@pyxmate/memory 1.13.0 → 1.15.0

package/dist/index.d.ts

@@ -261,6 +261,12 @@ interface StoreOptions {
     enrichment?: StoreEnrichmentCallbacks;
     /** Propagated into the `extractEntities` callback and the underlying fetch. */
     signal?: AbortSignal;
+    /** Stable logical request key. Reuse this exact value after a lost response. */
+    idempotencyKey?: string;
+}
+interface RequestAuthorityOptions {
+    /** Stable logical request key. Reuse this exact value after a lost response. */
+    idempotencyKey?: string;
 }
 /** Error thrown by MemoryClient when the server returns a non-success response. */
 declare class MemoryServerError extends Error {
@@ -297,11 +303,12 @@ declare class MemoryClient implements ExtendedMemoryInterface {
     constructor(memoryUrl: string, apiKeyOrOptions?: string | MemoryClientOptions);
     /** Encode a path segment to prevent URL injection */
     private encodePathSegment;
+    private authorityHeaders;
     initialize(): Promise<void>;
     store(entry: StoreInput$1, options?: StoreOptions): Promise<MemoryEntry$1>;
-    search(params: MemorySearchParams$1): Promise<MemorySearchResult$1>;
-    get(id: string): Promise<MemoryEntry$1 | null>;
-    delete(id: string): Promise<boolean>;
+    search(params: MemorySearchParams$1, authority?: RequestAuthorityOptions): Promise<MemorySearchResult$1>;
+    get(id: string, authority?: TenantScopeOptions & RequestAuthorityOptions): Promise<MemoryEntry$1 | null>;
+    delete(id: string, authority?: TenantScopeOptions & RequestAuthorityOptions): Promise<boolean>;
     clearSession(sessionId: string): Promise<number>;
     stats(options?: TenantScopeOptions): Promise<MemoryStats$1>;
     /**
@@ -315,7 +322,7 @@ declare class MemoryClient implements ExtendedMemoryInterface {
      */
     status(): Promise<Topology$1>;
     shutdown(): Promise<void>;
-    list(params?: MemoryListParams): Promise<MemoryListResult>;
+    list(params?: MemoryListParams, authority?: RequestAuthorityOptions): Promise<MemoryListResult>;
     /**
      * Native streaming file ingest. Yields typed {@link IngestEvent}s as the
      * server (parsing/storing) and the SDK (enrichment/result) make progress.
@@ -402,8 +409,8 @@ declare class MemoryClient implements ExtendedMemoryInterface {
         dryRun: boolean;
     }>;
     queryAsOf(asOfDate: string, filters?: TemporalQueryFilters): Promise<MemoryEntry$1[]>;
-    lineage(params: LineageParams$1): Promise<LineageResult$1>;
-    reinforce(params: ReinforceParams$1): Promise<ReinforceResult$1>;
+    lineage(params: LineageParams$1, authority?: RequestAuthorityOptions): Promise<LineageResult$1>;
+    reinforce(params: ReinforceParams$1, authority?: RequestAuthorityOptions): Promise<ReinforceResult$1>;
     log(filters?: MemoryLogFilters): Promise<MemoryEntry$1[]>;
     queryByEventTime(startTime: string, endTime: string, filters?: TemporalQueryFilters): Promise<MemoryEntry$1[]>;
     summarizeEntity(name: string): Promise<MemoryEntry$1>;
@@ -461,6 +468,18 @@ declare class MemoryClient implements ExtendedMemoryInterface {
         project?: string;
         limit?: number;
     }): Promise<CorrectionRecord$1[]>;
+    /**
+     * H26 B-d — deterministic prospective due-scan: entries with
+     * `eventTime ∈ [from, from+windowDays]` (inclusive), eventTime ascending,
+     * no relevance ranking. `GET /api/memory/due`.
+     */
+    dueScan(input: {
+        windowDays: number;
+        from?: string;
+        /** Omit in single-tenant deployments. */
+        namespaceId?: string;
+        limit?: number;
+    }): Promise<MemoryEntry$1[]>;
     protected fetchApi<T>(path: string, options?: RequestInit): Promise<T>;
     /**
      * Map fetch-layer rejections into a typed `MemoryServerError` so callers
@@ -493,6 +512,53 @@ type Timestamp = string;
 /** Unique agent identifier */
 type AgentId = string;
 
