@anuma/sdk 5.1.1 → 6.0.0

package/dist/expo/{chunk-WV7C7VHF.mjs → chunk-DT6QNRZL.mjs}

@@ -643,10 +643,16 @@ function createStreamingDeAnonymizer(redactor, emit) {
 
 // src/lib/memory/consolidationFallback.ts
 function notifyConsolidationFallback(reason, onFallback, detail) {
+  const refused = reason === "subject_mismatch";
+  const message = refused ? `memory/consolidate: refused a cross-subject supersede, created instead (${reason})` : `memory/consolidate: degraded to create (${reason})`;
+  const log = getLogger();
   if (detail !== void 0) {
-    getLogger().warn(`memory/consolidate: degraded to create (${reason})`, detail);
+    if (refused) log.info(message, detail);
+    else log.warn(message, detail);
+  } else if (refused) {
+    log.info(message);
   } else {
-    getLogger().warn(`memory/consolidate: degraded to create (${reason})`);
+    log.warn(message);
   }
   try {
     onFallback?.(reason);

package/dist/expo/{consolidate-T6GZ5YQ4.mjs → consolidate-3MEWQNM3.mjs}

@@ -1,7 +1,7 @@
 import {
   notifyConsolidationFallback,
   resolvePiiRedactor
-} from "./chunk-WV7C7VHF.mjs";
+} from "./chunk-DT6QNRZL.mjs";
 import {
   callPortalJsonCompletion
 } from "./chunk-ILAWDQDE.mjs";
@@ -39,12 +39,15 @@ OUTPUT \u2014 strict JSON, no prose:
   "action": "create" | "update" | "supersede" | "noop",
   "targetId": "<existing memory id \u2014 required for update/noop, omit for create/supersede>",
   "targetIds": ["<id>", ...],
-  "content": "<content \u2014 required for create/update/supersede, omit for noop>"
+  "content": "<content \u2014 required for create/update/supersede, omit for noop>",
+  "newSubject": "<required for supersede: WHO the new memory is about>",
+  "targetSubject": "<required for supersede: WHO the memory in targetId is about>",
+  "targetSubjects": ["<required for supersede: WHO each memory you are retiring is about \u2014 one entry per retired id>"]
 }
 
 For "create": content is the new memory verbatim (or a slight refinement); omit targetId/targetIds.
 For "update": content is the merged richest-version, \u226480 words; targetId is the single memory to update.
-For "supersede": content is the NEW fact only (\u226480 words); "targetIds" lists EVERY stale memory being retired (all candidates describing the same now-changed attribute).
+For "supersede": content is the NEW fact only (\u226480 words); "targetIds" lists EVERY stale memory being retired (all candidates describing the same now-changed attribute). You MUST also name the subjects: "newSubject" for the new memory, and one entry in "targetSubjects" for EACH memory you are retiring (use "targetSubject" as well when you retire a single memory). List a subject ONLY for the memories you are actually retiring, not for every candidate you were shown. Write the plain subject, not a sentence: "the user", "the user's sister", "the user's manager", "Biscuit the dog". Rule 1a means a supersede is only valid when every one of those subjects is the SAME as "newSubject"; name them and check them against each other before you commit to the action. If ANY of them differs, the answer is "create" \u2014 do not retire the ones that match and keep the rest, because a group that mixes subjects was grouped wrongly in the first place. A subjectless fact ("Lives in Denver", "Works at Riverbend") is about "the user" \u2014 the extractor omits the subject when it is the user, so treat the absence of a subject as the user, never as unknown.
 For "noop": no content (existing memory is already correct); targetId is that memory.`;
 async function consolidateMemory(newContent, candidates, options) {
   const fallback = {
@@ -101,7 +104,13 @@ ${candidateText}`;
     if (restored.unresolved) {
       return degrade("invalid_response", fallback, options);
     }
-    return { ...result, content: restored.text };
+    return reportRefusal({ ...result, content: restored.text }, options);
+  }
+  return reportRefusal(result, options);
+}
+function reportRefusal(result, options) {
+  if (result.fallbackReason) {
+    notifyConsolidationFallback(result.fallbackReason, options.onFallback);
   }
   return result;
 }
@@ -109,6 +118,19 @@ function degrade(reason, fallback, options, detail) {
   notifyConsolidationFallback(reason, options.onFallback, detail);
   return { ...fallback, fallbackReason: reason };
 }
+function normalizeSubject(raw) {
+  if (typeof raw !== "string") return "";
+  let s = raw.trim().toLowerCase().replace(/[.,;:!?]+$/u, "").trim();
+  s = s.replace(/^the\s+/u, "");
+  s = s.replace(/^users'?\s+/u, "").replace(/^user's\s+/u, "");
+  return s.trim();
+}
+var USER_SUBJECT_ALIASES = /* @__PURE__ */ new Set(["user", "themselves", "themself", "they", "me", "self"]);
+function subjectKey(raw) {
+  const s = normalizeSubject(raw);
+  if (s.length === 0) return "";
+  return USER_SUBJECT_ALIASES.has(s) ? "user" : s;
+}
 function validate(parsed, newContent, validIds) {
   if (typeof parsed !== "object" || parsed === null) return null;
   const obj = parsed;
@@ -136,6 +158,18 @@ function validate(parsed, newContent, validIds) {
       ...new Set(rawIds.filter((id) => typeof id === "string" && validIds.has(id)))
     ];
     if (targetIds.length === 0) return null;
+    const newSubject = subjectKey(obj.newSubject);
+    if (newSubject.length > 0) {
+      const positional = Array.isArray(obj.targetSubjects) ? obj.targetSubjects : [];
+      const statedSubjects = [
+        ...positional.map((s) => subjectKey(s)),
+        // The singular pair, which is the whole story for a one-target supersede.
+        subjectKey(obj.targetSubject)
+      ];
+      if (statedSubjects.some((s) => s.length > 0 && s !== newSubject)) {
+        return { action: "create", content: c, fallbackReason: "subject_mismatch" };
+      }
+    }
     return { action: "supersede", targetId: targetIds[0], targetIds, content: c };
   }
   const targetId = typeof obj.targetId === "string" ? obj.targetId : null;

