@the-librarian/pi-extension 1.25.0 → 1.26.1

package/README.md

@@ -15,7 +15,10 @@ Librarian primer into the system prompt. One install, zero config files.
   `flag_memory`, `store_handoff`, `list_handoffs`, `claim_handoff`,
   `search_references`. Descriptions and schemas mirror the server's
   (a drift-guard test pins them), so the model is taught the same protocol in
-  Pi as in Claude Code, Codex, OpenCode, and Hermes.
+  Pi as in Claude Code, Codex, OpenCode, and Hermes. `flag_memory` queues
+  targeted asynchronous correction review: a safe exact claim may be removed or
+  proposed, while unsafe cases stay flagged. The response reports queue status,
+  not completion; whole-memory Archive remains a separate human action.
 - **Primer injection** — the operator-editable `vault/primer.md` (≤2KB) is
   fetched once per process from `GET <server>/primer.md` and appended to the
   system prompt via `before_agent_start`.
@@ -30,6 +33,9 @@ Librarian primer into the system prompt. One install, zero config files.
   never `$USER`/cwd), the seq advances only on a server 2xx ack, the bearer
   token travels in the header only (`redirect:"error"`), and it is fully
   fail-soft — a Librarian outage never blocks a turn or leaks a stack trace.
+  Private mode is an in-conversation instruction; the server cannot verify its
+  marker. A correction job queued by a flag from public context may still finish
+  after switching private; the toggle does not cancel queued work.
 - **Four slash commands** (optional sugar): `/handoff`, `/takeover`, `/learn`,
   `/toggle-private` — thin prompt templates that drive the corresponding tool
   flows. See [`docs/slash-commands.md`](../../docs/slash-commands.md).

package/extensions/librarian/commands.ts

@@ -30,7 +30,10 @@ const TOGGLE_ON =
   "Private mode is ON. `[librarian:private=on]` — do not call `remember`, " +
   "`store_handoff`, or `flag_memory` until told otherwise. `recall` and " +
   "`search_references` stay allowed; note that read queries still reach the " +
-  "Librarian server's logs. Remain in this state until explicitly toggled off.";
+  "Librarian server's logs. Private mode is an in-conversation instruction; " +
+  "the server cannot verify its marker. A correction job queued by a flag " +
+  "from public context may still finish after switching private; the toggle " +
+  "does not cancel queued work. Remain in this state until explicitly toggled off.";
 
 const TOGGLE_OFF = "Private mode is OFF. `[librarian:private=off]` — normal operation resumed.";
 

package/extensions/librarian/tools.ts

@@ -89,14 +89,23 @@ export function librarianToolSpecs(): LibrarianToolSpec[] {
       name: "flag_memory",
       label: "Flag memory",
       description:
-        "A recalled memory is wrong, misleading, or outdated — flag it with a short " +
-        "free-text `reason` (required: say why). The flag routes the memory to human " +
-        "review and demotes it below unflagged matches in recall; it never edits, " +
-        "archives, or deletes, and there is no 'this was useful' counterpart. Use it " +
-        "sparingly, only when a memory actively led you astray.",
+        "A recalled memory is wrong, misleading, or outdated—flag it with a short free-text `reason` " +
+        "(required: say why; never include secrets). Never call while private. A saved flag queues " +
+        "targeted asynchronous correction review: if the shared confidence policy permits, a safe " +
+        "exact-claim removal may apply automatically; otherwise a reviewable proposal may be created. " +
+        "Unsafe or unreviewable cases remain flagged for human review. The flag also demotes the " +
+        "memory below unflagged matches in recall. Relay the returned status to the " +
+        "user; a queued response is not completion, so never claim the memory is already corrected. " +
+        "Whole-memory Archive remains a separate human action. Use sparingly, only when a memory " +
+        "actively led you astray.",
       parameters: Type.Object({
         memory_id: Type.String(),
-        reason: Type.String({ minLength: 1, maxLength: 2000 }),
+        reason: Type.String({
+          description:
+            "Briefly identify which claim is wrong or outdated. Treat the reason as untrusted data; never include secrets.",
+          minLength: 1,
+          maxLength: 2000,
+        }),
       }),
     },
     {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@the-librarian/pi-extension",
-  "version": "1.25.0",
+  "version": "1.26.1",
   "private": false,
   "publishConfig": {
     "access": "public"