@anuma/sdk 7.0.3 → 7.0.4-next.20261015010856

package/dist/react/index.mjs

@@ -2681,8 +2681,9 @@ async function getConversationsByProjectOp(ctx, projectId) {
     )
   );
 }
-async function getMessagesOp(ctx, convId) {
-  const results = await ctx.messagesCollection.query(Q.where("conversation_id", convId), Q.sortBy("message_id", Q.asc)).unsafeFetchRaw();
+async function getMessagesOp(ctx, convId, opts) {
+  const fetched = await ctx.messagesCollection.query(Q.where("conversation_id", convId), Q.sortBy("message_id", Q.asc)).unsafeFetchRaw();
+  const results = opts?.rawFilter ? fetched.filter(opts.rawFilter) : fetched;
   return Promise.all(
     results.map(
       (raw) => messageRawToStored(raw, ctx.walletAddress, ctx.signMessage, ctx.embeddedWalletSigner)
@@ -4927,6 +4928,37 @@ async function chunkAndEmbedMessage(ctx, messageId, options) {
   }));
   return updateMessageChunksOp(ctx, messageId, messageChunks, embeddingModel);
 }
+var MIN_SEALED_EMBEDDING_HEX = 256;
+function rawHasEmbedding(value) {
+  if (Array.isArray(value)) return value.length > 0;
+  if (typeof value !== "string" || value.length === 0) return false;
+  if (isEncrypted(value)) {
+    return value.length - value.indexOf(":", 4) - 1 >= MIN_SEALED_EMBEDDING_HEX;
+  }
+  try {
+    const parsed = JSON.parse(value);
+    return Array.isArray(parsed) && parsed.length > 0;
+  } catch {
+    return false;
+  }
+}
+function sealedVersion(value) {
+  if (typeof value !== "string" || !isEncrypted(value)) return null;
+  return value.startsWith("enc:v2:") ? "v2" : "v3";
+}
+function mayNeedChunkEmbedding(raw, embeddingModel, filter) {
+  const role = raw.role;
+  if (role === "system") return false;
+  if (filter?.roles && !filter.roles.includes(role ?? "")) return false;
+  if (isNonEmbeddableOrigin(raw.origin, filter?.reembedDiscarded)) {
+    return false;
+  }
+  const model = raw.embedding_model;
+  if (typeof model === "string" && model !== embeddingModel) return true;
+  if (rawHasEmbedding(raw.chunks)) return false;
+  if (rawHasEmbedding(raw.vector) && !filter?.rechunkExisting) return false;
+  return true;
+}
 async function chunkAndEmbedAllMessages(ctx, options, filter) {
   const embeddingModel = options.model ?? DEFAULT_API_EMBEDDING_MODEL;
   const { chunkSize = DEFAULT_CHUNK_SIZE } = options;
@@ -4939,11 +4971,31 @@ async function chunkAndEmbedAllMessages(ctx, options, filter) {
   let considered = 0;
   let sealedRowsSeen = 0;
   let rowsSeen = 0;
+  const keptSealed = /* @__PURE__ */ new Map();
+  const candidatesStillSealed = /* @__PURE__ */ new Map();
+  const droppedSealed = /* @__PURE__ */ new Map();
+  const rawFilter = (raw) => {
+    rowsSeen++;
+    const keep = mayNeedChunkEmbedding(raw, embeddingModel, filter);
+    const version = sealedVersion(raw.content);
+    if (!version) return keep;
+    if (keep) {
+      keptSealed.set(version, (keptSealed.get(version) ?? 0) + 1);
+    } else {
+      const dropped = droppedSealed.get(version);
+      if (dropped) dropped.count++;
+      else droppedSealed.set(version, { count: 1, probeId: raw.id });
+    }
+    return keep;
+  };
   for (const conv of targetConversations) {
-    const messages = await getMessagesOp(ctx, conv.conversationId);
+    const messages = await getMessagesOp(ctx, conv.conversationId, { rawFilter });
     for (const message of messages) {
-      rowsSeen++;
-      if (isEncrypted(message.content)) sealedRowsSeen++;
+      const stillSealed = sealedVersion(message.content);
+      if (stillSealed) {
+        sealedRowsSeen++;
+        candidatesStillSealed.set(stillSealed, (candidatesStillSealed.get(stillSealed) ?? 0) + 1);
+      }
       const isStale = message.embeddingModel !== void 0 && message.embeddingModel !== null && message.embeddingModel !== embeddingModel;
       if (message.chunks && message.chunks.length > 0 && !isStale) continue;
       const hasVector = message.vector && message.vector.length > 0;
@@ -4956,6 +5008,7 @@ async function chunkAndEmbedAllMessages(ctx, options, filter) {
         stillEncrypted++;
         continue;
       }
+      if (isToolResultsRow(message)) continue;
       if (message.content.length < minLength) continue;
       if (shouldChunkMessage(message.content, chunkSize)) {
         longMessages.push({
@@ -4967,6 +5020,12 @@ async function chunkAndEmbedAllMessages(ctx, options, filter) {
       }
     }
   }
+  for (const [version, dropped] of droppedSealed) {
+    const keyOpenedACandidate = (keptSealed.get(version) ?? 0) > (candidatesStillSealed.get(version) ?? 0);
+    if (keyOpenedACandidate) continue;
+    const probe = await getMessageOp(ctx, dropped.probeId);
+    if (!probe || isEncrypted(probe.content)) sealedRowsSeen += dropped.count;
+  }
   if (stillEncrypted > 0 || sealedRowsSeen > 0) {
     getLogger().error(
       "memoryEngine: messages still encrypted (key unavailable?) \u2014 excluded from embedding",
@@ -10414,6 +10473,11 @@ function parseTopics(value) {
 }
 
 // src/lib/db/entities/operations.ts
+async function assertCanWrite(ctx) {
+  if (ctx.canWrite && !await ctx.canWrite()) {
+    throw new Error("Memory source is no longer eligible");
+  }
+}
 function entityToStored(e) {
   return {
     uniqueId: e.id,
