@equationalapplications/core-llm-wiki 7.5.0 → 7.7.0

package/dist/{testing-ClpOUiLI.d.mts → testing-A4Sofxyo.d.mts}

@@ -215,6 +215,23 @@ interface HealResult {
     /** Heal candidates inside the recheck cooldown. */
     deferred: number;
 }
+/**
+ * Opt-in evidence check for LLM-authored facts (spec §6). Default off: 7.x
+ * write behavior is unchanged. In `'draft'` mode, writers in `writers` must
+ * quote their source; a fact whose quotes are missing or not found is stored
+ * as a `draft` instead of being rejected.
+ */
+interface GroundingConfig {
+    mode: 'off' | 'draft';
+    /** Default `['ingest']`. The librarian and heal synthesize across events; measure their pass rates before opting them in. */
+    writers?: Array<'ingest' | 'librarian' | 'heal'>;
+    /** Quotes shorter than this (after whitespace normalization) count as absent. Default 20. */
+    minEvidenceChars?: number;
+    /** Quotes retained per fact. Retention only; every quote is checked. Default 3. */
+    maxEvidence?: number;
+    /** Characters retained per quote. Default 300. */
+    maxEvidenceChars?: number;
+}
 interface WikiConfig {
     /**
      * Prefix applied to every SQL table/index/trigger name. Must match
@@ -260,7 +277,11 @@ interface WikiConfig {
      * Default: undefined (pure semantic when embed provided).
      */
     hybridWeight?: number;
-    /** Global prompt overrides for text generation calls (`ingestDocument`, `runLibrarian`, `runHeal`). Does not affect embedding generation. Runtime overrides on individual method calls take precedence. */
+    /**
+     * Global prompt overrides for text generation calls (`ingestDocument`, `runLibrarian`, `runHeal`). Does not affect embedding generation. Runtime overrides on individual method calls take precedence.
+     *
+     * Returned verbatim by `getInstructions` and the `wiki_get_instructions` tool (`memory:read`): never put secrets, API keys or private data here.
+     */
     prompts?: PromptOverrides;
     /**
      * When true, entry and task mutations append an event to the internal outbox table.
@@ -282,6 +303,8 @@ interface WikiConfig {
      * `GraphTraversalOptions.excludeDrafts`. Default false (drafts visible).
      */
     excludeDrafts?: boolean;
+    /** Evidence check for LLM-authored facts (spec §6). Default off. */
+    grounding?: GroundingConfig;
 }
 interface ReadOptions {
     maxResults?: number;
@@ -493,6 +516,8 @@ interface ExtractedFact {
     body: string;
     tags: string[];
     confidence: 'certain' | 'inferred' | 'tentative';
+    /** Quotes the model copied from its source; see `WikiConfig.grounding`. Never persisted. */
+    evidence?: string[];
 }
 interface ExtractedFactWithOntology extends ExtractedFact {
     okf_type?: string;
@@ -1030,6 +1055,43 @@ interface DraftPage {
     facts: WikiFact[];
     nextCursor: string | null;
 }
+/**
+ * `pendingSources` status (spec §8.2). `partial`: live rows exist for the ref
+ * but none carries a hash, which is the intended retry state after a partial
+ * ingest. `current` is exactly the case where `hasChanged` returns false.
+ */
+type PendingSourceStatus = 'new' | 'changed' | 'partial' | 'current';
+/** Read-only maintenance report for one entity (spec §8.1). Counts cover live rows only. */
+interface WikiLintReport {
+    /** Edges whose source or target is missing, soft-deleted, or owned by another entity. */
+    danglingEdges: number;
+    /** Live-endpoint edges whose (source type, edge type, target type) is not in the effective manifest. 0 when ontology is off or the manifest is empty. */
+    manifestViolations: number;
+    /** Live facts with `okf_type` NULL. */
+    untypedFacts: number;
+    /** Live facts with `lifecycle_status = 'draft'`. */
+    drafts: number;
+    /** Live `librarian_inferred` facts with an empty `okf_verified`. */
+    unverifiedInferred: number;
+    /** Up to 20 ids each, ascending. */
+    sample: {
+        danglingEdgeIds: string[];
+        manifestViolationEdgeIds: string[];
+    };
+}
+/**
+ * Effective system prompts (spec §8.3): defaults with `WikiConfig.prompts`
+ * overrides applied and the ontology block appended. Templates only: data
+ * placeholders such as `{{documentChunk}}` stay verbatim, and no events,
+ * chunks or facts are ever included. Overrides are returned as written, so
+ * never put secrets or private data in `WikiConfig.prompts`.
+ */
+interface WikiInstructions {
+    ingest: string;
+    librarian: string;
+    heal: string;
+    ontologyBackfill: string;
+}
 
