@yamo/memory-mesh 3.2.4 → 3.2.6

package/lib/memory/adapters/client.d.ts

@@ -85,6 +85,11 @@ export declare class LanceDBClient {
      * @throws {QueryError} If stats query fails
      */
     getStats(): Promise<any>;
+    /**
+     * Compact old data files and prune versions older than 7 days.
+     * Best-effort — never throws.
+     */
+    optimize(): Promise<void>;
     /**
      * Sanitize an ID to prevent SQL injection
      * Removes any characters that aren't alphanumeric, underscore, or hyphen

package/lib/memory/adapters/client.js

@@ -201,7 +201,7 @@ export class LanceDBClient {
             await this.connect();
         }
         this._validateVector(vector);
-        const { limit = 10, nprobes = 20, filter = null } = options;
+        const { limit = 10, nprobes = 20, filter = null, refineFactor, timeoutMs } = options;
         return this._retryOperation(async () => {
             if (!this.table) {
                 throw new StorageError("Table not initialized");
@@ -217,12 +217,21 @@ export class LanceDBClient {
                     // ignore
                 }
             }
+            // Apply refineFactor for improved ANN recall (fetches N×candidates, reranks)
+            if (refineFactor && typeof refineFactor === "number") {
+                try {
+                    query = query.refineFactor(refineFactor);
+                }
+                catch (_e) {
+                    // ignore if not supported
+                }
+            }
             // Apply filter if provided
             if (filter) {
                 query = query.where(filter);
             }
-            // Execute search with limit
-            const resultsArray = await query.limit(limit).toArray();
+            // Execute search with limit (and optional timeout)
+            const resultsArray = await query.limit(limit).toArray(timeoutMs ? { timeoutMs } : undefined);
             return resultsArray.map((row) => ({
                 id: row.id,
                 content: row.content,
@@ -385,6 +394,22 @@ export class LanceDBClient {
             };
         });
     }
+    /**
+     * Compact old data files and prune versions older than 7 days.
+     * Best-effort — never throws.
+     */
+    async optimize() {
+        if (!this.isConnected || !this.table)
+            return;
+        try {
+            await this.table.optimize({
+                cleanupOlderThan: new Date(Date.now() - 7 * 24 * 60 * 60 * 1000),
+            });
+        }
+        catch (_e) {
+            // Best-effort — never block normal operations
+        }
+    }
     /**
      * Sanitize an ID to prevent SQL injection
      * Removes any characters that aren't alphanumeric, underscore, or hyphen

package/lib/memory/adapters/client.ts

@@ -201,7 +201,7 @@ export class LanceDBClient {
             await this.connect();
         }
         this._validateVector(vector);
-        const { limit = 10, nprobes = 20, filter = null } = options;
+        const { limit = 10, nprobes = 20, filter = null, refineFactor, timeoutMs } = options;
         return this._retryOperation(async () => {
             if (!this.table) {
                 throw new StorageError("Table not initialized");
@@ -217,12 +217,23 @@ export class LanceDBClient {
                     // ignore
                 }
             }
+            // Apply refineFactor for improved ANN recall (fetches N×candidates, reranks)
+            if (refineFactor && typeof refineFactor === "number") {
+                try {
+                    query = query.refineFactor(refineFactor);
+                }
+                catch (_e) {
+                    // ignore if not supported
+                }
+            }
             // Apply filter if provided
             if (filter) {
                 query = query.where(filter);
             }
-            // Execute search with limit
-            const resultsArray = await query.limit(limit).toArray();
+            // Execute search with limit (and optional timeout)
+            const resultsArray = await query.limit(limit).toArray(
+                timeoutMs ? { timeoutMs } : undefined,
+            );
             return resultsArray.map((row) => ({
                 id: row.id,
                 content: row.content,
@@ -385,6 +396,21 @@ export class LanceDBClient {
             };
         });
     }
+    /**
+     * Compact old data files and prune versions older than 7 days.
+     * Best-effort — never throws.
+     */
+    async optimize() {
+        if (!this.isConnected || !this.table) return;
+        try {
+            await this.table.optimize({
+                cleanupOlderThan: new Date(Date.now() - 7 * 24 * 60 * 60 * 1000),
+            });
+        }
+        catch (_e) {
+            // Best-effort — never block normal operations
+        }
+    }
     /**
      * Sanitize an ID to prevent SQL injection
      * Removes any characters that aren't alphanumeric, underscore, or hyphen

package/lib/memory/memory-mesh.d.ts

@@ -225,6 +225,12 @@ export declare class MemoryMesh {
         reliability: any;
         use_count: any;
     }>;
+    /**
+     * Get a single synthesized skill by ID
+     * @param {string} id - Skill ID
+     * @returns {Promise<Object|null>} Skill data or null if not found
+     */
+    getSkill(id: any): Promise<any>;
     /**
      * Prune skills
      */
@@ -444,6 +450,11 @@ export declare class MemoryMesh {
      * await mesh.close(); // Clean up
      * ```
      */
+    /**
+     * Compact old data files and prune versions older than 7 days.
+     * Best-effort — delegates to LanceDBClient.optimize().
+     */
+    optimize(): Promise<any>;
     close(): Promise<void>;
 }
 /**

