@anuma/sdk 7.0.3 → 7.0.4-next.20261015010856

package/dist/expo/index.cjs

@@ -3731,8 +3731,9 @@ async function updateConversationPinnedOp(ctx, id, pinned) {
   }
   return false;
 }
-async function getMessagesOp(ctx, convId) {
-  const results = await ctx.messagesCollection.query(import_watermelondb2.Q.where("conversation_id", convId), import_watermelondb2.Q.sortBy("message_id", import_watermelondb2.Q.asc)).unsafeFetchRaw();
+async function getMessagesOp(ctx, convId, opts) {
+  const fetched = await ctx.messagesCollection.query(import_watermelondb2.Q.where("conversation_id", convId), import_watermelondb2.Q.sortBy("message_id", import_watermelondb2.Q.asc)).unsafeFetchRaw();
+  const results = opts?.rawFilter ? fetched.filter(opts.rawFilter) : fetched;
   return Promise.all(
     results.map(
       (raw) => messageRawToStored(raw, ctx.walletAddress, ctx.signMessage, ctx.embeddedWalletSigner)
@@ -5885,6 +5886,37 @@ async function chunkAndEmbedMessage(ctx, messageId, options) {
   }));
   return updateMessageChunksOp(ctx, messageId, messageChunks, embeddingModel);
 }
+var MIN_SEALED_EMBEDDING_HEX = 256;
+function rawHasEmbedding(value) {
+  if (Array.isArray(value)) return value.length > 0;
+  if (typeof value !== "string" || value.length === 0) return false;
+  if (isEncrypted(value)) {
+    return value.length - value.indexOf(":", 4) - 1 >= MIN_SEALED_EMBEDDING_HEX;
+  }
+  try {
+    const parsed = JSON.parse(value);
+    return Array.isArray(parsed) && parsed.length > 0;
+  } catch {
+    return false;
+  }
+}
+function sealedVersion(value) {
+  if (typeof value !== "string" || !isEncrypted(value)) return null;
+  return value.startsWith("enc:v2:") ? "v2" : "v3";
+}
+function mayNeedChunkEmbedding(raw, embeddingModel, filter) {
+  const role = raw.role;
+  if (role === "system") return false;
+  if (filter?.roles && !filter.roles.includes(role ?? "")) return false;
+  if (isNonEmbeddableOrigin(raw.origin, filter?.reembedDiscarded)) {
+    return false;
+  }
+  const model = raw.embedding_model;
+  if (typeof model === "string" && model !== embeddingModel) return true;
+  if (rawHasEmbedding(raw.chunks)) return false;
+  if (rawHasEmbedding(raw.vector) && !filter?.rechunkExisting) return false;
+  return true;
+}
 async function chunkAndEmbedAllMessages(ctx, options, filter) {
   const embeddingModel = options.model ?? DEFAULT_API_EMBEDDING_MODEL;
   const { chunkSize = DEFAULT_CHUNK_SIZE } = options;
@@ -5897,11 +5929,31 @@ async function chunkAndEmbedAllMessages(ctx, options, filter) {
   let considered = 0;
   let sealedRowsSeen = 0;
   let rowsSeen = 0;
+  const keptSealed = /* @__PURE__ */ new Map();
+  const candidatesStillSealed = /* @__PURE__ */ new Map();
+  const droppedSealed = /* @__PURE__ */ new Map();
+  const rawFilter = (raw) => {
+    rowsSeen++;
+    const keep = mayNeedChunkEmbedding(raw, embeddingModel, filter);
+    const version = sealedVersion(raw.content);
+    if (!version) return keep;
+    if (keep) {
+      keptSealed.set(version, (keptSealed.get(version) ?? 0) + 1);
+    } else {
+      const dropped = droppedSealed.get(version);
+      if (dropped) dropped.count++;
+      else droppedSealed.set(version, { count: 1, probeId: raw.id });
+    }
+    return keep;
+  };
   for (const conv of targetConversations) {
-    const messages = await getMessagesOp(ctx, conv.conversationId);
+    const messages = await getMessagesOp(ctx, conv.conversationId, { rawFilter });
     for (const message of messages) {
-      rowsSeen++;
-      if (isEncrypted(message.content)) sealedRowsSeen++;
+      const stillSealed = sealedVersion(message.content);
+      if (stillSealed) {
+        sealedRowsSeen++;
+        candidatesStillSealed.set(stillSealed, (candidatesStillSealed.get(stillSealed) ?? 0) + 1);
+      }
       const isStale = message.embeddingModel !== void 0 && message.embeddingModel !== null && message.embeddingModel !== embeddingModel;
       if (message.chunks && message.chunks.length > 0 && !isStale) continue;
       const hasVector = message.vector && message.vector.length > 0;
@@ -5914,6 +5966,7 @@ async function chunkAndEmbedAllMessages(ctx, options, filter) {
         stillEncrypted++;
         continue;
       }
+      if (isToolResultsRow(message)) continue;
       if (message.content.length < minLength) continue;
       if (shouldChunkMessage(message.content, chunkSize)) {
         longMessages.push({
@@ -5925,6 +5978,12 @@ async function chunkAndEmbedAllMessages(ctx, options, filter) {
       }
     }
   }
+  for (const [version, dropped] of droppedSealed) {
+    const keyOpenedACandidate = (keptSealed.get(version) ?? 0) > (candidatesStillSealed.get(version) ?? 0);
+    if (keyOpenedACandidate) continue;
+    const probe = await getMessageOp(ctx, dropped.probeId);
+    if (!probe || isEncrypted(probe.content)) sealedRowsSeen += dropped.count;
+  }
   if (stillEncrypted > 0 || sealedRowsSeen > 0) {
     getLogger().error(
