@anuma/sdk 6.21.1 → 6.22.0

package/dist/expo/index.d.mts

@@ -4730,6 +4730,12 @@ declare function getConversationsPageOp(ctx: StorageOperationsContext, options?:
  * with no project.
  */
 declare function getConversationsByProjectLazyOp(ctx: StorageOperationsContext, projectId: string | null): Promise<LazyStoredConversation[]>;
+/**
+ * Delete a single message by its unique ID.
+ * Clears file_ids before deletion and returns the unique ID.
+ * Note: Callers should use deleteMediaByMessageOp to cascade delete media.
+ */
+declare function deleteMessageOp(ctx: StorageOperationsContext, uniqueId: string): Promise<string | null>;
 /**
  * Create-or-update a message keyed by `opts.uniqueId`.
  *
@@ -5351,6 +5357,7 @@ interface MemoryVaultSearchOptions {
      * types. Applied at load time via `Q.oneOf` on the indexed `fact_type`
      * column. Omit for no type filter. */
     factTypes?: string[];
+    memoryIds?: string[];
     /**
      * PR5 — optional per-FactType score multiplier applied in the boost stage
      * (e.g. `{ identity: 1.2, ongoing_context: 0.8 }`). Empty/omitted = uniform
@@ -5673,6 +5680,11 @@ interface RecallOptions {
      * and no-op when unset (all types are eligible). Vault-only.
      */
     factTypes?: FactType[];
+    /** Restrict fact candidates BEFORE ranking. Empty means no facts. When set,
+     * unrestricted chunk search is disabled; it must not escape a topic scope.
+     * Asking for `"chunk"` alongside this yields no excerpts and reports
+     * `"chunks-scope-restricted"` on {@link RecallDiagnostics.degraded}. */
+    memoryIds?: string[];
     /**
      * PR5 — optional per-FactType score multiplier applied in the fusion boost
      * stage (e.g. boost `identity`/`constraint`, down-weight `ongoing_context`).
@@ -5848,7 +5860,13 @@ type RecallDegradation =
  | "graph-lane-failed"
 /** The W6 temporal side lane threw and was dropped. Same posture as the graph
  *  lane: recall still returned, ranked without the temporal signal. */
- | "temporal-lane-failed";
+ | "temporal-lane-failed"
+/** {@link RecallOptions.memoryIds} was set and `types` asked for `"chunk"`.
+ *  Conversation excerpts have no equivalent membership filter, so running the
+ *  chunk lane would escape the topic/folder scope — it is dropped instead.
+ *  Without this signal a scoped caller asking for excerpts got an empty
+ *  result indistinguishable from "the vault had no match". */
+ | "chunks-scope-restricted";
 /**
  * Why a recall returned nothing. `""` when it returned something, so the field
  * is always present and groupable rather than being absent on the healthy path.
@@ -6803,6 +6821,14 @@ interface UpdateVaultMemoryOptions {
      * two parallel retain() calls observe each other's commits and neither
      * loses its increment. Wins over `proofCount` when both are set. */
     proofCountIncrement?: number;
+    /** Source ids for an observation. Unioned inside the writer. A replay whose
+     * ids are all already on the row contributes no new evidence, so
+     * `proofCount`/`proofCountIncrement` and {@link lastObservedAt} are skipped —
+     * but the write still lands: `content`, `embedding`, `restore`, `eventTime`
+     * and the rest apply, because a consolidation rewrite legitimately carries
+     * the same source ids as the observation that triggered it.
+     * Omit for unkeyed/manual observations. */
+    observationSourceIds?: string[];
     /** Set source ("manual" | "auto-extracted" | "capsule"). */
     source?: string;
     /**
@@ -6856,6 +6882,9 @@ interface VaultMemoryOperationsContext {
     embeddedWalletSigner?: EmbeddedWalletSignerFn;
     /** When set, operations scope to this user (server-side multi-user). */
     userId?: string;
+    /** Optional extraction source eligibility check, executed inside the writer.
+     * Must only read the database (must not start another writer). */
+    canWrite?: () => Promise<boolean>;
     /**
      * Asserts this context runs against a physically single-tenant database — one
      * where every row belongs to the same owner (the per-wallet client DBs, which
@@ -6896,6 +6925,7 @@ declare function getAllVaultMemoriesOp(ctx: VaultMemoryOperationsContext, option
     includeQuarantined?: boolean;
     /** Typed memory (PR1) — restrict to these fact types. Omit for no filter. */
     factTypes?: string[];
+    memoryIds?: string[];
     /**
      * Include A2-superseded memories (each carries `supersededBy`). Default
      * `false` — superseded rows are excluded, as they are from recall/dedup.
@@ -7155,6 +7185,7 @@ interface DecayCandidateRaw {
     /** Unix ms — the raw `updated_at`, used both for the age rule and as the
      * optimistic-concurrency guard passed back to {@link archiveVaultMemoryOp}. */
     updatedAt: number;
+    lastObservedAt?: number | null;
     archivedAt: number | null;
     source: string | null;
     /** `trusted` | `quarantined` | null. Quarantined rows still decay by RULE, but
@@ -7199,6 +7230,8 @@ declare function archiveVaultMemoryOp(ctx: VaultMemoryOperationsContext, id: str
     /** Optimistic-concurrency guard: skip if the row's `updated_at` changed
      * since the sweep observed it (a concurrent re-observation). */
     expectedUpdatedAt?: number;
+    /** Also guard re-observations, which deliberately preserve updated_at. */
+    expectedLastObservedAt?: number | null;
 }): Promise<boolean>;
 /**
  * Restore an archived memory (PR2) — clear `archived_at` so it re-enters recall.
@@ -7550,7 +7583,8 @@ declare class WalletPoller {
  *
  * The watermark advances only when the extractor genuinely EXAMINED the window.
  * A pipeline throw and an `empty-after-retry` outcome (the extraction LLM
- * returned empty/malformed after exhausting its retries) both leave it in place,
+ * returned empty/malformed after exhausting its retries), or any failed retain
+ * operation leave it in place,
  * so the next turn's window re-covers those messages instead of stranding them.
  * A quiet turn that legitimately yielded no facts *does* advance it.
  *
@@ -7943,6 +7977,8 @@ interface DecayInput {
     eventTimeKind: string | null;
     /** Unix ms of the row's last write (re-observation resets this). */
     updatedAt: number;
+    /** Last distinct observation; does not change the edit timestamp. */
+    lastObservedAt?: number | null;
     /** Unix ms when archived, or null when active. */
     archivedAt: number | null;
     /** `manual` | `auto-extracted` | `capsule` | null. Manual is never decayed. */
@@ -8505,6 +8541,8 @@ interface RecallToolOptions {
     minScore?: number;
     /** Vault scope filter. */
     scopes?: string[];
+    /** Topic membership, enforced before fact ranking; disables unrestricted chunks. */
+    memoryIds?: string[];
     /** Vault folder filter. */
     folderId?: string | null;
     /** Exclude one conversation from chunk results (typically the active one). */
@@ -8578,7 +8616,30 @@ interface ReflectOptions extends RecallOptions, PortalLlmAuth {
     llmModel?: string;
     /** Cap response length. Default: 4096. */
     maxTokens?: number;
-    /** Override the grounding system prompt. */
+    /**
+     * Override the grounding system prompt.
+     *
+     * ⚠ DOING THIS MAKES THE REQUEST'S PROVENANCE YOURS. The default prompt's first sentence is
+     * this flow's fingerprint in the portal's freeloader (anti-bot) detector (see
+     * {@link DEFAULT_SYSTEM_PROMPT}); replacing it wholesale removes that, and a free-tier request
+     * carrying no recognised provenance is rejected outright once the portal's markerless reject is
+     * enabled — a 403, not a degraded answer.
+     *
+     * Which replacement is correct depends on what the call IS, and there is no safe default:
+     *
+     * - **A background/internal call** (a fixed-purpose helper, not a user's own question): prepend
+     *   {@link withInternalFlowMarker}, which is exported for exactly this. That is what
+     *   profile-facet synthesis does.
+     * - **A user-facing call** (the person is asking their own question and expects an answer):
+     *   do NOT use the internal marker — it asserts "not user chat" and would be false. Keep the
+     *   default prompt, or append your instructions to it rather than replacing it, so the
+     *   fingerprint survives. A genuinely distinct user-facing flow needs its own fingerprint
+     *   registered in ai-portal `internal/detection/markers.go`.
+     *
+     * Appending is the cheap way to stay safe: `${DEFAULT_SYSTEM_PROMPT}\n\n${yourInstructions}`
+     * keeps the fingerprint as a prefix. `reflect.test.ts` pins both the marked and the bare
+     * override paths so this stays true.