package/dist/expo/index.cjs

@@ -8723,10 +8723,16 @@ var init_searchTool = __esm({
 
 // src/lib/memory/consolidationFallback.ts
 function notifyConsolidationFallback(reason, onFallback, detail) {
+  const refused = reason === "subject_mismatch";
+  const message = refused ? `memory/consolidate: refused a cross-subject supersede, created instead (${reason})` : `memory/consolidate: degraded to create (${reason})`;
+  const log = getLogger();
   if (detail !== void 0) {
-    getLogger().warn(`memory/consolidate: degraded to create (${reason})`, detail);
+    if (refused) log.info(message, detail);
+    else log.warn(message, detail);
+  } else if (refused) {
+    log.info(message);
   } else {
-    getLogger().warn(`memory/consolidate: degraded to create (${reason})`);
+    log.warn(message);
   }
   try {
     onFallback?.(reason);
@@ -8801,7 +8807,13 @@ ${candidateText}`;
     if (restored.unresolved) {
       return degrade("invalid_response", fallback, options);
     }
-    return { ...result, content: restored.text };
+    return reportRefusal({ ...result, content: restored.text }, options);
+  }
+  return reportRefusal(result, options);
+}
+function reportRefusal(result, options) {
+  if (result.fallbackReason) {
+    notifyConsolidationFallback(result.fallbackReason, options.onFallback);
   }
   return result;
 }
@@ -8809,6 +8821,18 @@ function degrade(reason, fallback, options, detail) {
   notifyConsolidationFallback(reason, options.onFallback, detail);
   return { ...fallback, fallbackReason: reason };
 }
+function normalizeSubject(raw) {
+  if (typeof raw !== "string") return "";
+  let s = raw.trim().toLowerCase().replace(/[.,;:!?]+$/u, "").trim();
+  s = s.replace(/^the\s+/u, "");
+  s = s.replace(/^users'?\s+/u, "").replace(/^user's\s+/u, "");
+  return s.trim();
+}
+function subjectKey(raw) {
+  const s = normalizeSubject(raw);
+  if (s.length === 0) return "";
+  return USER_SUBJECT_ALIASES.has(s) ? "user" : s;
+}
 function validate2(parsed, newContent, validIds) {
   if (typeof parsed !== "object" || parsed === null) return null;
   const obj = parsed;
@@ -8836,13 +8860,25 @@ function validate2(parsed, newContent, validIds) {
       ...new Set(rawIds.filter((id) => typeof id === "string" && validIds.has(id)))
     ];
     if (targetIds.length === 0) return null;
+    const newSubject = subjectKey(obj.newSubject);
+    if (newSubject.length > 0) {
+      const positional = Array.isArray(obj.targetSubjects) ? obj.targetSubjects : [];
+      const statedSubjects = [
+        ...positional.map((s) => subjectKey(s)),
+        // The singular pair, which is the whole story for a one-target supersede.
+        subjectKey(obj.targetSubject)
+      ];
+      if (statedSubjects.some((s) => s.length > 0 && s !== newSubject)) {
+        return { action: "create", content: c, fallbackReason: "subject_mismatch" };
+      }
+    }
     return { action: "supersede", targetId: targetIds[0], targetIds, content: c };
   }
   const targetId = typeof obj.targetId === "string" ? obj.targetId : null;
   if (!targetId || !validIds.has(targetId)) return null;
   return { action: "update", targetId, content: c };
 }
-var DEFAULT_CONSOLIDATION_MODEL, DEFAULT_CONSOLIDATE_ATTEMPTS, DEFAULT_CONSOLIDATE_TOTAL_TIMEOUT_MS, SYSTEM_PROMPT3;
+var DEFAULT_CONSOLIDATION_MODEL, DEFAULT_CONSOLIDATE_ATTEMPTS, DEFAULT_CONSOLIDATE_TOTAL_TIMEOUT_MS, SYSTEM_PROMPT3, USER_SUBJECT_ALIASES;
 var init_consolidate = __esm({
   "src/lib/memory/consolidate.ts"() {
     "use strict";
@@ -8880,13 +8916,17 @@ OUTPUT \u2014 strict JSON, no prose:
   "action": "create" | "update" | "supersede" | "noop",
   "targetId": "<existing memory id \u2014 required for update/noop, omit for create/supersede>",
   "targetIds": ["<id>", ...],
-  "content": "<content \u2014 required for create/update/supersede, omit for noop>"
+  "content": "<content \u2014 required for create/update/supersede, omit for noop>",
+  "newSubject": "<required for supersede: WHO the new memory is about>",
+  "targetSubject": "<required for supersede: WHO the memory in targetId is about>",
+  "targetSubjects": ["<required for supersede: WHO each memory you are retiring is about \u2014 one entry per retired id>"]
 }
 
 For "create": content is the new memory verbatim (or a slight refinement); omit targetId/targetIds.
 For "update": content is the merged richest-version, \u226480 words; targetId is the single memory to update.
-For "supersede": content is the NEW fact only (\u226480 words); "targetIds" lists EVERY stale memory being retired (all candidates describing the same now-changed attribute).
+For "supersede": content is the NEW fact only (\u226480 words); "targetIds" lists EVERY stale memory being retired (all candidates describing the same now-changed attribute). You MUST also name the subjects: "newSubject" for the new memory, and one entry in "targetSubjects" for EACH memory you are retiring (use "targetSubject" as well when you retire a single memory). List a subject ONLY for the memories you are actually retiring, not for every candidate you were shown. Write the plain subject, not a sentence: "the user", "the user's sister", "the user's manager", "Biscuit the dog". Rule 1a means a supersede is only valid when every one of those subjects is the SAME as "newSubject"; name them and check them against each other before you commit to the action. If ANY of them differs, the answer is "create" \u2014 do not retire the ones that match and keep the rest, because a group that mixes subjects was grouped wrongly in the first place. A subjectless fact ("Lives in Denver", "Works at Riverbend") is about "the user" \u2014 the extractor omits the subject when it is the user, so treat the absence of a subject as the user, never as unknown.
 For "noop": no content (existing memory is already correct); targetId is that memory.`;
+    USER_SUBJECT_ALIASES = /* @__PURE__ */ new Set(["user", "themselves", "themself", "they", "me", "self"]);
   }
 });
 

package/dist/expo/index.d.mts

@@ -5528,9 +5528,9 @@ interface RecallDiagnostics {
 type RetainAction = "create" | "merge" | "update" | "skip" | "suppressed" | "supersede";
 type RetainSource = "manual" | "auto-extracted" | "capsule";
 /**
- * Why a retain fell back to "create" instead of applying a consolidation
- * decision. Each value names a DIFFERENT thing to go fix, which is the point of
- * keeping them apart:
+ * Why a retain returned "create" instead of applying a consolidation decision.
+ * Each value names a DIFFERENT thing to go fix, which is the point of keeping
+ * them apart — and one of them is not a fault at all, see `subject_mismatch`:
  *
  * - `llm_error` — the consolidation call never produced a response (network,
  *   timeout, 5xx, 429, empty completion, or missing credentials). Look at the
@@ -5545,8 +5545,27 @@ type RetainSource = "manual" | "auto-extracted" | "capsule";
  *   rate points at write contention (for example an auto-extraction worker and a
  *   manual write racing over the same vault), which quietly costs you the
  *   dedup that decision would have performed.
- */
-type ConsolidationFallbackReason = "llm_error" | "invalid_response" | "target_vanished";
+ * - `subject_mismatch` — NOT a fault. The model returned a well-formed
+ *   `supersede` and we refused it because the two subjects it named were
+ *   different people, so retiring the target would have hidden a memory that is
+ *   still true (#822 — "User's sister lives in Denver" retiring "User lives in
+ *   Denver"). The refusal is the feature; do not alarm on it. What the rate does
+ *   tell you is how often the model reaches for a cross-subject supersede, and —
+ *   because the guard is inert unless the model fills in its subject fields — a
+ *   rate of exactly zero is as likely to mean "the fields are being omitted" as
+ *   "the mistake never happens". Check compliance before reading zero as health.
+ */
+type ConsolidationFallbackReason = "llm_error" | "invalid_response" | "target_vanished"
+/**
+ * A `supersede` was downgraded to `create` because the model's own stated
+ * subjects disagreed: the new fact is about someone other than the fact it
+ * wanted to retire (#822 — "User's sister lives in Denver" retiring "User
+ * lives in Denver"). NOT an error; the decision was refused on purpose, and
+ * the refusal preserved a true memory. Retiring a superseded row hides it from
+ * recall, so this is the one fallback that prevents data loss rather than
+ * reporting degraded quality.
+ */
+ | "subject_mismatch";
 interface RetainOptions {
     source?: RetainSource;
     sourceChunkIds?: string[];
@@ -5582,6 +5601,12 @@ interface RetainOptions {
          * JSON that violates the schema (unknown action, bad targetId).
          * A flaky consolidator silently accumulates duplicate memories;
          * wire this to logging/metrics so the fallback rate is observable.
+         *
+         * `subject_mismatch` is the odd one out and worth reading separately: the
+         * model answered fine and we REFUSED its supersede because its own stated
+         * subjects disagreed (#822). A non-zero rate is the guard doing its job, not
+         * a problem — the rate to watch is how often it fires, which is also the
+         * only signal for how reliably the model fills the subject fields in at all.
          */
         onFallback?: (reason: ConsolidationFallbackReason) => void;
         /**
@@ -9533,7 +9558,9 @@ declare function ensureDefaultFoldersOp(ctx: VaultFolderOperationsContext): Prom
  */
 interface Logger {
     debug: (...args: unknown[]) => void;
-    /** Not used internally by the SDK today, but included so custom loggers can receive all standard levels. */
+    /** Used for outcomes that are noteworthy but expected — a consolidation
+     * refusal that preserved a memory, for example. Keep genuinely-wrong things at
+     * `warn` so the two stay distinguishable in a log search. */
     info: (...args: unknown[]) => void;
     warn: (...args: unknown[]) => void;
     error: (...args: unknown[]) => void;

