@agentskit/memory 0.8.3 → 0.9.0

package/dist/index.d.cts

@@ -1,4 +1,6 @@
 import { ChatMemory, VectorMemory, VectorFilter, Message } from '@agentskit/core';
+export { PersonalizationProfile, PersonalizationStore, createInMemoryPersonalization, renderProfileContext } from './personalization.cjs';
+import { PIIRule, RedactionVault, RedactionAuditSink } from '@agentskit/core/security';
 
 /**
  * ChatMemory backed by a JSON file on disk. Node-only.
@@ -86,37 +88,6 @@ interface FileVectorMemoryConfig {
 }
 declare function fileVectorMemory(config: FileVectorMemoryConfig): VectorMemory;
 
-/**
- * Personalization — a persisted profile per subject (user id,
- * account id, device). The agent reads it on every run to
- * condition responses; the runtime updates it when new facts
- * appear.
- */
-interface PersonalizationProfile {
-    subjectId: string;
-    /** Human-editable notes, facts, preferences. */
-    traits: Record<string, unknown>;
-    /** ISO timestamp of the latest update. */
-    updatedAt: string;
-}
-interface PersonalizationStore {
-    get: (subjectId: string) => Promise<PersonalizationProfile | null>;
-    set: (profile: PersonalizationProfile) => Promise<void>;
-    merge: (subjectId: string, traits: Record<string, unknown>) => Promise<PersonalizationProfile>;
-    delete?: (subjectId: string) => Promise<void>;
-}
-/**
- * In-memory personalization store — tests, single-process demos.
- * Bring your own for production (Postgres, Redis, DynamoDB).
- */
-declare function createInMemoryPersonalization(): PersonalizationStore;
-/**
- * Render a profile into a system-prompt fragment the runtime can
- * prepend. Kept intentionally short — full profile dumps bloat
- * context and leak unnecessary detail to the model.
- */
-declare function renderProfileContext(profile: PersonalizationProfile | null): string;
-
 /**
  * Non-linear memory: a typed knowledge graph. Use for facts the
  * agent should remember beyond a single conversation — entities,
@@ -412,4 +383,106 @@ interface HierarchicalMemory extends ChatMemory {
  */
 declare function createHierarchicalMemory(options: HierarchicalMemoryOptions): HierarchicalMemory;
 
