@agfpd/iapeer-memory-core 0.2.9 → 0.3.0

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@agfpd/iapeer-memory-core",
-  "version": "0.2.9",
+  "version": "0.3.0",
   "description": "iapeer-memory core — host-neutral TypeScript memory primitive: vault schema/taxonomy config, search engine, memoryd, context renderer, role contracts. Consumed by the @agfpd/iapeer-memory facade; version kept in lockstep by its release flow (docs/10-distribution.md).",
   "license": "MIT",
   "type": "module",

package/src/archive.ts

@@ -24,7 +24,7 @@ function firstSegment(relPath: string): string {
  * Folders whose notes are subject to archiving — UNIFIED rule, no exceptions
  * (decision Артур 15.06, §2.2a): the six monitored content folders (five
  * canonical permanent + agent memory + `03_Projects`). NOT the archive
- * itself, the inboxes, or the system folder. A completed phase/project
+ * itself or the system folder. A completed phase/project
  * (status `completed`/`cancelled`) is stale like any other note and moves to
  * the archive; active `03_Projects` then shows only live work. Wikilinks
  * survive by title; the archive stays searchable.

package/src/config.ts

@@ -50,15 +50,13 @@ export type CoreConfig = {
     dbPath: string;
     fullScanOnStartup: boolean;
   };
-  /** Конвейерные каденции (директива Артура 10.06 ~15:31): канон-правки и
-   *  human-inbox идут ПАЧКАМИ, не событиями — правки должны устаканиться,
-   *  10 пишущих агентов не дёргают конвейер постоянно. */
+  /** Каденция курации (директива Артура 10.06 ~15:31): канон-правки уходят
+   *  ПАЧКОЙ, не событиями — правки должны устаканиться, 10 пишущих агентов
+   *  не дёргают конвейер постоянно. */
   batch: {
-    /** PERMANENT_BATCH period, ms (default 6h). */
-    permanentMs: number;
-    /** HUMAN_INBOX_BATCH — РАЗ В СУТКИ в этот локальный час (default 04:00,
-     *  как в старом контуре: человек пишет долго, ночная партия). */
-    humanInboxHour: number;
+    /** CURATOR_TICK period, ms (default 6h) — the curation pass over changed
+     *  canon (Scriber/Index links + health). */
+    curatorMs: number;
   };
   /**
    * MCP-http endpoint of memoryd (ADR-012). The default port 8766 is the
@@ -261,8 +259,7 @@ export function configFromEnv(): CoreConfig {
       fullScanOnStartup: envBoolean("IAPEER_MEMORY_FULL_SCAN_ON_STARTUP", true),
     },
     batch: {
-      permanentMs: envNumber("IAPEER_MEMORY_PERMANENT_BATCH_SECS", 6 * 3600) * 1000,
-      humanInboxHour: envNumber("IAPEER_MEMORY_HUMAN_INBOX_HOUR", 4),
+      curatorMs: envNumber("IAPEER_MEMORY_CURATOR_TICK_SECS", 6 * 3600) * 1000,
     },
     mcp: {
       port: envNumber("IAPEER_MEMORY_MCP_PORT", 8766),

package/src/db.ts

@@ -144,7 +144,7 @@ export function openDatabase(config: CoreConfig, options: OpenDatabaseOptions =
 
     -- Wikilinks that could not be resolved to a real note. Kept first-class
     -- instead of being silently dropped from edges: a missing/ambiguous link
-    -- is a vault health signal (surfaced via vault_map orphan_wikilinks +
+    -- is a vault health signal (surfaced via memory_map orphan_wikilinks +
     -- the Index nightly health-check). reason ∈ 'missing' | 'ambiguous'.
     CREATE TABLE IF NOT EXISTS unresolved_links (
       source_path TEXT NOT NULL,
@@ -536,7 +536,7 @@ export function documentExists(db: CoreDb, docPath: string): boolean {
 
 /**
  * Unresolved wikilinks (missing target / ambiguous basename across folders).
- * First-class health signal — surfaced through vault_map's opt-in
+ * First-class health signal — surfaced through memory_map's opt-in
  * `orphan_wikilinks` part and the Index nightly health-check.
  */
 export function getUnresolvedLinks(

package/src/embedding.ts

@@ -45,7 +45,7 @@ export type EmbeddingConfig = {
 };
 
