@aliyunrds/ctxdb-shared 0.0.9 → 0.0.10

package/dist/index.d.ts

@@ -288,14 +288,14 @@ declare function filterMessagesForExtraction(messages: Array<{
  *
  *   Fix: define the turn by message *content*, not message *count*.
  *   The "current turn" starts at the last contiguous user-message run
- *   and extends to the end of the parsed array. Earlier isSummary
- *   messages are still injected as anchor context (legacy behaviour).
+ *   and extends to the end of the parsed array. Historical summaries are not
+ *   re-injected: an excluded turn must stay excluded on later captures.
  *
  * Invariants:
  *   - Output is always sorted by the original `index` field, preserving
  *     chronological order.
- *   - When there is no user message at all (unusual; defensive), only
- *     isSummary anchors are returned — the caller still has its own
+ *   - When there is no user message at all (unusual; defensive), an empty
+ *     array is returned — the caller still has its own
  *     `hasUser=false → skip` guard which kicks in.
  *   - MAX_TURN_MESSAGES caps the current-turn slice in pathological
  *     cases (e.g. a single turn with 100+ thinking segments). It never
@@ -399,7 +399,29 @@ declare function sanitizeQuery(raw: string): string;
  */
 declare function recall(provider: Mem0Provider, query: string, userId: string, config?: SkillsConfig, sessionId?: string): Promise<RecallResult>;
 
-declare const OFFICIAL_PRODUCTION_BASE_URLS: readonly ["https://api.cn-hangzhou.agentcontext.aliyuncs.com", "https://context-database.aliyuncs.com"];
+/** Official public-site presets. Saved credentials retain their exact service URL. */
+declare const PUBLIC_SITES: {
+    readonly cn: {
+        readonly baseUrl: "https://api.cn-hangzhou.agentcontext.aliyuncs.com";
+        readonly aliases: readonly ["https://context-database.aliyuncs.com"];
+        readonly authorizationUrl: "https://rdsnext.console.aliyun.com/contextDbCliAuthorization/cn-hangzhou";
+    };
+    readonly intl: {
+        readonly baseUrl: "https://context-database.ap-southeast-1.aliyuncs.com";
+        readonly aliases: readonly [];
+        readonly authorizationUrl: "https://rds.console.alibabacloud.com/contextDbCliAuthorization/ap-southeast-1";
+    };
+};
+type PublicSite = keyof typeof PUBLIC_SITES;
+declare function parsePublicSite(value: unknown): PublicSite | undefined;
+/** Normalize the complete URL, without discarding a port, path or credentials. */
+declare function normalizeBaseUrl(value: string): string | null;
+declare function publicSiteForUrl(value: string): PublicSite | undefined;
+/** Presets and explicit deployment URLs are separate, mutually exclusive choices. */
+declare function siteBaseUrl(site: unknown, baseUrl?: unknown): string | undefined;
+
+type SitePreset = (typeof PUBLIC_SITES)[keyof typeof PUBLIC_SITES];
+declare const OFFICIAL_PRODUCTION_BASE_URLS: ReadonlyArray<SitePreset["baseUrl"] | SitePreset["aliases"][number]>;
 type DebugReason = "non_production_base_url" | null;
 interface DebugPolicy {
     debugConfigured: boolean;
@@ -407,8 +429,6 @@ interface DebugPolicy {
     debugForced: boolean;
     debugReason: DebugReason;
 }
-/** Normalize a complete URL for exact policy comparison. */
-declare function normalizeBaseUrl(value: string): string | null;
 declare function isOfficialProductionUrl(value: string): boolean;
 declare function resolveDebugPolicy(configuredDebug: boolean, effectiveBaseUrl: string): DebugPolicy;
 
@@ -823,12 +843,13 @@ declare function commitLogin(pending: PendingLogin, reference: string, baseUrl:
 declare function unbindLogin(path: string, agent: string): void;
 declare function bindLogin(path: string, agent: string, name: string): Promise<void>;
 type SetupAuthenticationOptions = {
+    site?: PublicSite;
     apiKey?: string;
     login?: string;
     baseUrl?: string;
     preserveBaseUrl?: boolean;
 };
-/** Setup keeps the selected identity, but resets its DATA endpoint unless explicitly supplied. */
+/** Setup repairs integration without redirecting an existing credential to another service. */
 declare function setupAuthentication(path: string, agent: string, options: SetupAuthenticationOptions, env?: Record<string, string | undefined>): Promise<void>;
 
 /** Config mutation and reference check occur together, after any concurrent refresh.
