HTTP

recencyBoost calculates a boost factor based on how recently the procedure was used.

Helper to convert domain.Schema to API response.

withTx returns a clone of the store that runs against the given transaction.

AnnotateTiers fills each memory's derived Tier from its Confidence, making the API the single source of truth for tiering. Clients should display this

AppBaseURL is the externally-reachable base URL, used to build OAuth redirect URIs. Defaults to http://localhost:<port>.

CORSAllowedOrigins returns the browser origins permitted to call the API, parsed from the comma-separated CORS_ALLOWED_ORIGINS env var. An empty resul

DetectUncertainty identifies areas where the agent should be uncertain.

EmbeddingProvider returns the configured embedding provider. Defaults to "openai" if not set. Valid values: openai, mock

Consolidation

1 MiB Handle dispatches a single MCP JSON-RPC request.

HashContent returns a hex sha256 of memory content, used to record what was deleted/redacted without retaining the original text.

ListQuarantine returns the quarantine review queue for an agent.

MatchSchemas finds schemas that apply to the current situation.

NewMCPHandler builds the embedded MCP endpoint. httpClient must be backed by the in-process transport that dispatches to this server's router.

RecordContradiction records a contradiction for a schema.

RegisterResources registers all Engram MCP resources on the server.

Sanitize clamps each field to a safe range, falling back to the default when a value is nonsensical (e.g. negative). This guards the engine against a

Admin correction methods

ValidateSchema validates a schema and updates its validation timestamp.

WorkOSAuth returns (clientID, apiKey) for WorkOS enterprise SSO (AuthKit); empty when not configured. The API key is the client secret for token excha

applyDecayEff is the core decay computation, parameterized by the effective (possibly per-tenant) decay settings.

applyTensionWrites runs fn atomically inside the unit of work when available, falling back to the pool-backed stores (e.g. in unit tests) otherwise.

averageVectors computes the element-wise average of two vectors.

buildContradictionMutation builds an audit row for a belief change caused by a contradicting belief; source_id points at the contradicting belief.

calculateInitialConfidence calculates initial confidence based on evidence count.

clampConf mirrors the store's ApplyConfidenceDelta clamp ([0, 0.99]) for mocks.

cloneVector returns a copy of v so callers can mutate it without aliasing the source slice.

enforceCreatePolicy runs policy enforcement for a newly created belief. It is best-effort and intentionally runs outside any transaction.

extractAgentID parses the agent ID from a URI like "engram://agents/{agent_id}/...".

incrementalMean folds sample x into a running mean as the n-th observation: mean += (x - mean) / n. This keeps every cluster member equally weighted,

logQuarantineMutation writes a firewall decision to the tamper-evident audit chain. Best-effort: a logging failure never blocks the operation.

post builds an MCP JSON-RPC POST with the given Authorization header.

nullIfEmpty maps "" to a SQL NULL so optional text columns stay null rather than storing empty strings.

provisionTenant joins the default org (if configured) or creates a personal org.

─── Stdio transport tests ──────────────────────────────────────────────────────

Activate performs intelligent memory activation using spreading activation.

Evidence tracking

CancelSubscription cancels a Razorpay subscription. When atCycleEnd is true the subscription stays active until the end of the current billing cycle (

ChainHead returns the tenant's current chain length and head hash (the value an auditor anchors against). Returns (0, "") for an empty chain.

CountAgents returns the org's live (non-archived) agent count.

CreateSubscription creates a Razorpay subscription in the "created" state and returns its id. The browser then opens the Checkout modal with this id +

CurrentUsage returns usage for the current UTC month (zeroed if none yet).

DerivedMemoryClosure returns every memory transitively derived from the given root memories (following memory_graph 'derived_from' edges, where source

DetectSchemas identifies patterns across semantic memories and creates schemas.

GetApplicableProcedures returns procedures relevant to the current situation.

GetAuthByHash performs a single JOIN query and returns auth context for the given hash. Returns ErrNotFound if the key doesn't exist, is revoked, or i

GetConfidenceExplanationForMemory returns a confidence explanation for a specific memory. This can be used to enhance recall responses with confidence

GetHotMemories returns the hot-tier memories for an agent.

GetSession retrieves the current working memory session for an agent.

GitHubOAuth returns (clientID, clientSecret); empty when not configured.

GoogleOAuth returns (clientID, clientSecret); empty when not configured.