-export { type ChromaConfig, type EncryptedEnvelope, type EncryptedMemoryOptions, type FileVectorMemoryConfig, type GraphEdge, type GraphMemory, type GraphNode, type GraphQuery, type HierarchicalMemory, type HierarchicalMemoryOptions, type HierarchicalRecall, type MilvusConfig, type MongoAtlasVectorConfig, type MongoCollectionLike, type PersonalizationProfile, type PersonalizationStore, type PgVectorConfig, type PgVectorRunner, type PineconeConfig, type QdrantConfig, type RedisChatMemoryConfig, type RedisClientAdapter, type RedisConnectionConfig, type RedisVectorMemoryConfig, type SqliteChatMemoryConfig, type SupabaseVectorStoreConfig, type TursoChatMemoryConfig, type UpstashVectorConfig, type VectorStore, type VectorStoreDocument, type VectorStoreResult, type WeaviateConfig, chroma, createEncryptedMemory, createHierarchicalMemory, createInMemoryGraph, createInMemoryPersonalization, fileChatMemory, fileVectorMemory, matchesFilter, milvusVectorStore, mongoAtlasVectorStore, pgvector, pinecone, qdrant, redisChatMemory, redisVectorMemory, renderProfileContext, sqliteChatMemory, supabaseVectorStore, tursoChatMemory, upstashVector, weaviateVectorStore };
+/**
+ * GDPR / LGPD / CCPA data-subject deletion. ADR-0003 deferred
+ * retention; this module is the "forget the user" half.
+ *
+ * Design: rather than mutate every memory contract (and break the
+ * public API freeze, RFC-0007), we attach `forgetSubject` as a
+ * **capability** on a memory instance. Backends that can implement it
+ * declare a `subjectFilter` (how to recognise records belonging to a
+ * subject) and `deleteFn` (how to remove them). `forgetSubject(memory,
+ * subjectId)` walks every backend the runtime is configured with and
+ * runs the deletion, returning a per-backend report you can sign into
+ * the audit log (#162).
+ *
+ * Closes issue #798.
+ */
+interface ForgettableMemory {
+    /**
+     * Backend identifier (`'pgvector'`, `'pinecone'`, `'sqlite'`, etc.).
+     * Used for the audit-log entry and for the per-backend report.
+     */
+    __agentskitBackend: string;
+    /** Delete every record where `metadata.subjectId === subjectId`. */
+    forgetSubject: (subjectId: string) => Promise<ForgetReport>;
+}
+interface ForgetReport {
+    backend: string;
+    deletedCount: number;
+    /** ISO timestamp of the deletion. */
+    at: string;
+    /** Records the deletion couldn't reach (offline replica, missing index). */
+    failures?: Array<{
+        id: string;
+        reason: string;
+    }>;
+}
+interface ForgetSubjectResult {
+    subjectId: string;
+    reports: ForgetReport[];
+    totalDeleted: number;
+    /** Hash you can sign into the audit log to prove the deletion ran. */
+    evidenceHash: string;
+}
+/**
+ * Walk every memory passed in and run `forgetSubject(subjectId)` on
+ * any that implement it. Memories that don't implement it are
+ * silently skipped — they hold no subject-scoped data, or you must
+ * delete out-of-band (e.g. log retention).
+ */
+declare function forgetSubject(memories: Array<ChatMemory | VectorMemory | unknown>, subjectId: string): Promise<ForgetSubjectResult>;
+/**
+ * Helper for backends that key records by `metadata.subjectId`. Wraps
+ * any `delete(ids)`-style API into a `ForgettableMemory`.
+ */
+declare function makeForgettable<M extends object>(memory: M, options: {
+    backend: string;
+    listIds: (subjectId: string) => Promise<string[]>;
+    deleteIds: (ids: string[]) => Promise<void>;
+}): M & ForgettableMemory;
+
+/**
+ * Wrap any `ChatMemory` so PII is redacted (or tokenized) on every
+ * `save()`. Works with the in-memory, file, sqlite, turso, and redis
+ * chat memories. `load()` and `clear()` are passthrough — reveal
+ * happens at read time via `@agentskit/core/security` `reveal()`,
+ * not inside the memory.
+ *
+ * `mode: 'redact'` (default) replaces matches with the rules' bracket
+ * markers — irreversible. `mode: 'tokenize'` replaces matches with
+ * opaque `<<piitoken:…>>` markers and stores originals in the vault
+ * so role-gated `reveal()` can recover them.
+ *
+ * Closes the memory-write half of issue #791.
+ */
+type RedactionMode = 'redact' | 'tokenize';
+interface ChatMemoryRedactionOptions {
+    /**
+     * Rules to apply. Pass `DEFAULT_PII_RULES` for the baseline set,
+     * `compilePIITaxonomy(json)` for a custom JSON taxonomy, or any
+     * hand-rolled `PIIRule[]`. Same shape as `createPIIRedactor`.
+     */
+    rules: PIIRule[];
+    mode?: RedactionMode;
+    /** Required when `mode === 'tokenize'`. */
+    vault?: RedactionVault;
+    /** Roles allowed to reveal — required when `mode === 'tokenize'`. */
+    allowedRoles?: string[];
+    /** Optional audit sink threaded into the vault `tokenize()` calls. */
+    audit?: RedactionAuditSink;
+}
+interface VectorMemoryRedactionOptions extends ChatMemoryRedactionOptions {
+}
+declare function wrapChatMemoryWithRedaction(inner: ChatMemory, options: ChatMemoryRedactionOptions): ChatMemory;
+/**
+ * Wrap any `VectorMemory` so each document's `content` is redacted (or
+ * tokenized) before `store()`. `search()` and `delete()` pass through.
+ *
+ * Note: embeddings pass through verbatim. Customers who embed
+ * plaintext PII separately (e.g. via a hosted embedding provider)
+ * must redact the input to their embedder, not just to this wrapper.
+ */
+declare function wrapVectorMemoryWithRedaction(inner: VectorMemory, options: VectorMemoryRedactionOptions): VectorMemory;
+
+export { type ChatMemoryRedactionOptions, type ChromaConfig, type EncryptedEnvelope, type EncryptedMemoryOptions, type FileVectorMemoryConfig, type ForgetReport, type ForgetSubjectResult, type ForgettableMemory, type GraphEdge, type GraphMemory, type GraphNode, type GraphQuery, type HierarchicalMemory, type HierarchicalMemoryOptions, type HierarchicalRecall, type MilvusConfig, type MongoAtlasVectorConfig, type MongoCollectionLike, type PgVectorConfig, type PgVectorRunner, type PineconeConfig, type QdrantConfig, type RedactionMode, type RedisChatMemoryConfig, type RedisClientAdapter, type RedisConnectionConfig, type RedisVectorMemoryConfig, type SqliteChatMemoryConfig, type SupabaseVectorStoreConfig, type TursoChatMemoryConfig, type UpstashVectorConfig, type VectorMemoryRedactionOptions, type VectorStore, type VectorStoreDocument, type VectorStoreResult, type WeaviateConfig, chroma, createEncryptedMemory, createHierarchicalMemory, createInMemoryGraph, fileChatMemory, fileVectorMemory, forgetSubject, makeForgettable, matchesFilter, milvusVectorStore, mongoAtlasVectorStore, pgvector, pinecone, qdrant, redisChatMemory, redisVectorMemory, sqliteChatMemory, supabaseVectorStore, tursoChatMemory, upstashVector, weaviateVectorStore, wrapChatMemoryWithRedaction, wrapVectorMemoryWithRedaction };