 /**
- * Status of a single embedding call, surfaced up to the vault_search
+ * Status of a single embedding call, surfaced up to the memory_search
  * response (`pipeline.embedding`).
  *
  * - `ok`           — valid response;

package/src/frontmatter-fill.ts

@@ -1,6 +1,9 @@
 /**
  * Fill a vault note's frontmatter according to its zone
- * (inbox / permanent / memory).
+ * (permanent / memory). The страж is the SHARED fill logic — the same
+ * functions run the agent hook path (processFile) and the human path
+ * (decideUpdate, human-edit-detect.ts). Inbox zones were removed with the
+ * direct-to-canon model: authors write straight into the typed canon folders.
  *
  * TS port of the reference `scripts/mergemind-frontmatter-fill.py`
  * (behavioural parity against `tests/python/test_frontmatter_fill.py`,
@@ -16,20 +19,16 @@
  * - **identity = peer personality** (нюанс 10): `resolveAgentName` prefers
  *   `PEER_PERSONALITY`, falling back to `IAPEER_MEMORY_AGENT_NAME`.
  *
- * Zone behaviour (parity with the reference, one deliberate deviation):
- * - inbox:     idempotent fill of the 4-field draft frontmatter +
- *              needs_review (unless curator) + UPSERT of the stamp pair
- *              (last_edited_by, updated) — a deviation from the reference,
- *              load-bearing for the unstamped detector: its inbox branch
- *              discriminates by «the stamp pair did not move», which is
- *              only a signal when hook edits DO move it (false-positive
- *              incident 11.06, boris's Write+Edit repro).
- * - permanent: upsert of service fields (last_edited_by, updated,
- *              needs_review).
- * - memory:    PERMANENT service-field semantics + idempotent fill of the
- *              constants. `author` is parsed from the subfolder name, NOT
- *              from the caller identity — load-bearing for DreamWeaver
- *              writing into a foreign subfolder on an Index task.
+ * Zone behaviour:
+ * - permanent: FULL canon fill (`fillPermanentFull`) — title ← filename,
+ *              type/status ← the folder's genre (§2.1), created, author for
+ *              non-curators + needs_review, and an UPSERT of the stamp pair
+ *              (last_edited_by, updated). The author now hand-writes only
+ *              body + tags + inline links + title; the rest is deterministic.
+ * - memory:    service-field semantics + idempotent fill of the constants.
+ *              `author` is parsed from the subfolder name, NOT from the caller
+ *              identity — load-bearing for DreamWeaver writing into a foreign
+ *              subfolder on an Index task.
  *
  * The YAML-safe normalisation of `description` is load-bearing: typographic
  * guillemets `«…»` are a display convention, not YAML quotes; any `: ` inside
@@ -47,7 +46,7 @@ import { guardedWriteFileSync, guardedUnlinkSync } from "./fs-guard.js";
 
 const FRONTMATTER_RE = /^---[^\S\n]*\n([\s\S]*?\n)---[^\S\n]*(?:\n|$)/;
 
-export const VALID_ZONES = ["inbox", "permanent", "memory"] as const;
+export const VALID_ZONES = ["permanent", "memory"] as const;
 export type Zone = (typeof VALID_ZONES)[number];
 
 /**
@@ -202,8 +201,9 @@ export function parseMemoryAuthor(
  * Zone of a file by the first path segment relative to the vault — the
  * single source of truth for zone routing (the reference de-duplicated a
  * bash `case` into exactly this function). Folder whitelist comes from the
- * taxonomy preset (ADR-002): both inboxes, archive and system are NOT in
- * the whitelist → null → caller no-ops.
+ * taxonomy preset (ADR-002): archive and system are NOT in the whitelist →
+ * null → caller no-ops. (Inbox zones removed with the direct-to-canon model:
+ * authors write straight into the typed canon folders, the страж fills.)
  */
 export function resolveZone(
   filePath: string,
@@ -215,7 +215,6 @@ export function resolveZone(
   if (!parts || parts.length === 0) return null;
   const head = parts[0];
   const f = taxonomy.folders;
-  if (head === f.inbox) return "inbox";
   if (
     head === f.knowledge ||
     head === f.decisions ||
@@ -229,38 +228,6 @@ export function resolveZone(
   return null;
 }
 
