@anuma/sdk 3.9.6 → 3.11.0

package/dist/server/{chunk-FXS3EUKX.mjs → chunk-NCKDSZPQ.mjs}

@@ -1,7 +1,7 @@
 import {
   callPortalJsonCompletion,
   getLogger
-} from "./chunk-MIXEASUP.mjs";
+} from "./chunk-OBDRKQQI.mjs";
 import {
   BASE_URL,
   __commonJS,
@@ -16239,6 +16239,19 @@ async function decryptVaultMemoryFields(memory, address, signMessage, embeddedWa
 }
 
 // src/lib/db/memoryVault/operations.ts
+function visibilityOrPrivate(value) {
+  return value === "public" ? value : "private";
+}
+var NON_PRIVATE_VISIBILITIES = ["public"];
+function visibilityConditions(requested) {
+  if (!requested?.length) return [];
+  if (!requested.includes("private")) {
+    return [import_watermelondb3.Q.where("visibility", import_watermelondb3.Q.oneOf([...requested]))];
+  }
+  const excluded = NON_PRIVATE_VISIBILITIES.filter((v) => !requested.includes(v));
+  if (excluded.length === 0) return [];
+  return [import_watermelondb3.Q.or(import_watermelondb3.Q.where("visibility", null), import_watermelondb3.Q.where("visibility", import_watermelondb3.Q.notIn(excluded)))];
+}
 function isOwnedByCtxUser(ctx, record) {
   return ctx.userId === void 0 || record.userId === ctx.userId;
 }
@@ -16300,6 +16313,10 @@ function vaultMemoryToStoredRaw(memory) {
     factType: memory.factType ?? null,
     archivedAt: memory.archivedAt ?? null,
     trustTier: memory.trustTier ?? null,
+    visibility: visibilityOrPrivate(memory.visibility),
+    twinOptIn: memory.twinOptIn ?? false,
+    publishedAt: memory.publishedAt ?? null,
+    geohash: memory.geohash ?? null,
     createdAt: memory.createdAt,
     updatedAt: memory.updatedAt,
     isDeleted: memory.isDeleted
@@ -16347,6 +16364,14 @@ async function createVaultMemoryOp(ctx, opts) {
       if (opts.trustTier !== void 0) {
         record._setRaw("trust_tier", normalizeTrustTier(opts.trustTier));
       }
+      record._setRaw("visibility", opts.visibility ?? "private");
+      record._setRaw(
+        "published_at",
+        opts.visibility && opts.visibility !== "private" ? opts.publishedAt ?? Date.now() : null
+      );
+      if (opts.geohash !== void 0) {
+        record._setRaw("geohash", opts.geohash);
+      }
     });
   });
   return vaultMemoryToStored(created, ctx.walletAddress, ctx.signMessage, ctx.embeddedWalletSigner);
@@ -16493,6 +16518,14 @@ async function createVaultMemoriesBatchOp(ctx, optionsArray) {
         if (opts.trustTier !== void 0) {
           record._setRaw("trust_tier", normalizeTrustTier(opts.trustTier));
         }
+        record._setRaw("visibility", opts.visibility ?? "private");
+        record._setRaw(
+          "published_at",
+          opts.visibility && opts.visibility !== "private" ? opts.publishedAt ?? Date.now() : null
+        );
+        if (opts.geohash !== void 0) {
+          record._setRaw("geohash", opts.geohash);
+        }
       })
     );
     await ctx.database.batch(...prepared);
@@ -16556,6 +16589,10 @@ function vaultMemoryRawToStoredRaw(raw) {
     factType: raw.fact_type ?? null,
     archivedAt: raw.archived_at ?? null,
