@anuma/sdk 6.5.0 → 6.6.0

package/dist/expo/{chunk-NCP3VGRX.mjs → chunk-4M6W7QLZ.mjs}

@@ -1,7 +1,7 @@
 import {
   callPortalJsonCompletion,
   getLogger
-} from "./chunk-ILAWDQDE.mjs";
+} from "./chunk-B5UPJRCU.mjs";
 import {
   BASE_URL,
   createClientConfig
@@ -6784,7 +6784,7 @@ function createMemoryVaultSearchTool(vaultCtx, embeddingOptions, cache, searchOp
             subQueries = decomp.subQueries;
           }
         }
-        const { recall: recall2 } = await import("./recall-ISSI7RMD.mjs");
+        const { recall: recall2 } = await import("./recall-EZIHN5VU.mjs");
         let recallDegraded = [];
         const result = await recall2(
           query,

package/dist/{react/chunk-ILAWDQDE.mjs → expo/chunk-B5UPJRCU.mjs}

@@ -45,6 +45,14 @@ function validateEndpointOverride(override) {
   return { valid: true, endpoint: trimmed.startsWith("/") ? trimmed : `/${trimmed}` };
 }
 
+// src/lib/internalFlowMarker.ts
+var INTERNAL_FLOW_MARKER = "Anuma internal first-party flow (not user chat).";
+function withInternalFlowMarker(systemPrompt) {
+  if (systemPrompt.includes(INTERNAL_FLOW_MARKER)) return systemPrompt;
+  return `${INTERNAL_FLOW_MARKER}
+${systemPrompt}`;
+}
+
 // src/lib/memory/portalLlm.ts
 function defaultBaseUrl() {
   return typeof process !== "undefined" && process.env?.ANUMA_PORTAL_BASE_URL || BASE_URL;
@@ -151,7 +159,12 @@ async function attemptPortalJson(req, endpoint) {
   const isAnthropic = req.model.startsWith("anthropic/");
   const prefill = isAnthropic ? "{" : "";
   const messages = [
-    { role: "system", content: req.systemPrompt },
+    // Every caller of this helper is a first-party BACKGROUND op (fact extraction,
+    // topic sweep, consolidation, classifiers, graph traversal, query
+    // decomposition). Marking here — the one place they all funnel through — is what
+    // keeps the portal's detector reading them as genuine rather than markerless.
+    // See ../internalFlowMarker.
+    { role: "system", content: withInternalFlowMarker(req.systemPrompt) },
     { role: "user", content: req.userMessage }
   ];
   if (prefill) messages.push({ role: "assistant", content: prefill });
@@ -290,6 +303,8 @@ export {
   setLogger,
   getLogger,
   validateEndpointOverride,
+  INTERNAL_FLOW_MARKER,
+  withInternalFlowMarker,
   supportsResponseFormat,
   resolvePortalAuthHeaders,
   callPortalJsonCompletion,

package/dist/expo/{chunk-DT6QNRZL.mjs → chunk-VOMDHMKH.mjs}

@@ -1,6 +1,6 @@
 import {
   getLogger
-} from "./chunk-ILAWDQDE.mjs";
+} from "./chunk-B5UPJRCU.mjs";
 
 // src/lib/pii/patterns.ts
 function luhnCheck(digits) {

package/dist/{react/consolidate-AMPKH6YJ.mjs → expo/consolidate-TWE6OSSZ.mjs}

@@ -1,10 +1,10 @@
 import {
   notifyConsolidationFallback,
   resolvePiiRedactor
-} from "./chunk-VMI74IUX.mjs";
+} from "./chunk-VOMDHMKH.mjs";
 import {
   callPortalJsonCompletion
-} from "./chunk-ILAWDQDE.mjs";
+} from "./chunk-B5UPJRCU.mjs";
 import "./chunk-GYKJOWEO.mjs";
 
 // src/lib/memory/consolidate.ts

package/dist/expo/index.cjs

@@ -4564,6 +4564,20 @@ var init_endpointOverride = __esm({
   }
 });
 
