@graphorin/memory 0.5.0 → 0.6.1

package/dist/tools/runbook-tools.js

@@ -0,0 +1,53 @@
+import { tool } from "@graphorin/tools";
+import { z } from "zod";
+
+//#region src/tools/runbook-tools.ts
+const runbookSearchInputSchema = z.object({
+	query: z.string().min(1).max(512),
+	topK: z.number().int().min(1).max(20).optional()
+});
+const runbookSearchOutputSchema = z.object({ procedures: z.array(z.object({
+	id: z.string(),
+	text: z.string(),
+	steps: z.array(z.string()).optional(),
+	variables: z.array(z.string()).optional(),
+	successCriteria: z.array(z.string()).optional(),
+	priority: z.number(),
+	score: z.number()
+})) });
+/**
+* `runbook_search` - find validated procedures matching a task
+* description. Quarantined (unvalidated induced) procedures never
+* surface here: they must not drive actions until validated.
+*
+* @stable
+*/
+function createRunbookSearchTool(deps) {
+	return tool({
+		name: "runbook_search",
+		description: "Find a stored, validated procedure (\"runbook\") matching the task at hand - e.g. \"deploy the docs site\" or \"rotate the API key\". Returns whole procedures with their numbered steps, variables, and success criteria so you can follow a known-good workflow instead of improvising. Use BEFORE attempting a multi-step operational task the user may have done with you previously.",
+		inputSchema: runbookSearchInputSchema,
+		outputSchema: runbookSearchOutputSchema,
+		sideEffectClass: "read-only",
+		sandboxPolicy: "none",
+		sensitivity: "internal",
+		memoryGuardTier: "pure",
+		tags: ["memory", "procedural"],
+		async execute(input, ctx) {
+			const scope = await deps.resolveScope(ctx);
+			return { procedures: (await deps.procedural.search(scope, input.query, { ...input.topK !== void 0 ? { topK: input.topK } : {} })).map((hit) => ({
+				id: hit.record.id,
+				text: hit.record.text,
+				...hit.record.steps !== void 0 ? { steps: [...hit.record.steps] } : {},
+				...hit.record.variables !== void 0 ? { variables: [...hit.record.variables] } : {},
+				...hit.record.successCriteria !== void 0 ? { successCriteria: [...hit.record.successCriteria] } : {},
+				priority: hit.record.priority,
+				score: hit.score
+			})) };
+		}
+	});
+}
+
+//#endregion
+export { createRunbookSearchTool };
+//# sourceMappingURL=runbook-tools.js.map