@@ -847,7 +868,7 @@ declare function collectUnusedLogins(path: string, transport: OAuthRevokeTranspo
     unconfirmed: number;
 }>;
 
-declare const DEFAULT_DATA_BASE_URL = "https://api.cn-hangzhou.agentcontext.aliyuncs.com";
+declare const DEFAULT_DATA_BASE_URL: "https://api.cn-hangzhou.agentcontext.aliyuncs.com";
 /** Validate explicit input before any config/credential write; never echo a supplied URL's secrets. */
 declare function validateDataBaseUrl(value: unknown, coreOrigin?: boolean): asserts value is string;
 
@@ -1006,4 +1027,39 @@ declare class AuthorizationService {
 /** Publishes a stable login ID only after its fresh record exists. CAS preserves newer Agent choices. */
 declare function publicAuthorizationTarget(pending: PendingLogin, revoke: OAuthRevokeTransport): AuthorizationTarget;
 
-export { ACTIVE_CONTEXTDB_CREDENTIAL, type AddOptions, type AddResult, type AddResultItem, type ApiKeyCredentialRecord, type AuthConfig, AuthConfigError, AuthorizationDeclinedError, type AuthorizationEntry, AuthorizationError, type AuthorizationFlow, type AuthorizationInteraction, type AuthorizationMethod, type AuthorizationNotice, type AuthorizationOutcome, type AuthorizationPrompt, AuthorizationService, type AuthorizationSession, type AuthorizationTarget, type CategoryConfig, CoreDeviceClient, type CredentialCandidate, type CredentialCommit, type CredentialInfo, type CredentialKey, type CredentialRecord, type CredentialSnapshot, DEFAULT_DATA_BASE_URL, DOCUMENT_EVIDENCE_SECTION_TITLE, DataApiAuthorizationProvider, type DataApiCredential, type DataAuthContext, type DebugPolicy, type DebugReason, type DetectionResult, DeviceFlowError, type DevicePrompt, EXTERNAL_KNOWLEDGE_PREAMBLE_HEAD, type ExcludedRecallMemory, type ExternalContext, type ExternalContextChunk, GRAPH_CONTEXT_MAX_CHARS, GRAPH_CONTEXT_SECTION_TITLE, GRAPH_CONTEXT_SOURCE_LABEL, GRAPH_CONTEXT_TAG, GRAPH_CONTEXT_TRUNCATION_MARKER, GRAPH_CONTEXT_USAGE_NOTICE, type ListOptions, LocalCredentialProvider, type Mem0Provider, type MemoryItem, type NormalizedGraphContext, OAuthCredentialError, type OAuthLogin, type OAuthProfile, OAuthProfileProvider, type OAuthRequestAuthorization, type OAuthScope, OAuthSessionStore, OFFICIAL_PRODUCTION_BASE_URLS, type ParsedMessage, RECALLED_MEMORIES_SAFETY_NOTICE, RECALL_TRACE_AGENTS, RECALL_TRACE_FILENAME, RECALL_TRACE_MAX_BYTES, RECALL_TRACE_OUTCOMES, RECALL_TRACE_ROTATED_GENERATIONS, RECALL_TRACE_SCHEMA_VERSION, type ReadRecallTraceOptions, type ReadRecallTraceResult, type RecallFinishTraceInput, type RecallFinishTraceRecord, type RecallMemoryExclusionReason, type RecallMemorySelectionBase, type RecallResult, type RecallSelectionResult, type RecallStartTraceInput, type RecallStartTraceRecord, type RecallTraceAgent, type RecallTraceKind, type RecallTraceOutcome, type RecallTraceRecord, type RecallTraceRequest, type RecallTraceSelection, type RecallTraceStoreOptions, type ResolvedRequestAuthorization, type SearchOptions, type SearchResultWithExternalContext, type SelectTurnOptions, type SelectedRecallMemory, type SkillsConfig, type StoredCredential, assertAuthSnapshot, authSnapshot, beginLogin, bindLogin, buildExternalKnowledgeBlock, buildExternalKnowledgePreamble, buildNormalizedGraphContext, collectUnusedLogins, commitLogin, createRecallFinishRecord, createRecallStartRecord, createRequestAuthorizationProvider, defaultCredentialsPath, extractKnowledgeBaseIds, extractKnowledgeChunkContent, extractKnowledgeChunkSourceLabel, extractKnowledgeChunkTags, filterMessagesForExtraction, formatExternalKnowledgeChunks, formatRecalledMemoriesBlock, internalCandidate, isGenericAssistantMessage, isGraphContextChunk, isKnowledgeBaseUploadTurn, isNoiseMessage, isOfficialProductionUrl, isSessionSpecificContent, loginUsers, namedLogin, normalizeBaseUrl, normalizeCoreOrigin, oauthOwner, oauthProfile, oauthProfileFromConfig, oauthProfileStatus, oauthSessionCandidate, oauthSessionFromCredential, ownAuthProfile, partitionKnowledgeChunks, preserveDefaultApiKey, publicApiKeyFromConfig, publicAuthenticationFromConfig, publicAuthorizationTarget, readActiveCredentialSync, readAuthConfig, readRecallTraces, recall, recallTracePath, rejectAuthEnvironment, releaseLogin, requireLoginId, resolveDebugPolicy, sanitizeChunkContent, sanitizeQuery, sanitizeRecallFailureReason, selectAndFormatRecalledMemories, selectDataApiCredential, selectTurnMessages, selectedLogin, setupAuthentication, stripNoiseFromContent, truncateGraphContext, unbindLogin, updateAuthConfig, validateDataBaseUrl, validateLoginChoice, withAuthConfigLock, withAuthorizationLock, writeRecallTrace };
+/** Tool evidence is retained separately from text sent for memory extraction. */
+interface CaptureToolCall {
+    name: string;
+    provider?: string;
+    id?: string;
+    arguments: Record<string, unknown>;
+    invalidArguments?: true;
+}
+type MemoryCleanupDetection = {
+    detected: false;
+} | {
+    detected: true;