package/dist/index.d.ts

@@ -1,4 +1,6 @@
 import { ChatMemory, VectorMemory, VectorFilter, Message } from '@agentskit/core';
+export { PersonalizationProfile, PersonalizationStore, createInMemoryPersonalization, renderProfileContext } from './personalization.js';
+import { PIIRule, RedactionVault, RedactionAuditSink } from '@agentskit/core/security';
 
 /**
  * ChatMemory backed by a JSON file on disk. Node-only.
@@ -86,37 +88,6 @@ interface FileVectorMemoryConfig {
 }
 declare function fileVectorMemory(config: FileVectorMemoryConfig): VectorMemory;
 
-/**
- * Personalization — a persisted profile per subject (user id,
- * account id, device). The agent reads it on every run to
- * condition responses; the runtime updates it when new facts
- * appear.
- */
-interface PersonalizationProfile {
-    subjectId: string;
-    /** Human-editable notes, facts, preferences. */
-    traits: Record<string, unknown>;
-    /** ISO timestamp of the latest update. */
-    updatedAt: string;
-}
-interface PersonalizationStore {
-    get: (subjectId: string) => Promise<PersonalizationProfile | null>;
-    set: (profile: PersonalizationProfile) => Promise<void>;
-    merge: (subjectId: string, traits: Record<string, unknown>) => Promise<PersonalizationProfile>;
-    delete?: (subjectId: string) => Promise<void>;
-}
-/**
- * In-memory personalization store — tests, single-process demos.
- * Bring your own for production (Postgres, Redis, DynamoDB).
- */
-declare function createInMemoryPersonalization(): PersonalizationStore;
-/**
- * Render a profile into a system-prompt fragment the runtime can
- * prepend. Kept intentionally short — full profile dumps bloat
- * context and leak unnecessary detail to the model.
- */
-declare function renderProfileContext(profile: PersonalizationProfile | null): string;
-
 /**
  * Non-linear memory: a typed knowledge graph. Use for facts the
  * agent should remember beyond a single conversation — entities,
@@ -412,4 +383,106 @@ interface HierarchicalMemory extends ChatMemory {
  */
 declare function createHierarchicalMemory(options: HierarchicalMemoryOptions): HierarchicalMemory;
 