     trustTier: raw.trust_tier ?? null,
+    visibility: visibilityOrPrivate(raw.visibility),
+    twinOptIn: raw.twin_opt_in === true || raw.twin_opt_in === 1,
+    publishedAt: raw.published_at ?? null,
+    geohash: raw.geohash ?? null,
     createdAt: new Date(raw.created_at),
     updatedAt: new Date(raw.updated_at),
     isDeleted: raw.is_deleted === true || raw.is_deleted === 1
@@ -16572,6 +16609,7 @@ async function getAllVaultMemoriesOp(ctx, options) {
   const conditions = [
     ...baseVaultConditions(ctx, options),
     ...options?.scopes?.length ? [import_watermelondb3.Q.where("scope", import_watermelondb3.Q.oneOf(options.scopes))] : [],
+    ...visibilityConditions(options?.visibility),
     ...options?.folderId !== void 0 ? [import_watermelondb3.Q.where("folder_id", options.folderId)] : [],
     ...options?.factTypes?.length ? [import_watermelondb3.Q.where("fact_type", import_watermelondb3.Q.oneOf(options.factTypes))] : [],
     import_watermelondb3.Q.sortBy(options?.since ? "updated_at" : "created_at", import_watermelondb3.Q.desc),
@@ -16785,6 +16823,38 @@ async function updateVaultMemoryOp(ctx, id, opts) {
     return null;
   }
 }
+async function setMemoryVisibilityOp(ctx, id, opts) {
+  let record;
+  try {
+    record = await ctx.vaultMemoryCollection.find(id);
+  } catch {
+    return null;
+  }
+  if (record.isDeleted || !isOwnedByCtxUser(ctx, record)) return null;
+  let stale = false;
+  await ctx.database.write(async () => {
+    if (record.isDeleted || !isOwnedByCtxUser(ctx, record)) {
+      stale = true;
+      return;
+    }
+    const currentUpdatedAt = record.updatedAt.getTime();
+    const currentPublishedAt = record.publishedAt ?? null;
+    await record.update((r) => {
+      r._setRaw("visibility", opts.visibility);
+      if (opts.visibility === "private") {
+        r._setRaw("published_at", null);
+      } else if (currentPublishedAt === null) {
+        r._setRaw("published_at", Date.now());
+      }
+      if (opts.twinOptIn !== void 0) {
+        r._setRaw("twin_opt_in", opts.twinOptIn);
+      }
+      r._setRaw("updated_at", currentUpdatedAt);
+    });
+  });
+  if (stale) return null;
+  return vaultMemoryToStored(record, ctx.walletAddress, ctx.signMessage, ctx.embeddedWalletSigner);
+}
 async function deleteVaultMemoryOp(ctx, id) {
   try {
     const record = await ctx.vaultMemoryCollection.find(id);
@@ -19849,7 +19919,7 @@ function createMemoryVaultSearchTool(vaultCtx, embeddingOptions, cache, searchOp
             legacy.map((r) => ({ id: r.uniqueId, content: r.content, score: r.similarity }))
           );
         }
-        const { recall: recall2 } = await import("./recall-VZO4USXK.mjs");
+        const { recall: recall2 } = await import("./recall-AN7HBEFS.mjs");
         const result = await recall2(
           query,
           { vaultCtx, embeddingOptions, vaultCache: cache },
@@ -20835,6 +20905,7 @@ export {
   getAllVaultMemoriesOp,
   getAllVaultMemoryContentsOp,
   updateVaultMemoryOp,
+  setMemoryVisibilityOp,
   deleteVaultMemoryOp,
   supersedeVaultMemoryOp,
   getUnfiledVaultMemoriesOp,