package/lib/memory/memory-mesh.js

@@ -616,12 +616,30 @@ export class MemoryMesh {
         await this.init();
         const topic = options.topic || "general_improvement";
         const enrichedPrompt = options.enrichedPrompt || topic; // PHASE 4: Use enriched prompt
+        const mode = options.mode || "create";
+        const targetSkillId = options.targetSkillId;
         // const lookback = options.lookback || 20;
-        logger.info({ topic, enrichedPrompt }, "Synthesizing logic");
+        logger.info({ topic, mode, targetSkillId }, "Synthesizing logic");
         // OPTIMIZATION: If we have an execution engine (kernel), use SkillCreator!
         if (this._kernel_execute) {
             logger.info("Dispatching to SkillCreator agent...");
             try {
+                // Fetch target skill content if refactoring
+                let targetContent = "";
+                let targetPath = "";
+                if (mode === "refactor" && targetSkillId) {
+                    const skill = await this.getSkill(targetSkillId);
+                    if (skill) {
+                        targetPath = skill.metadata?.source_file || "";
+                        if (targetPath && fs.existsSync(targetPath)) {
+                            targetContent = fs.readFileSync(targetPath, "utf8");
+                        }
+                        else {
+                            // Fallback to DB content if file missing
+                            targetContent = skill.yamo_text || "";
+                        }
+                    }
+                }
                 // Use stored skill directories
                 const skillDirs = this.skillDirectories;
                 // Track existing .yamo files before SkillCreator runs
@@ -652,7 +670,11 @@ export class MemoryMesh {
                     }
                 }
                 // PHASE 4: Use enriched prompt for SkillCreator
-                await this._kernel_execute(`SkillCreator: design a new skill to handle ${enrichedPrompt}`, {
+                let prompt = `SkillCreator: design a new skill to handle ${enrichedPrompt}`;
+                if (mode === "refactor" && targetContent) {
+                    prompt = `SkillCreator: REFACTOR and FIX the following skill. It failed with the following context: ${enrichedPrompt}.\n\nEXISTING SKILL CONTENT:\n${targetContent}`;
+                }
+                await this._kernel_execute(prompt, {
                     v1_1_enabled: true,
                 });
                 // Find newly created .yamo file
@@ -813,6 +835,37 @@ description: Auto-generated skill to handle: ${enrichedPrompt || topic}
             throw new Error(`Failed to update skill reliability: ${error.message}`);
         }
     }
+    /**
+     * Get a single synthesized skill by ID
+     * @param {string} id - Skill ID
+     * @returns {Promise<Object|null>} Skill data or null if not found
+     */
+    async getSkill(id) {
+        await this.init();
+        if (!this.skillTable) {
+            return null;
+        }
+        try {
+            const results = await this.skillTable
+                .query()
+                .filter(`id == '${id}'`)
+                .toArray();
+            if (results.length === 0) {
+                return null;
+            }
+            const record = results[0];
+            return {
+                ...record,
+                metadata: typeof record.metadata === "string"
+                    ? JSON.parse(record.metadata)
+                    : record.metadata,
+            };
+        }
+        catch (error) {
+            logger.warn({ err: error, id }, "Failed to get skill");
+            return null;
+        }
+    }
     /**
      * Prune skills
      */
@@ -1366,7 +1419,7 @@ description: Auto-generated skill to handle: ${enrichedPrompt || topic}
             `agent: MemoryMesh_${this.agentId};`,
             `intent: distill_wisdom_from_execution;`,
             `context:`,
-            `  original_context;${situation.replace(/;/g, ",")};`,
+            `  original_context;${situation.replace(/;/g, "%3B")};`,
             `  error_pattern;${patternId};`,
             `  severity;${severity};`,
             `  timestamp;${timestamp};`,
@@ -1376,13 +1429,13 @@ description: Auto-generated skill to handle: ${enrichedPrompt || topic}
             `priority: high;`,
             `output:`,
             `  lesson_id;${lessonId};`,
-            `  oversight_description;${oversight.replace(/;/g, ",")};`,
-            `  preventative_rule;${preventativeRule.replace(/;/g, ",")};`,
+            `  oversight_description;${oversight.replace(/;/g, "%3B")};`,
+            `  preventative_rule;${preventativeRule.replace(/;/g, "%3B")};`,
             `  rule_confidence;${confidence};`,
             `meta:`,
-            `  rationale;${fix.replace(/;/g, ",")};`,
-            `  applicability_scope;${applicableScope.replace(/;/g, ",")};`,
-            `  inverse_lesson;${inverseLesson.replace(/;/g, ",")};`,
+            `  rationale;${fix.replace(/;/g, "%3B")};`,
+            `  applicability_scope;${applicableScope.replace(/;/g, "%3B")};`,
+            `  inverse_lesson;${inverseLesson.replace(/;/g, "%3B")};`,
             `  confidence;${confidence};`,
             `log: lesson_learned;timestamp;${timestamp};pattern;${patternId};severity;${severity};id;${lessonId};`,
             `handoff: SubconsciousReflector;`,
@@ -1714,6 +1767,13 @@ description: Auto-generated skill to handle: ${enrichedPrompt || topic}
      * await mesh.close(); // Clean up
      * ```
      */
+    /**
+     * Compact old data files and prune versions older than 7 days.
+     * Best-effort — delegates to LanceDBClient.optimize().
+     */
+    async optimize() {
+        return this.client?.optimize?.();
+    }
     // eslint-disable-next-line @typescript-eslint/require-await
     async close() {
         try {