-export { type ChromaConfig, type EncryptedEnvelope, type EncryptedMemoryOptions, type FileVectorMemoryConfig, type GraphEdge, type GraphMemory, type GraphNode, type GraphQuery, type HierarchicalMemory, type HierarchicalMemoryOptions, type HierarchicalRecall, type MilvusConfig, type MongoAtlasVectorConfig, type MongoCollectionLike, type PersonalizationProfile, type PersonalizationStore, type PgVectorConfig, type PgVectorRunner, type PineconeConfig, type QdrantConfig, type RedisChatMemoryConfig, type RedisClientAdapter, type RedisConnectionConfig, type RedisVectorMemoryConfig, type SqliteChatMemoryConfig, type SupabaseVectorStoreConfig, type TursoChatMemoryConfig, type UpstashVectorConfig, type VectorStore, type VectorStoreDocument, type VectorStoreResult, type WeaviateConfig, chroma, createEncryptedMemory, createHierarchicalMemory, createInMemoryGraph, createInMemoryPersonalization, fileChatMemory, fileVectorMemory, matchesFilter, milvusVectorStore, mongoAtlasVectorStore, pgvector, pinecone, qdrant, redisChatMemory, redisVectorMemory, renderProfileContext, sqliteChatMemory, supabaseVectorStore, tursoChatMemory, upstashVector, weaviateVectorStore };
+/**
+ * GDPR / LGPD / CCPA data-subject deletion. ADR-0003 deferred
+ * retention; this module is the "forget the user" half.
+ *
+ * Design: rather than mutate every memory contract (and break the
+ * public API freeze, RFC-0007), we attach `forgetSubject` as a
+ * **capability** on a memory instance. Backends that can implement it
+ * declare a `subjectFilter` (how to recognise records belonging to a
+ * subject) and `deleteFn` (how to remove them). `forgetSubject(memory,
+ * subjectId)` walks every backend the runtime is configured with and
+ * runs the deletion, returning a per-backend report you can sign into
+ * the audit log (#162).
+ *
+ * Closes issue #798.
+ */
+interface ForgettableMemory {
+    /**
+     * Backend identifier (`'pgvector'`, `'pinecone'`, `'sqlite'`, etc.).
+     * Used for the audit-log entry and for the per-backend report.
+     */
+    __agentskitBackend: string;
+    /** Delete every record where `metadata.subjectId === subjectId`. */
+    forgetSubject: (subjectId: string) => Promise<ForgetReport>;
+}
+interface ForgetReport {
+    backend: string;
+    deletedCount: number;
+    /** ISO timestamp of the deletion. */
+    at: string;
+    /** Records the deletion couldn't reach (offline replica, missing index). */
+    failures?: Array<{
+        id: string;
+        reason: string;
+    }>;
+}
+interface ForgetSubjectResult {
+    subjectId: string;
+    reports: ForgetReport[];
+    totalDeleted: number;
+    /** Hash you can sign into the audit log to prove the deletion ran. */
+    evidenceHash: string;
+}
+/**
+ * Walk every memory passed in and run `forgetSubject(subjectId)` on
+ * any that implement it. Memories that don't implement it are
+ * silently skipped — they hold no subject-scoped data, or you must
+ * delete out-of-band (e.g. log retention).
+ */
+declare function forgetSubject(memories: Array<ChatMemory | VectorMemory | unknown>, subjectId: string): Promise<ForgetSubjectResult>;
+/**
+ * Helper for backends that key records by `metadata.subjectId`. Wraps
+ * any `delete(ids)`-style API into a `ForgettableMemory`.
+ */
+declare function makeForgettable<M extends object>(memory: M, options: {
+    backend: string;