 interface WikiOutboxEvent<T = unknown> {
     id: string;
@@ -1227,10 +1289,14 @@ declare class EntryRepository extends BaseRepository {
      * fact, not only immutable_document rows, so the source-type restriction has
      * to be applied here, after retrieval.
      */
-    findAnchorRowsByIds(entityId: string, ids: readonly string[], tx?: SQLiteAdapter): Promise<Array<{
+    findAnchorRowsByIds(entityId: string, ids: readonly string[], tx?: SQLiteAdapter, opts?: {
+        withBody?: boolean;
+    }): Promise<Array<{
         id: string;
         title: string;
         source_ref: string | null;
+        body?: string;
+        lifecycle_status?: string;
     }>>;
     /**
      * Fetch recent non-deleted entries for an entity (limited), ordered by updated_at DESC.
@@ -1359,6 +1425,15 @@ declare class EntryRepository extends BaseRepository {
      * Empty input is a synchronous early return with zero SQL calls.
      */
     findLatestSourceHashes(entityId: string, sourceRefs: readonly string[], tx?: SQLiteAdapter): Promise<Map<string, string | null>>;
+    /**
+     * Per source ref, the hash of the latest live row (same ordering as
+     * {@link findLatestSourceHashes}) and whether ANY live row carries a hash.
+     * Refs with no live row are absent. Chunked under the bind-variable limit.
+     */
+    findSourceStates(entityId: string, sourceRefs: readonly string[], tx?: SQLiteAdapter): Promise<Map<string, {
+        latestHash: string | null;
+        anyHashed: boolean;
+    }>>;
     /**
      * Return the live source_refs for an entity that hold the given source_hash.
      * Used by the ingestDocument duplicate-hash guard and by hosts auditing
@@ -1991,9 +2066,29 @@ declare class OntologyService {
     resolveAndPersistEdges(entityId: string, sourceId: string, sourceType: string | null, edges: ExtractedFactEdge[], manifest: OntologyManifest, titleIndex: Map<string, TitleIndexEntry>, tx: SQLiteAdapter, now: number, drops?: EdgeDrop[]): Promise<number>;
 }
 
+type GroundingWriter = 'ingest' | 'librarian' | 'heal';
+interface ResolvedGrounding {
+    writers: ReadonlySet<GroundingWriter>;
+    minEvidenceChars: number;
+    maxEvidence: number;
+    maxEvidenceChars: number;
+}
+/** Insert-time trust fields. Spread onto a new `WikiFact`; `EntryRepository.upsert` writes them on INSERT only. */
+interface GroundingTrust {
+    lifecycle_status: 'stable' | 'draft';
+    okf_verified?: OkfVerifiedEntry[];
+    last_verified_at?: number;
+    last_verified_by?: string;
+}
+
 declare class PromptService {
     private globalOverrides?;
-    constructor(globalOverrides?: PromptOverrides | undefined);
+    private grounding;
+    constructor(globalOverrides?: PromptOverrides | undefined, grounding?: ResolvedGrounding | null);
+    /** The resolved grounding config when `writer` is in `grounding.writers`; otherwise null (spec §6.2). */
+    groundingFor(writer: GroundingWriter): ResolvedGrounding | null;
+    /** Appended after any override and after ontology context, so it is always last. */
+    private appendGrounding;
     private hydrate;
     private hasOntologyPlaceholders;
     private buildSystemPrompt;
@@ -2005,6 +2100,7 @@ declare class PromptService {
     buildLibrarianPrompt(events: unknown[], currentFacts: unknown[], runtimeOverride?: string, ontologyContext?: OntologyPromptContext | null): {
         systemPrompt: string;
         userPrompt: string;
+        groundingCorpus?: string[];
     };
     /**
      * Heal-prompt level interpretation for the `attemptLevel` ladder.
@@ -2034,11 +2130,19 @@ declare class PromptService {
             userPrompt: string;
         };
         degraded: DegradedRecord[];
+        groundingCorpus?: string[];
     };
     buildOntologyBackfillPrompt(facts: unknown[], runtimeOverride?: string, ontologyContext?: OntologyPromptContext | null): {
         systemPrompt: string;
         userPrompt: string;
     };
+    /**
+     * The system prompt each writer would send, without hydrating data (spec
+     * §8.3). `buildSystemPrompt` with no variables hydrates only ontology
+     * placeholders and leaves data placeholders verbatim; heal never receives
+     * ontology context, matching `buildHealPrompt`.
+     */
+    buildInstructionTemplates(ontologyContext: OntologyPromptContext | null): WikiInstructions;
 }
 
