Expose the Graphiti rollout gate through authorized memory scope

Author: Sg312

apps/sim/lib/core/config/feature-flags.ts

@@ -69,7 +69,7 @@ const FEATURE_FLAGS = {
     fallback: 'MSHIP_MODEL_SELECTOR',
   },
   'mothership-memory-spaces': {
-    description: 'Create and select private knowledge graphs for new Mothership chats.',
+    description: 'Enable private Graphiti memory and its graph-management settings in Mothership.',
     fallback: null,
   },
   'mothership-plan-mode': {

apps/sim/lib/mothership/feature-flags.ts

@@ -15,7 +15,7 @@ export function isSearchIntegrationToolsEnabled(): Promise<boolean> {
   return isFeatureEnabled('mothership-search-integration-tools')
 }
 
-/** Graph management is enabled only through AppConfig. */
+/** One AppConfig gate controls private Graphiti memory and graph management. */
 export function isMemorySpacesEnabled(): Promise<boolean> {
   return isFeatureEnabled('mothership-memory-spaces')
 }

apps/sim/lib/mothership/generated/memory-scope.ts

@@ -6,6 +6,7 @@ import { z } from "zod";
 export const MemoryScopeRequest = z.object({ chatId: z.uuid() });
 export type MemoryScopeRequest = z.infer<typeof MemoryScopeRequest>;
 export const MemoryScopeResponse = z.object({
+  enabled: z.boolean().default(false),
   userId: z.string().min(1),
   organizationId: z.string().min(1).nullable(),
   workspaceId: z.uuid().nullable(),

apps/sim/lib/mothership/memory/application/read-scope.test.ts

@@ -2,6 +2,7 @@
 import { copilotChats, member, workspace } from '@sim/db/schema'
 import { queueTableRows, resetDbChainMock } from '@sim/testing'
 import { authBanMock, authBanMockFns } from '@sim/testing/mocks/auth-ban.mock'
+import { featureFlagsMock, featureFlagsMockFns } from '@sim/testing/mocks/feature-flags.mock'
 import {
   permissionGroupsResolveMock,
   permissionGroupsResolveMockFns,
@@ -21,6 +22,7 @@ vi.mock('@/lib/permission-groups/capability-assertions', async (importOriginal)
   ...(await importOriginal<typeof import('@/lib/permission-groups/capability-assertions')>()),
   assertWorkspaceCapability: mocks.capability,
 }))
+vi.mock('@/lib/core/config/feature-flags', () => featureFlagsMock)
 const input = { chatId: 'chat-1' }
 function principal() {
   return createTrustedOrganizationCopilotPrincipal(
@@ -37,6 +39,7 @@ function queueChat(mode = 'plan', membership = true) {
 describe('private memory scope', () => {
   beforeEach(() => {
     resetDbChainMock()
+    featureFlagsMockFns.mockIsFeatureEnabled.mockResolvedValue(true)
     authBanMockFns.mockGetActivelyBannedUserIds.mockResolvedValue([])
     permissionGroupsResolveMockFns.mockGetUserPermissionConfigForOrganization.mockResolvedValue(
       null
@@ -47,11 +50,33 @@ describe('private memory scope', () => {
   it.each(['plan', 'agent'])('resolves the current %s chat owner', async (mode) => {
     queueChat(mode)
     expect(await readMemoryScope.execute({ principal: principal(), input })).toEqual({
+      enabled: true,
       userId: 'actor',
       organizationId: 'org-1',
       workspaceId: null,
     })
   })
+  it('reports Graphiti disabled independently of the chat mode and preserves its graph binding', async () => {
+    featureFlagsMockFns.mockIsFeatureEnabled.mockResolvedValue(false)
+    queueTableRows(copilotChats, [
+      {
+        userId: 'actor',
+        organizationId: 'org-1',
+        workspaceId: null,
+        type: 'mothership',
+        mode: 'plan',
+        memorySpaceId: 'saved-graph',
+      },
+    ])
+    queueTableRows(member, [{ role: 'member' }])
+    expect(await readMemoryScope.execute({ principal: principal(), input })).toEqual({
+      enabled: false,
+      userId: 'actor',
+      organizationId: 'org-1',
+      workspaceId: null,
+      spaceId: 'saved-graph',
+    })
+  })
   it.each(['user', 'organization', 'chat', 'audience', 'expired'] as const)(
     'rejects forged %s',
     async (field) => {
@@ -105,6 +130,7 @@ describe('private memory scope', () => {
     )
     queueWorkspace()
     expect(await readMemoryScope.execute({ principal: caller, input })).toEqual({
+      enabled: true,
       userId: 'actor',
       organizationId: 'canonical-org',
       workspaceId: 'workspace',