+    listIds: (subjectId: string) => Promise<string[]>;
+    deleteIds: (ids: string[]) => Promise<void>;
+}): M & ForgettableMemory;
+
+/**
+ * Wrap any `ChatMemory` so PII is redacted (or tokenized) on every
+ * `save()`. Works with the in-memory, file, sqlite, turso, and redis
+ * chat memories. `load()` and `clear()` are passthrough — reveal
+ * happens at read time via `@agentskit/core/security` `reveal()`,
+ * not inside the memory.
+ *
+ * `mode: 'redact'` (default) replaces matches with the rules' bracket
+ * markers — irreversible. `mode: 'tokenize'` replaces matches with
+ * opaque `<<piitoken:…>>` markers and stores originals in the vault
+ * so role-gated `reveal()` can recover them.
+ *
+ * Closes the memory-write half of issue #791.
+ */
+type RedactionMode = 'redact' | 'tokenize';
+interface ChatMemoryRedactionOptions {
+    /**
+     * Rules to apply. Pass `DEFAULT_PII_RULES` for the baseline set,
+     * `compilePIITaxonomy(json)` for a custom JSON taxonomy, or any
+     * hand-rolled `PIIRule[]`. Same shape as `createPIIRedactor`.
+     */
+    rules: PIIRule[];
+    mode?: RedactionMode;
+    /** Required when `mode === 'tokenize'`. */
+    vault?: RedactionVault;
+    /** Roles allowed to reveal — required when `mode === 'tokenize'`. */
+    allowedRoles?: string[];
+    /** Optional audit sink threaded into the vault `tokenize()` calls. */
+    audit?: RedactionAuditSink;
+}
+interface VectorMemoryRedactionOptions extends ChatMemoryRedactionOptions {
+}
+declare function wrapChatMemoryWithRedaction(inner: ChatMemory, options: ChatMemoryRedactionOptions): ChatMemory;
+/**
+ * Wrap any `VectorMemory` so each document's `content` is redacted (or
+ * tokenized) before `store()`. `search()` and `delete()` pass through.
+ *
+ * Note: embeddings pass through verbatim. Customers who embed
+ * plaintext PII separately (e.g. via a hosted embedding provider)
+ * must redact the input to their embedder, not just to this wrapper.
+ */
+declare function wrapVectorMemoryWithRedaction(inner: VectorMemory, options: VectorMemoryRedactionOptions): VectorMemory;
+
+export { type ChatMemoryRedactionOptions, type ChromaConfig, type EncryptedEnvelope, type EncryptedMemoryOptions, type FileVectorMemoryConfig, type ForgetReport, type ForgetSubjectResult, type ForgettableMemory, type GraphEdge, type GraphMemory, type GraphNode, type GraphQuery, type HierarchicalMemory, type HierarchicalMemoryOptions, type HierarchicalRecall, type MilvusConfig, type MongoAtlasVectorConfig, type MongoCollectionLike, type PgVectorConfig, type PgVectorRunner, type PineconeConfig, type QdrantConfig, type RedactionMode, type RedisChatMemoryConfig, type RedisClientAdapter, type RedisConnectionConfig, type RedisVectorMemoryConfig, type SqliteChatMemoryConfig, type SupabaseVectorStoreConfig, type TursoChatMemoryConfig, type UpstashVectorConfig, type VectorMemoryRedactionOptions, type VectorStore, type VectorStoreDocument, type VectorStoreResult, type WeaviateConfig, chroma, createEncryptedMemory, createHierarchicalMemory, createInMemoryGraph, fileChatMemory, fileVectorMemory, forgetSubject, makeForgettable, matchesFilter, milvusVectorStore, mongoAtlasVectorStore, pgvector, pinecone, qdrant, redisChatMemory, redisVectorMemory, sqliteChatMemory, supabaseVectorStore, tursoChatMemory, upstashVector, weaviateVectorStore, wrapChatMemoryWithRedaction, wrapVectorMemoryWithRedaction };