 declare class IngestionService {
@@ -2140,6 +2244,8 @@ declare class IngestionService {
             buffer: DiagnosticBuffer;
             operation: 'ingest' | 'upsertGraph';
         };
+        /** Insert-time trust by node id. Ingest-only (spec §6.5); the public upsertGraph never passes it, so host nodes are never grounded. */
+        nodeTrust?: ReadonlyMap<string, GroundingTrust>;
     }): Promise<{
         nodesWritten: number;
         edgesWritten: number;
@@ -2581,6 +2687,8 @@ declare class WikiMemory {
     private promptService;
     private ontologyService;
     private graphTraversalService;
+    private lintRepo;
+    private lintService;
     private readonly okfTrustWrites;
     constructor(db: SQLiteAdapter, options: WikiOptions);
     /**
@@ -2608,6 +2716,30 @@ declare class WikiMemory {
         changed: boolean;
         duplicateOf?: string;
     }>>;
+    /**
+     * Batch pending state per source (spec §8.2). `current` exactly when
+     * `hasChanged` is false; `partial` when live rows exist but none carries a
+     * hash (a first ingest with a failed chunk, or imported rows without a
+     * hash). A failed re-ingest of an already-hashed ref reports `changed`. Validation and raw-ref echo match
+     * batched `hasChanged`. Input order and duplicates are preserved. A
+     * non-array `sources`, or an entry that is not an object (including a hole
+     * in a sparse array), throws a `TypeError` before any SQL runs.
+     */
+    pendingSources(entityId: string, sources: Array<{
+        sourceRef: string;
+        sourceHash: string;
+    }>): Promise<Array<{
+        sourceRef: string;
+        status: PendingSourceStatus;
+    }>>;
+    /** Read-only maintenance report for one entity (spec §8.1). Reports, never repairs. */
+    lint(entityId: string): Promise<WikiLintReport>;
+    /**
+     * Effective system prompts for ingest, librarian, heal and ontology backfill
+     * (spec §8.3). Backs the `wiki_get_instructions` tool. Templates only;
+     * overrides are returned verbatim, so keep secrets out of `WikiConfig.prompts`.
+     */
+    getInstructions(entityId: string): Promise<WikiInstructions>;
     /**
      * Returns the live source_refs for an entity, one row per ref, with the most
      * recently-updated live `source_hash` and a live fact count. Refs are sorted
@@ -2942,4 +3074,4 @@ declare class WikiMemory {
     setGeneratedByTask(taskId: string, entityId: string, actor: string): Promise<void>;
 }
 