package/dist/expo/index.d.ts

@@ -5528,9 +5528,9 @@ interface RecallDiagnostics {
 type RetainAction = "create" | "merge" | "update" | "skip" | "suppressed" | "supersede";
 type RetainSource = "manual" | "auto-extracted" | "capsule";
 /**
- * Why a retain fell back to "create" instead of applying a consolidation
- * decision. Each value names a DIFFERENT thing to go fix, which is the point of
- * keeping them apart:
+ * Why a retain returned "create" instead of applying a consolidation decision.
+ * Each value names a DIFFERENT thing to go fix, which is the point of keeping
+ * them apart — and one of them is not a fault at all, see `subject_mismatch`:
  *
  * - `llm_error` — the consolidation call never produced a response (network,
  *   timeout, 5xx, 429, empty completion, or missing credentials). Look at the
@@ -5545,8 +5545,27 @@ type RetainSource = "manual" | "auto-extracted" | "capsule";
  *   rate points at write contention (for example an auto-extraction worker and a
  *   manual write racing over the same vault), which quietly costs you the
  *   dedup that decision would have performed.
- */
-type ConsolidationFallbackReason = "llm_error" | "invalid_response" | "target_vanished";
+ * - `subject_mismatch` — NOT a fault. The model returned a well-formed
+ *   `supersede` and we refused it because the two subjects it named were
+ *   different people, so retiring the target would have hidden a memory that is
+ *   still true (#822 — "User's sister lives in Denver" retiring "User lives in
+ *   Denver"). The refusal is the feature; do not alarm on it. What the rate does
+ *   tell you is how often the model reaches for a cross-subject supersede, and —
+ *   because the guard is inert unless the model fills in its subject fields — a
+ *   rate of exactly zero is as likely to mean "the fields are being omitted" as
+ *   "the mistake never happens". Check compliance before reading zero as health.
+ */
+type ConsolidationFallbackReason = "llm_error" | "invalid_response" | "target_vanished"
+/**
+ * A `supersede` was downgraded to `create` because the model's own stated
+ * subjects disagreed: the new fact is about someone other than the fact it
+ * wanted to retire (#822 — "User's sister lives in Denver" retiring "User
+ * lives in Denver"). NOT an error; the decision was refused on purpose, and
+ * the refusal preserved a true memory. Retiring a superseded row hides it from
+ * recall, so this is the one fallback that prevents data loss rather than
+ * reporting degraded quality.
+ */
+ | "subject_mismatch";
 interface RetainOptions {
     source?: RetainSource;
     sourceChunkIds?: string[];
@@ -5582,6 +5601,12 @@ interface RetainOptions {
          * JSON that violates the schema (unknown action, bad targetId).
          * A flaky consolidator silently accumulates duplicate memories;
          * wire this to logging/metrics so the fallback rate is observable.
+         *
+         * `subject_mismatch` is the odd one out and worth reading separately: the
+         * model answered fine and we REFUSED its supersede because its own stated
+         * subjects disagreed (#822). A non-zero rate is the guard doing its job, not
+         * a problem — the rate to watch is how often it fires, which is also the
+         * only signal for how reliably the model fills the subject fields in at all.
          */
         onFallback?: (reason: ConsolidationFallbackReason) => void;
         /**
@@ -9533,7 +9558,9 @@ declare function ensureDefaultFoldersOp(ctx: VaultFolderOperationsContext): Prom
  */
 interface Logger {
     debug: (...args: unknown[]) => void;
-    /** Not used internally by the SDK today, but included so custom loggers can receive all standard levels. */
+    /** Used for outcomes that are noteworthy but expected — a consolidation
+     * refusal that preserved a memory, for example. Keep genuinely-wrong things at
+     * `warn` so the two stay distinguishable in a log search. */
     info: (...args: unknown[]) => void;
     warn: (...args: unknown[]) => void;
     error: (...args: unknown[]) => void;

package/dist/expo/index.mjs

@@ -129,7 +129,7 @@ import {
   isPiiRedactor,
   notifyConsolidationFallback,
   resolvePiiRedactor
-} from "./chunk-WV7C7VHF.mjs";
+} from "./chunk-DT6QNRZL.mjs";
 import {
   callPortalJsonCompletion,
   consoleLogger,
@@ -6705,7 +6705,7 @@ async function tryConsolidate(trimmed, ctx, options, prepared) {
     content: m.content,
     similarity: m.similarity
   }));
-  const { consolidateMemory: doConsolidate } = await import("./consolidate-T6GZ5YQ4.mjs");
+  const { consolidateMemory: doConsolidate } = await import("./consolidate-3MEWQNM3.mjs");
   const decision = await doConsolidate(trimmed, candidates, consolidateOptions);
   if (decision.action === "create") return null;
   if (decision.action === "supersede" && decision.content) {

package/dist/index.d.mts

@@ -8449,7 +8449,9 @@ interface AgentConfig {
  */
 interface Logger {
     debug: (...args: unknown[]) => void;
-    /** Not used internally by the SDK today, but included so custom loggers can receive all standard levels. */
+    /** Used for outcomes that are noteworthy but expected — a consolidation
+     * refusal that preserved a memory, for example. Keep genuinely-wrong things at
+     * `warn` so the two stay distinguishable in a log search. */
     info: (...args: unknown[]) => void;
     warn: (...args: unknown[]) => void;
     error: (...args: unknown[]) => void;

package/dist/index.d.ts

@@ -8449,7 +8449,9 @@ interface AgentConfig {
  */
 interface Logger {
     debug: (...args: unknown[]) => void;
-    /** Not used internally by the SDK today, but included so custom loggers can receive all standard levels. */
+    /** Used for outcomes that are noteworthy but expected — a consolidation
+     * refusal that preserved a memory, for example. Keep genuinely-wrong things at
+     * `warn` so the two stay distinguishable in a log search. */
     info: (...args: unknown[]) => void;
     warn: (...args: unknown[]) => void;
     error: (...args: unknown[]) => void;

package/dist/react/{chunk-3NPDZZGO.mjs → chunk-VMI74IUX.mjs}

@@ -643,10 +643,16 @@ function createStreamingDeAnonymizer(redactor, emit) {
 
 // src/lib/memory/consolidationFallback.ts
 function notifyConsolidationFallback(reason, onFallback, detail) {
+  const refused = reason === "subject_mismatch";
+  const message = refused ? `memory/consolidate: refused a cross-subject supersede, created instead (${reason})` : `memory/consolidate: degraded to create (${reason})`;
+  const log = getLogger();
   if (detail !== void 0) {
-    getLogger().warn(`memory/consolidate: degraded to create (${reason})`, detail);
+    if (refused) log.info(message, detail);
+    else log.warn(message, detail);
+  } else if (refused) {
+    log.info(message);
   } else {
-    getLogger().warn(`memory/consolidate: degraded to create (${reason})`);
+    log.warn(message);
   }
   try {
     onFallback?.(reason);

package/dist/react/{consolidate-POPTUI54.mjs → consolidate-AMPKH6YJ.mjs}

@@ -1,7 +1,7 @@
 import {
   notifyConsolidationFallback,
   resolvePiiRedactor
-} from "./chunk-3NPDZZGO.mjs";
+} from "./chunk-VMI74IUX.mjs";
 import {
   callPortalJsonCompletion
 } from "./chunk-ILAWDQDE.mjs";
@@ -39,12 +39,15 @@ OUTPUT \u2014 strict JSON, no prose:
   "action": "create" | "update" | "supersede" | "noop",
   "targetId": "<existing memory id \u2014 required for update/noop, omit for create/supersede>",
   "targetIds": ["<id>", ...],
-  "content": "<content \u2014 required for create/update/supersede, omit for noop>"
+  "content": "<content \u2014 required for create/update/supersede, omit for noop>",
+  "newSubject": "<required for supersede: WHO the new memory is about>",
+  "targetSubject": "<required for supersede: WHO the memory in targetId is about>",
+  "targetSubjects": ["<required for supersede: WHO each memory you are retiring is about \u2014 one entry per retired id>"]
 }
 
