@anuma/sdk 3.9.6 → 3.11.0

package/dist/expo/index.d.mts

@@ -4484,6 +4484,15 @@ declare class VaultMemory extends Model {
     archivedAt: number | null;
     /** Tier-0 security (PR3) — "quarantined" | "trusted" | null. */
     trustTier: string | null;
+    /** People Nearby visibility: 'private' | 'public'. Null on legacy rows, and
+     *  any unrecognised value, read as 'private' — never published without opt-in. */
+    visibility: string | null;
+    /** Owner opted this memory into their own digital twin (twin-scoped only). */
+    twinOptIn: boolean | null;
+    /** Unix ms when visibility last became non-private; null while private. */
+    publishedAt: number | null;
+    /** Reserved coarse-geohash slot for landmark/Trail memories. */
+    geohash: string | null;
     createdAt: Date;
     updatedAt: Date;
     isDeleted: boolean;
@@ -5653,6 +5662,20 @@ declare function extractAndRetain(messages: AutoExtractMessage[], retainCtx: Ret
     quarantined: QuarantinedMemoryInfo[];
 }>;
 
+/**
+ * People Nearby cross-user visibility. ORTHOGONAL to `scope` (model access):
+ * - `private`: local-only (default; null column grandfathered as private)
+ * - `public`: embedding + plaintext may be published (compatibility matching,
+ *   profile display, discovery answers, digital-twin prompts)
+ *
+ * TWO TIERS ONLY (decided 2026-07-27). An earlier design had a middle
+ * `matchable` tier that published a memory's embedding while keeping its text
+ * on-device; it was dropped, so a memory either never leaves the device or is
+ * published with its content. Any unrecognised stored value — including a
+ * `matchable` row written by a pre-release build — reads as `private`, which is
+ * the fail-safe direction: it un-publishes rather than exposes.
+ */
+type VaultMemoryVisibility = "private" | "public";
 interface StoredVaultMemory {
     /** WatermelonDB internal ID */
     uniqueId: string;
@@ -5711,6 +5734,15 @@ interface StoredVaultMemory {
     archivedAt: number | null;
     /** Tier-0 security (PR3) — "quarantined" | "trusted" | null. */
     trustTier: string | null;
+    /** People Nearby cross-user visibility. Null column reads as "private". */
+    visibility: VaultMemoryVisibility;
+    /** Owner opted this memory into their own digital twin even when otherwise
+     * private (twin-scoped only — never indexed for matching, never displayed). */
+    twinOptIn: boolean;
+    /** Unix ms when visibility last became non-private; null while private. */
+    publishedAt: number | null;
+    /** Reserved coarse-geohash slot for landmark/Trail memories. */
+    geohash: string | null;
     createdAt: Date;
     updatedAt: Date;
     isDeleted: boolean;
@@ -5747,6 +5779,15 @@ interface CreateVaultMemoryOptions {
     /** Tier-0 security (PR3) — set "quarantined" when the injection screen
      * flagged this fact. Omit for the default (null/trusted). */
     trustTier?: string;
+    /** People Nearby cross-user visibility. Defaults to "private" if omitted —
+     * creation NEVER publishes; use {@link setMemoryVisibilityOp} so the
+     * published_at bookkeeping stays consistent. Accepted here only so bulk
+     * restore/import paths can round-trip an existing visibility. */
+    visibility?: VaultMemoryVisibility;
+    /** Round-trip slot for restore/import; see {@link visibility}. */
+    publishedAt?: number | null;
+    /** Coarse geohash for location-tagged memory sources (landmarks/Trail). */
+    geohash?: string;
 }
 interface UpdateVaultMemoryOptions {
     content: string;
@@ -5869,11 +5910,35 @@ declare function getAllVaultMemoriesOp(ctx: VaultMemoryOperationsContext, option
      * Used by a "memory history" view to render retired facts.
      */
     includeSuperseded?: boolean;
+    /**
+     * Filter by People Nearby visibility. Legacy rows with a NULL column
+     * count as "private". Used by the publish reconciler to fetch the
+     * published set to diff against the server index.
+     */
+    visibility?: VaultMemoryVisibility[];
 }): Promise<StoredVaultMemory[]>;
 declare function getAllVaultMemoryContentsOp(ctx: VaultMemoryOperationsContext, options?: {
     since?: Date;
 }): Promise<string[]>;
 declare function updateVaultMemoryOp(ctx: VaultMemoryOperationsContext, id: string, opts: UpdateVaultMemoryOptions): Promise<StoredVaultMemory | null>;
+/**
+ * Set a memory's People Nearby visibility (and optionally its twin opt-in).
+ *
+ * This is the ONLY sanctioned write path for `visibility` — it keeps the
+ * `published_at` bookkeeping consistent: transitioning to `public`
+ * stamps `published_at` (kept if already set); transitioning to `private`
+ * clears it (revoke). The server index remains the authority for what IS
+ * published — this records the user's intent for the reconciler to act on.
+ *
+ * Preserves `updated_at`: a visibility change is metadata, not a
+ * re-observation, so it must not inflate the recency multiplier (mirrors
+ * {@link setMemoryEntitiesOp}).
+ */
+declare function setMemoryVisibilityOp(ctx: VaultMemoryOperationsContext, id: string, opts: {
+    visibility: VaultMemoryVisibility;
+    /** If provided, sets the twin opt-in flag alongside the visibility. */
+    twinOptIn?: boolean;
+}): Promise<StoredVaultMemory | null>;
 declare function deleteVaultMemoryOp(ctx: VaultMemoryOperationsContext, id: string): Promise<boolean>;
 /**
  * Mark a memory as superseded by a newer one (A2 write-time supersession).
@@ -6434,6 +6499,21 @@ interface CreateAutoExtractorOptions {
          */
         onFallback?: (reason: ConsolidationFallbackReason) => void;
     };
+    /**
+     * Tier-0 security (PR5) — enable the optional SECOND-layer LLM injection
+     * classifier over the candidates the deterministic screen passed as clean.
+     * Presence is the switch, so `injectionClassifier: {}` is how a client turns
+     * it on. Auth is NOT configured here — like `consolidate`, the call reuses
+     * the `extract` credentials and defaults to its `baseUrl`. See
+     * `injectionClassifier.ts` for the safety posture and the defaults.
+     */
+    injectionClassifier?: {
+        /** Portal base URL for classifier calls. Default: the `extract` options' `baseUrl`. */
+        baseUrl?: string;
+        model?: string;
+        maxCandidates?: number;
+        totalTimeoutMs?: number;
+    };
     /** Per-fact event — fires once per memory written. */
     onMemoryExtracted?: (event: MemoryExtractedEvent) => void;
     /**
@@ -8319,8 +8399,13 @@ declare function useChatStorage(options: UseChatStorageOptions): UseChatStorageR
  *   backfill (null = legacy/untyped, active, un-screened — content is
  *   encrypted so in-migration classification is impossible; NULL = zero-risk,
  *   exact embedding_model precedent)
+ * - v41: Added visibility, twin_opt_in, published_at, geohash columns to
+ *   memory_vault for the People Nearby cross-user visibility axis. Visibility
+ *   is TWO-tier (`private | public`); null — and any unrecognised value —
+ *   reads as 'private', so nothing pre-existing is ever published without an
+ *   explicit visibility write
  */
-declare const SDK_SCHEMA_VERSION = 40;
+declare const SDK_SCHEMA_VERSION = 41;
 /**
  * Combined WatermelonDB schema for all SDK storage modules.
  *
@@ -8405,6 +8490,7 @@ declare const sdkSchema: Readonly<{
  * - v37 → v38: Added `topics_extracted_version` column to memory_vault (extraction-logic version; null read as 0 so a TOPICS_EXTRACTION_VERSION bump re-extracts stale rows)
  * - v38 → v39: Added `last_observed_at` column to memory_vault (C3 re-observation watermark; stamped on retain merge, distinct from updated_at)
  * - v39 → v40: Added `fact_type`, `archived_at`, `trust_tier` columns to memory_vault for typed memory + decay + Tier-0 security (all nullable + plaintext, NULL backfill)
+ * - v40 → v41: Added `visibility`, `twin_opt_in`, `published_at`, `geohash` columns to memory_vault for the People Nearby cross-user visibility axis (two-tier `private | public`; null/unknown grandfathered as 'private')
  */
 declare const sdkMigrations: Readonly<{
     validated: true;
@@ -8926,4 +9012,4 @@ declare function refreshNotionAccessToken(params: NotionRefreshTokenParams): Pro
  */
 declare function createNotionTools(getAccessToken: () => string | null, requestNotionAccess: () => Promise<string>): ToolConfig[];
 
