@gamaze/hicortex 0.16.0 → 0.16.2

package/dist/recall-index.js

@@ -55,20 +55,32 @@ var __importStar = (this && this.__importStar) || (function () {
 })();
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.memoryTitle = memoryTitle;
+exports.formatIndexLine = formatIndexLine;
 exports.passesRelevanceGate = passesRelevanceGate;
 exports.parseStringListParam = parseStringListParam;
-exports.parsePrivacyParam = parsePrivacyParam;
 exports.handleRecallIndex = handleRecallIndex;
 exports.handleMemoryGet = handleMemoryGet;
 exports.formatMemoryGetText = formatMemoryGetText;
 const storage = __importStar(require("./storage.js"));
-const DEFAULT_MIN_SIMILARITY = 0.55;
-const DEFAULT_MAX_ITEMS = 6;
+/** Relevance-gate floor for vector-only candidates (config `recallMinSimilarity`).
+ *  0.62 (was 0.55; raised 2026-08-03 on the fine-grain floor sweep — see the
+ *  minSimilarity doc above). */
+const DEFAULT_MIN_SIMILARITY = 0.62;
+/** Max index lines per pushed recall block (config `recallMaxItems`).
+ *  5 (was 6; lowered 2026-08-03 — slot 6 is pure padding at floor 0.62). */
+const DEFAULT_MAX_ITEMS = 5;
 const DEFAULT_MIN_PROMPT_LENGTH = 20;
-/** Retrieve more than maxItems so gating + dedup still leave a full menu. */
+/** Default index-line title length. 100 (reverted from 150 on 2026-08-03:
+ *  eval #3 §5 showed 100 vs 150 statistically identical; 100 saves ~13% tokens). */
+const DEFAULT_TITLE_CHARS = 100;
+/** Over-fetch multiplier: retrieve `maxItems × 3` candidates so gating + dedup
+ *  still leave a full menu. Kept at 3 after maxItems 6→5 and the higher floor —
+ *  permit-short is intended (returning fewer than maxItems when fewer clear the
+ *  gate is correct, not a defect); raise only if blocks are persistently
+ *  under-filled in production. */
 const CANDIDATE_MULTIPLIER = 3;
 /** First content line, de-markdowned and truncated — the index line title. */
-function memoryTitle(content, maxLen = 100) {
+function memoryTitle(content, maxLen = DEFAULT_TITLE_CHARS) {
     const firstLine = content
         .split("\n")
         .map((l) => l.trim())
@@ -88,7 +100,15 @@ function formatDate(iso) {
     const mm = String(d.getMonth() + 1).padStart(2, "0");
     return `${dd}.${mm}.${d.getFullYear()}`;
 }
-function formatIndexLine(r) {
+/**
+ * Render one production index line. Exported (2026-08-02, relevance eval #v2)
+ * so the eval can measure the REAL rendered surface instead of reimplementing
+ * it — `maxLen` threads through to `memoryTitle` unchanged (default
+ * DEFAULT_TITLE_CHARS = 100, config `recallTitleChars`) so the eval's snippet-length
+ * sweep (spec §4.2) can call this SAME function at 100/150/title1sent without
+ * duplicating the date/scope/agent/type meta-line logic.
+ */
+function formatIndexLine(r, maxLen = DEFAULT_TITLE_CHARS) {
     // Provenance (#202): date, scope (domain else project), ORIGIN AGENT, type.
     // The origin agent lets a reader calibrate trust — "from my session" vs
     // another agent/project — before fetching or acting on an entry.
@@ -100,9 +120,19 @@ function formatIndexLine(r) {
     ]
         .filter(Boolean)
         .join(", ");
-    return `- [${r.id}] ${memoryTitle(r.content)}${meta ? ` (${meta})` : ""}`;
+    return `- [${r.id}] ${memoryTitle(r.content, maxLen)}${meta ? ` (${meta})` : ""}`;
 }
-/** Relevance gate: real text match, or measured cosine above the floor. */
+/**
+ * Relevance gate: a real BM25 text match (FTS) passes unconditionally; a
+ * vector-only candidate must clear `minSimilarity`.
+ *
+ * NOTE: FTS hits BYPASS the similarity floor, so raising the floor shifts
+ * weight toward FTS-sourced entries. In practice FTS is currently inert on
+ * real prompts — eval #3 had 0 FTS rows / 2,208 (2,203 vector + 5 graph), and
+ * a 12-prompt live bedrock sample returned 96/96 vector — so the floor change
+ * is safe as measured. But FTS quality is unmeasured; if FTS starts firing
+ * (e.g. as #205's fielded-BM25 retune beds in), give it its own eval.
+ */
 function passesRelevanceGate(r, minSimilarity) {
     if (r.source === "fts" || r.source === "both")
         return true;
@@ -110,8 +140,8 @@ function passesRelevanceGate(r, minSimilarity) {
 }
 /** Normalize a request-supplied string-list param: array of strings or a CSV
  *  string → string[] | undefined. Anything else (or an empty result) means
- *  "absent" — never a partial guess. Shared by `parsePrivacyParam` and
