@agentmemory/agentmemory 0.9.29 → 0.9.31

package/dist/secret-store-D9GwO0xp.mjs

@@ -0,0 +1,2449 @@
+import { a as KV, r as withKeyedLock, s as generateId } from "./keyed-mutex-DCUh7PG-.mjs";
+import { chmodSync, closeSync, existsSync, linkSync, mkdirSync, openSync, readFileSync, renameSync, unlinkSync, writeSync } from "node:fs";
+import { join } from "node:path";
+import { homedir } from "node:os";
+import pc from "picocolors";
+import { randomBytes } from "node:crypto";
+import { readFile, stat } from "node:fs/promises";
+//#region src/config.ts
+const MAX_IMPORT_OBS_PER_SESSION = 5e3;
+function safeParseInt(value, fallback) {
+	if (!value) return fallback;
+	const parsed = parseInt(value, 10);
+	return Number.isNaN(parsed) ? fallback : parsed;
+}
+const DATA_DIR = process.env["AGENTMEMORY_DATA_DIR"] || join(homedir(), ".agentmemory");
+const ENV_FILE = process.env["AGENTMEMORY_ENV_FILE"] || join(homedir(), ".agentmemory", ".env");
+let warnPremiumModelShown = false;
+let providerNoticeShown = false;
+let obsCapImportCeilingWarned = false;
+function writeProviderNoticeOnce(text) {
+	if (providerNoticeShown) return;
+	providerNoticeShown = true;
+	process.stderr.write(text);
+}
+let envFileCache;
+function loadEnvFile() {
+	if (envFileCache) return envFileCache;
+	if (!existsSync(ENV_FILE)) {
+		envFileCache = {};
+		return envFileCache;
+	}
+	envFileCache = parseEnvContent(readFileSync(ENV_FILE, "utf-8"));
+	return envFileCache;
+}
+function parseEnvContent(content) {
+	const vars = {};
+	for (const line of content.split("\n")) {
+		const trimmed = line.trim();
+		if (!trimmed || trimmed.startsWith("#")) continue;
+		const eqIdx = trimmed.indexOf("=");
+		if (eqIdx === -1) continue;
+		const key = trimmed.slice(0, eqIdx).trim();
+		let val = trimmed.slice(eqIdx + 1).trim();
+		const quoteChar = val[0] === "\"" || val[0] === "'" ? val[0] : "";
+		if (quoteChar) {
+			const closeIdx = val.indexOf(quoteChar, 1);
+			if (closeIdx !== -1) val = val.slice(1, closeIdx);
+		} else {
+			const hashIdx = val.indexOf(" #");
+			if (hashIdx !== -1) val = val.slice(0, hashIdx).trim();
+		}
+		vars[key] = val;
+	}
+	return vars;
+}
+function hasRealValue(v) {
+	return typeof v === "string" && v.trim().length > 0;
+}
+function hydrateProcessEnvFromFile() {
+	const beforeHydration = { ...process.env };
+	for (const [k, v] of Object.entries(loadEnvFile())) if (process.env[k] === void 0) process.env[k] = v;
+	return beforeHydration;
+}
+function warnIfPremiumModel(env, envName, model) {
+	if (warnPremiumModelShown || !/sonnet|opus|gpt-5\.\d+-sol|gpt-4o(?!.*mini)|gpt-4-turbo/i.test(model) || env["AGENTMEMORY_SUPPRESS_COST_WARNING"] === "1" || env["AGENTMEMORY_SUPPRESS_COST_WARNING"] === "true") return;
+	warnPremiumModelShown = true;
+	process.stderr.write(`[agentmemory] ${envName}=${model} is in the premium tier. Background compression on this model can cost $5+/day under active use. Cheaper alternatives with comparable quality for memory compression: deepseek/deepseek-v4-flash-0731, deepseek/deepseek-v4-pro, qwen/qwen3-coder. See README "Cost-aware model selection" for the full table. Set AGENTMEMORY_SUPPRESS_COST_WARNING=1 to silence.\n`);
+}
+function detectProvider(env) {
+	const maxTokens = parseInt(env["MAX_TOKENS"] || "4096", 10);
+	if (hasRealValue(env["OPENAI_API_KEY"]) && env["OPENAI_API_KEY_FOR_LLM"] !== "false") {
+		const model = env["OPENAI_MODEL"] || "gpt-5.6-luna";
+		warnIfPremiumModel(env, "OPENAI_MODEL", model);
+		return {
+			provider: "openai",
+			model,
+			maxTokens,
+			baseURL: env["OPENAI_BASE_URL"]
+		};
+	}
+	if (hasRealValue(env["MINIMAX_API_KEY"])) return {
+		provider: "minimax",
+		model: env["MINIMAX_MODEL"] || "MiniMax-M3",
+		maxTokens
+	};
+	if (hasRealValue(env["ANTHROPIC_API_KEY"])) return {
+		provider: "anthropic",
+		model: env["ANTHROPIC_MODEL"] || "claude-sonnet-5",
+		maxTokens,
+		baseURL: env["ANTHROPIC_BASE_URL"]
+	};
+	if (hasRealValue(env["GEMINI_API_KEY"]) || hasRealValue(env["GOOGLE_API_KEY"])) {
+		if (!hasRealValue(env["GEMINI_API_KEY"]) && hasRealValue(env["GOOGLE_API_KEY"])) process.stderr.write("[agentmemory] GOOGLE_API_KEY detected — treating as GEMINI_API_KEY. Set GEMINI_API_KEY in ~/.agentmemory/.env to silence this warning.\n");
+		return {
+			provider: "gemini",
+			model: env["GEMINI_MODEL"] || "gemini-3.7-flash",
+			maxTokens
+		};
+	}
+	if (hasRealValue(env["OPENROUTER_API_KEY"])) {
+		const model = env["OPENROUTER_MODEL"] || "anthropic/claude-sonnet-5";
+		warnIfPremiumModel(env, "OPENROUTER_MODEL", model);
+		return {
+			provider: "openrouter",
+			model,
+			maxTokens
+		};
+	}
+	if (!(env["AGENTMEMORY_ALLOW_AGENT_SDK"] === "true")) {
+		writeProviderNoticeOnce(pc.dim("[agentmemory] No LLM provider key set — running zero-LLM: no LLM compression or summaries; search uses BM25 plus any configured embedding provider. Set EMBEDDING_PROVIDER=local for on-device semantic embeddings if none is configured. Set ANTHROPIC_API_KEY (or GEMINI/OPENAI/OPENROUTER/MINIMAX) in ~/.agentmemory/.env for LLM compression and summaries. Agent-SDK fallback stays off by default to avoid a Stop-hook recursion loop; opt in with AGENTMEMORY_AUTO_COMPRESS=true + AGENTMEMORY_ALLOW_AGENT_SDK=true.\n"));
+		return {
+			provider: "noop",
+			model: "noop",
+			maxTokens
+		};
+	}
+	writeProviderNoticeOnce("[agentmemory] WARNING: agent-sdk fallback enabled via AGENTMEMORY_ALLOW_AGENT_SDK=true. This spawns @anthropic-ai/claude-agent-sdk child sessions that can trigger the Stop-hook recursion loop. A SDK-child env marker is set to block re-entry, but prefer setting a real API key in ~/.agentmemory/.env instead.\n");
+	return {
+		provider: "agent-sdk",
+		model: "claude-sonnet-5",
+		maxTokens
+	};
+}
+function loadConfig() {
+	const env = getMergedEnv();
+	const provider = detectProvider(env);
+	const restPort = parseInt(env["III_REST_PORT"] || "3111", 10) || 3111;
+	const viewerPort = parseInt(env["III_VIEWER_PORT"] || "", 10) || restPort + 2;
+	const engineUrl = env["III_ENGINE_URL"] || env["III_URL"] || `ws://localhost:${parseInt(env["III_ENGINE_PORT"] || "", 10) || restPort + 46023}`;
+	const maxObservationsPerSession = safeParseInt(env["MAX_OBS_PER_SESSION"], 500);
+	if (!obsCapImportCeilingWarned && (maxObservationsPerSession === 0 || maxObservationsPerSession > 5e3)) {
+		obsCapImportCeilingWarned = true;
+		const capDesc = maxObservationsPerSession === 0 ? "uncapped (0)" : String(maxObservationsPerSession);
+		process.stderr.write(`[agentmemory] WARNING: MAX_OBS_PER_SESSION is ${capDesc}, above the ${MAX_IMPORT_OBS_PER_SESSION}-per-session import ceiling (MAX_IMPORT_OBS_PER_SESSION). Sessions past that ceiling make every mem::export -> mem::import restore fail wholesale. Keep MAX_OBS_PER_SESSION at or below ${MAX_IMPORT_OBS_PER_SESSION} if you rely on export/import backups.\n`);
+	}
+	return {
+		engineUrl,
+		restPort,
+		viewerPort,
+		provider,
+		tokenBudget: safeParseInt(env["TOKEN_BUDGET"], 2e3),
+		maxObservationsPerSession,
+		compressionModel: provider.model,
+		dataDir: DATA_DIR
+	};
+}
+function getMergedEnv(overrides) {
+	return {
+		...loadEnvFile(),
+		...process.env,
+		...overrides
+	};
+}
+function getEnvVar(key) {
+	return getMergedEnv()[key];
+}
+function isSessionSweepEnabled() {
+	return getMergedEnv()["AGENTMEMORY_SESSION_SWEEP_ENABLED"] !== "false";
+}
+function getSessionSweepStaleHours() {
+	const raw = getMergedEnv()["AGENTMEMORY_SESSION_SWEEP_STALE_HOURS"];
+	if (!raw || !/^\d+$/.test(raw.trim())) return 24;
+	const parsed = parseInt(raw.trim(), 10);
+	return parsed > 0 ? parsed : 24;
+}
+function getFinalizeIdleMs() {
+	const raw = getMergedEnv()["AGENTMEMORY_FINALIZE_IDLE_MS"];
+	if (!raw || !/^\d+$/.test(raw.trim())) return 12e4;
+	return parseInt(raw.trim(), 10);
+}
+function isGraphCompactOnBootEnabled() {
+	return getMergedEnv()["AGENTMEMORY_GRAPH_COMPACT_ON_BOOT"] !== "false";
+}
+function isDropStaleIndexEnabled() {
+	return getMergedEnv()["AGENTMEMORY_DROP_STALE_INDEX"] === "true";
+}
+const VALID_STATE_BACKENDS = new Set(["file", "redis"]);
+function getStateBackend() {
+	const raw = (getMergedEnv()["AGENTMEMORY_STATE_BACKEND"] || "").trim().toLowerCase();
+	if (!raw) return "file";
+	if (!VALID_STATE_BACKENDS.has(raw)) throw new Error(`AGENTMEMORY_STATE_BACKEND="${raw}" is not a recognized state backend. Use "file" (the default) or "redis", or unset it to keep the default file store.`);
+	return raw;
+}
+function getRedisUrl() {
+	const value = getMergedEnv()["AGENTMEMORY_REDIS_URL"];
+	return hasRealValue(value) ? value.trim() : void 0;
+}
+function getAuditRetentionMonths() {
+	return safeParseInt(getMergedEnv()["AGENTMEMORY_AUDIT_RETENTION_MONTHS"], 0);
+}
+function getAuditMigrateMaxBytes() {
+	return safeParseInt(getMergedEnv()["AGENTMEMORY_AUDIT_MIGRATE_MAX_BYTES"], 32 * 1024 * 1024);
+}
+function detectLlmProviderKind(env = getMergedEnv()) {
+	if (hasRealValue(env["ANTHROPIC_API_KEY"]) || hasRealValue(env["GEMINI_API_KEY"]) || hasRealValue(env["GOOGLE_API_KEY"]) || hasRealValue(env["OPENROUTER_API_KEY"]) || hasRealValue(env["MINIMAX_API_KEY"]) || hasRealValue(env["OPENAI_API_KEY"]) && env["OPENAI_API_KEY_FOR_LLM"] !== "false" || env["AGENTMEMORY_ALLOW_AGENT_SDK"] === "true") return "llm";
+	return "noop";
+}
+function describeLlmRoute(provider) {
