@smartmemory/sdk-js 1.4.57 → 1.4.60

package/README.md

@@ -185,6 +185,9 @@ client.memories.delete(id);
 client.memories.list({ limit: 50, offset: 0, type: 'semantic' });
 client.memories.search('query', { topK: 5, enableHybrid: true });
 client.memories.searchAdvanced('query', { algorithm: 'query_traversal' });
+// Time travel and provenance (auditable memory)
+client.memories.search('query', { asOfDate: '2026-06-01T00:00:00Z', includeSuperseded: true });
+client.memories.explain(memoryId); // origin, version audit, supersession lineage, chain verification
 client.memories.ingest('content', { extractorName: 'llm' });
 client.memories.getSummary();
 client.memories.link(sourceId, targetId, 'RELATED');

package/dist/{core-D1O9gOZK.js → core-Casbg124.js}

@@ -1,9 +1,9 @@
-var R = (a) => {
+var S = (a) => {
   throw TypeError(a);
 };
-var k = (a, e, t) => e.has(a) || R("Cannot " + t);
-var g = (a, e, t) => (k(a, e, "read from private field"), t ? t.call(a) : e.get(a)), w = (a, e, t) => e.has(a) ? R("Cannot add the same private member more than once") : e instanceof WeakSet ? e.add(a) : e.set(a, t), b = (a, e, t, s) => (k(a, e, "write to private field"), s ? s.call(a, t) : e.set(a, t), t), S = (a, e, t) => (k(a, e, "access private method"), t);
-const A = {
+var w = (a, e, t) => e.has(a) || S("Cannot " + t);
+var g = (a, e, t) => (w(a, e, "read from private field"), t ? t.call(a) : e.get(a)), b = (a, e, t) => e.has(a) ? S("Cannot add the same private member more than once") : e instanceof WeakSet ? e.add(a) : e.set(a, t), I = (a, e, t, s) => (w(a, e, "write to private field"), s ? s.call(a, t) : e.set(a, t), t), T = (a, e, t) => (w(a, e, "access private method"), t);
+const q = {
   access: "smart_memory_auth_token",
   refresh: "smart_memory_refresh_token",
   user: "smart_memory_user",
@@ -16,14 +16,14 @@ const A = {
   tenant: ["tenant_id", "workspace_id", "sm_workspace_id"],
   team: ["team_id", "sm_team_id"]
 };
-class C {
+class M {
   /**
    * @param {Object} options
    * @param {'localStorage' | 'sessionStorage' | 'memory'} [options.storage='localStorage']
    * @param {Object} [options.keys] - Custom storage key names
    */
   constructor({ storage: e = "localStorage", keys: t = {} } = {}) {
-    this.storageType = e, this.keys = { ...A, ...t }, this._memory = { access: null, refresh: null, user: null, tenant: null, team: null };
+    this.storageType = e, this.keys = { ...q, ...t }, this._memory = { access: null, refresh: null, user: null, tenant: null, team: null };
   }
   getAccessToken() {
     return this.storageType === "memory" ? this._memory.access : this._getFromStorage(this.keys.access, y.access);
@@ -148,8 +148,8 @@ class C {
     return s === "none" || s === "null" || s === "undefined" ? null : t;
   }
 }
-var l, f, v;
-class P {
+var m, _, v;
+class z {
   /**
    * @param {Object} options
    * @param {string} options.apiBaseUrl
@@ -160,22 +160,22 @@ class P {
    * @param {function(): void} options.onRefreshFailed
    */
   constructor({ apiBaseUrl: e, refreshEndpoint: t, tokenManager: s, useCookieAuth: r = !1, onTokenRefreshed: n, onRefreshFailed: i }) {
-    w(this, f);
-    w(this, l, null);
+    b(this, _);
+    b(this, m, null);
     this.apiBaseUrl = e, this.refreshEndpoint = t, this.tokenManager = s, this.useCookieAuth = r, this.onTokenRefreshed = n, this.onRefreshFailed = i;
   }
   async refresh() {
-    if (g(this, l))
-      return g(this, l);
-    b(this, l, S(this, f, v).call(this));
+    if (g(this, m))
+      return g(this, m);
+    I(this, m, T(this, _, v).call(this));
     try {
-      return await g(this, l);
+      return await g(this, m);
     } finally {
-      b(this, l, null);
+      I(this, m, null);
     }
   }
 }
-l = new WeakMap(), f = new WeakSet(), v = async function() {
+m = new WeakMap(), _ = new WeakSet(), v = async function() {
   const e = this.tokenManager.getRefreshToken();
   if (!e && !this.useCookieAuth)
     throw this.onRefreshFailed(), new Error("No refresh token");
@@ -190,8 +190,8 @@ l = new WeakMap(), f = new WeakSet(), v = async function() {
   const r = await s.json();
   return this.tokenManager.setAccessToken(r.access_token), r.refresh_token && this.tokenManager.setRefreshToken(r.refresh_token), this.onTokenRefreshed(r.access_token), r.access_token;
 };
-const I = "smart_memory_sso_redirect";
-class L {
+const R = "smart_memory_sso_redirect";
+class E {
   /**
    * @param {Object} options
    * @param {string} options.webAppUrl - Web app URL for login redirect
@@ -216,26 +216,26 @@ class L {
   }
   storeRedirect(e) {
     try {
-      sessionStorage.setItem(I, e);
+      sessionStorage.setItem(R, e);
     } catch (t) {