- *  `mission_domains` (#203) so both accept `["A","B"]` and `"A, B"` alike. */
+ *  "absent" — never a partial guess. Used by `mission_domains` (#203) so it
+ *  accepts `["A","B"]` and `"A, B"` alike. */
 function parseStringListParam(v) {
     const items = Array.isArray(v)
         ? v.filter((x) => typeof x === "string")
@@ -121,13 +151,6 @@ function parseStringListParam(v) {
     const cleaned = items.map((s) => s.trim()).filter(Boolean);
     return cleaned.length > 0 ? cleaned : undefined;
 }
-/** Normalize a request-supplied privacy filter: array of strings or a CSV
- *  string → string[] | undefined. Anything else (or an empty result) means
- *  "no filter" — never a partial guess. Delegates to parseStringListParam;
- *  kept as a named export for tests and handleMemoryGet callers. */
-function parsePrivacyParam(v) {
-    return parseStringListParam(v);
-}
 /**
  * Handle a /recall-index request body. Thin Express adapter in mcp-server.ts;
  * all behavior lives here so tests exercise it directly.
@@ -150,16 +173,17 @@ async function handleRecallIndex(deps, body) {
         return { status: 200, body: { block: null, skipped: "short-prompt" } };
     }
     const maxItems = clampInt(deps.options?.maxItems, DEFAULT_MAX_ITEMS, 1, 20);
+    const titleChars = clampInt(deps.options?.titleChars, DEFAULT_TITLE_CHARS, 40, 400);
     const minSimilarity = clampNumber(deps.options?.minSimilarity, DEFAULT_MIN_SIMILARITY, 0, 1);
     const turn = deps.registry.beginTurn(sessionId);
     // Optional client-side scoping (F1 + #203): project + mission_domains (soft
-    // affinity) and privacy (hard filter) ride the body and are pushed into
-    // retrieval. project is cwd-derived (CC/OC) or gateway-supplied; mission_domains
-    // is Hermes-declared (plugin config). Neither excludes anything — both are
-    // zero-boost-neutral score terms in computeScore.
+    // affinity) ride the body and are pushed into retrieval. project is cwd-
+    // derived (CC/OC) or gateway-supplied; mission_domains is Hermes-declared
+    // (plugin config). Neither excludes anything — both are zero-boost-neutral
+    // score terms in computeScore. (0.16.x: `privacy` is no longer threaded —
+    // vestigial column, never filtered; a plugin's privacy_filter is a no-op.)
     const filters = {
         project: typeof req.project === "string" && req.project ? req.project : undefined,
-        privacy: parsePrivacyParam(req.privacy),
         mission_domains: parseStringListParam(req.mission_domains),
     };
     let results;
@@ -183,7 +207,7 @@ async function handleRecallIndex(deps, body) {
     deps.registry.markShown(sessionId, ids);
     // Exposure signal: shown_count + last_accessed refresh, NOT access_count.
     storage.touchMemoriesShown(deps.db, ids, new Date().toISOString());
-    const lines = picked.map((r) => formatIndexLine(r));
+    const lines = picked.map((r) => formatIndexLine(r, titleChars));
     const block = [
         "## Memory recall (auto)",
         // Provenance is BUILT IN (owner decision 27.07, option D; extended #202/#204):
@@ -206,10 +230,11 @@ async function handleRecallIndex(deps, body) {
  *
  *   - Short/prefix ids resolve via storage.resolveMemoryId (F6) — the 8-char
  *     citation ids agents are taught must work here like on /update, /delete.
- *   - Optional `privacy` filter (array or CSV): when present and the memory's
- *     privacy level is not in the allowed set, respond 404 with the SAME
- *     not-found message — a scoped client must not learn the memory exists.
  *   - A successful fetch is real use: access_count + 1 (strengthen).
+ *
+ * 0.16.x: the `privacy` filter gate was removed — the column is vestigial and
+ * never filtered. Callers may still send a `privacy` field (backward compat)
+ * but it is ignored.
  */
 function handleMemoryGet(db, query) {
     const id = typeof query.id === "string" ? query.id : "";
@@ -225,9 +250,6 @@ function handleMemoryGet(db, query) {
     const mem = storage.getMemory(db, fullId);
     if (!mem)
         return notFound;
-    const privacy = parsePrivacyParam(query.privacy);
-    if (privacy && !privacy.includes(mem.privacy))
-        return notFound;
     storage.strengthenMemory(db, fullId, new Date().toISOString());
     // `citation` is server-rendered so every plugin surfaces the same built-in
     // provenance norm (owner directive 27.07) — see #193.

