@hilbras/remembra 3.7.0 → 3.8.0

package/dist/types.js

@@ -38,6 +38,12 @@ export const storeInputShape = {
         .default(3)
         .describe("1=minor, 5=critical (default 3)"),
     source: z.string().optional().describe("Originating session or client"),
+    confidence: z
+        .number()
+        .min(0)
+        .max(1)
+        .optional()
+        .describe("Trust in this claim 0..1 (default 1.0 for explicit stores, 0.7 for digests)"),
 };
 export const StoreInput = z
     .object(storeInputShape)
@@ -74,6 +80,28 @@ export const forgetInputShape = {
     id: z.string().describe("Memory id (from memory_store or memory_list)"),
 };
 export const ForgetInput = z.object(forgetInputShape);
+export const getInputShape = {
+    id: z.string().describe("Memory id — returns the memory with related links and backlinks"),
+};
+export const GetInput = z.object(getInputShape);
+export const relateInputShape = {
+    id: z.string().describe("Source memory id"),
+    related: z
+        .array(z.string().min(1))
+        .min(1)
+        .max(50)
+        .describe("Target memory ids to link to / unlink from"),
+    action: z
+        .enum(["add", "remove"])
+        .default("add")
+        .describe("add (default) creates links, remove deletes them"),
+};
+export const RelateInput = z.object(relateInputShape);
+export const historyInputShape = {
+    id: z.string().describe("Memory id to show version history for"),
+    limit: z.number().int().min(1).max(100).optional().describe("Max past versions to return (newest first)"),
+};
+export const HistoryInput = z.object(historyInputShape);
 /** Backup file envelope (remembra export / import). */
 export const SNAPSHOT_FORMAT = "remembra-export";
 export const SnapshotInput = z.object({
@@ -94,6 +122,8 @@ export const SnapshotInput = z.object({
         lastSeen: z.string().optional(),
         archivedAt: z.string().optional(),
         provenance: z.enum(["explicit", "auto"]).optional(),
+        confidence: z.number().min(0).max(1).optional(),
+        related: z.array(z.string()).optional(),
         embedding: z.array(z.number()).optional(),
     }))
         .max(100_000),

