@graphorin/memory 0.5.0 → 0.6.0

package/dist/index.d.ts

@@ -1,9 +1,9 @@
-import { EmbedderMigrationAbortedError, EmbedderMigrationLockedError, EmbedderMigrationStateError, EmbedderRegistrationError, GraphorinMemoryError, MemoryToolDeniedError, ProcedureInductionNotConfiguredError, QuarantinePromotionRefusedError, WorkingBlockOverflowError, WorkingBlockReadOnlyError, WorkingBlockReplaceMismatchError } from "./errors/index.js";
 import { LocaleMatch, LocalePack, LocalePatternEntry, LocaleSupersedeKind, defineLocalePack, evaluateMarkers } from "./conflict/locale-packs/types.js";
 import { ConflictAuditDecision, ConflictAuditInputLike, ConflictAuditStage, ConflictMemoryStoreExt, ConsolidatorMemoryStoreExt, ConsolidatorRunFinish, ConsolidatorRunInput, ConsolidatorStatePatch, ConsolidatorStateRow, DecayMemoryStoreExt, DlqBatchInput, DlqBatchRow, EmbeddedWriteOptions, EmbeddingMetaRegistryLike, EpisodicMemoryStoreExt, InsightListOptions as InsightListOptions$1, InsightMemoryStoreExt, InsightSearchStoreOptions, MemoryStoreAdapter, PendingConflictInputLike, PendingConflictRowLike, SemanticMemoryStoreExt, SessionMemoryStoreExt, SessionMessageRecord } from "./internal/storage-adapter.js";
 import { ConflictDecision, ConflictPipeline, ConflictPipelineDeps, ConflictPipelineOptions, ConflictStage, ConflictThresholds, DEFAULT_CONFLICT_THRESHOLDS, PipelineStage, ReconcileAction, ReconcileDecision, StageContext, StageOutcome, reconcileToConflictDecision } from "./conflict/types.js";
 import { _resetBypassWarningForTesting, createConflictPipeline, runConflictPipeline } from "./conflict/pipeline.js";
 import "./conflict/index.js";
+import { EmbedderMigrationAbortedError, EmbedderMigrationLockedError, EmbedderMigrationStateError, EmbedderRegistrationError, GraphorinMemoryError, MemoryToolDeniedError, ProcedureInductionNotConfiguredError, QuarantinePromotionRefusedError, WorkingBlockOverflowError, WorkingBlockReadOnlyError, WorkingBlockReplaceMismatchError } from "./errors/index.js";
 import { ContextualRetrievalMode } from "./internal/contextualize.js";
 import { EpisodeInput, EpisodeRetrievalWeights, EpisodeSearchOptions, EpisodicMemory } from "./tiers/episodic-memory.js";
 import { DEFAULT_ADJUDICATE_THRESHOLD, DEFAULT_MERGE_THRESHOLD, EntityResolutionConfig, EntityResolveDecision, EntityResolver, EntityResolverDeps, ResolutionCandidate, ResolveDecisionInput, buildAdjudicationRequest, cosineSimilarity, normalizeEntityName, parseAdjudication, resolveEntityDecision } from "./graph/entity-resolver.js";
@@ -11,6 +11,7 @@ import { DEFAULT_DIFFICULTY_THRESHOLD, DEFAULT_MAX_ITERATIONS, DifficultyAssessm
 import { DEFAULT_MAX_QUERY_VARIANTS, HYDE_SYSTEM_PROMPT, QUERY_EXPANSION_SYSTEM_PROMPT, QueryTransformOptions, QueryTransformer, buildExpansionRequest, buildHydeRequest, createProviderQueryTransformer, parseHypothetical, parseQueryVariants } from "./search/query-transform.js";
 import { ReRankOptions, ReRanker } from "./search/types.js";
 import { FactInput, FactRememberOptions, FactSearchOptions, FusionStrategy, FusionWeights, IterativeRecallResult, IterativeSearchOptions, RememberOutcome, SemanticMemory } from "./tiers/semantic-memory.js";
+import { BlockDefinition, BlockSpec, WorkingMemory, defineBlock } from "./tiers/working-memory.js";
 import { CONSOLIDATOR_TIER_DEFAULTS, ConsolidatorBudgetSnapshot, ConsolidatorCeilings, ConsolidatorConfig, ConsolidatorLastRuns, ConsolidatorPhase, ConsolidatorStatus, ConsolidatorTier, ConsolidatorTriggerReason, ConsolidatorTriggerSpec, CreateConsolidatorOptions, OnBudgetExceed, PhaseListener, PhaseOutcome } from "./consolidator/types.js";
 import { ParsedTrigger, parseTriggerSpec, reasonFromTrigger } from "./consolidator/triggers.js";
 import { ConsolidatorCatchupPolicy, RegisterTriggersOptions, RegisterTriggersResult, SchedulerLike, TriggerDeclarationLike, registerConsolidatorTriggers } from "./consolidator/scheduler.js";
@@ -30,6 +31,7 @@ import { NamedPostCompactionHook } from "./context-engine/compaction/hooks/types
 import { reanchorPersonaBlock } from "./context-engine/compaction/hooks/reanchor-persona-block.js";
 import { reanchorPinnedFacts } from "./context-engine/compaction/hooks/reanchor-pinned-facts.js";
 import { reanchorProjectRules } from "./context-engine/compaction/hooks/reanchor-project-rules.js";
+import { ReanchorRecentResultsOptions, reanchorRecentResults } from "./context-engine/compaction/hooks/reanchor-recent-results.js";
 import { CompactionMetadataPayload, RenderedTemplate, SUMMARY_TEMPLATE_NAME, SUMMARY_TEMPLATE_VERSION, buildSummarizerPrompt, renderFinalSummary } from "./context-engine/compaction/templates/summary-9-section.js";
 import { AutoCompactionDefault, DEFAULT_RESERVED_FOR_COMPACTION, DEFAULT_RESERVED_FOR_RESPONSE, DEFAULT_THRESHOLD_RATIO, resolveAutoCompactionDefault, resolveTriggerThreshold } from "./context-engine/compaction/thresholds.js";
 import { PartitionResult, PrivacyDecision, PrivacyDecisionReason, PrivacyFilterContext, decide, effectiveAcceptsSensitivity, partition } from "./context-engine/privacy-filter.js";
@@ -45,7 +47,6 @@ import { InsightListOptions, InsightMemory, InsightSearchOptions, capInsightsBel
 import { InduceOptions, ProceduralMemory, RuleActivationContext, RuleInput } from "./tiers/procedural-memory.js";
 import { SessionCompactionPolicy, SessionCompactionResult, SessionMemory } from "./tiers/session-memory.js";
 import { SharedMemory } from "./tiers/shared-memory.js";
-import { BlockDefinition, BlockSpec, WorkingMemory, defineBlock } from "./tiers/working-memory.js";
 import { MemoryToolDeps, ScopeResolver } from "./tools/types.js";
 import { createBlockAppendTool, createBlockReplaceTool, createBlockRethinkTool } from "./tools/block-tools.js";
 import { createFactForgetTool, createFactHistoryTool, createFactRememberTool, createFactSearchTool, createFactSupersedeTool, createFactValidateTool } from "./tools/fact-tools.js";
@@ -56,13 +57,16 @@ import "./graph/index.js";
 import { EmbedderMigrationStrategy, MigrateEmbedderOptions, MigrationProgress, migrateEmbedder } from "./migration/embedder-migration.js";
 import "./migration/index.js";
 import { RecallExplanation, RecalledMemoryExplanation, explainRecall, formatRecallExplanation } from "./search/explain.js";
+import { FitFusionCase, FitFusionOptions, FitFusionResult, fitFusionWeights, ndcgAtK } from "./search/fit-weights.js";
+import { DEFAULT_PPR_DAMPING, pprActivation } from "./search/graph-ppr.js";
 import { RRFReranker, RRF_DEFAULT_K, WeightedRRFReranker, fuseRrf, fuseWeighted } from "./search/rrf.js";
+import { isForeignProvenance, trustDiscount } from "./search/trust.js";
 import "./search/index.js";
 import "./tiers/index.js";
 