-export function fillInbox(
-  fmBlock: string,
-  opts: { path: string; agent: string; today: string; nowStamp: string; ctx: FillContext },
-): string {
-  const { taxonomy } = opts.ctx;
-  // STAMP PAIR (дефект-репро boris 11.06, ложный unstamped): upsert как в
-  // fillPermanent/fillMemory. Без неё у inbox-черновиков пара тождественно
-  // (null, null) — «штамп не двинулся» детектора немых записей выполняется
-  // на ЛЮБОЙ легитимной хук-правке, и inbox-ветка вырождается в «hash
-  // двинулся → unstamped» (7 ложных ре-стампов за день 11.06). Оба поля
-  // сервисные для smart-hash → семантический hash и INBOX_NEW-диффы не
-  // двигаются, эхо невозможно. Побочный выигрыш: source-фильтр кураторов
-  // INBOX_NEW впервые получает живой last_edited_by.
-  fmBlock = upsert(fmBlock, "last_edited_by", opts.agent);
-  fmBlock = upsert(fmBlock, "updated", opts.nowStamp);
-  fmBlock = setIfMissing(fmBlock, "title", basenameNoExt(opts.path));
-  fmBlock = setIfMissing(fmBlock, "status", taxonomy.statusTokens.draft);
-  fmBlock = setIfMissing(fmBlock, "created", opts.today);
-  // AUTHOR GUARD (инвариант Артура, инверсия 10.06): агент curator-set
-  // НИКОГДА не становится author в inbox-зоне. Курайторы трогают черновики
-  // только как курирование (rename/правки стиля — горячая дорожка
-  // инвертированного конвейера: копирайтер пишет НОВЫЙ файл при ренейме);
-  // бесхозный файл от курайтора остаётся без author до явной атрибуции —
-  // видимая аномалия лучше тихо присвоенного авторства. Существующий
-  // author и без гарда неприкосновенен (setIfMissing).
-  if (!isCurator(opts.agent, opts.ctx)) {
-    fmBlock = setIfMissing(fmBlock, "author", opts.agent);
-    fmBlock = setIfMissing(fmBlock, "needs_review", "true");
-  }
-  return fmBlock;
-}
-
 /**
  * Full permanent-zone (canon) fill — the lean §2 «страж» core, SHARED between
  * the post-write hook (`processFile`) and the human-edit detector
@@ -288,7 +255,7 @@ export function fillPermanentFull(
 ): string {
   const { taxonomy } = opts.ctx;
   // Service stamp (always) — load-bearing for smart-hash echo-safety and the
-  // unstamped detector, symmetric with fillInbox/fillMemory.
+  // unstamped detector, symmetric with fillMemory.
   fmBlock = upsert(fmBlock, "last_edited_by", opts.agent);
   fmBlock = upsert(fmBlock, "updated", opts.nowStamp);
   // Canon frontmatter the author no longer hand-writes (§2.1). setIfMissing —
@@ -689,9 +656,7 @@ export function processFile(filePath: string, opts: ProcessOptions): boolean {
 
   let newFm: string | null;
   let newBody = rest;
-  if (zone === "inbox") {
-    newFm = fillInbox(fmBlock, { path: filePath, agent: opts.agent, today, nowStamp, ctx });
-  } else if (zone === "permanent") {
+  if (zone === "permanent") {
     newFm = fillPermanentFull(fmBlock, {
       path: filePath,
       agent: opts.agent,

package/src/graph.ts

@@ -54,7 +54,7 @@ function loadGraph(db: CoreDb, agentMemoryMarker: string): { adj: AdjMap; direct
     target_path: string;
   }>;
 
-  // vault_map is the CANONICAL / shared topology — used by the Index nightly
+  // memory_map is the CANONICAL / shared topology — used by the Index nightly
   // health-check (orphans, hubs, bridges). Agent operative notes are personal
   // memory: excluding them here keeps that health picture honest (a
   // canonically-isolated note must read as orphan even if some agent journaled

