@anuma/sdk 6.11.0 → 6.12.1

package/dist/react/index.cjs

@@ -7148,6 +7148,9 @@ async function decomposeQuery(query, options) {
       ...options.baseUrl !== void 0 && { baseUrl: options.baseUrl },
       model: options.model ?? DEFAULT_MODEL2,
       systemPrompt: SYSTEM_PROMPT2,
+      // The query itself rides the user turn below, so SYSTEM_PROMPT is the whole
+      // fixed instruction — which is what lets the portal own it outright.
+      taskType: "memory_decompose",
       // Wrap the bare query in a task framing so the model treats it as
       // input to classify, not as a question to answer conversationally.
       // Bare-query inputs caused Anthropic models to respond with prose
@@ -7491,24 +7494,19 @@ function createLlmNeighborRefiner(options) {
     async refine(query, candidates, limit) {
       if (candidates.length === 0) return [];
       const numbered = candidates.map((name, i) => `[${i + 1}] ${name}`).join("\n");
-      const systemPrompt = `You help a memory-retrieval system decide which related topics to explore.
-
-Given a user's question and a numbered list of candidate topics/entities linked to memories found so far, pick the ones most likely to lead to memories that help ANSWER the question. Choose at most ${limit}. Prefer topics semantically related to the question; ignore incidental ones.
-
-Output strict JSON, no prose: { "expand": [<entity names to expand, verbatim from the list>] }`;
       const parsed = await callPortalJsonCompletion({
         ...options.apiKey !== void 0 && { apiKey: options.apiKey },
         ...options.getToken !== void 0 && { getToken: options.getToken },
         ...options.baseUrl !== void 0 && { baseUrl: options.baseUrl },
         taskType: "memory_graph",
         model: options.model ?? DEFAULT_REFINER_MODEL,
-        systemPrompt,
+        systemPrompt: REFINER_SYSTEM_PROMPT,
         userMessage: `Question: ${query}
 
 Candidate topics:
 ${numbered}
 
-Which should be expanded?`,
+Which should be expanded? Choose at most ${limit}.`,
         tag: "memory/graph-refine",
         maxAttempts: options.maxAttempts ?? DEFAULT_REFINER_ATTEMPTS,
         totalTimeoutMs: options.totalTimeoutMs ?? DEFAULT_REFINER_TOTAL_TIMEOUT_MS,
@@ -7529,7 +7527,7 @@ Which should be expanded?`,
     }
   };
 }
-var MAX_HOPS, ENTITY_FANOUT, MIN_REFINER_CANDIDATES, MAX_REFINER_CANDIDATES, NODE_BUDGET, VAULT_SIZE_HOP_CAP, DEFAULT_REFINER_MODEL, DEFAULT_REFINER_ATTEMPTS, DEFAULT_REFINER_TOTAL_TIMEOUT_MS;
+var MAX_HOPS, ENTITY_FANOUT, MIN_REFINER_CANDIDATES, MAX_REFINER_CANDIDATES, NODE_BUDGET, VAULT_SIZE_HOP_CAP, DEFAULT_REFINER_MODEL, DEFAULT_REFINER_ATTEMPTS, DEFAULT_REFINER_TOTAL_TIMEOUT_MS, REFINER_SYSTEM_PROMPT;
 var init_graphTraversal = __esm({
   "src/lib/memory/graphTraversal.ts"() {
     "use strict";
@@ -7548,6 +7546,11 @@ var init_graphTraversal = __esm({
     DEFAULT_REFINER_MODEL = "inclusionai/ling-2.6-flash";
     DEFAULT_REFINER_ATTEMPTS = 1;
     DEFAULT_REFINER_TOTAL_TIMEOUT_MS = 8e3;
+    REFINER_SYSTEM_PROMPT = `You help a memory-retrieval system decide which related topics to explore.
+
+Given a user's question and a numbered list of candidate topics/entities linked to memories found so far, pick the ones most likely to lead to memories that help ANSWER the question. Never return more than the maximum the user turn asks for. Prefer topics semantically related to the question; ignore incidental ones.