 //#region src/index.d.ts
 /**
- * `@graphorin/memory` — seven-tier memory system for the Graphorin
+ * `@graphorin/memory` - seven-tier memory system for the Graphorin
  * framework (MST-13: working / session / episodic / semantic /
  * procedural / shared + the read-only insight tier from P1-1).
  *
@@ -97,7 +101,7 @@ import "./tiers/index.js";
  * @packageDocumentation
  */
 /** Canonical version constant. Mirrors the `package.json` version. */
-declare const VERSION = "0.5.0";
+declare const VERSION = "0.6.0";
 //#endregion
-export { type AllocationResult, type AnnotatedPart, type AssembleInput, type AssembledPrompt, type AutoCompactionDefault, type AutoRecallConfig, type AutoRecallStrategy, type AutoRecallStrategyContext, type AutoRecallTriggerResult, type AutoRecallTriggers, BASE_TEMPLATE_EN_FULL, BASE_TEMPLATE_EN_MINIMAL, type BaseTemplateFragments, BlockDefinition, BlockSpec, BudgetExceededError, type BuildMemoryToolsOptions, CLEARED_TOOL_RESULT_MARKER, CONSOLIDATOR_TIER_DEFAULTS, CONTENT_ORIGIN_ATTR, type ClearToolResultsOptions, type ClearToolResultsOutcome, type CompactionConfig, type CompactionContext, type CompactionMetadataPayload, type CompactionResult, type CompactionSource, type CompactionStrategy, type CompactionSummarizer, type CompactionSummaryTemplate, type CompactionTriggerConfig, type CompileOptions, type CompileScope, type ConflictAuditDecision, type ConflictAuditInputLike, type ConflictAuditStage, ConflictDecision, type ConflictMemoryStoreExt, ConflictPipeline, ConflictPipelineDeps, ConflictPipelineOptions, ConflictStage, ConflictThresholds, type Consolidator, type ConsolidatorBudgetSnapshot, type ConsolidatorCatchupPolicy, type ConsolidatorCeilings, type ConsolidatorConfig, type ConsolidatorLastRuns, type ConsolidatorMemoryStoreExt, type ConsolidatorPhase, type ConsolidatorRunFinish, type ConsolidatorRunInput, type ConsolidatorStatePatch, type ConsolidatorStateRow, type ConsolidatorStatus, type ConsolidatorTier, type ConsolidatorTriggerReason, type ConsolidatorTriggerSpec, type ContentAnnotation, type ContentOrigin, type ContextEngine, type ContextEngineConfig, type ContextLocalePack, type ContextTokenCounter, type ContextualRetrievalMode, type CreateConsolidatorOptions, type CreateMemoryOptions, CustomTierMisconfiguredError, DEFAULT_ADJUDICATE_THRESHOLD, DEFAULT_CONFLICT_THRESHOLDS, DEFAULT_DIFFICULTY_THRESHOLD, DEFAULT_INDUCTION_MAX_TOKENS, DEFAULT_LAYER_PRIORITY, DEFAULT_MAX_ITERATIONS, DEFAULT_MAX_QUERY_VARIANTS, DEFAULT_MERGE_THRESHOLD, DEFAULT_PRESERVE_RECENT_TURNS, DEFAULT_RESERVED_FOR_COMPACTION, DEFAULT_RESERVED_FOR_RESPONSE, DEFAULT_THRESHOLD_RATIO, type DecayMemoryStoreExt, DifficultyAssessment, DifficultyGateOptions, type DlqBatchInput, type DlqBatchRow, type EmbeddedWriteOptions, EmbedderMigrationAbortedError, EmbedderMigrationLockedError, EmbedderMigrationStateError, EmbedderMigrationStrategy, EmbedderRegistrationError, type EmbeddingMetaRegistryLike, EntityResolutionConfig, EntityResolveDecision, EntityResolver, EntityResolverDeps, EpisodeInput, EpisodeRetrievalWeights, EpisodeSearchOptions, EpisodicMemory, type EpisodicMemoryStoreExt, type ExecuteCompactionInput, FactInput, FactRememberOptions, FactSearchOptions, FusionStrategy, FusionWeights, GraphorinMemoryError, HEURISTIC_TOKEN_COUNTER, HYDE_SYSTEM_PROMPT, INBOUND_SANITIZATION_PREAMBLE_EN, INBOUND_TRUST_ATTR, INDUCTION_SYSTEM_PROMPT, type InboundSanitizationPreamble, type InboundTrust, InduceOptions, type InducedProcedure, InsightListOptions, InsightMemory, type InsightMemoryStoreExt, InsightSearchOptions, type InsightSearchStoreOptions, type InsightListOptions$1 as InsightStoreListOptions, IterativeRecallResult, IterativeRetrievalDeps, IterativeRetrievalOptions, IterativeRetrievalResult, IterativeSearchOptions, type LayerAllocation, type LayerCandidate, type LayerConfig, type LayerId, LocaleMatch, LocalePack, LocalePatternEntry, type LocaleResolverLogger, LocaleSupersedeKind, MAX_ITERATIONS_CEILING, MAX_PROCEDURE_STEPS, MAX_TRAJECTORY_STEPS_SHOWN, type Memory, type MemoryBaseMode, type MemoryContextBlocks, type MemoryMetadataDeps, type MemoryStoreAdapter, MemoryToolDeniedError, type MemoryToolDeps, MigrateEmbedderOptions, MigrationProgress, NON_INBOUND_ORIGINS, type NamedPostCompactionHook, type OnBudgetExceed, type OverflowMode, type ParsedTrigger, type PartialContextLocalePack, type PartitionResult, type PendingConflictInputLike, type PendingConflictRowLike, type PhaseListener, type PhaseOutcome, PipelineStage, type PostCompactionHook, type PostCompactionHookContext, type PrivacyConfig, type PrivacyDecision, type PrivacyDecisionReason, type PrivacyFilterContext, ProceduralMemory, ProcedureInductionNotConfiguredError, ProviderNotConfiguredError, QUERY_EXPANSION_SYSTEM_PROMPT, QuarantinePromotionRefusedError, QueryTransformOptions, QueryTransformer, RETRIEVAL_GRADE_SYSTEM_PROMPT, RRFReranker, RRF_DEFAULT_K, ReRankOptions, ReRanker, RecallExplanation, RecalledMemoryExplanation, ReconcileAction, ReconcileDecision, type RegisterTriggersOptions, type RegisterTriggersResult, RememberOutcome, type RenderedTemplate, ResolutionCandidate, ResolveDecisionInput, type ResolvedContextEngineConfig, RetrievalGrade, RetrievalGradeOptions, RetrievalGrader, RuleActivationContext, RuleInput, SUMMARY_TEMPLATE_NAME, SUMMARY_TEMPLATE_VERSION, type SchedulerLike, type ScopeResolver, SemanticMemory, type SemanticMemoryStoreExt, SessionCompactionPolicy, SessionCompactionResult, SessionMemory, type SessionMemoryStoreExt, type SessionMessageRecord, SharedMemory, type SkillMetadataCard, StageContext, StageOutcome, type Trajectory, type TrajectoryStep, type TriggerDeclarationLike, VERSION, type VerificationResult, WeightedRRFReranker, type WorkflowInducer, type WorkflowInductionOptions, WorkingBlockOverflowError, WorkingBlockReadOnlyError, WorkingBlockReplaceMismatchError, WorkingMemory, _getLocaleFallbackWarningsForTesting, _resetBypassWarningForTesting, _resetConsolidatorConfigWarningForTesting, _resetLocaleFallbackWarningsForTesting, adaptTokenCounter, allocate as allocateTokenBudget, annotate, assessQueryDifficulty, buildAdjudicationRequest, buildExpansionRequest, buildGradeRequest, buildHydeRequest, buildInductionRequest, buildMemoryTools, buildSummarizerPrompt, capInsightsBelowFacts, checkSuccessCriteria, clearOldToolResults, composeInboundPreamble, composeLayer1, composeLayer2, composeLayer4Skills, cosineSimilarity, countMessageTokens, createBlockAppendTool, createBlockReplaceTool, createBlockRethinkTool, createConflictPipeline, createConsolidator, createConsolidatorPlaceholder, createContextEngine, createConversationSearchTool, createDeepRecallTool, createFactForgetTool, createFactHistoryTool, createFactRememberTool, createFactSearchTool, createFactSupersedeTool, createFactValidateTool, createMemory, createProviderQueryTransformer, createProviderRetrievalGrader, createProviderWorkflowInducer, createRecallEpisodesTool, defaultLocaleHeuristicStrategy, defineAutoRecallStrategy, defineBlock, defineContextLocalePack, defineLocalePack, effectiveAcceptsSensitivity, enLocalePack, evaluateMarkers, executeCompaction, explainRecall, formatRecallExplanation, fuseRrf, fuseWeighted, gatherMemoryMetadata, migrateEmbedder, normalizeEntityName, normalizeInducedProcedure, parseAdjudication, parseGrade, parseHypothetical, parseInducedProcedure, parseQueryVariants, parseTriggerSpec, partition as partitionBySensitivity, decide as privacyDecide, reanchorPersonaBlock, reanchorPinnedFacts, reanchorProjectRules, reasonFromTrigger, reconcileToConflictDecision, registerConsolidatorTriggers, renderFinalSummary, renderMessageText, renderMetadataBlock, resolveAutoCompactionDefault, resolveEntityDecision, resolveLocalePack, resolveTriggerThreshold, runConflictPipeline, runIterativeRetrieval, runWorkflowInduction, shouldFireInboundPreamble, toSpanAttributes, trajectoryFromRunState, truncateToTokens };
+export { type AllocationResult, type AnnotatedPart, type AssembleInput, type AssembledPrompt, type AutoCompactionDefault, type AutoRecallConfig, type AutoRecallStrategy, type AutoRecallStrategyContext, type AutoRecallTriggerResult, type AutoRecallTriggers, BASE_TEMPLATE_EN_FULL, BASE_TEMPLATE_EN_MINIMAL, type BaseTemplateFragments, BlockDefinition, BlockSpec, BudgetExceededError, type BuildMemoryToolsOptions, CLEARED_TOOL_RESULT_MARKER, CONSOLIDATOR_TIER_DEFAULTS, CONTENT_ORIGIN_ATTR, type ClearToolResultsOptions, type ClearToolResultsOutcome, type CompactionConfig, type CompactionContext, type CompactionMetadataPayload, type CompactionResult, type CompactionSource, type CompactionStrategy, type CompactionSummarizer, type CompactionSummaryTemplate, type CompactionTriggerConfig, type CompileOptions, type CompileScope, type ConflictAuditDecision, type ConflictAuditInputLike, type ConflictAuditStage, ConflictDecision, type ConflictMemoryStoreExt, ConflictPipeline, ConflictPipelineDeps, ConflictPipelineOptions, ConflictStage, ConflictThresholds, type Consolidator, type ConsolidatorBudgetSnapshot, type ConsolidatorCatchupPolicy, type ConsolidatorCeilings, type ConsolidatorConfig, type ConsolidatorLastRuns, type ConsolidatorMemoryStoreExt, type ConsolidatorPhase, type ConsolidatorRunFinish, type ConsolidatorRunInput, type ConsolidatorStatePatch, type ConsolidatorStateRow, type ConsolidatorStatus, type ConsolidatorTier, type ConsolidatorTriggerReason, type ConsolidatorTriggerSpec, type ContentAnnotation, type ContentOrigin, type ContextEngine, type ContextEngineConfig, type ContextLocalePack, type ContextTokenCounter, type ContextualRetrievalMode, type CreateConsolidatorOptions, type CreateMemoryOptions, CustomTierMisconfiguredError, DEFAULT_ADJUDICATE_THRESHOLD, DEFAULT_CONFLICT_THRESHOLDS, DEFAULT_DIFFICULTY_THRESHOLD, DEFAULT_INDUCTION_MAX_TOKENS, DEFAULT_LAYER_PRIORITY, DEFAULT_MAX_ITERATIONS, DEFAULT_MAX_QUERY_VARIANTS, DEFAULT_MERGE_THRESHOLD, DEFAULT_PPR_DAMPING, DEFAULT_PRESERVE_RECENT_TURNS, DEFAULT_RESERVED_FOR_COMPACTION, DEFAULT_RESERVED_FOR_RESPONSE, DEFAULT_THRESHOLD_RATIO, type DecayMemoryStoreExt, DifficultyAssessment, DifficultyGateOptions, type DlqBatchInput, type DlqBatchRow, type EmbeddedWriteOptions, EmbedderMigrationAbortedError, EmbedderMigrationLockedError, EmbedderMigrationStateError, EmbedderMigrationStrategy, EmbedderRegistrationError, type EmbeddingMetaRegistryLike, EntityResolutionConfig, EntityResolveDecision, EntityResolver, EntityResolverDeps, EpisodeInput, EpisodeRetrievalWeights, EpisodeSearchOptions, EpisodicMemory, type EpisodicMemoryStoreExt, type ExecuteCompactionInput, FactInput, FactRememberOptions, FactSearchOptions, FitFusionCase, FitFusionOptions, FitFusionResult, FusionStrategy, FusionWeights, GraphorinMemoryError, HEURISTIC_TOKEN_COUNTER, HYDE_SYSTEM_PROMPT, INBOUND_SANITIZATION_PREAMBLE_EN, INBOUND_TRUST_ATTR, INDUCTION_SYSTEM_PROMPT, type InboundSanitizationPreamble, type InboundTrust, InduceOptions, type InducedProcedure, InsightListOptions, InsightMemory, type InsightMemoryStoreExt, InsightSearchOptions, type InsightSearchStoreOptions, type InsightListOptions$1 as InsightStoreListOptions, IterativeRecallResult, IterativeRetrievalDeps, IterativeRetrievalOptions, IterativeRetrievalResult, IterativeSearchOptions, type LayerAllocation, type LayerCandidate, type LayerConfig, type LayerId, LocaleMatch, LocalePack, LocalePatternEntry, type LocaleResolverLogger, LocaleSupersedeKind, MAX_ITERATIONS_CEILING, MAX_PROCEDURE_STEPS, MAX_TRAJECTORY_STEPS_SHOWN, type Memory, type MemoryBaseMode, type MemoryContextBlocks, type MemoryMetadataDeps, type MemoryStoreAdapter, MemoryToolDeniedError, type MemoryToolDeps, MigrateEmbedderOptions, MigrationProgress, NON_INBOUND_ORIGINS, type NamedPostCompactionHook, type OnBudgetExceed, type OverflowMode, type ParsedTrigger, type PartialContextLocalePack, type PartitionResult, type PendingConflictInputLike, type PendingConflictRowLike, type PhaseListener, type PhaseOutcome, PipelineStage, type PostCompactionHook, type PostCompactionHookContext, type PrivacyConfig, type PrivacyDecision, type PrivacyDecisionReason, type PrivacyFilterContext, ProceduralMemory, ProcedureInductionNotConfiguredError, ProviderNotConfiguredError, QUERY_EXPANSION_SYSTEM_PROMPT, QuarantinePromotionRefusedError, QueryTransformOptions, QueryTransformer, RETRIEVAL_GRADE_SYSTEM_PROMPT, RRFReranker, RRF_DEFAULT_K, ReRankOptions, ReRanker, type ReanchorRecentResultsOptions, RecallExplanation, RecalledMemoryExplanation, ReconcileAction, ReconcileDecision, type RegisterTriggersOptions, type RegisterTriggersResult, RememberOutcome, type RenderedTemplate, ResolutionCandidate, ResolveDecisionInput, type ResolvedContextEngineConfig, RetrievalGrade, RetrievalGradeOptions, RetrievalGrader, RuleActivationContext, RuleInput, SUMMARY_TEMPLATE_NAME, SUMMARY_TEMPLATE_VERSION, type SchedulerLike, type ScopeResolver, SemanticMemory, type SemanticMemoryStoreExt, SessionCompactionPolicy, SessionCompactionResult, SessionMemory, type SessionMemoryStoreExt, type SessionMessageRecord, SharedMemory, type SkillMetadataCard, StageContext, StageOutcome, type Trajectory, type TrajectoryStep, type TriggerDeclarationLike, VERSION, type VerificationResult, WeightedRRFReranker, type WorkflowInducer, type WorkflowInductionOptions, WorkingBlockOverflowError, WorkingBlockReadOnlyError, WorkingBlockReplaceMismatchError, WorkingMemory, _getLocaleFallbackWarningsForTesting, _resetBypassWarningForTesting, _resetConsolidatorConfigWarningForTesting, _resetLocaleFallbackWarningsForTesting, adaptTokenCounter, allocate as allocateTokenBudget, annotate, assessQueryDifficulty, buildAdjudicationRequest, buildExpansionRequest, buildGradeRequest, buildHydeRequest, buildInductionRequest, buildMemoryTools, buildSummarizerPrompt, capInsightsBelowFacts, checkSuccessCriteria, clearOldToolResults, composeInboundPreamble, composeLayer1, composeLayer2, composeLayer4Skills, cosineSimilarity, countMessageTokens, createBlockAppendTool, createBlockReplaceTool, createBlockRethinkTool, createConflictPipeline, createConsolidator, createConsolidatorPlaceholder, createContextEngine, createConversationSearchTool, createDeepRecallTool, createFactForgetTool, createFactHistoryTool, createFactRememberTool, createFactSearchTool, createFactSupersedeTool, createFactValidateTool, createMemory, createProviderQueryTransformer, createProviderRetrievalGrader, createProviderWorkflowInducer, createRecallEpisodesTool, defaultLocaleHeuristicStrategy, defineAutoRecallStrategy, defineBlock, defineContextLocalePack, defineLocalePack, effectiveAcceptsSensitivity, enLocalePack, evaluateMarkers, executeCompaction, explainRecall, fitFusionWeights, formatRecallExplanation, fuseRrf, fuseWeighted, gatherMemoryMetadata, isForeignProvenance, migrateEmbedder, ndcgAtK, normalizeEntityName, normalizeInducedProcedure, parseAdjudication, parseGrade, parseHypothetical, parseInducedProcedure, parseQueryVariants, parseTriggerSpec, partition as partitionBySensitivity, pprActivation, decide as privacyDecide, reanchorPersonaBlock, reanchorPinnedFacts, reanchorProjectRules, reanchorRecentResults, reasonFromTrigger, reconcileToConflictDecision, registerConsolidatorTriggers, renderFinalSummary, renderMessageText, renderMetadataBlock, resolveAutoCompactionDefault, resolveEntityDecision, resolveLocalePack, resolveTriggerThreshold, runConflictPipeline, runIterativeRetrieval, runWorkflowInduction, shouldFireInboundPreamble, toSpanAttributes, trajectoryFromRunState, truncateToTokens, trustDiscount };
 //# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","names":[],"sources":["../src/index.ts"],"sourcesContent":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;cAqCa,OAAA"}
+{"version":3,"file":"index.d.ts","names":[],"sources":["../src/index.ts"],"sourcesContent":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;cAqCa,OAAA"}

package/dist/index.js

@@ -5,6 +5,7 @@ import "./conflict/index.js";
 import { EmbedderMigrationAbortedError, EmbedderMigrationLockedError, EmbedderMigrationStateError, EmbedderRegistrationError, GraphorinMemoryError, MemoryToolDeniedError, ProcedureInductionNotConfiguredError, QuarantinePromotionRefusedError, WorkingBlockOverflowError, WorkingBlockReadOnlyError, WorkingBlockReplaceMismatchError } from "./errors/index.js";
 import { BudgetExceededError, CustomTierMisconfiguredError, ProviderNotConfiguredError } from "./consolidator/errors.js";
 import { DEFAULT_INDUCTION_MAX_TOKENS, INDUCTION_SYSTEM_PROMPT, MAX_PROCEDURE_STEPS, MAX_TRAJECTORY_STEPS_SHOWN, buildInductionRequest, checkSuccessCriteria, createProviderWorkflowInducer, normalizeInducedProcedure, parseInducedProcedure, runWorkflowInduction, trajectoryFromRunState } from "./consolidator/phases/induce.js";
+import { WorkingMemory, defineBlock } from "./tiers/working-memory.js";
 import { parseTriggerSpec, reasonFromTrigger } from "./consolidator/triggers.js";
 import { registerConsolidatorTriggers } from "./consolidator/scheduler.js";
 import { CONSOLIDATOR_TIER_DEFAULTS } from "./consolidator/types.js";
@@ -19,6 +20,7 @@ import { DEFAULT_PRESERVE_RECENT_TURNS, executeCompaction } from "./context-engi
 import { reanchorPersonaBlock } from "./context-engine/compaction/hooks/reanchor-persona-block.js";
 import { reanchorPinnedFacts } from "./context-engine/compaction/hooks/reanchor-pinned-facts.js";
 import { reanchorProjectRules } from "./context-engine/compaction/hooks/reanchor-project-rules.js";
+import { reanchorRecentResults } from "./context-engine/compaction/hooks/reanchor-recent-results.js";
 import { DEFAULT_RESERVED_FOR_COMPACTION, DEFAULT_RESERVED_FOR_RESPONSE, DEFAULT_THRESHOLD_RATIO, resolveAutoCompactionDefault, resolveTriggerThreshold } from "./context-engine/compaction/thresholds.js";
 import { enLocalePack } from "./context-engine/locale-packs/en.js";
 import { defineContextLocalePack } from "./context-engine/locale-packs/types.js";
@@ -39,21 +41,24 @@ import { EpisodicMemory } from "./tiers/episodic-memory.js";
 import { InsightMemory, capInsightsBelowFacts } from "./tiers/insight-memory.js";
 import { ProceduralMemory } from "./tiers/procedural-memory.js";
 import { explainRecall, formatRecallExplanation } from "./search/explain.js";
+import { DEFAULT_PPR_DAMPING, pprActivation } from "./search/graph-ppr.js";
+import { isForeignProvenance, trustDiscount } from "./search/trust.js";
 import { SemanticMemory } from "./tiers/semantic-memory.js";
 import { SessionMemory } from "./tiers/session-memory.js";
 import { SharedMemory } from "./tiers/shared-memory.js";
-import { WorkingMemory, defineBlock } from "./tiers/working-memory.js";
 import { createBlockAppendTool, createBlockReplaceTool, createBlockRethinkTool } from "./tools/block-tools.js";
 import { createFactForgetTool, createFactHistoryTool, createFactRememberTool, createFactSearchTool, createFactSupersedeTool, createFactValidateTool } from "./tools/fact-tools.js";
 import { createConversationSearchTool, createDeepRecallTool, createRecallEpisodesTool } from "./tools/recall-tools.js";
 import { buildMemoryTools } from "./tools/index.js";
 import { _resetConsolidatorConfigWarningForTesting, createMemory } from "./facade.js";
 import { migrateEmbedder } from "./migration/embedder-migration.js";
+import { fitFusionWeights, ndcgAtK } from "./search/fit-weights.js";
+import "./search/index.js";
 import "./tiers/index.js";
 
