@anuma/sdk 5.0.0 → 5.0.2

package/dist/expo/{consolidate-KASO7JDS.mjs → consolidate-T6GZ5YQ4.mjs}

@@ -55,12 +55,14 @@ async function consolidateMemory(newContent, candidates, options) {
   if (trimmed.length === 0) return fallback;
   if (candidates.length === 0) return fallback;
   const redactor = resolvePiiRedactor(options.piiRedaction);
-  const safeTrimmed = redactor ? redactor.redactText(trimmed).text : trimmed;
-  const candidateText = candidates.map((c, i) => {
-    const safeContent = redactor ? redactor.redactText(c.content).text : c.content;
-    return `[${i + 1}] (id: ${c.id}, sim: ${c.similarity.toFixed(2)})
-  ${safeContent}`;
-  }).join("\n");
+  const safeTrimmed = redactor ? (await redactor.redactTextAsync(trimmed)).text : trimmed;
+  const rows = [];
+  for (const [i, c] of candidates.entries()) {
+    const safeContent = redactor ? (await redactor.redactTextAsync(c.content)).text : c.content;
+    rows.push(`[${i + 1}] (id: ${c.id}, sim: ${c.similarity.toFixed(2)})
+  ${safeContent}`);
+  }
+  const candidateText = rows.join("\n");
   const userMessage = `New memory:
   ${safeTrimmed}
 

package/dist/expo/index.cjs

@@ -8755,12 +8755,14 @@ async function consolidateMemory(newContent, candidates, options) {
   if (trimmed.length === 0) return fallback;
   if (candidates.length === 0) return fallback;
   const redactor = resolvePiiRedactor(options.piiRedaction);
-  const safeTrimmed = redactor ? redactor.redactText(trimmed).text : trimmed;
-  const candidateText = candidates.map((c, i) => {
-    const safeContent = redactor ? redactor.redactText(c.content).text : c.content;
-    return `[${i + 1}] (id: ${c.id}, sim: ${c.similarity.toFixed(2)})
-  ${safeContent}`;
-  }).join("\n");
+  const safeTrimmed = redactor ? (await redactor.redactTextAsync(trimmed)).text : trimmed;
+  const rows = [];
+  for (const [i, c] of candidates.entries()) {
+    const safeContent = redactor ? (await redactor.redactTextAsync(c.content)).text : c.content;
+    rows.push(`[${i + 1}] (id: ${c.id}, sim: ${c.similarity.toFixed(2)})
+  ${safeContent}`);
+  }
+  const candidateText = rows.join("\n");
   const userMessage = `New memory:
   ${safeTrimmed}
 
@@ -15190,10 +15192,12 @@ async function classifyInjectionCandidates(candidates, options) {
     );
   }
   const redactor = resolvePiiRedactor(options.piiRedaction);
-  const numbered = scope.map((c, i) => {
-    const safe = redactor ? redactor.redactText(c.content).text : c.content;
-    return `[${i + 1}] ${safe}`;
-  }).join("\n");
+  const lines = [];
+  for (const [i, c] of scope.entries()) {
+    const safe = redactor ? (await redactor.redactTextAsync(c.content)).text : c.content;
+    lines.push(`[${i + 1}] ${safe}`);
+  }
+  const numbered = lines.join("\n");
   let parsed;
   try {
     parsed = await callPortalJsonCompletion({
@@ -16515,7 +16519,7 @@ function createLlmDecayClassifier(options) {
       }
       if (!content || content.trim().length === 0) return ruleVerdict;
       const trimmed = content.trim().slice(0, MAX_CONTENT_CHARS);
-      const safe = redactor ? redactor.redactText(trimmed).text : trimmed;
+      const safe = redactor ? (await redactor.redactTextAsync(trimmed)).text : trimmed;
       const meta = `factType: ${input.factType ?? "none"}; ageDays: ${ageDays(input.updatedAt, now)}`;
       let parsed;
       try {
@@ -17645,17 +17649,22 @@ async function extractEntitiesForMemories(memories, options) {
   const out = /* @__PURE__ */ new Map();
   if (memories.length === 0) return out;
   const redactor = resolvePiiRedactor(options.piiRedaction);
-  const vocabulary = (options.existingEntityNames ?? []).filter((n) => n.trim().length > 0).slice(0, MAX_VOCABULARY_NAMES).map((n) => redactor ? redactor.redactText(n).text : n);
+  const vocabulary = [];
+  for (const name of (options.existingEntityNames ?? []).filter((n) => n.trim().length > 0).slice(0, MAX_VOCABULARY_NAMES)) {
+    vocabulary.push(redactor ? (await redactor.redactTextAsync(name)).text : name);
+  }
   const vocabularyNote = vocabulary.length > 0 ? `The user's existing topics: ${vocabulary.join(", ")}.
 When a memory refers to one of these, reuse the EXACT existing name (same spelling, casing, spacing and punctuation) instead of a variant \u2014 if "Foo.ai" is listed, never emit "Foo ai" or "Foo AI", and if "Jane Roe" is listed, emit that rather than a bare "Jane".
 
 ` : "";
   for (let i = 0; i < memories.length; i += TOPIC_EXTRACTION_BATCH_SIZE) {
     const batch = memories.slice(i, i + TOPIC_EXTRACTION_BATCH_SIZE);
-    const listing = batch.map((m) => {
+    const rows = [];
+    for (const m of batch) {
       const content = m.content.slice(0, MAX_CHARS_PER_MEMORY).replace(/\s+/g, " ").trim();
-      return `${m.id}: ${redactor ? redactor.redactText(content).text : content}`;
-    }).join("\n");
+      rows.push(`${m.id}: ${redactor ? (await redactor.redactTextAsync(content)).text : content}`);
+    }
+    const listing = rows.join("\n");
     const parsed = await callPortalJsonCompletion({
       ...options.apiKey !== void 0 && { apiKey: options.apiKey },
       ...options.getToken !== void 0 && { getToken: options.getToken },
@@ -21056,7 +21065,7 @@ __decorateClass([
 ], VaultFolder.prototype, "context", 2);
 
 // src/lib/db/schema.ts
-var SDK_SCHEMA_VERSION = 42;
+var SDK_SCHEMA_VERSION = 43;
 var sdkSchema = (0, import_watermelondb19.appSchema)({
   version: SDK_SCHEMA_VERSION,
   tables: [
@@ -21104,7 +21113,16 @@ var sdkSchema = (0, import_watermelondb19.appSchema)({
         { name: "conversation_id", type: "string", isIndexed: true },
         { name: "title", type: "string" },
         { name: "project_id", type: "string", isOptional: true, isIndexed: true },
-        { name: "created_at", type: "number" },
+        // Indexed to match every other list-sorted created_at in this schema.
+        // Note this single-column index is NOT what makes the conversation list
+        // reads fast on native SQLite — they all filter is_deleted as well, and
+        // SQLite will not combine the two indexes, so the composite created by
+        // the v42 migration is what its planner actually uses. This declaration
+        // still earns its keep on the other two adapters: LokiJS builds its
+        // binary indices from `isIndexed` (and ignores `sql` migration steps
+        // outright), and Postgres gathers statistics via autovacuum, so its
+        // planner can use a single-column index the SQLite planner skips.
+        { name: "created_at", type: "number", isIndexed: true },
         { name: "updated_at", type: "number" },
         { name: "is_deleted", type: "boolean", isIndexed: true },
         { name: "pinned_at", type: "number", isOptional: true }
@@ -21971,6 +21989,49 @@ var sdkMigrations = (0, import_migrations2.schemaMigrations)({
           ]
         })
       ]
+    },
+    // v42 -> v43: Give the conversation list reads an index they can actually
+    // sort on. All five of them (getConversationsOp, getConversationsLazyOp,
+    // getConversationsByProjectOp, getConversationsByProjectLazyOp and the
+    // keyset getConversationsPageOp) emit `where is_deleted is 0 ... order by
+    // created_at desc`, so before this they resolved is_deleted through its
+    // index and then built a temp B-tree over every live row just to return
+    // the newest page.
+    //
+    // The index is COMPOSITE, and that is the whole point — a bare index on
+    // created_at does not fix this. SQLite will not combine two single-column
+    // indexes here, so with `is_deleted` indexed and `created_at` indexed
+    // separately it still picks conversations_is_deleted and still temp-sorts.
+    // It only prefers a lone created_at index once ANALYZE has populated
+    // sqlite_stat1, and nothing ever runs ANALYZE: not WatermelonDB, not its
+    // native SQLite bindings, not this SDK. Every device is permanently in the
+    // no-statistics state, so the index has to satisfy the filter and the sort
+    // in one structure. `(is_deleted, created_at)` does: equality on the
+    // leading column, ordered scan on the second, and the keyset boundary
+    // becomes a range seek on the same index.
+    //
+    // unsafeExecuteSql, not addColumns: both columns already exist and
+    // WatermelonDB has no add-index migration step, so raw SQL is the only way
+    // to build one in place (same shape as the v19 -> v20 memory_vault
+    // migration). IF NOT EXISTS keeps the step idempotent.
+    //
+    // Two limits worth knowing before someone re-measures this and finds it
+    // missing. First, the LokiJS (web) adapter discards `sql` steps entirely,
+    // so existing browser databases gain nothing — web's only lever is the
+    // `isIndexed` flag on the column itself. Second, this index reaches
+    // MIGRATED databases only: WatermelonDB builds a fresh database purely from
+    // the encoded schema, and its schema format cannot express a composite
+    // index. The one hook that could (`unsafeSql` on the table) is a function,
+    // and the LokiJS adapter posts the schema to its worker, so attaching it
+    // makes the whole schema fail structuredClone and takes the database down
+    // at setup for anyone on `useWebWorker: true`. Not worth it for an index.
+    {
+      toVersion: 43,
+      steps: [
+        (0, import_migrations2.unsafeExecuteSql)(
+          "CREATE INDEX IF NOT EXISTS conversations_is_deleted_created_at ON conversations (is_deleted, created_at);"
+        )
+      ]
     }
   ]
 });