+     */
     systemPrompt?: string;
     /**
      * Extra caller instruction to carry on the USER turn, between the question and
@@ -9321,6 +9382,83 @@ declare function verifyMemoriesForPublish(memories: readonly MemoryToVerify[], s
  */
 declare function createMessageSourceResolver(ctx: StorageOperationsContext): VerificationSources;
 
+type MemoryContextLane = "profile" | "fact" | "episode" | "session";
+interface MemoryContextItem {
+    id: string;
+    content: string;
+    score: number;
+    lane: MemoryContextLane;
+    sourceIds: string[];
+    /** Ranked fact evidence, retained when profile deduplication wins placement. */
+    recalled?: boolean;
+}
+interface MemoryContextOptions {
+    query: string;
+    recall: (query: string, options: RecallOptions) => Promise<RecallResult>;
+    loadFacts?: ((options: Parameters<typeof getAllVaultMemoriesOp>[1]) => Promise<StoredVaultMemory[]>) | null;
+    loadSessionRefs?: (() => Promise<Array<{
+        memoryId: string;
+        score: number;
+    }>>) | null;
+    recallOptions?: RecallOptions;
+    /** Topic membership is applied before ranking and to every context lane. */
+    memoryIds?: string[];
+    /** Character budget for contents (formatting overhead is excluded). Default 12000. */
+    maxChars?: number;
+    includeEpisodes?: boolean;
+    onDegraded?: (lane: MemoryContextLane, error: unknown) => void;
+}
+interface MemoryContextResult {
+    items: MemoryContextItem[];
+    ranked: boolean;
+    rankedCount: number;
+    degraded: MemoryContextLane[];
+    truncated: boolean;
+}
+/** Only skip confidently trivial utterances. Word counts reject useful short
+ * queries and languages whose writing does not separate words with spaces.
+ *
+ * The stoplist is an exact-match allowance for greetings and acknowledgments,
+ * not a language model: anything not listed still recalls, so a missing
+ * language costs a wasted lookup, never a missed memory. Kept to the handful of
+ * forms that cannot carry a fact in the languages the app ships in. */
+declare function shouldRecallMemory(query: string): boolean;
+/** Assemble bounded stable/dynamic profile, relevant facts, source excerpts and
+ * prior-turn facts. Lane failures are isolated: an outage cannot replace a
+ * legitimate empty search with unrelated vault contents. */
+declare function assembleMemoryContext(options: MemoryContextOptions): Promise<MemoryContextResult>;
+
+interface DurableAutoExtractorOptions extends Omit<CreateAutoExtractorOptions, "scope"> {
+    /**
+     * Scope for facts retained from newly queued turns. Pass an accessor to have
+     * a privacy-mode flip observed at write time: a plain string is sampled once
+     * at construction, which makes correctness depend on the caller disposing and
+     * recreating the extractor on every flip. An accessor that throws is treated
+     * as `"private"` — the direction that cannot publish.
+     */
+    scope?: string | (() => string);
+    /** Coalesce arrivals after durably recording them. Defaults to 20 seconds. */
+    debounceMs?: number;
+    /** Retry delay for a failed batch. Defaults to 30 seconds; max three attempts
+     * per session. Unfinished jobs remain available on the next resume. */
+    retryDelayMs?: number;
+    /**
+     * Ceiling on one batch, from the extraction call through retention. Defaults
+     * to 180 seconds — deliberately above the extraction call's own budget
+     * (`timeoutMs`, 60s per attempt, x `maxAttempts`), so this is a backstop
+     * against a promise that never settles at all rather than a second timeout
+     * competing with that one. Use `timeoutMs`/`totalTimeoutMs` to bound the LLM
+     * call itself. Without a ceiling here, one unsettled promise latched the
+     * drain and killed the outbox for the rest of the session.
+     */
+    batchTimeoutMs?: number;
+}
+/** Durable client extraction. Call once per authenticated database session.
+ * Resumes pending jobs on creation, reads bounded batches from encrypted
+ * history, and acknowledges only successful batches. No plaintext snapshots
+ * or pending facts are written to platform preferences. */
+declare function createDurableAutoExtractor(options: DurableAutoExtractorOptions): AutoExtractor;
+
 /**
  * Text Chunking Utilities
  *
@@ -10145,10 +10283,7 @@ interface UseChatStorageResult extends BaseUseChatStorageResult {
     recall: (query: string, options?: RecallOptions) => Promise<RecallResult>;
     /** Get all vault memories for context injection. Soft-deleted memories are
      * excluded unless `includeDeleted` is set. */
-    getVaultMemories: (options?: {
-        scopes?: string[];
-        includeDeleted?: boolean;
-    }) => Promise<StoredVaultMemory[]>;
+    getVaultMemories: (options?: Parameters<typeof getAllVaultMemoriesOp>[1]) => Promise<StoredVaultMemory[]>;
     /** Delete a vault memory by its ID (soft delete). */
     deleteVaultMemory: (id: string) => Promise<boolean>;
     /** Manually flush all queued operations for the current wallet. */
@@ -10301,8 +10436,15 @@ declare function useChatStorage(options: UseChatStorageOptions): UseChatStorageR
  * - v45: Added `media` to memory_vault — the photo(s) a server-extracted
  *   memory came from, as JSON `[{feed_item_id, object_key}]`. Null on every
  *   row that did not come from a photo, which is all of them before this
+ *   migration ran
+ * - v46: Added device-local memory_extraction_jobs outbox for restart-safe
+ *   extraction. Additive (a single createTable, no backfill), so a v45 database
+ *   upgrades cleanly. NOT reversible: WatermelonDB has no downgrade path, so
+ *   rolling a release back past v46 after a device has run it resets that
+ *   device's local database. Relevant to OTA, where a JS-only rollback can
+ *   land on a database the newer build already migrated
  */
-declare const SDK_SCHEMA_VERSION = 45;
+declare const SDK_SCHEMA_VERSION = 46;
 /**
  * Combined WatermelonDB schema for all SDK storage modules.
  *
@@ -10921,4 +11063,4 @@ declare function refreshNotionAccessToken(params: NotionRefreshTokenParams): Pro
  */
 declare function createNotionTools(getAccessToken: () => string | null, requestNotionAccess: () => Promise<string>): ToolConfig[];
 
-export { type AutoExtractMessage, type AutoExtractor, type Budget, CHUNKS_DISCARDED_ORIGIN, type CachedChunkVectors, type CachedServerTools, Conversation as ChatConversation, Message as ChatMessage, type ChatRole, type ChunkVectorCache, type ChunkingOptions, type ConsolidationAction, type ConsolidationFallbackReason, type ConversationMemoryInput, ConversationMemory as ConversationMemoryModel, type ConversationMemoryOperationsContext, type CreateAutoExtractorOptions, type CreateConversationOptions, type CreateDecaySweeperOptions, type CreateMessageOptions, type CreateVaultFolderOptions, type CreateVaultMemoryOptions, type CryptoPriceClassification, type CryptoPricePreProcessorOptions, DEFAULT_CACHE_EXPIRATION_MS, DEFAULT_CHUNK_CACHE_SIZE, DEFAULT_CHUNK_OVERLAP, DEFAULT_CHUNK_SIZE, DEFAULT_DECAY_POLICY, DEFAULT_MAX_CLASSIFIER_CALLS_PER_SWEEP, DEFAULT_MIN_CHUNK_SIZE, DEFAULT_PROFILE_FACETS, DEFAULT_PROFILE_FACT_TYPE_WEIGHTS, DEFAULT_PROFILE_PROOF_ALPHA, DEFAULT_PROFILE_TREND_MULTIPLIERS, DEFAULT_VAULT_CACHE_SIZE, DatabaseManager, type DatabaseManagerLogger, type DatabaseManagerOptions, type DecayCandidateRaw, type DecayClassifier, type DecayInput, type DecayPolicy, type DecaySweepResult, type DecaySweeper, type DecayVerdict, ENTITY_FANOUT, type EmbeddedWalletSignerFn, EncryptionKeyMissingError, type ExtractFactsOptions, type ExtractOutcome, type ExtractedCandidate, type ExtractedEntity, type ExtractionCursorStore, type ExtractionFunnel, type ExtractionTimings, type FactType, type FileMetadata, type FlushResult, type GetConversationsPageOptions, type GetMessagesPageOptions, type GraphTraversalOptions, HARD_DELETE_WINDOW_MS, INFERENCE_ID_HEADER, type InjectionClassifierOptions, type InjectionReason, type LazyStoredConversation, type LlmDecayClassifierOptions, type LlmNeighborRefinerOptions, type Logger, LoggerProvider, type