+
+Output strict JSON, no prose: { "expand": [<entity names to expand, verbatim from the list>] }`;
   }
 });
 
@@ -19038,6 +19041,7 @@ ${TRUNCATION_NOTICE}` : formatted;
 // src/lib/memory/reflect.ts
 init_clientConfig();
 init_logger();
+init_taskType();
 init_portalLlm();
 init_recall();
 var DEFAULT_BASE_URL2 = BASE_URL;
@@ -19083,11 +19087,13 @@ Respond with ONLY a single JSON object conforming to this JSON Schema, with no p
 ${JSON.stringify(
     options.responseSchema
   )}` : basePrompt;
-  const userMessage = `Question:
-${trimmed}
-
-Memories (use only these as evidence):
-${evidence}`;
+  const userMessage = [
+    `Question:
+${trimmed}`,
+    ...options.userInstructions ? [options.userInstructions] : [],
+    `Memories (use only these as evidence):
+${evidence}`
+  ].join("\n\n");
   const maxTokens = options.maxTokens ?? DEFAULT_MAX_TOKENS;
   const fetchImpl = options.fetchFn ?? fetch;
   const log = getLogger();
@@ -19101,7 +19107,13 @@ ${evidence}`;
   try {
     response = await fetchImpl(`${baseUrl}/api/v1/chat/completions`, {
       method: "POST",
-      headers: { ...authHeaders, "Content-Type": "application/json" },
+      // No task type unless the caller named one — an undeclared task adds no
+      // header at all, which is what keeps user-facing reflect() unlabelled.
+      headers: {
+        ...authHeaders,
+        ...taskTypeHeader(options.taskType),
+        "Content-Type": "application/json"
+      },
       body: JSON.stringify({
         model,
         // Modern OpenAI field; the portal reads only `max_completion_tokens`
@@ -19553,10 +19565,15 @@ async function synthesizeFacet(facet, ctx, options, prior) {
     limit,
     types: ["fact"],
     maxTokens: DEFAULT_FACET_MAX_TOKENS,
-    // Profile-facet synthesis is a background op, so it marks its own prompt.
-    // reflect() itself must NOT mark — it also serves the user's own questions,
-    // and that traffic is chat, not an internal flow. See ../internalFlowMarker.
-    systemPrompt: withInternalFlowMarker(buildFacetSystemPrompt(facet)),
+    // Profile-facet synthesis is a background op, so it marks its own prompt AND
+    // names its own task. reflect() itself must do neither — it also serves the
+    // user's own questions, and that traffic is chat, not an internal flow. See
+    // ../internalFlowMarker and ReflectOptions.taskType.
+    taskType: "memory_profile_synth",
+    systemPrompt: withInternalFlowMarker(FACET_SYSTEM_PROMPT),
+    // The facet's label/guidance/response-fields, on the user turn — what keeps
+    // the system half fixed and therefore server-ownable.
+    userInstructions: buildFacetUserInstructions(facet),
     responseSchema: facetResponseSchema(facet.key),
     memories
   });
@@ -19614,19 +19631,22 @@ function fallbackSection(facet, prior) {
     stale: true
   };
 }
-function buildFacetSystemPrompt(facet) {
-  const structuredField = FACET_STRUCTURED_RESPONSE_HINT[facet.key] ?? "";
-  return `You are writing the "${facet.label}" section of a person's shareable profile, using their private memories (supplied as evidence) as the only source of truth.
-
-Task for this section:
-${facet.guidance}
+var FACET_SYSTEM_PROMPT = `You are writing one section of a person's shareable profile, using their private memories (supplied as evidence) as the only source of truth. The user turn names the section, states the task for it, and gives the exact JSON shape to respond in.
 
 Rules:
 - Ground every claim in the supplied memories \u2014 never invent, infer beyond, or embellish what they support.
 - If the memories don't cover this section, return an empty summary with hasEvidence=false. Do not pad or guess.
 - Write in third person about the person, in a natural voice suitable for a public profile (no "I"/"you", no name repetition).
 - Be concise and specific; no preamble, hedging, or meta-commentary.
