aaronrene / knowtation public
feat BREAKING 2F-b-d-kn-b feat/phase-2f-b-d-kn-media-write-surfaces #2 / 3
aaronrene · 20 days ago · Jul 3, 2026 · Diff

feat(2F-b-d-kn-b): implement canonical media write surfaces (gates default off)

Wire SD-4 facades for media_external_link and media_attach across Hub, CLI, and MCP with connector allowlist, import consent, external-ref read join, and seven-tier tests — both MEDIA_* gates remain off until separate Tier 3 sessions.

sha256:db5adf05ae4fbd96d4863ebf77c4b5aaf8d5875720988c964eba9a23bcf76fe3 sha
sha256:c4ab1e50cacce1da39aab6a9ef13e4b141453e5acff02fdab38740549843ccf2 parent
+53 ~6 symbols
sha256:338ad3ed1e3a9bf69e535146f3cd4757fc07cf6c07c4b91226b9ea94f1b0b454 snapshot
+53
symbols added
~6
symbols modified
0
dead code introduced
Semantic Changes 59 symbols
+ test/fixtures/media/
~ lib/attachments/attachment-external-ref-store.mjs .mjs 6 symbols added
+ getExternalRef function function getExternalRef L100–104
+ getExternalRefStorePath function function getExternalRefStorePath L34–36
+ getVaultExternalRefs function function getVaultExternalRefs L85–92
+ loadExternalRefStore function function loadExternalRefStore L42–59
+ saveExternalRefStore function function saveExternalRefStore L65–78
+ upsertExternalRef function function upsertExternalRef L114–134
~ lib/attachments/attachment-write.mjs .mjs 23 symbols added
+ buildMediaProposalEnvelope function function buildMediaProposalEnvelope L251–269
+ createProposalRecord function async_function createProposalRecord L199–201
+ deriveLinkAttachmentId function function deriveLinkAttachmentId L123–130
+ envTriState function function envTriState L59–63
+ getMediaAttachEnabled function function getMediaAttachEnabled L103–107
+ getMediaExternalLinkEnabled function function getMediaExternalLinkEnabled L93–97
+ handleMediaAttachProposeRequest function async_function handleMediaAttachProposeRequest L412–547
+ handleMediaImportConsentGrantRequest function function handleMediaImportConsentGrantRequest L554–626
+ handleMediaImportConsentListRequest function function handleMediaImportConsentListRequest L633–671
+ handleMediaImportConsentRevokeRequest function function handleMediaImportConsentRevokeRequest L678–714
+ handleMediaLinkProposeRequest function async_function handleMediaLinkProposeRequest L276–405
+ mediaProposalMirrorPath function function mediaProposalMirrorPath L176–178
+ notePathFromRef function function notePathFromRef L168–170
+ parseMediaProposalBody function function parseMediaProposalBody L720–727
+ precheckApprovedMediaProposal function function precheckApprovedMediaProposal L736–828
+ readMediaWritePolicyFile function function readMediaWritePolicyFile L69–87
+ reconcileApprovedMediaProposal function function reconcileApprovedMediaProposal L836–877
+ refuse function function refuse L114–116
+ resolveAttachmentWriteAuthority function function resolveAttachmentWriteAuthority L136–155
+ resolveMediaPointerForAttach function function resolveMediaPointerForAttach L209–246
+ resolveWriteScopes function function resolveWriteScopes L160–162
+ updateProposalPath function function updateProposalPath L184–193
+ walkNotes function function walkNotes L212–242
~ lib/attachments/media-connector-policy.mjs .mjs 5 symbols added
+ getEnabledConnector function function getEnabledConnector L100–105
+ getMediaConnectorPolicyPath function function getMediaConnectorPolicyPath L34–36
+ getVaultConnectors function function getVaultConnectors L85–92
+ loadMediaConnectorPolicy function function loadMediaConnectorPolicy L42–59
+ saveMediaConnectorPolicy function function saveMediaConnectorPolicy L65–78
~ lib/attachments/media-import-consent.mjs .mjs 6 symbols added
+ getActiveConsent function function getActiveConsent L95–114
+ getMediaImportConsentPath function function getMediaImportConsentPath L36–38
+ listVaultConsents function function listVaultConsents L122–134
+ loadMediaImportConsentStore function function loadMediaImportConsentStore L44–61
+ mintConsentId function function mintConsentId L83–85
+ saveMediaImportConsentStore function function saveMediaImportConsentStore L67–80
~ scripts/verify-media-write-smoke.mjs .mjs 5 symbols added
+ api function async_function api L52–66
+ headers function function headers L41–50
+ main function async_function main L68–115
+ record function function record L36–39
+ resolveToken function function resolveToken L19–27
~ test/fixtures/media/write-helpers.mjs .mjs 6 symbols added
+ approveMediaProposal function function approveMediaProposal L92–99
+ buildMediaWriteFixture function function buildMediaWriteFixture L30–47
+ grantActiveConsent function function grantActiveConsent L74–84
+ sampleAttachProposeBody function function sampleAttachProposeBody L122–130
+ sampleLinkProposeBody function function sampleLinkProposeBody L104–116
+ seedConnectorAllowlist function function seedConnectorAllowlist L54–66
+ test/media-write-data-integrity.test.mjs .mjs
+ test/media-write-e2e.test.mjs .mjs
~ test/media-write-parity-integration.test.mjs .mjs 2 symbols added
+ registerTool method method registerTool L115–117
+ stripVolatile function function stripVolatile L26–30
+ test/media-write-performance.test.mjs .mjs
+ test/media-write-security.test.mjs .mjs
+ test/media-write-stress.test.mjs .mjs
+ test/media-write-unit.test.mjs .mjs
~ cli/index.mjs .mjs 1 symbol modified
~ main
~ docs/openapi.yaml .yaml
~ hub/gateway/mcp-tool-acl.mjs .mjs
~ hub/proposals-store.mjs .mjs 1 symbol modified
~ createProposal
~ hub/server.mjs .mjs
~ lib/attachments/attachment-store.mjs .mjs 3 symbols modified
~ deriveAllAttachments
~ deriveFromNote
~ isAttachmentNoteVisible
~ mcp/tools/attachment.mjs .mjs 1 symbol modified
~ registerAttachmentTools
~ test/attachment-store-security.test.mjs .mjs
~ test/attachment-store-unit.test.mjs .mjs
Older docs(2F-b-d-kn-a): freeze canonical media write surfaces contract sha256:c4ab1e50cacce1da39aab6a9ef13e4b141453e5acff02fdab38740549843ccf2 All commits Newer docs(2F-b-d-kn-b): handover — build DONE; next 2F-b-d-kn-c exter… sha256:3690634d0b618655b9f4b8ed2ce88051f61e71c8c6664e0ae53f90c0d98c63d7

0 comments

No comments yet. Be the first to start the discussion.

To add a comment, use the Muse CLI: muse hub commit comment sha256:db5adf05ae4fbd96d4863ebf77c4b5aaf8d5875720988c964eba9a23bcf76fe3 --body "your comment"