 For "create": content is the new memory verbatim (or a slight refinement); omit targetId/targetIds.
 For "update": content is the merged richest-version, \u226480 words; targetId is the single memory to update.
-For "supersede": content is the NEW fact only (\u226480 words); "targetIds" lists EVERY stale memory being retired (all candidates describing the same now-changed attribute).
+For "supersede": content is the NEW fact only (\u226480 words); "targetIds" lists EVERY stale memory being retired (all candidates describing the same now-changed attribute). You MUST also name the subjects: "newSubject" for the new memory, and one entry in "targetSubjects" for EACH memory you are retiring (use "targetSubject" as well when you retire a single memory). List a subject ONLY for the memories you are actually retiring, not for every candidate you were shown. Write the plain subject, not a sentence: "the user", "the user's sister", "the user's manager", "Biscuit the dog". Rule 1a means a supersede is only valid when every one of those subjects is the SAME as "newSubject"; name them and check them against each other before you commit to the action. If ANY of them differs, the answer is "create" \u2014 do not retire the ones that match and keep the rest, because a group that mixes subjects was grouped wrongly in the first place. A subjectless fact ("Lives in Denver", "Works at Riverbend") is about "the user" \u2014 the extractor omits the subject when it is the user, so treat the absence of a subject as the user, never as unknown.
 For "noop": no content (existing memory is already correct); targetId is that memory.`;
 async function consolidateMemory(newContent, candidates, options) {
   const fallback = {
@@ -101,7 +104,13 @@ ${candidateText}`;
     if (restored.unresolved) {
       return degrade("invalid_response", fallback, options);
     }
-    return { ...result, content: restored.text };
+    return reportRefusal({ ...result, content: restored.text }, options);
+  }
+  return reportRefusal(result, options);
+}
+function reportRefusal(result, options) {
+  if (result.fallbackReason) {
+    notifyConsolidationFallback(result.fallbackReason, options.onFallback);
   }
   return result;
 }
@@ -109,6 +118,19 @@ function degrade(reason, fallback, options, detail) {
   notifyConsolidationFallback(reason, options.onFallback, detail);
   return { ...fallback, fallbackReason: reason };
 }
+function normalizeSubject(raw) {
+  if (typeof raw !== "string") return "";
+  let s = raw.trim().toLowerCase().replace(/[.,;:!?]+$/u, "").trim();
+  s = s.replace(/^the\s+/u, "");
+  s = s.replace(/^users'?\s+/u, "").replace(/^user's\s+/u, "");
+  return s.trim();
+}
+var USER_SUBJECT_ALIASES = /* @__PURE__ */ new Set(["user", "themselves", "themself", "they", "me", "self"]);
+function subjectKey(raw) {
+  const s = normalizeSubject(raw);
+  if (s.length === 0) return "";
+  return USER_SUBJECT_ALIASES.has(s) ? "user" : s;
+}
 function validate(parsed, newContent, validIds) {
   if (typeof parsed !== "object" || parsed === null) return null;
   const obj = parsed;
@@ -136,6 +158,18 @@ function validate(parsed, newContent, validIds) {
       ...new Set(rawIds.filter((id) => typeof id === "string" && validIds.has(id)))
     ];
     if (targetIds.length === 0) return null;
+    const newSubject = subjectKey(obj.newSubject);
+    if (newSubject.length > 0) {
+      const positional = Array.isArray(obj.targetSubjects) ? obj.targetSubjects : [];
+      const statedSubjects = [
+        ...positional.map((s) => subjectKey(s)),
+        // The singular pair, which is the whole story for a one-target supersede.
+        subjectKey(obj.targetSubject)
+      ];
+      if (statedSubjects.some((s) => s.length > 0 && s !== newSubject)) {
+        return { action: "create", content: c, fallbackReason: "subject_mismatch" };
+      }
+    }
     return { action: "supersede", targetId: targetIds[0], targetIds, content: c };
   }
   const targetId = typeof obj.targetId === "string" ? obj.targetId : null;

package/dist/react/index.cjs

@@ -9006,10 +9006,16 @@ var init_searchTool = __esm({
 
 // src/lib/memory/consolidationFallback.ts
 function notifyConsolidationFallback(reason, onFallback, detail) {
+  const refused = reason === "subject_mismatch";
+  const message = refused ? `memory/consolidate: refused a cross-subject supersede, created instead (${reason})` : `memory/consolidate: degraded to create (${reason})`;
+  const log = getLogger();
   if (detail !== void 0) {
-    getLogger().warn(`memory/consolidate: degraded to create (${reason})`, detail);
+    if (refused) log.info(message, detail);
+    else log.warn(message, detail);
+  } else if (refused) {
+    log.info(message);
   } else {
-    getLogger().warn(`memory/consolidate: degraded to create (${reason})`);
+    log.warn(message);
   }
   try {
     onFallback?.(reason);
@@ -9084,7 +9090,13 @@ ${candidateText}`;
     if (restored.unresolved) {
       return degrade("invalid_response", fallback, options);
     }
-    return { ...result, content: restored.text };
+    return reportRefusal({ ...result, content: restored.text }, options);
+  }
+  return reportRefusal(result, options);
+}
+function reportRefusal(result, options) {
+  if (result.fallbackReason) {
+    notifyConsolidationFallback(result.fallbackReason, options.onFallback);
   }
   return result;
 }
@@ -9092,6 +9104,18 @@ function degrade(reason, fallback, options, detail) {
   notifyConsolidationFallback(reason, options.onFallback, detail);
   return { ...fallback, fallbackReason: reason };
 }
+function normalizeSubject(raw) {
+  if (typeof raw !== "string") return "";
+  let s = raw.trim().toLowerCase().replace(/[.,;:!?]+$/u, "").trim();
+  s = s.replace(/^the\s+/u, "");
+  s = s.replace(/^users'?\s+/u, "").replace(/^user's\s+/u, "");
+  return s.trim();
+}
+function subjectKey(raw) {
+  const s = normalizeSubject(raw);
+  if (s.length === 0) return "";
+  return USER_SUBJECT_ALIASES.has(s) ? "user" : s;
+}
 function validate2(parsed, newContent, validIds) {
   if (typeof parsed !== "object" || parsed === null) return null;
   const obj = parsed;
@@ -9119,13 +9143,25 @@ function validate2(parsed, newContent, validIds) {
       ...new Set(rawIds.filter((id) => typeof id === "string" && validIds.has(id)))
     ];
     if (targetIds.length === 0) return null;
+    const newSubject = subjectKey(obj.newSubject);
+    if (newSubject.length > 0) {
+      const positional = Array.isArray(obj.targetSubjects) ? obj.targetSubjects : [];
+      const statedSubjects = [
+        ...positional.map((s) => subjectKey(s)),
+        // The singular pair, which is the whole story for a one-target supersede.
+        subjectKey(obj.targetSubject)
+      ];
+      if (statedSubjects.some((s) => s.length > 0 && s !== newSubject)) {
+        return { action: "create", content: c, fallbackReason: "subject_mismatch" };
+      }
+    }
     return { action: "supersede", targetId: targetIds[0], targetIds, content: c };
   }
   const targetId = typeof obj.targetId === "string" ? obj.targetId : null;
   if (!targetId || !validIds.has(targetId)) return null;
   return { action: "update", targetId, content: c };
 }
-var DEFAULT_CONSOLIDATION_MODEL, DEFAULT_CONSOLIDATE_ATTEMPTS, DEFAULT_CONSOLIDATE_TOTAL_TIMEOUT_MS, SYSTEM_PROMPT3;
+var DEFAULT_CONSOLIDATION_MODEL, DEFAULT_CONSOLIDATE_ATTEMPTS, DEFAULT_CONSOLIDATE_TOTAL_TIMEOUT_MS, SYSTEM_PROMPT3, USER_SUBJECT_ALIASES;
 var init_consolidate = __esm({
   "src/lib/memory/consolidate.ts"() {
     "use strict";
@@ -9163,13 +9199,17 @@ OUTPUT \u2014 strict JSON, no prose:
   "action": "create" | "update" | "supersede" | "noop",
   "targetId": "<existing memory id \u2014 required for update/noop, omit for create/supersede>",
   "targetIds": ["<id>", ...],
-  "content": "<content \u2014 required for create/update/supersede, omit for noop>"
+  "content": "<content \u2014 required for create/update/supersede, omit for noop>",
+  "newSubject": "<required for supersede: WHO the new memory is about>",
+  "targetSubject": "<required for supersede: WHO the memory in targetId is about>",
+  "targetSubjects": ["<required for supersede: WHO each memory you are retiring is about \u2014 one entry per retired id>"]
 }
 