-- Respond as JSON: { "summary": <the section text, or "">, "hasEvidence": <true|false>${structuredField} }.`;
+- Respond as JSON in exactly the shape the user turn states, with no extra fields.`;
+function buildFacetUserInstructions(facet) {
+  const structuredField = FACET_STRUCTURED_RESPONSE_HINT[facet.key] ?? "";
+  return `Section: "${facet.label}"
+
+Task for this section:
+${facet.guidance}
+
+Respond as JSON: { "summary": <the section text, or "">, "hasEvidence": <true|false>${structuredField} }.`;
 }
 function extractFacetText(structured) {
   if (structured && typeof structured === "object") {
@@ -21680,6 +21700,20 @@ function clientToolToCompletionsFormat(tool) {
 }
 var TOOL_SEARCH_TOOL_TYPE = "tool_search_tool_regex_20251119";
 var TOOL_SEARCH_TOOL_NAME = "tool_search_tool_regex";
+function resolveDeferredServerTools(allServerTools, serverToolsFilter, config) {
+  const allowed = serverToolsFilter === void 0 || typeof serverToolsFilter === "function" ? allServerTools : filterServerTools(allServerTools, [...serverToolsFilter]);
+  const excluded = new Set(config.excludeTools ?? []);
+  if (typeof serverToolsFilter === "function") {
+    for (const name of serverToolsFilter.excludeTools ?? []) excluded.add(name);
+  }
+  if (excluded.size === 0) return allowed;
+  return allowed.filter((tool) => !excluded.has(tool.name));
+}
+function deferFormattingConfig(serverToolsFilter, config) {
+  if (!config?.enabled) return config;
+  const isExplicitList = serverToolsFilter !== void 0 && typeof serverToolsFilter !== "function";
+  return isExplicitList ? void 0 : config;
+}
 function byNameAscending(a, b) {
   if (a.name < b.name) return -1;
   if (a.name > b.name) return 1;
@@ -22006,7 +22040,7 @@ function createServerToolsFilter(options = {}) {
   const exclude = new Set(options.excludeTools ?? []);
   const sets = options.toolSets ?? [];
   const matchOpts = options.matchOptions;
-  return (embeddings, tools) => {
+  const filter = (embeddings, tools) => {
     const matches = findMatchingTools(embeddings, tools, matchOpts);
     if (matches.length === 0) return [];
     const matchedNames = new Set(matches.map((m) => m.tool.name));
@@ -22024,6 +22058,10 @@ function createServerToolsFilter(options = {}) {
     for (const name of exclude) finalNames.delete(name);
     return [...finalNames];
   };
+  return Object.defineProperty(filter, "excludeTools", {
+    value: Object.freeze([...exclude]),
+    enumerable: false
+  });
 }
 var DEFAULT_EXCLUDED_SERVER_TOOLS = [
   "AnumaVisionMCP-anuma_analyze_image",
@@ -22105,7 +22143,8 @@ async function selectServerToolsForPrompt(options) {
     return [];
   }
   if (allServerTools.length === 0) return [];
-  if (deferLoading?.enabled) return allServerTools;
+  if (deferLoading?.enabled)
+    return resolveDeferredServerTools(allServerTools, serverToolsFilter, deferLoading);
   if (typeof serverToolsFilter === "function") {
     if (prompt.length < MIN_CONTENT_LENGTH_FOR_TOOLS) return [];
     let promptEmbedding;
@@ -22536,7 +22575,8 @@ async function previewToolSelection(options) {
           cache: serverToolsConfig?.cache
         });
         const allow = new Set(serverToolsFilter);
-        gatedServerNames = allServerTools.filter((t) => allow.has(t.name)).map((t) => t.name);
+        const gated = allServerTools.filter((t) => allow.has(t.name));
+        gatedServerNames = (serverToolsConfig?.deferLoading?.enabled ? resolveDeferredServerTools(gated, serverToolsFilter, serverToolsConfig.deferLoading) : gated).map((t) => t.name);
       } catch {
       }
     }
@@ -22585,7 +22625,11 @@ async function previewToolSelection(options) {
         cache: serverToolsConfig?.cache
       });
       if (serverToolsConfig?.deferLoading?.enabled) {
-        serverToolNames = allServerTools.map((t) => t.name);
+        serverToolNames = resolveDeferredServerTools(
+          allServerTools,
+          serverToolsFilter,
