@mnemoverse/mcp-memory-server 0.10.2 → 0.12.0

package/dist/prompts.js

@@ -0,0 +1,110 @@
+/**
+ * MCP prompts: three named entry points to the memory tools.
+ *
+ * Clients that support the prompts capability show them as commands (Claude
+ * Code as `/mcp__mnemoverse__<name>`, Claude.ai connectors in the slash menu).
+ * Each returns one user message that points the model at the right tool. They
+ * add no capability beyond the tools; a client without prompt support ignores
+ * them.
+ *
+ * Moved here from the hosted connector (mnemoverse-mcp-remote,
+ * src/prompts/index.ts) in step 3c of the ADR-025 plan, with the same names,
+ * arguments and wording, so the connector can register these instead of its
+ * copy. One difference is deliberate: `domain` in save_insight is printed as
+ * an exact JSON literal (src/names.ts), like every domain this package names,
+ * because the model has to send it back to memory_write byte for byte. For a
+ * plain domain the message is identical to the connector's. The other
+ * arguments are trimmed, as the connector trims them, because a blank topic is
+ * not a request.
+ */
+import { z } from "zod";
+import { ErrorCode, McpError } from "@modelcontextprotocol/sdk/types.js";
+import { exactLiteral, withDomainEscapeLegend } from "./names.js";
+/**
+ * Register the three memory prompts on `server`. They call nothing: each
+ * renders a message that asks the model to use memory_read or memory_write.
+ */
+export function registerMemoryPrompts(server) {
+    server.registerPrompt("recall", {
+        title: "Recall from memory",
+        description: "Search your Mnemoverse memory for saved information about a specific topic.",
+        argsSchema: {
+            topic: z
+                .string()
+                .trim()
+                .min(1)
+                .describe("What to recall — a topic, project, person, or open question."),
+        },
+    }, ({ topic }) => ({
+        messages: [
+            {
+                role: "user",
+                content: {
+                    type: "text",
+                    text: `Use memory_read to search my saved Mnemoverse memories for this specific topic: "${topic}". Summarize only the returned memory text. If nothing relevant is stored, say so plainly.`,
+                },
+            },
+        ],
+    }));
+    server.registerPrompt("save_insight", {
+        title: "Save an insight to memory",
+        description: "Store a new insight, fact, or decision in your Mnemoverse long-term memory.",
+        argsSchema: {
+            insight: z
+                .string()
+                .trim()
+                .min(1)
+                .describe("The insight, fact, or decision to remember."),
+            domain: z
+                .string()
+                .optional()
+                .describe("Optional domain/category to file it under (e.g. 'project-x')."),
+        },
+    }, ({ insight, domain }) => {
+        // The domain is an identifier the model must reproduce exactly, so it is
+        // printed as a JSON literal: a quote, backslash, newline or invisible
+        // character inside it is escaped instead of closing the quotes early
+        // (Copilot on #148). A plain domain prints exactly as the connector's
+        // `"${domain}"` did. A domain too long to print exactly is refused
+        // rather than named inexactly or dropped, since dropping it would file
+        // the insight somewhere the user did not ask for.
+        let under = "";
+        if (domain) {
+            const exact = exactLiteral(domain);
+            if (exact === null) {
+                throw new McpError(ErrorCode.InvalidParams, "save_insight: this domain is too long to be quoted exactly in the message. Pass a shorter domain.");
+            }
+            under = ` under the domain ${exact.literal}`;
+        }
+        const text = `Use the memory_write tool to store this insight in my long-term memory${under}: "${insight}". Then confirm exactly what was stored.`;
+        return {
+            messages: [
+                {
+                    role: "user",
+                    content: {
+                        type: "text",
+                        text: withDomainEscapeLegend(text, domain),
+                    },
+                },
+            ],
+        };
+    });
+    server.registerPrompt("what_do_you_know", {
+        title: "What do you know about…",
+        description: "Get a briefing of what your memory holds about a subject.",
+        argsSchema: {
+            subject: z.string().trim().min(1).describe("The subject to brief on."),
+        },
+    }, ({ subject }) => ({
+        messages: [
+            {
+                role: "user",
+                content: {
+                    type: "text",
+                    text: `Use memory_read to look up what I have explicitly stored about "${subject}". Give me a concise briefing based only on the returned memory text and flag gaps where nothing is stored.`,
+                },
+            },
+        ],
+    }));
+}
+//# sourceMappingURL=prompts.js.map

package/dist/prompts.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"prompts.js","sourceRoot":"","sources":["../src/prompts.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,oCAAoC,CAAC;AACzE,OAAO,EAAE,YAAY,EAAE,sBAAsB,EAAE,MAAM,YAAY,CAAC;AAElE;;;GAGG;AACH,MAAM,UAAU,qBAAqB,CAAC,MAAiB;IACrD,MAAM,CAAC,cAAc,CACnB,QAAQ,EACR;QACE,KAAK,EAAE,oBAAoB;QAC3B,WAAW,EAAE,6EAA6E;QAC1F,UAAU,EAAE;YACV,KAAK,EAAE,CAAC;iBACL,MAAM,EAAE;iBACR,IAAI,EAAE;iBACN,GAAG,CAAC,CAAC,CAAC;iBACN,QAAQ,CAAC,8DAA8D,CAAC;SAC5E;KACF,EACD,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,CAAC;QACd,QAAQ,EAAE;YACR;gBACE,IAAI,EAAE,MAAe;gBACrB,OAAO,EAAE;oBACP,IAAI,EAAE,MAAe;oBACrB,IAAI,EAAE,oFAAoF,KAAK,4FAA4F;iBAC5L;aACF;SACF;KACF,CAAC,CACH,CAAC;IAEF,MAAM,CAAC,cAAc,CACnB,cAAc,EACd;QACE,KAAK,EAAE,2BAA2B;QAClC,WAAW,EAAE,6EAA6E;QAC1F,UAAU,EAAE;YACV,OAAO,EAAE,CAAC;iBACP,MAAM,EAAE;iBACR,IAAI,EAAE;iBACN,GAAG,CAAC,CAAC,CAAC;iBACN,QAAQ,CAAC,6CAA6C,CAAC;YAC1D,MAAM,EAAE,CAAC;iBACN,MAAM,EAAE;iBACR,QAAQ,EAAE;iBACV,QAAQ,CAAC,+DAA+D,CAAC;SAC7E;KACF,EACD,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,EAAE,EAAE;QACtB,yEAAyE;QACzE,sEAAsE;QACtE,qEAAqE;QACrE,sEAAsE;QACtE,mEAAmE;QACnE,uEAAuE;QACvE,kDAAkD;QAClD,IAAI,KAAK,GAAG,EAAE,CAAC;QACf,IAAI,MAAM,EAAE,CAAC;YACX,MAAM,KAAK,GAAG,YAAY,CAAC,MAAM,CAAC,CAAC;YACnC,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;gBACnB,MAAM,IAAI,QAAQ,CAChB,SAAS,CAAC,aAAa,EACvB,mGAAmG,CACpG,CAAC;YACJ,CAAC;YACD,KAAK,GAAG,qBAAqB,KAAK,CAAC,OAAO,EAAE,CAAC;QAC/C,CAAC;QACD,MAAM,IAAI,GAAG,yEAAyE,KAAK,MAAM,OAAO,0CAA0C,CAAC;QACnJ,OAAO;YACL,QAAQ,EAAE;gBACR;oBACE,IAAI,EAAE,MAAe;oBACrB,OAAO,EAAE;wBACP,IAAI,EAAE,MAAe;wBACrB,IAAI,EAAE,sBAAsB,CAAC,IAAI,EAAE,MAAM,CAAC;qBAC3C;iBACF;aACF;SACF,CAAC;IACJ,CAAC,CACF,CAAC;IAEF,MAAM,CAAC,cAAc,CACnB,kBAAkB,EAClB;QACE,KAAK,EAAE,yBAAyB;QAChC,WAAW,EAAE,2DAA2D;QACxE,UAAU,EAAE;YACV,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,0BAA0B,CAAC;SACvE;KACF,EACD,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC,CAAC;QAChB,QAAQ,EAAE;YACR;gBACE,IAAI,EAAE,MAAe;gBACrB,OAAO,EAAE;oBACP,IAAI,EAAE,MAAe;oBACrB,IAAI,EAAE,mEAAmE,OAAO,6GAA6G;iBAC9L;aACF;SACF;KACF,CAAC,CACH,CAAC;AACJ,CAAC"}