package/dist/expo/index.d.mts

@@ -8779,8 +8779,12 @@ declare function useChatStorage(options: UseChatStorageOptions): UseChatStorageR
  *   `topics_updated_at` is a SECOND timestamp because every topic writer pins
  *   `updated_at` on purpose (recall's recency multiplier) and both sync paths
  *   key on `updated_at`, so a topic-only change would neither upload nor merge
+ * - v43: Added a (is_deleted, created_at) index to conversations. Every
+ *   conversation list read filters is_deleted and orders by created_at DESC,
+ *   which previously meant a temp B-tree sort of the whole live set on every
+ *   read. Structural only — no column added, no data rewritten
  */
-declare const SDK_SCHEMA_VERSION = 42;
+declare const SDK_SCHEMA_VERSION = 43;
 /**
  * Combined WatermelonDB schema for all SDK storage modules.
  *
@@ -8867,6 +8871,7 @@ declare const sdkSchema: Readonly<{
  * - v39 → v40: Added `fact_type`, `archived_at`, `trust_tier` columns to memory_vault for typed memory + decay + Tier-0 security (all nullable + plaintext, NULL backfill)
  * - v40 → v41: Added `visibility`, `twin_opt_in`, `published_at`, `geohash` columns to memory_vault for the People Nearby cross-user visibility axis (two-tier `private | public`; null/unknown grandfathered as 'private')
  * - v41 → v42: Added `topics` + `topics_updated_at` columns to memory_vault, making a memory's topics the durable synced record and `entity`/`memory_entity` a device-local index over it (null `topics` = pre-v42, backfilled from the row's current links by the sweep)
+ * - v42 → v43: Added a composite `(is_deleted, created_at)` index to conversations so the list reads stop temp-sorting (structural only, no data rewritten)
  */
 declare const sdkMigrations: Readonly<{
     validated: true;

package/dist/expo/index.d.ts

@@ -8779,8 +8779,12 @@ declare function useChatStorage(options: UseChatStorageOptions): UseChatStorageR
  *   `topics_updated_at` is a SECOND timestamp because every topic writer pins
  *   `updated_at` on purpose (recall's recency multiplier) and both sync paths
  *   key on `updated_at`, so a topic-only change would neither upload nor merge
+ * - v43: Added a (is_deleted, created_at) index to conversations. Every
+ *   conversation list read filters is_deleted and orders by created_at DESC,
+ *   which previously meant a temp B-tree sort of the whole live set on every
+ *   read. Structural only — no column added, no data rewritten
  */
-declare const SDK_SCHEMA_VERSION = 42;
+declare const SDK_SCHEMA_VERSION = 43;
 /**
  * Combined WatermelonDB schema for all SDK storage modules.
  *
@@ -8867,6 +8871,7 @@ declare const sdkSchema: Readonly<{
  * - v39 → v40: Added `fact_type`, `archived_at`, `trust_tier` columns to memory_vault for typed memory + decay + Tier-0 security (all nullable + plaintext, NULL backfill)
  * - v40 → v41: Added `visibility`, `twin_opt_in`, `published_at`, `geohash` columns to memory_vault for the People Nearby cross-user visibility axis (two-tier `private | public`; null/unknown grandfathered as 'private')
  * - v41 → v42: Added `topics` + `topics_updated_at` columns to memory_vault, making a memory's topics the durable synced record and `entity`/`memory_entity` a device-local index over it (null `topics` = pre-v42, backfilled from the row's current links by the sweep)
+ * - v42 → v43: Added a composite `(is_deleted, created_at)` index to conversations so the list reads stop temp-sorting (structural only, no data rewritten)
  */
 declare const sdkMigrations: Readonly<{
     validated: true;

package/dist/expo/index.mjs

@@ -6193,10 +6193,12 @@ async function classifyInjectionCandidates(candidates, options) {
     );
   }
   const redactor = resolvePiiRedactor(options.piiRedaction);
-  const numbered = scope.map((c, i) => {
-    const safe = redactor ? redactor.redactText(c.content).text : c.content;
-    return `[${i + 1}] ${safe}`;
-  }).join("\n");
+  const lines = [];
+  for (const [i, c] of scope.entries()) {
+    const safe = redactor ? (await redactor.redactTextAsync(c.content)).text : c.content;
+    lines.push(`[${i + 1}] ${safe}`);
+  }
+  const numbered = lines.join("\n");
   let parsed;
   try {
     parsed = await callPortalJsonCompletion({
@@ -6677,7 +6679,7 @@ async function tryConsolidate(trimmed, ctx, options, prepared) {
     content: m.content,
     similarity: m.similarity
   }));
-  const { consolidateMemory: doConsolidate } = await import("./consolidate-KASO7JDS.mjs");
+  const { consolidateMemory: doConsolidate } = await import("./consolidate-T6GZ5YQ4.mjs");
   const decision = await doConsolidate(trimmed, candidates, consolidateOptions);
   if (decision.action === "create") return null;
   if (decision.action === "supersede" && decision.content) {
@@ -7501,7 +7503,7 @@ function createLlmDecayClassifier(options) {
       }
       if (!content || content.trim().length === 0) return ruleVerdict;
       const trimmed = content.trim().slice(0, MAX_CONTENT_CHARS);
-      const safe = redactor ? redactor.redactText(trimmed).text : trimmed;
+      const safe = redactor ? (await redactor.redactTextAsync(trimmed)).text : trimmed;
       const meta = `factType: ${input.factType ?? "none"}; ageDays: ${ageDays(input.updatedAt, now)}`;
       let parsed;
       try {
@@ -8598,17 +8600,22 @@ async function extractEntitiesForMemories(memories, options) {
   const out = /* @__PURE__ */ new Map();
   if (memories.length === 0) return out;
   const redactor = resolvePiiRedactor(options.piiRedaction);
-  const vocabulary = (options.existingEntityNames ?? []).filter((n) => n.trim().length > 0).slice(0, MAX_VOCABULARY_NAMES).map((n) => redactor ? redactor.redactText(n).text : n);
+  const vocabulary = [];
+  for (const name of (options.existingEntityNames ?? []).filter((n) => n.trim().length > 0).slice(0, MAX_VOCABULARY_NAMES)) {
+    vocabulary.push(redactor ? (await redactor.redactTextAsync(name)).text : name);
+  }
   const vocabularyNote = vocabulary.length > 0 ? `The user's existing topics: ${vocabulary.join(", ")}.
 When a memory refers to one of these, reuse the EXACT existing name (same spelling, casing, spacing and punctuation) instead of a variant \u2014 if "Foo.ai" is listed, never emit "Foo ai" or "Foo AI", and if "Jane Roe" is listed, emit that rather than a bare "Jane".
 
