@smartmemory/sdk-js 1.4.53 → 1.4.59

package/README.md

@@ -79,6 +79,40 @@ function Dashboard() {
 }
 ```
 
+### Browser analytics (optional)
+
+The analytics entry point is browser-only and intentionally separate from the core and React bindings. Install its optional `posthog-js` peer only in apps that use analytics:
+
+```bash
+npm install posthog-js
+```
+
+```jsx
+import { PostHogProvider } from 'posthog-js/react';
+import {
+  AnalyticsIdentity,
+  createAnalyticsConfig,
+} from '@smartmemory/sdk-js/react/analytics';
+
+const analytics = createAnalyticsConfig({
+  app: 'web',
+  apiKey: import.meta.env.VITE_PUBLIC_POSTHOG_KEY,
+  apiHost: import.meta.env.VITE_PUBLIC_POSTHOG_HOST,
+});
+
+// Keep the existing child passthrough when analytics.apiKey is null.
+const root = analytics.apiKey
+  ? <PostHogProvider apiKey={analytics.apiKey} options={analytics.options}><App /></PostHogProvider>
+  : <App />;
+
+function IdentityAdapter() {
+  const { user, isAuthenticated, workspaceId } = useAuth();
+  return <AnalyticsIdentity {...{ user, isAuthenticated, workspaceId }} />;
+}
+```
+
+This subpath also exports `captureProductEvent`, `captureException`, and `resetAnalytics`. It is not re-exported from `@smartmemory/sdk-js/react`, so non-browser consumers never load PostHog.
+
 ## Entry Points
 
 | Import | Contents |
@@ -86,6 +120,7 @@ function Dashboard() {
 | `@smartmemory/sdk-js` | SmartMemoryClient, AuthCore, TokenManager, all domain APIs, APIError |
 | `@smartmemory/sdk-js/core` | Everything above + BaseAPI, RefreshManager, SSOManager (internal access) |
 | `@smartmemory/sdk-js/react` | SmartMemoryProvider, useAuth, useAuthState, useAuthActions, useSmartMemory, AuthWrapper |
+| `@smartmemory/sdk-js/react/analytics` | Browser-only strict PostHog config, identity, product-event, exception, and reset helpers (optional `posthog-js` peer) |
 | `@smartmemory/sdk-js/fetch` | createAuthFetch, installInterceptor |
 
 ## Configuration

package/dist/{core-D1Y88paM.js → core-BEScfRuq.js}

@@ -1,9 +1,9 @@
-var R = (a) => {
+var S = (a) => {
   throw TypeError(a);
 };
-var k = (a, e, t) => e.has(a) || R("Cannot " + t);
-var g = (a, e, t) => (k(a, e, "read from private field"), t ? t.call(a) : e.get(a)), w = (a, e, t) => e.has(a) ? R("Cannot add the same private member more than once") : e instanceof WeakSet ? e.add(a) : e.set(a, t), b = (a, e, t, s) => (k(a, e, "write to private field"), s ? s.call(a, t) : e.set(a, t), t), S = (a, e, t) => (k(a, e, "access private method"), t);
-const U = {
+var w = (a, e, t) => e.has(a) || S("Cannot " + t);
+var d = (a, e, t) => (w(a, e, "read from private field"), t ? t.call(a) : e.get(a)), b = (a, e, t) => e.has(a) ? S("Cannot add the same private member more than once") : e instanceof WeakSet ? e.add(a) : e.set(a, t), I = (a, e, t, s) => (w(a, e, "write to private field"), s ? s.call(a, t) : e.set(a, t), t), v = (a, e, t) => (w(a, e, "access private method"), t);
+const P = {
   access: "smart_memory_auth_token",
   refresh: "smart_memory_refresh_token",
   user: "smart_memory_user",
@@ -16,14 +16,14 @@ const U = {
   tenant: ["tenant_id", "workspace_id", "sm_workspace_id"],
   team: ["team_id", "sm_team_id"]
 };
-class C {
+class L {
   /**
    * @param {Object} options
    * @param {'localStorage' | 'sessionStorage' | 'memory'} [options.storage='localStorage']
    * @param {Object} [options.keys] - Custom storage key names
    */
   constructor({ storage: e = "localStorage", keys: t = {} } = {}) {
-    this.storageType = e, this.keys = { ...U, ...t }, this._memory = { access: null, refresh: null, user: null, tenant: null, team: null };
+    this.storageType = e, this.keys = { ...P, ...t }, this._memory = { access: null, refresh: null, user: null, tenant: null, team: null };
   }
   getAccessToken() {
     return this.storageType === "memory" ? this._memory.access : this._getFromStorage(this.keys.access, y.access);
@@ -148,8 +148,8 @@ class C {
     return s === "none" || s === "null" || s === "undefined" ? null : t;
   }
 }
-var l, f, v;
-class P {
+var l, _, T;
+class q {
   /**
    * @param {Object} options
    * @param {string} options.apiBaseUrl
@@ -160,22 +160,22 @@ class P {
    * @param {function(): void} options.onRefreshFailed
    */
   constructor({ apiBaseUrl: e, refreshEndpoint: t, tokenManager: s, useCookieAuth: r = !1, onTokenRefreshed: n, onRefreshFailed: i }) {
-    w(this, f);
-    w(this, l, null);
+    b(this, _);
+    b(this, l, null);
     this.apiBaseUrl = e, this.refreshEndpoint = t, this.tokenManager = s, this.useCookieAuth = r, this.onTokenRefreshed = n, this.onRefreshFailed = i;
   }
   async refresh() {
-    if (g(this, l))
-      return g(this, l);
-    b(this, l, S(this, f, v).call(this));
+    if (d(this, l))
+      return d(this, l);
+    I(this, l, v(this, _, T).call(this));
     try {
-      return await g(this, l);
+      return await d(this, l);
     } finally {
-      b(this, l, null);
+      I(this, l, null);
     }
   }
 }
-l = new WeakMap(), f = new WeakSet(), v = async function() {
+l = new WeakMap(), _ = new WeakSet(), T = async function() {
   const e = this.tokenManager.getRefreshToken();
   if (!e && !this.useCookieAuth)
     throw this.onRefreshFailed(), new Error("No refresh token");
@@ -190,8 +190,8 @@ l = new WeakMap(), f = new WeakSet(), v = async function() {