-export { type AutoExtractMessage, type AutoExtractor, type Budget, type CachedChunkVectors, type CachedServerTools, Conversation as ChatConversation, Message as ChatMessage, type ChatRole, type ChunkVectorCache, type ChunkingOptions, type ConsolidationFallbackReason, type ConversationMemoryInput, ConversationMemory as ConversationMemoryModel, type ConversationMemoryOperationsContext, type CreateAutoExtractorOptions, type CreateConversationOptions, type CreateDecaySweeperOptions, type CreateMessageOptions, type CreateVaultFolderOptions, type CreateVaultMemoryOptions, type CryptoPriceClassification, type CryptoPricePreProcessorOptions, DEFAULT_CACHE_EXPIRATION_MS, DEFAULT_CHUNK_CACHE_SIZE, DEFAULT_CHUNK_OVERLAP, DEFAULT_CHUNK_SIZE, DEFAULT_DECAY_POLICY, DEFAULT_MAX_CLASSIFIER_CALLS_PER_SWEEP, DEFAULT_MIN_CHUNK_SIZE, DEFAULT_PROFILE_FACETS, DEFAULT_PROFILE_FACT_TYPE_WEIGHTS, DEFAULT_PROFILE_PROOF_ALPHA, DEFAULT_PROFILE_TREND_MULTIPLIERS, DEFAULT_VAULT_CACHE_SIZE, DatabaseManager, type DatabaseManagerLogger, type DatabaseManagerOptions, type DecayCandidateRaw, type DecayClassifier, type DecayInput, type DecayPolicy, type DecaySweepResult, type DecaySweeper, type DecayVerdict, ENTITY_FANOUT, type EmbeddedWalletSignerFn, type ExtractFactsOptions, type ExtractOutcome, type ExtractedCandidate, type ExtractedEntity, type ExtractionCursorStore, type FactType, type FileMetadata, type FlushResult, type GetConversationsPageOptions, type GetMessagesPageOptions, type GraphTraversalOptions, HARD_DELETE_WINDOW_MS, INFERENCE_ID_HEADER, type InjectionClassifierOptions, type InjectionReason, type LazyStoredConversation, type LlmDecayClassifierOptions, type LlmNeighborRefinerOptions, type Logger, LoggerProvider, type LoggerProviderProps, MAX_HOPS, MEDIUM_TTL_MS, type MemoriesNeedingTopicExtraction, type EmbeddingOptions as MemoryEngineEmbeddingOptions, type MemoryEngineResult, type MemoryEngineSearchOptions, type MemoryExtractedEvent, type MemoryKind, type MemoryQuarantinedEvent, type MemoryVaultSearchOptions, type MemoryVaultToolOptions, type MessageRedactionResult, type MessageSkeleton, NEVER_TTL_MS, NODE_BUDGET, NOTION_OAUTH_CONFIG, type NeighborRefiner, type NotionAuthUrlParams, type NotionClientRegistration, type NotionExchangeCodeParams, type NotionOAuthEndpoints, type NotionPKCEChallenge, type NotionRefreshTokenParams, type NotionTokenResponse, type NowSource, type ObservationTrend, type ObservationTrendInput, PAST_EVENT_GRACE_MS, PII_PATTERNS, PROFILE_DOC_VERSION, type PiiCategory, type PiiMatch, type PiiPattern, PiiRedactor, type PiiRedactorOptions, type PlatformStorage, type PortalLlmAuth, type ProfileConfigFingerprint, type ProfileDoc, type ProfileFacet, type ProfileFacetKey, type ProfileSalienceInput, type ProfileSection, type PromptPreProcessor, type PromptPreProcessorContext, type QuantizedEmbedding, type QuarantinedMemoryInfo, QueueManager, type QueueStatus, RECALL_MAX_LIMIT, RECALL_TOOL_NAME, type RankedMemory, type RankedProfileCandidate, type RecallContext, type RecallDegradation, type RecallDiagnostics, type RecallOptions, type RecallResult, type RecallToolCallbacks, type RecallToolOptions, type RecencyOptions, type RedactionResult, type ReflectOptions, type ReflectResult, RerankerUnavailableError, type ResumeStreamOptions, type ResumeStreamResult, type ResumeStreamWithStorageResult, type RetainAction, type RetainContext, type RetainOptions, type RetainResult, type RetainSource, SDK_SCHEMA_VERSION, SHORT_TTL_MS, STREAM_RESUMABLE_HEADER, type ScoreBreakdown, type ScoreProfileSalienceOptions, type ScreenResult, type ScreenedCandidate, type SearchSource, type SendMessageWithStorageArgs, type SendMessageWithStorageDetachedResult, type SendMessageWithStorageResult, type ServerToolsOptions, type ServerToolsResponse, type SignMessageFn, type StockPriceClassification, type StockPricePreProcessorOptions, type ChatCompletionUsage as StoredChatCompletionUsage, type StoredConversation, type StoredConversationMemory, type StoredMessage, type StoredMessageWithSimilarity, type StoredVaultFolder, VaultFolder as StoredVaultFolderModel, type StoredVaultMemory, VaultMemory as StoredVaultMemoryModel, StreamExpiredError, type StreamMetaEvent, type StreamResumeHandle, type SynthesizeProfileOptions, TOPICS_EXTRACTION_VERSION, TOPIC_EXTRACTION_BATCH_SIZE, TREND_RECENT_WINDOW_DAYS, TREND_STALE_WINDOW_DAYS, type TextChunk, type TopicExtractOptions, type TopicExtractionInput, type TopicExtractionRunResult, type TurnCompleteEvent, type TurnSkippedEvent, type UpdateVaultFolderOptions, type UpdateVaultMemoryOptions, type UseChatStorageOptions, type UseChatStorageResult, type UseCreditsOptions, type UseCreditsResult, type UseModelsOptions, type UseModelsResult, VAULT_SIZE_HOP_CAP, type VaultEmbeddingCache, type VaultFolderOperationsContext, type VaultMemoryOperationsContext, type VaultSaveOperation, type VaultSearchResult, WalletPoller, type WeatherClassification, type WeatherPreProcessorOptions, type WebSearchClassification, type