+	if (provider.provider === "noop") return null;
+	const parts = [provider.provider, provider.model];
+	if (provider.baseURL) try {
+		parts.push(new URL(provider.baseURL).host);
+	} catch {
+		parts.push("custom base URL");
+	}
+	return parts.join(" · ");
+}
+function loadEmbeddingConfig() {
+	const env = getMergedEnv();
+	let bm25Weight = parseFloat(env["BM25_WEIGHT"] || "0.4");
+	let vectorWeight = parseFloat(env["VECTOR_WEIGHT"] || "0.6");
+	bm25Weight = isNaN(bm25Weight) || bm25Weight < 0 ? .4 : Math.min(bm25Weight, 1);
+	vectorWeight = isNaN(vectorWeight) || vectorWeight < 0 ? .6 : Math.min(vectorWeight, 1);
+	return {
+		provider: env["EMBEDDING_PROVIDER"] || void 0,
+		bm25Weight,
+		vectorWeight
+	};
+}
+function detectEmbeddingProvider(env) {
+	const source = env ?? getMergedEnv();
+	const forced = source["EMBEDDING_PROVIDER"];
+	if (forced) return forced;
+	if (source["GEMINI_API_KEY"]) return "gemini";
+	if (source["OPENAI_API_KEY"] || source["OPENAI_EMBEDDING_API_KEY"]) return "openai";
+	if (source["VOYAGE_API_KEY"]) return "voyage";
+	if (source["COHERE_API_KEY"]) return "cohere";
+	if (source["OPENROUTER_API_KEY"]) return "openrouter";
+	return null;
+}
+function loadClaudeBridgeConfig() {
+	const env = getMergedEnv();
+	const enabled = env["CLAUDE_MEMORY_BRIDGE"] === "true";
+	const projectPath = env["CLAUDE_PROJECT_PATH"] || "";
+	const lineBudget = safeParseInt(env["CLAUDE_MEMORY_LINE_BUDGET"], 200);
+	let memoryFilePath = "";
+	if (enabled && projectPath) {
+		const safePath = projectPath.replace(/[/\\]/g, "-");
+		memoryFilePath = join(homedir(), ".claude", "projects", safePath, "memory", "MEMORY.md");
+	}
+	return {
+		enabled,
+		projectPath,
+		memoryFilePath,
+		lineBudget
+	};
+}
+function loadTeamConfig() {
+	const env = getMergedEnv();
+	const teamId = env["TEAM_ID"];
+	const userId = env["USER_ID"];
+	if (!teamId || !userId) return null;
+	return {
+		teamId,
+		userId,
+		mode: env["TEAM_MODE"] === "shared" ? "shared" : "private"
+	};
+}
+function loadAgentScope() {
+	const env = getMergedEnv();
+	const raw = env["AGENT_ID"];
+	if (!raw) return null;
+	const agentId = raw.trim().slice(0, 128);
+	if (!agentId) return null;
+	return {
+		agentId,
+		mode: env["AGENTMEMORY_AGENT_SCOPE"] === "isolated" ? "isolated" : "shared"
+	};
+}
+function getAgentId() {
+	return loadAgentScope()?.agentId;
+}
+function isAgentScopeIsolated() {
+	return loadAgentScope()?.mode === "isolated";
+}
+const SNAPSHOT_INTERVAL_DEFAULT_SECONDS = 3600;
+const MIN_SNAPSHOT_INTERVAL_SECONDS = 1;
+function loadSnapshotConfig() {
+	const env = getMergedEnv();
+	const rawInterval = safeParseInt(env["SNAPSHOT_INTERVAL"], SNAPSHOT_INTERVAL_DEFAULT_SECONDS);
+	const interval = rawInterval >= MIN_SNAPSHOT_INTERVAL_SECONDS ? rawInterval : SNAPSHOT_INTERVAL_DEFAULT_SECONDS;
+	return {
+		enabled: env["SNAPSHOT_ENABLED"] === "true",
+		interval,
+		dir: env["SNAPSHOT_DIR"] || join(homedir(), ".agentmemory", "snapshots")
+	};
+}
+function isGraphExtractionEnabled() {
+	return getMergedEnv()["GRAPH_EXTRACTION_ENABLED"] === "true";
+}
+const FOLLOWUP_WINDOW_DEFAULT_SECONDS = 30;
+function getFollowupWindowSeconds() {
+	return safeParseInt(getMergedEnv()["AGENTMEMORY_FOLLOWUP_WINDOW_SECONDS"], FOLLOWUP_WINDOW_DEFAULT_SECONDS);
+}
+function isConsolidationEnabled() {
+	const env = getMergedEnv();
+	const explicit = env["CONSOLIDATION_ENABLED"];
+	if (explicit === "false" || explicit === "0") return false;
+	if (explicit === "true" || explicit === "1") return true;
+	if ((env["AGENTMEMORY_PROVIDER"] || "").toLowerCase() === "noop") return false;
+	return detectLlmProviderKind(env) === "llm";
+}
+function isAutoCompressEnabled() {
+	return getMergedEnv()["AGENTMEMORY_AUTO_COMPRESS"] === "true";
+}
+function isContextInjectionEnabled() {
+	return getMergedEnv()["AGENTMEMORY_INJECT_CONTEXT"] === "true";
+}
+const CONSOLIDATION_INTERVAL_DEFAULT_MS = 72e5;
+function getConsolidationIntervalMs() {
+	const raw = parseInt(process.env.CONSOLIDATION_INTERVAL_MS || String(72e5), 10);
+	return Number.isFinite(raw) && raw > 0 ? raw : CONSOLIDATION_INTERVAL_DEFAULT_MS;
+}
+function getConsolidationDecayDays() {
+	return safeParseInt(getMergedEnv()["CONSOLIDATION_DECAY_DAYS"], 30);
+}
+const CONSOLIDATION_COOLDOWN_DEFAULT_MS = 3e5;
+function getConsolidationCooldownMs() {
+	const raw = safeParseInt(getMergedEnv()["AGENTMEMORY_CONSOLIDATION_COOLDOWN_MS"], CONSOLIDATION_COOLDOWN_DEFAULT_MS);
+	return raw >= 0 ? raw : CONSOLIDATION_COOLDOWN_DEFAULT_MS;
+}
+const INDEX_SAVE_INTERVAL_DEFAULT_MS = 6e5;
+function getIndexSaveIntervalMs() {
+	const raw = safeParseInt(getMergedEnv()["AGENTMEMORY_INDEX_SAVE_INTERVAL_MS"], INDEX_SAVE_INTERVAL_DEFAULT_MS);
+	return raw > 0 ? raw : INDEX_SAVE_INTERVAL_DEFAULT_MS;
+}
+const STATE_SAVE_INTERVAL_DEFAULT_MS = 2e3;
+function getStateSaveIntervalMs() {
+	const value = getMergedEnv()["AGENTMEMORY_STATE_SAVE_INTERVAL_MS"];
+	if (value === void 0 || value.trim() === "") return STATE_SAVE_INTERVAL_DEFAULT_MS;
+	if (!/^\d+$/.test(value.trim())) return STATE_SAVE_INTERVAL_DEFAULT_MS;
+	const raw = Number(value);
+	return Number.isSafeInteger(raw) && raw >= 100 && raw <= 36e5 ? raw : STATE_SAVE_INTERVAL_DEFAULT_MS;
+}
+function getVectorBucketSize() {
+	const raw = safeParseInt(getMergedEnv()["AGENTMEMORY_VECTOR_BUCKET_SIZE"], 500);
+	return raw > 0 ? raw : 500;
+}
+function getVectorBackfillMax() {
+	const raw = safeParseInt(getMergedEnv()["AGENTMEMORY_VECTOR_BACKFILL_MAX"], 500);
+	return raw > 0 ? raw : 500;
+}
+function isVectorBackfillAllEnabled() {
+	return getMergedEnv()["AGENTMEMORY_VECTOR_BACKFILL"] === "all";
+}
+function getStandalonePersistPath() {
+	return getMergedEnv()["STANDALONE_PERSIST_PATH"] || join(homedir(), ".agentmemory", "standalone.json");
+}
+const VALID_PROVIDERS = new Set([
+	"anthropic",
+	"gemini",
+	"openrouter",
+	"agent-sdk",
+	"minimax",
+	"openai"
+]);
+function loadFallbackConfig() {
+	const env = getMergedEnv();
+	const raw = env["FALLBACK_PROVIDERS"] || "";
+	const allowAgentSdk = env["AGENTMEMORY_ALLOW_AGENT_SDK"] === "true";
+	return { providers: raw.split(",").map((p) => p.trim()).filter((p) => Boolean(p) && VALID_PROVIDERS.has(p)).filter((p) => {
+		if (p === "agent-sdk" && !allowAgentSdk) {
+			process.stderr.write("[agentmemory] Ignoring FALLBACK_PROVIDERS entry 'agent-sdk' (AGENTMEMORY_ALLOW_AGENT_SDK is not 'true'). The agent-sdk fallback can spawn Claude Agent SDK child sessions that trigger the Stop-hook recursion loop. Opt in explicitly with AGENTMEMORY_ALLOW_AGENT_SDK=true if this is intentional.\n");
+			return false;
+		}
+		return true;
+	}) };
+}
+//#endregion
+//#region src/cli/engine-launch.ts
+function runtimeConfigPath(dataDir) {
+	return join(dataDir, "iii-config.runtime.yaml");
+}
+const CREDENTIAL_URL_PATTERN = /:\/\/[^@\s/]*@/g;
+function redactCredentialUrls(text) {
+	return text.replace(CREDENTIAL_URL_PATTERN, "://***@");
+}
+//#endregion
+//#region src/cli/engine-config.ts
+const ENGINE_DEFAULT_SAVE_INTERVAL_MS = 5e3;
+const ENGINE_FLUSH_MARGIN_MS = 1500;
+function engineFlushWaitMs(stateBackend, configTexts) {
+	if (stateBackend === "redis") return 0;
+	return engineSaveIntervalMs(configTexts) + ENGINE_FLUSH_MARGIN_MS;
+}
+function captureDurableAfterMs(stateBackend, configTexts) {
+	if (stateBackend === "redis") return ENGINE_FLUSH_MARGIN_MS;
+	return engineSaveIntervalMs(configTexts) + ENGINE_FLUSH_MARGIN_MS;
+}
+function engineSaveIntervalMs(configTexts, env = process.env) {
+	const intervals = [];
+	for (const text of configTexts) {
+		const explicit = [];
+		for (const match of text.matchAll(/save_interval_ms:\s*["']?(\d+|\$\{([A-Za-z_][A-Za-z0-9_]*)(?::-(\d+))?\})/g)) {
+			const raw = match[2] ? env[match[2]] || match[3] : match[1];
+			if (raw && /^\d+$/.test(raw) && Number.isSafeInteger(Number(raw))) explicit.push(Number(raw));
+		}
+		intervals.push(...explicit);
+		if ((text.match(/store_method:\s*file_based/g)?.length ?? 0) > explicit.length) intervals.push(ENGINE_DEFAULT_SAVE_INTERVAL_MS);
+	}
+	return intervals.length > 0 ? Math.max(...intervals) : ENGINE_DEFAULT_SAVE_INTERVAL_MS;
+}
+function engineStateConfigPaths(engineCwd, runtimePath) {
+	return [...new Set([
+		join(engineCwd, "compose", "worker-compose.yaml"),
+		join(engineCwd, "compose", "config", "state.yaml"),
+		join(engineCwd, "worker-compose.runtime.yaml"),
+		join(engineCwd, "config", "state.yaml"),
+		runtimePath
+	])];
+}
+//#endregion
+//#region src/logger.ts
+function fmt(level, msg, fields) {
+	if (!fields || Object.keys(fields).length === 0) return `[agentmemory] ${level} ${msg}`;
+	try {
+		return `[agentmemory] ${level} ${msg} ${JSON.stringify(fields)}`;
+	} catch {
+		return `[agentmemory] ${level} ${msg}`;
+	}
+}
+function emit(level, msg, fields) {
+	try {
+		const line = fmt(level, msg, fields) + "\n";
+		if (level === "error" || process.env["AGENTMEMORY_MCP_STDIO__"] === "1") process.stderr.write(line);
+		else process.stdout.write(line);
+	} catch {}
+}
+const logger = {
+	info(msg, fields) {
+		emit("info", msg, fields);
+	},
+	warn(msg, fields) {
+		emit("warn", msg, fields);
+	},
+	error(msg, fields) {
+		emit("error", msg, fields);
+	}
+};
+let bootVerbose = process.env["AGENTMEMORY_VERBOSE"] === "1" || process.env["AGENTMEMORY_VERBOSE"] === "true";
+const bootBuffer = [];
