agenticow 0.1.0 → 0.1.1

package/README.md

@@ -87,6 +87,133 @@ A worked script lives in [`examples/parallel-agents.mjs`](./examples/parallel-ag
 
 ---
 
+## Applications
+
+Concrete ways to use COW agent memory — each with a runnable script in
+[`examples/`](./examples). Framing is honest: **practical** ships and is proven,
+**strategic** is shipped-but-early, **exotic** is vision/roadmap (clearly marked).
+
+### 🟢 Personalization — one base, a branch per user *(practical)*
+Give every user/account/tenant their own memory branch off a shared base. Private
+edits stay isolated; storage is delta-only (KB/user, not a full copy).
+```js
+const base = open('kb.rvf', { dimension: 1536 });
+const userMem = base.fork(`user-${userId}`);
+userMem.ingest([{ id, vector }]);          // private to this user
+userMem.query(q, 10);                       // reads through to the shared base
+```
+→ [`examples/personalization.mjs`](./examples/personalization.mjs) · [`parallel-agents.mjs`](./examples/parallel-agents.mjs)
+
+### 🟢 Rollback / quarantine — discard a poisoned branch *(practical)*
+An agent ingests hallucinated or adversarial memories into a sandbox branch.
+Detect it, drop the branch — the base is instantly clean, no re-index.
+```js
+const sandbox = base.fork('untrusted');
+sandbox.ingest(unvettedVectors);
+// ...detect bad content...
+sandbox.close();                            // discard → base never saw it
+```
+→ [`examples/rollback-quarantine.mjs`](./examples/rollback-quarantine.mjs)
+
+### 🟢 Checkpointing — crash recovery without replay *(practical)*
+Checkpoint memory before each risky step (162 B each). On failure, roll back to
+the last good checkpoint in ~0.5 ms — earlier steps are not replayed.
+```js
+const ck = mem.checkpoint('step-30');
+// ...step 31 crashes...
+mem.rollback(ck.id);                         // resume from step 30
+```
+→ [`examples/checkpointing.mjs`](./examples/checkpointing.mjs)
+
+### 🟢 Git-style memory workflow — branch → diff → promote *(practical)*
+Treat memory like code: branch a feature, review the change with `diff()`, and
+`promote()` the vetted delta into production.
+```js
+const feature = prod.branch('feature');
+feature.ingest(newFacts);
+feature.diff();                              // { added, overridden, deleted }
+feature.promote(prod);                       // merge into production
+```
+→ [`examples/git-workflow.mjs`](./examples/git-workflow.mjs)
+
+### 🟡 A/B testing & evolution — score variants, promote the winner *(strategic)*
+Fork N variant branches off one base, score each, and promote only the winner.
+The substrate for Darwin-style / population-based agent-memory search.
+```js
+const variants = ids.map((i) => base.fork(`variant-${i}`));
+// ...score each...
+variants[best].promote(base);               // keep the winner, drop the rest free
+```
+→ [`examples/ab-branches.mjs`](./examples/ab-branches.mjs)
+
+### 🟡 Compliance & lineage — provenance-tracked memory *(strategic)*
+Every branch records its parent id + hash and a cryptographic witness chain.
+`lineage()` gives an auditable history of how a memory state was reached —
+useful for reproducibility and audit trails.
+
+### 🟡 Edge / local-first agents — embedded, no server *(strategic)*
+agenticow runs in-process over a single `.rvf` file — no DB server, no network.
+Thousands of cheap branches fit on-device for offline/edge multi-agent memory.
+
+### 🔭 Agent marketplaces & shared base memories *(exotic — vision, not shipped)*
+A published base memory that many agents branch from, contributing deltas back —
+a "memory package registry". The branch/promote primitives exist today; the
+distribution, trust, and merge-policy layer is **roadmap, not shipped**.
+
+---
+
+## MetaHarness usage
+
+agenticow is the **memory plane** of the [`@metaharness/*`](https://www.npmjs.com/org/metaharness)
+agent-harness ecosystem. It pairs with [`@metaharness/jujutsu`](https://www.npmjs.com/package/@metaharness/jujutsu)
+(`v0.1.0`), which wraps [`agentic-jujutsu`](https://www.npmjs.com/package/agentic-jujutsu)
+(a Rust+NAPI Jujutsu `jj` op-log with QuantumDAG coordination, ReasoningBank
+trajectories, and ML-DSA signing) — the **code/op plane**.
+
+**The dual-state bridge (ADR-202).** A coding agent that explores must branch and
+roll back *two* planes: the **code/ops** it did and the **memory** it learned.
+Used separately they drift (revert code but keep poisoned memory; promote a
+memory delta whose ops were never merged). `@metaharness/jujutsu`'s
+`DualStateBridge` ties them 1:1 — one agent ⇒ one op branch + one memory branch —
+mapping four lifecycle verbs onto agenticow:
+
+| Verb | code/op plane (agentic-jujutsu) | memory plane (agenticow) |
+|---|---|---|
+| **spawn** | `jj bookmark create` + start trajectory | `fork()` off the base + `checkpoint('spawn')` |
+| **learn** | finalize trajectory + read op-sequence | embed ops → `ingest()` into the branch |
+| **revert** | `jj undo` | `rollback()` to the spawn checkpoint |
+| **merge** | `jj squash` ops into base | `promote()` the winning delta into the base |
+
+Install alongside (both planes are **optional peer deps** — the bridge runs
+degraded/mock-backed if one is absent, per the ADR-150 *removable-augmentation*
+principle):
+
+```bash
+npm install @metaharness/jujutsu agenticow agentic-jujutsu
+```
+
+```js
+import { open } from 'agenticow';
+// @metaharness/jujutsu wires these two planes behind DualStateBridge:
+const base = open('reasoning-bank.rvf', { dimension: 1536 });
+const agentMem = base.fork('agent-007');     // memory branch (spawn)
+agentMem.checkpoint('spawn');
+agentMem.ingest(embeddedTrajectory);          // learn
+// if the trajectory scores poorly:
+agentMem.rollback(/* spawn checkpoint id */); // revert — code revert via `jj undo`
+// if it wins:
+agentMem.promote(base);                        // merge — ops via `jj squash`
+```
+
+**Honest status (ADR-202):** spawn / learn / revert / merge are **wired
+end-to-end** with both real native planes. **Cross-branch ANN query is stubbed**
+behind a port — agenticow's exact read-through answers it correctly but
+unaccelerated across the COW boundary; the native single-index-across-the-branch
+lands with [ruvnet/RuVector PR #617](https://github.com/ruvnet/RuVector/pull/617),
+at which point only the adapter swaps.
+
+---
+
 ## How copy-on-write for vectors works
 