       console.warn("Failed to store redirect URL:", t);
     }
   }
   getAndClearRedirect() {
     try {
-      const e = sessionStorage.getItem(I);
-      return sessionStorage.removeItem(I), e;
+      const e = sessionStorage.getItem(R);
+      return sessionStorage.removeItem(R), e;
     } catch {
       return null;
     }
   }
 }
-class q {
+class x {
   constructor(e) {
-    this.mode = e.mode, this.apiBaseUrl = e.apiBaseUrl, this.endpoints = e.endpoints || {}, this.listeners = /* @__PURE__ */ new Set(), this.useCookieAuth = e.useCookieAuth ?? this.mode === "sso", this.apiKey = e.apiKey || null, this.apiKey && (this.mode = "apiKey"), this.tokenManager = new C({
+    this.mode = e.mode, this.apiBaseUrl = e.apiBaseUrl, this.endpoints = e.endpoints || {}, this.listeners = /* @__PURE__ */ new Set(), this.useCookieAuth = e.useCookieAuth ?? this.mode === "sso", this.apiKey = e.apiKey || null, this.apiKey && (this.mode = "apiKey"), this.tokenManager = new M({
       storage: e.storage || "localStorage",
       keys: e.tokenKeys
-    }), this.mode !== "apiKey" ? this.refreshManager = new P({
+    }), this.mode !== "apiKey" ? this.refreshManager = new z({
       apiBaseUrl: this.apiBaseUrl,
       refreshEndpoint: this.endpoints.refresh || "/auth/refresh",
       tokenManager: this.tokenManager,
@@ -247,7 +247,7 @@ class q {
       onRefreshFailed: () => {
         this.clearLocalAuth();
       }
-    }) : this.refreshManager = null, this.mode === "sso" && (this.ssoManager = new L({
+    }) : this.refreshManager = null, this.mode === "sso" && (this.ssoManager = new E({
       webAppUrl: e.webAppUrl,
       allowedHosts: e.allowedRedirectHosts || [],
       tokenManager: this.tokenManager
@@ -377,10 +377,10 @@ class h extends Error {
     super(e), this.name = "APIError", this.status = t, this.detail = s;
   }
 }
-function d(a) {
+function f(a) {
   return typeof FormData < "u" && a instanceof FormData;
 }
-class M {
+class O {
   /**
    * @param {import('../auth/AuthCore.js').AuthCore} authCore
    * @param {{ fetchFn?: typeof globalThis.fetch }} [options]
@@ -394,7 +394,7 @@ class M {
   async request(e, t = {}) {
     var i, o;
     const s = `${this.baseURL}${e}`, r = {
-      ...d(t.body) ? {} : { "Content-Type": "application/json" },
+      ...f(t.body) ? {} : { "Content-Type": "application/json" },
       ...this.auth.getAuthHeaders(t.headers)
     }, n = this.auth.getRequestOptions({ ...t, headers: r });
     try {
@@ -402,13 +402,13 @@ class M {
       if (c.status === 401 && !t.__isRetry)
         try {
           await this.auth.refreshToken();
-          const u = {
-            ...d(t.body) ? {} : { "Content-Type": "application/json" },
+          const l = {
+            ...f(t.body) ? {} : { "Content-Type": "application/json" },
             ...this.auth.getAuthHeaders(t.headers)
           };
           c = await this.fetchFn(
             s,
-            this.auth.getRequestOptions({ ...n, headers: u, __isRetry: !0 })
+            this.auth.getRequestOptions({ ...n, headers: l, __isRetry: !0 })
           );
         } catch {
         }
@@ -436,7 +436,7 @@ class M {
   async requestBinary(e, t = {}) {
     var i, o;
     const s = `${this.baseURL}${e}`, r = {
-      ...d(t.body) ? {} : { "Content-Type": "application/json" },
+      ...f(t.body) ? {} : { "Content-Type": "application/json" },
       ...this.auth.getAuthHeaders(t.headers)
     }, n = this.auth.getRequestOptions({ ...t, headers: r });
     try {
@@ -444,13 +444,13 @@ class M {
       if (c.status === 401 && !t.__isRetry)
         try {
           await this.auth.refreshToken();
-          const u = {
-            ...d(t.body) ? {} : { "Content-Type": "application/json" },
+          const l = {
+            ...f(t.body) ? {} : { "Content-Type": "application/json" },
             ...this.auth.getAuthHeaders(t.headers)
           };
           c = await this.fetchFn(
             s,
-            this.auth.getRequestOptions({ ...n, headers: u, __isRetry: !0 })
+            this.auth.getRequestOptions({ ...n, headers: l, __isRetry: !0 })
           );
         } catch {
         }
@@ -527,7 +527,7 @@ class M {
     return typeof (e == null ? void 0 : e.message) == "string" ? e.message : `HTTP ${t}`;
   }
 }
-class z {
+class F {
   constructor(e) {
     this.api = e;
   }
@@ -545,6 +545,11 @@ class z {
    * @param {boolean} [options.usePipeline=true] - Run the full extraction pipeline
    * @param {string} [options.profileName] - Pipeline profile, routed server-side
    * @param {Object} [options.conversationContext] - Conversation-aware extraction context
+   * @param {boolean} [options.embed] - SVC-EMBED-CONTROL-1 embedding override.