       "memoryEngine: messages still encrypted (key unavailable?) \u2014 excluded from embedding",
@@ -12639,6 +12698,11 @@ init_logger();
 
 // src/lib/db/entities/operations.ts
 var import_watermelondb19 = require("@nozbe/watermelondb");
+async function assertCanWrite(ctx) {
+  if (ctx.canWrite && !await ctx.canWrite()) {
+    throw new Error("Memory source is no longer eligible");
+  }
+}
 function entityToStored(e) {
   return {
     uniqueId: e.id,
@@ -12779,6 +12843,7 @@ async function linkMemoryEntitiesOp(ctx, memoryId, entityInputs, options) {
   let skipped = false;
   let entities = [];
   await ctx.database.write(async () => {
+    await assertCanWrite(ctx);
     const {
       entities: byName,
       operations: entityOps,
@@ -12854,6 +12919,7 @@ async function replaceMemoryEntities(ctx, memoryId, entityInputs, options) {
   let skipped = false;
   let entities = [];
   await ctx.database.write(async () => {
+    await assertCanWrite(ctx);
     const vaultRow = await findVaultRowInWrite(ctx, memoryId);
     if (options.guarded && autoLinkBlocked(vaultRow)) {
       skipped = true;
@@ -12914,6 +12980,7 @@ async function unlinkMemoryEntitiesOp(ctx, memoryIds) {
   const links = await ctx.memoryEntityCollection.query(import_watermelondb19.Q.where("memory_id", import_watermelondb19.Q.oneOf(Array.from(memoryIds)))).fetch();
   if (links.length === 0) return;
   await ctx.database.write(async () => {
+    await assertCanWrite(ctx);
     await ctx.database.batch(...links.map((l) => l.prepareDestroyPermanently()));
   });
 }
@@ -12922,6 +12989,7 @@ async function unlinkAllMemoryEntitiesForUserOp(ctx, userId) {
   const links = await ctx.memoryEntityCollection.query(import_watermelondb19.Q.where("user_id", userId)).fetch();
   if (links.length === 0) return;
   await ctx.database.write(async () => {
+    await assertCanWrite(ctx);
     await ctx.database.batch(...links.map((l) => l.prepareDestroyPermanently()));
   });
 }
@@ -13086,6 +13154,11 @@ function visibilityConditions(requested) {
 function isKinded(record2) {
   return record2.kind !== null && record2.kind !== void 0;
 }
+async function assertCanWrite2(ctx) {
+  if (ctx.canWrite && !await ctx.canWrite()) {
+    throw new Error("Memory source is no longer eligible");
+  }
+}
 function assertValidKindLevel(kind, level) {
   const hasKind = kind !== null && kind !== void 0;
   if (hasKind && !MEMORY_KINDS.includes(kind)) {
@@ -13266,8 +13339,7 @@ async function createVaultMemoryOp(ctx, opts) {
     ctx.embeddedWalletSigner
   ) : opts.content;
   const created = await ctx.database.write(async () => {
-    if (ctx.canWrite && !await ctx.canWrite())
-      throw new Error("Memory source is no longer eligible");
+    await assertCanWrite2(ctx);
     return ctx.vaultMemoryCollection.create(
       (record2) => populateNewVaultMemory(record2, ctx, opts, encryptedContent, encryptedKindValue)
     );
@@ -13286,8 +13358,7 @@ async function createSupersedingMemoryOp(ctx, opts, targetId) {
   ) : opts.content;
   let createdRecord = null;
   await ctx.database.write(async () => {
-    if (ctx.canWrite && !await ctx.canWrite())
-      throw new Error("Memory source is no longer eligible");
+    await assertCanWrite2(ctx);
     let target;
     try {
       target = await ctx.vaultMemoryCollection.find(targetId);
@@ -13379,8 +13450,7 @@ async function createVaultMemoriesBatchOp(ctx, optionsArray) {
     })
   );
   const created = await ctx.database.write(async () => {
-    if (ctx.canWrite && !await ctx.canWrite())
-      throw new Error("Memory source is no longer eligible");
+    await assertCanWrite2(ctx);
     const prepared = optionsArray.map(
       (opts, i) => ctx.vaultMemoryCollection.prepareCreate(
         (record2) => populateNewVaultMemory(record2, ctx, opts, encryptedContents[i], encryptedKindValues[i])
@@ -13685,8 +13755,7 @@ async function updateVaultMemoryOp(ctx, id, opts) {
     const record2 = probe;
     const originalUpdatedAt = record2.updatedAt.getTime();
     await ctx.database.write(async () => {
-      if (ctx.canWrite && !await ctx.canWrite())
-        throw new Error("Memory source is no longer eligible");
+      await assertCanWrite2(ctx);
       if (record2.isDeleted || record2.supersededBy || !isOwnedByCtxUser(ctx, record2) || opts.freeFormOnly && isKinded(record2)) {
         stale = true;
         return;
@@ -13797,6 +13866,7 @@ async function setMemoryEntitiesOp(ctx, memoryId, entities) {
   let stale = false;
   const originalUpdatedAt = record2.updatedAt.getTime();
   await ctx.database.write(async (writer) => {
+    await assertCanWrite2(ctx);
     if (record2.isDeleted || !isOwnedByCtxUser(ctx, record2)) {
       stale = true;
       return;
@@ -13838,6 +13908,7 @@ async function clearMemoryTopicsOverrideOp(ctx, memoryId, options) {
   const originalUpdatedAt = record2.updatedAt.getTime();
   let cleared = false;
   await ctx.database.write(async () => {
+    await assertCanWrite2(ctx);
     if (options?.unlessTopicsRecorded && parseTopics(record2.topics) !== null) return;