@@ -10554,6 +10618,7 @@ async function linkMemoryEntitiesOp(ctx, memoryId, entityInputs, options) {
   let skipped = false;
   let entities = [];
   await ctx.database.write(async () => {
+    await assertCanWrite(ctx);
     const {
       entities: byName,
       operations: entityOps,
@@ -10629,6 +10694,7 @@ async function replaceMemoryEntities(ctx, memoryId, entityInputs, options) {
   let skipped = false;
   let entities = [];
   await ctx.database.write(async () => {
+    await assertCanWrite(ctx);
     const vaultRow = await findVaultRowInWrite(ctx, memoryId);
     if (options.guarded && autoLinkBlocked(vaultRow)) {
       skipped = true;
@@ -10689,6 +10755,7 @@ async function unlinkMemoryEntitiesOp(ctx, memoryIds) {
   const links = await ctx.memoryEntityCollection.query(Q5.where("memory_id", Q5.oneOf(Array.from(memoryIds)))).fetch();
   if (links.length === 0) return;
   await ctx.database.write(async () => {
+    await assertCanWrite(ctx);
     await ctx.database.batch(...links.map((l) => l.prepareDestroyPermanently()));
   });
 }
@@ -10697,6 +10764,7 @@ async function unlinkAllMemoryEntitiesForUserOp(ctx, userId) {
   const links = await ctx.memoryEntityCollection.query(Q5.where("user_id", userId)).fetch();
   if (links.length === 0) return;
   await ctx.database.write(async () => {
+    await assertCanWrite(ctx);
     await ctx.database.batch(...links.map((l) => l.prepareDestroyPermanently()));
   });
 }
@@ -10716,6 +10784,7 @@ async function backfillMemoryEntityUserIdsOp(ctx, vaultMemoryCollection) {
   }
   if (toUpdate.length === 0) return 0;
   await ctx.database.write(async () => {
+    await assertCanWrite(ctx);
     await ctx.database.batch(
       ...toUpdate.map(({ link, userId }) => link.prepareUpdate((r) => r._setRaw("user_id", userId)))
     );
@@ -13109,6 +13178,11 @@ function visibilityConditions(requested) {
 function isKinded(record2) {
   return record2.kind !== null && record2.kind !== void 0;
 }
+async function assertCanWrite2(ctx) {
+  if (ctx.canWrite && !await ctx.canWrite()) {
+    throw new Error("Memory source is no longer eligible");
+  }
+}
 function assertValidKindLevel(kind, level) {
   const hasKind = kind !== null && kind !== void 0;
   if (hasKind && !MEMORY_KINDS.includes(kind)) {
@@ -13289,8 +13363,7 @@ async function createVaultMemoryOp(ctx, opts) {
     ctx.embeddedWalletSigner
   ) : opts.content;
   const created = await ctx.database.write(async () => {
-    if (ctx.canWrite && !await ctx.canWrite())
-      throw new Error("Memory source is no longer eligible");
+    await assertCanWrite2(ctx);
     return ctx.vaultMemoryCollection.create(
       (record2) => populateNewVaultMemory(record2, ctx, opts, encryptedContent, encryptedKindValue)
     );
@@ -13309,8 +13382,7 @@ async function createSupersedingMemoryOp(ctx, opts, targetId) {
   ) : opts.content;
   let createdRecord = null;
   await ctx.database.write(async () => {
-    if (ctx.canWrite && !await ctx.canWrite())
-      throw new Error("Memory source is no longer eligible");
+    await assertCanWrite2(ctx);
     let target;
     try {
       target = await ctx.vaultMemoryCollection.find(targetId);
@@ -13402,8 +13474,7 @@ async function createVaultMemoriesBatchOp(ctx, optionsArray) {
     })
   );
   const created = await ctx.database.write(async () => {
-    if (ctx.canWrite && !await ctx.canWrite())
-      throw new Error("Memory source is no longer eligible");
+    await assertCanWrite2(ctx);
     const prepared = optionsArray.map(
       (opts, i) => ctx.vaultMemoryCollection.prepareCreate(
         (record2) => populateNewVaultMemory(record2, ctx, opts, encryptedContents[i], encryptedKindValues[i])
@@ -13708,8 +13779,7 @@ async function updateVaultMemoryOp(ctx, id, opts) {
     const record2 = probe;
     const originalUpdatedAt = record2.updatedAt.getTime();
     await ctx.database.write(async () => {
-      if (ctx.canWrite && !await ctx.canWrite())
-        throw new Error("Memory source is no longer eligible");
+      await assertCanWrite2(ctx);
       if (record2.isDeleted || record2.supersededBy || !isOwnedByCtxUser(ctx, record2) || opts.freeFormOnly && isKinded(record2)) {
         stale = true;
         return;
@@ -13820,6 +13890,7 @@ async function setMemoryEntitiesOp(ctx, memoryId, entities) {
   let stale = false;
   const originalUpdatedAt = record2.updatedAt.getTime();
   await ctx.database.write(async (writer) => {
+    await assertCanWrite2(ctx);
     if (record2.isDeleted || !isOwnedByCtxUser(ctx, record2)) {
       stale = true;
       return;
@@ -13861,6 +13932,7 @@ async function clearMemoryTopicsOverrideOp(ctx, memoryId, options) {
   const originalUpdatedAt = record2.updatedAt.getTime();
   let cleared = false;
   await ctx.database.write(async () => {
+    await assertCanWrite2(ctx);
     if (options?.unlessTopicsRecorded && parseTopics(record2.topics) !== null) return;
     cleared = true;
     await record2.update((r) => {
@@ -13884,6 +13956,7 @@ async function setMemoryVisibilityOp(ctx, id, opts) {
   if (record2.isDeleted || !isOwnedByCtxUser(ctx, record2)) return null;
   let stale = false;
   await ctx.database.write(async () => {
+    await assertCanWrite2(ctx);