+/**
+ * Caller identity for ReBAC authorization.
+ *
+ * The canonical "subject" in Zanzibar terms — passed alongside requests so the
+ * memory layer can compute an AuthzPlan (visible namespaces + entry overrides)
+ * before any retrieval source fans out.
+ *
+ * Identity comes from authenticated request context (X-Tenant-Id / auth token
+ * claims), never from request bodies or multipart form fields. The legacy
+ * `userId` / `teamId` / `agentId` columns on MemoryEntry remain for audit and
+ * legacy filters but MUST NOT drive authorization decisions — they are
+ * collision-prone aliases (a service principal sharing an ID with a human
+ * user has no protection against confused-deputy attacks).
+ *
+ * Sensitivity / clearance is intentionally NOT on this object. It is a
+ * MAC-style classification, orthogonal to RBAC, and continues to be carried
+ * via the `X-Caller-Access-Level` header → `MemorySearchParams.maxSensitivity`.
+ * Conflating the two couples future changes (e.g. per-namespace classification
+ * rules) to identity propagation.
+ */
+interface PrincipalContext {
+    /**
+     * Hard isolation boundary. Required even in single-tenant deployments —
+     * single-mode passes a stable sentinel (`SINGLE_TENANT_ID`) so authz code
+     * paths look identical regardless of mode.
+     */
+    tenantId: string;
+    /**
+     * Stable subject ID (within the tenant). For humans this is the userId;
+     * for AI runtimes it is the agentId; for system actors it is a service
+     * identifier. Combined with `kind`, forms the Zanzibar subject coordinate
+     * `<kind>:<principalId>`.
+     */
+    principalId: string;
+    /**
+     * Subject namespace. Distinguishes humans from AI agents from internal
+     * services so a userId/agentId/serviceId collision cannot grant
+     * unintended access.
+     *  - `user`: human end user
+     *  - `agent`: AI runtime acting on a user's behalf or autonomously
+     *  - `service`: non-AI internal system (cron, ETL, admin tooling)
+     */
+    kind: 'user' | 'agent' | 'service';
+}
+/** Sentinel tenant ID used in single-tenant deployments. */
+declare const SINGLE_TENANT_ID = "_single";
+
 declare const MemoryType: {
     readonly SHORT_TERM: "short-term";
     readonly LONG_TERM: "long-term";
@@ -1002,6 +1068,26 @@ interface FetchCorrectionsInput {
     /** Optional sensitivity cap for hosted/HTTP callers. Omitted preserves trusted in-process behavior. */
     maxSensitivity?: SensitivityLevel;
 }
+/** Input to `Memory.dueScan` (H26 B-d — the one deterministic prospective primitive). */
+interface DueScanInput {
+    /**
+     * Window start, ISO-8601. Defaults to the server's injected clock ("now").
+     * Benches and reproducible callers pass it explicitly.
+     */
+    from?: string;
+    /** Window length in fixed 24-hour periods, endpoints inclusive. Integer 1..370 — out-of-range is a loud error, never a clamp. */
+    windowDays: number;
+    /** Max entries returned. Default 20, hard cap 100. */
+    limit?: number;
+    /** Tenant scope; defaults to the Memory instance's tenant. */
+    tenantId?: string;
+    /** Explicit namespace scope (tenant-root rows stay visible). Overrides principal-derived visibility. */
+    namespaceId?: string;
+    /** Optional principal for namespace visibility (AuthzPlan), like search. */
+    principal?: PrincipalContext;
+    /** Optional sensitivity cap for hosted/HTTP callers; filtered in SQL before LIMIT. */
+    maxSensitivity?: SensitivityLevel;
+}
 /** One applicable correction returned by `fetchApplicableCorrections`. */
 interface CorrectionRecord {
     id: string;
@@ -1463,53 +1549,6 @@ interface MoveResult {
     error?: string;
 }
 