     cleared = true;
     await record2.update((r) => {
@@ -13861,6 +13932,7 @@ async function setMemoryVisibilityOp(ctx, id, opts) {
   if (record2.isDeleted || !isOwnedByCtxUser(ctx, record2)) return null;
   let stale = false;
   await ctx.database.write(async () => {
+    await assertCanWrite2(ctx);
     if (record2.isDeleted || !isOwnedByCtxUser(ctx, record2)) {
       stale = true;
       return;
@@ -13889,6 +13961,7 @@ async function deleteVaultMemoryOp(ctx, id) {
     if (record2.isDeleted || !isOwnedByCtxUser(ctx, record2)) return false;
     let stale = false;
     await ctx.database.write(async () => {
+      await assertCanWrite2(ctx);
       if (record2.isDeleted || !isOwnedByCtxUser(ctx, record2)) {
         stale = true;
         return;
@@ -13926,8 +13999,7 @@ async function supersedeVaultMemoryOp(ctx, id, supersededById) {
     }
     let stale = false;
     await ctx.database.write(async () => {
-      if (ctx.canWrite && !await ctx.canWrite())
-        throw new Error("Memory source is no longer eligible");
+      await assertCanWrite2(ctx);
       if (record2.isDeleted || record2.supersededBy || !isOwnedByCtxUser(ctx, record2)) {
         stale = true;
         return;
@@ -14089,6 +14161,7 @@ async function stampTopicsExtractedAtOp(ctx, memoryIds, extractedAt, version = T
   for (let i = 0; i < uniqueIds.length; i += CHUNK) {
     const chunkIds = uniqueIds.slice(i, i + CHUNK);
     await ctx.database.write(async () => {
+      await assertCanWrite2(ctx);
       const records = [];
       for (const id of chunkIds) {
         try {
@@ -14122,6 +14195,7 @@ async function relinkMemoryTopicsOp(ctx, memoryIds) {
   for (const id of Array.from(new Set(memoryIds))) {
     try {
       await ctx.database.write(async (writer) => {
+        await assertCanWrite2(ctx);
         let record2;
         try {
           record2 = await ctx.vaultMemoryCollection.find(id);
@@ -14152,6 +14226,7 @@ async function backfillMemoryTopicsOp(ctx, memoryIds) {
   for (let i = 0; i < uniqueIds.length; i += CHUNK) {
     const chunkIds = uniqueIds.slice(i, i + CHUNK);
     await ctx.database.write(async () => {
+      await assertCanWrite2(ctx);
       const writes = [];
       for (const id of chunkIds) {
         let record2;
@@ -14184,6 +14259,7 @@ async function deleteAllVaultMemoriesForUserOp(ctx, userId) {
   const records = await ctx.vaultMemoryCollection.query(import_watermelondb20.Q.where("user_id", userId), import_watermelondb20.Q.where("is_deleted", false)).fetch();
   if (records.length === 0) return 0;
   await ctx.database.write(async () => {
+    await assertCanWrite2(ctx);
     const prepared = records.map(
       (record2) => record2.prepareUpdate((r) => {
         r._setRaw("is_deleted", true);
@@ -14238,6 +14314,7 @@ async function archiveVaultMemoryOp(ctx, id, opts) {
     let stale = false;
     const archivedAtValue = opts?.now ?? Date.now();
     await ctx.database.write(async () => {
+      await assertCanWrite2(ctx);
       if (record2.isDeleted || !isOwnedByCtxUser(ctx, record2) || record2.archivedAt !== null) {
         stale = true;
         return;
@@ -14261,6 +14338,7 @@ async function restoreVaultMemoryOp(ctx, id) {
     if (record2.isDeleted || !isOwnedByCtxUser(ctx, record2)) return false;
     let stale = false;
     await ctx.database.write(async () => {
+      await assertCanWrite2(ctx);
       if (record2.isDeleted || !isOwnedByCtxUser(ctx, record2)) {
         stale = true;
         return;
@@ -14281,6 +14359,7 @@ async function hardDeleteDecayedOp(ctx, id, opts) {
     const now = opts.now ?? Date.now();
     let stale = false;
     await ctx.database.write(async () => {
+      await assertCanWrite2(ctx);
       const archivedAt = record2.archivedAt;
       if (record2.isDeleted || !isOwnedByCtxUser(ctx, record2) || archivedAt === null || now - archivedAt <= opts.hardDeleteWindowMs) {
         stale = true;
@@ -14320,6 +14399,7 @@ async function updateVaultMemoryEmbeddingOp(ctx, id, embedding2, embeddingModel,
     }
     let written = false;
     await ctx.database.write(async () => {
+      await assertCanWrite2(ctx);
       if (record2.isDeleted || !isOwnedByCtxUser(ctx, record2)) return;
       const originalUpdatedAt = record2.updatedAt.getTime();
       if (originalUpdatedAt !== readUpdatedAt || record2._getRaw("content") !== readStoredContent)
@@ -17856,6 +17936,13 @@ function restoreCandidates(candidates, redactor, ownNames) {
   ).map((c) => c.candidate);
 }
 async function extractAndRetain(messages, retainCtx, options) {
+  const { memoryStore, signal } = options;
+  if (memoryStore === null) throw new Error("Memory store is not ready");
+  if (memoryStore && options.folderId !== void 0 && options.folderId !== null)
+    throw new Error("Remote memory extraction does not support folders");
+  if (memoryStore && options.extract.piiRedaction && !memoryStore.masksEmbeddingInput)
+    throw new Error("PII-redacted extraction requires a memory store that masks embedding inputs");