package/dist/retrieval.d.ts

@@ -178,10 +178,12 @@ export interface EmbedFn {
  *
  * #203 retrieval scoping: `project` and `missionDomains` are SOFT affinity
  * terms in computeScore (zero-boost neutral, never a penalty), NOT filters.
- * `privacy` remains a hard filter (security boundary). `sourceAgent` remains a
- * hard filter (kept for completeness; no production caller currently passes
- * it). When neither project nor missionDomains is sent, scoring is byte-
- * identical to pre-#203 — the kill-switch / no-op guarantee.
+ * `privacy` is NOT a filter (0.16.x: the column is fully vestigial — stored,
+ * never filtered; the distiller no longer sets it and retrieval ignores it
+ * entirely). `sourceAgent` remains a hard filter (kept for completeness; no
+ * production caller currently passes it). When neither project nor
+ * missionDomains is sent, scoring is byte-identical to pre-#203 — the
+ * kill-switch / no-op guarantee.
  */
 export declare function retrieve(db: Database.Database, embedFn: EmbedFn, query: string, options?: {
     limit?: number;
@@ -189,7 +191,6 @@ export declare function retrieve(db: Database.Database, embedFn: EmbedFn, query:
      *  Formerly a hard WHERE filter (#192); softening removes cross-scope
      *  starvation without excluding anything. */
     project?: string | null;
-    privacy?: string[];
     sourceAgent?: string;
     /** #203: Hermes mission domains (declared in plugin config). Soft domain
      *  affinity in computeScore via max overlapping memory_tags.weight. */
@@ -206,11 +207,10 @@ export declare function retrieve(db: Database.Database, embedFn: EmbedFn, query:
     queryEmbedding?: Float32Array;
 }): Promise<MemorySearchResult[]>;
 /**
- * Get recent context, optionally filtered by project and privacy.
+ * Get recent context, optionally filtered by project.
  */
 export declare function searchRecent(db: Database.Database, options?: {
     project?: string | null;
     limit?: number;
-    privacy?: string[];
 }): MemorySearchResult[];
 export {};

