@anuma/sdk 6.27.1 → 6.27.3

package/dist/expo/index.cjs

@@ -1510,6 +1510,7 @@ __export(index_exports, {
   deleteVaultFolderOp: () => deleteVaultFolderOp,
   deleteVaultMemoryOp: () => deleteVaultMemoryOp,
   dequantizeEmbedding: () => dequantizeEmbedding,
+  deriveKeyFromSignatureBytes: () => deriveKeyFromSignatureBytes,
   discoverNotionOAuthEndpoints: () => discoverNotionOAuthEndpoints,
   eagerEmbedContent: () => eagerEmbedContent,
   embedAllMessages: () => embedAllMessages,
@@ -1853,11 +1854,32 @@ function clearAllEncryptionState() {
 function clearAllEncryptionKeys() {
   clearAllEncryptionState();
 }
+function hexNibble(code) {
+  if (code >= 48 && code <= 57) return code - 48;
+  if (code >= 65 && code <= 70) return code - 55;
+  if (code >= 97 && code <= 102) return code - 87;
+  return -1;
+}
 function hexToBytes(hex) {
+  if (typeof hex !== "string") {
+    throw new TypeError(
+      "hexToBytes: expected a hex string. Pass raw signature bytes to deriveKeyFromSignatureBytes instead of stringifying them."
+    );
+  }
   const cleanHex = hex.startsWith("0x") ? hex.slice(2) : hex;
+  if (cleanHex.length === 0 || cleanHex.length % 2 !== 0) {
+    throw new Error(
+      `hexToBytes: invalid hex string (expected a non-empty even length, got ${cleanHex.length})`
+    );
+  }
   const bytes = new Uint8Array(cleanHex.length / 2);
   for (let i = 0; i < cleanHex.length; i += 2) {
-    bytes[i / 2] = parseInt(cleanHex.slice(i, i + 2), 16);
+    const hi = hexNibble(cleanHex.charCodeAt(i));
+    const lo = hexNibble(cleanHex.charCodeAt(i + 1));
+    if (hi < 0 || lo < 0) {
+      throw new Error(`hexToBytes: invalid hex string (non-hex character at index ${i})`);
+    }
+    bytes[i / 2] = hi << 4 | lo;
   }
   return bytes;
 }
@@ -1869,15 +1891,12 @@ var SHARED_TEXT_DECODER = new TextDecoder();
 function isValidWalletAddress(address) {
   return /^0x[a-fA-F0-9]{40}$/.test(address);
 }
-async function deriveKeyFromSignature(signature) {
-  const sigBytes = hexToBytes(signature);
-  const hashBuffer = await crypto.subtle.digest("SHA-256", sigBytes.buffer);
-  const hashBytes = new Uint8Array(hashBuffer);
-  return bytesToHex(hashBytes);
-}
-async function deriveKeyFromSignatureV3(signature) {
-  const sigBytes = hexToBytes(signature);
-  const ikm = await crypto.subtle.digest("SHA-256", sigBytes.buffer);
+var AES_GCM_V3_INFO = "anuma-sdk-aes-gcm-v3";
+var AES_GCM_V4_INFO = "anuma-sdk-aes-gcm-v4";
+var MIN_SIGNATURE_BYTES = 64;
+async function deriveHkdfAesKeyHex(signatureBytes, info) {
+  const sigBytes = new Uint8Array(signatureBytes);
+  const ikm = await crypto.subtle.digest("SHA-256", sigBytes);
   const hkdfKey = await crypto.subtle.importKey("raw", ikm, { name: "HKDF" }, false, [
     "deriveBits"
   ]);
@@ -1887,13 +1906,32 @@ async function deriveKeyFromSignatureV3(signature) {
       hash: "SHA-256",
       salt: new Uint8Array(32),
       // Zero salt (HKDF spec: uses hash-length zero buffer)
-      info: SHARED_TEXT_ENCODER.encode("anuma-sdk-aes-gcm-v3")
+      info: SHARED_TEXT_ENCODER.encode(info)
     },
     hkdfKey,
     256
   );
   return bytesToHex(new Uint8Array(derivedBits));
 }
+async function deriveKeyFromSignature(signature) {
+  const sigBytes = hexToBytes(signature);
+  const hashBuffer = await crypto.subtle.digest("SHA-256", sigBytes.buffer);
+  return bytesToHex(new Uint8Array(hashBuffer));
+}
+async function deriveKeyFromSignatureV3(signature) {
+  return deriveHkdfAesKeyHex(hexToBytes(signature), AES_GCM_V3_INFO);
+}
+async function deriveKeyFromSignatureBytes(signature) {
+  if (!(signature instanceof Uint8Array)) {
+    throw new TypeError("deriveKeyFromSignatureBytes: expected a Uint8Array signature");
+  }
+  if (signature.byteLength < MIN_SIGNATURE_BYTES) {
+    throw new Error(
+      `deriveKeyFromSignatureBytes: signature must be at least ${MIN_SIGNATURE_BYTES} bytes, got ${signature.byteLength}`
+    );
+  }
+  return deriveHkdfAesKeyHex(signature, AES_GCM_V4_INFO);
+}
 function getStoredKeyPair(address) {
   return keyPairStore.get(address) ?? null;
 }
@@ -1911,8 +1949,9 @@ async function deriveKeyPairFromSignature(signature, address) {
     {
       name: "HKDF",
       hash: "SHA-256",
+      // EVM addresses are case-insensitive. Base58 is not — this salt stays
+      // behind the EVM address gate in requestKeyPair.