+          serverToolsConfig.deferLoading
+        ).map((t) => t.name);
       } else if (typeof serverToolsFilter === "function") {
         serverToolNames = serverToolsFilter(promptEmbedding, allServerTools);
       } else {
@@ -23601,7 +23645,11 @@ function useChatStorage(options) {
               cache: serverToolsConfig?.cache
             });
             if (serverToolsConfig?.deferLoading?.enabled) {
-              filteredServerTools2 = allServerTools;
+              filteredServerTools2 = resolveDeferredServerTools(
+                allServerTools,
+                serverToolsFilter,
+                serverToolsConfig.deferLoading
+              );
             } else if (isServerToolsFunction2) {
               if (skipStorageEmbeddings) {
                 const toolNames = serverToolsFilter(skipStorageEmbeddings, allServerTools);
@@ -23642,7 +23690,7 @@ function useChatStorage(options) {
             filteredServerTools2,
             filteredClientTools2,
             effectiveApiType2,
-            serverToolsConfig?.deferLoading
+            deferFormattingConfig(serverToolsFilter, serverToolsConfig?.deferLoading)
           );
         }
         if (onToolSelection) {
@@ -24001,7 +24049,11 @@ function useChatStorage(options) {
         if (allServerTools) {
           try {
             if (serverToolsConfig?.deferLoading?.enabled && effectiveApiType === "responses") {
-              filteredServerTools = allServerTools;
+              filteredServerTools = resolveDeferredServerTools(
+                allServerTools,
+                serverToolsFilter,
+                serverToolsConfig.deferLoading
+              );
             } else if (isServerToolsFunction) {
               if (userMessageEmbeddings) {
                 const toolNames = serverToolsFilter(userMessageEmbeddings, allServerTools);
@@ -24081,7 +24133,7 @@ function useChatStorage(options) {
           filteredServerTools,
           filteredClientTools,
           effectiveApiType,
-          serverToolsConfig?.deferLoading
+          deferFormattingConfig(serverToolsFilter, serverToolsConfig?.deferLoading)
         );
       }
       if (onToolSelection) {

package/dist/react/index.d.mts

@@ -4465,6 +4465,22 @@ interface DeferLoadingConfig {
     enabled: boolean;
     /** Server-tool names to keep non-deferred (besides the tool-search tool), in priority order. */
     hotToolNames: readonly string[];
+    /**
+     * Server-tool names to drop entirely while defer-loading is on.
+     *
+     * Defer widens the per-turn selection to the whole catalog, which also bypasses the `excludeTools`
+     * baked into a caller's semantic filter. A filter built by {@link createServerToolsFilter} tags itself
+     * with its own exclusions and those are honoured automatically — so most callers need nothing here.
+     *
+     * Set this when the filter's tag can't be seen: a hand-written filter, a filter wrapped in a plain
+     * closure (the wrapper drops the tag), or a static-array `serverToolsFilter`. Anything excluded
+     * UNCONDITIONALLY (a tool the app replaces with its own UI, a capability the model already has
+     * natively) belongs in one of the two places, or defer quietly hands it back to the model.
+     *
+     * This list is UNIONED with the filter's own tag, never a replacement for it — so adding one name
+     * here cannot re-admit the tools the filter already excludes.
+     */
+    excludeTools?: readonly string[];
 }
 /**
  * Result of tool matching with similarity score
@@ -4642,7 +4658,7 @@ interface CreateServerToolsFilterOptions {
  * });
  * ```
  */
-declare function createServerToolsFilter(options?: CreateServerToolsFilterOptions): (embeddings: number[] | number[][], tools: ServerTool[]) => string[];
+declare function createServerToolsFilter(options?: CreateServerToolsFilterOptions): ServerToolsFilterFunction;
 /**
  * Default exclusions baked into `defaultServerToolsFilter`.