   const r = await s.json();
   return this.tokenManager.setAccessToken(r.access_token), r.refresh_token && this.tokenManager.setRefreshToken(r.refresh_token), this.onTokenRefreshed(r.access_token), r.access_token;
 };
-const I = "smart_memory_sso_redirect";
-class q {
+const R = "smart_memory_sso_redirect";
+class M {
   /**
    * @param {Object} options
    * @param {string} options.webAppUrl - Web app URL for login redirect
@@ -216,26 +216,26 @@ class q {
   }
   storeRedirect(e) {
     try {
-      sessionStorage.setItem(I, e);
+      sessionStorage.setItem(R, e);
     } catch (t) {
       console.warn("Failed to store redirect URL:", t);
     }
   }
   getAndClearRedirect() {
     try {
-      const e = sessionStorage.getItem(I);
-      return sessionStorage.removeItem(I), e;
+      const e = sessionStorage.getItem(R);
+      return sessionStorage.removeItem(R), e;
     } catch {
       return null;
     }
   }
 }
-class L {
+class z {
   constructor(e) {
-    this.mode = e.mode, this.apiBaseUrl = e.apiBaseUrl, this.endpoints = e.endpoints || {}, this.listeners = /* @__PURE__ */ new Set(), this.useCookieAuth = e.useCookieAuth ?? this.mode === "sso", this.apiKey = e.apiKey || null, this.apiKey && (this.mode = "apiKey"), this.tokenManager = new C({
+    this.mode = e.mode, this.apiBaseUrl = e.apiBaseUrl, this.endpoints = e.endpoints || {}, this.listeners = /* @__PURE__ */ new Set(), this.useCookieAuth = e.useCookieAuth ?? this.mode === "sso", this.apiKey = e.apiKey || null, this.apiKey && (this.mode = "apiKey"), this.tokenManager = new L({
       storage: e.storage || "localStorage",
       keys: e.tokenKeys
-    }), this.mode !== "apiKey" ? this.refreshManager = new P({
+    }), this.mode !== "apiKey" ? this.refreshManager = new q({
       apiBaseUrl: this.apiBaseUrl,
       refreshEndpoint: this.endpoints.refresh || "/auth/refresh",
       tokenManager: this.tokenManager,
@@ -247,7 +247,7 @@ class L {
       onRefreshFailed: () => {
         this.clearLocalAuth();
       }
-    }) : this.refreshManager = null, this.mode === "sso" && (this.ssoManager = new q({
+    }) : this.refreshManager = null, this.mode === "sso" && (this.ssoManager = new M({
       webAppUrl: e.webAppUrl,
       allowedHosts: e.allowedRedirectHosts || [],
       tokenManager: this.tokenManager
@@ -286,7 +286,8 @@ class L {
       isAuthenticated: this.isAuthenticated(),
       user: this.currentUser,
       token: this.currentToken,
-      tenantId: this.tokenManager.getTenantId()
+      tenantId: this.tokenManager.getTenantId(),
+      workspaceId: this.tokenManager.getTeamId()
     };
     this.listeners.forEach((t) => {
       try {
@@ -376,10 +377,10 @@ class h extends Error {
     super(e), this.name = "APIError", this.status = t, this.detail = s;
   }
 }
-function d(a) {
+function f(a) {
   return typeof FormData < "u" && a instanceof FormData;
 }
-class M {
+class E {
   /**
    * @param {import('../auth/AuthCore.js').AuthCore} authCore
    * @param {{ fetchFn?: typeof globalThis.fetch }} [options]
@@ -393,7 +394,7 @@ class M {
   async request(e, t = {}) {
     var i, o;
     const s = `${this.baseURL}${e}`, r = {
-      ...d(t.body) ? {} : { "Content-Type": "application/json" },
+      ...f(t.body) ? {} : { "Content-Type": "application/json" },
       ...this.auth.getAuthHeaders(t.headers)
     }, n = this.auth.getRequestOptions({ ...t, headers: r });
     try {
@@ -401,13 +402,13 @@ class M {
       if (c.status === 401 && !t.__isRetry)
         try {
           await this.auth.refreshToken();
-          const u = {
-            ...d(t.body) ? {} : { "Content-Type": "application/json" },
+          const m = {
+            ...f(t.body) ? {} : { "Content-Type": "application/json" },
             ...this.auth.getAuthHeaders(t.headers)
           };
           c = await this.fetchFn(
             s,
-            this.auth.getRequestOptions({ ...n, headers: u, __isRetry: !0 })
+            this.auth.getRequestOptions({ ...n, headers: m, __isRetry: !0 })
           );
         } catch {
         }
@@ -435,7 +436,7 @@ class M {
   async requestBinary(e, t = {}) {
     var i, o;
     const s = `${this.baseURL}${e}`, r = {
-      ...d(t.body) ? {} : { "Content-Type": "application/json" },
+      ...f(t.body) ? {} : { "Content-Type": "application/json" },
       ...this.auth.getAuthHeaders(t.headers)
     }, n = this.auth.getRequestOptions({ ...t, headers: r });
     try {
@@ -443,13 +444,13 @@ class M {
       if (c.status === 401 && !t.__isRetry)
         try {
           await this.auth.refreshToken();
-          const u = {
-            ...d(t.body) ? {} : { "Content-Type": "application/json" },
+          const m = {
+            ...f(t.body) ? {} : { "Content-Type": "application/json" },
             ...this.auth.getAuthHeaders(t.headers)
           };
           c = await this.fetchFn(
             s,
-            this.auth.getRequestOptions({ ...n, headers: u, __isRetry: !0 })
+            this.auth.getRequestOptions({ ...n, headers: m, __isRetry: !0 })
           );
         } catch {
         }
@@ -526,10 +527,25 @@ class M {
     return typeof (e == null ? void 0 : e.message) == "string" ? e.message : `HTTP ${t}`;
   }
 }
-class z {
+class x {
   constructor(e) {
     this.api = e;
   }
+  /**
+   * Create a memory item.