+   *   `true` forces an embedding, `false` suppresses one, omitted leaves existing
+   *   behaviour untouched. **Only valid with `usePipeline: false`** — the server
+   *   answers 400 for the combination rather than silently ignoring it, because
+   *   the ingestion pipeline has no per-item override.
    */
   async create({
     content: e,
@@ -552,16 +557,17 @@ class z {
     metadata: s = null,
     usePipeline: r = !0,
     profileName: n = null,
-    conversationContext: i = null
+    conversationContext: i = null,
+    embed: o = null
   }) {
-    const o = {
+    const c = {
       content: e,
       memory_type: t,
       metadata: s,
       use_pipeline: r,
       profile_name: n
     };
-    return i != null && (o.conversation_context = i), this.api.post("/memory/add", o);
+    return i != null && (c.conversation_context = i), o != null && (c.embed = o), this.api.post("/memory/add", c);
   }
   async get(e) {
     const t = await this.api.get(`/memory/${e}`);
@@ -591,6 +597,28 @@ class z {
       reason: n
     });
   }
+  /**
+   * Link two ALREADY-STORED items as a supersession (SVC-SUPERSEDE-LINK-1).
+   *
+   * Use this when both records exist. Use {@link supersede} instead when the
+   * replacement still has to be created from content.
+   *
+   * The write stamps the OLD record with `superseded`, `superseded_by` and
+   * `superseded_at`. Detect supersession by reading those off a recalled record —
+   * the newer record carries no marker, so never scan for inbound links.
+   *
+   * @param {string} id - The OLD item (the one being superseded)
+   * @param {string} newItemId - The NEW item; must already exist and be in scope
+   * @param {string} [reason] - Optional human-readable reason
+   * @throws 400 if `newItemId` equals `id`; 404 if either item is missing *or*
+   *   out of scope (deliberately indistinguishable); 409 if the store declined.
+   */
+  async supersedeLink(e, t, s = null) {
+    return this.api.post(`/memory/${e}/supersede-link`, {
+      new_item_id: t,
+      reason: s
+    });
+  }
   async delete(e) {
     return this.api.delete(`/memory/${e}`);
   }
@@ -637,6 +665,21 @@ class z {
    * @param {boolean} [options.consolidationFirst=false] - When true (NEURO-1d), surface a
    *   consolidated summary above the scattered source memories it consolidates — best for
    *   synthesis queries. Opt-in; implies includeConsolidated.
+   * @param {string|Date|null} [options.asOfDate=null] - Transaction-time travel
+   *   (PLAT-AUDITABLE-MEMORY-1): return what the system believed at this
+   *   ISO-8601 instant. Date objects serialize to ISO automatically.
+   * @param {boolean} [options.asOfStrict=false] - Only meaningful with asOfDate
+   *   (PLAT-AUDITABLE-MEMORY-1 gap #2). Default returns results that could not be
+   *   resolved, each carrying `as_of_resolution: 'unresolved'`, and summarises them
+   *   in the envelope's `as_of_diagnostics`. When true the request fails with 422
+   *   instead, for callers who would rather have no answer than a partial history.
+   * @param {boolean} [options.includeSuperseded=false] - Keep superseded items
+   *   visible in results (PLAT-AUDITABLE-MEMORY-1).
+   * @param {boolean} [options.includeRetracted=false] - Keep retracted items visible
+   *   in results (CORE-RETRACTED-RECALL-1). A retracted belief was withdrawn outright
+   *   with no replacement, so it is a separate lifecycle state from superseded and is
+   *   NOT covered by includeSuperseded. Both are inert when asOfDate is set, which
+   *   retains those rows regardless.
    * @param {boolean} [options.cite=false] - When true (RECALL-CITATIONS-1), the
    *   envelope gains a `citations` array of `{n, item_id, item_type, preview, score, footnote_marker}`.
    *   Empty `citations: []` when no results — distinguishes "no results" from "no citations requested".
@@ -647,11 +690,31 @@ class z {
    *   carries `GroupRootStub`s for any lineage root_id referenced by some
    *   result's `lineage_roots` but not itself in `results`; `citations` is
    *   present only under `cite: true`. Pre-LINEAGE-1 callers who indexed into a
-   *   bare array must read `response.results` instead.