  *
@@ -4708,13 +4724,21 @@ declare const SERVER_TOOL_DEPENDENCY_SETS: ToolSet[];
  * If you need to customize (extra excludes, different limits, opt into
  * tool-set expansion), call `createServerToolsFilter` directly.
  */
-declare const defaultServerToolsFilter: (embeddings: number[] | number[][], tools: ServerTool[]) => string[];
+declare const defaultServerToolsFilter: ServerToolsFilterFunction;
 /**
  * Type for a server-tools filter — a function that takes prompt embeddings
  * and the full server tool catalog and returns the names of tools to keep.
  * Matches `useChatStorage`'s `serverTools` callback signature.
  */
-type ServerToolsFilterFunction = (embeddings: number[] | number[][], tools: ServerTool[]) => string[];
+type ServerToolsFilterFunction = ((embeddings: number[] | number[][], tools: ServerTool[]) => string[]) & {
+    /**
+     * The unconditional exclusions this filter applies, exposed by
+     * {@link createServerToolsFilter} so defer-loading can honour them without the caller
+     * repeating the list — see {@link resolveDeferredServerTools}. Absent on a hand-written
+     * filter, or on one wrapped in a plain closure.
+     */
+    readonly excludeTools?: readonly string[];
+};
 /**
  * Options for `selectServerToolsForPrompt`.
  */
@@ -4742,9 +4766,10 @@ interface SelectServerToolsForPromptOptions {
      */
     cache?: ToolsCacheBackend;
     /**
-     * Phase 3 defer-loading. When `enabled`, this helper returns the FULL catalog (skipping semantic/
-     * static filtering) to mirror useChatStorage's responses send path, which swaps in the full catalog
-     * for mergeTools + tool-search. Omit/disabled → today's filtered selection.
+     * Phase 3 defer-loading. When `enabled`, this helper skips SEMANTIC filtering to mirror
+     * useChatStorage's responses send path, which hands the catalog to mergeTools + tool-search. The
+     * caller's unconditional constraints still apply — an explicit static array, and exclusions (see
+     * {@link resolveDeferredServerTools}). Omit/disabled → today's filtered selection.
      */
     deferLoading?: DeferLoadingConfig;
 }
@@ -6140,6 +6165,51 @@ declare function getMemoriesByEntityNamesOp(ctx: EntityOperationsContext, entity
  */
 declare function getEntitiesByMemoryIdsOp(ctx: EntityOperationsContext, memoryIds: readonly string[]): Promise<Map<string, Set<string>>>;
 
+/**
+ * Class-B task types — the vocabulary of the `X-Anuma-Task-Type` header.
+ *
+ * A Class-B flow has ONE fixed purpose and no conversation: extract memories
+ * from a snippet, pick a topic, consolidate duplicates, classify a query. Today
+ * each of those builds its own system prompt on the client and sends it as a
+ * `role:system` message, which makes the prompt a suggestion rather than a
+ * contract — a caller can reword it into "you are a general assistant" and get
+ * general chat at internal-endpoint prices.
+ *
+ * The fix is that the SERVER owns the text and the client only names the task.
+ * This header is the name. The portal allowlists it against its own copy of this
+ * enum (ai-portal `internal/systemprompt/tasks.go`) and DROPS anything it does
+ * not recognise, so an unknown value degrades to "no task declared" rather than
+ * failing the request.
+ *
+ * ⚠ These string values are a wire contract with ai-portal. Adding one here
+ * before the portal knows it is harmless (it is dropped); renaming or removing
+ * one silently stops that flow being counted. Keep them in step with
+ * `AllTaskTypes` on the portal side, and see ai-portal
+ * `docs/BACKEND_OWNED_TASK_PROMPTS.md` for the rollout.
+ *
+ * ⚠ RELEASE ORDER. This union is a PUBLIC type, so a split is breaking in both
+ * directions and has to be sequenced:
+ *
+ *   1. merge + publish this package;
+ *   2. bump `@anuma/sdk` in the consumer and switch its call sites to the new
+ *      names in the same commit.