+    operation: "delete" | "batch-delete";
+    source: "cli" | "tool";
+};
+/** Only confirmed ContextDB tool identities or supported executable commands qualify. */
+declare function detectMemoryCleanup(calls: readonly CaptureToolCall[]): MemoryCleanupDetection;
+
+type RecordValue = Record<string, any>;
+declare function captureRecord(value: unknown): RecordValue;
+declare function captureText(value: unknown): string;
+/** Select raw events before any text extraction, truncation or message cap. */
+declare function selectCaptureTurn(records: readonly unknown[]): unknown[];
+/** Registration map is supplied by the owner of native tools, never inferred from bare names. */
+declare function captureToolCalls(records: readonly unknown[], registeredTools?: Readonly<Record<string, string>>): CaptureToolCall[];
+interface CaptureCompletionSignal {
+    /** Supplied only by an authoritative end-of-turn lifecycle, not each model call. */
+    completed?: boolean;
+    turnId?: string;
+    sessionId?: string;
+    lastAssistantMessage?: string;
+}
+/** Pending calls and intermediate model replies cannot be promoted by an idle/Stop event. */
+declare function captureCompletionReason(records: readonly unknown[], signal?: CaptureCompletionSignal): string | undefined;
+
+export { ACTIVE_CONTEXTDB_CREDENTIAL, type AddOptions, type AddResult, type AddResultItem, type ApiKeyCredentialRecord, type AuthConfig, AuthConfigError, AuthorizationDeclinedError, type AuthorizationEntry, AuthorizationError, type AuthorizationFlow, type AuthorizationInteraction, type AuthorizationMethod, type AuthorizationNotice, type AuthorizationOutcome, type AuthorizationPrompt, AuthorizationService, type AuthorizationSession, type AuthorizationTarget, type CaptureCompletionSignal, type CaptureToolCall, type CategoryConfig, CoreDeviceClient, type CredentialCandidate, type CredentialCommit, type CredentialInfo, type CredentialKey, type CredentialRecord, type CredentialSnapshot, DEFAULT_DATA_BASE_URL, DOCUMENT_EVIDENCE_SECTION_TITLE, DataApiAuthorizationProvider, type DataApiCredential, type DataAuthContext, type DebugPolicy, type DebugReason, type DetectionResult, DeviceFlowError, type DevicePrompt, EXTERNAL_KNOWLEDGE_PREAMBLE_HEAD, type ExcludedRecallMemory, type ExternalContext, type ExternalContextChunk, GRAPH_CONTEXT_MAX_CHARS, GRAPH_CONTEXT_SECTION_TITLE, GRAPH_CONTEXT_SOURCE_LABEL, GRAPH_CONTEXT_TAG, GRAPH_CONTEXT_TRUNCATION_MARKER, GRAPH_CONTEXT_USAGE_NOTICE, type ListOptions, LocalCredentialProvider, type Mem0Provider, type MemoryCleanupDetection, type MemoryItem, type NormalizedGraphContext, OAuthCredentialError, type OAuthLogin, type OAuthProfile, OAuthProfileProvider, type OAuthRequestAuthorization, type OAuthScope, OAuthSessionStore, OFFICIAL_PRODUCTION_BASE_URLS, PUBLIC_SITES, type ParsedMessage, type PublicSite, RECALLED_MEMORIES_SAFETY_NOTICE, RECALL_TRACE_AGENTS, RECALL_TRACE_FILENAME, RECALL_TRACE_MAX_BYTES, RECALL_TRACE_OUTCOMES, RECALL_TRACE_ROTATED_GENERATIONS, RECALL_TRACE_SCHEMA_VERSION, type ReadRecallTraceOptions, type ReadRecallTraceResult, type RecallFinishTraceInput, type RecallFinishTraceRecord, type RecallMemoryExclusionReason, type RecallMemorySelectionBase, type RecallResult, type RecallSelectionResult, type RecallStartTraceInput, type RecallStartTraceRecord, type RecallTraceAgent, type RecallTraceKind, type RecallTraceOutcome, type RecallTraceRecord, type RecallTraceRequest, type RecallTraceSelection, type RecallTraceStoreOptions, type ResolvedRequestAuthorization, type SearchOptions, type SearchResultWithExternalContext, type SelectTurnOptions, type SelectedRecallMemory, type SkillsConfig, type StoredCredential, assertAuthSnapshot, authSnapshot, beginLogin, bindLogin, buildExternalKnowledgeBlock, buildExternalKnowledgePreamble, buildNormalizedGraphContext, captureCompletionReason, captureRecord, captureText, captureToolCalls, collectUnusedLogins, commitLogin, createRecallFinishRecord, createRecallStartRecord, createRequestAuthorizationProvider, defaultCredentialsPath, detectMemoryCleanup, extractKnowledgeBaseIds, extractKnowledgeChunkContent, extractKnowledgeChunkSourceLabel, extractKnowledgeChunkTags, filterMessagesForExtraction, formatExternalKnowledgeChunks, formatRecalledMemoriesBlock, internalCandidate, isGenericAssistantMessage, isGraphContextChunk, isKnowledgeBaseUploadTurn, isNoiseMessage, isOfficialProductionUrl, isSessionSpecificContent, loginUsers, namedLogin, normalizeBaseUrl, normalizeCoreOrigin, oauthOwner, oauthProfile, oauthProfileFromConfig, oauthProfileStatus, oauthSessionCandidate, oauthSessionFromCredential, ownAuthProfile, parsePublicSite, partitionKnowledgeChunks, preserveDefaultApiKey, publicApiKeyFromConfig, publicAuthenticationFromConfig, publicAuthorizationTarget, publicSiteForUrl, readActiveCredentialSync, readAuthConfig, readRecallTraces, recall, recallTracePath, rejectAuthEnvironment, releaseLogin, requireLoginId, resolveDebugPolicy, sanitizeChunkContent, sanitizeQuery, sanitizeRecallFailureReason, selectAndFormatRecalledMemories, selectCaptureTurn, selectDataApiCredential, selectTurnMessages, selectedLogin, setupAuthentication, siteBaseUrl, stripNoiseFromContent, truncateGraphContext, unbindLogin, updateAuthConfig, validateDataBaseUrl, validateLoginChoice, withAuthConfigLock, withAuthorizationLock, writeRecallTrace };