package/dist/server/{chunk-MIXEASUP.mjs → chunk-OBDRKQQI.mjs}

@@ -183,6 +183,7 @@ async function attemptPortalJson(req, endpoint) {
     return { kind: "retryable", reason: `response body parse failed: ${err.message}` };
   }
   clearTimeout(timer);
+  logPortalUsage(body, req.tag);
   const rawContent = extractCompletionContent(body);
   if (!rawContent) {
     return { kind: "retryable", reason: "portal response had no completion content" };
@@ -238,6 +239,29 @@ function extractJsonCandidate(raw) {
   }
   return body;
 }
+function asRecord(value) {
+  return typeof value === "object" && value !== null ? value : void 0;
+}
+function asCount(value) {
+  return typeof value === "number" && Number.isFinite(value) ? value : void 0;
+}
+function logPortalUsage(body, tag) {
+  try {
+    const root = asRecord(body);
+    if (!root) return;
+    const usage = asRecord(root.usage);
+    const promptTokens = asCount(usage?.prompt_tokens);
+    const completionTokens = asCount(usage?.completion_tokens);
+    if (promptTokens === void 0 && completionTokens === void 0) return;
+    const cachedTokens = asCount(asRecord(root.portal)?.cached_tokens) ?? asCount(asRecord(usage?.prompt_tokens_details)?.cached_tokens) ?? 0;
+    const parts = [];
+    if (promptTokens !== void 0) parts.push(`prompt=${promptTokens}`);
+    if (completionTokens !== void 0) parts.push(`completion=${completionTokens}`);
+    parts.push(`cached=${cachedTokens}`);
+    getLogger().debug(`[${tag}] usage ${parts.join(" ")}`);
+  } catch {
+  }
+}
 function extractCompletionContent(body) {
   if (typeof body !== "object" || body === null) return null;
   const choices = body.choices;