 ` : "";
   for (let i = 0; i < memories.length; i += TOPIC_EXTRACTION_BATCH_SIZE) {
     const batch = memories.slice(i, i + TOPIC_EXTRACTION_BATCH_SIZE);
-    const listing = batch.map((m) => {
+    const rows = [];
+    for (const m of batch) {
       const content = m.content.slice(0, MAX_CHARS_PER_MEMORY).replace(/\s+/g, " ").trim();
-      return `${m.id}: ${redactor ? redactor.redactText(content).text : content}`;
-    }).join("\n");
+      rows.push(`${m.id}: ${redactor ? (await redactor.redactTextAsync(content)).text : content}`);
+    }
+    const listing = rows.join("\n");
     const parsed = await callPortalJsonCompletion({
       ...options.apiKey !== void 0 && { apiKey: options.apiKey },
       ...options.getToken !== void 0 && { getToken: options.getToken },
@@ -11980,7 +11987,7 @@ __decorateClass([
 ], VaultFolder.prototype, "context", 2);
 
 // src/lib/db/schema.ts
-var SDK_SCHEMA_VERSION = 42;
+var SDK_SCHEMA_VERSION = 43;
 var sdkSchema = appSchema2({
   version: SDK_SCHEMA_VERSION,
   tables: [
@@ -12028,7 +12035,16 @@ var sdkSchema = appSchema2({
         { name: "conversation_id", type: "string", isIndexed: true },
         { name: "title", type: "string" },
         { name: "project_id", type: "string", isOptional: true, isIndexed: true },
-        { name: "created_at", type: "number" },
+        // Indexed to match every other list-sorted created_at in this schema.
+        // Note this single-column index is NOT what makes the conversation list
+        // reads fast on native SQLite — they all filter is_deleted as well, and
+        // SQLite will not combine the two indexes, so the composite created by
+        // the v42 migration is what its planner actually uses. This declaration
+        // still earns its keep on the other two adapters: LokiJS builds its
+        // binary indices from `isIndexed` (and ignores `sql` migration steps
+        // outright), and Postgres gathers statistics via autovacuum, so its
+        // planner can use a single-column index the SQLite planner skips.
+        { name: "created_at", type: "number", isIndexed: true },
         { name: "updated_at", type: "number" },
         { name: "is_deleted", type: "boolean", isIndexed: true },
         { name: "pinned_at", type: "number", isOptional: true }
@@ -12895,6 +12911,49 @@ var sdkMigrations = schemaMigrations2({
           ]
         })
       ]
+    },
+    // v42 -> v43: Give the conversation list reads an index they can actually
+    // sort on. All five of them (getConversationsOp, getConversationsLazyOp,
+    // getConversationsByProjectOp, getConversationsByProjectLazyOp and the
+    // keyset getConversationsPageOp) emit `where is_deleted is 0 ... order by
+    // created_at desc`, so before this they resolved is_deleted through its
+    // index and then built a temp B-tree over every live row just to return
+    // the newest page.
+    //
+    // The index is COMPOSITE, and that is the whole point — a bare index on
+    // created_at does not fix this. SQLite will not combine two single-column
+    // indexes here, so with `is_deleted` indexed and `created_at` indexed
+    // separately it still picks conversations_is_deleted and still temp-sorts.
+    // It only prefers a lone created_at index once ANALYZE has populated
+    // sqlite_stat1, and nothing ever runs ANALYZE: not WatermelonDB, not its
+    // native SQLite bindings, not this SDK. Every device is permanently in the
+    // no-statistics state, so the index has to satisfy the filter and the sort
+    // in one structure. `(is_deleted, created_at)` does: equality on the
+    // leading column, ordered scan on the second, and the keyset boundary
+    // becomes a range seek on the same index.
+    //
+    // unsafeExecuteSql, not addColumns: both columns already exist and
+    // WatermelonDB has no add-index migration step, so raw SQL is the only way
+    // to build one in place (same shape as the v19 -> v20 memory_vault
+    // migration). IF NOT EXISTS keeps the step idempotent.
+    //
+    // Two limits worth knowing before someone re-measures this and finds it
+    // missing. First, the LokiJS (web) adapter discards `sql` steps entirely,
+    // so existing browser databases gain nothing — web's only lever is the
+    // `isIndexed` flag on the column itself. Second, this index reaches
+    // MIGRATED databases only: WatermelonDB builds a fresh database purely from
+    // the encoded schema, and its schema format cannot express a composite
+    // index. The one hook that could (`unsafeSql` on the table) is a function,
+    // and the LokiJS adapter posts the schema to its worker, so attaching it
+    // makes the whole schema fail structuredClone and takes the database down
+    // at setup for anyone on `useWebWorker: true`. Not worth it for an index.
+    {
+      toVersion: 43,
+      steps: [
+        unsafeExecuteSql(
+          "CREATE INDEX IF NOT EXISTS conversations_is_deleted_created_at ON conversations (is_deleted, created_at);"
+        )
+      ]
     }
   ]
 });

package/dist/react/{consolidate-IFIKT25Z.mjs → consolidate-POPTUI54.mjs}

@@ -55,12 +55,14 @@ async function consolidateMemory(newContent, candidates, options) {
   if (trimmed.length === 0) return fallback;
   if (candidates.length === 0) return fallback;
   const redactor = resolvePiiRedactor(options.piiRedaction);
-  const safeTrimmed = redactor ? redactor.redactText(trimmed).text : trimmed;
-  const candidateText = candidates.map((c, i) => {
-    const safeContent = redactor ? redactor.redactText(c.content).text : c.content;
-    return `[${i + 1}] (id: ${c.id}, sim: ${c.similarity.toFixed(2)})
-  ${safeContent}`;
-  }).join("\n");
+  const safeTrimmed = redactor ? (await redactor.redactTextAsync(trimmed)).text : trimmed;
+  const rows = [];
+  for (const [i, c] of candidates.entries()) {
+    const safeContent = redactor ? (await redactor.redactTextAsync(c.content)).text : c.content;
+    rows.push(`[${i + 1}] (id: ${c.id}, sim: ${c.similarity.toFixed(2)})
+  ${safeContent}`);
+  }
+  const candidateText = rows.join("\n");
   const userMessage = `New memory:
   ${safeTrimmed}
 

package/dist/react/index.cjs

@@ -9038,12 +9038,14 @@ async function consolidateMemory(newContent, candidates, options) {
   if (trimmed.length === 0) return fallback;
   if (candidates.length === 0) return fallback;
   const redactor = resolvePiiRedactor(options.piiRedaction);
-  const safeTrimmed = redactor ? redactor.redactText(trimmed).text : trimmed;
-  const candidateText = candidates.map((c, i) => {
-    const safeContent = redactor ? redactor.redactText(c.content).text : c.content;
-    return `[${i + 1}] (id: ${c.id}, sim: ${c.similarity.toFixed(2)})
-  ${safeContent}`;
-  }).join("\n");
+  const safeTrimmed = redactor ? (await redactor.redactTextAsync(trimmed)).text : trimmed;
+  const rows = [];
+  for (const [i, c] of candidates.entries()) {
+    const safeContent = redactor ? (await redactor.redactTextAsync(c.content)).text : c.content;
+    rows.push(`[${i + 1}] (id: ${c.id}, sim: ${c.similarity.toFixed(2)})
+  ${safeContent}`);
+  }
+  const candidateText = rows.join("\n");
   const userMessage = `New memory:
   ${safeTrimmed}
 
