pulseed 0.6.0 → 0.6.1

package/dist/tools/execution/MemoryCorrectionTool/MemoryCorrectionTool.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"MemoryCorrectionTool.d.ts","sourceRoot":"","sources":["../../../../src/tools/execution/MemoryCorrectionTool/MemoryCorrectionTool.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,KAAK,EACV,KAAK,EACL,qBAAqB,EACrB,eAAe,EACf,sBAAsB,EACtB,YAAY,EACZ,UAAU,EACX,MAAM,gBAAgB,CAAC;AACxB,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,sCAAsC,CAAC;AAQzE,eAAO,MAAM,2BAA2B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAUtC,CAAC;AACH,MAAM,MAAM,qBAAqB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,2BAA2B,CAAC,CAAC;AAEhF,qBAAa,oBAAqB,YAAW,KAAK,CAAC,qBAAqB,EAAE,OAAO,CAAC;IAgBpE,OAAO,CAAC,QAAQ,CAAC,YAAY;IAfzC,QAAQ,CAAC,QAAQ,EAAE,YAAY,CAW7B;IAEF,QAAQ,CAAC,WAAW;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OAA+B;gBAEtB,YAAY,EAAE,YAAY;IAEvD,WAAW,CAAC,QAAQ,CAAC,EAAE,sBAAsB,GAAG,MAAM;IAIhD,IAAI,CAAC,KAAK,EAAE,qBAAqB,EAAE,QAAQ,EAAE,eAAe,GAAG,OAAO,CAAC,UAAU,CAAC;IAiClF,gBAAgB,CAAC,KAAK,EAAE,qBAAqB,EAAE,QAAQ,EAAE,eAAe,GAAG,OAAO,CAAC,qBAAqB,CAAC;IAK/G,iBAAiB,CAAC,MAAM,EAAE,qBAAqB,GAAG,OAAO;CAG1D"}

package/dist/tools/execution/MemoryCorrectionTool/MemoryCorrectionTool.js

@@ -0,0 +1,79 @@
+import { z } from "zod";
+import { parseMemoryCorrectionRef, runUserMemoryOperation, } from "../../../platform/corrections/user-memory-operations.js";
+import { DESCRIPTION } from "./prompt.js";
+import { ALIASES, PERMISSION_LEVEL, READ_ONLY, TAGS, TOOL_NAME } from "./constants.js";
+export const MemoryCorrectionInputSchema = z.object({
+    operation: z.enum(["correct", "forget", "retract", "history"]),
+    target_ref: z.string().min(1).describe("Exact typed ref: agent_memory:<id>, runtime_evidence:<id>, dream_checkpoint:<ref>, or soil_record:<id>"),
+    reason: z.string().min(1).optional(),
+    replacement_value: z.string().min(1).optional(),
+    replacement_ref: z.string().min(1).optional(),
+    replacement_key: z.string().min(1).optional(),
+    goal_id: z.string().min(1).optional(),
+    run_id: z.string().min(1).optional(),
+    task_id: z.string().min(1).optional(),
+});
+export class MemoryCorrectionTool {
+    stateManager;
+    metadata = {
+        name: TOOL_NAME,
+        aliases: [...ALIASES],
+        permissionLevel: PERMISSION_LEVEL,
+        isReadOnly: READ_ONLY,
+        isDestructive: false,
+        shouldDefer: false,
+        alwaysLoad: false,
+        maxConcurrency: 0,
+        maxOutputChars: 2000,
+        tags: [...TAGS],
+    };
+    inputSchema = MemoryCorrectionInputSchema;
+    constructor(stateManager) {
+        this.stateManager = stateManager;
+    }
+    description(_context) {
+        return DESCRIPTION;
+    }
+    async call(input, _context) {
+        const startTime = Date.now();
+        try {
+            const result = await runUserMemoryOperation(this.stateManager, {
+                operation: input.operation,
+                targetRef: parseMemoryCorrectionRef(input.target_ref),
+                reason: input.reason,
+                replacementValue: input.replacement_value,
+                replacementKey: input.replacement_key,
+                replacementRef: input.replacement_ref ? parseMemoryCorrectionRef(input.replacement_ref) : null,
+                goalId: input.goal_id,
+                runId: input.run_id,
+                taskId: input.task_id,
+            });
+            return {
+                success: true,
+                data: result,
+                summary: input.operation === "history"
+                    ? `Found ${result.history.length} correction history entries`
+                    : `Memory ${input.operation} recorded: ${result.correction?.correction_id}`,
+                durationMs: Date.now() - startTime,
+            };
+        }
+        catch (err) {
+            return {
+                success: false,
+                data: null,
+                summary: "MemoryCorrectionTool failed: " + err.message,
+                error: err.message,
+                durationMs: Date.now() - startTime,
+            };
+        }
+    }
+    async checkPermissions(input, _context) {
+        if (input.operation === "history")
+            return { status: "allowed" };
+        return { status: "allowed" };
+    }
+    isConcurrencySafe(_input) {
+        return false;
+    }
+}
+//# sourceMappingURL=MemoryCorrectionTool.js.map