+  signal?.throwIfAborted();
   const minConfidence = options.minConfidence ?? DEFAULT_MIN_CONFIDENCE;
   const resolvedConsolidatePii = options.consolidateOptions?.piiRedaction ?? options.extract.piiRedaction;
   const consolidateOptions = options.consolidateOptions !== void 0 ? {
@@ -17889,6 +17976,7 @@ async function extractAndRetain(messages, retainCtx, options) {
     }
   });
   const extractMs = Date.now() - tExtract;
+  signal?.throwIfAborted();
   const filtered = candidates.filter((c) => c.confidence >= minConfidence);
   const log = getLogger();
   const screened = screenCandidatesForInjection(filtered);
@@ -17936,16 +18024,33 @@ async function extractAndRetain(messages, retainCtx, options) {
   const results = [];
   const quarantinedInfo = [];
   let failedWrites = 0;
+  let auditRows;
   const tRetain = Date.now();
   for (const { candidate, isQuarantined, reason, signature } of toRetain) {
     try {
+      signal?.throwIfAborted();
       if (isQuarantined) {
-        const existingId = await findQuarantinedDuplicateOp(
-          retainCtx.vaultCtx,
-          candidate.content,
-          candidate.sourceMessageIds,
-          { scope: options.scope ?? "private", folderId: options.folderId ?? null }
-        ).catch(() => null);
+        let existingId;
+        if (memoryStore) {
+          auditRows ?? (auditRows = memoryStore.list({
+            scopes: [options.scope ?? "private"],
+            includeArchived: true,
+            includeQuarantined: true,
+            includeSuperseded: true
+          }));
+          const sourceKey = [...new Set(candidate.sourceMessageIds)].sort().join("\0");
+          const normalize = (value) => value.normalize("NFKC").trim().replace(/\s+/g, " ").toLowerCase();
+          existingId = (await auditRows).find(
+            (row) => row.trustTier === "quarantined" && row.scope === (options.scope ?? "private") && [...new Set(row.sourceChunkIds ?? [])].sort().join("\0") === sourceKey && normalize(row.content) === normalize(candidate.content)
+          )?.uniqueId ?? null;
+        } else {
+          existingId = await findQuarantinedDuplicateOp(
+            retainCtx.vaultCtx,
+            candidate.content,
+            candidate.sourceMessageIds,
+            { scope: options.scope ?? "private", folderId: options.folderId ?? null }
+          ).catch(() => null);
+        }
         if (existingId) {
           quarantinedInfo.push({
             candidate,
@@ -17956,18 +18061,26 @@ async function extractAndRetain(messages, retainCtx, options) {
           continue;
         }
       }
-      const result = await retain(candidate.content, retainCtx, {
+      const retainOptions = {
         source: "auto-extracted",
         sourceChunkIds: candidate.sourceMessageIds,
         respectTombstones: true,
         ...options.scope !== void 0 && { scope: options.scope },
-        ...options.folderId !== void 0 && { folderId: options.folderId },
         ...consolidateOptions !== void 0 && { consolidateOptions },
         ...candidate.eventTime !== null && { eventTime: candidate.eventTime },
         factType: candidate.type,
         ...isQuarantined && { trustTier: "quarantined", enableAutoMerge: false }
+      };
+      const result = memoryStore ? await memoryStore.retain(candidate.content, {
+        ...retainOptions,
+        canWrite: retainCtx.vaultCtx.canWrite,
+        signal
+      }) : await retain(candidate.content, retainCtx, {
+        ...retainOptions,
+        ...options.folderId !== void 0 && { folderId: options.folderId }
       });
       if (isQuarantined) {
+        auditRows = void 0;
         const info = {
           candidate,
           memoryId: result.memoryId,
@@ -17986,9 +18099,16 @@ async function extractAndRetain(messages, retainCtx, options) {
       }
       succeededCandidates.push(candidate);
       results.push(result);
-      if (result.action !== "suppressed" && options.entityCtx && candidate.entities.length > 0) {
+      if (result.action !== "suppressed" && candidate.entities.length > 0) {
         try {
-          if (!await isMemoryTopicsUserManaged(options.entityCtx, result.memoryId)) {
+          signal?.throwIfAborted();
+          if (memoryStore) {
+            await memoryStore.addTopics(result.memoryId, candidate.entities, {
+              unlessUserManaged: true,
+              canWrite: retainCtx.vaultCtx.canWrite,
+              signal
+            });
+          } else if (options.entityCtx && !await isMemoryTopicsUserManaged(options.entityCtx, result.memoryId)) {
             await linkMemoryEntitiesOp(options.entityCtx, result.memoryId, candidate.entities, {
               unlessTopicsUserManaged: true
             });
@@ -18238,7 +18358,7 @@ function createAutoExtractor(options) {
   };
   const consolidateOptions = options.consolidate ? { ...options.consolidate, ...subPassAuth(options.consolidate.baseUrl) } : void 0;