+function setBootVerbose(enabled) {
+	bootVerbose = enabled;
+}
+function bootLog(msg) {
+	if (bootVerbose) {
+		try {
+			process.stderr.write(`[agentmemory] ${msg}\n`);
+		} catch {}
+		return;
+	}
+	if (bootBuffer.length < 500) bootBuffer.push(msg);
+}
+function bootWarn(msg) {
+	try {
+		process.stderr.write(`[agentmemory] warn ${msg}\n`);
+	} catch {}
+}
+//#endregion
+//#region src/version.ts
+const VERSION = "0.9.31";
+const III_PINNED_VERSION = "0.25.0";
+//#endregion
+//#region src/mcp/tools-registry.ts
+const CORE_TOOLS = [
+	{
+		name: "memory_recall",
+		description: "Search stored memories and session observations for relevant context. Use when you need to recall what happened in previous sessions, find past decisions, or look up how a file was modified before.",
+		inputSchema: {
+			type: "object",
+			properties: {
+				query: {
+					type: "string",
+					description: "Search query (keywords, file names, concepts)"
+				},
+				limit: {
+					type: "number",
+					description: "Max results to return (default 10)"
+				},
+				format: {
+					type: "string",
+					description: "Result format: full, compact, or narrative (default full)"
+				},
+				token_budget: {
+					type: "number",
+					description: "Optional estimated content token budget; response includes truncation and recovery metadata"
+				},
+				targetLayer: {
+					type: "string",
+					enum: [
+						"all",
+						"memory",
+						"observation"
+					],
+					description: "Search all indexed layers (default), durable memories, or raw observations before ranking"
+				},
+				project: {
+					type: "string",
+					description: "Filter by project path"
+				},
+				cwd: {
+					type: "string",
+					description: "Filter by session working directory"
+				},
+				agentId: {
+					type: "string",
+					description: "Filter by owning agent; '*' reads across agents"
+				}
+			},
+			required: ["query"]
+		}
+	},
+	{
+		name: "memory_compress_file",
+		description: "Compress a markdown file to reduce token usage while preserving headings, URLs, and code blocks. Creates a .original.md backup before writing.",
+		inputSchema: {
+			type: "object",
+			properties: { filePath: {
+				type: "string",
+				description: "Path to the markdown file to compress"
+			} },
+			required: ["filePath"]
+		}
+	},
+	{
+		name: "memory_save",
+		description: "Explicitly save an important insight, decision, or pattern to long-term memory.",
+		inputSchema: {
+			type: "object",
+			properties: {
+				content: {
+					type: "string",
+					description: "The insight or decision to remember"
+				},
+				type: {
+					type: "string",
+					description: "Memory type: pattern, preference, architecture, bug, workflow, or fact"
+				},
+				concepts: {
+					type: "string",
+					description: "Comma-separated key concepts"
+				},
+				files: {
+					type: "string",
+					description: "Comma-separated relevant file paths"
+				},
+				project: {
+					type: "string",
+					description: "Stable canonical project identifier this memory belongs to (e.g. a slug, UUID, or registry key). Must match the value used when the session was started. Do not use filesystem paths or ad-hoc display names — those change across machines and will silently break project scoping."
+				},
+				agentId: {
+					type: "string",
+					description: "Agent identity to scope this memory to. When set, agent-scoped recall and search only surface it for the same agentId. Omit for shared memory."
+				}
+			},
+			required: ["content"]
+		}
+	},
+	{
+		name: "memory_file_history",
+		description: "Get past observations about specific files.",
+		inputSchema: {
+			type: "object",
+			properties: {
+				files: {
+					type: "string",
+					description: "Comma-separated file paths"
+				},
+				sessionId: {
+					type: "string",
+					description: "Current session ID to exclude"
+				}
+			},
+			required: ["files"]
+		}
+	},
+	{
+		name: "memory_patterns",
+		description: "Detect recurring patterns across sessions.",
+		inputSchema: {
+			type: "object",
+			properties: {
+				project: {
+					type: "string",
+					description: "Project path to analyze"
+				},
+				limit: {
+					type: "integer",
+					description: "Most recent sessions to scan (default 50, max 500)"
+				}
+			}
+		}
+	},
+	{
+		name: "memory_sessions",
+		description: "List recent sessions with status, observation counts, summaries and a continuation cursor. Filters apply before pagination; retain them when requesting the next page.",
+		inputSchema: {
+			type: "object",
+			properties: {
+				project: {
+					type: "string",
+					description: "Exact project identifier used when sessions were started"
+				},
+				agentId: {
+					type: "string",
+					description: "Filter by owning agent; '*' reads across agents"
+				},
+				limit: {
+					type: "integer",
+					description: "Page size (default 20, max 100)"
+				},
+				cursor: {
+					type: "string",
+					description: "nextCursor from the previous page; omit for the first page"
+				}
+			}
+		}
+	},
+	{
+		name: "memory_smart_search",
+		description: "Hybrid semantic+keyword search with progressive disclosure. Pass query to search, or expandIds to recover full results.",
+		inputSchema: {
+			type: "object",
+			properties: {
+				query: {
+					type: "string",
+					description: "Search query"
+				},
+				expandIds: {
+					type: "string",
+					description: "Comma-separated memory or observation IDs to expand; query is optional when provided"
+				},
+				limit: {
+					type: "number",
+					description: "Max results (default 10)"
+				},
+				targetLayer: {
+					type: "string",
+					enum: [
+						"all",
+						"memory",
+						"observation"
+					],
+					description: "Search all indexed layers (default), durable memories, or raw observations before ranking"
+				},
+				project: {
+					type: "string",
+					description: "Filter by project path"
+				},
+				agentId: {
+					type: "string",
+					description: "Filter by owning agent; '*' reads across agents"
+				},
+				includeLessons: {
+					type: "boolean",
+					description: "Include lesson matches when targetLayer is all (default true)"
+				}
+			}
+		}
+	},
+	{
+		name: "memory_vision_search",
+		description: "Cross-modal image search via CLIP embeddings. Pass queryText to find screenshots matching a description, or queryImageBase64/queryImageRef to find similar images. Requires AGENTMEMORY_IMAGE_EMBEDDINGS=true.",
+		inputSchema: {
+			type: "object",
+			properties: {
+				queryText: {
+					type: "string",
+					description: "Text query (e.g. 'login form with error banner')"
+				},
+				queryImageRef: {
+					type: "string",
+					description: "Absolute path to a stored image to match against"
+				},
+				queryImageBase64: {
+					type: "string",
+					description: "Raw base64 image bytes or data URL"
+				},
+				topK: {
+					type: "number",
+					description: "Max results (default 10, max 50)"
+				},
+				sessionId: {
+					type: "string",
+					description: "Filter to a single session"
+				}
+			}
+		}
+	},
+	{
+		name: "memory_timeline",
+		description: "Chronological observations around an anchor point.",
+		inputSchema: {
+			type: "object",
+			properties: {
+				anchor: {
+					type: "string",
+					description: "Anchor point: ISO date or keyword"
+				},
+				project: {
+					type: "string",
+					description: "Filter by project path"
+				},
+				before: {
+					type: "number",
+					description: "Observations before anchor (default 5)"
+				},
+				after: {
+					type: "number",
+					description: "Observations after anchor (default 5)"
+				}
+			},
+			required: ["anchor"]
+		}
+	},
+	{
+		name: "memory_profile",
+		description: "User/project profile with top concepts and file patterns.",
+		inputSchema: {
+			type: "object",
+			properties: {
+				project: {
+					type: "string",
+					description: "Project path"
+				},
+				refresh: {
+					type: "string",
+					description: "Set to 'true' to force rebuild"
+				}
+			},
+			required: ["project"]
+		}
+	},
+	{
+		name: "memory_export",
+		description: "Export memory data as JSON. Past the transport size limit the export is refused, so use the paging arguments on a large store.",
+		inputSchema: {
+			type: "object",
+			properties: {
+				maxSessions: {
+					type: "number",
+					description: "Sessions per page (with their observations)"
+				},
+				offset: {
+					type: "number",
+					description: "Session offset"
+				},
+				collectionLimit: {
+					type: "number",
+					description: "Rows per page for memories, summaries, graphNodes, lessons and the other top-level collections; access logs follow the memories on the page. Sessions and their observations are paged only by maxSessions and offset, so pass collections to leave them out of each page"
+				},
+				collectionOffset: {
+					type: "number",
+					description: "Row offset for the top-level collections"
+				},
+				collections: {
+					type: "string",
+					description: "Comma-separated collections to return, e.g. memories,lessons. Sessions and their observations come back only when the list names sessions, access logs only together with memories. Unknown names are ignored. Omit for everything. A paged or selected export cannot be imported with strategy replace."