+// src/lib/internalFlowMarker.ts
+function withInternalFlowMarker(systemPrompt) {
+  if (systemPrompt.includes(INTERNAL_FLOW_MARKER)) return systemPrompt;
+  return `${INTERNAL_FLOW_MARKER}
+${systemPrompt}`;
+}
+var INTERNAL_FLOW_MARKER;
+var init_internalFlowMarker = __esm({
+  "src/lib/internalFlowMarker.ts"() {
+    "use strict";
+    INTERNAL_FLOW_MARKER = "Anuma internal first-party flow (not user chat).";
+  }
+});
+
 // src/lib/db/entities/types.ts
 function normalizeEntityName(name) {
   return name.trim().toLowerCase();
@@ -6158,7 +6172,12 @@ async function attemptPortalJson(req, endpoint) {
   const isAnthropic = req.model.startsWith("anthropic/");
   const prefill = isAnthropic ? "{" : "";
   const messages = [
-    { role: "system", content: req.systemPrompt },
+    // Every caller of this helper is a first-party BACKGROUND op (fact extraction,
+    // topic sweep, consolidation, classifiers, graph traversal, query
+    // decomposition). Marking here — the one place they all funnel through — is what
+    // keeps the portal's detector reading them as genuine rather than markerless.
+    // See ../internalFlowMarker.
+    { role: "system", content: withInternalFlowMarker(req.systemPrompt) },
     { role: "user", content: req.userMessage }
   ];
   if (prefill) messages.push({ role: "assistant", content: prefill });
@@ -6296,6 +6315,7 @@ var init_portalLlm = __esm({
     "use strict";
     init_clientConfig();
     init_endpointOverride();
+    init_internalFlowMarker();
     init_logger();
     RESPONSE_FORMAT_OK = /* @__PURE__ */ new Set(["openai", "inclusionai", "deepseek"]);
     RESPONSE_SCHEMA_OK = /* @__PURE__ */ new Set(["openai"]);
@@ -13995,6 +14015,7 @@ async function deleteConversationSummaryOp(ctx, conversationId) {
 }
 
 // src/lib/chat/summarize.ts
+init_internalFlowMarker();
 init_logger();
 var DEFAULT_SUMMARY_TOKEN_THRESHOLD = 4e3;
 var DEFAULT_SUMMARY_MIN_WINDOW_MESSAGES = 4;
@@ -14187,7 +14208,17 @@ async function callSummarizationLlm(prompt, model, token, baseUrl) {
       body: JSON.stringify({
         model,
         stream: false,
-        messages: [{ role: "user", content: prompt }]
+        // The marker rides a system message because this call has no other
+        // provenance: it posts to the MAIN chat endpoint (not /utility/*), carries no
+        // conversationId, and its prompt is neither the app's chat base prompt nor any
+        // registered flow fingerprint — so without this it reads as markerless, i.e.
+        // as a scripted abuser. Progressive summarization runs for every free-tier
+        // long conversation, so at the PORTAL_DETECTION_REJECT_MARKERLESS flip it
+        // would 403 and silently fall back to verbatim history (context bloat + cost).
+        messages: [
+          { role: "system", content: INTERNAL_FLOW_MARKER },
+          { role: "user", content: prompt }
+        ]
       }),
       signal: controller.signal
     });
@@ -17664,6 +17695,7 @@ init_reranker();
 
 // src/lib/memory/synthesizeProfile.ts
 init_operations3();
+init_internalFlowMarker();
 init_logger();
 init_constants();
 init_embeddings();
@@ -18025,7 +18057,10 @@ async function synthesizeFacet(facet, ctx, options, prior) {
     limit,
     types: ["fact"],
     maxTokens: DEFAULT_FACET_MAX_TOKENS,
-    systemPrompt: buildFacetSystemPrompt(facet),
+    // Profile-facet synthesis is a background op, so it marks its own prompt.
+    // reflect() itself must NOT mark — it also serves the user's own questions,
+    // and that traffic is chat, not an internal flow. See ../internalFlowMarker.
+    systemPrompt: withInternalFlowMarker(buildFacetSystemPrompt(facet)),
     responseSchema: facetResponseSchema(facet.key),
     memories
   });