 ![COW concept](./assets/concept.png)
@@ -144,6 +271,29 @@ The acceptance test builds a brute-force ground truth (`base ∪ branch-inserts
 
 \* **Honest concession.** On SIFT-1M, same machine, the underlying [ruvector](https://github.com/ruvnet/RuVector) HNSW does ~2,197 QPS @ recall 0.95 vs hnswlib-node ~9,344 QPS — roughly **2.7× slower** for raw ANN. If you need maximum raw similarity-search speed on a static index, use a dedicated ANN library. agenticow's edge is **cheap branching, checkpointing and rollback of agent memory** — which none of the above have.
 
+### Performance · storage · cost at scale
+
+**Scenario: 1,000 branches over a 1M-vector base** (dim 128, ~496 MB base). agenticow figures are **measured** on an AMD Ryzen 9 9950X; competitor figures are **published / estimated** (sources below) and labeled as such — not fabricated.
+
+| Approach | Branch / snapshot create | Per-branch storage | Query latency (ANN) | Cost @ 1,000 branches | Native COW / rollback |
+|---|---|---|---|---|---|
+| **agenticow (COW)** | 0.47 ms / 162 B *(measured, flat to 1M)* | ~10.8 KB *(measured)* | ~2.7× behind hnswlib *(measured\*)* | ~507 MB local · **~$0** infra (embedded) *(measured†)* | ✅ instant (p50 0.57 ms) |
+| Naive full-copy | 67 ms / 496 MB *(measured @1M)* | full base (~496 MB) | = source engine | ~484 GB local *(measured ×N)* | ❌ |
+| Pinecone (serverless) | no native branch — full re-upsert | full copy (managed) | fast (core strength) | ~484 GB ≈ **$160/mo** storage + units *(est.¹)* | ❌ |
+| Milvus | snapshot = full copy / reindex | full copy | fast (core strength) | ~484 GB resident → large cluster, **$$$/mo** *(est.²)* | ❌ |
+| Qdrant | snapshot = full copy | full copy | fast (core strength) | ~484 GB → managed/self-host, **$$$/mo** *(est.³)* | ❌ |
+| pgvector | SQL dump + reindex | full copy | moderate | ~484 GB in Postgres *(est.)* | ❌ |
+| Chroma | full collection copy | full copy | moderate | ~484 GB local/managed *(est.)* | ❌ |
+| lakeFS / DVC | fast metadata branch *(their strength)* | file-level delta (cheap) | n/a — not a vector engine | cheap branching, but you still build/serve the ANN index yourself *(published)* | ✅ data/files · ❌ vector index |
+
+**Takeaway:** agenticow wins on branch-create speed, per-branch storage, and multi-branch cost, and is the only option with native COW branching + instant rollback of a live vector memory. It **concedes raw ANN search speed** to the dedicated vector DBs — use those when single-index query throughput is the priority, and agenticow when you need cheap branching, checkpointing, and rollback of agent memory.
+
+<sub>\* SIFT-1M same-machine (above). † base ~496 MB + 1,000 × ~10.8 KB ≈ 507 MB, in-process. ¹ est. from [pinecone.io/pricing](https://www.pinecone.io/pricing/) (~$0.33/GB-mo storage, excl. read/write units). ² est. from [zilliz.com/pricing](https://zilliz.com/pricing). ³ est. from [qdrant.tech/pricing](https://qdrant.tech/pricing/). Competitor figures are published/estimated; only agenticow's are measured.</sub>
+
+The [live site](https://ruvnet.github.io/agenticow/#bench) is mobile-friendly (responsive layout, horizontally-scrollable tables):
+
+<img src="./assets/mobile-hero.png" width="280" alt="agenticow on mobile (375px width)" />
+
 ---
 