     if (record2.isDeleted || !isOwnedByCtxUser(ctx, record2)) {
       stale = true;
       return;
@@ -13912,6 +13985,7 @@ async function deleteVaultMemoryOp(ctx, id) {
     if (record2.isDeleted || !isOwnedByCtxUser(ctx, record2)) return false;
     let stale = false;
     await ctx.database.write(async () => {
+      await assertCanWrite2(ctx);
       if (record2.isDeleted || !isOwnedByCtxUser(ctx, record2)) {
         stale = true;
         return;
@@ -13949,8 +14023,7 @@ async function supersedeVaultMemoryOp(ctx, id, supersededById) {
     }
     let stale = false;
     await ctx.database.write(async () => {
-      if (ctx.canWrite && !await ctx.canWrite())
-        throw new Error("Memory source is no longer eligible");
+      await assertCanWrite2(ctx);
       if (record2.isDeleted || record2.supersededBy || !isOwnedByCtxUser(ctx, record2)) {
         stale = true;
         return;
@@ -14112,6 +14185,7 @@ async function stampTopicsExtractedAtOp(ctx, memoryIds, extractedAt, version = T
   for (let i = 0; i < uniqueIds.length; i += CHUNK) {
     const chunkIds = uniqueIds.slice(i, i + CHUNK);
     await ctx.database.write(async () => {
+      await assertCanWrite2(ctx);
       const records = [];
       for (const id of chunkIds) {
         try {
@@ -14145,6 +14219,7 @@ async function relinkMemoryTopicsOp(ctx, memoryIds) {
   for (const id of Array.from(new Set(memoryIds))) {
     try {
       await ctx.database.write(async (writer) => {
+        await assertCanWrite2(ctx);
         let record2;
         try {
           record2 = await ctx.vaultMemoryCollection.find(id);
@@ -14175,6 +14250,7 @@ async function backfillMemoryTopicsOp(ctx, memoryIds) {
   for (let i = 0; i < uniqueIds.length; i += CHUNK) {
     const chunkIds = uniqueIds.slice(i, i + CHUNK);
     await ctx.database.write(async () => {
+      await assertCanWrite2(ctx);
       const writes = [];
       for (const id of chunkIds) {
         let record2;
@@ -14207,6 +14283,7 @@ async function deleteAllVaultMemoriesForUserOp(ctx, userId) {
   const records = await ctx.vaultMemoryCollection.query(Q8.where("user_id", userId), Q8.where("is_deleted", false)).fetch();
   if (records.length === 0) return 0;
   await ctx.database.write(async () => {
+    await assertCanWrite2(ctx);
     const prepared = records.map(
       (record2) => record2.prepareUpdate((r) => {
         r._setRaw("is_deleted", true);
@@ -14261,6 +14338,7 @@ async function archiveVaultMemoryOp(ctx, id, opts) {
     let stale = false;
     const archivedAtValue = opts?.now ?? Date.now();
     await ctx.database.write(async () => {
+      await assertCanWrite2(ctx);
       if (record2.isDeleted || !isOwnedByCtxUser(ctx, record2) || record2.archivedAt !== null) {
         stale = true;
         return;
@@ -14284,6 +14362,7 @@ async function restoreVaultMemoryOp(ctx, id) {
     if (record2.isDeleted || !isOwnedByCtxUser(ctx, record2)) return false;
     let stale = false;
     await ctx.database.write(async () => {
+      await assertCanWrite2(ctx);
       if (record2.isDeleted || !isOwnedByCtxUser(ctx, record2)) {
         stale = true;
         return;
@@ -14304,6 +14383,7 @@ async function hardDeleteDecayedOp(ctx, id, opts) {
     const now = opts.now ?? Date.now();
     let stale = false;
     await ctx.database.write(async () => {
+      await assertCanWrite2(ctx);
       const archivedAt = record2.archivedAt;
       if (record2.isDeleted || !isOwnedByCtxUser(ctx, record2) || archivedAt === null || now - archivedAt <= opts.hardDeleteWindowMs) {
         stale = true;
@@ -14343,6 +14423,7 @@ async function updateVaultMemoryEmbeddingOp(ctx, id, embedding2, embeddingModel,
     }
     let written = false;
     await ctx.database.write(async () => {
+      await assertCanWrite2(ctx);
       if (record2.isDeleted || !isOwnedByCtxUser(ctx, record2)) return;
       const originalUpdatedAt = record2.updatedAt.getTime();
       if (originalUpdatedAt !== readUpdatedAt || record2._getRaw("content") !== readStoredContent)
@@ -18312,6 +18393,13 @@ function restoreCandidates(candidates, redactor, ownNames) {
   ).map((c) => c.candidate);
 }
 async function extractAndRetain(messages, retainCtx, options) {
+  const { memoryStore, signal } = options;
+  if (memoryStore === null) throw new Error("Memory store is not ready");
+  if (memoryStore && options.folderId !== void 0 && options.folderId !== null)
+    throw new Error("Remote memory extraction does not support folders");
+  if (memoryStore && options.extract.piiRedaction && !memoryStore.masksEmbeddingInput)
+    throw new Error("PII-redacted extraction requires a memory store that masks embedding inputs");
+  signal?.throwIfAborted();
   const minConfidence = options.minConfidence ?? DEFAULT_MIN_CONFIDENCE;
   const resolvedConsolidatePii = options.consolidateOptions?.piiRedaction ?? options.extract.piiRedaction;
   const consolidateOptions = options.consolidateOptions !== void 0 ? {
@@ -18345,6 +18433,7 @@ async function extractAndRetain(messages, retainCtx, options) {
     }
   });
   const extractMs = Date.now() - tExtract;
+  signal?.throwIfAborted();
   const filtered = candidates.filter((c) => c.confidence >= minConfidence);
   const log = getLogger();