LoggerProviderProps, MAX_HOPS, MEDIUM_TTL_MS, type ManualFactType, type MemoriesNeedingTopicExtraction, type EmbeddingOptions as MemoryEngineEmbeddingOptions, type MemoryEngineResult, type MemoryEngineSearchOptions, type MemoryExtractedEvent, type MemoryKind, type MemoryQuarantinedEvent, type MemoryToVerify, type MemoryVaultSearchOptions, type MemoryVaultToolOptions, type MemoryVerification, type MessageRedactionResult, type MessageSkeleton, NEVER_TTL_MS, NODE_BUDGET, NOTION_OAUTH_CONFIG, type NeighborRefiner, type NotionAuthUrlParams, type NotionClientRegistration, type NotionExchangeCodeParams, type NotionOAuthEndpoints, type NotionPKCEChallenge, type NotionRefreshTokenParams, type NotionTokenResponse, type NowSource, type ObservationTrend, type ObservationTrendInput, PAST_EVENT_GRACE_MS, PII_PATTERNS, PROFILE_DOC_VERSION, type PhotoIngestResult, type PhotoMediaRef, type PiiCategory, type PiiMatch, type PiiPattern, PiiRedactor, type PiiRedactorOptions, type PlatformStorage, type PortalLlmAuth, type PortalLlmFailure, type PortalLlmFailureReason, type ProfileConfigFingerprint, type ProfileDoc, type ProfileFacet, type ProfileFacetKey, type ProfileSalienceInput, type ProfileSection, type PromptPreProcessor, type PromptPreProcessorContext, type PublishedPhotoMemory, type QuantizedEmbedding, type QuarantinedMemoryInfo, QueueManager, type QueueStatus, RECALL_MAX_LIMIT, RECALL_TOOL_NAME, type RankableVaultMemory, type RankedMemory, type RankedProfileCandidate, type RecallContext, type RecallDegradation, type RecallDiagnostics, type RecallEmptyReason, type RecallOptions, type RecallResult, type RecallToolCallbacks, type RecallToolOptions, type RecencyOptions, type RedactionResult, type ReflectOptions, type ReflectResult, type RequestEncryptionKeyOptions, RerankerUnavailableError, type ResumeStreamOptions, type ResumeStreamResult, type ResumeStreamWithStorageResult, type RetainAction, type RetainContext, type RetainOptions, type RetainResult, type RetainSource, SDK_SCHEMA_VERSION, SHORT_TTL_MS, STREAM_RESUMABLE_HEADER, type ScoreBreakdown, type ScoreProfileSalienceOptions, type ScreenResult, type ScreenedCandidate, type SearchSource, type SendMessageWithStorageArgs, type SendMessageWithStorageDetachedResult, type SendMessageWithStorageResult, type ServerToolsOptions, type ServerToolsResponse, type SignMessageFn, type StockPriceClassification, type StockPricePreProcessorOptions, type ChatCompletionUsage as StoredChatCompletionUsage, type StoredConversation, type StoredConversationMemory, type StoredMessage, type StoredMessageWithSimilarity, type StoredVaultFolder, VaultFolder as StoredVaultFolderModel, type StoredVaultMemory, VaultMemory as StoredVaultMemoryModel, StreamExpiredError, type StreamMetaEvent, type StreamResumeHandle, type SynthesizeProfileOptions, TOOL_RESULT_ORIGIN, TOPICS_EXTRACTION_VERSION, TOPIC_EXTRACTION_BATCH_SIZE, TREND_RECENT_WINDOW_DAYS, TREND_STALE_WINDOW_DAYS, type TextChunk, type TopicExtractOptions, type TopicExtractionInput, type TopicExtractionRunResult, type TopicSkipReason, type TurnCompleteEvent, type TurnSkippedEvent, type UncheckedReason, type UnverifiableReason, type UpdateVaultFolderOptions, type UpdateVaultMemoryOptions, type UseChatStorageOptions, type UseChatStorageResult, type UseCreditsOptions, type UseCreditsResult, type UseModelsOptions, type UseModelsResult, VAULT_SIZE_HOP_CAP, type VaultEmbeddingCache, type VaultFolderOperationsContext, type VaultMemoryOperationsContext, type VaultMemoryVisibility, type VaultMemoryWriter, type VaultSaveOperation, type VaultSearchResult, type VaultWriteAction, type VaultWriteInput, type VaultWriteOutcome, type VerificationSources, type VerifyMemoriesForPublishOptions, WalletPoller, type WeatherClassification, type WeatherPreProcessorOptions, type WebSearchClassification, type WebSearchPreProcessorOptions, addConversationMemoriesOp, archiveVaultMemoryOp, backfillMemoryTopicsOp, buildNotionAuthUrl, capHopsForDensity, chatStorageMigrations, chatStorageSchema, chunkAndEmbedAllMessages, chunkAndEmbedMessage, chunkText, classifyCryptoPrice, classifyCryptoPriceBatch, classifyDecay, classifyInjectionCandidates, classifyObservationTrend, classifyStockPrice, classifyStockPriceBatch, classifyWeather, classifyWeatherBatch, classifyWebSearch, classifyWebSearchBatch, clearAllEncryptionKeys, clearAllEncryptionState, clearConversationMemoriesOp, clearEncryptionKey, clearLazyTitleCache, clearServerToolsCache, consoleLogger, conversationMemoryToStored, cosineInt8, createAutoExtractor, createChunkVectorCache, createCryptoPricePreProcessor, createDecaySweeper, createLlmDecayClassifier, createLlmNeighborRefiner, createMemoryEngineTool, createMemoryVaultSearchTool, createMemoryVaultTool, createMessageSourceResolver, createNotionTools, createPlatformCursorStore, createRecallTool, createStockPricePreProcessor, createStreamingDeAnonymizer, createVaultEmbeddingCache, createVaultFolderOp, createVaultMemoriesBatchOp, createVaultMemoryOp, createWeatherPreProcessor, createWebSearchPreProcessor, decodeChunkVector, decryptConversationTitle, deleteAllVaultMemoriesForUserOp, deleteVaultFolderOp, deleteVaultMemoryOp, dequantizeEmbedding, discoverNotionOAuthEndpoints, eagerEmbedContent, embedAllMessages, embedMessage, encodeChunkVector, ensureDefaultFoldersOp, exchangeNotionCode, extractAndLinkEntitiesForMemoriesOp, extractAndRetain, extractEntitiesForMemories, extractFacts, generateConversationId, generateEmbedding, generateEmbeddings, generateNotionPKCE, getAllVaultFoldersOp, getAllVaultMemoriesOp, getAllVaultMemoryContentsOp, getCachedServerTools, getConversationMemoriesOp, getConversationsByProjectLazyOp, getConversationsLazyOp, getConversationsPageOp, getDecayCandidatesRawOp, getLogger, getMemoriesNeedingTopicExtractionOp, getServerTools, getUnfiledVaultMemoriesOp, getVaultFolderMemoryCountOp, getVaultMemoriesByIdsOp, getVaultMemoryOp, getVaultRankingProjectionsOp, hardDeleteDecayedOp, hasEncryptionKey, ingestPublishedPhotoMemoriesOp, injectionSignatureCatalog, isDegradedTopicSkip, isPiiRedactor, isRerankerAvailable, maskScopedEmbeddingCache, moveMemoriesToFolderOp, noopLogger, onKeyAvailable, parseMedia, preEmbedVaultMemories, quantizeEmbedding, queueManager, rankProfileCandidates, recall, reflect, refreshEncryptionKeyIfMatches, refreshNotionAccessToken, registerNotionClient, relinkMemoryTopicsOp, requestEncryptionKey, resolvePiiRedactor, restoreVaultMemoryOp, resumeStream, retain, scoreProfileSalience, screenCandidatesForInjection, sdkMigrations, sdkModelClasses, sdkSchema, searchVaultMemories, seedEncryptionKeys, setLogger, setMemoryVisibilityOp, shouldChunkMessage, stampTopicsExtractedAtOp, streamCancelPath, streamReplayPath, summarizeObservationTrends, supersedeVaultMemoryOp, synthesizeProfile, traverseGraphLane, ttlForType, updateVaultFolderContextOp, updateVaultFolderOp, updateVaultMemoryEmbeddingOp, updateVaultMemoryOp, upsertMessageOp, useChat, useChatStorage, useCredits, useEncryption, useModels, verifyMemoriesForPublish, xhrTransport };