package/dist/expo/index.mjs

@@ -130,7 +130,7 @@ import {
   upsertMessageOp,
   useEncryption,
   vaultMemoryToStored
-} from "./chunk-NCP3VGRX.mjs";
+} from "./chunk-4M6W7QLZ.mjs";
 import {
   PII_PATTERNS,
   PiiRedactor,
@@ -138,8 +138,9 @@ import {
   isPiiRedactor,
   notifyConsolidationFallback,
   resolvePiiRedactor
-} from "./chunk-DT6QNRZL.mjs";
+} from "./chunk-VOMDHMKH.mjs";
 import {
+  INTERNAL_FLOW_MARKER,
   callPortalJsonCompletion,
   consoleLogger,
   extractJsonCandidate,
@@ -148,8 +149,9 @@ import {
   resolvePortalAuthHeaders,
   setLogger,
   supportsResponseFormat,
-  validateEndpointOverride
-} from "./chunk-ILAWDQDE.mjs";
+  validateEndpointOverride,
+  withInternalFlowMarker
+} from "./chunk-B5UPJRCU.mjs";
 import {
   BASE_URL,
   MCP_R2_DOMAIN,
@@ -4789,7 +4791,17 @@ async function callSummarizationLlm(prompt, model, token, baseUrl) {
       body: JSON.stringify({
         model,
         stream: false,
-        messages: [{ role: "user", content: prompt }]
+        // The marker rides a system message because this call has no other
+        // provenance: it posts to the MAIN chat endpoint (not /utility/*), carries no
+        // conversationId, and its prompt is neither the app's chat base prompt nor any
+        // registered flow fingerprint — so without this it reads as markerless, i.e.
+        // as a scripted abuser. Progressive summarization runs for every free-tier
+        // long conversation, so at the PORTAL_DETECTION_REJECT_MARKERLESS flip it
+        // would 403 and silently fall back to verbatim history (context bloat + cost).
+        messages: [
+          { role: "system", content: INTERNAL_FLOW_MARKER },
+          { role: "user", content: prompt }
+        ]
       }),
       signal: controller.signal
     });
@@ -6847,7 +6859,7 @@ async function tryConsolidate(trimmed, ctx, options, prepared) {
     content: m.content,
     similarity: m.similarity
   }));
-  const { consolidateMemory: doConsolidate } = await import("./consolidate-3MEWQNM3.mjs");
+  const { consolidateMemory: doConsolidate } = await import("./consolidate-TWE6OSSZ.mjs");
   const decision = await doConsolidate(trimmed, candidates, consolidateOptions);
   if (decision.action === "create") return null;
   if (decision.action === "supersede" && decision.content) {
@@ -8549,7 +8561,10 @@ async function synthesizeFacet(facet, ctx, options, prior) {
     limit,
     types: ["fact"],
     maxTokens: DEFAULT_FACET_MAX_TOKENS,
-    systemPrompt: buildFacetSystemPrompt(facet),
+    // Profile-facet synthesis is a background op, so it marks its own prompt.
+    // reflect() itself must NOT mark — it also serves the user's own questions,
+    // and that traffic is chat, not an internal flow. See ../internalFlowMarker.
+    systemPrompt: withInternalFlowMarker(buildFacetSystemPrompt(facet)),
     responseSchema: facetResponseSchema(facet.key),
     memories
   });

package/dist/expo/{recall-ISSI7RMD.mjs → recall-EZIHN5VU.mjs}

@@ -1,7 +1,7 @@
 import {
   recall
-} from "./chunk-NCP3VGRX.mjs";
-import "./chunk-ILAWDQDE.mjs";
+} from "./chunk-4M6W7QLZ.mjs";
+import "./chunk-B5UPJRCU.mjs";
 import "./chunk-GYKJOWEO.mjs";
 export {
   recall

package/dist/react/{chunk-VMI74IUX.mjs → chunk-2ARMO2NN.mjs}

@@ -1,6 +1,6 @@
 import {
   getLogger
-} from "./chunk-ILAWDQDE.mjs";
+} from "./chunk-B5UPJRCU.mjs";
 
 // src/lib/pii/patterns.ts
 function luhnCheck(digits) {

package/dist/{expo/chunk-ILAWDQDE.mjs → react/chunk-B5UPJRCU.mjs}

@@ -45,6 +45,14 @@ function validateEndpointOverride(override) {
   return { valid: true, endpoint: trimmed.startsWith("/") ? trimmed : `/${trimmed}` };
 }
 
