@anuma/sdk 6.5.0 → 6.7.0

package/dist/expo/{chunk-NCP3VGRX.mjs → chunk-2YHVYDEL.mjs}

@@ -1,7 +1,7 @@
 import {
   callPortalJsonCompletion,
   getLogger
-} from "./chunk-ILAWDQDE.mjs";
+} from "./chunk-B5UPJRCU.mjs";
 import {
   BASE_URL,
   createClientConfig
@@ -2880,6 +2880,29 @@ async function getAllVaultMemoriesOp(ctx, options) {
     (raw) => vaultMemoryRawToStored(raw, ctx.walletAddress, ctx.signMessage, ctx.embeddedWalletSigner)
   );
 }
+function vaultMemoryRawToRankable(raw) {
+  return {
+    uniqueId: raw.id,
+    // @text coerces NULL→"" on the Model path; unsafeFetchRaw returns raw NULL, so guard.
+    scope: raw.scope ?? "",
+    folderId: raw.folder_id ?? null,
+    embedding: raw.embedding ?? null,
+    embeddingModel: raw.embedding_model ?? null,
+    createdAt: new Date(raw.created_at),
+    updatedAt: new Date(raw.updated_at)
+  };
+}
+async function getVaultRankingProjectionsOp(ctx, options) {
+  const conditions = [
+    ...baseVaultConditions(ctx, options),
+    ...options?.scopes?.length ? [Q3.where("scope", Q3.oneOf(options.scopes))] : [],
+    ...options?.folderId !== void 0 ? [Q3.where("folder_id", options.folderId)] : [],
+    Q3.sortBy(options?.since ? "updated_at" : "created_at", Q3.desc),
+    ...options?.limit !== null && options?.limit !== void 0 && options.limit > 0 ? [Q3.take(options.limit)] : []
+  ];
+  const results = await ctx.vaultMemoryCollection.query(...conditions).unsafeFetchRaw();
+  return results.map(vaultMemoryRawToRankable);
+}
 function baseVaultSql(ctx, options) {
   const clauses = [
     '"is_deleted" = 0',
@@ -6784,7 +6807,7 @@ function createMemoryVaultSearchTool(vaultCtx, embeddingOptions, cache, searchOp
             subQueries = decomp.subQueries;
           }
         }
-        const { recall: recall2 } = await import("./recall-ISSI7RMD.mjs");
+        const { recall: recall2 } = await import("./recall-M3JVFTZL.mjs");
         let recallDegraded = [];
         const result = await recall2(
           query,
@@ -7815,6 +7838,8 @@ export {
   createVaultMemoriesBatchOp,
   getVaultMemoryOp,
   getAllVaultMemoriesOp,
+  getVaultRankingProjectionsOp,
+  getVaultMemoriesByIdsOp,
   getAllVaultMemoryContentsOp,
   updateVaultMemoryOp,
   setMemoryVisibilityOp,

package/dist/{react/chunk-ILAWDQDE.mjs → expo/chunk-B5UPJRCU.mjs}

@@ -45,6 +45,14 @@ function validateEndpointOverride(override) {
   return { valid: true, endpoint: trimmed.startsWith("/") ? trimmed : `/${trimmed}` };
 }
 
+// src/lib/internalFlowMarker.ts
+var INTERNAL_FLOW_MARKER = "Anuma internal first-party flow (not user chat).";
+function withInternalFlowMarker(systemPrompt) {
+  if (systemPrompt.includes(INTERNAL_FLOW_MARKER)) return systemPrompt;
+  return `${INTERNAL_FLOW_MARKER}
+${systemPrompt}`;
+}
+
 // src/lib/memory/portalLlm.ts
 function defaultBaseUrl() {
   return typeof process !== "undefined" && process.env?.ANUMA_PORTAL_BASE_URL || BASE_URL;
@@ -151,7 +159,12 @@ async function attemptPortalJson(req, endpoint) {
   const isAnthropic = req.model.startsWith("anthropic/");
   const prefill = isAnthropic ? "{" : "";
   const messages = [
-    { role: "system", content: req.systemPrompt },
+    // Every caller of this helper is a first-party BACKGROUND op (fact extraction,
+    // topic sweep, consolidation, classifiers, graph traversal, query
+    // decomposition). Marking here — the one place they all funnel through — is what
+    // keeps the portal's detector reading them as genuine rather than markerless.
+    // See ../internalFlowMarker.
+    { role: "system", content: withInternalFlowMarker(req.systemPrompt) },
     { role: "user", content: req.userMessage }
   ];
   if (prefill) messages.push({ role: "assistant", content: prefill });
@@ -290,6 +303,8 @@ export {
   setLogger,
   getLogger,
   validateEndpointOverride,
+  INTERNAL_FLOW_MARKER,
+  withInternalFlowMarker,
   supportsResponseFormat,
   resolvePortalAuthHeaders,
   callPortalJsonCompletion,

package/dist/expo/{chunk-DT6QNRZL.mjs → chunk-VOMDHMKH.mjs}

@@ -1,6 +1,6 @@
 import {
   getLogger
-} from "./chunk-ILAWDQDE.mjs";
+} from "./chunk-B5UPJRCU.mjs";
 
 // src/lib/pii/patterns.ts
 function luhnCheck(digits) {

package/dist/{react/consolidate-AMPKH6YJ.mjs → expo/consolidate-TWE6OSSZ.mjs}

@@ -1,10 +1,10 @@
 import {
   notifyConsolidationFallback,
   resolvePiiRedactor
-} from "./chunk-VMI74IUX.mjs";
+} from "./chunk-VOMDHMKH.mjs";
 import {
   callPortalJsonCompletion
-} from "./chunk-ILAWDQDE.mjs";
+} from "./chunk-B5UPJRCU.mjs";
 import "./chunk-GYKJOWEO.mjs";
 
 // src/lib/memory/consolidate.ts

package/dist/expo/index.cjs

@@ -4564,6 +4564,20 @@ var init_endpointOverride = __esm({
   }
 });
 
+// src/lib/internalFlowMarker.ts
+function withInternalFlowMarker(systemPrompt) {
+  if (systemPrompt.includes(INTERNAL_FLOW_MARKER)) return systemPrompt;
+  return `${INTERNAL_FLOW_MARKER}
+${systemPrompt}`;
+}
+var INTERNAL_FLOW_MARKER;
+var init_internalFlowMarker = __esm({
+  "src/lib/internalFlowMarker.ts"() {
+    "use strict";
+    INTERNAL_FLOW_MARKER = "Anuma internal first-party flow (not user chat).";
+  }
+});
+
 // src/lib/db/entities/types.ts
 function normalizeEntityName(name) {
   return name.trim().toLowerCase();
@@ -5366,6 +5380,29 @@ async function getAllVaultMemoriesOp(ctx, options) {
     (raw) => vaultMemoryRawToStored(raw, ctx.walletAddress, ctx.signMessage, ctx.embeddedWalletSigner)
   );
 }
+function vaultMemoryRawToRankable(raw) {
+  return {
+    uniqueId: raw.id,
+    // @text coerces NULL→"" on the Model path; unsafeFetchRaw returns raw NULL, so guard.
+    scope: raw.scope ?? "",
+    folderId: raw.folder_id ?? null,
+    embedding: raw.embedding ?? null,
+    embeddingModel: raw.embedding_model ?? null,
+    createdAt: new Date(raw.created_at),
+    updatedAt: new Date(raw.updated_at)
+  };
+}
+async function getVaultRankingProjectionsOp(ctx, options) {
+  const conditions = [
+    ...baseVaultConditions(ctx, options),
+    ...options?.scopes?.length ? [import_watermelondb9.Q.where("scope", import_watermelondb9.Q.oneOf(options.scopes))] : [],
+    ...options?.folderId !== void 0 ? [import_watermelondb9.Q.where("folder_id", options.folderId)] : [],
+    import_watermelondb9.Q.sortBy(options?.since ? "updated_at" : "created_at", import_watermelondb9.Q.desc),
+    ...options?.limit !== null && options?.limit !== void 0 && options.limit > 0 ? [import_watermelondb9.Q.take(options.limit)] : []
+  ];
+  const results = await ctx.vaultMemoryCollection.query(...conditions).unsafeFetchRaw();
+  return results.map(vaultMemoryRawToRankable);
+}
 function baseVaultSql(ctx, options) {
   const clauses = [
     '"is_deleted" = 0',
@@ -6158,7 +6195,12 @@ async function attemptPortalJson(req, endpoint) {
   const isAnthropic = req.model.startsWith("anthropic/");
   const prefill = isAnthropic ? "{" : "";
   const messages = [
-    { role: "system", content: req.systemPrompt },
+    // Every caller of this helper is a first-party BACKGROUND op (fact extraction,
+    // topic sweep, consolidation, classifiers, graph traversal, query
+    // decomposition). Marking here — the one place they all funnel through — is what
+    // keeps the portal's detector reading them as genuine rather than markerless.
+    // See ../internalFlowMarker.
+    { role: "system", content: withInternalFlowMarker(req.systemPrompt) },
     { role: "user", content: req.userMessage }
   ];
   if (prefill) messages.push({ role: "assistant", content: prefill });
@@ -6296,6 +6338,7 @@ var init_portalLlm = __esm({
     "use strict";
     init_clientConfig();
     init_endpointOverride();
+    init_internalFlowMarker();
     init_logger();
     RESPONSE_FORMAT_OK = /* @__PURE__ */ new Set(["openai", "inclusionai", "deepseek"]);
     RESPONSE_SCHEMA_OK = /* @__PURE__ */ new Set(["openai"]);
@@ -9453,7 +9496,9 @@ __export(index_exports, {
   getServerTools: () => getServerTools,
   getUnfiledVaultMemoriesOp: () => getUnfiledVaultMemoriesOp,
   getVaultFolderMemoryCountOp: () => getVaultFolderMemoryCountOp,
+  getVaultMemoriesByIdsOp: () => getVaultMemoriesByIdsOp,
   getVaultMemoryOp: () => getVaultMemoryOp,
+  getVaultRankingProjectionsOp: () => getVaultRankingProjectionsOp,
   hardDeleteDecayedOp: () => hardDeleteDecayedOp,
   hasEncryptionKey: () => hasEncryptionKey,
   ingestPublishedPhotoMemoriesOp: () => ingestPublishedPhotoMemoriesOp,
@@ -13995,6 +14040,7 @@ async function deleteConversationSummaryOp(ctx, conversationId) {
 }
 
 // src/lib/chat/summarize.ts
+init_internalFlowMarker();
 init_logger();
 var DEFAULT_SUMMARY_TOKEN_THRESHOLD = 4e3;
 var DEFAULT_SUMMARY_MIN_WINDOW_MESSAGES = 4;
@@ -14187,7 +14233,17 @@ async function callSummarizationLlm(prompt, model, token, baseUrl) {
       body: JSON.stringify({
         model,
         stream: false,
-        messages: [{ role: "user", content: prompt }]
+        // The marker rides a system message because this call has no other
+        // provenance: it posts to the MAIN chat endpoint (not /utility/*), carries no
+        // conversationId, and its prompt is neither the app's chat base prompt nor any
+        // registered flow fingerprint — so without this it reads as markerless, i.e.
+        // as a scripted abuser. Progressive summarization runs for every free-tier
+        // long conversation, so at the PORTAL_DETECTION_REJECT_MARKERLESS flip it
+        // would 403 and silently fall back to verbatim history (context bloat + cost).
+        messages: [
+          { role: "system", content: INTERNAL_FLOW_MARKER },
+          { role: "user", content: prompt }
+        ]
       }),
       signal: controller.signal
     });
@@ -17664,6 +17720,7 @@ init_reranker();
 