+export { type AutoExtractMessage, type AutoExtractor, type Budget, CHUNKS_DISCARDED_ORIGIN, type CachedChunkVectors, type CachedServerTools, Conversation as ChatConversation, Message as ChatMessage, type ChatRole, type ChunkVectorCache, type ChunkingOptions, type ConsolidationAction, type ConsolidationFallbackReason, type ConversationMemoryInput, ConversationMemory as ConversationMemoryModel, type ConversationMemoryOperationsContext, type CreateAutoExtractorOptions, type CreateConversationOptions, type CreateDecaySweeperOptions, type CreateMessageOptions, type CreateVaultFolderOptions, type CreateVaultMemoryOptions, type CryptoPriceClassification, type CryptoPricePreProcessorOptions, DEFAULT_CACHE_EXPIRATION_MS, DEFAULT_CHUNK_CACHE_SIZE, DEFAULT_CHUNK_OVERLAP, DEFAULT_CHUNK_SIZE, DEFAULT_DECAY_POLICY, DEFAULT_MAX_CLASSIFIER_CALLS_PER_SWEEP, DEFAULT_MIN_CHUNK_SIZE, DEFAULT_PROFILE_FACETS, DEFAULT_PROFILE_FACT_TYPE_WEIGHTS, DEFAULT_PROFILE_PROOF_ALPHA, DEFAULT_PROFILE_TREND_MULTIPLIERS, DEFAULT_VAULT_CACHE_SIZE, DatabaseManager, type DatabaseManagerLogger, type DatabaseManagerOptions, type DecayCandidateRaw, type DecayClassifier, type DecayInput, type DecayPolicy, type DecaySweepResult, type DecaySweeper, type DecayVerdict, type DurableAutoExtractorOptions, ENTITY_FANOUT, type EmbeddedWalletSignerFn, EncryptionKeyMissingError, type ExtractFactsOptions, type ExtractOutcome, type ExtractedCandidate, type ExtractedEntity, type ExtractionCursorStore, type ExtractionFunnel, type ExtractionTimings, type FactType, type FileMetadata, type FlushResult, type GetConversationsPageOptions, type GetMessagesPageOptions, type GraphTraversalOptions, HARD_DELETE_WINDOW_MS, INFERENCE_ID_HEADER, type InjectionClassifierOptions, type InjectionReason, type LazyStoredConversation, type LlmDecayClassifierOptions, type LlmNeighborRefinerOptions, type Logger, LoggerProvider, type LoggerProviderProps, MAX_HOPS, MEDIUM_TTL_MS, type ManualFactType, type MemoriesNeedingTopicExtraction, type MemoryContextItem, type MemoryContextLane, type MemoryContextOptions, type MemoryContextResult, type EmbeddingOptions as MemoryEngineEmbeddingOptions, type MemoryEngineResult, type MemoryEngineSearchOptions, type MemoryExtractedEvent, type MemoryKind, type MemoryQuarantinedEvent, type MemoryToVerify, type MemoryVaultSearchOptions, type MemoryVaultToolOptions, type MemoryVerification, type MessageRedactionResult, type MessageSkeleton, NEVER_TTL_MS, NODE_BUDGET, NOTION_OAUTH_CONFIG, type NeighborRefiner, type NotionAuthUrlParams, type NotionClientRegistration, type NotionExchangeCodeParams, type NotionOAuthEndpoints, type NotionPKCEChallenge, type NotionRefreshTokenParams, type NotionTokenResponse, type NowSource, type ObservationTrend, type ObservationTrendInput, PAST_EVENT_GRACE_MS, PII_PATTERNS, PROFILE_DOC_VERSION, type PhotoIngestResult, type PhotoMediaRef, type PiiCategory, type PiiMatch, type PiiPattern, PiiRedactor, type PiiRedactorOptions, type PlatformStorage, type PortalLlmAuth, type PortalLlmFailure, type PortalLlmFailureReason, type ProfileConfigFingerprint, type ProfileDoc, type ProfileFacet, type ProfileFacetKey, type ProfileSalienceInput, type ProfileSection, type PromptPreProcessor, type PromptPreProcessorContext, type PublishedPhotoMemory, type QuantizedEmbedding, type QuarantinedMemoryInfo, QueueManager, type QueueStatus, RECALL_MAX_LIMIT, RECALL_TOOL_NAME, type RankableVaultMemory, type RankedMemory, type RankedProfileCandidate, type RecallContext, type RecallDegradation, type RecallDiagnostics, type RecallEmptyReason, type RecallOptions, type RecallResult, type RecallToolCallbacks, type RecallToolOptions, type RecencyOptions, type RedactionResult, type ReflectOptions, type ReflectResult, type RequestEncryptionKeyOptions, RerankerUnavailableError, type ResumeStreamOptions, type ResumeStreamResult, type ResumeStreamWithStorageResult, type RetainAction, type RetainContext, type RetainOptions, type RetainResult, type RetainSource, SDK_SCHEMA_VERSION, SHORT_TTL_MS, STREAM_RESUMABLE_HEADER, type ScoreBreakdown, type ScoreProfileSalienceOptions, type ScreenResult, type ScreenedCandidate, type SearchSource, type SendMessageWithStorageArgs, type SendMessageWithStorageDetachedResult, type SendMessageWithStorageResult, type ServerToolsOptions, type ServerToolsResponse, type SignMessageFn, type StockPriceClassification, type StockPricePreProcessorOptions, type ChatCompletionUsage as StoredChatCompletionUsage, type StoredConversation, type StoredConversationMemory, type StoredMessage, type StoredMessageWithSimilarity, type StoredVaultFolder, VaultFolder as StoredVaultFolderModel, type StoredVaultMemory, VaultMemory as StoredVaultMemoryModel, StreamExpiredError, type StreamMetaEvent, type StreamResumeHandle, type SynthesizeProfileOptions, TOOL_RESULT_ORIGIN, TOPICS_EXTRACTION_VERSION, TOPIC_EXTRACTION_BATCH_SIZE, TREND_RECENT_WINDOW_DAYS, TREND_STALE_WINDOW_DAYS, type TextChunk, type TopicExtractOptions, type TopicExtractionInput, type TopicExtractionRunResult, type TopicSkipReason, type TurnCompleteEvent, type TurnSkippedEvent, type UncheckedReason, type UnverifiableReason, type UpdateVaultFolderOptions, type UpdateVaultMemoryOptions, type UseChatStorageOptions, type UseChatStorageResult, type UseCreditsOptions, type UseCreditsResult, type UseModelsOptions, type UseModelsResult, VAULT_SIZE_HOP_CAP, type VaultEmbeddingCache, type VaultFolderOperationsContext, type VaultMemoryOperationsContext, type VaultMemoryVisibility, type VaultMemoryWriter, type VaultSaveOperation, type VaultSearchResult, type VaultWriteAction, type VaultWriteInput, type VaultWriteOutcome, type VerificationSources, type VerifyMemoriesForPublishOptions, WalletPoller, type WeatherClassification, type WeatherPreProcessorOptions, type WebSearchClassification, type WebSearchPreProcessorOptions, addConversationMemoriesOp, archiveVaultMemoryOp, assembleMemoryContext, backfillMemoryTopicsOp, buildNotionAuthUrl, capHopsForDensity, chatStorageMigrations, chatStorageSchema, chunkAndEmbedAllMessages, chunkAndEmbedMessage, chunkText, classifyCryptoPrice, classifyCryptoPriceBatch, classifyDecay, classifyInjectionCandidates, classifyObservationTrend, classifyStockPrice, classifyStockPriceBatch, classifyWeather, classifyWeatherBatch, classifyWebSearch, classifyWebSearchBatch, clearAllEncryptionKeys, clearAllEncryptionState, clearConversationMemoriesOp, clearEncryptionKey, clearLazyTitleCache, clearServerToolsCache, consoleLogger, conversationMemoryToStored, cosineInt8, createAutoExtractor, createChunkVectorCache, createCryptoPricePreProcessor, createDecaySweeper, createDurableAutoExtractor, createLlmDecayClassifier, createLlmNeighborRefiner, createMemoryEngineTool, createMemoryVaultSearchTool, createMemoryVaultTool, createMessageSourceResolver, createNotionTools, createPlatformCursorStore, createRecallTool, createStockPricePreProcessor, createStreamingDeAnonymizer, createVaultEmbeddingCache, createVaultFolderOp, createVaultMemoriesBatchOp, createVaultMemoryOp, createWeatherPreProcessor, createWebSearchPreProcessor, decodeChunkVector, decryptConversationTitle, deleteAllVaultMemoriesForUserOp, deleteMessageOp, deleteVaultFolderOp, deleteVaultMemoryOp, dequantizeEmbedding, discoverNotionOAuthEndpoints, eagerEmbedContent, embedAllMessages, embedMessage, encodeChunkVector, ensureDefaultFoldersOp, exchangeNotionCode, extractAndLinkEntitiesForMemoriesOp, extractAndRetain, extractEntitiesForMemories, extractFacts, generateConversationId, generateEmbedding, generateEmbeddings, generateNotionPKCE, getAllVaultFoldersOp, getAllVaultMemoriesOp, getAllVaultMemoryContentsOp, getCachedServerTools, getConversationMemoriesOp, getConversationsByProjectLazyOp, getConversationsLazyOp, getConversationsPageOp, getDecayCandidatesRawOp, getLogger, getMemoriesNeedingTopicExtractionOp, getServerTools, getUnfiledVaultMemoriesOp, getVaultFolderMemoryCountOp, getVaultMemoriesByIdsOp, getVaultMemoryOp, getVaultRankingProjectionsOp, hardDeleteDecayedOp, hasEncryptionKey, ingestPublishedPhotoMemoriesOp, injectionSignatureCatalog, isDegradedTopicSkip, isPiiRedactor, isRerankerAvailable, maskScopedEmbeddingCache, moveMemoriesToFolderOp, noopLogger, onKeyAvailable, parseMedia, preEmbedVaultMemories, quantizeEmbedding, queueManager, rankProfileCandidates, recall, reflect, refreshEncryptionKeyIfMatches, refreshNotionAccessToken, registerNotionClient, relinkMemoryTopicsOp, requestEncryptionKey, resolvePiiRedactor, restoreVaultMemoryOp, resumeStream, retain, scoreProfileSalience, screenCandidatesForInjection, sdkMigrations, sdkModelClasses, sdkSchema, searchVaultMemories, seedEncryptionKeys, setLogger, setMemoryVisibilityOp, shouldChunkMessage, shouldRecallMemory, stampTopicsExtractedAtOp, streamCancelPath, streamReplayPath, summarizeObservationTrends, supersedeVaultMemoryOp, synthesizeProfile, traverseGraphLane, ttlForType, updateVaultFolderContextOp, updateVaultFolderOp, updateVaultMemoryEmbeddingOp, updateVaultMemoryOp, upsertMessageOp, useChat, useChatStorage, useCredits, useEncryption, useModels, verifyMemoriesForPublish, xhrTransport };

package/dist/expo/index.d.ts

@@ -4730,6 +4730,12 @@ declare function getConversationsPageOp(ctx: StorageOperationsContext, options?:
  * with no project.