+ *
+ * A consumer on the OLD version cannot compile the new names, and a consumer on
+ * the NEW version cannot compile the retired ones (`app_inspiration` is gone
+ * here, replaced by the three `app_inspiration_*` names). Both halves of that
+ * are type-only — the wire itself always degrades safely, because the portal
+ * drops any value it does not recognise. Concretely: ai-memoryless-client#5782
+ * is blocked on this publish for exactly that reason.
+ *
+ * Deliberately ABSENT: agent personas, `reflect()` when it answers the user, and
+ * the app-idea chat. Those carry an open conversation with the user, so a fixed
+ * server-owned prompt would be wrong rather than merely premature — the same
+ * boundary {@link INTERNAL_FLOW_MARKER} draws.
+ *
+ * @public
+ */
+type TaskType = "title" | "commit_message" | "memory_extract" | "memory_dedup" | "memory_decay" | "memory_injection_check" | "memory_verify_support" | "memory_autosort" | "memory_topic" | "memory_consolidate" | "memory_decompose" | "memory_profile_synth" | "memory_graph" | "folder_context" | "selection_memory" | "summarize" | "style_analysis" | "classify_search" | "app_inspiration_generate" | "app_inspiration_trends" | "app_inspiration_remix" | "spotlight_image" | "slide_image" | "slide_video" | "slide_music" | "slide_sfx" | "media_video" | "media_audio" | "media_bg_removal" | "media_image_preset" | "tool_app_builder" | "tool_document_builder" | "tool_slides" | "tool_slides_image_gen" | "connector_guidance" | "cf_task" | "xbot_intent" | "xbot_council" | "scheduled_task";
+
 /**
  * Shared portal LLM call for the memory pipeline.
  *
@@ -9390,6 +9460,28 @@ interface ReflectOptions extends RecallOptions, PortalLlmAuth {
     maxTokens?: number;
     /** Override the grounding system prompt. */
     systemPrompt?: string;
+    /**
+     * Extra caller instruction to carry on the USER turn, between the question and
+     * the evidence block (see the `userMessage` assembly below). This is the slot a
+     * background caller uses to keep its per-request data OUT of the system message
+     * without colliding with the numbered evidence list — profile-facet synthesis
+     * puts its section label, guidance and response-field hint here so its system
+     * half can stay fixed and server-ownable.
+     */
+    userInstructions?: string;
+    /**
+     * Class-B task name for the `X-Anuma-Task-Type` header, or nothing.
+     *
+     * Deliberately OPTIONAL and unset by default. reflect() also answers the user's
+     * OWN question, and that traffic is chat, not an internal flow — declaring a
+     * task type unconditionally here would put an internal-flow name on real
+     * conversation, which is the same boundary `INTERNAL_FLOW_MARKER` draws
+     * (reflect is deliberately unmarked; its background caller marks its own
+     * prompt — see ../internalFlowMarker.ts). So the name is per call: only a
+     * caller with ONE fixed purpose passes
+     * one, and today that is profile-facet synthesis (`memory_profile_synth`).
+     */
+    taskType?: TaskType;
     /** Endpoint for the answer LLM. */
     baseUrl?: string;
     /** Override fetch (for tests). */

package/dist/react/index.d.ts

@@ -4465,6 +4465,22 @@ interface DeferLoadingConfig {
     enabled: boolean;
     /** Server-tool names to keep non-deferred (besides the tool-search tool), in priority order. */
     hotToolNames: readonly string[];
+    /**
+     * Server-tool names to drop entirely while defer-loading is on.
+     *
+     * Defer widens the per-turn selection to the whole catalog, which also bypasses the `excludeTools`
+     * baked into a caller's semantic filter. A filter built by {@link createServerToolsFilter} tags itself
+     * with its own exclusions and those are honoured automatically — so most callers need nothing here.
+     *
+     * Set this when the filter's tag can't be seen: a hand-written filter, a filter wrapped in a plain
+     * closure (the wrapper drops the tag), or a static-array `serverToolsFilter`. Anything excluded
+     * UNCONDITIONALLY (a tool the app replaces with its own UI, a capability the model already has
+     * natively) belongs in one of the two places, or defer quietly hands it back to the model.
