HasScope reports whether the auth context includes the requested scope. Keys with admin scope implicitly satisfy any scope check.

LLMProvider returns the configured LLM provider. Defaults to "openai" if not set. Valid values: openai, anthropic, gemini, cerebras, mock

NewCompatibleClient builds a client for an OpenAI-compatible embeddings API. baseURL is the server root (e.g. http://localhost:11434/v1); "/embeddings

NewMetacognitiveService creates a new metacognitive service.

NewProceduralService creates a new procedural service.

NewSchemaService creates a new schema service.

OAuthLogin links/creates a user from a social identity and starts a session. SECURITY INVARIANT: `email` MUST be provider-verified (the caller passes

PlanForPlanID reverse-maps a Razorpay plan id to a plan tier. Returns ("", false) when the plan id is unknown.

---- Billing / managed cloud (Razorpay) ---- RazorpayKeyID is the public Razorpay API key id (also handed to the browser to open the Checkout modal).

RazorpayKeySecret is the Razorpay API key secret used for server-side API calls and payment-signature verification.

RazorpayWebhookSecret verifies the signature on incoming Razorpay webhook events.

RecordOutcome records the outcome of an episode.

Effectiveness tracking

Reflect performs a full metacognitive reflection for an agent.

ReflectOnStrategy evaluates how well the agent's strategies are working.

ReleaseQuarantine promotes a quarantined trace into active memory by recomputing its real binding from the ids it carries, and records the release in

RunAll runs the tuner for all agents that have feedback.

SelfServe reports whether a plan can be purchased via Razorpay Checkout. Free is the default (no purchase) and Enterprise is sales-assisted (set manua

SetSettingsStore wires per-tenant settings so the Provenance Firewall can consult the tenant's quarantine policy. When nil, only an explicit per-write

SetupToken returns ENGRAM_SETUP_TOKEN. If empty, POST /v1/setup is disabled.

Stop halts the background consolidation worker, cancelling any in-flight pass so shutdown is not held for the remainder of a long tick.

UpdateLastUsed is called asynchronously on every authenticated request.

Outcome

activeTenantFor returns the user's first org (or provisions one if none).

applyDecayWrite persists a memory's decay (archive or confidence update) and its audit row atomically when a unit of work is wired, falling back to no

applySubscription reconciles an org's plan from a subscription event. On cancellation/completion (canceled == true) the org drops to the free tier.

assembleContext creates a formatted context string for LLM injection.

--- Helpers ---

buildScorer creates a RecallScorer with per-agent policy weights if available.

calculateCompetition measures how much competing beliefs suppress this one

clusterMemories groups memories by embedding similarity.

compete selects the top memories for limited working memory slots.

computeProcedureScore calculates the combined ranking score for a procedure.

contradictionZoneEmb returns two normalised unit vectors with cosine similarity ~0.71. They share a strong component on dim-0 but diverge on dims 1 an

effFor resolves the effective decay parameters for a tenant, falling back to service defaults when no settings store is wired or on error.

envDurationSecs reads an env var holding a number of seconds, falling back to defSecs. A value of 0 is honored (e.g. "no max lifetime").

envInt32 reads a positive int32 env var, falling back to def.

extractTimeOfDay returns the time of day category for a given time.

findCompetitors finds memories that compete for the same "slot"

─── Helpers ───────────────────────────────────────────────────────────────────

generateRawKey returns a key with the given prefix: e.g. "mk_<64 hex chars>".

increment performs an atomic upsert into the current month's row. The column name is fixed by the caller (never user input), so interpolation is safe.

insertMutationLog writes one audit row against any DBTX (pool or tx), so deletion/archive paths can log atomically inside their own transaction.

metricsHandler serves runtime metrics. It defaults to the Prometheus text exposition format (so Prometheus/Grafana/k8s can scrape `/metrics` natively)

HTTP

UI

UI

scoreMarkers returns a score in [0, 1] based on how many markers are present.

serveNetwork starts an HTTP listener for the sse/http transports.

tenantFromEvent resolves the org owning a webhook's subscription via the notes[tenant_id] we set at checkout. Returns uuid.Nil when absent/malformed.