 // src/lib/memory/synthesizeProfile.ts
 init_operations3();
+init_internalFlowMarker();
 init_logger();
 init_constants();
 init_embeddings();
@@ -18025,7 +18082,10 @@ async function synthesizeFacet(facet, ctx, options, prior) {
     limit,
     types: ["fact"],
     maxTokens: DEFAULT_FACET_MAX_TOKENS,
-    systemPrompt: buildFacetSystemPrompt(facet),
+    // Profile-facet synthesis is a background op, so it marks its own prompt.
+    // reflect() itself must NOT mark — it also serves the user's own questions,
+    // and that traffic is chat, not an internal flow. See ../internalFlowMarker.
+    systemPrompt: withInternalFlowMarker(buildFacetSystemPrompt(facet)),
     responseSchema: facetResponseSchema(facet.key),
     memories
   });
@@ -24373,7 +24433,9 @@ function createNotionTools(getAccessToken, requestNotionAccess) {
   getServerTools,
   getUnfiledVaultMemoriesOp,
   getVaultFolderMemoryCountOp,
+  getVaultMemoriesByIdsOp,
   getVaultMemoryOp,
+  getVaultRankingProjectionsOp,
   hardDeleteDecayedOp,
   hasEncryptionKey,
   ingestPublishedPhotoMemoriesOp,

package/dist/expo/index.d.mts

@@ -6212,6 +6212,29 @@ interface StoredVaultMemory {
     updatedAt: Date;
     isDeleted: boolean;
 }
+/**
+ * Content-free projection of a vault memory, used to RANK candidates for recall
+ * WITHOUT decrypting the (encrypted) `content` column. Everything here is a
+ * plaintext-at-rest column — `embedding` is stored plaintext (schema v21), and
+ * `folderId`/`updatedAt` drive source-filtering + tie-breaks. There is
+ * deliberately NO `content` field: a ranking pass must never carry ciphertext
+ * masquerading as the plaintext `StoredVaultMemory.content`. Decrypt the top-N
+ * winners on demand via {@link getVaultMemoryOp}.
+ */
+interface RankableVaultMemory {
+    /** WatermelonDB internal ID — pass to `getVaultMemoryOp` to decrypt on demand. */
+    uniqueId: string;
+    /** Scope for partitioning memories (e.g., "private", "shared"). */
+    scope: string;
+    /** Folder ID for organization, null if unfiled. */
+    folderId: string | null;
+    /** JSON-stringified embedding vector, null if not yet computed. */
+    embedding: string | null;
+    /** Model that produced `embedding`. Null on legacy rows. */
+    embeddingModel: string | null;
+    createdAt: Date;
+    updatedAt: Date;
+}
 /**
  * A photo a server-extracted memory came from, as
  * GET /api/memories/published returns it in `media[]`.
@@ -6402,6 +6425,45 @@ declare function getAllVaultMemoriesOp(ctx: VaultMemoryOperationsContext, option
      */
     visibility?: VaultMemoryVisibility[];
 }): Promise<StoredVaultMemory[]>;
+/**
+ * Return content-free {@link RankableVaultMemory} projections for recall
+ * ranking — the "rank first, decrypt last" half of on-demand recall (#5017).
+ *
+ * Mirrors {@link getAllVaultMemoriesOp}'s query EXACTLY (same
+ * `baseVaultConditions` — `is_deleted=false` + `user_id` scoping — plus the
+ * same scope/folder filters and ordering) so the candidate SET is identical to
+ * the whole-vault read; the ONLY difference is that `content` is never
+ * decrypted (and never returned). Callers rank on `embedding`, then decrypt the
+ * top-N winners on demand via {@link getVaultMemoryOp}.
+ *
+ * Because it reuses `baseVaultConditions`, deleted and cross-user rows are
+ * excluded here just as they are from every other read path — a no-decrypt op
+ * that skipped these would leak embeddings for rows the caller can't see.
+ */
+declare function getVaultRankingProjectionsOp(ctx: VaultMemoryOperationsContext, options?: {
+    scopes?: string[];
+    since?: Date;
+    limit?: number;
+    folderId?: string | null;
+}): Promise<RankableVaultMemory[]>;
+/**
+ * Bulk-decrypt a KNOWN set of memories by ID — the "decrypt last" half of
+ * on-demand recall (#5017) for lanes whose size is NOT bounded to the top-N
+ * (e.g. the keyword lane over un-embedded rows). Uses `unsafeFetchRaw` + a
+ * single `id oneOf` query so it does NOT pin a WatermelonDB Model per row into
+ * the never-evicted RecordCache — unlike calling {@link getVaultMemoryOp} N
+ * times, which `.find()`s each row and is only appropriate for the bounded
+ * top-N winners (web Pile-2 tab-memory).
+ *
+ * Reuses `baseVaultConditions`, so deleted / superseded / cross-user rows are
+ * excluded exactly as they are from recall — a caller can pass any id list and
+ * only its own live rows come back.
+ */
+declare function getVaultMemoriesByIdsOp(ctx: VaultMemoryOperationsContext, ids: string[], 
+/** See {@link getVaultEmbeddingsByIdsOp} — must match what admitted these ids. */
+options?: {
+    includeArchived?: boolean;
+}): Promise<StoredVaultMemory[]>;
 declare function getAllVaultMemoryContentsOp(ctx: VaultMemoryOperationsContext, options?: {
     since?: Date;
 }): Promise<string[]>;
@@ -10170,4 +10232,4 @@ declare function refreshNotionAccessToken(params: NotionRefreshTokenParams): Pro
  */
 declare function createNotionTools(getAccessToken: () => string | null, requestNotionAccess: () => Promise<string>): ToolConfig[];
 