+// src/lib/internalFlowMarker.ts
+var INTERNAL_FLOW_MARKER = "Anuma internal first-party flow (not user chat).";
+function withInternalFlowMarker(systemPrompt) {
+  if (systemPrompt.includes(INTERNAL_FLOW_MARKER)) return systemPrompt;
+  return `${INTERNAL_FLOW_MARKER}
+${systemPrompt}`;
+}
+
 // src/lib/memory/portalLlm.ts
 function defaultBaseUrl() {
   return typeof process !== "undefined" && process.env?.ANUMA_PORTAL_BASE_URL || BASE_URL;
@@ -151,7 +159,12 @@ async function attemptPortalJson(req, endpoint) {
   const isAnthropic = req.model.startsWith("anthropic/");
   const prefill = isAnthropic ? "{" : "";
   const messages = [
-    { role: "system", content: req.systemPrompt },
+    // Every caller of this helper is a first-party BACKGROUND op (fact extraction,
+    // topic sweep, consolidation, classifiers, graph traversal, query
+    // decomposition). Marking here — the one place they all funnel through — is what
+    // keeps the portal's detector reading them as genuine rather than markerless.
+    // See ../internalFlowMarker.
+    { role: "system", content: withInternalFlowMarker(req.systemPrompt) },
     { role: "user", content: req.userMessage }
   ];
   if (prefill) messages.push({ role: "assistant", content: prefill });
@@ -290,6 +303,8 @@ export {
   setLogger,
   getLogger,
   validateEndpointOverride,
+  INTERNAL_FLOW_MARKER,
+  withInternalFlowMarker,
   supportsResponseFormat,
   resolvePortalAuthHeaders,
   callPortalJsonCompletion,

package/dist/react/{chunk-OB5HFCLB.mjs → chunk-S6WPXD5N.mjs}

@@ -1,7 +1,7 @@
 import {
   callPortalJsonCompletion,
   getLogger
-} from "./chunk-ILAWDQDE.mjs";
+} from "./chunk-B5UPJRCU.mjs";
 import {
   BASE_URL,
   createClientConfig
@@ -7085,7 +7085,7 @@ function createMemoryVaultSearchTool(vaultCtx, embeddingOptions, cache, searchOp
             subQueries = decomp.subQueries;
           }
         }
-        const { recall: recall2 } = await import("./recall-DQJINKEY.mjs");
+        const { recall: recall2 } = await import("./recall-ROEK55FJ.mjs");
         let recallDegraded = [];
         const result = await recall2(
           query,

package/dist/{expo/consolidate-3MEWQNM3.mjs → react/consolidate-ZCGS7QUA.mjs}

@@ -1,10 +1,10 @@
 import {
   notifyConsolidationFallback,
   resolvePiiRedactor
-} from "./chunk-DT6QNRZL.mjs";
+} from "./chunk-2ARMO2NN.mjs";
 import {
   callPortalJsonCompletion
-} from "./chunk-ILAWDQDE.mjs";
+} from "./chunk-B5UPJRCU.mjs";
 import "./chunk-GYKJOWEO.mjs";
 
 // src/lib/memory/consolidate.ts

package/dist/react/index.cjs

@@ -4781,6 +4781,20 @@ var init_endpointOverride = __esm({
   }
 });
 
+// src/lib/internalFlowMarker.ts
+function withInternalFlowMarker(systemPrompt) {
+  if (systemPrompt.includes(INTERNAL_FLOW_MARKER)) return systemPrompt;
+  return `${INTERNAL_FLOW_MARKER}
+${systemPrompt}`;
+}
+var INTERNAL_FLOW_MARKER;
+var init_internalFlowMarker = __esm({
+  "src/lib/internalFlowMarker.ts"() {
+    "use strict";
+    INTERNAL_FLOW_MARKER = "Anuma internal first-party flow (not user chat).";
+  }
+});
+
 // src/lib/db/entities/types.ts
 function normalizeEntityName(name) {
   return name.trim().toLowerCase();
@@ -6459,7 +6473,12 @@ async function attemptPortalJson(req, endpoint) {
   const isAnthropic = req.model.startsWith("anthropic/");
   const prefill = isAnthropic ? "{" : "";
   const messages = [
-    { role: "system", content: req.systemPrompt },
+    // Every caller of this helper is a first-party BACKGROUND op (fact extraction,
+    // topic sweep, consolidation, classifiers, graph traversal, query
+    // decomposition). Marking here — the one place they all funnel through — is what
+    // keeps the portal's detector reading them as genuine rather than markerless.
+    // See ../internalFlowMarker.
+    { role: "system", content: withInternalFlowMarker(req.systemPrompt) },
     { role: "user", content: req.userMessage }
   ];
   if (prefill) messages.push({ role: "assistant", content: prefill });
@@ -6597,6 +6616,7 @@ var init_portalLlm = __esm({
     "use strict";
     init_clientConfig();
     init_endpointOverride();
+    init_internalFlowMarker();
     init_logger();
     RESPONSE_FORMAT_OK = /* @__PURE__ */ new Set(["openai", "inclusionai", "deepseek"]);
     RESPONSE_SCHEMA_OK = /* @__PURE__ */ new Set(["openai"]);
@@ -14853,6 +14873,7 @@ async function deleteConversationSummaryOp(ctx, conversationId) {
 }
 