WebSearchPreProcessorOptions, addConversationMemoriesOp, archiveVaultMemoryOp, buildNotionAuthUrl, capHopsForDensity, chatStorageMigrations, chatStorageSchema, chunkAndEmbedAllMessages, chunkAndEmbedMessage, chunkText, classifyCryptoPrice, classifyCryptoPriceBatch, classifyDecay, classifyInjectionCandidates, classifyObservationTrend, classifyStockPrice, classifyStockPriceBatch, classifyWeather, classifyWeatherBatch, classifyWebSearch, classifyWebSearchBatch, clearAllEncryptionKeys, clearAllEncryptionState, clearConversationMemoriesOp, clearEncryptionKey, clearLazyTitleCache, clearServerToolsCache, consoleLogger, conversationMemoryToStored, cosineInt8, createAutoExtractor, createChunkVectorCache, createCryptoPricePreProcessor, createDecaySweeper, createLlmDecayClassifier, createLlmNeighborRefiner, createMemoryEngineTool, createMemoryVaultSearchTool, createMemoryVaultTool, createNotionTools, createPlatformCursorStore, createRecallTool, createStockPricePreProcessor, createStreamingDeAnonymizer, createVaultEmbeddingCache, createVaultFolderOp, createVaultMemoriesBatchOp, createVaultMemoryOp, createWeatherPreProcessor, createWebSearchPreProcessor, decryptConversationTitle, deleteAllVaultMemoriesForUserOp, deleteVaultFolderOp, deleteVaultMemoryOp, dequantizeEmbedding, discoverNotionOAuthEndpoints, eagerEmbedContent, embedAllMessages, embedMessage, ensureDefaultFoldersOp, exchangeNotionCode, extractAndLinkEntitiesForMemoriesOp, extractAndRetain, extractEntitiesForMemories, extractFacts, generateConversationId, generateEmbedding, generateEmbeddings, generateNotionPKCE, getAllVaultFoldersOp, getAllVaultMemoriesOp, getAllVaultMemoryContentsOp, getCachedServerTools, getConversationMemoriesOp, getConversationsByProjectLazyOp, getConversationsLazyOp, getConversationsPageOp, getDecayCandidatesRawOp, getLogger, getMemoriesNeedingTopicExtractionOp, getServerTools, getUnfiledVaultMemoriesOp, getVaultFolderMemoryCountOp, getVaultMemoryOp, hardDeleteDecayedOp, hasEncryptionKey, injectionSignatureCatalog, isPiiRedactor, isRerankerAvailable, moveMemoriesToFolderOp, noopLogger, onKeyAvailable, preEmbedVaultMemories, quantizeEmbedding, queueManager, rankProfileCandidates, recall, reflect, refreshNotionAccessToken, registerNotionClient, requestEncryptionKey, resolvePiiRedactor, restoreVaultMemoryOp, resumeStream, retain, scoreProfileSalience, screenCandidatesForInjection, sdkMigrations, sdkModelClasses, sdkSchema, searchVaultMemories, setLogger, shouldChunkMessage, stampTopicsExtractedAtOp, streamCancelPath, streamReplayPath, summarizeObservationTrends, supersedeVaultMemoryOp, synthesizeProfile, traverseGraphLane, ttlForType, updateVaultFolderContextOp, updateVaultFolderOp, updateVaultMemoryEmbeddingOp, updateVaultMemoryOp, upsertMessageOp, useChat, useChatStorage, useCredits, useEncryption, useModels, xhrTransport };
+export { type AutoExtractMessage, type AutoExtractor, type Budget, type CachedChunkVectors, type CachedServerTools, Conversation as ChatConversation, Message as ChatMessage, type ChatRole, type ChunkVectorCache, type ChunkingOptions, type ConsolidationFallbackReason, type ConversationMemoryInput, ConversationMemory as ConversationMemoryModel, type ConversationMemoryOperationsContext, type CreateAutoExtractorOptions, type CreateConversationOptions, type CreateDecaySweeperOptions, type CreateMessageOptions, type CreateVaultFolderOptions, type CreateVaultMemoryOptions, type CryptoPriceClassification, type CryptoPricePreProcessorOptions, DEFAULT_CACHE_EXPIRATION_MS, DEFAULT_CHUNK_CACHE_SIZE, DEFAULT_CHUNK_OVERLAP, DEFAULT_CHUNK_SIZE, DEFAULT_DECAY_POLICY, DEFAULT_MAX_CLASSIFIER_CALLS_PER_SWEEP, DEFAULT_MIN_CHUNK_SIZE, DEFAULT_PROFILE_FACETS, DEFAULT_PROFILE_FACT_TYPE_WEIGHTS, DEFAULT_PROFILE_PROOF_ALPHA, DEFAULT_PROFILE_TREND_MULTIPLIERS, DEFAULT_VAULT_CACHE_SIZE, DatabaseManager, type DatabaseManagerLogger, type DatabaseManagerOptions, type DecayCandidateRaw, type DecayClassifier, type DecayInput, type DecayPolicy, type DecaySweepResult, type DecaySweeper, type DecayVerdict, ENTITY_FANOUT, type EmbeddedWalletSignerFn, type ExtractFactsOptions, type ExtractOutcome, type ExtractedCandidate, type ExtractedEntity, type ExtractionCursorStore, type FactType, type FileMetadata, type FlushResult, type GetConversationsPageOptions, type GetMessagesPageOptions, type GraphTraversalOptions, HARD_DELETE_WINDOW_MS, INFERENCE_ID_HEADER, type InjectionClassifierOptions, type InjectionReason, type LazyStoredConversation, type LlmDecayClassifierOptions, type LlmNeighborRefinerOptions, type Logger, LoggerProvider, type LoggerProviderProps, MAX_HOPS, MEDIUM_TTL_MS, type MemoriesNeedingTopicExtraction, type EmbeddingOptions as MemoryEngineEmbeddingOptions, type MemoryEngineResult, type MemoryEngineSearchOptions, type MemoryExtractedEvent, type MemoryKind, type MemoryQuarantinedEvent, type MemoryVaultSearchOptions, type MemoryVaultToolOptions, type MessageRedactionResult, type MessageSkeleton, NEVER_TTL_MS, NODE_BUDGET, NOTION_OAUTH_CONFIG, type NeighborRefiner, type NotionAuthUrlParams, type NotionClientRegistration, type NotionExchangeCodeParams, type NotionOAuthEndpoints, type NotionPKCEChallenge, type NotionRefreshTokenParams, type NotionTokenResponse, type NowSource, type ObservationTrend, type ObservationTrendInput, PAST_EVENT_GRACE_MS, PII_PATTERNS, PROFILE_DOC_VERSION, type PiiCategory, type PiiMatch, type PiiPattern, PiiRedactor, type PiiRedactorOptions, type PlatformStorage, type PortalLlmAuth, type