 ## Honest scope

package/examples/README.md

@@ -0,0 +1,111 @@
+# agenticow examples
+
+Runnable, optimized examples — one per core use case. They import the library
+from `../src/index.js` so they run against this repo with zero setup; in your own
+project, import from `agenticow` instead.
+
+```bash
+node examples/personalization.mjs
+node examples/rollback-quarantine.mjs
+node examples/checkpointing.mjs
+node examples/git-workflow.mjs
+node examples/ab-branches.mjs
+node examples/parallel-agents.mjs
+# or all of them:
+npm run examples
+```
+
+Vectors are generated by a seeded RNG (`_shared.mjs`) so the **id/order/recall
+outputs are deterministic**; only the timings vary per machine. Outputs below
+were captured on an AMD Ryzen 9 9950X, Node v22.
+
+---
+
+### `personalization.mjs` — one base, a cheap branch per user
+
+A shared base + an isolated COW branch per user. Private edits stay private;
+storage is delta-only.
+
+```
+base: 10,000 vectors, 2.52 MB
+branched 50 users in 58.55 ms (1.176 ms/user) — total delta 42.2 KB (0.84 KB/user)
+vs 50 full copies of the base: 125.91 MB  →  3,056x less storage
+isolation: user-0 sees own pref (id 900000)=true, user-1's pref leaks to user-0=false
+read-through: user-7 top hit for base vector #42 = id 42 (from base)
+```
+
+### `rollback-quarantine.mjs` — quarantine a poisoned ingest
+
+An untrusted agent ingests 100 unvetted vectors into a sandbox branch; discard
+the branch → the base is instantly clean. No re-index, no restore.
+
+```
+base: 2000 trusted vectors
+agent ingested 100 unvetted vectors into its sandbox branch
+before: query near poison[0] -> id 666000 (poison present in sandbox = true)
+discarded branch in 0.256 ms → poison present in base = false
+base intact: 2000 vectors, base vector #1 still found = true
+```
+
+### `checkpointing.mjs` — zero-cost checkpoints + crash recovery without replay
+
+Checkpoint every 10 steps; crash at step 31; roll back to step 30. The 30 steps
+are NOT replayed — they live in the 162-byte checkpoint.
+
+```
+checkpoint @ step 10: id 93b1eb356a… (162 B, depth 1)
+checkpoint @ step 20: id 8169723119… (162 B, depth 2)
+checkpoint @ step 30: id b39dc86be8… (162 B, depth 3)
+step 31 ran (partial work present = true) ... 💥 simulated crash
+recovered to step-30 in 0.731 ms (re-ingests during recovery: 0)
+after recovery: step 31 gone = true, step 15 present = true, step 30 present = true
+total ingest() calls across the whole run: 31 (31 steps, no replay)
+```
+
+### `git-workflow.mjs` — agent → test → prod memory pipeline
+
+Branch a feature off production, ingest/override/delete in it, review with
+`diff()`, then `promote()` the vetted delta into prod. Prod is untouched until
+you promote.
+
+```
+prod: 2 vectors
+diff(feature): +added=[100,101] ~overridden=[2] -deleted=[1]
+prod before promote: id 1 present = true, feature id 100 present = false
+promote → 3 vectors merged, 1 tombstoned into prod
+prod after promote: id 100 present = true, id 1 retracted = true
+```
+
+### `ab-branches.mjs` — N variant branches, score each, promote the winner
+
+A/B / Darwin-style: fork variant branches, score each candidate against a
+target, promote only the winner. Losing branches are discarded for free.
+
+```
+base: 1000 vectors; scoring 8 variant branches against a target
+  variant-7: candidate distance to target = 0.0000
+  variant-6: candidate distance to target = 0.0179
+  variant-5: candidate distance to target = 0.0568
+  variant-4: candidate distance to target = 0.3386
+  variant-3: candidate distance to target = 0.4558
+  variant-2: candidate distance to target = 0.5061
+  variant-0: candidate distance to target = 0.9004
+  variant-1: candidate distance to target = 1.1748
+winner: variant-7 (dist 0.0000)
+promoted variant-7 → 1 vector merged; winner candidate now in base = true
+```
+
+### `parallel-agents.mjs` — fan out, query, roll one back
+
+Fork N agent branches off a base, each with private memory + tombstones, query
+each (read-through), and roll one back after a bad ingest.
+
+```
+base: 2000 vectors, 516 KB
+forked 8 agent branches off the shared base
+agent-0: top-5 = 5 base + 0 private  (e.g. id 1503 @ 0.546)
+...
+agent-0 before rollback: hallucination present = true
+agent-0 after rollback:  hallucination present = false (base intact)
+done.
+```