package/lib/memory/memory-mesh.ts

@@ -648,12 +648,32 @@ export class MemoryMesh {
         await this.init();
         const topic = options.topic || "general_improvement";
         const enrichedPrompt = options.enrichedPrompt || topic; // PHASE 4: Use enriched prompt
+        const mode = options.mode || "create";
+        const targetSkillId = options.targetSkillId;
+
         // const lookback = options.lookback || 20;
-        logger.info({ topic, enrichedPrompt }, "Synthesizing logic");
+        logger.info({ topic, mode, targetSkillId }, "Synthesizing logic");
+
         // OPTIMIZATION: If we have an execution engine (kernel), use SkillCreator!
         if (this._kernel_execute) {
             logger.info("Dispatching to SkillCreator agent...");
             try {
+                // Fetch target skill content if refactoring
+                let targetContent = "";
+                let targetPath = "";
+                if (mode === "refactor" && targetSkillId) {
+                    const skill = await this.getSkill(targetSkillId);
+                    if (skill) {
+                        targetPath = skill.metadata?.source_file || "";
+                        if (targetPath && fs.existsSync(targetPath)) {
+                            targetContent = fs.readFileSync(targetPath, "utf8");
+                        } else {
+                            // Fallback to DB content if file missing
+                            targetContent = skill.yamo_text || "";
+                        }
+                    }
+                }
+
                 // Use stored skill directories
                 const skillDirs = this.skillDirectories;
                 // Track existing .yamo files before SkillCreator runs
@@ -683,8 +703,14 @@ export class MemoryMesh {
                         walk(dir);
                     }
                 }
+
                 // PHASE 4: Use enriched prompt for SkillCreator
-                await this._kernel_execute(`SkillCreator: design a new skill to handle ${enrichedPrompt}`, {
+                let prompt = `SkillCreator: design a new skill to handle ${enrichedPrompt}`;
+                if (mode === "refactor" && targetContent) {
+                    prompt = `SkillCreator: REFACTOR and FIX the following skill. It failed with the following context: ${enrichedPrompt}.\n\nEXISTING SKILL CONTENT:\n${targetContent}`;
+                }
+
+                await this._kernel_execute(prompt, {
                     v1_1_enabled: true,
                 });
                 // Find newly created .yamo file
@@ -845,6 +871,37 @@ description: Auto-generated skill to handle: ${enrichedPrompt || topic}
             throw new Error(`Failed to update skill reliability: ${error.message}`);
         }
     }
+    /**
+     * Get a single synthesized skill by ID
+     * @param {string} id - Skill ID
+     * @returns {Promise<Object|null>} Skill data or null if not found
+     */
+    async getSkill(id) {
+        await this.init();
+        if (!this.skillTable) {
+            return null;
+        }
+        try {
+            const results = await this.skillTable
+                .query()
+                .filter(`id == '${id}'`)
+                .toArray();
+            if (results.length === 0) {
+                return null;
+            }
+            const record = results[0];
+            return {
+                ...record,
+                metadata: typeof record.metadata === "string"
+                    ? JSON.parse(record.metadata)
+                    : record.metadata,
+            };
+        }
+        catch (error) {
+            logger.warn({ err: error, id }, "Failed to get skill");
+            return null;
+        }
+    }
     /**
      * Prune skills
      */
@@ -1418,7 +1475,7 @@ description: Auto-generated skill to handle: ${enrichedPrompt || topic}
             `agent: MemoryMesh_${this.agentId};`,
             `intent: distill_wisdom_from_execution;`,
             `context:`,
-            `  original_context;${situation.replace(/;/g, ",")};`,
+            `  original_context;${situation.replace(/;/g, "%3B")};`,
             `  error_pattern;${patternId};`,
             `  severity;${severity};`,
             `  timestamp;${timestamp};`,
@@ -1428,13 +1485,13 @@ description: Auto-generated skill to handle: ${enrichedPrompt || topic}
             `priority: high;`,
             `output:`,
             `  lesson_id;${lessonId};`,
-            `  oversight_description;${oversight.replace(/;/g, ",")};`,
-            `  preventative_rule;${preventativeRule.replace(/;/g, ",")};`,
+            `  oversight_description;${oversight.replace(/;/g, "%3B")};`,
+            `  preventative_rule;${preventativeRule.replace(/;/g, "%3B")};`,
             `  rule_confidence;${confidence};`,
             `meta:`,
-            `  rationale;${fix.replace(/;/g, ",")};`,
-            `  applicability_scope;${applicableScope.replace(/;/g, ",")};`,
-            `  inverse_lesson;${inverseLesson.replace(/;/g, ",")};`,
+            `  rationale;${fix.replace(/;/g, "%3B")};`,
+            `  applicability_scope;${applicableScope.replace(/;/g, "%3B")};`,
+            `  inverse_lesson;${inverseLesson.replace(/;/g, "%3B")};`,
             `  confidence;${confidence};`,
             `log: lesson_learned;timestamp;${timestamp};pattern;${patternId};severity;${severity};id;${lessonId};`,
             `handoff: SubconsciousReflector;`,
@@ -1801,6 +1858,13 @@ description: Auto-generated skill to handle: ${enrichedPrompt || topic}
      * await mesh.close(); // Clean up
      * ```
      */
+    /**
+     * Compact old data files and prune versions older than 7 days.
+     * Best-effort — delegates to LanceDBClient.optimize().
+     */
+    async optimize() {
+        return this.client?.optimize?.();
+    }
     // eslint-disable-next-line @typescript-eslint/require-await
     async close() {
         try {