ProfileConfigFingerprint, type ProfileDoc, type ProfileFacet, type ProfileFacetKey, type ProfileSalienceInput, type ProfileSection, type PromptPreProcessor, type PromptPreProcessorContext, type QuantizedEmbedding, type QuarantinedMemoryInfo, QueueManager, type QueueStatus, RECALL_MAX_LIMIT, RECALL_TOOL_NAME, type RankedMemory, type RankedProfileCandidate, type RecallContext, type RecallDegradation, type RecallDiagnostics, type RecallOptions, type RecallResult, type RecallToolCallbacks, type RecallToolOptions, type RecencyOptions, type RedactionResult, type ReflectOptions, type ReflectResult, RerankerUnavailableError, type ResumeStreamOptions, type ResumeStreamResult, type ResumeStreamWithStorageResult, type RetainAction, type RetainContext, type RetainOptions, type RetainResult, type RetainSource, SDK_SCHEMA_VERSION, SHORT_TTL_MS, STREAM_RESUMABLE_HEADER, type ScoreBreakdown, type ScoreProfileSalienceOptions, type ScreenResult, type ScreenedCandidate, type SearchSource, type SendMessageWithStorageArgs, type SendMessageWithStorageDetachedResult, type SendMessageWithStorageResult, type ServerToolsOptions, type ServerToolsResponse, type SignMessageFn, type StockPriceClassification, type StockPricePreProcessorOptions, type ChatCompletionUsage as StoredChatCompletionUsage, type StoredConversation, type StoredConversationMemory, type StoredMessage, type StoredMessageWithSimilarity, type StoredVaultFolder, VaultFolder as StoredVaultFolderModel, type StoredVaultMemory, VaultMemory as StoredVaultMemoryModel, StreamExpiredError, type StreamMetaEvent, type StreamResumeHandle, type SynthesizeProfileOptions, TOPICS_EXTRACTION_VERSION, TOPIC_EXTRACTION_BATCH_SIZE, TREND_RECENT_WINDOW_DAYS, TREND_STALE_WINDOW_DAYS, type TextChunk, type TopicExtractOptions, type TopicExtractionInput, type TopicExtractionRunResult, type TurnCompleteEvent, type TurnSkippedEvent, type UpdateVaultFolderOptions, type UpdateVaultMemoryOptions, type UseChatStorageOptions, type UseChatStorageResult, type UseCreditsOptions, type UseCreditsResult, type UseModelsOptions, type UseModelsResult, VAULT_SIZE_HOP_CAP, type VaultEmbeddingCache, type VaultFolderOperationsContext, type VaultMemoryOperationsContext, type VaultMemoryVisibility, type VaultSaveOperation, type VaultSearchResult, WalletPoller, type WeatherClassification, type WeatherPreProcessorOptions, type WebSearchClassification, type WebSearchPreProcessorOptions, addConversationMemoriesOp, archiveVaultMemoryOp, buildNotionAuthUrl, capHopsForDensity, chatStorageMigrations, chatStorageSchema, chunkAndEmbedAllMessages, chunkAndEmbedMessage, chunkText, classifyCryptoPrice, classifyCryptoPriceBatch, classifyDecay, classifyInjectionCandidates, classifyObservationTrend, classifyStockPrice, classifyStockPriceBatch, classifyWeather, classifyWeatherBatch, classifyWebSearch, classifyWebSearchBatch, clearAllEncryptionKeys, clearAllEncryptionState, clearConversationMemoriesOp, clearEncryptionKey, clearLazyTitleCache, clearServerToolsCache, consoleLogger, conversationMemoryToStored, cosineInt8, createAutoExtractor, createChunkVectorCache, createCryptoPricePreProcessor, createDecaySweeper, createLlmDecayClassifier, createLlmNeighborRefiner, createMemoryEngineTool, createMemoryVaultSearchTool, createMemoryVaultTool, createNotionTools, createPlatformCursorStore, createRecallTool, createStockPricePreProcessor, createStreamingDeAnonymizer, createVaultEmbeddingCache, createVaultFolderOp, createVaultMemoriesBatchOp, createVaultMemoryOp, createWeatherPreProcessor, createWebSearchPreProcessor, decryptConversationTitle, deleteAllVaultMemoriesForUserOp, deleteVaultFolderOp, deleteVaultMemoryOp, dequantizeEmbedding, discoverNotionOAuthEndpoints, eagerEmbedContent, embedAllMessages, embedMessage, ensureDefaultFoldersOp, exchangeNotionCode, extractAndLinkEntitiesForMemoriesOp, extractAndRetain, extractEntitiesForMemories, extractFacts, generateConversationId, generateEmbedding, generateEmbeddings, generateNotionPKCE, getAllVaultFoldersOp, getAllVaultMemoriesOp, getAllVaultMemoryContentsOp, getCachedServerTools, getConversationMemoriesOp, getConversationsByProjectLazyOp, getConversationsLazyOp, getConversationsPageOp, getDecayCandidatesRawOp, getLogger, getMemoriesNeedingTopicExtractionOp, getServerTools, getUnfiledVaultMemoriesOp, getVaultFolderMemoryCountOp, getVaultMemoryOp, hardDeleteDecayedOp, hasEncryptionKey, injectionSignatureCatalog, isPiiRedactor, isRerankerAvailable, moveMemoriesToFolderOp, noopLogger, onKeyAvailable, preEmbedVaultMemories, quantizeEmbedding, queueManager, rankProfileCandidates, recall, reflect, refreshNotionAccessToken, registerNotionClient, requestEncryptionKey, resolvePiiRedactor, restoreVaultMemoryOp, resumeStream, retain, scoreProfileSalience, screenCandidatesForInjection, sdkMigrations, sdkModelClasses, sdkSchema, searchVaultMemories, setLogger, setMemoryVisibilityOp, shouldChunkMessage, stampTopicsExtractedAtOp, streamCancelPath, streamReplayPath, summarizeObservationTrends, supersedeVaultMemoryOp, synthesizeProfile, traverseGraphLane, ttlForType, updateVaultFolderContextOp, updateVaultFolderOp, updateVaultMemoryEmbeddingOp, updateVaultMemoryOp, upsertMessageOp, useChat, useChatStorage, useCredits, useEncryption, useModels, xhrTransport };