-export { type AutoExtractMessage, type AutoExtractor, type Budget, CHUNKS_DISCARDED_ORIGIN, type CachedChunkVectors, type CachedServerTools, Conversation as ChatConversation, Message as ChatMessage, type ChatRole, type ChunkVectorCache, type ChunkingOptions, type ConsolidationFallbackReason, type ConversationMemoryInput, ConversationMemory as ConversationMemoryModel, type ConversationMemoryOperationsContext, type CreateAutoExtractorOptions, type CreateConversationOptions, type CreateDecaySweeperOptions, type CreateMessageOptions, type CreateVaultFolderOptions, type CreateVaultMemoryOptions, type CryptoPriceClassification, type CryptoPricePreProcessorOptions, DEFAULT_CACHE_EXPIRATION_MS, DEFAULT_CHUNK_CACHE_SIZE, DEFAULT_CHUNK_OVERLAP, DEFAULT_CHUNK_SIZE, DEFAULT_DECAY_POLICY, DEFAULT_MAX_CLASSIFIER_CALLS_PER_SWEEP, DEFAULT_MIN_CHUNK_SIZE, DEFAULT_PROFILE_FACETS, DEFAULT_PROFILE_FACT_TYPE_WEIGHTS, DEFAULT_PROFILE_PROOF_ALPHA, DEFAULT_PROFILE_TREND_MULTIPLIERS, DEFAULT_VAULT_CACHE_SIZE, DatabaseManager, type DatabaseManagerLogger, type DatabaseManagerOptions, type DecayCandidateRaw, type DecayClassifier, type DecayInput, type DecayPolicy, type DecaySweepResult, type DecaySweeper, type DecayVerdict, ENTITY_FANOUT, type EmbeddedWalletSignerFn, EncryptionKeyMissingError, type ExtractFactsOptions, type ExtractOutcome, type ExtractedCandidate, type ExtractedEntity, type ExtractionCursorStore, type FactType, type FileMetadata, type FlushResult, type GetConversationsPageOptions, type GetMessagesPageOptions, type GraphTraversalOptions, HARD_DELETE_WINDOW_MS, INFERENCE_ID_HEADER, type InjectionClassifierOptions, type InjectionReason, type LazyStoredConversation, type LlmDecayClassifierOptions, type LlmNeighborRefinerOptions, type Logger, LoggerProvider, type LoggerProviderProps, MAX_HOPS, MEDIUM_TTL_MS, type MemoriesNeedingTopicExtraction, type EmbeddingOptions as MemoryEngineEmbeddingOptions, type MemoryEngineResult, type MemoryEngineSearchOptions, type MemoryExtractedEvent, type MemoryKind, type MemoryQuarantinedEvent, type MemoryToVerify, type MemoryVaultSearchOptions, type MemoryVaultToolOptions, type MemoryVerification, type MessageRedactionResult, type MessageSkeleton, NEVER_TTL_MS, NODE_BUDGET, NOTION_OAUTH_CONFIG, type NeighborRefiner, type NotionAuthUrlParams, type NotionClientRegistration, type NotionExchangeCodeParams, type NotionOAuthEndpoints, type NotionPKCEChallenge, type NotionRefreshTokenParams, type NotionTokenResponse, type NowSource, type ObservationTrend, type ObservationTrendInput, PAST_EVENT_GRACE_MS, PII_PATTERNS, PROFILE_DOC_VERSION, type PhotoIngestResult, type PhotoMediaRef, type PiiCategory, type PiiMatch, type PiiPattern, PiiRedactor, type PiiRedactorOptions, type PlatformStorage, type PortalLlmAuth, type ProfileConfigFingerprint, type ProfileDoc, type ProfileFacet, type ProfileFacetKey, type ProfileSalienceInput, type ProfileSection, type PromptPreProcessor, type PromptPreProcessorContext, type PublishedPhotoMemory, type QuantizedEmbedding, type QuarantinedMemoryInfo, QueueManager, type QueueStatus, RECALL_MAX_LIMIT, RECALL_TOOL_NAME, type RankedMemory, type RankedProfileCandidate, type RecallContext, type RecallDegradation, type RecallDiagnostics, type RecallOptions, type RecallResult, type RecallToolCallbacks, type RecallToolOptions, type RecencyOptions, type RedactionResult, type ReflectOptions, type ReflectResult, type RequestEncryptionKeyOptions, RerankerUnavailableError, type ResumeStreamOptions, type ResumeStreamResult, type ResumeStreamWithStorageResult, type RetainAction, type RetainContext, type RetainOptions, type RetainResult, type RetainSource, SDK_SCHEMA_VERSION, SHORT_TTL_MS, STREAM_RESUMABLE_HEADER, type ScoreBreakdown, type ScoreProfileSalienceOptions, type ScreenResult, type ScreenedCandidate, type SearchSource, type SendMessageWithStorageArgs, type SendMessageWithStorageDetachedResult, type SendMessageWithStorageResult, type ServerToolsOptions, type ServerToolsResponse, type SignMessageFn, type StockPriceClassification, type StockPricePreProcessorOptions, type ChatCompletionUsage as StoredChatCompletionUsage, type StoredConversation, type StoredConversationMemory, type StoredMessage, type StoredMessageWithSimilarity, type StoredVaultFolder, VaultFolder as StoredVaultFolderModel, type StoredVaultMemory, VaultMemory as StoredVaultMemoryModel, StreamExpiredError, type StreamMetaEvent, type StreamResumeHandle, type SynthesizeProfileOptions, TOOL_RESULT_ORIGIN, TOPICS_EXTRACTION_VERSION, TOPIC_EXTRACTION_BATCH_SIZE, TREND_RECENT_WINDOW_DAYS, TREND_STALE_WINDOW_DAYS, type TextChunk, type TopicExtractOptions, type TopicExtractionInput, type TopicExtractionRunResult, type TurnCompleteEvent, type TurnSkippedEvent, type UncheckedReason, type UnverifiableReason, type UpdateVaultFolderOptions, type UpdateVaultMemoryOptions, type UseChatStorageOptions, type UseChatStorageResult, type UseCreditsOptions, type UseCreditsResult, type UseModelsOptions, type UseModelsResult, VAULT_SIZE_HOP_CAP, type VaultEmbeddingCache, type VaultFolderOperationsContext, type VaultMemoryOperationsContext, type VaultMemoryVisibility, type VaultSaveOperation, type VaultSearchResult, type VerificationSources, type VerifyMemoriesForPublishOptions, WalletPoller, type WeatherClassification, type WeatherPreProcessorOptions, type WebSearchClassification, type WebSearchPreProcessorOptions, addConversationMemoriesOp, archiveVaultMemoryOp, backfillMemoryTopicsOp, buildNotionAuthUrl, capHopsForDensity, chatStorageMigrations, chatStorageSchema, chunkAndEmbedAllMessages, chunkAndEmbedMessage, chunkText, classifyCryptoPrice, classifyCryptoPriceBatch, classifyDecay, classifyInjectionCandidates, classifyObservationTrend, classifyStockPrice, classifyStockPriceBatch, classifyWeather, classifyWeatherBatch, classifyWebSearch, classifyWebSearchBatch, clearAllEncryptionKeys, clearAllEncryptionState, clearConversationMemoriesOp, clearEncryptionKey, clearLazyTitleCache, clearServerToolsCache, consoleLogger, conversationMemoryToStored, cosineInt8, createAutoExtractor, createChunkVectorCache, createCryptoPricePreProcessor, createDecaySweeper, createLlmDecayClassifier, createLlmNeighborRefiner, createMemoryEngineTool, createMemoryVaultSearchTool, createMemoryVaultTool, createMessageSourceResolver, createNotionTools, createPlatformCursorStore, createRecallTool, createStockPricePreProcessor, createStreamingDeAnonymizer, createVaultEmbeddingCache, createVaultFolderOp, createVaultMemoriesBatchOp, createVaultMemoryOp, createWeatherPreProcessor, createWebSearchPreProcessor, decodeChunkVector, decryptConversationTitle, deleteAllVaultMemoriesForUserOp, deleteVaultFolderOp, deleteVaultMemoryOp, dequantizeEmbedding, discoverNotionOAuthEndpoints, eagerEmbedContent, embedAllMessages, embedMessage, encodeChunkVector, ensureDefaultFoldersOp, exchangeNotionCode, extractAndLinkEntitiesForMemoriesOp, extractAndRetain, extractEntitiesForMemories, extractFacts, generateConversationId, generateEmbedding, generateEmbeddings, generateNotionPKCE, getAllVaultFoldersOp, getAllVaultMemoriesOp, getAllVaultMemoryContentsOp, getCachedServerTools, getConversationMemoriesOp, getConversationsByProjectLazyOp, getConversationsLazyOp, getConversationsPageOp, getDecayCandidatesRawOp, getLogger, getMemoriesNeedingTopicExtractionOp, getServerTools, getUnfiledVaultMemoriesOp, getVaultFolderMemoryCountOp, getVaultMemoryOp, hardDeleteDecayedOp, hasEncryptionKey, ingestPublishedPhotoMemoriesOp, injectionSignatureCatalog, isPiiRedactor, isRerankerAvailable, moveMemoriesToFolderOp, noopLogger, onKeyAvailable, parseMedia, preEmbedVaultMemories, quantizeEmbedding, queueManager, rankProfileCandidates, recall, reflect, refreshEncryptionKeyIfMatches, refreshNotionAccessToken, registerNotionClient, relinkMemoryTopicsOp, requestEncryptionKey, resolvePiiRedactor, restoreVaultMemoryOp, resumeStream, retain, scoreProfileSalience, screenCandidatesForInjection, sdkMigrations, sdkModelClasses, sdkSchema, searchVaultMemories, seedEncryptionKeys, setLogger, setMemoryVisibilityOp, shouldChunkMessage, stampTopicsExtractedAtOp, streamCancelPath, streamReplayPath, summarizeObservationTrends, supersedeVaultMemoryOp, synthesizeProfile, traverseGraphLane, ttlForType, updateVaultFolderContextOp, updateVaultFolderOp, updateVaultMemoryEmbeddingOp, updateVaultMemoryOp, upsertMessageOp, useChat, useChatStorage, useCredits, useEncryption, useModels, verifyMemoriesForPublish, xhrTransport };
+export { type AutoExtractMessage, type AutoExtractor, type Budget, CHUNKS_DISCARDED_ORIGIN, type CachedChunkVectors, type CachedServerTools, Conversation as ChatConversation, Message as ChatMessage, type ChatRole, type ChunkVectorCache, type ChunkingOptions, type ConsolidationFallbackReason, type ConversationMemoryInput, ConversationMemory as ConversationMemoryModel, type ConversationMemoryOperationsContext, type CreateAutoExtractorOptions, type CreateConversationOptions, type CreateDecaySweeperOptions, type CreateMessageOptions, type CreateVaultFolderOptions, type CreateVaultMemoryOptions, type CryptoPriceClassification, type CryptoPricePreProcessorOptions, DEFAULT_CACHE_EXPIRATION_MS, DEFAULT_CHUNK_CACHE_SIZE, DEFAULT_CHUNK_OVERLAP, DEFAULT_CHUNK_SIZE, DEFAULT_DECAY_POLICY, DEFAULT_MAX_CLASSIFIER_CALLS_PER_SWEEP, DEFAULT_MIN_CHUNK_SIZE, DEFAULT_PROFILE_FACETS, DEFAULT_PROFILE_FACT_TYPE_WEIGHTS, DEFAULT_PROFILE_PROOF_ALPHA, DEFAULT_PROFILE_TREND_MULTIPLIERS, DEFAULT_VAULT_CACHE_SIZE, DatabaseManager, type DatabaseManagerLogger, type DatabaseManagerOptions, type DecayCandidateRaw, type DecayClassifier, type DecayInput, type DecayPolicy, type DecaySweepResult, type DecaySweeper, type DecayVerdict, ENTITY_FANOUT, type EmbeddedWalletSignerFn, EncryptionKeyMissingError, type ExtractFactsOptions, type ExtractOutcome, type ExtractedCandidate, type ExtractedEntity, type ExtractionCursorStore, type FactType, type FileMetadata, type FlushResult, type GetConversationsPageOptions, type GetMessagesPageOptions, type GraphTraversalOptions, HARD_DELETE_WINDOW_MS, INFERENCE_ID_HEADER, type InjectionClassifierOptions, type InjectionReason, type LazyStoredConversation, type LlmDecayClassifierOptions, type LlmNeighborRefinerOptions, type Logger, LoggerProvider, type LoggerProviderProps, MAX_HOPS, MEDIUM_TTL_MS, type MemoriesNeedingTopicExtraction, type EmbeddingOptions as MemoryEngineEmbeddingOptions, type MemoryEngineResult, type MemoryEngineSearchOptions, type MemoryExtractedEvent, type MemoryKind, type MemoryQuarantinedEvent, type MemoryToVerify, type MemoryVaultSearchOptions, type MemoryVaultToolOptions, type MemoryVerification, type MessageRedactionResult, type MessageSkeleton, NEVER_TTL_MS, NODE_BUDGET, NOTION_OAUTH_CONFIG, type NeighborRefiner, type NotionAuthUrlParams, type NotionClientRegistration, type NotionExchangeCodeParams, type NotionOAuthEndpoints, type NotionPKCEChallenge, type NotionRefreshTokenParams, type NotionTokenResponse, type NowSource, type ObservationTrend, type ObservationTrendInput, PAST_EVENT_GRACE_MS, PII_PATTERNS, PROFILE_DOC_VERSION, type PhotoIngestResult, type PhotoMediaRef, type PiiCategory, type PiiMatch, type PiiPattern, PiiRedactor, type PiiRedactorOptions, type PlatformStorage, type PortalLlmAuth, type ProfileConfigFingerprint, type ProfileDoc, type ProfileFacet, type ProfileFacetKey, type ProfileSalienceInput, type ProfileSection, type PromptPreProcessor, type PromptPreProcessorContext, type PublishedPhotoMemory, type QuantizedEmbedding, type QuarantinedMemoryInfo, QueueManager, type QueueStatus, RECALL_MAX_LIMIT, RECALL_TOOL_NAME, type RankableVaultMemory, type RankedMemory, type RankedProfileCandidate, type RecallContext, type RecallDegradation, type RecallDiagnostics, type RecallOptions, type RecallResult, type RecallToolCallbacks, type RecallToolOptions, type RecencyOptions, type RedactionResult, type ReflectOptions, type ReflectResult, type RequestEncryptionKeyOptions, RerankerUnavailableError, type ResumeStreamOptions, type ResumeStreamResult, type ResumeStreamWithStorageResult, type RetainAction, type RetainContext, type RetainOptions, type RetainResult, type RetainSource, SDK_SCHEMA_VERSION, SHORT_TTL_MS, STREAM_RESUMABLE_HEADER, type ScoreBreakdown, type ScoreProfileSalienceOptions, type ScreenResult, type ScreenedCandidate, type SearchSource, type SendMessageWithStorageArgs, type SendMessageWithStorageDetachedResult, type SendMessageWithStorageResult, type ServerToolsOptions, type ServerToolsResponse, type SignMessageFn, type StockPriceClassification, type StockPricePreProcessorOptions, type ChatCompletionUsage as StoredChatCompletionUsage, type StoredConversation, type StoredConversationMemory, type StoredMessage, type StoredMessageWithSimilarity, type StoredVaultFolder, VaultFolder as StoredVaultFolderModel, type StoredVaultMemory, VaultMemory as StoredVaultMemoryModel, StreamExpiredError, type StreamMetaEvent, type StreamResumeHandle, type SynthesizeProfileOptions, TOOL_RESULT_ORIGIN, TOPICS_EXTRACTION_VERSION, TOPIC_EXTRACTION_BATCH_SIZE, TREND_RECENT_WINDOW_DAYS, TREND_STALE_WINDOW_DAYS, type TextChunk, type TopicExtractOptions, type TopicExtractionInput, type TopicExtractionRunResult, type TurnCompleteEvent, type TurnSkippedEvent, type UncheckedReason, type UnverifiableReason, type UpdateVaultFolderOptions, type UpdateVaultMemoryOptions, type UseChatStorageOptions, type UseChatStorageResult, type UseCreditsOptions, type UseCreditsResult, type UseModelsOptions, type UseModelsResult, VAULT_SIZE_HOP_CAP, type VaultEmbeddingCache, type VaultFolderOperationsContext, type VaultMemoryOperationsContext, type VaultMemoryVisibility, type VaultSaveOperation, type VaultSearchResult, type VerificationSources, type VerifyMemoriesForPublishOptions, WalletPoller, type WeatherClassification, type WeatherPreProcessorOptions, type WebSearchClassification, type WebSearchPreProcessorOptions, addConversationMemoriesOp, archiveVaultMemoryOp, backfillMemoryTopicsOp, buildNotionAuthUrl, capHopsForDensity, chatStorageMigrations, chatStorageSchema, chunkAndEmbedAllMessages, chunkAndEmbedMessage, chunkText, classifyCryptoPrice, classifyCryptoPriceBatch, classifyDecay, classifyInjectionCandidates, classifyObservationTrend, classifyStockPrice, classifyStockPriceBatch, classifyWeather, classifyWeatherBatch, classifyWebSearch, classifyWebSearchBatch, clearAllEncryptionKeys, clearAllEncryptionState, clearConversationMemoriesOp, clearEncryptionKey, clearLazyTitleCache, clearServerToolsCache, consoleLogger, conversationMemoryToStored, cosineInt8, createAutoExtractor, createChunkVectorCache, createCryptoPricePreProcessor, createDecaySweeper, createLlmDecayClassifier, createLlmNeighborRefiner, createMemoryEngineTool, createMemoryVaultSearchTool, createMemoryVaultTool, createMessageSourceResolver, createNotionTools, createPlatformCursorStore, createRecallTool, createStockPricePreProcessor, createStreamingDeAnonymizer, createVaultEmbeddingCache, createVaultFolderOp, createVaultMemoriesBatchOp, createVaultMemoryOp, createWeatherPreProcessor, createWebSearchPreProcessor, decodeChunkVector, decryptConversationTitle, deleteAllVaultMemoriesForUserOp, deleteVaultFolderOp, deleteVaultMemoryOp, dequantizeEmbedding, discoverNotionOAuthEndpoints, eagerEmbedContent, embedAllMessages, embedMessage, encodeChunkVector, ensureDefaultFoldersOp, exchangeNotionCode, extractAndLinkEntitiesForMemoriesOp, extractAndRetain, extractEntitiesForMemories, extractFacts, generateConversationId, generateEmbedding, generateEmbeddings, generateNotionPKCE, getAllVaultFoldersOp, getAllVaultMemoriesOp, getAllVaultMemoryContentsOp, getCachedServerTools, getConversationMemoriesOp, getConversationsByProjectLazyOp, getConversationsLazyOp, getConversationsPageOp, getDecayCandidatesRawOp, getLogger, getMemoriesNeedingTopicExtractionOp, getServerTools, getUnfiledVaultMemoriesOp, getVaultFolderMemoryCountOp, getVaultMemoriesByIdsOp, getVaultMemoryOp, getVaultRankingProjectionsOp, hardDeleteDecayedOp, hasEncryptionKey, ingestPublishedPhotoMemoriesOp, injectionSignatureCatalog, isPiiRedactor, isRerankerAvailable, moveMemoriesToFolderOp, noopLogger, onKeyAvailable, parseMedia, preEmbedVaultMemories, quantizeEmbedding, queueManager, rankProfileCandidates, recall, reflect, refreshEncryptionKeyIfMatches, refreshNotionAccessToken, registerNotionClient, relinkMemoryTopicsOp, requestEncryptionKey, resolvePiiRedactor, restoreVaultMemoryOp, resumeStream, retain, scoreProfileSalience, screenCandidatesForInjection, sdkMigrations, sdkModelClasses, sdkSchema, searchVaultMemories, seedEncryptionKeys, setLogger, setMemoryVisibilityOp, shouldChunkMessage, stampTopicsExtractedAtOp, streamCancelPath, streamReplayPath, summarizeObservationTrends, supersedeVaultMemoryOp, synthesizeProfile, traverseGraphLane, ttlForType, updateVaultFolderContextOp, updateVaultFolderOp, updateVaultMemoryEmbeddingOp, updateVaultMemoryOp, upsertMessageOp, useChat, useChatStorage, useCredits, useEncryption, useModels, verifyMemoriesForPublish, xhrTransport };