apps/sim/lib/mothership/memory/application/read-scope.ts

@@ -4,6 +4,7 @@ import { defineOrganizationOperation } from '@/lib/core/application/organization
 import { OrchestrationError } from '@/lib/core/orchestration/types'
 import { defineAuthorizedChatUseCase } from '@/lib/mothership/chat/application/authorized-chat-use-case'
 import { resolveOwnedChatContext } from '@/lib/mothership/chat/application/context'
+import { isMemorySpacesEnabled } from '@/lib/mothership/feature-flags'
 import type { MemoryScopeRequest } from '@/lib/mothership/generated/memory-scope'
 import { requireOwnedMemorySpace } from '@/lib/mothership/memory/spaces'
 
@@ -48,15 +49,17 @@ export const readMemoryScope = defineAuthorizedChatUseCase({
     if (context.mode !== 'agent' && context.mode !== 'plan') {
       throw new OrchestrationError('forbidden', 'Private memory requires an interactive agent chat')
     }
+    const enabled = await isMemorySpacesEnabled()
     const organizationId = context.organizationId ?? context.workspaceOrganizationId ?? null
-    if (context.memorySpaceId) {
+    if (enabled && context.memorySpaceId) {
       if (!organizationId) throw new OrchestrationError('not_found', 'Knowledge graph not found')
       await requireOwnedMemorySpace(
         { userId: context.userId, organizationId },
         context.memorySpaceId
       )
     }
     return {
+      enabled,
       ...(context.memorySpaceId ? { spaceId: context.memorySpaceId } : {}),
       userId: context.userId,
       organizationId: context.organizationId ?? context.workspaceOrganizationId ?? null,

apps/sim/lib/mothership/memory/application/spaces.integration.ts

@@ -229,7 +229,7 @@ describe('private KG selection through authorized application boundaries', () =>
       expect(after.spaces.some((space) => space.id === row.activeSpaceId)).toBe(true)
   })
 
-  it('disabling management preserves bound graphs and makes new chats use Default', async () => {
+  it('disabling Graphiti preserves bound graphs for reactivation and makes new chats use Default', async () => {
     const selected = await create('Flag lifecycle')
     const chat = await createOrganizationChat.execute({
       principal: principal(),
@@ -240,7 +240,10 @@ describe('private KG selection through authorized application boundaries', () =>
       await expect(list()).rejects.toMatchObject({ code: 'not_found' })
       await expect(create('Hidden')).rejects.toMatchObject({ code: 'not_found' })
       await expect(select(null)).rejects.toMatchObject({ code: 'not_found' })
-      expect((await scope(chat.id)).spaceId).toBe(selected.activeSpaceId)
+      expect(await scope(chat.id)).toMatchObject({
+        enabled: false,
+        spaceId: selected.activeSpaceId,
+      })
       const next = await createOrganizationChat.execute({
         principal: principal(),
         input: { ...input, mode: 'plan' },
@@ -249,6 +252,11 @@ describe('private KG selection through authorized application boundaries', () =>
     } finally {
       gate.enabled = true
     }
+    expect(await scope(chat.id)).toMatchObject({ enabled: true, spaceId: selected.activeSpaceId })
+    expect((await list()).spaces).toContainEqual({
+      id: selected.activeSpaceId,
+      name: 'Flag lifecycle',
+    })
   })
 
   it('rejects a foreign binding and rechecks membership before reading memory', async () => {