package/examples/_shared.mjs

@@ -0,0 +1,34 @@
+// Shared helpers for the examples — a deterministic RNG so outputs are
+// reproducible, plus a tiny timer. Examples import the library from the local
+// source so they run against this repo with zero setup:
+//
+//   in your own project:   import { open } from 'agenticow';
+//   in this repo:          import { open } from '../src/index.js';
+
+import os from 'node:os';
+import fs from 'node:fs';
+import path from 'node:path';
+
+// mulberry32 — small, fast, seedable PRNG (deterministic example output).
+export function rng(seed = 0x9e3779b9) {
+  let a = seed >>> 0;
+  return () => {
+    a |= 0; a = (a + 0x6d2b79f5) | 0;
+    let t = Math.imul(a ^ (a >>> 15), 1 | a);
+    t = (t + Math.imul(t ^ (t >>> 7), 61 | t)) ^ t;
+    return ((t ^ (t >>> 14)) >>> 0) / 4294967296;
+  };
+}
+
+export function vecFactory(dim, seed) {
+  const r = rng(seed);
+  return () => Float32Array.from({ length: dim }, () => r() * 2 - 1);
+}
+
+export function tmpdir(tag) {
+  return fs.mkdtempSync(path.join(os.tmpdir(), `agenticow-${tag}-`));
+}
+
+export const ms = (t0) => `${(performance.now() - t0).toFixed(3)} ms`;
+export const kb = (b) => `${(b / 1024).toFixed(1)} KB`;
+export const mb = (b) => `${(b / 1024 / 1024).toFixed(2)} MB`;

package/examples/ab-branches.mjs

@@ -0,0 +1,60 @@
+// ab-branches.mjs — N variant branches off one base, score each, promote winner.
+//
+// Demonstrates A/B testing / Darwin-style evolution of agent memory: fork many
+// variant branches off a shared base, give each a different candidate memory,
+// score each variant against a target query, and promote() only the winner back
+// into the base. Losing branches are discarded for free.
+//
+// Run: node examples/ab-branches.mjs
+//
+// ── verified output ───────────────────────────────────────────────────────
+// (see examples/README.md)
+// ──────────────────────────────────────────────────────────────────────────
+
+import fs from 'node:fs';
+import path from 'node:path';
+import { open } from '../src/index.js'; // in your project: from 'agenticow'
+import { vecFactory, tmpdir } from './_shared.mjs';
+
+const DIM = 32;
+const VARIANTS = 8;
+const dir = tmpdir('ab');
+const vec = vecFactory(DIM, 31);
+
+// 1. Base memory + a "target" we want a variant to match well.
+const base = open(path.join(dir, 'base.rvf'), { dimension: DIM });
+const flat = new Float32Array(1000 * DIM);
+for (let i = 0; i < 1000; i++) flat.set(vec(), i * DIM);
+base.ingest(flat, Array.from({ length: 1000 }, (_, i) => i));
+const target = vec();
+console.log(`base: ${base.status().totalVectors} vectors; scoring ${VARIANTS} variant branches against a target`);
+
+// 2. Fork one branch per variant; each ingests a candidate vector (id 5000).
+//    Variant v's candidate is a blend of the target and noise — higher v = closer.
+const variants = [];
+for (let v = 0; v < VARIANTS; v++) {
+  const br = base.fork(`variant-${v}`);
+  const blend = Float32Array.from(target, (x) => x * (v / (VARIANTS - 1)) + (vec()[0] * (1 - v / (VARIANTS - 1))));
+  br.ingest([{ id: 5000, vector: blend }]);
+  variants.push(br);
+}
+
+// 3. Score each variant: distance of its candidate (id 5000) to the target.
+//    Use k > base size so the candidate is always included in the read-through.
+const scores = variants.map((br, v) => {
+  const hit = br.query(target, 1001).find((h) => h.id === 5000);
+  return { v, dist: hit ? hit.distance : Infinity };
+});
+scores.sort((a, b) => a.dist - b.dist);
+for (const s of scores) console.log(`  variant-${s.v}: candidate distance to target = ${s.dist.toFixed(4)}`);
+const winner = scores[0];
+console.log(`winner: variant-${winner.v} (dist ${winner.dist.toFixed(4)})`);
+
+// 4. Promote the winner into the base; discard the rest for free.
+const r = variants[winner.v].promote(base);
+const inBase = base.query(target, 5).some((h) => h.id === 5000);
+console.log(`promoted variant-${winner.v} → ${r.ingested} vector merged; winner candidate now in base = ${inBase}`);
+
+base.close();
+variants.forEach((br) => br.close());
+fs.rmSync(dir, { recursive: true, force: true });