       salt: SHARED_TEXT_ENCODER.encode(address.toLowerCase()),
-      // Wallet address as salt
       info: SHARED_TEXT_ENCODER.encode("ECDH-P256-KeyPair")
       // Context info
     },
@@ -25693,6 +25732,7 @@ function createNotionProxyTools(callMcp) {
   deleteVaultFolderOp,
   deleteVaultMemoryOp,
   dequantizeEmbedding,
+  deriveKeyFromSignatureBytes,
   discoverNotionOAuthEndpoints,
   eagerEmbedContent,
   embedAllMessages,

package/dist/expo/index.d.mts

@@ -4446,6 +4446,10 @@ declare class Conversation extends Model {
  * Encryption key version type.
  * - "v2": Legacy SHA-256 derived key (for reading enc:v2: data)
  * - "v3": HKDF derived key with domain separation (for new encryption)
+ *
+ * Raw signature bytes (Privy Solana `signMessage` returns a `Uint8Array`) are
+ * not a stored version. Derive them with {@link deriveKeyFromSignatureBytes}.
+ * {@link requestEncryptionKey} still derives v2 and v3 from a hex signature only.
  */
 type EncryptionKeyVersion = "v2" | "v3";
 /**
@@ -4515,6 +4519,25 @@ declare function clearAllEncryptionState(): void;
  * requests, and derived ECDH key pairs (both in-memory and persisted).
  */
 declare function clearAllEncryptionKeys(): void;
+/**
+ * Derives the bytes-native AES key from a raw signature.
+ *
+ * Privy Solana `signMessage` returns a `Uint8Array`. Pass those bytes here.
+ * The signature is never hex-encoded, base58-encoded, or passed through
+ * `String()`. That string round-trip is what made {@link hexToBytes} store
+ * zeros for every non-hex pair and yield a low-entropy AES key.
+ *
+ * This is the derivation for the next key version (`anuma-sdk-aes-gcm-v4`).
+ * {@link requestEncryptionKey} does not install it; v2 and v3 stay on the
+ * hex-string path so existing ciphertext keeps decrypting. The return value
+ * is the same 64-char hex form the in-memory store already uses.
+ *
+ * @param signature - Raw signature bytes. Must be at least 64 bytes.
+ * @returns 32-byte AES-GCM key as hex, without a `0x` prefix.
+ * @throws Error when `signature` is shorter than 64 bytes.
+ * @category Encryption
+ */
+declare function deriveKeyFromSignatureBytes(signature: Uint8Array): Promise<string>;
 /**
  * Checks if an encryption key exists in memory for the given wallet address.
  *
@@ -4550,6 +4573,11 @@ interface SignMessageOptions {
 /**
  * Type for the signMessage function that client must provide.
  * This is typically from Privy's useSignMessage hook.
+ *
+ * The resolved value must be a hex signature (`0x`-prefixed or bare). A
+ * non-hex string — including `String(uint8Array)` or a base58 signature —
+ * throws from key derivation instead of becoming a zero-filled AES key.
+ * Raw signature bytes go to {@link deriveKeyFromSignatureBytes}.