package/lib/memory/schema.d.ts

@@ -65,6 +65,12 @@ export declare function isSchemaV2(schema: any): any;
  * Safe to call on any table — non-memory tables skip the schema column additions.
  */
 export declare function migrateTableV2(table: any): Promise<void>;
+/**
+ * Ensure the vector column has an IVF_PQ index.
+ * Skipped when: table has too few rows, index already exists, or table is a mock.
+ * Called automatically by createMemoryTableWithDimension after migration.
+ */
+export declare function ensureVectorIndex(table: any): Promise<void>;
 /**
  * Memory table schema using Apache Arrow format (default 384 dimensions)
  * @deprecated Use createMemorySchema(vectorDim) for dynamic dimensions
@@ -122,6 +128,7 @@ declare const _default: {
     createMemorySchemaV2: typeof createMemorySchemaV2;
     isSchemaV2: typeof isSchemaV2;
     migrateTableV2: typeof migrateTableV2;
+    ensureVectorIndex: typeof ensureVectorIndex;
     getEmbeddingDimension: typeof getEmbeddingDimension;
     DEFAULT_VECTOR_DIMENSION: number;
     EMBEDDING_DIMENSIONS: {

package/lib/memory/schema.js

@@ -9,6 +9,7 @@
  * - text-embedding-3-small: 1536 dimensions
  */
 import * as arrow from "apache-arrow";
+import { Index } from "@lancedb/lancedb";
 /**
  * Default vector dimension (all-MiniLM-L6-v2)
  */
@@ -153,6 +154,34 @@ export async function migrateTableV2(table) {
         { name: "last_accessed", valueSql: "cast(null as timestamp)" },
     ]);
 }
+/**
+ * Ensure the vector column has an IVF_PQ index.
+ * Skipped when: table has too few rows, index already exists, or table is a mock.
+ * Called automatically by createMemoryTableWithDimension after migration.
+ */
+export async function ensureVectorIndex(table) {
+    if (typeof table.listIndices !== "function")
+        return;
+    try {
+        const indices = await table.listIndices();
+        if (indices.some((i) => i.columns.includes("vector")))
+            return;
+        const rowCount = await table.countRows();
+        if (rowCount < INDEX_CONFIG.vector.num_partitions)
+            return;
+        await table.createIndex("vector", {
+            config: Index.ivfPq({
+                numPartitions: INDEX_CONFIG.vector.num_partitions,
+                numSubVectors: INDEX_CONFIG.vector.num_sub_vectors,
+                distanceType: INDEX_CONFIG.vector.metric,
+            }),
+            replace: false,
+        });
+    }
+    catch {
+        // Index creation is best-effort — never block table access
+    }
+}
 /**
  * Memory table schema using Apache Arrow format (default 384 dimensions)
  * @deprecated Use createMemorySchema(vectorDim) for dynamic dimensions
@@ -209,6 +238,8 @@ export async function createMemoryTableWithDimension(db, tableName, vectorDim) {
         }
         // Migrate existing tables to V2 (manifest paths + schema columns, idempotent)
         await migrateTableV2(table);
+        // Ensure vector index exists (no-op if already present or insufficient rows)
+        await ensureVectorIndex(table);
         return table;
     }
     catch (error) {
@@ -225,6 +256,7 @@ export default {
     createMemorySchemaV2,
     isSchemaV2,
     migrateTableV2,
+    ensureVectorIndex,
     getEmbeddingDimension,
     DEFAULT_VECTOR_DIMENSION,
     EMBEDDING_DIMENSIONS,

package/lib/memory/schema.ts

@@ -9,6 +9,8 @@
  * - text-embedding-3-small: 1536 dimensions
  */
 import * as arrow from "apache-arrow";
+import * as lancedb from "@lancedb/lancedb";
+import { Index } from "@lancedb/lancedb";
 /**
  * Default vector dimension (all-MiniLM-L6-v2)
  */
@@ -150,6 +152,31 @@ export async function migrateTableV2(table) {
         { name: "last_accessed", valueSql: "cast(null as timestamp)" },
     ]);
 }
+/**
+ * Ensure the vector column has an IVF_PQ index.
+ * Skipped when: table has too few rows, index already exists, or table is a mock.
+ * Called automatically by createMemoryTableWithDimension after migration.
+ */
+export async function ensureVectorIndex(table) {
+    if (typeof table.listIndices !== "function") return;
+    try {
+        const indices = await table.listIndices();
+        if (indices.some((i) => i.columns.includes("vector"))) return;
+        const rowCount = await table.countRows();
+        if (rowCount < INDEX_CONFIG.vector.num_partitions) return;
+        await table.createIndex("vector", {
+            config: Index.ivfPq({
+                numPartitions: INDEX_CONFIG.vector.num_partitions,
+                numSubVectors: INDEX_CONFIG.vector.num_sub_vectors,
+                distanceType: INDEX_CONFIG.vector.metric,
+            }),
+            replace: false,
+        });
+    }
+    catch {
+        // Index creation is best-effort — never block table access
+    }
+}
 /**
  * Memory table schema using Apache Arrow format (default 384 dimensions)
  * @deprecated Use createMemorySchema(vectorDim) for dynamic dimensions
@@ -206,6 +233,8 @@ export async function createMemoryTableWithDimension(db, tableName, vectorDim) {
         }
         // Migrate existing tables to V2 (manifest paths + schema columns, idempotent)
         await migrateTableV2(table);
+        // Ensure vector index exists (no-op if already present or insufficient rows)
+        await ensureVectorIndex(table);
         return table;
     }
     catch (error) {
@@ -222,6 +251,7 @@ export default {
     createMemorySchemaV2,
     isSchemaV2,
     migrateTableV2,
+    ensureVectorIndex,
     getEmbeddingDimension,
     DEFAULT_VECTOR_DIMENSION,
     EMBEDDING_DIMENSIONS,