package/dist/expo/index.d.ts

@@ -6212,6 +6212,29 @@ interface StoredVaultMemory {
     updatedAt: Date;
     isDeleted: boolean;
 }
+/**
+ * Content-free projection of a vault memory, used to RANK candidates for recall
+ * WITHOUT decrypting the (encrypted) `content` column. Everything here is a
+ * plaintext-at-rest column — `embedding` is stored plaintext (schema v21), and
+ * `folderId`/`updatedAt` drive source-filtering + tie-breaks. There is
+ * deliberately NO `content` field: a ranking pass must never carry ciphertext
+ * masquerading as the plaintext `StoredVaultMemory.content`. Decrypt the top-N
+ * winners on demand via {@link getVaultMemoryOp}.
+ */
+interface RankableVaultMemory {
+    /** WatermelonDB internal ID — pass to `getVaultMemoryOp` to decrypt on demand. */
+    uniqueId: string;
+    /** Scope for partitioning memories (e.g., "private", "shared"). */
+    scope: string;
+    /** Folder ID for organization, null if unfiled. */
+    folderId: string | null;
+    /** JSON-stringified embedding vector, null if not yet computed. */
+    embedding: string | null;
+    /** Model that produced `embedding`. Null on legacy rows. */
+    embeddingModel: string | null;
+    createdAt: Date;
+    updatedAt: Date;
+}
 /**
  * A photo a server-extracted memory came from, as
  * GET /api/memories/published returns it in `media[]`.
@@ -6402,6 +6425,45 @@ declare function getAllVaultMemoriesOp(ctx: VaultMemoryOperationsContext, option
      */
     visibility?: VaultMemoryVisibility[];
 }): Promise<StoredVaultMemory[]>;
+/**
+ * Return content-free {@link RankableVaultMemory} projections for recall
+ * ranking — the "rank first, decrypt last" half of on-demand recall (#5017).
+ *
+ * Mirrors {@link getAllVaultMemoriesOp}'s query EXACTLY (same
+ * `baseVaultConditions` — `is_deleted=false` + `user_id` scoping — plus the
+ * same scope/folder filters and ordering) so the candidate SET is identical to
+ * the whole-vault read; the ONLY difference is that `content` is never
+ * decrypted (and never returned). Callers rank on `embedding`, then decrypt the
+ * top-N winners on demand via {@link getVaultMemoryOp}.
+ *
+ * Because it reuses `baseVaultConditions`, deleted and cross-user rows are
+ * excluded here just as they are from every other read path — a no-decrypt op
+ * that skipped these would leak embeddings for rows the caller can't see.
+ */
+declare function getVaultRankingProjectionsOp(ctx: VaultMemoryOperationsContext, options?: {
+    scopes?: string[];
+    since?: Date;
+    limit?: number;
+    folderId?: string | null;
+}): Promise<RankableVaultMemory[]>;
+/**
+ * Bulk-decrypt a KNOWN set of memories by ID — the "decrypt last" half of
+ * on-demand recall (#5017) for lanes whose size is NOT bounded to the top-N
+ * (e.g. the keyword lane over un-embedded rows). Uses `unsafeFetchRaw` + a
+ * single `id oneOf` query so it does NOT pin a WatermelonDB Model per row into
+ * the never-evicted RecordCache — unlike calling {@link getVaultMemoryOp} N
+ * times, which `.find()`s each row and is only appropriate for the bounded
+ * top-N winners (web Pile-2 tab-memory).
+ *
+ * Reuses `baseVaultConditions`, so deleted / superseded / cross-user rows are
+ * excluded exactly as they are from recall — a caller can pass any id list and
+ * only its own live rows come back.
+ */
+declare function getVaultMemoriesByIdsOp(ctx: VaultMemoryOperationsContext, ids: string[], 
+/** See {@link getVaultEmbeddingsByIdsOp} — must match what admitted these ids. */
+options?: {
+    includeArchived?: boolean;
+}): Promise<StoredVaultMemory[]>;
 declare function getAllVaultMemoryContentsOp(ctx: VaultMemoryOperationsContext, options?: {
     since?: Date;
 }): Promise<string[]>;
@@ -10170,4 +10232,4 @@ declare function refreshNotionAccessToken(params: NotionRefreshTokenParams): Pro
  */
 declare function createNotionTools(getAccessToken: () => string | null, requestNotionAccess: () => Promise<string>): ToolConfig[];
 