package/dist/types.js.map

@@ -1 +1 @@
-{"version":3,"file":"types.js","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,6CAA6C;AAC7C,MAAM,CAAC,MAAM,UAAU,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,SAAS,CAAC,CAAC,CAAC;AAG1E;;;GAGG;AACH,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,CAAC;AAiChC;;;;GAIG;AACH,MAAM,UAAU,WAAW,CAAC,KAAa;IACvC,IAAI,KAAK,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IACpC,MAAM,UAAU,GAAG,KAAK,CAAC,OAAO,CAAC,mBAAmB,EAAE,GAAG,CAAC,CAAC;IAC3D,OAAO,CAAC,UAAU,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,KAAK,IAAI,CAAC,CAAC;AAC5D,CAAC;AAED,8EAA8E;AAC9E,yDAAyD;AACzD,qEAAqE;AACrE,2DAA2D;AAC3D,8EAA8E;AAE9E,MAAM,CAAC,MAAM,eAAe,GAAG;IAC7B,IAAI,EAAE,UAAU,CAAC,QAAQ,CAAC,kCAAkC,CAAC;IAC7D,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,sDAAsD,CAAC;IAC3F,KAAK,EAAE,CAAC;SACL,MAAM,EAAE;SACR,OAAO,CAAC,QAAQ,CAAC;SACjB,QAAQ,CAAC,qFAAqF,CAAC;IAClG,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,+BAA+B,CAAC;IAC/E,UAAU,EAAE,CAAC;SACV,MAAM,EAAE;SACR,GAAG,EAAE;SACL,GAAG,CAAC,CAAC,CAAC;SACN,GAAG,CAAC,CAAC,CAAC;SACN,OAAO,CAAC,CAAC,CAAC;SACV,QAAQ,CAAC,iCAAiC,CAAC;IAC9C,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,+BAA+B,CAAC;CACxE,CAAC;AACF,MAAM,CAAC,MAAM,UAAU,GAAG,CAAC;KACxB,MAAM,CAAC,eAAe,CAAC;KACvB,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,WAAW,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,EAAE,OAAO,EAAE,2CAA2C,EAAE,CAAC,CAAC;AAGjG,MAAM,CAAC,MAAM,gBAAgB,GAAG;IAC9B,UAAU,EAAE,CAAC;SACV,MAAM,EAAE;SACR,GAAG,CAAC,CAAC,CAAC;SACN,QAAQ,CAAC,8DAA8D,CAAC;IAC3E,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,gDAAgD,CAAC;IACvF,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,4BAA4B,CAAC;CACrE,CAAC;AACF,MAAM,CAAC,MAAM,WAAW,GAAG,CAAC;KACzB,MAAM,CAAC,gBAAgB,CAAC;KACxB,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,KAAK,SAAS,IAAI,WAAW,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE;IAC5D,OAAO,EAAE,2CAA2C;CACrD,CAAC,CAAC;AAGL,MAAM,CAAC,MAAM,gBAAgB,GAAG;IAC9B,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,6DAA6D,CAAC;IACpG,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,mDAAmD,CAAC;IAC1F,IAAI,EAAE,UAAU,CAAC,QAAQ,EAAE;IAC3B,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,QAAQ,EAAE;CAClD,CAAC;AACF,MAAM,CAAC,MAAM,WAAW,GAAG,CAAC,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC;AAGtD,MAAM,CAAC,MAAM,cAAc,GAAG;IAC5B,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC5B,IAAI,EAAE,UAAU,CAAC,QAAQ,EAAE;IAC3B,eAAe,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,qCAAqC,CAAC;IACvF,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,8CAA8C,CAAC;IACnG,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,oCAAoC,CAAC;CAClG,CAAC;AACF,MAAM,CAAC,MAAM,SAAS,GAAG,CAAC,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC;AAGlD,MAAM,CAAC,MAAM,gBAAgB,GAAG;IAC9B,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,8CAA8C,CAAC;CACxE,CAAC;AACF,MAAM,CAAC,MAAM,WAAW,GAAG,CAAC,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC;AAWtD,uDAAuD;AACvD,MAAM,CAAC,MAAM,eAAe,GAAG,iBAAiB,CAAC;AACjD,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC,CAAC,MAAM,CAAC;IACpC,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,eAAe,CAAC;IAClC,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;IACpC,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE;IACtB,QAAQ,EAAE,CAAC;SACR,KAAK,CACJ,CAAC,CAAC,MAAM,CAAC;QACP,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,kBAAkB,EAAE,YAAY,CAAC;QACtD,IAAI,EAAE,UAAU;QAChB,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;QAC1B,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,MAAM,CAAC,WAAW,EAAE,EAAE,OAAO,EAAE,6BAA6B,EAAE,CAAC;QACjF,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;QACzB,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;QAC1C,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE;QACrB,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE;QACrB,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;QAC7B,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;QAC/B,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;QACjC,UAAU,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC,CAAC,QAAQ,EAAE;QACnD,SAAS,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;KAC1C,CAAC,CACH;SACA,GAAG,CAAC,OAAO,CAAC;CAChB,CAAC,CAAC"}
