: 'owner-a', sessionId: 'session-a' },
       { content: 'one', source: 'test', category: 'note' },
     );
     await plugin.capture(
-      { tenantId: 'tenant-b', ownerId: 'owner-a', sessionId: 's', namespace: 'private' },
+      { tenantId: 'tenant-b', ownerId: 'owner-a', sessionId: 'session-a' },
       { content: 'two', source: 'test', category: 'note' },
     );
-    expect(memory.storeInsight.mock.calls.map((call: unknown[]) => call[0].userId)).toEqual([
+    await plugin.capture(
-      'tenant-a:owner-a:private',
+      { tenantId: 'tenant-a', ownerId: 'owner-a', sessionId: 'session-b' },
-      'tenant-b:owner-a:private',
+      { content: 'three', source: 'test', category: 'note' },
+    );
+
+    expect(
+      memory.storeInsight.mock.calls.map((call: unknown[]) => (call[0] as NewInsight).userId),
+    ).toEqual([
+      '["operator-memory","tenant-a","owner-a","session-a"]',
+      '["operator-memory","tenant-b","owner-a","session-a"]',
+      '["operator-memory","tenant-a","owner-a","session-b"]',
     ]);
   });
 
@@ -47,12 +63,42 @@ describe('OperatorMemoryPlugin', () => {
     const plugin = createOperatorMemoryPlugin({
       adapter: memory,
       instanceId: 'Nova',
-      redact: (v) => v,
+      namespace: 'operator-memory',
+      redact: (value) => value,
     });
-    const results = await plugin.search(
+
-      { tenantId: 't', ownerId: 'o', sessionId: 's', namespace: 'n' },
+    const results = await plugin.search({ tenantId: 't', ownerId: 'o', sessionId: 's' }, 'x');
-      'x',
+
+    expect(results[0]?.provenance).toEqual({
+      instanceId: 'Nova',
+      namespace: 'operator-memory',
+      source: 'project',
+    });
+  });
+
+  it('redacts content before adapter persistence and records configured provenance metadata', async () => {
+    const memory = adapter();
+    const plugin = createOperatorMemoryPlugin({
+      adapter: memory,
+      instanceId: 'Nova',
+      namespace: 'operator-memory',
+      redact: (value) => value.replace('secret', '[REDACTED]'),
+    });
+
+    await plugin.capture(
+      { tenantId: 'tenant-a', ownerId: 'owner-a', sessionId: 'session-a' },
+      { content: 'secret note', source: 'project', category: 'note' },
+    );
+
+    expect(memory.storeInsight).toHaveBeenCalledWith(
+      expect.objectContaining({
+        content: '[REDACTED] note',
+        metadata: {
+          instanceId: 'Nova',
+          namespace: 'operator-memory',
+          source: 'project',
+        },
+      }),
     );
-    expect(results[0]?.provenance.instanceId).toBe('Nova');
   });
 });

packages/memory/src/operator-memory-plugin.ts

@@ -2,16 +2,19 @@ import type { Insight, InsightSearchResult, MemoryAdapter } from './types.js';
 
 /** Immutable server-derived boundary; callers never choose an adapter namespace. */
 export interface OperatorMemoryScope {
-  tenantId: string;
+  readonly tenantId: string;
-  ownerId: string;
+  readonly ownerId: string;
-  sessionId: string;
+  readonly sessionId: string;
-  namespace: string;
 }
 
 export interface OperatorMemoryConfig {
-  adapter: MemoryAdapter;
+  /** Adapter injection is deployment/lifecycle configuration, never caller input. */
-  instanceId: string;
+  readonly adapter: MemoryAdapter;
-  maxStartupContext?: number;
+  /** Configured agent identity; it is metadata rather than a storage key default. */
+  readonly instanceId: string;
+  /** Configured storage partition; callers cannot select a namespace. */
+  readonly namespace: string;
+  readonly maxStartupContext?: number;
   redact(content: string): string;
 }
 