 // src/lib/chat/summarize.ts
+init_internalFlowMarker();
 init_logger();
 var DEFAULT_SUMMARY_TOKEN_THRESHOLD = 4e3;
 var DEFAULT_SUMMARY_MIN_WINDOW_MESSAGES = 4;
@@ -15045,7 +15066,17 @@ async function callSummarizationLlm(prompt, model, token, baseUrl) {
       body: JSON.stringify({
         model,
         stream: false,
-        messages: [{ role: "user", content: prompt }]
+        // The marker rides a system message because this call has no other
+        // provenance: it posts to the MAIN chat endpoint (not /utility/*), carries no
+        // conversationId, and its prompt is neither the app's chat base prompt nor any
+        // registered flow fingerprint — so without this it reads as markerless, i.e.
+        // as a scripted abuser. Progressive summarization runs for every free-tier
+        // long conversation, so at the PORTAL_DETECTION_REJECT_MARKERLESS flip it
+        // would 403 and silently fall back to verbatim history (context bloat + cost).
+        messages: [
+          { role: "system", content: INTERNAL_FLOW_MARKER },
+          { role: "user", content: prompt }
+        ]
       }),
       signal: controller.signal
     });
@@ -18981,6 +19012,7 @@ init_reranker();
 
 // src/lib/memory/synthesizeProfile.ts
 init_operations3();
+init_internalFlowMarker();
 init_logger();
 init_constants();
 init_embeddings();
@@ -19342,7 +19374,10 @@ async function synthesizeFacet(facet, ctx, options, prior) {
     limit,
     types: ["fact"],
     maxTokens: DEFAULT_FACET_MAX_TOKENS,
-    systemPrompt: buildFacetSystemPrompt(facet),
+    // Profile-facet synthesis is a background op, so it marks its own prompt.
+    // reflect() itself must NOT mark — it also serves the user's own questions,
+    // and that traffic is chat, not an internal flow. See ../internalFlowMarker.
+    systemPrompt: withInternalFlowMarker(buildFacetSystemPrompt(facet)),
     responseSchema: facetResponseSchema(facet.key),
     memories
   });

package/dist/react/index.mjs

@@ -178,15 +178,16 @@ import {
   updateVaultMemoryOp,
   useEncryption,
   vaultMemoryToStored
-} from "./chunk-OB5HFCLB.mjs";
+} from "./chunk-S6WPXD5N.mjs";
 import {
   PiiRedactor,
   createStreamingDeAnonymizer,
   isPiiRedactor,
   notifyConsolidationFallback,
   resolvePiiRedactor
-} from "./chunk-VMI74IUX.mjs";
+} from "./chunk-2ARMO2NN.mjs";
 import {
+  INTERNAL_FLOW_MARKER,
   callPortalJsonCompletion,
   consoleLogger,
   extractJsonCandidate,
@@ -195,8 +196,9 @@ import {
   resolvePortalAuthHeaders,
   setLogger,
   supportsResponseFormat,
-  validateEndpointOverride
-} from "./chunk-ILAWDQDE.mjs";
+  validateEndpointOverride,
+  withInternalFlowMarker
+} from "./chunk-B5UPJRCU.mjs";
 import {
   BASE_URL,
   MCP_R2_DOMAIN,
@@ -5152,7 +5154,17 @@ async function callSummarizationLlm(prompt, model, token, baseUrl) {
       body: JSON.stringify({
         model,
         stream: false,
-        messages: [{ role: "user", content: prompt }]
+        // The marker rides a system message because this call has no other
+        // provenance: it posts to the MAIN chat endpoint (not /utility/*), carries no
+        // conversationId, and its prompt is neither the app's chat base prompt nor any
+        // registered flow fingerprint — so without this it reads as markerless, i.e.
+        // as a scripted abuser. Progressive summarization runs for every free-tier
+        // long conversation, so at the PORTAL_DETECTION_REJECT_MARKERLESS flip it
+        // would 403 and silently fall back to verbatim history (context bloat + cost).
+        messages: [
+          { role: "system", content: INTERNAL_FLOW_MARKER },
+          { role: "user", content: prompt }
+        ]
       }),
       signal: controller.signal
     });
@@ -7667,7 +7679,7 @@ async function tryConsolidate(trimmed, ctx, options, prepared) {
     content: m.content,
     similarity: m.similarity
   }));
-  const { consolidateMemory: doConsolidate } = await import("./consolidate-AMPKH6YJ.mjs");
+  const { consolidateMemory: doConsolidate } = await import("./consolidate-ZCGS7QUA.mjs");
   const decision = await doConsolidate(trimmed, candidates, consolidateOptions);
   if (decision.action === "create") return null;
   if (decision.action === "supersede" && decision.content) {
@@ -9369,7 +9381,10 @@ async function synthesizeFacet(facet, ctx, options, prior) {
     limit,
     types: ["fact"],
     maxTokens: DEFAULT_FACET_MAX_TOKENS,
-    systemPrompt: buildFacetSystemPrompt(facet),
+    // Profile-facet synthesis is a background op, so it marks its own prompt.
+    // reflect() itself must NOT mark — it also serves the user's own questions,
+    // and that traffic is chat, not an internal flow. See ../internalFlowMarker.
+    systemPrompt: withInternalFlowMarker(buildFacetSystemPrompt(facet)),
     responseSchema: facetResponseSchema(facet.key),
     memories
   });