package/lib/utils/prompt-security.d.ts

@@ -0,0 +1,32 @@
+/**
+ * Prompt Security Utilities — RFC-0010-A
+ *
+ * Shared sanitisation functions for all LLM prompt construction.
+ *
+ * Rule (RFC-0010-A §5): Any string originating from user input, memory retrieval,
+ * or execution logs that is interpolated into an LLM prompt MUST pass through
+ * sanitizePromptField() before interpolation.
+ *
+ * Audit sweep (2026-03-14):
+ *   - lib/memory/memory-mesh.ts   — HyDE query expansion uses `scrubbed` (pre-sanitised)
+ *   - lib/memory/memory-mesh.ts   — synthesis prompt uses `scrubbed` (pre-sanitised)
+ *   - lib/llm/client.ts           — reflection prompt: static system + formatted memory list
+ *   - lib/memory/memory-translator.ts — role-confusion protection already applied
+ */
+/**
+ * Sanitise a free-text value before injecting it into an LLM prompt.
+ *
+ * Actions:
+ *   - Collapses \r\n and \n to a single space (prevents instruction-injection via newlines)
+ *   - Escapes double-quotes → \" (prevents breaking out of JSON-encoded fields)
+ *   - Caps at maxLen characters (prevents token-budget exhaustion)
+ */
+export declare function sanitizePromptField(value: string, maxLen?: number): string;
+/**
+ * Sanitise a memory or agent identifier before injecting it into an LLM prompt.
+ *
+ * Allows only alphanumeric characters, underscores, and hyphens.
+ * Strips everything else to prevent SQL-style keywords, path traversal, or quote
+ * characters from appearing in the prompt even if the ID was tampered with in storage.
+ */
+export declare function sanitizeSkillId(value: string, maxLen?: number): string;

package/lib/utils/prompt-security.js

@@ -0,0 +1,43 @@
+/**
+ * Prompt Security Utilities — RFC-0010-A
+ *
+ * Shared sanitisation functions for all LLM prompt construction.
+ *
+ * Rule (RFC-0010-A §5): Any string originating from user input, memory retrieval,
+ * or execution logs that is interpolated into an LLM prompt MUST pass through
+ * sanitizePromptField() before interpolation.
+ *
+ * Audit sweep (2026-03-14):
+ *   - lib/memory/memory-mesh.ts   — HyDE query expansion uses `scrubbed` (pre-sanitised)
+ *   - lib/memory/memory-mesh.ts   — synthesis prompt uses `scrubbed` (pre-sanitised)
+ *   - lib/llm/client.ts           — reflection prompt: static system + formatted memory list
+ *   - lib/memory/memory-translator.ts — role-confusion protection already applied
+ */
+/**
+ * Sanitise a free-text value before injecting it into an LLM prompt.
+ *
+ * Actions:
+ *   - Collapses \r\n and \n to a single space (prevents instruction-injection via newlines)
+ *   - Escapes double-quotes → \" (prevents breaking out of JSON-encoded fields)
+ *   - Caps at maxLen characters (prevents token-budget exhaustion)
+ */
+export function sanitizePromptField(value, maxLen = 256) {
+    if (!value)
+        return "";
+    return value
+        .replace(/[\r\n]+/g, " ")
+        .replace(/"/g, '\\"')
+        .slice(0, maxLen);
+}
+/**
+ * Sanitise a memory or agent identifier before injecting it into an LLM prompt.
+ *
+ * Allows only alphanumeric characters, underscores, and hyphens.
+ * Strips everything else to prevent SQL-style keywords, path traversal, or quote
+ * characters from appearing in the prompt even if the ID was tampered with in storage.
+ */
+export function sanitizeSkillId(value, maxLen = 64) {
+    if (!value)
+        return "";
+    return value.replace(/[^a-zA-Z0-9_-]/g, "").slice(0, maxLen);
+}