@@ -16489,10 +16491,12 @@ async function classifyInjectionCandidates(candidates, options) {
     );
   }
   const redactor = resolvePiiRedactor(options.piiRedaction);
-  const numbered = scope.map((c, i) => {
-    const safe = redactor ? redactor.redactText(c.content).text : c.content;
-    return `[${i + 1}] ${safe}`;
-  }).join("\n");
+  const lines = [];
+  for (const [i, c] of scope.entries()) {
+    const safe = redactor ? (await redactor.redactTextAsync(c.content)).text : c.content;
+    lines.push(`[${i + 1}] ${safe}`);
+  }
+  const numbered = lines.join("\n");
   let parsed;
   try {
     parsed = await callPortalJsonCompletion({
@@ -17814,7 +17818,7 @@ function createLlmDecayClassifier(options) {
       }
       if (!content || content.trim().length === 0) return ruleVerdict;
       const trimmed = content.trim().slice(0, MAX_CONTENT_CHARS);
-      const safe = redactor ? redactor.redactText(trimmed).text : trimmed;
+      const safe = redactor ? (await redactor.redactTextAsync(trimmed)).text : trimmed;
       const meta = `factType: ${input.factType ?? "none"}; ageDays: ${ageDays(input.updatedAt, now)}`;
       let parsed;
       try {
@@ -18944,17 +18948,22 @@ async function extractEntitiesForMemories(memories, options) {
   const out = /* @__PURE__ */ new Map();
   if (memories.length === 0) return out;
   const redactor = resolvePiiRedactor(options.piiRedaction);
-  const vocabulary = (options.existingEntityNames ?? []).filter((n) => n.trim().length > 0).slice(0, MAX_VOCABULARY_NAMES).map((n) => redactor ? redactor.redactText(n).text : n);
+  const vocabulary = [];
+  for (const name of (options.existingEntityNames ?? []).filter((n) => n.trim().length > 0).slice(0, MAX_VOCABULARY_NAMES)) {
+    vocabulary.push(redactor ? (await redactor.redactTextAsync(name)).text : name);
+  }
   const vocabularyNote = vocabulary.length > 0 ? `The user's existing topics: ${vocabulary.join(", ")}.
 When a memory refers to one of these, reuse the EXACT existing name (same spelling, casing, spacing and punctuation) instead of a variant \u2014 if "Foo.ai" is listed, never emit "Foo ai" or "Foo AI", and if "Jane Roe" is listed, emit that rather than a bare "Jane".
 
 ` : "";
   for (let i = 0; i < memories.length; i += TOPIC_EXTRACTION_BATCH_SIZE) {
     const batch = memories.slice(i, i + TOPIC_EXTRACTION_BATCH_SIZE);
-    const listing = batch.map((m) => {
+    const rows = [];
+    for (const m of batch) {
       const content = m.content.slice(0, MAX_CHARS_PER_MEMORY).replace(/\s+/g, " ").trim();
-      return `${m.id}: ${redactor ? redactor.redactText(content).text : content}`;
-    }).join("\n");
+      rows.push(`${m.id}: ${redactor ? (await redactor.redactTextAsync(content)).text : content}`);
+    }
+    const listing = rows.join("\n");
     const parsed = await callPortalJsonCompletion({
       ...options.apiKey !== void 0 && { apiKey: options.apiKey },
       ...options.getToken !== void 0 && { getToken: options.getToken },
@@ -23629,7 +23638,7 @@ __decorateClass([
 ], VaultFolder.prototype, "context", 2);
 
 // src/lib/db/schema.ts
-var SDK_SCHEMA_VERSION = 42;
+var SDK_SCHEMA_VERSION = 43;
 var sdkSchema = (0, import_watermelondb20.appSchema)({
   version: SDK_SCHEMA_VERSION,
   tables: [
@@ -23677,7 +23686,16 @@ var sdkSchema = (0, import_watermelondb20.appSchema)({
         { name: "conversation_id", type: "string", isIndexed: true },
         { name: "title", type: "string" },
         { name: "project_id", type: "string", isOptional: true, isIndexed: true },
-        { name: "created_at", type: "number" },
+        // Indexed to match every other list-sorted created_at in this schema.
+        // Note this single-column index is NOT what makes the conversation list
+        // reads fast on native SQLite — they all filter is_deleted as well, and
+        // SQLite will not combine the two indexes, so the composite created by
+        // the v42 migration is what its planner actually uses. This declaration
+        // still earns its keep on the other two adapters: LokiJS builds its
+        // binary indices from `isIndexed` (and ignores `sql` migration steps
+        // outright), and Postgres gathers statistics via autovacuum, so its
+        // planner can use a single-column index the SQLite planner skips.
+        { name: "created_at", type: "number", isIndexed: true },
         { name: "updated_at", type: "number" },
         { name: "is_deleted", type: "boolean", isIndexed: true },
         { name: "pinned_at", type: "number", isOptional: true }
@@ -24544,6 +24562,49 @@ var sdkMigrations = (0, import_migrations2.schemaMigrations)({
           ]
         })
       ]
+    },
+    // v42 -> v43: Give the conversation list reads an index they can actually
+    // sort on. All five of them (getConversationsOp, getConversationsLazyOp,
+    // getConversationsByProjectOp, getConversationsByProjectLazyOp and the
+    // keyset getConversationsPageOp) emit `where is_deleted is 0 ... order by
+    // created_at desc`, so before this they resolved is_deleted through its
+    // index and then built a temp B-tree over every live row just to return
+    // the newest page.
+    //
+    // The index is COMPOSITE, and that is the whole point — a bare index on
+    // created_at does not fix this. SQLite will not combine two single-column
+    // indexes here, so with `is_deleted` indexed and `created_at` indexed
+    // separately it still picks conversations_is_deleted and still temp-sorts.
+    // It only prefers a lone created_at index once ANALYZE has populated
+    // sqlite_stat1, and nothing ever runs ANALYZE: not WatermelonDB, not its
+    // native SQLite bindings, not this SDK. Every device is permanently in the
+    // no-statistics state, so the index has to satisfy the filter and the sort
+    // in one structure. `(is_deleted, created_at)` does: equality on the
+    // leading column, ordered scan on the second, and the keyset boundary
+    // becomes a range seek on the same index.
+    //
+    // unsafeExecuteSql, not addColumns: both columns already exist and
+    // WatermelonDB has no add-index migration step, so raw SQL is the only way
+    // to build one in place (same shape as the v19 -> v20 memory_vault
+    // migration). IF NOT EXISTS keeps the step idempotent.
+    //
+    // Two limits worth knowing before someone re-measures this and finds it
+    // missing. First, the LokiJS (web) adapter discards `sql` steps entirely,
+    // so existing browser databases gain nothing — web's only lever is the
+    // `isIndexed` flag on the column itself. Second, this index reaches
+    // MIGRATED databases only: WatermelonDB builds a fresh database purely from
+    // the encoded schema, and its schema format cannot express a composite
+    // index. The one hook that could (`unsafeSql` on the table) is a function,
+    // and the LokiJS adapter posts the schema to its worker, so attaching it
+    // makes the whole schema fail structuredClone and takes the database down
+    // at setup for anyone on `useWebWorker: true`. Not worth it for an index.
+    {
+      toVersion: 43,
+      steps: [
+        (0, import_migrations2.unsafeExecuteSql)(
+          "CREATE INDEX IF NOT EXISTS conversations_is_deleted_created_at ON conversations (is_deleted, created_at);"
+        )
+      ]
     }
   ]
 });

package/dist/react/index.d.mts

@@ -10393,8 +10393,12 @@ declare class WatermelonChatStorageAdapter implements ChatStorageAdapter {
  *   `topics_updated_at` is a SECOND timestamp because every topic writer pins
  *   `updated_at` on purpose (recall's recency multiplier) and both sync paths
  *   key on `updated_at`, so a topic-only change would neither upload nor merge
+ * - v43: Added a (is_deleted, created_at) index to conversations. Every
+ *   conversation list read filters is_deleted and orders by created_at DESC,
+ *   which previously meant a temp B-tree sort of the whole live set on every
+ *   read. Structural only — no column added, no data rewritten
  */
-declare const SDK_SCHEMA_VERSION = 42;
+declare const SDK_SCHEMA_VERSION = 43;
 /**
  * Combined WatermelonDB schema for all SDK storage modules.
  *
@@ -10481,6 +10485,7 @@ declare const sdkSchema: Readonly<{
  * - v39 → v40: Added `fact_type`, `archived_at`, `trust_tier` columns to memory_vault for typed memory + decay + Tier-0 security (all nullable + plaintext, NULL backfill)
  * - v40 → v41: Added `visibility`, `twin_opt_in`, `published_at`, `geohash` columns to memory_vault for the People Nearby cross-user visibility axis (two-tier `private | public`; null/unknown grandfathered as 'private')
  * - v41 → v42: Added `topics` + `topics_updated_at` columns to memory_vault, making a memory's topics the durable synced record and `entity`/`memory_entity` a device-local index over it (null `topics` = pre-v42, backfilled from the row's current links by the sweep)
+ * - v42 → v43: Added a composite `(is_deleted, created_at)` index to conversations so the list reads stop temp-sorting (structural only, no data rewritten)
  */
 declare const sdkMigrations: Readonly<{
     validated: true;