package/dist/react/{recall-DQJINKEY.mjs → recall-ROEK55FJ.mjs}

@@ -1,7 +1,7 @@
 import {
   recall
-} from "./chunk-OB5HFCLB.mjs";
-import "./chunk-ILAWDQDE.mjs";
+} from "./chunk-S6WPXD5N.mjs";
+import "./chunk-B5UPJRCU.mjs";
 import "./chunk-GYKJOWEO.mjs";
 export {
   recall

package/dist/server/{chunk-KF4HV3QE.mjs → chunk-CR5P3YIK.mjs}

@@ -1,6 +1,6 @@
 import {
   getLogger
-} from "./chunk-OBDRKQQI.mjs";
+} from "./chunk-VHWLLYKO.mjs";
 
 // src/lib/pii/patterns.ts
 function luhnCheck(digits) {

package/dist/server/{chunk-BZEAYCBV.mjs → chunk-TD7SMY7C.mjs}

@@ -1,7 +1,7 @@
 import {
   callPortalJsonCompletion,
   getLogger
-} from "./chunk-OBDRKQQI.mjs";
+} from "./chunk-VHWLLYKO.mjs";
 import {
   BASE_URL,
   __commonJS,
@@ -20845,7 +20845,7 @@ function createMemoryVaultSearchTool(vaultCtx, embeddingOptions, cache, searchOp
             subQueries = decomp.subQueries;
           }
         }
-        const { recall: recall2 } = await import("./recall-CZFWWOVF.mjs");
+        const { recall: recall2 } = await import("./recall-CGDEW2LQ.mjs");
         let recallDegraded = [];
         const result = await recall2(
           query,

package/dist/server/{chunk-OBDRKQQI.mjs → chunk-VHWLLYKO.mjs}

@@ -32,6 +32,14 @@ function validateEndpointOverride(override) {
   return { valid: true, endpoint: trimmed.startsWith("/") ? trimmed : `/${trimmed}` };
 }
 
+// src/lib/internalFlowMarker.ts
+var INTERNAL_FLOW_MARKER = "Anuma internal first-party flow (not user chat).";
+function withInternalFlowMarker(systemPrompt) {
+  if (systemPrompt.includes(INTERNAL_FLOW_MARKER)) return systemPrompt;
+  return `${INTERNAL_FLOW_MARKER}
+${systemPrompt}`;
+}
+
 // src/lib/memory/portalLlm.ts
 function defaultBaseUrl() {
   return typeof process !== "undefined" && process.env?.ANUMA_PORTAL_BASE_URL || BASE_URL;
@@ -138,7 +146,12 @@ async function attemptPortalJson(req, endpoint) {
   const isAnthropic = req.model.startsWith("anthropic/");
   const prefill = isAnthropic ? "{" : "";
   const messages = [
-    { role: "system", content: req.systemPrompt },
+    // Every caller of this helper is a first-party BACKGROUND op (fact extraction,
+    // topic sweep, consolidation, classifiers, graph traversal, query
+    // decomposition). Marking here — the one place they all funnel through — is what
+    // keeps the portal's detector reading them as genuine rather than markerless.
+    // See ../internalFlowMarker.
+    { role: "system", content: withInternalFlowMarker(req.systemPrompt) },
     { role: "user", content: req.userMessage }
   ];
   if (prefill) messages.push({ role: "assistant", content: prefill });
@@ -273,6 +286,8 @@ function extractCompletionContent(body) {
 