+   *   bare array must read `response.results` instead. When `asOfDate` is set the
+   *   envelope also carries `as_of_diagnostics` ({as_of, policy, unresolved_count,
+   *   unresolved_item_ids, note}) and every result carries `as_of_resolution`. A
+   *   result marked `'unresolved'` is PRESENT-DAY content and must not be rendered
+   *   as a historical belief.
    */
-  async search(e, { topK: t = 5, enableHybrid: s = !0, memoryType: r = null, expertise: n = !1, cite: i = !1, decompose: o = !1, multiHop: c = !1, maxHops: u = 3, budgetMs: p = 1500, semanticHops: _ = !1, includeReference: $ = !1, includeConsolidated: T = !1, consolidationFirst: U = !1 } = {}) {
-    const m = { query: e, top_k: t, enable_hybrid: s };
-    return r && (m.memory_type = r), n && (m.expertise = !0), i && (m.cite = !0), o && (m.decompose = !0), c && (m.multi_hop = !0), c && u !== 3 && (m.max_hops = u), c && p !== 1500 && (m.budget_ms = p), c && _ && (m.semantic_hops = !0), $ && (m.include_reference = !0), T && (m.include_consolidated = !0), U && (m.consolidation_first = !0), this.api.post("/memory/search", m);
+  async search(e, { topK: t = 5, enableHybrid: s = !0, memoryType: r = null, expertise: n = !1, cite: i = !1, decompose: o = !1, multiHop: c = !1, maxHops: l = 3, budgetMs: p = 1500, semanticHops: $ = !1, includeReference: k = !1, includeConsolidated: U = !1, consolidationFirst: A = !1, asOfDate: d = null, asOfStrict: C = !1, includeSuperseded: P = !1, includeRetracted: L = !1 } = {}) {
+    const u = { query: e, top_k: t, enable_hybrid: s };
+    return r && (u.memory_type = r), n && (u.expertise = !0), i && (u.cite = !0), o && (u.decompose = !0), c && (u.multi_hop = !0), c && l !== 3 && (u.max_hops = l), c && p !== 1500 && (u.budget_ms = p), c && $ && (u.semantic_hops = !0), k && (u.include_reference = !0), U && (u.include_consolidated = !0), A && (u.consolidation_first = !0), d && (u.as_of_date = d instanceof Date ? d.toISOString() : d), C && (u.as_of_strict = !0), P && (u.include_superseded = !0), L && (u.include_retracted = !0), this.api.post("/memory/search", u);
+  }
+  /**
+   * Get the complete audit answer for one memory (PLAT-AUDITABLE-MEMORY-1).
+   *
+   * Returns the explain-contract shape: identity + origin tier, every belief
+   * the system held over time (with chain hashes), supersession in both
+   * directions, lineage roots, decision provenance, and chain verification.
+   * A `chain_verified` of `null` means nothing to verify (legacy or
+   * unversioned) — it is NOT a tamper warning.
+   *
+   * @param {string} memoryId - Memory item ID.
+   * @returns {Promise<object>} Explain response
+   *   (docs/features/PLAT-AUDITABLE-MEMORY-1/explain-contract.json).
+   */
+  async explain(e) {
+    return this.api.get(`/memory/${encodeURIComponent(e)}/explain`);
   }
   async getWorkingContext(e, t, { k: s = 20, maxTokens: r = null, strategy: n = null } = {}) {
     const i = {
@@ -827,7 +890,7 @@ class z {
     return this.api.get("/memory/clustering/stats");
   }
 }
-class E {
+class j {
   constructor(e) {
     this.api = e;
   }
@@ -855,10 +918,10 @@ class E {
     evidenceIds: i = null,
     domain: o = null,
     tags: c = null,
-    rejectedAlternatives: u = null,
+    rejectedAlternatives: l = null,
     rationale: p = null,
-    constraints: _ = null,
-    agentId: $ = null
+    constraints: $ = null,
+    agentId: k = null
   }) {
     return this.api.post("/memory/decisions/create", {
       content: e,
@@ -869,10 +932,10 @@ class E {
       evidence_ids: i,
       domain: o,
       tags: c,
-      rejected_alternatives: u,
+      rejected_alternatives: l,
       rationale: p,
-      constraints: _,
-      agent_id: $
+      constraints: $,
+      agent_id: k
     });
   }
   /**
@@ -1045,7 +1108,7 @@ class E {
     });
   }
 }
-class x {
+class H {
   constructor(e) {
     this.api = e;
   }
@@ -1067,7 +1130,7 @@ class x {
     return t.confidence !== void 0 && (s.confidence = t.confidence), t.subject !== void 0 && (s.subject = t.subject), t.subjectType !== void 0 && (s.subject_type = t.subjectType), t.disposition !== void 0 && (s.disposition = t.disposition), t.formedFrom !== void 0 && (s.formed_from = t.formedFrom), t.domain !== void 0 && (s.domain = t.domain), t.agentId !== void 0 && (s.agent_id = t.agentId), this.api.post("/memory/opinions/create", s);