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,6CAA6C;AAC7C,MAAM,CAAC,MAAM,UAAU,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,SAAS,CAAC,CAAC,CAAC;AAG1E;;;GAGG;AACH,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,CAAC;AA8ChC;;;;GAIG;AACH,MAAM,UAAU,WAAW,CAAC,KAAa;IACvC,IAAI,KAAK,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IACpC,MAAM,UAAU,GAAG,KAAK,CAAC,OAAO,CAAC,mBAAmB,EAAE,GAAG,CAAC,CAAC;IAC3D,OAAO,CAAC,UAAU,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,KAAK,IAAI,CAAC,CAAC;AAC5D,CAAC;AAED,8EAA8E;AAC9E,yDAAyD;AACzD,qEAAqE;AACrE,2DAA2D;AAC3D,8EAA8E;AAE9E,MAAM,CAAC,MAAM,eAAe,GAAG;IAC7B,IAAI,EAAE,UAAU,CAAC,QAAQ,CAAC,kCAAkC,CAAC;IAC7D,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,sDAAsD,CAAC;IAC3F,KAAK,EAAE,CAAC;SACL,MAAM,EAAE;SACR,OAAO,CAAC,QAAQ,CAAC;SACjB,QAAQ,CAAC,qFAAqF,CAAC;IAClG,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,+BAA+B,CAAC;IAC/E,UAAU,EAAE,CAAC;SACV,MAAM,EAAE;SACR,GAAG,EAAE;SACL,GAAG,CAAC,CAAC,CAAC;SACN,GAAG,CAAC,CAAC,CAAC;SACN,OAAO,CAAC,CAAC,CAAC;SACV,QAAQ,CAAC,iCAAiC,CAAC;IAC9C,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,+BAA+B,CAAC;IACvE,UAAU,EAAE,CAAC;SACV,MAAM,EAAE;SACR,GAAG,CAAC,CAAC,CAAC;SACN,GAAG,CAAC,CAAC,CAAC;SACN,QAAQ,EAAE;SACV,QAAQ,CAAC,6EAA6E,CAAC;CAC3F,CAAC;AACF,MAAM,CAAC,MAAM,UAAU,GAAG,CAAC;KACxB,MAAM,CAAC,eAAe,CAAC;KACvB,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,WAAW,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,EAAE,OAAO,EAAE,2CAA2C,EAAE,CAAC,CAAC;AAGjG,MAAM,CAAC,MAAM,gBAAgB,GAAG;IAC9B,UAAU,EAAE,CAAC;SACV,MAAM,EAAE;SACR,GAAG,CAAC,CAAC,CAAC;SACN,QAAQ,CAAC,8DAA8D,CAAC;IAC3E,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,gDAAgD,CAAC;IACvF,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,4BAA4B,CAAC;CACrE,CAAC;AACF,MAAM,CAAC,MAAM,WAAW,GAAG,CAAC;KACzB,MAAM,CAAC,gBAAgB,CAAC;KACxB,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,KAAK,SAAS,IAAI,WAAW,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE;IAC5D,OAAO,EAAE,2CAA2C;CACrD,CAAC,CAAC;AAGL,MAAM,CAAC,MAAM,gBAAgB,GAAG;IAC9B,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,6DAA6D,CAAC;IACpG,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,mDAAmD,CAAC;IAC1F,IAAI,EAAE,UAAU,CAAC,QAAQ,EAAE;IAC3B,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,QAAQ,EAAE;CAClD,CAAC;AACF,MAAM,CAAC,MAAM,WAAW,GAAG,CAAC,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC;AAGtD,MAAM,CAAC,MAAM,cAAc,GAAG;IAC5B,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC5B,IAAI,EAAE,UAAU,CAAC,QAAQ,EAAE;IAC3B,eAAe,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,qCAAqC,CAAC;IACvF,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,8CAA8C,CAAC;IACnG,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,oCAAoC,CAAC;CAClG,CAAC;AACF,MAAM,CAAC,MAAM,SAAS,GAAG,CAAC,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC;AAGlD,MAAM,CAAC,MAAM,gBAAgB,GAAG;IAC9B,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,8CAA8C,CAAC;CACxE,CAAC;AACF,MAAM,CAAC,MAAM,WAAW,GAAG,CAAC,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC;AAGtD,MAAM,CAAC,MAAM,aAAa,GAAG;IAC3B,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,iEAAiE,CAAC;CAC3F,CAAC;AACF,MAAM,CAAC,MAAM,QAAQ,GAAG,CAAC,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC;AAGhD,MAAM,CAAC,MAAM,gBAAgB,GAAG;IAC9B,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,kBAAkB,CAAC;IAC3C,OAAO,EAAE,CAAC;SACP,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;SACxB,GAAG,CAAC,CAAC,CAAC;SACN,GAAG,CAAC,EAAE,CAAC;SACP,QAAQ,CAAC,4CAA4C,CAAC;IACzD,MAAM,EAAE,CAAC;SACN,IAAI,CAAC,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;SACvB,OAAO,CAAC,KAAK,CAAC;SACd,QAAQ,CAAC,kDAAkD,CAAC;CAChE,CAAC;AACF,MAAM,CAAC,MAAM,WAAW,GAAG,CAAC,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC;AAGtD,MAAM,CAAC,MAAM,iBAAiB,GAAG;IAC/B,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,uCAAuC,CAAC;IAChE,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,4CAA4C,CAAC;CAC1G,CAAC;AACF,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC,CAAC,MAAM,CAAC,iBAAiB,CAAC,CAAC;AAWxD,uDAAuD;AACvD,MAAM,CAAC,MAAM,eAAe,GAAG,iBAAiB,CAAC;AACjD,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC,CAAC,MAAM,CAAC;IACpC,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,eAAe,CAAC;IAClC,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;IACpC,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE;IACtB,QAAQ,EAAE,CAAC;SACR,KAAK,CACJ,CAAC,CAAC,MAAM,CAAC;QACP,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,kBAAkB,EAAE,YAAY,CAAC;QACtD,IAAI,EAAE,UAAU;QAChB,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;QAC1B,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,MAAM,CAAC,WAAW,EAAE,EAAE,OAAO,EAAE,6BAA6B,EAAE,CAAC;QACjF,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;QACzB,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;QAC1C,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE;QACrB,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE;QACrB,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;QAC7B,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;QAC/B,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;QACjC,UAAU,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC,CAAC,QAAQ,EAAE;QACnD,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;QAC/C,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;QACvC,SAAS,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;KAC1C,CAAC,CACH;SACA,GAAG,CAAC,OAAO,CAAC;CAChB,CAAC,CAAC"}