  */
 type SignMessageFn = (message: string, options?: SignMessageOptions) => Promise<string>;
 /**
@@ -11328,4 +11356,4 @@ declare function createNotionTools(getAccessToken: () => string | null, requestN
  */
 declare function createNotionProxyTools(callMcp: NotionMcpCaller): ToolConfig[];
 
-export { type AutoExtractMessage, type AutoExtractor, type Budget, CHUNKS_DISCARDED_ORIGIN, type CachedChunkVectors, type CachedServerTools, Conversation as ChatConversation, Message as ChatMessage, type ChatRole, type ChunkVectorCache, type ChunkingOptions, type ConsolidationAction, type ConsolidationFallbackReason, type ConversationMemoryInput, ConversationMemory as ConversationMemoryModel, type ConversationMemoryOperationsContext, type CreateAutoExtractorOptions, type CreateConversationOptions, type CreateDecaySweeperOptions, type CreateMessageOptions, type CreateVaultFolderOptions, type CreateVaultMemoryOptions, type CryptoPriceClassification, type CryptoPricePreProcessorOptions, DEFAULT_CACHE_EXPIRATION_MS, DEFAULT_CHUNK_CACHE_SIZE, DEFAULT_CHUNK_OVERLAP, DEFAULT_CHUNK_SIZE, DEFAULT_DECAY_POLICY, DEFAULT_MAX_CLASSIFIER_CALLS_PER_SWEEP, DEFAULT_MIN_CHUNK_SIZE, DEFAULT_PROFILE_FACETS, DEFAULT_PROFILE_FACT_TYPE_WEIGHTS, DEFAULT_PROFILE_PROOF_ALPHA, DEFAULT_PROFILE_TREND_MULTIPLIERS, DEFAULT_VAULT_CACHE_SIZE, DatabaseManager, type DatabaseManagerLogger, type DatabaseManagerOptions, type DecayCandidateRaw, type DecayClassifier, type DecayInput, type DecayPolicy, type DecaySweepResult, type DecaySweeper, type DecayVerdict, type DurableAutoExtractorOptions, ENTITY_FANOUT, type EmbeddedWalletSignerFn, EncryptionKeyMissingError, type ExtractFactsOptions, type ExtractOutcome, type ExtractedCandidate, type ExtractedEntity, type ExtractionCursorStore, type ExtractionFunnel, type ExtractionTimings, type FactType, type FileMetadata, type FileProcessingReason, type FileProcessingStatus, type FlushResult, type GetConversationsPageOptions, type GetMessagesPageOptions, type GraphTraversalOptions, HARD_DELETE_WINDOW_MS, INFERENCE_ID_HEADER, type InjectionClassifierOptions, type InjectionReason, type LazyStoredConversation, type LlmDecayClassifierOptions, type LlmNeighborRefinerOptions, type Logger, LoggerProvider, type LoggerProviderProps, MAX_HOPS, MEDIUM_TTL_MS, type ManualFactType, type MemoriesNeedingTopicExtraction, type MemoryContextItem, type MemoryContextLane, type MemoryContextOptions, type MemoryContextResult, type EmbeddingOptions as MemoryEngineEmbeddingOptions, type MemoryEngineResult, type MemoryEngineSearchOptions, type MemoryExtractedEvent, type MemoryKind, type MemoryQuarantinedEvent, type MemoryToVerify, type MemoryVaultSearchOptions, type MemoryVaultToolOptions, type MemoryVerification, type MessageRedactionResult, type MessageSkeleton, NEVER_TTL_MS, NODE_BUDGET, NOTION_OAUTH_CONFIG, type NeighborRefiner, type NotionAuthUrlParams, type NotionClientRegistration, type NotionExchangeCodeParams, type NotionMcpCaller, type NotionOAuthEndpoints, type NotionPKCEChallenge, type NotionRefreshTokenParams, type NotionTokenResponse, type NowSource, type ObservationTrend, type ObservationTrendInput, PAST_EVENT_GRACE_MS, PII_PATTERNS, PROFILE_DOC_VERSION, type PhotoIngestResult, type PhotoMediaRef, type PiiCategory, type PiiMatch, type PiiPattern, PiiRedactor, type PiiRedactorOptions, type PlatformStorage, type PortalLlmAuth, type PortalLlmFailure, type PortalLlmFailureReason, type ProfileConfigFingerprint, type ProfileDoc, type ProfileFacet, type ProfileFacetKey, type ProfileSalienceInput, type ProfileSection, type PromptPreProcessor, type PromptPreProcessorContext, type PublishedPhotoMemory, type QuantizedEmbedding, type QuarantinedMemoryInfo, QueueManager, type