 export {
   getLogger,
+  INTERNAL_FLOW_MARKER,
+  withInternalFlowMarker,
   validateEndpointOverride,
   supportsResponseFormat,
   resolvePortalAuthHeaders,

package/dist/server/{consolidate-I6TOH7CB.mjs → consolidate-FWYK5KXB.mjs}

@@ -1,10 +1,10 @@
 import {
   notifyConsolidationFallback,
   resolvePiiRedactor
-} from "./chunk-KF4HV3QE.mjs";
+} from "./chunk-CR5P3YIK.mjs";
 import {
   callPortalJsonCompletion
-} from "./chunk-OBDRKQQI.mjs";
+} from "./chunk-VHWLLYKO.mjs";
 import "./chunk-3RPGXXPZ.mjs";
 
 // src/lib/memory/consolidate.ts

package/dist/server/index.cjs

@@ -17118,6 +17118,20 @@ var init_clientConfig = __esm({
   }
 });
 
+// src/lib/internalFlowMarker.ts
+function withInternalFlowMarker(systemPrompt) {
+  if (systemPrompt.includes(INTERNAL_FLOW_MARKER)) return systemPrompt;
+  return `${INTERNAL_FLOW_MARKER}
+${systemPrompt}`;
+}
+var INTERNAL_FLOW_MARKER;
+var init_internalFlowMarker = __esm({
+  "src/lib/internalFlowMarker.ts"() {
+    "use strict";
+    INTERNAL_FLOW_MARKER = "Anuma internal first-party flow (not user chat).";
+  }
+});
+
 // src/lib/db/entities/types.ts
 function normalizeEntityName(name) {
   return name.trim().toLowerCase();
@@ -20647,7 +20661,12 @@ async function attemptPortalJson(req, endpoint) {
   const isAnthropic = req.model.startsWith("anthropic/");
   const prefill = isAnthropic ? "{" : "";
   const messages = [
-    { role: "system", content: req.systemPrompt },
+    // Every caller of this helper is a first-party BACKGROUND op (fact extraction,
+    // topic sweep, consolidation, classifiers, graph traversal, query
+    // decomposition). Marking here — the one place they all funnel through — is what
+    // keeps the portal's detector reading them as genuine rather than markerless.
+    // See ../internalFlowMarker.
+    { role: "system", content: withInternalFlowMarker(req.systemPrompt) },
     { role: "user", content: req.userMessage }
   ];
   if (prefill) messages.push({ role: "assistant", content: prefill });
@@ -20785,6 +20804,7 @@ var init_portalLlm = __esm({
     "use strict";
     init_clientConfig();
     init_endpointOverride();
+    init_internalFlowMarker();
     init_logger();
     RESPONSE_FORMAT_OK = /* @__PURE__ */ new Set(["openai", "inclusionai", "deepseek"]);
     RESPONSE_SCHEMA_OK = /* @__PURE__ */ new Set(["openai"]);
@@ -26726,6 +26746,7 @@ init_types2();
 
 // src/lib/chat/summarize.ts
 init_clientConfig();
+init_internalFlowMarker();
 init_logger();
 var DEFAULT_SUMMARY_TOKEN_THRESHOLD = 4e3;
 var DEFAULT_SUMMARY_MIN_WINDOW_MESSAGES = 4;
@@ -26918,7 +26939,17 @@ async function callSummarizationLlm(prompt, model, token, baseUrl) {
       body: JSON.stringify({
         model,
         stream: false,
-        messages: [{ role: "user", content: prompt }]
+        // The marker rides a system message because this call has no other
+        // provenance: it posts to the MAIN chat endpoint (not /utility/*), carries no
+        // conversationId, and its prompt is neither the app's chat base prompt nor any
+        // registered flow fingerprint — so without this it reads as markerless, i.e.
+        // as a scripted abuser. Progressive summarization runs for every free-tier
+        // long conversation, so at the PORTAL_DETECTION_REJECT_MARKERLESS flip it
+        // would 403 and silently fall back to verbatim history (context bloat + cost).
+        messages: [
+          { role: "system", content: INTERNAL_FLOW_MARKER },
+          { role: "user", content: prompt }
+        ]
       }),
       signal: controller.signal
     });
@@ -30605,6 +30636,7 @@ init_reranker();
 