package/dist/react/index.d.ts

@@ -10393,8 +10393,12 @@ declare class WatermelonChatStorageAdapter implements ChatStorageAdapter {
  *   `topics_updated_at` is a SECOND timestamp because every topic writer pins
  *   `updated_at` on purpose (recall's recency multiplier) and both sync paths
  *   key on `updated_at`, so a topic-only change would neither upload nor merge
+ * - v43: Added a (is_deleted, created_at) index to conversations. Every
+ *   conversation list read filters is_deleted and orders by created_at DESC,
+ *   which previously meant a temp B-tree sort of the whole live set on every
+ *   read. Structural only — no column added, no data rewritten
  */
-declare const SDK_SCHEMA_VERSION = 42;
+declare const SDK_SCHEMA_VERSION = 43;
 /**
  * Combined WatermelonDB schema for all SDK storage modules.
  *
@@ -10481,6 +10485,7 @@ declare const sdkSchema: Readonly<{
  * - v39 → v40: Added `fact_type`, `archived_at`, `trust_tier` columns to memory_vault for typed memory + decay + Tier-0 security (all nullable + plaintext, NULL backfill)
  * - v40 → v41: Added `visibility`, `twin_opt_in`, `published_at`, `geohash` columns to memory_vault for the People Nearby cross-user visibility axis (two-tier `private | public`; null/unknown grandfathered as 'private')
  * - v41 → v42: Added `topics` + `topics_updated_at` columns to memory_vault, making a memory's topics the durable synced record and `entity`/`memory_entity` a device-local index over it (null `topics` = pre-v42, backfilled from the row's current links by the sweep)
+ * - v42 → v43: Added a composite `(is_deleted, created_at)` index to conversations so the list reads stop temp-sorting (structural only, no data rewritten)
  */
 declare const sdkMigrations: Readonly<{
     validated: true;

package/dist/react/index.mjs

@@ -7010,10 +7010,12 @@ async function classifyInjectionCandidates(candidates, options) {
     );
   }
   const redactor = resolvePiiRedactor(options.piiRedaction);
-  const numbered = scope.map((c, i) => {
-    const safe = redactor ? redactor.redactText(c.content).text : c.content;
-    return `[${i + 1}] ${safe}`;
-  }).join("\n");
+  const lines = [];
+  for (const [i, c] of scope.entries()) {
+    const safe = redactor ? (await redactor.redactTextAsync(c.content)).text : c.content;
+    lines.push(`[${i + 1}] ${safe}`);
+  }
+  const numbered = lines.join("\n");
   let parsed;
   try {
     parsed = await callPortalJsonCompletion({
@@ -7494,7 +7496,7 @@ async function tryConsolidate(trimmed, ctx, options, prepared) {
     content: m.content,
     similarity: m.similarity
   }));
-  const { consolidateMemory: doConsolidate } = await import("./consolidate-IFIKT25Z.mjs");
+  const { consolidateMemory: doConsolidate } = await import("./consolidate-POPTUI54.mjs");
   const decision = await doConsolidate(trimmed, candidates, consolidateOptions);
   if (decision.action === "create") return null;
   if (decision.action === "supersede" && decision.content) {
@@ -8318,7 +8320,7 @@ function createLlmDecayClassifier(options) {
       }
       if (!content || content.trim().length === 0) return ruleVerdict;
       const trimmed = content.trim().slice(0, MAX_CONTENT_CHARS);
-      const safe = redactor ? redactor.redactText(trimmed).text : trimmed;
+      const safe = redactor ? (await redactor.redactTextAsync(trimmed)).text : trimmed;
       const meta = `factType: ${input.factType ?? "none"}; ageDays: ${ageDays(input.updatedAt, now)}`;
       let parsed;
       try {
@@ -9415,17 +9417,22 @@ async function extractEntitiesForMemories(memories, options) {
   const out = /* @__PURE__ */ new Map();
   if (memories.length === 0) return out;
   const redactor = resolvePiiRedactor(options.piiRedaction);
-  const vocabulary = (options.existingEntityNames ?? []).filter((n) => n.trim().length > 0).slice(0, MAX_VOCABULARY_NAMES).map((n) => redactor ? redactor.redactText(n).text : n);
+  const vocabulary = [];
+  for (const name of (options.existingEntityNames ?? []).filter((n) => n.trim().length > 0).slice(0, MAX_VOCABULARY_NAMES)) {
+    vocabulary.push(redactor ? (await redactor.redactTextAsync(name)).text : name);
+  }
   const vocabularyNote = vocabulary.length > 0 ? `The user's existing topics: ${vocabulary.join(", ")}.
 When a memory refers to one of these, reuse the EXACT existing name (same spelling, casing, spacing and punctuation) instead of a variant \u2014 if "Foo.ai" is listed, never emit "Foo ai" or "Foo AI", and if "Jane Roe" is listed, emit that rather than a bare "Jane".
 
 ` : "";
   for (let i = 0; i < memories.length; i += TOPIC_EXTRACTION_BATCH_SIZE) {
     const batch = memories.slice(i, i + TOPIC_EXTRACTION_BATCH_SIZE);
-    const listing = batch.map((m) => {
+    const rows = [];
+    for (const m of batch) {
       const content = m.content.slice(0, MAX_CHARS_PER_MEMORY).replace(/\s+/g, " ").trim();
-      return `${m.id}: ${redactor ? redactor.redactText(content).text : content}`;
-    }).join("\n");
+      rows.push(`${m.id}: ${redactor ? (await redactor.redactTextAsync(content)).text : content}`);
+    }
+    const listing = rows.join("\n");
     const parsed = await callPortalJsonCompletion({
       ...options.apiKey !== void 0 && { apiKey: options.apiKey },
       ...options.getToken !== void 0 && { getToken: options.getToken },
@@ -14064,7 +14071,7 @@ __decorateClass([
 ], VaultFolder.prototype, "context", 2);
 