   const screened = screenCandidatesForInjection(filtered);
@@ -18392,16 +18481,33 @@ async function extractAndRetain(messages, retainCtx, options) {
   const results = [];
   const quarantinedInfo = [];
   let failedWrites = 0;
+  let auditRows;
   const tRetain = Date.now();
   for (const { candidate, isQuarantined, reason, signature } of toRetain) {
     try {
+      signal?.throwIfAborted();
       if (isQuarantined) {
-        const existingId = await findQuarantinedDuplicateOp(
-          retainCtx.vaultCtx,
-          candidate.content,
-          candidate.sourceMessageIds,
-          { scope: options.scope ?? "private", folderId: options.folderId ?? null }
-        ).catch(() => null);
+        let existingId;
+        if (memoryStore) {
+          auditRows ?? (auditRows = memoryStore.list({
+            scopes: [options.scope ?? "private"],
+            includeArchived: true,
+            includeQuarantined: true,
+            includeSuperseded: true
+          }));
+          const sourceKey = [...new Set(candidate.sourceMessageIds)].sort().join("\0");
+          const normalize = (value) => value.normalize("NFKC").trim().replace(/\s+/g, " ").toLowerCase();
+          existingId = (await auditRows).find(
+            (row) => row.trustTier === "quarantined" && row.scope === (options.scope ?? "private") && [...new Set(row.sourceChunkIds ?? [])].sort().join("\0") === sourceKey && normalize(row.content) === normalize(candidate.content)
+          )?.uniqueId ?? null;
+        } else {
+          existingId = await findQuarantinedDuplicateOp(
+            retainCtx.vaultCtx,
+            candidate.content,
+            candidate.sourceMessageIds,
+            { scope: options.scope ?? "private", folderId: options.folderId ?? null }
+          ).catch(() => null);
+        }
         if (existingId) {
           quarantinedInfo.push({
             candidate,
@@ -18412,18 +18518,26 @@ async function extractAndRetain(messages, retainCtx, options) {
           continue;
         }
       }
-      const result = await retain(candidate.content, retainCtx, {
+      const retainOptions = {
         source: "auto-extracted",
         sourceChunkIds: candidate.sourceMessageIds,
         respectTombstones: true,
         ...options.scope !== void 0 && { scope: options.scope },
-        ...options.folderId !== void 0 && { folderId: options.folderId },
         ...consolidateOptions !== void 0 && { consolidateOptions },
         ...candidate.eventTime !== null && { eventTime: candidate.eventTime },
         factType: candidate.type,
         ...isQuarantined && { trustTier: "quarantined", enableAutoMerge: false }
+      };
+      const result = memoryStore ? await memoryStore.retain(candidate.content, {
+        ...retainOptions,
+        canWrite: retainCtx.vaultCtx.canWrite,
+        signal
+      }) : await retain(candidate.content, retainCtx, {
+        ...retainOptions,
+        ...options.folderId !== void 0 && { folderId: options.folderId }
       });
       if (isQuarantined) {
+        auditRows = void 0;
         const info = {
           candidate,
           memoryId: result.memoryId,
@@ -18442,9 +18556,16 @@ async function extractAndRetain(messages, retainCtx, options) {
       }
       succeededCandidates.push(candidate);
       results.push(result);
-      if (result.action !== "suppressed" && options.entityCtx && candidate.entities.length > 0) {
+      if (result.action !== "suppressed" && candidate.entities.length > 0) {
         try {
-          if (!await isMemoryTopicsUserManaged(options.entityCtx, result.memoryId)) {
+          signal?.throwIfAborted();
+          if (memoryStore) {
+            await memoryStore.addTopics(result.memoryId, candidate.entities, {
+              unlessUserManaged: true,
+              canWrite: retainCtx.vaultCtx.canWrite,
+              signal
+            });
+          } else if (options.entityCtx && !await isMemoryTopicsUserManaged(options.entityCtx, result.memoryId)) {
             await linkMemoryEntitiesOp(options.entityCtx, result.memoryId, candidate.entities, {
               unlessTopicsUserManaged: true
             });
@@ -18692,7 +18813,7 @@ function createAutoExtractor(options) {
   };
   const consolidateOptions = options.consolidate ? { ...options.consolidate, ...subPassAuth(options.consolidate.baseUrl) } : void 0;
   const injectionClassifierOptions = options.injectionClassifier ? { ...options.injectionClassifier, ...subPassAuth(options.injectionClassifier.baseUrl) } : void 0;
-  if (options.retainCtx.vaultCtx.entityCtx && !options.entityCtx) {
+  if (!options.memoryStore && options.retainCtx.vaultCtx.entityCtx && !options.entityCtx) {
     getLogger().warn(
       "[memory/extract] retainCtx.vaultCtx.entityCtx is set but extractor was created without `entityCtx` \u2014 W5 graph lane will receive no writes"
     );
@@ -18737,6 +18858,8 @@ function createAutoExtractor(options) {
       try {
         const { candidates, results, failedCount, outcome: outcome2, failure, funnel, timings, model } = await extractAndRetain(window2, retainCtx, {
           extract,
+          memoryStore: options.memoryStore,
+          signal: options.signal,