package/examples/checkpointing.mjs

@@ -0,0 +1,64 @@
+// checkpointing.mjs — zero-cost checkpoints + crash recovery without replay.
+//
+// Demonstrates: an agent loop that checkpoints memory every 10 steps. A failure
+// hits at step 31; we roll back to the step-30 checkpoint and resume. The first
+// 30 steps are NOT replayed — they live in the 162-byte checkpoint and are
+// already visible via read-through.
+//
+// Run: node examples/checkpointing.mjs
+//
+// ── verified output ───────────────────────────────────────────────────────
+// (see examples/README.md)
+// ──────────────────────────────────────────────────────────────────────────
+
+import fs from 'node:fs';
+import path from 'node:path';
+import { open } from '../src/index.js'; // in your project: from 'agenticow'
+import { vecFactory, tmpdir, ms } from './_shared.mjs';
+
+const DIM = 32;
+const dir = tmpdir('checkpoint');
+const vec = vecFactory(DIM, 11);
+
+const mem = open(path.join(dir, 'agent.rvf'), { dimension: DIM });
+const stored = new Map(); // step -> vector, to verify read-through later
+
+let ingestCalls = 0;
+function step(n) {
+  const v = vec();
+  mem.ingest([{ id: n, vector: v }]);
+  stored.set(n, v);
+  ingestCalls++;
+}
+
+// Run steps 1..30, checkpoint at 10, 20, 30.
+const checkpoints = {};
+for (let n = 1; n <= 30; n++) {
+  step(n);
+  if (n % 10 === 0) {
+    checkpoints[n] = mem.checkpoint(`step-${n}`);
+    console.log(`checkpoint @ step ${n}: id ${checkpoints[n].id.slice(0, 10)}… (162 B, depth ${checkpoints[n].depth})`);
+  }
+}
+
+// Step 31 does some work, then "crashes".
+step(31);
+const crashedHasGarbage = mem.query(stored.get(31), 1)[0].id === 31;
+console.log(`step 31 ran (partial work present = ${crashedHasGarbage}) ... 💥 simulated crash`);
+
+// Recover: roll back to the step-30 checkpoint.
+const callsBefore = ingestCalls;
+const t0 = performance.now();
+mem.rollback(checkpoints[30].id);
+const recoverMs = ms(t0);
+
+// The 30 steps are intact WITHOUT replay (ingestCalls unchanged), step 31 gone.
+const step31Gone = mem.query(stored.get(31), 5).every((h) => h.id !== 31);
+const step15Present = mem.query(stored.get(15), 1)[0].id === 15;
+const step30Present = mem.query(stored.get(30), 1)[0].id === 30;
+console.log(`recovered to step-30 in ${recoverMs} (re-ingests during recovery: ${ingestCalls - callsBefore})`);
+console.log(`after recovery: step 31 gone = ${step31Gone}, step 15 present = ${step15Present}, step 30 present = ${step30Present}`);
+console.log(`total ingest() calls across the whole run: ${ingestCalls} (31 steps, no replay)`);
+
+mem.close();
+fs.rmSync(dir, { recursive: true, force: true });