package/dist/tools/execution/MemoryCorrectionTool/MemoryCorrectionTool.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"MemoryCorrectionTool.js","sourceRoot":"","sources":["../../../../src/tools/execution/MemoryCorrectionTool/MemoryCorrectionTool.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAUxB,OAAO,EACL,wBAAwB,EACxB,sBAAsB,GACvB,MAAM,yDAAyD,CAAC;AACjE,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,EAAE,OAAO,EAAE,gBAAgB,EAAE,SAAS,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAC;AAEvF,MAAM,CAAC,MAAM,2BAA2B,GAAG,CAAC,CAAC,MAAM,CAAC;IAClD,SAAS,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,QAAQ,EAAE,SAAS,EAAE,SAAS,CAAC,CAAC;IAC9D,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,wGAAwG,CAAC;IAChJ,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IACpC,iBAAiB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IAC/C,eAAe,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IAC7C,eAAe,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IAC7C,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IACrC,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IACpC,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;CACtC,CAAC,CAAC;AAGH,MAAM,OAAO,oBAAoB;IAgBF;IAfpB,QAAQ,GAAiB;QAChC,IAAI,EAAE,SAAS;QACf,OAAO,EAAE,CAAC,GAAG,OAAO,CAAC;QACrB,eAAe,EAAE,gBAAgB;QACjC,UAAU,EAAE,SAAS;QACrB,aAAa,EAAE,KAAK;QACpB,WAAW,EAAE,KAAK;QAClB,UAAU,EAAE,KAAK;QACjB,cAAc,EAAE,CAAC;QACjB,cAAc,EAAE,IAAI;QACpB,IAAI,EAAE,CAAC,GAAG,IAAI,CAAC;KAChB,CAAC;IAEO,WAAW,GAAG,2BAA2B,CAAC;IAEnD,YAA6B,YAA0B;QAA1B,iBAAY,GAAZ,YAAY,CAAc;IAAG,CAAC;IAE3D,WAAW,CAAC,QAAiC;QAC3C,OAAO,WAAW,CAAC;IACrB,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,KAA4B,EAAE,QAAyB;QAChE,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAC7B,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,sBAAsB,CAAC,IAAI,CAAC,YAAY,EAAE;gBAC7D,SAAS,EAAE,KAAK,CAAC,SAAS;gBAC1B,SAAS,EAAE,wBAAwB,CAAC,KAAK,CAAC,UAAU,CAAC;gBACrD,MAAM,EAAE,KAAK,CAAC,MAAM;gBACpB,gBAAgB,EAAE,KAAK,CAAC,iBAAiB;gBACzC,cAAc,EAAE,KAAK,CAAC,eAAe;gBACrC,cAAc,EAAE,KAAK,CAAC,eAAe,CAAC,CAAC,CAAC,wBAAwB,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,IAAI;gBAC9F,MAAM,EAAE,KAAK,CAAC,OAAO;gBACrB,KAAK,EAAE,KAAK,CAAC,MAAM;gBACnB,MAAM,EAAE,KAAK,CAAC,OAAO;aACtB,CAAC,CAAC;YACH,OAAO;gBACL,OAAO,EAAE,IAAI;gBACb,IAAI,EAAE,MAAM;gBACZ,OAAO,EAAE,KAAK,CAAC,SAAS,KAAK,SAAS;oBACpC,CAAC,CAAC,SAAS,MAAM,CAAC,OAAO,CAAC,MAAM,6BAA6B;oBAC7D,CAAC,CAAC,UAAU,KAAK,CAAC,SAAS,cAAc,MAAM,CAAC,UAAU,EAAE,aAAa,EAAE;gBAC7E,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS;aACnC,CAAC;QACJ,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,IAAI,EAAE,IAAI;gBACV,OAAO,EAAE,+BAA+B,GAAI,GAAa,CAAC,OAAO;gBACjE,KAAK,EAAG,GAAa,CAAC,OAAO;gBAC7B,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS;aACnC,CAAC;QACJ,CAAC;IACH,CAAC;IAED,KAAK,CAAC,gBAAgB,CAAC,KAA4B,EAAE,QAAyB;QAC5E,IAAI,KAAK,CAAC,SAAS,KAAK,SAAS;YAAE,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;QAChE,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;IAC/B,CAAC;IAED,iBAAiB,CAAC,MAA6B;QAC7C,OAAO,KAAK,CAAC;IACf,CAAC;CACF"}

package/dist/tools/execution/MemoryCorrectionTool/constants.d.ts

@@ -0,0 +1,6 @@
+export declare const TOOL_NAME = "memory_correction";
+export declare const ALIASES: readonly ["memory_correct", "memory_forget", "memory_retract", "memory_history"];
+export declare const TAGS: readonly ["memory", "correction", "write"];
+export declare const READ_ONLY = false;
+export declare const PERMISSION_LEVEL: "write_local";
+//# sourceMappingURL=constants.d.ts.map

package/dist/tools/execution/MemoryCorrectionTool/constants.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"constants.d.ts","sourceRoot":"","sources":["../../../../src/tools/execution/MemoryCorrectionTool/constants.ts"],"names":[],"mappings":"AAAA,eAAO,MAAM,SAAS,sBAAsB,CAAC;AAC7C,eAAO,MAAM,OAAO,kFAAmF,CAAC;AACxG,eAAO,MAAM,IAAI,4CAA6C,CAAC;AAC/D,eAAO,MAAM,SAAS,QAAQ,CAAC;AAC/B,eAAO,MAAM,gBAAgB,EAAG,aAAsB,CAAC"}

package/dist/tools/execution/MemoryCorrectionTool/constants.js

@@ -0,0 +1,6 @@
+export const TOOL_NAME = "memory_correction";
+export const ALIASES = ["memory_correct", "memory_forget", "memory_retract", "memory_history"];
+export const TAGS = ["memory", "correction", "write"];
+export const READ_ONLY = false;
+export const PERMISSION_LEVEL = "write_local";
+//# sourceMappingURL=constants.js.map

package/dist/tools/execution/MemoryCorrectionTool/constants.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"constants.js","sourceRoot":"","sources":["../../../../src/tools/execution/MemoryCorrectionTool/constants.ts"],"names":[],"mappings":"AAAA,MAAM,CAAC,MAAM,SAAS,GAAG,mBAAmB,CAAC;AAC7C,MAAM,CAAC,MAAM,OAAO,GAAG,CAAC,gBAAgB,EAAE,eAAe,EAAE,gBAAgB,EAAE,gBAAgB,CAAU,CAAC;AACxG,MAAM,CAAC,MAAM,IAAI,GAAG,CAAC,QAAQ,EAAE,YAAY,EAAE,OAAO,CAAU,CAAC;AAC/D,MAAM,CAAC,MAAM,SAAS,GAAG,KAAK,CAAC;AAC/B,MAAM,CAAC,MAAM,gBAAgB,GAAG,aAAsB,CAAC"}

package/dist/tools/execution/MemoryCorrectionTool/prompt.d.ts

@@ -0,0 +1,2 @@
+export declare const DESCRIPTION = "Record auditable user memory corrections, forget/retract requests, or inspect correction history using typed memory refs.";
+//# sourceMappingURL=prompt.d.ts.map

