@anuma/sdk 2.2.0 → 2.3.0

package/dist/react/index.cjs

@@ -14067,6 +14067,7 @@ init_portalLlm();
 init_operations3();
 init_constants();
 init_embeddings();
+init_vector();
 init_searchTool();
 var DEFAULT_AUTO_MERGE_THRESHOLD = 0.85;
 var DEFAULT_SCOPE = "private";
@@ -14128,6 +14129,15 @@ async function retain(content, ctx, options = {}) {
   }
   const embedding = await generateEmbedding(trimmed, ctx.embeddingOptions);
   const embeddingModel = ctx.embeddingOptions.model ?? DEFAULT_API_EMBEDDING_MODEL;
+  if (options.respectTombstones) {
+    const tombstoneId = await findTombstoneMatch(embedding, embeddingModel, resolvedScope, ctx, {
+      threshold,
+      folderId: options.folderId
+    });
+    if (tombstoneId) {
+      return { action: "suppressed", memoryId: tombstoneId, tombstoneId, proofCount: 0 };
+    }
+  }
   const created = await createVaultMemoryOp(ctx.vaultCtx, {
     content: trimmed,
     scope: resolvedScope,
@@ -14157,6 +14167,32 @@ async function retain(content, ctx, options = {}) {
 function unionStrings(a, b) {
   return [.../* @__PURE__ */ new Set([...a, ...b])];
 }
+async function findTombstoneMatch(embedding, embeddingModel, scope, ctx, opts) {
+  const rows = await getAllVaultMemoriesOp(ctx.vaultCtx, {
+    includeDeleted: true,
+    scopes: [scope],
+    ...opts.folderId !== void 0 && { folderId: opts.folderId }
+  });
+  let bestId = null;
+  let bestSim = opts.threshold;
+  for (const row of rows) {
+    if (!row.isDeleted || !row.embedding) continue;
+    if (row.embeddingModel !== embeddingModel) continue;
+    let vec;
+    try {
+      vec = JSON.parse(row.embedding);
+    } catch {
+      continue;
+    }
+    if (!Array.isArray(vec) || vec.length !== embedding.length) continue;
+    const sim = cosineSimilarity(embedding, vec);
+    if (sim >= bestSim) {
+      bestSim = sim;
+      bestId = row.uniqueId;
+    }
+  }
+  return bestId;
+}
 function pickEventTimeUpdate(existing, incoming) {
   if (incoming === void 0 || incoming === null) return void 0;
   if (existing.eventTimeStart !== null) return void 0;
@@ -14430,6 +14466,8 @@ async function extractAndRetain(messages, retainCtx, options) {
       const result = await retain(candidate.content, retainCtx, {
         source: "auto-extracted",
         sourceChunkIds: candidate.sourceMessageIds,
+        // Don't let extraction silently resurrect a fact the user deleted.
+        respectTombstones: true,
         ...options.scope !== void 0 && { scope: options.scope },
         ...options.folderId !== void 0 && { folderId: options.folderId },
         ...consolidateOptions !== void 0 && { consolidateOptions },
@@ -14437,7 +14475,7 @@ async function extractAndRetain(messages, retainCtx, options) {
       });
       succeededCandidates.push(candidate);
       results.push(result);
-      if (options.entityCtx && candidate.entities.length > 0) {
+      if (result.action !== "suppressed" && options.entityCtx && candidate.entities.length > 0) {
         try {
           if (!await isMemoryTopicsUserManaged(options.entityCtx, result.memoryId)) {
             await linkMemoryEntitiesOp(options.entityCtx, result.memoryId, candidate.entities, {
@@ -14681,6 +14719,7 @@ function createAutoExtractor(options) {
         );
         stateFor(conversationId).watermark = window2[window2.length - 1].id;
         for (let i = 0; i < results.length; i++) {
+          if (results[i].action === "suppressed") continue;
           options.onMemoryExtracted?.({
             candidate: candidates[i],
             result: results[i],

package/dist/react/index.d.mts

@@ -6256,7 +6256,7 @@ interface RecallResult {
     /** Diagnostic: total memories in the vault when fact lane was queried. */
     vaultSize?: number;
 }
-type RetainAction = "create" | "merge" | "update" | "skip";
+type RetainAction = "create" | "merge" | "update" | "skip" | "suppressed";
 type RetainSource = "manual" | "auto-extracted" | "capsule";
 /** Why the consolidator fell back to "create" instead of a real decision. */
 type ConsolidationFallbackReason = "llm_error" | "invalid_response";
@@ -6267,6 +6267,14 @@ interface RetainOptions {
     folderId?: string | null;
     /** When provided, applies merge-on-write logic instead of plain insert. */
     enableAutoMerge?: boolean;
+    /**
+     * When true, a would-be create is suppressed if it matches a soft-deleted
+     * ("tombstoned") memory above the auto-merge threshold — so auto-extraction
+     * can't silently resurrect a fact the user deleted. Off by default so manual
+     * and other `retain()` callers are unaffected; auto-extraction opts in.
+     * Returns `action: 'suppressed'` with the matched `tombstoneId`.
+     */
+    respectTombstones?: boolean;
     /** Cosine similarity threshold for auto-merge. Default: 0.85. */
     autoMergeThreshold?: number;
     /**
@@ -6316,7 +6324,12 @@ interface RetainResult {
     memoryId: string;
     /** When action is 'merge' or 'update', the prior memory's id. */
     targetId?: string;
-    /** Updated proof_count after this write. */
+    /**
+     * When action is 'suppressed', the id of the soft-deleted memory that blocked
+     * re-creation. `memoryId` is set to the same id (no new memory was written).
+     */
+    tombstoneId?: string;
+    /** Updated proof_count after this write. 0 when nothing was written (suppressed). */
     proofCount: number;
 }
 