   }
 }
-class O {
+class B {
   constructor(e) {
     this.api = e;
   }
@@ -1202,7 +1265,7 @@ class O {
     );
   }
 }
-class F {
+class K {
   constructor(e) {
     this.api = e;
   }
@@ -1244,7 +1307,7 @@ class F {
     return this.api.delete(`/memory/teams/${e}/members/${t}`);
   }
 }
-class j {
+class G {
   constructor(e) {
     this.api = e;
   }
@@ -1266,7 +1329,7 @@ class j {
     return this.api.patch("/auth/llm-keys", e);
   }
 }
-class H {
+class N {
   constructor(e) {
     this.api = e;
   }
@@ -1292,7 +1355,7 @@ class H {
     });
   }
 }
-class B {
+class D {
   constructor(e) {
     this.api = e;
   }
@@ -1313,7 +1376,7 @@ class B {
     return this.api.delete(`/memory/api-keys/${e}`);
   }
 }
-class K {
+class J {
   constructor(e) {
     this.api = e;
   }
@@ -1372,7 +1435,7 @@ class K {
     return this.api.get(`/memory/agents/${e}/evaluation/history${n ? "?" + n : ""}`);
   }
 }
-class G {
+class W {
   constructor(e) {
     this.api = e;
   }
@@ -1386,7 +1449,7 @@ class G {
     return this.api.get("/usage/tiers");
   }
 }
-class D {
+class V {
   constructor(e) {
     this.api = e;
   }
@@ -1403,7 +1466,7 @@ class D {
     return this.api.get("/memory/plugins");
   }
 }
-class N {
+class Y {
   constructor(e) {
     this.api = e;
   }
@@ -1426,7 +1489,7 @@ class N {
     return this.api.get("/memory/token-usage/current");
   }
 }
-class J {
+class X {
   constructor(e) {
     this.api = e;
   }
@@ -1572,7 +1635,7 @@ class J {
     return this.api.get(`/memory/temporal/relationships/${e}/valid-periods`);
   }
 }
-class W {
+class Z {
   constructor(e) {
     this.api = e;
   }
@@ -1641,7 +1704,7 @@ class W {
     return this.api.get("/memory/governance/summary");
   }
 }
-class V {
+class Q {
   constructor(e) {
     this.api = e;
   }
@@ -1682,7 +1745,7 @@ class V {
     return this.api.post("/memory/evolution/reinforce/opinions");
   }
 }
-class Y {
+class ee {
   constructor(e) {
     this.api = e;
   }
@@ -1780,7 +1843,7 @@ class Y {
     });
   }
 }
-class Z {
+class te {
   constructor(e) {
     this.api = e;
   }
@@ -1834,7 +1897,7 @@ class Z {
     return this.api.get(`/memory/reasoning/traces/${e}`);
   }
 }
-class Q {
+class se {
   constructor(e) {
     this.api = e;
   }
@@ -2404,7 +2467,7 @@ class Q {
     return r !== void 0 && (n.expected_tier = r), this.api.post("/memory/ontology/queue/bulk", n);
   }
 }
-class X {
+class re {
   constructor(e) {
     this.api = e;
   }
@@ -2433,7 +2496,7 @@ class X {
     return e !== null && (r.protected_attributes = e), t !== null && (r.sentiment_analysis = t), s !== null && (r.topic_analysis = s), this.api.post("/memory/analytics/bias", r);
   }
 }
-class ee {
+class ne {
   constructor(e) {
     this.api = e;
   }
@@ -2469,7 +2532,7 @@ class ee {
     return this.api.get("/memory/inference/rules");
   }
 }
-class te {
+class ie {
   constructor(e) {
     this.api = e;
   }
@@ -2585,7 +2648,7 @@ class te {
     return this.api.delete(`/memory/pipeline/configs/${e}`);
   }
 }
-class se {
+class ae {
   constructor(e) {
     this.api = e;
   }
@@ -2611,7 +2674,7 @@ class se {
     return this.api.get(`/memory/archive/${e}`);
   }
 }
-class re {
+class oe {
   constructor(e) {
     this.api = e;
   }
@@ -2770,7 +2833,7 @@ class re {
     return this.api.get(`/memory/zettel/by-relation/${e}/${t}?limit=${s}`);
   }
 }
-class ne {
+class ce {
   constructor(e) {
     this.api = e;
   }
@@ -2806,7 +2869,7 @@ class ne {
     return this.api.get("/memory/procedures/matches/stats");
   }
 }
-class ie {
+class ue {
   constructor(e) {
     this.api = e;
   }
@@ -2855,7 +2918,7 @@ class ie {
     return this.api.delete(`/memory/procedures/candidates/${e}/dismiss`);
   }
 }
-class ae {
+class le {
   constructor(e) {
     this.api = e;
   }
@@ -2910,7 +2973,7 @@ class ae {
     return this.api.get(`/memory/procedures/schemas/${e}`);
   }
 }
-class oe {
+class me {
   constructor(e) {
     this.api = e;
   }
@@ -2982,11 +3045,119 @@ class oe {
     return this.api.delete(`/memory/summary/${e}`);
   }
 }
-class me {
+class he {
+  constructor(e) {
+    this.api = e;
+  }
+  /**
+   * Acquire a lease, or return null when a live holder definitively owns it.