+     *
+     * This list is UNIONED with the filter's own tag, never a replacement for it — so adding one name
+     * here cannot re-admit the tools the filter already excludes.
+     */
+    excludeTools?: readonly string[];
 }
 /**
  * Result of tool matching with similarity score
@@ -4642,7 +4658,7 @@ interface CreateServerToolsFilterOptions {
  * });
  * ```
  */
-declare function createServerToolsFilter(options?: CreateServerToolsFilterOptions): (embeddings: number[] | number[][], tools: ServerTool[]) => string[];
+declare function createServerToolsFilter(options?: CreateServerToolsFilterOptions): ServerToolsFilterFunction;
 /**
  * Default exclusions baked into `defaultServerToolsFilter`.
  *
@@ -4708,13 +4724,21 @@ declare const SERVER_TOOL_DEPENDENCY_SETS: ToolSet[];
  * If you need to customize (extra excludes, different limits, opt into
  * tool-set expansion), call `createServerToolsFilter` directly.
  */
-declare const defaultServerToolsFilter: (embeddings: number[] | number[][], tools: ServerTool[]) => string[];
+declare const defaultServerToolsFilter: ServerToolsFilterFunction;
 /**
  * Type for a server-tools filter — a function that takes prompt embeddings
  * and the full server tool catalog and returns the names of tools to keep.
  * Matches `useChatStorage`'s `serverTools` callback signature.
  */
-type ServerToolsFilterFunction = (embeddings: number[] | number[][], tools: ServerTool[]) => string[];
+type ServerToolsFilterFunction = ((embeddings: number[] | number[][], tools: ServerTool[]) => string[]) & {
+    /**
+     * The unconditional exclusions this filter applies, exposed by
+     * {@link createServerToolsFilter} so defer-loading can honour them without the caller
+     * repeating the list — see {@link resolveDeferredServerTools}. Absent on a hand-written
+     * filter, or on one wrapped in a plain closure.
+     */
+    readonly excludeTools?: readonly string[];
+};
 /**
  * Options for `selectServerToolsForPrompt`.
  */
@@ -4742,9 +4766,10 @@ interface SelectServerToolsForPromptOptions {
      */
     cache?: ToolsCacheBackend;
     /**
-     * Phase 3 defer-loading. When `enabled`, this helper returns the FULL catalog (skipping semantic/
-     * static filtering) to mirror useChatStorage's responses send path, which swaps in the full catalog
-     * for mergeTools + tool-search. Omit/disabled → today's filtered selection.
+     * Phase 3 defer-loading. When `enabled`, this helper skips SEMANTIC filtering to mirror
+     * useChatStorage's responses send path, which hands the catalog to mergeTools + tool-search. The
+     * caller's unconditional constraints still apply — an explicit static array, and exclusions (see
+     * {@link resolveDeferredServerTools}). Omit/disabled → today's filtered selection.
      */
     deferLoading?: DeferLoadingConfig;
 }
@@ -6140,6 +6165,51 @@ declare function getMemoriesByEntityNamesOp(ctx: EntityOperationsContext, entity
  */
 declare function getEntitiesByMemoryIdsOp(ctx: EntityOperationsContext, memoryIds: readonly string[]): Promise<Map<string, Set<string>>>;
 
+/**
+ * Class-B task types — the vocabulary of the `X-Anuma-Task-Type` header.
+ *
+ * A Class-B flow has ONE fixed purpose and no conversation: extract memories
+ * from a snippet, pick a topic, consolidate duplicates, classify a query. Today
+ * each of those builds its own system prompt on the client and sends it as a
+ * `role:system` message, which makes the prompt a suggestion rather than a
+ * contract — a caller can reword it into "you are a general assistant" and get
+ * general chat at internal-endpoint prices.
+ *
+ * The fix is that the SERVER owns the text and the client only names the task.