   const injectionClassifierOptions = options.injectionClassifier ? { ...options.injectionClassifier, ...subPassAuth(options.injectionClassifier.baseUrl) } : void 0;
-  if (options.retainCtx.vaultCtx.entityCtx && !options.entityCtx) {
+  if (!options.memoryStore && options.retainCtx.vaultCtx.entityCtx && !options.entityCtx) {
     getLogger().warn(
       "[memory/extract] retainCtx.vaultCtx.entityCtx is set but extractor was created without `entityCtx` \u2014 W5 graph lane will receive no writes"
     );
@@ -18283,6 +18403,8 @@ function createAutoExtractor(options) {
       try {
         const { candidates, results, failedCount, outcome: outcome2, failure, funnel, timings, model } = await extractAndRetain(window2, retainCtx, {
           extract,
+          memoryStore: options.memoryStore,
+          signal: options.signal,
           ...options.minConfidence !== void 0 && { minConfidence: options.minConfidence },
           ...options.entityCtx !== void 0 && { entityCtx: options.entityCtx },
           ...options.scope !== void 0 && { scope: options.scope },
@@ -20384,6 +20506,7 @@ function createLocalMemoryStore(options) {
     database,
     entityCollection: database.get("entity"),
     memoryEntityCollection: database.get("memory_entity"),
+    canWrite: options.canWrite,
     ...userId !== void 0 && { userId },
     ...options.allowUnscopedRows !== void 0 && {
       allowUnscopedRows: options.allowUnscopedRows
@@ -20395,10 +20518,21 @@ function createLocalMemoryStore(options) {
     walletAddress: options.walletAddress,
     signMessage: options.signMessage,
     embeddedWalletSigner: options.embeddedWalletSigner,
+    canWrite: options.canWrite,
     ...userId !== void 0 && { userId },
     ...options.singleTenant !== void 0 && { singleTenant: options.singleTenant },
     entityCtx
   };
+  const assertWrite = async (writeOptions) => {
+    writeOptions?.signal?.throwIfAborted();
+    if (writeOptions?.canWrite && !await writeOptions.canWrite()) {
+      throw new Error("Memory source is no longer eligible");
+    }
+    if (options.canWrite && !await options.canWrite()) {
+      throw new Error("Memory source is no longer eligible");
+    }
+    writeOptions?.signal?.throwIfAborted();
+  };
   const vaultCache = options.vaultCache ?? createVaultEmbeddingCache();
   const ownedBy = userId !== void 0 ? [import_watermelondb23.Q.where("user_id", userId)] : [];
   const linksOwnedBy = userId === void 0 ? [] : options.allowUnscopedRows ? [import_watermelondb23.Q.or(import_watermelondb23.Q.where("user_id", userId), import_watermelondb23.Q.where("user_id", null))] : [import_watermelondb23.Q.where("user_id", userId)];
@@ -20510,9 +20644,25 @@ function createLocalMemoryStore(options) {
     archive: (id) => archiveVaultMemoryOp(vaultCtx, id),
     restore: (id) => restoreVaultMemoryOp(vaultCtx, id),
     setTopics: (memoryId, topics) => setMemoryEntitiesOp(vaultCtx, memoryId, topics),
-    addTopics: (memoryId, topics) => database.write(async (writer) => {
+    addTopics: (memoryId, topics, writeOptions) => database.write(async (writer) => {
+      await assertWrite(writeOptions);
       const owned = await vaultCtx.vaultMemoryCollection.query(import_watermelondb23.Q.where("id", memoryId), import_watermelondb23.Q.where("is_deleted", false), ...ownedBy).fetchCount();
-      return owned > 0 ? writer.callWriter(() => linkMemoryEntitiesOp(entityCtx, memoryId, topics)) : [];
+      return owned > 0 ? writer.callWriter(
+        () => linkMemoryEntitiesOp(
+          {
+            ...entityCtx,
+            canWrite: async () => {
+              await assertWrite(writeOptions);
+              return true;
+            }
+          },
+          memoryId,
+          topics,
+          {
+            unlessTopicsUserManaged: writeOptions?.unlessUserManaged
+          }
+        )
+      ) : [];
     }),
     setVisibility: (id, visibility, visibilityOptions) => setMemoryVisibilityOp(vaultCtx, id, { visibility, ...visibilityOptions }),
     recall: (query, recallOptions) => recall(
@@ -20522,7 +20672,17 @@ function createLocalMemoryStore(options) {
     ),
     retain: (content, retainOptions) => retain(
       content,
-      { vaultCtx, embeddingOptions: options.embeddingOptions, vaultCache },
+      {
+        vaultCtx: {
+          ...vaultCtx,
+          canWrite: async () => {
+            await assertWrite(retainOptions);
+            return true;
+          }
+        },
+        embeddingOptions: options.embeddingOptions,
+        vaultCache
+      },
       retainOptions
     ),
     factSource: {
@@ -21161,7 +21321,14 @@ function stored(row) {
 function createRemoteMemoryPipeline(options) {
   const { persistence, embeddingOptions } = options;
   const model = embeddingOptions.model ?? DEFAULT_API_EMBEDDING_MODEL;
-  const operation = (mode) => {
+  const operation = (mode, writeOptions) => {
+    const signal = writeOptions?.signal;
+    const assertWrite = async () => {
+      signal?.throwIfAborted();
