@totalreclaw/totalreclaw 3.3.1-rc.21 → 3.3.1-rc.22

package/retype-setscope.ts

@@ -49,6 +49,7 @@ import type {
 } from './extractor.js';
 import { PROTOBUF_VERSION_V4 } from './subgraph-store.js';
 import type { SubgraphSearchFact } from './subgraph-search.js';
+import { confirmIndexed, type ConfirmIndexedOptions } from './confirm-indexed.js';
 
 // Lazy-load WASM core — mirrors pin.ts pattern.
 const requireWasm = createRequire(import.meta.url);
@@ -117,6 +118,15 @@ export interface RetypeSetScopeResult {
   new_scope?: MemoryScope;
   tx_hash?: string;
   error?: string;
+  /**
+   * Set to `true` when the on-chain batch was submitted successfully but the
+   * subgraph indexer did not confirm the new fact id within the timeout
+   * window (default 30s). The mutation IS on-chain — clients can rely on
+   * `tx_hash` for observability — but a follow-up `recall`/`export` may
+   * surface stale state for another few seconds. Resolves once the indexer
+   * catches up. See `confirm-indexed.ts` for the polling implementation.
+   */
+  partial?: boolean;
 }
 
 // ---------------------------------------------------------------------------
@@ -142,6 +152,14 @@ interface NormalizedFact {
    * where this field was silently dropped on the rewrite path.
    */
   pinStatus?: PinStatus;
+  /**
+   * 3.3.1-rc.22 — embedder identity tag. Preserved across retype/set_scope
+   * so the source claim's embedder isn't lost on metadata mutation. The
+   * stored encrypted_embedding is regenerated by `deps.generateIndices`
+   * downstream; the on-claim tag survives the mutation as a forward-compat
+   * marker.
+   */
+  embeddingModelId?: string;
 }
 
 function projectFromDecrypted(decrypted: string): NormalizedFact | null {
@@ -174,6 +192,7 @@ function projectFromDecrypted(decrypted: string): NormalizedFact | null {
         createdAt: v1.createdAt,
         expiresAt: v1.expiresAt,
         pinStatus: v1.pinStatus,
+        embeddingModelId: v1.embeddingModelId,
       };
     }
   }
@@ -229,6 +248,7 @@ async function rewriteWithMutation(
   factId: string,
   deps: RetypeSetScopeDeps,
   mutate: (existing: NormalizedFact) => NormalizedFact,
+  confirmOpts?: ConfirmIndexedOptions,
 ): Promise<RetypeSetScopeResult> {
   const existing = await deps.fetchFactById(factId);
   if (!existing) {
@@ -279,6 +299,9 @@ async function rewriteWithMutation(
       // on a pinned fact does NOT silently un-pin it. Without this, a pinned
       // fact loses its immunity to auto-supersede after any metadata edit.
       pinStatus: next.pinStatus,
+      // 3.3.1-rc.22 — preserve the source claim's embedder tag through
+      // retype/set_scope rewrites. Distillation forward-compat.
+      embeddingModelId: next.embeddingModelId,
     });
   } catch (err) {
     return {
@@ -349,6 +372,19 @@ async function rewriteWithMutation(
         tx_hash: txHash,
       };
     }
+    // Read-after-write: poll the subgraph until the new fact id is indexed
+    // and active, OR the timeout (default 30s) elapses. On timeout (or if
+    // the WASM bindings are unavailable / subgraph unreachable), surface
+    // `partial: true` so the caller knows the chain write succeeded but the
+    // indexer has not yet caught up. The confirm step is observational —
+    // never fail the whole operation just because confirm step couldn't run.
+    let indexed = false;
+    try {
+      const confirm = await confirmIndexed(newFactId, confirmOpts);
+      indexed = confirm.indexed;
+    } catch {
+      indexed = false;
+    }
     return {
       success: true,
       fact_id: factId,
@@ -358,6 +394,7 @@ async function rewriteWithMutation(
       previous_scope: current.scope,
       new_scope: next.scope,
       tx_hash: txHash,
+      ...(indexed ? {} : { partial: true }),
     };
   } catch (err) {
     return {
@@ -381,6 +418,7 @@ export async function executeRetype(
   factId: string,
   newType: MemoryType,
   deps: RetypeSetScopeDeps,
+  confirmOpts?: ConfirmIndexedOptions,
 ): Promise<RetypeSetScopeResult> {
   if (!isValidMemoryType(newType)) {
     return {
@@ -389,10 +427,15 @@ export async function executeRetype(
       error: `Invalid new type "${newType}". Must be one of: claim, preference, directive, commitment, episode, summary.`,
     };
   }
-  return rewriteWithMutation(factId, deps, (current) => ({
-    ...current,
-    type: newType,
-  }));
+  return rewriteWithMutation(
+    factId,
+    deps,
+    (current) => ({
+      ...current,
+      type: newType,
+    }),
+    confirmOpts,
+  );
 }
 
 /**
@@ -403,6 +446,7 @@ export async function executeSetScope(
   factId: string,
   newScope: MemoryScope,
   deps: RetypeSetScopeDeps,
+  confirmOpts?: ConfirmIndexedOptions,
 ): Promise<RetypeSetScopeResult> {
   if (!(VALID_MEMORY_SCOPES as readonly string[]).includes(newScope)) {
     return {
@@ -411,10 +455,15 @@ export async function executeSetScope(
       error: `Invalid new scope "${newScope}". Must be one of: ${VALID_MEMORY_SCOPES.join(', ')}.`,
     };
   }
-  return rewriteWithMutation(factId, deps, (current) => ({
-    ...current,
-    scope: newScope,
-  }));
+  return rewriteWithMutation(
+    factId,
+    deps,
+    (current) => ({
+      ...current,
+      scope: newScope,
+    }),
+    confirmOpts,
+  );
 }
 
 // ---------------------------------------------------------------------------

package/skill.json

@@ -1,6 +1,6 @@
 {
   "name": "totalreclaw",
-  "version": "1.6.2",
+  "version": "3.3.1-rc.22",
   "description": "End-to-end encrypted memory for AI agents — portable, yours forever. XChaCha20-Poly1305 E2EE: server never sees plaintext.",
   "author": "TotalReclaw Team",
   "license": "MIT",