-export { type AutoExtractMessage, type AutoExtractor, type Budget, CHUNKS_DISCARDED_ORIGIN, type CachedChunkVectors, type CachedServerTools, Conversation as ChatConversation, Message as ChatMessage, type ChatRole, type ChunkVectorCache, type ChunkingOptions, type ConsolidationFallbackReason, type ConversationMemoryInput, ConversationMemory as ConversationMemoryModel, type ConversationMemoryOperationsContext, type CreateAutoExtractorOptions, type CreateConversationOptions, type CreateDecaySweeperOptions, type CreateMessageOptions, type CreateVaultFolderOptions, type CreateVaultMemoryOptions, type CryptoPriceClassification, type CryptoPricePreProcessorOptions, DEFAULT_CACHE_EXPIRATION_MS, DEFAULT_CHUNK_CACHE_SIZE, DEFAULT_CHUNK_OVERLAP, DEFAULT_CHUNK_SIZE, DEFAULT_DECAY_POLICY, DEFAULT_MAX_CLASSIFIER_CALLS_PER_SWEEP, DEFAULT_MIN_CHUNK_SIZE, DEFAULT_PROFILE_FACETS, DEFAULT_PROFILE_FACT_TYPE_WEIGHTS, DEFAULT_PROFILE_PROOF_ALPHA, DEFAULT_PROFILE_TREND_MULTIPLIERS, DEFAULT_VAULT_CACHE_SIZE, DatabaseManager, type DatabaseManagerLogger, type DatabaseManagerOptions, type DecayCandidateRaw, type DecayClassifier, type DecayInput, type DecayPolicy, type DecaySweepResult, type DecaySweeper, type DecayVerdict, ENTITY_FANOUT, type EmbeddedWalletSignerFn, EncryptionKeyMissingError, type ExtractFactsOptions, type ExtractOutcome, type ExtractedCandidate, type ExtractedEntity, type ExtractionCursorStore, type FactType, type FileMetadata, type FlushResult, type GetConversationsPageOptions, type GetMessagesPageOptions, type GraphTraversalOptions, HARD_DELETE_WINDOW_MS, INFERENCE_ID_HEADER, type InjectionClassifierOptions, type InjectionReason, type LazyStoredConversation, type LlmDecayClassifierOptions, type LlmNeighborRefinerOptions, type Logger, LoggerProvider, type LoggerProviderProps, MAX_HOPS, MEDIUM_TTL_MS, type MemoriesNeedingTopicExtraction, type EmbeddingOptions as MemoryEngineEmbeddingOptions, type MemoryEngineResult, type MemoryEngineSearchOptions, type MemoryExtractedEvent, type MemoryKind, type MemoryQuarantinedEvent, type MemoryToVerify, type MemoryVaultSearchOptions, type MemoryVaultToolOptions, type MemoryVerification, type MessageRedactionResult, type MessageSkeleton, NEVER_TTL_MS, NODE_BUDGET, NOTION_OAUTH_CONFIG, type NeighborRefiner, type NotionAuthUrlParams, type NotionClientRegistration, type NotionExchangeCodeParams, type NotionOAuthEndpoints, type NotionPKCEChallenge, type NotionRefreshTokenParams, type NotionTokenResponse, type NowSource, type ObservationTrend, type ObservationTrendInput, PAST_EVENT_GRACE_MS, PII_PATTERNS, PROFILE_DOC_VERSION, type PhotoIngestResult, type PhotoMediaRef, type PiiCategory, type PiiMatch, type PiiPattern, PiiRedactor, type PiiRedactorOptions, type PlatformStorage, type PortalLlmAuth, type ProfileConfigFingerprint, type ProfileDoc, type ProfileFacet, type ProfileFacetKey, type ProfileSalienceInput, type ProfileSection, type PromptPreProcessor, type PromptPreProcessorContext, type PublishedPhotoMemory, type QuantizedEmbedding, type QuarantinedMemoryInfo, QueueManager, type QueueStatus, RECALL_MAX_LIMIT, RECALL_TOOL_NAME, type RankedMemory, type RankedProfileCandidate, type RecallContext, type RecallDegradation, type RecallDiagnostics, type RecallOptions, type RecallResult, type RecallToolCallbacks, type RecallToolOptions, type RecencyOptions, type RedactionResult, type ReflectOptions, type ReflectResult, type RequestEncryptionKeyOptions, RerankerUnavailableError, type ResumeStreamOptions, type ResumeStreamResult, type ResumeStreamWithStorageResult, type RetainAction, type RetainContext, type RetainOptions, type RetainResult, type RetainSource, SDK_SCHEMA_VERSION, SHORT_TTL_MS, STREAM_RESUMABLE_HEADER, type ScoreBreakdown, type ScoreProfileSalienceOptions, type ScreenResult, type ScreenedCandidate, type SearchSource, type SendMessageWithStorageArgs, type SendMessageWithStorageDetachedResult, type SendMessageWithStorageResult, type ServerToolsOptions, type ServerToolsResponse, type SignMessageFn, type StockPriceClassification, type StockPricePreProcessorOptions, type ChatCompletionUsage as StoredChatCompletionUsage, type StoredConversation, type StoredConversationMemory, type StoredMessage, type StoredMessageWithSimilarity, type StoredVaultFolder, VaultFolder as StoredVaultFolderModel, type StoredVaultMemory, VaultMemory as StoredVaultMemoryModel, StreamExpiredError, type StreamMetaEvent, type StreamResumeHandle, type SynthesizeProfileOptions, TOOL_RESULT_ORIGIN, TOPICS_EXTRACTION_VERSION, TOPIC_EXTRACTION_BATCH_SIZE, TREND_RECENT_WINDOW_DAYS, TREND_STALE_WINDOW_DAYS, type TextChunk, type TopicExtractOptions, type TopicExtractionInput, type TopicExtractionRunResult, type TurnCompleteEvent, type TurnSkippedEvent, type UncheckedReason, type UnverifiableReason, type UpdateVaultFolderOptions, type UpdateVaultMemoryOptions, type UseChatStorageOptions, type UseChatStorageResult, type UseCreditsOptions, type UseCreditsResult, type UseModelsOptions, type UseModelsResult, VAULT_SIZE_HOP_CAP, type VaultEmbeddingCache, type VaultFolderOperationsContext, type VaultMemoryOperationsContext, type VaultMemoryVisibility, type VaultSaveOperation, type VaultSearchResult, type VerificationSources, type VerifyMemoriesForPublishOptions, WalletPoller, type WeatherClassification, type WeatherPreProcessorOptions, type WebSearchClassification, type WebSearchPreProcessorOptions, addConversationMemoriesOp, archiveVaultMemoryOp, backfillMemoryTopicsOp, buildNotionAuthUrl, capHopsForDensity, chatStorageMigrations, chatStorageSchema, chunkAndEmbedAllMessages, chunkAndEmbedMessage, chunkText, classifyCryptoPrice, classifyCryptoPriceBatch, classifyDecay, classifyInjectionCandidates, classifyObservationTrend, classifyStockPrice, classifyStockPriceBatch, classifyWeather, classifyWeatherBatch, classifyWebSearch, classifyWebSearchBatch, clearAllEncryptionKeys, clearAllEncryptionState, clearConversationMemoriesOp, clearEncryptionKey, clearLazyTitleCache, clearServerToolsCache, consoleLogger, conversationMemoryToStored, cosineInt8, createAutoExtractor, createChunkVectorCache, createCryptoPricePreProcessor, createDecaySweeper, createLlmDecayClassifier, createLlmNeighborRefiner, createMemoryEngineTool, createMemoryVaultSearchTool, createMemoryVaultTool, createMessageSourceResolver, createNotionTools, createPlatformCursorStore, createRecallTool, createStockPricePreProcessor, createStreamingDeAnonymizer, createVaultEmbeddingCache, createVaultFolderOp, createVaultMemoriesBatchOp, createVaultMemoryOp, createWeatherPreProcessor, createWebSearchPreProcessor, decodeChunkVector, decryptConversationTitle, deleteAllVaultMemoriesForUserOp, deleteVaultFolderOp, deleteVaultMemoryOp, dequantizeEmbedding, discoverNotionOAuthEndpoints, eagerEmbedContent, embedAllMessages, embedMessage, encodeChunkVector, ensureDefaultFoldersOp, exchangeNotionCode, extractAndLinkEntitiesForMemoriesOp, extractAndRetain, extractEntitiesForMemories, extractFacts, generateConversationId, generateEmbedding, generateEmbeddings, generateNotionPKCE, getAllVaultFoldersOp, getAllVaultMemoriesOp, getAllVaultMemoryContentsOp, getCachedServerTools, getConversationMemoriesOp, getConversationsByProjectLazyOp, getConversationsLazyOp, getConversationsPageOp, getDecayCandidatesRawOp, getLogger, getMemoriesNeedingTopicExtractionOp, getServerTools, getUnfiledVaultMemoriesOp, getVaultFolderMemoryCountOp, getVaultMemoryOp, hardDeleteDecayedOp, hasEncryptionKey, ingestPublishedPhotoMemoriesOp, injectionSignatureCatalog, isPiiRedactor, isRerankerAvailable, moveMemoriesToFolderOp, noopLogger, onKeyAvailable, parseMedia, preEmbedVaultMemories, quantizeEmbedding, queueManager, rankProfileCandidates, recall, reflect, refreshEncryptionKeyIfMatches, refreshNotionAccessToken, registerNotionClient, relinkMemoryTopicsOp, requestEncryptionKey, resolvePiiRedactor, restoreVaultMemoryOp, resumeStream, retain, scoreProfileSalience, screenCandidatesForInjection, sdkMigrations, sdkModelClasses, sdkSchema, searchVaultMemories, seedEncryptionKeys, setLogger, setMemoryVisibilityOp, shouldChunkMessage, stampTopicsExtractedAtOp, streamCancelPath, streamReplayPath, summarizeObservationTrends, supersedeVaultMemoryOp, synthesizeProfile, traverseGraphLane, ttlForType, updateVaultFolderContextOp, updateVaultFolderOp, updateVaultMemoryEmbeddingOp, updateVaultMemoryOp, upsertMessageOp, useChat, useChatStorage, useCredits, useEncryption, useModels, verifyMemoriesForPublish, xhrTransport };
+export { type AutoExtractMessage, type AutoExtractor, type Budget, CHUNKS_DISCARDED_ORIGIN, type CachedChunkVectors, type CachedServerTools, Conversation as ChatConversation, Message as ChatMessage, type ChatRole, type ChunkVectorCache, type ChunkingOptions, type ConsolidationFallbackReason, type ConversationMemoryInput, ConversationMemory as ConversationMemoryModel, type ConversationMemoryOperationsContext, type CreateAutoExtractorOptions, type CreateConversationOptions, type CreateDecaySweeperOptions, type CreateMessageOptions, type CreateVaultFolderOptions, type CreateVaultMemoryOptions, type CryptoPriceClassification, type CryptoPricePreProcessorOptions, DEFAULT_CACHE_EXPIRATION_MS, DEFAULT_CHUNK_CACHE_SIZE, DEFAULT_CHUNK_OVERLAP, DEFAULT_CHUNK_SIZE, DEFAULT_DECAY_POLICY, DEFAULT_MAX_CLASSIFIER_CALLS_PER_SWEEP, DEFAULT_MIN_CHUNK_SIZE, DEFAULT_PROFILE_FACETS, DEFAULT_PROFILE_FACT_TYPE_WEIGHTS, DEFAULT_PROFILE_PROOF_ALPHA, DEFAULT_PROFILE_TREND_MULTIPLIERS, DEFAULT_VAULT_CACHE_SIZE, DatabaseManager, type DatabaseManagerLogger, type DatabaseManagerOptions, type DecayCandidateRaw, type DecayClassifier, type DecayInput, type DecayPolicy, type DecaySweepResult, type DecaySweeper, type DecayVerdict, ENTITY_FANOUT, type EmbeddedWalletSignerFn, EncryptionKeyMissingError, type ExtractFactsOptions, type ExtractOutcome, type ExtractedCandidate, type ExtractedEntity, type ExtractionCursorStore, type FactType, type FileMetadata, type FlushResult, type GetConversationsPageOptions, type GetMessagesPageOptions, type GraphTraversalOptions, HARD_DELETE_WINDOW_MS, INFERENCE_ID_HEADER, type InjectionClassifierOptions, type InjectionReason, type LazyStoredConversation, type LlmDecayClassifierOptions, type LlmNeighborRefinerOptions, type Logger, LoggerProvider, type LoggerProviderProps, MAX_HOPS, MEDIUM_TTL_MS, type MemoriesNeedingTopicExtraction, type EmbeddingOptions as MemoryEngineEmbeddingOptions, type MemoryEngineResult, type MemoryEngineSearchOptions, type MemoryExtractedEvent, type MemoryKind, type MemoryQuarantinedEvent, type MemoryToVerify, type MemoryVaultSearchOptions, type MemoryVaultToolOptions, type MemoryVerification, type MessageRedactionResult, type MessageSkeleton, NEVER_TTL_MS, NODE_BUDGET, NOTION_OAUTH_CONFIG, type NeighborRefiner, type NotionAuthUrlParams, type NotionClientRegistration, type NotionExchangeCodeParams, type NotionOAuthEndpoints, type NotionPKCEChallenge, type NotionRefreshTokenParams, type NotionTokenResponse, type NowSource, type ObservationTrend, type ObservationTrendInput, PAST_EVENT_GRACE_MS, PII_PATTERNS, PROFILE_DOC_VERSION, type PhotoIngestResult, type PhotoMediaRef, type PiiCategory, type PiiMatch, type PiiPattern, PiiRedactor, type PiiRedactorOptions, type PlatformStorage, type PortalLlmAuth, type ProfileConfigFingerprint, type ProfileDoc, type ProfileFacet, type ProfileFacetKey, type ProfileSalienceInput, type ProfileSection, type PromptPreProcessor, type PromptPreProcessorContext, type PublishedPhotoMemory, type QuantizedEmbedding, type QuarantinedMemoryInfo, QueueManager, type QueueStatus, RECALL_MAX_LIMIT, RECALL_TOOL_NAME, type RankableVaultMemory, type RankedMemory, type RankedProfileCandidate, type RecallContext, type RecallDegradation, type RecallDiagnostics, type RecallOptions, type RecallResult, type RecallToolCallbacks, type RecallToolOptions, type RecencyOptions, type RedactionResult, type ReflectOptions, type ReflectResult, type RequestEncryptionKeyOptions, RerankerUnavailableError, type ResumeStreamOptions, type ResumeStreamResult, type ResumeStreamWithStorageResult, type RetainAction, type RetainContext, type RetainOptions, type RetainResult, type RetainSource, SDK_SCHEMA_VERSION, SHORT_TTL_MS, STREAM_RESUMABLE_HEADER, type ScoreBreakdown, type ScoreProfileSalienceOptions, type ScreenResult, type ScreenedCandidate, type SearchSource, type SendMessageWithStorageArgs, type SendMessageWithStorageDetachedResult, type SendMessageWithStorageResult, type ServerToolsOptions, type ServerToolsResponse, type SignMessageFn, type StockPriceClassification, type StockPricePreProcessorOptions, type ChatCompletionUsage as StoredChatCompletionUsage, type StoredConversation, type StoredConversationMemory, type StoredMessage, type StoredMessageWithSimilarity, type StoredVaultFolder, VaultFolder as StoredVaultFolderModel, type StoredVaultMemory, VaultMemory as StoredVaultMemoryModel, StreamExpiredError, type StreamMetaEvent, type StreamResumeHandle, type SynthesizeProfileOptions, TOOL_RESULT_ORIGIN, TOPICS_EXTRACTION_VERSION, TOPIC_EXTRACTION_BATCH_SIZE, TREND_RECENT_WINDOW_DAYS, TREND_STALE_WINDOW_DAYS, type TextChunk, type TopicExtractOptions, type TopicExtractionInput, type TopicExtractionRunResult, type TurnCompleteEvent, type TurnSkippedEvent, type UncheckedReason, type UnverifiableReason, type UpdateVaultFolderOptions, type UpdateVaultMemoryOptions, type UseChatStorageOptions, type UseChatStorageResult, type UseCreditsOptions, type UseCreditsResult, type UseModelsOptions, type UseModelsResult, VAULT_SIZE_HOP_CAP, type VaultEmbeddingCache, type VaultFolderOperationsContext, type VaultMemoryOperationsContext, type VaultMemoryVisibility, type VaultSaveOperation, type VaultSearchResult, type VerificationSources, type VerifyMemoriesForPublishOptions, WalletPoller, type WeatherClassification, type WeatherPreProcessorOptions, type WebSearchClassification, type WebSearchPreProcessorOptions, addConversationMemoriesOp, archiveVaultMemoryOp, backfillMemoryTopicsOp, buildNotionAuthUrl, capHopsForDensity, chatStorageMigrations, chatStorageSchema, chunkAndEmbedAllMessages, chunkAndEmbedMessage, chunkText, classifyCryptoPrice, classifyCryptoPriceBatch, classifyDecay, classifyInjectionCandidates, classifyObservationTrend, classifyStockPrice, classifyStockPriceBatch, classifyWeather, classifyWeatherBatch, classifyWebSearch, classifyWebSearchBatch, clearAllEncryptionKeys, clearAllEncryptionState, clearConversationMemoriesOp, clearEncryptionKey, clearLazyTitleCache, clearServerToolsCache, consoleLogger, conversationMemoryToStored, cosineInt8, createAutoExtractor, createChunkVectorCache, createCryptoPricePreProcessor, createDecaySweeper, createLlmDecayClassifier, createLlmNeighborRefiner, createMemoryEngineTool, createMemoryVaultSearchTool, createMemoryVaultTool, createMessageSourceResolver, createNotionTools, createPlatformCursorStore, createRecallTool, createStockPricePreProcessor, createStreamingDeAnonymizer, createVaultEmbeddingCache, createVaultFolderOp, createVaultMemoriesBatchOp, createVaultMemoryOp, createWeatherPreProcessor, createWebSearchPreProcessor, decodeChunkVector, decryptConversationTitle, deleteAllVaultMemoriesForUserOp, deleteVaultFolderOp, deleteVaultMemoryOp, dequantizeEmbedding, discoverNotionOAuthEndpoints, eagerEmbedContent, embedAllMessages, embedMessage, encodeChunkVector, ensureDefaultFoldersOp, exchangeNotionCode, extractAndLinkEntitiesForMemoriesOp, extractAndRetain, extractEntitiesForMemories, extractFacts, generateConversationId, generateEmbedding, generateEmbeddings, generateNotionPKCE, getAllVaultFoldersOp, getAllVaultMemoriesOp, getAllVaultMemoryContentsOp, getCachedServerTools, getConversationMemoriesOp, getConversationsByProjectLazyOp, getConversationsLazyOp, getConversationsPageOp, getDecayCandidatesRawOp, getLogger, getMemoriesNeedingTopicExtractionOp, getServerTools, getUnfiledVaultMemoriesOp, getVaultFolderMemoryCountOp, getVaultMemoriesByIdsOp, getVaultMemoryOp, getVaultRankingProjectionsOp, hardDeleteDecayedOp, hasEncryptionKey, ingestPublishedPhotoMemoriesOp, injectionSignatureCatalog, isPiiRedactor, isRerankerAvailable, moveMemoriesToFolderOp, noopLogger, onKeyAvailable, parseMedia, preEmbedVaultMemories, quantizeEmbedding, queueManager, rankProfileCandidates, recall, reflect, refreshEncryptionKeyIfMatches, refreshNotionAccessToken, registerNotionClient, relinkMemoryTopicsOp, requestEncryptionKey, resolvePiiRedactor, restoreVaultMemoryOp, resumeStream, retain, scoreProfileSalience, screenCandidatesForInjection, sdkMigrations, sdkModelClasses, sdkSchema, searchVaultMemories, seedEncryptionKeys, setLogger, setMemoryVisibilityOp, shouldChunkMessage, stampTopicsExtractedAtOp, streamCancelPath, streamReplayPath, summarizeObservationTrends, supersedeVaultMemoryOp, synthesizeProfile, traverseGraphLane, ttlForType, updateVaultFolderContextOp, updateVaultFolderOp, updateVaultMemoryEmbeddingOp, updateVaultMemoryOp, upsertMessageOp, useChat, useChatStorage, useCredits, useEncryption, useModels, verifyMemoriesForPublish, xhrTransport };