 //#region src/index.ts
 /**
-* `@graphorin/memory` — seven-tier memory system for the Graphorin
+* `@graphorin/memory` - seven-tier memory system for the Graphorin
 * framework (MST-13: working / session / episodic / semantic /
 * procedural / shared + the read-only insight tier from P1-1).
 *
@@ -88,8 +93,8 @@ import "./tiers/index.js";
 * @packageDocumentation
 */
 /** Canonical version constant. Mirrors the `package.json` version. */
-const VERSION = "0.5.0";
+const VERSION = "0.6.0";
 
 //#endregion
-export { BASE_TEMPLATE_EN_FULL, BASE_TEMPLATE_EN_MINIMAL, BudgetExceededError, CLEARED_TOOL_RESULT_MARKER, CONSOLIDATOR_TIER_DEFAULTS, CONTENT_ORIGIN_ATTR, CustomTierMisconfiguredError, DEFAULT_ADJUDICATE_THRESHOLD, DEFAULT_CONFLICT_THRESHOLDS, DEFAULT_DIFFICULTY_THRESHOLD, DEFAULT_INDUCTION_MAX_TOKENS, DEFAULT_LAYER_PRIORITY, DEFAULT_MAX_ITERATIONS, DEFAULT_MAX_QUERY_VARIANTS, DEFAULT_MERGE_THRESHOLD, DEFAULT_PRESERVE_RECENT_TURNS, DEFAULT_RESERVED_FOR_COMPACTION, DEFAULT_RESERVED_FOR_RESPONSE, DEFAULT_THRESHOLD_RATIO, EmbedderMigrationAbortedError, EmbedderMigrationLockedError, EmbedderMigrationStateError, EmbedderRegistrationError, EntityResolver, EpisodicMemory, GraphorinMemoryError, HEURISTIC_TOKEN_COUNTER, HYDE_SYSTEM_PROMPT, INBOUND_SANITIZATION_PREAMBLE_EN, INBOUND_TRUST_ATTR, INDUCTION_SYSTEM_PROMPT, InsightMemory, MAX_ITERATIONS_CEILING, MAX_PROCEDURE_STEPS, MAX_TRAJECTORY_STEPS_SHOWN, MemoryToolDeniedError, NON_INBOUND_ORIGINS, ProceduralMemory, ProcedureInductionNotConfiguredError, ProviderNotConfiguredError, QUERY_EXPANSION_SYSTEM_PROMPT, QuarantinePromotionRefusedError, RETRIEVAL_GRADE_SYSTEM_PROMPT, RRFReranker, RRF_DEFAULT_K, SUMMARY_TEMPLATE_NAME, SUMMARY_TEMPLATE_VERSION, SemanticMemory, SessionMemory, SharedMemory, VERSION, WeightedRRFReranker, WorkingBlockOverflowError, WorkingBlockReadOnlyError, WorkingBlockReplaceMismatchError, WorkingMemory, _getLocaleFallbackWarningsForTesting, _resetBypassWarningForTesting, _resetConsolidatorConfigWarningForTesting, _resetLocaleFallbackWarningsForTesting, adaptTokenCounter, allocate as allocateTokenBudget, annotate, assessQueryDifficulty, buildAdjudicationRequest, buildExpansionRequest, buildGradeRequest, buildHydeRequest, buildInductionRequest, buildMemoryTools, buildSummarizerPrompt, capInsightsBelowFacts, checkSuccessCriteria, clearOldToolResults, composeInboundPreamble, composeLayer1, composeLayer2, composeLayer4Skills, cosineSimilarity, countMessageTokens, createBlockAppendTool, createBlockReplaceTool, createBlockRethinkTool, createConflictPipeline, createConsolidator, createConsolidatorPlaceholder, createContextEngine, createConversationSearchTool, createDeepRecallTool, createFactForgetTool, createFactHistoryTool, createFactRememberTool, createFactSearchTool, createFactSupersedeTool, createFactValidateTool, createMemory, createProviderQueryTransformer, createProviderRetrievalGrader, createProviderWorkflowInducer, createRecallEpisodesTool, defaultLocaleHeuristicStrategy, defineAutoRecallStrategy, defineBlock, defineContextLocalePack, defineLocalePack, effectiveAcceptsSensitivity, enLocalePack, evaluateMarkers, executeCompaction, explainRecall, formatRecallExplanation, fuseRrf, fuseWeighted, gatherMemoryMetadata, migrateEmbedder, normalizeEntityName, normalizeInducedProcedure, parseAdjudication, parseGrade, parseHypothetical, parseInducedProcedure, parseQueryVariants, parseTriggerSpec, partition as partitionBySensitivity, decide as privacyDecide, reanchorPersonaBlock, reanchorPinnedFacts, reanchorProjectRules, reasonFromTrigger, reconcileToConflictDecision, registerConsolidatorTriggers, renderFinalSummary, renderMessageText, renderMetadataBlock, resolveAutoCompactionDefault, resolveEntityDecision, resolveLocalePack, resolveTriggerThreshold, runConflictPipeline, runIterativeRetrieval, runWorkflowInduction, shouldFireInboundPreamble, toSpanAttributes, trajectoryFromRunState, truncateToTokens };
+export { BASE_TEMPLATE_EN_FULL, BASE_TEMPLATE_EN_MINIMAL, BudgetExceededError, CLEARED_TOOL_RESULT_MARKER, CONSOLIDATOR_TIER_DEFAULTS, CONTENT_ORIGIN_ATTR, CustomTierMisconfiguredError, DEFAULT_ADJUDICATE_THRESHOLD, DEFAULT_CONFLICT_THRESHOLDS, DEFAULT_DIFFICULTY_THRESHOLD, DEFAULT_INDUCTION_MAX_TOKENS, DEFAULT_LAYER_PRIORITY, DEFAULT_MAX_ITERATIONS, DEFAULT_MAX_QUERY_VARIANTS, DEFAULT_MERGE_THRESHOLD, DEFAULT_PPR_DAMPING, DEFAULT_PRESERVE_RECENT_TURNS, DEFAULT_RESERVED_FOR_COMPACTION, DEFAULT_RESERVED_FOR_RESPONSE, DEFAULT_THRESHOLD_RATIO, EmbedderMigrationAbortedError, EmbedderMigrationLockedError, EmbedderMigrationStateError, EmbedderRegistrationError, EntityResolver, EpisodicMemory, GraphorinMemoryError, HEURISTIC_TOKEN_COUNTER, HYDE_SYSTEM_PROMPT, INBOUND_SANITIZATION_PREAMBLE_EN, INBOUND_TRUST_ATTR, INDUCTION_SYSTEM_PROMPT, InsightMemory, MAX_ITERATIONS_CEILING, MAX_PROCEDURE_STEPS, MAX_TRAJECTORY_STEPS_SHOWN, MemoryToolDeniedError, NON_INBOUND_ORIGINS, ProceduralMemory, ProcedureInductionNotConfiguredError, ProviderNotConfiguredError, QUERY_EXPANSION_SYSTEM_PROMPT, QuarantinePromotionRefusedError, RETRIEVAL_GRADE_SYSTEM_PROMPT, RRFReranker, RRF_DEFAULT_K, SUMMARY_TEMPLATE_NAME, SUMMARY_TEMPLATE_VERSION, SemanticMemory, SessionMemory, SharedMemory, VERSION, WeightedRRFReranker, WorkingBlockOverflowError, WorkingBlockReadOnlyError, WorkingBlockReplaceMismatchError, WorkingMemory, _getLocaleFallbackWarningsForTesting, _resetBypassWarningForTesting, _resetConsolidatorConfigWarningForTesting, _resetLocaleFallbackWarningsForTesting, adaptTokenCounter, allocate as allocateTokenBudget, annotate, assessQueryDifficulty, buildAdjudicationRequest, buildExpansionRequest, buildGradeRequest, buildHydeRequest, buildInductionRequest, buildMemoryTools, buildSummarizerPrompt, capInsightsBelowFacts, checkSuccessCriteria, clearOldToolResults, composeInboundPreamble, composeLayer1, composeLayer2, composeLayer4Skills, cosineSimilarity, countMessageTokens, createBlockAppendTool, createBlockReplaceTool, createBlockRethinkTool, createConflictPipeline, createConsolidator, createConsolidatorPlaceholder, createContextEngine, createConversationSearchTool, createDeepRecallTool, createFactForgetTool, createFactHistoryTool, createFactRememberTool, createFactSearchTool, createFactSupersedeTool, createFactValidateTool, createMemory, createProviderQueryTransformer, createProviderRetrievalGrader, createProviderWorkflowInducer, createRecallEpisodesTool, defaultLocaleHeuristicStrategy, defineAutoRecallStrategy, defineBlock, defineContextLocalePack, defineLocalePack, effectiveAcceptsSensitivity, enLocalePack, evaluateMarkers, executeCompaction, explainRecall, fitFusionWeights, formatRecallExplanation, fuseRrf, fuseWeighted, gatherMemoryMetadata, isForeignProvenance, migrateEmbedder, ndcgAtK, normalizeEntityName, normalizeInducedProcedure, parseAdjudication, parseGrade, parseHypothetical, parseInducedProcedure, parseQueryVariants, parseTriggerSpec, partition as partitionBySensitivity, pprActivation, decide as privacyDecide, reanchorPersonaBlock, reanchorPinnedFacts, reanchorProjectRules, reanchorRecentResults, reasonFromTrigger, reconcileToConflictDecision, registerConsolidatorTriggers, renderFinalSummary, renderMessageText, renderMetadataBlock, resolveAutoCompactionDefault, resolveEntityDecision, resolveLocalePack, resolveTriggerThreshold, runConflictPipeline, runIterativeRetrieval, runWorkflowInduction, shouldFireInboundPreamble, toSpanAttributes, trajectoryFromRunState, truncateToTokens, trustDiscount };
 //# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","names":[],"sources":["../src/index.ts"],"sourcesContent":["/**\n * `@graphorin/memory` — seven-tier memory system for the Graphorin\n * framework (MST-13: working / session / episodic / semantic /\n * procedural / shared + the read-only insight tier from P1-1).\n *\n * Surface overview:\n *\n *  - The {@link createMemory} facade that wires every tier sub-module\n *    + the memory tools + the search reranker + the context-engine +\n *    the consolidator.\n *  - Tier sub-modules under `./tiers`: {@link WorkingMemory},\n *    {@link SessionMemory}, {@link EpisodicMemory}, {@link SemanticMemory},\n *    {@link ProceduralMemory}, {@link SharedMemory}, plus the read-only\n *    {@link InsightMemory}.\n *  - Eleven memory tools under `./tools` (plus the gated twelfth,\n *    `deep_recall`, registered only when iterative retrieval is\n *    configured): `block_append`, `block_replace`, `block_rethink`,\n *    `fact_remember`, `fact_search`, `fact_supersede`, `fact_forget`,\n *    `recall_episodes`, `conversation_search`, `fact_history` (P0-2),\n *    `fact_validate` (P1-4).\n *  - The hybrid search composition under `./search`, including the\n *    built-in {@link RRFReranker} (k=60 default) and the\n *    {@link ReRanker} contract.\n *  - The embedder migration runner under `./migration`\n *    ({@link migrateEmbedder} with three coexistence policies).\n *  - Typed errors under `./errors`.\n *\n * Forward-looking surfaces (for ergonomic typing today):\n *\n *  - {@link MemoryContextBlocks} + {@link CompileOptions} from `./context-engine`.\n *  - {@link Consolidator}, {@link ConsolidatorTriggerSpec},\n *    {@link ConsolidatorTier} from `./consolidator`.\n *\n * @packageDocumentation\n */\n\n/** Canonical version constant. Mirrors the `package.json` version. */\nexport const VERSION = '0.5.0';\n\nexport * from './conflict/index.js';\nexport {\n  BudgetExceededError,\n  buildInductionRequest,\n  CONSOLIDATOR_TIER_DEFAULTS,\n  type Consolidator,\n  type ConsolidatorBudgetSnapshot,\n  type ConsolidatorCatchupPolicy,\n  type ConsolidatorCeilings,\n  type ConsolidatorConfig,\n  type ConsolidatorLastRuns,\n  type ConsolidatorPhase,\n  type ConsolidatorStatus,\n  type ConsolidatorTier,\n  type ConsolidatorTriggerReason,\n  type ConsolidatorTriggerSpec,\n  type CreateConsolidatorOptions,\n  CustomTierMisconfiguredError,\n  checkSuccessCriteria,\n  createConsolidator,\n  createConsolidatorPlaceholder,\n  createProviderWorkflowInducer,\n  DEFAULT_INDUCTION_MAX_TOKENS,\n  INDUCTION_SYSTEM_PROMPT,\n  type InducedProcedure,\n  MAX_PROCEDURE_STEPS,\n  MAX_TRAJECTORY_STEPS_SHOWN,\n  normalizeInducedProcedure,\n  type OnBudgetExceed,\n  type ParsedTrigger,\n  type PhaseListener,\n  type PhaseOutcome,\n  ProviderNotConfiguredError,\n  parseInducedProcedure,\n  parseTriggerSpec,\n  type RegisterTriggersOptions,\n  type RegisterTriggersResult,\n  reasonFromTrigger,\n  registerConsolidatorTriggers,\n  runWorkflowInduction,\n  type SchedulerLike,\n  type Trajectory,\n  type TrajectoryStep,\n  type TriggerDeclarationLike,\n  trajectoryFromRunState,\n  type VerificationResult,\n  type WorkflowInducer,\n  type WorkflowInductionOptions,\n} from './consolidator/index.js';\nexport {\n  _getLocaleFallbackWarningsForTesting,\n  _resetLocaleFallbackWarningsForTesting,\n  type AllocationResult,\n  type AnnotatedPart,\n  type AssembledPrompt,\n  type AssembleInput,\n  type AutoCompactionDefault,\n  type AutoRecallConfig,\n  type AutoRecallStrategy,\n  type AutoRecallStrategyContext,\n  type AutoRecallTriggerResult,\n  type AutoRecallTriggers,\n  adaptTokenCounter,\n  allocateTokenBudget,\n  annotate,\n  BASE_TEMPLATE_EN_FULL,\n  BASE_TEMPLATE_EN_MINIMAL,\n  type BaseTemplateFragments,\n  buildSummarizerPrompt,\n  CLEARED_TOOL_RESULT_MARKER,\n  type ClearToolResultsOptions,\n  type ClearToolResultsOutcome,\n  CONTENT_ORIGIN_ATTR,\n  type CompactionConfig,\n  type CompactionContext,\n  type CompactionMetadataPayload,\n  type