package/dist/react/index.d.ts

@@ -6256,7 +6256,7 @@ interface RecallResult {
     /** Diagnostic: total memories in the vault when fact lane was queried. */
     vaultSize?: number;
 }
-type RetainAction = "create" | "merge" | "update" | "skip";
+type RetainAction = "create" | "merge" | "update" | "skip" | "suppressed";
 type RetainSource = "manual" | "auto-extracted" | "capsule";
 /** Why the consolidator fell back to "create" instead of a real decision. */
 type ConsolidationFallbackReason = "llm_error" | "invalid_response";
@@ -6267,6 +6267,14 @@ interface RetainOptions {
     folderId?: string | null;
     /** When provided, applies merge-on-write logic instead of plain insert. */
     enableAutoMerge?: boolean;
+    /**
+     * When true, a would-be create is suppressed if it matches a soft-deleted
+     * ("tombstoned") memory above the auto-merge threshold — so auto-extraction
+     * can't silently resurrect a fact the user deleted. Off by default so manual
+     * and other `retain()` callers are unaffected; auto-extraction opts in.
+     * Returns `action: 'suppressed'` with the matched `tombstoneId`.
+     */
+    respectTombstones?: boolean;
     /** Cosine similarity threshold for auto-merge. Default: 0.85. */
     autoMergeThreshold?: number;
     /**
@@ -6316,7 +6324,12 @@ interface RetainResult {
     memoryId: string;
     /** When action is 'merge' or 'update', the prior memory's id. */
     targetId?: string;
-    /** Updated proof_count after this write. */
+    /**
+     * When action is 'suppressed', the id of the soft-deleted memory that blocked
+     * re-creation. `memoryId` is set to the same id (no new memory was written).
+     */
+    tombstoneId?: string;
+    /** Updated proof_count after this write. 0 when nothing was written (suppressed). */
     proofCount: number;
 }
 

package/dist/react/index.mjs

@@ -125,7 +125,7 @@ import {
   updateVaultMemoryOp,
   useEncryption,
   vaultMemoryToStored
-} from "./chunk-KRNJVLI6.mjs";
+} from "./chunk-JUDJVX66.mjs";
 import {
   PiiRedactor,
   createStreamingDeAnonymizer,
@@ -6741,6 +6741,15 @@ async function retain(content, ctx, options = {}) {
   }
   const embedding = await generateEmbedding(trimmed, ctx.embeddingOptions);
   const embeddingModel = ctx.embeddingOptions.model ?? DEFAULT_API_EMBEDDING_MODEL;
+  if (options.respectTombstones) {
+    const tombstoneId = await findTombstoneMatch(embedding, embeddingModel, resolvedScope, ctx, {
+      threshold,
+      folderId: options.folderId
+    });
+    if (tombstoneId) {
+      return { action: "suppressed", memoryId: tombstoneId, tombstoneId, proofCount: 0 };
+    }
+  }
   const created = await createVaultMemoryOp(ctx.vaultCtx, {
     content: trimmed,
     scope: resolvedScope,
@@ -6770,6 +6779,32 @@ async function retain(content, ctx, options = {}) {
 function unionStrings(a, b) {
   return [.../* @__PURE__ */ new Set([...a, ...b])];
 }
+async function findTombstoneMatch(embedding, embeddingModel, scope, ctx, opts) {
+  const rows = await getAllVaultMemoriesOp(ctx.vaultCtx, {
+    includeDeleted: true,
+    scopes: [scope],
+    ...opts.folderId !== void 0 && { folderId: opts.folderId }
+  });
+  let bestId = null;
+  let bestSim = opts.threshold;
+  for (const row of rows) {
+    if (!row.isDeleted || !row.embedding) continue;
+    if (row.embeddingModel !== embeddingModel) continue;
+    let vec;
+    try {
+      vec = JSON.parse(row.embedding);
+    } catch {
+      continue;
+    }
+    if (!Array.isArray(vec) || vec.length !== embedding.length) continue;
+    const sim = cosineSimilarity(embedding, vec);
+    if (sim >= bestSim) {
+      bestSim = sim;
+      bestId = row.uniqueId;
+    }
+  }
+  return bestId;
+}
 function pickEventTimeUpdate(existing, incoming) {
   if (incoming === void 0 || incoming === null) return void 0;
   if (existing.eventTimeStart !== null) return void 0;
@@ -7043,6 +7078,8 @@ async function extractAndRetain(messages, retainCtx, options) {
       const result = await retain(candidate.content, retainCtx, {
         source: "auto-extracted",
         sourceChunkIds: candidate.sourceMessageIds,
+        // Don't let extraction silently resurrect a fact the user deleted.
+        respectTombstones: true,
         ...options.scope !== void 0 && { scope: options.scope },
         ...options.folderId !== void 0 && { folderId: options.folderId },
         ...consolidateOptions !== void 0 && { consolidateOptions },
@@ -7050,7 +7087,7 @@ async function extractAndRetain(messages, retainCtx, options) {
       });
       succeededCandidates.push(candidate);
       results.push(result);
-      if (options.entityCtx && candidate.entities.length > 0) {
+      if (result.action !== "suppressed" && options.entityCtx && candidate.entities.length > 0) {
         try {
           if (!await isMemoryTopicsUserManaged(options.entityCtx, result.memoryId)) {
             await linkMemoryEntitiesOp(options.entityCtx, result.memoryId, candidate.entities, {
@@ -7292,6 +7329,7 @@ function createAutoExtractor(options) {
         );
         stateFor(conversationId).watermark = window2[window2.length - 1].id;
         for (let i = 0; i < results.length; i++) {
+          if (results[i].action === "suppressed") continue;
           options.onMemoryExtracted?.({
             candidate: candidates[i],
             result: results[i],