+   *
+   * Provenance like `retrieved_context_ids` travels inside `metadata` — the storage
+   * layer lifts it onto the server-side MemoryItem; no dedicated option exists
+   * (GRAPH-API-1i wire field added then removed 2026-08-02).
+   *
+   * @param {Object} options
+   * @param {string} options.content - Memory content
+   * @param {string} [options.memoryType='semantic'] - Memory type
+   * @param {Object} [options.metadata] - Additional metadata
+   * @param {boolean} [options.usePipeline=true] - Run the full extraction pipeline
+   * @param {string} [options.profileName] - Pipeline profile, routed server-side
+   * @param {Object} [options.conversationContext] - Conversation-aware extraction context
+   */
   async create({
     content: e,
     memoryType: t = "semantic",
@@ -578,9 +594,31 @@ class z {
   async delete(e) {
     return this.api.delete(`/memory/${e}`);
   }
-  async list({ limit: e = 50, offset: t = 0, type: s = null } = {}) {
-    let r = `/memory/list?limit=${e}&offset=${t}`;
-    return s && (r += `&memory_type=${s}`), this.api.get(r);
+  /**
+   * List memory items, optionally filtered by an exact metadata match.
+   *
+   * @param {object} [options]
+   * @param {number} [options.limit=50]
+   * @param {number} [options.offset=0]
+   * @param {string|null} [options.type=null] - NOTE: sent as `memory_type`, which the
+   *   `/memory/list` route does not declare and therefore ignores. Pre-existing; kept as-is
+   *   so nothing silently changes behaviour for callers already passing it.
+   * @param {string|null} [options.metadataKey=null] - GRAPH-API-1l. Metadata key to filter
+   *   on. Nested keys use dot syntax (`profile.tier`). Must be paired with `metadataValue`;
+   *   sending only one half is a 422.
+   * @param {string|null} [options.metadataValue=null] - Value the key must equal.
+   * @returns {Promise<{items: object[], total: number, limit: number, offset: number}>}
+   *   `total` counts the filtered set, so it drives pagination directly.
+   */
+  async list({
+    limit: e = 50,
+    offset: t = 0,
+    type: s = null,
+    metadataKey: r = null,
+    metadataValue: n = null
+  } = {}) {
+    const i = new URLSearchParams({ limit: e, offset: t });
+    return s && i.append("memory_type", s), r != null && i.append("metadata_key", r), n != null && i.append("metadata_value", n), this.api.get(`/memory/list?${i}`);
   }
   /**
    * Search for memory items.
@@ -599,6 +637,11 @@ class z {
    * @param {boolean} [options.consolidationFirst=false] - When true (NEURO-1d), surface a
    *   consolidated summary above the scattered source memories it consolidates — best for
    *   synthesis queries. Opt-in; implies includeConsolidated.
+   * @param {string|Date|null} [options.asOfDate=null] - Transaction-time travel
+   *   (PLAT-AUDITABLE-MEMORY-1): return what the system believed at this
+   *   ISO-8601 instant. Date objects serialize to ISO automatically.
+   * @param {boolean} [options.includeSuperseded=false] - Keep superseded items
+   *   visible in results (PLAT-AUDITABLE-MEMORY-1).
    * @param {boolean} [options.cite=false] - When true (RECALL-CITATIONS-1), the
    *   envelope gains a `citations` array of `{n, item_id, item_type, preview, score, footnote_marker}`.
    *   Empty `citations: []` when no results — distinguishes "no results" from "no citations requested".
@@ -611,9 +654,25 @@ class z {
    *   present only under `cite: true`. Pre-LINEAGE-1 callers who indexed into a
    *   bare array must read `response.results` instead.
    */
-  async search(e, { topK: t = 5, enableHybrid: s = !0, memoryType: r = null, expertise: n = !1, cite: i = !1, decompose: o = !1, multiHop: c = !1, maxHops: u = 3, budgetMs: p = 1500, semanticHops: _ = !1, includeReference: $ = !1, includeConsolidated: T = !1, consolidationFirst: A = !1 } = {}) {
-    const m = { query: e, top_k: t, enable_hybrid: s };
-    return r && (m.memory_type = r), n && (m.expertise = !0), i && (m.cite = !0), o && (m.decompose = !0), c && (m.multi_hop = !0), c && u !== 3 && (m.max_hops = u), c && p !== 1500 && (m.budget_ms = p), c && _ && (m.semantic_hops = !0), $ && (m.include_reference = !0), T && (m.include_consolidated = !0), A && (m.consolidation_first = !0), this.api.post("/memory/search", m);
+  async search(e, { topK: t = 5, enableHybrid: s = !0, memoryType: r = null, expertise: n = !1, cite: i = !1, decompose: o = !1, multiHop: c = !1, maxHops: m = 3, budgetMs: p = 1500, semanticHops: $ = !1, includeReference: k = !1, includeConsolidated: U = !1, consolidationFirst: A = !1, asOfDate: g = null, includeSuperseded: C = !1 } = {}) {
+    const u = { query: e, top_k: t, enable_hybrid: s };
+    return r && (u.memory_type = r), n && (u.expertise = !0), i && (u.cite = !0), o && (u.decompose = !0), c && (u.multi_hop = !0), c && m !== 3 && (u.max_hops = m), c && p !== 1500 && (u.budget_ms = p), c && $ && (u.semantic_hops = !0), k && (u.include_reference = !0), U && (u.include_consolidated = !0), A && (u.consolidation_first = !0), g && (u.as_of_date = g instanceof Date ? g.toISOString() : g), C && (u.include_superseded = !0), this.api.post("/memory/search", u);
+  }
+  /**
+   * Get the complete audit answer for one memory (PLAT-AUDITABLE-MEMORY-1).