package/examples/git-workflow.mjs

@@ -0,0 +1,52 @@
+// git-workflow.mjs — agent → test → prod memory pipeline (branch/diff/promote).
+//
+// Demonstrates the Git-style workflow for vector memory: branch a feature off
+// production, ingest into it, review the change with diff(), then promote() the
+// vetted delta back into production. Production is untouched until you promote.
+//
+// Run: node examples/git-workflow.mjs
+//
+// ── verified output ───────────────────────────────────────────────────────
+// (see examples/README.md)
+// ──────────────────────────────────────────────────────────────────────────
+
+import fs from 'node:fs';
+import path from 'node:path';
+import { open } from '../src/index.js'; // in your project: from 'agenticow'
+import { vecFactory, tmpdir } from './_shared.mjs';
+
+const DIM = 32;
+const dir = tmpdir('git-workflow');
+const vec = vecFactory(DIM, 23);
+
+// 1. Production memory.
+const prod = open(path.join(dir, 'prod.rvf'), { dimension: DIM });
+const v1 = vec(); const v2 = vec();
+prod.ingest([{ id: 1, vector: v1 }, { id: 2, vector: v2 }]);
+console.log(`prod: ${prod.status().totalVectors} vectors`);
+
+// 2. Branch a feature, ingest new memories, override one, delete one.
+const feature = prod.branch('feature/new-facts');
+const f100 = vec(); const f101 = vec(); const v2new = vec();
+feature.ingest([{ id: 100, vector: f100 }, { id: 101, vector: f101 }]);
+feature.ingest([{ id: 2, vector: v2new }]); // override an existing prod id
+feature.delete([1]);                          // retract a prod fact in the branch
+
+// 3. Review the change set before merging.
+const d = feature.diff();
+console.log(`diff(feature): +added=${JSON.stringify(d.added)} ~overridden=${JSON.stringify(d.overridden)} -deleted=${JSON.stringify(d.deleted)}`);
+
+// prod is still untouched at this point (feature edits are isolated):
+const id100InProdBefore = prod.query(f100, 1)[0].id === 100;
+console.log(`prod before promote: id 1 present = ${prod.query(v1, 1)[0].id === 1}, feature id 100 present = ${id100InProdBefore}`);
+
+// 4. Promote the vetted delta into production.
+const r = feature.promote(prod);
+console.log(`promote → ${r.ingested} vectors merged, ${r.deleted} tombstoned into prod`);
+const id100InProd = prod.query(f100, 1)[0].id === 100;
+const id1Retracted = prod.query(v1, 5).every((h) => h.id !== 1);
+console.log(`prod after promote: id 100 present = ${id100InProd}, id 1 retracted = ${id1Retracted}`);
+
+prod.close();
+feature.close();
+fs.rmSync(dir, { recursive: true, force: true });

package/examples/parallel-agents.mjs

@@ -10,7 +10,7 @@
 import fs from 'node:fs';
 import os from 'node:os';
 import path from 'node:path';
-import { open } from 'agenticow'; // or '../src/index.js' from inside this repo
+import { open } from '../src/index.js'; // in your project: from 'agenticow'
 
 const DIM = 64;
 const N_AGENTS = 8;

package/examples/personalization.mjs

@@ -0,0 +1,66 @@
+// personalization.mjs — one shared base memory, a cheap COW branch per user.
+//
+// Demonstrates: per-user/per-account personalization without copying the base.
+// Each user gets an isolated branch (their edits stay private) while still
+// reading through to the shared base. Storage is delta-only (KB/user), not a
+// full copy of the base (MB/user).
+//
+// Run: node examples/personalization.mjs
+//
+// ── verified output ───────────────────────────────────────────────────────
+// (see examples/README.md — outputs are deterministic via a seeded RNG)
+// ──────────────────────────────────────────────────────────────────────────
+
+import fs from 'node:fs';
+import path from 'node:path';
+import { open } from '../src/index.js'; // in your project: from 'agenticow'
+import { vecFactory, tmpdir, ms, kb, mb } from './_shared.mjs';
+
+const DIM = 64;
+const USERS = 50;
+const dir = tmpdir('personalization');
+const vec = vecFactory(DIM, 1);
+
+// 1. One shared base memory (e.g. the org-wide knowledge base).
+const base = open(path.join(dir, 'base.rvf'), { dimension: DIM });
+const N = 10_000;
+const flat = new Float32Array(N * DIM);
+const ids = [];
+for (let i = 0; i < N; i++) { flat.set(vec(), i * DIM); ids.push(i); }
+base.ingest(flat, ids);
+const baseBytes = base.status().fileSize;
+console.log(`base: ${N.toLocaleString()} vectors, ${mb(baseBytes)}`);
+
+// 2. A cheap COW branch per user — fork() off the read-only base.
+//    Each user adds one private preference vector (id 900000 + u).
+const t0 = performance.now();
+const users = [];
+for (let u = 0; u < USERS; u++) {
+  const ub = base.fork(`user-${u}`);
+  ub.ingest([{ id: 900000 + u, vector: vec() }]);
+  users.push(ub);
+}
+const forkWall = ms(t0);
+let deltaBytes = 0;
+for (const u of users) deltaBytes += fs.statSync(u.lineage()[0].path).size;
+const fullCopyBytes = baseBytes * USERS;
+console.log(`branched ${USERS} users in ${forkWall} (${((performance.now() - t0) / USERS).toFixed(3)} ms/user) — ` +
+  `total delta ${kb(deltaBytes)} (${(deltaBytes / USERS / 1024).toFixed(2)} KB/user)`);
+console.log(`vs ${USERS} full copies of the base: ${mb(fullCopyBytes)}  →  ` +
+  `${Math.round(fullCopyBytes / deltaBytes).toLocaleString()}x less storage`);
+
+// 3. Isolation: user-0 sees its own preference; user-1's stays private.
+const u0SeesOwn = users[0].diff().added.includes(900000);
+const u1LeaksToU0 = users[0]
+  .query(flat.slice(0, DIM), USERS)
+  .some((h) => h.id === 900001);
+console.log(`isolation: user-0 sees own pref (id 900000)=${u0SeesOwn}, user-1's pref leaks to user-0=${u1LeaksToU0}`);
+
+// 4. Read-through: every user still queries the shared base.
+const probe = flat.slice(42 * DIM, 43 * DIM);
+const hit = users[7].query(probe, 1)[0];
+console.log(`read-through: user-7 top hit for base vector #42 = id ${hit.id} (from ${hit.branch})`);
+
+base.close();
+users.forEach((u) => u.close());
+fs.rmSync(dir, { recursive: true, force: true });