package/dist/react/{recall-ASTJPM5Z.mjs → recall-DSJSBDR4.mjs}

@@ -1,6 +1,6 @@
 import {
   recall
-} from "./chunk-KRNJVLI6.mjs";
+} from "./chunk-JUDJVX66.mjs";
 import "./chunk-DFVCS3QQ.mjs";
 import "./chunk-GYKJOWEO.mjs";
 export {

package/dist/server/{chunk-KEMPJE6C.mjs → chunk-3AWYZRTS.mjs}

@@ -18975,7 +18975,7 @@ function createMemoryVaultSearchTool(vaultCtx, embeddingOptions, cache, searchOp
             legacy.map((r) => ({ id: r.uniqueId, content: r.content, score: r.similarity }))
           );
         }
-        const { recall: recall2 } = await import("./recall-K2YHLBBV.mjs");
+        const { recall: recall2 } = await import("./recall-EWMI64SA.mjs");
         const result = await recall2(
           query,
           { vaultCtx, embeddingOptions, vaultCache: cache },

package/dist/server/index.cjs

@@ -25740,6 +25740,7 @@ init_portalLlm();
 init_operations3();
 init_constants();
 init_embeddings();
+init_vector();
 init_searchTool();
 var DEFAULT_AUTO_MERGE_THRESHOLD = 0.85;
 var DEFAULT_SCOPE = "private";
@@ -25801,6 +25802,15 @@ async function retain(content, ctx, options = {}) {
   }
   const embedding = await generateEmbedding(trimmed, ctx.embeddingOptions);
   const embeddingModel = ctx.embeddingOptions.model ?? DEFAULT_API_EMBEDDING_MODEL;
+  if (options.respectTombstones) {
+    const tombstoneId = await findTombstoneMatch(embedding, embeddingModel, resolvedScope, ctx, {
+      threshold,
+      folderId: options.folderId
+    });
+    if (tombstoneId) {
+      return { action: "suppressed", memoryId: tombstoneId, tombstoneId, proofCount: 0 };
+    }
+  }
   const created = await createVaultMemoryOp(ctx.vaultCtx, {
     content: trimmed,
     scope: resolvedScope,
@@ -25830,6 +25840,32 @@ async function retain(content, ctx, options = {}) {
 function unionStrings(a, b) {
   return [.../* @__PURE__ */ new Set([...a, ...b])];
 }
+async function findTombstoneMatch(embedding, embeddingModel, scope, ctx, opts) {
+  const rows = await getAllVaultMemoriesOp(ctx.vaultCtx, {
+    includeDeleted: true,
+    scopes: [scope],
+    ...opts.folderId !== void 0 && { folderId: opts.folderId }
+  });
+  let bestId = null;
+  let bestSim = opts.threshold;
+  for (const row of rows) {
+    if (!row.isDeleted || !row.embedding) continue;
+    if (row.embeddingModel !== embeddingModel) continue;
+    let vec;
+    try {
+      vec = JSON.parse(row.embedding);
+    } catch {
+      continue;
+    }
+    if (!Array.isArray(vec) || vec.length !== embedding.length) continue;
+    const sim = cosineSimilarity(embedding, vec);
+    if (sim >= bestSim) {
+      bestSim = sim;
+      bestId = row.uniqueId;
+    }
+  }
+  return bestId;
+}
 function pickEventTimeUpdate(existing, incoming) {
   if (incoming === void 0 || incoming === null) return void 0;
   if (existing.eventTimeStart !== null) return void 0;
@@ -26103,6 +26139,8 @@ async function extractAndRetain(messages, retainCtx, options) {
       const result = await retain(candidate.content, retainCtx, {
         source: "auto-extracted",
         sourceChunkIds: candidate.sourceMessageIds,
+        // Don't let extraction silently resurrect a fact the user deleted.
+        respectTombstones: true,
         ...options.scope !== void 0 && { scope: options.scope },
         ...options.folderId !== void 0 && { folderId: options.folderId },
         ...consolidateOptions !== void 0 && { consolidateOptions },
@@ -26110,7 +26148,7 @@ async function extractAndRetain(messages, retainCtx, options) {
       });
       succeededCandidates.push(candidate);
       results.push(result);
-      if (options.entityCtx && candidate.entities.length > 0) {
+      if (result.action !== "suppressed" && options.entityCtx && candidate.entities.length > 0) {
         try {
           if (!await isMemoryTopicsUserManaged(options.entityCtx, result.memoryId)) {
             await linkMemoryEntitiesOp(options.entityCtx, result.memoryId, candidate.entities, {
@@ -26354,6 +26392,7 @@ function createAutoExtractor(options) {
         );
         stateFor(conversationId).watermark = window2[window2.length - 1].id;
         for (let i = 0; i < results.length; i++) {
+          if (results[i].action === "suppressed") continue;
           options.onMemoryExtracted?.({
             candidate: candidates[i],
             result: results[i],