           ...options.minConfidence !== void 0 && { minConfidence: options.minConfidence },
           ...options.entityCtx !== void 0 && { entityCtx: options.entityCtx },
           ...options.scope !== void 0 && { scope: options.scope },
@@ -20845,6 +20968,7 @@ function createLocalMemoryStore(options) {
     database,
     entityCollection: database.get("entity"),
     memoryEntityCollection: database.get("memory_entity"),
+    canWrite: options.canWrite,
     ...userId !== void 0 && { userId },
     ...options.allowUnscopedRows !== void 0 && {
       allowUnscopedRows: options.allowUnscopedRows
@@ -20856,10 +20980,21 @@ function createLocalMemoryStore(options) {
     walletAddress: options.walletAddress,
     signMessage: options.signMessage,
     embeddedWalletSigner: options.embeddedWalletSigner,
+    canWrite: options.canWrite,
     ...userId !== void 0 && { userId },
     ...options.singleTenant !== void 0 && { singleTenant: options.singleTenant },
     entityCtx
   };
+  const assertWrite = async (writeOptions) => {
+    writeOptions?.signal?.throwIfAborted();
+    if (writeOptions?.canWrite && !await writeOptions.canWrite()) {
+      throw new Error("Memory source is no longer eligible");
+    }
+    if (options.canWrite && !await options.canWrite()) {
+      throw new Error("Memory source is no longer eligible");
+    }
+    writeOptions?.signal?.throwIfAborted();
+  };
   const vaultCache = options.vaultCache ?? createVaultEmbeddingCache();
   const ownedBy = userId !== void 0 ? [Q15.where("user_id", userId)] : [];
   const linksOwnedBy = userId === void 0 ? [] : options.allowUnscopedRows ? [Q15.or(Q15.where("user_id", userId), Q15.where("user_id", null))] : [Q15.where("user_id", userId)];
@@ -20971,9 +21106,25 @@ function createLocalMemoryStore(options) {
     archive: (id) => archiveVaultMemoryOp(vaultCtx, id),
     restore: (id) => restoreVaultMemoryOp(vaultCtx, id),
     setTopics: (memoryId, topics) => setMemoryEntitiesOp(vaultCtx, memoryId, topics),
-    addTopics: (memoryId, topics) => database.write(async (writer) => {
+    addTopics: (memoryId, topics, writeOptions) => database.write(async (writer) => {
+      await assertWrite(writeOptions);
       const owned = await vaultCtx.vaultMemoryCollection.query(Q15.where("id", memoryId), Q15.where("is_deleted", false), ...ownedBy).fetchCount();
-      return owned > 0 ? writer.callWriter(() => linkMemoryEntitiesOp(entityCtx, memoryId, topics)) : [];
+      return owned > 0 ? writer.callWriter(
+        () => linkMemoryEntitiesOp(
+          {
+            ...entityCtx,
+            canWrite: async () => {
+              await assertWrite(writeOptions);
+              return true;
+            }
+          },
+          memoryId,
+          topics,
+          {
+            unlessTopicsUserManaged: writeOptions?.unlessUserManaged
+          }
+        )
+      ) : [];
     }),
     setVisibility: (id, visibility, visibilityOptions) => setMemoryVisibilityOp(vaultCtx, id, { visibility, ...visibilityOptions }),
     recall: (query, recallOptions) => recall(
@@ -20983,7 +21134,17 @@ function createLocalMemoryStore(options) {
     ),
     retain: (content, retainOptions) => retain(
       content,
-      { vaultCtx, embeddingOptions: options.embeddingOptions, vaultCache },
+      {
+        vaultCtx: {
+          ...vaultCtx,
+          canWrite: async () => {
+            await assertWrite(retainOptions);
+            return true;
+          }
+        },
+        embeddingOptions: options.embeddingOptions,
+        vaultCache
+      },
       retainOptions
     ),
     factSource: {
@@ -21620,7 +21781,14 @@ function stored(row) {
 function createRemoteMemoryPipeline(options) {
   const { persistence, embeddingOptions } = options;
   const model = embeddingOptions.model ?? DEFAULT_API_EMBEDDING_MODEL;
-  const operation = (mode) => {
+  const operation = (mode, writeOptions) => {
+    const signal = writeOptions?.signal;
+    const assertWrite = async () => {
+      signal?.throwIfAborted();
+      if (writeOptions?.canWrite && !await writeOptions.canWrite())
+        throw new Error("Memory source is no longer eligible");
+      signal?.throwIfAborted();
+    };
     const rejectUndecryptable = (failed) => {
       if (!failed.length) return;
       if (mode === "retain")
@@ -21638,7 +21806,7 @@ function createRemoteMemoryPipeline(options) {
       return items.map((item) => stored(item.memory));
     };
     const get = async (id) => {
-      const snapshot = snapshots.get(id) ?? await persistence.get(id);
+      const snapshot = snapshots.get(id) ?? await (signal ? persistence.get(id, signal) : persistence.get(id));
       if (!snapshot || snapshot.memory.is_deleted || snapshot.memory.superseded_by) return null;
       snapshots.set(id, snapshot);
       return stored(snapshot.memory);
@@ -21684,7 +21852,7 @@ function createRemoteMemoryPipeline(options) {
         if (forced.size < 100 && temporal[i] !== void 0) forced.add(temporal[i]);
       }
       const forceIds = [...forced];
-      const windowOptions = (i, signal) => ({
+      const windowOptions = (i, signal2) => ({
         limit: Math.min(100, Math.max((search.limit ?? 8) * 3, 30)),
         force_ids: i === 0 ? forceIds : [],