-export { type WikiConfig as $, type OntologyNodeType as A, type OntologyPromptContext as B, type ChunkFailure as C, type DegradedRecord as D, type EmbedFactResult as E, type FormatContextOptions as F, type GraphNeighborhood as G, HEAL_BATCH_SIZE as H, type IngestDocumentResult as I, type OntologyUpdates as J, PromptService as K, type LLMProvider as L, type MemoryBundle as M, PrunePartialFailureError as N, ONTOLOGY_BACKFILL_BATCH_SIZE as O, type PromptOverrides as P, type ReembedResult as Q, type ReadOptions as R, type SQLiteAdapter as S, type VectorRankerFallback as T, type VectorRankerRankArgs as U, type VectorRanker as V, type WikiOptions as W, type VectorRankerSemanticResult as X, WikiBusyError as Y, type WikiBusyOperation as Z, type WikiCheckpoint as _, type MemoryDump as a, type WikiDiagnostic as a0, type WikiDiagnosticCode as a1, type WikiDiagnosticDetail as a2, type WikiDiagnosticOperation as a3, type WikiDiagnosticSeverity as a4, type WikiDiagnosticTrigger as a5, WikiDraftNotFound as a6, WikiDuplicateHashError as a7, type WikiEdge as a8, type WikiEvent as a9, type WikiFact as aa, WikiGraphNodeOwnershipConflict as ab, WikiIngestEmptyError as ac, WikiInvalidReadOptions as ad, type WikiMemoryTestAccess as ae, type WikiOutboxEvent as af, WikiParseError as ag, WikiSourceRefHashCollision as ah, WikiStrictOntologyViolation as ai, type WikiTask as aj, WikiTransactionError as ak, validateManifest as al, EmbeddingService as am, ImportExportService as an, IngestionService as ao, JobManager as ap, MaintenanceService as aq, RetrievalService as ar, SearchService as as, WriteService as at, type FormattedMemoryDump as b, WikiMemory as c, type ClassifierAnswer as d, type ClassifierQuestion as e, type ClassifyRequest as f, type ClassifyResponse as g, type DraftPage as h, type EmbedFailureKind as i, type EmbeddingMarkerKind as j, type EntityStatus as k, type ExtractedFact as l, type ExtractedFactEdge as m, type ExtractedFactWithOntology as n, type ExtractedTask as o, type GraphTraversalOptions as p, HEAL_RECHECK_MS as q, HOOK_TIMEOUT_MARKER as r, type HealResult as s, ONTOLOGY_BACKFILL_MAX_PROMPT_CHARS as t, ONTOLOGY_BACKFILL_RECHECK_MS as u, type OntologyBackfillResult as v, type OntologyConfig as w, type OntologyEdgeType as x, type OntologyManifest as y, type OntologyMode as z };
+export { type WikiBusyOperation as $, type OntologyMode as A, type OntologyNodeType as B, type ChunkFailure as C, type DegradedRecord as D, type EmbedFactResult as E, type FormatContextOptions as F, type GraphNeighborhood as G, HEAL_BATCH_SIZE as H, type IngestDocumentResult as I, type OntologyPromptContext as J, type OntologyUpdates as K, type LLMProvider as L, type MemoryBundle as M, type PromptOverrides as N, ONTOLOGY_BACKFILL_BATCH_SIZE as O, type PendingSourceStatus as P, PromptService as Q, type ReadOptions as R, type SQLiteAdapter as S, PrunePartialFailureError as T, type ReembedResult as U, type VectorRanker as V, type WikiOptions as W, type VectorRankerFallback as X, type VectorRankerRankArgs as Y, type VectorRankerSemanticResult as Z, WikiBusyError as _, type MemoryDump as a, type WikiCheckpoint as a0, type WikiConfig as a1, type WikiDiagnostic as a2, type WikiDiagnosticCode as a3, type WikiDiagnosticDetail as a4, type WikiDiagnosticOperation as a5, type WikiDiagnosticSeverity as a6, type WikiDiagnosticTrigger as a7, WikiDraftNotFound as a8, WikiDuplicateHashError as a9, type WikiEdge as aa, type WikiEvent as ab, type WikiFact as ac, WikiGraphNodeOwnershipConflict as ad, WikiIngestEmptyError as ae, type WikiInstructions as af, WikiInvalidReadOptions as ag, type WikiLintReport as ah, type WikiMemoryTestAccess as ai, type WikiOutboxEvent as aj, WikiParseError as ak, WikiSourceRefHashCollision as al, WikiStrictOntologyViolation as am, type WikiTask as an, WikiTransactionError as ao, validateManifest as ap, EmbeddingService as aq, ImportExportService as ar, IngestionService as as, JobManager as at, MaintenanceService as au, RetrievalService as av, SearchService as aw, WriteService as ax, type FormattedMemoryDump as b, WikiMemory as c, type ClassifierAnswer as d, type ClassifierQuestion as e, type ClassifyRequest as f, type ClassifyResponse as g, type DraftPage as h, type EmbedFailureKind as i, type EmbeddingMarkerKind as j, type EntityStatus as k, type ExtractedFact as l, type ExtractedFactEdge as m, type ExtractedFactWithOntology as n, type ExtractedTask as o, type GraphTraversalOptions as p, type GroundingConfig as q, HEAL_RECHECK_MS as r, HOOK_TIMEOUT_MARKER as s, type HealResult as t, ONTOLOGY_BACKFILL_MAX_PROMPT_CHARS as u, ONTOLOGY_BACKFILL_RECHECK_MS as v, type OntologyBackfillResult as w, type OntologyConfig as x, type OntologyEdgeType as y, type OntologyManifest as z };