package/dist/server/index.d.mts

@@ -5759,7 +5759,7 @@ interface RecallResult {
     /** Diagnostic: total memories in the vault when fact lane was queried. */
     vaultSize?: number;
 }
-type RetainAction = "create" | "merge" | "update" | "skip";
+type RetainAction = "create" | "merge" | "update" | "skip" | "suppressed";
 type RetainSource = "manual" | "auto-extracted" | "capsule";
 /** Why the consolidator fell back to "create" instead of a real decision. */
 type ConsolidationFallbackReason = "llm_error" | "invalid_response";
@@ -5770,6 +5770,14 @@ interface RetainOptions {
     folderId?: string | null;
     /** When provided, applies merge-on-write logic instead of plain insert. */
     enableAutoMerge?: boolean;
+    /**
+     * When true, a would-be create is suppressed if it matches a soft-deleted
+     * ("tombstoned") memory above the auto-merge threshold — so auto-extraction
+     * can't silently resurrect a fact the user deleted. Off by default so manual
+     * and other `retain()` callers are unaffected; auto-extraction opts in.
+     * Returns `action: 'suppressed'` with the matched `tombstoneId`.
+     */
+    respectTombstones?: boolean;
     /** Cosine similarity threshold for auto-merge. Default: 0.85. */
     autoMergeThreshold?: number;
     /**
@@ -5819,7 +5827,12 @@ interface RetainResult {
     memoryId: string;
     /** When action is 'merge' or 'update', the prior memory's id. */
     targetId?: string;
-    /** Updated proof_count after this write. */
+    /**
+     * When action is 'suppressed', the id of the soft-deleted memory that blocked
+     * re-creation. `memoryId` is set to the same id (no new memory was written).
+     */
+    tombstoneId?: string;
+    /** Updated proof_count after this write. 0 when nothing was written (suppressed). */
     proofCount: number;
 }
 

package/dist/server/index.d.ts

@@ -5759,7 +5759,7 @@ interface RecallResult {
     /** Diagnostic: total memories in the vault when fact lane was queried. */
     vaultSize?: number;
 }
-type RetainAction = "create" | "merge" | "update" | "skip";
+type RetainAction = "create" | "merge" | "update" | "skip" | "suppressed";
 type RetainSource = "manual" | "auto-extracted" | "capsule";
 /** Why the consolidator fell back to "create" instead of a real decision. */
 type ConsolidationFallbackReason = "llm_error" | "invalid_response";
@@ -5770,6 +5770,14 @@ interface RetainOptions {
     folderId?: string | null;
     /** When provided, applies merge-on-write logic instead of plain insert. */
     enableAutoMerge?: boolean;
+    /**
+     * When true, a would-be create is suppressed if it matches a soft-deleted
+     * ("tombstoned") memory above the auto-merge threshold — so auto-extraction
+     * can't silently resurrect a fact the user deleted. Off by default so manual
+     * and other `retain()` callers are unaffected; auto-extraction opts in.
+     * Returns `action: 'suppressed'` with the matched `tombstoneId`.
+     */
+    respectTombstones?: boolean;
     /** Cosine similarity threshold for auto-merge. Default: 0.85. */
     autoMergeThreshold?: number;
     /**
@@ -5819,7 +5827,12 @@ interface RetainResult {
     memoryId: string;
     /** When action is 'merge' or 'update', the prior memory's id. */
     targetId?: string;
-    /** Updated proof_count after this write. */
+    /**
+     * When action is 'suppressed', the id of the soft-deleted memory that blocked
+     * re-creation. `memoryId` is set to the same id (no new memory was written).
+     */
+    tombstoneId?: string;
+    /** Updated proof_count after this write. 0 when nothing was written (suppressed). */
     proofCount: number;
 }
 

package/dist/server/index.mjs

@@ -99,7 +99,7 @@ import {
   updateVaultMemoryOp,
   upsertMessageOp,
   vaultMemoryToStored
-} from "./chunk-KEMPJE6C.mjs";
+} from "./chunk-3AWYZRTS.mjs";
 import {
   createStreamingDeAnonymizer,
   resolvePiiRedactor
@@ -4722,6 +4722,15 @@ async function retain(content, ctx, options = {}) {
   }
   const embedding = await generateEmbedding(trimmed, ctx.embeddingOptions);
   const embeddingModel = ctx.embeddingOptions.model ?? DEFAULT_API_EMBEDDING_MODEL;
+  if (options.respectTombstones) {
+    const tombstoneId = await findTombstoneMatch(embedding, embeddingModel, resolvedScope, ctx, {
+      threshold,
+      folderId: options.folderId
+    });
+    if (tombstoneId) {
+      return { action: "suppressed", memoryId: tombstoneId, tombstoneId, proofCount: 0 };
+    }
+  }
   const created = await createVaultMemoryOp(ctx.vaultCtx, {
     content: trimmed,
     scope: resolvedScope,
@@ -4751,6 +4760,32 @@ async function retain(content, ctx, options = {}) {
 function unionStrings(a, b) {
   return [.../* @__PURE__ */ new Set([...a, ...b])];
 }
+async function findTombstoneMatch(embedding, embeddingModel, scope, ctx, opts) {
+  const rows = await getAllVaultMemoriesOp(ctx.vaultCtx, {
+    includeDeleted: true,
+    scopes: [scope],
+    ...opts.folderId !== void 0 && { folderId: opts.folderId }
+  });
+  let bestId = null;
+  let bestSim = opts.threshold;
+  for (const row of rows) {
+    if (!row.isDeleted || !row.embedding) continue;
+    if (row.embeddingModel !== embeddingModel) continue;
+    let vec;
+    try {
+      vec = JSON.parse(row.embedding);
+    } catch {
+      continue;
+    }
+    if (!Array.isArray(vec) || vec.length !== embedding.length) continue;
+    const sim = cosineSimilarity(embedding, vec);
+    if (sim >= bestSim) {
+      bestSim = sim;
+      bestId = row.uniqueId;
+    }
+  }
+  return bestId;
+}
 function pickEventTimeUpdate(existing, incoming) {
   if (incoming === void 0 || incoming === null) return void 0;
   if (existing.eventTimeStart !== null) return void 0;
@@ -5024,6 +5059,8 @@ async function extractAndRetain(messages, retainCtx, options) {
       const result = await retain(candidate.content, retainCtx, {
         source: "auto-extracted",
         sourceChunkIds: candidate.sourceMessageIds,
+        // Don't let extraction silently resurrect a fact the user deleted.
+        respectTombstones: true,
         ...options.scope !== void 0 && { scope: options.scope },
         ...options.folderId !== void 0 && { folderId: options.folderId },
         ...consolidateOptions !== void 0 && { consolidateOptions },
@@ -5031,7 +5068,7 @@ async function extractAndRetain(messages, retainCtx, options) {
       });
       succeededCandidates.push(candidate);
       results.push(result);
-      if (options.entityCtx && candidate.entities.length > 0) {
+      if (result.action !== "suppressed" && options.entityCtx && candidate.entities.length > 0) {
         try {
           if (!await isMemoryTopicsUserManaged(options.entityCtx, result.memoryId)) {
             await linkMemoryEntitiesOp(options.entityCtx, result.memoryId, candidate.entities, {
@@ -5273,6 +5310,7 @@ function createAutoExtractor(options) {
         );
         stateFor(conversationId).watermark = window2[window2.length - 1].id;
         for (let i = 0; i < results.length; i++) {
+          if (results[i].action === "suppressed") continue;
           options.onMemoryExtracted?.({
             candidate: candidates[i],
             result: results[i],