package/dist/server/{consolidate-YCD45CXO.mjs → consolidate-JMGL3MXG.mjs}

@@ -4,7 +4,7 @@ import {
 import {
   callPortalJsonCompletion,
   getLogger
-} from "./chunk-MIXEASUP.mjs";
+} from "./chunk-OBDRKQQI.mjs";
 import "./chunk-3RPGXXPZ.mjs";
 
 // src/lib/memory/consolidate.ts

package/dist/server/index.cjs

@@ -17046,6 +17046,18 @@ var init_encryption2 = __esm({
 });
 
 // src/lib/db/memoryVault/operations.ts
+function visibilityOrPrivate(value) {
+  return value === "public" ? value : "private";
+}
+function visibilityConditions(requested) {
+  if (!requested?.length) return [];
+  if (!requested.includes("private")) {
+    return [import_watermelondb17.Q.where("visibility", import_watermelondb17.Q.oneOf([...requested]))];
+  }
+  const excluded = NON_PRIVATE_VISIBILITIES.filter((v) => !requested.includes(v));
+  if (excluded.length === 0) return [];
+  return [import_watermelondb17.Q.or(import_watermelondb17.Q.where("visibility", null), import_watermelondb17.Q.where("visibility", import_watermelondb17.Q.notIn(excluded)))];
+}
 function isOwnedByCtxUser(ctx, record) {
   return ctx.userId === void 0 || record.userId === ctx.userId;
 }
@@ -17106,6 +17118,10 @@ function vaultMemoryToStoredRaw(memory) {
     factType: memory.factType ?? null,
     archivedAt: memory.archivedAt ?? null,
     trustTier: memory.trustTier ?? null,
+    visibility: visibilityOrPrivate(memory.visibility),
+    twinOptIn: memory.twinOptIn ?? false,
+    publishedAt: memory.publishedAt ?? null,
+    geohash: memory.geohash ?? null,
     createdAt: memory.createdAt,
     updatedAt: memory.updatedAt,
     isDeleted: memory.isDeleted
@@ -17153,6 +17169,14 @@ async function createVaultMemoryOp(ctx, opts) {
       if (opts.trustTier !== void 0) {
         record._setRaw("trust_tier", normalizeTrustTier(opts.trustTier));
       }
+      record._setRaw("visibility", opts.visibility ?? "private");
+      record._setRaw(
+        "published_at",
+        opts.visibility && opts.visibility !== "private" ? opts.publishedAt ?? Date.now() : null
+      );
+      if (opts.geohash !== void 0) {
+        record._setRaw("geohash", opts.geohash);
+      }
     });
   });
   return vaultMemoryToStored(created, ctx.walletAddress, ctx.signMessage, ctx.embeddedWalletSigner);
@@ -17299,6 +17323,14 @@ async function createVaultMemoriesBatchOp(ctx, optionsArray) {
         if (opts.trustTier !== void 0) {
           record._setRaw("trust_tier", normalizeTrustTier(opts.trustTier));
         }
+        record._setRaw("visibility", opts.visibility ?? "private");
+        record._setRaw(
+          "published_at",
+          opts.visibility && opts.visibility !== "private" ? opts.publishedAt ?? Date.now() : null
+        );
+        if (opts.geohash !== void 0) {
+          record._setRaw("geohash", opts.geohash);
+        }
       })
     );
     await ctx.database.batch(...prepared);
@@ -17362,6 +17394,10 @@ function vaultMemoryRawToStoredRaw(raw) {
     factType: raw.fact_type ?? null,
     archivedAt: raw.archived_at ?? null,
     trustTier: raw.trust_tier ?? null,
+    visibility: visibilityOrPrivate(raw.visibility),
+    twinOptIn: raw.twin_opt_in === true || raw.twin_opt_in === 1,
+    publishedAt: raw.published_at ?? null,
+    geohash: raw.geohash ?? null,
     createdAt: new Date(raw.created_at),
     updatedAt: new Date(raw.updated_at),
     isDeleted: raw.is_deleted === true || raw.is_deleted === 1
@@ -17378,6 +17414,7 @@ async function getAllVaultMemoriesOp(ctx, options) {
   const conditions = [
     ...baseVaultConditions(ctx, options),
     ...options?.scopes?.length ? [import_watermelondb17.Q.where("scope", import_watermelondb17.Q.oneOf(options.scopes))] : [],
+    ...visibilityConditions(options?.visibility),
     ...options?.folderId !== void 0 ? [import_watermelondb17.Q.where("folder_id", options.folderId)] : [],
     ...options?.factTypes?.length ? [import_watermelondb17.Q.where("fact_type", import_watermelondb17.Q.oneOf(options.factTypes))] : [],
     import_watermelondb17.Q.sortBy(options?.since ? "updated_at" : "created_at", import_watermelondb17.Q.desc),
@@ -17591,6 +17628,38 @@ async function updateVaultMemoryOp(ctx, id, opts) {
     return null;
   }
 }
+async function setMemoryVisibilityOp(ctx, id, opts) {
+  let record;
+  try {
+    record = await ctx.vaultMemoryCollection.find(id);
+  } catch {
+    return null;
+  }
+  if (record.isDeleted || !isOwnedByCtxUser(ctx, record)) return null;
+  let stale = false;