package/examples/rollback-quarantine.mjs

@@ -0,0 +1,54 @@
+// rollback-quarantine.mjs — quarantine a poisoned ingest, then discard it.
+//
+// Demonstrates: an agent ingests "hallucinated" / adversarial vectors into a
+// branch. You detect them, then throw the branch away → the shared base is
+// instantly clean. No re-indexing, no restore-from-backup. Shows the query
+// result before (poison visible in the branch) and after (gone, base intact).
+//
+// Run: node examples/rollback-quarantine.mjs
+//
+// ── verified output ───────────────────────────────────────────────────────
+// (see examples/README.md)
+// ──────────────────────────────────────────────────────────────────────────
+
+import fs from 'node:fs';
+import path from 'node:path';
+import { open } from '../src/index.js'; // in your project: from 'agenticow'
+import { vecFactory, tmpdir, ms } from './_shared.mjs';
+
+const DIM = 48;
+const dir = tmpdir('quarantine');
+const vec = vecFactory(DIM, 7);
+
+// 1. Trusted base memory.
+const base = open(path.join(dir, 'base.rvf'), { dimension: DIM });
+const known = Array.from({ length: 2000 }, () => vec());
+const flat = new Float32Array(2000 * DIM);
+known.forEach((v, i) => flat.set(v, i * DIM));
+base.ingest(flat, known.map((_, i) => i));
+console.log(`base: ${base.status().totalVectors} trusted vectors`);
+
+// 2. An untrusted agent works in a sandbox branch and ingests poison.
+const sandbox = base.fork('untrusted-agent');
+const sandboxPath = sandbox.lineage()[0].path; // capture before we close it
+const poison = Array.from({ length: 100 }, () => vec());
+const POISON_IDS = poison.map((_, i) => 666000 + i);
+poison.forEach((v, i) => sandbox.ingest([{ id: POISON_IDS[i], vector: v }]));
+console.log(`agent ingested ${POISON_IDS.length} unvetted vectors into its sandbox branch`);
+
+// 3. Detection: query near a poisoned vector — it should surface in the sandbox.
+const detect = sandbox.query(poison[0], 1)[0];
+const poisonPresent = POISON_IDS.includes(detect.id);
+console.log(`before: query near poison[0] -> id ${detect.id} (poison present in sandbox = ${poisonPresent})`);
+
+// 4. Quarantine = discard the branch. The base never saw the poison.
+const t0 = performance.now();
+sandbox.close();
+fs.rmSync(sandboxPath, { force: true });
+const discardMs = ms(t0);
+const poisonInBase = POISON_IDS.includes(base.query(poison[0], 1)[0].id);
+console.log(`discarded branch in ${discardMs} → poison present in base = ${poisonInBase}`);
+console.log(`base intact: ${base.status().totalVectors} vectors, base vector #1 still found = ${base.query(known[1], 1)[0].id === 1}`);
+
+base.close();
+fs.rmSync(dir, { recursive: true, force: true });

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "agenticow",
-  "version": "0.1.0",
+  "version": "0.1.1",
   "description": "Git for Agent Memory: Copy-On-Write vector branching for embedded multi-agent memory. Branch a base memory in ~0.5ms / 162 bytes regardless of base size — 83x faster, 3000x smaller than full-copy snapshots. Exact read-through queries (parent ∪ edits, child wins).",
   "type": "module",
   "main": "src/index.js",
@@ -27,6 +27,13 @@
     "bench": "node bench/bench.js",
     "acceptance": "node bench/acceptance.js",
     "demo": "node bin/agenticow.js demo",
+    "examples": "for f in personalization rollback-quarantine checkpointing git-workflow ab-branches parallel-agents; do echo \"\\n── $f ──\"; node examples/$f.mjs; done",
+    "example:personalization": "node examples/personalization.mjs",
+    "example:rollback": "node examples/rollback-quarantine.mjs",
+    "example:checkpointing": "node examples/checkpointing.mjs",
+    "example:git-workflow": "node examples/git-workflow.mjs",
+    "example:ab-branches": "node examples/ab-branches.mjs",
+    "example:parallel-agents": "node examples/parallel-agents.mjs",
     "test": "node --test test/*.test.js"
   },
   "keywords": [