@@ -34,20 +37,32 @@ export interface OperatorMemoryPlugin {
   startupContext(scope: OperatorMemoryScope): Promise<OperatorMemoryResult[]>;
 }
 
-function scopedUserId(scope: OperatorMemoryScope): string {
+function scopedUserId(scope: OperatorMemoryScope, namespace: string): string {
-  return `${scope.tenantId}:${scope.ownerId}:${scope.namespace}`;
+  // JSON tuple encoding avoids delimiter collisions between independently scoped IDs.
+  return JSON.stringify([namespace, scope.tenantId, scope.ownerId, scope.sessionId]);
+}
+
+function normalizeConfig(config: OperatorMemoryConfig): OperatorMemoryConfig {
+  const instanceId = config.instanceId.trim();
+  const namespace = config.namespace.trim();
+  const maxStartupContext = config.maxStartupContext ?? 8;
+  if (instanceId.length === 0 || namespace.length === 0) {
+    throw new Error('Operator memory instance ID and namespace must be configured');
+  }
+  if (!Number.isSafeInteger(maxStartupContext) || maxStartupContext < 1) {
+    throw new Error('Operator memory startup context limit must be a positive integer');
+  }
+  return Object.freeze({ ...config, instanceId, namespace, maxStartupContext });
 }
 
 /** Creates a leaf-package, replaceable memory adapter facade. */
 export function createOperatorMemoryPlugin(config: OperatorMemoryConfig): OperatorMemoryPlugin {
-  const mapResult = (
+  const pluginConfig = normalizeConfig(config);
-    scope: OperatorMemoryScope,
+  const mapResult = (result: InsightSearchResult): OperatorMemoryResult => ({
-    result: InsightSearchResult,
-  ): OperatorMemoryResult => ({
     ...result,
     provenance: {
-      instanceId: config.instanceId,
+      instanceId: pluginConfig.instanceId,
-      namespace: scope.namespace,
+      namespace: pluginConfig.namespace,
       source: String(result.metadata?.['source'] ?? 'retrieval'),
     },
   });
@@ -56,18 +71,28 @@ export function createOperatorMemoryPlugin(config: OperatorMemoryConfig): Operat
     query: string,
     limit = 10,
   ): Promise<OperatorMemoryResult[]> =>
-    (await config.adapter.searchInsights(scopedUserId(scope), query, { limit })).map((result) =>
+    (
-      mapResult(scope, result),
+      await pluginConfig.adapter.searchInsights(
-    );
+        scopedUserId(scope, pluginConfig.namespace),
+        query,
+        {
+          limit,
+        },
+      )
+    ).map(mapResult);
   return {
     async capture(scope, input) {
       return config.adapter.storeInsight({
-        userId: scopedUserId(scope),
+        userId: scopedUserId(scope, pluginConfig.namespace),
-        content: config.redact(input.content),
+        content: pluginConfig.redact(input.content),
         source: input.source,
         category: input.category,
         relevanceScore: 1,
-        metadata: { namespace: scope.namespace, instanceId: config.instanceId },
+        metadata: {
+          namespace: pluginConfig.namespace,
+          instanceId: pluginConfig.instanceId,
+          source: input.source,
+        },
       });
     },
     search,
@@ -75,10 +100,13 @@ export function createOperatorMemoryPlugin(config: OperatorMemoryConfig): Operat
       return search(scope, '*', limit);
     },
     async stats(scope) {
-      return { namespace: scope.namespace, resultCount: (await search(scope, '*', 100)).length };
+      return {
+        namespace: pluginConfig.namespace,
+        resultCount: (await search(scope, '*', 100)).length,
+      };
     },
     async startupContext(scope) {
-      return search(scope, '*', config.maxStartupContext ?? 8);
+      return search(scope, '*', pluginConfig.maxStartupContext);
     },
   };
 }