package/lib/utils/prompt-security.ts

@@ -0,0 +1,43 @@
+/**
+ * Prompt Security Utilities — RFC-0010-A
+ *
+ * Shared sanitisation functions for all LLM prompt construction.
+ *
+ * Rule (RFC-0010-A §5): Any string originating from user input, memory retrieval,
+ * or execution logs that is interpolated into an LLM prompt MUST pass through
+ * sanitizePromptField() before interpolation.
+ *
+ * Audit sweep (2026-03-14):
+ *   - lib/memory/memory-mesh.ts   — HyDE query expansion uses `scrubbed` (pre-sanitised)
+ *   - lib/memory/memory-mesh.ts   — synthesis prompt uses `scrubbed` (pre-sanitised)
+ *   - lib/llm/client.ts           — reflection prompt: static system + formatted memory list
+ *   - lib/memory/memory-translator.ts — role-confusion protection already applied
+ */
+
+/**
+ * Sanitise a free-text value before injecting it into an LLM prompt.
+ *
+ * Actions:
+ *   - Collapses \r\n and \n to a single space (prevents instruction-injection via newlines)
+ *   - Escapes double-quotes → \" (prevents breaking out of JSON-encoded fields)
+ *   - Caps at maxLen characters (prevents token-budget exhaustion)
+ */
+export function sanitizePromptField(value: string, maxLen = 256): string {
+  if (!value) return "";
+  return value
+    .replace(/[\r\n]+/g, " ")
+    .replace(/"/g, '\\"')
+    .slice(0, maxLen);
+}
+
+/**
+ * Sanitise a memory or agent identifier before injecting it into an LLM prompt.
+ *
+ * Allows only alphanumeric characters, underscores, and hyphens.
+ * Strips everything else to prevent SQL-style keywords, path traversal, or quote
+ * characters from appearing in the prompt even if the ID was tampered with in storage.
+ */
+export function sanitizeSkillId(value: string, maxLen = 64): string {
+  if (!value) return "";
+  return value.replace(/[^a-zA-Z0-9_-]/g, "").slice(0, maxLen);
+}

package/lib/yamo/emitter.d.ts

@@ -1,12 +1,13 @@
 /**
- * YAMO Emitter - Constructs structured YAMO blocks for auditability
+ * YAMO Emitter - Constructs structured YAMO ABNF blocks for auditability
  *
- * Based on YAMO Protocol specification:
- * - Semicolon-terminated key-value pairs
- * - Agent/Intent/Context/Constraints/Meta/Output structure
- * - Supports reflect, retain, recall operations
+ * Based on YAMO Protocol RFC-0011 §3.2 (ABNF colon-separated multi-line format).
+ * This format is DISTINCT from the flat wire format (RFC-0008 / RFC-0014).
  *
- * Reference: Hindsight project's yamo_integration.py
+ * Escaping: RFC-0014 — semicolons in values are percent-encoded as `%3B`.
+ * (Supersedes the comma-escape scheme used prior to 2026-03-14.)
+ *
+ * Reference: yamo-os lib/yamo/emitter.ts (canonical implementation)
  */
 /**
  * YamoEmitter class for building YAMO protocol blocks