package/dist/index.js

@@ -405,12 +405,6 @@ function selectTurnMessages(allParsed, opts = {}) {
     }
   }
   const candidates = [];
-  const summaryRange = turnStart >= 0 ? turnStart : allParsed.length;
-  for (let ai = 0; ai < summaryRange; ai++) {
-    if (allParsed[ai].isSummary) {
-      candidates.push(allParsed[ai]);
-    }
-  }
   const seenIndices = new Set(candidates.map((m) => m.index));
   if (turnStart >= 0) {
     const total = allParsed.length - turnStart;
@@ -696,11 +690,24 @@ async function recall(provider, query, userId, config = {}, sessionId) {
   return { context, memories: budgeted, tokenEstimate };
 }
 
-// src/debug-policy.ts
-var OFFICIAL_PRODUCTION_BASE_URLS = [
-  "https://api.cn-hangzhou.agentcontext.aliyuncs.com",
-  "https://context-database.aliyuncs.com"
-];
+// src/sites.ts
+var PUBLIC_SITES = {
+  cn: {
+    baseUrl: "https://api.cn-hangzhou.agentcontext.aliyuncs.com",
+    aliases: ["https://context-database.aliyuncs.com"],
+    authorizationUrl: "https://rdsnext.console.aliyun.com/contextDbCliAuthorization/cn-hangzhou"
+  },
+  intl: {
+    baseUrl: "https://context-database.ap-southeast-1.aliyuncs.com",
+    aliases: [],
+    authorizationUrl: "https://rds.console.alibabacloud.com/contextDbCliAuthorization/ap-southeast-1"
+  }
+};
+function parsePublicSite(value) {
+  if (value === void 0) return void 0;
+  if (value !== "cn" && value !== "intl") throw new Error("--site requires cn or intl.");
+  return value;
+}
 function normalizeBaseUrl(value) {
   try {
     const parsed = new URL(value.trim());
@@ -712,12 +719,24 @@ function normalizeBaseUrl(value) {
     return null;
   }
 }
-var NORMALIZED_PRODUCTION_URLS = new Set(
-  OFFICIAL_PRODUCTION_BASE_URLS.map((url) => normalizeBaseUrl(url))
-);
-function isOfficialProductionUrl(value) {
+function publicSiteForUrl(value) {
   const normalized = normalizeBaseUrl(value);
-  return normalized !== null && NORMALIZED_PRODUCTION_URLS.has(normalized);
+  return Object.keys(PUBLIC_SITES).find((site) => {
+    const preset = PUBLIC_SITES[site];
+    return [preset.baseUrl, ...preset.aliases].some((url) => url === normalized);
+  });
+}
+function siteBaseUrl(site, baseUrl) {
+  const selected = parsePublicSite(site);
+  if (selected === void 0) return void 0;
+  if (baseUrl !== void 0) throw new Error("--site and --base-url/--server are mutually exclusive.");
+  return PUBLIC_SITES[selected].baseUrl;
+}
+
+// src/debug-policy.ts
+var OFFICIAL_PRODUCTION_BASE_URLS = Object.values(PUBLIC_SITES).flatMap((site) => [site.baseUrl, ...site.aliases]);
+function isOfficialProductionUrl(value) {
+  return publicSiteForUrl(value) !== void 0;
 }
 function resolveDebugPolicy(configuredDebug, effectiveBaseUrl) {
   const debugForced = !isOfficialProductionUrl(effectiveBaseUrl);
@@ -2073,7 +2092,7 @@ function createRequestAuthorizationProvider(credential, baseUrl) {
 }
 
 // src/data-endpoint.ts
-var DEFAULT_DATA_BASE_URL = "https://api.cn-hangzhou.agentcontext.aliyuncs.com";
+var DEFAULT_DATA_BASE_URL = PUBLIC_SITES.cn.baseUrl;
 function validateDataBaseUrl(value, coreOrigin = false) {
   try {
     if (typeof value !== "string" || !value || /[\s\x00-\x1f\x7f]/.test(value) || !/^https?:\/\//i.test(value)) throw new Error();
@@ -2190,9 +2209,27 @@ async function bindLogin(path, agent, name) {
   else await new OAuthSessionStore(source.credentialsPath).share(source.reference, source.profile, loginId, commit);
 }
 async function setupAuthentication(path, agent, options, env = process.env) {
+  const preset = siteBaseUrl(options.site, options.baseUrl);
+  if (preset) {
+    const raw2 = readAuthConfig(path);
+    const existing = options.login ? namedLogin(raw2, path, options.login).baseUrl : replacementBaseUrl(raw2, path, agent);
+    const baseUrl = options.apiKey === void 0 && publicSiteForUrl(existing) === options.site ? existing : preset;
+    if (options.apiKey === void 0 && existing !== baseUrl) {
+      throw new AuthConfigError("Site does not match the selected credential. Run ctxdb login --site " + options.site + " or provide --api-key for that site.");
+    }
+    options = { ...options, baseUrl };
+  }
   if (options.baseUrl !== void 0) validateDataBaseUrl(options.baseUrl);
   await selectSetupAuthentication(path, agent, options, env);
-  if (options.baseUrl === void 0 && !options.preserveBaseUrl) await resetSetupBaseUrl(path, agent, env);
+  if (options.preserveBaseUrl || options.baseUrl !== void 0) return;
+  const raw = readAuthConfig(path), profile = ownAuthProfile(raw, agent), fallback = ownAuthProfile(raw, "default");