package/dist/{testing-ClpOUiLI.d.ts → testing-A4Sofxyo.d.ts}

@@ -215,6 +215,23 @@ interface HealResult {
     /** Heal candidates inside the recheck cooldown. */
     deferred: number;
 }
+/**
+ * Opt-in evidence check for LLM-authored facts (spec §6). Default off: 7.x
+ * write behavior is unchanged. In `'draft'` mode, writers in `writers` must
+ * quote their source; a fact whose quotes are missing or not found is stored
+ * as a `draft` instead of being rejected.
+ */
+interface GroundingConfig {
+    mode: 'off' | 'draft';
+    /** Default `['ingest']`. The librarian and heal synthesize across events; measure their pass rates before opting them in. */
+    writers?: Array<'ingest' | 'librarian' | 'heal'>;
+    /** Quotes shorter than this (after whitespace normalization) count as absent. Default 20. */
+    minEvidenceChars?: number;
+    /** Quotes retained per fact. Retention only; every quote is checked. Default 3. */
+    maxEvidence?: number;
+    /** Characters retained per quote. Default 300. */
+    maxEvidenceChars?: number;
+}
 interface WikiConfig {
     /**
      * Prefix applied to every SQL table/index/trigger name. Must match
@@ -260,7 +277,11 @@ interface WikiConfig {
      * Default: undefined (pure semantic when embed provided).
      */
     hybridWeight?: number;
-    /** Global prompt overrides for text generation calls (`ingestDocument`, `runLibrarian`, `runHeal`). Does not affect embedding generation. Runtime overrides on individual method calls take precedence. */
+    /**
+     * Global prompt overrides for text generation calls (`ingestDocument`, `runLibrarian`, `runHeal`). Does not affect embedding generation. Runtime overrides on individual method calls take precedence.
+     *
+     * Returned verbatim by `getInstructions` and the `wiki_get_instructions` tool (`memory:read`): never put secrets, API keys or private data here.
+     */
     prompts?: PromptOverrides;
     /**
      * When true, entry and task mutations append an event to the internal outbox table.
@@ -282,6 +303,8 @@ interface WikiConfig {
      * `GraphTraversalOptions.excludeDrafts`. Default false (drafts visible).
      */
     excludeDrafts?: boolean;
+    /** Evidence check for LLM-authored facts (spec §6). Default off. */
+    grounding?: GroundingConfig;
 }
 interface ReadOptions {
     maxResults?: number;
@@ -493,6 +516,8 @@ interface ExtractedFact {
     body: string;
     tags: string[];
     confidence: 'certain' | 'inferred' | 'tentative';
+    /** Quotes the model copied from its source; see `WikiConfig.grounding`. Never persisted. */
+    evidence?: string[];
 }
 interface ExtractedFactWithOntology extends ExtractedFact {
     okf_type?: string;
@@ -1030,6 +1055,43 @@ interface DraftPage {
     facts: WikiFact[];
     nextCursor: string | null;
 }
+/**
+ * `pendingSources` status (spec §8.2). `partial`: live rows exist for the ref
+ * but none carries a hash, which is the intended retry state after a partial
+ * ingest. `current` is exactly the case where `hasChanged` returns false.
+ */
+type PendingSourceStatus = 'new' | 'changed' | 'partial' | 'current';
+/** Read-only maintenance report for one entity (spec §8.1). Counts cover live rows only. */
+interface WikiLintReport {
+    /** Edges whose source or target is missing, soft-deleted, or owned by another entity. */
+    danglingEdges: number;
+    /** Live-endpoint edges whose (source type, edge type, target type) is not in the effective manifest. 0 when ontology is off or the manifest is empty. */
+    manifestViolations: number;
+    /** Live facts with `okf_type` NULL. */
+    untypedFacts: number;
+    /** Live facts with `lifecycle_status = 'draft'`. */
+    drafts: number;
+    /** Live `librarian_inferred` facts with an empty `okf_verified`. */
+    unverifiedInferred: number;
+    /** Up to 20 ids each, ascending. */
+    sample: {
+        danglingEdgeIds: string[];
+        manifestViolationEdgeIds: string[];
+    };
+}
+/**
+ * Effective system prompts (spec §8.3): defaults with `WikiConfig.prompts`
+ * overrides applied and the ontology block appended. Templates only: data
+ * placeholders such as `{{documentChunk}}` stay verbatim, and no events,
+ * chunks or facts are ever included. Overrides are returned as written, so
+ * never put secrets or private data in `WikiConfig.prompts`.
+ */
+interface WikiInstructions {
+    ingest: string;
+    librarian: string;
+    heal: string;
+    ontologyBackfill: string;
+}
 