package/dist/tools/execution/MemoryCorrectionTool/prompt.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"prompt.d.ts","sourceRoot":"","sources":["../../../../src/tools/execution/MemoryCorrectionTool/prompt.ts"],"names":[],"mappings":"AAAA,eAAO,MAAM,WAAW,8HAA8H,CAAC"}

package/dist/tools/execution/MemoryCorrectionTool/prompt.js

@@ -0,0 +1,2 @@
+export const DESCRIPTION = "Record auditable user memory corrections, forget/retract requests, or inspect correction history using typed memory refs.";
+//# sourceMappingURL=prompt.js.map

package/dist/tools/execution/MemoryCorrectionTool/prompt.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"prompt.js","sourceRoot":"","sources":["../../../../src/tools/execution/MemoryCorrectionTool/prompt.ts"],"names":[],"mappings":"AAAA,MAAM,CAAC,MAAM,WAAW,GAAG,2HAA2H,CAAC"}

package/dist/tools/execution/MemorySaveTool/MemorySaveTool.d.ts

@@ -7,18 +7,169 @@ export declare const MemorySaveInputSchema: z.ZodObject<{
     category: z.ZodOptional<z.ZodString>;
     memory_type: z.ZodDefault<z.ZodOptional<z.ZodEnum<["fact", "procedure", "preference", "observation"]>>>;
     tags: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+    verification_status: z.ZodOptional<z.ZodEnum<["unknown", "unverified", "verified", "contradicted", "suspicious"]>>;
+    provenance: z.ZodOptional<z.ZodObject<{
+        source_type: z.ZodDefault<z.ZodEnum<["user", "runtime", "tool", "web", "external", "imported", "unknown"]>>;
+        source_ref: z.ZodOptional<z.ZodString>;
+        raw_refs: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
+        reliability: z.ZodOptional<z.ZodNumber>;
+        verification_status: z.ZodDefault<z.ZodEnum<["unknown", "unverified", "verified", "contradicted", "suspicious"]>>;
+        risk_signals: z.ZodDefault<z.ZodArray<z.ZodEnum<["hallucinated", "low_provenance", "contradiction", "prompt_injection_like", "unverified_external"]>, "many">>;
+    }, "strict", z.ZodTypeAny, {
+        source_type: "unknown" | "external" | "web" | "tool" | "user" | "runtime" | "imported";
+        raw_refs: string[];
+        verification_status: "unknown" | "unverified" | "verified" | "contradicted" | "suspicious";
+        risk_signals: ("hallucinated" | "low_provenance" | "contradiction" | "prompt_injection_like" | "unverified_external")[];
+        reliability?: number | undefined;
+        source_ref?: string | undefined;
+    }, {
+        reliability?: number | undefined;
+        source_type?: "unknown" | "external" | "web" | "tool" | "user" | "runtime" | "imported" | undefined;
+        source_ref?: string | undefined;
+        raw_refs?: string[] | undefined;
+        verification_status?: "unknown" | "unverified" | "verified" | "contradicted" | "suspicious" | undefined;
+        risk_signals?: ("hallucinated" | "low_provenance" | "contradiction" | "prompt_injection_like" | "unverified_external")[] | undefined;
+    }>>;
+    governance: z.ZodOptional<z.ZodObject<{
+        sensitivity: z.ZodDefault<z.ZodEnum<["public", "local", "private", "secret"]>>;
+        consent: z.ZodDefault<z.ZodObject<{
+            scope_id: z.ZodDefault<z.ZodString>;
+            allowed_contexts: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
+            source_actor: z.ZodDefault<z.ZodString>;
+            collection_context: z.ZodDefault<z.ZodString>;
+            granted_at: z.ZodOptional<z.ZodString>;
+        }, "strict", z.ZodTypeAny, {
+            scope_id: string;
+            allowed_contexts: string[];
+            source_actor: string;
+            collection_context: string;
+            granted_at?: string | undefined;
+        }, {
+            scope_id?: string | undefined;
+            allowed_contexts?: string[] | undefined;
+            source_actor?: string | undefined;
+            collection_context?: string | undefined;
+            granted_at?: string | undefined;
+        }>>;
+        retention: z.ZodDefault<z.ZodObject<{
+            policy_id: z.ZodDefault<z.ZodString>;
+            retain_until: z.ZodDefault<z.ZodNullable<z.ZodString>>;
+            review_after: z.ZodDefault<z.ZodNullable<z.ZodString>>;
+            delete_requires_approval: z.ZodDefault<z.ZodBoolean>;
+        }, "strict", z.ZodTypeAny, {
+            policy_id: string;
+            retain_until: string | null;
+            review_after: string | null;
+            delete_requires_approval: boolean;
+        }, {
+            policy_id?: string | undefined;
+            retain_until?: string | null | undefined;
+            review_after?: string | null | undefined;
+            delete_requires_approval?: boolean | undefined;
+        }>>;
+        export_visibility: z.ZodDefault<z.ZodEnum<["listed", "redacted", "hidden"]>>;
+        owner_ref: z.ZodDefault<z.ZodString>;
+    }, "strict", z.ZodTypeAny, {
+        sensitivity: "local" | "public" | "private" | "secret";
+        consent: {
+            scope_id: string;
+            allowed_contexts: string[];
+            source_actor: string;
+            collection_context: string;
+            granted_at?: string | undefined;
+        };
+        retention: {
+            policy_id: string;
+            retain_until: string | null;
+            review_after: string | null;
+            delete_requires_approval: boolean;
+        };
+        export_visibility: "listed" | "redacted" | "hidden";
+        owner_ref: string;
+    }, {
+        sensitivity?: "local" | "public" | "private" | "secret" | undefined;
+        consent?: {
+            scope_id?: string | undefined;
+            allowed_contexts?: string[] | undefined;
+            source_actor?: string | undefined;
+            collection_context?: string | undefined;
+            granted_at?: string | undefined;
+        } | undefined;
+        retention?: {
+            policy_id?: string | undefined;
+            retain_until?: string | null | undefined;
+            review_after?: string | null | undefined;
+            delete_requires_approval?: boolean | undefined;
+        } | undefined;
+        export_visibility?: "listed" | "redacted" | "hidden" | undefined;
+        owner_ref?: string | undefined;
+    }>>;
 }, "strip", z.ZodTypeAny, {
     value: string;
     key: string;
-    memory_type: "observation" | "fact" | "procedure" | "preference";
+    memory_type: "observation" | "preference" | "fact" | "procedure";
     category?: string | undefined;
     tags?: string[] | undefined;
+    provenance?: {
+        source_type: "unknown" | "external" | "web" | "tool" | "user" | "runtime" | "imported";
+        raw_refs: string[];
+        verification_status: "unknown" | "unverified" | "verified" | "contradicted" | "suspicious";
+        risk_signals: ("hallucinated" | "low_provenance" | "contradiction" | "prompt_injection_like" | "unverified_external")[];
+        reliability?: number | undefined;
+        source_ref?: string | undefined;
+    } | undefined;
+    verification_status?: "unknown" | "unverified" | "verified" | "contradicted" | "suspicious" | undefined;
+    governance?: {
+        sensitivity: "local" | "public" | "private" | "secret";
+        consent: {
+            scope_id: string;
+            allowed_contexts: string[];
+            source_actor: string;
+            collection_context: string;
+            granted_at?: string | undefined;
+        };
+        retention: {
+            policy_id: string;
+            retain_until: string | null;
+            review_after: string | null;
+            delete_requires_approval: boolean;
+        };
+        export_visibility: "listed" | "redacted" | "hidden";
+        owner_ref: string;
+    } | undefined;
 }, {
     value: string;
     key: string;
     category?: string | undefined;
     tags?: string[] | undefined;
-    memory_type?: "observation" | "fact" | "procedure" | "preference" | undefined;
+    provenance?: {
+        reliability?: number | undefined;
+        source_type?: "unknown" | "external" | "web" | "tool" | "user" | "runtime" | "imported" | undefined;
+        source_ref?: string | undefined;
+        raw_refs?: string[] | undefined;
+        verification_status?: "unknown" | "unverified" | "verified" | "contradicted" | "suspicious" | undefined;
+        risk_signals?: ("hallucinated" | "low_provenance" | "contradiction" | "prompt_injection_like" | "unverified_external")[] | undefined;
+    } | undefined;
+    verification_status?: "unknown" | "unverified" | "verified" | "contradicted" | "suspicious" | undefined;
+    memory_type?: "observation" | "preference" | "fact" | "procedure" | undefined;
+    governance?: {
+        sensitivity?: "local" | "public" | "private" | "secret" | undefined;
+        consent?: {
+            scope_id?: string | undefined;
+            allowed_contexts?: string[] | undefined;
+            source_actor?: string | undefined;
+            collection_context?: string | undefined;
+            granted_at?: string | undefined;
+        } | undefined;
+        retention?: {
+            policy_id?: string | undefined;
+            retain_until?: string | null | undefined;
+            review_after?: string | null | undefined;
+            delete_requires_approval?: boolean | undefined;
+        } | undefined;
+        export_visibility?: "listed" | "redacted" | "hidden" | undefined;
+        owner_ref?: string | undefined;
+    } | undefined;
 }>;
 export type MemorySaveInput = z.infer<typeof MemorySaveInputSchema>;