+  if (publicAuthenticationFromConfig(raw, path, agent) || Object.hasOwn(profile, "access_credential")) return;
+  const key = Object.hasOwn(profile, "api_key") ? profile.api_key : fallback.api_key;
+  if (typeof key === "string" && key && !env.CTXDB_ACCESS_TOKEN && !env.CTXDB_API_KEY) {
+    rejectAuthEnvironment(env);
+    const baseUrl = replacementBaseUrl(raw, path, agent);
+    if (baseUrl !== DEFAULT_DATA_BASE_URL) saveSetupKey(path, agent, raw, key, baseUrl);
+  }
 }
 async function selectSetupAuthentication(path, agent, options, env = process.env) {
   if (options.apiKey !== void 0 && options.login !== void 0) throw new AuthConfigError("--api-key and --login are mutually exclusive.");
@@ -2200,7 +2237,7 @@ async function selectSetupAuthentication(path, agent, options, env = process.env
     rejectAuthEnvironment(env);
     if (!options.apiKey.trim()) throw new AuthConfigError("--api-key requires a nonempty value.");
     const raw2 = readAuthConfig(path);
-    const baseUrl = options.baseUrl ?? (options.preserveBaseUrl ? replacementBaseUrl(raw2, path, agent) : DEFAULT_DATA_BASE_URL);
+    const baseUrl = options.baseUrl ?? replacementBaseUrl(raw2, path, agent);
     saveSetupKey(path, agent, raw2, options.apiKey, baseUrl);
     return;
   }
@@ -2256,42 +2293,6 @@ function saveSetupKey(path, agent, raw, apiKey, baseUrl) {
     throw new AuthConfigError("New API key was saved, but cleanup of the previous local key could not be confirmed. Inspect credentials.json before retrying.");
   }
 }
-async function resetSetupBaseUrl(path, agent, env) {
-  const raw = readAuthConfig(path), s = ownAuthProfile(raw, agent);
-  const stored = publicAuthenticationFromConfig(raw, path, agent);
-  if (stored?.baseUrl === DEFAULT_DATA_BASE_URL) return;
-  const profile = stored?.oauthCredential;
-  if (profile) {
-    rejectAuthEnvironment(env);
-    const expected = authSnapshot(raw, agent), group = groupSnapshot(raw, profile);
-    await new OAuthSessionStore(profile.credentialsPath).changeBaseUrl(profile.reference, oauthOwner(profile), DEFAULT_DATA_BASE_URL, () => {
-      const current = readAuthConfig(path);
-      assertAuthSnapshot(current, agent, expected);
-      if (groupSnapshot(current, profile) !== group) throw new AuthConfigError("The shared login or its users changed during setup; retry setup.");
-    });
-    return;
-  }
-  if (Object.hasOwn(s, "access_credential")) return;
-  const d = ownAuthProfile(raw, "default");
-  const key = stored?.apiKey ?? (Object.hasOwn(s, "api_key") ? s.api_key : d.api_key);
-  if (typeof key !== "string" || !key) return;
-  const baseUrl = stored?.baseUrl ?? s.base_url ?? d.base_url ?? DEFAULT_DATA_BASE_URL;
-  if (baseUrl === DEFAULT_DATA_BASE_URL) return;
-  rejectAuthEnvironment(env);
-  if (stored?.apiKey) {
-    const expected = authSnapshot(raw, agent), provider = new LocalCredentialProvider(join5(dirname6(path), "credentials.json"));
-    provider.transaction((tx) => withAuthConfigLock(path, () => {
-      const current = readAuthConfig(path);
-      assertAuthSnapshot(current, agent, expected);
-      publicAuthenticationFromConfig(current, path, agent);
-      const before = tx.read(s.credential_ref);
-      if (!before.record) throw new AuthConfigError("API key credential changed during setup; retry setup.");
-      tx.put(s.credential_ref, { ...before.record, metadata: { ...before.record.metadata, base_url: DEFAULT_DATA_BASE_URL } }, before);
-    }));
-    return;
-  }
-  saveSetupKey(path, agent, raw, key, DEFAULT_DATA_BASE_URL);
-}
 function replacementBaseUrl(raw, path, agent) {
   for (const candidate of agent === "default" ? [agent] : [agent, "default"]) {
     try {
@@ -2535,6 +2536,337 @@ function publicAuthorizationTarget(pending, revoke) {
     }
   };
 }
+
+// src/memory-cleanup.ts
+var SHELL_TOOLS = /* @__PURE__ */ new Set([
+  "bash",
+  "exec",
+  "shell",
+  "sh",
+  "terminal",
+  "exec_command",
+  "run_in_terminal",
+  "functions.exec_command",
+  "functions.shell_command",
+  "shell_command"
+]);
+var CONTEXTDB_PROVIDERS = /* @__PURE__ */ new Set(["ctxdb", "contextdb", "openclaw_memory_rds_ctxdb"]);
+var DELETE_TOOLS = /* @__PURE__ */ new Set(["memory_delete", "memory_batch_delete"]);
+var CLI_NAMES = /* @__PURE__ */ new Set(["ctxdb", "ctxdb-qoder", "ctxdb_qoder", "rds-ctxdb", "rds_ctxdb", "qoder-ctxdb", "qoder_ctxdb"]);
+var BOOLEAN_FLAGS = /* @__PURE__ */ new Set(["help", "json", "verbose", "all", "yes"]);
+function shellTokens(command) {
+  const tokens = [];
+  let value = "", active = false, quote = "";
+  const flush = () => {
+    if (active) tokens.push({ value });
+    value = "";
+    active = false;
+  };
+  for (let i = 0; i < command.length; i++) {
+    const c = command[i];
+    if (quote) {
+      if (c === quote) {
+        quote = "";
+        continue;
+      }