-/**
- * Caller identity for ReBAC authorization.
- *
- * The canonical "subject" in Zanzibar terms — passed alongside requests so the
- * memory layer can compute an AuthzPlan (visible namespaces + entry overrides)
- * before any retrieval source fans out.
- *
- * Identity comes from authenticated request context (X-Tenant-Id / auth token
- * claims), never from request bodies or multipart form fields. The legacy
- * `userId` / `teamId` / `agentId` columns on MemoryEntry remain for audit and
- * legacy filters but MUST NOT drive authorization decisions — they are
- * collision-prone aliases (a service principal sharing an ID with a human
- * user has no protection against confused-deputy attacks).
- *
- * Sensitivity / clearance is intentionally NOT on this object. It is a
- * MAC-style classification, orthogonal to RBAC, and continues to be carried
- * via the `X-Caller-Access-Level` header → `MemorySearchParams.maxSensitivity`.
- * Conflating the two couples future changes (e.g. per-namespace classification
- * rules) to identity propagation.
- */
-interface PrincipalContext {
-    /**
-     * Hard isolation boundary. Required even in single-tenant deployments —
-     * single-mode passes a stable sentinel (`SINGLE_TENANT_ID`) so authz code
-     * paths look identical regardless of mode.
-     */
-    tenantId: string;
-    /**
-     * Stable subject ID (within the tenant). For humans this is the userId;
-     * for AI runtimes it is the agentId; for system actors it is a service
-     * identifier. Combined with `kind`, forms the Zanzibar subject coordinate
-     * `<kind>:<principalId>`.
-     */
-    principalId: string;
-    /**
-     * Subject namespace. Distinguishes humans from AI agents from internal
-     * services so a userId/agentId/serviceId collision cannot grant
-     * unintended access.
-     *  - `user`: human end user
-     *  - `agent`: AI runtime acting on a user's behalf or autonomously
-     *  - `service`: non-AI internal system (cron, ETL, admin tooling)
-     */
-    kind: 'user' | 'agent' | 'service';
-}
-/** Sentinel tenant ID used in single-tenant deployments. */
-declare const SINGLE_TENANT_ID = "_single";
-
 interface CreatePyxMemoryOptions {
     url?: string;
     apiKey?: string;
@@ -1518,4 +1557,4 @@ interface CreatePyxMemoryOptions {
 }
 declare function createPyxMemory(opts?: CreatePyxMemoryOptions): MemoryClient;
 