+				}
+			}
+		}
+	},
+	{
+		name: "memory_relations",
+		description: "Query the memory relationship graph.",
+		inputSchema: {
+			type: "object",
+			properties: {
+				memoryId: {
+					type: "string",
+					description: "Memory ID to find relations for"
+				},
+				maxHops: {
+					type: "number",
+					description: "Max traversal depth (default 2)"
+				},
+				minConfidence: {
+					type: "number",
+					description: "Min confidence (0-1, default 0)"
+				}
+			},
+			required: ["memoryId"]
+		}
+	},
+	{
+		name: "memory_commit_lookup",
+		description: "Look up the agent session(s) that produced a specific git commit, given its SHA. Returns the commit metadata and linked sessions.",
+		inputSchema: {
+			type: "object",
+			properties: { sha: {
+				type: "string",
+				description: "Full git commit SHA"
+			} },
+			required: ["sha"]
+		}
+	},
+	{
+		name: "memory_commits",
+		description: "List recent commits linked to agent sessions, optionally filtered by branch or repo.",
+		inputSchema: {
+			type: "object",
+			properties: {
+				branch: {
+					type: "string",
+					description: "Filter by branch name"
+				},
+				repo: {
+					type: "string",
+					description: "Filter by remote URL"
+				},
+				limit: {
+					type: "number",
+					description: "Max results (default 100, max 500)"
+				}
+			}
+		}
+	}
+];
+const V040_TOOLS = [
+	{
+		name: "memory_claude_bridge_sync",
+		description: "Sync memory state to/from Claude Code's native MEMORY.md file.",
+		inputSchema: {
+			type: "object",
+			properties: { direction: {
+				type: "string",
+				description: "'read' to import from MEMORY.md, 'write' to export to MEMORY.md"
+			} },
+			required: ["direction"]
+		}
+	},
+	{
+		name: "memory_graph_query",
+		description: "Query the knowledge graph for entities and relationships.",
+		inputSchema: {
+			type: "object",
+			properties: {
+				startNodeId: {
+					type: "string",
+					description: "Starting node ID for traversal"
+				},
+				nodeType: {
+					type: "string",
+					description: "Filter by node type"
+				},
+				maxDepth: {
+					type: "number",
+					description: "Max BFS depth (default 3, max 5)"
+				},
+				query: {
+					type: "string",
+					description: "Search nodes by name"
+				}
+			}
+		}
+	},
+	{
+		name: "memory_consolidate",
+		description: "Run the 4-tier memory consolidation pipeline (working -> episodic -> semantic -> procedural).",
+		inputSchema: {
+			type: "object",
+			properties: { tier: {
+				type: "string",
+				description: "Target tier: episodic, semantic, or procedural"
+			} }
+		}
+	},
+	{
+		name: "memory_team_share",
+		description: "Share a memory or observation with team members.",
+		inputSchema: {
+			type: "object",
+			properties: {
+				itemId: {
+					type: "string",
+					description: "ID of memory or observation to share"
+				},
+				itemType: {
+					type: "string",
+					description: "Type: observation, memory, or pattern"
+				}
+			},
+			required: ["itemId", "itemType"]
+		}
+	},
+	{
+		name: "memory_team_feed",
+		description: "Get recent shared items from all team members.",
+		inputSchema: {
+			type: "object",
+			properties: { limit: {
+				type: "number",
+				description: "Max items (default 20)"
+			} }
+		}
+	},
+	{
+		name: "memory_audit",
+		description: "View the audit trail of memory operations.",
+		inputSchema: {
+			type: "object",
+			properties: {
+				operation: {
+					type: "string",
+					description: "Filter by operation type"
+				},
+				limit: {
+					type: "number",
+					description: "Max entries (default 50)"
+				}
+			}
+		}
+	},
+	{
+		name: "memory_governance_delete",
+		description: "Delete specific memories with audit trail.",
+		inputSchema: {
+			type: "object",
+			properties: {
+				memoryIds: {
+					type: "string",
+					description: "Comma-separated memory IDs to delete"
+				},
+				reason: {
+					type: "string",
+					description: "Reason for deletion"
+				}
+			},
+			required: ["memoryIds"]
+		}
+	},
+	{
+		name: "memory_snapshot_create",
+		description: "Create a git-versioned snapshot of current memory state.",
+		inputSchema: {
+			type: "object",
+			properties: { message: {
+				type: "string",
+				description: "Snapshot description"
+			} }
+		}
+	}
+];
+const V050_TOOLS = [
+	{
+		name: "memory_action_create",
+		description: "Create an actionable work item with typed dependencies. Actions track what agents need to do and how work items relate to each other.",
+		inputSchema: {
+			type: "object",
+			properties: {
+				title: {
+					type: "string",
+					description: "Action title"
+				},
+				description: {
+					type: "string",
+					description: "Detailed description of the work"
+				},
+				priority: {
+					type: "number",
+					description: "Priority 1-10 (10 highest)"
+				},
+				project: {
+					type: "string",
+					description: "Project path"
+				},
+				tags: {
+					type: "string",
+					description: "Comma-separated tags"
+				},
+				parentId: {
+					type: "string",
+					description: "Parent action ID for hierarchical actions"
+				},
+				requires: {
+					type: "string",
+					description: "Comma-separated action IDs that must complete before this"
+				}
+			},
+			required: ["title"]
+		}
+	},
+	{
+		name: "memory_action_update",
+		description: "Update an action's status, priority, or details. Set status to 'done' to complete it and unblock dependent actions.",
+		inputSchema: {
+			type: "object",
+			properties: {
+				actionId: {
+					type: "string",
+					description: "Action ID to update"
+				},
+				status: {
+					type: "string",
+					description: "New status: pending, active, done, blocked, cancelled"
+				},
+				result: {
+					type: "string",
+					description: "Outcome description (when completing)"
+				},
+				priority: {
+					type: "number",
+					description: "New priority 1-10"
+				}
+			},
+			required: ["actionId"]
+		}
+	},
+	{
+		name: "memory_frontier",
+		description: "Get all unblocked actions ranked by priority and urgency. Returns the frontier of actionable work with no unsatisfied dependencies.",
+		inputSchema: {
+			type: "object",
+			properties: {
+				project: {
+					type: "string",
+					description: "Filter by project"
+				},
+				agentId: {
+					type: "string",
+					description: "Agent ID to check lease conflicts"
+				},
+				limit: {
+					type: "number",
+					description: "Max results (default 20)"
+				}
+			}
+		}
+	},
+	{
+		name: "memory_next",
+		description: "Get the single most important next action to work on. Combines dependency resolution, priority, and recency into a score.",
+		inputSchema: {
+			type: "object",
+			properties: {
+				project: {
+					type: "string",
+					description: "Filter by project"
+				},
+				agentId: {
+					type: "string",
+					description: "Current agent ID"
+				}
+			}
+		}
+	},
+	{
+		name: "memory_lease",
+		description: "Acquire, release, or renew an exclusive lease on an action. Prevents multiple agents from working on the same thing.",
+		inputSchema: {
+			type: "object",
+			properties: {
+				actionId: {
+					type: "string",
+					description: "Action ID"
+				},
+				agentId: {
+					type: "string",
+					description: "Agent claiming the action"
+				},
+				operation: {
+					type: "string",
+					description: "acquire, release, or renew"
+				},
+				result: {
+					type: "string",
+					description: "Result when releasing (marks action done)"
+				},
+				ttlMs: {
+					type: "number",
+					description: "Lease duration in ms (default 10min, max 1hr)"
+				}
+			},
+			required: [
+				"actionId",
+				"agentId",
+				"operation"
+			]
+		}
+	},
+	{
+		name: "memory_routine_run",
+		description: "Instantiate a frozen workflow routine, creating actions for each step with proper dependencies.",
+		inputSchema: {
+			type: "object",
+			properties: {
+				routineId: {
+					type: "string",
+					description: "Routine template ID"
+				},
+				project: {
+					type: "string",
+					description: "Project context"
+				},
+				initiatedBy: {
+					type: "string",
+					description: "Agent starting the run"
+				}
+			},
+			required: ["routineId"]
+		}
+	},
+	{
+		name: "memory_signal_send",
+		description: "Send a message to another agent or broadcast. Supports threading, typed messages, and TTL expiration.",
+		inputSchema: {
+			type: "object",
+			properties: {
+				from: {
+					type: "string",
+					description: "Sender agent ID"
+				},
+				to: {
+					type: "string",
+					description: "Recipient agent ID (omit for broadcast)"
+				},
+				content: {
+					type: "string",
+					description: "Message content"
+				},
+				type: {
+					type: "string",
+					description: "Message type: info, request, response, alert, handoff"
+				},
+				replyTo: {
+					type: "string",
+					description: "Signal ID to reply to (auto-threads)"
+				}
+			},
+			required: ["from", "content"]
+		}
+	},
+	{
+		name: "memory_signal_read",
+		description: "Read messages for an agent. Marks delivered messages as read.",
+		inputSchema: {
+			type: "object",
+			properties: {
+				agentId: {
+					type: "string",
+					description: "Agent to read messages for"