+   * @param {string} key
+   * @param {Object} [params]
+   * @param {number} [params.ttlSeconds]
+   * @returns {Promise<{key: string, token: string, expires_at: string, ttl_remaining_ms: number}|null>}
+   */
+  async acquire(e, { ttlSeconds: t } = {}) {
+    var r, n;
+    const s = {};
+    t !== void 0 && (s.ttl_seconds = t);
+    try {
+      return await this.api.post(`/memory/locks/${e}`, s);
+    } catch (i) {
+      if ((i == null ? void 0 : i.status) === 409 && ((n = (r = i.detail) == null ? void 0 : r.detail) == null ? void 0 : n.reason) === "lock_held")
+        return null;
+      throw i;
+    }
+  }
+  /**
+   * Renew a lease, or return null when this token definitively no longer owns it.
+   * @param {string} key
+   * @param {string} token
+   * @param {Object} [params]
+   * @param {number} [params.ttlSeconds]
+   * @returns {Promise<{key: string, token: string, expires_at: string, ttl_remaining_ms: number}|null>}
+   */
+  async renew(e, t, { ttlSeconds: s } = {}) {
+    var n, i;
+    const r = {};
+    s !== void 0 && (r.ttl_seconds = s);
+    try {
+      return await this.api.post(`/memory/locks/${e}/renew`, r, {
+        headers: { "X-Lease-Token": t }
+      });
+    } catch (o) {
+      if ((o == null ? void 0 : o.status) === 409 && ((i = (n = o.detail) == null ? void 0 : n.detail) == null ? void 0 : i.reason) === "not_owner")
+        return null;
+      throw o;
+    }
+  }
+  /**
+   * Release a lease. Returns false when this token definitively no longer owns it.
+   * @param {string} key
+   * @param {string} token
+   * @returns {Promise<boolean>}
+   */
+  async release(e, t) {
+    var s, r;
+    try {
+      return await this.api.delete(`/memory/locks/${e}`, {
+        headers: { "X-Lease-Token": t }
+      }), !0;
+    } catch (n) {
+      if ((n == null ? void 0 : n.status) === 409 && ((r = (s = n.detail) == null ? void 0 : s.detail) == null ? void 0 : r.reason) === "not_owner")
+        return !1;
+      throw n;
+    }
+  }
+}
+class ye {
+  constructor(e) {
+    this.api = e;
+  }
+  /**
+   * Consume the next numbers. The caller owns the inclusive range [first, value].
+   *
+   * Every non-2xx throws. Unlike the lease there is no benign failure to
+   * swallow — returning null on a 503 would let a caller mistake coordinator
+   * failure for an allocation, which is the one thing this primitive prevents.
+   *
+   * Numbers you do not use are LOST. There is no release and no reclaim; gaps
+   * are guaranteed, so never treat `value` as a record count.
+   *
+   * @param {string} name
+   * @param {Object} [params]
+   * @param {number} [params.floor] High-water mark. Applied with `$max`, so it
+   *   can only ever raise the counter — safe and idempotent to send every call.
+   * @param {number} [params.count] How many to allocate (1..100, default 1).
+   * @returns {Promise<{name: string, value: number, first: number, count: number}>}
+   */
+  async allocate(e, { floor: t, count: s } = {}) {
+    const r = {};
+    return t !== void 0 && (r.floor = t), s !== void 0 && (r.count = s), this.api.post(`/memory/sequences/${e}/next`, r);
+  }
+  /**
+   * Read the counter without consuming a number, or null if never allocated.
+   *
+   * Only a 404 becomes null. A 503 throws — a down coordinator is not the same
+   * answer as "this sequence does not exist".