package/dist/render.d.ts

@@ -75,8 +75,82 @@ export type RecentItem = {
  */
 export declare function safeInline(s: unknown, cap?: number): string;
 /**
- * ` [by X]` / ` [by X · external]` — agent identity only, never the human
- * `principal` (may be an email / PII), even though the response carries it.
+ * `agent_name || agent || client_env`, exactly as the wire sent it: no
+ * sanitising, no suffix. The single raw value `authorName` and
+ * `formatAuthorTag` below BOTH derive from, so the bare structured field and
+ * the quoted text tag cannot end up naming two different agents. The same
+ * raw value is what src/tools.ts passes to `withDomainEscapeLegend` as an
+ * author candidate, so its independent recomputation of `exactLiteral` finds
+ * the same literal `formatAuthorTag` printed (I66-3, issue #66).
+ *
+ * Returns `""`, not `null`/`undefined`, when there is no renderable name at
+ * all: an absent provenance, every field empty, or the field that won the
+ * `||` chain arriving with the wrong wire type. A numeric `agent_name` is a
+ * real shape a hostile or buggy connector sends, not a hypothetical one; see
+ * "a non-string where the type promised a string" below, and CN-032's own
+ * history with this exact field.
+ */
+export declare function rawAuthorName(p?: Provenance | null): string;
+/**
+ * "X" / "X · external": agent identity only, never the human `principal`
+ * (may be an email / PII), even though the response carries it. Empty string
+ * when there is no renderable name.
+ *
+ * Feeds `structuredContent.author` (via `structuredItem`, below), not the
+ * text tag; `formatAuthorTag` now quotes `rawAuthorName`'s value itself
+ * (I66-1) rather than building its bracketed text from this one, so the two
+ * no longer share a derivation the way the original S4 extraction intended,
+ * and instead share `rawAuthorName` as their common raw input.
+ *
+ * Until owner decision I66-2 (issue #66, 2026-09-23), this ran the raw name
+ * through `safeInline`, the same ASCII-only, bracket-stripping sanitiser the
+ * text tag used, which erased Cyrillic/CJK/Arabic names from the DATA just
+ * as completely as it erased them from the text: a second, previously
+ * unreported instance of the bug the issue reports for the tag, found with
+ * zero non-Latin fixtures anywhere in this file's history. It now runs
+ * through `structuredText` (src/names.ts) instead, the same
+ * control/bidi/zero-width-only normalisation `reason` already gets on this
+ * surface, so a name survives here whenever it survives on the page.
+ *
+ * This deliberately drops bracket-stripping on this field: a bare JSON
+ * value cannot be "closed early" by a literal `]` or `"` the way a
+ * hand-built sentence can (the MCP SDK serialises the field; this code does
+ * not concatenate it into one). The property CN-032 actually needs here, a
+ * reader must not be shown something that is not there or have text
+ * hidden/reordered inside it, is exactly what `structuredText` still strips
+ * (control, bidi, zero-width). The `[by "…"]` TEXT tag carries the
+ * anti-injection burden for the rendered surface instead, via
+ * `exactLiteral`'s quoting.
+ */
+export declare function authorName(p?: Provenance | null): string;
+/**
+ * ` [by "X"]` / ` [by "X" · external]`: agent identity only, never the
+ * human `principal` (may be an email / PII), even though the response
+ * carries it.
+ *
+ * Quoted as an exact JSON literal (`exactLiteral`, src/names.ts), the same
+ * treatment `formatDomainTag` below already gives `@domain`, for EVERY
+ * name, including a plain ASCII one like "sigma", not only names that
+ * happen to need escaping (owner decision I66-1, issue #66, 2026-09-24:
+ * full symmetry with domains, no second unquoted branch). Before this, a
+ * Cyrillic, CJK or Arabic `agent_name` sanitised through `safeInline`'s
+ * ASCII-only charset to an empty string, and the tag disappeared with no
+ * trace, the exact defect `formatDomainTag` was already fixed for in 0.8.1,
+ * reached here in a later release (issue #66).
+ *
+ * Operates on `rawAuthorName`, not `authorName`'s sanitised value: quoting
+ * the raw wire name is what lets `exactLiteral` print and escape characters
+ * a sanitiser would have dropped, and what lets `withDomainEscapeLegend`'s
+ * independent recomputation (src/tools.ts) find the same literal this
+ * function printed.
+ *
+ * `" · external"` sits OUTSIDE the quotes (I66-3): it is a server-added
+ * qualifier, not part of the name, so it is not part of what gets escaped
+ * and not part of what the escape-legend candidate has to match.
+ *
+ * The cap is `MAX_DOMAIN_TAG_LITERAL` itself, not a second constant with the
+ * same value (I66-4): a name too long to print exactly gets the same
+ * disclosed, name-free fallback `formatDomainTag` uses, reworded for "name".
  */
 export declare function formatAuthorTag(p?: Provenance | null): string;
 /**
@@ -159,11 +233,48 @@ export declare function formatDateTag(createdAt?: string): string;
  * it; we simply do not put it in front of a reader yet.
  */
 export declare function formatReadItem(item: ReadItem, index: number): string;
+/**
+ * The `structuredContent` twin of {@link formatReadItem} (S4, structured-output
+ * plan): the same item, shaped for memory_read's `outputSchema` instead of for
+ * a line of text.
+ *
+ * PRECONDITION, enforced by the caller (src/tools.ts) before this is ever
+ * invoked: `item.atom_id`, `item.content` and `item.domain` are all strings.
+ * core's MemoryItemSchema sends all three on every item; a response that
+ * doesn't is caught by the handler's item guard and answered with
+ * `unreadableAnswerReply` before `structuredItem` is reached, so the casts
+ * below are a documented precondition, not a runtime assumption made here.
+ *
+ * `content` is carried EXACTLY, uncapped and unnormalised (decision OD-11,
+ * owner, 2026-09-23): unlike the text line, which goes through `capResult`
+ * for the 25K-token result-size cap, `structuredContent` is not capped
+ * anywhere else in this package either (memory_write's `reason` is the only
+ * normalised structured field, and that's control/bidi/zero-width hygiene on
+ * a diagnostic string, not a length cap on the memory itself); a client
+ * reading structured data reads `content` as the stored memory, and a
+ * silently shorter value there would be a different kind of lie than a
+ * truncated text block with a notice at the end.
+ */
+export declare function structuredItem(item: ReadItem): {
+    memory_id: string;
+    content: string;
+    domain: string;
+    created_at?: string;
+    author?: string;
+};
 /**
  * One memory_list_recent line — a feed entry, not a search hit: no
  * relevance, date leads because the feed is ORDERED by it.
  */
 export declare function formatRecentItem(item: RecentItem, index: number): string;
+/**
+ * The shape of a continuation token this client is willing to pass on
+ * (CN-032): the server-supplied cursor is opaque, so this is an allowlist
+ * of bytes, not a format. One constant for BOTH surfaces, the text (below)
+ * and `structuredContent.next_cursor` (src/tools.ts), so they cannot
+ * disagree about which token is passable.
+ */
+export declare const CURSOR_RE: RegExp;
 /**
  * Full feed page: items newest-first + how to continue / that it's over.
  *
@@ -175,4 +286,4 @@ export declare function formatRecentItem(item: RecentItem, index: number): strin
  * 2026-08-08). Once-per-answer still holds — withDomainEscapeLegend is
  * at-most-once by construction (src/names.ts).
  */
-export declare function formatRecentPage(items: RecentItem[], nextCursor?: string | null): string;
+export declare function formatRecentPage(items: RecentItem[], nextCursor?: unknown): string;