 export declare class MemorySaveTool implements ITool<MemorySaveInput, unknown> {
@@ -30,18 +181,169 @@ export declare class MemorySaveTool implements ITool<MemorySaveInput, unknown> {
         category: z.ZodOptional<z.ZodString>;
         memory_type: z.ZodDefault<z.ZodOptional<z.ZodEnum<["fact", "procedure", "preference", "observation"]>>>;
         tags: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+        verification_status: z.ZodOptional<z.ZodEnum<["unknown", "unverified", "verified", "contradicted", "suspicious"]>>;
+        provenance: z.ZodOptional<z.ZodObject<{
+            source_type: z.ZodDefault<z.ZodEnum<["user", "runtime", "tool", "web", "external", "imported", "unknown"]>>;
+            source_ref: z.ZodOptional<z.ZodString>;
+            raw_refs: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
+            reliability: z.ZodOptional<z.ZodNumber>;
+            verification_status: z.ZodDefault<z.ZodEnum<["unknown", "unverified", "verified", "contradicted", "suspicious"]>>;
+            risk_signals: z.ZodDefault<z.ZodArray<z.ZodEnum<["hallucinated", "low_provenance", "contradiction", "prompt_injection_like", "unverified_external"]>, "many">>;
+        }, "strict", z.ZodTypeAny, {
+            source_type: "unknown" | "external" | "web" | "tool" | "user" | "runtime" | "imported";
+            raw_refs: string[];
+            verification_status: "unknown" | "unverified" | "verified" | "contradicted" | "suspicious";
+            risk_signals: ("hallucinated" | "low_provenance" | "contradiction" | "prompt_injection_like" | "unverified_external")[];
+            reliability?: number | undefined;
+            source_ref?: string | undefined;
+        }, {
+            reliability?: number | undefined;
+            source_type?: "unknown" | "external" | "web" | "tool" | "user" | "runtime" | "imported" | undefined;
+            source_ref?: string | undefined;
+            raw_refs?: string[] | undefined;
+            verification_status?: "unknown" | "unverified" | "verified" | "contradicted" | "suspicious" | undefined;
+            risk_signals?: ("hallucinated" | "low_provenance" | "contradiction" | "prompt_injection_like" | "unverified_external")[] | undefined;
+        }>>;
+        governance: z.ZodOptional<z.ZodObject<{
+            sensitivity: z.ZodDefault<z.ZodEnum<["public", "local", "private", "secret"]>>;
+            consent: z.ZodDefault<z.ZodObject<{
+                scope_id: z.ZodDefault<z.ZodString>;
+                allowed_contexts: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
+                source_actor: z.ZodDefault<z.ZodString>;
+                collection_context: z.ZodDefault<z.ZodString>;
+                granted_at: z.ZodOptional<z.ZodString>;
+            }, "strict", z.ZodTypeAny, {
+                scope_id: string;
+                allowed_contexts: string[];
+                source_actor: string;
+                collection_context: string;
+                granted_at?: string | undefined;
+            }, {
+                scope_id?: string | undefined;
+                allowed_contexts?: string[] | undefined;
+                source_actor?: string | undefined;
+                collection_context?: string | undefined;
+                granted_at?: string | undefined;
+            }>>;
+            retention: z.ZodDefault<z.ZodObject<{
+                policy_id: z.ZodDefault<z.ZodString>;
+                retain_until: z.ZodDefault<z.ZodNullable<z.ZodString>>;
+                review_after: z.ZodDefault<z.ZodNullable<z.ZodString>>;
+                delete_requires_approval: z.ZodDefault<z.ZodBoolean>;
+            }, "strict", z.ZodTypeAny, {
+                policy_id: string;
+                retain_until: string | null;
+                review_after: string | null;
+                delete_requires_approval: boolean;
+            }, {
+                policy_id?: string | undefined;
+                retain_until?: string | null | undefined;
+                review_after?: string | null | undefined;
+                delete_requires_approval?: boolean | undefined;
+            }>>;
+            export_visibility: z.ZodDefault<z.ZodEnum<["listed", "redacted", "hidden"]>>;
+            owner_ref: z.ZodDefault<z.ZodString>;
+        }, "strict", z.ZodTypeAny, {
+            sensitivity: "local" | "public" | "private" | "secret";
+            consent: {
+                scope_id: string;
+                allowed_contexts: string[];
+                source_actor: string;
+                collection_context: string;
+                granted_at?: string | undefined;
+            };
+            retention: {
+                policy_id: string;
+                retain_until: string | null;
+                review_after: string | null;
+                delete_requires_approval: boolean;
+            };
+            export_visibility: "listed" | "redacted" | "hidden";
+            owner_ref: string;
+        }, {
+            sensitivity?: "local" | "public" | "private" | "secret" | undefined;
+            consent?: {
+                scope_id?: string | undefined;
+                allowed_contexts?: string[] | undefined;
+                source_actor?: string | undefined;
+                collection_context?: string | undefined;
+                granted_at?: string | undefined;
+            } | undefined;
+            retention?: {
+                policy_id?: string | undefined;
+                retain_until?: string | null | undefined;
+                review_after?: string | null | undefined;
+                delete_requires_approval?: boolean | undefined;
+            } | undefined;
+            export_visibility?: "listed" | "redacted" | "hidden" | undefined;
+            owner_ref?: string | undefined;
+        }>>;
     }, "strip", z.ZodTypeAny, {
         value: string;
         key: string;
-        memory_type: "observation" | "fact" | "procedure" | "preference";
+        memory_type: "observation" | "preference" | "fact" | "procedure";
         category?: string | undefined;
         tags?: string[] | undefined;
+        provenance?: {
+            source_type: "unknown" | "external" | "web" | "tool" | "user" | "runtime" | "imported";
+            raw_refs: string[];
+            verification_status: "unknown" | "unverified" | "verified" | "contradicted" | "suspicious";
+            risk_signals: ("hallucinated" | "low_provenance" | "contradiction" | "prompt_injection_like" | "unverified_external")[];
+            reliability?: number | undefined;
+            source_ref?: string | undefined;
+        } | undefined;
+        verification_status?: "unknown" | "unverified" | "verified" | "contradicted" | "suspicious" | undefined;
+        governance?: {
+            sensitivity: "local" | "public" | "private" | "secret";
+            consent: {
+                scope_id: string;
+                allowed_contexts: string[];
+                source_actor: string;
+                collection_context: string;
+                granted_at?: string | undefined;
+            };
+            retention: {
+                policy_id: string;
+                retain_until: string | null;
+                review_after: string | null;
+                delete_requires_approval: boolean;
+            };
+            export_visibility: "listed" | "redacted" | "hidden";
+            owner_ref: string;
+        } | undefined;
     }, {
         value: string;
         key: string;
         category?: string | undefined;
         tags?: string[] | undefined;
-        memory_type?: "observation" | "fact" | "procedure" | "preference" | undefined;
+        provenance?: {
+            reliability?: number | undefined;
+            source_type?: "unknown" | "external" | "web" | "tool" | "user" | "runtime" | "imported" | undefined;
+            source_ref?: string | undefined;
+            raw_refs?: string[] | undefined;
+            verification_status?: "unknown" | "unverified" | "verified" | "contradicted" | "suspicious" | undefined;
+            risk_signals?: ("hallucinated" | "low_provenance" | "contradiction" | "prompt_injection_like" | "unverified_external")[] | undefined;
+        } | undefined;
+        verification_status?: "unknown" | "unverified" | "verified" | "contradicted" | "suspicious" | undefined;
+        memory_type?: "observation" | "preference" | "fact" | "procedure" | undefined;
+        governance?: {
+            sensitivity?: "local" | "public" | "private" | "secret" | undefined;
+            consent?: {
+                scope_id?: string | undefined;
+                allowed_contexts?: string[] | undefined;
+                source_actor?: string | undefined;
+                collection_context?: string | undefined;
+                granted_at?: string | undefined;
+            } | undefined;
+            retention?: {
+                policy_id?: string | undefined;
+                retain_until?: string | null | undefined;
+                review_after?: string | null | undefined;
+                delete_requires_approval?: boolean | undefined;
+            } | undefined;
+            export_visibility?: "listed" | "redacted" | "hidden" | undefined;
+            owner_ref?: string | undefined;
+        } | undefined;
     }>;
     constructor(knowledgeManager: KnowledgeManager);
     description(_context?: ToolDescriptionContext): string;