package/dist/version.d.ts

@@ -3,4 +3,4 @@
  * the `/health` readiness payload, and the `remembra_info` metric.
  * package.json is kept in sync by a test (phase7).
  */
-export declare const VERSION = "3.7.0";
+export declare const VERSION = "3.8.0";

package/dist/version.js

@@ -3,5 +3,5 @@
  * the `/health` readiness payload, and the `remembra_info` metric.
  * package.json is kept in sync by a test (phase7).
  */
-export const VERSION = "3.7.0";
+export const VERSION = "3.8.0";
 //# sourceMappingURL=version.js.map

package/docs/architecture.md

@@ -21,6 +21,7 @@ How Remembra is put together, and where the extension seams are.
 ┌──────────────────────────────────┐
 │ MemoryStore (store.ts)           │  Plain markdown files + frontmatter
 │  .remembra lock · crash recovery │  (no database, by decision — Q5-A)
+│  history snapshots · AES-GCM at  │  (encryption + history opt-in, Phase 8)
 └──────────────────────────────────┘
 ```
 
@@ -84,14 +85,20 @@ Anything it fixes is logged:
 
 All actionable failures are `RemembraError` with a stable `code`
 (`src/errors.ts`): `INVALID_INPUT`, `SNAPSHOT_INVALID`, `SCOPE_ESCAPES_ROOT`,
-`NOT_FOUND`, `CONFLICT`, `LOCK_TIMEOUT`, `IO_ERROR`, `LLM_ERROR`.
+`NOT_FOUND`, `CONFLICT`, `LOCK_TIMEOUT`, `IO_ERROR`, `LLM_ERROR`,
+`ENCRYPTED_NO_KEY`.
 
-- **HTTP** maps codes → statuses (400/404/409/423/500/502) and returns
+- **HTTP** maps codes → statuses (400/404/409/423/500/502/503) and returns
   `{ error, code }` bodies;
 - **MCP tools** return `[CODE] message` text with `isError: true`;
 - raw filesystem failures are wrapped as `IO_ERROR`; Zod failures crossing a
   service boundary become `INVALID_INPUT`/`SNAPSHOT_INVALID` with a field
-  summary.
+  summary;
+- `ENCRYPTED_NO_KEY` (Phase 8) deliberately breaks the "skip unparseable
+  files" rule: an encrypted file without `REMEMBRA_ENCRYPT_KEY` (or with a
+  wrong one) is **data you must be able to read**, so it propagates —
+  searches fail with 503 and `/health` reports
+  `storage: "ENCRYPTED_NO_KEY"` instead of silently serving partial results.
 
 ## Schema versioning
 
@@ -100,6 +107,48 @@ Every memory file carries `version: <n>` in frontmatter (`SCHEMA_VERSION` in
 format: bump the constant, add a migration branch in `parse()`, and cover it
 with a fixture test.
 
+## Encryption at rest (audit Phase 8, opt-in — `src/crypto.ts`)
+
+`REMEMBRA_ENCRYPT_KEY` (64 hex chars, a 32-byte symmetric key used directly —
+no KDF for high-entropy material) flips two chokepoints in `MemoryStore`:
+
+- **write** (`writeCached`): serialized bytes → `encryptBuffer` → atomic
+  rename. One random 12-byte nonce per write, AES-256-GCM.
+- **read** (`parse`): bytes → `decryptBuffer` → frontmatter parse. Detection
+  is by the `RMBENC1` magic prefix, so **plain and encrypted files coexist**
+  — mixed trees read fine, cache validation stays stat-based, and history
+  snapshots (raw byte copies) keep whatever form they were written in.
+
+Migration is an explicit locked operation, not a lazy rewrite:
+`remembra encrypt` / `remembra decrypt` walk `global/`, `scopes/`,
+`archived/` and `.history/`, convert in place under the advisory lock, and
+skip files already in the target state (idempotent). Writes after enabling
+the key are encrypted immediately — migration only covers what's already on
+disk.
+
+Failure semantics: `decryptBuffer` passes plain bytes through untouched;
+ciphertext without/with a wrong key throws `ENCRYPTED_NO_KEY` (503). The
+warn-once "skip malformed file" path explicitly re-throws `RemembraError`s —
+unreadable storage must never degrade into *smaller* search results.
+
+## Version history (audit Phase 8 — `snapshotHistory` / `history`)
+
+`MemoryStore.update()` is the single content-mutation chokepoint (merge
+today; anything future). Before rewriting a file whose **content differs**
+from what's on disk, it copies the raw pre-image to