package/src/human-edit-detect.ts

@@ -10,15 +10,15 @@
  * hash persistence) arrives with the memoryd stage; everything
  * load-bearing (the anti-loop decision core) lives here, pure.
  *
- * PERMANENT mode (the five canonical folders):
+ * Canon folders (the five typed + project notes) — the human writes there
+ * directly from an external editor:
  *   - `last_edited_by == human` AND `updated` fresh → echo of our own
  *     write — skip;
  *   - `last_edited_by` is an agent AND fresh → the post-write hook just
  *     ran — skip (the hook's zone);
- *   - otherwise → an external-editor edit: stamp
- *     `last_edited_by: <human>` + `updated` + `needs_review: true`.
- *
- * HUMAN-INBOX mode: anti-loop as above, then the idempotent 4-field fill.
+ *   - otherwise → an external-editor edit: the shared `fillPermanentFull`
+ *     completes a bare-body note and stamps `last_edited_by: <human>` +
+ *     `updated` + `needs_review: true`.
  *
  * `freshEditWindowS` is CONFIG (the stage-7 review note): default 90s —
  * the reference VALUE IS 90 (bumped from the historical 30: second-
@@ -32,7 +32,12 @@
 import crypto from "node:crypto";
 import path from "node:path";
 import type { TaxonomyPreset } from "./taxonomy.js";
-import { fillPermanentFull } from "./frontmatter-fill.js";
+import {
+  fillPermanentFull,
+  stripEmptyArrays,
+  normalizeAllScalars,
+  normalizeLinksBlock,
+} from "./frontmatter-fill.js";
 
 export const DEFAULT_FRESH_EDIT_WINDOW_S = 90;
 
@@ -85,9 +90,11 @@ export function setIfMissing(fm: string, key: string, value: string): string {
   return `${fm}${tail}${key}: ${value}\n`;
 }
 
-export type HumanEditZone = "permanent" | "human-inbox";
+export type HumanEditZone = "permanent";
 
-/** Zone of a file for the detector: permanent / human-inbox / null. */
+/** Zone of a file for the detector: permanent (the typed canon folders) /
+ *  null. The human writes straight into canon from Obsidian — the страж
+ *  completes a bare-body note via fillPermanentFull. */
 export function getZone(
   filepath: string,
   vault: string,
@@ -96,7 +103,6 @@ export function getZone(
   const rel = path.relative(vault, filepath);
   const first = rel.split(path.sep)[0];
   const f = taxonomy.folders;
-  if (first === f.inboxHuman) return "human-inbox";
   if (
     first === f.knowledge ||
     first === f.decisions ||
@@ -180,54 +186,43 @@ export function decideUpdate(input: DecideUpdateInput): DecideUpdateResult {
     return { action: "skip", recordHash: currentHash, reason: "echo-agent" };
   }
 
-  // Otherwise — an external-editor edit (or a new human-inbox file).
+  // Otherwise — an external-editor edit of a canon note. The SHARED guard
+  // fill (mandate §2: identical to the hook path). Existing notes: stamp-only
+  // no-op on the constants; a human's bare-body canon note: full frontmatter
+  // (title/type-from-folder/status/created/author). `created` ← birthtime
+  // (file creation, not edit time).
   const nowStamp = formatStamp(new Date(input.nowMs));
-  let newFm = fmBlock;
-
-  if (input.zone === "human-inbox") {
-    const titleDefault = input.basename.endsWith(".md")
-      ? input.basename.slice(0, -3)
-      : input.basename;
-    // `created` — file creation date. birthtime is the real creation on
-    // APFS; mtime creeps with edits. birthtime 0 (non-APFS) → mtime.
-    const createdSource =
-      input.birthtimeMs > 0 ? new Date(input.birthtimeMs) : new Date(input.mtimeMs);
-    const createdDate = createdSource.toISOString().slice(0, 10);
-
-    newFm = setIfMissing(newFm, "title", titleDefault);
-    newFm = setIfMissing(newFm, "status", input.taxonomy.statusTokens.draft);
-    newFm = setIfMissing(newFm, "created", createdDate);
-    newFm = setIfMissing(newFm, "author", input.human);
-    newFm = setIfMissing(newFm, "needs_review", "true");
-  } else {
-    // PERMANENT (canon) — the SHARED guard fill (mandate §2: identical to the
-    // hook path). Existing notes: stamp-only no-op on the constants; a human's
-    // bare-body canon note: full frontmatter (title/type-from-folder/status/
-    // created/author). `created` ← birthtime (file creation, not edit time).
-    const createdSource =
-      input.birthtimeMs > 0 ? new Date(input.birthtimeMs) : new Date(input.mtimeMs);
-    const createdDate = createdSource.toISOString().slice(0, 10);
-    newFm = fillPermanentFull(newFm, {
-      path: input.path,
-      agent: input.human,
-      vault: input.vault,
-      today: createdDate,
-      nowStamp,
-      ctx: { taxonomy: input.taxonomy },
-    });
-  }
+  const createdSource =
+    input.birthtimeMs > 0 ? new Date(input.birthtimeMs) : new Date(input.mtimeMs);
+  // LOCAL date (symmetric with the hook path's localDateIso) — `.toISOString()`
+  // is UTC and would shift `created` by a day for early-local-time creations.
+  const createdDate = `${createdSource.getFullYear()}-${pad(createdSource.getMonth() + 1)}-${pad(createdSource.getDate())}`;
+  let newFm = fillPermanentFull(fmBlock, {
+    path: input.path,
+    agent: input.human,
+    vault: input.vault,
+    today: createdDate,
+    nowStamp,
+    ctx: { taxonomy: input.taxonomy },
+  });
 