package/dist/render.js

@@ -10,8 +10,8 @@
  * shapes without atom_id/created_at degrade gracefully: those parts of
  * the line are simply omitted.
  */
-import { MAX_DOMAIN_TAG_LITERAL, exactLiteral } from "./names.js";
-import { parseAsUtc } from "./time.js";
+import { MAX_DOMAIN_TAG_LITERAL, exactLiteral, structuredText } from "./names.js";
+import { parseAsUtc, utcInstant } from "./time.js";
 /**
  * Sanitize a string for inline interpolation into tool output (CN-032: hostile
  * connectors choose their own agent_name). The single implementation, imported
@@ -60,17 +60,115 @@ export function safeInline(s, cap = 200) {
         .slice(0, cap);
 }
 /**
- * ` [by X]` / ` [by X · external]` — agent identity only, never the human
- * `principal` (may be an email / PII), even though the response carries it.
+ * `agent_name || agent || client_env`, exactly as the wire sent it: no
+ * sanitising, no suffix. The single raw value `authorName` and
+ * `formatAuthorTag` below BOTH derive from, so the bare structured field and
+ * the quoted text tag cannot end up naming two different agents. The same
+ * raw value is what src/tools.ts passes to `withDomainEscapeLegend` as an
+ * author candidate, so its independent recomputation of `exactLiteral` finds
+ * the same literal `formatAuthorTag` printed (I66-3, issue #66).
+ *
+ * Returns `""`, not `null`/`undefined`, when there is no renderable name at
+ * all: an absent provenance, every field empty, or the field that won the
+ * `||` chain arriving with the wrong wire type. A numeric `agent_name` is a
+ * real shape a hostile or buggy connector sends, not a hypothetical one; see
+ * "a non-string where the type promised a string" below, and CN-032's own
+ * history with this exact field.
  */
-export function formatAuthorTag(p) {
+export function rawAuthorName(p) {
     if (!p)
         return "";
-    const raw = p.agent_name || p.agent || p.client_env || "";
-    const who = safeInline(raw, 64);
+    const raw = p.agent_name || p.agent || p.client_env;
+    return typeof raw === "string" ? raw : "";
+}
+/**
+ * "X" / "X · external": agent identity only, never the human `principal`
+ * (may be an email / PII), even though the response carries it. Empty string
+ * when there is no renderable name.
+ *
+ * Feeds `structuredContent.author` (via `structuredItem`, below), not the
+ * text tag; `formatAuthorTag` now quotes `rawAuthorName`'s value itself
+ * (I66-1) rather than building its bracketed text from this one, so the two
+ * no longer share a derivation the way the original S4 extraction intended,
+ * and instead share `rawAuthorName` as their common raw input.
+ *
+ * Until owner decision I66-2 (issue #66, 2026-09-23), this ran the raw name
+ * through `safeInline`, the same ASCII-only, bracket-stripping sanitiser the
+ * text tag used, which erased Cyrillic/CJK/Arabic names from the DATA just
+ * as completely as it erased them from the text: a second, previously
+ * unreported instance of the bug the issue reports for the tag, found with
+ * zero non-Latin fixtures anywhere in this file's history. It now runs
+ * through `structuredText` (src/names.ts) instead, the same
+ * control/bidi/zero-width-only normalisation `reason` already gets on this
+ * surface, so a name survives here whenever it survives on the page.
+ *
+ * This deliberately drops bracket-stripping on this field: a bare JSON
+ * value cannot be "closed early" by a literal `]` or `"` the way a
+ * hand-built sentence can (the MCP SDK serialises the field; this code does
+ * not concatenate it into one). The property CN-032 actually needs here, a
+ * reader must not be shown something that is not there or have text
+ * hidden/reordered inside it, is exactly what `structuredText` still strips
+ * (control, bidi, zero-width). The `[by "…"]` TEXT tag carries the
+ * anti-injection burden for the rendered surface instead, via
+ * `exactLiteral`'s quoting.
+ */
+export function authorName(p) {
+    // Present exactly when the text tag prints the name (Sigma, review round
+    // 3 on #66): the same exactLiteral check under MAX_DOMAIN_TAG_LITERAL
+    // decides, so a name the tag refuses ("(name cannot be printed exactly)")
+    // is withheld here too, and a name the tag prints is carried whole (the
+    // structuredText normalisation, never a truncated prefix). The old cap of
+    // 64 code points, inherited from safeInline, let the data hold a shorter
+    // name than the page showed, with nothing marking the cut.
+    const raw = rawAuthorName(p);
+    if (!raw || !exactLiteral(raw, MAX_DOMAIN_TAG_LITERAL))
+        return "";
+    // One stated exception: a name made only of the characters structuredText
+    // removes (whitespace, control, bidi, zero-width) is printed exactly in
+    // the tag, as an escaped literal with the legend, but leaves nothing to
+    // carry as a plain data value; the data omits the field rather than carry
+    // "" or the raw characters.
+    const who = structuredText(raw, MAX_DOMAIN_TAG_LITERAL);
     if (!who)
         return "";
-    return p.is_external ? ` [by ${who} · external]` : ` [by ${who}]`;
+    return p?.is_external === true ? `${who} · external` : who;
+}
+/**
+ * ` [by "X"]` / ` [by "X" · external]`: agent identity only, never the
+ * human `principal` (may be an email / PII), even though the response
+ * carries it.
+ *
+ * Quoted as an exact JSON literal (`exactLiteral`, src/names.ts), the same
+ * treatment `formatDomainTag` below already gives `@domain`, for EVERY
+ * name, including a plain ASCII one like "sigma", not only names that
+ * happen to need escaping (owner decision I66-1, issue #66, 2026-09-24:
+ * full symmetry with domains, no second unquoted branch). Before this, a
+ * Cyrillic, CJK or Arabic `agent_name` sanitised through `safeInline`'s