package/dist/tools/execution/MemorySaveTool/MemorySaveTool.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"MemorySaveTool.d.ts","sourceRoot":"","sources":["../../../../src/tools/execution/MemorySaveTool/MemorySaveTool.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,KAAK,EACV,KAAK,EACL,UAAU,EACV,eAAe,EACf,qBAAqB,EACrB,YAAY,EACZ,sBAAsB,EACvB,MAAM,gBAAgB,CAAC;AACxB,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,kDAAkD,CAAC;AAIzF,eAAO,MAAM,qBAAqB;;;;;;;;;;;;;;;;;;EAUhC,CAAC;AACH,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,qBAAqB,CAAC,CAAC;AAEpE,qBAAa,cAAe,YAAW,KAAK,CAAC,eAAe,EAAE,OAAO,CAAC;IAgBxD,OAAO,CAAC,QAAQ,CAAC,gBAAgB;IAf7C,QAAQ,CAAC,QAAQ,EAAE,YAAY,CAW7B;IAEF,QAAQ,CAAC,WAAW;;;;;;;;;;;;;;;;;;OAAyB;gBAEhB,gBAAgB,EAAE,gBAAgB;IAE/D,WAAW,CAAC,QAAQ,CAAC,EAAE,sBAAsB,GAAG,MAAM;IAIhD,IAAI,CAAC,KAAK,EAAE,eAAe,EAAE,QAAQ,EAAE,eAAe,GAAG,OAAO,CAAC,UAAU,CAAC;IA2B5E,gBAAgB,CAAC,MAAM,EAAE,eAAe,EAAE,QAAQ,EAAE,eAAe,GAAG,OAAO,CAAC,qBAAqB,CAAC;IAI1G,iBAAiB,CAAC,MAAM,EAAE,eAAe,GAAG,OAAO;CAGpD"}
+{"version":3,"file":"MemorySaveTool.d.ts","sourceRoot":"","sources":["../../../../src/tools/execution/MemorySaveTool/MemorySaveTool.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,KAAK,EACV,KAAK,EACL,UAAU,EACV,eAAe,EACf,qBAAqB,EACrB,YAAY,EACZ,sBAAsB,EACvB,MAAM,gBAAgB,CAAC;AACxB,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,kDAAkD,CAAC;AASzF,eAAO,MAAM,qBAAqB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAahC,CAAC;AACH,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,qBAAqB,CAAC,CAAC;AAEpE,qBAAa,cAAe,YAAW,KAAK,CAAC,eAAe,EAAE,OAAO,CAAC;IAgBxD,OAAO,CAAC,QAAQ,CAAC,gBAAgB;IAf7C,QAAQ,CAAC,QAAQ,EAAE,YAAY,CAW7B;IAEF,QAAQ,CAAC,WAAW;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OAAyB;gBAEhB,gBAAgB,EAAE,gBAAgB;IAE/D,WAAW,CAAC,QAAQ,CAAC,EAAE,sBAAsB,GAAG,MAAM;IAIhD,IAAI,CAAC,KAAK,EAAE,eAAe,EAAE,QAAQ,EAAE,eAAe,GAAG,OAAO,CAAC,UAAU,CAAC;IA8B5E,gBAAgB,CAAC,MAAM,EAAE,eAAe,EAAE,QAAQ,EAAE,eAAe,GAAG,OAAO,CAAC,qBAAqB,CAAC;IAI1G,iBAAiB,CAAC,MAAM,EAAE,eAAe,GAAG,OAAO;CAGpD"}