package/dist/expo/index.d.ts

@@ -4484,6 +4484,15 @@ declare class VaultMemory extends Model {
     archivedAt: number | null;
     /** Tier-0 security (PR3) — "quarantined" | "trusted" | null. */
     trustTier: string | null;
+    /** People Nearby visibility: 'private' | 'public'. Null on legacy rows, and
+     *  any unrecognised value, read as 'private' — never published without opt-in. */
+    visibility: string | null;
+    /** Owner opted this memory into their own digital twin (twin-scoped only). */
+    twinOptIn: boolean | null;
+    /** Unix ms when visibility last became non-private; null while private. */
+    publishedAt: number | null;
+    /** Reserved coarse-geohash slot for landmark/Trail memories. */
+    geohash: string | null;
     createdAt: Date;
     updatedAt: Date;
     isDeleted: boolean;
@@ -5653,6 +5662,20 @@ declare function extractAndRetain(messages: AutoExtractMessage[], retainCtx: Ret
     quarantined: QuarantinedMemoryInfo[];
 }>;
 
+/**
+ * People Nearby cross-user visibility. ORTHOGONAL to `scope` (model access):
+ * - `private`: local-only (default; null column grandfathered as private)
+ * - `public`: embedding + plaintext may be published (compatibility matching,
+ *   profile display, discovery answers, digital-twin prompts)
+ *
+ * TWO TIERS ONLY (decided 2026-07-27). An earlier design had a middle
+ * `matchable` tier that published a memory's embedding while keeping its text
+ * on-device; it was dropped, so a memory either never leaves the device or is
+ * published with its content. Any unrecognised stored value — including a
+ * `matchable` row written by a pre-release build — reads as `private`, which is
+ * the fail-safe direction: it un-publishes rather than exposes.
+ */
+type VaultMemoryVisibility = "private" | "public";
 interface StoredVaultMemory {
     /** WatermelonDB internal ID */
     uniqueId: string;
@@ -5711,6 +5734,15 @@ interface StoredVaultMemory {
     archivedAt: number | null;
     /** Tier-0 security (PR3) — "quarantined" | "trusted" | null. */
     trustTier: string | null;
+    /** People Nearby cross-user visibility. Null column reads as "private". */
+    visibility: VaultMemoryVisibility;
+    /** Owner opted this memory into their own digital twin even when otherwise
+     * private (twin-scoped only — never indexed for matching, never displayed). */
+    twinOptIn: boolean;
+    /** Unix ms when visibility last became non-private; null while private. */
+    publishedAt: number | null;
+    /** Reserved coarse-geohash slot for landmark/Trail memories. */
+    geohash: string | null;
     createdAt: Date;
     updatedAt: Date;
     isDeleted: boolean;
@@ -5747,6 +5779,15 @@ interface CreateVaultMemoryOptions {
     /** Tier-0 security (PR3) — set "quarantined" when the injection screen
      * flagged this fact. Omit for the default (null/trusted). */
     trustTier?: string;
+    /** People Nearby cross-user visibility. Defaults to "private" if omitted —
+     * creation NEVER publishes; use {@link setMemoryVisibilityOp} so the
+     * published_at bookkeeping stays consistent. Accepted here only so bulk
+     * restore/import paths can round-trip an existing visibility. */
+    visibility?: VaultMemoryVisibility;
+    /** Round-trip slot for restore/import; see {@link visibility}. */
+    publishedAt?: number | null;
+    /** Coarse geohash for location-tagged memory sources (landmarks/Trail). */
+    geohash?: string;
 }
 interface UpdateVaultMemoryOptions {
     content: string;
@@ -5869,11 +5910,35 @@ declare function getAllVaultMemoriesOp(ctx: VaultMemoryOperationsContext, option
      * Used by a "memory history" view to render retired facts.
      */
     includeSuperseded?: boolean;
+    /**
+     * Filter by People Nearby visibility. Legacy rows with a NULL column
+     * count as "private". Used by the publish reconciler to fetch the
+     * published set to diff against the server index.
+     */
+    visibility?: VaultMemoryVisibility[];
 }): Promise<StoredVaultMemory[]>;
 declare function getAllVaultMemoryContentsOp(ctx: VaultMemoryOperationsContext, options?: {
     since?: Date;
 }): Promise<string[]>;
 declare function updateVaultMemoryOp(ctx: VaultMemoryOperationsContext, id: string, opts: UpdateVaultMemoryOptions): Promise<StoredVaultMemory | null>;
+/**
+ * Set a memory's People Nearby visibility (and optionally its twin opt-in).
+ *
+ * This is the ONLY sanctioned write path for `visibility` — it keeps the
+ * `published_at` bookkeeping consistent: transitioning to `public`
+ * stamps `published_at` (kept if already set); transitioning to `private`
+ * clears it (revoke). The server index remains the authority for what IS
+ * published — this records the user's intent for the reconciler to act on.
+ *
+ * Preserves `updated_at`: a visibility change is metadata, not a
+ * re-observation, so it must not inflate the recency multiplier (mirrors
+ * {@link setMemoryEntitiesOp}).
+ */
+declare function setMemoryVisibilityOp(ctx: VaultMemoryOperationsContext, id: string, opts: {
+    visibility: VaultMemoryVisibility;
+    /** If provided, sets the twin opt-in flag alongside the visibility. */
+    twinOptIn?: boolean;
+}): Promise<StoredVaultMemory | null>;
 declare function deleteVaultMemoryOp(ctx: VaultMemoryOperationsContext, id: string): Promise<boolean>;
 /**
  * Mark a memory as superseded by a newer one (A2 write-time supersession).
@@ -6434,6 +6499,21 @@ interface CreateAutoExtractorOptions {
          */
         onFallback?: (reason: ConsolidationFallbackReason) => void;
     };
+    /**
+     * Tier-0 security (PR5) — enable the optional SECOND-layer LLM injection
+     * classifier over the candidates the deterministic screen passed as clean.
+     * Presence is the switch, so `injectionClassifier: {}` is how a client turns
+     * it on. Auth is NOT configured here — like `consolidate`, the call reuses
+     * the `extract` credentials and defaults to its `baseUrl`. See
+     * `injectionClassifier.ts` for the safety posture and the defaults.
+     */
+    injectionClassifier?: {
+        /** Portal base URL for classifier calls. Default: the `extract` options' `baseUrl`. */
+        baseUrl?: string;
+        model?: string;
+        maxCandidates?: number;
+        totalTimeoutMs?: number;
+    };
     /** Per-fact event — fires once per memory written. */
     onMemoryExtracted?: (event: MemoryExtractedEvent) => void;
     /**
@@ -8319,8 +8399,13 @@ declare function useChatStorage(options: UseChatStorageOptions): UseChatStorageR
  *   backfill (null = legacy/untyped, active, un-screened — content is
  *   encrypted so in-migration classification is impossible; NULL = zero-risk,
  *   exact embedding_model precedent)
+ * - v41: Added visibility, twin_opt_in, published_at, geohash columns to
+ *   memory_vault for the People Nearby cross-user visibility axis. Visibility
+ *   is TWO-tier (`private | public`); null — and any unrecognised value —
+ *   reads as 'private', so nothing pre-existing is ever published without an
+ *   explicit visibility write
  */
-declare const SDK_SCHEMA_VERSION = 40;
+declare const SDK_SCHEMA_VERSION = 41;
 /**
  * Combined WatermelonDB schema for all SDK storage modules.
  *
@@ -8405,6 +8490,7 @@ declare const sdkSchema: Readonly<{
  * - v37 → v38: Added `topics_extracted_version` column to memory_vault (extraction-logic version; null read as 0 so a TOPICS_EXTRACTION_VERSION bump re-extracts stale rows)
  * - v38 → v39: Added `last_observed_at` column to memory_vault (C3 re-observation watermark; stamped on retain merge, distinct from updated_at)
  * - v39 → v40: Added `fact_type`, `archived_at`, `trust_tier` columns to memory_vault for typed memory + decay + Tier-0 security (all nullable + plaintext, NULL backfill)
+ * - v40 → v41: Added `visibility`, `twin_opt_in`, `published_at`, `geohash` columns to memory_vault for the People Nearby cross-user visibility axis (two-tier `private | public`; null/unknown grandfathered as 'private')
  */
 declare const sdkMigrations: Readonly<{
     validated: true;
@@ -8926,4 +9012,4 @@ declare function refreshNotionAccessToken(params: NotionRefreshTokenParams): Pro
  */
 declare function createNotionTools(getAccessToken: () => string | null, requestNotionAccess: () => Promise<string>): ToolConfig[];
 