CompactionResult,\n  type CompactionSource,\n  type CompactionStrategy,\n  type CompactionSummarizer,\n  type CompactionSummaryTemplate,\n  type CompactionTriggerConfig,\n  type CompileOptions,\n  type CompileScope,\n  type ContentAnnotation,\n  type ContentOrigin,\n  type ContextEngine,\n  type ContextEngineConfig,\n  type ContextLocalePack,\n  type ContextTokenCounter,\n  clearOldToolResults,\n  composeInboundPreamble,\n  composeLayer1,\n  composeLayer2,\n  composeLayer4Skills,\n  countMessageTokens,\n  createContextEngine,\n  DEFAULT_LAYER_PRIORITY,\n  DEFAULT_PRESERVE_RECENT_TURNS,\n  DEFAULT_RESERVED_FOR_COMPACTION,\n  DEFAULT_RESERVED_FOR_RESPONSE,\n  DEFAULT_THRESHOLD_RATIO,\n  defaultLocaleHeuristicStrategy,\n  defineAutoRecallStrategy,\n  defineContextLocalePack,\n  type ExecuteCompactionInput,\n  effectiveAcceptsSensitivity,\n  enLocalePack,\n  executeCompaction,\n  gatherMemoryMetadata,\n  HEURISTIC_TOKEN_COUNTER,\n  INBOUND_SANITIZATION_PREAMBLE_EN,\n  INBOUND_TRUST_ATTR,\n  type InboundSanitizationPreamble,\n  type InboundTrust,\n  type LayerAllocation,\n  type LayerCandidate,\n  type LayerConfig,\n  type LayerId,\n  type LocaleResolverLogger,\n  type MemoryBaseMode,\n  type MemoryContextBlocks,\n  type MemoryMetadataDeps,\n  type NamedPostCompactionHook,\n  NON_INBOUND_ORIGINS,\n  type OverflowMode,\n  type PartialContextLocalePack,\n  type PartitionResult,\n  type PostCompactionHook,\n  type PostCompactionHookContext,\n  type PrivacyConfig,\n  type PrivacyDecision,\n  type PrivacyDecisionReason,\n  type PrivacyFilterContext,\n  partitionBySensitivity,\n  privacyDecide,\n  type RenderedTemplate,\n  type ResolvedContextEngineConfig,\n  reanchorPersonaBlock,\n  reanchorPinnedFacts,\n  reanchorProjectRules,\n  renderFinalSummary,\n  renderMessageText,\n  renderMetadataBlock,\n  resolveAutoCompactionDefault,\n  resolveLocalePack,\n  resolveTriggerThreshold,\n  type SkillMetadataCard,\n  SUMMARY_TEMPLATE_NAME,\n  SUMMARY_TEMPLATE_VERSION,\n  shouldFireInboundPreamble,\n  toSpanAttributes,\n  truncateToTokens,\n} from './context-engine/index.js';\nexport * from './errors/index.js';\nexport {\n  _resetConsolidatorConfigWarningForTesting,\n  type CreateMemoryOptions,\n  createMemory,\n  type Memory,\n} from './facade.js';\nexport * from './graph/index.js';\nexport type { ContextualRetrievalMode } from './internal/contextualize.js';\nexport type {\n  ConflictAuditDecision,\n  ConflictAuditInputLike,\n  ConflictAuditStage,\n  ConflictMemoryStoreExt,\n  ConsolidatorMemoryStoreExt,\n  ConsolidatorRunFinish,\n  ConsolidatorRunInput,\n  ConsolidatorStatePatch,\n  ConsolidatorStateRow,\n  DecayMemoryStoreExt,\n  DlqBatchInput,\n  DlqBatchRow,\n  EmbeddedWriteOptions,\n  EmbeddingMetaRegistryLike,\n  EpisodicMemoryStoreExt,\n  InsightListOptions as InsightStoreListOptions,\n  InsightMemoryStoreExt,\n  InsightSearchStoreOptions,\n  MemoryStoreAdapter,\n  PendingConflictInputLike,\n  PendingConflictRowLike,\n  SemanticMemoryStoreExt,\n  SessionMemoryStoreExt,\n  SessionMessageRecord,\n} from './internal/storage-adapter.js';\nexport * from './migration/index.js';\nexport * from './search/index.js';\nexport * from './tiers/index.js';\nexport {\n  type BuildMemoryToolsOptions,\n  buildMemoryTools,\n  createBlockAppendTool,\n  createBlockReplaceTool,\n  createBlockRethinkTool,\n  createConversationSearchTool,\n  createDeepRecallTool,\n  createFactForgetTool,\n  createFactHistoryTool,\n  createFactRememberTool,\n  createFactSearchTool,\n  createFactSupersedeTool,\n  createFactValidateTool,\n  createRecallEpisodesTool,\n  type MemoryToolDeps,\n  type ScopeResolver,\n} from './tools/index.js';\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAqCA,MAAa,UAAU"}
+{"version":3,"file":"index.js","names":[],"sources":["../src/index.ts"],"sourcesContent":["/**\n * `@graphorin/memory` - seven-tier memory system for the Graphorin\n * framework (MST-13: working / session / episodic / semantic /\n * procedural / shared + the read-only insight tier from P1-1).\n *\n * Surface overview:\n *\n *  - The {@link createMemory} facade that wires every tier sub-module\n *    + the memory tools + the search reranker + the context-engine +\n *    the consolidator.\n *  - Tier sub-modules under `./tiers`: {@link WorkingMemory},\n *    {@link SessionMemory}, {@link EpisodicMemory}, {@link SemanticMemory},\n *    {@link ProceduralMemory}, {@link SharedMemory}, plus the read-only\n *    {@link InsightMemory}.\n *  - Eleven memory tools under `./tools` (plus the gated twelfth,\n *    `deep_recall`, registered only when iterative retrieval is\n *    configured): `block_append`, `block_replace`, `block_rethink`,\n *    `fact_remember`, `fact_search`, `fact_supersede`, `fact_forget`,\n *    `recall_episodes`, `conversation_search`, `fact_history` (P0-2),\n *    `fact_validate` (P1-4).\n *  - The hybrid search composition under `./search`, including the\n *    built-in {@link RRFReranker} (k=60 default) and the\n *    {@link ReRanker} contract.\n *  - The embedder migration runner under `./migration`\n *    ({@link migrateEmbedder} with three coexistence policies).\n *  - Typed errors under `./errors`.\n *\n * Forward-looking surfaces (for ergonomic typing today):\n *\n *  - {@link MemoryContextBlocks} + {@link CompileOptions} from `./context-engine`.\n *  - {@link Consolidator}, {@link ConsolidatorTriggerSpec},\n *    {@link ConsolidatorTier} from `./consolidator`.\n *\n * @packageDocumentation\n */\n\n/** Canonical version constant. Mirrors the `package.json` version. */\nexport const VERSION = '0.6.0';\n\nexport * from './conflict/index.js';\nexport {\n  BudgetExceededError,\n  buildInductionRequest,\n  CONSOLIDATOR_TIER_DEFAULTS,\n  type Consolidator,\n  type ConsolidatorBudgetSnapshot,\n  type ConsolidatorCatchupPolicy,\n  type ConsolidatorCeilings,\n  type ConsolidatorConfig,\n  type ConsolidatorLastRuns,\n  type ConsolidatorPhase,\n  type ConsolidatorStatus,\n  type ConsolidatorTier,\n  type ConsolidatorTriggerReason,\n  type ConsolidatorTriggerSpec,\n  type CreateConsolidatorOptions,\n  CustomTierMisconfiguredError,\n  checkSuccessCriteria,\n  createConsolidator,\n  createConsolidatorPlaceholder,\n  createProviderWorkflowInducer,\n  DEFAULT_INDUCTION_MAX_TOKENS,\n  INDUCTION_SYSTEM_PROMPT,\n  type InducedProcedure,\n  MAX_PROCEDURE_STEPS,\n  MAX_TRAJECTORY_STEPS_SHOWN,\n  normalizeInducedProcedure,\n  type OnBudgetExceed,\n  type ParsedTrigger,\n  type PhaseListener,\n  type PhaseOutcome,\n  ProviderNotConfiguredError,\n  parseInducedProcedure,\n  parseTriggerSpec,\n  type RegisterTriggersOptions,\n  type RegisterTriggersResult,\n  reasonFromTrigger,\n  registerConsolidatorTriggers,\n  runWorkflowInduction,\n  type SchedulerLike,\n  type Trajectory,\n  type TrajectoryStep,\n  type TriggerDeclarationLike,\n  trajectoryFromRunState,\n  type VerificationResult,\n  type WorkflowInducer,\n  type WorkflowInductionOptions,\n} from './consolidator/index.js';\nexport {\n  _getLocaleFallbackWarningsForTesting,\n  _resetLocaleFallbackWarningsForTesting,\n  type AllocationResult,\n  type AnnotatedPart,\n  type AssembledPrompt,\n  type AssembleInput,\n  type AutoCompactionDefault,\n  type AutoRecallConfig,\n  type AutoRecallStrategy,\n  type AutoRecallStrategyContext,\n  type AutoRecallTriggerResult,\n  type AutoRecallTriggers,\n  adaptTokenCounter,\n  allocateTokenBudget,\n  annotate,\n  BASE_TEMPLATE_EN_FULL,\n  BASE_TEMPLATE_EN_MINIMAL,\n  type BaseTemplateFragments,\n  buildSummarizerPrompt,\n  CLEARED_TOOL_RESULT_MARKER,\n  type ClearToolResultsOptions,\n  type ClearToolResultsOutcome,\n  CONTENT_ORIGIN_ATTR,\n  type CompactionConfig,\n  type CompactionContext,\n  type CompactionMetadataPayload,\n  type CompactionResult,\n  type CompactionSource,\n  type CompactionStrategy,\n  type CompactionSummarizer,\n  type CompactionSummaryTemplate,\n  type CompactionTriggerConfig,\n  type CompileOptions,\n  type CompileScope,\n  type ContentAnnotation,\n  type ContentOrigin,\n  type ContextEngine,\n  type ContextEngineConfig,\n  type ContextLocalePack,\n  type ContextTokenCounter,\n  clearOldToolResults,\n  composeInboundPreamble,\n  composeLayer1,\n  composeLayer2,\n  composeLayer4Skills,\n  countMessageTokens,\n  createContextEngine,\n  DEFAULT_LAYER_PRIORITY,\n  DEFAULT_PRESERVE_RECENT_TURNS,\n  DEFAULT_RESERVED_FOR_COMPACTION,\n  DEFAULT_RESERVED_FOR_RESPONSE,\n  DEFAULT_THRESHOLD_RATIO,\n  defaultLocaleHeuristicStrategy,\n  defineAutoRecallStrategy,\n  defineContextLocalePack,\n  type ExecuteCompactionInput,\n  effectiveAcceptsSensitivity,\n  enLocalePack,\n  executeCompaction,\n  gatherMemoryMetadata,\n  HEURISTIC_TOKEN_COUNTER,\n  INBOUND_SANITIZATION_PREAMBLE_EN,\n  INBOUND_TRUST_ATTR,\n  type InboundSanitizationPreamble,\n  type InboundTrust,\n  type LayerAllocation,\n  type LayerCandidate,\n  type LayerConfig,\n  type LayerId,\n  type LocaleResolverLogger,\n  type MemoryBaseMode,\n  type MemoryContextBlocks,\n  type MemoryMetadataDeps,\n  type NamedPostCompactionHook,\n  NON_INBOUND_ORIGINS,\n  type OverflowMode,\n  type PartialContextLocalePack,\n  type PartitionResult,\n  type PostCompactionHook,\n  type PostCompactionHookContext,\n  type PrivacyConfig,\n  type PrivacyDecision,\n  type PrivacyDecisionReason,\n  type PrivacyFilterContext,\n  partitionBySensitivity,\n  privacyDecide,\n  type ReanchorRecentResultsOptions,\n  type RenderedTemplate,\n  type ResolvedContextEngineConfig,\n  reanchorPersonaBlock,\n  reanchorPinnedFacts,\n  reanchorProjectRules,\n  reanchorRecentResults,\n  renderFinalSummary,\n  renderMessageText,\n  renderMetadataBlock,\n  resolveAutoCompactionDefault,\n  resolveLocalePack,\n  resolveTriggerThreshold,\n  type SkillMetadataCard,\n  SUMMARY_TEMPLATE_NAME,\n  SUMMARY_TEMPLATE_VERSION,\n  shouldFireInboundPreamble,\n  toSpanAttributes,\n  truncateToTokens,\n} from './context-engine/index.js';\nexport * from './errors/index.js';\nexport {\n  _resetConsolidatorConfigWarningForTesting,\n  type CreateMemoryOptions,\n  createMemory,\n  type Memory,\n} from './facade.js';\nexport * from './graph/index.js';\nexport type { ContextualRetrievalMode } from './internal/contextualize.js';\nexport type {\n  ConflictAuditDecision,\n  ConflictAuditInputLike,\n  ConflictAuditStage,\n  ConflictMemoryStoreExt,\n  ConsolidatorMemoryStoreExt,\n  ConsolidatorRunFinish,\n  ConsolidatorRunInput,\n  ConsolidatorStatePatch,\n  ConsolidatorStateRow,\n  DecayMemoryStoreExt,\n  DlqBatchInput,\n  DlqBatchRow,\n  EmbeddedWriteOptions,\n  EmbeddingMetaRegistryLike,\n  EpisodicMemoryStoreExt,\n  InsightListOptions as InsightStoreListOptions,\n  InsightMemoryStoreExt,\n  InsightSearchStoreOptions,\n  MemoryStoreAdapter,\n  PendingConflictInputLike,\n  PendingConflictRowLike,\n  SemanticMemoryStoreExt,\n  SessionMemoryStoreExt,\n  SessionMessageRecord,\n} from './internal/storage-adapter.js';\nexport * from './migration/index.js';\nexport * from './search/index.js';\nexport * from './tiers/index.js';\nexport {\n  type BuildMemoryToolsOptions,\n  buildMemoryTools,\n  createBlockAppendTool,\n  createBlockReplaceTool,\n  createBlockRethinkTool,\n  createConversationSearchTool,\n  createDeepRecallTool,\n  createFactForgetTool,\n  createFactHistoryTool,\n  createFactRememberTool,\n  createFactSearchTool,\n  createFactSupersedeTool,\n  createFactValidateTool,\n  createRecallEpisodesTool,\n  type MemoryToolDeps,\n  type ScopeResolver,\n} from './tools/index.js';\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAqCA,MAAa,UAAU"}