+`.history/<id>/<epochMs>-<seq>.md`:
+
+- `epochMs-seq` names sort lexicographically = chronologically (seq breaks
+  same-millisecond ties; the advisory lock serializes writers);
+- raw copy ⇒ encrypted files stay encrypted, plain stay plain, byte-for-byte;
+- content-equality gate ⇒ embedding backfills and `memory_relate` never
+  create snapshots;
+- pruning keeps the newest `REMEMBRA_HISTORY_LIMIT` (default 20, `0`
+  disables) per id;
+- `.history/` is *data-adjacent but never walked by `all()`* — reads go
+  through the explicit `history(id)` path only (`.tmp` cleanup in crash
+  recovery does cover it).
+
 ## Parse cache (audit Phase 5: LRU + lazy loading)
 
 Every read goes through an LRU keyed by file path and **validated by

package/docs/chatgpt.md

@@ -83,6 +83,31 @@ curl -X POST http://localhost:8787/memories/digest \
 
 Requires `REMEMBRA_LLM` + key — see [providers.md](providers.md).
 
+### Get one memory (with links)
+
+```bash
+curl http://localhost:8787/memories/<id> \
+  -H "x-api-key: $REMEMBRA_API_KEY"
+# → { "memory": {...}, "related": [...], "backlinks": [...] }
+```
+
+### Link two memories (relationship graph)
+
+```bash
+curl -X POST http://localhost:8787/memories/<id>/relate \
+  -H "content-type: application/json" \
+  -H "x-api-key: $REMEMBRA_API_KEY" \
+  -d '{"related": ["<other-id>"], "action": "add"}'
+```
+
+### Version history with diffs
+
+```bash
+curl "http://localhost:8787/memories/<id>/history?limit=5" \
+  -H "x-api-key: $REMEMBRA_API_KEY"
+# → { "id": "...", "versions": [{ "content": "...", "diff": "--- ..." }, ...] }
+```
+
 ## 3. Create the Custom GPT
 
 1. Go to **chatgpt.com → Explore GPTs → Create a GPT**.

package/docs/clients.md

@@ -95,6 +95,9 @@ REMEMBRA_API_KEY="your-secret" remembra --http
 | `REMEMBRA_LOCK_TIMEOUT_MS` | `5000` | Max wait for the cross-process storage lock |
 | `REMEMBRA_LOCK_STALE_MS` | `10000` | Age after which a lock with a dead/unknown pid is stolen |
 | `REMEMBRA_CACHE_SIZE` | `10000` | Parse-cache LRU capacity (entries); `0` disables caching |
+| `REMEMBRA_HISTORY_LIMIT` | `20` | Max version snapshots kept per memory; `0` disables history |
+| `REMEMBRA_REDACT` | *(unset)* | `1` enables PII redaction at ingest (irreversible) — see [security.md](security.md#pii-redaction-opt-in-380) |
+| `REMEMBRA_ENCRYPT_KEY` | *(unset)* | 64-hex 32-byte key → AES-256-GCM at rest; run `remembra encrypt` — see [security.md](security.md#encryption-at-rest-opt-in-380) |
 | `REMEMBRA_DEBUG` | *(unset)* | `1` logs the storage root path at startup (off by default: log hygiene) |
 | `REMEMBRA_LOG` | *(auto)* | Force log format: `json` or `text`. Unset → auto: JSON when stderr is piped, text on a TTY. See [observability.md](observability.md) |
 

package/docs/lifecycle.md

@@ -75,6 +75,12 @@ same type + scope) — the LLM is only called when two memories are plausibly
 about the same thing. If the merge LLM fails, the item is **stored fresh**
 (fail-open: extraction never loses data).
 
+Since 3.8.0 a merge also snapshots the **pre-merge file** into
+`.history/<id>/` first — every past version stays recoverable with
+`memory_history` / `GET /memories/:id/history`, which renders a unified line
+diff of old → new for each version (pruned to `REMEMBRA_HISTORY_LIMIT`,
+default 20).
+
 ## Configuration
 
 | Variable | Default | Purpose |
@@ -88,7 +94,8 @@ about the same thing. If the merge LLM fails, the item is **stored fresh**
 ~/.remembra/
 ├── global/<id>.md             # active, global
 ├── scopes/<scope>/<id>.md     # active, project-scoped
-└── archived/
-    ├── global/<id>.md         # archived (excluded from search)
-    └── scopes/<scope>/<id>.md
+├── archived/
+│   ├── global/<id>.md         # archived (excluded from search)
+│   └── scopes/<scope>/<id>.md
+└── .history/<id>/<epoch>-<seq>.md   # superseded pre-images (3.8.0)
 ```