+   *
+   * Returns the explain-contract shape: identity + origin tier, every belief
+   * the system held over time (with chain hashes), supersession in both
+   * directions, lineage roots, decision provenance, and chain verification.
+   * A `chain_verified` of `null` means nothing to verify (legacy or
+   * unversioned) — it is NOT a tamper warning.
+   *
+   * @param {string} memoryId - Memory item ID.
+   * @returns {Promise<object>} Explain response
+   *   (docs/features/PLAT-AUDITABLE-MEMORY-1/explain-contract.json).
+   */
+  async explain(e) {
+    return this.api.get(`/memory/${encodeURIComponent(e)}/explain`);
   }
   async getWorkingContext(e, t, { k: s = 20, maxTokens: r = null, strategy: n = null } = {}) {
     const i = {
@@ -645,9 +704,22 @@ class z {
   async getLinks(e) {
     return this.api.get(`/memory/${e}/links`);
   }
-  async searchByMetadata(e, t, { memoryType: s = null } = {}) {
-    const r = new URLSearchParams({ metadata_key: e, metadata_value: t });
-    return s && r.append("memory_type", s), this.api.get(`/memory/by-metadata?${r}`);
+  /**
+   * Find memory items by exact metadata match.
+   *
+   * @deprecated GRAPH-API-1l — use {@link MemoryAPI#list} with `metadataKey` /
+   *   `metadataValue` instead. It applies the same filter but adds pagination and an
+   *   exact `total`. This method still works and its behaviour is unchanged; the two
+   *   endpoints return slightly different item shapes, so migrate deliberately rather
+   *   than by find-and-replace.
+   */
+  async searchByMetadata(e, t, { memoryType: s = null, limit: r = 25 } = {}) {
+    const n = new URLSearchParams({
+      metadata_key: e,
+      metadata_value: t,
+      limit: r
+    });
+    return s && n.append("memory_type", s), this.api.get(`/memory/by-metadata?${n}`);
   }
   async getNeighbors(e) {
     return this.api.get(`/memory/${e}/neighbors`);
@@ -776,7 +848,7 @@ class z {
     return this.api.get("/memory/clustering/stats");
   }
 }
-class E {
+class O {
   constructor(e) {
     this.api = e;
   }
@@ -804,10 +876,10 @@ class E {
     evidenceIds: i = null,
     domain: o = null,
     tags: c = null,
-    rejectedAlternatives: u = null,
+    rejectedAlternatives: m = null,
     rationale: p = null,
-    constraints: _ = null,
-    agentId: $ = null
+    constraints: $ = null,
+    agentId: k = null
   }) {
     return this.api.post("/memory/decisions/create", {
       content: e,
@@ -818,10 +890,10 @@ class E {
       evidence_ids: i,
       domain: o,
       tags: c,
-      rejected_alternatives: u,
+      rejected_alternatives: m,
       rationale: p,
-      constraints: _,
-      agent_id: $
+      constraints: $,
+      agent_id: k
     });
   }
   /**
@@ -965,9 +1037,12 @@ class E {
   /**
    * Find existing decisions that may conflict with this one.
    * @param {string} decisionId
+   * @param {number} [minContest=0] - Minimum pairwise contest severity (0..1).
    */
-  async findConflicts(e) {
-    return this.api.post(`/memory/decisions/${e}/conflicts`);
+  async findConflicts(e, t = 0) {
+    return this.api.post(
+      `/memory/decisions/${e}/conflicts?min_contest=${encodeURIComponent(t)}`
+    );
   }
   // --- Legacy reasoning proxies (kept for backward compatibility) ---
   /**
@@ -991,7 +1066,7 @@ class E {
     });
   }
 }
-class x {
+class F {
   constructor(e) {
     this.api = e;
   }
@@ -1013,7 +1088,7 @@ class x {
     return t.confidence !== void 0 && (s.confidence = t.confidence), t.subject !== void 0 && (s.subject = t.subject), t.subjectType !== void 0 && (s.subject_type = t.subjectType), t.disposition !== void 0 && (s.disposition = t.disposition), t.formedFrom !== void 0 && (s.formed_from = t.formedFrom), t.domain !== void 0 && (s.domain = t.domain), t.agentId !== void 0 && (s.agent_id = t.agentId), this.api.post("/memory/opinions/create", s);
   }
 }
-class O {
+class j {
   constructor(e) {
     this.api = e;
   }
@@ -1059,8 +1134,20 @@ class O {
    * Fetch edges for multiple node IDs in bulk.
    * @param {string[]} nodeIds
    */
-  async getEdgesBulk(e) {
-    return this.api.post("/memory/graph/edges", { node_ids: e });
+  async getEdgesBulk(e, { includeProperties: t = !1 } = {}) {
+    const s = t ? "?include_properties=true" : "";
+    return this.api.post(`/memory/graph/edges${s}`, { node_ids: e });
+  }
+  /**
+   * Bulk upsert graph nodes and edges, optionally replacing a node-ID prefix.
+   * @param {Object} [params]
+   * @param {Array<Object>} [params.nodes=[]] - Nodes with item_id, label, and properties.
+   * @param {Array<Object>} [params.edges=[]] - Edges with source_id, target_id, edge_type, and properties.
+   * @param {string|null} [params.deletePrefix=null] - Scoped node-ID prefix to delete before writing.
+   */
+  async bulkUpsert({ nodes: e = [], edges: t = [], deletePrefix: s = null } = {}) {
+    const r = { nodes: e, edges: t };
+    return s !== null && (r.delete_prefix = s), this.api.post("/memory/graph/bulk", r);
   }
   /**
    * Get Wikipedia grounding status for an entity node.