package/dist/internal/contextualize.js

@@ -1,7 +1,7 @@
 //#region src/internal/contextualize.ts
 const SITUATING_CONTEXT_SYSTEM_PROMPT = [
 	"You are a situating-context assistant for a long-running memory store.",
-	"Given one memory and any structured hints, write a single short sentence (≤ 25 words) that situates it — the entities, timeframe, and topic it concerns — so it can be retrieved later by a vaguely-worded question.",
+	"Given one memory and any structured hints, write a single short sentence (≤ 25 words) that situates it - the entities, timeframe, and topic it concerns - so it can be retrieved later by a vaguely-worded question.",
 	"Do not restate the memory verbatim and do not add facts that are not implied. Return only the sentence, no preamble."
 ].join(" ");
 /**
@@ -31,7 +31,7 @@ function buildSituatingContext(input) {
 /**
 * Late-chunking contextualizer (offline default). Prepends the
 * deterministic situating context to the canonical text; a no-op when
-* the candidate carries no structured signals. Pure — never calls a
+* the candidate carries no structured signals. Pure - never calls a
 * provider.
 *
 * @internal

package/dist/internal/contextualize.js.map

@@ -1 +1 @@
-{"version":3,"file":"contextualize.js","names":["parts: string[]","ZERO_USAGE: Usage","request: ProviderRequest","hints: string[]"],"sources":["../../src/internal/contextualize.ts"],"sourcesContent":["/**\n * Contextual retrieval (P1-3). Before a memory is embedded / FTS-indexed\n * the framework can prepend a short *situating context* (entities,\n * timeframe, topics) so a terse fact like \"moved there in March\" stays\n * findable by \"Where did Anna relocate?\". This mirrors Anthropic's\n * Contextual Retrieval, applied to both the vector embedding *and* the\n * lexical index, while the canonical `text` shown to the user / audit\n * trail is left untouched.\n *\n * Three modes:\n * - `'off'` — index the bare canonical text (pre-P1-3 behaviour).\n * - `'late-chunk'` — the **offline default**: prepend a context derived\n *   deterministically from the memory's own structured metadata. No LLM\n *   call, so the local-first write path is unchanged in cost.\n * - `'llm'` — an opt-in, **consolidator-only** enrichment: one cheap\n *   provider call writes a 1–2 sentence situating prefix. Confined to the\n *   background consolidator (never the hot write path); a failure or empty\n *   completion degrades to {@link contextualize} so a write never wedges.\n *\n * @packageDocumentation\n */\n\nimport type { Provider, ProviderRequest, Usage } from '@graphorin/core';\n\n/**\n * Contextual-retrieval mode. `'late-chunk'` is the offline default;\n * `'llm'` is the opt-in, consolidator-only enrichment. P1-3.\n *\n * @stable\n */\nexport type ContextualRetrievalMode = 'off' | 'late-chunk' | 'llm';\n\n/**\n * Structural subset of a fact / candidate consumed by the\n * contextualizers. Only **author / extraction-supplied** signals are\n * used — never framework-defaulted fields (e.g. a `validFrom` defaulted\n * to write-time) and never opaque scope ids (random uuids would only\n * add noise to the embedding). A candidate with no structured signals\n * yields an empty context, so plain `remember({ text })` writes are\n * left byte-identical.\n *\n * @internal\n */\nexport interface ContextualizeInput {\n  readonly text: string;\n  readonly subject?: string;\n  readonly predicate?: string;\n  readonly object?: string;\n  readonly tags?: ReadonlyArray<string>;\n  /** Author-set validity start (ISO-8601). Framework-defaulted values are *not* passed. */\n  readonly validFrom?: string;\n}\n\nconst SITUATING_CONTEXT_SYSTEM_PROMPT = [\n  'You are a situating-context assistant for a long-running memory store.',\n  'Given one memory and any structured hints, write a single short sentence (≤ 25 words) that situates it — the entities, timeframe, and topic it concerns — so it can be retrieved later by a vaguely-worded question.',\n  'Do not restate the memory verbatim and do not add facts that are not implied. Return only the sentence, no preamble.',\n].join(' ');\n\n/**\n * Build the deterministic situating-context prefix from a candidate's\n * structured signals. Returns `''` when nothing useful is available so\n * the caller can short-circuit to the canonical text.\n *\n * @internal\n */\nexport function buildSituatingContext(input: ContextualizeInput): string {\n  const parts: string[] = [];\n  const subject = trimToUndefined(input.subject);\n  const predicate = trimToUndefined(input.predicate);\n  const object = trimToUndefined(input.object);\n  if (subject !== undefined && predicate !== undefined && object !== undefined) {\n    parts.push(`${subject} ${predicate} ${object}`);\n  } else {\n    if (subject !== undefined) parts.push(subject);\n    if (object !== undefined) parts.push(object);\n  }\n  const validFrom = trimToUndefined(input.validFrom);\n  if (validFrom !== undefined) {\n    parts.push(`as of ${validFrom.length >= 10 ? validFrom.slice(0, 10) : validFrom}`);\n  }\n  const tags = (input.tags ?? []).map((t) => t.trim()).filter((t) => t.length > 0);\n  if (tags.length > 0) {\n    parts.push(`topics: ${tags.join(', ')}`);\n  }\n  if (parts.length === 0) return '';\n  return `[Context: ${parts.join('; ')}]`;\n}\n\n/**\n * Late-chunking contextualizer (offline default). Prepends the\n * deterministic situating context to the canonical text; a no-op when\n * the candidate carries no structured signals. Pure — never calls a\n * provider.\n *\n * @internal\n */\nexport function contextualize(input: ContextualizeInput): string {\n  const ctx = buildSituatingContext(input);\n  return ctx === '' ? input.text : `${ctx}\\n${input.text}`;\n}\n\nconst ZERO_USAGE: Usage = Object.freeze({\n  promptTokens: 0,\n  completionTokens: 0,\n  totalTokens: 0,\n});\n\n/** Result of the LLM-context enrichment — the index text plus call usage for budgeting. */\nexport interface ContextualizeLlmResult {\n  readonly indexText: string;\n  readonly usage: Usage;\n}\n\n/**\n * LLM-context contextualizer (opt-in, consolidator-only). Spends one\n * cheap provider call to write a situating prefix, then prepends it to\n * the canonical text. Resilient by design: an empty completion or a\n * provider error degrades to {@link contextualize} (deterministic\n * late-chunk) so the enrichment can never wedge a write. Returns the\n * usage so the caller can record it against the budget.\n *\n * @internal\n */\nexport async function contextualizeWithLlm(\n  input: ContextualizeInput,\n  provider: Provider,\n  opts: { readonly signal?: AbortSignal } = {},\n): Promise<ContextualizeLlmResult> {\n  const request: ProviderRequest = {\n    messages: [{ role: 'user', content: buildSituatingUserPrompt(input) }],\n    systemMessage: SITUATING_CONTEXT_SYSTEM_PROMPT,\n    temperature: 0,\n    // MCON-14: per-call output cap — a one-sentence situating prefix.\n    maxTokens: 256,\n    ...(opts.signal !== undefined ? { signal: opts.signal } : {}),\n  };\n  try {\n    const response = await provider.generate(request);\n    const prefix = (response.text ?? '').trim();\n    if (prefix.length === 0) {\n      return { indexText: contextualize(input), usage: response.usage };\n    }\n    return { indexText: `${prefix}\\n${input.text}`, usage: response.usage };\n  } catch {\n    // Contextualization is an enhancement, not a correctness requirement —\n    // a provider failure must never wedge the underlying write. Fall back\n    // to the deterministic late-chunk prefix at zero cost.\n    return { indexText: contextualize(input), usage: ZERO_USAGE };\n  }\n}\n\nfunction buildSituatingUserPrompt(input: ContextualizeInput): string {\n  const hints: string[] = [];\n  const subject = trimToUndefined(input.subject);\n  const predicate = trimToUndefined(input.predicate);\n  const object = trimToUndefined(input.object);\n  if (subject !== undefined) hints.push(`subject=${subject}`);\n  if (predicate !== undefined) hints.push(`predicate=${predicate}`);\n  if (object !== undefined) hints.push(`object=${object}`);\n  const tags = (input.tags ?? []).map((t) => t.trim()).filter((t) => t.length > 0);\n  if (tags.length > 0) hints.push(`tags=${tags.join(', ')}`);\n  const validFrom = trimToUndefined(input.validFrom);\n  if (validFrom !== undefined) hints.push(`validFrom=${validFrom}`);\n  const hintLine = hints.length > 0 ? `\\nStructured hints: ${hints.join('; ')}` : '';\n  return `Memory: ${input.text}${hintLine}`;\n}\n\nfunction trimToUndefined(value: string | undefined): string | undefined {\n  if (value === undefined) return undefined;\n  const trimmed = value.trim();\n  return trimmed.length === 0 ? undefined : trimmed;\n}\n"],"mappings":";AAqDA,MAAM,kCAAkC;CACtC;CACA;CACA;CACD,CAAC,KAAK,IAAI;;;;;;;;AASX,SAAgB,sBAAsB,OAAmC;CACvE,MAAMA,QAAkB,EAAE;CAC1B,MAAM,UAAU,gBAAgB,MAAM,QAAQ;CAC9C,MAAM,YAAY,gBAAgB,MAAM,UAAU;CAClD,MAAM,SAAS,gBAAgB,MAAM,OAAO;AAC5C,KAAI,YAAY,UAAa,cAAc,UAAa,WAAW,OACjE,OAAM,KAAK,GAAG,QAAQ,GAAG,UAAU,GAAG,SAAS;MAC1C;AACL,MAAI,YAAY,OAAW,OAAM,KAAK,QAAQ;AAC9C,MAAI,WAAW,OAAW,OAAM,KAAK,OAAO;;CAE9C,MAAM,YAAY,gBAAgB,MAAM,UAAU;AAClD,KAAI,cAAc,OAChB,OAAM,KAAK,SAAS,UAAU,UAAU,KAAK,UAAU,MAAM,GAAG,GAAG,GAAG,YAAY;CAEpF,MAAM,QAAQ,MAAM,QAAQ,EAAE,EAAE,KAAK,MAAM,EAAE,MAAM,CAAC,CAAC,QAAQ,MAAM,EAAE,SAAS,EAAE;AAChF,KAAI,KAAK,SAAS,EAChB,OAAM,KAAK,WAAW,KAAK,KAAK,KAAK,GAAG;AAE1C,KAAI,MAAM,WAAW,EAAG,QAAO;AAC/B,QAAO,aAAa,MAAM,KAAK,KAAK,CAAC;;;;;;;;;;AAWvC,SAAgB,cAAc,OAAmC;CAC/D,MAAM,MAAM,sBAAsB,MAAM;AACxC,QAAO,QAAQ,KAAK,MAAM,OAAO,GAAG,IAAI,IAAI,MAAM;;AAGpD,MAAMC,aAAoB,OAAO,OAAO;CACtC,cAAc;CACd,kBAAkB;CAClB,aAAa;CACd,CAAC;;;;;;;;;;;AAkBF,eAAsB,qBACpB,OACA,UACA,OAA0C,EAAE,EACX;CACjC,MAAMC,UAA2B;EAC/B,UAAU,CAAC;GAAE,MAAM;GAAQ,SAAS,yBAAyB,MAAM;GAAE,CAAC;EACtE,eAAe;EACf,aAAa;EAEb,WAAW;EACX,GAAI,KAAK,WAAW,SAAY,EAAE,QAAQ,KAAK,QAAQ,GAAG,EAAE;EAC7D;AACD,KAAI;EACF,MAAM,WAAW,MAAM,SAAS,SAAS,QAAQ;EACjD,MAAM,UAAU,SAAS,QAAQ,IAAI,MAAM;AAC3C,MAAI,OAAO,WAAW,EACpB,QAAO;GAAE,WAAW,cAAc,MAAM;GAAE,OAAO,SAAS;GAAO;AAEnE,SAAO;GAAE,WAAW,GAAG,OAAO,IAAI,MAAM;GAAQ,OAAO,SAAS;GAAO;SACjE;AAIN,SAAO;GAAE,WAAW,cAAc,MAAM;GAAE,OAAO;GAAY;;;AAIjE,SAAS,yBAAyB,OAAmC;CACnE,MAAMC,QAAkB,EAAE;CAC1B,MAAM,UAAU,gBAAgB,MAAM,QAAQ;CAC9C,MAAM,YAAY,gBAAgB,MAAM,UAAU;CAClD,MAAM,SAAS,gBAAgB,MAAM,OAAO;AAC5C,KAAI,YAAY,OAAW,OAAM,KAAK,WAAW,UAAU;AAC3D,KAAI,cAAc,OAAW,OAAM,KAAK,aAAa,YAAY;AACjE,KAAI,WAAW,OAAW,OAAM,KAAK,UAAU,SAAS;CACxD,MAAM,QAAQ,MAAM,QAAQ,EAAE,EAAE,KAAK,MAAM,EAAE,MAAM,CAAC,CAAC,QAAQ,MAAM,EAAE,SAAS,EAAE;AAChF,KAAI,KAAK,SAAS,EAAG,OAAM,KAAK,QAAQ,KAAK,KAAK,KAAK,GAAG;CAC1D,MAAM,YAAY,gBAAgB,MAAM,UAAU;AAClD,KAAI,cAAc,OAAW,OAAM,KAAK,aAAa,YAAY;CACjE,MAAM,WAAW,MAAM,SAAS,IAAI,uBAAuB,MAAM,KAAK,KAAK,KAAK;AAChF,QAAO,WAAW,MAAM,OAAO;;AAGjC,SAAS,gBAAgB,OAA+C;AACtE,KAAI,UAAU,OAAW,QAAO;CAChC,MAAM,UAAU,MAAM,MAAM;AAC5B,QAAO,QAAQ,WAAW,IAAI,SAAY"}