+ * ASCII-only charset to an empty string, and the tag disappeared with no
+ * trace, the exact defect `formatDomainTag` was already fixed for in 0.8.1,
+ * reached here in a later release (issue #66).
+ *
+ * Operates on `rawAuthorName`, not `authorName`'s sanitised value: quoting
+ * the raw wire name is what lets `exactLiteral` print and escape characters
+ * a sanitiser would have dropped, and what lets `withDomainEscapeLegend`'s
+ * independent recomputation (src/tools.ts) find the same literal this
+ * function printed.
+ *
+ * `" · external"` sits OUTSIDE the quotes (I66-3): it is a server-added
+ * qualifier, not part of the name, so it is not part of what gets escaped
+ * and not part of what the escape-legend candidate has to match.
+ *
+ * The cap is `MAX_DOMAIN_TAG_LITERAL` itself, not a second constant with the
+ * same value (I66-4): a name too long to print exactly gets the same
+ * disclosed, name-free fallback `formatDomainTag` uses, reworded for "name".
+ */
+export function formatAuthorTag(p) {
+    const raw = rawAuthorName(p);
+    if (!raw)
+        return "";
+    const exact = exactLiteral(raw, MAX_DOMAIN_TAG_LITERAL);
+    const printed = exact ? exact.literal : "(name cannot be printed exactly)";
+    return ` [by ${printed}${p?.is_external === true ? " · external" : ""}]`;
 }
 /**
  * ` @"domain"` — which store the memory actually came from, printed so it can
@@ -170,6 +268,45 @@ export function formatReadItem(item, index) {
     const head = `${index + 1}. ${content}${concepts}${formatDomainTag(item?.domain)}${formatAuthorTag(item?.provenance)}${formatDateTag(item?.created_at)}`;
     return item?.atom_id ? `${head}\n   id: ${item.atom_id}` : head;
 }
+/**
+ * The `structuredContent` twin of {@link formatReadItem} (S4, structured-output
+ * plan): the same item, shaped for memory_read's `outputSchema` instead of for
+ * a line of text.
+ *
+ * PRECONDITION, enforced by the caller (src/tools.ts) before this is ever
+ * invoked: `item.atom_id`, `item.content` and `item.domain` are all strings.
+ * core's MemoryItemSchema sends all three on every item; a response that
+ * doesn't is caught by the handler's item guard and answered with
+ * `unreadableAnswerReply` before `structuredItem` is reached, so the casts
+ * below are a documented precondition, not a runtime assumption made here.
+ *
+ * `content` is carried EXACTLY, uncapped and unnormalised (decision OD-11,
+ * owner, 2026-09-23): unlike the text line, which goes through `capResult`
+ * for the 25K-token result-size cap, `structuredContent` is not capped
+ * anywhere else in this package either (memory_write's `reason` is the only
+ * normalised structured field, and that's control/bidi/zero-width hygiene on
+ * a diagnostic string, not a length cap on the memory itself); a client
+ * reading structured data reads `content` as the stored memory, and a
+ * silently shorter value there would be a different kind of lie than a
+ * truncated text block with a notice at the end.
+ */
+export function structuredItem(item) {
+    const author = authorName(item.provenance);
+    const created = utcInstant(item.created_at);
+    return {
+        memory_id: item.atom_id,
+        content: item.content,
+        domain: item.domain,
+        // The rule the text already applies through formatDateTag: a value that
+        // does not parse as a date is no creation instant, whatever its type, and
+        // the field promises a UTC ISO-8601 instant. A value that states its
+        // offset is carried as sent; an offset-less one (UTC by contract) is
+        // re-emitted as the UTC instant the text renders, since a consumer
+        // would otherwise read it as local time (src/time.ts, utcInstant).
+        ...(created !== null ? { created_at: created } : {}),
+        ...(author ? { author } : {}),
+    };
+}
 /**
  * One memory_list_recent line — a feed entry, not a search hit: no
  * relevance, date leads because the feed is ORDERED by it.
@@ -183,6 +320,14 @@ export function formatRecentItem(item, index) {
     const head = `${index + 1}. ${date ? `[${date}] ` : ""}${content}${concepts}${formatDomainTag(item?.domain)}${formatAuthorTag(item?.provenance)}`;
     return item?.atom_id ? `${head}\n   id: ${item.atom_id}` : head;
 }
+/**
+ * The shape of a continuation token this client is willing to pass on
+ * (CN-032): the server-supplied cursor is opaque, so this is an allowlist
+ * of bytes, not a format. One constant for BOTH surfaces, the text (below)
+ * and `structuredContent.next_cursor` (src/tools.ts), so they cannot
+ * disagree about which token is passable.
+ */
+export const CURSOR_RE = /^[A-Za-z0-9_=-]{1,512}$/;
 /**
  * Full feed page: items newest-first + how to continue / that it's over.
  *
@@ -194,6 +339,9 @@ export function formatRecentItem(item, index) {
  * 2026-08-08). Once-per-answer still holds — withDomainEscapeLegend is
  * at-most-once by construction (src/names.ts).
  */
+// `nextCursor` is typed loosely on purpose: it is a server-supplied wire
+// value, and a number where a string was promised must fail the gate below
+// rather than be coerced into it by the regex test (review, 2026-09-23).
 export function formatRecentPage(items, nextCursor) {
     const lines = items.map((it, i) => formatRecentItem(it, i));
     // Defense-in-depth (CN-032 posture): the cursor is server-supplied and
@@ -218,7 +366,7 @@ export function formatRecentPage(items, nextCursor) {
     if (nextCursor == null) {
         tail = `\n\n(end of feed — nothing older)`;
     }
-    else if (/^[A-Za-z0-9_=-]{1,512}$/.test(nextCursor)) {
+    else if (typeof nextCursor === "string" && CURSOR_RE.test(nextCursor)) {
         tail = `\n\nMore older entries exist — pass cursor: ${nextCursor}`;
     }
     else {