@@ -1136,7 +1223,7 @@ class O {
     );
   }
 }
-class F {
+class H {
   constructor(e) {
     this.api = e;
   }
@@ -1178,7 +1265,7 @@ class F {
     return this.api.delete(`/memory/teams/${e}/members/${t}`);
   }
 }
-class j {
+class B {
   constructor(e) {
     this.api = e;
   }
@@ -1200,7 +1287,7 @@ class j {
     return this.api.patch("/auth/llm-keys", e);
   }
 }
-class H {
+class K {
   constructor(e) {
     this.api = e;
   }
@@ -1226,7 +1313,7 @@ class H {
     });
   }
 }
-class B {
+class G {
   constructor(e) {
     this.api = e;
   }
@@ -1247,7 +1334,7 @@ class B {
     return this.api.delete(`/memory/api-keys/${e}`);
   }
 }
-class K {
+class N {
   constructor(e) {
     this.api = e;
   }
@@ -1306,7 +1393,7 @@ class K {
     return this.api.get(`/memory/agents/${e}/evaluation/history${n ? "?" + n : ""}`);
   }
 }
-class G {
+class D {
   constructor(e) {
     this.api = e;
   }
@@ -1320,7 +1407,7 @@ class G {
     return this.api.get("/usage/tiers");
   }
 }
-class D {
+class J {
   constructor(e) {
     this.api = e;
   }
@@ -1337,7 +1424,7 @@ class D {
     return this.api.get("/memory/plugins");
   }
 }
-class N {
+class W {
   constructor(e) {
     this.api = e;
   }
@@ -1360,7 +1447,7 @@ class N {
     return this.api.get("/memory/token-usage/current");
   }
 }
-class J {
+class V {
   constructor(e) {
     this.api = e;
   }
@@ -1506,7 +1593,7 @@ class J {
     return this.api.get(`/memory/temporal/relationships/${e}/valid-periods`);
   }
 }
-class V {
+class Y {
   constructor(e) {
     this.api = e;
   }
@@ -1575,7 +1662,7 @@ class V {
     return this.api.get("/memory/governance/summary");
   }
 }
-class W {
+class Z {
   constructor(e) {
     this.api = e;
   }
@@ -1616,7 +1703,7 @@ class W {
     return this.api.post("/memory/evolution/reinforce/opinions");
   }
 }
-class Y {
+class Q {
   constructor(e) {
     this.api = e;
   }
@@ -1714,7 +1801,7 @@ class Y {
     });
   }
 }
-class Z {
+class X {
   constructor(e) {
     this.api = e;
   }
@@ -1768,7 +1855,7 @@ class Z {
     return this.api.get(`/memory/reasoning/traces/${e}`);
   }
 }
-class Q {
+class ee {
   constructor(e) {
     this.api = e;
   }
@@ -2338,7 +2425,7 @@ class Q {
     return r !== void 0 && (n.expected_tier = r), this.api.post("/memory/ontology/queue/bulk", n);
   }
 }
-class X {
+class te {
   constructor(e) {
     this.api = e;
   }
@@ -2367,7 +2454,7 @@ class X {
     return e !== null && (r.protected_attributes = e), t !== null && (r.sentiment_analysis = t), s !== null && (r.topic_analysis = s), this.api.post("/memory/analytics/bias", r);
   }
 }
-class ee {
+class se {
   constructor(e) {
     this.api = e;
   }
@@ -2403,7 +2490,7 @@ class ee {
     return this.api.get("/memory/inference/rules");
   }
 }
-class te {
+class re {
   constructor(e) {
     this.api = e;
   }
@@ -2519,7 +2606,7 @@ class te {
     return this.api.delete(`/memory/pipeline/configs/${e}`);
   }
 }
-class se {
+class ne {
   constructor(e) {
     this.api = e;
   }
@@ -2545,7 +2632,7 @@ class se {
     return this.api.get(`/memory/archive/${e}`);
   }
 }
-class re {
+class ie {
   constructor(e) {
     this.api = e;
   }
@@ -2704,7 +2791,7 @@ class re {
     return this.api.get(`/memory/zettel/by-relation/${e}/${t}?limit=${s}`);
   }
 }
-class ne {
+class ae {
   constructor(e) {
     this.api = e;
   }
@@ -2740,7 +2827,7 @@ class ne {
     return this.api.get("/memory/procedures/matches/stats");
   }
 }
-class ie {
+class oe {
   constructor(e) {
     this.api = e;
   }
@@ -2789,7 +2876,7 @@ class ie {
     return this.api.delete(`/memory/procedures/candidates/${e}/dismiss`);
   }
 }
-class ae {
+class ce {
   constructor(e) {
     this.api = e;
   }
@@ -2844,7 +2931,7 @@ class ae {
     return this.api.get(`/memory/procedures/schemas/${e}`);
   }
 }
-class oe {
+class ue {
   constructor(e) {
     this.api = e;
   }
@@ -2916,11 +3003,11 @@ class oe {
     return this.api.delete(`/memory/summary/${e}`);
   }
 }
-class me {
+class le {
   constructor(e) {
-    this.auth = new L(e);
-    const t = new M(this.auth, { fetchFn: e.fetchFn });
-    this._api = t, this.memories = new z(t), this.decisions = new E(t), this.opinions = new x(t), this.graph = new O(t), this.teams = new F(t), this.profiles = new j(t), this.subscriptions = new H(t), this.authAPI = new B(t), this.agents = new K(t), this.usage = new G(t), this.insights = new D(t), this.tokenUsage = new N(t), this.temporal = new J(t), this.governance = new V(t), this.evolution = new W(t), this.reasoning = new Y(t), this.reasoningTraces = new Z(t), this.ontology = new Q(t), this.analytics = new X(t), this.validation = new ee(t), this.pipeline = new te(t), this.archive = new se(t), this.zettelkasten = new re(t), this.procedureMatches = new ne(t), this.procedureCandidates = new ie(t), this.procedureDrift = new ae(t), this.summaries = new oe(t);
+    this.auth = new z(e);
+    const t = new E(this.auth, { fetchFn: e.fetchFn });