package/docs/memory-model.md

@@ -69,9 +69,39 @@ in `/repo/b`. Global memories are always visible.
 | `importance` | 1–5 | defaults to 3; higher ranks higher (same weight in both modes) |
 | `source` | string | originating session/client (optional) |
 | `provenance` | `explicit \| auto` | set automatically: `explicit` = stored deliberately, `auto` = digest-extracted; pre-3.4.0 files are neutral |
+| `confidence` | 0–1 | trust in this claim (3.8.0): explicit stores default `1.0`, digests `0.7` (the extraction LLM may supply its own). **Displayed, not ranked** — importance answers "relevant?", confidence answers "true?"; preserved through merge/import/export |
+| `related` | string[] | ids of linked memories (3.8.0) — see [Relationships](#relationships-380) |
 | `id` | 12-char id | assigned automatically (collision-safe) |
 | `createdAt` / `updatedAt` | ISO timestamps | assigned automatically |
 
+## Relationships (3.8.0)
+
+Memories can link to each other — a directed `related: [ids]` list in
+frontmatter, managed with `memory_relate`:
+
+```markdown
+related: [7133edba, 9f2e01aa]
+```
+
+- Edges are **stored on the source only**; backlinks are derived at read time
+  (`memory_get` / `GET /memories/:id` return both directions), so a link is a
+  single write with no consistency dance.
+- Targets are validated on `add` (they must exist); self-links are rejected.
+- Links do not affect ranking — retrieval is unchanged; they are structure for
+  the consumer to follow (decision → facts it rests on, history → decision it
+  records).
+
+## Version history (3.8.0)
+
+Any content-changing update (today: contradiction merges) first snapshots the
+on-disk pre-image into `~/.remembra/.history/<id>/<epoch>-<seq>.md` — a
+byte-for-byte copy of the file as it was. `memory_history` /
+`GET /memories/:id/history` return the versions newest-first, each with a
+unified line diff against its predecessor. Snapshots prune to
+`REMEMBRA_HISTORY_LIMIT` (default 20, `0` disables); embedding backfills and
+linking never snapshot (content unchanged). History files are invisible to
+`all()`/search — `.history` is never walked as data.
+
 ## Retrieval ranking
 