package/dist/tools/runbook-tools.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"runbook-tools.js","names":[],"sources":["../../src/tools/runbook-tools.ts"],"sourcesContent":["/**\n * Runbook tool (D3) - gated content recall over procedural memory.\n * `runbook_search` finds validated procedures whose text / steps match\n * a task description and returns them **whole** (title line, numbered\n * steps, variables, success criteria), so the model can follow a known\n * workflow file-style instead of re-deriving it. Registered only when\n * the facade opts in (`createMemory({ runbookSearch: true })`) - the\n * default tool surface is unchanged.\n *\n * @packageDocumentation\n */\n\nimport type { Tool } from '@graphorin/core';\nimport { tool } from '@graphorin/tools';\nimport { z } from 'zod';\nimport type { MemoryToolDeps } from './types.js';\n\nconst runbookSearchInputSchema = z.object({\n  query: z.string().min(1).max(512),\n  topK: z.number().int().min(1).max(20).optional(),\n});\nconst runbookSearchOutputSchema = z.object({\n  procedures: z.array(\n    z.object({\n      id: z.string(),\n      text: z.string(),\n      steps: z.array(z.string()).optional(),\n      variables: z.array(z.string()).optional(),\n      successCriteria: z.array(z.string()).optional(),\n      priority: z.number(),\n      score: z.number(),\n    }),\n  ),\n});\n\ntype RunbookSearchInput = z.infer<typeof runbookSearchInputSchema>;\ntype RunbookSearchOutput = z.infer<typeof runbookSearchOutputSchema>;\n\n/**\n * `runbook_search` - find validated procedures matching a task\n * description. Quarantined (unvalidated induced) procedures never\n * surface here: they must not drive actions until validated.\n *\n * @stable\n */\nexport function createRunbookSearchTool(\n  deps: MemoryToolDeps,\n): Tool<RunbookSearchInput, RunbookSearchOutput> {\n  return tool<RunbookSearchInput, RunbookSearchOutput>({\n    name: 'runbook_search',\n    description:\n      'Find a stored, validated procedure (\"runbook\") matching the task at hand - e.g. \"deploy the docs site\" or \"rotate the API key\". Returns whole procedures with their numbered steps, variables, and success criteria so you can follow a known-good workflow instead of improvising. Use BEFORE attempting a multi-step operational task the user may have done with you previously.',\n    inputSchema: runbookSearchInputSchema,\n    outputSchema: runbookSearchOutputSchema,\n    sideEffectClass: 'read-only',\n    sandboxPolicy: 'none',\n    sensitivity: 'internal',\n    memoryGuardTier: 'pure',\n    tags: ['memory', 'procedural'],\n    async execute(input, ctx) {\n      const scope = await deps.resolveScope(ctx);\n      const hits = await deps.procedural.search(scope, input.query, {\n        ...(input.topK !== undefined ? { topK: input.topK } : {}),\n      });\n      return {\n        procedures: hits.map((hit) => ({\n          id: hit.record.id,\n          text: hit.record.text,\n          ...(hit.record.steps !== undefined ? { steps: [...hit.record.steps] } : {}),\n          ...(hit.record.variables !== undefined ? { variables: [...hit.record.variables] } : {}),\n          ...(hit.record.successCriteria !== undefined\n            ? { successCriteria: [...hit.record.successCriteria] }\n            : {}),\n          priority: hit.record.priority,\n          score: hit.score,\n        })),\n      };\n    },\n  });\n}\n"],"mappings":";;;;AAiBA,MAAM,2BAA2B,EAAE,OAAO;CACxC,OAAO,EAAE,QAAQ,CAAC,IAAI,EAAE,CAAC,IAAI,IAAI;CACjC,MAAM,EAAE,QAAQ,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,IAAI,GAAG,CAAC,UAAU;CACjD,CAAC;AACF,MAAM,4BAA4B,EAAE,OAAO,EACzC,YAAY,EAAE,MACZ,EAAE,OAAO;CACP,IAAI,EAAE,QAAQ;CACd,MAAM,EAAE,QAAQ;CAChB,OAAO,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC,UAAU;CACrC,WAAW,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC,UAAU;CACzC,iBAAiB,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC,UAAU;CAC/C,UAAU,EAAE,QAAQ;CACpB,OAAO,EAAE,QAAQ;CAClB,CAAC,CACH,EACF,CAAC;;;;;;;;AAYF,SAAgB,wBACd,MAC+C;AAC/C,QAAO,KAA8C;EACnD,MAAM;EACN,aACE;EACF,aAAa;EACb,cAAc;EACd,iBAAiB;EACjB,eAAe;EACf,aAAa;EACb,iBAAiB;EACjB,MAAM,CAAC,UAAU,aAAa;EAC9B,MAAM,QAAQ,OAAO,KAAK;GACxB,MAAM,QAAQ,MAAM,KAAK,aAAa,IAAI;AAI1C,UAAO,EACL,aAJW,MAAM,KAAK,WAAW,OAAO,OAAO,MAAM,OAAO,EAC5D,GAAI,MAAM,SAAS,SAAY,EAAE,MAAM,MAAM,MAAM,GAAG,EAAE,EACzD,CAAC,EAEiB,KAAK,SAAS;IAC7B,IAAI,IAAI,OAAO;IACf,MAAM,IAAI,OAAO;IACjB,GAAI,IAAI,OAAO,UAAU,SAAY,EAAE,OAAO,CAAC,GAAG,IAAI,OAAO,MAAM,EAAE,GAAG,EAAE;IAC1E,GAAI,IAAI,OAAO,cAAc,SAAY,EAAE,WAAW,CAAC,GAAG,IAAI,OAAO,UAAU,EAAE,GAAG,EAAE;IACtF,GAAI,IAAI,OAAO,oBAAoB,SAC/B,EAAE,iBAAiB,CAAC,GAAG,IAAI,OAAO,gBAAgB,EAAE,GACpD,EAAE;IACN,UAAU,IAAI,OAAO;IACrB,OAAO,IAAI;IACZ,EAAE,EACJ;;EAEJ,CAAC"}

package/dist/tools/taint.js

@@ -0,0 +1,33 @@
+import { isForeignProvenance } from "../search/trust.js";
+
+//#region src/tools/taint.ts
+/**
+* C6: taint override for memory-recall tool results. The recall tools are
+* first-party (`sideEffectClass: 'read-only'`), so the data-flow ledger
+* would derive their outputs as trusted - but the CONTENT they return can
+* be quarantined or foreign-provenance memory written in an earlier
+* session (the cross-session poisoning leg). This helper computes the
+* `ToolReturn.taint` override that re-arms the ledger at recall: recalled
+* poisoned content is recorded as untrusted spans, so the verbatim probe
+* and the trifecta/derived gates see it exactly like fresh untrusted
+* input.
+*
+* @packageDocumentation
+*/
+/**
+* Compute the taint override for a recalled item set: untrusted when ANY
+* item is quarantined or foreign-provenance; `undefined` when all items
+* are first-party active (the common case - zero overhead, no override).
+*
+* @stable
+*/
+function recallTaint(items) {
+	for (const item of items) if (item.status === "quarantined" || isForeignProvenance(item.provenance)) return {
+		untrusted: true,
+		sourceKind: "memory-recall"
+	};
+}
+
+//#endregion
+export { recallTaint };
+//# sourceMappingURL=taint.js.map