-export { type AutoExtractMessage, type AutoExtractor, type Budget, type CachedChunkVectors, type CachedServerTools, Conversation as ChatConversation, Message as ChatMessage, type ChatRole, type ChunkVectorCache, type ChunkingOptions, type ConsolidationFallbackReason, type ConversationMemoryInput, ConversationMemory as ConversationMemoryModel, type ConversationMemoryOperationsContext, type CreateAutoExtractorOptions, type CreateConversationOptions, type CreateDecaySweeperOptions, type CreateMessageOptions, type CreateVaultFolderOptions, type CreateVaultMemoryOptions, type CryptoPriceClassification, type CryptoPricePreProcessorOptions, DEFAULT_CACHE_EXPIRATION_MS, DEFAULT_CHUNK_CACHE_SIZE, DEFAULT_CHUNK_OVERLAP, DEFAULT_CHUNK_SIZE, DEFAULT_DECAY_POLICY, DEFAULT_MAX_CLASSIFIER_CALLS_PER_SWEEP, DEFAULT_MIN_CHUNK_SIZE, DEFAULT_PROFILE_FACETS, DEFAULT_PROFILE_FACT_TYPE_WEIGHTS, DEFAULT_PROFILE_PROOF_ALPHA, DEFAULT_PROFILE_TREND_MULTIPLIERS, DEFAULT_VAULT_CACHE_SIZE, DatabaseManager, type DatabaseManagerLogger, type DatabaseManagerOptions, type DecayCandidateRaw, type DecayClassifier, type DecayInput, type DecayPolicy, type DecaySweepResult, type DecaySweeper, type DecayVerdict, ENTITY_FANOUT, type EmbeddedWalletSignerFn, type ExtractFactsOptions, type ExtractOutcome, type ExtractedCandidate, type ExtractedEntity, type ExtractionCursorStore, type FactType, type FileMetadata, type FlushResult, type GetConversationsPageOptions, type GetMessagesPageOptions, type GraphTraversalOptions, HARD_DELETE_WINDOW_MS, INFERENCE_ID_HEADER, type InjectionClassifierOptions, type InjectionReason, type LazyStoredConversation, type LlmDecayClassifierOptions, type LlmNeighborRefinerOptions, type Logger, LoggerProvider, type LoggerProviderProps, MAX_HOPS, MEDIUM_TTL_MS, type MemoriesNeedingTopicExtraction, type EmbeddingOptions as MemoryEngineEmbeddingOptions, type MemoryEngineResult, type MemoryEngineSearchOptions, type MemoryExtractedEvent, type MemoryKind, type MemoryQuarantinedEvent, type MemoryVaultSearchOptions, type MemoryVaultToolOptions, type MessageRedactionResult, type MessageSkeleton, NEVER_TTL_MS, NODE_BUDGET, NOTION_OAUTH_CONFIG, type NeighborRefiner, type NotionAuthUrlParams, type NotionClientRegistration, type NotionExchangeCodeParams, type NotionOAuthEndpoints, type NotionPKCEChallenge, type NotionRefreshTokenParams, type NotionTokenResponse, type NowSource, type ObservationTrend, type ObservationTrendInput, PAST_EVENT_GRACE_MS, PII_PATTERNS, PROFILE_DOC_VERSION, type PiiCategory, type PiiMatch, type PiiPattern, PiiRedactor, type PiiRedactorOptions, type PlatformStorage, type PortalLlmAuth, type ProfileConfigFingerprint, type ProfileDoc, type ProfileFacet, type ProfileFacetKey, type ProfileSalienceInput, type ProfileSection, type PromptPreProcessor, type PromptPreProcessorContext, type QuantizedEmbedding, type QuarantinedMemoryInfo, QueueManager, type QueueStatus, RECALL_MAX_LIMIT, RECALL_TOOL_NAME, type RankedMemory, type RankedProfileCandidate, type RecallContext, type RecallDegradation, type RecallDiagnostics, type RecallOptions, type RecallResult, type RecallToolCallbacks, type RecallToolOptions, type RecencyOptions, type RedactionResult, type ReflectOptions, type ReflectResult, RerankerUnavailableError, type ResumeStreamOptions, type ResumeStreamResult, type ResumeStreamWithStorageResult, type RetainAction, type RetainContext, type RetainOptions, type RetainResult, type RetainSource, SDK_SCHEMA_VERSION, SHORT_TTL_MS, STREAM_RESUMABLE_HEADER, type ScoreBreakdown, type ScoreProfileSalienceOptions, type ScreenResult, type ScreenedCandidate, type SearchSource, type SendMessageWithStorageArgs, type SendMessageWithStorageDetachedResult, type SendMessageWithStorageResult, type ServerToolsOptions, type ServerToolsResponse, type SignMessageFn, type StockPriceClassification, type StockPricePreProcessorOptions, type ChatCompletionUsage as StoredChatCompletionUsage, type StoredConversation, type StoredConversationMemory, type StoredMessage, type StoredMessageWithSimilarity, type StoredVaultFolder, VaultFolder as StoredVaultFolderModel, type StoredVaultMemory, VaultMemory as StoredVaultMemoryModel, StreamExpiredError, type StreamMetaEvent, type StreamResumeHandle, type SynthesizeProfileOptions, TOPICS_EXTRACTION_VERSION, TOPIC_EXTRACTION_BATCH_SIZE, TREND_RECENT_WINDOW_DAYS, TREND_STALE_WINDOW_DAYS, type TextChunk, type TopicExtractOptions, type TopicExtractionInput, type TopicExtractionRunResult, type TurnCompleteEvent, type TurnSkippedEvent, type UpdateVaultFolderOptions, type UpdateVaultMemoryOptions, type UseChatStorageOptions, type UseChatStorageResult, type UseCreditsOptions, type UseCreditsResult, type UseModelsOptions, type UseModelsResult, VAULT_SIZE_HOP_CAP, type VaultEmbeddingCache, type VaultFolderOperationsContext, type VaultMemoryOperationsContext, type VaultSaveOperation, type VaultSearchResult, WalletPoller, type WeatherClassification, type WeatherPreProcessorOptions, type WebSearchClassification, type WebSearchPreProcessorOptions, addConversationMemoriesOp, archiveVaultMemoryOp, buildNotionAuthUrl, capHopsForDensity, chatStorageMigrations, chatStorageSchema, chunkAndEmbedAllMessages, chunkAndEmbedMessage, chunkText, classifyCryptoPrice, classifyCryptoPriceBatch, classifyDecay, classifyInjectionCandidates, classifyObservationTrend, classifyStockPrice, classifyStockPriceBatch, classifyWeather, classifyWeatherBatch, classifyWebSearch, classifyWebSearchBatch, clearAllEncryptionKeys, clearAllEncryptionState, clearConversationMemoriesOp, clearEncryptionKey, clearLazyTitleCache, clearServerToolsCache, consoleLogger, conversationMemoryToStored, cosineInt8, createAutoExtractor, createChunkVectorCache, createCryptoPricePreProcessor, createDecaySweeper, createLlmDecayClassifier, createLlmNeighborRefiner, createMemoryEngineTool, createMemoryVaultSearchTool, createMemoryVaultTool, createNotionTools, createPlatformCursorStore, createRecallTool, createStockPricePreProcessor, createStreamingDeAnonymizer, createVaultEmbeddingCache, createVaultFolderOp, createVaultMemoriesBatchOp, createVaultMemoryOp, createWeatherPreProcessor, createWebSearchPreProcessor, decryptConversationTitle, deleteAllVaultMemoriesForUserOp, deleteVaultFolderOp, deleteVaultMemoryOp, dequantizeEmbedding, discoverNotionOAuthEndpoints, eagerEmbedContent, embedAllMessages, embedMessage, ensureDefaultFoldersOp, exchangeNotionCode, extractAndLinkEntitiesForMemoriesOp, extractAndRetain, extractEntitiesForMemories, extractFacts, generateConversationId, generateEmbedding, generateEmbeddings, generateNotionPKCE, getAllVaultFoldersOp, getAllVaultMemoriesOp, getAllVaultMemoryContentsOp, getCachedServerTools, getConversationMemoriesOp, getConversationsByProjectLazyOp, getConversationsLazyOp, getConversationsPageOp, getDecayCandidatesRawOp, getLogger, getMemoriesNeedingTopicExtractionOp, getServerTools, getUnfiledVaultMemoriesOp, getVaultFolderMemoryCountOp, getVaultMemoryOp, hardDeleteDecayedOp, hasEncryptionKey, injectionSignatureCatalog, isPiiRedactor, isRerankerAvailable, moveMemoriesToFolderOp, noopLogger, onKeyAvailable, preEmbedVaultMemories, quantizeEmbedding, queueManager, rankProfileCandidates, recall, reflect, refreshNotionAccessToken, registerNotionClient, requestEncryptionKey, resolvePiiRedactor, restoreVaultMemoryOp, resumeStream, retain, scoreProfileSalience, screenCandidatesForInjection, sdkMigrations, sdkModelClasses, sdkSchema, searchVaultMemories, setLogger, shouldChunkMessage, stampTopicsExtractedAtOp, streamCancelPath, streamReplayPath, summarizeObservationTrends, supersedeVaultMemoryOp, synthesizeProfile, traverseGraphLane, ttlForType, updateVaultFolderContextOp, updateVaultFolderOp, updateVaultMemoryEmbeddingOp, updateVaultMemoryOp, upsertMessageOp, useChat, useChatStorage, useCredits, useEncryption, useModels, xhrTransport };