 For "create": content is the new memory verbatim (or a slight refinement); omit targetId/targetIds.
 For "update": content is the merged richest-version, \u226480 words; targetId is the single memory to update.
-For "supersede": content is the NEW fact only (\u226480 words); "targetIds" lists EVERY stale memory being retired (all candidates describing the same now-changed attribute).
+For "supersede": content is the NEW fact only (\u226480 words); "targetIds" lists EVERY stale memory being retired (all candidates describing the same now-changed attribute). You MUST also name the subjects: "newSubject" for the new memory, and one entry in "targetSubjects" for EACH memory you are retiring (use "targetSubject" as well when you retire a single memory). List a subject ONLY for the memories you are actually retiring, not for every candidate you were shown. Write the plain subject, not a sentence: "the user", "the user's sister", "the user's manager", "Biscuit the dog". Rule 1a means a supersede is only valid when every one of those subjects is the SAME as "newSubject"; name them and check them against each other before you commit to the action. If ANY of them differs, the answer is "create" \u2014 do not retire the ones that match and keep the rest, because a group that mixes subjects was grouped wrongly in the first place. A subjectless fact ("Lives in Denver", "Works at Riverbend") is about "the user" \u2014 the extractor omits the subject when it is the user, so treat the absence of a subject as the user, never as unknown.
 For "noop": no content (existing memory is already correct); targetId is that memory.`;
+    USER_SUBJECT_ALIASES = /* @__PURE__ */ new Set(["user", "themselves", "themself", "they", "me", "self"]);
   }
 });
 

package/dist/react/index.d.mts

@@ -3238,7 +3238,9 @@ declare function createWebSearchPreProcessor(options?: WebSearchPreProcessorOpti
  */
 interface Logger {
     debug: (...args: unknown[]) => void;
-    /** Not used internally by the SDK today, but included so custom loggers can receive all standard levels. */
+    /** Used for outcomes that are noteworthy but expected — a consolidation
+     * refusal that preserved a memory, for example. Keep genuinely-wrong things at
+     * `warn` so the two stay distinguishable in a log search. */
     info: (...args: unknown[]) => void;
     warn: (...args: unknown[]) => void;
     error: (...args: unknown[]) => void;
@@ -6800,9 +6802,9 @@ interface RecallDiagnostics {
 type RetainAction = "create" | "merge" | "update" | "skip" | "suppressed" | "supersede";
 type RetainSource = "manual" | "auto-extracted" | "capsule";
 /**
- * Why a retain fell back to "create" instead of applying a consolidation
- * decision. Each value names a DIFFERENT thing to go fix, which is the point of
- * keeping them apart:
+ * Why a retain returned "create" instead of applying a consolidation decision.
+ * Each value names a DIFFERENT thing to go fix, which is the point of keeping
+ * them apart — and one of them is not a fault at all, see `subject_mismatch`:
  *
  * - `llm_error` — the consolidation call never produced a response (network,
  *   timeout, 5xx, 429, empty completion, or missing credentials). Look at the
@@ -6817,8 +6819,27 @@ type RetainSource = "manual" | "auto-extracted" | "capsule";
  *   rate points at write contention (for example an auto-extraction worker and a
  *   manual write racing over the same vault), which quietly costs you the
  *   dedup that decision would have performed.
- */
-type ConsolidationFallbackReason = "llm_error" | "invalid_response" | "target_vanished";
+ * - `subject_mismatch` — NOT a fault. The model returned a well-formed
+ *   `supersede` and we refused it because the two subjects it named were
+ *   different people, so retiring the target would have hidden a memory that is
+ *   still true (#822 — "User's sister lives in Denver" retiring "User lives in
+ *   Denver"). The refusal is the feature; do not alarm on it. What the rate does
+ *   tell you is how often the model reaches for a cross-subject supersede, and —
+ *   because the guard is inert unless the model fills in its subject fields — a
+ *   rate of exactly zero is as likely to mean "the fields are being omitted" as
+ *   "the mistake never happens". Check compliance before reading zero as health.
+ */
+type ConsolidationFallbackReason = "llm_error" | "invalid_response" | "target_vanished"
+/**
+ * A `supersede` was downgraded to `create` because the model's own stated
+ * subjects disagreed: the new fact is about someone other than the fact it
+ * wanted to retire (#822 — "User's sister lives in Denver" retiring "User
+ * lives in Denver"). NOT an error; the decision was refused on purpose, and
+ * the refusal preserved a true memory. Retiring a superseded row hides it from
+ * recall, so this is the one fallback that prevents data loss rather than
+ * reporting degraded quality.
+ */
+ | "subject_mismatch";
 interface RetainOptions {
     source?: RetainSource;
     sourceChunkIds?: string[];
@@ -6854,6 +6875,12 @@ interface RetainOptions {
          * JSON that violates the schema (unknown action, bad targetId).
          * A flaky consolidator silently accumulates duplicate memories;
          * wire this to logging/metrics so the fallback rate is observable.
+         *
+         * `subject_mismatch` is the odd one out and worth reading separately: the
+         * model answered fine and we REFUSED its supersede because its own stated
+         * subjects disagreed (#822). A non-zero rate is the guard doing its job, not
+         * a problem — the rate to watch is how often it fires, which is also the
+         * only signal for how reliably the model fills the subject fields in at all.
          */
         onFallback?: (reason: ConsolidationFallbackReason) => void;
         /**