 When `memory_search` runs, memories are scored in layers:
@@ -131,7 +161,16 @@ Layout:
 $REMEMBRA_HOME/            # defaults to ~/.remembra
 ├── global/
 │   └── <id>.md
-└── scopes/
-    └── <scope>/
-        └── <id>.md
+├── scopes/
+│   └── <scope>/
+│       └── <id>.md
+├── archived/               # same shape, out of search (lifecycle.md)
+└── .history/<id>/          # superseded pre-images (version history, 3.8.0)
 ```
+
+> Opt-in: with `REMEMBRA_ENCRYPT_KEY` set, every file above is written as
+> AES-256-GCM ciphertext instead (same names, detected by magic bytes) —
+> see [security.md](security.md#encryption-at-rest-opt-in-380). With
+> `REMEMBRA_REDACT=1`, PII patterns are replaced with typed placeholders
+> (`<EMAIL>`, `<CARD>`, …) *before* this file is ever written — see
+> [security.md](security.md#pii-redaction-opt-in-380).

package/docs/observability.md

@@ -25,7 +25,8 @@ Example JSON events:
 
 Event names in the wild: `http_listening`, `mcp_listening`, `search`,
 `shutdown`, `crash_recovery`, `memory_parse_skipped`, `embedding_failed`,
-`touch_failed`, `merge_llm_failed`, `decay_failed`.
+`touch_failed`, `merge_llm_failed`, `decay_failed`, `redacted` (3.8.0 — PII
+found at ingest; fields are per-kind counts, never the matched text).
 
 ## Metrics — `GET /metrics`
 
@@ -38,7 +39,7 @@ stays exempt so unauthenticated readiness probes keep working.
 
 | Series | Type | Labels | Meaning |
 |---|---|---|---|
-| `remembra_http_requests_total` | counter | `route`, `method`, `status` | Requests. `route` is a fixed low-cardinality label (`health`/`metrics`/`memories`/`search`/`digest`/`maintain`/`memory_item`/`other`) — never the raw path. |
+| `remembra_http_requests_total` | counter | `route`, `method`, `status` | Requests. `route` is a fixed low-cardinality label (`health`/`metrics`/`memories`/`search`/`digest`/`maintain`/`memory_item`/`memory_sub`/`other`) — never the raw path. `memory_sub` = the `relate`/`history` sub-routes (3.8.0). |
 | `remembra_http_request_duration_seconds` | histogram | `route` | Request latency. |
 | `remembra_errors_total` | counter | `code`, `transport` | Classified errors (`http`/`mcp`). Codes: the [error codes](architecture.md#error-classification-audit-phase-2) plus `INVALID_INPUT`, `PAYLOAD_TOO_LARGE`, `INTERNAL`. |
 | `remembra_searches_total` | counter | — | `memory_search` invocations. |
@@ -49,6 +50,10 @@ stays exempt so unauthenticated readiness probes keep working.
 | `remembra_digest_duration_seconds` | histogram | — | Digest run latency (includes lock queueing). |
 | `remembra_cache_events_total` | counter | `result` | Parse-cache probes: `hit` / `miss`. |
 | `remembra_cache_entries` | gauge | — | Parse-cache entries currently held. |
+| `remembra_redactions_total` | counter | `kind` | PII placeholders written at ingest (3.8.0): `email`/`ssn`/`card`/`phone`/`secret`. Zero (absent) unless `REMEMBRA_REDACT=1`. |
+| `remembra_relate_total` | counter | `action` | `memory_relate` link writes (3.8.0): `add` / `remove` (no-op idempotent calls don't count). |
+| `remembra_history_snapshots_total` | counter | — | History pre-images written (3.8.0). Growth rate ≈ content-changing updates. |
+| `remembra_encryption_migrations_total` | counter | `mode` | `remembra encrypt`/`decrypt` files converted (3.8.0). |
 | `remembra_info` | gauge | `version` | Build info, always `1`. |
 
 ### Scrape config

package/docs/security.md

@@ -61,6 +61,60 @@ Retrieved memories should be treated as **data with provenance**, not commands
 | **ID collisions** | 12-hex IDs (2⁴⁸) + existence check on store |
 | **Content-Length** | Set on every response |
 | **Metrics auth (3.7.0)** | `GET /metrics` sits *after* the API-key check — counters and latencies never leak without the key (`/health` stays exempt for readiness probes) |
+| **PII redaction (3.8.0, opt-in)** | `REMEMBRA_REDACT=1` strips emails, Luhn-valid card numbers, SSNs, phone numbers and high-entropy secrets at the *ingest layer* (`memory_store`, digest items, merge output) — raw patterns never reach disk, embeddings, or export snapshots |
+| **Encryption at rest (3.8.0, opt-in)** | `REMEMBRA_ENCRYPT_KEY` → AES-256-GCM per file; reading an encrypted file without the key fails **loudly** (`ENCRYPTED_NO_KEY`, HTTP 503, `/health` 503) — never warn-skipped as if the data didn't exist |
+
+## Encryption at rest (opt-in, 3.8.0)
+
+Plain markdown stays the default (you can read and edit your memories —
+that's the point). Setting a key flips storage to ciphertext:
+
+```bash
+export REMEMBRA_ENCRYPT_KEY="$(node -p 'require("node:crypto").randomBytes(32).toString("hex")')"
+remembra encrypt    # migrate the existing tree (memories + history) in place
+remembra --http     # from here on, writes are AES-256-GCM
+```
+
+| | |
+|---|---|
+| **Format** | `RMBENC1 │ nonce(12) │ tag(16) │ ciphertext` per file — AES-256-GCM via `node:crypto`, zero dependencies, random nonce per write, same `.md` names (detected by magic bytes) |
+| **Key** | 64 hex chars (32 bytes) used directly — no KDF needed for a high-entropy symmetric key. *Not* a human passphrase |
+| **Mixed trees** | Plain files stay readable while the key is set, and `remembra decrypt` reverses the migration — both directions are idempotent |
+| **Fail-loud** | Encrypted file + missing/wrong key → `ENCRYPTED_NO_KEY` (HTTP 503, MCP `[ENCRYPTED_NO_KEY]`, `/health` 503). GCM auth failure makes a wrong key indistinguishable from tampering |
+| **What it protects** | At-rest exfiltration: stolen backups, copied `~/.remembra`, a leaked git history of the directory |
+| **What it does not** | A runtime attacker on your machine can read the env of the process holding the key — this is not a substitute for OS disk encryption & process isolation; and files stop being human-readable (decrypt first: unset the key after `remembra decrypt`) |
+
+Export snapshots (`remembra export`) contain **decrypted** JSON — they are
+protected by file permissions like any other backup.
+
+## PII redaction (opt-in, 3.8.0)
+
+```bash
+export REMEMBRA_REDACT=1
+```
+
+Everything that enters storage — `memory_store` calls, every digest-extracted
+item, and merge output — runs through a pattern filter first:
+
+| Matches | Placeholder | Guard against false positives |
+|---------|-------------|------------------------------|
+| Emails | `<EMAIL>` | — |
+| Card numbers (13–19 digits) | `<CARD>` | must pass the **Luhn** check |