package/dist/server/{recall-K2YHLBBV.mjs → recall-EWMI64SA.mjs}

@@ -1,6 +1,6 @@
 import {
   recall
-} from "./chunk-KEMPJE6C.mjs";
+} from "./chunk-3AWYZRTS.mjs";
 import "./chunk-AHJT66EO.mjs";
 import "./chunk-3RPGXXPZ.mjs";
 export {

package/dist/tools/index.d.mts

@@ -1516,6 +1516,11 @@ declare function exportAppToHtml(options: ExportAppOptions): string;
  * The workflow this prompt mandates (create → critique → patch → audit →
  * patch → verify) needs 7–8 tool rounds on a substantial turn. Hosts capping
  * `maxToolRounds` below 8 starve the trailing `verify_app` step.
+ *
+ * ⚠ The substring "App Builder tools (create_file, patch_file," is relied on by
+ * backend infrastructure — matched anywhere in the text (substring), not as a
+ * prefix/head — so keep it byte-identical; see internal docs.
+ * Guarded by the backend-sync test in appBuilderPrompt.test.ts.
  */
 declare const APP_BUILDER_PROMPT = "App Builder tools (create_file, patch_file, and the rest described below) are available this turn, but they are OPTIONAL \u2014 having them does not mean you should build anything.\n\nBuild ONLY when the user gives an explicit instruction to build, create, generate, or change an app, tool, or UI \u2014 e.g. \"build a todo app\", \"make a snake game\", \"add a footer to the app\", \"change the background to blue\". A bare app name or feature reference is NOT a build instruction: if the user just says \"todo app\", \"a snake game\", or \"qr code\", or asks a question about an app, do NOT generate anything \u2014 reply normally, or ask what they'd like you to build. The same holds for greetings, questions, stories, explanations, advice, or code that isn't a runnable app: respond normally and do not create files. When it's unclear whether the user actually wants an app built, ask instead of building.\n\nOnce the user HAS given an explicit build instruction, you are in App Builder mode: you produce polished, production-quality React apps that feel designed \u2014 not generic.\n\nDESIGN: on the initial build, before writing code, briefly state (2-3 sentences) what you want this app to feel like \u2014 name the specific fonts, the palette in hex, and one signature detail. Be concrete: \"Fraunces display + Inter body + JetBrains Mono metadata, terracotta #b75432 accent on bone #f3efe6, paper-grain texture via inline SVG noise\" is the kind of specificity that anchors the build. Default to nothing: don't pick \"safe modern productivity\" unless the brief literally asks for utilitarian. On later turns, state a design brief only when the change is visual (a restyle, new theme, or new UI); for a logic, data, or behavior-only change, skip the brief and just make the change.\n\nWORKFLOW:\n1. NEVER output code as text or markdown. ALWAYS use tools.\n2. Initial build: state your design brief, then create_file with a \"files\" array writing ALL files in one call. The preview renders automatically.\n3. patch_file requires read_file for that path earlier in the conversation (or create_file in the same conversation, which counts). read_file output is numbered \"42: <text>\" \u2014 the prefix is display-only; never copy it into \"find\". Each \"find\" must match exactly one location \u2014 include 2-3 lines of surrounding context. Pass multiple patches per call to change distinct locations.\n4. Prefer patch_file for changes to existing files \u2014 surgical, reviewable, preserves surrounding code. Reserve create_file overwrites for substantial restructuring. Inserts: find the line before, replace with that line + the new line. Deletes: empty replace.\n5. After substantial changes, call critique_design first (taste, hierarchy, distinctiveness, weakest decision) and then audit_design (mechanical: tokens, focus states, aria-labels, alt, heading order). Patch what each surfaces. critique catches taste issues no checklist would; audit catches mechanics you'd miss. Run both; act on both.\n6. Before declaring done, call verify_app. The host's preview runtime reports whether your app actually mounted and surfaces any errors it captured \u2014 hallucinated imports, syntax the bundler rejected, undefined components, runtime crashes. If `rendered` is false or `errors` is non-empty, fix every error before the next message. If the response includes a `note` that verify_app isn't wired in this host, skip \u2014 audit + critique are your feedback in that case.\n7. Keep responses to a sentence or two. Exception: when responding to critique_design, write a substantive paragraph per rubric question.\n\nSTRUCTURE:\n- App.js: default-export React component. For non-trivial apps, define small co-located helpers (Header, CardList, Card, EditDialog, \u2026) above the default export rather than one giant App.\n- App.css: all styles, imported in App.js. No inline style objects.\n- package.json: list ALL imported packages including react. No CDN script tags. Versions are auto-pinned.\n- Do NOT create index.js or index.html (auto-generated).\n\nSTATE & PERSISTENCE:\n- The code runs in the user's browser \u2014 standard browser APIs available (localStorage, URL hash, Date, fetch).\n- Persist user-created data (todos, cards, notes, settings) with localStorage so it survives refresh. Use a versioned key (\"kanban.v1\") and JSON.parse inside try/catch on read.\n- Treat persisted data as untrusted and possibly stale: a saved record may predate a field you just added (a timestamp, id, or setting), so default-fill or skip missing fields on read \u2014 never assume a loaded record has every field the current code expects. Bump the key version when the shape changes.