+				},
+				unreadOnly: {
+					type: "string",
+					description: "Set to 'true' for unread only"
+				},
+				threadId: {
+					type: "string",
+					description: "Filter by conversation thread"
+				},
+				limit: {
+					type: "number",
+					description: "Max messages (default 50)"
+				}
+			},
+			required: ["agentId"]
+		}
+	},
+	{
+		name: "memory_checkpoint",
+		description: "Create or resolve an external checkpoint (CI result, approval, deploy status) that gates action progress.",
+		inputSchema: {
+			type: "object",
+			properties: {
+				operation: {
+					type: "string",
+					description: "create, resolve, or list"
+				},
+				name: {
+					type: "string",
+					description: "Checkpoint name (for create)"
+				},
+				checkpointId: {
+					type: "string",
+					description: "Checkpoint ID (for resolve)"
+				},
+				status: {
+					type: "string",
+					description: "passed or failed (for resolve)"
+				},
+				type: {
+					type: "string",
+					description: "Checkpoint type: ci, approval, deploy, external, timer"
+				},
+				linkedActionIds: {
+					type: "string",
+					description: "Comma-separated action IDs this checkpoint gates (for create)"
+				}
+			},
+			required: ["operation"]
+		}
+	},
+	{
+		name: "memory_mesh_sync",
+		description: "Sync memories and actions with peer agentmemory instances for multi-agent collaboration.",
+		inputSchema: {
+			type: "object",
+			properties: {
+				peerId: {
+					type: "string",
+					description: "Specific peer ID (omit for all)"
+				},
+				direction: {
+					type: "string",
+					description: "push, pull, or both (default both)"
+				}
+			}
+		}
+	}
+];
+const V051_TOOLS = [
+	{
+		name: "memory_sentinel_create",
+		description: "Create an event-driven sentinel that watches for conditions (webhook, timer, threshold, pattern, approval) and auto-unblocks gated actions when triggered.",
+		inputSchema: {
+			type: "object",
+			properties: {
+				name: {
+					type: "string",
+					description: "Sentinel name"
+				},
+				type: {
+					type: "string",
+					description: "Type: webhook, timer, threshold, pattern, approval, custom"
+				},
+				config: {
+					type: "string",
+					description: "JSON config (timer: {durationMs}, threshold: {metric,operator,value}, pattern: {pattern}, webhook: {path})"
+				},
+				linkedActionIds: {
+					type: "string",
+					description: "Comma-separated action IDs to gate"
+				},
+				expiresInMs: {
+					type: "number",
+					description: "Auto-expire after ms"
+				}
+			},
+			required: ["name", "type"]
+		}
+	},
+	{
+		name: "memory_sentinel_trigger",
+		description: "Externally fire a sentinel, providing an optional result payload. Unblocks any gated actions.",
+		inputSchema: {
+			type: "object",
+			properties: {
+				sentinelId: {
+					type: "string",
+					description: "Sentinel ID to trigger"
+				},
+				result: {
+					type: "string",
+					description: "JSON result payload"
+				}
+			},
+			required: ["sentinelId"]
+		}
+	},
+	{
+		name: "memory_sketch_create",
+		description: "Create an ephemeral action graph for exploratory work. Auto-expires after TTL. Can be promoted to permanent actions or discarded.",
+		inputSchema: {
+			type: "object",
+			properties: {
+				title: {
+					type: "string",
+					description: "Sketch title"
+				},
+				description: {
+					type: "string",
+					description: "What this sketch explores"
+				},
+				expiresInMs: {
+					type: "number",
+					description: "TTL in ms (default 1 hour)"
+				},
+				project: {
+					type: "string",
+					description: "Project context"
+				}
+			},
+			required: ["title"]
+		}
+	},
+	{
+		name: "memory_sketch_promote",
+		description: "Promote a sketch's ephemeral actions to permanent actions. Makes the exploratory work official.",
+		inputSchema: {
+			type: "object",
+			properties: {
+				sketchId: {
+					type: "string",
+					description: "Sketch ID to promote"
+				},
+				project: {
+					type: "string",
+					description: "Override project for promoted actions"
+				}
+			},
+			required: ["sketchId"]
+		}
+	},
+	{
+		name: "memory_crystallize",
+		description: "Compress completed action chains into compact crystal digests using LLM summarization. Extracts narrative, key outcomes, files affected, and lessons.",
+		inputSchema: {
+			type: "object",
+			properties: {
+				actionIds: {
+					type: "string",
+					description: "Comma-separated completed action IDs to crystallize"
+				},
+				project: {
+					type: "string",
+					description: "Project context"
+				},
+				sessionId: {
+					type: "string",
+					description: "Session context"
+				}
+			},
+			required: ["actionIds"]
+		}
+	},
+	{
+		name: "memory_diagnose",
+		description: "Run health checks across all subsystems (actions, leases, sentinels, sketches, signals, sessions, memories, mesh). Identifies stuck, orphaned, and inconsistent state.",
+		inputSchema: {
+			type: "object",
+			properties: { categories: {
+				type: "string",
+				description: "Comma-separated categories to check (default all)"
+			} }
+		}
+	},
+	{
+		name: "memory_heal",
+		description: "Auto-fix all fixable issues found by diagnostics. Unblocks stuck actions, expires stale leases, cleans up orphaned data.",
+		inputSchema: {
+			type: "object",
+			properties: {
+				categories: {
+					type: "string",
+					description: "Comma-separated categories to heal (default all)"
+				},
+				dryRun: {
+					type: "string",
+					description: "Set to 'true' for dry run (report but don't fix)"
+				}
+			}
+		}
+	},
+	{
+		name: "memory_facet_tag",
+		description: "Attach a structured tag (dimension:value) to an action, memory, or observation for multi-dimensional categorization.",
+		inputSchema: {
+			type: "object",
+			properties: {
+				targetId: {
+					type: "string",
+					description: "ID of the target to tag"
+				},
+				targetType: {
+					type: "string",
+					description: "Type: action, memory, or observation"
+				},
+				dimension: {
+					type: "string",
+					description: "Tag dimension (e.g., priority, team, status)"
+				},
+				value: {
+					type: "string",
+					description: "Tag value (e.g., urgent, backend, reviewed)"
+				}
+			},
+			required: [
+				"targetId",
+				"targetType",
+				"dimension",
+				"value"
+			]
+		}
+	},
+	{
+		name: "memory_facet_query",
+		description: "Query targets by facet tags with AND/OR logic. Find all actions tagged priority:urgent AND team:backend.",
+		inputSchema: {
+			type: "object",
+			properties: {
+				matchAll: {
+					type: "string",
+					description: "Comma-separated dimension:value pairs (AND logic)"
+				},
+				matchAny: {
+					type: "string",
+					description: "Comma-separated dimension:value pairs (OR logic)"
+				},
+				targetType: {
+					type: "string",
+					description: "Filter by type: action, memory, or observation"
+				}
+			}
+		}
+	}
+];
+const V061_TOOLS = [{
+	name: "memory_verify",
+	description: "Verify a memory or observation by tracing its citation chain back to source observations and session context. Returns provenance information including confidence scores.",
+	inputSchema: {
+		type: "object",
+		properties: { id: {
+			type: "string",
+			description: "Memory ID or observation ID to verify"
+		} },
+		required: ["id"]
+	}
+}];
+const V070_TOOLS = [
+	{
+		name: "memory_lesson_save",
+		description: "Save a lesson learned from this session. Lessons have confidence scores that strengthen when reinforced and decay when not used. Duplicate content auto-strengthens the existing lesson.",
+		inputSchema: {
+			type: "object",
+			properties: {
+				content: {
+					type: "string",
+					description: "The lesson learned (what worked, what to avoid, when to use X approach)"
+				},
+				context: {
+					type: "string",
+					description: "When/where this lesson applies"
+				},
+				confidence: {
+					type: "number",
+					description: "Initial confidence 0.0-1.0 (default 0.5)"
+				},
+				project: {
+					type: "string",
+					description: "Project this lesson is about"
+				},
+				tags: {
+					type: "string",
+					description: "Comma-separated tags"
+				}
+			},
+			required: ["content"]
+		}
+	},
+	{
+		name: "memory_lesson_recall",
+		description: "Search lessons by query. Returns lessons sorted by confidence and recency. Use to check what the agent has learned before making decisions.",
+		inputSchema: {
+			type: "object",
+			properties: {
+				query: {
+					type: "string",
+					description: "Search query"
+				},
+				project: {
+					type: "string",
+					description: "Filter by project"
+				},
+				minConfidence: {
+					type: "number",
+					description: "Minimum confidence threshold (default 0.1)"
+				},
+				limit: {
+					type: "number",
+					description: "Max results (default 10)"
+				}
+			},
+			required: ["query"]
+		}
+	},
+	{
+		name: "memory_lesson_delete",
+		description: "Soft-delete a lesson by id. Deleted lessons are excluded from recall and list; re-saving the same content creates a fresh lesson.",
+		inputSchema: {
+			type: "object",
+			properties: { lessonId: {
+				type: "string",
+				description: "The lesson id (lsn_...)"