package/dist/tools/execution/MemorySaveTool/MemorySaveTool.js

@@ -1,4 +1,6 @@
 import { z } from "zod";
+import { MemoryProvenanceSchema, MemoryVerificationStatusSchema, } from "../../../platform/corrections/memory-quarantine.js";
+import { MemoryGovernanceSchema } from "../../../platform/corrections/memory-governance.js";
 import { DESCRIPTION } from "./prompt.js";
 import { TAGS, READ_ONLY, PERMISSION_LEVEL, TOOL_NAME, ALIASES } from "./constants.js";
 export const MemorySaveInputSchema = z.object({
@@ -11,6 +13,9 @@ export const MemorySaveInputSchema = z.object({
         .default("fact")
         .describe("Type of memory entry"),
     tags: z.array(z.string()).optional().describe("Tags for filtering and search"),
+    verification_status: MemoryVerificationStatusSchema.optional(),
+    provenance: MemoryProvenanceSchema.optional(),
+    governance: MemoryGovernanceSchema.optional(),
 });
 export class MemorySaveTool {
     knowledgeManager;
@@ -42,6 +47,9 @@ export class MemorySaveTool {
                 category: input.category,
                 memory_type: input.memory_type,
                 tags: input.tags,
+                verification_status: input.verification_status,
+                provenance: input.provenance,
+                governance: input.governance,
             });
             return {
                 success: true,