package/dist/react/index.d.ts

@@ -3238,7 +3238,9 @@ declare function createWebSearchPreProcessor(options?: WebSearchPreProcessorOpti
  */
 interface Logger {
     debug: (...args: unknown[]) => void;
-    /** Not used internally by the SDK today, but included so custom loggers can receive all standard levels. */
+    /** Used for outcomes that are noteworthy but expected — a consolidation
+     * refusal that preserved a memory, for example. Keep genuinely-wrong things at
+     * `warn` so the two stay distinguishable in a log search. */
     info: (...args: unknown[]) => void;
     warn: (...args: unknown[]) => void;
     error: (...args: unknown[]) => void;
@@ -6800,9 +6802,9 @@ interface RecallDiagnostics {
 type RetainAction = "create" | "merge" | "update" | "skip" | "suppressed" | "supersede";
 type RetainSource = "manual" | "auto-extracted" | "capsule";
 /**
- * Why a retain fell back to "create" instead of applying a consolidation
- * decision. Each value names a DIFFERENT thing to go fix, which is the point of
- * keeping them apart:
+ * Why a retain returned "create" instead of applying a consolidation decision.
+ * Each value names a DIFFERENT thing to go fix, which is the point of keeping
+ * them apart — and one of them is not a fault at all, see `subject_mismatch`:
  *
  * - `llm_error` — the consolidation call never produced a response (network,
  *   timeout, 5xx, 429, empty completion, or missing credentials). Look at the
@@ -6817,8 +6819,27 @@ type RetainSource = "manual" | "auto-extracted" | "capsule";
  *   rate points at write contention (for example an auto-extraction worker and a
  *   manual write racing over the same vault), which quietly costs you the
  *   dedup that decision would have performed.
- */
-type ConsolidationFallbackReason = "llm_error" | "invalid_response" | "target_vanished";
+ * - `subject_mismatch` — NOT a fault. The model returned a well-formed
+ *   `supersede` and we refused it because the two subjects it named were
+ *   different people, so retiring the target would have hidden a memory that is
+ *   still true (#822 — "User's sister lives in Denver" retiring "User lives in
+ *   Denver"). The refusal is the feature; do not alarm on it. What the rate does
+ *   tell you is how often the model reaches for a cross-subject supersede, and —
+ *   because the guard is inert unless the model fills in its subject fields — a
+ *   rate of exactly zero is as likely to mean "the fields are being omitted" as
+ *   "the mistake never happens". Check compliance before reading zero as health.
+ */
+type ConsolidationFallbackReason = "llm_error" | "invalid_response" | "target_vanished"
+/**
+ * A `supersede` was downgraded to `create` because the model's own stated
+ * subjects disagreed: the new fact is about someone other than the fact it
+ * wanted to retire (#822 — "User's sister lives in Denver" retiring "User
+ * lives in Denver"). NOT an error; the decision was refused on purpose, and
+ * the refusal preserved a true memory. Retiring a superseded row hides it from
+ * recall, so this is the one fallback that prevents data loss rather than
+ * reporting degraded quality.
+ */
+ | "subject_mismatch";
 interface RetainOptions {
     source?: RetainSource;
     sourceChunkIds?: string[];
@@ -6854,6 +6875,12 @@ interface RetainOptions {
          * JSON that violates the schema (unknown action, bad targetId).
          * A flaky consolidator silently accumulates duplicate memories;
          * wire this to logging/metrics so the fallback rate is observable.
+         *
+         * `subject_mismatch` is the odd one out and worth reading separately: the
+         * model answered fine and we REFUSED its supersede because its own stated
+         * subjects disagreed (#822). A non-zero rate is the guard doing its job, not
+         * a problem — the rate to watch is how often it fires, which is also the
+         * only signal for how reliably the model fills the subject fields in at all.
          */
         onFallback?: (reason: ConsolidationFallbackReason) => void;
         /**

package/dist/react/index.mjs

@@ -173,7 +173,7 @@ import {
   isPiiRedactor,
   notifyConsolidationFallback,
   resolvePiiRedactor
-} from "./chunk-3NPDZZGO.mjs";
+} from "./chunk-VMI74IUX.mjs";
 import {
   callPortalJsonCompletion,
   consoleLogger,
@@ -7522,7 +7522,7 @@ async function tryConsolidate(trimmed, ctx, options, prepared) {
     content: m.content,
     similarity: m.similarity
   }));
-  const { consolidateMemory: doConsolidate } = await import("./consolidate-POPTUI54.mjs");
+  const { consolidateMemory: doConsolidate } = await import("./consolidate-AMPKH6YJ.mjs");
   const decision = await doConsolidate(trimmed, candidates, consolidateOptions);
   if (decision.action === "create") return null;
   if (decision.action === "supersede" && decision.content) {

package/dist/server/{chunk-RT75PNSJ.mjs → chunk-KF4HV3QE.mjs}

@@ -643,10 +643,16 @@ function createStreamingDeAnonymizer(redactor, emit) {
 
 // src/lib/memory/consolidationFallback.ts
 function notifyConsolidationFallback(reason, onFallback, detail) {
+  const refused = reason === "subject_mismatch";
+  const message = refused ? `memory/consolidate: refused a cross-subject supersede, created instead (${reason})` : `memory/consolidate: degraded to create (${reason})`;
+  const log = getLogger();
   if (detail !== void 0) {
-    getLogger().warn(`memory/consolidate: degraded to create (${reason})`, detail);
+    if (refused) log.info(message, detail);
+    else log.warn(message, detail);
+  } else if (refused) {
+    log.info(message);
   } else {
-    getLogger().warn(`memory/consolidate: degraded to create (${reason})`);
+    log.warn(message);
   }
   try {
     onFallback?.(reason);

package/dist/server/{consolidate-LMIDJFR6.mjs → consolidate-I6TOH7CB.mjs}

@@ -1,7 +1,7 @@
 import {
   notifyConsolidationFallback,
   resolvePiiRedactor
-} from "./chunk-RT75PNSJ.mjs";
+} from "./chunk-KF4HV3QE.mjs";
 import {
   callPortalJsonCompletion
 } from "./chunk-OBDRKQQI.mjs";
@@ -39,12 +39,15 @@ OUTPUT \u2014 strict JSON, no prose:
   "action": "create" | "update" | "supersede" | "noop",
   "targetId": "<existing memory id \u2014 required for update/noop, omit for create/supersede>",
   "targetIds": ["<id>", ...],
-  "content": "<content \u2014 required for create/update/supersede, omit for noop>"
+  "content": "<content \u2014 required for create/update/supersede, omit for noop>",
+  "newSubject": "<required for supersede: WHO the new memory is about>",
+  "targetSubject": "<required for supersede: WHO the memory in targetId is about>",
+  "targetSubjects": ["<required for supersede: WHO each memory you are retiring is about \u2014 one entry per retired id>"]
 }
 
 For "create": content is the new memory verbatim (or a slight refinement); omit targetId/targetIds.
 For "update": content is the merged richest-version, \u226480 words; targetId is the single memory to update.
-For "supersede": content is the NEW fact only (\u226480 words); "targetIds" lists EVERY stale memory being retired (all candidates describing the same now-changed attribute).
+For "supersede": content is the NEW fact only (\u226480 words); "targetIds" lists EVERY stale memory being retired (all candidates describing the same now-changed attribute). You MUST also name the subjects: "newSubject" for the new memory, and one entry in "targetSubjects" for EACH memory you are retiring (use "targetSubject" as well when you retire a single memory). List a subject ONLY for the memories you are actually retiring, not for every candidate you were shown. Write the plain subject, not a sentence: "the user", "the user's sister", "the user's manager", "Biscuit the dog". Rule 1a means a supersede is only valid when every one of those subjects is the SAME as "newSubject"; name them and check them against each other before you commit to the action. If ANY of them differs, the answer is "create" \u2014 do not retire the ones that match and keep the rest, because a group that mixes subjects was grouped wrongly in the first place. A subjectless fact ("Lives in Denver", "Works at Riverbend") is about "the user" \u2014 the extractor omits the subject when it is the user, so treat the absence of a subject as the user, never as unknown.
 For "noop": no content (existing memory is already correct); targetId is that memory.`;
 async function consolidateMemory(newContent, candidates, options) {
   const fallback = {
@@ -101,7 +104,13 @@ ${candidateText}`;
     if (restored.unresolved) {
       return degrade("invalid_response", fallback, options);
     }
-    return { ...result, content: restored.text };
+    return reportRefusal({ ...result, content: restored.text }, options);
+  }
+  return reportRefusal(result, options);
+}
+function reportRefusal(result, options) {
+  if (result.fallbackReason) {
+    notifyConsolidationFallback(result.fallbackReason, options.onFallback);
   }
   return result;
 }
@@ -109,6 +118,19 @@ function degrade(reason, fallback, options, detail) {
   notifyConsolidationFallback(reason, options.onFallback, detail);
   return { ...fallback, fallbackReason: reason };
 }
+function normalizeSubject(raw) {
+  if (typeof raw !== "string") return "";
+  let s = raw.trim().toLowerCase().replace(/[.,;:!?]+$/u, "").trim();
+  s = s.replace(/^the\s+/u, "");
+  s = s.replace(/^users'?\s+/u, "").replace(/^user's\s+/u, "");
+  return s.trim();
+}
+var USER_SUBJECT_ALIASES = /* @__PURE__ */ new Set(["user", "themselves", "themself", "they", "me", "self"]);
+function subjectKey(raw) {
+  const s = normalizeSubject(raw);
+  if (s.length === 0) return "";
+  return USER_SUBJECT_ALIASES.has(s) ? "user" : s;
+}
 function validate(parsed, newContent, validIds) {
   if (typeof parsed !== "object" || parsed === null) return null;
   const obj = parsed;
@@ -136,6 +158,18 @@ function validate(parsed, newContent, validIds) {
       ...new Set(rawIds.filter((id) => typeof id === "string" && validIds.has(id)))
     ];
     if (targetIds.length === 0) return null;
+    const newSubject = subjectKey(obj.newSubject);
+    if (newSubject.length > 0) {
+      const positional = Array.isArray(obj.targetSubjects) ? obj.targetSubjects : [];
+      const statedSubjects = [
+        ...positional.map((s) => subjectKey(s)),
+        // The singular pair, which is the whole story for a one-target supersede.
+        subjectKey(obj.targetSubject)
+      ];
+      if (statedSubjects.some((s) => s.length > 0 && s !== newSubject)) {
+        return { action: "create", content: c, fallbackReason: "subject_mismatch" };
+      }
+    }
     return { action: "supersede", targetId: targetIds[0], targetIds, content: c };
   }
   const targetId = typeof obj.targetId === "string" ? obj.targetId : null;