+			} },
+			required: ["lessonId"]
+		}
+	},
+	{
+		name: "memory_obsidian_export",
+		description: "Export memories, lessons, and crystals as Obsidian-compatible Markdown files with YAML frontmatter and wikilinks for graph view.",
+		inputSchema: {
+			type: "object",
+			properties: {
+				vaultDir: {
+					type: "string",
+					description: "Output directory (default ~/.agentmemory/vault/)"
+				},
+				types: {
+					type: "string",
+					description: "Comma-separated types to export: memories,lessons,crystals,sessions (default all)"
+				}
+			}
+		}
+	}
+];
+const V073_TOOLS = [{
+	name: "memory_reflect",
+	description: "Traverse the knowledge graph, group related memories by concept clusters, and synthesize higher-order insights via LLM. Returns new and reinforced insights.",
+	inputSchema: {
+		type: "object",
+		properties: {
+			project: {
+				type: "string",
+				description: "Filter by project"
+			},
+			maxClusters: {
+				type: "number",
+				description: "Max concept clusters to process (default 10, max 20)"
+			}
+		}
+	}
+}, {
+	name: "memory_insight_list",
+	description: "List synthesized insights — higher-order observations derived from patterns across memories, lessons, and crystals.",
+	inputSchema: {
+		type: "object",
+		properties: {
+			project: {
+				type: "string",
+				description: "Filter by project"
+			},
+			minConfidence: {
+				type: "number",
+				description: "Minimum confidence threshold (default 0)"
+			},
+			limit: {
+				type: "number",
+				description: "Max results (default 50)"
+			}
+		}
+	}
+}];
+const V010_SLOTS_TOOLS = [
+	{
+		name: "memory_slot_list",
+		description: "List all memory slots (pinned + project + global). Slots are editable, size-limited memory units the agent can read and modify across sessions.",
+		inputSchema: {
+			type: "object",
+			properties: {}
+		}
+	},
+	{
+		name: "memory_slot_get",
+		description: "Read a single slot by label.",
+		inputSchema: {
+			type: "object",
+			properties: { label: {
+				type: "string",
+				description: "Slot label (e.g. 'persona', 'pending_items')"
+			} },
+			required: ["label"]
+		}
+	},
+	{
+		name: "memory_slot_create",
+		description: "Create a new slot. Reject if a slot with the same label already exists.",
+		inputSchema: {
+			type: "object",
+			properties: {
+				label: {
+					type: "string",
+					description: "Slot label — lowercase, starts with letter, [a-z0-9_]"
+				},
+				content: {
+					type: "string",
+					description: "Initial content (default empty)"
+				},
+				sizeLimit: {
+					type: "number",
+					description: "Max chars (default 2000, hard cap 20000)"
+				},
+				description: {
+					type: "string",
+					description: "What this slot is for"
+				},
+				pinned: {
+					type: "string",
+					description: "'false' to exclude from context injection; default true"
+				},
+				scope: {
+					type: "string",
+					description: "'project' (default) or 'global' (shared across projects)"
+				}
+			},
+			required: ["label"]
+		}
+	},
+	{
+		name: "memory_slot_append",
+		description: "Append text to an existing slot. Fails with 413 if the append would exceed the slot's sizeLimit — agent must compact via memory_slot_replace first.",
+		inputSchema: {
+			type: "object",
+			properties: {
+				label: {
+					type: "string",
+					description: "Slot label"
+				},
+				text: {
+					type: "string",
+					description: "Text to append"
+				}
+			},
+			required: ["label", "text"]
+		}
+	},
+	{
+		name: "memory_slot_replace",
+		description: "Replace slot content in place. Fails if content exceeds sizeLimit.",
+		inputSchema: {
+			type: "object",
+			properties: {
+				label: {
+					type: "string",
+					description: "Slot label"
+				},
+				content: {
+					type: "string",
+					description: "New full content"
+				}
+			},
+			required: ["label", "content"]
+		}
+	},
+	{
+		name: "memory_slot_delete",
+		description: "Delete a slot. Seeded default slots can be deleted unless marked readOnly.",
+		inputSchema: {
+			type: "object",
+			properties: { label: {
+				type: "string",
+				description: "Slot label"
+			} },
+			required: ["label"]
+		}
+	}
+];
+const ESSENTIAL_TOOLS = new Set([
+	"memory_save",
+	"memory_recall",
+	"memory_consolidate",
+	"memory_smart_search",
+	"memory_sessions",
+	"memory_diagnose",
+	"memory_lesson_save",
+	"memory_reflect"
+]);
+function getAllTools() {
+	return [
+		...CORE_TOOLS,
+		...V040_TOOLS,
+		...V050_TOOLS,
+		...V051_TOOLS,
+		...V061_TOOLS,
+		...V070_TOOLS,
+		...V073_TOOLS,
+		...V010_SLOTS_TOOLS
+	];
+}
+function getVisibleTools() {
+	if ((process.env["AGENTMEMORY_TOOLS"] || "all") === "core") return getAllTools().filter((t) => ESSENTIAL_TOOLS.has(t.name));
+	return getAllTools();
+}
+//#endregion
+//#region src/functions/audit.ts
+const AUDIT_MIGRATE_FUNCTION_ID = "mem::audit-migrate";
+const AUDIT_MIGRATION_COPY_CONCURRENCY = 32;
+const AUDIT_MIGRATION_DELETE_CONCURRENCY = 8;
+const AUDIT_MONTHS_LOCK = KV.auditMonths;
+const AUDIT_MIGRATION_LOCK = "mem:audit:migration-lock";
+const AUDIT_MIGRATION_STATE_KEY = "migration";
+const AUDIT_MIGRATION_DELETE_WAIT_INTERVALS = 2;
+const STATE_STORE_DIR_NAME = "state_store.db";
+function sleep(ms) {
+	return new Promise((resolve) => setTimeout(resolve, ms));
+}
+function encodeStateIndexSegment(index) {
+	let out = "";
+	for (const byte of Buffer.from(index, "utf8")) {
+		const ch = String.fromCharCode(byte);
+		out += /^[A-Za-z0-9\-_.]$/.test(ch) ? ch : `%${byte.toString(16).toUpperCase().padStart(2, "0")}`;
+	}
+	return out;
+}
+function legacyAuditStateFilePath(dataDir) {
+	return join(dataDir, STATE_STORE_DIR_NAME, `${encodeStateIndexSegment(KV.audit)}.bin`);
+}
+async function probeLegacyAuditFile() {
+	const dataDir = getEnvVar("AGENTMEMORY_DATA_DIR");
+	if (!dataDir) return {
+		safe: false,
+		reason: "unreadable"
+	};
+	const storeDir = join(dataDir, STATE_STORE_DIR_NAME);
+	try {
+		await stat(storeDir);
+	} catch {
+		return {
+			safe: false,
+			reason: "unreadable"
+		};
+	}
+	let fileStat;
+	try {
+		fileStat = await stat(legacyAuditStateFilePath(dataDir));
+	} catch (err) {
+		if (err.code === "ENOENT") return {
+			safe: true,
+			empty: true
+		};
+		return {
+			safe: false,
+			reason: "unreadable"
+		};
+	}
+	if (fileStat.size > getAuditMigrateMaxBytes()) return {
+		safe: false,
+		reason: "too-large",
+		sizeBytes: fileStat.size
+	};
+	return {
+		safe: true,
+		empty: false,
+		sizeBytes: fileStat.size
+	};
+}
+async function probeLegacyAuditScope(kv) {
+	let rows;
+	try {
+		rows = await kv.list(KV.audit);
+	} catch {
+		return {
+			safe: false,
+			reason: "unreadable"
+		};
+	}
+	if (!Array.isArray(rows) || rows.length === 0) return {
+		safe: true,
+		empty: true
+	};
+	const sizeBytes = Buffer.byteLength(JSON.stringify(rows), "utf8");
+	if (sizeBytes > getAuditMigrateMaxBytes()) return {
+		safe: false,
+		reason: "too-large",
+		sizeBytes
+	};
+	return {
+		safe: true,
+		empty: false,
+		sizeBytes
+	};
+}
+async function auditMigrationDeleteDelayMs() {
+	const dataDir = getEnvVar("AGENTMEMORY_DATA_DIR");
+	if (!dataDir) return ENGINE_DEFAULT_SAVE_INTERVAL_MS * AUDIT_MIGRATION_DELETE_WAIT_INTERVALS;
+	const configTexts = [];
+	for (const path of engineStateConfigPaths(dataDir, runtimeConfigPath(dataDir))) try {
+		configTexts.push(await readFile(path, "utf-8"));
+	} catch {}
+	return engineSaveIntervalMs(configTexts) * AUDIT_MIGRATION_DELETE_WAIT_INTERVALS;
+}
+async function readAuditMigrationState(kv) {
+	return kv.get(KV.auditMonths, AUDIT_MIGRATION_STATE_KEY);
+}
+async function writeAuditMigrationState(kv, state) {
+	await kv.set(KV.auditMonths, AUDIT_MIGRATION_STATE_KEY, state);
+}
+function auditMonthOf(timestamp) {
+	const parsed = new Date(timestamp);
+	return (Number.isNaN(parsed.getTime()) ? (/* @__PURE__ */ new Date()).toISOString() : parsed.toISOString()).slice(0, 7);
+}
+function monthStartMs(month) {
+	const [year, mon] = month.split("-").map(Number);
+	return Date.UTC(year, mon - 1, 1);
+}
+function monthEndMs(month) {
+	const [year, mon] = month.split("-").map(Number);
+	return Date.UTC(year, mon, 1) - 1;
+}
+function monthNMonthsAgo(count) {
+	const now = /* @__PURE__ */ new Date();
+	return new Date(Date.UTC(now.getUTCFullYear(), now.getUTCMonth() - count, 1)).toISOString().slice(0, 7);
+}
+async function readAuditMonthIndex(kv) {
+	return (await kv.get(KV.auditMonths, "index"))?.months ?? [];
+}
+async function markAuditMonth(kv, month) {
+	await withKeyedLock(AUDIT_MONTHS_LOCK, async () => {
+		const months = await readAuditMonthIndex(kv);
+		if (months.includes(month)) return;
+		const next = [...months, month].sort();
+		await kv.set(KV.auditMonths, "index", { months: next });
+	});
+}
+async function listAuditMonthsDesc(kv) {
+	return [...await readAuditMonthIndex(kv)].sort().reverse();
+}
+let auditRecordedListener = null;
+function setAuditRecordedListener(listener) {
+	auditRecordedListener = listener;
+}
+async function recordAudit(kv, operation, functionId, targetIds, details = {}, qualityScore, userId) {
+	const entry = {
+		id: generateId("aud"),
+		timestamp: (/* @__PURE__ */ new Date()).toISOString(),
+		operation,
+		userId,
+		functionId,
+		targetIds,
+		details,
+		qualityScore
+	};
+	const month = auditMonthOf(entry.timestamp);
+	await kv.set(KV.auditMonth(month), entry.id, entry);
+	await markAuditMonth(kv, month);
+	try {
+		auditRecordedListener?.(entry);
+	} catch {}
+	return entry;
+}
+async function safeAudit(kv, operation, functionId, targetIds, details = {}, qualityScore, userId) {
+	try {
+		await recordAudit(kv, operation, functionId, targetIds, details, qualityScore, userId);
+	} catch (err) {
+		try {
+			logger.warn("audit write failed", {
+				functionId,
+				operation,
+				targetIds,
+				error: err instanceof Error ? err.message : String(err)
+			});
+		} catch {}
+	}
+}
+async function queryAudit(kv, filter) {
+	const limit = filter?.limit || 100;
+	let fromMs;
+	if (filter?.dateFrom) {
+		fromMs = new Date(filter.dateFrom).getTime();
+		if (Number.isNaN(fromMs)) throw new Error(`Invalid dateFrom: ${filter.dateFrom}`);
+	}
+	const query = filter?.query?.trim().toLowerCase();
+	let toMs;
+	if (filter?.dateTo) {
+		toMs = new Date(filter.dateTo).getTime();
+		if (Number.isNaN(toMs)) throw new Error(`Invalid dateTo: ${filter.dateTo}`);
+	}
+	const matches = (entry) => {
+		if (filter?.operation && entry.operation !== filter.operation) return false;