package/dist/tools/execution/MemorySaveTool/MemorySaveTool.js.map

@@ -1 +1 @@
-{"version":3,"file":"MemorySaveTool.js","sourceRoot":"","sources":["../../../../src/tools/execution/MemorySaveTool/MemorySaveTool.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAUxB,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,gBAAgB,EAAE,SAAS,EAAE,OAAO,EAAE,MAAM,gBAAgB,CAAC;AAEvF,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC5C,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,iCAAiC,CAAC;IAClE,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,kBAAkB,CAAC;IACrD,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,iCAAiC,CAAC;IAC3E,WAAW,EAAE,CAAC;SACX,IAAI,CAAC,CAAC,MAAM,EAAE,WAAW,EAAE,YAAY,EAAE,aAAa,CAAC,CAAC;SACxD,QAAQ,EAAE;SACV,OAAO,CAAC,MAAM,CAAC;SACf,QAAQ,CAAC,sBAAsB,CAAC;IACnC,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,+BAA+B,CAAC;CAC/E,CAAC,CAAC;AAGH,MAAM,OAAO,cAAc;IAgBI;IAfpB,QAAQ,GAAiB;QAChC,IAAI,EAAE,SAAS;QACf,OAAO,EAAE,CAAC,GAAG,OAAO,CAAC;QACrB,eAAe,EAAE,gBAAgB;QACjC,UAAU,EAAE,SAAS;QACrB,aAAa,EAAE,KAAK;QACpB,WAAW,EAAE,KAAK;QAClB,UAAU,EAAE,KAAK;QACjB,cAAc,EAAE,CAAC;QACjB,cAAc,EAAE,IAAI;QACpB,IAAI,EAAE,CAAC,GAAG,IAAI,CAAC;KAChB,CAAC;IAEO,WAAW,GAAG,qBAAqB,CAAC;IAE7C,YAA6B,gBAAkC;QAAlC,qBAAgB,GAAhB,gBAAgB,CAAkB;IAAG,CAAC;IAEnE,WAAW,CAAC,QAAiC;QAC3C,OAAO,WAAW,CAAC;IACrB,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,KAAsB,EAAE,QAAyB;QAC1D,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAC7B,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAC,eAAe,CAAC;gBACxD,GAAG,EAAE,KAAK,CAAC,GAAG;gBACd,KAAK,EAAE,KAAK,CAAC,KAAK;gBAClB,QAAQ,EAAE,KAAK,CAAC,QAAQ;gBACxB,WAAW,EAAE,KAAK,CAAC,WAAW;gBAC9B,IAAI,EAAE,KAAK,CAAC,IAAI;aACjB,CAAC,CAAC;YACH,OAAO;gBACL,OAAO,EAAE,IAAI;gBACb,IAAI,EAAE,EAAE,EAAE,EAAE,KAAK,CAAC,EAAE,EAAE,GAAG,EAAE,KAAK,CAAC,GAAG,EAAE;gBACtC,OAAO,EAAE,iBAAiB,KAAK,CAAC,GAAG,EAAE;gBACrC,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS;aACnC,CAAC;QACJ,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,IAAI,EAAE,IAAI;gBACV,OAAO,EAAE,yBAAyB,GAAI,GAAa,CAAC,OAAO;gBAC3D,KAAK,EAAG,GAAa,CAAC,OAAO;gBAC7B,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS;aACnC,CAAC;QACJ,CAAC;IACH,CAAC;IAED,KAAK,CAAC,gBAAgB,CAAC,MAAuB,EAAE,QAAyB;QACvE,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;IAC/B,CAAC;IAED,iBAAiB,CAAC,MAAuB;QACvC,OAAO,KAAK,CAAC;IACf,CAAC;CACF"}
+{"version":3,"file":"MemorySaveTool.js","sourceRoot":"","sources":["../../../../src/tools/execution/MemorySaveTool/MemorySaveTool.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAUxB,OAAO,EACL,sBAAsB,EACtB,8BAA8B,GAC/B,MAAM,oDAAoD,CAAC;AAC5D,OAAO,EAAE,sBAAsB,EAAE,MAAM,oDAAoD,CAAC;AAC5F,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,gBAAgB,EAAE,SAAS,EAAE,OAAO,EAAE,MAAM,gBAAgB,CAAC;AAEvF,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC5C,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,iCAAiC,CAAC;IAClE,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,kBAAkB,CAAC;IACrD,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,iCAAiC,CAAC;IAC3E,WAAW,EAAE,CAAC;SACX,IAAI,CAAC,CAAC,MAAM,EAAE,WAAW,EAAE,YAAY,EAAE,aAAa,CAAC,CAAC;SACxD,QAAQ,EAAE;SACV,OAAO,CAAC,MAAM,CAAC;SACf,QAAQ,CAAC,sBAAsB,CAAC;IACnC,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,+BAA+B,CAAC;IAC9E,mBAAmB,EAAE,8BAA8B,CAAC,QAAQ,EAAE;IAC9D,UAAU,EAAE,sBAAsB,CAAC,QAAQ,EAAE;IAC7C,UAAU,EAAE,sBAAsB,CAAC,QAAQ,EAAE;CAC9C,CAAC,CAAC;AAGH,MAAM,OAAO,cAAc;IAgBI;IAfpB,QAAQ,GAAiB;QAChC,IAAI,EAAE,SAAS;QACf,OAAO,EAAE,CAAC,GAAG,OAAO,CAAC;QACrB,eAAe,EAAE,gBAAgB;QACjC,UAAU,EAAE,SAAS;QACrB,aAAa,EAAE,KAAK;QACpB,WAAW,EAAE,KAAK;QAClB,UAAU,EAAE,KAAK;QACjB,cAAc,EAAE,CAAC;QACjB,cAAc,EAAE,IAAI;QACpB,IAAI,EAAE,CAAC,GAAG,IAAI,CAAC;KAChB,CAAC;IAEO,WAAW,GAAG,qBAAqB,CAAC;IAE7C,YAA6B,gBAAkC;QAAlC,qBAAgB,GAAhB,gBAAgB,CAAkB;IAAG,CAAC;IAEnE,WAAW,CAAC,QAAiC;QAC3C,OAAO,WAAW,CAAC;IACrB,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,KAAsB,EAAE,QAAyB;QAC1D,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAC7B,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAC,eAAe,CAAC;gBACxD,GAAG,EAAE,KAAK,CAAC,GAAG;gBACd,KAAK,EAAE,KAAK,CAAC,KAAK;gBAClB,QAAQ,EAAE,KAAK,CAAC,QAAQ;gBACxB,WAAW,EAAE,KAAK,CAAC,WAAW;gBAC9B,IAAI,EAAE,KAAK,CAAC,IAAI;gBAChB,mBAAmB,EAAE,KAAK,CAAC,mBAAmB;gBAC9C,UAAU,EAAE,KAAK,CAAC,UAAU;gBAC5B,UAAU,EAAE,KAAK,CAAC,UAAU;aAC7B,CAAC,CAAC;YACH,OAAO;gBACL,OAAO,EAAE,IAAI;gBACb,IAAI,EAAE,EAAE,EAAE,EAAE,KAAK,CAAC,EAAE,EAAE,GAAG,EAAE,KAAK,CAAC,GAAG,EAAE;gBACtC,OAAO,EAAE,iBAAiB,KAAK,CAAC,GAAG,EAAE;gBACrC,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS;aACnC,CAAC;QACJ,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,IAAI,EAAE,IAAI;gBACV,OAAO,EAAE,yBAAyB,GAAI,GAAa,CAAC,OAAO;gBAC3D,KAAK,EAAG,GAAa,CAAC,OAAO;gBAC7B,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS;aACnC,CAAC;QACJ,CAAC;IACH,CAAC;IAED,KAAK,CAAC,gBAAgB,CAAC,MAAuB,EAAE,QAAyB;QACvE,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;IAC/B,CAAC;IAED,iBAAiB,CAAC,MAAuB;QACvC,OAAO,KAAK,CAAC;IACf,CAAC;CACF"}