  */
 declare function getConversationsByProjectLazyOp(ctx: StorageOperationsContext, projectId: string | null): Promise<LazyStoredConversation[]>;
+/**
+ * Delete a single message by its unique ID.
+ * Clears file_ids before deletion and returns the unique ID.
+ * Note: Callers should use deleteMediaByMessageOp to cascade delete media.
+ */
+declare function deleteMessageOp(ctx: StorageOperationsContext, uniqueId: string): Promise<string | null>;
 /**
  * Create-or-update a message keyed by `opts.uniqueId`.
  *
@@ -5351,6 +5357,7 @@ interface MemoryVaultSearchOptions {
      * types. Applied at load time via `Q.oneOf` on the indexed `fact_type`
      * column. Omit for no type filter. */
     factTypes?: string[];
+    memoryIds?: string[];
     /**
      * PR5 — optional per-FactType score multiplier applied in the boost stage
      * (e.g. `{ identity: 1.2, ongoing_context: 0.8 }`). Empty/omitted = uniform
@@ -5673,6 +5680,11 @@ interface RecallOptions {
      * and no-op when unset (all types are eligible). Vault-only.
      */
     factTypes?: FactType[];
+    /** Restrict fact candidates BEFORE ranking. Empty means no facts. When set,
+     * unrestricted chunk search is disabled; it must not escape a topic scope.
+     * Asking for `"chunk"` alongside this yields no excerpts and reports
+     * `"chunks-scope-restricted"` on {@link RecallDiagnostics.degraded}. */
+    memoryIds?: string[];
     /**
      * PR5 — optional per-FactType score multiplier applied in the fusion boost
      * stage (e.g. boost `identity`/`constraint`, down-weight `ongoing_context`).
@@ -5848,7 +5860,13 @@ type RecallDegradation =
  | "graph-lane-failed"
 /** The W6 temporal side lane threw and was dropped. Same posture as the graph
  *  lane: recall still returned, ranked without the temporal signal. */
- | "temporal-lane-failed";
+ | "temporal-lane-failed"
+/** {@link RecallOptions.memoryIds} was set and `types` asked for `"chunk"`.
+ *  Conversation excerpts have no equivalent membership filter, so running the
+ *  chunk lane would escape the topic/folder scope — it is dropped instead.
+ *  Without this signal a scoped caller asking for excerpts got an empty
+ *  result indistinguishable from "the vault had no match". */
+ | "chunks-scope-restricted";
 /**
  * Why a recall returned nothing. `""` when it returned something, so the field
  * is always present and groupable rather than being absent on the healthy path.
@@ -6803,6 +6821,14 @@ interface UpdateVaultMemoryOptions {
      * two parallel retain() calls observe each other's commits and neither
      * loses its increment. Wins over `proofCount` when both are set. */
     proofCountIncrement?: number;
+    /** Source ids for an observation. Unioned inside the writer. A replay whose
+     * ids are all already on the row contributes no new evidence, so
+     * `proofCount`/`proofCountIncrement` and {@link lastObservedAt} are skipped —
+     * but the write still lands: `content`, `embedding`, `restore`, `eventTime`
+     * and the rest apply, because a consolidation rewrite legitimately carries
+     * the same source ids as the observation that triggered it.
+     * Omit for unkeyed/manual observations. */
+    observationSourceIds?: string[];
     /** Set source ("manual" | "auto-extracted" | "capsule"). */
     source?: string;
     /**
@@ -6856,6 +6882,9 @@ interface VaultMemoryOperationsContext {
     embeddedWalletSigner?: EmbeddedWalletSignerFn;
     /** When set, operations scope to this user (server-side multi-user). */
     userId?: string;
+    /** Optional extraction source eligibility check, executed inside the writer.
+     * Must only read the database (must not start another writer). */
+    canWrite?: () => Promise<boolean>;
     /**
      * Asserts this context runs against a physically single-tenant database — one
      * where every row belongs to the same owner (the per-wallet client DBs, which
@@ -6896,6 +6925,7 @@ declare function getAllVaultMemoriesOp(ctx: VaultMemoryOperationsContext, option
     includeQuarantined?: boolean;
     /** Typed memory (PR1) — restrict to these fact types. Omit for no filter. */
     factTypes?: string[];
+    memoryIds?: string[];
     /**
      * Include A2-superseded memories (each carries `supersededBy`). Default
      * `false` — superseded rows are excluded, as they are from recall/dedup.
@@ -7155,6 +7185,7 @@ interface DecayCandidateRaw {
     /** Unix ms — the raw `updated_at`, used both for the age rule and as the
      * optimistic-concurrency guard passed back to {@link archiveVaultMemoryOp}. */
     updatedAt: number;
+    lastObservedAt?: number | null;
     archivedAt: number | null;
     source: string | null;
     /** `trusted` | `quarantined` | null. Quarantined rows still decay by RULE, but
@@ -7199,6 +7230,8 @@ declare function archiveVaultMemoryOp(ctx: VaultMemoryOperationsContext, id: str
     /** Optimistic-concurrency guard: skip if the row's `updated_at` changed
      * since the sweep observed it (a concurrent re-observation). */
     expectedUpdatedAt?: number;
+    /** Also guard re-observations, which deliberately preserve updated_at. */
+    expectedLastObservedAt?: number | null;
 }): Promise<boolean>;
 /**
  * Restore an archived memory (PR2) — clear `archived_at` so it re-enters recall.
@@ -7550,7 +7583,8 @@ declare class WalletPoller {
  *
  * The watermark advances only when the extractor genuinely EXAMINED the window.
  * A pipeline throw and an `empty-after-retry` outcome (the extraction LLM
- * returned empty/malformed after exhausting its retries) both leave it in place,
+ * returned empty/malformed after exhausting its retries), or any failed retain
+ * operation leave it in place,
  * so the next turn's window re-covers those messages instead of stranding them.
  * A quiet turn that legitimately yielded no facts *does* advance it.
  *
@@ -7943,6 +7977,8 @@ interface DecayInput {
     eventTimeKind: string | null;
     /** Unix ms of the row's last write (re-observation resets this). */
     updatedAt: number;
+    /** Last distinct observation; does not change the edit timestamp. */
+    lastObservedAt?: number | null;
     /** Unix ms when archived, or null when active. */
     archivedAt: number | null;
     /** `manual` | `auto-extracted` | `capsule` | null. Manual is never decayed. */
@@ -8505,6 +8541,8 @@ interface RecallToolOptions {
     minScore?: number;
     /** Vault scope filter. */
     scopes?: string[];
+    /** Topic membership, enforced before fact ranking; disables unrestricted chunks. */
+    memoryIds?: string[];
     /** Vault folder filter. */
     folderId?: string | null;
     /** Exclude one conversation from chunk results (typically the active one). */
@@ -8578,7 +8616,30 @@ interface ReflectOptions extends RecallOptions, PortalLlmAuth {
     llmModel?: string;
     /** Cap response length. Default: 4096. */
     maxTokens?: number;
-    /** Override the grounding system prompt. */
+    /**
+     * Override the grounding system prompt.
+     *
+     * ⚠ DOING THIS MAKES THE REQUEST'S PROVENANCE YOURS. The default prompt's first sentence is
+     * this flow's fingerprint in the portal's freeloader (anti-bot) detector (see
+     * {@link DEFAULT_SYSTEM_PROMPT}); replacing it wholesale removes that, and a free-tier request
+     * carrying no recognised provenance is rejected outright once the portal's markerless reject is
+     * enabled — a 403, not a degraded answer.
+     *
+     * Which replacement is correct depends on what the call IS, and there is no safe default:
+     *
+     * - **A background/internal call** (a fixed-purpose helper, not a user's own question): prepend
+     *   {@link withInternalFlowMarker}, which is exported for exactly this. That is what
+     *   profile-facet synthesis does.
+     * - **A user-facing call** (the person is asking their own question and expects an answer):
+     *   do NOT use the internal marker — it asserts "not user chat" and would be false. Keep the
+     *   default prompt, or append your instructions to it rather than replacing it, so the
+     *   fingerprint survives. A genuinely distinct user-facing flow needs its own fingerprint
+     *   registered in ai-portal `internal/detection/markers.go`.
+     *
+     * Appending is the cheap way to stay safe: `${DEFAULT_SYSTEM_PROMPT}\n\n${yourInstructions}`
+     * keeps the fingerprint as a prefix. `reflect.test.ts` pins both the marked and the bare
+     * override paths so this stays true.