+   *
+   * @param {string} name
+   * @returns {Promise<number|null>}
+   */
+  async peek(e) {
+    try {
+      const t = await this.api.get(`/memory/sequences/${e}`);
+      return (t == null ? void 0 : t.value) ?? null;
+    } catch (t) {
+      if ((t == null ? void 0 : t.status) === 404) return null;
+      throw t;
+    }
+  }
+}
+class de {
   constructor(e) {
-    this.auth = new q(e);
-    const t = new M(this.auth, { fetchFn: e.fetchFn });
-    this._api = t, this.memories = new z(t), this.decisions = new E(t), this.opinions = new x(t), this.graph = new O(t), this.teams = new F(t), this.profiles = new j(t), this.subscriptions = new H(t), this.authAPI = new B(t), this.agents = new K(t), this.usage = new G(t), this.insights = new D(t), this.tokenUsage = new N(t), this.temporal = new J(t), this.governance = new W(t), this.evolution = new V(t), this.reasoning = new Y(t), this.reasoningTraces = new Z(t), this.ontology = new Q(t), this.analytics = new X(t), this.validation = new ee(t), this.pipeline = new te(t), this.archive = new se(t), this.zettelkasten = new re(t), this.procedureMatches = new ne(t), this.procedureCandidates = new ie(t), this.procedureDrift = new ae(t), this.summaries = new oe(t);
+    this.auth = new x(e);
+    const t = new O(this.auth, { fetchFn: e.fetchFn });
+    this._api = t, this.memories = new F(t), this.decisions = new j(t), this.opinions = new H(t), this.graph = new B(t), this.teams = new K(t), this.profiles = new G(t), this.subscriptions = new N(t), this.authAPI = new D(t), this.agents = new J(t), this.usage = new W(t), this.insights = new V(t), this.tokenUsage = new Y(t), this.temporal = new X(t), this.governance = new Z(t), this.evolution = new Q(t), this.reasoning = new ee(t), this.reasoningTraces = new te(t), this.ontology = new se(t), this.analytics = new re(t), this.validation = new ne(t), this.pipeline = new ie(t), this.archive = new ae(t), this.zettelkasten = new oe(t), this.procedureMatches = new ce(t), this.procedureCandidates = new ue(t), this.procedureDrift = new le(t), this.summaries = new me(t), this.locks = new he(t), this.sequences = new ye(t);
   }
   setTeamId(e) {
     this.auth.tokenManager.setTeamId(e), this.auth.notifyListeners();
@@ -3013,35 +3184,37 @@ class me {
 }
 export {
   h as A,
-  M as B,
-  E as D,
-  V as E,
-  W as G,
-  D as I,
-  z as M,
-  Q as O,
-  te as P,
-  Y as R,
-  me as S,
-  F as T,
-  G as U,
-  ee as V,
-  re as Z,
-  K as a,
-  X as b,
-  se as c,
-  B as d,
-  q as e,
-  O as f,
-  x as g,
-  ie as h,
-  ne as i,
-  j,
-  Z as k,
-  H as l,
-  J as m,
-  C as n,
-  N as o,
-  P as p,
-  L as q
+  O as B,
+  j as D,
+  Q as E,
+  Z as G,
+  V as I,
+  he as L,
+  F as M,
+  se as O,
+  ie as P,
+  ee as R,
+  ye as S,
+  K as T,
+  W as U,
+  ne as V,
+  oe as Z,
+  J as a,
+  re as b,
+  ae as c,
+  D as d,
+  x as e,
+  B as f,
+  H as g,
+  ue as h,
+  ce as i,
+  G as j,
+  te as k,
+  de as l,
+  N as m,
+  X as n,
+  M as o,
+  Y as p,
+  z as q,
+  E as r
 };

package/dist/core.js

@@ -1,20 +1,20 @@
-import { A as e, a as r, d as A, e as I, B as P, D as n, f as o, I as t, M as i, j as g, p as M, q as h, S as m, l as S, T as f, n as p, U as l } from "./core-D1O9gOZK.js";
+import { A as e, a as r, d as A, e as I, B as P, D as o, f as n, I as t, M as i, j as g, q as m, r as M, l as h, m as f, T as S, o as l, U as p } from "./core-Casbg124.js";
 export {
   e as APIError,
   r as AgentAPI,
   A as AuthAPI,
   I as AuthCore,
   P as BaseAPI,
-  n as DecisionAPI,
-  o as GraphAPI,
+  o as DecisionAPI,
+  n as GraphAPI,
   t as InsightsAPI,
   i as MemoryAPI,
   g as ProfileAPI,
-  M as RefreshManager,
-  h as SSOManager,
-  m as SmartMemoryClient,
-  S as SubscriptionAPI,
-  f as TeamAPI,
-  p as TokenManager,
-  l as UsageAPI
+  m as RefreshManager,
+  M as SSOManager,
+  h as SmartMemoryClient,
+  f as SubscriptionAPI,
+  S as TeamAPI,
+  l as TokenManager,
+  p as UsageAPI
 };

package/dist/index.js

@@ -1,4 +1,4 @@
-import { A as f, a as u, b as A, c as b, d as P, e as h, D as I, E as g, G as x, f as p, I as w, M as m, O as k, g as v, P as T, h as B, i as y, j as C, R as E, k as S, S as R, l as F, T as M, m as L, n as O, o as G, U, V as $, Z as D } from "./core-D1O9gOZK.js";
+import { A as f, a as u, b as A, c as P, d as b, e as h, D as I, E as g, G as x, f as p, I as w, L as m, M as k, O as v, g as T, P as B, h as y, i as C, j as S, R as E, k as R, S as F, l as L, m as M, T as O, n as G, o as U, p as $, U as D, V, Z } from "./core-Casbg124.js";