package/dist/retrieval.js

@@ -510,15 +510,16 @@ function reciprocalRankFusion(rankedLists, k = DEFAULT_RRF_K) {
  *
  * #203 retrieval scoping: `project` and `missionDomains` are SOFT affinity
  * terms in computeScore (zero-boost neutral, never a penalty), NOT filters.
- * `privacy` remains a hard filter (security boundary). `sourceAgent` remains a
- * hard filter (kept for completeness; no production caller currently passes
- * it). When neither project nor missionDomains is sent, scoring is byte-
- * identical to pre-#203 — the kill-switch / no-op guarantee.
+ * `privacy` is NOT a filter (0.16.x: the column is fully vestigial — stored,
+ * never filtered; the distiller no longer sets it and retrieval ignores it
+ * entirely). `sourceAgent` remains a hard filter (kept for completeness; no
+ * production caller currently passes it). When neither project nor
+ * missionDomains is sent, scoring is byte-identical to pre-#203 — the
+ * kill-switch / no-op guarantee.
  */
 async function retrieve(db, embedFn, query, options) {
     const limit = options?.limit ?? recallDefaults.searchLimit;
     const project = options?.project;
-    const privacy = options?.privacy;
     const sourceAgent = options?.sourceAgent;
     const missionDomains = options?.missionDomains;
     const now = new Date();
@@ -534,15 +535,17 @@ async function retrieve(db, embedFn, query, options) {
     // over-fetch — the old flat limit*3 intersected a global top-15 with (for the
     // median project) ~1% of the corpus, starving every filtered query.
     // #203: project is NO LONGER a filter (soft affinity now), so it does not
-    // trigger over-fetch; privacy/sourceAgent still do (they remain hard filters).
-    const filtered = Boolean(privacy || sourceAgent);
+    // trigger over-fetch; only sourceAgent still does (it remains a hard filter).
+    // 0.16.x: privacy is no longer a filter either (column is vestigial).
+    const filtered = Boolean(sourceAgent);
     const fetchLimit = filtered ? Math.min(limit * 20, 200) : limit * 3;
     let vecCandidates = storage.vectorSearch(db, queryEmbedding, fetchLimit, []);
     let ftsCandidates = [];
     try {
-        // privacy/sourceAgent are pushed into the FTS SQL (hard filters). project
-        // is NOT (it is a soft affinity boost in computeScore as of #203).
-        ftsCandidates = storage.searchFts(db, query, fetchLimit, privacy, sourceAgent);
+        // sourceAgent is pushed into the FTS SQL (hard filter). project is NOT (it
+        // is a soft affinity boost in computeScore as of #203). privacy is NOT
+        // (0.16.x: vestigial column, never filtered).
+        ftsCandidates = storage.searchFts(db, query, fetchLimit, sourceAgent);
     }
     catch {
         // FTS5 search can fail on special characters; fall back to vector-only
@@ -550,12 +553,9 @@ async function retrieve(db, embedFn, query, options) {
     if (vecCandidates.length === 0 && ftsCandidates.length === 0) {
         return [];
     }
-    // Post-filter vector candidates (sqlite-vec can't filter). privacy stays a
-    // hard filter (security boundary); project was removed here (#203 — it is now
-    // scored, not filtered). sourceAgent stays (see options doc).
-    if (privacy) {
-        vecCandidates = vecCandidates.filter((c) => privacy.includes(c.privacy));
-    }
+    // Post-filter vector candidates (sqlite-vec can't filter). sourceAgent stays
+    // a hard filter (see options doc); project is scored not filtered (#203);
+    // privacy is no longer filtered (0.16.x — vestigial).
     if (sourceAgent) {
         vecCandidates = vecCandidates.filter((c) => c.source_agent === sourceAgent);
     }
@@ -593,9 +593,8 @@ async function retrieve(db, embedFn, query, options) {
         if (!mem)
             continue;
         // #203: project check removed — project is a soft affinity in computeScore,
-        // not a filter. privacy (security) and sourceAgent stay as hard filters.
-        if (privacy && !privacy.includes(mem.privacy))
-            continue;
+        // not a filter. 0.16.x: privacy check removed — the column is vestigial,
+        // never filtered. sourceAgent stays a hard filter.
         if (sourceAgent && mem.source_agent !== sourceAgent)
             continue;
         candidateMap.set(gid, { mem, distance: DEFAULT_GRAPH_DISTANCE, source: "graph" });
@@ -677,12 +676,11 @@ async function retrieve(db, embedFn, query, options) {
     return results;
 }
 /**
- * Get recent context, optionally filtered by project and privacy.
+ * Get recent context, optionally filtered by project.
  */
 function searchRecent(db, options) {
     const limit = options?.limit ?? recallDefaults.recentLimit;
     const project = options?.project;
-    const privacy = options?.privacy;
     const now = new Date();
     // #192 breadth: 30 → 180-day default window (config recentWindowDays).
     // "Recent" for a long-lived corpus is a season, not a month; the narrow
@@ -691,9 +689,7 @@ function searchRecent(db, options) {
     if (project) {
         candidates = candidates.filter((c) => c.project === project);
     }
-    if (privacy) {
-        candidates = candidates.filter((c) => privacy.includes(c.privacy));
-    }
+    // 0.16.x: privacy filter removed — the column is vestigial, never filtered.
     if (candidates.length === 0)
         return [];
     const allIds = candidates.map((c) => c.id);

package/dist/schema-prototypes.d.ts

@@ -11,9 +11,8 @@
  *     embedding of the domain's config description instead.
  *   - weight(memory, tag) = cosine(memory embedding, prototype(tag)). Both
  *     vectors are L2-normalized, so cosine reduces to a dot product.
- *   - PRIMARY (memories.domain) = argmax-weight tag, overridden by any tagged
- *     domain flagged `compartment: true` (deliberate compartmentalization —
- *     the owner's Work firewall). Fully mechanical, no LLM.
+ *   - PRIMARY (memories.domain) = argmax-weight tag, with LLM tag order
+ *     breaking exact-weight ties. Fully mechanical, no LLM.
  *
  * The LLM decides ONLY the discrete part (which schemas apply — see
  * domain-classify.ts); ALL gradation is derived from embeddings here.
@@ -65,24 +64,20 @@ export interface WeightedTag {
     tag: string;
     weight: number | null;
 }
-/** The configured compartment domain names (DomainDef.compartment === true). */
-export declare function compartmentSet(domains: DomainDef[]): Set<string>;
 /**
  * Derive the PRIMARY tag (memories.domain) from a weighted tag set.
  *
  * Rules (deterministic, no LLM):
- *   1. Any tagged compartment domain wins — first one in array order if the
- *      (unusual) case of several arises.
- *   2. Else the argmax-weight tag. `tags` MUST be in LLM most-relevant-first
+ *   1. The argmax-weight tag. `tags` MUST be in LLM most-relevant-first
  *      order: ties (and all-null weights) resolve to the EARLIEST array
  *      position — strict `>` comparison keeps the first maximum.
- *   3. A null weight loses to any numeric weight (treated as -Infinity).
+ *   2. A null weight loses to any numeric weight (treated as -Infinity).
  *
  * Throws on an empty tag set — callers guarantee >= 1 tag (an empty tag set
  * from the classifier is a NO-FIT and must be routed through nofit.ts, never
  * here); an empty set reaching this function is a programming error.
  */
-export declare function derivePrimary(tags: WeightedTag[], compartments: Set<string>): string;
+export declare function derivePrimary(tags: WeightedTag[]): string;
 export interface PrototypeStat {
     domain: string;
     memberCount: number;
@@ -151,9 +146,9 @@ export declare function recomputeAllTagWeights(db: Database.Database, prototypes
 };
 /**
  * Re-derive the PRIMARY (memories.domain) of every tagged memory from its
- * current tag weights: compartment override first, else argmax weight, LLM
- * order (memory_tags insertion order = rowid, written most-relevant-first by
- * storage.setMemoryTags) breaking exact-weight ties.
+ * current tag weights: argmax weight, LLM order (memory_tags insertion order =
+ * rowid, written most-relevant-first by storage.setMemoryTags) breaking
+ * exact-weight ties.
  *
  * Memories with NO memory_tags rows are untouched (e.g. infra-skipped rows
  * awaiting classification — issue #150 discipline).