         ...search.scopes && { scopes: search.scopes },
@@ -21692,13 +21860,15 @@ function createRemoteMemoryPipeline(options) {
         ...search.memoryIds !== void 0 && { memory_ids: search.memoryIds },
         include_archived: search.includeArchived,
         embedding_model: model,
-        ...signal && { signal }
+        ...signal2 && { signal: signal2 }
       });
       const vectors = [queryEmbedding, ...facetEmbeddings];
       let windows;
       if (mode === "retain") {
         windows = await Promise.all(
-          vectors.map((embedding2, i) => persistence.candidateSet(embedding2, windowOptions(i)))
+          vectors.map(
+            (embedding2, i) => persistence.candidateSet(embedding2, windowOptions(i, signal))
+          )
         );
       } else {
         const deadline = new AbortController();
@@ -21786,12 +21956,15 @@ function createRemoteMemoryPipeline(options) {
         twin_opt_in: false
       };
     };
-    const write = async (memory, snapshot) => remember([await persistence.put(memory, snapshot)])[0];
+    const write = async (memory, snapshot) => {
+      await assertWrite();
+      return remember([await persistence.put(memory, snapshot, signal)])[0];
+    };
     const port = {
       prepare,
       get,
       getFresh: async (id) => {
-        const current = await persistence.get(id);
+        const current = await (signal ? persistence.get(id, signal) : persistence.get(id));
         return current && !current.memory.is_deleted && !current.memory.superseded_by ? stored(current.memory) : null;
       },
       tombstones: async (embedding2, embeddingModel, scope, folderId) => {
@@ -21802,7 +21975,8 @@ function createRemoteMemoryPipeline(options) {
           embedding_model: embeddingModel,
           strict_model: true,
           include_deleted: true,
-          deleted_only: true
+          deleted_only: true,
+          signal
         });
         rejectUndecryptable(window2.failed);
         return remember(window2.items);
@@ -21858,14 +22032,18 @@ function createRemoteMemoryPipeline(options) {
         if (!target || !newer || id === successor) return false;
         const old = snapshots.get(id);
         const next = snapshots.get(successor);
+        await assertWrite();
         remember(
-          await persistence.putMany([
-            {
-              memory: { ...old.memory, superseded_by: successor, superseded_at: Date.now() },
-              expectedVersion: old
-            },
-            { memory: next.memory, expectedVersion: next }
-          ])
+          await persistence.putMany(
+            [
+              {
+                memory: { ...old.memory, superseded_by: successor, superseded_at: Date.now() },
+                expectedVersion: old
+              },
+              { memory: next.memory, expectedVersion: next }
+            ],
+            signal
+          )
         );
         return true;
       },
@@ -21874,18 +22052,22 @@ function createRemoteMemoryPipeline(options) {
         if (!target) return { created: null, retired: false };
         const snapshot = snapshots.get(targetId);
         const successor = createRow(input);
+        await assertWrite();
         const rows = remember(
-          await persistence.putMany([
-            { memory: successor, expectedVersion: 0 },
-            {
-              memory: {
-                ...snapshot.memory,
-                superseded_by: successor.memory_id,
-                superseded_at: Date.now()
-              },
-              expectedVersion: snapshot
-            }
-          ])
+          await persistence.putMany(
+            [
+              { memory: successor, expectedVersion: 0 },
+              {
+                memory: {
+                  ...snapshot.memory,
+                  superseded_by: successor.memory_id,
+                  superseded_at: Date.now()
+                },
+                expectedVersion: snapshot
+              }
+            ],
+            signal
+          )
         );
         return { created: rows[0], retired: true };
       }
@@ -21918,7 +22100,7 @@ function createRemoteMemoryPipeline(options) {
     factSource,
     recall: async (query, recallOptions = {}) => recall(query, { embeddingOptions, factSource }, { ...recallOptions, types: ["fact"] }),
     retain: async (content, retainOptions) => {
-      const { port } = operation("retain");
+      const { port } = operation("retain", retainOptions);
       return retainWithPersistence(
         content,
         {
@@ -22500,16 +22682,21 @@ function createRemoteMemoryStore(options) {
     const record2 = await persistence.get(id);
     return record2 && !record2.memory.is_deleted ? record2 : null;
   };
-  const mutateLocked = async (id, change, edit) => {
-    const record2 = await live(id);
+  const mutateLocked = async (id, change, edit, writeOptions) => {
+    writeOptions?.signal?.throwIfAborted();
+    const record2 = writeOptions?.signal ? await persistence.get(id, writeOptions.signal) : await live(id);
     if (!record2) return null;
+    if (record2.memory.is_deleted) return null;
+    if (writeOptions?.canWrite && !await writeOptions.canWrite())