package/dist/render.js.map

@@ -1 +1 @@
-{"version":3,"file":"render.js","sourceRoot":"","sources":["../src/render.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,EAAE,sBAAsB,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAClE,OAAO,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC;AA8BvC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAqCG;AACH,MAAM,UAAU,UAAU,CAAC,CAAU,EAAE,GAAG,GAAG,GAAG;IAC9C,IAAI,OAAO,CAAC,KAAK,QAAQ;QAAE,OAAO,EAAE,CAAC;IACrC,OAAO,CAAC;SACL,OAAO,CAAC,eAAe,EAAE,GAAG,CAAC;SAC7B,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC;SACpB,IAAI,EAAE;SACN,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;AACnB,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,eAAe,CAAC,CAAqB;IACnD,IAAI,CAAC,CAAC;QAAE,OAAO,EAAE,CAAC;IAClB,MAAM,GAAG,GAAG,CAAC,CAAC,UAAU,IAAI,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,UAAU,IAAI,EAAE,CAAC;IAC1D,MAAM,GAAG,GAAG,UAAU,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;IAChC,IAAI,CAAC,GAAG;QAAE,OAAO,EAAE,CAAC;IACpB,OAAO,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,QAAQ,GAAG,cAAc,CAAC,CAAC,CAAC,QAAQ,GAAG,GAAG,CAAC;AACpE,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AACH,MAAM,UAAU,eAAe,CAAC,MAAe;IAC7C,IAAI,CAAC,MAAM,IAAI,MAAM,KAAK,SAAS;QAAE,OAAO,EAAE,CAAC;IAC/C,MAAM,KAAK,GAAG,YAAY,CAAC,MAAM,EAAE,sBAAsB,CAAC,CAAC;IAC3D,OAAO,KAAK,CAAC,CAAC,CAAC,KAAK,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,sCAAsC,CAAC;AAC/E,CAAC;AAED;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,MAAM,UAAU,aAAa,CAAC,SAAkB;IAC9C,MAAM,CAAC,GAAG,UAAU,CAAC,SAAS,CAAC,CAAC;IAChC,IAAI,CAAC,KAAK,IAAI;QAAE,OAAO,EAAE,CAAC;IAC1B,MAAM,GAAG,GAAG,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC;IACtC,OAAO,MAAM,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,GAAG,CAAC,KAAK,CAAC,EAAE,EAAE,EAAE,CAAC,GAAG,CAAC;AACxD,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AACH,MAAM,UAAU,cAAc,CAAC,IAAc,EAAE,KAAa;IAC1D,MAAM,OAAO,GAAG,IAAI,EAAE,OAAO,IAAI,SAAS,CAAC;IAC3C,MAAM,QAAQ,GACZ,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,QAAQ,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC;QACvD,CAAC,CAAC,KAAK,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG;QAClC,CAAC,CAAC,EAAE,CAAC;IACT,MAAM,IAAI,GAAG,GAAG,KAAK,GAAG,CAAC,KAAK,OAAO,GAAG,QAAQ,GAAG,eAAe,CAChE,IAAI,EAAE,MAAM,CACb,GAAG,eAAe,CAAC,IAAI,EAAE,UAAU,CAAC,GAAG,aAAa,CAAC,IAAI,EAAE,UAAU,CAAC,EAAE,CAAC;IAC1E,OAAO,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC,GAAG,IAAI,YAAY,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;AAClE,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,gBAAgB,CAAC,IAAgB,EAAE,KAAa;IAC9D,MAAM,OAAO,GAAG,IAAI,EAAE,OAAO,IAAI,SAAS,CAAC;IAC3C,MAAM,QAAQ,GACZ,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,QAAQ,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC;QACvD,CAAC,CAAC,KAAK,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG;QAClC,CAAC,CAAC,EAAE,CAAC;IACT,MAAM,IAAI,GAAG,aAAa,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IACjE,MAAM,IAAI,GAAG,GAAG,KAAK,GAAG,CAAC,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,CAAC,CAAC,EAAE,GAAG,OAAO,GAAG,QAAQ,GAAG,eAAe,CAC3F,IAAI,EAAE,MAAM,CACb,GAAG,eAAe,CAAC,IAAI,EAAE,UAAU,CAAC,EAAE,CAAC;IACxC,OAAO,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC,GAAG,IAAI,YAAY,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;AAClE,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,UAAU,gBAAgB,CAAC,KAAmB,EAAE,UAA0B;IAC9E,MAAM,KAAK,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,gBAAgB,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC;IAC5D,uEAAuE;IACvE,0EAA0E;IAC1E,8EAA8E;IAC9E,8EAA8E;IAC9E,yEAAyE;IACzE,wBAAwB;IACxB,EAAE;IACF,qEAAqE;IACrE,0EAA0E;IAC1E,yEAAyE;IACzE,0EAA0E;IAC1E,oEAAoE;IACpE,2DAA2D;IAC3D,wEAAwE;IACxE,wEAAwE;IACxE,0EAA0E;IAC1E,uEAAuE;IACvE,SAAS;IACT,IAAI,IAAY,CAAC;IACjB,IAAI,UAAU,IAAI,IAAI,EAAE,CAAC;QACvB,IAAI,GAAG,mCAAmC,CAAC;IAC7C,CAAC;SAAM,IAAI,yBAAyB,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC;QACtD,IAAI,GAAG,+CAA+C,UAAU,EAAE,CAAC;IACrE,CAAC;SAAM,CAAC;QACN,IAAI,GAAG,uHAAuH,CAAC;IACjI,CAAC;IACD,OAAO,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC;AACnC,CAAC"}