+ * This header is the name. The portal allowlists it against its own copy of this
+ * enum (ai-portal `internal/systemprompt/tasks.go`) and DROPS anything it does
+ * not recognise, so an unknown value degrades to "no task declared" rather than
+ * failing the request.
+ *
+ * ⚠ These string values are a wire contract with ai-portal. Adding one here
+ * before the portal knows it is harmless (it is dropped); renaming or removing
+ * one silently stops that flow being counted. Keep them in step with
+ * `AllTaskTypes` on the portal side, and see ai-portal
+ * `docs/BACKEND_OWNED_TASK_PROMPTS.md` for the rollout.
+ *
+ * ⚠ RELEASE ORDER. This union is a PUBLIC type, so a split is breaking in both
+ * directions and has to be sequenced:
+ *
+ *   1. merge + publish this package;
+ *   2. bump `@anuma/sdk` in the consumer and switch its call sites to the new
+ *      names in the same commit.
+ *
+ * A consumer on the OLD version cannot compile the new names, and a consumer on
+ * the NEW version cannot compile the retired ones (`app_inspiration` is gone
+ * here, replaced by the three `app_inspiration_*` names). Both halves of that
+ * are type-only — the wire itself always degrades safely, because the portal
+ * drops any value it does not recognise. Concretely: ai-memoryless-client#5782
+ * is blocked on this publish for exactly that reason.
+ *
+ * Deliberately ABSENT: agent personas, `reflect()` when it answers the user, and
+ * the app-idea chat. Those carry an open conversation with the user, so a fixed
+ * server-owned prompt would be wrong rather than merely premature — the same
+ * boundary {@link INTERNAL_FLOW_MARKER} draws.
+ *
+ * @public
+ */
+type TaskType = "title" | "commit_message" | "memory_extract" | "memory_dedup" | "memory_decay" | "memory_injection_check" | "memory_verify_support" | "memory_autosort" | "memory_topic" | "memory_consolidate" | "memory_decompose" | "memory_profile_synth" | "memory_graph" | "folder_context" | "selection_memory" | "summarize" | "style_analysis" | "classify_search" | "app_inspiration_generate" | "app_inspiration_trends" | "app_inspiration_remix" | "spotlight_image" | "slide_image" | "slide_video" | "slide_music" | "slide_sfx" | "media_video" | "media_audio" | "media_bg_removal" | "media_image_preset" | "tool_app_builder" | "tool_document_builder" | "tool_slides" | "tool_slides_image_gen" | "connector_guidance" | "cf_task" | "xbot_intent" | "xbot_council" | "scheduled_task";
+
 /**
  * Shared portal LLM call for the memory pipeline.
  *
@@ -9390,6 +9460,28 @@ interface ReflectOptions extends RecallOptions, PortalLlmAuth {
     maxTokens?: number;
     /** Override the grounding system prompt. */
     systemPrompt?: string;
+    /**
+     * Extra caller instruction to carry on the USER turn, between the question and
+     * the evidence block (see the `userMessage` assembly below). This is the slot a
+     * background caller uses to keep its per-request data OUT of the system message
+     * without colliding with the numbered evidence list — profile-facet synthesis
+     * puts its section label, guidance and response-field hint here so its system
+     * half can stay fixed and server-ownable.
+     */
+    userInstructions?: string;
+    /**
+     * Class-B task name for the `X-Anuma-Task-Type` header, or nothing.
+     *
+     * Deliberately OPTIONAL and unset by default. reflect() also answers the user's
+     * OWN question, and that traffic is chat, not an internal flow — declaring a
+     * task type unconditionally here would put an internal-flow name on real
+     * conversation, which is the same boundary `INTERNAL_FLOW_MARKER` draws
+     * (reflect is deliberately unmarked; its background caller marks its own
+     * prompt — see ../internalFlowMarker.ts). So the name is per call: only a
+     * caller with ONE fixed purpose passes
+     * one, and today that is profile-facet synthesis (`memory_profile_synth`).
+     */
+    taskType?: TaskType;
     /** Endpoint for the answer LLM. */
     baseUrl?: string;
     /** Override fetch (for tests). */