 interface WikiOutboxEvent<T = unknown> {
     id: string;
@@ -1227,10 +1289,14 @@ declare class EntryRepository extends BaseRepository {
      * fact, not only immutable_document rows, so the source-type restriction has
      * to be applied here, after retrieval.
      */
-    findAnchorRowsByIds(entityId: string, ids: readonly string[], tx?: SQLiteAdapter): Promise<Array<{
+    findAnchorRowsByIds(entityId: string, ids: readonly string[], tx?: SQLiteAdapter, opts?: {
+        withBody?: boolean;
+    }): Promise<Array<{
         id: string;
         title: string;
         source_ref: string | null;
+        body?: string;
+        lifecycle_status?: string;
     }>>;
     /**
      * Fetch recent non-deleted entries for an entity (limited), ordered by updated_at DESC.
@@ -1359,6 +1425,15 @@ declare class EntryRepository extends BaseRepository {
      * Empty input is a synchronous early return with zero SQL calls.
      */
     findLatestSourceHashes(entityId: string, sourceRefs: readonly string[], tx?: SQLiteAdapter): Promise<Map<string, string | null>>;
+    /**
+     * Per source ref, the hash of the latest live row (same ordering as
+     * {@link findLatestSourceHashes}) and whether ANY live row carries a hash.
+     * Refs with no live row are absent. Chunked under the bind-variable limit.
+     */
+    findSourceStates(entityId: string, sourceRefs: readonly string[], tx?: SQLiteAdapter): Promise<Map<string, {
+        latestHash: string | null;
+        anyHashed: boolean;
+    }>>;
     /**
      * Return the live source_refs for an entity that hold the given source_hash.
      * Used by the ingestDocument duplicate-hash guard and by hosts auditing
@@ -1991,9 +2066,29 @@ declare class OntologyService {
     resolveAndPersistEdges(entityId: string, sourceId: string, sourceType: string | null, edges: ExtractedFactEdge[], manifest: OntologyManifest, titleIndex: Map<string, TitleIndexEntry>, tx: SQLiteAdapter, now: number, drops?: EdgeDrop[]): Promise<number>;
 }
 
+type GroundingWriter = 'ingest' | 'librarian' | 'heal';
+interface ResolvedGrounding {
+    writers: ReadonlySet<GroundingWriter>;
+    minEvidenceChars: number;
+    maxEvidence: number;
+    maxEvidenceChars: number;
+}
+/** Insert-time trust fields. Spread onto a new `WikiFact`; `EntryRepository.upsert` writes them on INSERT only. */
+interface GroundingTrust {
+    lifecycle_status: 'stable' | 'draft';
+    okf_verified?: OkfVerifiedEntry[];
+    last_verified_at?: number;
+    last_verified_by?: string;
+}
+
 declare class PromptService {
     private globalOverrides?;
-    constructor(globalOverrides?: PromptOverrides | undefined);
+    private grounding;
+    constructor(globalOverrides?: PromptOverrides | undefined, grounding?: ResolvedGrounding | null);
+    /** The resolved grounding config when `writer` is in `grounding.writers`; otherwise null (spec §6.2). */
+    groundingFor(writer: GroundingWriter): ResolvedGrounding | null;
+    /** Appended after any override and after ontology context, so it is always last. */
+    private appendGrounding;
     private hydrate;
     private hasOntologyPlaceholders;
     private buildSystemPrompt;
@@ -2005,6 +2100,7 @@ declare class PromptService {
     buildLibrarianPrompt(events: unknown[], currentFacts: unknown[], runtimeOverride?: string, ontologyContext?: OntologyPromptContext | null): {
         systemPrompt: string;
         userPrompt: string;
+        groundingCorpus?: string[];
     };
     /**
      * Heal-prompt level interpretation for the `attemptLevel` ladder.
@@ -2034,11 +2130,19 @@ declare class PromptService {
             userPrompt: string;
         };
         degraded: DegradedRecord[];
+        groundingCorpus?: string[];
     };
     buildOntologyBackfillPrompt(facts: unknown[], runtimeOverride?: string, ontologyContext?: OntologyPromptContext | null): {
         systemPrompt: string;
         userPrompt: string;
     };
+    /**
+     * The system prompt each writer would send, without hydrating data (spec
+     * §8.3). `buildSystemPrompt` with no variables hydrates only ontology
+     * placeholders and leaves data placeholders verbatim; heal never receives
+     * ontology context, matching `buildHealPrompt`.
+     */
+    buildInstructionTemplates(ontologyContext: OntologyPromptContext | null): WikiInstructions;
 }
 