+{"version":3,"file":"render.js","sourceRoot":"","sources":["../src/render.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,EAAE,sBAAsB,EAAE,YAAY,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AAClF,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC;AA8BnD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAqCG;AACH,MAAM,UAAU,UAAU,CAAC,CAAU,EAAE,GAAG,GAAG,GAAG;IAC9C,IAAI,OAAO,CAAC,KAAK,QAAQ;QAAE,OAAO,EAAE,CAAC;IACrC,OAAO,CAAC;SACL,OAAO,CAAC,eAAe,EAAE,GAAG,CAAC;SAC7B,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC;SACpB,IAAI,EAAE;SACN,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;AACnB,CAAC;AAED;;;;;;;;;;;;;;;GAeG;AACH,MAAM,UAAU,aAAa,CAAC,CAAqB;IACjD,IAAI,CAAC,CAAC;QAAE,OAAO,EAAE,CAAC;IAClB,MAAM,GAAG,GAAG,CAAC,CAAC,UAAU,IAAI,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,UAAU,CAAC;IACpD,OAAO,OAAO,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;AAC5C,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8BG;AACH,MAAM,UAAU,UAAU,CAAC,CAAqB;IAC9C,yEAAyE;IACzE,sEAAsE;IACtE,0EAA0E;IAC1E,wEAAwE;IACxE,0EAA0E;IAC1E,yEAAyE;IACzE,2DAA2D;IAC3D,MAAM,GAAG,GAAG,aAAa,CAAC,CAAC,CAAC,CAAC;IAC7B,IAAI,CAAC,GAAG,IAAI,CAAC,YAAY,CAAC,GAAG,EAAE,sBAAsB,CAAC;QAAE,OAAO,EAAE,CAAC;IAClE,0EAA0E;IAC1E,wEAAwE;IACxE,wEAAwE;IACxE,0EAA0E;IAC1E,4BAA4B;IAC5B,MAAM,GAAG,GAAG,cAAc,CAAC,GAAG,EAAE,sBAAsB,CAAC,CAAC;IACxD,IAAI,CAAC,GAAG;QAAE,OAAO,EAAE,CAAC;IACpB,OAAO,CAAC,EAAE,WAAW,KAAK,IAAI,CAAC,CAAC,CAAC,GAAG,GAAG,aAAa,CAAC,CAAC,CAAC,GAAG,CAAC;AAC7D,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AACH,MAAM,UAAU,eAAe,CAAC,CAAqB;IACnD,MAAM,GAAG,GAAG,aAAa,CAAC,CAAC,CAAC,CAAC;IAC7B,IAAI,CAAC,GAAG;QAAE,OAAO,EAAE,CAAC;IACpB,MAAM,KAAK,GAAG,YAAY,CAAC,GAAG,EAAE,sBAAsB,CAAC,CAAC;IACxD,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,kCAAkC,CAAC;IAC3E,OAAO,QAAQ,OAAO,GAAG,CAAC,EAAE,WAAW,KAAK,IAAI,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC;AAC3E,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AACH,MAAM,UAAU,eAAe,CAAC,MAAe;IAC7C,IAAI,CAAC,MAAM,IAAI,MAAM,KAAK,SAAS;QAAE,OAAO,EAAE,CAAC;IAC/C,MAAM,KAAK,GAAG,YAAY,CAAC,MAAM,EAAE,sBAAsB,CAAC,CAAC;IAC3D,OAAO,KAAK,CAAC,CAAC,CAAC,KAAK,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,sCAAsC,CAAC;AAC/E,CAAC;AAED;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,MAAM,UAAU,aAAa,CAAC,SAAkB;IAC9C,MAAM,CAAC,GAAG,UAAU,CAAC,SAAS,CAAC,CAAC;IAChC,IAAI,CAAC,KAAK,IAAI;QAAE,OAAO,EAAE,CAAC;IAC1B,MAAM,GAAG,GAAG,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC;IACtC,OAAO,MAAM,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,GAAG,CAAC,KAAK,CAAC,EAAE,EAAE,EAAE,CAAC,GAAG,CAAC;AACxD,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AACH,MAAM,UAAU,cAAc,CAAC,IAAc,EAAE,KAAa;IAC1D,MAAM,OAAO,GAAG,IAAI,EAAE,OAAO,IAAI,SAAS,CAAC;IAC3C,MAAM,QAAQ,GACZ,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,QAAQ,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC;QACvD,CAAC,CAAC,KAAK,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG;QAClC,CAAC,CAAC,EAAE,CAAC;IACT,MAAM,IAAI,GAAG,GAAG,KAAK,GAAG,CAAC,KAAK,OAAO,GAAG,QAAQ,GAAG,eAAe,CAChE,IAAI,EAAE,MAAM,CACb,GAAG,eAAe,CAAC,IAAI,EAAE,UAAU,CAAC,GAAG,aAAa,CAAC,IAAI,EAAE,UAAU,CAAC,EAAE,CAAC;IAC1E,OAAO,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC,GAAG,IAAI,YAAY,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;AAClE,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,MAAM,UAAU,cAAc,CAAC,IAAc;IAO3C,MAAM,MAAM,GAAG,UAAU,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IAC3C,MAAM,OAAO,GAAG,UAAU,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IAC5C,OAAO;QACL,SAAS,EAAE,IAAI,CAAC,OAAiB;QACjC,OAAO,EAAE,IAAI,CAAC,OAAiB;QAC/B,MAAM,EAAE,IAAI,CAAC,MAAgB;QAC7B,wEAAwE;QACxE,0EAA0E;QAC1E,qEAAqE;QACrE,qEAAqE;QACrE,mEAAmE;QACnE,mEAAmE;QACnE,GAAG,CAAC,OAAO,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACpD,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC9B,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,gBAAgB,CAAC,IAAgB,EAAE,KAAa;IAC9D,MAAM,OAAO,GAAG,IAAI,EAAE,OAAO,IAAI,SAAS,CAAC;IAC3C,MAAM,QAAQ,GACZ,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,QAAQ,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC;QACvD,CAAC,CAAC,KAAK,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG;QAClC,CAAC,CAAC,EAAE,CAAC;IACT,MAAM,IAAI,GAAG,aAAa,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IACjE,MAAM,IAAI,GAAG,GAAG,KAAK,GAAG,CAAC,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,CAAC,CAAC,EAAE,GAAG,OAAO,GAAG,QAAQ,GAAG,eAAe,CAC3F,IAAI,EAAE,MAAM,CACb,GAAG,eAAe,CAAC,IAAI,EAAE,UAAU,CAAC,EAAE,CAAC;IACxC,OAAO,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC,GAAG,IAAI,YAAY,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;AAClE,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,SAAS,GAAG,yBAAyB,CAAC;AAEnD;;;;;;;;;;GAUG;AACH,yEAAyE;AACzE,2EAA2E;AAC3E,yEAAyE;AACzE,MAAM,UAAU,gBAAgB,CAAC,KAAmB,EAAE,UAAoB;IACxE,MAAM,KAAK,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,gBAAgB,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC;IAC5D,uEAAuE;IACvE,0EAA0E;IAC1E,8EAA8E;IAC9E,8EAA8E;IAC9E,yEAAyE;IACzE,wBAAwB;IACxB,EAAE;IACF,qEAAqE;IACrE,0EAA0E;IAC1E,yEAAyE;IACzE,0EAA0E;IAC1E,oEAAoE;IACpE,2DAA2D;IAC3D,wEAAwE;IACxE,wEAAwE;IACxE,0EAA0E;IAC1E,uEAAuE;IACvE,SAAS;IACT,IAAI,IAAY,CAAC;IACjB,IAAI,UAAU,IAAI,IAAI,EAAE,CAAC;QACvB,IAAI,GAAG,mCAAmC,CAAC;IAC7C,CAAC;SAAM,IAAI,OAAO,UAAU,KAAK,QAAQ,IAAI,SAAS,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC;QACxE,IAAI,GAAG,+CAA+C,UAAU,EAAE,CAAC;IACrE,CAAC;SAAM,CAAC;QACN,IAAI,GAAG,uHAAuH,CAAC;IACjI,CAAC;IACD,OAAO,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC;AACnC,CAAC"}