+{"version":3,"file":"contextualize.js","names":["parts: string[]","ZERO_USAGE: Usage","request: ProviderRequest","hints: string[]"],"sources":["../../src/internal/contextualize.ts"],"sourcesContent":["/**\n * Contextual retrieval (P1-3). Before a memory is embedded / FTS-indexed\n * the framework can prepend a short *situating context* (entities,\n * timeframe, topics) so a terse fact like \"moved there in March\" stays\n * findable by \"Where did Anna relocate?\". This mirrors Anthropic's\n * Contextual Retrieval, applied to both the vector embedding *and* the\n * lexical index, while the canonical `text` shown to the user / audit\n * trail is left untouched.\n *\n * Three modes:\n * - `'off'` - index the bare canonical text (pre-P1-3 behaviour).\n * - `'late-chunk'` - the **offline default**: prepend a context derived\n *   deterministically from the memory's own structured metadata. No LLM\n *   call, so the local-first write path is unchanged in cost.\n * - `'llm'` - an opt-in, **consolidator-only** enrichment: one cheap\n *   provider call writes a 1-2 sentence situating prefix. Confined to the\n *   background consolidator (never the hot write path); a failure or empty\n *   completion degrades to {@link contextualize} so a write never wedges.\n *\n * @packageDocumentation\n */\n\nimport type { Provider, ProviderRequest, Usage } from '@graphorin/core';\n\n/**\n * Contextual-retrieval mode. `'late-chunk'` is the offline default;\n * `'llm'` is the opt-in, consolidator-only enrichment. P1-3.\n *\n * @stable\n */\nexport type ContextualRetrievalMode = 'off' | 'late-chunk' | 'llm';\n\n/**\n * Structural subset of a fact / candidate consumed by the\n * contextualizers. Only **author / extraction-supplied** signals are\n * used - never framework-defaulted fields (e.g. a `validFrom` defaulted\n * to write-time) and never opaque scope ids (random uuids would only\n * add noise to the embedding). A candidate with no structured signals\n * yields an empty context, so plain `remember({ text })` writes are\n * left byte-identical.\n *\n * @internal\n */\nexport interface ContextualizeInput {\n  readonly text: string;\n  readonly subject?: string;\n  readonly predicate?: string;\n  readonly object?: string;\n  readonly tags?: ReadonlyArray<string>;\n  /** Author-set validity start (ISO-8601). Framework-defaulted values are *not* passed. */\n  readonly validFrom?: string;\n}\n\nconst SITUATING_CONTEXT_SYSTEM_PROMPT = [\n  'You are a situating-context assistant for a long-running memory store.',\n  'Given one memory and any structured hints, write a single short sentence (≤ 25 words) that situates it - the entities, timeframe, and topic it concerns - so it can be retrieved later by a vaguely-worded question.',\n  'Do not restate the memory verbatim and do not add facts that are not implied. Return only the sentence, no preamble.',\n].join(' ');\n\n/**\n * Build the deterministic situating-context prefix from a candidate's\n * structured signals. Returns `''` when nothing useful is available so\n * the caller can short-circuit to the canonical text.\n *\n * @internal\n */\nexport function buildSituatingContext(input: ContextualizeInput): string {\n  const parts: string[] = [];\n  const subject = trimToUndefined(input.subject);\n  const predicate = trimToUndefined(input.predicate);\n  const object = trimToUndefined(input.object);\n  if (subject !== undefined && predicate !== undefined && object !== undefined) {\n    parts.push(`${subject} ${predicate} ${object}`);\n  } else {\n    if (subject !== undefined) parts.push(subject);\n    if (object !== undefined) parts.push(object);\n  }\n  const validFrom = trimToUndefined(input.validFrom);\n  if (validFrom !== undefined) {\n    parts.push(`as of ${validFrom.length >= 10 ? validFrom.slice(0, 10) : validFrom}`);\n  }\n  const tags = (input.tags ?? []).map((t) => t.trim()).filter((t) => t.length > 0);\n  if (tags.length > 0) {\n    parts.push(`topics: ${tags.join(', ')}`);\n  }\n  if (parts.length === 0) return '';\n  return `[Context: ${parts.join('; ')}]`;\n}\n\n/**\n * Late-chunking contextualizer (offline default). Prepends the\n * deterministic situating context to the canonical text; a no-op when\n * the candidate carries no structured signals. Pure - never calls a\n * provider.\n *\n * @internal\n */\nexport function contextualize(input: ContextualizeInput): string {\n  const ctx = buildSituatingContext(input);\n  return ctx === '' ? input.text : `${ctx}\\n${input.text}`;\n}\n\nconst ZERO_USAGE: Usage = Object.freeze({\n  promptTokens: 0,\n  completionTokens: 0,\n  totalTokens: 0,\n});\n\n/** Result of the LLM-context enrichment - the index text plus call usage for budgeting. */\nexport interface ContextualizeLlmResult {\n  readonly indexText: string;\n  readonly usage: Usage;\n}\n\n/**\n * LLM-context contextualizer (opt-in, consolidator-only). Spends one\n * cheap provider call to write a situating prefix, then prepends it to\n * the canonical text. Resilient by design: an empty completion or a\n * provider error degrades to {@link contextualize} (deterministic\n * late-chunk) so the enrichment can never wedge a write. Returns the\n * usage so the caller can record it against the budget.\n *\n * @internal\n */\nexport async function contextualizeWithLlm(\n  input: ContextualizeInput,\n  provider: Provider,\n  opts: { readonly signal?: AbortSignal } = {},\n): Promise<ContextualizeLlmResult> {\n  const request: ProviderRequest = {\n    messages: [{ role: 'user', content: buildSituatingUserPrompt(input) }],\n    systemMessage: SITUATING_CONTEXT_SYSTEM_PROMPT,\n    temperature: 0,\n    // MCON-14: per-call output cap - a one-sentence situating prefix.\n    maxTokens: 256,\n    ...(opts.signal !== undefined ? { signal: opts.signal } : {}),\n  };\n  try {\n    const response = await provider.generate(request);\n    const prefix = (response.text ?? '').trim();\n    if (prefix.length === 0) {\n      return { indexText: contextualize(input), usage: response.usage };\n    }\n    return { indexText: `${prefix}\\n${input.text}`, usage: response.usage };\n  } catch {\n    // Contextualization is an enhancement, not a correctness requirement -\n    // a provider failure must never wedge the underlying write. Fall back\n    // to the deterministic late-chunk prefix at zero cost.\n    return { indexText: contextualize(input), usage: ZERO_USAGE };\n  }\n}\n\nfunction buildSituatingUserPrompt(input: ContextualizeInput): string {\n  const hints: string[] = [];\n  const subject = trimToUndefined(input.subject);\n  const predicate = trimToUndefined(input.predicate);\n  const object = trimToUndefined(input.object);\n  if (subject !== undefined) hints.push(`subject=${subject}`);\n  if (predicate !== undefined) hints.push(`predicate=${predicate}`);\n  if (object !== undefined) hints.push(`object=${object}`);\n  const tags = (input.tags ?? []).map((t) => t.trim()).filter((t) => t.length > 0);\n  if (tags.length > 0) hints.push(`tags=${tags.join(', ')}`);\n  const validFrom = trimToUndefined(input.validFrom);\n  if (validFrom !== undefined) hints.push(`validFrom=${validFrom}`);\n  const hintLine = hints.length > 0 ? `\\nStructured hints: ${hints.join('; ')}` : '';\n  return `Memory: ${input.text}${hintLine}`;\n}\n\nfunction trimToUndefined(value: string | undefined): string | undefined {\n  if (value === undefined) return undefined;\n  const trimmed = value.trim();\n  return trimmed.length === 0 ? undefined : trimmed;\n}\n"],"mappings":";AAqDA,MAAM,kCAAkC;CACtC;CACA;CACA;CACD,CAAC,KAAK,IAAI;;;;;;;;AASX,SAAgB,sBAAsB,OAAmC;CACvE,MAAMA,QAAkB,EAAE;CAC1B,MAAM,UAAU,gBAAgB,MAAM,QAAQ;CAC9C,MAAM,YAAY,gBAAgB,MAAM,UAAU;CAClD,MAAM,SAAS,gBAAgB,MAAM,OAAO;AAC5C,KAAI,YAAY,UAAa,cAAc,UAAa,WAAW,OACjE,OAAM,KAAK,GAAG,QAAQ,GAAG,UAAU,GAAG,SAAS;MAC1C;AACL,MAAI,YAAY,OAAW,OAAM,KAAK,QAAQ;AAC9C,MAAI,WAAW,OAAW,OAAM,KAAK,OAAO;;CAE9C,MAAM,YAAY,gBAAgB,MAAM,UAAU;AAClD,KAAI,cAAc,OAChB,OAAM,KAAK,SAAS,UAAU,UAAU,KAAK,UAAU,MAAM,GAAG,GAAG,GAAG,YAAY;CAEpF,MAAM,QAAQ,MAAM,QAAQ,EAAE,EAAE,KAAK,MAAM,EAAE,MAAM,CAAC,CAAC,QAAQ,MAAM,EAAE,SAAS,EAAE;AAChF,KAAI,KAAK,SAAS,EAChB,OAAM,KAAK,WAAW,KAAK,KAAK,KAAK,GAAG;AAE1C,KAAI,MAAM,WAAW,EAAG,QAAO;AAC/B,QAAO,aAAa,MAAM,KAAK,KAAK,CAAC;;;;;;;;;;AAWvC,SAAgB,cAAc,OAAmC;CAC/D,MAAM,MAAM,sBAAsB,MAAM;AACxC,QAAO,QAAQ,KAAK,MAAM,OAAO,GAAG,IAAI,IAAI,MAAM;;AAGpD,MAAMC,aAAoB,OAAO,OAAO;CACtC,cAAc;CACd,kBAAkB;CAClB,aAAa;CACd,CAAC;;;;;;;;;;;AAkBF,eAAsB,qBACpB,OACA,UACA,OAA0C,EAAE,EACX;CACjC,MAAMC,UAA2B;EAC/B,UAAU,CAAC;GAAE,MAAM;GAAQ,SAAS,yBAAyB,MAAM;GAAE,CAAC;EACtE,eAAe;EACf,aAAa;EAEb,WAAW;EACX,GAAI,KAAK,WAAW,SAAY,EAAE,QAAQ,KAAK,QAAQ,GAAG,EAAE;EAC7D;AACD,KAAI;EACF,MAAM,WAAW,MAAM,SAAS,SAAS,QAAQ;EACjD,MAAM,UAAU,SAAS,QAAQ,IAAI,MAAM;AAC3C,MAAI,OAAO,WAAW,EACpB,QAAO;GAAE,WAAW,cAAc,MAAM;GAAE,OAAO,SAAS;GAAO;AAEnE,SAAO;GAAE,WAAW,GAAG,OAAO,IAAI,MAAM;GAAQ,OAAO,SAAS;GAAO;SACjE;AAIN,SAAO;GAAE,WAAW,cAAc,MAAM;GAAE,OAAO;GAAY;;;AAIjE,SAAS,yBAAyB,OAAmC;CACnE,MAAMC,QAAkB,EAAE;CAC1B,MAAM,UAAU,gBAAgB,MAAM,QAAQ;CAC9C,MAAM,YAAY,gBAAgB,MAAM,UAAU;CAClD,MAAM,SAAS,gBAAgB,MAAM,OAAO;AAC5C,KAAI,YAAY,OAAW,OAAM,KAAK,WAAW,UAAU;AAC3D,KAAI,cAAc,OAAW,OAAM,KAAK,aAAa,YAAY;AACjE,KAAI,WAAW,OAAW,OAAM,KAAK,UAAU,SAAS;CACxD,MAAM,QAAQ,MAAM,QAAQ,EAAE,EAAE,KAAK,MAAM,EAAE,MAAM,CAAC,CAAC,QAAQ,MAAM,EAAE,SAAS,EAAE;AAChF,KAAI,KAAK,SAAS,EAAG,OAAM,KAAK,QAAQ,KAAK,KAAK,KAAK,GAAG;CAC1D,MAAM,YAAY,gBAAgB,MAAM,UAAU;AAClD,KAAI,cAAc,OAAW,OAAM,KAAK,aAAa,YAAY;CACjE,MAAM,WAAW,MAAM,SAAS,IAAI,uBAAuB,MAAM,KAAK,KAAK,KAAK;AAChF,QAAO,WAAW,MAAM,OAAO;;AAGjC,SAAS,gBAAgB,OAA+C;AACtE,KAAI,UAAU,OAAW,QAAO;CAChC,MAAM,UAAU,MAAM,MAAM;AAC5B,QAAO,QAAQ,WAAW,IAAI,SAAY"}