package/dist/server/index.cjs

@@ -23548,10 +23548,16 @@ var init_redactor = __esm({
 
 // src/lib/memory/consolidationFallback.ts
 function notifyConsolidationFallback(reason, onFallback, detail) {
+  const refused = reason === "subject_mismatch";
+  const message = refused ? `memory/consolidate: refused a cross-subject supersede, created instead (${reason})` : `memory/consolidate: degraded to create (${reason})`;
+  const log = getLogger();
   if (detail !== void 0) {
-    getLogger().warn(`memory/consolidate: degraded to create (${reason})`, detail);
+    if (refused) log.info(message, detail);
+    else log.warn(message, detail);
+  } else if (refused) {
+    log.info(message);
   } else {
-    getLogger().warn(`memory/consolidate: degraded to create (${reason})`);
+    log.warn(message);
   }
   try {
     onFallback?.(reason);
@@ -23626,7 +23632,13 @@ ${candidateText}`;
     if (restored.unresolved) {
       return degrade("invalid_response", fallback, options);
     }
-    return { ...result, content: restored.text };
+    return reportRefusal({ ...result, content: restored.text }, options);
+  }
+  return reportRefusal(result, options);
+}
+function reportRefusal(result, options) {
+  if (result.fallbackReason) {
+    notifyConsolidationFallback(result.fallbackReason, options.onFallback);
   }
   return result;
 }
@@ -23634,6 +23646,18 @@ function degrade(reason, fallback, options, detail) {
   notifyConsolidationFallback(reason, options.onFallback, detail);
   return { ...fallback, fallbackReason: reason };
 }
+function normalizeSubject(raw) {
+  if (typeof raw !== "string") return "";
+  let s = raw.trim().toLowerCase().replace(/[.,;:!?]+$/u, "").trim();
+  s = s.replace(/^the\s+/u, "");
+  s = s.replace(/^users'?\s+/u, "").replace(/^user's\s+/u, "");
+  return s.trim();
+}
+function subjectKey(raw) {
+  const s = normalizeSubject(raw);
+  if (s.length === 0) return "";
+  return USER_SUBJECT_ALIASES.has(s) ? "user" : s;
+}
 function validate2(parsed, newContent, validIds) {
   if (typeof parsed !== "object" || parsed === null) return null;
   const obj = parsed;
@@ -23661,13 +23685,25 @@ function validate2(parsed, newContent, validIds) {
       ...new Set(rawIds.filter((id) => typeof id === "string" && validIds.has(id)))
     ];
     if (targetIds.length === 0) return null;
+    const newSubject = subjectKey(obj.newSubject);
+    if (newSubject.length > 0) {
+      const positional = Array.isArray(obj.targetSubjects) ? obj.targetSubjects : [];
+      const statedSubjects = [
+        ...positional.map((s) => subjectKey(s)),
+        // The singular pair, which is the whole story for a one-target supersede.
+        subjectKey(obj.targetSubject)
+      ];
+      if (statedSubjects.some((s) => s.length > 0 && s !== newSubject)) {
+        return { action: "create", content: c, fallbackReason: "subject_mismatch" };
+      }
+    }
     return { action: "supersede", targetId: targetIds[0], targetIds, content: c };
   }
   const targetId = typeof obj.targetId === "string" ? obj.targetId : null;
   if (!targetId || !validIds.has(targetId)) return null;
   return { action: "update", targetId, content: c };
 }
-var DEFAULT_CONSOLIDATION_MODEL, DEFAULT_CONSOLIDATE_ATTEMPTS, DEFAULT_CONSOLIDATE_TOTAL_TIMEOUT_MS, SYSTEM_PROMPT3;
+var DEFAULT_CONSOLIDATION_MODEL, DEFAULT_CONSOLIDATE_ATTEMPTS, DEFAULT_CONSOLIDATE_TOTAL_TIMEOUT_MS, SYSTEM_PROMPT3, USER_SUBJECT_ALIASES;
 var init_consolidate = __esm({
   "src/lib/memory/consolidate.ts"() {
     "use strict";
@@ -23705,13 +23741,17 @@ OUTPUT \u2014 strict JSON, no prose:
   "action": "create" | "update" | "supersede" | "noop",
   "targetId": "<existing memory id \u2014 required for update/noop, omit for create/supersede>",
   "targetIds": ["<id>", ...],
-  "content": "<content \u2014 required for create/update/supersede, omit for noop>"
+  "content": "<content \u2014 required for create/update/supersede, omit for noop>",
+  "newSubject": "<required for supersede: WHO the new memory is about>",
+  "targetSubject": "<required for supersede: WHO the memory in targetId is about>",
+  "targetSubjects": ["<required for supersede: WHO each memory you are retiring is about \u2014 one entry per retired id>"]
 }
 
 For "create": content is the new memory verbatim (or a slight refinement); omit targetId/targetIds.
 For "update": content is the merged richest-version, \u226480 words; targetId is the single memory to update.
-For "supersede": content is the NEW fact only (\u226480 words); "targetIds" lists EVERY stale memory being retired (all candidates describing the same now-changed attribute).
+For "supersede": content is the NEW fact only (\u226480 words); "targetIds" lists EVERY stale memory being retired (all candidates describing the same now-changed attribute). You MUST also name the subjects: "newSubject" for the new memory, and one entry in "targetSubjects" for EACH memory you are retiring (use "targetSubject" as well when you retire a single memory). List a subject ONLY for the memories you are actually retiring, not for every candidate you were shown. Write the plain subject, not a sentence: "the user", "the user's sister", "the user's manager", "Biscuit the dog". Rule 1a means a supersede is only valid when every one of those subjects is the SAME as "newSubject"; name them and check them against each other before you commit to the action. If ANY of them differs, the answer is "create" \u2014 do not retire the ones that match and keep the rest, because a group that mixes subjects was grouped wrongly in the first place. A subjectless fact ("Lives in Denver", "Works at Riverbend") is about "the user" \u2014 the extractor omits the subject when it is the user, so treat the absence of a subject as the user, never as unknown.
 For "noop": no content (existing memory is already correct); targetId is that memory.`;
+    USER_SUBJECT_ALIASES = /* @__PURE__ */ new Set(["user", "themselves", "themself", "they", "me", "self"]);
   }
 });
 