+    this._api = t, this.memories = new x(t), this.decisions = new O(t), this.opinions = new F(t), this.graph = new j(t), this.teams = new H(t), this.profiles = new B(t), this.subscriptions = new K(t), this.authAPI = new G(t), this.agents = new N(t), this.usage = new D(t), this.insights = new J(t), this.tokenUsage = new W(t), this.temporal = new V(t), this.governance = new Y(t), this.evolution = new Z(t), this.reasoning = new Q(t), this.reasoningTraces = new X(t), this.ontology = new ee(t), this.analytics = new te(t), this.validation = new se(t), this.pipeline = new re(t), this.archive = new ne(t), this.zettelkasten = new ie(t), this.procedureMatches = new ae(t), this.procedureCandidates = new oe(t), this.procedureDrift = new ce(t), this.summaries = new ue(t);
   }
   setTeamId(e) {
     this.auth.tokenManager.setTeamId(e), this.auth.notifyListeners();
@@ -2947,35 +3034,35 @@ class me {
 }
 export {
   h as A,
-  M as B,
-  E as D,
-  W as E,
-  V as G,
-  D as I,
-  z as M,
-  Q as O,
-  te as P,
-  Y as R,
-  me as S,
-  F as T,
-  G as U,
-  ee as V,
-  re as Z,
-  K as a,
-  X as b,
-  se as c,
-  B as d,
-  L as e,
-  O as f,
-  x as g,
-  ie as h,
-  ne as i,
-  j,
-  Z as k,
-  H as l,
-  J as m,
-  C as n,
-  N as o,
-  P as p,
-  q
+  E as B,
+  O as D,
+  Z as E,
+  Y as G,
+  J as I,
+  x as M,
+  ee as O,
+  re as P,
+  Q as R,
+  le as S,
+  H as T,
+  D as U,
+  se as V,
+  ie as Z,
+  N as a,
+  te as b,
+  ne as c,
+  G as d,
+  z as e,
+  j as f,
+  F as g,
+  oe as h,
+  ae as i,
+  B as j,
+  X as k,
+  K as l,
+  V as m,
+  L as n,
+  W as o,
+  q as p,
+  M as q
 };

package/dist/core.js

@@ -1,4 +1,4 @@
-import { A as e, a as r, d as A, e as I, B as P, D as n, f as o, I as t, M as i, j as g, p as M, q as h, S as m, l as S, T as f, n as p, U as l } from "./core-D1Y88paM.js";
+import { A as e, a as r, d as A, e as I, B as P, D as n, f as o, I as t, M as i, j as g, p as M, q as h, S as m, l as S, T as f, n as p, U as l } from "./core-BEScfRuq.js";
 export {
   e as APIError,
   r as AgentAPI,

package/dist/index.js

@@ -1,4 +1,4 @@
-import { A as f, a as u, b as A, c as b, d as P, e as h, D as I, E as g, G as x, f as p, I as w, M as m, O as k, g as v, P as T, h as B, i as y, j as C, R as E, k as S, S as R, l as F, T as M, m as L, n as O, o as G, U, V as $, Z as D } from "./core-D1Y88paM.js";
+import { A as f, a as u, b as A, c as b, d as P, e as h, D as I, E as g, G as x, f as p, I as w, M as m, O as k, g as v, P as T, h as B, i as y, j as C, R as E, k as S, S as R, l as F, T as M, m as L, n as O, o as G, U, V as $, Z as D } from "./core-BEScfRuq.js";
 const i = {
   variables: {
     colorBackground: "transparent",

package/dist/react/analytics.js

@@ -0,0 +1,228 @@
+import { useEffect as m } from "react";
+import u from "posthog-js";
+function y() {
+  var e;
+  if (typeof import.meta < "u")
+    return "production";
+  if (typeof process < "u")
+    return (e = process.env) == null ? void 0 : e.NODE_ENV;
+}
+function E(e) {
+  return e === "production" || e === "test" ? e : "development";
+}
+const g = /(url|referrer|href)/i;
+function b(e) {
+  if (typeof e != "string" || !/^https?:\/\//i.test(e))
+    return e;
+  try {
+    const t = new URL(e);
+    return `${t.origin}${t.pathname}`;
+  } catch {
+    return null;
+  }
+}
+function p(e) {
+  if (!e || typeof e != "object")
+    return e;
+  const t = Array.isArray(e) ? [...e] : { ...e };
+  for (const [r, n] of Object.entries(t))
+    n && typeof n == "object" ? t[r] = p(n) : g.test(r) && (t[r] = b(n));
+  return t;
+}
+function h(e) {
+  return !e || typeof e != "object" ? e : { ...e, properties: p(e.properties) };
+}
+function U({ app: e, apiKey: t, apiHost: r }) {
+  const n = typeof t == "string" && t.trim() ? t.trim() : null, c = E(y());
+  return {
+    apiKey: n,
+    options: {
+      api_host: r,
+      autocapture: !1,
+      // PostHog's exception autocapture hooks window.onerror / unhandledrejection
+      // and ships the raw message, stack, and filenames — it never passes through
+      // our sanitized captureException seam, so an error string built from a search
+      // query or memory content would be sent verbatim. Explicit capture only.
+      capture_exceptions: !1,
+      capture_pageview: "history_change",
+      cross_subdomain_cookie: !0,
+      defaults: "2025-05-24",
+      // Session replay is ON but fully masked (D3 revision 2026-07-22):
+      // layout/navigation are visible, memory content, search queries, and
+      // chat text are not.
+      //
+      // maskTextSelector: '*' is the load-bearing flag. The top-level
+      // mask_all_text / mask_all_element_attributes options do NOT reach the
+      // recorder — posthog-js reads them only in autocapture.js and
+      // dead-clicks-autocapture.js (see their `maskAllText:` usage). The replay
+      // recorder resolves masking solely from session_recording.{maskAllInputs,
+      // maskTextSelector, blockSelector}. They are kept here as defense in depth
+      // for the autocapture surfaces, which remote config can switch on.
+      disable_session_recording: !1,
+      mask_all_text: !0,
+      mask_all_element_attributes: !0,
+      session_recording: {
+        maskAllInputs: !0,
+        maskTextSelector: "*"
+      },
+      // The PostHog project has consoleLogRecordingEnabled: true server-side, which
+      // pipes console output into the replay. Apps log raw payloads while debugging
+      // (Maya logs recalled memory content), so that is a content channel masking
+      // does not cover. Pin it off from the client, which takes precedence.