+      throw new Error("Memory source is no longer eligible");
+    writeOptions?.signal?.throwIfAborted();
     const next = edit(structuredClone(record2.memory));
     if (!next) return null;
-    const saved = await persistence.put(next, record2);
+    const saved = writeOptions?.signal ? await persistence.put(next, record2, writeOptions.signal) : await persistence.put(next, record2);
     notify(typeof change === "function" ? change(record2.memory) : change, [saved]);
     return saved;
   };
-  const mutate = (id, change, edit) => serialized(id, () => mutateLocked(id, change, edit));
+  const mutate = (id, change, edit, writeOptions) => serialized(id, () => mutateLocked(id, change, edit, writeOptions));
   const serializedAll = (ids, task) => [...new Set(ids)].sort().reduceRight((inner, id) => () => serialized(id, inner), task)();
   const mutateMany = async (ids, change, edit) => {
     const saved = /* @__PURE__ */ new Map();
@@ -23022,13 +23209,21 @@ function createRemoteMemoryStore(options) {
         }))
       );
     },
-    addTopics: async (memoryId, topics) => {
+    addTopics: async (memoryId, topics, writeOptions) => {
       const added = await withKnownKinds(topicInputs(topics, "auto"));
-      const saved = await mutate(memoryId, "edit", (memory) => ({
-        ...memory,
-        topics: serializeTopics(mergeTopics(parseTopics(memory.topics) ?? [], added)),
-        topics_updated_at: Date.now()
-      }));
+      const saved = await mutate(
+        memoryId,
+        "edit",
+        (memory) => {
+          if (writeOptions?.unlessUserManaged && memory.topics_user_managed) return null;
+          return {
+            ...memory,
+            topics: serializeTopics(mergeTopics(parseTopics(memory.topics) ?? [], added)),
+            topics_updated_at: Date.now()
+          };
+        },
+        writeOptions
+      );
       if (!saved) return [];
       const now = /* @__PURE__ */ new Date();
       return mergeTopics([], added).map(
@@ -23879,6 +24074,7 @@ function createDurableAutoExtractor(options) {
   };
   const folderId = options.folderId ?? null;
   let disposed = false;
+  let activeBatch = null;
   let running = false;
   let wakeRequested = false;
   let timer;
@@ -23915,14 +24111,18 @@ function createDurableAutoExtractor(options) {
     }, delay);
   }
   async function extractBatch(messages, conversationId, ids, jobScope, jobFolderId) {
+    if (disposed) throw new Error("Extraction session was disposed");
     let watchdog;
     let cancelled = false;
+    const controller = new AbortController();
+    activeBatch = controller;
     const model = options.modelForScope?.(jobScope) ?? options.extract.model;
     try {
       return await Promise.race([
         new Promise((resolve, reject) => {
           const worker = createAutoExtractor({
             ...options,
+            signal: controller.signal,
             retainCtx: {
               ...options.retainCtx,
               vaultCtx: {
@@ -23951,6 +24151,8 @@ function createDurableAutoExtractor(options) {
       ]);
     } finally {
       cancelled = true;
+      controller.abort();
+      if (activeBatch === controller) activeBatch = null;
       if (watchdog !== void 0) clearTimeout(watchdog);
     }
   }
@@ -23962,6 +24164,7 @@ function createDurableAutoExtractor(options) {
     for (const message of loaded)
       if (message && message.messageId > 0) sequences.set(message.uniqueId, message.messageId);
     await database.write(async () => {
+      if (disposed) return;
       const current = idsOf(job);
       const acknowledged = ids.filter((id) => current.includes(id));
       if (!acknowledged.length) return;
@@ -24134,6 +24337,7 @@ function createDurableAutoExtractor(options) {
               jobScope,
               jobFolderId
             );
+            if (disposed) throw new Error("Extraction session was disposed");
             options.onTurnComplete?.(result);
             return result;
           };
@@ -24170,6 +24374,7 @@ function createDurableAutoExtractor(options) {
           );
           scheduleAfterSuccess = true;
         } catch (error) {
+          if (disposed) break;
           attempts.set(job.id, attempted + 1);
           retry = true;
           reportError(error, conversationId);
@@ -24192,6 +24397,14 @@ function createDurableAutoExtractor(options) {
         schedule(retry ? options.retryDelayMs ?? 3e4 : 0);
     }
   }
+  function dispose() {
+    disposed = true;
+    activeBatch?.abort(options.signal?.reason);
+    if (timer !== void 0) clearTimeout(timer);
+    options.signal?.removeEventListener("abort", dispose);
+  }
+  if (options.signal?.aborted) dispose();
+  else options.signal?.addEventListener("abort", dispose, { once: true });
   schedule(0);
   return {
     processTurn(messages, conversationId) {
@@ -24271,10 +24484,7 @@ function createDurableAutoExtractor(options) {
       return true;
     },
     isProcessing: () => running,
-    dispose() {
-      disposed = true;
-      if (timer !== void 0) clearTimeout(timer);
-    }
+    dispose
   };
 }
 
@@ -30535,6 +30745,7 @@ var CONVERSATION_REDACTOR_LIMIT = 50;
 var NO_CONVERSATION_KEY = "__no_conversation__";