package/dist/expo/index.mjs

@@ -87,7 +87,9 @@ import {
   getToolCallEvents,
   getToolsChecksum,
   getUnfiledVaultMemoriesOp,
+  getVaultMemoriesByIdsOp,
   getVaultMemoryOp,
+  getVaultRankingProjectionsOp,
   hardDeleteDecayedOp,
   hasEncryptionKey,
   isEncrypted,
@@ -130,7 +132,7 @@ import {
   upsertMessageOp,
   useEncryption,
   vaultMemoryToStored
-} from "./chunk-NCP3VGRX.mjs";
+} from "./chunk-2YHVYDEL.mjs";
 import {
   PII_PATTERNS,
   PiiRedactor,
@@ -138,8 +140,9 @@ import {
   isPiiRedactor,
   notifyConsolidationFallback,
   resolvePiiRedactor
-} from "./chunk-DT6QNRZL.mjs";
+} from "./chunk-VOMDHMKH.mjs";
 import {
+  INTERNAL_FLOW_MARKER,
   callPortalJsonCompletion,
   consoleLogger,
   extractJsonCandidate,
@@ -148,8 +151,9 @@ import {
   resolvePortalAuthHeaders,
   setLogger,
   supportsResponseFormat,
-  validateEndpointOverride
-} from "./chunk-ILAWDQDE.mjs";
+  validateEndpointOverride,
+  withInternalFlowMarker
+} from "./chunk-B5UPJRCU.mjs";
 import {
   BASE_URL,
   MCP_R2_DOMAIN,
@@ -4789,7 +4793,17 @@ async function callSummarizationLlm(prompt, model, token, baseUrl) {
       body: JSON.stringify({
         model,
         stream: false,
-        messages: [{ role: "user", content: prompt }]
+        // The marker rides a system message because this call has no other
+        // provenance: it posts to the MAIN chat endpoint (not /utility/*), carries no
+        // conversationId, and its prompt is neither the app's chat base prompt nor any
+        // registered flow fingerprint — so without this it reads as markerless, i.e.
+        // as a scripted abuser. Progressive summarization runs for every free-tier
+        // long conversation, so at the PORTAL_DETECTION_REJECT_MARKERLESS flip it
+        // would 403 and silently fall back to verbatim history (context bloat + cost).
+        messages: [
+          { role: "system", content: INTERNAL_FLOW_MARKER },
+          { role: "user", content: prompt }
+        ]
       }),
       signal: controller.signal
     });
@@ -6847,7 +6861,7 @@ async function tryConsolidate(trimmed, ctx, options, prepared) {
     content: m.content,
     similarity: m.similarity
   }));
-  const { consolidateMemory: doConsolidate } = await import("./consolidate-3MEWQNM3.mjs");
+  const { consolidateMemory: doConsolidate } = await import("./consolidate-TWE6OSSZ.mjs");
   const decision = await doConsolidate(trimmed, candidates, consolidateOptions);
   if (decision.action === "create") return null;
   if (decision.action === "supersede" && decision.content) {
@@ -8549,7 +8563,10 @@ async function synthesizeFacet(facet, ctx, options, prior) {
     limit,
     types: ["fact"],
     maxTokens: DEFAULT_FACET_MAX_TOKENS,
-    systemPrompt: buildFacetSystemPrompt(facet),
+    // Profile-facet synthesis is a background op, so it marks its own prompt.
+    // reflect() itself must NOT mark — it also serves the user's own questions,
+    // and that traffic is chat, not an internal flow. See ../internalFlowMarker.
+    systemPrompt: withInternalFlowMarker(buildFacetSystemPrompt(facet)),
     responseSchema: facetResponseSchema(facet.key),
     memories
   });
@@ -14850,7 +14867,9 @@ export {
   getServerTools,
   getUnfiledVaultMemoriesOp,
   getVaultFolderMemoryCountOp,
+  getVaultMemoriesByIdsOp,
   getVaultMemoryOp,
+  getVaultRankingProjectionsOp,
   hardDeleteDecayedOp,
   hasEncryptionKey,
   ingestPublishedPhotoMemoriesOp,

package/dist/expo/{recall-ISSI7RMD.mjs → recall-M3JVFTZL.mjs}

@@ -1,7 +1,7 @@
 import {
   recall
-} from "./chunk-NCP3VGRX.mjs";
-import "./chunk-ILAWDQDE.mjs";
+} from "./chunk-2YHVYDEL.mjs";
+import "./chunk-B5UPJRCU.mjs";
 import "./chunk-GYKJOWEO.mjs";
 export {
   recall

package/dist/react/{chunk-VMI74IUX.mjs → chunk-2ARMO2NN.mjs}

@@ -1,6 +1,6 @@
 import {
   getLogger
-} from "./chunk-ILAWDQDE.mjs";
+} from "./chunk-B5UPJRCU.mjs";
 
 // src/lib/pii/patterns.ts
 function luhnCheck(digits) {

package/dist/{expo/chunk-ILAWDQDE.mjs → react/chunk-B5UPJRCU.mjs}

@@ -45,6 +45,14 @@ function validateEndpointOverride(override) {
   return { valid: true, endpoint: trimmed.startsWith("/") ? trimmed : `/${trimmed}` };
 }
 