package/dist/internal/embedder-binding.js

@@ -27,7 +27,7 @@ function inferModelName(id) {
 /**
 * Register the supplied embedder with the storage layer's
 * `embedding_meta` registry. Returns the canonical id surfaced to the
-* memory writers. Idempotent — a registry that already knows the id
+* memory writers. Idempotent - a registry that already knows the id
 * with a matching `configHash` returns the existing row.
 *
 * @internal

package/dist/internal/embedder-binding.js.map

@@ -1 +1 @@
-{"version":3,"file":"embedder-binding.js","names":[],"sources":["../../src/internal/embedder-binding.ts"],"sourcesContent":["import type { EmbedderProvider } from '@graphorin/core';\nimport type { EmbeddingMetaRegistryLike } from './storage-adapter.js';\n\n/**\n * Infer the canonical adapter family from the embedder id. The\n * canonical id format is `'<adapter>:<model>@<dim>'`; we slice the\n * adapter name off the front so the registry can index by family\n * without needing the embedder to expose an extra property.\n *\n * @internal\n */\nexport function inferAdapterKind(id: string): string {\n  const colonIndex = id.indexOf(':');\n  if (colonIndex < 0) return 'custom';\n  return id.slice(0, colonIndex);\n}\n\n/**\n * Infer the model id portion of a canonical embedder id.\n *\n * @internal\n */\nexport function inferModelName(id: string): string {\n  const colonIndex = id.indexOf(':');\n  const atIndex = id.lastIndexOf('@');\n  if (colonIndex < 0) return id;\n  if (atIndex < 0 || atIndex < colonIndex) return id.slice(colonIndex + 1);\n  return id.slice(colonIndex + 1, atIndex);\n}\n\n/**\n * Register the supplied embedder with the storage layer's\n * `embedding_meta` registry. Returns the canonical id surfaced to the\n * memory writers. Idempotent — a registry that already knows the id\n * with a matching `configHash` returns the existing row.\n *\n * @internal\n */\nexport function bindEmbedder(\n  embedder: EmbedderProvider,\n  registry: EmbeddingMetaRegistryLike,\n): string {\n  const id = embedder.id();\n  registry.registerOrReturn({\n    id,\n    embedderKind: inferAdapterKind(id),\n    model: inferModelName(id),\n    dim: embedder.dim(),\n    configHash: embedder.configHash(),\n    distanceMetric: 'cosine',\n  });\n  return id;\n}\n"],"mappings":";;;;;;;;;AAWA,SAAgB,iBAAiB,IAAoB;CACnD,MAAM,aAAa,GAAG,QAAQ,IAAI;AAClC,KAAI,aAAa,EAAG,QAAO;AAC3B,QAAO,GAAG,MAAM,GAAG,WAAW;;;;;;;AAQhC,SAAgB,eAAe,IAAoB;CACjD,MAAM,aAAa,GAAG,QAAQ,IAAI;CAClC,MAAM,UAAU,GAAG,YAAY,IAAI;AACnC,KAAI,aAAa,EAAG,QAAO;AAC3B,KAAI,UAAU,KAAK,UAAU,WAAY,QAAO,GAAG,MAAM,aAAa,EAAE;AACxE,QAAO,GAAG,MAAM,aAAa,GAAG,QAAQ;;;;;;;;;;AAW1C,SAAgB,aACd,UACA,UACQ;CACR,MAAM,KAAK,SAAS,IAAI;AACxB,UAAS,iBAAiB;EACxB;EACA,cAAc,iBAAiB,GAAG;EAClC,OAAO,eAAe,GAAG;EACzB,KAAK,SAAS,KAAK;EACnB,YAAY,SAAS,YAAY;EACjC,gBAAgB;EACjB,CAAC;AACF,QAAO"}
+{"version":3,"file":"embedder-binding.js","names":[],"sources":["../../src/internal/embedder-binding.ts"],"sourcesContent":["import type { EmbedderProvider } from '@graphorin/core';\nimport type { EmbeddingMetaRegistryLike } from './storage-adapter.js';\n\n/**\n * Infer the canonical adapter family from the embedder id. The\n * canonical id format is `'<adapter>:<model>@<dim>'`; we slice the\n * adapter name off the front so the registry can index by family\n * without needing the embedder to expose an extra property.\n *\n * @internal\n */\nexport function inferAdapterKind(id: string): string {\n  const colonIndex = id.indexOf(':');\n  if (colonIndex < 0) return 'custom';\n  return id.slice(0, colonIndex);\n}\n\n/**\n * Infer the model id portion of a canonical embedder id.\n *\n * @internal\n */\nexport function inferModelName(id: string): string {\n  const colonIndex = id.indexOf(':');\n  const atIndex = id.lastIndexOf('@');\n  if (colonIndex < 0) return id;\n  if (atIndex < 0 || atIndex < colonIndex) return id.slice(colonIndex + 1);\n  return id.slice(colonIndex + 1, atIndex);\n}\n\n/**\n * Register the supplied embedder with the storage layer's\n * `embedding_meta` registry. Returns the canonical id surfaced to the\n * memory writers. Idempotent - a registry that already knows the id\n * with a matching `configHash` returns the existing row.\n *\n * @internal\n */\nexport function bindEmbedder(\n  embedder: EmbedderProvider,\n  registry: EmbeddingMetaRegistryLike,\n): string {\n  const id = embedder.id();\n  registry.registerOrReturn({\n    id,\n    embedderKind: inferAdapterKind(id),\n    model: inferModelName(id),\n    dim: embedder.dim(),\n    configHash: embedder.configHash(),\n    distanceMetric: 'cosine',\n  });\n  return id;\n}\n"],"mappings":";;;;;;;;;AAWA,SAAgB,iBAAiB,IAAoB;CACnD,MAAM,aAAa,GAAG,QAAQ,IAAI;AAClC,KAAI,aAAa,EAAG,QAAO;AAC3B,QAAO,GAAG,MAAM,GAAG,WAAW;;;;;;;AAQhC,SAAgB,eAAe,IAAoB;CACjD,MAAM,aAAa,GAAG,QAAQ,IAAI;CAClC,MAAM,UAAU,GAAG,YAAY,IAAI;AACnC,KAAI,aAAa,EAAG,QAAO;AAC3B,KAAI,UAAU,KAAK,UAAU,WAAY,QAAO,GAAG,MAAM,aAAa,EAAE;AACxE,QAAO,GAAG,MAAM,aAAa,GAAG,QAAQ;;;;;;;;;;AAW1C,SAAgB,aACd,UACA,UACQ;CACR,MAAM,KAAK,SAAS,IAAI;AACxB,UAAS,iBAAiB;EACxB;EACA,cAAc,iBAAiB,GAAG;EAClC,OAAO,eAAe,GAAG;EACzB,KAAK,SAAS,KAAK;EACnB,YAAY,SAAS,YAAY;EACjC,gBAAgB;EACjB,CAAC;AACF,QAAO"}

package/dist/internal/id.js

@@ -7,7 +7,7 @@ import { randomBytes } from "node:crypto";
 * millisecond), and a 36-bit crypto-quality random suffix (ties the id
 * to the host so different runs do not collide either).
 *
-* The format is intentionally NOT a UUID — UUIDs are 16 bytes once
+* The format is intentionally NOT a UUID - UUIDs are 16 bytes once
 * decoded; these ids are 18 chars on average which is what the
 * `audit.db` hash chain (Phase 03b) was sized for.
 *

package/dist/internal/id.js.map

@@ -1 +1 @@
-{"version":3,"file":"id.js","names":[],"sources":["../../src/internal/id.ts"],"sourcesContent":["/**\n * Stable id generator. Combines `Date.now()` (millisecond resolution),\n * a per-process monotonic counter (resists collision inside the same\n * millisecond), and a 36-bit crypto-quality random suffix (ties the id\n * to the host so different runs do not collide either).\n *\n * The format is intentionally NOT a UUID — UUIDs are 16 bytes once\n * decoded; these ids are 18 chars on average which is what the\n * `audit.db` hash chain (Phase 03b) was sized for.\n *\n * @stable\n */\nimport { randomBytes } from 'node:crypto';\n\nlet counter = 0;\n\nexport function newMemoryId(prefix: string): string {\n  counter = (counter + 1) & 0xffff;\n  const time = Date.now().toString(36);\n  const c = counter.toString(36).padStart(3, '0');\n  const rand = randomBytes(4).toString('hex');\n  return `${prefix}_${time}${c}${rand}`;\n}\n"],"mappings":";;;;;;;;;;;;;;;AAcA,IAAI,UAAU;AAEd,SAAgB,YAAY,QAAwB;AAClD,WAAW,UAAU,IAAK;AAI1B,QAAO,GAAG,OAAO,GAHJ,KAAK,KAAK,CAAC,SAAS,GAAG,GAC1B,QAAQ,SAAS,GAAG,CAAC,SAAS,GAAG,IAAI,GAClC,YAAY,EAAE,CAAC,SAAS,MAAM"}
+{"version":3,"file":"id.js","names":[],"sources":["../../src/internal/id.ts"],"sourcesContent":["/**\n * Stable id generator. Combines `Date.now()` (millisecond resolution),\n * a per-process monotonic counter (resists collision inside the same\n * millisecond), and a 36-bit crypto-quality random suffix (ties the id\n * to the host so different runs do not collide either).\n *\n * The format is intentionally NOT a UUID - UUIDs are 16 bytes once\n * decoded; these ids are 18 chars on average which is what the\n * `audit.db` hash chain (Phase 03b) was sized for.\n *\n * @stable\n */\nimport { randomBytes } from 'node:crypto';\n\nlet counter = 0;\n\nexport function newMemoryId(prefix: string): string {\n  counter = (counter + 1) & 0xffff;\n  const time = Date.now().toString(36);\n  const c = counter.toString(36).padStart(3, '0');\n  const rand = randomBytes(4).toString('hex');\n  return `${prefix}_${time}${c}${rand}`;\n}\n"],"mappings":";;;;;;;;;;;;;;;AAcA,IAAI,UAAU;AAEd,SAAgB,YAAY,QAAwB;AAClD,WAAW,UAAU,IAAK;AAI1B,QAAO,GAAG,OAAO,GAHJ,KAAK,KAAK,CAAC,SAAS,GAAG,GAC1B,QAAQ,SAAS,GAAG,CAAC,SAAS,GAAG,IAAI,GAClC,YAAY,EAAE,CAAC,SAAS,MAAM"}

package/dist/internal/injection-heuristics.js

@@ -1,5 +1,26 @@
+import { normalizeForMatching } from "@graphorin/security/guardrails";
+
 //#region src/internal/injection-heuristics.ts
 /**
+* Offline heuristics (no provider calls) that flag obvious memory-injection
+* markers in candidate memory text (P1-4). Long-lived memory is the prime
+* target for poisoning: an injected instruction planted today fires weeks
+* later when semantically recalled, defeating session-scoped prompt-injection
+* defenses (MINJA arXiv:2601.05504; MemoryGraft arXiv:2512.16962). Flagged
+* candidates are quarantined at write time so they never enter
+* action-driving recall until a human validates them.
+*
+* The detector is deliberately *high-precision*: every rule targets
+* injection-characteristic structure (imperative override of prior
+* instructions, role-markup smuggling, secrecy/exfiltration directives), not
+* lone common verbs, so benign first-party facts ("I always run in the
+* mornings", "lives in Lisbon") are not quarantined. It is locale-aware via
+* pluggable {@link InjectionRule} lists and performs no network or model
+* calls - pure regex over the candidate string.
+*
+* @packageDocumentation
+*/
+/**
 * Default English injection-marker rules. High-precision: each requires
 * injection-characteristic structure so benign facts do not trip them.
 *
@@ -48,10 +69,12 @@ const DEFAULT_INJECTION_RULES = Object.freeze([
 */
 function detectMemoryInjection(text, options = {}) {
 	const rules = options.rules ?? DEFAULT_INJECTION_RULES;
+	const normalized = normalizeForMatching(text);
+	const scanBoth = (pattern) => pattern.test(text) || normalized !== text && pattern.test(normalized);
 	const markers = [];
-	for (const rule of rules) if (rule.pattern.test(text)) markers.push(rule.label);
+	for (const rule of rules) if (scanBoth(rule.pattern)) markers.push(rule.label);
 	if (options.extraRules !== void 0) {
-		for (const rule of options.extraRules) if (!markers.includes(rule.label) && rule.pattern.test(text)) markers.push(rule.label);
+		for (const rule of options.extraRules) if (!markers.includes(rule.label) && scanBoth(rule.pattern)) markers.push(rule.label);
 	}
 	return {
 		flagged: markers.length > 0,