package/dist/schema-prototypes.js

@@ -12,9 +12,8 @@
  *     embedding of the domain's config description instead.
  *   - weight(memory, tag) = cosine(memory embedding, prototype(tag)). Both
  *     vectors are L2-normalized, so cosine reduces to a dot product.
- *   - PRIMARY (memories.domain) = argmax-weight tag, overridden by any tagged
- *     domain flagged `compartment: true` (deliberate compartmentalization —
- *     the owner's Work firewall). Fully mechanical, no LLM.
+ *   - PRIMARY (memories.domain) = argmax-weight tag, with LLM tag order
+ *     breaking exact-weight ties. Fully mechanical, no LLM.
  *
  * The LLM decides ONLY the discrete part (which schemas apply — see
  * domain-classify.ts); ALL gradation is derived from embeddings here.
@@ -30,7 +29,6 @@ exports.blobToVec = blobToVec;
 exports.l2Normalize = l2Normalize;
 exports.weightedAdd = weightedAdd;
 exports.tagWeight = tagWeight;
-exports.compartmentSet = compartmentSet;
 exports.derivePrimary = derivePrimary;
 exports.loadDomainPrototypes = loadDomainPrototypes;
 exports.computeDomainPrototypes = computeDomainPrototypes;
@@ -107,33 +105,23 @@ function tagWeight(memoryEmbedding, prototype) {
         dot += memoryEmbedding[i] * prototype[i];
     return dot;
 }
-/** The configured compartment domain names (DomainDef.compartment === true). */
-function compartmentSet(domains) {
-    return new Set(domains.filter((d) => d.compartment === true).map((d) => d.name));
-}
 /**
  * Derive the PRIMARY tag (memories.domain) from a weighted tag set.
  *
  * Rules (deterministic, no LLM):
- *   1. Any tagged compartment domain wins — first one in array order if the
- *      (unusual) case of several arises.
- *   2. Else the argmax-weight tag. `tags` MUST be in LLM most-relevant-first
+ *   1. The argmax-weight tag. `tags` MUST be in LLM most-relevant-first
  *      order: ties (and all-null weights) resolve to the EARLIEST array
  *      position — strict `>` comparison keeps the first maximum.
- *   3. A null weight loses to any numeric weight (treated as -Infinity).
+ *   2. A null weight loses to any numeric weight (treated as -Infinity).
  *
  * Throws on an empty tag set — callers guarantee >= 1 tag (an empty tag set
  * from the classifier is a NO-FIT and must be routed through nofit.ts, never
  * here); an empty set reaching this function is a programming error.
  */
-function derivePrimary(tags, compartments) {
+function derivePrimary(tags) {
     if (tags.length === 0) {
         throw new Error("derivePrimary: empty tag set (callers must pass >= 1 tag)");
     }
-    for (const t of tags) {
-        if (compartments.has(t.tag))
-            return t.tag;
-    }
     let best = tags[0];
     let bestWeight = best.weight ?? Number.NEGATIVE_INFINITY;
     for (let i = 1; i < tags.length; i++) {
@@ -313,15 +301,18 @@ function recomputeAllTagWeights(db, prototypes) {
 }
 /**
  * Re-derive the PRIMARY (memories.domain) of every tagged memory from its
- * current tag weights: compartment override first, else argmax weight, LLM
- * order (memory_tags insertion order = rowid, written most-relevant-first by
- * storage.setMemoryTags) breaking exact-weight ties.
+ * current tag weights: argmax weight, LLM order (memory_tags insertion order =
+ * rowid, written most-relevant-first by storage.setMemoryTags) breaking
+ * exact-weight ties.
  *
  * Memories with NO memory_tags rows are untouched (e.g. infra-skipped rows
  * awaiting classification — issue #150 discipline).
  */
 function refreshPrimaries(db, domains) {
-    const compartments = compartmentSet(domains);
+    // `domains` is accepted for API symmetry with the other reconsolidation
+    // passes (which need prototypes/weights); the primary is now pure argmax
+    // and does not depend on the domain set.
+    void domains;
     const rows = db
         .prepare(`SELECT mt.memory_id, mt.tag, mt.weight, m.domain
        FROM memory_tags mt JOIN memories m ON m.id = mt.memory_id
@@ -341,7 +332,7 @@ function refreshPrimaries(db, domains) {
     let updated = 0;
     const tx = db.transaction(() => {
         for (const [memoryId, entry] of byMemory) {
-            const primary = derivePrimary(entry.tags, compartments);
+            const primary = derivePrimary(entry.tags);
             if (primary !== entry.domain) {
                 update.run(primary, memoryId);
                 updated++;