package/dist/tools/taint.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"taint.js","names":[],"sources":["../../src/tools/taint.ts"],"sourcesContent":["/**\n * C6: taint override for memory-recall tool results. The recall tools are\n * first-party (`sideEffectClass: 'read-only'`), so the data-flow ledger\n * would derive their outputs as trusted - but the CONTENT they return can\n * be quarantined or foreign-provenance memory written in an earlier\n * session (the cross-session poisoning leg). This helper computes the\n * `ToolReturn.taint` override that re-arms the ledger at recall: recalled\n * poisoned content is recorded as untrusted spans, so the verbatim probe\n * and the trifecta/derived gates see it exactly like fresh untrusted\n * input.\n *\n * @packageDocumentation\n */\n\nimport { isForeignProvenance } from '../search/trust.js';\n\n/** Minimal record surface the helper inspects. */\nexport interface RecalledItemLike {\n  readonly provenance?: string | null;\n  readonly status?: string;\n}\n\n/**\n * Compute the taint override for a recalled item set: untrusted when ANY\n * item is quarantined or foreign-provenance; `undefined` when all items\n * are first-party active (the common case - zero overhead, no override).\n *\n * @stable\n */\nexport function recallTaint(\n  items: ReadonlyArray<RecalledItemLike>,\n): { readonly untrusted: true; readonly sourceKind: 'memory-recall' } | undefined {\n  for (const item of items) {\n    if (item.status === 'quarantined' || isForeignProvenance(item.provenance)) {\n      return { untrusted: true, sourceKind: 'memory-recall' };\n    }\n  }\n  return undefined;\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;AA6BA,SAAgB,YACd,OACgF;AAChF,MAAK,MAAM,QAAQ,MACjB,KAAI,KAAK,WAAW,iBAAiB,oBAAoB,KAAK,WAAW,CACvE,QAAO;EAAE,WAAW;EAAM,YAAY;EAAiB"}

package/dist/tools/types.d.ts

@@ -1,9 +1,9 @@
 import { EpisodicMemory } from "../tiers/episodic-memory.js";
 import { SemanticMemory } from "../tiers/semantic-memory.js";
+import { WorkingMemory } from "../tiers/working-memory.js";
 import { ProceduralMemory } from "../tiers/procedural-memory.js";
 import { SessionMemory } from "../tiers/session-memory.js";
 import { SharedMemory } from "../tiers/shared-memory.js";
-import { WorkingMemory } from "../tiers/working-memory.js";
 import * as _graphorin_core0 from "@graphorin/core";
 import { SessionScope } from "@graphorin/core";
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@graphorin/memory",
-  "version": "0.5.0",
+  "version": "0.6.1",
   "description": "Six-tier memory system for the Graphorin framework: createMemory() facade with working / session / episodic / semantic / procedural / shared sub-modules, eleven memory tools wired into @graphorin/tools, hybrid vector + FTS5 search composed through Reciprocal Rank Fusion (k=60 default) with a pluggable reranker hook, a multi-stage conflict resolution pipeline (exact dedup → embedding three-zone → heuristic regex → subject/predicate → defer-to-deep) with an English locale pack default + plug-in locales, an embedder migration runner with three coexistence policies (lock-on-first / multi-active / auto-migrate), per-record embedder_id enforcement, multi-agent attribution, append-only writes with soft-delete + supersede semantics, default-on bi-temporal storage, provenance + quarantine safety gate for synthesized memory, AISpan emission for every operation, and tier-aware memory-modification guard wiring.",
   "license": "MIT",
   "author": "Oleksiy Stepurenko",
@@ -83,10 +83,10 @@
     "LICENSE"
   ],
   "dependencies": {
-    "@graphorin/core": "0.5.0",
-    "@graphorin/observability": "0.5.0",
-    "@graphorin/security": "0.5.0",
-    "@graphorin/tools": "0.5.0"
+    "@graphorin/core": "0.6.1",
+    "@graphorin/observability": "0.6.1",
+    "@graphorin/security": "0.6.1",
+    "@graphorin/tools": "0.6.1"
   },
   "peerDependencies": {
     "zod": "^3.23.0 || ^4.0.0"
@@ -105,9 +105,9 @@
     "better-sqlite3": "^12.9.0",
     "fast-check": "^3.23.0",
     "zod": "^3.25.0",
-    "@graphorin/store-sqlite": "0.5.0",
-    "@graphorin/embedder-transformersjs": "0.5.0",
-    "@graphorin/triggers": "0.5.0"
+    "@graphorin/store-sqlite": "0.6.1",
+    "@graphorin/embedder-transformersjs": "0.6.1",
+    "@graphorin/triggers": "0.6.1"
   },
   "scripts": {
     "build": "tsdown",