package/src/index.js

@@ -74,7 +74,7 @@ class Node {
 
 export class AgenticMemory {
   /** @private */
-  constructor(workingNode, ancestors, dim, metric, track = true) {
+  constructor(workingNode, ancestors, dim, metric, track = true, owned = null) {
     /** @type {Node} */
     this._working = workingNode;
     /** @type {Node[]} ancestors newest -> oldest (base last) */
@@ -83,6 +83,10 @@ export class AgenticMemory {
     this._metric = metric;
     this._track = track;
     this._normalize = String(metric).toLowerCase() === 'cosine';
+    // Nodes this instance is allowed to close. Ancestors shared from a parent
+    // (via fork/branch) are NOT owned, so closing a fork never closes the base.
+    /** @type {Set<Node>} */
+    this._owned = owned || new Set([workingNode]);
     this._closed = false;
   }
 
@@ -244,10 +248,12 @@ export class AgenticMemory {
     const parentChildDb = frozen.db.derive(parentChildPath, this._deriveOpts());
     const childPath = filePath || tmpChildPath(frozen.path, label);
     const childDb = frozen.db.derive(childPath, this._deriveOpts());
-    // Parent continues, transparently, in its own fresh child.
+    // Parent continues, transparently, in its own fresh child (which it owns).
     this._ancestors = [frozen, ...this._ancestors];
     this._working = new Node(parentChildDb, parentChildPath, 'working');
-    // Branch shares the frozen snapshot + all older ancestors.
+    this._owned.add(this._working);
+    // Branch shares the frozen snapshot + all older ancestors; it owns only its
+    // own working child.
     const branchNode = new Node(childDb, childPath, label || 'branch');
     return new AgenticMemory(branchNode, [...this._ancestors], this._dim, this._metric, this._track);
   }
@@ -339,6 +345,7 @@ export class AgenticMemory {
     const childNode = new Node(childDb, childPath, 'working');
     this._ancestors = [frozen, ...this._ancestors];
     this._working = childNode;
+    this._owned.add(childNode);
     return {
       id: frozen.id,
       label: frozen.label,
@@ -364,18 +371,21 @@ export class AgenticMemory {
       idx = this._ancestors.findIndex((n) => n.id === checkpointId);
       if (idx === -1) throw new Error(`agenticow: checkpoint ${checkpointId} not found`);
     }
-    // Discard the current poisoned working child and any checkpoints newer than target.
-    try {
-      this._working.db.close();
-    } catch { /* ignore */ }
-    try {
-      fs.rmSync(this._working.path, { force: true });
-    } catch { /* ignore */ }
+    // Discard the current poisoned working child and any checkpoints newer than
+    // target — but only ones THIS instance owns (never a shared ancestor).
+    const discarded = [this._working, ...this._ancestors.slice(0, idx)];
+    for (const n of discarded) {
+      if (!this._owned.has(n)) continue;
+      try { n.db.close(); } catch { /* ignore */ }
+      try { fs.rmSync(n.path, { force: true }); } catch { /* ignore */ }
+      this._owned.delete(n);
+    }
     const target = this._ancestors[idx];
     const newAncestors = this._ancestors.slice(idx); // target + older
     const childPath = tmpChildPath(target.path, 'work');
     const childDb = target.db.derive(childPath, this._deriveOpts());
     this._working = new Node(childDb, childPath, 'working');
+    this._owned.add(this._working);
     this._ancestors = newAncestors;
     return { restoredTo: target.id, depth: this._ancestors.length };
   }
@@ -444,13 +454,14 @@ export class AgenticMemory {
       node.editVecs = new Map(Object.entries(nm.editVecs || {}).map(([id, v]) => [Number(id), Float32Array.from(v)]));
       return node;
     });
-    return new AgenticMemory(nodes[0], nodes.slice(1), m.dim, m.metric, m.track !== false);
+    // A loaded instance opened every handle itself, so it owns the whole chain.
+    return new AgenticMemory(nodes[0], nodes.slice(1), m.dim, m.metric, m.track !== false, new Set(nodes));
   }
 
-  /** Close all open handles in the chain. */
+  /** Close the handles this instance owns (never a shared parent/base handle). */
   close() {
     if (this._closed) return;
-    for (const n of this._chain()) {
+    for (const n of this._owned) {
       try { n.db.close(); } catch { /* ignore */ }
     }
     this._closed = true;