+		const t = new Date(entry.timestamp).getTime();
+		if (fromMs !== void 0 && t < fromMs) return false;
+		if (toMs !== void 0 && t > toMs) return false;
+		if (query && ![entry.functionId, ...entry.targetIds || []].some((v) => String(v || "").toLowerCase().includes(query))) return false;
+		return true;
+	};
+	const seenIds = /* @__PURE__ */ new Set();
+	const collected = [];
+	const addIfNew = (row) => {
+		if (seenIds.has(row.id)) return;
+		seenIds.add(row.id);
+		if (matches(row)) collected.push(row);
+	};
+	const months = await listAuditMonthsDesc(kv);
+	for (const month of months) {
+		if (collected.length >= limit) break;
+		if (toMs !== void 0 && monthStartMs(month) > toMs) continue;
+		if (fromMs !== void 0 && monthEndMs(month) < fromMs) break;
+		const rows = await kv.list(KV.auditMonth(month));
+		for (const row of rows) addIfNew(row);
+	}
+	let legacyFrozen = false;
+	let legacyFrozenBytes;
+	if (collected.length < limit) {
+		const migrationState = await readAuditMigrationState(kv);
+		if (migrationState?.safeToListLegacy) {
+			const legacyRows = await kv.list(KV.audit);
+			for (const row of legacyRows) addIfNew(row);
+		} else if (migrationState?.status === "too-large" || migrationState?.status === "unreadable") {
+			legacyFrozen = true;
+			legacyFrozenBytes = migrationState.legacySizeBytes;
+		}
+	}
+	collected.sort((a, b) => new Date(b.timestamp).getTime() - new Date(a.timestamp).getTime());
+	return {
+		entries: collected.slice(0, limit),
+		legacyFrozen,
+		legacyFrozenBytes
+	};
+}
+async function inParallel(items, concurrency, work) {
+	let next = 0;
+	const runners = Array.from({ length: Math.min(concurrency, items.length) }, async () => {
+		while (next < items.length) {
+			const item = items[next++];
+			await work(item);
+		}
+	});
+	await Promise.all(runners);
+}
+async function startAuditMigration(kv, deps = {}) {
+	const onRedis = kv.backend === "redis";
+	const runProbe = deps.probe ?? (onRedis ? () => probeLegacyAuditScope(kv) : probeLegacyAuditFile);
+	const runDeleteDelayMs = deps.deleteDelayMs ?? (onRedis ? async () => 0 : auditMigrationDeleteDelayMs);
+	const marker = await readAuditMigrationState(kv);
+	if (marker?.status === "done") return;
+	const probe = await runProbe();
+	if (probe.safe && probe.empty) {
+		await writeAuditMigrationState(kv, {
+			status: "done",
+			safeToListLegacy: true,
+			legacySizeBytes: 0,
+			migrated: marker?.migrated ?? 0,
+			purged: marker?.purged ?? 0,
+			summaryWritten: marker?.summaryWritten ?? true,
+			checkedAt: (/* @__PURE__ */ new Date()).toISOString()
+		});
+		return;
+	}
+	if (!probe.safe) {
+		await writeAuditMigrationState(kv, {
+			status: probe.reason,
+			safeToListLegacy: false,
+			legacySizeBytes: probe.reason === "too-large" ? probe.sizeBytes : marker?.legacySizeBytes,
+			migrated: marker?.migrated ?? 0,
+			purged: marker?.purged ?? 0,
+			summaryWritten: marker?.summaryWritten ?? false,
+			checkedAt: (/* @__PURE__ */ new Date()).toISOString()
+		});
+		logger.warn("legacy audit log left frozen; migration only reads it locally and under a size cap", {
+			reason: probe.reason,
+			sizeBytes: probe.reason === "too-large" ? probe.sizeBytes : void 0
+		});
+		return;
+	}
+	let migrated = marker?.migrated ?? 0;
+	let purged = marker?.purged ?? 0;
+	if (marker?.status !== "copied") {
+		let legacy;
+		try {
+			legacy = await kv.list(KV.audit);
+		} catch (err) {
+			logger.warn("audit migration could not read the legacy audit log", { error: err instanceof Error ? err.message : String(err) });
+			return;
+		}
+		if (legacy.length === 0) {
+			await writeAuditMigrationState(kv, {
+				status: "done",
+				safeToListLegacy: true,
+				legacySizeBytes: 0,
+				migrated,
+				purged,
+				summaryWritten: marker?.summaryWritten ?? true,
+				checkedAt: (/* @__PURE__ */ new Date()).toISOString()
+			});
+			return;
+		}
+		const seen = /* @__PURE__ */ new Set();
+		const deduped = legacy.filter((entry) => {
+			if (seen.has(entry.id)) return false;
+			seen.add(entry.id);
+			return true;
+		});
+		const kept = deduped.filter((entry) => entry.operation !== "index_persist");
+		purged = deduped.length - kept.length;
+		migrated = kept.length;
+		try {
+			const months = /* @__PURE__ */ new Set();
+			await inParallel(kept, AUDIT_MIGRATION_COPY_CONCURRENCY, async (entry) => {
+				const month = auditMonthOf(entry.timestamp);
+				await kv.set(KV.auditMonth(month), entry.id, entry);
+				months.add(month);
+			});
+			for (const month of months) await markAuditMonth(kv, month);
+		} catch (err) {
+			logger.warn("audit migration stopped before finishing the copy pass; it resumes on the next boot", { error: err instanceof Error ? err.message : String(err) });
+			return;
+		}
+		await writeAuditMigrationState(kv, {
+			status: "copied",
+			safeToListLegacy: false,
+			legacySizeBytes: probe.sizeBytes,
+			migrated,
+			purged,
+			summaryWritten: false,
+			checkedAt: (/* @__PURE__ */ new Date()).toISOString()
+		});
+	}
+	await sleep(await runDeleteDelayMs());
+	let remaining;
+	try {
+		remaining = await kv.list(KV.audit);
+	} catch (err) {
+		logger.warn("audit migration could not re-read the legacy audit log before deleting; it resumes on the next boot", { error: err instanceof Error ? err.message : String(err) });
+		return;
+	}
+	try {
+		await inParallel(remaining.slice().reverse(), AUDIT_MIGRATION_DELETE_CONCURRENCY, async (entry) => {
+			await kv.delete(KV.audit, entry.id);
+		});
+	} catch (err) {
+		logger.warn("audit migration stopped before finishing the delete pass; it resumes on the next boot", { error: err instanceof Error ? err.message : String(err) });
+		return;
+	}
+	await withKeyedLock(AUDIT_MIGRATION_LOCK, async () => {
+		if ((await readAuditMigrationState(kv))?.summaryWritten) return;
+		if (purged > 0) await safeAudit(kv, "audit_migrate", AUDIT_MIGRATE_FUNCTION_ID, [], {
+			reason: "index_persist rows predate opt-in auditing",
+			purged,
+			migrated
+		});
+		await writeAuditMigrationState(kv, {
+			status: "done",
+			safeToListLegacy: true,
+			legacySizeBytes: 0,
+			migrated,
+			purged,
+			summaryWritten: true,
+			checkedAt: (/* @__PURE__ */ new Date()).toISOString()
+		});
+	});
+	logger.info("audit log moved to monthly scopes", {
+		migrated,
+		purged
+	});
+}
+async function runAuditRetentionSweep(kv, retentionMonths) {
+	if (!Number.isFinite(retentionMonths) || retentionMonths <= 0) return {
+		droppedMonths: [],
+		droppedRows: 0
+	};
+	const months = await readAuditMonthIndex(kv);
+	const cutoff = monthNMonthsAgo(retentionMonths);
+	const toDrop = months.filter((month) => month < cutoff).sort();
+	if (toDrop.length === 0) return {
+		droppedMonths: [],
+		droppedRows: 0
+	};
+	let droppedRows = 0;
+	for (const month of toDrop) {
+		const rows = await kv.list(KV.auditMonth(month));
+		for (const row of rows.slice().reverse()) {
+			await kv.delete(KV.auditMonth(month), row.id);
+			droppedRows++;
+		}
+	}
+	await withKeyedLock(AUDIT_MONTHS_LOCK, async () => {
+		const remaining = (await readAuditMonthIndex(kv)).filter((month) => !toDrop.includes(month)).sort();
+		await kv.set(KV.auditMonths, "index", { months: remaining });
+	});
+	return {
+		droppedMonths: toDrop,
+		droppedRows
+	};
+}
+//#endregion
+//#region src/state/search-layer.ts
+function isSearchLayer(value) {
+	return value === "all" || value === "memory" || value === "observation";
+}
+function isSearchResultLayer(value) {
+	return value === "memory" || value === "observation" || value === "lesson" || value === "insight";
+}
+function getSearchResultLayer(obsId, sessionId) {
+	if (obsId.startsWith("mem_")) return "memory";
+	if (sessionId === "lesson" || obsId.startsWith("lsn_")) return "lesson";
+	if (sessionId === "insight" || obsId.startsWith("ins_")) return "insight";
+	return "observation";
+}
+function matchesSearchLayer(obsId, sessionId, targetLayer = "all", layer) {
+	return targetLayer === "all" || (layer ?? getSearchResultLayer(obsId, sessionId)) === targetLayer;
+}
+//#endregion
+//#region src/state/memory-utils.ts
+function memoryToObservation(memory) {
+	return {
+		id: memory.id,
+		sessionId: memory.sessionIds?.[0] ?? "memory",
+		timestamp: memory.createdAt,
+		type: "decision",
+		title: memory.title,
+		facts: [memory.content],
+		narrative: memory.content,
+		concepts: memory.concepts,
+		files: memory.files,
+		importance: memory.strength,
+		...memory.agentId ? { agentId: memory.agentId } : {}
+	};
+}
+function lessonToObservation(l) {
+	return {
+		id: l.id,
+		sessionId: "lesson",
+		timestamp: l.createdAt,
+		type: "decision",
+		title: l.content.slice(0, 120),
+		facts: [l.content],
+		narrative: l.context || "",
+		concepts: l.tags,
+		files: [],
+		importance: l.confidence
+	};
+}
+//#endregion
+//#region src/functions/recall-response.ts
+function estimateTokens(value) {
+	return Math.max(1, Math.ceil(JSON.stringify(value).length / 3));
+}
+function prefix(text, length) {
+	let end = Math.min(length, text.length);
+	if (end > 0 && end < text.length && /[\uD800-\uDBFF]/.test(text[end - 1])) end--;
+	return text.slice(0, end);
+}
+function fitText(text, budget, makeResult) {
+	let low = 0;
+	let high = text.length;
+	while (low < high) {
+		const middle = Math.ceil((low + high) / 2);
+		if (estimateTokens(makeResult(prefix(text, middle))) <= budget) low = middle;
+		else high = middle - 1;
+	}
+	return makeResult(prefix(text, low));
+}
+function formatResult(result, format) {
+	if (format === "full") return result;
+	const observation = result.observation;
+	const compact = {
+		obsId: observation.id,
+		sessionId: result.sessionId,
+		title: observation.title,
+		type: observation.type,
+		score: result.score,
+		timestamp: observation.timestamp,
+		...result.layer !== void 0 && { layer: result.layer }
+	};
+	if (format === "compact") return compact;
+	const { type: _type, ...narrative } = compact;
+	return {
+		...narrative,
+		narrative: observation.narrative
+	};
+}
+function clipResult(result, format, budget) {
+	const observation = result.observation;
+	const layer = result.layer !== void 0 ? { layer: result.layer } : {};
+	if (format === "compact") {
+		const base = {
+			obsId: observation.id,
+			sessionId: result.sessionId,
+			title: "",
+			type: observation.type,
+			score: result.score,
+			timestamp: observation.timestamp,
+			...layer,
+			content_truncated: true
+		};
+		const minimum = estimateTokens(base);
+		if (minimum > budget) return { minimum };