package/dist/index.js

@@ -1,11 +1,8 @@
+import { __require } from './chunk-G5S2A3MJ.js';
+export { createInMemoryPersonalization, renderProfileContext } from './chunk-G5S2A3MJ.js';
 import { serializeMessages, deserializeMessages, MemoryError, ErrorCodes, ConfigError } from '@agentskit/core';
+import { tokenize, createPIIRedactor } from '@agentskit/core/security';
 
-var __require = /* @__PURE__ */ ((x) => typeof require !== "undefined" ? require : typeof Proxy !== "undefined" ? new Proxy(x, {
-  get: (a, b) => (typeof require !== "undefined" ? require : a)[b]
-}) : x)(function(x) {
-  if (typeof require !== "undefined") return require.apply(this, arguments);
-  throw Error('Dynamic require of "' + x + '" is not supported');
-});
 function fileChatMemory(path) {
   return {
     async load() {
@@ -19,7 +16,11 @@ function fileChatMemory(path) {
     },
     async save(messages) {
       const fs = await import('fs/promises');
-      await fs.writeFile(path, JSON.stringify(serializeMessages(messages), null, 2), "utf8");
+      await fs.writeFile(
+        path,
+        JSON.stringify(serializeMessages(messages), null, 2),
+        { encoding: "utf8", mode: 384 }
+      );
     },
     async clear() {
       try {
@@ -195,7 +196,7 @@ async function createRedisClientAdapter(url) {
       return await client.keys(pattern);
     },
     async disconnect() {
-      await client.disconnect();
+      await client.close();
     },
     async call(command, ...args) {
       return await client.sendCommand([command, ...args.map(String)]);
@@ -423,16 +424,23 @@ function createVectraStore(dirPath) {
   return {
     async upsert(docs) {
       const idx = await getIndex();
-      for (const doc of docs) {
-        await idx.insertItem({
-          vector: doc.vector,
-          metadata: { _id: doc.id, ...doc.metadata }
-        });
+      await idx.beginUpdate();
+      try {
+        for (const doc of docs) {
+          await idx.insertItem({
+            vector: doc.vector,
+            metadata: { _id: doc.id, ...doc.metadata }
+          });
+        }
+        await idx.endUpdate();
+      } catch (err) {
+        idx.cancelUpdate();
+        throw err;
       }
     },
     async query(vector, topK) {
       const idx = await getIndex();
-      const results = await idx.queryItems(vector, topK);
+      const results = await idx.queryItems(vector, "", topK);
       return results.map((r) => ({
         id: String(r.item.metadata._id ?? ""),
         score: r.score,
@@ -483,44 +491,6 @@ function fileVectorMemory(config) {
   };
 }
 
-// src/personalization.ts
-function createInMemoryPersonalization() {
-  const profiles = /* @__PURE__ */ new Map();
-  return {
-    async get(subjectId) {
-      const hit = profiles.get(subjectId);
-      return hit ? { ...hit, traits: { ...hit.traits } } : null;
-    },
-    async set(profile) {
-      profiles.set(profile.subjectId, {
-        ...profile,
-        traits: { ...profile.traits },
-        updatedAt: profile.updatedAt || (/* @__PURE__ */ new Date()).toISOString()
-      });
-    },
-    async merge(subjectId, traits) {
-      const existing = profiles.get(subjectId);
-      const next = {
-        subjectId,
-        traits: { ...existing?.traits ?? {}, ...traits },
-        updatedAt: (/* @__PURE__ */ new Date()).toISOString()
-      };
-      profiles.set(subjectId, next);
-      return { ...next, traits: { ...next.traits } };
-    },
-    async delete(subjectId) {
-      profiles.delete(subjectId);
-    }
-  };
-}
-function renderProfileContext(profile) {
-  if (!profile || Object.keys(profile.traits).length === 0) return "";
-  const lines = Object.entries(profile.traits).filter(([, value]) => value !== void 0 && value !== null && value !== "").map(([key, value]) => `- ${key}: ${typeof value === "string" ? value : JSON.stringify(value)}`);
-  if (lines.length === 0) return "";
-  return `## User profile
-${lines.join("\n")}`;
-}
-
 // src/graph.ts
 function createInMemoryGraph() {
   const nodes = /* @__PURE__ */ new Map();
@@ -1257,6 +1227,102 @@ function createHierarchicalMemory(options) {
   };
 }
 