+  await ctx.database.write(async () => {
+    if (record.isDeleted || !isOwnedByCtxUser(ctx, record)) {
+      stale = true;
+      return;
+    }
+    const currentUpdatedAt = record.updatedAt.getTime();
+    const currentPublishedAt = record.publishedAt ?? null;
+    await record.update((r) => {
+      r._setRaw("visibility", opts.visibility);
+      if (opts.visibility === "private") {
+        r._setRaw("published_at", null);
+      } else if (currentPublishedAt === null) {
+        r._setRaw("published_at", Date.now());
+      }
+      if (opts.twinOptIn !== void 0) {
+        r._setRaw("twin_opt_in", opts.twinOptIn);
+      }
+      r._setRaw("updated_at", currentUpdatedAt);
+    });
+  });
+  if (stale) return null;
+  return vaultMemoryToStored(record, ctx.walletAddress, ctx.signMessage, ctx.embeddedWalletSigner);
+}
 async function deleteVaultMemoryOp(ctx, id) {
   try {
     const record = await ctx.vaultMemoryCollection.find(id);
@@ -17880,7 +17949,7 @@ async function updateVaultMemoryEmbeddingOp(ctx, id, embedding, embeddingModel)
     return false;
   }
 }
-var import_watermelondb17, KNOWN_TRUST_TIERS, TOPICS_EXTRACTION_VERSION;
+var import_watermelondb17, NON_PRIVATE_VISIBILITIES, KNOWN_TRUST_TIERS, TOPICS_EXTRACTION_VERSION;
 var init_operations3 = __esm({
   "src/lib/db/memoryVault/operations.ts"() {
     "use strict";
@@ -17888,6 +17957,7 @@ var init_operations3 = __esm({
     init_logger();
     init_operations2();
     init_encryption2();
+    NON_PRIVATE_VISIBILITIES = ["public"];
     KNOWN_TRUST_TIERS = /* @__PURE__ */ new Set(["quarantined", "trusted"]);
     TOPICS_EXTRACTION_VERSION = 3;
   }
@@ -19851,6 +19921,7 @@ async function attemptPortalJson(req, endpoint) {
     return { kind: "retryable", reason: `response body parse failed: ${err.message}` };
   }
   clearTimeout(timer);
+  logPortalUsage(body, req.tag);
   const rawContent = extractCompletionContent(body);
   if (!rawContent) {
     return { kind: "retryable", reason: "portal response had no completion content" };
@@ -19906,6 +19977,29 @@ function extractJsonCandidate(raw) {
   }
   return body;
 }
+function asRecord(value) {
+  return typeof value === "object" && value !== null ? value : void 0;
+}
+function asCount(value) {
+  return typeof value === "number" && Number.isFinite(value) ? value : void 0;
+}
+function logPortalUsage(body, tag) {
+  try {
+    const root = asRecord(body);
+    if (!root) return;
+    const usage = asRecord(root.usage);
+    const promptTokens = asCount(usage?.prompt_tokens);
+    const completionTokens = asCount(usage?.completion_tokens);
+    if (promptTokens === void 0 && completionTokens === void 0) return;
+    const cachedTokens = asCount(asRecord(root.portal)?.cached_tokens) ?? asCount(asRecord(usage?.prompt_tokens_details)?.cached_tokens) ?? 0;
+    const parts = [];
+    if (promptTokens !== void 0) parts.push(`prompt=${promptTokens}`);
+    if (completionTokens !== void 0) parts.push(`completion=${completionTokens}`);
+    parts.push(`cached=${cachedTokens}`);
+    getLogger().debug(`[${tag}] usage ${parts.join(" ")}`);
+  } catch {
+  }
+}
 function extractCompletionContent(body) {
   if (typeof body !== "object" || body === null) return null;
   const choices = body.choices;
@@ -23114,6 +23208,7 @@ __export(index_exports, {
   searchVaultMemories: () => searchVaultMemories,
   selectServerToolsForPrompt: () => selectServerToolsForPrompt,
   serverPlatformStorage: () => serverPlatformStorage,
+  setMemoryVisibilityOp: () => setMemoryVisibilityOp,
   setModelPreferenceOp: () => setModelPreferenceOp,
   setUserPreferenceOp: () => setUserPreferenceOp,
   shouldAnalyzeStyle: () => shouldAnalyzeStyle,
@@ -23504,6 +23599,18 @@ __decorateClass([
 __decorateClass([
   (0, import_decorators6.field)("trust_tier")
 ], VaultMemory.prototype, "trustTier", 2);
+__decorateClass([
+  (0, import_decorators6.field)("visibility")
+], VaultMemory.prototype, "visibility", 2);
+__decorateClass([
+  (0, import_decorators6.field)("twin_opt_in")
+], VaultMemory.prototype, "twinOptIn", 2);
+__decorateClass([
+  (0, import_decorators6.field)("published_at")
+], VaultMemory.prototype, "publishedAt", 2);
+__decorateClass([
+  (0, import_decorators6.field)("geohash")
+], VaultMemory.prototype, "geohash", 2);
 __decorateClass([
   import_decorators6.readonly,
   (0, import_decorators6.date)("created_at")
@@ -23651,7 +23758,7 @@ __decorateClass([
 ], VaultFolder.prototype, "context", 2);
 