package/dist/requests.d.ts

@@ -52,6 +52,29 @@ export interface WriteArgs {
     concepts?: string[];
     domain?: string;
 }
+/**
+ * Supplier-vouched authorship for a write (STEP4-5, owner 2026-09-24),
+ * mirroring core's `ProvenanceWriteSchema` field for field
+ * (mnemoverse-core src/mnemo/api/schemas.py:123-150): `principal`, `agent`,
+ * `agent_name`, `client_env` and `is_external`, all optional.
+ *
+ * Core honours this ONLY for a SERVICE/supplier caller (`author` in the
+ * write body) and IGNORES it entirely for an OIDC end-user, who is stamped
+ * solely from their own verified token (`routes._get_provenance`,
+ * mnemoverse-core src/mnemo/api/routes.py:211-276), so a caller supplying
+ * this for a plain end-user key gets no error, just a silently dropped
+ * value. Core also RE-NORMALISES every field server-side (an allow-list on
+ * `client_env`, length caps, `is_external` coerced to a real boolean), so
+ * this package does not re-validate the shape beyond the `typeof` guard at
+ * the one call site that reads it: that is core's job, not this one's.
+ */
+export interface WriteAuthor {
+    principal?: string;
+    agent?: string;
+    agent_name?: string;
+    client_env?: string;
+    is_external?: boolean;
+}
 /**
  * The scope actually searched: what core receives, and therefore the only value
  * any message about the result may describe.
@@ -66,9 +89,17 @@ export declare function searchedScope(domain?: string): string | undefined;
 export declare function readRequestBody(a: ReadArgs): Record<string, unknown>;
 /** memory_list_recent. */
 export declare function recentRequestBody(a: RecentArgs): Record<string, unknown>;
-/** memory_write. `"general"` is the server-side default made explicit, and is
- * what 0.8.0 sent — NOT a normalisation of the caller's value. */
-export declare function writeRequestBody(a: WriteArgs): Record<string, unknown>;
+/**
+ * memory_write. `"general"` is the server-side default made explicit, and is
+ * what 0.8.0 sent — NOT a normalisation of the caller's value.
+ *
+ * `author` (STEP4-5): sent verbatim, exactly as the caller's `writeAuthor()`
+ * dependency returned it, when present: this function does no field-level
+ * normalisation of it (core re-normalises server-side, see {@link WriteAuthor}).
+ * Omitted entirely, not sent as `undefined`, when there is none, so every
+ * existing write body this function ever produced stays byte-identical.
+ */
+export declare function writeRequestBody(a: WriteArgs, author?: WriteAuthor): Record<string, unknown>;
 /**
  * Refuse a docs placeholder key from CONFIGURATION ALONE, before any tool
  * call sends it anywhere.

package/dist/requests.js

@@ -71,13 +71,22 @@ export function recentRequestBody(a) {
         cursor: a.cursor || undefined,
     };
 }
-/** memory_write. `"general"` is the server-side default made explicit, and is
- * what 0.8.0 sent — NOT a normalisation of the caller's value. */
-export function writeRequestBody(a) {
+/**
+ * memory_write. `"general"` is the server-side default made explicit, and is
+ * what 0.8.0 sent — NOT a normalisation of the caller's value.
+ *
+ * `author` (STEP4-5): sent verbatim, exactly as the caller's `writeAuthor()`
+ * dependency returned it, when present: this function does no field-level
+ * normalisation of it (core re-normalises server-side, see {@link WriteAuthor}).
+ * Omitted entirely, not sent as `undefined`, when there is none, so every
+ * existing write body this function ever produced stays byte-identical.
+ */
+export function writeRequestBody(a, author) {
     return {
         content: a.content,
         concepts: a.concepts || [],
         domain: a.domain || "general",
+        ...(author === undefined ? {} : { author }),
     };
 }
 /**