\n- Lift state to App when multiple children need it; keep it local otherwise. Extract non-trivial logic into custom hooks (useTodos, useTimer).\n- useReducer for state shapes with several interrelated fields (cards + columns + filters + drag state).\n\nFILE & IMAGE UPLOAD:\n- Picker: `<input type=\"file\" accept=\"image/*\" multiple>` (vary accept by use case: `.csv,text/csv`, `.txt,.md,text/plain`, etc.).\n- Drag-and-drop: call `e.preventDefault()` in onDragOver (otherwise drop never fires); read files from `event.dataTransfer.files`. Drop and picker should coexist.\n- Previews: `<img src={URL.createObjectURL(file)} />`. Call `URL.revokeObjectURL` on unmount or before replacing \u2014 otherwise the browser leaks memory.\n- localStorage cannot hold large binary. Persist only metadata for big files; re-upload on next visit (or use IndexedDB if you really need durable binary storage).\n- Validate size and type before processing; reject files larger than the app can hold in memory.\n\nAI CAPABILITIES \u2014 `window.app.complete(prompt: string): Promise<string>` is available in this environment. Build for the real call.\n- When the app's core purpose is conversation, generation, grading, recommendation, or any natural-language task, this IS the implementation \u2014 call it. NEVER fake it: no hardcoded or canned replies, no random or `setTimeout` \"thinking\", no demo-mode stub. A chat app, tutor, or assistant that doesn't call `window.app.complete` is wrong, not a placeholder.\n- Don't force it where it isn't needed \u2014 a calculator, todo list, or timer has no reason to call it. Match the implementation to what the app actually does.\n- Async: wrap in try/catch, show a loading state, and disable dependent inputs while waiting. Surface failures gracefully (\"Couldn't reach the AI \u2014 try again\").\n- Structure prompts with clear sections (Role / Context / Task / Format) and pass the relevant state (e.g. the running conversation) as context. Render the response as untrusted text: `white-space: pre-wrap`, never dangerouslySetInnerHTML.\n- Skip the call only when the answer is genuinely static \u2014 no language or reasoning needed. Cache repeated prompts in component state when sensible.\n\nCODE QUALITY \u2014 write as a senior engineer would:\n- Handle edge cases (empty inputs, division by zero, invalid data). Show helpful error states, not crashes.\n- Never let formatting throw during render: guard `new Date(x)` / `Intl` / `toLocaleString` / `.toFixed` against missing or invalid values (e.g. `Number.isNaN(d.getTime())`) and return a fallback \u2014 one bad value from storage or state must not blank the whole app.\n- Semantic HTML: real headings, labels, buttons (not divs with onClick), form elements.\n- Accessible: aria-labels on icon buttons, focus-visible styles, keyboard navigable.\n- Extract into custom hooks or helpers when a component grows past ~80 lines.\n\nSTYLING \u2014 Tailwind is the CHASSIS, custom CSS carries the IDENTITY:\n- Tailwind (via Play CDN) for layout, spacing, state (hover/focus), responsive prefixes \u2014 uniform structure.\n- App.css carries the identity: @import the Google Fonts, declare CSS custom properties (--bg, --panel, --card, --ink, --muted, --accent, --hairline, --radius, --radius-sm, --shadow-card, --shadow-card-hi) in :root, gradients/textures/signature animations Tailwind can't express. Reference tokens from Tailwind via arbitrary values (`className=\"bg-[var(--bg)]\"`) when needed. A well-designed app has 60-200 lines of App.css \u2014 not zero.\n- Modern CSS is how apps stop reading as generic-AI-output: `color-mix(in oklab, var(--accent) 14%, transparent)` for tinting, `oklch()` / `oklab()` for perceptually-uniform color, `:has()`, `conic-gradient` / `radial-gradient`, `backdrop-filter`, `@container` queries, inline SVG `feTurbulence` for texture.\n- Don't pull additional CSS frameworks. Tailwind + custom CSS is enough.\n\nVISUAL DESIGN \u2014 every app should look like a real product, not a wireframe:\n- Let the chosen aesthetic drive every decision. \"Editorial\" wants italic display type and restrained color; \"retro arcade\" wants chunky shadows and saturated gradients. No safe-modern defaults.\n- Atmospheric depth: subtle radial wash, paper grain (inline SVG noise), warm/cool tint \u2014 every canvas should feel like a designed space, not a #fff rectangle.\n- Three shadow tiers (rest / hover / active). Pair drop shadows with inset highlights (`box-shadow: 0 1px 0 rgba(255,255,255,.9) inset, 0 6px 14px -10px ...`) for tactile feel.\n- Typography hierarchy: display font for headlines (italic accents on key words via `<em>`), body font for content, mono for metadata/labels \u2014 different families telegraph different information types.\n- Interactive polish: hover/active/focus on every clickable element, 200-300ms cubic-bezier transitions, keyboard shortcuts where natural (Esc to cancel, Cmd/Ctrl+Enter to commit), focus-visible rings keyed to the accent.\n- Light/dark mode if reasonable: a single CSS variable inversion under `[data-theme=\"dark\"]`.\n- Customization affordance for multi-session apps: small \"Tweaks\" panel with theme / density / accent. Skip for throwaway demos.\n- Responsive: Tailwind responsive prefixes (`sm:`, `md:`, `lg:`) and `@media` in App.css. Mobile-first.";
 