package/dist/seed-lesson.d.ts

@@ -3,5 +3,5 @@
  * Shared between OC plugin and CC MCP server.
  */
 import type Database from "better-sqlite3";
-export declare const SEED_LESSON = "## Lesson: 1% Daily Self-Improvement\n\nSelf-improvement protocol: Review your sessions daily. Scan for mistakes, gaps, user corrections, and friction. Identify 1-2 issues maximum. Apply one targeted fix to your agent instruction files (e.g. SOUL.md / MEMORY.md for Hermes profiles, CLAUDE.md for Claude Code). Never overcorrect \u2014 feedback is guidance, not emergency. One fix per issue. Never rewrite entire systems. Before changing something, ask: is this a real pattern or am I reacting to noise?\n\nThe flywheel: Sessions \u2192 Hicortex captures \u2192 Nightly consolidation \u2192 Lessons generated \u2192 Lessons injected into your context \u2192 You apply one fix \u2192 Better sessions tomorrow.\n\nUse hicortex_lessons to check for new insights. If a lesson has high confidence, apply it. If medium, observe for one more day. If nothing needs fixing today, skip \u2014 that's fine.\n\n**Severity:** critical\n**Confidence:** high\n**Generated:** seed-lesson";
+export declare const SEED_LESSON = "1% Daily Self-Improvement\n\nSelf-improvement protocol: Review your sessions daily. Scan for mistakes, gaps, user corrections, and friction. Identify 1-2 issues maximum. Apply one targeted fix to your agent instruction files (e.g. SOUL.md / MEMORY.md for Hermes profiles, CLAUDE.md for Claude Code). Never overcorrect \u2014 feedback is guidance, not emergency. One fix per issue. Never rewrite entire systems. Before changing something, ask: is this a real pattern or am I reacting to noise?\n\nThe flywheel: Sessions \u2192 Hicortex captures \u2192 Nightly consolidation \u2192 Lessons generated \u2192 Lessons injected into your context \u2192 You apply one fix \u2192 Better sessions tomorrow.\n\nUse hicortex_lessons to check for new insights. If a lesson has high confidence, apply it. If medium, observe for one more day. If nothing needs fixing today, skip \u2014 that's fine.\n\n**Severity:** critical\n**Confidence:** high\n**Generated:** seed-lesson";
 export declare function injectSeedLesson(database: Database.Database, log?: (msg: string) => void): Promise<void>;

package/dist/seed-lesson.js

@@ -41,7 +41,7 @@ exports.SEED_LESSON = void 0;
 exports.injectSeedLesson = injectSeedLesson;
 const embedder_js_1 = require("./embedder.js");
 const storage = __importStar(require("./storage.js"));
-exports.SEED_LESSON = `## Lesson: 1% Daily Self-Improvement
+exports.SEED_LESSON = `1% Daily Self-Improvement
 
 Self-improvement protocol: Review your sessions daily. Scan for mistakes, gaps, user corrections, and friction. Identify 1-2 issues maximum. Apply one targeted fix to your agent instruction files (e.g. SOUL.md / MEMORY.md for Hermes profiles, CLAUDE.md for Claude Code). Never overcorrect — feedback is guidance, not emergency. One fix per issue. Never rewrite entire systems. Before changing something, ask: is this a real pattern or am I reacting to noise?
 