 declare class IngestionService {
@@ -2140,6 +2244,8 @@ declare class IngestionService {
             buffer: DiagnosticBuffer;
             operation: 'ingest' | 'upsertGraph';
         };
+        /** Insert-time trust by node id. Ingest-only (spec §6.5); the public upsertGraph never passes it, so host nodes are never grounded. */
+        nodeTrust?: ReadonlyMap<string, GroundingTrust>;
     }): Promise<{
         nodesWritten: number;
         edgesWritten: number;
@@ -2581,6 +2687,8 @@ declare class WikiMemory {
     private promptService;
     private ontologyService;
     private graphTraversalService;
+    private lintRepo;
+    private lintService;
     private readonly okfTrustWrites;
     constructor(db: SQLiteAdapter, options: WikiOptions);
     /**
@@ -2608,6 +2716,30 @@ declare class WikiMemory {
         changed: boolean;
         duplicateOf?: string;
     }>>;
+    /**
+     * Batch pending state per source (spec §8.2). `current` exactly when
+     * `hasChanged` is false; `partial` when live rows exist but none carries a
+     * hash (a first ingest with a failed chunk, or imported rows without a
+     * hash). A failed re-ingest of an already-hashed ref reports `changed`. Validation and raw-ref echo match
+     * batched `hasChanged`. Input order and duplicates are preserved. A
+     * non-array `sources`, or an entry that is not an object (including a hole
+     * in a sparse array), throws a `TypeError` before any SQL runs.
+     */
+    pendingSources(entityId: string, sources: Array<{
+        sourceRef: string;
+        sourceHash: string;
+    }>): Promise<Array<{
+        sourceRef: string;
+        status: PendingSourceStatus;
+    }>>;
+    /** Read-only maintenance report for one entity (spec §8.1). Reports, never repairs. */
+    lint(entityId: string): Promise<WikiLintReport>;
+    /**
+     * Effective system prompts for ingest, librarian, heal and ontology backfill
+     * (spec §8.3). Backs the `wiki_get_instructions` tool. Templates only;
+     * overrides are returned verbatim, so keep secrets out of `WikiConfig.prompts`.
+     */
+    getInstructions(entityId: string): Promise<WikiInstructions>;
     /**
      * Returns the live source_refs for an entity, one row per ref, with the most
      * recently-updated live `source_hash` and a live fact count. Refs are sorted
@@ -2942,4 +3074,4 @@ declare class WikiMemory {
     setGeneratedByTask(taskId: string, entityId: string, actor: string): Promise<void>;
 }
 