+export { type AutoExtractMessage, type AutoExtractor, type Budget, type CachedChunkVectors, type CachedServerTools, Conversation as ChatConversation, Message as ChatMessage, type ChatRole, type ChunkVectorCache, type ChunkingOptions, type ConsolidationFallbackReason, type ConversationMemoryInput, ConversationMemory as ConversationMemoryModel, type ConversationMemoryOperationsContext, type CreateAutoExtractorOptions, type CreateConversationOptions, type CreateDecaySweeperOptions, type CreateMessageOptions, type CreateVaultFolderOptions, type CreateVaultMemoryOptions, type CryptoPriceClassification, type CryptoPricePreProcessorOptions, DEFAULT_CACHE_EXPIRATION_MS, DEFAULT_CHUNK_CACHE_SIZE, DEFAULT_CHUNK_OVERLAP, DEFAULT_CHUNK_SIZE, DEFAULT_DECAY_POLICY, DEFAULT_MAX_CLASSIFIER_CALLS_PER_SWEEP, DEFAULT_MIN_CHUNK_SIZE, DEFAULT_PROFILE_FACETS, DEFAULT_PROFILE_FACT_TYPE_WEIGHTS, DEFAULT_PROFILE_PROOF_ALPHA, DEFAULT_PROFILE_TREND_MULTIPLIERS, DEFAULT_VAULT_CACHE_SIZE, DatabaseManager, type DatabaseManagerLogger, type DatabaseManagerOptions, type DecayCandidateRaw, type DecayClassifier, type DecayInput, type DecayPolicy, type DecaySweepResult, type DecaySweeper, type DecayVerdict, ENTITY_FANOUT, type EmbeddedWalletSignerFn, type ExtractFactsOptions, type ExtractOutcome, type ExtractedCandidate, type ExtractedEntity, type ExtractionCursorStore, type FactType, type FileMetadata, type FlushResult, type GetConversationsPageOptions, type GetMessagesPageOptions, type GraphTraversalOptions, HARD_DELETE_WINDOW_MS, INFERENCE_ID_HEADER, type InjectionClassifierOptions, type InjectionReason, type LazyStoredConversation, type LlmDecayClassifierOptions, type LlmNeighborRefinerOptions, type Logger, LoggerProvider, type LoggerProviderProps, MAX_HOPS, MEDIUM_TTL_MS, type MemoriesNeedingTopicExtraction, type EmbeddingOptions as MemoryEngineEmbeddingOptions, type MemoryEngineResult, type MemoryEngineSearchOptions, type MemoryExtractedEvent, type MemoryKind, type MemoryQuarantinedEvent, type MemoryVaultSearchOptions, type MemoryVaultToolOptions, type MessageRedactionResult, type MessageSkeleton, NEVER_TTL_MS, NODE_BUDGET, NOTION_OAUTH_CONFIG, type NeighborRefiner, type NotionAuthUrlParams, type NotionClientRegistration, type NotionExchangeCodeParams, type NotionOAuthEndpoints, type NotionPKCEChallenge, type NotionRefreshTokenParams, type NotionTokenResponse, type NowSource, type ObservationTrend, type ObservationTrendInput, PAST_EVENT_GRACE_MS, PII_PATTERNS, PROFILE_DOC_VERSION, type PiiCategory, type PiiMatch, type PiiPattern, PiiRedactor, type PiiRedactorOptions, type PlatformStorage, type PortalLlmAuth, type ProfileConfigFingerprint, type ProfileDoc, type ProfileFacet, type ProfileFacetKey, type ProfileSalienceInput, type ProfileSection, type PromptPreProcessor, type PromptPreProcessorContext, type QuantizedEmbedding, type QuarantinedMemoryInfo, QueueManager, type QueueStatus, RECALL_MAX_LIMIT, RECALL_TOOL_NAME, type RankedMemory, type RankedProfileCandidate, type RecallContext, type RecallDegradation, type RecallDiagnostics, type RecallOptions, type RecallResult, type RecallToolCallbacks, type RecallToolOptions, type RecencyOptions, type RedactionResult, type ReflectOptions, type ReflectResult, RerankerUnavailableError, type ResumeStreamOptions, type ResumeStreamResult, type ResumeStreamWithStorageResult, type RetainAction, type RetainContext, type RetainOptions, type RetainResult, type RetainSource, SDK_SCHEMA_VERSION, SHORT_TTL_MS, STREAM_RESUMABLE_HEADER, type ScoreBreakdown, type ScoreProfileSalienceOptions, type ScreenResult, type ScreenedCandidate, type SearchSource, type SendMessageWithStorageArgs, type SendMessageWithStorageDetachedResult, type SendMessageWithStorageResult, type ServerToolsOptions, type ServerToolsResponse, type SignMessageFn, type StockPriceClassification, type StockPricePreProcessorOptions, type ChatCompletionUsage as StoredChatCompletionUsage, type StoredConversation, type StoredConversationMemory, type StoredMessage, type StoredMessageWithSimilarity, type StoredVaultFolder, VaultFolder as StoredVaultFolderModel, type StoredVaultMemory, VaultMemory as StoredVaultMemoryModel, StreamExpiredError, type StreamMetaEvent, type StreamResumeHandle, type SynthesizeProfileOptions, TOPICS_EXTRACTION_VERSION, TOPIC_EXTRACTION_BATCH_SIZE, TREND_RECENT_WINDOW_DAYS, TREND_STALE_WINDOW_DAYS, type TextChunk, type TopicExtractOptions, type TopicExtractionInput, type TopicExtractionRunResult, type TurnCompleteEvent, type TurnSkippedEvent, type UpdateVaultFolderOptions, type UpdateVaultMemoryOptions, type UseChatStorageOptions, type UseChatStorageResult, type UseCreditsOptions, type UseCreditsResult, type UseModelsOptions, type UseModelsResult, VAULT_SIZE_HOP_CAP, type VaultEmbeddingCache, type VaultFolderOperationsContext, type VaultMemoryOperationsContext, type VaultMemoryVisibility, type VaultSaveOperation, type VaultSearchResult, WalletPoller, type WeatherClassification, type WeatherPreProcessorOptions, type WebSearchClassification, type WebSearchPreProcessorOptions, addConversationMemoriesOp, archiveVaultMemoryOp, buildNotionAuthUrl, capHopsForDensity, chatStorageMigrations, chatStorageSchema, chunkAndEmbedAllMessages, chunkAndEmbedMessage, chunkText, classifyCryptoPrice, classifyCryptoPriceBatch, classifyDecay, classifyInjectionCandidates, classifyObservationTrend, classifyStockPrice, classifyStockPriceBatch, classifyWeather, classifyWeatherBatch, classifyWebSearch, classifyWebSearchBatch, clearAllEncryptionKeys, clearAllEncryptionState, clearConversationMemoriesOp, clearEncryptionKey, clearLazyTitleCache, clearServerToolsCache, consoleLogger, conversationMemoryToStored, cosineInt8, createAutoExtractor, createChunkVectorCache, createCryptoPricePreProcessor, createDecaySweeper, createLlmDecayClassifier, createLlmNeighborRefiner, createMemoryEngineTool, createMemoryVaultSearchTool, createMemoryVaultTool, createNotionTools, createPlatformCursorStore, createRecallTool, createStockPricePreProcessor, createStreamingDeAnonymizer, createVaultEmbeddingCache, createVaultFolderOp, createVaultMemoriesBatchOp, createVaultMemoryOp, createWeatherPreProcessor, createWebSearchPreProcessor, decryptConversationTitle, deleteAllVaultMemoriesForUserOp, deleteVaultFolderOp, deleteVaultMemoryOp, dequantizeEmbedding, discoverNotionOAuthEndpoints, eagerEmbedContent, embedAllMessages, embedMessage, ensureDefaultFoldersOp, exchangeNotionCode, extractAndLinkEntitiesForMemoriesOp, extractAndRetain, extractEntitiesForMemories, extractFacts, generateConversationId, generateEmbedding, generateEmbeddings, generateNotionPKCE, getAllVaultFoldersOp, getAllVaultMemoriesOp, getAllVaultMemoryContentsOp, getCachedServerTools, getConversationMemoriesOp, getConversationsByProjectLazyOp, getConversationsLazyOp, getConversationsPageOp, getDecayCandidatesRawOp, getLogger, getMemoriesNeedingTopicExtractionOp, getServerTools, getUnfiledVaultMemoriesOp, getVaultFolderMemoryCountOp, getVaultMemoryOp, hardDeleteDecayedOp, hasEncryptionKey, injectionSignatureCatalog, isPiiRedactor, isRerankerAvailable, moveMemoriesToFolderOp, noopLogger, onKeyAvailable, preEmbedVaultMemories, quantizeEmbedding, queueManager, rankProfileCandidates, recall, reflect, refreshNotionAccessToken, registerNotionClient, requestEncryptionKey, resolvePiiRedactor, restoreVaultMemoryOp, resumeStream, retain, scoreProfileSalience, screenCandidatesForInjection, sdkMigrations, sdkModelClasses, sdkSchema, searchVaultMemories, setLogger, setMemoryVisibilityOp, shouldChunkMessage, stampTopicsExtractedAtOp, streamCancelPath, streamReplayPath, summarizeObservationTrends, supersedeVaultMemoryOp, synthesizeProfile, traverseGraphLane, ttlForType, updateVaultFolderContextOp, updateVaultFolderOp, updateVaultMemoryEmbeddingOp, updateVaultMemoryOp, upsertMessageOp, useChat, useChatStorage, useCredits, useEncryption, useModels, xhrTransport };