+      if (writeOptions?.canWrite && !await writeOptions.canWrite())
+        throw new Error("Memory source is no longer eligible");
+      signal?.throwIfAborted();
+    };
     const rejectUndecryptable = (failed) => {
       if (!failed.length) return;
       if (mode === "retain")
@@ -21179,7 +21346,7 @@ function createRemoteMemoryPipeline(options) {
       return items.map((item) => stored(item.memory));
     };
     const get = async (id) => {
-      const snapshot = snapshots.get(id) ?? await persistence.get(id);
+      const snapshot = snapshots.get(id) ?? await (signal ? persistence.get(id, signal) : persistence.get(id));
       if (!snapshot || snapshot.memory.is_deleted || snapshot.memory.superseded_by) return null;
       snapshots.set(id, snapshot);
       return stored(snapshot.memory);
@@ -21225,7 +21392,7 @@ function createRemoteMemoryPipeline(options) {
         if (forced.size < 100 && temporal[i] !== void 0) forced.add(temporal[i]);
       }
       const forceIds = [...forced];
-      const windowOptions = (i, signal) => ({
+      const windowOptions = (i, signal2) => ({
         limit: Math.min(100, Math.max((search.limit ?? 8) * 3, 30)),
         force_ids: i === 0 ? forceIds : [],
         ...search.scopes && { scopes: search.scopes },
@@ -21233,13 +21400,15 @@ function createRemoteMemoryPipeline(options) {
         ...search.memoryIds !== void 0 && { memory_ids: search.memoryIds },
         include_archived: search.includeArchived,
         embedding_model: model,
-        ...signal && { signal }
+        ...signal2 && { signal: signal2 }
       });
       const vectors = [queryEmbedding, ...facetEmbeddings];
       let windows;
       if (mode === "retain") {
         windows = await Promise.all(
-          vectors.map((embedding2, i) => persistence.candidateSet(embedding2, windowOptions(i)))
+          vectors.map(
+            (embedding2, i) => persistence.candidateSet(embedding2, windowOptions(i, signal))
+          )
         );
       } else {
         const deadline = new AbortController();
@@ -21327,12 +21496,15 @@ function createRemoteMemoryPipeline(options) {
         twin_opt_in: false
       };
     };
-    const write = async (memory, snapshot) => remember([await persistence.put(memory, snapshot)])[0];
+    const write = async (memory, snapshot) => {
+      await assertWrite();
+      return remember([await persistence.put(memory, snapshot, signal)])[0];
+    };
     const port = {
       prepare,
       get,
       getFresh: async (id) => {
-        const current = await persistence.get(id);
+        const current = await (signal ? persistence.get(id, signal) : persistence.get(id));
         return current && !current.memory.is_deleted && !current.memory.superseded_by ? stored(current.memory) : null;
       },
       tombstones: async (embedding2, embeddingModel, scope, folderId) => {
@@ -21343,7 +21515,8 @@ function createRemoteMemoryPipeline(options) {
           embedding_model: embeddingModel,
           strict_model: true,
           include_deleted: true,
-          deleted_only: true
+          deleted_only: true,
+          signal
         });
         rejectUndecryptable(window2.failed);
         return remember(window2.items);
@@ -21399,14 +21572,18 @@ function createRemoteMemoryPipeline(options) {
         if (!target || !newer || id === successor) return false;
         const old = snapshots.get(id);
         const next = snapshots.get(successor);
+        await assertWrite();
         remember(
-          await persistence.putMany([
-            {
-              memory: { ...old.memory, superseded_by: successor, superseded_at: Date.now() },
-              expectedVersion: old
-            },
-            { memory: next.memory, expectedVersion: next }
-          ])
+          await persistence.putMany(
+            [
+              {
+                memory: { ...old.memory, superseded_by: successor, superseded_at: Date.now() },
+                expectedVersion: old
+              },
+              { memory: next.memory, expectedVersion: next }
+            ],
+            signal
+          )
         );
         return true;
       },
@@ -21415,18 +21592,22 @@ function createRemoteMemoryPipeline(options) {
         if (!target) return { created: null, retired: false };
         const snapshot = snapshots.get(targetId);
         const successor = createRow(input);
+        await assertWrite();
         const rows = remember(
-          await persistence.putMany([
-            { memory: successor, expectedVersion: 0 },
-            {
-              memory: {
-                ...snapshot.memory,
-                superseded_by: successor.memory_id,
-                superseded_at: Date.now()
-              },
-              expectedVersion: snapshot
-            }
-          ])
+          await persistence.putMany(
+            [
+              { memory: successor, expectedVersion: 0 },
+              {
+                memory: {