+		return {
+			result: fitText(observation.title, budget, (title) => ({
+				...base,
+				title
+			})),
+			minimum
+		};
+	}
+	const makeResult = (title, narrative) => {
+		if (format === "narrative") return {
+			obsId: observation.id,
+			sessionId: result.sessionId,
+			title,
+			narrative,
+			score: result.score,
+			timestamp: observation.timestamp,
+			...layer,
+			content_truncated: true
+		};
+		return {
+			observation: {
+				id: observation.id,
+				sessionId: observation.sessionId,
+				timestamp: observation.timestamp,
+				type: observation.type,
+				title,
+				facts: [],
+				narrative,
+				concepts: [],
+				files: [],
+				importance: observation.importance,
+				...observation.confidence !== void 0 && { confidence: observation.confidence },
+				...observation.agentId !== void 0 && { agentId: observation.agentId },
+				...observation.origin && { origin: {
+					channel: observation.origin.channel,
+					capturedAt: observation.origin.capturedAt
+				} }
+			},
+			score: result.score,
+			sessionId: result.sessionId,
+			...layer,
+			content_truncated: true
+		};
+	};
+	const minimum = estimateTokens(makeResult("", ""));
+	if (minimum > budget) return { minimum };
+	const titleResult = fitText(prefix(observation.title, 120), budget, (title) => makeResult(title, ""));
+	const title = "observation" in titleResult ? titleResult.observation.title : titleResult.title;
+	return {
+		result: fitText(observation.narrative || observation.facts.join("\n"), budget, (text) => makeResult(title, text)),
+		minimum
+	};
+}
+function buildRecallResponse(results, format, tokenBudget) {
+	const selected = [];
+	let used = 0;
+	let clipped = false;
+	let minimumBudget;
+	for (const result of results) {
+		const formatted = formatResult(result, format);
+		const tokens = estimateTokens(formatted);
+		if (tokenBudget === void 0 || used + tokens <= tokenBudget) {
+			selected.push(formatted);
+			used += tokens;
+			continue;
+		}
+		if (selected.length === 0) {
+			const preview = clipResult(result, format, tokenBudget);
+			if (preview.result) {
+				selected.push(preview.result);
+				used = estimateTokens(preview.result);
+				clipped = true;
+				continue;
+			} else minimumBudget = Math.min(preview.minimum, tokens);
+		}
+		break;
+	}
+	const excluded = results.slice(selected.length);
+	const metadata = {
+		tokens_used: used,
+		tokens_budget: tokenBudget,
+		truncated: clipped || excluded.length > 0,
+		matched_count: results.length,
+		excluded_by_budget: excluded.length,
+		excluded_results: excluded.slice(0, 10).map((result) => ({
+			obsId: result.observation.id,
+			sessionId: result.sessionId,
+			title: prefix(result.observation.title, 120)
+		})),
+		excluded_results_truncated: excluded.length > 10,
+		...minimumBudget !== void 0 && { minimum_budget: minimumBudget }
+	};
+	if (format === "narrative") {
+		const narrativeResults = selected;
+		return {
+			...metadata,
+			format,
+			results: narrativeResults,
+			text: narrativeResults.map((result, index) => `${index + 1}. ${result.title}\n${result.narrative}`).join("\n\n")
+		};
+	}
+	if (format === "compact") return {
+		...metadata,
+		format,
+		results: selected
+	};
+	return {
+		...metadata,
+		format,
+		results: selected
+	};
+}
+//#endregion
+//#region src/secret-store.ts
+const SECRET_KEY = "AGENTMEMORY_SECRET";
+function agentmemoryHomeDir() {
+	return process.env["AGENTMEMORY_DATA_DIR"] || join(homedir(), ".agentmemory");
+}
+function secretFilePath() {
+	return join(agentmemoryHomeDir(), "secret");
+}
+function usable(value) {
+	if (typeof value !== "string") return "";
+	const trimmed = value.trim();
+	if (!trimmed) return "";
+	if (trimmed.startsWith("${") && trimmed.endsWith("}")) return "";
+	return trimmed;
+}
+function unquote(value) {
+	const quote = value[0];
+	if ((quote === "\"" || quote === "'") && value.length > 1) {
+		const close = value.indexOf(quote, 1);
+		if (close !== -1) return value.slice(1, close);
+	}
+	const hash = value.indexOf(" #");
+	return hash === -1 ? value : value.slice(0, hash).trim();
+}
+function readEnvFileSecret() {
+	let content;
+	try {
+		content = readFileSync(process.env["AGENTMEMORY_ENV_FILE"] || join(homedir(), ".agentmemory", ".env"), "utf-8");
+	} catch {
+		return "";
+	}
+	if (typeof content !== "string") return "";
+	let found = "";
+	for (const line of content.split("\n")) {
+		const trimmed = line.trim();
+		if (trimmed.startsWith("#")) continue;
+		const eq = trimmed.indexOf("=");
+		if (eq === -1) continue;
+		if (trimmed.slice(0, eq).replace(/^export\s+/, "").trim() !== SECRET_KEY) continue;
+		found = usable(unquote(trimmed.slice(eq + 1).trim()));
+	}
+	return found;
+}
+function readSecretFile(path) {
+	try {
+		return usable(readFileSync(path, "utf-8"));
+	} catch {
+		return "";
+	}
+}
+function legacyDataDirSecretPaths(env = process.env) {
+	const dataDir = env["AGENTMEMORY_DATA_DIR"];
+	if (!dataDir) return [];
+	const paths = [
+		join(dataDir, "secret"),
+		join(dataDir, ".hmac"),
+		join(dataDir, "..", ".hmac")
+	];
+	return [...new Set(paths.filter((path) => path !== secretFilePath()))];
+}
+function readStoredSecret(env = process.env) {
+	const canonicalPath = canonicalSecretPath();
+	const localPath = secretFilePath();
+	const legacyPaths = legacyDataDirSecretPaths(env);
+	return readSecretFile(canonicalPath) || (localPath === canonicalPath ? "" : readSecretFile(localPath)) || legacyPaths.map(readSecretFile).find(Boolean) || "";
+}
+function explicitSecret(env = process.env) {
+	return usable(env[SECRET_KEY]) || readEnvFileSecret();
+}
+function isLoopbackUrl(url) {
+	let hostname;
+	try {
+		hostname = new URL(url).hostname.toLowerCase();
+	} catch {
+		return false;
+	}
+	const bare = hostname.replace(/^\[|\]$/g, "");
+	return bare === "localhost" || bare === "::1" || /^127(?:\.\d{1,3}){3}$/.test(bare);
+}
+function resolveClientSecret(baseUrl, env = process.env) {
+	const fromEnv = usable(env[SECRET_KEY]);
+	if (fromEnv) return fromEnv;
+	if (env.AGENTMEMORY_CREDENTIAL_MODE === "explicit") return "";
+	if (!isLoopbackUrl(baseUrl)) return "";
+	return readEnvFileSecret() || readStoredSecret(env);
+}
+function canonicalSecretPath() {
+	return join(homedir(), ".agentmemory", "secret");
+}
+function writeSecretFile(path, secret) {
+	mkdirSync(join(path, ".."), {
+		recursive: true,
+		mode: 448
+	});
+	const staging = `${path}.${process.pid}.${randomBytes(4).toString("hex")}.tmp`;
+	const fd = openSync(staging, "wx", 384);
+	try {
+		writeSync(fd, `${secret}\n`);
+	} finally {
+		closeSync(fd);
+	}
+	try {
+		chmodSync(staging, 384);
+		renameSync(staging, path);
+		chmodSync(path, 384);
+	} finally {
+		try {
+			unlinkSync(staging);
+		} catch {}
+	}
+}
+function writeSecretIfAbsent(path, secret) {
+	mkdirSync(join(path, ".."), {
+		recursive: true,
+		mode: 448
+	});
+	const staging = `${path}.${process.pid}.${randomBytes(4).toString("hex")}.tmp`;
+	const fd = openSync(staging, "wx", 384);
+	try {
+		writeSync(fd, `${secret}\n`);
+	} finally {
+		closeSync(fd);
+	}
+	try {
+		chmodSync(staging, 384);
+		linkSync(staging, path);
+	} catch (err) {
+		if (err.code !== "EEXIST") throw err;
+	} finally {
+		try {
+			unlinkSync(staging);
+		} catch {}
+	}
+	const stored = readSecretFile(path);
+	if (!stored) throw new Error(`Could not read stored API secret at ${path}.`);
+	return stored;
+}
+function ensureServerSecret(env = process.env) {
+	const configured = explicitSecret(env);
+	if (configured) return {
+		secret: configured,
+		source: "env"
+	};
+	const localPath = secretFilePath();
+	const canonicalPath = canonicalSecretPath();
+	const canonical = localPath === canonicalPath ? "" : readSecretFile(canonicalPath);
+	if (canonical) {
+		if (localPath !== canonicalPath && readSecretFile(localPath) !== canonical) writeSecretFile(localPath, canonical);
+		return {
+			secret: canonical,
+			source: "file"
+		};
+	}
+	const legacy = readSecretFile(localPath) || legacyDataDirSecretPaths(env).map(readSecretFile).find(Boolean) || "";
+	const localSecret = writeSecretIfAbsent(localPath, legacy || randomBytes(32).toString("hex"));
+	const secret = localPath === canonicalPath ? localSecret : writeSecretIfAbsent(canonicalPath, localSecret);
+	if (localPath !== canonicalPath && localSecret !== secret) writeSecretFile(localPath, secret);
+	return {
+		secret,
+		source: legacy ? "file" : "generated"
+	};
+}
+function bearerHeaders(baseUrl, env = process.env) {
+	const secret = resolveClientSecret(baseUrl, env);
+	return secret ? { Authorization: `Bearer ${secret}` } : {};
+}
+//#endregion
+export { getVectorBucketSize as $, engineFlushWaitMs as A, getConsolidationCooldownMs as B, III_PINNED_VERSION as C, logger as D, bootWarn as E, describeLlmRoute as F, getFollowupWindowSeconds as G, getConsolidationIntervalMs as H, detectEmbeddingProvider as I, getSessionSweepStaleHours as J, getIndexSaveIntervalMs as K, detectLlmProviderKind as L, redactCredentialUrls as M, runtimeConfigPath as N, setBootVerbose as O, MAX_IMPORT_OBS_PER_SESSION as P, getVectorBackfillMax as Q, getAgentId as R, getVisibleTools as S, bootLog as T, getEnvVar as U, getConsolidationDecayDays as V, getFinalizeIdleMs as W, getStateBackend as X, getStandalonePersistPath as Y, getStateSaveIntervalMs as Z, safeAudit as _, secretFilePath as a, isDropStaleIndexEnabled as at, ESSENTIAL_TOOLS as b, memoryToObservation as c, isSessionSweepEnabled as ct, isSearchResultLayer as d, loadConfig as dt, hydrateProcessEnvFromFile as et, matchesSearchLayer as f, loadEmbeddingConfig as ft, runAuditRetentionSweep as g, parseEnvContent as gt, recordAudit as h, loadTeamConfig as ht, resolveClientSecret as i, isContextInjectionEnabled as it, engineStateConfigPaths as j, captureDurableAfterMs as k, getSearchResultLayer as l, isVectorBackfillAllEnabled as lt, queryAudit as m, loadSnapshotConfig as mt, ensureServerSecret as n, isAutoCompressEnabled as nt, buildRecallResponse as o, isGraphCompactOnBootEnabled as ot, AUDIT_MIGRATION_STATE_KEY as p, loadFallbackConfig as pt, getRedisUrl as q, explicitSecret as r, isConsolidationEnabled as rt, lessonToObservation as s, isGraphExtractionEnabled as st, bearerHeaders as t, isAgentScopeIsolated as tt, isSearchLayer as u, loadClaudeBridgeConfig as ut, setAuditRecordedListener as v, VERSION as w, getAllTools as x, startAuditMigration as y, getAuditRetentionMonths as z };
+
+//# sourceMappingURL=secret-store-D9GwO0xp.mjs.map