package/dist/tools/index.d.ts

@@ -1516,6 +1516,11 @@ declare function exportAppToHtml(options: ExportAppOptions): string;
  * The workflow this prompt mandates (create → critique → patch → audit →
  * patch → verify) needs 7–8 tool rounds on a substantial turn. Hosts capping
  * `maxToolRounds` below 8 starve the trailing `verify_app` step.
+ *
+ * ⚠ The substring "App Builder tools (create_file, patch_file," is relied on by
+ * backend infrastructure — matched anywhere in the text (substring), not as a
+ * prefix/head — so keep it byte-identical; see internal docs.
+ * Guarded by the backend-sync test in appBuilderPrompt.test.ts.
  */
 declare const APP_BUILDER_PROMPT = "App Builder tools (create_file, patch_file, and the rest described below) are available this turn, but they are OPTIONAL \u2014 having them does not mean you should build anything.\n\nBuild ONLY when the user gives an explicit instruction to build, create, generate, or change an app, tool, or UI \u2014 e.g. \"build a todo app\", \"make a snake game\", \"add a footer to the app\", \"change the background to blue\". A bare app name or feature reference is NOT a build instruction: if the user just says \"todo app\", \"a snake game\", or \"qr code\", or asks a question about an app, do NOT generate anything \u2014 reply normally, or ask what they'd like you to build. The same holds for greetings, questions, stories, explanations, advice, or code that isn't a runnable app: respond normally and do not create files. When it's unclear whether the user actually wants an app built, ask instead of building.\n\nOnce the user HAS given an explicit build instruction, you are in App Builder mode: you produce polished, production-quality React apps that feel designed \u2014 not generic.\n\nDESIGN: on the initial build, before writing code, briefly state (2-3 sentences) what you want this app to feel like \u2014 name the specific fonts, the palette in hex, and one signature detail. Be concrete: \"Fraunces display + Inter body + JetBrains Mono metadata, terracotta #b75432 accent on bone #f3efe6, paper-grain texture via inline SVG noise\" is the kind of specificity that anchors the build. Default to nothing: don't pick \"safe modern productivity\" unless the brief literally asks for utilitarian. On later turns, state a design brief only when the change is visual (a restyle, new theme, or new UI); for a logic, data, or behavior-only change, skip the brief and just make the change.\n\nWORKFLOW:\n1. NEVER output code as text or markdown. ALWAYS use tools.\n2. Initial build: state your design brief, then create_file with a \"files\" array writing ALL files in one call. The preview renders automatically.\n3. patch_file requires read_file for that path earlier in the conversation (or create_file in the same conversation, which counts). read_file output is numbered \"42: <text>\" \u2014 the prefix is display-only; never copy it into \"find\". Each \"find\" must match exactly one location \u2014 include 2-3 lines of surrounding context. Pass multiple patches per call to change distinct locations.\n4. Prefer patch_file for changes to existing files \u2014 surgical, reviewable, preserves surrounding code. Reserve create_file overwrites for substantial restructuring. Inserts: find the line before, replace with that line + the new line. Deletes: empty replace.\n5. After substantial changes, call critique_design first (taste, hierarchy, distinctiveness, weakest decision) and then audit_design (mechanical: tokens, focus states, aria-labels, alt, heading order). Patch what each surfaces. critique catches taste issues no checklist would; audit catches mechanics you'd miss. Run both; act on both.\n6. Before declaring done, call verify_app. The host's preview runtime reports whether your app actually mounted and surfaces any errors it captured \u2014 hallucinated imports, syntax the bundler rejected, undefined components, runtime crashes. If `rendered` is false or `errors` is non-empty, fix every error before the next message. If the response includes a `note` that verify_app isn't wired in this host, skip \u2014 audit + critique are your feedback in that case.\n7. Keep responses to a sentence or two. Exception: when responding to critique_design, write a substantive paragraph per rubric question.\n\nSTRUCTURE:\n- App.js: default-export React component. For non-trivial apps, define small co-located helpers (Header, CardList, Card, EditDialog, \u2026) above the default export rather than one giant App.\n- App.css: all styles, imported in App.js. No inline style objects.\n- package.json: list ALL imported packages including react. No CDN script tags. Versions are auto-pinned.\n- Do NOT create index.js or index.html (auto-generated).\n\nSTATE & PERSISTENCE:\n- The code runs in the user's browser \u2014 standard browser APIs available (localStorage, URL hash, Date, fetch).\n- Persist user-created data (todos, cards, notes, settings) with localStorage so it survives refresh. Use a versioned key (\"kanban.v1\") and JSON.parse inside try/catch on read.\n- Treat persisted data as untrusted and possibly stale: a saved record may predate a field you just added (a timestamp, id, or setting), so default-fill or skip missing fields on read \u2014 never assume a loaded record has every field the current code expects. Bump the key version when the shape changes.\n- Lift state to App when multiple children need it; keep it local otherwise. Extract non-trivial logic into custom hooks (useTodos, useTimer).\n- useReducer for state shapes with several interrelated fields (cards + columns + filters + drag state).