+      if (quote === '"' && c === "\\" && /["\\$`\n]/.test(command[i + 1] ?? "")) {
+        const next = command[++i];
+        if (next !== "\n") value += next;
+        continue;
+      }
+      if (quote === '"' && (c === "`" || c === "$" && command[i + 1] === "(")) return null;
+      value += c;
+      continue;
+    }
+    if (c === "'" || c === '"') {
+      active = true;
+      quote = c;
+      continue;
+    }
+    if (c === "\\") {
+      const next = command[i + 1];
+      if (next === void 0) return null;
+      if (/[\s'"\\;&|<>$`]/.test(next)) {
+        i++;
+        if (next !== "\n") {
+          value += next;
+          active = true;
+        }
+      } else {
+        value += c;
+        active = true;
+      }
+      continue;
+    }
+    if (c === "#" && !active) {
+      while (i < command.length && command[i] !== "\n") i++;
+      flush();
+      tokens.push({ value: ";", operator: true });
+      continue;
+    }
+    if (c === "`" || c === "$" && command[i + 1] === "(") return null;
+    if (c === "<" && command[i + 1] === "<") return null;
+    if (/[;&|\n()<>]/.test(c)) {
+      flush();
+      let op = c;
+      if (command[i + 1] === c && /[&|>]/.test(c)) op += command[++i];
+      tokens.push({ value: op, operator: true });
+      continue;
+    }
+    if (/\s/.test(c)) {
+      flush();
+      continue;
+    }
+    active = true;
+    value += c;
+  }
+  if (quote) return null;
+  flush();
+  return tokens;
+}
+function basename(path) {
+  return path.split(/[\\/]/).at(-1).replace(/\.(?:cmd|exe)$/i, "");
+}
+function cliOperation(argv) {
+  if (argv.some((a) => a === "--help" || a.startsWith("--help=") || a === "-h")) return;
+  const positional = [];
+  let literal = false;
+  for (let i = 1; i < argv.length; i++) {
+    const arg = argv[i];
+    if (arg === "--") {
+      literal = true;
+      continue;
+    }
+    if (!literal && arg.startsWith("--")) {
+      if (!arg.includes("=") && !BOOLEAN_FLAGS.has(arg.slice(2)) && argv[i + 1] && !argv[i + 1].startsWith("--")) i++;
+    } else positional.push(arg);
+  }
+  if (positional[0] !== "memory") return;
+  if (positional[1] === "delete" || positional[1] === "batch-delete") return positional[1];
+}
+function commandOperation(argv, depth) {
+  let i = 0;
+  while (/^[A-Za-z_][\w]*=/.test(argv[i] ?? "")) i++;
+  if (basename(argv[i] ?? "") === "env") {
+    i++;
+    while (i < argv.length) {
+      if (argv[i] === "--") {
+        i++;
+        break;
+      }
+      if (argv[i] === "-u" || argv[i] === "--unset") {
+        i += 2;
+        continue;
+      }
+      if (argv[i] === "-i" || argv[i] === "--ignore-environment" || argv[i].startsWith("--unset=") || /^[A-Za-z_][\w]*=/.test(argv[i])) {
+        i++;
+        continue;
+      }
+      break;
+    }
+  }
+  if (argv[i] === "command") {
+    i++;
+    if (argv[i] === "--") i++;
+  }
+  const name = basename(argv[i] ?? "");
+  if (CLI_NAMES.has(name)) return cliOperation(argv.slice(i));
+  if (depth < 3 && ["bash", "sh", "zsh"].includes(name)) {
+    const flag = argv[i + 1];
+    if (/^-[a-z]*c[a-z]*$/.test(flag ?? "") && argv[i + 2]) return shellOperation(argv[i + 2], depth + 1);
+  }
+}
+function shellOperation(command, depth = 0) {
+  const tokens = shellTokens(command);
+  if (!tokens) return;
+  let argv = [];
+  for (let i = 0; i <= tokens.length; i++) {
+    const token = tokens[i];
+    if (token?.operator && ["<", ">", ">>"].includes(token.value)) {
+      if (/^\d+$/.test(argv.at(-1) ?? "")) argv.pop();
+      if (tokens[i + 1]?.value === "&") i++;
+      i++;
+      continue;
+    }
+    if (!token || token.operator) {
+      const operation = commandOperation(argv, depth);
+      if (operation) return operation;
+      argv = [];
+    } else argv.push(token.value);
+  }
+}
+function detectMemoryCleanup(calls) {
+  for (const call of calls) {
+    const qualified = /^mcp__(ctxdb|contextdb)__([^_].*)$/.exec(call.name);
+    const provider = call.provider ?? qualified?.[1];
+    const toolName = qualified?.[2] ?? call.name;
+    if (provider && CONTEXTDB_PROVIDERS.has(provider) && DELETE_TOOLS.has(toolName)) {
+      return { detected: true, operation: toolName === "memory_batch_delete" ? "batch-delete" : "delete", source: "tool" };
+    }
+    if (!SHELL_TOOLS.has(call.name.toLowerCase())) continue;
+    const command = call.arguments.command ?? call.arguments.cmd;
+    if (typeof command !== "string") continue;
+    const operation = shellOperation(command);
+    if (operation) return { detected: true, operation, source: "cli" };
+  }
+  return { detected: false };
+}
+
+// src/capture-events.ts
+var object4 = (v) => v && typeof v === "object" && !Array.isArray(v) ? v : {};
+function captureRecord(value) {
+  const row = object4(value);
+  if (row.type === "response_item" || row.type === "event_msg") return object4(row.payload);
+  if (row.type === "message" && row.role) return row;
+  if (row.message) return object4(row.message);