 // src/lib/db/schema.ts
-var SDK_SCHEMA_VERSION = 42;
+var SDK_SCHEMA_VERSION = 43;
 var sdkSchema = appSchema2({
   version: SDK_SCHEMA_VERSION,
   tables: [
@@ -14112,7 +14119,16 @@ var sdkSchema = appSchema2({
         { name: "conversation_id", type: "string", isIndexed: true },
         { name: "title", type: "string" },
         { name: "project_id", type: "string", isOptional: true, isIndexed: true },
-        { name: "created_at", type: "number" },
+        // Indexed to match every other list-sorted created_at in this schema.
+        // Note this single-column index is NOT what makes the conversation list
+        // reads fast on native SQLite — they all filter is_deleted as well, and
+        // SQLite will not combine the two indexes, so the composite created by
+        // the v42 migration is what its planner actually uses. This declaration
+        // still earns its keep on the other two adapters: LokiJS builds its
+        // binary indices from `isIndexed` (and ignores `sql` migration steps
+        // outright), and Postgres gathers statistics via autovacuum, so its
+        // planner can use a single-column index the SQLite planner skips.
+        { name: "created_at", type: "number", isIndexed: true },
         { name: "updated_at", type: "number" },
         { name: "is_deleted", type: "boolean", isIndexed: true },
         { name: "pinned_at", type: "number", isOptional: true }
@@ -14979,6 +14995,49 @@ var sdkMigrations = schemaMigrations2({
           ]
         })
       ]
+    },
+    // v42 -> v43: Give the conversation list reads an index they can actually
+    // sort on. All five of them (getConversationsOp, getConversationsLazyOp,
+    // getConversationsByProjectOp, getConversationsByProjectLazyOp and the
+    // keyset getConversationsPageOp) emit `where is_deleted is 0 ... order by
+    // created_at desc`, so before this they resolved is_deleted through its
+    // index and then built a temp B-tree over every live row just to return
+    // the newest page.
+    //
+    // The index is COMPOSITE, and that is the whole point — a bare index on
+    // created_at does not fix this. SQLite will not combine two single-column
+    // indexes here, so with `is_deleted` indexed and `created_at` indexed
+    // separately it still picks conversations_is_deleted and still temp-sorts.
+    // It only prefers a lone created_at index once ANALYZE has populated
+    // sqlite_stat1, and nothing ever runs ANALYZE: not WatermelonDB, not its
+    // native SQLite bindings, not this SDK. Every device is permanently in the
+    // no-statistics state, so the index has to satisfy the filter and the sort
+    // in one structure. `(is_deleted, created_at)` does: equality on the
+    // leading column, ordered scan on the second, and the keyset boundary
+    // becomes a range seek on the same index.
+    //
+    // unsafeExecuteSql, not addColumns: both columns already exist and
+    // WatermelonDB has no add-index migration step, so raw SQL is the only way
+    // to build one in place (same shape as the v19 -> v20 memory_vault
+    // migration). IF NOT EXISTS keeps the step idempotent.
+    //
+    // Two limits worth knowing before someone re-measures this and finds it
+    // missing. First, the LokiJS (web) adapter discards `sql` steps entirely,
+    // so existing browser databases gain nothing — web's only lever is the
+    // `isIndexed` flag on the column itself. Second, this index reaches
+    // MIGRATED databases only: WatermelonDB builds a fresh database purely from
+    // the encoded schema, and its schema format cannot express a composite
+    // index. The one hook that could (`unsafeSql` on the table) is a function,
+    // and the LokiJS adapter posts the schema to its worker, so attaching it
+    // makes the whole schema fail structuredClone and takes the database down
+    // at setup for anyone on `useWebWorker: true`. Not worth it for an index.
+    {
+      toVersion: 43,
+      steps: [
+        unsafeExecuteSql(
+          "CREATE INDEX IF NOT EXISTS conversations_is_deleted_created_at ON conversations (is_deleted, created_at);"
+        )
+      ]
     }
   ]
 });

package/dist/server/{consolidate-GRMEDWKK.mjs → consolidate-LMIDJFR6.mjs}

@@ -55,12 +55,14 @@ async function consolidateMemory(newContent, candidates, options) {
   if (trimmed.length === 0) return fallback;
   if (candidates.length === 0) return fallback;
   const redactor = resolvePiiRedactor(options.piiRedaction);
-  const safeTrimmed = redactor ? redactor.redactText(trimmed).text : trimmed;
-  const candidateText = candidates.map((c, i) => {
-    const safeContent = redactor ? redactor.redactText(c.content).text : c.content;
-    return `[${i + 1}] (id: ${c.id}, sim: ${c.similarity.toFixed(2)})
-  ${safeContent}`;
-  }).join("\n");
+  const safeTrimmed = redactor ? (await redactor.redactTextAsync(trimmed)).text : trimmed;
+  const rows = [];
+  for (const [i, c] of candidates.entries()) {
+    const safeContent = redactor ? (await redactor.redactTextAsync(c.content)).text : c.content;
+    rows.push(`[${i + 1}] (id: ${c.id}, sim: ${c.similarity.toFixed(2)})
+  ${safeContent}`);
+  }
+  const candidateText = rows.join("\n");
   const userMessage = `New memory:
   ${safeTrimmed}
 

package/dist/server/index.cjs

@@ -23580,12 +23580,14 @@ async function consolidateMemory(newContent, candidates, options) {
   if (trimmed.length === 0) return fallback;
   if (candidates.length === 0) return fallback;
   const redactor = resolvePiiRedactor(options.piiRedaction);
-  const safeTrimmed = redactor ? redactor.redactText(trimmed).text : trimmed;
-  const candidateText = candidates.map((c, i) => {
-    const safeContent = redactor ? redactor.redactText(c.content).text : c.content;
-    return `[${i + 1}] (id: ${c.id}, sim: ${c.similarity.toFixed(2)})
-  ${safeContent}`;
-  }).join("\n");
+  const safeTrimmed = redactor ? (await redactor.redactTextAsync(trimmed)).text : trimmed;
+  const rows = [];
+  for (const [i, c] of candidates.entries()) {
+    const safeContent = redactor ? (await redactor.redactTextAsync(c.content)).text : c.content;
+    rows.push(`[${i + 1}] (id: ${c.id}, sim: ${c.similarity.toFixed(2)})
+  ${safeContent}`);
+  }
+  const candidateText = rows.join("\n");
   const userMessage = `New memory:
   ${safeTrimmed}
 
@@ -24525,7 +24527,7 @@ __decorateClass([
 ], VaultFolder.prototype, "context", 2);
 
 // src/lib/db/schema.ts
-var SDK_SCHEMA_VERSION = 42;
+var SDK_SCHEMA_VERSION = 43;
 var sdkSchema = (0, import_watermelondb12.appSchema)({
   version: SDK_SCHEMA_VERSION,
   tables: [
@@ -24573,7 +24575,16 @@ var sdkSchema = (0, import_watermelondb12.appSchema)({
         { name: "conversation_id", type: "string", isIndexed: true },
         { name: "title", type: "string" },
         { name: "project_id", type: "string", isOptional: true, isIndexed: true },
-        { name: "created_at", type: "number" },
+        // Indexed to match every other list-sorted created_at in this schema.
+        // Note this single-column index is NOT what makes the conversation list
+        // reads fast on native SQLite — they all filter is_deleted as well, and
+        // SQLite will not combine the two indexes, so the composite created by
+        // the v42 migration is what its planner actually uses. This declaration
+        // still earns its keep on the other two adapters: LokiJS builds its
+        // binary indices from `isIndexed` (and ignores `sql` migration steps
+        // outright), and Postgres gathers statistics via autovacuum, so its
+        // planner can use a single-column index the SQLite planner skips.
+        { name: "created_at", type: "number", isIndexed: true },
         { name: "updated_at", type: "number" },
         { name: "is_deleted", type: "boolean", isIndexed: true },
         { name: "pinned_at", type: "number", isOptional: true }
@@ -25440,6 +25451,49 @@ var sdkMigrations = (0, import_migrations.schemaMigrations)({
           ]
         })
       ]
+    },
+    // v42 -> v43: Give the conversation list reads an index they can actually
+    // sort on. All five of them (getConversationsOp, getConversationsLazyOp,
+    // getConversationsByProjectOp, getConversationsByProjectLazyOp and the
+    // keyset getConversationsPageOp) emit `where is_deleted is 0 ... order by
+    // created_at desc`, so before this they resolved is_deleted through its
+    // index and then built a temp B-tree over every live row just to return
+    // the newest page.
+    //
+    // The index is COMPOSITE, and that is the whole point — a bare index on
+    // created_at does not fix this. SQLite will not combine two single-column
+    // indexes here, so with `is_deleted` indexed and `created_at` indexed
+    // separately it still picks conversations_is_deleted and still temp-sorts.
+    // It only prefers a lone created_at index once ANALYZE has populated
+    // sqlite_stat1, and nothing ever runs ANALYZE: not WatermelonDB, not its
+    // native SQLite bindings, not this SDK. Every device is permanently in the
+    // no-statistics state, so the index has to satisfy the filter and the sort
+    // in one structure. `(is_deleted, created_at)` does: equality on the
+    // leading column, ordered scan on the second, and the keyset boundary
+    // becomes a range seek on the same index.
+    //
+    // unsafeExecuteSql, not addColumns: both columns already exist and
+    // WatermelonDB has no add-index migration step, so raw SQL is the only way
+    // to build one in place (same shape as the v19 -> v20 memory_vault
+    // migration). IF NOT EXISTS keeps the step idempotent.
+    //
+    // Two limits worth knowing before someone re-measures this and finds it
+    // missing. First, the LokiJS (web) adapter discards `sql` steps entirely,
+    // so existing browser databases gain nothing — web's only lever is the
+    // `isIndexed` flag on the column itself. Second, this index reaches
+    // MIGRATED databases only: WatermelonDB builds a fresh database purely from
+    // the encoded schema, and its schema format cannot express a composite
+    // index. The one hook that could (`unsafeSql` on the table) is a function,
+    // and the LokiJS adapter posts the schema to its worker, so attaching it
+    // makes the whole schema fail structuredClone and takes the database down
+    // at setup for anyone on `useWebWorker: true`. Not worth it for an index.
+    {
+      toVersion: 43,
+      steps: [
+        (0, import_migrations.unsafeExecuteSql)(
+          "CREATE INDEX IF NOT EXISTS conversations_is_deleted_created_at ON conversations (is_deleted, created_at);"
+        )
+      ]
     }
   ]
 });
@@ -28208,10 +28262,12 @@ async function classifyInjectionCandidates(candidates, options) {
     );
   }
   const redactor = resolvePiiRedactor(options.piiRedaction);
-  const numbered = scope.map((c, i) => {
-    const safe = redactor ? redactor.redactText(c.content).text : c.content;
-    return `[${i + 1}] ${safe}`;
-  }).join("\n");
+  const lines = [];
+  for (const [i, c] of scope.entries()) {
+    const safe = redactor ? (await redactor.redactTextAsync(c.content)).text : c.content;
+    lines.push(`[${i + 1}] ${safe}`);
+  }
+  const numbered = lines.join("\n");
   let parsed;
   try {
     parsed = await callPortalJsonCompletion({
@@ -29533,7 +29589,7 @@ function createLlmDecayClassifier(options) {
       }
       if (!content || content.trim().length === 0) return ruleVerdict;
       const trimmed = content.trim().slice(0, MAX_CONTENT_CHARS);
-      const safe = redactor ? redactor.redactText(trimmed).text : trimmed;
+      const safe = redactor ? (await redactor.redactTextAsync(trimmed)).text : trimmed;
       const meta = `factType: ${input.factType ?? "none"}; ageDays: ${ageDays(input.updatedAt, now)}`;
       let parsed;
       try {
@@ -30663,17 +30719,22 @@ async function extractEntitiesForMemories(memories, options) {
   const out = /* @__PURE__ */ new Map();
   if (memories.length === 0) return out;
   const redactor = resolvePiiRedactor(options.piiRedaction);
-  const vocabulary = (options.existingEntityNames ?? []).filter((n) => n.trim().length > 0).slice(0, MAX_VOCABULARY_NAMES).map((n) => redactor ? redactor.redactText(n).text : n);
+  const vocabulary = [];
+  for (const name of (options.existingEntityNames ?? []).filter((n) => n.trim().length > 0).slice(0, MAX_VOCABULARY_NAMES)) {
+    vocabulary.push(redactor ? (await redactor.redactTextAsync(name)).text : name);
+  }
   const vocabularyNote = vocabulary.length > 0 ? `The user's existing topics: ${vocabulary.join(", ")}.
 When a memory refers to one of these, reuse the EXACT existing name (same spelling, casing, spacing and punctuation) instead of a variant \u2014 if "Foo.ai" is listed, never emit "Foo ai" or "Foo AI", and if "Jane Roe" is listed, emit that rather than a bare "Jane".
 