   if (newFm === fmBlock) {
     return { action: "skip", recordHash: currentHash, reason: "noop" };
   }
 
+  // Mirror the hook path's normalization (mandate §2: the страж is IDENTICAL on
+  // both paths) — YAML-safety on every scalar + ## Связи structural validity, so
+  // a human's colon-bearing scalar never produces unparseable YAML that silently
+  // drops the note from the index.
+  newFm = normalizeAllScalars(stripEmptyArrays(newFm));
+  const newBody = normalizeLinksBlock(body, input.taxonomy);
   const fmTail = newFm.endsWith("\n") ? "" : "\n";
-  const bodyPrefix = body.startsWith("\n") ? "" : "\n";
-  const newContent = `---\n${newFm}${fmTail}---${bodyPrefix}${body}`;
+  const bodyPrefix = newBody.startsWith("\n") ? "" : "\n";
+  const newContent = `---\n${newFm}${fmTail}---${bodyPrefix}${newBody}`;
   return {
     action: "write",
     newContent,
     recordHash: sha256(newContent),
-    reason: input.zone === "human-inbox" ? "fill" : "stamp",
+    reason: "stamp",
   };
 }

package/src/index-render.ts

@@ -8,7 +8,7 @@
  * - **taxonomy/ranking config instead of constants** (ADR-002/011): folder
  *   names, type/subtype tokens, status boost GROUPS and coefficients come
  *   from the same config the search pipeline uses — bucket synchronisation
- *   with `vault_search` holds BY CONSTRUCTION (one source), where the
+ *   with `memory_search` holds BY CONSTRUCTION (one source), where the
  *   reference kept two hand-synchronised constant sets.
  * - **personality is a parameter**: identity resolution (PEER_PERSONALITY
  *   first) happens at the call level, never inside the renderer.

package/src/index.ts

@@ -42,6 +42,23 @@ export {
 } from "./frontmatter-fill.js";
 export { fmUpdate, collectOps, yamlSafeScalar, type FmUpdateOptions, type Op } from "./fm-update.js";
 
+// mode + per-role proactivity (lean §7/§7.1)
+export {
+  resolveMode,
+  curationPlan,
+  type MemoryMode,
+  type RoleSet,
+  type CurationPlan,
+} from "./mode.js";
+
+// dedup + link-hint bands (lean §3a/§3b)
+export {
+  runDedup,
+  DEFAULT_DEDUP_THRESHOLD,
+  DEFAULT_LINK_HINT_THRESHOLD,
+  type DedupMatch,
+} from "./search.js";
+
 // deterministic archiving (lean §2.2a)
 export {
   isArchivableZone,

package/src/indexer.ts

@@ -70,7 +70,7 @@ export function addTitlePath(
  * bare basename resolves only when exactly one note has it — never the last
  * indexed one. Unresolvable links are NOT silently dropped (Audit #5): they
  * move to `unresolved_links` with a reason (`missing` | `ambiguous`) so the
- * vault_map / nightly health-check can see vault rot. The map carries ALL
+ * memory_map / nightly health-check can see vault rot. The map carries ALL
  * indexed files including unchanged ones (Audit #1), so a link to a note that
  * simply wasn't re-parsed this run still resolves instead of being dropped.
  *

package/src/mcp-tools.ts

@@ -19,7 +19,7 @@ import { agentMemoryFolderMarker } from "./taxonomy.js";
 // синхронный fetch с iCloud, без таймаута Node event loop замораживается
 // на минуты. 30 секунд — большой запас, на нормальной сети iCloud
 // укладывается за 5-15 секунд. При срабатывании пишем warn в stderr и
-// возвращаем not-found, чтобы caller мог упасть на vault_search fallback.
+// возвращаем not-found, чтобы caller мог упасть на memory_search fallback.
 const READ_TIMEOUT_MS = 30000;
 
 function isAbortError(err: unknown): boolean {
@@ -28,7 +28,7 @@ function isAbortError(err: unknown): boolean {
   return e.name === "AbortError" || e.code === "ABORT_ERR";
 }
 