+// src/lib/internalFlowMarker.ts
+var INTERNAL_FLOW_MARKER = "Anuma internal first-party flow (not user chat).";
+function withInternalFlowMarker(systemPrompt) {
+  if (systemPrompt.includes(INTERNAL_FLOW_MARKER)) return systemPrompt;
+  return `${INTERNAL_FLOW_MARKER}
+${systemPrompt}`;
+}
+
 // src/lib/memory/portalLlm.ts
 function defaultBaseUrl() {
   return typeof process !== "undefined" && process.env?.ANUMA_PORTAL_BASE_URL || BASE_URL;
@@ -151,7 +159,12 @@ async function attemptPortalJson(req, endpoint) {
   const isAnthropic = req.model.startsWith("anthropic/");
   const prefill = isAnthropic ? "{" : "";
   const messages = [
-    { role: "system", content: req.systemPrompt },
+    // Every caller of this helper is a first-party BACKGROUND op (fact extraction,
+    // topic sweep, consolidation, classifiers, graph traversal, query
+    // decomposition). Marking here — the one place they all funnel through — is what
+    // keeps the portal's detector reading them as genuine rather than markerless.
+    // See ../internalFlowMarker.
+    { role: "system", content: withInternalFlowMarker(req.systemPrompt) },
     { role: "user", content: req.userMessage }
   ];
   if (prefill) messages.push({ role: "assistant", content: prefill });
@@ -290,6 +303,8 @@ export {
   setLogger,
   getLogger,
   validateEndpointOverride,
+  INTERNAL_FLOW_MARKER,
+  withInternalFlowMarker,
   supportsResponseFormat,
   resolvePortalAuthHeaders,
   callPortalJsonCompletion,

package/dist/react/{chunk-OB5HFCLB.mjs → chunk-S6WPXD5N.mjs}

@@ -1,7 +1,7 @@
 import {
   callPortalJsonCompletion,
   getLogger
-} from "./chunk-ILAWDQDE.mjs";
+} from "./chunk-B5UPJRCU.mjs";
 import {
   BASE_URL,
   createClientConfig
@@ -7085,7 +7085,7 @@ function createMemoryVaultSearchTool(vaultCtx, embeddingOptions, cache, searchOp
             subQueries = decomp.subQueries;
           }
         }
-        const { recall: recall2 } = await import("./recall-DQJINKEY.mjs");
+        const { recall: recall2 } = await import("./recall-ROEK55FJ.mjs");
         let recallDegraded = [];
         const result = await recall2(
           query,

package/dist/{expo/consolidate-3MEWQNM3.mjs → react/consolidate-ZCGS7QUA.mjs}

@@ -1,10 +1,10 @@
 import {
   notifyConsolidationFallback,
   resolvePiiRedactor
-} from "./chunk-DT6QNRZL.mjs";
+} from "./chunk-2ARMO2NN.mjs";
 import {
   callPortalJsonCompletion
-} from "./chunk-ILAWDQDE.mjs";
+} from "./chunk-B5UPJRCU.mjs";
 import "./chunk-GYKJOWEO.mjs";
 
 // src/lib/memory/consolidate.ts

package/dist/react/index.cjs

@@ -4781,6 +4781,20 @@ var init_endpointOverride = __esm({
   }
 });
 
+// src/lib/internalFlowMarker.ts
+function withInternalFlowMarker(systemPrompt) {
+  if (systemPrompt.includes(INTERNAL_FLOW_MARKER)) return systemPrompt;
+  return `${INTERNAL_FLOW_MARKER}
+${systemPrompt}`;
+}
+var INTERNAL_FLOW_MARKER;
+var init_internalFlowMarker = __esm({
+  "src/lib/internalFlowMarker.ts"() {
+    "use strict";
+    INTERNAL_FLOW_MARKER = "Anuma internal first-party flow (not user chat).";
+  }
+});
+
 // src/lib/db/entities/types.ts
 function normalizeEntityName(name) {
   return name.trim().toLowerCase();
@@ -6459,7 +6473,12 @@ async function attemptPortalJson(req, endpoint) {
   const isAnthropic = req.model.startsWith("anthropic/");
   const prefill = isAnthropic ? "{" : "";
   const messages = [
-    { role: "system", content: req.systemPrompt },
+    // Every caller of this helper is a first-party BACKGROUND op (fact extraction,
+    // topic sweep, consolidation, classifiers, graph traversal, query
+    // decomposition). Marking here — the one place they all funnel through — is what
+    // keeps the portal's detector reading them as genuine rather than markerless.
+    // See ../internalFlowMarker.
+    { role: "system", content: withInternalFlowMarker(req.systemPrompt) },
     { role: "user", content: req.userMessage }
   ];
   if (prefill) messages.push({ role: "assistant", content: prefill });
@@ -6597,6 +6616,7 @@ var init_portalLlm = __esm({
     "use strict";
     init_clientConfig();
     init_endpointOverride();
+    init_internalFlowMarker();
     init_logger();
     RESPONSE_FORMAT_OK = /* @__PURE__ */ new Set(["openai", "inclusionai", "deepseek"]);
     RESPONSE_SCHEMA_OK = /* @__PURE__ */ new Set(["openai"]);
@@ -14853,6 +14873,7 @@ async function deleteConversationSummaryOp(ctx, conversationId) {
 }
 
 // src/lib/chat/summarize.ts
+init_internalFlowMarker();
 init_logger();
 var DEFAULT_SUMMARY_TOKEN_THRESHOLD = 4e3;
 var DEFAULT_SUMMARY_MIN_WINDOW_MESSAGES = 4;
@@ -15045,7 +15066,17 @@ async function callSummarizationLlm(prompt, model, token, baseUrl) {
       body: JSON.stringify({
         model,
         stream: false,
-        messages: [{ role: "user", content: prompt }]
+        // The marker rides a system message because this call has no other
+        // provenance: it posts to the MAIN chat endpoint (not /utility/*), carries no
+        // conversationId, and its prompt is neither the app's chat base prompt nor any
+        // registered flow fingerprint — so without this it reads as markerless, i.e.
+        // as a scripted abuser. Progressive summarization runs for every free-tier
+        // long conversation, so at the PORTAL_DETECTION_REJECT_MARKERLESS flip it
+        // would 403 and silently fall back to verbatim history (context bloat + cost).
+        messages: [
+          { role: "system", content: INTERNAL_FLOW_MARKER },
+          { role: "user", content: prompt }
+        ]
       }),
       signal: controller.signal
     });
@@ -18981,6 +19012,7 @@ init_reranker();
 
 // src/lib/memory/synthesizeProfile.ts
 init_operations3();
+init_internalFlowMarker();
 init_logger();
 init_constants();
 init_embeddings();
@@ -19342,7 +19374,10 @@ async function synthesizeFacet(facet, ctx, options, prior) {
     limit,
     types: ["fact"],
     maxTokens: DEFAULT_FACET_MAX_TOKENS,
-    systemPrompt: buildFacetSystemPrompt(facet),
+    // Profile-facet synthesis is a background op, so it marks its own prompt.
+    // reflect() itself must NOT mark — it also serves the user's own questions,
+    // and that traffic is chat, not an internal flow. See ../internalFlowMarker.
+    systemPrompt: withInternalFlowMarker(buildFacetSystemPrompt(facet)),
     responseSchema: facetResponseSchema(facet.key),
     memories
   });

package/dist/react/index.mjs

@@ -178,15 +178,16 @@ import {
   updateVaultMemoryOp,
   useEncryption,
   vaultMemoryToStored
-} from "./chunk-OB5HFCLB.mjs";
+} from "./chunk-S6WPXD5N.mjs";
 import {
   PiiRedactor,
   createStreamingDeAnonymizer,
   isPiiRedactor,
   notifyConsolidationFallback,
   resolvePiiRedactor
-} from "./chunk-VMI74IUX.mjs";
+} from "./chunk-2ARMO2NN.mjs";
 import {
+  INTERNAL_FLOW_MARKER,
   callPortalJsonCompletion,
   consoleLogger,
   extractJsonCandidate,
@@ -195,8 +196,9 @@ import {
   resolvePortalAuthHeaders,
   setLogger,
   supportsResponseFormat,
-  validateEndpointOverride
-} from "./chunk-ILAWDQDE.mjs";
+  validateEndpointOverride,
+  withInternalFlowMarker
+} from "./chunk-B5UPJRCU.mjs";
 import {
   BASE_URL,
   MCP_R2_DOMAIN,
@@ -5152,7 +5154,17 @@ async function callSummarizationLlm(prompt, model, token, baseUrl) {
       body: JSON.stringify({
         model,
         stream: false,
-        messages: [{ role: "user", content: prompt }]
+        // The marker rides a system message because this call has no other
+        // provenance: it posts to the MAIN chat endpoint (not /utility/*), carries no
+        // conversationId, and its prompt is neither the app's chat base prompt nor any
+        // registered flow fingerprint — so without this it reads as markerless, i.e.
+        // as a scripted abuser. Progressive summarization runs for every free-tier
+        // long conversation, so at the PORTAL_DETECTION_REJECT_MARKERLESS flip it
+        // would 403 and silently fall back to verbatim history (context bloat + cost).
+        messages: [
+          { role: "system", content: INTERNAL_FLOW_MARKER },
+          { role: "user", content: prompt }
+        ]
       }),
       signal: controller.signal
     });
@@ -7667,7 +7679,7 @@ async function tryConsolidate(trimmed, ctx, options, prepared) {
     content: m.content,
     similarity: m.similarity
   }));
-  const { consolidateMemory: doConsolidate } = await import("./consolidate-AMPKH6YJ.mjs");
+  const { consolidateMemory: doConsolidate } = await import("./consolidate-ZCGS7QUA.mjs");
   const decision = await doConsolidate(trimmed, candidates, consolidateOptions);
   if (decision.action === "create") return null;
   if (decision.action === "supersede" && decision.content) {
@@ -9369,7 +9381,10 @@ async function synthesizeFacet(facet, ctx, options, prior) {
     limit,
     types: ["fact"],
     maxTokens: DEFAULT_FACET_MAX_TOKENS,
-    systemPrompt: buildFacetSystemPrompt(facet),
+    // Profile-facet synthesis is a background op, so it marks its own prompt.
+    // reflect() itself must NOT mark — it also serves the user's own questions,
+    // and that traffic is chat, not an internal flow. See ../internalFlowMarker.
+    systemPrompt: withInternalFlowMarker(buildFacetSystemPrompt(facet)),
     responseSchema: facetResponseSchema(facet.key),
     memories
   });

package/dist/react/{recall-DQJINKEY.mjs → recall-ROEK55FJ.mjs}

@@ -1,7 +1,7 @@
 import {
   recall
-} from "./chunk-OB5HFCLB.mjs";
-import "./chunk-ILAWDQDE.mjs";
+} from "./chunk-S6WPXD5N.mjs";
+import "./chunk-B5UPJRCU.mjs";
 import "./chunk-GYKJOWEO.mjs";
 export {
   recall

package/dist/server/{chunk-KF4HV3QE.mjs → chunk-CR5P3YIK.mjs}

@@ -1,6 +1,6 @@
 import {
   getLogger
-} from "./chunk-OBDRKQQI.mjs";
+} from "./chunk-VHWLLYKO.mjs";
 