 ` : "";
   for (let i = 0; i < memories.length; i += TOPIC_EXTRACTION_BATCH_SIZE) {
     const batch = memories.slice(i, i + TOPIC_EXTRACTION_BATCH_SIZE);
-    const listing = batch.map((m) => {
+    const rows = [];
+    for (const m of batch) {
       const content = m.content.slice(0, MAX_CHARS_PER_MEMORY).replace(/\s+/g, " ").trim();
-      return `${m.id}: ${redactor ? redactor.redactText(content).text : content}`;
-    }).join("\n");
+      rows.push(`${m.id}: ${redactor ? (await redactor.redactTextAsync(content)).text : content}`);
+    }
+    const listing = rows.join("\n");
     const parsed = await callPortalJsonCompletion({
       ...options.apiKey !== void 0 && { apiKey: options.apiKey },
       ...options.getToken !== void 0 && { getToken: options.getToken },

package/dist/server/index.d.mts

@@ -87,8 +87,12 @@ import { ResultCallback } from '@nozbe/watermelondb/utils/fp/Result';
  *   `topics_updated_at` is a SECOND timestamp because every topic writer pins
  *   `updated_at` on purpose (recall's recency multiplier) and both sync paths
  *   key on `updated_at`, so a topic-only change would neither upload nor merge
+ * - v43: Added a (is_deleted, created_at) index to conversations. Every
+ *   conversation list read filters is_deleted and orders by created_at DESC,
+ *   which previously meant a temp B-tree sort of the whole live set on every
+ *   read. Structural only — no column added, no data rewritten
  */
-declare const SDK_SCHEMA_VERSION = 42;
+declare const SDK_SCHEMA_VERSION = 43;
 /**
  * Combined WatermelonDB schema for all SDK storage modules.
  *
@@ -175,6 +179,7 @@ declare const sdkSchema: Readonly<{
  * - v39 → v40: Added `fact_type`, `archived_at`, `trust_tier` columns to memory_vault for typed memory + decay + Tier-0 security (all nullable + plaintext, NULL backfill)
  * - v40 → v41: Added `visibility`, `twin_opt_in`, `published_at`, `geohash` columns to memory_vault for the People Nearby cross-user visibility axis (two-tier `private | public`; null/unknown grandfathered as 'private')
  * - v41 → v42: Added `topics` + `topics_updated_at` columns to memory_vault, making a memory's topics the durable synced record and `entity`/`memory_entity` a device-local index over it (null `topics` = pre-v42, backfilled from the row's current links by the sweep)
+ * - v42 → v43: Added a composite `(is_deleted, created_at)` index to conversations so the list reads stop temp-sorting (structural only, no data rewritten)
  */
 declare const sdkMigrations: Readonly<{
     validated: true;

package/dist/server/index.d.ts

@@ -87,8 +87,12 @@ import { ResultCallback } from '@nozbe/watermelondb/utils/fp/Result';
  *   `topics_updated_at` is a SECOND timestamp because every topic writer pins
  *   `updated_at` on purpose (recall's recency multiplier) and both sync paths
  *   key on `updated_at`, so a topic-only change would neither upload nor merge
+ * - v43: Added a (is_deleted, created_at) index to conversations. Every
+ *   conversation list read filters is_deleted and orders by created_at DESC,
+ *   which previously meant a temp B-tree sort of the whole live set on every
+ *   read. Structural only — no column added, no data rewritten
  */
-declare const SDK_SCHEMA_VERSION = 42;
+declare const SDK_SCHEMA_VERSION = 43;
 /**
  * Combined WatermelonDB schema for all SDK storage modules.
  *
@@ -175,6 +179,7 @@ declare const sdkSchema: Readonly<{
  * - v39 → v40: Added `fact_type`, `archived_at`, `trust_tier` columns to memory_vault for typed memory + decay + Tier-0 security (all nullable + plaintext, NULL backfill)
  * - v40 → v41: Added `visibility`, `twin_opt_in`, `published_at`, `geohash` columns to memory_vault for the People Nearby cross-user visibility axis (two-tier `private | public`; null/unknown grandfathered as 'private')
  * - v41 → v42: Added `topics` + `topics_updated_at` columns to memory_vault, making a memory's topics the durable synced record and `entity`/`memory_entity` a device-local index over it (null `topics` = pre-v42, backfilled from the row's current links by the sweep)
+ * - v42 → v43: Added a composite `(is_deleted, created_at)` index to conversations so the list reads stop temp-sorting (structural only, no data rewritten)
  */
 declare const sdkMigrations: Readonly<{
     validated: true;

package/dist/server/index.mjs

@@ -1319,7 +1319,7 @@ __decorateClass([
 ], VaultFolder.prototype, "context", 2);
 