-export { type AgentId, type ApiResponse, type ConsolidationRunResult, type CorrectionInput, type CorrectionRecord, type CreatePyxMemoryOptions, DEFAULTS, DEPRECATED_RAG_STRATEGIES, DisabledMemory, type DroppedGraphRelationship, EmbeddingProviderName, type EnrichmentCallbacks, type EntityExtractionResult, type ExtendedMemoryInterface, type FetchCorrectionsInput, type GraphEnrichment, type GraphEnrichmentStatus, type GraphFailureMode, type GraphNode, type GraphRelationship, type GraphRepairResult, type GraphTelemetrySnapshot, type GraphTraversalResult, type IngestEntity, type IngestErrorEvent, type IngestEvent, type IngestFileOptions, type IngestHeartbeatEvent, type IngestProgressEvent, type IngestRelationship, type IngestResultEvent, type IngestStage, type IngestionResult, type LineageParams, type LineageResult, type LineageVersion, MemoryClient, type MemoryClientOptions, type MemoryEntry, type MemoryIngestRequest, type MemoryInterface, type MemoryListParams, type MemoryListResult, type MemoryLogFilters, type MemorySearchParams, type MemorySearchResult, MemoryServerError, type MemoryStats, MemoryType, type MoveEntriesFilter, MoveFailureReason, type MoveResult, type MoveTarget, NamespaceIsolation, type PrincipalContext, RAGStrategy, type ReinforceParams, type ReinforceResult, type ReinforceSignal, SINGLE_TENANT_ID, SensitivityLevel, type SourceEvidence, type StoreInput, StoreTarget, TAXONOMY_MAX_CATEGORIES, type TemporalQueryFilters, type TenantScopeOptions, type Timestamp, type Topology, type TopologyExtractionProvider, type TopologyServiceVariant, type UsageHygieneSnapshot, VectorProvider, type VectorStatus, type WikiLintReport, createPyxMemory, mergeExtractedEntities, normalizeGraphLabel, normalizeNameKey };
+export { type AgentId, type ApiResponse, type ConsolidationRunResult, type CorrectionInput, type CorrectionRecord, type CreatePyxMemoryOptions, DEFAULTS, DEPRECATED_RAG_STRATEGIES, DisabledMemory, type DroppedGraphRelationship, type DueScanInput, EmbeddingProviderName, type EnrichmentCallbacks, type EntityExtractionResult, type ExtendedMemoryInterface, type FetchCorrectionsInput, type GraphEnrichment, type GraphEnrichmentStatus, type GraphFailureMode, type GraphNode, type GraphRelationship, type GraphRepairResult, type GraphTelemetrySnapshot, type GraphTraversalResult, type IngestEntity, type IngestErrorEvent, type IngestEvent, type IngestFileOptions, type IngestHeartbeatEvent, type IngestProgressEvent, type IngestRelationship, type IngestResultEvent, type IngestStage, type IngestionResult, type LineageParams, type LineageResult, type LineageVersion, MemoryClient, type MemoryClientOptions, type MemoryEntry, type MemoryIngestRequest, type MemoryInterface, type MemoryListParams, type MemoryListResult, type MemoryLogFilters, type MemorySearchParams, type MemorySearchResult, MemoryServerError, type MemoryStats, MemoryType, type MoveEntriesFilter, MoveFailureReason, type MoveResult, type MoveTarget, NamespaceIsolation, type PrincipalContext, RAGStrategy, type ReinforceParams, type ReinforceResult, type ReinforceSignal, SINGLE_TENANT_ID, SensitivityLevel, type SourceEvidence, type StoreInput, StoreTarget, TAXONOMY_MAX_CATEGORIES, type TemporalQueryFilters, type TenantScopeOptions, type Timestamp, type Topology, type TopologyExtractionProvider, type TopologyServiceVariant, type UsageHygieneSnapshot, VectorProvider, type VectorStatus, type WikiLintReport, createPyxMemory, mergeExtractedEntities, normalizeGraphLabel, normalizeNameKey };

package/dist/index.mjs

@@ -13,11 +13,13 @@ import {
   SensitivityLevel,
   StoreTarget,
   TAXONOMY_MAX_CATEGORIES,
-  VectorProvider,
+  VectorProvider
+} from "./chunk-IEBF7BQF.mjs";
+import {
   mergeExtractedEntities,
   normalizeGraphLabel,
   normalizeNameKey
-} from "./chunk-5BLT7RSY.mjs";
+} from "./chunk-A3L46P2G.mjs";
 
 // src/preset.ts
 var DEFAULT_MEMORY_URL = `http://localhost:${DEFAULTS.MEMORY_SERVER_PORT}`;

package/dist/react.mjs

@@ -11,8 +11,9 @@ import {
   toGraphologyFormat,
   transformGraphData,
   unreachableHealth
-} from "./chunk-HOBDPIHO.mjs";
-import "./chunk-5BLT7RSY.mjs";
+} from "./chunk-3FRA37TI.mjs";
+import "./chunk-IEBF7BQF.mjs";
+import "./chunk-A3L46P2G.mjs";
 
 // ../dashboard/src/hooks/use-consolidation-log.ts
 import { useCallback as useCallback2, useMemo } from "react";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pyxmate/memory",
-  "version": "1.13.0",
+  "version": "1.15.0",
   "type": "module",
   "description": "SDK for pyx-memory — Memory as a Service for AI agents",
   "license": "MIT",
@@ -28,6 +28,10 @@
       "import": "./dist/dashboard.mjs",
       "types": "./dist/dashboard.d.ts"
     },
+    "./data-plane-contract": {
+      "import": "./dist/data-plane-contract.mjs",
+      "types": "./dist/data-plane-contract.d.ts"
+    },
     "./agent-contract": {
       "import": "./dist/agent-contract.mjs",
       "types": "./dist/agent-contract.d.ts"