package/dist/internal/injection-heuristics.js.map

@@ -1 +1 @@
-{"version":3,"file":"injection-heuristics.js","names":["DEFAULT_INJECTION_RULES: ReadonlyArray<InjectionRule>","markers: string[]"],"sources":["../../src/internal/injection-heuristics.ts"],"sourcesContent":["/**\n * Offline, dependency-free heuristics that flag obvious memory-injection\n * markers in candidate memory text (P1-4). Long-lived memory is the prime\n * target for poisoning: an injected instruction planted today fires weeks\n * later when semantically recalled, defeating session-scoped prompt-injection\n * defenses (MINJA arXiv:2601.05504; MemoryGraft arXiv:2512.16962). Flagged\n * candidates are quarantined at write time so they never enter\n * action-driving recall until a human validates them.\n *\n * The detector is deliberately *high-precision*: every rule targets\n * injection-characteristic structure (imperative override of prior\n * instructions, role-markup smuggling, secrecy/exfiltration directives), not\n * lone common verbs, so benign first-party facts (\"I always run in the\n * mornings\", \"lives in Lisbon\") are not quarantined. It is locale-aware via\n * pluggable {@link InjectionRule} lists and performs no network or model\n * calls — pure regex over the candidate string.\n *\n * @packageDocumentation\n */\n\n/**\n * A single named injection-detection rule. The `label` is a stable,\n * audit-friendly identifier surfaced in {@link InjectionScan.markers};\n * the `pattern` MUST NOT carry the `g` flag (stateful `RegExp.test`).\n *\n * @stable\n */\nexport interface InjectionRule {\n  readonly label: string;\n  readonly pattern: RegExp;\n}\n\n/**\n * Result of scanning a candidate string. `flagged` is `true` when at\n * least one rule matched; `markers` lists the matched rule labels\n * (deduped, in rule order) for the audit trail.\n *\n * @stable\n */\nexport interface InjectionScan {\n  readonly flagged: boolean;\n  readonly markers: ReadonlyArray<string>;\n}\n\n/**\n * Options for {@link detectMemoryInjection}.\n *\n * @stable\n */\nexport interface InjectionHeuristicOptions {\n  /**\n   * Replace the default English rule set wholesale (advanced — for a\n   * fully custom locale). When omitted, {@link DEFAULT_INJECTION_RULES}\n   * is used.\n   */\n  readonly rules?: ReadonlyArray<InjectionRule>;\n  /**\n   * Additional locale-specific rules merged *after* the active rule set.\n   * The common way to make the detector locale-aware without discarding\n   * the English defaults.\n   */\n  readonly extraRules?: ReadonlyArray<InjectionRule>;\n}\n\n/**\n * Default English injection-marker rules. High-precision: each requires\n * injection-characteristic structure so benign facts do not trip them.\n *\n * @stable\n */\nexport const DEFAULT_INJECTION_RULES: ReadonlyArray<InjectionRule> = Object.freeze([\n  {\n    label: 'ignore-previous-instructions',\n    pattern:\n      /\\bignore\\s+(?:all\\s+|any\\s+)?(?:previous|prior|earlier|the\\s+above|preceding)\\s+(?:instructions?|prompts?|messages?|commands?|directions?|context|rules?)\\b/i,\n  },\n  {\n    label: 'disregard-instructions',\n    pattern:\n      /\\bdisregard\\s+(?:all\\s+|any\\s+|the\\s+)?(?:previous|prior|earlier|above|preceding|prior\\s+)?(?:instructions?|prompts?|rules?|guidelines?|guardrails?)\\b/i,\n  },\n  {\n    label: 'override-directive',\n    pattern: /\\boverride\\s+(?:the\\s+)?(?:system|safety|security|previous|prior|default)\\b/i,\n  },\n  {\n    label: 'system-prompt-exfil',\n    pattern:\n      /\\b(?:reveal|show|print|repeat|leak|expose|dump)\\b[^.?!\\n]{0,40}\\b(?:system\\s+prompt|system\\s+message|initial\\s+instructions|hidden\\s+(?:instructions|prompt))\\b/i,\n  },\n  {\n    label: 'role-markup-injection',\n    pattern: /<\\/?(?:system|im_start|im_end|tool_call|function_call)\\b|\\[\\/?(?:INST|SYS)\\]/i,\n  },\n  {\n    label: 'secrecy-directive',\n    pattern:\n      /\\b(?:do\\s+not|don['’]?t|never)\\s+(?:tell|inform|notify|alert|mention\\s+(?:this\\s+)?to|reveal\\s+(?:this\\s+)?to)\\s+(?:the\\s+)?(?:user|human|operator|owner)\\b|\\bwithout\\s+(?:telling|informing|notifying|alerting)\\s+(?:the\\s+)?(?:user|human|operator)\\b/i,\n  },\n  {\n    label: 'exfiltration-directive',\n    pattern:\n      /\\b(?:send|forward|email|transmit|upload|post|exfiltrate|leak)\\b[^.?!\\n]{0,60}\\b(?:password|secret|api[\\s_-]?keys?|credentials?|private\\s+keys?|access\\s+tokens?|auth\\s+tokens?)\\b/i,\n  },\n  {\n    label: 'persistent-override',\n    pattern:\n      /\\bfrom\\s+now\\s+on\\b[^.?!\\n]{0,40}\\b(?:always|never|you\\s+must|ignore|disregard|do\\s+not)\\b/i,\n  },\n]);\n\n/**\n * Scan candidate memory text for obvious injection markers. Pure,\n * offline, allocation-light. Returns the matched rule labels so callers\n * can record *why* a candidate was quarantined.\n *\n * @stable\n */\nexport function detectMemoryInjection(\n  text: string,\n  options: InjectionHeuristicOptions = {},\n): InjectionScan {\n  const rules = options.rules ?? DEFAULT_INJECTION_RULES;\n  const markers: string[] = [];\n  for (const rule of rules) {\n    if (rule.pattern.test(text)) markers.push(rule.label);\n  }\n  if (options.extraRules !== undefined) {\n    for (const rule of options.extraRules) {\n      if (!markers.includes(rule.label) && rule.pattern.test(text)) markers.push(rule.label);\n    }\n  }\n  return { flagged: markers.length > 0, markers: Object.freeze(markers) };\n}\n"],"mappings":";;;;;;;AAsEA,MAAaA,0BAAwD,OAAO,OAAO;CACjF;EACE,OAAO;EACP,SACE;EACH;CACD;EACE,OAAO;EACP,SACE;EACH;CACD;EACE,OAAO;EACP,SAAS;EACV;CACD;EACE,OAAO;EACP,SACE;EACH;CACD;EACE,OAAO;EACP,SAAS;EACV;CACD;EACE,OAAO;EACP,SACE;EACH;CACD;EACE,OAAO;EACP,SACE;EACH;CACD;EACE,OAAO;EACP,SACE;EACH;CACF,CAAC;;;;;;;;AASF,SAAgB,sBACd,MACA,UAAqC,EAAE,EACxB;CACf,MAAM,QAAQ,QAAQ,SAAS;CAC/B,MAAMC,UAAoB,EAAE;AAC5B,MAAK,MAAM,QAAQ,MACjB,KAAI,KAAK,QAAQ,KAAK,KAAK,CAAE,SAAQ,KAAK,KAAK,MAAM;AAEvD,KAAI,QAAQ,eAAe,QACzB;OAAK,MAAM,QAAQ,QAAQ,WACzB,KAAI,CAAC,QAAQ,SAAS,KAAK,MAAM,IAAI,KAAK,QAAQ,KAAK,KAAK,CAAE,SAAQ,KAAK,KAAK,MAAM;;AAG1F,QAAO;EAAE,SAAS,QAAQ,SAAS;EAAG,SAAS,OAAO,OAAO,QAAQ;EAAE"}
+{"version":3,"file":"injection-heuristics.js","names":["DEFAULT_INJECTION_RULES: ReadonlyArray<InjectionRule>","markers: string[]"],"sources":["../../src/internal/injection-heuristics.ts"],"sourcesContent":["/**\n * Offline heuristics (no provider calls) that flag obvious memory-injection\n * markers in candidate memory text (P1-4). Long-lived memory is the prime\n * target for poisoning: an injected instruction planted today fires weeks\n * later when semantically recalled, defeating session-scoped prompt-injection\n * defenses (MINJA arXiv:2601.05504; MemoryGraft arXiv:2512.16962). Flagged\n * candidates are quarantined at write time so they never enter\n * action-driving recall until a human validates them.\n *\n * The detector is deliberately *high-precision*: every rule targets\n * injection-characteristic structure (imperative override of prior\n * instructions, role-markup smuggling, secrecy/exfiltration directives), not\n * lone common verbs, so benign first-party facts (\"I always run in the\n * mornings\", \"lives in Lisbon\") are not quarantined. It is locale-aware via\n * pluggable {@link InjectionRule} lists and performs no network or model\n * calls - pure regex over the candidate string.\n *\n * @packageDocumentation\n */\n\nimport { normalizeForMatching } from '@graphorin/security/guardrails';\n\n/**\n * A single named injection-detection rule. The `label` is a stable,\n * audit-friendly identifier surfaced in {@link InjectionScan.markers};\n * the `pattern` MUST NOT carry the `g` flag (stateful `RegExp.test`).\n *\n * @stable\n */\nexport interface InjectionRule {\n  readonly label: string;\n  readonly pattern: RegExp;\n}\n\n/**\n * Result of scanning a candidate string. `flagged` is `true` when at\n * least one rule matched; `markers` lists the matched rule labels\n * (deduped, in rule order) for the audit trail.\n *\n * @stable\n */\nexport interface InjectionScan {\n  readonly flagged: boolean;\n  readonly markers: ReadonlyArray<string>;\n}\n\n/**\n * Options for {@link detectMemoryInjection}.\n *\n * @stable\n */\nexport interface InjectionHeuristicOptions {\n  /**\n   * Replace the default English rule set wholesale (advanced - for a\n   * fully custom locale). When omitted, {@link DEFAULT_INJECTION_RULES}\n   * is used.\n   */\n  readonly rules?: ReadonlyArray<InjectionRule>;\n  /**\n   * Additional locale-specific rules merged *after* the active rule set.\n   * The common way to make the detector locale-aware without discarding\n   * the English defaults.\n   */\n  readonly extraRules?: ReadonlyArray<InjectionRule>;\n}\n\n/**\n * Default English injection-marker rules. High-precision: each requires\n * injection-characteristic structure so benign facts do not trip them.\n *\n * @stable\n */\nexport const DEFAULT_INJECTION_RULES: ReadonlyArray<InjectionRule> = Object.freeze([\n  {\n    label: 'ignore-previous-instructions',\n    pattern:\n      /\\bignore\\s+(?:all\\s+|any\\s+)?(?:previous|prior|earlier|the\\s+above|preceding)\\s+(?:instructions?|prompts?|messages?|commands?|directions?|context|rules?)\\b/i,\n  },\n  {\n    label: 'disregard-instructions',\n    pattern:\n      /\\bdisregard\\s+(?:all\\s+|any\\s+|the\\s+)?(?:previous|prior|earlier|above|preceding|prior\\s+)?(?:instructions?|prompts?|rules?|guidelines?|guardrails?)\\b/i,\n  },\n  {\n    label: 'override-directive',\n    pattern: /\\boverride\\s+(?:the\\s+)?(?:system|safety|security|previous|prior|default)\\b/i,\n  },\n  {\n    label: 'system-prompt-exfil',\n    pattern:\n      /\\b(?:reveal|show|print|repeat|leak|expose|dump)\\b[^.?!\\n]{0,40}\\b(?:system\\s+prompt|system\\s+message|initial\\s+instructions|hidden\\s+(?:instructions|prompt))\\b/i,\n  },\n  {\n    label: 'role-markup-injection',\n    pattern: /<\\/?(?:system|im_start|im_end|tool_call|function_call)\\b|\\[\\/?(?:INST|SYS)\\]/i,\n  },\n  {\n    label: 'secrecy-directive',\n    pattern:\n      /\\b(?:do\\s+not|don['’]?t|never)\\s+(?:tell|inform|notify|alert|mention\\s+(?:this\\s+)?to|reveal\\s+(?:this\\s+)?to)\\s+(?:the\\s+)?(?:user|human|operator|owner)\\b|\\bwithout\\s+(?:telling|informing|notifying|alerting)\\s+(?:the\\s+)?(?:user|human|operator)\\b/i,\n  },\n  {\n    label: 'exfiltration-directive',\n    pattern:\n      /\\b(?:send|forward|email|transmit|upload|post|exfiltrate|leak)\\b[^.?!\\n]{0,60}\\b(?:password|secret|api[\\s_-]?keys?|credentials?|private\\s+keys?|access\\s+tokens?|auth\\s+tokens?)\\b/i,\n  },\n  {\n    label: 'persistent-override',\n    pattern:\n      /\\bfrom\\s+now\\s+on\\b[^.?!\\n]{0,40}\\b(?:always|never|you\\s+must|ignore|disregard|do\\s+not)\\b/i,\n  },\n]);\n\n/**\n * Scan candidate memory text for obvious injection markers. Pure,\n * offline, allocation-light. Returns the matched rule labels so callers\n * can record *why* a candidate was quarantined.\n *\n * @stable\n */\nexport function detectMemoryInjection(\n  text: string,\n  options: InjectionHeuristicOptions = {},\n): InjectionScan {\n  const rules = options.rules ?? DEFAULT_INJECTION_RULES;\n  // C6: also scan the NFKC/zero-width-stripped fold so cheap\n  // character-injection (zero-width splits, fullwidth homoglyphs) does\n  // not slip a poisoned memory past the quarantine gate.\n  const normalized = normalizeForMatching(text);\n  const scanBoth = (pattern: RegExp): boolean =>\n    pattern.test(text) || (normalized !== text && pattern.test(normalized));\n  const markers: string[] = [];\n  for (const rule of rules) {\n    if (scanBoth(rule.pattern)) markers.push(rule.label);\n  }\n  if (options.extraRules !== undefined) {\n    for (const rule of options.extraRules) {\n      if (!markers.includes(rule.label) && scanBoth(rule.pattern)) markers.push(rule.label);\n    }\n  }\n  return { flagged: markers.length > 0, markers: Object.freeze(markers) };\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;AAwEA,MAAaA,0BAAwD,OAAO,OAAO;CACjF;EACE,OAAO;EACP,SACE;EACH;CACD;EACE,OAAO;EACP,SACE;EACH;CACD;EACE,OAAO;EACP,SAAS;EACV;CACD;EACE,OAAO;EACP,SACE;EACH;CACD;EACE,OAAO;EACP,SAAS;EACV;CACD;EACE,OAAO;EACP,SACE;EACH;CACD;EACE,OAAO;EACP,SACE;EACH;CACD;EACE,OAAO;EACP,SACE;EACH;CACF,CAAC;;;;;;;;AASF,SAAgB,sBACd,MACA,UAAqC,EAAE,EACxB;CACf,MAAM,QAAQ,QAAQ,SAAS;CAI/B,MAAM,aAAa,qBAAqB,KAAK;CAC7C,MAAM,YAAY,YAChB,QAAQ,KAAK,KAAK,IAAK,eAAe,QAAQ,QAAQ,KAAK,WAAW;CACxE,MAAMC,UAAoB,EAAE;AAC5B,MAAK,MAAM,QAAQ,MACjB,KAAI,SAAS,KAAK,QAAQ,CAAE,SAAQ,KAAK,KAAK,MAAM;AAEtD,KAAI,QAAQ,eAAe,QACzB;OAAK,MAAM,QAAQ,QAAQ,WACzB,KAAI,CAAC,QAAQ,SAAS,KAAK,MAAM,IAAI,SAAS,KAAK,QAAQ,CAAE,SAAQ,KAAK,KAAK,MAAM;;AAGzF,QAAO;EAAE,SAAS,QAAQ,SAAS;EAAG,SAAS,OAAO,OAAO,QAAQ;EAAE"}

package/dist/internal/spans.js

@@ -1,6 +1,6 @@
 //#region src/internal/spans.ts
 /**
-* Sanitize a `SessionScope` for span attributes — the raw user id is
+* Sanitize a `SessionScope` for span attributes - the raw user id is
 * surfaced as-is (it is a stable opaque identifier per DEC-005), but
 * session and agent ids are emitted only when defined to avoid
 * polluting the trace with `null` strings.

package/dist/internal/spans.js.map

@@ -1 +1 @@
-{"version":3,"file":"spans.js","names":["attrs: Record<string, string>"],"sources":["../../src/internal/spans.ts"],"sourcesContent":["import type { SessionScope, SpanAttributes, SpanType, Tracer } from '@graphorin/core';\n\n/**\n * Sanitize a `SessionScope` for span attributes — the raw user id is\n * surfaced as-is (it is a stable opaque identifier per DEC-005), but\n * session and agent ids are emitted only when defined to avoid\n * polluting the trace with `null` strings.\n *\n * @internal\n */\nexport function scopeAttrs(scope: SessionScope): SpanAttributes {\n  const attrs: Record<string, string> = {\n    'memory.scope.user_id': scope.userId,\n  };\n  if (scope.sessionId !== undefined) attrs['memory.scope.session_id'] = scope.sessionId;\n  if (scope.agentId !== undefined) attrs['memory.scope.agent_id'] = scope.agentId;\n  return Object.freeze(attrs);\n}\n\n/**\n * Run an async function inside a `memory.*` span with the standard\n * scope attributes already populated. Adds the span result count and\n * status automatically.\n *\n * @internal\n */\nexport async function withMemorySpan<T extends SpanType, R>(\n  tracer: Tracer,\n  type: T,\n  scope: SessionScope,\n  extras: SpanAttributes,\n  fn: (span: import('@graphorin/core').AISpan<T>) => Promise<R>,\n): Promise<R> {\n  return tracer.span({ type, attrs: { ...scopeAttrs(scope), ...extras } }, fn);\n}\n"],"mappings":";;;;;;;;;AAUA,SAAgB,WAAW,OAAqC;CAC9D,MAAMA,QAAgC,EACpC,wBAAwB,MAAM,QAC/B;AACD,KAAI,MAAM,cAAc,OAAW,OAAM,6BAA6B,MAAM;AAC5E,KAAI,MAAM,YAAY,OAAW,OAAM,2BAA2B,MAAM;AACxE,QAAO,OAAO,OAAO,MAAM;;;;;;;;;AAU7B,eAAsB,eACpB,QACA,MACA,OACA,QACA,IACY;AACZ,QAAO,OAAO,KAAK;EAAE;EAAM,OAAO;GAAE,GAAG,WAAW,MAAM;GAAE,GAAG;GAAQ;EAAE,EAAE,GAAG"}
+{"version":3,"file":"spans.js","names":["attrs: Record<string, string>"],"sources":["../../src/internal/spans.ts"],"sourcesContent":["import type { SessionScope, SpanAttributes, SpanType, Tracer } from '@graphorin/core';\n\n/**\n * Sanitize a `SessionScope` for span attributes - the raw user id is\n * surfaced as-is (it is a stable opaque identifier per DEC-005), but\n * session and agent ids are emitted only when defined to avoid\n * polluting the trace with `null` strings.\n *\n * @internal\n */\nexport function scopeAttrs(scope: SessionScope): SpanAttributes {\n  const attrs: Record<string, string> = {\n    'memory.scope.user_id': scope.userId,\n  };\n  if (scope.sessionId !== undefined) attrs['memory.scope.session_id'] = scope.sessionId;\n  if (scope.agentId !== undefined) attrs['memory.scope.agent_id'] = scope.agentId;\n  return Object.freeze(attrs);\n}\n\n/**\n * Run an async function inside a `memory.*` span with the standard\n * scope attributes already populated. Adds the span result count and\n * status automatically.\n *\n * @internal\n */\nexport async function withMemorySpan<T extends SpanType, R>(\n  tracer: Tracer,\n  type: T,\n  scope: SessionScope,\n  extras: SpanAttributes,\n  fn: (span: import('@graphorin/core').AISpan<T>) => Promise<R>,\n): Promise<R> {\n  return tracer.span({ type, attrs: { ...scopeAttrs(scope), ...extras } }, fn);\n}\n"],"mappings":";;;;;;;;;AAUA,SAAgB,WAAW,OAAqC;CAC9D,MAAMA,QAAgC,EACpC,wBAAwB,MAAM,QAC/B;AACD,KAAI,MAAM,cAAc,OAAW,OAAM,6BAA6B,MAAM;AAC5E,KAAI,MAAM,YAAY,OAAW,OAAM,2BAA2B,MAAM;AACxE,QAAO,OAAO,OAAO,MAAM;;;;;;;;;AAU7B,eAAsB,eACpB,QACA,MACA,OACA,QACA,IACY;AACZ,QAAO,OAAO,KAAK;EAAE;EAAM,OAAO;GAAE,GAAG,WAAW,MAAM;GAAE,GAAG;GAAQ;EAAE,EAAE,GAAG"}