 // src/lib/db/schema.ts
-var SDK_SCHEMA_VERSION = 42;
+var SDK_SCHEMA_VERSION = 43;
 var sdkSchema = (0, import_watermelondb12.appSchema)({
   version: SDK_SCHEMA_VERSION,
   tables: [
@@ -1367,7 +1367,16 @@ var sdkSchema = (0, import_watermelondb12.appSchema)({
         { name: "conversation_id", type: "string", isIndexed: true },
         { name: "title", type: "string" },
         { name: "project_id", type: "string", isOptional: true, isIndexed: true },
-        { name: "created_at", type: "number" },
+        // Indexed to match every other list-sorted created_at in this schema.
+        // Note this single-column index is NOT what makes the conversation list
+        // reads fast on native SQLite — they all filter is_deleted as well, and
+        // SQLite will not combine the two indexes, so the composite created by
+        // the v42 migration is what its planner actually uses. This declaration
+        // still earns its keep on the other two adapters: LokiJS builds its
+        // binary indices from `isIndexed` (and ignores `sql` migration steps
+        // outright), and Postgres gathers statistics via autovacuum, so its
+        // planner can use a single-column index the SQLite planner skips.
+        { name: "created_at", type: "number", isIndexed: true },
         { name: "updated_at", type: "number" },
         { name: "is_deleted", type: "boolean", isIndexed: true },
         { name: "pinned_at", type: "number", isOptional: true }
@@ -2234,6 +2243,49 @@ var sdkMigrations = (0, import_migrations.schemaMigrations)({
           ]
         })
       ]
+    },
+    // v42 -> v43: Give the conversation list reads an index they can actually
+    // sort on. All five of them (getConversationsOp, getConversationsLazyOp,
+    // getConversationsByProjectOp, getConversationsByProjectLazyOp and the
+    // keyset getConversationsPageOp) emit `where is_deleted is 0 ... order by
+    // created_at desc`, so before this they resolved is_deleted through its
+    // index and then built a temp B-tree over every live row just to return
+    // the newest page.
+    //
+    // The index is COMPOSITE, and that is the whole point — a bare index on
+    // created_at does not fix this. SQLite will not combine two single-column
+    // indexes here, so with `is_deleted` indexed and `created_at` indexed
+    // separately it still picks conversations_is_deleted and still temp-sorts.
+    // It only prefers a lone created_at index once ANALYZE has populated
+    // sqlite_stat1, and nothing ever runs ANALYZE: not WatermelonDB, not its
+    // native SQLite bindings, not this SDK. Every device is permanently in the
+    // no-statistics state, so the index has to satisfy the filter and the sort
+    // in one structure. `(is_deleted, created_at)` does: equality on the
+    // leading column, ordered scan on the second, and the keyset boundary
+    // becomes a range seek on the same index.
+    //
+    // unsafeExecuteSql, not addColumns: both columns already exist and
+    // WatermelonDB has no add-index migration step, so raw SQL is the only way
+    // to build one in place (same shape as the v19 -> v20 memory_vault
+    // migration). IF NOT EXISTS keeps the step idempotent.
+    //
+    // Two limits worth knowing before someone re-measures this and finds it
+    // missing. First, the LokiJS (web) adapter discards `sql` steps entirely,
+    // so existing browser databases gain nothing — web's only lever is the
+    // `isIndexed` flag on the column itself. Second, this index reaches
+    // MIGRATED databases only: WatermelonDB builds a fresh database purely from
+    // the encoded schema, and its schema format cannot express a composite
+    // index. The one hook that could (`unsafeSql` on the table) is a function,
+    // and the LokiJS adapter posts the schema to its worker, so attaching it
+    // makes the whole schema fail structuredClone and takes the database down
+    // at setup for anyone on `useWebWorker: true`. Not worth it for an index.
+    {
+      toVersion: 43,
+      steps: [
+        (0, import_migrations.unsafeExecuteSql)(
+          "CREATE INDEX IF NOT EXISTS conversations_is_deleted_created_at ON conversations (is_deleted, created_at);"
+        )
+      ]
     }
   ]
 });
@@ -4965,10 +5017,12 @@ async function classifyInjectionCandidates(candidates, options) {
     );
   }
   const redactor = resolvePiiRedactor(options.piiRedaction);
-  const numbered = scope.map((c, i) => {
-    const safe = redactor ? redactor.redactText(c.content).text : c.content;
-    return `[${i + 1}] ${safe}`;
-  }).join("\n");
+  const lines = [];
+  for (const [i, c] of scope.entries()) {
+    const safe = redactor ? (await redactor.redactTextAsync(c.content)).text : c.content;
+    lines.push(`[${i + 1}] ${safe}`);
+  }
+  const numbered = lines.join("\n");
   let parsed;
   try {
     parsed = await callPortalJsonCompletion({
@@ -5449,7 +5503,7 @@ async function tryConsolidate(trimmed, ctx, options, prepared) {
     content: m.content,
     similarity: m.similarity
   }));
-  const { consolidateMemory: doConsolidate } = await import("./consolidate-GRMEDWKK.mjs");
+  const { consolidateMemory: doConsolidate } = await import("./consolidate-LMIDJFR6.mjs");
   const decision = await doConsolidate(trimmed, candidates, consolidateOptions);
   if (decision.action === "create") return null;
   if (decision.action === "supersede" && decision.content) {
@@ -6273,7 +6327,7 @@ function createLlmDecayClassifier(options) {
       }
       if (!content || content.trim().length === 0) return ruleVerdict;
       const trimmed = content.trim().slice(0, MAX_CONTENT_CHARS);
-      const safe = redactor ? redactor.redactText(trimmed).text : trimmed;
+      const safe = redactor ? (await redactor.redactTextAsync(trimmed)).text : trimmed;
       const meta = `factType: ${input.factType ?? "none"}; ageDays: ${ageDays(input.updatedAt, now)}`;
       let parsed;
       try {
@@ -7370,17 +7424,22 @@ async function extractEntitiesForMemories(memories, options) {
   const out = /* @__PURE__ */ new Map();
   if (memories.length === 0) return out;
   const redactor = resolvePiiRedactor(options.piiRedaction);
-  const vocabulary = (options.existingEntityNames ?? []).filter((n) => n.trim().length > 0).slice(0, MAX_VOCABULARY_NAMES).map((n) => redactor ? redactor.redactText(n).text : n);
+  const vocabulary = [];
+  for (const name of (options.existingEntityNames ?? []).filter((n) => n.trim().length > 0).slice(0, MAX_VOCABULARY_NAMES)) {
+    vocabulary.push(redactor ? (await redactor.redactTextAsync(name)).text : name);
+  }
   const vocabularyNote = vocabulary.length > 0 ? `The user's existing topics: ${vocabulary.join(", ")}.
 When a memory refers to one of these, reuse the EXACT existing name (same spelling, casing, spacing and punctuation) instead of a variant \u2014 if "Foo.ai" is listed, never emit "Foo ai" or "Foo AI", and if "Jane Roe" is listed, emit that rather than a bare "Jane".
 
 ` : "";
   for (let i = 0; i < memories.length; i += TOPIC_EXTRACTION_BATCH_SIZE) {
     const batch = memories.slice(i, i + TOPIC_EXTRACTION_BATCH_SIZE);
-    const listing = batch.map((m) => {
+    const rows = [];
+    for (const m of batch) {
       const content = m.content.slice(0, MAX_CHARS_PER_MEMORY).replace(/\s+/g, " ").trim();
-      return `${m.id}: ${redactor ? redactor.redactText(content).text : content}`;
-    }).join("\n");
+      rows.push(`${m.id}: ${redactor ? (await redactor.redactTextAsync(content)).text : content}`);
+    }
+    const listing = rows.join("\n");
     const parsed = await callPortalJsonCompletion({
       ...options.apiKey !== void 0 && { apiKey: options.apiKey },
       ...options.getToken !== void 0 && { getToken: options.getToken },

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@anuma/sdk",
-  "version": "5.0.0",
+  "version": "5.0.2",
   "description": "",
   "main": "./dist/index.cjs",
   "module": "./dist/index.mjs",
@@ -136,8 +136,9 @@
     "lint:fix": "eslint . --fix",
     "format": "prettier --write .",
     "format:check": "prettier --check .",
-    "typecheck": "tsc --noEmit && pnpm run typecheck:test",
+    "typecheck": "tsc --noEmit && pnpm run typecheck:test && pnpm run check:excluded-suites",
     "typecheck:test": "tsc -p tsconfig.test.json",
+    "check:excluded-suites": "node scripts/assert-excluded-suites-still-fail.mjs",
     "knip": "knip",
     "check:export-consumers": "node scripts/assert-export-consumers.mjs",
     "check-exports": "publint && attw --pack --ignore-rules no-resolution false-cjs && node scripts/assert-no-client-self-import.mjs",