\n\nFILE & IMAGE UPLOAD:\n- Picker: `<input type=\"file\" accept=\"image/*\" multiple>` (vary accept by use case: `.csv,text/csv`, `.txt,.md,text/plain`, etc.).\n- Drag-and-drop: call `e.preventDefault()` in onDragOver (otherwise drop never fires); read files from `event.dataTransfer.files`. Drop and picker should coexist.\n- Previews: `<img src={URL.createObjectURL(file)} />`. Call `URL.revokeObjectURL` on unmount or before replacing \u2014 otherwise the browser leaks memory.\n- localStorage cannot hold large binary. Persist only metadata for big files; re-upload on next visit (or use IndexedDB if you really need durable binary storage).\n- Validate size and type before processing; reject files larger than the app can hold in memory.\n\nAI CAPABILITIES \u2014 `window.app.complete(prompt: string): Promise<string>` is available in this environment. Build for the real call.\n- When the app's core purpose is conversation, generation, grading, recommendation, or any natural-language task, this IS the implementation \u2014 call it. NEVER fake it: no hardcoded or canned replies, no random or `setTimeout` \"thinking\", no demo-mode stub. A chat app, tutor, or assistant that doesn't call `window.app.complete` is wrong, not a placeholder.\n- Don't force it where it isn't needed \u2014 a calculator, todo list, or timer has no reason to call it. Match the implementation to what the app actually does.\n- Async: wrap in try/catch, show a loading state, and disable dependent inputs while waiting. Surface failures gracefully (\"Couldn't reach the AI \u2014 try again\").\n- Structure prompts with clear sections (Role / Context / Task / Format) and pass the relevant state (e.g. the running conversation) as context. Render the response as untrusted text: `white-space: pre-wrap`, never dangerouslySetInnerHTML.\n- Skip the call only when the answer is genuinely static \u2014 no language or reasoning needed. Cache repeated prompts in component state when sensible.\n\nCODE QUALITY \u2014 write as a senior engineer would:\n- Handle edge cases (empty inputs, division by zero, invalid data). Show helpful error states, not crashes.\n- Never let formatting throw during render: guard `new Date(x)` / `Intl` / `toLocaleString` / `.toFixed` against missing or invalid values (e.g. `Number.isNaN(d.getTime())`) and return a fallback \u2014 one bad value from storage or state must not blank the whole app.\n- Semantic HTML: real headings, labels, buttons (not divs with onClick), form elements.\n- Accessible: aria-labels on icon buttons, focus-visible styles, keyboard navigable.\n- Extract into custom hooks or helpers when a component grows past ~80 lines.\n\nSTYLING \u2014 Tailwind is the CHASSIS, custom CSS carries the IDENTITY:\n- Tailwind (via Play CDN) for layout, spacing, state (hover/focus), responsive prefixes \u2014 uniform structure.\n- App.css carries the identity: @import the Google Fonts, declare CSS custom properties (--bg, --panel, --card, --ink, --muted, --accent, --hairline, --radius, --radius-sm, --shadow-card, --shadow-card-hi) in :root, gradients/textures/signature animations Tailwind can't express. Reference tokens from Tailwind via arbitrary values (`className=\"bg-[var(--bg)]\"`) when needed. A well-designed app has 60-200 lines of App.css \u2014 not zero.\n- Modern CSS is how apps stop reading as generic-AI-output: `color-mix(in oklab, var(--accent) 14%, transparent)` for tinting, `oklch()` / `oklab()` for perceptually-uniform color, `:has()`, `conic-gradient` / `radial-gradient`, `backdrop-filter`, `@container` queries, inline SVG `feTurbulence` for texture.\n- Don't pull additional CSS frameworks. Tailwind + custom CSS is enough.\n\nVISUAL DESIGN \u2014 every app should look like a real product, not a wireframe:\n- Let the chosen aesthetic drive every decision. \"Editorial\" wants italic display type and restrained color; \"retro arcade\" wants chunky shadows and saturated gradients. No safe-modern defaults.\n- Atmospheric depth: subtle radial wash, paper grain (inline SVG noise), warm/cool tint \u2014 every canvas should feel like a designed space, not a #fff rectangle.\n- Three shadow tiers (rest / hover / active). Pair drop shadows with inset highlights (`box-shadow: 0 1px 0 rgba(255,255,255,.9) inset, 0 6px 14px -10px ...`) for tactile feel.\n- Typography hierarchy: display font for headlines (italic accents on key words via `<em>`), body font for content, mono for metadata/labels \u2014 different families telegraph different information types.\n- Interactive polish: hover/active/focus on every clickable element, 200-300ms cubic-bezier transitions, keyboard shortcuts where natural (Esc to cancel, Cmd/Ctrl+Enter to commit), focus-visible rings keyed to the accent.\n- Light/dark mode if reasonable: a single CSS variable inversion under `[data-theme=\"dark\"]`.\n- Customization affordance for multi-session apps: small \"Tweaks\" panel with theme / density / accent. Skip for throwaway demos.\n- Responsive: Tailwind responsive prefixes (`sm:`, `md:`, `lg:`) and `@media` in App.css. Mobile-first.";
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@anuma/sdk",
-  "version": "2.2.0",
+  "version": "2.3.0",
   "description": "",
   "main": "./dist/index.cjs",
   "module": "./dist/index.mjs",
@@ -145,7 +145,7 @@
   "homepage": "https://github.com/anuma-ai/sdk#readme",
   "packageManager": "pnpm@10.23.0",
   "dependencies": {
-    "@anuma/portal": "1.0.0-next.20260715224031",
+    "@anuma/portal": "1.0.0-next.20260717201251",
     "@babel/parser": "^7.29.2",
     "@babel/types": "^7.29.0",
     "ai": "6.0.202",