package/lib/yamo/emitter.js

@@ -1,14 +1,19 @@
 // @ts-nocheck
 /**
- * YAMO Emitter - Constructs structured YAMO blocks for auditability
+ * YAMO Emitter - Constructs structured YAMO ABNF blocks for auditability
  *
- * Based on YAMO Protocol specification:
- * - Semicolon-terminated key-value pairs
- * - Agent/Intent/Context/Constraints/Meta/Output structure
- * - Supports reflect, retain, recall operations
+ * Based on YAMO Protocol RFC-0011 §3.2 (ABNF colon-separated multi-line format).
+ * This format is DISTINCT from the flat wire format (RFC-0008 / RFC-0014).
  *
- * Reference: Hindsight project's yamo_integration.py
+ * Escaping: RFC-0014 — semicolons in values are percent-encoded as `%3B`.
+ * (Supersedes the comma-escape scheme used prior to 2026-03-14.)
+ *
+ * Reference: yamo-os lib/yamo/emitter.ts (canonical implementation)
  */
+/** Percent-encode semicolons in a value so they don't break the YAMO line format. */
+function escapeValue(value) {
+    return String(value).replace(/;/g, "%3B");
+}
 /**
  * YamoEmitter class for building YAMO protocol blocks
  * YAMO (Yet Another Multi-agent Orchestration) blocks provide
@@ -22,17 +27,17 @@ export class YamoEmitter {
     static buildReflectBlock(params) {
         const { topic, memoryCount, agentId = "default", reflection, confidence = 0.8, } = params;
         const timestamp = new Date().toISOString();
-        return `agent: MemoryMesh_${agentId};
+        return `agent: MemoryMesh_${escapeValue(agentId)};
 intent: synthesize_insights_from_context;
 context:
-  topic;${topic || "general"};
+  topic;${escapeValue(topic || "general")};
   memory_count;${memoryCount};
   timestamp;${timestamp};
 constraints:
   hypothesis;Reflection generates new insights from existing facts;
 priority: high;
 output:
-  reflection;${reflection};
+  reflection;${escapeValue(reflection)};
   confidence;${confidence};
 meta:
   rationale;Synthesized from ${memoryCount} relevant memories;
@@ -50,26 +55,26 @@ handoff: End;
         const { content, metadata: _metadata = {}, id, agentId = "default", memoryType = "event", } = params;
         const timestamp = new Date().toISOString();
         const contentPreview = content.length > 100 ? `${content.substring(0, 100)}...` : content;
-        // Escape semicolons in content for YAMO format
-        const escapedContent = contentPreview.replace(/;/g, ",");
-        return `agent: MemoryMesh_${agentId};
+        // RFC-0014: percent-encode semicolons (replaces legacy comma-escape)
+        const escapedContent = escapeValue(contentPreview);
+        return `agent: MemoryMesh_${escapeValue(agentId)};
 intent: store_memory_for_future_retrieval;
 context:
-  memory_id;${id};
-  memory_type;${memoryType};
+  memory_id;${escapeValue(id)};
+  memory_type;${escapeValue(memoryType)};
   timestamp;${timestamp};
   content_length;${content.length};
 constraints:
   hypothesis;New information should be integrated into world model;
 priority: medium;
 output:
-  memory_stored;${id};
+  memory_stored;${escapeValue(id)};
   content_preview;${escapedContent};
 meta:
   rationale;Memory persisted for semantic search and retrieval;
   observation;Content vectorized and stored in LanceDB;
   confidence;1.0;
-log: memory_retained;timestamp;${timestamp};id;${id};type;${memoryType};
+log: memory_retained;timestamp;${timestamp};id;${escapeValue(id)};type;${escapeValue(memoryType)};
 handoff: End;
 `;
     }
@@ -81,11 +86,11 @@ handoff: End;
         const { query, resultCount, limit = 10, agentId = "default", searchType = "semantic", } = params;
         const timestamp = new Date().toISOString();
         const recallRatio = resultCount > 0 ? (resultCount / limit).toFixed(2) : "0.00";
-        return `agent: MemoryMesh_${agentId};
+        return `agent: MemoryMesh_${escapeValue(agentId)};
 intent: retrieve_relevant_memories;
 context:
-  query;${query};
-  search_type;${searchType};
+  query;${escapeValue(query)};
+  search_type;${escapeValue(searchType)};
   requested_limit;${limit};
   timestamp;${timestamp};
 constraints:
@@ -98,7 +103,7 @@ meta:
   rationale;Semantic search finds similar content by vector similarity;
   observation;${resultCount} memories found matching query;
   confidence;${resultCount > 0 ? "0.9" : "0.5"};
-log: memory_recalled;timestamp;${timestamp};results;${resultCount};query;${query};
+log: memory_recalled;timestamp;${timestamp};results;${resultCount};query;${escapeValue(query)};
 handoff: End;
 `;
     }
@@ -109,22 +114,22 @@ handoff: End;
     static buildDeleteBlock(params) {
         const { id, agentId = "default", reason = "user_request" } = params;
         const timestamp = new Date().toISOString();
-        return `agent: MemoryMesh_${agentId};
+        return `agent: MemoryMesh_${escapeValue(agentId)};
 intent: remove_memory_from_storage;
 context:
-  memory_id;${id};
-  reason;${reason};
+  memory_id;${escapeValue(id)};
+  reason;${escapeValue(reason)};
   timestamp;${timestamp};
 constraints:
   hypothesis;Memory removal should be traceable for audit;
 priority: low;
 output:
-  deleted;${id};
+  deleted;${escapeValue(id)};
 meta:
   rationale;Memory removed from vector store;
   observation;Deletion recorded for provenance;
   confidence;1.0;
-log: memory_deleted;timestamp;${timestamp};id;${id};
+log: memory_deleted;timestamp;${timestamp};id;${escapeValue(id)};
 handoff: End;
 `;
     }
@@ -157,7 +162,8 @@ handoff: End;
                 // Allow empty lines and comments
                 if (trimmed &&
                     !trimmed.startsWith("agent:") &&
-                    !trimmed.startsWith("handoff:")) {
+                    !trimmed.startsWith("handoff:") &&
+                    !trimmed.endsWith(":")) {
                     errors.push(`Line not semicolon-terminated: ${trimmed.substring(0, 50)}`);
                 }
             }