 // src/lib/memory/synthesizeProfile.ts
 init_operations3();
+init_internalFlowMarker();
 init_logger();
 init_constants();
 init_embeddings();
@@ -30966,7 +30998,10 @@ async function synthesizeFacet(facet, ctx, options, prior) {
     limit,
     types: ["fact"],
     maxTokens: DEFAULT_FACET_MAX_TOKENS,
-    systemPrompt: buildFacetSystemPrompt(facet),
+    // Profile-facet synthesis is a background op, so it marks its own prompt.
+    // reflect() itself must NOT mark — it also serves the user's own questions,
+    // and that traffic is chat, not an internal flow. See ../internalFlowMarker.
+    systemPrompt: withInternalFlowMarker(buildFacetSystemPrompt(facet)),
     responseSchema: facetResponseSchema(facet.key),
     memories
   });

package/dist/server/index.mjs

@@ -141,20 +141,22 @@ import {
   updateVaultMemoryOp,
   upsertMessageOp,
   vaultMemoryToStored
-} from "./chunk-BZEAYCBV.mjs";
+} from "./chunk-TD7SMY7C.mjs";
 import {
   createStreamingDeAnonymizer,
   notifyConsolidationFallback,
   resolvePiiRedactor
-} from "./chunk-KF4HV3QE.mjs";
+} from "./chunk-CR5P3YIK.mjs";
 import {
+  INTERNAL_FLOW_MARKER,
   callPortalJsonCompletion,
   extractJsonCandidate,
   getLogger,
   resolvePortalAuthHeaders,
   supportsResponseFormat,
-  validateEndpointOverride
-} from "./chunk-OBDRKQQI.mjs";
+  validateEndpointOverride,
+  withInternalFlowMarker
+} from "./chunk-VHWLLYKO.mjs";
 import {
   BASE_URL,
   __commonJS,
@@ -3411,7 +3413,17 @@ async function callSummarizationLlm(prompt, model, token, baseUrl) {
       body: JSON.stringify({
         model,
         stream: false,
-        messages: [{ role: "user", content: prompt }]
+        // The marker rides a system message because this call has no other
+        // provenance: it posts to the MAIN chat endpoint (not /utility/*), carries no
+        // conversationId, and its prompt is neither the app's chat base prompt nor any
+        // registered flow fingerprint — so without this it reads as markerless, i.e.
+        // as a scripted abuser. Progressive summarization runs for every free-tier
+        // long conversation, so at the PORTAL_DETECTION_REJECT_MARKERLESS flip it
+        // would 403 and silently fall back to verbatim history (context bloat + cost).
+        messages: [
+          { role: "system", content: INTERNAL_FLOW_MARKER },
+          { role: "user", content: prompt }
+        ]
       }),
       signal: controller.signal
     });
@@ -5681,7 +5693,7 @@ async function tryConsolidate(trimmed, ctx, options, prepared) {
     content: m.content,
     similarity: m.similarity
   }));
-  const { consolidateMemory: doConsolidate } = await import("./consolidate-I6TOH7CB.mjs");
+  const { consolidateMemory: doConsolidate } = await import("./consolidate-FWYK5KXB.mjs");
   const decision = await doConsolidate(trimmed, candidates, consolidateOptions);
   if (decision.action === "create") return null;
   if (decision.action === "supersede" && decision.content) {
@@ -7383,7 +7395,10 @@ async function synthesizeFacet(facet, ctx, options, prior) {
     limit,
     types: ["fact"],
     maxTokens: DEFAULT_FACET_MAX_TOKENS,
-    systemPrompt: buildFacetSystemPrompt(facet),
+    // Profile-facet synthesis is a background op, so it marks its own prompt.
+    // reflect() itself must NOT mark — it also serves the user's own questions,
+    // and that traffic is chat, not an internal flow. See ../internalFlowMarker.
+    systemPrompt: withInternalFlowMarker(buildFacetSystemPrompt(facet)),
     responseSchema: facetResponseSchema(facet.key),
     memories
   });

package/dist/server/{recall-CZFWWOVF.mjs → recall-CGDEW2LQ.mjs}

@@ -1,7 +1,7 @@
 import {
   recall
-} from "./chunk-BZEAYCBV.mjs";
-import "./chunk-OBDRKQQI.mjs";
+} from "./chunk-TD7SMY7C.mjs";
+import "./chunk-VHWLLYKO.mjs";
 import "./chunk-3RPGXXPZ.mjs";
 export {
   recall

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@anuma/sdk",
-  "version": "6.5.0",
+  "version": "6.6.0",
   "description": "",
   "main": "./dist/index.cjs",
   "module": "./dist/index.mjs",