feat: add Company Brain context injection safety

README.md

@@ -73,6 +73,12 @@ cd cortex && npm install --omit=dev
 | `retrievalBudget` | `number` | `2000` | Max token budget for retrieved memories |
 | `maxInjectionChars` | `number` | `8000` | Max characters injected into agent context |
 | `retrievalMode` | `string` | `fast` | Retrieval mode: `auto`, `fast`, or `thorough` |
+| `companyBrainContextMode` | `string` | `off` | Opt-in Company Brain context injection: `off` or `auto` |
+| `companyBrainContextAccountId` | `string` | — | Stable account ID for account-scoped Company Brain context |
+| `companyBrainContextSearch` | `string` | — | Account search text used when no account ID is configured |
+| `companyBrainContextFactsLimit` | `number` | `25` | Max account facts requested for Company Brain context |
+| `companyBrainContextEventsLimit` | `number` | `10` | Max action-readiness events requested for Company Brain context |
+| `companyBrainContextMaxChars` | `number` | `6000` | Max characters in the Company Brain context block |
 
 ## Tools
 
@@ -104,6 +110,13 @@ Company Brain tools are explicit and account-scoped. They call Cortex
 pagination, and `insufficient_evidence`. They do not inject generic always-on
 Company Brain context and they do not write to shared plugin storage.
 
+For customer/account workspaces, `companyBrainContextMode: "auto"` enables a
+separate `<company-brain-context>` block. The block is distinct from
+`<relevant-memories>`, resolves the account through the Company Brain account
+path, preserves cited evidence and action-readiness metadata, and marks
+approval-gated items as read-only operator-review candidates rather than
+executable actions.
+
 ## How It Works
 
 Cortex operates two invisible loops around every agent conversation:

dist/__tests__/company-brain-context-format.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=company-brain-context-format.test.d.ts.map

dist/index.d.ts

@@ -46,6 +46,12 @@ interface EvaMemoryConfig {
     injectionCriticalThreshold: number;
     injectionTechnicalThreshold: number;
     injectionPersonalThreshold: number;
+    companyBrainContextMode: "off" | "auto";
+    companyBrainContextAccountId: string;
+    companyBrainContextSearch: string;
+    companyBrainContextFactsLimit: number;
+    companyBrainContextEventsLimit: number;
+    companyBrainContextMaxChars: number;
 }
 interface RetrievedItem {
     source: string;
@@ -67,13 +73,22 @@ interface RetrievedItem {
     provenance?: string;
 }
 type CompanyBrainToolResult = Record<string, unknown>;
+interface CompanyBrainContextPayload {
+    account?: Record<string, unknown> | null;
+    brief?: CompanyBrainToolResult | null;
+    actionReadiness?: CompanyBrainToolResult | null;
+    resolution?: Record<string, unknown> | null;
+}
 interface ProcessedItem {
     item: RetrievedItem;
     duplicateCount: number;
     conflictWithId?: string;
     relationHint?: string;
 }
 export declare function formatCompanyBrainToolResult(label: string, result: CompanyBrainToolResult | null): string;
+export declare function formatCompanyBrainContext(payload: CompanyBrainContextPayload, options?: {
+    maxChars?: number;
+}): string;
 declare function parseConfig(raw: unknown): EvaMemoryConfig;
 /** Session risk mode for dynamic threshold selection. */
 type InjectionMode = "critical" | "technical" | "personal";
@@ -190,6 +205,31 @@ declare const cortexPlugin: {
                     type: string;
                     description: string;
                 };
+                companyBrainContextMode: {
+                    type: string;
+                    enum: string[];
+                    description: string;
+                };
+                companyBrainContextAccountId: {
+                    type: string;
+                    description: string;
+                };
+                companyBrainContextSearch: {
+                    type: string;
+                    description: string;
+                };
+                companyBrainContextFactsLimit: {
+                    type: string;
+                    description: string;
+                };
+                companyBrainContextEventsLimit: {
+                    type: string;
+                    description: string;
+                };
+                companyBrainContextMaxChars: {
+                    type: string;
+                    description: string;
+                };
             };
             required: never[];
         };