package/dist/expo/index.mjs

@@ -94,6 +94,7 @@ import {
   restoreVaultMemoryOp,
   searchChunksOp,
   searchVaultMemories,
+  setMemoryVisibilityOp,
   shouldChunkMessage,
   stampTopicsExtractedAtOp,
   stripToolCalls,
@@ -110,7 +111,7 @@ import {
   upsertMessageOp,
   useEncryption,
   vaultMemoryToStored
-} from "./chunk-FFB4CDPC.mjs";
+} from "./chunk-7CTI3XR6.mjs";
 import {
   PII_PATTERNS,
   PiiRedactor,
@@ -128,7 +129,7 @@ import {
   setLogger,
   supportsResponseFormat,
   validateEndpointOverride
-} from "./chunk-BOY27A2C.mjs";
+} from "./chunk-ILAWDQDE.mjs";
 import {
   BASE_URL,
   MCP_R2_DOMAIN,
@@ -5579,6 +5580,18 @@ __decorateClass([
 __decorateClass([
   field3("trust_tier")
 ], VaultMemory.prototype, "trustTier", 2);
+__decorateClass([
+  field3("visibility")
+], VaultMemory.prototype, "visibility", 2);
+__decorateClass([
+  field3("twin_opt_in")
+], VaultMemory.prototype, "twinOptIn", 2);
+__decorateClass([
+  field3("published_at")
+], VaultMemory.prototype, "publishedAt", 2);
+__decorateClass([
+  field3("geohash")
+], VaultMemory.prototype, "geohash", 2);
 __decorateClass([
   readonly2,
   date3("created_at")
@@ -6598,7 +6611,7 @@ async function tryConsolidate(trimmed, ctx, options, prepared) {
     content: m.content,
     similarity: m.similarity
   }));
-  const { consolidateMemory: doConsolidate } = await import("./consolidate-NC5DOC5J.mjs");
+  const { consolidateMemory: doConsolidate } = await import("./consolidate-HYIEFPFA.mjs");
   const decision = await doConsolidate(trimmed, candidates, consolidateOptions);
   if (decision.action === "create") return null;
   if (decision.action === "supersede" && decision.content) {
@@ -7170,18 +7183,16 @@ function createAutoExtractor(options) {
     } catch {
     }
   };
-  const consolidateBaseUrl = options.consolidate?.baseUrl ?? options.extract.baseUrl;
-  const consolidateOptions = options.consolidate ? {
-    ...options.extract.apiKey !== void 0 && { apiKey: options.extract.apiKey },
-    ...options.extract.getToken !== void 0 && { getToken: options.extract.getToken },
-    ...consolidateBaseUrl !== void 0 && { baseUrl: consolidateBaseUrl },
-    ...options.consolidate.model !== void 0 && { model: options.consolidate.model },
-    ...options.consolidate.onFallback !== void 0 && {
-      onFallback: options.consolidate.onFallback
-    }
-    // PII redaction is inherited from `extract.piiRedaction` inside
-    // extractAndRetain (so direct callers are covered too), not copied here.
-  } : void 0;
+  const subPassAuth = (baseUrlOverride) => {
+    const baseUrl = baseUrlOverride ?? options.extract.baseUrl;
+    return {
+      ...options.extract.apiKey !== void 0 && { apiKey: options.extract.apiKey },
+      ...options.extract.getToken !== void 0 && { getToken: options.extract.getToken },
+      ...baseUrl !== void 0 && { baseUrl }
+    };
+  };
+  const consolidateOptions = options.consolidate ? { ...options.consolidate, ...subPassAuth(options.consolidate.baseUrl) } : void 0;
+  const injectionClassifierOptions = options.injectionClassifier ? { ...options.injectionClassifier, ...subPassAuth(options.injectionClassifier.baseUrl) } : void 0;
   if (options.retainCtx.vaultCtx.entityCtx && !options.entityCtx) {
     getLogger().warn(
       "[memory/extract] retainCtx.vaultCtx.entityCtx is set but extractor was created without `entityCtx` \u2014 W5 graph lane will receive no writes"
@@ -7235,6 +7246,9 @@ function createAutoExtractor(options) {
             ...options.scope !== void 0 && { scope: options.scope },
             ...options.folderId !== void 0 && { folderId: options.folderId },
             ...consolidateOptions !== void 0 && { consolidateOptions },
+            ...injectionClassifierOptions !== void 0 && {
+              injectionClassifier: injectionClassifierOptions
+            },
             ...options.onCandidateFailed && {
               onCandidateFailed: (candidate, error) => options.onCandidateFailed?.({ candidate, error, conversationId })
             },
@@ -11677,7 +11691,7 @@ __decorateClass([
 ], VaultFolder.prototype, "context", 2);
 
 // src/lib/db/schema.ts
-var SDK_SCHEMA_VERSION = 40;
+var SDK_SCHEMA_VERSION = 41;
 var sdkSchema = appSchema2({
   version: SDK_SCHEMA_VERSION,
   tables: [
@@ -11836,7 +11850,26 @@ var sdkSchema = appSchema2({
         // Tier-0 security (PR3) — "quarantined" when the write-time injection
         // screen flagged this fact, else null/"trusted". Indexed so the recall
         // choke point can default-exclude quarantined rows.
-        { name: "trust_tier", type: "string", isOptional: true, isIndexed: true }
+        { name: "trust_tier", type: "string", isOptional: true, isIndexed: true },
+        // People Nearby cross-user visibility axis — ORTHOGONAL to `scope`
+        // (which partitions by MODEL access: private vs shared providers).
+        // TWO tiers: 'private' (or null, or any unrecognised value —
+        // grandfathered / fail-safe) = local-only; 'public' = embedding +
+        // plaintext may be published (matching/profile/discovery/twin).
+        // The server index is the authority for what IS published; this
+        // column records the user's intent.
+        { name: "visibility", type: "string", isOptional: true, isIndexed: true },
+        // When true, the owner opted this memory into their own digital twin
+        // even if it is otherwise private (twin-scoped upload only — never
+        // indexed for matching, never displayed). Null/false = follows visibility.
+        { name: "twin_opt_in", type: "boolean", isOptional: true },
+        // Unix ms when visibility last became non-private. Null when private
+        // (cleared on revoke) — the publish reconciler uses it to diff local
+        // intent against the server index.
+        { name: "published_at", type: "number", isOptional: true },
+        // Reserved geo slot (coarse geohash) for landmark/Trail memories.
+        // Unused at launch; populated by location-tagged memory sources.
+        { name: "geohash", type: "string", isOptional: true }
       ]
     }),
     // Entity table — canonical names extracted from auto-extraction (W5).
@@ -12511,6 +12544,24 @@ var sdkMigrations = schemaMigrations2({
           ]
         })
       ]
+    },
+    // v40 -> v41: People Nearby visibility axis on memory_vault. Existing rows
+    // keep visibility NULL — read as 'private' (nothing pre-existing is ever
+    // published without an explicit user action; the consent posture requires
+    // opt-in, never a retroactive default).
+    {
+      toVersion: 41,
+      steps: [
+        addColumns2({
+          table: "memory_vault",
+          columns: [
+            { name: "visibility", type: "string", isOptional: true, isIndexed: true },
+            { name: "twin_opt_in", type: "boolean", isOptional: true },
+            { name: "published_at", type: "number", isOptional: true },
+            { name: "geohash", type: "string", isOptional: true }
+          ]
+        })
+      ]
     }
   ]
 });
@@ -14000,6 +14051,7 @@ export {
   sdkSchema,
   searchVaultMemories,
   setLogger,
+  setMemoryVisibilityOp,
   shouldChunkMessage,
   stampTopicsExtractedAtOp,
   streamCancelPath,

package/dist/{react/recall-ELUJPQQB.mjs → expo/recall-IBGUFY4P.mjs}

@@ -1,7 +1,7 @@
 import {
   recall
-} from "./chunk-YGCJX5YW.mjs";
-import "./chunk-BOY27A2C.mjs";
+} from "./chunk-7CTI3XR6.mjs";
+import "./chunk-ILAWDQDE.mjs";
 import "./chunk-GYKJOWEO.mjs";
 export {
   recall

package/dist/react/{chunk-BOY27A2C.mjs → chunk-ILAWDQDE.mjs}

@@ -196,6 +196,7 @@ async function attemptPortalJson(req, endpoint) {
     return { kind: "retryable", reason: `response body parse failed: ${err.message}` };
   }
   clearTimeout(timer);
+  logPortalUsage(body, req.tag);
   const rawContent = extractCompletionContent(body);
   if (!rawContent) {
     return { kind: "retryable", reason: "portal response had no completion content" };
@@ -251,6 +252,29 @@ function extractJsonCandidate(raw) {
   }
   return body;
 }
+function asRecord(value) {
+  return typeof value === "object" && value !== null ? value : void 0;
+}
+function asCount(value) {
+  return typeof value === "number" && Number.isFinite(value) ? value : void 0;
+}
+function logPortalUsage(body, tag) {
+  try {
+    const root = asRecord(body);
+    if (!root) return;
+    const usage = asRecord(root.usage);
+    const promptTokens = asCount(usage?.prompt_tokens);
+    const completionTokens = asCount(usage?.completion_tokens);
+    if (promptTokens === void 0 && completionTokens === void 0) return;
+    const cachedTokens = asCount(asRecord(root.portal)?.cached_tokens) ?? asCount(asRecord(usage?.prompt_tokens_details)?.cached_tokens) ?? 0;
+    const parts = [];
+    if (promptTokens !== void 0) parts.push(`prompt=${promptTokens}`);
+    if (completionTokens !== void 0) parts.push(`completion=${completionTokens}`);
+    parts.push(`cached=${cachedTokens}`);
+    getLogger().debug(`[${tag}] usage ${parts.join(" ")}`);
+  } catch {
+  }
+}
 function extractCompletionContent(body) {
   if (typeof body !== "object" || body === null) return null;
   const choices = body.choices;