+      enable_recording_console_log: !1,
+      // $current_url / $referrer and their $initial_* variants are attached by
+      // PostHog to every event, replay snapshot, and identify — outside the
+      // product-event allowlist. Strip query strings and fragments so record
+      // identifiers cannot ride along.
+      before_send: h,
+      loaded: (i) => {
+        if (!(!n || typeof (i == null ? void 0 : i.register) != "function"))
+          try {
+            i.register({ app: e, environment: c });
+          } catch {
+          }
+      }
+    }
+  };
+}
+function v() {
+  return !u || u.__loaded !== !0 ? null : u;
+}
+function x({ user: e, isAuthenticated: t, workspaceId: r }) {
+  const n = e == null ? void 0 : e.id, c = e == null ? void 0 : e.email, i = e == null ? void 0 : e.subscription_tier, s = e == null ? void 0 : e.tenant_id;
+  return m(() => {
+    var f, _, l, d;
+    const o = v();
+    if (o)
+      try {
+        if (!t || !n) {
+          (f = o.unregister) == null || f.call(o, "workspace_id");
+          return;
+        }
+        r ? (_ = o.register) == null || _.call(o, { workspace_id: r }) : (l = o.unregister) == null || l.call(o, "workspace_id"), (d = o.identify) == null || d.call(o, n, {
+          email: c,
+          plan: i,
+          tenant_id: s
+        });
+      } catch {
+      }
+  }, [c, t, i, s, n, r]), null;
+}
+const z = Object.freeze({
+  evolution_triggered: Object.freeze(["error_count", "evolver_count", "evolver_keys", "executed_count", "profile_present", "skipped_count", "stop_on_error"]),
+  memories_cleared: Object.freeze(["deleted_count", "nuclear"]),
+  memory_created: Object.freeze(["created_count", "failed_count", "has_collection", "memory_type", "profile_present", "source", "tag_count", "use_pipeline"]),
+  memory_deleted: Object.freeze(["memory_type", "operation", "source"]),
+  memory_edited: Object.freeze(["changed_fields", "has_collection", "memory_type", "tag_count", "write_mode"]),
+  search_performed: Object.freeze(["budget_bucket", "cite", "decompose", "hybrid", "max_hops", "memory_type", "min_score_bucket", "multi_hop", "result_count", "semantic_hops", "surface", "top_k"]),
+  studio_pipeline_saved: Object.freeze(["enricher_count", "evolver_count", "grounder_count", "override_key_count", "save_surface", "stage_count", "storage"])
+}), O = Object.freeze({
+  memory_deleted: Object.freeze({
+    source: Object.freeze(["user", "cli", "api", "import", "signup", "managed", "mcp", "pipeline", "hook", "lifecycle", "observe", "evolver", "code", "enricher", "conversation", "structured", "version", "snapshot", "unknown"])
+  }),
+  search_performed: Object.freeze({
+    min_score_bucket: Object.freeze(["lt50", "lt80", "gte80"])
+  })
+}), j = /* @__PURE__ */ new Set([
+  "body",
+  "content",
+  "context",
+  "error",
+  "message",
+  "query",
+  "response",
+  "result",
+  "tag_values",
+  "tags",
+  "url"
+]), k = /* @__PURE__ */ new Set([
+  "AggregateError",
+  "Error",
+  "EvalError",
+  "RangeError",
+  "ReferenceError",
+  "SyntaxError",
+  "TypeError",
+  "URIError"
+]), R = ["source", "component", "operation", "method"];
+function a() {
+  return !u || u.__loaded !== !0 ? null : u;
+}
+function A(e) {
+  return j.has(e) ? !0 : /(^|_)(id|ids|name|names|tag|tags)$/.test(e);
+}
+function S(e, t, r) {
+  var c;
+  const n = (c = O[e]) == null ? void 0 : c[t];
+  return !n || n.includes(r);
+}
+function w(e) {
+  try {
+    return k.has(e == null ? void 0 : e.name) ? e.name : "Error";
+  } catch {
+    return "Error";
+  }
+}
+function N(e) {
+  const t = new Error();
+  return delete t.message, delete t.stack, Object.defineProperty(t, "name", {
+    configurable: !0,
+    enumerable: !0,
+    value: w(e)
+  }), t;
+}
+function T(e) {
+  const t = {};
+  if (!e || typeof e != "object")
+    return t;
+  for (const r of R)
+    typeof e[r] == "string" && (t[r] = e[r]);
+  return typeof e.status == "number" && Number.isFinite(e.status) && (t.status = e.status), t;
+}
+function I(e, t = {}) {
+  const r = z[e], n = a();
+  if (!r || !n || typeof n.capture != "function")
+    return !1;
+  try {
+    const c = {};
+    for (const i of r) {
+      if (A(i))
+        continue;
+      const s = t == null ? void 0 : t[i];
+      s === void 0 || !S(e, i, s) || (c[i] = s);
+    }
+    return n.capture(e, c), !0;
+  } catch {
+    return !1;
+  }
+}
+function D(e, t = {}) {
+  const r = a();
+  if (!r || typeof r.captureException != "function")
+    return !1;
+  try {
+    return r.captureException(
+      N(e),
+      T(t)
+    ), !0;
+  } catch {
+    return !1;
+  }
+}
+function K() {
+  const e = a();
+  if (!e || typeof e.reset != "function")
+    return !1;
+  try {
+    return e.reset(), !0;
+  } catch {
+    return !1;
+  }
+}
+export {
+  x as AnalyticsIdentity,
+  D as captureException,
+  I as captureProductEvent,
+  U as createAnalyticsConfig,
+  K as resetAnalytics
+};

package/dist/react.js

@@ -1,64 +1,66 @@
-import h, { createContext as d, useRef as y, useState as v, useEffect as b, useCallback as c, useContext as f } from "react";