-export { type WikiConfig as $, type OntologyNodeType as A, type OntologyPromptContext as B, type ChunkFailure as C, type DegradedRecord as D, type EmbedFactResult as E, type FormatContextOptions as F, type GraphNeighborhood as G, HEAL_BATCH_SIZE as H, type IngestDocumentResult as I, type OntologyUpdates as J, PromptService as K, type LLMProvider as L, type MemoryBundle as M, PrunePartialFailureError as N, ONTOLOGY_BACKFILL_BATCH_SIZE as O, type PromptOverrides as P, type ReembedResult as Q, type ReadOptions as R, type SQLiteAdapter as S, type VectorRankerFallback as T, type VectorRankerRankArgs as U, type VectorRanker as V, type WikiOptions as W, type VectorRankerSemanticResult as X, WikiBusyError as Y, type WikiBusyOperation as Z, type WikiCheckpoint as _, type MemoryDump as a, type WikiDiagnostic as a0, type WikiDiagnosticCode as a1, type WikiDiagnosticDetail as a2, type WikiDiagnosticOperation as a3, type WikiDiagnosticSeverity as a4, type WikiDiagnosticTrigger as a5, WikiDraftNotFound as a6, WikiDuplicateHashError as a7, type WikiEdge as a8, type WikiEvent as a9, type WikiFact as aa, WikiGraphNodeOwnershipConflict as ab, WikiIngestEmptyError as ac, WikiInvalidReadOptions as ad, type WikiMemoryTestAccess as ae, type WikiOutboxEvent as af, WikiParseError as ag, WikiSourceRefHashCollision as ah, WikiStrictOntologyViolation as ai, type WikiTask as aj, WikiTransactionError as ak, validateManifest as al, EmbeddingService as am, ImportExportService as an, IngestionService as ao, JobManager as ap, MaintenanceService as aq, RetrievalService as ar, SearchService as as, WriteService as at, type FormattedMemoryDump as b, WikiMemory as c, type ClassifierAnswer as d, type ClassifierQuestion as e, type ClassifyRequest as f, type ClassifyResponse as g, type DraftPage as h, type EmbedFailureKind as i, type EmbeddingMarkerKind as j, type EntityStatus as k, type ExtractedFact as l, type ExtractedFactEdge as m, type ExtractedFactWithOntology as n, type ExtractedTask as o, type GraphTraversalOptions as p, HEAL_RECHECK_MS as q, HOOK_TIMEOUT_MARKER as r, type HealResult as s, ONTOLOGY_BACKFILL_MAX_PROMPT_CHARS as t, ONTOLOGY_BACKFILL_RECHECK_MS as u, type OntologyBackfillResult as v, type OntologyConfig as w, type OntologyEdgeType as x, type OntologyManifest as y, type OntologyMode as z };
+export { type WikiBusyOperation as $, type OntologyMode as A, type OntologyNodeType as B, type ChunkFailure as C, type DegradedRecord as D, type EmbedFactResult as E, type FormatContextOptions as F, type GraphNeighborhood as G, HEAL_BATCH_SIZE as H, type IngestDocumentResult as I, type OntologyPromptContext as J, type OntologyUpdates as K, type LLMProvider as L, type MemoryBundle as M, type PromptOverrides as N, ONTOLOGY_BACKFILL_BATCH_SIZE as O, type PendingSourceStatus as P, PromptService as Q, type ReadOptions as R, type SQLiteAdapter as S, PrunePartialFailureError as T, type ReembedResult as U, type VectorRanker as V, type WikiOptions as W, type VectorRankerFallback as X, type VectorRankerRankArgs as Y, type VectorRankerSemanticResult as Z, WikiBusyError as _, type MemoryDump as a, type WikiCheckpoint as a0, type WikiConfig as a1, type WikiDiagnostic as a2, type WikiDiagnosticCode as a3, type WikiDiagnosticDetail as a4, type WikiDiagnosticOperation as a5, type WikiDiagnosticSeverity as a6, type WikiDiagnosticTrigger as a7, WikiDraftNotFound as a8, WikiDuplicateHashError as a9, type WikiEdge as aa, type WikiEvent as ab, type WikiFact as ac, WikiGraphNodeOwnershipConflict as ad, WikiIngestEmptyError as ae, type WikiInstructions as af, WikiInvalidReadOptions as ag, type WikiLintReport as ah, type WikiMemoryTestAccess as ai, type WikiOutboxEvent as aj, WikiParseError as ak, WikiSourceRefHashCollision as al, WikiStrictOntologyViolation as am, type WikiTask as an, WikiTransactionError as ao, validateManifest as ap, EmbeddingService as aq, ImportExportService as ar, IngestionService as as, JobManager as at, MaintenanceService as au, RetrievalService as av, SearchService as aw, WriteService as ax, type FormattedMemoryDump as b, WikiMemory as c, type ClassifierAnswer as d, type ClassifierQuestion as e, type ClassifyRequest as f, type ClassifyResponse as g, type DraftPage as h, type EmbedFailureKind as i, type EmbeddingMarkerKind as j, type EntityStatus as k, type ExtractedFact as l, type ExtractedFactEdge as m, type ExtractedFactWithOntology as n, type ExtractedTask as o, type GraphTraversalOptions as p, type GroundingConfig as q, HEAL_RECHECK_MS as r, HOOK_TIMEOUT_MARKER as s, type HealResult as t, ONTOLOGY_BACKFILL_MAX_PROMPT_CHARS as u, ONTOLOGY_BACKFILL_RECHECK_MS as v, type OntologyBackfillResult as w, type OntologyConfig as x, type OntologyEdgeType as y, type OntologyManifest as z };

package/dist/testing.d.mts

@@ -1,3 +1,3 @@
-export { am as EmbeddingService, an as ImportExportService, ao as IngestionService, ap as JobManager, ap as JobManagerType, aq as MaintenanceService, ar as RetrievalService, as as SearchService, as as SearchServiceType, ae as WikiMemoryTestAccess, at as WriteService } from './testing-ClpOUiLI.mjs';
+export { aq as EmbeddingService, ar as ImportExportService, as as IngestionService, at as JobManager, at as JobManagerType, au as MaintenanceService, av as RetrievalService, aw as SearchService, aw as SearchServiceType, ai as WikiMemoryTestAccess, ax as WriteService } from './testing-A4Sofxyo.mjs';
 import '@equationalapplications/core-okf';
 import 'minisearch';

package/dist/testing.d.ts

@@ -1,3 +1,3 @@
-export { am as EmbeddingService, an as ImportExportService, ao as IngestionService, ap as JobManager, ap as JobManagerType, aq as MaintenanceService, ar as RetrievalService, as as SearchService, as as SearchServiceType, ae as WikiMemoryTestAccess, at as WriteService } from './testing-ClpOUiLI.js';
+export { aq as EmbeddingService, ar as ImportExportService, as as IngestionService, at as JobManager, at as JobManagerType, au as MaintenanceService, av as RetrievalService, aw as SearchService, aw as SearchServiceType, ai as WikiMemoryTestAccess, ax as WriteService } from './testing-A4Sofxyo.js';
 import '@equationalapplications/core-okf';
 import 'minisearch';