+  return row;
+}
+var info = (v) => object4(object4(v).info);
+var role = (v) => info(v).role ?? captureRecord(v).role ?? object4(v).type;
+var parts = (v) => object4(v).parts ?? captureRecord(v).content ?? captureRecord(v).text;
+function hidden(v) {
+  const row = object4(v), body = captureRecord(v);
+  return [row, body, info(v)].some((r) => r.isMeta || r.isSidechain || r.is_synthetic || r.synthetic || r.ignored || r._pre_verify_synthetic || r._verify_on_stop_synthetic);
+}
+function captureText(value) {
+  const content = parts(value);
+  if (typeof content === "string") return content;
+  if (!Array.isArray(content)) return "";
+  if (role(value) === "user" && content.some((b) => object4(b).type === "tool_result")) return "";
+  return content.flatMap((b) => {
+    const block = object4(b);
+    return !block.synthetic && !block.ignored && ["text", "input_text", "output_text"].includes(block.type) && typeof block.text === "string" ? [block.text] : [];
+  }).join("\n");
+}
+function human(v) {
+  if (hidden(v) || role(v) !== "user") return false;
+  let text2 = captureText(v).trim();
+  if (text2.includes("<user_query>")) text2 = /<user_query>([\s\S]*?)<\/user_query>/.exec(text2)?.[1] ?? "";
+  if (/^(?:Stop hook feedback:|# AGENTS\.md instructions|<environment_context>|<INSTRUCTIONS>|<permissions instructions>|<collaboration_mode>|<recommended_plugins>|<apps_instructions>|<skills_instructions>|<plugins_instructions>|## Memory\s+You have access to a memory folder|<recalled-memories>|<available-knowledge-bases>|<external_codex_apps_open_page>)/.test(text2)) return false;
+  if (stripNoiseFromContent(text2).trim()) return true;
+  const content = parts(v);
+  return Array.isArray(content) && content.some((b) => ["image", "input_image"].includes(object4(b).type));
+}
+function nativeTurn(v) {
+  const row = object4(v), body = captureRecord(v), metadata = info(v);
+  return (row.type === "turn_context" ? row.payload?.turn_id : void 0) ?? row.turn_id ?? row.turnId ?? body.turn_id ?? body.turnId ?? (metadata.role === "user" ? metadata.id : metadata.parentID);
+}
+function selectCaptureTurn(records) {
+  let start = -1;
+  for (let i = records.length - 1; i >= 0; i--) if (human(records[i])) {
+    start = i;
+    break;
+  }
+  if (start < 0) return [];
+  let contextIndex = -1;
+  for (let i = records.length - 1; i >= 0; i--) {
+    const row = object4(records[i]);
+    if (row.type === "turn_context" || row.type === "event_msg" && row.payload?.type === "task_started") {
+      contextIndex = i;
+      break;
+    }
+  }
+  if (contextIndex > start) return [];
+  const turn = nativeTurn(records[start]) ?? (contextIndex >= 0 ? nativeTurn(records[contextIndex]) : void 0);
+  while (start > 0 && human(records[start - 1]) && (turn ? nativeTurn(records[start - 1]) === turn : !nativeTurn(records[start - 1]))) start--;
+  const selected = records.slice(start).filter((r) => !hidden(r) && (role(r) !== "user" || human(r) || Array.isArray(parts(r)) && parts(r).some((b) => b?.type === "tool_result")) && (!turn || !nativeTurn(r) || nativeTurn(r) === turn));
+  return contextIndex >= 0 ? [records[contextIndex], ...selected] : selected;
+}
+function argumentsObject(v) {
+  if (typeof v !== "string") return object4(v);
+  try {
+    return object4(JSON.parse(v));
+  } catch {
+    return {};
+  }
+}
+function captureToolCalls(records, registeredTools = {}) {
+  const calls = [];
+  for (const raw of records) {
+    if (hidden(raw)) continue;
+    const body = captureRecord(raw);
+    const blocks = [];
+    if (body.type === "function_call" || body.type === "custom_tool_call") blocks.push(body);
+    if (role(raw) === "assistant") {
+      if (Array.isArray(parts(raw))) blocks.push(...parts(raw).map(object4).filter((b) => ["tool_use", "toolCall", "tool"].includes(b.type)));
+      if (Array.isArray(body.tool_calls)) blocks.push(...body.tool_calls.map(object4));
+    }
+    for (const block of blocks) {
+      const fn = object4(block.function);
+      const name = fn.name ?? block.name ?? block.tool;
+      if (typeof name !== "string") continue;
+      const encodedArguments = fn.arguments ?? block.arguments;
+      let invalidArguments = false;
+      if (typeof encodedArguments === "string") {
+        try {
+          const parsed = JSON.parse(encodedArguments);
+          invalidArguments = !parsed || typeof parsed !== "object" || Array.isArray(parsed);
+        } catch {
+          invalidArguments = true;
+        }
+      }
+      const args = argumentsObject(encodedArguments ?? block.input ?? block.parameters ?? block.state?.input);
+      const provider = block.provider ?? block.server_name ?? registeredTools[name];
+      const id = block.call_id ?? block.callID ?? block.callId ?? block.id;
+      calls.push({
+        name,
+        arguments: args,
+        ...invalidArguments ? { invalidArguments: true } : {},