package/dist/requests.js.map

@@ -1 +1 @@
-{"version":3,"file":"requests.js","sourceRoot":"","sources":["../src/requests.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AAEH,4EAA4E;AAC5E,4EAA4E;AAC5E,6EAA6E;AAC7E,wDAAwD;AACxD,OAAO,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AA2BvC;;;;;;;GAOG;AACH,MAAM,UAAU,aAAa,CAAC,MAAe;IAC3C,OAAO,MAAM,IAAI,SAAS,CAAC;AAC7B,CAAC;AAED;mEACmE;AACnE,MAAM,UAAU,eAAe,CAAC,CAAW;IACzC,OAAO;QACL,KAAK,EAAE,CAAC,CAAC,KAAK;QACd,KAAK,EAAE,CAAC,CAAC,KAAK,IAAI,CAAC;QACnB,MAAM,EAAE,aAAa,CAAC,CAAC,CAAC,MAAM,CAAC;QAC/B,oBAAoB,EAAE,IAAI;QAC1B,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC/C,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACtC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACtC,GAAG,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,CAAC,CAAC,cAAc,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAClE,CAAC;AACJ,CAAC;AAED,0BAA0B;AAC1B,MAAM,UAAU,iBAAiB,CAAC,CAAa;IAC7C,OAAO;QACL,MAAM,EAAE,aAAa,CAAC,CAAC,CAAC,MAAM,CAAC;QAC/B,KAAK,EAAE,CAAC,CAAC,KAAK,IAAI,SAAS;QAC3B,KAAK,EAAE,CAAC,CAAC,KAAK,IAAI,SAAS;QAC3B,cAAc,EAAE,CAAC,CAAC,cAAc,IAAI,SAAS;QAC7C,KAAK,EAAE,CAAC,CAAC,KAAK,IAAI,EAAE;QACpB,MAAM,EAAE,CAAC,CAAC,MAAM,IAAI,SAAS;KAC9B,CAAC;AACJ,CAAC;AAED;kEACkE;AAClE,MAAM,UAAU,gBAAgB,CAAC,CAAY;IAC3C,OAAO;QACL,OAAO,EAAE,CAAC,CAAC,OAAO;QAClB,QAAQ,EAAE,CAAC,CAAC,QAAQ,IAAI,EAAE;QAC1B,MAAM,EAAE,CAAC,CAAC,MAAM,IAAI,SAAS;KAC9B,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAuCG;AACH,MAAM,UAAU,oBAAoB,CAClC,GAAW;IAEX,MAAM,qBAAqB,GAAG,wBAAwB,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACjE,MAAM,qBAAqB,GAAG,oBAAoB,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC7D,IAAI,CAAC,qBAAqB,IAAI,CAAC,qBAAqB;QAAE,OAAO,SAAS,CAAC;IACvE,OAAO;QACL,QAAQ,EACN,mEAAmE;YACnE,kEAAkE;YAClE,sEAAsE;YACtE,mEAAmE;YACnE,yCAAyC,QAAQ,kBAAkB;YACnE,qEAAqE;YACrE,mEAAmE;YACnE,gCAAgC;QAClC,UAAU,EACR,+DAA+D;YAC/D,yDAAyD;YACzD,gDAAgD,QAAQ,cAAc;YACtE,kEAAkE;YAClE,mDAAmD;KACtD,CAAC;AACJ,CAAC"}
+{"version":3,"file":"requests.js","sourceRoot":"","sources":["../src/requests.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AAEH,4EAA4E;AAC5E,4EAA4E;AAC5E,6EAA6E;AAC7E,wDAAwD;AACxD,OAAO,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AAmDvC;;;;;;;GAOG;AACH,MAAM,UAAU,aAAa,CAAC,MAAe;IAC3C,OAAO,MAAM,IAAI,SAAS,CAAC;AAC7B,CAAC;AAED;mEACmE;AACnE,MAAM,UAAU,eAAe,CAAC,CAAW;IACzC,OAAO;QACL,KAAK,EAAE,CAAC,CAAC,KAAK;QACd,KAAK,EAAE,CAAC,CAAC,KAAK,IAAI,CAAC;QACnB,MAAM,EAAE,aAAa,CAAC,CAAC,CAAC,MAAM,CAAC;QAC/B,oBAAoB,EAAE,IAAI;QAC1B,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC/C,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACtC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACtC,GAAG,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,CAAC,CAAC,cAAc,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAClE,CAAC;AACJ,CAAC;AAED,0BAA0B;AAC1B,MAAM,UAAU,iBAAiB,CAAC,CAAa;IAC7C,OAAO;QACL,MAAM,EAAE,aAAa,CAAC,CAAC,CAAC,MAAM,CAAC;QAC/B,KAAK,EAAE,CAAC,CAAC,KAAK,IAAI,SAAS;QAC3B,KAAK,EAAE,CAAC,CAAC,KAAK,IAAI,SAAS;QAC3B,cAAc,EAAE,CAAC,CAAC,cAAc,IAAI,SAAS;QAC7C,KAAK,EAAE,CAAC,CAAC,KAAK,IAAI,EAAE;QACpB,MAAM,EAAE,CAAC,CAAC,MAAM,IAAI,SAAS;KAC9B,CAAC;AACJ,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,gBAAgB,CAAC,CAAY,EAAE,MAAoB;IACjE,OAAO;QACL,OAAO,EAAE,CAAC,CAAC,OAAO;QAClB,QAAQ,EAAE,CAAC,CAAC,QAAQ,IAAI,EAAE;QAC1B,MAAM,EAAE,CAAC,CAAC,MAAM,IAAI,SAAS;QAC7B,GAAG,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC;KAC5C,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAuCG;AACH,MAAM,UAAU,oBAAoB,CAClC,GAAW;IAEX,MAAM,qBAAqB,GAAG,wBAAwB,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACjE,MAAM,qBAAqB,GAAG,oBAAoB,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC7D,IAAI,CAAC,qBAAqB,IAAI,CAAC,qBAAqB;QAAE,OAAO,SAAS,CAAC;IACvE,OAAO;QACL,QAAQ,EACN,mEAAmE;YACnE,kEAAkE;YAClE,sEAAsE;YACtE,mEAAmE;YACnE,yCAAyC,QAAQ,kBAAkB;YACnE,qEAAqE;YACrE,mEAAmE;YACnE,gCAAgC;QAClC,UAAU,EACR,+DAA+D;YAC/D,yDAAyD;YACzD,gDAAgD,QAAQ,cAAc;YACtE,kEAAkE;YAClE,mDAAmD;KACtD,CAAC;AACJ,CAAC"}

package/dist/resources.d.ts

@@ -0,0 +1,28 @@
+/**
+ * MCP resource: one saved memory by id, as `memory://item/{memory_id}`.
+ *
+ * Clients that support resources (Claude.ai connectors attach them through an
+ * @-mention) can pull one specific memory into context. The ids are the `id:`
+ * lines of memory_read and memory_list_recent results, so this is the "open
+ * this memory" companion to the recall tools. There is no listing: the
+ * template is advertised, and reading needs a known id.
+ *
+ * Moved here from the hosted connector (mnemoverse-mcp-remote,
+ * src/resources/index.ts) in step 3c of the ADR-025 plan, with the same URI
+ * template, name and output, so the connector can register this instead of
+ * its copy. It returns only `memory_id`, `content` and `domain`: the engine's
+ * point read also carries importance, valence, access counts and metadata,
+ * which a model opening a memory does not need.
+ *
+ * Two limits, both the engine's. The point read looks only in the caller's
+ * own store (GET /memory/atoms/{id} takes no domain), so a memory read from a
+ * shared room cannot be opened here; the description says so. And a Vault
+ * secret is safe to open: its value lives in a column no read returns.
+ */
+import { type McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
+import { type MemoryToolDeps } from "./tools.js";
+/**
+ * Register the `memory://item/{memory_id}` resource on `server`. It reaches the
+ * API only through `deps.apiFetch`, like the tools.
+ */
+export declare function registerMemoryResources(server: McpServer, deps: MemoryToolDeps): void;