package/dist/tools/fs/ApplyPatchTool/ApplyPatchTool.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"ApplyPatchTool.d.ts","sourceRoot":"","sources":["../../../../src/tools/fs/ApplyPatchTool/ApplyPatchTool.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,KAAK,EAAE,KAAK,EAAE,qBAAqB,EAAE,eAAe,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,gBAAgB,CAAC;AAE9G,eAAO,MAAM,qBAAqB;;;;;;;;;;;;EAIhC,CAAC;AACH,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,qBAAqB,CAAC,CAAC;AAEpE,qBAAa,cAAe,YAAW,KAAK,CAAC,eAAe,CAAC;IAC3D,QAAQ,CAAC,QAAQ,EAAE,YAAY,CAW7B;IAEF,QAAQ,CAAC,WAAW;;;;;;;;;;;;OAAyB;IAE7C,WAAW,IAAI,MAAM;IAIf,IAAI,CAAC,KAAK,EAAE,eAAe,EAAE,OAAO,EAAE,eAAe,GAAG,OAAO,CAAC,UAAU,CAAC;YA0BnE,cAAc;IA6CtB,gBAAgB,CAAC,MAAM,EAAE,eAAe,EAAE,QAAQ,EAAE,eAAe,GAAG,OAAO,CAAC,qBAAqB,CAAC;IAI1G,iBAAiB,CAAC,KAAK,EAAE,eAAe,GAAG,OAAO;CAGnD"}
+{"version":3,"file":"ApplyPatchTool.d.ts","sourceRoot":"","sources":["../../../../src/tools/fs/ApplyPatchTool/ApplyPatchTool.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,KAAK,EAAE,KAAK,EAAE,qBAAqB,EAAE,eAAe,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,gBAAgB,CAAC;AAG9G,eAAO,MAAM,qBAAqB;;;;;;;;;;;;EAIhC,CAAC;AACH,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,qBAAqB,CAAC,CAAC;AAEpE,qBAAa,cAAe,YAAW,KAAK,CAAC,eAAe,CAAC;IAC3D,QAAQ,CAAC,QAAQ,EAAE,YAAY,CAW7B;IAEF,QAAQ,CAAC,WAAW;;;;;;;;;;;;OAAyB;IAE7C,WAAW,IAAI,MAAM;IAIf,IAAI,CAAC,KAAK,EAAE,eAAe,EAAE,OAAO,EAAE,eAAe,GAAG,OAAO,CAAC,UAAU,CAAC;YAqCnE,cAAc;IAiDtB,gBAAgB,CAAC,MAAM,EAAE,eAAe,EAAE,QAAQ,EAAE,eAAe,GAAG,OAAO,CAAC,qBAAqB,CAAC;IAI1G,iBAAiB,CAAC,KAAK,EAAE,eAAe,GAAG,OAAO;CAGnD"}

package/dist/tools/fs/ApplyPatchTool/ApplyPatchTool.js

@@ -2,6 +2,7 @@ import { spawn } from "node:child_process";
 import * as fsp from "node:fs/promises";
 import * as path from "node:path";
 import { z } from "zod";
+import { validateProtectedPath } from "../FileValidationTool/protected-path-policy.js";
 export const ApplyPatchInputSchema = z.object({
     patch: z.string().min(1),
     cwd: z.string().optional(),
@@ -28,11 +29,22 @@ export class ApplyPatchTool {
         const started = Date.now();
         const cwd = input.cwd ?? context.cwd;
         if (input.patch.trimStart().startsWith("*** Begin Patch")) {
-            return this.callCodexPatch(input, cwd, started);
+            return this.callCodexPatch(input, cwd, started, context.executionPolicy?.protectedPaths);
+        }
+        const changedPaths = extractPatchPaths(input.patch);
+        const blockedPath = findBlockedPatchPath(changedPaths, cwd, context.executionPolicy?.protectedPaths);
+        if (blockedPath) {
+            return {
+                success: false,
+                data: { changedPaths, stdout: "", stderr: blockedPath.error, checkOnly: input.checkOnly },
+                summary: `Patch blocked: ${blockedPath.error}`,
+                error: blockedPath.error,
+                durationMs: Date.now() - started,
+                artifacts: changedPaths,
+            };
         }
         const args = input.checkOnly ? ["apply", "--check", "--whitespace=nowarn", "-"] : ["apply", "--whitespace=nowarn", "-"];
         const result = await runGitApply(args, input.patch, cwd);
-        const changedPaths = extractPatchPaths(input.patch);
         return {
             success: result.exitCode === 0,
             data: {
@@ -49,9 +61,14 @@ export class ApplyPatchTool {
             artifacts: changedPaths,
         };
     }
-    async callCodexPatch(input, cwd, started) {
+    async callCodexPatch(input, cwd, started, protectedPaths) {
         try {
             const operations = parseCodexPatch(input.patch);
+            const changedPaths = operations.map((operation) => operation.filePath);
+            const blockedPath = findBlockedPatchPath(changedPaths, cwd, protectedPaths);
+            if (blockedPath) {
+                throw new Error(blockedPath.error);
+            }
             if (input.checkOnly) {
                 for (const operation of operations) {
                     await validateCodexPatchOperation(operation, cwd);
@@ -62,7 +79,6 @@ export class ApplyPatchTool {
                     await applyCodexPatchOperation(operation, cwd);
                 }
             }
-            const changedPaths = operations.map((operation) => operation.filePath);
             return {
                 success: true,
                 data: {
@@ -122,9 +138,26 @@ function extractPatchPaths(patch) {
         if (match?.[1] && match[1] !== "/dev/null") {
             paths.add(match[1]);
         }
+        const deletedMatch = line.match(/^---\s+a\/(.+)$/);
+        if (deletedMatch?.[1] && deletedMatch[1] !== "/dev/null") {
+            paths.add(deletedMatch[1]);
+        }
     }
     return [...paths];
 }
+function findBlockedPatchPath(changedPaths, cwd, protectedPaths) {
+    for (const changedPath of changedPaths) {
+        const validation = validateProtectedPath(changedPath, {
+            cwd,
+            workspaceRoot: cwd,
+            protectedPaths,
+        });
+        if (!validation.valid) {
+            return { path: changedPath, error: validation.error ?? `Blocked patch path: ${changedPath}` };
+        }
+    }
+    return null;
+}
 function parseCodexPatch(patch) {
     const lines = patch.split("\n");
     const operations = [];