@@ -65,7 +65,6 @@ async function injectSeedLesson(database, log = console.log) {
             project: "global",
             memoryType: "lesson",
             baseStrength: 0.95,
-            privacy: "WORK",
         });
         log("[hicortex] Seed lesson injected: Daily Self-Improvement Protocol");
     }

package/dist/storage.d.ts

@@ -54,11 +54,6 @@ export interface SetMemoryTagsOptions {
      * (repaired by the next nightly recompute).
      */
     weights?: Record<string, number | null>;
-    /**
-     * Compartment domain names (DomainDef.compartment === true): a tagged
-     * compartment domain becomes the primary regardless of weights.
-     */
-    compartments?: Set<string>;
 }
 /**
  * Set a memory's classification tags (graded schema model).
@@ -69,9 +64,8 @@ export interface SetMemoryTagsOptions {
  * row stores its association weight (NULL when not yet computed).
  *
  * The PRIMARY (memories.domain) is DERIVED here — never passed in by the LLM:
- * compartment override first, else argmax weight, else first tag (all-null
- * weights). The whole update is one transaction so domain, tag set, and
- * weights never diverge.
+ * argmax weight, else first tag (all-null weights). The whole update is one
+ * transaction so domain, tag set, and weights never diverge.
  *
  * @returns the derived primary written to memories.domain
  */
@@ -149,9 +143,10 @@ export declare function getBm25Weights(): Bm25Weights;
  *
  * `project` is NOT a filter here (#203): the hard project WHERE from #192 was
  * removed — project is now a soft affinity boost in retrieval.computeScore AND
- * a weighted field in BM25F (#205). `privacy` stays a hard filter (security
- * boundary, not a relevance signal). `sourceAgent` stays a hard filter (kept
- * for completeness; no production caller of retrieve() currently passes it).
+ * a weighted field in BM25F (#205). `privacy` is NOT a filter (0.16.x: the
+ * column is fully vestigial — stored, never filtered; the privacy IN-clause
+ * was removed). `sourceAgent` stays a hard filter (kept for completeness; no
+ * production caller of retrieve() currently passes it).
  *
  * #205 sign handling: FTS5's `bm25(table, w0, w1, …)` returns a NEGATIVE score
  * where MORE-negative = better match (it is 1 − the normalized BM25 score,
@@ -162,7 +157,7 @@ export declare function getBm25Weights(): Bm25Weights;
  * positionally as parameters (NOT string-interpolated) so query-planner
  * caching is unaffected and the config path is the only editor.
  */
-export declare function searchFts(db: Database.Database, query: string, limit?: number, privacy?: string[], sourceAgent?: string): Array<Memory & {
+export declare function searchFts(db: Database.Database, query: string, limit?: number, sourceAgent?: string): Array<Memory & {
     rank: number;
 }>;
 /**
@@ -184,6 +179,8 @@ export declare function insertMemoriesBatch(db: Database.Database, memories: Arr
     content: string;
     embedding: Float32Array;
     sourceAgent?: string;
+    sourceAgentId?: string | null;
+    sourceDomain?: string | null;
     sourceSession?: string | null;
     project?: string | null;
     privacy?: string;