+     */
     systemPrompt?: string;
     /**
      * Extra caller instruction to carry on the USER turn, between the question and
@@ -9321,6 +9382,83 @@ declare function verifyMemoriesForPublish(memories: readonly MemoryToVerify[], s
  */
 declare function createMessageSourceResolver(ctx: StorageOperationsContext): VerificationSources;
 
+type MemoryContextLane = "profile" | "fact" | "episode" | "session";
+interface MemoryContextItem {
+    id: string;
+    content: string;
+    score: number;
+    lane: MemoryContextLane;
+    sourceIds: string[];
+    /** Ranked fact evidence, retained when profile deduplication wins placement. */
+    recalled?: boolean;
+}
+interface MemoryContextOptions {
+    query: string;
+    recall: (query: string, options: RecallOptions) => Promise<RecallResult>;
+    loadFacts?: ((options: Parameters<typeof getAllVaultMemoriesOp>[1]) => Promise<StoredVaultMemory[]>) | null;
+    loadSessionRefs?: (() => Promise<Array<{
+        memoryId: string;
+        score: number;
+    }>>) | null;
+    recallOptions?: RecallOptions;
+    /** Topic membership is applied before ranking and to every context lane. */
+    memoryIds?: string[];
+    /** Character budget for contents (formatting overhead is excluded). Default 12000. */
+    maxChars?: number;
+    includeEpisodes?: boolean;
+    onDegraded?: (lane: MemoryContextLane, error: unknown) => void;
+}
+interface MemoryContextResult {
+    items: MemoryContextItem[];
+    ranked: boolean;
+    rankedCount: number;
+    degraded: MemoryContextLane[];
+    truncated: boolean;
+}
+/** Only skip confidently trivial utterances. Word counts reject useful short
+ * queries and languages whose writing does not separate words with spaces.
+ *
+ * The stoplist is an exact-match allowance for greetings and acknowledgments,
+ * not a language model: anything not listed still recalls, so a missing
+ * language costs a wasted lookup, never a missed memory. Kept to the handful of
+ * forms that cannot carry a fact in the languages the app ships in. */
+declare function shouldRecallMemory(query: string): boolean;
+/** Assemble bounded stable/dynamic profile, relevant facts, source excerpts and
+ * prior-turn facts. Lane failures are isolated: an outage cannot replace a
+ * legitimate empty search with unrelated vault contents. */
+declare function assembleMemoryContext(options: MemoryContextOptions): Promise<MemoryContextResult>;
+
+interface DurableAutoExtractorOptions extends Omit<CreateAutoExtractorOptions, "scope"> {
+    /**
+     * Scope for facts retained from newly queued turns. Pass an accessor to have
+     * a privacy-mode flip observed at write time: a plain string is sampled once
+     * at construction, which makes correctness depend on the caller disposing and
+     * recreating the extractor on every flip. An accessor that throws is treated
+     * as `"private"` — the direction that cannot publish.
+     */
+    scope?: string | (() => string);
+    /** Coalesce arrivals after durably recording them. Defaults to 20 seconds. */
+    debounceMs?: number;
+    /** Retry delay for a failed batch. Defaults to 30 seconds; max three attempts
+     * per session. Unfinished jobs remain available on the next resume. */
+    retryDelayMs?: number;
+    /**
+     * Ceiling on one batch, from the extraction call through retention. Defaults
+     * to 180 seconds — deliberately above the extraction call's own budget
+     * (`timeoutMs`, 60s per attempt, x `maxAttempts`), so this is a backstop
+     * against a promise that never settles at all rather than a second timeout
+     * competing with that one. Use `timeoutMs`/`totalTimeoutMs` to bound the LLM
+     * call itself. Without a ceiling here, one unsettled promise latched the
+     * drain and killed the outbox for the rest of the session.
+     */
+    batchTimeoutMs?: number;
+}
+/** Durable client extraction. Call once per authenticated database session.
+ * Resumes pending jobs on creation, reads bounded batches from encrypted
+ * history, and acknowledges only successful batches. No plaintext snapshots
+ * or pending facts are written to platform preferences. */
+declare function createDurableAutoExtractor(options: DurableAutoExtractorOptions): AutoExtractor;
+
 /**
  * Text Chunking Utilities
  *
@@ -10145,10 +10283,7 @@ interface UseChatStorageResult extends BaseUseChatStorageResult {
     recall: (query: string, options?: RecallOptions) => Promise<RecallResult>;
     /** Get all vault memories for context injection. Soft-deleted memories are
      * excluded unless `includeDeleted` is set. */
-    getVaultMemories: (options?: {
-        scopes?: string[];
-        includeDeleted?: boolean;
-    }) => Promise<StoredVaultMemory[]>;
+    getVaultMemories: (options?: Parameters<typeof getAllVaultMemoriesOp>[1]) => Promise<StoredVaultMemory[]>;
     /** Delete a vault memory by its ID (soft delete). */
     deleteVaultMemory: (id: string) => Promise<boolean>;
     /** Manually flush all queued operations for the current wallet. */
@@ -10301,8 +10436,15 @@ declare function useChatStorage(options: UseChatStorageOptions): UseChatStorageR
  * - v45: Added `media` to memory_vault — the photo(s) a server-extracted
  *   memory came from, as JSON `[{feed_item_id, object_key}]`. Null on every
  *   row that did not come from a photo, which is all of them before this
+ *   migration ran
+ * - v46: Added device-local memory_extraction_jobs outbox for restart-safe
+ *   extraction. Additive (a single createTable, no backfill), so a v45 database
+ *   upgrades cleanly. NOT reversible: WatermelonDB has no downgrade path, so
+ *   rolling a release back past v46 after a device has run it resets that
+ *   device's local database. Relevant to OTA, where a JS-only rollback can
+ *   land on a database the newer build already migrated
  */
-declare const SDK_SCHEMA_VERSION = 45;
+declare const SDK_SCHEMA_VERSION = 46;
 /**
  * Combined WatermelonDB schema for all SDK storage modules.
  *
@@ -10921,4 +11063,4 @@ declare function refreshNotionAccessToken(params: NotionRefreshTokenParams): Pro
  */
 declare function createNotionTools(getAccessToken: () => string | null, requestNotionAccess: () => Promise<string>): ToolConfig[];
 
-export { type AutoExtractMessage, type AutoExtractor, type Budget, CHUNKS_DISCARDED_ORIGIN, type CachedChunkVectors, type CachedServerTools, Conversation as ChatConversation, Message as ChatMessage, type ChatRole, type ChunkVectorCache, type ChunkingOptions, type ConsolidationAction, type ConsolidationFallbackReason, type ConversationMemoryInput, ConversationMemory as ConversationMemoryModel, type ConversationMemoryOperationsContext, type CreateAutoExtractorOptions, type CreateConversationOptions, type CreateDecaySweeperOptions, type CreateMessageOptions, type CreateVaultFolderOptions, type CreateVaultMemoryOptions, type CryptoPriceClassification, type CryptoPricePreProcessorOptions, DEFAULT_CACHE_EXPIRATION_MS, DEFAULT_CHUNK_CACHE_SIZE, DEFAULT_CHUNK_OVERLAP, DEFAULT_CHUNK_SIZE, DEFAULT_DECAY_POLICY, DEFAULT_MAX_CLASSIFIER_CALLS_PER_SWEEP, DEFAULT_MIN_CHUNK_SIZE, DEFAULT_PROFILE_FACETS, DEFAULT_PROFILE_FACT_TYPE_WEIGHTS, DEFAULT_PROFILE_PROOF_ALPHA, DEFAULT_PROFILE_TREND_MULTIPLIERS, DEFAULT_VAULT_CACHE_SIZE, DatabaseManager, type DatabaseManagerLogger, type DatabaseManagerOptions, type DecayCandidateRaw, type DecayClassifier, type DecayInput, type DecayPolicy, type DecaySweepResult, type DecaySweeper, type DecayVerdict, ENTITY_FANOUT, type EmbeddedWalletSignerFn, EncryptionKeyMissingError, type ExtractFactsOptions, type ExtractOutcome, type ExtractedCandidate, type ExtractedEntity, type ExtractionCursorStore, type ExtractionFunnel, type ExtractionTimings, type FactType, type FileMetadata, type FlushResult, type GetConversationsPageOptions, type GetMessagesPageOptions, type GraphTraversalOptions, HARD_DELETE_WINDOW_MS, INFERENCE_ID_HEADER, type InjectionClassifierOptions, type InjectionReason, type LazyStoredConversation, type LlmDecayClassifierOptions, type LlmNeighborRefinerOptions, type