Stop halts the background decay worker, cancelling any in-flight pass so shutdown is not held for the remainder of a long tick.

guardPanic runs fn and converts a panic into an error log. Background workers iterate every tenant's data; without this, one corrupt row or malformed

sameUUIDPtr treats two NULLs as equal but a NULL never equal to a value, so two distinct anonymous sessions (both anchor NULL, different session IDs)

scanEpisodes is a helper to scan multiple episode rows

BatchDecay applies decay to all memories for an agent

ComputeCalibration is the pure, testable core: bin samples by predicted confidence and compute calibration metrics.

DefaultEngineSettings mirrors the engine's built-in constants. Keep in sync with service/decay.go and service/confidence.go defaults.

Similarity search

Handler returns an http.Handler that mounts the HTTP transport.

NewConsolidationService creates a new consolidation service.

NewHTTPServer creates an HTTPServer wrapping the given MCP server.

WithTx runs fn inside a single transaction, committing on success and rolling back on any error or panic (the deferred Rollback is a no-op after Commi

scoreTimeMatch scores time preference matching.

snapshotMemoriesForRemoval writes one mutation_log row per memory matching whereSQL inside tx, BEFORE the caller removes/archives those rows, so the a

withTenant injects an auth context carrying the given tenant, matching what SessionOrAPIKey sets up in production.

ActorType reports how the caller authenticated, for tamper-evident audit attribution: "user" for a logged-in console session, "api_key" for a programm

ClassifyHeuristic classifies memory content type via keyword patterns. No external API calls. Handles ~85% of cases correctly. Falls back to Fact. Th

Consolidate runs the full consolidation pipeline for an agent.

EnforceMemoryQuota blocks memory writes once the org hits its monthly cap and, on a successful write, increments the counter. When enabled is false (n

Decay methods

Start begins the background decay worker

adminMutation builds an audit row for an operator action. ContentHash is the hash of the memory's content at the time of the action.

blendSalience folds the evidence (confidence) and currency (freshness) axes into a base relevance score

clampLimit applies the upper bound only — callers keep their own defaults and lower-bound handling, so wrapping an existing parse is behavior-preservi

mergeActivations merges two activation lists, combining duplicates.

HTTP

scoreContextMatch scores how well contexts match.

AddResource registers an MCP resource with its URI template.

CookieSecure controls the Secure flag on the session cookie. Defaults to true (secure-by-default) so a forgotten env var in production never ships the

HashAPIKey returns the SHA-256 hex digest of the given key.

LearnFromOutcome extracts procedures from successful episodes.

Access tracking

RecordOutcome records the outcome of an episode and propagates effects to used memories. All episode and memory lookups are scoped to tenantID so call

RecordProcedureOutcome records the success/failure of using a procedure.

RegisterTools registers all Engram MCP tools on the server.

SetSubscription updates plan + status + subscription id from a Razorpay event.

StdioRW is the testable core of Stdio — same protocol, explicit reader/writer.

VerifyAndParse checks the X-Razorpay-Signature header against the configured webhook secret, then decodes the event. It fails closed: without a config

---- Client-side payment verification ---- VerifyPaymentSignature checks the signature returned by the Checkout modal's success handler. For subscript

mockEmb returns a synthetic embedding biased toward the given dimension. Two embeddings with different bias dimensions will have low cosine similarity