-import { S as x } from "./core-D1Y88paM.js";
-const m = d(null), g = d(null);
-function U({ children: e, ...r }) {
-  const n = y(null);
-  n.current || (n.current = new x(r));
-  const t = n.current, [u, o] = v({
+import h, { createContext as d, useRef as I, useState as p, useEffect as C, useCallback as c, useContext as g } from "react";
+import { S as y } from "./core-BEScfRuq.js";
+const m = d(null), f = d(null);
+function b({ children: e, ...r }) {
+  const n = I(null);
+  n.current || (n.current = new y(r));
+  const t = n.current, [o, u] = p({
     isAuthenticated: t.auth.isAuthenticated(),
     user: t.auth.getCurrentUser(),
     token: t.auth.getCurrentToken(),
     tenantId: t.auth.getTenantId(),
+    workspaceId: t.auth.tokenManager.getTeamId(),
     loading: !1,
     error: null
   });
-  b(() => t.auth.addListener((a) => {
-    o((C) => ({
-      ...C,
-      isAuthenticated: a.isAuthenticated,
-      user: a.user,
-      token: a.token,
-      tenantId: a.tenantId
+  C(() => t.auth.addListener((i) => {
+    u((k) => ({
+      ...k,
+      isAuthenticated: i.isAuthenticated,
+      user: i.user,
+      token: i.token,
+      tenantId: i.tenantId,
+      workspaceId: i.workspaceId
     }));
   }), [t]);
-  const s = c(async () => {
+  const a = c(async () => {
     await t.auth.logout();
-  }, [t]), A = c((i) => t.auth.hasRole(i), [t]), S = c((i) => t.auth.getLoginUrl(i), [t]), w = {
-    ...u,
-    logout: s,
-    hasRole: A,
-    getLoginUrl: S
+  }, [t]), w = c((s) => t.auth.hasRole(s), [t]), A = c((s) => t.auth.getLoginUrl(s), [t]), S = {
+    ...o,
+    logout: a,
+    hasRole: w,
+    getLoginUrl: A
   };
-  return /* @__PURE__ */ h.createElement(m.Provider, { value: w }, /* @__PURE__ */ h.createElement(g.Provider, { value: t }, e));
+  return /* @__PURE__ */ h.createElement(m.Provider, { value: S }, /* @__PURE__ */ h.createElement(f.Provider, { value: t }, e));
 }
 function l() {
-  const e = f(m);
+  const e = g(m);
   if (!e)
     throw new Error("useAuth must be used within a SmartMemoryProvider");
   return e;
 }
-function k() {
-  const { isAuthenticated: e, user: r, token: n, tenantId: t, loading: u, error: o } = l();
-  return { isAuthenticated: e, user: r, token: n, tenantId: t, loading: u, error: o };
+function x() {
+  const { isAuthenticated: e, user: r, token: n, tenantId: t, workspaceId: o, loading: u, error: a } = l();
+  return { isAuthenticated: e, user: r, token: n, tenantId: t, workspaceId: o, loading: u, error: a };
 }
-function p() {
+function R() {
   const { login: e, logout: r, hasRole: n, getLoginUrl: t } = l();
   return { login: e, logout: r, hasRole: n, getLoginUrl: t };
 }
-function E() {
-  const e = f(g);
+function U() {
+  const e = g(f);
   if (!e)
     throw new Error("useSmartMemory must be used within a SmartMemoryProvider");
   return e;
 }
-function I({ children: e, fallback: r = null, redirectToLogin: n = !1 }) {
-  const { isAuthenticated: t, loading: u, getLoginUrl: o } = l();
-  if (u) return r;
+function E({ children: e, fallback: r = null, redirectToLogin: n = !1 }) {
+  const { isAuthenticated: t, loading: o, getLoginUrl: u } = l();
+  if (o) return r;
   if (!t) {
     if (n)
       try {
-        const s = o();
-        window.location.href = s;
+        const a = u();
+        window.location.href = a;
       } catch {
       }
     return r;
@@ -67,11 +69,11 @@ function I({ children: e, fallback: r = null, redirectToLogin: n = !1 }) {
 }
 export {
   m as AuthContext,
-  I as AuthWrapper,
-  g as ClientContext,
-  U as SmartMemoryProvider,
+  E as AuthWrapper,
+  f as ClientContext,
+  b as SmartMemoryProvider,
   l as useAuth,
-  p as useAuthActions,
-  k as useAuthState,
-  E as useSmartMemory
+  R as useAuthActions,
+  x as useAuthState,
+  U as useSmartMemory
 };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@smartmemory/sdk-js",
-  "version": "1.4.53",
+  "version": "1.4.59",
   "description": "Unified JavaScript SDK for SmartMemory API — auth + API client for all frontends",
   "type": "module",
   "main": "dist/index.js",
@@ -18,6 +18,10 @@
       "development": "./src/react/index.js",
       "default": "./dist/react.js"
     },
+    "./react/analytics": {
+      "development": "./src/react/analytics/index.js",
+      "default": "./dist/react/analytics.js"
+    },
     "./fetch": {
       "development": "./src/fetch/index.js",
       "default": "./dist/fetch.js"
@@ -35,13 +39,17 @@
     "test": "vitest run",
     "test:watch": "vitest",
     "test:coverage": "vitest run --coverage",
-    "lint": "eslint src/ tests/"
+    "lint": "eslint src/ tests/ scripts/"
   },
   "peerDependencies": {
+    "posthog-js": "^1.313.0",
     "react": ">=18.0.0",
     "react-dom": ">=18.0.0"
   },
   "peerDependenciesMeta": {
+    "posthog-js": {
+      "optional": true
+    },
     "react": {
       "optional": true
     },
@@ -57,6 +65,7 @@
     "eslint": "^9.0.0",
     "globals": "^16.0.0",
     "jsdom": "^25.0.0",
+    "posthog-js": "^1.313.0",
     "react": "^18.3.0",
     "react-dom": "^18.3.0",
     "vite": "^6.0.0",