Logger, LoggerProvider, type LoggerProviderProps, MAX_HOPS, MEDIUM_TTL_MS, type ManualFactType, type MemoriesNeedingTopicExtraction, type EmbeddingOptions as MemoryEngineEmbeddingOptions, type MemoryEngineResult, type MemoryEngineSearchOptions, type MemoryExtractedEvent, type MemoryKind, type MemoryQuarantinedEvent, type MemoryToVerify, type MemoryVaultSearchOptions, type MemoryVaultToolOptions, type MemoryVerification, type MessageRedactionResult, type MessageSkeleton, NEVER_TTL_MS, NODE_BUDGET, NOTION_OAUTH_CONFIG, type NeighborRefiner, type NotionAuthUrlParams, type NotionClientRegistration, type NotionExchangeCodeParams, type NotionOAuthEndpoints, type NotionPKCEChallenge, type NotionRefreshTokenParams, type NotionTokenResponse, type NowSource, type ObservationTrend, type ObservationTrendInput, PAST_EVENT_GRACE_MS, PII_PATTERNS, PROFILE_DOC_VERSION, type PhotoIngestResult, type PhotoMediaRef, type PiiCategory, type PiiMatch, type PiiPattern, PiiRedactor, type PiiRedactorOptions, type PlatformStorage, type PortalLlmAuth, type PortalLlmFailure, type PortalLlmFailureReason, type ProfileConfigFingerprint, type ProfileDoc, type ProfileFacet, type ProfileFacetKey, type ProfileSalienceInput, type ProfileSection, type PromptPreProcessor, type PromptPreProcessorContext, type PublishedPhotoMemory, type QuantizedEmbedding, type QuarantinedMemoryInfo, QueueManager, type QueueStatus, RECALL_MAX_LIMIT, RECALL_TOOL_NAME, type RankableVaultMemory, type RankedMemory, type RankedProfileCandidate, type RecallContext, type RecallDegradation, type RecallDiagnostics, type RecallEmptyReason, type RecallOptions, type RecallResult, type RecallToolCallbacks, type RecallToolOptions, type RecencyOptions, type RedactionResult, type ReflectOptions, type ReflectResult, type RequestEncryptionKeyOptions, RerankerUnavailableError, type ResumeStreamOptions, type ResumeStreamResult, type ResumeStreamWithStorageResult, type RetainAction, type RetainContext, type RetainOptions, type RetainResult, type RetainSource, SDK_SCHEMA_VERSION, SHORT_TTL_MS, STREAM_RESUMABLE_HEADER, type ScoreBreakdown, type ScoreProfileSalienceOptions, type ScreenResult, type ScreenedCandidate, type SearchSource, type SendMessageWithStorageArgs, type SendMessageWithStorageDetachedResult, type SendMessageWithStorageResult, type ServerToolsOptions, type ServerToolsResponse, type SignMessageFn, type StockPriceClassification, type StockPricePreProcessorOptions, type ChatCompletionUsage as StoredChatCompletionUsage, type StoredConversation, type StoredConversationMemory, type StoredMessage, type StoredMessageWithSimilarity, type StoredVaultFolder, VaultFolder as StoredVaultFolderModel, type StoredVaultMemory, VaultMemory as StoredVaultMemoryModel, StreamExpiredError, type StreamMetaEvent, type StreamResumeHandle, type SynthesizeProfileOptions, TOOL_RESULT_ORIGIN, TOPICS_EXTRACTION_VERSION, TOPIC_EXTRACTION_BATCH_SIZE, TREND_RECENT_WINDOW_DAYS, TREND_STALE_WINDOW_DAYS, type TextChunk, type TopicExtractOptions, type TopicExtractionInput, type TopicExtractionRunResult, type TopicSkipReason, type TurnCompleteEvent, type TurnSkippedEvent, type UncheckedReason, type UnverifiableReason, type UpdateVaultFolderOptions, type UpdateVaultMemoryOptions, type UseChatStorageOptions, type UseChatStorageResult, type UseCreditsOptions, type UseCreditsResult, type UseModelsOptions, type UseModelsResult, VAULT_SIZE_HOP_CAP, type VaultEmbeddingCache, type VaultFolderOperationsContext, type VaultMemoryOperationsContext, type VaultMemoryVisibility, type VaultMemoryWriter, type VaultSaveOperation, type VaultSearchResult, type VaultWriteAction, type VaultWriteInput, type VaultWriteOutcome, type VerificationSources, type VerifyMemoriesForPublishOptions, WalletPoller, type WeatherClassification, type WeatherPreProcessorOptions, type WebSearchClassification, type WebSearchPreProcessorOptions, addConversationMemoriesOp, archiveVaultMemoryOp, backfillMemoryTopicsOp, buildNotionAuthUrl, capHopsForDensity, chatStorageMigrations, chatStorageSchema, chunkAndEmbedAllMessages, chunkAndEmbedMessage, chunkText, classifyCryptoPrice, classifyCryptoPriceBatch, classifyDecay, classifyInjectionCandidates, classifyObservationTrend, classifyStockPrice, classifyStockPriceBatch, classifyWeather, classifyWeatherBatch, classifyWebSearch, classifyWebSearchBatch, clearAllEncryptionKeys, clearAllEncryptionState, clearConversationMemoriesOp, clearEncryptionKey, clearLazyTitleCache, clearServerToolsCache, consoleLogger, conversationMemoryToStored, cosineInt8, createAutoExtractor, createChunkVectorCache, createCryptoPricePreProcessor, createDecaySweeper, createLlmDecayClassifier, createLlmNeighborRefiner, createMemoryEngineTool, createMemoryVaultSearchTool, createMemoryVaultTool, createMessageSourceResolver, createNotionTools, createPlatformCursorStore, createRecallTool, createStockPricePreProcessor, createStreamingDeAnonymizer, createVaultEmbeddingCache, createVaultFolderOp, createVaultMemoriesBatchOp, createVaultMemoryOp, createWeatherPreProcessor, createWebSearchPreProcessor, decodeChunkVector, decryptConversationTitle, deleteAllVaultMemoriesForUserOp, deleteVaultFolderOp, deleteVaultMemoryOp, dequantizeEmbedding, discoverNotionOAuthEndpoints, eagerEmbedContent, embedAllMessages, embedMessage, encodeChunkVector, ensureDefaultFoldersOp, exchangeNotionCode, extractAndLinkEntitiesForMemoriesOp, extractAndRetain, extractEntitiesForMemories, extractFacts, generateConversationId, generateEmbedding, generateEmbeddings, generateNotionPKCE, getAllVaultFoldersOp, getAllVaultMemoriesOp, getAllVaultMemoryContentsOp, getCachedServerTools, getConversationMemoriesOp, getConversationsByProjectLazyOp, getConversationsLazyOp, getConversationsPageOp, getDecayCandidatesRawOp, getLogger, getMemoriesNeedingTopicExtractionOp, getServerTools, getUnfiledVaultMemoriesOp, getVaultFolderMemoryCountOp, getVaultMemoriesByIdsOp, getVaultMemoryOp, getVaultRankingProjectionsOp, hardDeleteDecayedOp, hasEncryptionKey, ingestPublishedPhotoMemoriesOp, injectionSignatureCatalog, isDegradedTopicSkip, isPiiRedactor, isRerankerAvailable, maskScopedEmbeddingCache, moveMemoriesToFolderOp, noopLogger, onKeyAvailable, parseMedia, preEmbedVaultMemories, quantizeEmbedding, queueManager, rankProfileCandidates, recall, reflect, refreshEncryptionKeyIfMatches, refreshNotionAccessToken, registerNotionClient, relinkMemoryTopicsOp, requestEncryptionKey, resolvePiiRedactor, restoreVaultMemoryOp, resumeStream, retain, scoreProfileSalience, screenCandidatesForInjection, sdkMigrations, sdkModelClasses, sdkSchema, searchVaultMemories, seedEncryptionKeys, setLogger, setMemoryVisibilityOp, shouldChunkMessage, stampTopicsExtractedAtOp, streamCancelPath, streamReplayPath, summarizeObservationTrends, supersedeVaultMemoryOp, synthesizeProfile, traverseGraphLane, ttlForType, updateVaultFolderContextOp, updateVaultFolderOp, updateVaultMemoryEmbeddingOp, updateVaultMemoryOp, upsertMessageOp, useChat, useChatStorage, useCredits, useEncryption, useModels, verifyMemoriesForPublish, xhrTransport };