package/lib/yamo/emitter.ts

@@ -1,14 +1,20 @@
 // @ts-nocheck
 /**
- * YAMO Emitter - Constructs structured YAMO blocks for auditability
+ * YAMO Emitter - Constructs structured YAMO ABNF blocks for auditability
  *
- * Based on YAMO Protocol specification:
- * - Semicolon-terminated key-value pairs
- * - Agent/Intent/Context/Constraints/Meta/Output structure
- * - Supports reflect, retain, recall operations
+ * Based on YAMO Protocol RFC-0011 §3.2 (ABNF colon-separated multi-line format).
+ * This format is DISTINCT from the flat wire format (RFC-0008 / RFC-0014).
  *
- * Reference: Hindsight project's yamo_integration.py
+ * Escaping: RFC-0014 — semicolons in values are percent-encoded as `%3B`.
+ * (Supersedes the comma-escape scheme used prior to 2026-03-14.)
+ *
+ * Reference: yamo-os lib/yamo/emitter.ts (canonical implementation)
  */
+
+/** Percent-encode semicolons in a value so they don't break the YAMO line format. */
+function escapeValue(value: string): string {
+  return String(value).replace(/;/g, "%3B");
+}
 /**
  * YamoEmitter class for building YAMO protocol blocks
  * YAMO (Yet Another Multi-agent Orchestration) blocks provide
@@ -22,17 +28,17 @@ export class YamoEmitter {
     static buildReflectBlock(params) {
         const { topic, memoryCount, agentId = "default", reflection, confidence = 0.8, } = params;
         const timestamp = new Date().toISOString();
-        return `agent: MemoryMesh_${agentId};
+        return `agent: MemoryMesh_${escapeValue(agentId)};
 intent: synthesize_insights_from_context;
 context:
-  topic;${topic || "general"};
+  topic;${escapeValue(topic || "general")};
   memory_count;${memoryCount};
   timestamp;${timestamp};
 constraints:
   hypothesis;Reflection generates new insights from existing facts;
 priority: high;
 output:
-  reflection;${reflection};
+  reflection;${escapeValue(reflection)};
   confidence;${confidence};
 meta:
   rationale;Synthesized from ${memoryCount} relevant memories;
@@ -50,26 +56,26 @@ handoff: End;
         const { content, metadata: _metadata = {}, id, agentId = "default", memoryType = "event", } = params;
         const timestamp = new Date().toISOString();
         const contentPreview = content.length > 100 ? `${content.substring(0, 100)}...` : content;
-        // Escape semicolons in content for YAMO format
-        const escapedContent = contentPreview.replace(/;/g, ",");
-        return `agent: MemoryMesh_${agentId};
+        // RFC-0014: percent-encode semicolons (replaces legacy comma-escape)
+        const escapedContent = escapeValue(contentPreview);
+        return `agent: MemoryMesh_${escapeValue(agentId)};
 intent: store_memory_for_future_retrieval;
 context:
-  memory_id;${id};
-  memory_type;${memoryType};
+  memory_id;${escapeValue(id)};
+  memory_type;${escapeValue(memoryType)};
   timestamp;${timestamp};
   content_length;${content.length};
 constraints:
   hypothesis;New information should be integrated into world model;
 priority: medium;
 output:
-  memory_stored;${id};
+  memory_stored;${escapeValue(id)};
   content_preview;${escapedContent};
 meta:
   rationale;Memory persisted for semantic search and retrieval;
   observation;Content vectorized and stored in LanceDB;
   confidence;1.0;
-log: memory_retained;timestamp;${timestamp};id;${id};type;${memoryType};
+log: memory_retained;timestamp;${timestamp};id;${escapeValue(id)};type;${escapeValue(memoryType)};
 handoff: End;
 `;
     }
@@ -81,11 +87,11 @@ handoff: End;
         const { query, resultCount, limit = 10, agentId = "default", searchType = "semantic", } = params;
         const timestamp = new Date().toISOString();
         const recallRatio = resultCount > 0 ? (resultCount / limit).toFixed(2) : "0.00";
-        return `agent: MemoryMesh_${agentId};
+        return `agent: MemoryMesh_${escapeValue(agentId)};
 intent: retrieve_relevant_memories;
 context:
-  query;${query};
-  search_type;${searchType};
+  query;${escapeValue(query)};
+  search_type;${escapeValue(searchType)};
   requested_limit;${limit};
   timestamp;${timestamp};
 constraints:
@@ -98,7 +104,7 @@ meta:
   rationale;Semantic search finds similar content by vector similarity;
   observation;${resultCount} memories found matching query;
   confidence;${resultCount > 0 ? "0.9" : "0.5"};
-log: memory_recalled;timestamp;${timestamp};results;${resultCount};query;${query};
+log: memory_recalled;timestamp;${timestamp};results;${resultCount};query;${escapeValue(query)};
 handoff: End;
 `;
     }
@@ -109,22 +115,22 @@ handoff: End;
     static buildDeleteBlock(params) {
         const { id, agentId = "default", reason = "user_request" } = params;
         const timestamp = new Date().toISOString();
-        return `agent: MemoryMesh_${agentId};
+        return `agent: MemoryMesh_${escapeValue(agentId)};
 intent: remove_memory_from_storage;
 context:
-  memory_id;${id};
-  reason;${reason};
+  memory_id;${escapeValue(id)};
+  reason;${escapeValue(reason)};
   timestamp;${timestamp};
 constraints:
   hypothesis;Memory removal should be traceable for audit;
 priority: low;
 output:
-  deleted;${id};
+  deleted;${escapeValue(id)};
 meta:
   rationale;Memory removed from vector store;
   observation;Deletion recorded for provenance;
   confidence;1.0;
-log: memory_deleted;timestamp;${timestamp};id;${id};
+log: memory_deleted;timestamp;${timestamp};id;${escapeValue(id)};
 handoff: End;
 `;
     }
@@ -157,7 +163,8 @@ handoff: End;
                 // Allow empty lines and comments
                 if (trimmed &&
                     !trimmed.startsWith("agent:") &&
-                    !trimmed.startsWith("handoff:")) {
+                    !trimmed.startsWith("handoff:") &&
+                    !trimmed.endsWith(":")) {
                     errors.push(`Line not semicolon-terminated: ${trimmed.substring(0, 50)}`);
                 }
             }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@yamo/memory-mesh",
-  "version": "3.2.4",
+  "version": "3.2.6",
   "description": "Portable semantic memory system with Layer 0 Scrubber for YAMO agents (v3 Singularity Edition)",
   "repository": {
     "type": "git",