+                  ...snapshot.memory,
+                  superseded_by: successor.memory_id,
+                  superseded_at: Date.now()
+                },
+                expectedVersion: snapshot
+              }
+            ],
+            signal
+          )
         );
         return { created: rows[0], retired: true };
       }
@@ -21459,7 +21640,7 @@ function createRemoteMemoryPipeline(options) {
     factSource,
     recall: async (query, recallOptions = {}) => recall(query, { embeddingOptions, factSource }, { ...recallOptions, types: ["fact"] }),
     retain: async (content, retainOptions) => {
-      const { port } = operation("retain");
+      const { port } = operation("retain", retainOptions);
       return retainWithPersistence(
         content,
         {
@@ -22042,16 +22223,21 @@ function createRemoteMemoryStore(options) {
     const record2 = await persistence.get(id);
     return record2 && !record2.memory.is_deleted ? record2 : null;
   };
-  const mutateLocked = async (id, change, edit) => {
-    const record2 = await live(id);
+  const mutateLocked = async (id, change, edit, writeOptions) => {
+    writeOptions?.signal?.throwIfAborted();
+    const record2 = writeOptions?.signal ? await persistence.get(id, writeOptions.signal) : await live(id);
     if (!record2) return null;
+    if (record2.memory.is_deleted) return null;
+    if (writeOptions?.canWrite && !await writeOptions.canWrite())
+      throw new Error("Memory source is no longer eligible");
+    writeOptions?.signal?.throwIfAborted();
     const next = edit(structuredClone(record2.memory));
     if (!next) return null;
-    const saved = await persistence.put(next, record2);
+    const saved = writeOptions?.signal ? await persistence.put(next, record2, writeOptions.signal) : await persistence.put(next, record2);
     notify(typeof change === "function" ? change(record2.memory) : change, [saved]);
     return saved;
   };
-  const mutate = (id, change, edit) => serialized(id, () => mutateLocked(id, change, edit));
+  const mutate = (id, change, edit, writeOptions) => serialized(id, () => mutateLocked(id, change, edit, writeOptions));
   const serializedAll = (ids, task) => [...new Set(ids)].sort().reduceRight((inner, id) => () => serialized(id, inner), task)();
   const mutateMany = async (ids, change, edit) => {
     const saved = /* @__PURE__ */ new Map();
@@ -22564,13 +22750,21 @@ function createRemoteMemoryStore(options) {
         }))
       );
     },
-    addTopics: async (memoryId, topics) => {
+    addTopics: async (memoryId, topics, writeOptions) => {
       const added = await withKnownKinds(topicInputs(topics, "auto"));
-      const saved = await mutate(memoryId, "edit", (memory) => ({
-        ...memory,
-        topics: serializeTopics(mergeTopics(parseTopics(memory.topics) ?? [], added)),
-        topics_updated_at: Date.now()
-      }));
+      const saved = await mutate(
+        memoryId,
+        "edit",
+        (memory) => {
+          if (writeOptions?.unlessUserManaged && memory.topics_user_managed) return null;
+          return {
+            ...memory,
+            topics: serializeTopics(mergeTopics(parseTopics(memory.topics) ?? [], added)),
+            topics_updated_at: Date.now()
+          };
+        },
+        writeOptions
+      );
       if (!saved) return [];
       const now = /* @__PURE__ */ new Date();
       return mergeTopics([], added).map(
@@ -23423,6 +23617,7 @@ function createDurableAutoExtractor(options) {
   };
   const folderId = options.folderId ?? null;
   let disposed = false;
+  let activeBatch = null;
   let running = false;
   let wakeRequested = false;
   let timer;
@@ -23459,14 +23654,18 @@ function createDurableAutoExtractor(options) {
     }, delay);
   }
   async function extractBatch(messages, conversationId, ids, jobScope, jobFolderId) {
+    if (disposed) throw new Error("Extraction session was disposed");
     let watchdog;
     let cancelled = false;
+    const controller = new AbortController();
+    activeBatch = controller;
     const model = options.modelForScope?.(jobScope) ?? options.extract.model;
     try {
       return await Promise.race([
         new Promise((resolve, reject) => {
           const worker = createAutoExtractor({
             ...options,
+            signal: controller.signal,
             retainCtx: {
               ...options.retainCtx,
               vaultCtx: {
@@ -23495,6 +23694,8 @@ function createDurableAutoExtractor(options) {
       ]);
     } finally {
       cancelled = true;
+      controller.abort();
+      if (activeBatch === controller) activeBatch = null;
       if (watchdog !== void 0) clearTimeout(watchdog);
     }
   }
@@ -23506,6 +23707,7 @@ function createDurableAutoExtractor(options) {
     for (const message of loaded)
       if (message && message.messageId > 0) sequences.set(message.uniqueId, message.messageId);
     await database.write(async () => {
+      if (disposed) return;
       const current = idsOf(job);