package/dist/storage.js

@@ -69,10 +69,10 @@ function insertMemory(db, content, embedding, opts = {}) {
     const result = db
         .prepare(`INSERT OR IGNORE INTO memories
        (id, content, base_strength, last_accessed, access_count,
-        created_at, ingested_at, source_agent, source_session, project,
-        privacy, memory_type)
-       VALUES (?, ?, ?, ?, 0, ?, ?, ?, ?, ?, ?, ?)`)
-        .run(id, content, opts.baseStrength ?? 0.5, ts, ts, ingestedTs, opts.sourceAgent ?? "default", sourceSession, opts.project ?? null, opts.privacy ?? "WORK", opts.memoryType ?? "episode");
+        created_at, ingested_at, source_agent, source_agent_id, source_session,
+        source_domain, project, privacy, memory_type)
+       VALUES (?, ?, ?, ?, 0, ?, ?, ?, ?, ?, ?, ?, ?, ?)`)
+        .run(id, content, opts.baseStrength ?? 0.5, ts, ts, ingestedTs, opts.sourceAgent ?? "default", opts.sourceAgentId ?? null, sourceSession, opts.sourceDomain ?? null, opts.project ?? null, opts.privacy ?? null, opts.memoryType ?? "episode");
     if (result.changes > 0) {
         // New row — store its vector.
         db.prepare("INSERT INTO memory_vectors (id, embedding) VALUES (?, ?)").run(id, embedToBlob(embedding));
@@ -192,9 +192,8 @@ function deleteMemory(db, memoryId) {
  * row stores its association weight (NULL when not yet computed).
  *
  * The PRIMARY (memories.domain) is DERIVED here — never passed in by the LLM:
- * compartment override first, else argmax weight, else first tag (all-null
- * weights). The whole update is one transaction so domain, tag set, and
- * weights never diverge.
+ * argmax weight, else first tag (all-null weights). The whole update is one
+ * transaction so domain, tag set, and weights never diverge.
  *
  * @returns the derived primary written to memories.domain
  */
@@ -209,7 +208,7 @@ function setMemoryTags(db, memoryId, tags, options = {}) {
         tag,
         weight: options.weights?.[tag] ?? null,
     }));
-    const primary = (0, schema_prototypes_js_1.derivePrimary)(weighted, options.compartments ?? new Set());
+    const primary = (0, schema_prototypes_js_1.derivePrimary)(weighted);
     const setDomain = db.prepare("UPDATE memories SET domain = ? WHERE id = ?");
     const clearTags = db.prepare("DELETE FROM memory_tags WHERE memory_id = ?");
     const insertTag = db.prepare("INSERT OR IGNORE INTO memory_tags (memory_id, tag, weight) VALUES (?, ?, ?)");
@@ -352,9 +351,10 @@ function getBm25Weights() {
  *
  * `project` is NOT a filter here (#203): the hard project WHERE from #192 was
  * removed — project is now a soft affinity boost in retrieval.computeScore AND
- * a weighted field in BM25F (#205). `privacy` stays a hard filter (security
- * boundary, not a relevance signal). `sourceAgent` stays a hard filter (kept
- * for completeness; no production caller of retrieve() currently passes it).
+ * a weighted field in BM25F (#205). `privacy` is NOT a filter (0.16.x: the
+ * column is fully vestigial — stored, never filtered; the privacy IN-clause
+ * was removed). `sourceAgent` stays a hard filter (kept for completeness; no
+ * production caller of retrieve() currently passes it).
  *
  * #205 sign handling: FTS5's `bm25(table, w0, w1, …)` returns a NEGATIVE score
  * where MORE-negative = better match (it is 1 − the normalized BM25 score,
@@ -365,14 +365,9 @@ function getBm25Weights() {
  * positionally as parameters (NOT string-interpolated) so query-planner
  * caching is unaffected and the config path is the only editor.
  */
-function searchFts(db, query, limit = 10, privacy, sourceAgent) {
+function searchFts(db, query, limit = 10, sourceAgent) {
     const conditions = ["memories_fts MATCH ?"];
     const params = [query];
-    if (privacy && privacy.length > 0) {
-        const placeholders = privacy.map(() => "?").join(", ");
-        conditions.push(`m.privacy IN (${placeholders})`);
-        params.push(...privacy);
-    }
     if (sourceAgent) {
         conditions.push("m.source_agent = ?");
         params.push(sourceAgent);
@@ -460,18 +455,21 @@ function deleteLinks(db, memoryId) {
  * Batch insert memories. Returns count inserted.
  */
 function insertMemoriesBatch(db, memories) {
+    // privacy default is null (0.16.x: the distiller no longer sets WORK — the
+    // column is vestigial, never filtered, and goes NULL unless a caller sends
+    // an explicit value).
     const insertMem = db.prepare(`INSERT INTO memories
      (id, content, base_strength, last_accessed, access_count,
-      created_at, ingested_at, source_agent, source_session, project,
-      privacy, memory_type)
-     VALUES (?, ?, ?, ?, 0, ?, ?, ?, ?, ?, ?, ?)`);
+      created_at, ingested_at, source_agent, source_agent_id, source_session,
+      source_domain, project, privacy, memory_type)
+     VALUES (?, ?, ?, ?, 0, ?, ?, ?, ?, ?, ?, ?, ?, ?)`);
     const insertVec = db.prepare("INSERT INTO memory_vectors (id, embedding) VALUES (?, ?)");
     const tx = db.transaction(() => {
         let count = 0;
         for (const mem of memories) {
             const id = (0, node_crypto_1.randomUUID)();
             const ts = nowIso();
-            insertMem.run(id, mem.content, mem.baseStrength ?? 0.5, ts, ts, ts, mem.sourceAgent ?? "default", mem.sourceSession ?? null, mem.project ?? null, mem.privacy ?? "WORK", mem.memoryType ?? "episode");
+            insertMem.run(id, mem.content, mem.baseStrength ?? 0.5, ts, ts, ts, mem.sourceAgent ?? "default", mem.sourceAgentId ?? null, mem.sourceSession ?? null, mem.sourceDomain ?? null, mem.project ?? null, mem.privacy ?? null, mem.memoryType ?? "episode");
             insertVec.run(id, embedToBlob(mem.embedding));
             count++;
         }