 // src/lib/pii/patterns.ts
 function luhnCheck(digits) {

package/dist/server/{chunk-BZEAYCBV.mjs → chunk-TD7SMY7C.mjs}

@@ -1,7 +1,7 @@
 import {
   callPortalJsonCompletion,
   getLogger
-} from "./chunk-OBDRKQQI.mjs";
+} from "./chunk-VHWLLYKO.mjs";
 import {
   BASE_URL,
   __commonJS,
@@ -20845,7 +20845,7 @@ function createMemoryVaultSearchTool(vaultCtx, embeddingOptions, cache, searchOp
             subQueries = decomp.subQueries;
           }
         }
-        const { recall: recall2 } = await import("./recall-CZFWWOVF.mjs");
+        const { recall: recall2 } = await import("./recall-CGDEW2LQ.mjs");
         let recallDegraded = [];
         const result = await recall2(
           query,

package/dist/server/{chunk-OBDRKQQI.mjs → chunk-VHWLLYKO.mjs}

@@ -32,6 +32,14 @@ function validateEndpointOverride(override) {
   return { valid: true, endpoint: trimmed.startsWith("/") ? trimmed : `/${trimmed}` };
 }
 
+// src/lib/internalFlowMarker.ts
+var INTERNAL_FLOW_MARKER = "Anuma internal first-party flow (not user chat).";
+function withInternalFlowMarker(systemPrompt) {
+  if (systemPrompt.includes(INTERNAL_FLOW_MARKER)) return systemPrompt;
+  return `${INTERNAL_FLOW_MARKER}
+${systemPrompt}`;
+}
+
 // src/lib/memory/portalLlm.ts
 function defaultBaseUrl() {
   return typeof process !== "undefined" && process.env?.ANUMA_PORTAL_BASE_URL || BASE_URL;
@@ -138,7 +146,12 @@ async function attemptPortalJson(req, endpoint) {
   const isAnthropic = req.model.startsWith("anthropic/");
   const prefill = isAnthropic ? "{" : "";
   const messages = [
-    { role: "system", content: req.systemPrompt },
+    // Every caller of this helper is a first-party BACKGROUND op (fact extraction,
+    // topic sweep, consolidation, classifiers, graph traversal, query
+    // decomposition). Marking here — the one place they all funnel through — is what
+    // keeps the portal's detector reading them as genuine rather than markerless.
+    // See ../internalFlowMarker.
+    { role: "system", content: withInternalFlowMarker(req.systemPrompt) },
     { role: "user", content: req.userMessage }
   ];
   if (prefill) messages.push({ role: "assistant", content: prefill });
@@ -273,6 +286,8 @@ function extractCompletionContent(body) {
 
 export {
   getLogger,
+  INTERNAL_FLOW_MARKER,
+  withInternalFlowMarker,
   validateEndpointOverride,
   supportsResponseFormat,
   resolvePortalAuthHeaders,

package/dist/server/{consolidate-I6TOH7CB.mjs → consolidate-FWYK5KXB.mjs}

@@ -1,10 +1,10 @@
 import {
   notifyConsolidationFallback,
   resolvePiiRedactor
-} from "./chunk-KF4HV3QE.mjs";
+} from "./chunk-CR5P3YIK.mjs";
 import {
   callPortalJsonCompletion
-} from "./chunk-OBDRKQQI.mjs";
+} from "./chunk-VHWLLYKO.mjs";
 import "./chunk-3RPGXXPZ.mjs";
 
 // src/lib/memory/consolidate.ts

package/dist/server/index.cjs

@@ -17118,6 +17118,20 @@ var init_clientConfig = __esm({
   }
 });
 
+// src/lib/internalFlowMarker.ts
+function withInternalFlowMarker(systemPrompt) {
+  if (systemPrompt.includes(INTERNAL_FLOW_MARKER)) return systemPrompt;
+  return `${INTERNAL_FLOW_MARKER}
+${systemPrompt}`;
+}
+var INTERNAL_FLOW_MARKER;
+var init_internalFlowMarker = __esm({
+  "src/lib/internalFlowMarker.ts"() {
+    "use strict";
+    INTERNAL_FLOW_MARKER = "Anuma internal first-party flow (not user chat).";
+  }
+});
+
 // src/lib/db/entities/types.ts
 function normalizeEntityName(name) {
   return name.trim().toLowerCase();
@@ -20647,7 +20661,12 @@ async function attemptPortalJson(req, endpoint) {
   const isAnthropic = req.model.startsWith("anthropic/");
   const prefill = isAnthropic ? "{" : "";
   const messages = [
-    { role: "system", content: req.systemPrompt },
+    // Every caller of this helper is a first-party BACKGROUND op (fact extraction,
+    // topic sweep, consolidation, classifiers, graph traversal, query
+    // decomposition). Marking here — the one place they all funnel through — is what
+    // keeps the portal's detector reading them as genuine rather than markerless.
+    // See ../internalFlowMarker.
+    { role: "system", content: withInternalFlowMarker(req.systemPrompt) },
     { role: "user", content: req.userMessage }
   ];
   if (prefill) messages.push({ role: "assistant", content: prefill });
@@ -20785,6 +20804,7 @@ var init_portalLlm = __esm({
     "use strict";
     init_clientConfig();
     init_endpointOverride();
+    init_internalFlowMarker();
     init_logger();
     RESPONSE_FORMAT_OK = /* @__PURE__ */ new Set(["openai", "inclusionai", "deepseek"]);
     RESPONSE_SCHEMA_OK = /* @__PURE__ */ new Set(["openai"]);
@@ -26726,6 +26746,7 @@ init_types2();
 
 // src/lib/chat/summarize.ts
 init_clientConfig();
+init_internalFlowMarker();
 init_logger();
 var DEFAULT_SUMMARY_TOKEN_THRESHOLD = 4e3;
 var DEFAULT_SUMMARY_MIN_WINDOW_MESSAGES = 4;
@@ -26918,7 +26939,17 @@ async function callSummarizationLlm(prompt, model, token, baseUrl) {
       body: JSON.stringify({
         model,
         stream: false,
-        messages: [{ role: "user", content: prompt }]
+        // The marker rides a system message because this call has no other
+        // provenance: it posts to the MAIN chat endpoint (not /utility/*), carries no
+        // conversationId, and its prompt is neither the app's chat base prompt nor any
+        // registered flow fingerprint — so without this it reads as markerless, i.e.
+        // as a scripted abuser. Progressive summarization runs for every free-tier
+        // long conversation, so at the PORTAL_DETECTION_REJECT_MARKERLESS flip it
+        // would 403 and silently fall back to verbatim history (context bloat + cost).
+        messages: [
+          { role: "system", content: INTERNAL_FLOW_MARKER },
+          { role: "user", content: prompt }
+        ]
       }),
       signal: controller.signal
     });
@@ -30605,6 +30636,7 @@ init_reranker();
 
 // src/lib/memory/synthesizeProfile.ts
 init_operations3();
+init_internalFlowMarker();
 init_logger();
 init_constants();
 init_embeddings();
@@ -30966,7 +30998,10 @@ async function synthesizeFacet(facet, ctx, options, prior) {
     limit,
     types: ["fact"],
     maxTokens: DEFAULT_FACET_MAX_TOKENS,
-    systemPrompt: buildFacetSystemPrompt(facet),
+    // Profile-facet synthesis is a background op, so it marks its own prompt.
+    // reflect() itself must NOT mark — it also serves the user's own questions,
+    // and that traffic is chat, not an internal flow. See ../internalFlowMarker.
+    systemPrompt: withInternalFlowMarker(buildFacetSystemPrompt(facet)),
     responseSchema: facetResponseSchema(facet.key),
     memories
   });

package/dist/server/index.mjs

@@ -141,20 +141,22 @@ import {
   updateVaultMemoryOp,
   upsertMessageOp,
   vaultMemoryToStored
-} from "./chunk-BZEAYCBV.mjs";
+} from "./chunk-TD7SMY7C.mjs";
 import {
   createStreamingDeAnonymizer,
   notifyConsolidationFallback,
   resolvePiiRedactor
-} from "./chunk-KF4HV3QE.mjs";
+} from "./chunk-CR5P3YIK.mjs";
 import {
+  INTERNAL_FLOW_MARKER,
   callPortalJsonCompletion,
   extractJsonCandidate,
   getLogger,
   resolvePortalAuthHeaders,
   supportsResponseFormat,
-  validateEndpointOverride
-} from "./chunk-OBDRKQQI.mjs";
+  validateEndpointOverride,
+  withInternalFlowMarker
+} from "./chunk-VHWLLYKO.mjs";
 import {
   BASE_URL,
   __commonJS,
@@ -3411,7 +3413,17 @@ async function callSummarizationLlm(prompt, model, token, baseUrl) {
       body: JSON.stringify({
         model,
         stream: false,
-        messages: [{ role: "user", content: prompt }]
+        // The marker rides a system message because this call has no other
+        // provenance: it posts to the MAIN chat endpoint (not /utility/*), carries no
+        // conversationId, and its prompt is neither the app's chat base prompt nor any
+        // registered flow fingerprint — so without this it reads as markerless, i.e.
+        // as a scripted abuser. Progressive summarization runs for every free-tier
+        // long conversation, so at the PORTAL_DETECTION_REJECT_MARKERLESS flip it
+        // would 403 and silently fall back to verbatim history (context bloat + cost).
+        messages: [
+          { role: "system", content: INTERNAL_FLOW_MARKER },
+          { role: "user", content: prompt }
+        ]
       }),
       signal: controller.signal
     });
@@ -5681,7 +5693,7 @@ async function tryConsolidate(trimmed, ctx, options, prepared) {
     content: m.content,
     similarity: m.similarity
   }));
-  const { consolidateMemory: doConsolidate } = await import("./consolidate-I6TOH7CB.mjs");
+  const { consolidateMemory: doConsolidate } = await import("./consolidate-FWYK5KXB.mjs");
   const decision = await doConsolidate(trimmed, candidates, consolidateOptions);
   if (decision.action === "create") return null;
   if (decision.action === "supersede" && decision.content) {
@@ -7383,7 +7395,10 @@ async function synthesizeFacet(facet, ctx, options, prior) {
     limit,
     types: ["fact"],
     maxTokens: DEFAULT_FACET_MAX_TOKENS,
-    systemPrompt: buildFacetSystemPrompt(facet),
+    // Profile-facet synthesis is a background op, so it marks its own prompt.
+    // reflect() itself must NOT mark — it also serves the user's own questions,
+    // and that traffic is chat, not an internal flow. See ../internalFlowMarker.
+    systemPrompt: withInternalFlowMarker(buildFacetSystemPrompt(facet)),
     responseSchema: facetResponseSchema(facet.key),
     memories
   });

package/dist/server/{recall-CZFWWOVF.mjs → recall-CGDEW2LQ.mjs}

@@ -1,7 +1,7 @@
 import {
   recall
-} from "./chunk-BZEAYCBV.mjs";
-import "./chunk-OBDRKQQI.mjs";
+} from "./chunk-TD7SMY7C.mjs";
+import "./chunk-VHWLLYKO.mjs";
 import "./chunk-3RPGXXPZ.mjs";
 export {
   recall

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@anuma/sdk",
-  "version": "6.5.0",
+  "version": "6.7.0",
   "description": "",
   "main": "./dist/index.cjs",
   "module": "./dist/index.mjs",