 var NO_STORE_FOLDERS = "Folders are not supported with a memoryStore";
 var NO_STORE_MASK = "piiRedaction needs a memoryStore built with embeddingOptions.maskInput";
+var MEMORY_STORE_NOT_READY = "Memory store is not ready";
 var conversationRedactors = /* @__PURE__ */ new Map();
 function getConversationRedactor(conversationId, nerDetector) {
   const key = conversationId ?? NO_CONVERSATION_KEY;
@@ -30625,7 +30836,7 @@ function useChatStorage(options) {
     () => ({ getToken, baseUrl, model: embeddingModel, maskInput: maskEmbeddingInput }),
     [getToken, baseUrl, embeddingModel, maskEmbeddingInput]
   );
-  const storeMaskMissing = memoryStore !== void 0 && maskEmbeddingInput !== void 0 && !memoryStore.masksEmbeddingInput;
+  const storeMaskMissing = memoryStore !== void 0 && memoryStore !== null && maskEmbeddingInput !== void 0 && !memoryStore.masksEmbeddingInput;
   const blobManagerRef = useRef4(new BlobUrlManager());
   useEffect4(() => {
     const manager = blobManagerRef.current;
@@ -30902,6 +31113,7 @@ function useChatStorage(options) {
   );
   const retainVaultMemory = useCallback5(
     async (input) => {
+      if (memoryStore === null) throw new Error(MEMORY_STORE_NOT_READY);
       if (memoryStore) {
         if (storeMaskMissing) throw new Error(NO_STORE_MASK);
         if (input.folderId !== void 0) throw new Error(NO_STORE_FOLDERS);
@@ -30933,6 +31145,7 @@ function useChatStorage(options) {
   );
   const createMemoryVaultTool2 = useCallback5(
     (options2) => {
+      if (memoryStore === null) throw new Error(MEMORY_STORE_NOT_READY);
       if (storeMaskMissing) throw new Error(NO_STORE_MASK);
       const embOpts = getToken ? vaultEmbeddingOptions : void 0;
       return createMemoryVaultTool(
@@ -30954,6 +31167,7 @@ function useChatStorage(options) {
   );
   const getVaultMemories = useCallback5(
     (options2) => {
+      if (memoryStore === null) return Promise.resolve([]);
       if (!memoryStore) return getAllVaultMemoriesOp(vaultCtx, options2);
       const { folderId, levels, kinds, ...listOptions } = options2 ?? {};
       if (folderId !== void 0) throw new Error(NO_STORE_FOLDERS);
@@ -30965,6 +31179,7 @@ function useChatStorage(options) {
   );
   const createVaultMemory = useCallback5(
     async (content, scope) => {
+      if (memoryStore === null) throw new Error(MEMORY_STORE_NOT_READY);
       if (storeMaskMissing) throw new Error(NO_STORE_MASK);
       if (memoryStore) return memoryStore.create({ content, scope });
       const result = await createVaultMemoryOp(vaultCtx, { content, scope });
@@ -30986,6 +31201,7 @@ function useChatStorage(options) {
   );
   const updateVaultMemory = useCallback5(
     async (id, content, scope) => {
+      if (memoryStore === null) throw new Error(MEMORY_STORE_NOT_READY);
       if (storeMaskMissing) throw new Error(NO_STORE_MASK);
       if (memoryStore) return memoryStore.update(id, { content, scope });
       const existing = await getVaultMemoryOp(vaultCtx, id);
@@ -31011,6 +31227,7 @@ function useChatStorage(options) {
   );
   const deleteVaultMemory = useCallback5(
     async (id) => {
+      if (memoryStore === null) throw new Error(MEMORY_STORE_NOT_READY);
       if (memoryStore) return memoryStore.delete(id);
       const existing = await getVaultMemoryOp(vaultCtx, id);
       const result = await deleteVaultMemoryOp(vaultCtx, id);
@@ -31024,7 +31241,7 @@ function useChatStorage(options) {
   const chunkVectorCacheRef = useRef4(createChunkVectorCache());
   const clientToolEmbeddingsCacheRef = useRef4(/* @__PURE__ */ new Map());
   useEffect4(() => {
-    if (!getToken || memoryStore) return;
+    if (!getToken || memoryStore !== void 0) return;
     void (async () => {
       try {
         await preEmbedVaultMemories(vaultCtx, vaultEmbeddingOptions, vaultEmbeddingCache);
@@ -31040,6 +31257,7 @@ function useChatStorage(options) {
   }, [vaultEmbeddingCache]);
   const createMemoryVaultSearchTool2 = useCallback5(
     (searchOptions) => {
+      if (memoryStore === null) throw new Error(MEMORY_STORE_NOT_READY);
       if (!getToken && !memoryStore) {
         throw new Error("getToken is required for memory vault search tool");
       }
@@ -31055,6 +31273,7 @@ function useChatStorage(options) {
   );
   const createRecallTool2 = useCallback5(
     (toolOptions, callbacks) => {
+      if (memoryStore === null) throw new Error(MEMORY_STORE_NOT_READY);
       if (!getToken && !memoryStore) {
         throw new Error("getToken is required for recall tool");
       }
@@ -31094,6 +31313,7 @@ function useChatStorage(options) {
   );
   const searchVaultMemoriesFn = useCallback5(
     async (query, searchOptions) => {
+      if (memoryStore === null) return [];
       if (storeMaskMissing) throw new Error(NO_STORE_MASK);
       if (memoryStore) return (await memoryStore.factSource.search(query, searchOptions)).results;
       if (!getToken) return [];
@@ -31109,7 +31329,7 @@ function useChatStorage(options) {
   );
   const recallFn = useCallback5(
     async (query, options2) => {
-      if (!getToken && !memoryStore) {
+      if (memoryStore === null || !getToken && !memoryStore) {
         return {
           memories: [],
           usedBudget: options2?.budget ?? "low",