 // src/lib/db/schema.ts
-var SDK_SCHEMA_VERSION = 40;
+var SDK_SCHEMA_VERSION = 41;
 var sdkSchema = (0, import_watermelondb12.appSchema)({
   version: SDK_SCHEMA_VERSION,
   tables: [
@@ -23810,7 +23917,26 @@ var sdkSchema = (0, import_watermelondb12.appSchema)({
         // Tier-0 security (PR3) — "quarantined" when the write-time injection
         // screen flagged this fact, else null/"trusted". Indexed so the recall
         // choke point can default-exclude quarantined rows.
-        { name: "trust_tier", type: "string", isOptional: true, isIndexed: true }
+        { name: "trust_tier", type: "string", isOptional: true, isIndexed: true },
+        // People Nearby cross-user visibility axis — ORTHOGONAL to `scope`
+        // (which partitions by MODEL access: private vs shared providers).
+        // TWO tiers: 'private' (or null, or any unrecognised value —
+        // grandfathered / fail-safe) = local-only; 'public' = embedding +
+        // plaintext may be published (matching/profile/discovery/twin).
+        // The server index is the authority for what IS published; this
+        // column records the user's intent.
+        { name: "visibility", type: "string", isOptional: true, isIndexed: true },
+        // When true, the owner opted this memory into their own digital twin
+        // even if it is otherwise private (twin-scoped upload only — never
+        // indexed for matching, never displayed). Null/false = follows visibility.
+        { name: "twin_opt_in", type: "boolean", isOptional: true },
+        // Unix ms when visibility last became non-private. Null when private
+        // (cleared on revoke) — the publish reconciler uses it to diff local
+        // intent against the server index.
+        { name: "published_at", type: "number", isOptional: true },
+        // Reserved geo slot (coarse geohash) for landmark/Trail memories.
+        // Unused at launch; populated by location-tagged memory sources.
+        { name: "geohash", type: "string", isOptional: true }
       ]
     }),
     // Entity table — canonical names extracted from auto-extraction (W5).
@@ -24485,6 +24611,24 @@ var sdkMigrations = (0, import_migrations.schemaMigrations)({
           ]
         })
       ]
+    },
+    // v40 -> v41: People Nearby visibility axis on memory_vault. Existing rows
+    // keep visibility NULL — read as 'private' (nothing pre-existing is ever
+    // published without an explicit user action; the consent posture requires
+    // opt-in, never a retroactive default).
+    {
+      toVersion: 41,
+      steps: [
+        (0, import_migrations.addColumns)({
+          table: "memory_vault",
+          columns: [
+            { name: "visibility", type: "string", isOptional: true, isIndexed: true },
+            { name: "twin_opt_in", type: "boolean", isOptional: true },
+            { name: "published_at", type: "number", isOptional: true },
+            { name: "geohash", type: "string", isOptional: true }
+          ]
+        })
+      ]
     }
   ]
 });
@@ -28480,18 +28624,16 @@ function createAutoExtractor(options) {
     } catch {
     }
   };
-  const consolidateBaseUrl = options.consolidate?.baseUrl ?? options.extract.baseUrl;
-  const consolidateOptions = options.consolidate ? {
-    ...options.extract.apiKey !== void 0 && { apiKey: options.extract.apiKey },
-    ...options.extract.getToken !== void 0 && { getToken: options.extract.getToken },
-    ...consolidateBaseUrl !== void 0 && { baseUrl: consolidateBaseUrl },
-    ...options.consolidate.model !== void 0 && { model: options.consolidate.model },
-    ...options.consolidate.onFallback !== void 0 && {
-      onFallback: options.consolidate.onFallback
-    }
-    // PII redaction is inherited from `extract.piiRedaction` inside
-    // extractAndRetain (so direct callers are covered too), not copied here.
-  } : void 0;
+  const subPassAuth = (baseUrlOverride) => {
+    const baseUrl = baseUrlOverride ?? options.extract.baseUrl;
+    return {
+      ...options.extract.apiKey !== void 0 && { apiKey: options.extract.apiKey },
+      ...options.extract.getToken !== void 0 && { getToken: options.extract.getToken },
+      ...baseUrl !== void 0 && { baseUrl }
+    };
+  };
+  const consolidateOptions = options.consolidate ? { ...options.consolidate, ...subPassAuth(options.consolidate.baseUrl) } : void 0;
+  const injectionClassifierOptions = options.injectionClassifier ? { ...options.injectionClassifier, ...subPassAuth(options.injectionClassifier.baseUrl) } : void 0;
   if (options.retainCtx.vaultCtx.entityCtx && !options.entityCtx) {
     getLogger().warn(
       "[memory/extract] retainCtx.vaultCtx.entityCtx is set but extractor was created without `entityCtx` \u2014 W5 graph lane will receive no writes"
@@ -28545,6 +28687,9 @@ function createAutoExtractor(options) {
             ...options.scope !== void 0 && { scope: options.scope },
             ...options.folderId !== void 0 && { folderId: options.folderId },
             ...consolidateOptions !== void 0 && { consolidateOptions },
+            ...injectionClassifierOptions !== void 0 && {
+              injectionClassifier: injectionClassifierOptions
+            },
             ...options.onCandidateFailed && {
               onCandidateFailed: (candidate, error) => options.onCandidateFailed?.({ candidate, error, conversationId })
             },
@@ -35680,6 +35825,7 @@ function buildSystemPrompt(ctx, options) {
   searchVaultMemories,
   selectServerToolsForPrompt,
   serverPlatformStorage,
+  setMemoryVisibilityOp,
   setModelPreferenceOp,
   setUserPreferenceOp,
   shouldAnalyzeStyle,