+        ...typeof provider === "string" ? { provider } : {},
+        ...typeof id === "string" ? { id } : {}
+      });
+    }
+  }
+  return calls;
+}
+function captureCompletionReason(records, signal = {}) {
+  if (!records.length) return "no_user_in_turn";
+  const pending = /* @__PURE__ */ new Set();
+  let lastAssistant, lastAssistantIndex = -1, lastToolIndex = -1;
+  for (let i = 0; i < records.length; i++) {
+    const raw = records[i], body2 = captureRecord(raw), metadata2 = info(raw), row2 = object4(raw);
+    const session = row2.sessionId ?? row2.session_id ?? body2.session_id ?? metadata2.sessionID;
+    if (signal.sessionId && session && session !== signal.sessionId) return "session_mismatch";
+    const turn = nativeTurn(raw);
+    if (signal.turnId && turn && turn !== signal.turnId) return "turn_unverified";
+    if (role(raw) === "assistant") {
+      lastAssistant = raw;
+      lastAssistantIndex = i;
+    }
+    const calls = captureToolCalls([raw]);
+    for (const call of calls) {
+      if (call.invalidArguments) return "capture_input_incomplete";
+      pending.add(call.id ?? `unknown:${i}`);
+      lastToolIndex = i;
+    }
+    const content = Array.isArray(parts(raw)) ? parts(raw) : [];
+    for (const part of content) {
+      if (part?.type === "tool_result" && role(raw) !== "assistant" && typeof part.tool_use_id === "string") {
+        pending.delete(part.tool_use_id);
+        lastToolIndex = i;
+      }
+      if (part?.type === "tool" && ["completed", "error"].includes(part.state?.status)) pending.delete(part.callID ?? part.id);
+    }
+    if (["tool", "toolResult"].includes(String(role(raw))) || ["function_call_output", "function_call_result", "custom_tool_call_output"].includes(body2.type)) {
+      pending.delete(body2.tool_call_id ?? body2.toolCallId ?? body2.call_id ?? body2.callId);
+      lastToolIndex = i;
+    }
+  }
+  if (pending.size) return "awaiting_tools";
+  if (!lastAssistant || !captureText(lastAssistant).trim()) return "awaiting_assistant";
+  const body = captureRecord(lastAssistant), metadata = info(lastAssistant), row = object4(lastAssistant);
+  const phase = body.phase ?? row.phase;
+  const finish = metadata.finish ?? body.stop_reason ?? body.finish_reason ?? row.finish_reason;
+  if (metadata.error || body.error || ["tool_use", "tool_calls", "tool-calls", "length", "max_tokens", "error", "aborted"].includes(finish)) return "awaiting_final";
+  if (phase && phase !== "final" && phase !== "final_answer") return "awaiting_final";
+  const canonical = (s) => stripNoiseFromContent(s).replace(/\r\n/g, "\n").trim();
+  if (signal.lastAssistantMessage && canonical(captureText(lastAssistant)) !== canonical(signal.lastAssistantMessage)) return "awaiting_host_final";
+  const sdkFinal = metadata.time?.completed && metadata.finish === "stop";
+  if (metadata.role === "assistant" && !sdkFinal) return "awaiting_final";
+  if (lastAssistantIndex <= lastToolIndex && !sdkFinal) return "awaiting_final";
+  if (signal.completed || signal.lastAssistantMessage || sdkFinal || ["end_turn", "stop"].includes(finish) || phase === "final" || phase === "final_answer") return;
+  return "awaiting_final";
+}
 export {
   ACTIVE_CONTEXTDB_CREDENTIAL,
   AuthConfigError,
@@ -2558,6 +2890,7 @@ export {
   OAuthProfileProvider,
   OAuthSessionStore,
   OFFICIAL_PRODUCTION_BASE_URLS,
+  PUBLIC_SITES,
   RECALLED_MEMORIES_SAFETY_NOTICE,
   RECALL_TRACE_AGENTS,
   RECALL_TRACE_FILENAME,
@@ -2572,12 +2905,17 @@ export {
   buildExternalKnowledgeBlock,
   buildExternalKnowledgePreamble,
   buildNormalizedGraphContext,
+  captureCompletionReason,
+  captureRecord,
+  captureText,
+  captureToolCalls,
   collectUnusedLogins,
   commitLogin,
   createRecallFinishRecord,
   createRecallStartRecord,
   createRequestAuthorizationProvider,
   defaultCredentialsPath,
+  detectMemoryCleanup,
   extractKnowledgeBaseIds,
   extractKnowledgeChunkContent,
   extractKnowledgeChunkSourceLabel,
@@ -2603,11 +2941,13 @@ export {
   oauthSessionCandidate,
   oauthSessionFromCredential,
   ownAuthProfile,
+  parsePublicSite,
   partitionKnowledgeChunks,
   preserveDefaultApiKey,
   publicApiKeyFromConfig,
   publicAuthenticationFromConfig,
   publicAuthorizationTarget,
+  publicSiteForUrl,
   readActiveCredentialSync,
   readAuthConfig,
   readRecallTraces,
@@ -2621,10 +2961,12 @@ export {
   sanitizeQuery,
   sanitizeRecallFailureReason,
   selectAndFormatRecalledMemories,
+  selectCaptureTurn,
   selectDataApiCredential,
   selectTurnMessages,
   selectedLogin,
   setupAuthentication,
+  siteBaseUrl,
   stripNoiseFromContent,
   truncateGraphContext,
   unbindLogin,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@aliyunrds/ctxdb-shared",
-  "version": "0.0.9",
+  "version": "0.0.10",
   "type": "module",
   "description": "Shared B-rule modules + memory/KB types for RDS ContextDatabase access layers (OpenClaw fork + Qoder hooks).",
   "license": "Apache-2.0",