 const i = {
   variables: {
     colorBackground: "transparent",
@@ -39,27 +39,27 @@ const i = {
     lastAuthenticationStrategyBadge: "hidden"
   }
 };
-async function n(o, a = 8, r = 300) {
-  for (let e = 0; e < a; e += 1) {
+async function n(a, o = 8, r = 300) {
+  for (let e = 0; e < o; e += 1) {
     let t = null;
     try {
-      t = await o({ skipCache: !0 });
+      t = await a({ skipCache: !0 });
     } catch {
-      t = await o();
+      t = await a();
     }
     if (t) return t;
-    e < a - 1 && await new Promise((s) => setTimeout(s, r));
+    e < o - 1 && await new Promise((s) => setTimeout(s, r));
   }
   return null;
 }
 async function l({
-  apiBaseUrl: o,
-  getToken: a
+  apiBaseUrl: a,
+  getToken: o
 }) {
-  const r = await n(a);
+  const r = await n(o);
   if (!r)
     throw new Error("Missing Clerk token after retries");
-  const e = await fetch(`${o}/auth/clerk/session`, {
+  const e = await fetch(`${a}/auth/clerk/session`, {
     method: "POST",
     headers: { Authorization: `Bearer ${r}` },
     credentials: "include"
@@ -78,8 +78,8 @@ export {
   f as APIError,
   u as AgentAPI,
   A as AnalyticsAPI,
-  b as ArchiveAPI,
-  P as AuthAPI,
+  P as ArchiveAPI,
+  b as AuthAPI,
   h as AuthCore,
   i as CLERK_APPEARANCE,
   I as DecisionAPI,
@@ -87,24 +87,26 @@ export {
   x as GovernanceAPI,
   p as GraphAPI,
   w as InsightsAPI,
-  m as MemoryAPI,
-  k as OntologyAPI,
-  v as OpinionAPI,
-  T as PipelineAPI,
-  B as ProcedureCandidateAPI,
-  y as ProcedureMatchAPI,
-  C as ProfileAPI,
+  m as LockAPI,
+  k as MemoryAPI,
+  v as OntologyAPI,
+  T as OpinionAPI,
+  B as PipelineAPI,
+  y as ProcedureCandidateAPI,
+  C as ProcedureMatchAPI,
+  S as ProfileAPI,
   E as ReasoningAPI,
-  S as ReasoningTracesAPI,
-  R as SmartMemoryClient,
-  F as SubscriptionAPI,
-  M as TeamAPI,
-  L as TemporalAPI,
-  O as TokenManager,
-  G as TokenUsageAPI,
-  U as UsageAPI,
-  $ as ValidationAPI,
-  D as ZettelkastenAPI,
+  R as ReasoningTracesAPI,
+  F as SequenceAPI,
+  L as SmartMemoryClient,
+  M as SubscriptionAPI,
+  O as TeamAPI,
+  G as TemporalAPI,
+  U as TokenManager,
+  $ as TokenUsageAPI,
+  D as UsageAPI,
+  V as ValidationAPI,
+  Z as ZettelkastenAPI,
   l as exchangeClerkSession,
   n as getClerkTokenWithRetry
 };

package/dist/react.js

@@ -1,8 +1,8 @@
-import h, { createContext as d, useRef as I, useState as p, useEffect as C, useCallback as c, useContext as g } from "react";
-import { S as y } from "./core-D1O9gOZK.js";
+import h, { createContext as d, useRef as S, useState as p, useEffect as C, useCallback as c, useContext as g } from "react";
+import { l as y } from "./core-Casbg124.js";
 const m = d(null), f = d(null);
 function b({ children: e, ...r }) {
-  const n = I(null);
+  const n = S(null);
   n.current || (n.current = new y(r));
   const t = n.current, [o, u] = p({
     isAuthenticated: t.auth.isAuthenticated(),
@@ -14,8 +14,8 @@ function b({ children: e, ...r }) {
     error: null
   });
   C(() => t.auth.addListener((i) => {
-    u((k) => ({
-      ...k,
+    u((I) => ({
+      ...I,
       isAuthenticated: i.isAuthenticated,
       user: i.user,
       token: i.token,
@@ -25,13 +25,13 @@ function b({ children: e, ...r }) {
   }), [t]);
   const a = c(async () => {
     await t.auth.logout();
-  }, [t]), w = c((s) => t.auth.hasRole(s), [t]), A = c((s) => t.auth.getLoginUrl(s), [t]), S = {
+  }, [t]), w = c((s) => t.auth.hasRole(s), [t]), A = c((s) => t.auth.getLoginUrl(s), [t]), k = {
     ...o,
     logout: a,
     hasRole: w,
     getLoginUrl: A
   };
-  return /* @__PURE__ */ h.createElement(m.Provider, { value: S }, /* @__PURE__ */ h.createElement(f.Provider, { value: t }, e));
+  return /* @__PURE__ */ h.createElement(m.Provider, { value: k }, /* @__PURE__ */ h.createElement(f.Provider, { value: t }, e));
 }
 function l() {
   const e = g(m);

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@smartmemory/sdk-js",
-  "version": "1.4.57",
-  "description": "Unified JavaScript SDK for SmartMemory API \u2014 auth + API client for all frontends",
+  "version": "1.4.60",
+  "description": "Unified JavaScript SDK for SmartMemory API — auth + API client for all frontends",
   "type": "module",
   "main": "dist/index.js",
   "module": "dist/index.js",