-// ---- vault_search ----
+// ---- memory_search ----
 
 export async function runSearch(
   db: CoreDb,
@@ -47,12 +47,12 @@ export async function runSearch(
 /**
  * Public MCP tool surface (ADR-008): exactly three read-only tools.
  * `vault_read` is deliberately NOT part of the surface — in-session reading
- * is the harness's native Read (after vault_search the path is known), and
- * backlinks are covered by vault_graph(depth=1, incoming). `runRead` below
+ * is the harness's native Read (after memory_search the path is known), and
+ * backlinks are covered by memory_related(depth=1, incoming). `runRead` below
  * stays a LIBRARY function of core — for memoryd, the Index runtime, CLI and
  * programmatic consumers outside harness sessions.
  */
-export const MCP_TOOL_SURFACE = ["vault_search", "vault_graph", "vault_map"] as const;
+export const MCP_TOOL_SURFACE = ["memory_search", "memory_related", "memory_map"] as const;
 
 // ---- vault_read — library read function (NOT on the MCP surface, ADR-008) ----
 
@@ -60,7 +60,7 @@ export const MCP_TOOL_SURFACE = ["vault_search", "vault_graph", "vault_map"] as
  * Validate and resolve a user-supplied vault path before any disk access.
  *
  * vault_read is reachable from any agent that loads the reference plugin,
- * including ones whose context can be poisoned by inbox drafts (prompt
+ * including ones whose context can be poisoned by untrusted note content (prompt
  * injection). Without containment, an attacker-controlled `path` like
  * `../../.ssh/id_rsa`, `../../.mergemind/env`, or `/etc/passwd` would
  * exfiltrate arbitrary files the MCP process can read.
@@ -110,8 +110,8 @@ function validateVaultPath(
     throw new Error("Path must not contain empty, '.' or '..' segments");
   }
 
-  // Respect excludeFolders even for direct disk reads. Inbox drafts and
-  // system folders are intentionally hidden from search — leaking them
+  // Respect excludeFolders even for direct disk reads. The system folder is
+  // intentionally hidden from search — leaking it
   // through vault_read would defeat the privacy contract excludeFolders
   // is supposed to provide. Same "Document not found" wording as the
   // not-in-index branch so we don't reveal whether the path exists.
@@ -145,8 +145,8 @@ export async function runRead(
   const meta = getDocumentMeta(db, docPath);
 
   // Fallback path: the requested document is not in the index (typically
-  // because it lives in an excluded folder like `99_System/` or `00_Inbox/`,
-  // or the watcher hasn't picked it up yet). Read it directly from disk and
+  // because it lives in an excluded folder like `99_System/`, or the watcher
+  // hasn't picked it up yet). Read it directly from disk and
   // parse it on the fly — without backlinks, since those depend on the index.
   if (!meta) {
     let text: string;
@@ -234,7 +234,7 @@ export async function runRead(
   };
 }
 
-// ---- vault_graph ----
+// ---- memory_related ----
 
 // Oneway-фильтр графа: backlinks из `06_Оперативка_агентов/` **не**
 // показываются при запросе графа канонической заметки — граф референса не
@@ -257,7 +257,11 @@ export function runGraph(
   const centerMeta = getDocumentMeta(db, docPath);
 
   if (!centerMeta) {
-    return { found: false, error: `Document not found: ${docPath}` };
+    return {
+      found: false,
+      error: `Document not found: ${docPath}`,
+      hint: "If you don't have the exact path, find the note first with memory_search, then pass its `path` here.",
+    };
   }
 
   type Node = {
@@ -354,7 +358,7 @@ export function runGraph(
   };
 }
 
-// ---- vault_map ----
+// ---- memory_map ----
 
 // Summary-mode caps. Full topology of a 300+ note vault crosses 25KB JSON
 // before it reaches the agent — most of that is per-cluster node lists and