+| SSNs (`123-45-6789`) | `<SSN>` | dashed format only |
+| Phone numbers | `<PHONE>` | separators required, 10–15 digits — dates (`2026-09-23`, 8 digits) and versions (`3.6.0`) never match |
+| Provider tokens (`sk-…`, `ghp_…`, `AKIA…`) + ≥40-char high-entropy blobs | `<SECRET>` | generic blobs must contain a digit (long English words survive) |
+
+Properties:
+
+- **Irreversible by design** — the original bytes are not kept anywhere;
+  before enabling, assume anything redacted is gone from future exports too.
+- **Not a compliance control** — regex covers the common shapes; names,
+  addresses in free prose, and anything the patterns miss are untouched.
+  Treat it as belt-and-braces on top of not feeding PII to your LLM providers.
+- The **extraction LLM still sees the raw transcript** (it must, to
+  understand it) — redaction guards what Remembra *stores*, not what your
+  `REMEMBRA_LLM` provider receives. Use `memory_store` (not digest) for
+  content you must not send to a third-party model.
 
 ## Deployment checklist
 
@@ -82,17 +136,22 @@ remembra --http
       directory)
 - [ ] Periodic `memory_list {type: "role"}` audit
 - [ ] LLM/embedding keys scoped to least privilege
+- [ ] Consider `REMEMBRA_REDACT=1` before storing content derived from other
+      people's data (redaction is irreversible — decide once, up front)
+- [ ] Consider `REMEMBRA_ENCRYPT_KEY` when the store leaves your machine
+      (backups, shared filesystems) — generate 32 random bytes, store the key
+      in your secret manager, run `remembra encrypt`
 
 ## Known non-goals (current version)
 
 - **No multi-tenancy** — one store per installation; scope isolates *projects*,
   not *users*. Never share one instance between mutually untrusting users.
-- **No encryption at rest** — files are plaintext markdown (by design: you can
-  read and edit them). Use filesystem-level encryption if needed.
-- **No PII redaction** — what you store is what's written to disk.
 - **Single-writer assumption per store, now cross-process safe** — mutations
   take an advisory lockfile (`O_EXCL`, stale-steal, typed `LOCK_TIMEOUT`), so
   an MCP server, the `remembra maintain` CLI, and a session digest can run
   against one store concurrently on one machine. Network filesystems with
   unreliable `O_EXCL` semantics are untested; `remembra export` for backups
   across machines.
+- Encryption-at-rest and PII redaction are **off by default** (both since
+  3.8.0, both opt-in above) — defaults keep files human-readable and
+  byte-faithful to what you stored.

package/docs/tools.md

@@ -1,6 +1,6 @@
 # Tool Reference
 
-Remembra exposes four MCP tools. All of them work the same way across every
+Remembra exposes nine MCP tools. All of them work the same way across every
 MCP-compatible client.
 
 ## `memory_store`
@@ -15,6 +15,7 @@ Persist a memory so it survives context-window resets.
 | `tags` | string[] | no | `[]` | Keywords that boost retrieval |
 | `importance` | 1–5 | no | `3` | Ranking weight |
 | `source` | string | no | — | Originating session/client |
+| `confidence` | 0–1 | no | auto | Trust in this claim — defaults to `1.0` for explicit stores, `0.7` for digest extractions (the LLM may supply its own) |
 
 **When to use which type:**
 - Something the model should *know* → `fact`
@@ -64,6 +65,50 @@ Permanently delete a memory.
 
 Returns an error result if no memory matches the id.
 
+## `memory_get`
+
+Fetch one memory by id with its full content, its `related` links resolved,
+and its **backlinks** (memories that point at it). Use after `memory_search`
+when you need the whole statement, not the snippet.
+
+| Argument | Type | Required | Description |
+|----------|------|----------|-------------|
+| `id` | string | ✅ | Memory id |
+
+Returns `[NOT_FOUND] …` with `isError: true` if no memory matches.
+
+## `memory_relate`
+
+Create or remove directed links between memories — the relationship graph.
+Tie a decision to the facts it depends on, or a history entry to the decision
+it records. Targets must exist; backlinks are derived at read time, so one
+write keeps the edge consistent. See [memory-model.md](memory-model.md#relationships-380).
+
+| Argument | Type | Required | Default | Description |
+|----------|------|----------|---------|-------------|
+| `id` | string | ✅ | — | Source memory id |
+| `related` | string[] | ✅ | — | Target memory ids (1–50; must exist on `add`) |
+| `action` | `add \| remove` | no | `add` | Create or delete the links |
+
+Idempotent: re-linking what's already linked is a no-op (no `updatedAt` churn).
+A memory cannot be related to itself (`INVALID_INPUT`).
+
+## `memory_history`
+
+Version history of one memory with unified line diffs — every
+content-changing update (e.g. a contradiction merge) snapshots the previous
+version first. Newest version first; each entry diffs against its
+predecessor. See [lifecycle.md](lifecycle.md#contradiction-merging).
+
+| Argument | Type | Required | Description |
+|----------|------|----------|-------------|
+| `id` | string | ✅ | Memory id |
+| `limit` | 1–100 | no | Max *past* versions to return |
+
+Snapshots live in `~/.remembra/.history/<id>/`, pruned to
+`REMEMBRA_HISTORY_LIMIT` (default 20) per memory; `0` disables history.
+Non-content updates (embedding backfills, linking) never snapshot.
+
 ## `memory_digest`
 
 Extract memories from a conversation transcript using the configured LLM and
@@ -94,6 +139,8 @@ Returns counts + affected ids. Also available as `POST /maintain` and the
 remembra maintain            # decay sweep + vector backfill (one-shot, prints JSON)
 remembra export <file>.json  # full backup snapshot incl. archived memories
 remembra import <file>.json  # restore; validates whole file first (atomic), idempotent
+remembra encrypt             # migrate the whole tree to ciphertext at rest (needs REMEMBRA_ENCRYPT_KEY)
+remembra decrypt             # migrate back to plain markdown (also needs the key)
 ```
 
 Import skips existing ids and exact-duplicate contents, so running it twice —

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@hilbras/remembra",
-  "version": "3.7.0",
+  "version": "3.8.0",
   "description": "External memory for AI assistants — remember facts, decisions, roles and history across sessions. MCP server for OpenCode, Claude Code, Cline, Kimi Code and more.",
   "type": "module",
   "bin": {