-export { chroma, createEncryptedMemory, createHierarchicalMemory, createInMemoryGraph, createInMemoryPersonalization, fileChatMemory, fileVectorMemory, matchesFilter, milvusVectorStore, mongoAtlasVectorStore, pgvector, pinecone, qdrant, redisChatMemory, redisVectorMemory, renderProfileContext, sqliteChatMemory, supabaseVectorStore, tursoChatMemory, upstashVector, weaviateVectorStore };
+// src/forget.ts
+function isForgettable(value) {
+  return !!value && typeof value === "object" && "forgetSubject" in value && typeof value.forgetSubject === "function";
+}
+async function hash(input) {
+  const encoded = new TextEncoder().encode(input);
+  const digest = await crypto.subtle.digest("SHA-256", encoded);
+  return Array.from(new Uint8Array(digest)).map((b) => b.toString(16).padStart(2, "0")).join("");
+}
+async function forgetSubject(memories, subjectId) {
+  const reports = [];
+  for (const memory of memories) {
+    if (!isForgettable(memory)) continue;
+    reports.push(await memory.forgetSubject(subjectId));
+  }
+  const totalDeleted = reports.reduce((sum, r) => sum + r.deletedCount, 0);
+  const evidenceHash = await hash(
+    JSON.stringify({ subjectId, reports: reports.map((r) => ({ b: r.backend, n: r.deletedCount, at: r.at })) })
+  );
+  return { subjectId, reports, totalDeleted, evidenceHash };
+}
+function makeForgettable(memory, options) {
+  return Object.assign(memory, {
+    __agentskitBackend: options.backend,
+    forgetSubject: async (subjectId) => {
+      const ids = await options.listIds(subjectId);
+      const failures = [];
+      try {
+        await options.deleteIds(ids);
+      } catch (err) {
+        for (const id of ids) failures.push({ id, reason: err.message });
+      }
+      return {
+        backend: options.backend,
+        deletedCount: ids.length - failures.length,
+        at: (/* @__PURE__ */ new Date()).toISOString(),
+        failures: failures.length ? failures : void 0
+      };
+    }
+  });
+}
+async function transform(input, opts) {
+  if (opts.mode === "tokenize") {
+    if (!opts.vault) {
+      throw new ConfigError({
+        code: ErrorCodes.AK_CONFIG_INVALID,
+        message: 'wrapMemoryWithRedaction: vault is required when mode is "tokenize"'
+      });
+    }
+    if (!opts.allowedRoles) {
+      throw new ConfigError({
+        code: ErrorCodes.AK_CONFIG_INVALID,
+        message: 'wrapMemoryWithRedaction: allowedRoles is required when mode is "tokenize"'
+      });
+    }
+    const result = await tokenize(input, {
+      rules: opts.rules,
+      vault: opts.vault,
+      allowedRoles: opts.allowedRoles,
+      audit: opts.audit
+    });
+    return result.value;
+  }
+  return createPIIRedactor({ rules: opts.rules }).redact(input).value;
+}
+function wrapChatMemoryWithRedaction(inner, options) {
+  return {
+    load: () => inner.load(),
+    save: async (messages) => {
+      const redacted = await Promise.all(
+        messages.map(async (m) => ({
+          ...m,
+          content: await transform(m.content ?? "", options)
+        }))
+      );
+      await inner.save(redacted);
+    },
+    clear: inner.clear ? () => inner.clear() : void 0
+  };
+}
+function wrapVectorMemoryWithRedaction(inner, options) {
+  return {
+    store: async (docs) => {
+      const redacted = await Promise.all(
+        docs.map(async (d) => ({
+          ...d,
+          content: await transform(d.content, options)
+        }))
+      );
+      await inner.store(redacted);
+    },
+    search: (embedding, opts) => inner.search(embedding, opts),
+    delete: inner.delete ? (ids) => inner.delete(ids) : void 0
+  };
+}
+
+export { chroma, createEncryptedMemory, createHierarchicalMemory, createInMemoryGraph, fileChatMemory, fileVectorMemory, forgetSubject, makeForgettable, matchesFilter, milvusVectorStore, mongoAtlasVectorStore, pgvector, pinecone, qdrant, redisChatMemory, redisVectorMemory, sqliteChatMemory, supabaseVectorStore, tursoChatMemory, upstashVector, weaviateVectorStore, wrapChatMemoryWithRedaction, wrapVectorMemoryWithRedaction };
 //# sourceMappingURL=index.js.map
 //# sourceMappingURL=index.js.map