+export { type AutoExtractMessage, type AutoExtractor, type Budget, CHUNKS_DISCARDED_ORIGIN, type CachedChunkVectors, type CachedServerTools, Conversation as ChatConversation, Message as ChatMessage, type ChatRole, type ChunkVectorCache, type ChunkingOptions, type ConsolidationAction, type ConsolidationFallbackReason, type ConversationMemoryInput, ConversationMemory as ConversationMemoryModel, type ConversationMemoryOperationsContext, type CreateAutoExtractorOptions, type CreateConversationOptions, type CreateDecaySweeperOptions, type CreateMessageOptions, type CreateVaultFolderOptions, type CreateVaultMemoryOptions, type CryptoPriceClassification, type CryptoPricePreProcessorOptions, DEFAULT_CACHE_EXPIRATION_MS, DEFAULT_CHUNK_CACHE_SIZE, DEFAULT_CHUNK_OVERLAP, DEFAULT_CHUNK_SIZE, DEFAULT_DECAY_POLICY, DEFAULT_MAX_CLASSIFIER_CALLS_PER_SWEEP, DEFAULT_MIN_CHUNK_SIZE, DEFAULT_PROFILE_FACETS, DEFAULT_PROFILE_FACT_TYPE_WEIGHTS, DEFAULT_PROFILE_PROOF_ALPHA, DEFAULT_PROFILE_TREND_MULTIPLIERS, DEFAULT_VAULT_CACHE_SIZE, DatabaseManager, type DatabaseManagerLogger, type DatabaseManagerOptions, type DecayCandidateRaw, type DecayClassifier, type DecayInput, type DecayPolicy, type DecaySweepResult, type DecaySweeper, type DecayVerdict, type DurableAutoExtractorOptions, ENTITY_FANOUT, type EmbeddedWalletSignerFn, EncryptionKeyMissingError, type ExtractFactsOptions, type ExtractOutcome, type ExtractedCandidate, type ExtractedEntity, type ExtractionCursorStore, type ExtractionFunnel, type ExtractionTimings, type FactType, type FileMetadata, type FlushResult, type GetConversationsPageOptions, type GetMessagesPageOptions, type GraphTraversalOptions, HARD_DELETE_WINDOW_MS, INFERENCE_ID_HEADER, type InjectionClassifierOptions, type InjectionReason, type LazyStoredConversation, type LlmDecayClassifierOptions, type LlmNeighborRefinerOptions, type Logger, LoggerProvider, type LoggerProviderProps, MAX_HOPS, MEDIUM_TTL_MS, type ManualFactType, type MemoriesNeedingTopicExtraction, type MemoryContextItem, type MemoryContextLane, type MemoryContextOptions, type MemoryContextResult, type EmbeddingOptions as MemoryEngineEmbeddingOptions, type MemoryEngineResult, type MemoryEngineSearchOptions, type MemoryExtractedEvent, type MemoryKind, type MemoryQuarantinedEvent, type MemoryToVerify, type MemoryVaultSearchOptions, type MemoryVaultToolOptions, type MemoryVerification, type MessageRedactionResult, type MessageSkeleton, NEVER_TTL_MS, NODE_BUDGET, NOTION_OAUTH_CONFIG, type NeighborRefiner, type NotionAuthUrlParams, type NotionClientRegistration, type NotionExchangeCodeParams, type NotionOAuthEndpoints, type NotionPKCEChallenge, type NotionRefreshTokenParams, type NotionTokenResponse, type NowSource, type ObservationTrend, type ObservationTrendInput, PAST_EVENT_GRACE_MS, PII_PATTERNS, PROFILE_DOC_VERSION, type PhotoIngestResult, type PhotoMediaRef, type PiiCategory, type PiiMatch, type PiiPattern, PiiRedactor, type PiiRedactorOptions, type PlatformStorage, type PortalLlmAuth, type PortalLlmFailure, type PortalLlmFailureReason, type ProfileConfigFingerprint, type ProfileDoc, type ProfileFacet, type ProfileFacetKey, type ProfileSalienceInput, type ProfileSection, type PromptPreProcessor, type PromptPreProcessorContext, type PublishedPhotoMemory, type QuantizedEmbedding, type QuarantinedMemoryInfo, QueueManager, type QueueStatus, RECALL_MAX_LIMIT, RECALL_TOOL_NAME, type RankableVaultMemory, type RankedMemory, type RankedProfileCandidate, type RecallContext, type RecallDegradation, type RecallDiagnostics, type RecallEmptyReason, type RecallOptions, type RecallResult, type RecallToolCallbacks, type RecallToolOptions, type RecencyOptions, type RedactionResult, type ReflectOptions, type ReflectResult, type RequestEncryptionKeyOptions, RerankerUnavailableError, type ResumeStreamOptions, type ResumeStreamResult, type ResumeStreamWithStorageResult, type RetainAction, type RetainContext, type RetainOptions, type RetainResult, type RetainSource, SDK_SCHEMA_VERSION, SHORT_TTL_MS, STREAM_RESUMABLE_HEADER, type ScoreBreakdown, type ScoreProfileSalienceOptions, type ScreenResult, type ScreenedCandidate, type SearchSource, type SendMessageWithStorageArgs, type SendMessageWithStorageDetachedResult, type SendMessageWithStorageResult, type ServerToolsOptions, type ServerToolsResponse, type SignMessageFn, type StockPriceClassification, type StockPricePreProcessorOptions, type ChatCompletionUsage as StoredChatCompletionUsage, type StoredConversation, type StoredConversationMemory, type StoredMessage, type StoredMessageWithSimilarity, type StoredVaultFolder, VaultFolder as StoredVaultFolderModel, type StoredVaultMemory, VaultMemory as StoredVaultMemoryModel, StreamExpiredError, type StreamMetaEvent, type StreamResumeHandle, type SynthesizeProfileOptions, TOOL_RESULT_ORIGIN, TOPICS_EXTRACTION_VERSION, TOPIC_EXTRACTION_BATCH_SIZE, TREND_RECENT_WINDOW_DAYS, TREND_STALE_WINDOW_DAYS, type TextChunk, type TopicExtractOptions, type TopicExtractionInput, type TopicExtractionRunResult, type TopicSkipReason, type TurnCompleteEvent, type TurnSkippedEvent, type UncheckedReason, type UnverifiableReason, type UpdateVaultFolderOptions, type UpdateVaultMemoryOptions, type UseChatStorageOptions, type UseChatStorageResult, type UseCreditsOptions, type UseCreditsResult, type UseModelsOptions, type UseModelsResult, VAULT_SIZE_HOP_CAP, type VaultEmbeddingCache, type VaultFolderOperationsContext, type VaultMemoryOperationsContext, type VaultMemoryVisibility, type VaultMemoryWriter, type VaultSaveOperation, type VaultSearchResult, type VaultWriteAction, type VaultWriteInput, type VaultWriteOutcome, type VerificationSources, type VerifyMemoriesForPublishOptions, WalletPoller, type WeatherClassification, type WeatherPreProcessorOptions, type WebSearchClassification, type WebSearchPreProcessorOptions, addConversationMemoriesOp, archiveVaultMemoryOp, assembleMemoryContext, backfillMemoryTopicsOp, buildNotionAuthUrl, capHopsForDensity, chatStorageMigrations, chatStorageSchema, chunkAndEmbedAllMessages, chunkAndEmbedMessage, chunkText, classifyCryptoPrice, classifyCryptoPriceBatch, classifyDecay, classifyInjectionCandidates, classifyObservationTrend, classifyStockPrice, classifyStockPriceBatch, classifyWeather, classifyWeatherBatch, classifyWebSearch, classifyWebSearchBatch, clearAllEncryptionKeys, clearAllEncryptionState, clearConversationMemoriesOp, clearEncryptionKey, clearLazyTitleCache, clearServerToolsCache, consoleLogger, conversationMemoryToStored, cosineInt8, createAutoExtractor, createChunkVectorCache, createCryptoPricePreProcessor, createDecaySweeper, createDurableAutoExtractor, createLlmDecayClassifier, createLlmNeighborRefiner, createMemoryEngineTool, createMemoryVaultSearchTool, createMemoryVaultTool, createMessageSourceResolver, createNotionTools, createPlatformCursorStore, createRecallTool, createStockPricePreProcessor, createStreamingDeAnonymizer, createVaultEmbeddingCache, createVaultFolderOp, createVaultMemoriesBatchOp, createVaultMemoryOp, createWeatherPreProcessor, createWebSearchPreProcessor, decodeChunkVector, decryptConversationTitle, deleteAllVaultMemoriesForUserOp, deleteMessageOp, deleteVaultFolderOp, deleteVaultMemoryOp, dequantizeEmbedding, discoverNotionOAuthEndpoints, eagerEmbedContent, embedAllMessages, embedMessage, encodeChunkVector, ensureDefaultFoldersOp, exchangeNotionCode, extractAndLinkEntitiesForMemoriesOp, extractAndRetain, extractEntitiesForMemories, extractFacts, generateConversationId, generateEmbedding, generateEmbeddings, generateNotionPKCE, getAllVaultFoldersOp, getAllVaultMemoriesOp, getAllVaultMemoryContentsOp, getCachedServerTools, getConversationMemoriesOp, getConversationsByProjectLazyOp, getConversationsLazyOp, getConversationsPageOp, getDecayCandidatesRawOp, getLogger, getMemoriesNeedingTopicExtractionOp, getServerTools, getUnfiledVaultMemoriesOp, getVaultFolderMemoryCountOp, getVaultMemoriesByIdsOp, getVaultMemoryOp, getVaultRankingProjectionsOp, hardDeleteDecayedOp, hasEncryptionKey, ingestPublishedPhotoMemoriesOp, injectionSignatureCatalog, isDegradedTopicSkip, isPiiRedactor, isRerankerAvailable, maskScopedEmbeddingCache, moveMemoriesToFolderOp, noopLogger, onKeyAvailable, parseMedia, preEmbedVaultMemories, quantizeEmbedding, queueManager, rankProfileCandidates, recall, reflect, refreshEncryptionKeyIfMatches, refreshNotionAccessToken, registerNotionClient, relinkMemoryTopicsOp, requestEncryptionKey, resolvePiiRedactor, restoreVaultMemoryOp, resumeStream, retain, scoreProfileSalience, screenCandidatesForInjection, sdkMigrations, sdkModelClasses, sdkSchema, searchVaultMemories, seedEncryptionKeys, setLogger, setMemoryVisibilityOp, shouldChunkMessage, shouldRecallMemory, stampTopicsExtractedAtOp, streamCancelPath, streamReplayPath, summarizeObservationTrends, supersedeVaultMemoryOp, synthesizeProfile, traverseGraphLane, ttlForType, updateVaultFolderContextOp, updateVaultFolderOp, updateVaultMemoryEmbeddingOp, updateVaultMemoryOp, upsertMessageOp, useChat, useChatStorage, useCredits, useEncryption, useModels, verifyMemoriesForPublish, xhrTransport };