package/dist/server/index.d.mts

@@ -5469,9 +5469,9 @@ interface RecallDiagnostics {
 type RetainAction = "create" | "merge" | "update" | "skip" | "suppressed" | "supersede";
 type RetainSource = "manual" | "auto-extracted" | "capsule";
 /**
- * Why a retain fell back to "create" instead of applying a consolidation
- * decision. Each value names a DIFFERENT thing to go fix, which is the point of
- * keeping them apart:
+ * Why a retain returned "create" instead of applying a consolidation decision.
+ * Each value names a DIFFERENT thing to go fix, which is the point of keeping
+ * them apart — and one of them is not a fault at all, see `subject_mismatch`:
  *
  * - `llm_error` — the consolidation call never produced a response (network,
  *   timeout, 5xx, 429, empty completion, or missing credentials). Look at the
@@ -5486,8 +5486,27 @@ type RetainSource = "manual" | "auto-extracted" | "capsule";
  *   rate points at write contention (for example an auto-extraction worker and a
  *   manual write racing over the same vault), which quietly costs you the
  *   dedup that decision would have performed.
- */
-type ConsolidationFallbackReason = "llm_error" | "invalid_response" | "target_vanished";
+ * - `subject_mismatch` — NOT a fault. The model returned a well-formed
+ *   `supersede` and we refused it because the two subjects it named were
+ *   different people, so retiring the target would have hidden a memory that is
+ *   still true (#822 — "User's sister lives in Denver" retiring "User lives in
+ *   Denver"). The refusal is the feature; do not alarm on it. What the rate does
+ *   tell you is how often the model reaches for a cross-subject supersede, and —
+ *   because the guard is inert unless the model fills in its subject fields — a
+ *   rate of exactly zero is as likely to mean "the fields are being omitted" as
+ *   "the mistake never happens". Check compliance before reading zero as health.
+ */
+type ConsolidationFallbackReason = "llm_error" | "invalid_response" | "target_vanished"
+/**
+ * A `supersede` was downgraded to `create` because the model's own stated
+ * subjects disagreed: the new fact is about someone other than the fact it
+ * wanted to retire (#822 — "User's sister lives in Denver" retiring "User
+ * lives in Denver"). NOT an error; the decision was refused on purpose, and
+ * the refusal preserved a true memory. Retiring a superseded row hides it from
+ * recall, so this is the one fallback that prevents data loss rather than
+ * reporting degraded quality.
+ */
+ | "subject_mismatch";
 interface RetainOptions {
     source?: RetainSource;
     sourceChunkIds?: string[];
@@ -5523,6 +5542,12 @@ interface RetainOptions {
          * JSON that violates the schema (unknown action, bad targetId).
          * A flaky consolidator silently accumulates duplicate memories;
          * wire this to logging/metrics so the fallback rate is observable.
+         *
+         * `subject_mismatch` is the odd one out and worth reading separately: the
+         * model answered fine and we REFUSED its supersede because its own stated
+         * subjects disagreed (#822). A non-zero rate is the guard doing its job, not
+         * a problem — the rate to watch is how often it fires, which is also the
+         * only signal for how reliably the model fills the subject fields in at all.
          */
         onFallback?: (reason: ConsolidationFallbackReason) => void;
         /**

package/dist/server/index.d.ts

@@ -5469,9 +5469,9 @@ interface RecallDiagnostics {
 type RetainAction = "create" | "merge" | "update" | "skip" | "suppressed" | "supersede";
 type RetainSource = "manual" | "auto-extracted" | "capsule";
 /**
- * Why a retain fell back to "create" instead of applying a consolidation
- * decision. Each value names a DIFFERENT thing to go fix, which is the point of
- * keeping them apart:
+ * Why a retain returned "create" instead of applying a consolidation decision.
+ * Each value names a DIFFERENT thing to go fix, which is the point of keeping
+ * them apart — and one of them is not a fault at all, see `subject_mismatch`:
  *
  * - `llm_error` — the consolidation call never produced a response (network,
  *   timeout, 5xx, 429, empty completion, or missing credentials). Look at the
@@ -5486,8 +5486,27 @@ type RetainSource = "manual" | "auto-extracted" | "capsule";
  *   rate points at write contention (for example an auto-extraction worker and a
  *   manual write racing over the same vault), which quietly costs you the
  *   dedup that decision would have performed.
- */
-type ConsolidationFallbackReason = "llm_error" | "invalid_response" | "target_vanished";
+ * - `subject_mismatch` — NOT a fault. The model returned a well-formed
+ *   `supersede` and we refused it because the two subjects it named were
+ *   different people, so retiring the target would have hidden a memory that is
+ *   still true (#822 — "User's sister lives in Denver" retiring "User lives in
+ *   Denver"). The refusal is the feature; do not alarm on it. What the rate does
+ *   tell you is how often the model reaches for a cross-subject supersede, and —
+ *   because the guard is inert unless the model fills in its subject fields — a
+ *   rate of exactly zero is as likely to mean "the fields are being omitted" as
+ *   "the mistake never happens". Check compliance before reading zero as health.
+ */
+type ConsolidationFallbackReason = "llm_error" | "invalid_response" | "target_vanished"
+/**
+ * A `supersede` was downgraded to `create` because the model's own stated
+ * subjects disagreed: the new fact is about someone other than the fact it
+ * wanted to retire (#822 — "User's sister lives in Denver" retiring "User
+ * lives in Denver"). NOT an error; the decision was refused on purpose, and
+ * the refusal preserved a true memory. Retiring a superseded row hides it from
+ * recall, so this is the one fallback that prevents data loss rather than
+ * reporting degraded quality.
+ */
+ | "subject_mismatch";
 interface RetainOptions {
     source?: RetainSource;
     sourceChunkIds?: string[];
@@ -5523,6 +5542,12 @@ interface RetainOptions {
          * JSON that violates the schema (unknown action, bad targetId).
          * A flaky consolidator silently accumulates duplicate memories;
          * wire this to logging/metrics so the fallback rate is observable.
+         *
+         * `subject_mismatch` is the odd one out and worth reading separately: the
+         * model answered fine and we REFUSED its supersede because its own stated
+         * subjects disagreed (#822). A non-zero rate is the guard doing its job, not
+         * a problem — the rate to watch is how often it fires, which is also the
+         * only signal for how reliably the model fills the subject fields in at all.
          */
         onFallback?: (reason: ConsolidationFallbackReason) => void;
         /**

package/dist/server/index.mjs

@@ -142,7 +142,7 @@ import {
   createStreamingDeAnonymizer,
   notifyConsolidationFallback,
   resolvePiiRedactor
-} from "./chunk-RT75PNSJ.mjs";
+} from "./chunk-KF4HV3QE.mjs";
 import {
   callPortalJsonCompletion,
   extractJsonCandidate,
@@ -5503,7 +5503,7 @@ async function tryConsolidate(trimmed, ctx, options, prepared) {
     content: m.content,
     similarity: m.similarity
   }));
-  const { consolidateMemory: doConsolidate } = await import("./consolidate-LMIDJFR6.mjs");
+  const { consolidateMemory: doConsolidate } = await import("./consolidate-I6TOH7CB.mjs");
   const decision = await doConsolidate(trimmed, candidates, consolidateOptions);
   if (decision.action === "create") return null;
   if (decision.action === "supersede" && decision.content) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@anuma/sdk",
-  "version": "5.1.1",
+  "version": "6.0.0",
   "description": "",
   "main": "./dist/index.cjs",
   "module": "./dist/index.mjs",