       const acknowledged = ids.filter((id) => current.includes(id));
       if (!acknowledged.length) return;
@@ -23678,6 +23880,7 @@ function createDurableAutoExtractor(options) {
               jobScope,
               jobFolderId
             );
+            if (disposed) throw new Error("Extraction session was disposed");
             options.onTurnComplete?.(result);
             return result;
           };
@@ -23714,6 +23917,7 @@ function createDurableAutoExtractor(options) {
           );
           scheduleAfterSuccess = true;
         } catch (error) {
+          if (disposed) break;
           attempts.set(job.id, attempted + 1);
           retry = true;
           reportError(error, conversationId);
@@ -23736,6 +23940,14 @@ function createDurableAutoExtractor(options) {
         schedule(retry ? options.retryDelayMs ?? 3e4 : 0);
     }
   }
+  function dispose() {
+    disposed = true;
+    activeBatch?.abort(options.signal?.reason);
+    if (timer !== void 0) clearTimeout(timer);
+    options.signal?.removeEventListener("abort", dispose);
+  }
+  if (options.signal?.aborted) dispose();
+  else options.signal?.addEventListener("abort", dispose, { once: true });
   schedule(0);
   return {
     processTurn(messages, conversationId) {
@@ -23815,10 +24027,7 @@ function createDurableAutoExtractor(options) {
       return true;
     },
     isProcessing: () => running,
-    dispose() {
-      disposed = true;
-      if (timer !== void 0) clearTimeout(timer);
-    }
+    dispose
   };
 }
 
@@ -27090,6 +27299,7 @@ var CONVERSATION_REDACTOR_LIMIT = 50;
 var NO_CONVERSATION_KEY = "__no_conversation__";
 var NO_STORE_FOLDERS = "Folders are not supported with a memoryStore";
 var NO_STORE_MASK = "piiRedaction needs a memoryStore built with embeddingOptions.maskInput";
+var MEMORY_STORE_NOT_READY = "Memory store is not ready";
 var conversationRedactors = /* @__PURE__ */ new Map();
 var clientToolFilterCache = /* @__PURE__ */ new Map();
 function getConversationRedactor(conversationId, nerDetector) {
@@ -27234,7 +27444,7 @@ function useChatStorage(options) {
     [resolvedPiiRedaction]
   );
   const maskEmbeddingInput = isPiiRedactor(resolvedPiiRedaction) ? maskForEmbedding : void 0;
-  const storeMaskMissing = memoryStore !== void 0 && maskEmbeddingInput !== void 0 && !memoryStore.masksEmbeddingInput;
+  const storeMaskMissing = memoryStore !== void 0 && memoryStore !== null && maskEmbeddingInput !== void 0 && !memoryStore.masksEmbeddingInput;
   const messagesCollection = (0, import_react5.useMemo)(() => database.get("history"), [database]);
   const conversationsCollection = (0, import_react5.useMemo)(
     () => database.get("conversations"),
@@ -27483,6 +27693,7 @@ function useChatStorage(options) {
   }, [vaultEmbeddingCache]);
   const retainVaultMemory = (0, import_react5.useCallback)(
     async (input) => {
+      if (memoryStore === null) throw new Error(MEMORY_STORE_NOT_READY);
       if (memoryStore) {
         if (storeMaskMissing) throw new Error(NO_STORE_MASK);
         if (input.folderId !== void 0) throw new Error(NO_STORE_FOLDERS);
@@ -27528,6 +27739,7 @@ function useChatStorage(options) {
   );
   const createMemoryVaultTool2 = (0, import_react5.useCallback)(
     (options2) => {
+      if (memoryStore === null) throw new Error(MEMORY_STORE_NOT_READY);
       if (storeMaskMissing) throw new Error(NO_STORE_MASK);
       return createMemoryVaultTool(
         memoryStore ?? vaultCtx,
@@ -27538,6 +27750,7 @@ function useChatStorage(options) {
   );
   const createRecallTool2 = (0, import_react5.useCallback)(
     (toolOptions, callbacks) => {
+      if (memoryStore === null) throw new Error(MEMORY_STORE_NOT_READY);
       if (!getToken && !memoryStore) {
         throw new Error("getToken is required for recall tool");
       }
@@ -27583,7 +27796,7 @@ function useChatStorage(options) {
   );
   const recallFn = (0, import_react5.useCallback)(
     async (query, options2) => {
-      if (!getToken && !memoryStore) {
+      if (memoryStore === null || !getToken && !memoryStore) {
         return {
           memories: [],
           usedBudget: options2?.budget ?? "low",
@@ -27632,6 +27845,7 @@ function useChatStorage(options) {
   );
   const getVaultMemories = (0, import_react5.useCallback)(
     (options2) => {
+      if (memoryStore === null) return Promise.resolve([]);
       if (!memoryStore) return getAllVaultMemoriesOp(vaultCtx, options2);
       const { folderId, levels, kinds, ...listOptions } = options2 ?? {};
       if (folderId !== void 0) throw new Error(NO_STORE_FOLDERS);
@@ -27642,7 +27856,8 @@ function useChatStorage(options) {
     [vaultCtx, memoryStore]
   );
   const deleteVaultMemory = (0, import_react5.useCallback)(
-    (id) => {
+    async (id) => {
+      if (memoryStore === null) throw new Error(MEMORY_STORE_NOT_READY);
       return memoryStore ? memoryStore.delete(id) : deleteVaultMemoryOp(vaultCtx, id);
     },
     [vaultCtx, memoryStore]