QueueStatus, RECALL_MAX_LIMIT, RECALL_TOOL_NAME, type RankableVaultMemory, type RankedMemory, type RankedProfileCandidate, type RecallContext, type RecallDegradation, type RecallDiagnostics, type RecallEmptyReason, type RecallOptions, type RecallResult, type RecallToolCallbacks, type RecallToolOptions, type RecencyOptions, type RedactionResult, type ReflectOptions, type ReflectResult, type RequestEncryptionKeyOptions, RerankerUnavailableError, type ResumeStreamOptions, type ResumeStreamResult, type ResumeStreamWithStorageResult, type RetainAction, type RetainContext, type RetainOptions, type RetainResult, type RetainSource, SDK_SCHEMA_VERSION, SHORT_TTL_MS, STREAM_RESUMABLE_HEADER, type ScoreBreakdown, type ScoreProfileSalienceOptions, type ScreenResult, type ScreenedCandidate, type SearchSource, type SendMessageWithStorageArgs, type SendMessageWithStorageDetachedResult, type SendMessageWithStorageResult, type ServerToolsOptions, type ServerToolsResponse, type SignMessageFn, type StockPriceClassification, type StockPricePreProcessorOptions, type ChatCompletionUsage as StoredChatCompletionUsage, type StoredConversation, type StoredConversationMemory, type StoredMessage, type StoredMessageWithSimilarity, type StoredVaultFolder, VaultFolder as StoredVaultFolderModel, type StoredVaultMemory, VaultMemory as StoredVaultMemoryModel, StreamExpiredError, type StreamMetaEvent, type StreamResumeHandle, type StreamSmoothingConfig, type SynthesizeProfileOptions, TOOL_RESULT_ORIGIN, TOPICS_EXTRACTION_VERSION, TOPIC_EXTRACTION_BATCH_SIZE, TREND_RECENT_WINDOW_DAYS, TREND_STALE_WINDOW_DAYS, type TextChunk, type TopicExtractOptions, type TopicExtractionInput, type TopicExtractionRunResult, type TopicSkipReason, type TurnCompleteEvent, type TurnSkippedEvent, type UncheckedReason, type UnverifiableReason, type UpdateVaultFolderOptions, type UpdateVaultMemoryOptions, type UseChatStorageOptions, type UseChatStorageResult, type UseCreditsOptions, type UseCreditsResult, type UseModelsOptions, type UseModelsResult, VAULT_SIZE_HOP_CAP, type VaultEmbeddingCache, type VaultEmbeddingExpectation, type VaultFolderOperationsContext, type VaultMemoryOperationsContext, type VaultMemoryVisibility, type VaultMemoryWriter, type VaultSaveOperation, type VaultSearchResult, type VaultWriteAction, type VaultWriteInput, type VaultWriteOutcome, type VerificationSources, type VerifyMemoriesForPublishOptions, WalletPoller, type WeatherClassification, type WeatherPreProcessorOptions, type WebSearchClassification, type WebSearchPreProcessorOptions, addConversationMemoriesOp, archiveVaultMemoryOp, assembleMemoryContext, attachFileContextToLastUserMessage, backfillMemoryTopicsOp, buildAttachedFilesText, buildNotionAuthUrl, capHopsForDensity, chatStorageMigrations, chatStorageSchema, chunkAndEmbedAllMessages, chunkAndEmbedMessage, chunkText, classifyCryptoPrice, classifyCryptoPriceBatch, classifyDecay, classifyInjectionCandidates, classifyObservationTrend, classifyStockPrice, classifyStockPriceBatch, classifyWeather, classifyWeatherBatch, classifyWebSearch, classifyWebSearchBatch, clearAllEncryptionKeys, clearAllEncryptionState, clearConversationMemoriesOp, clearEncryptionKey, clearLazyTitleCache, clearServerToolsCache, consoleLogger, conversationMemoryToStored, cosineInt8, createAutoExtractor, createChunkVectorCache, createCryptoPricePreProcessor, createDecaySweeper, createDurableAutoExtractor, createLlmDecayClassifier, createLlmNeighborRefiner, createMemoryEngineTool, createMemoryVaultSearchTool, createMemoryVaultTool, createMessageSourceResolver, createNotionProxyTools, createNotionTools, createPlatformCursorStore, createRecallTool, createStockPricePreProcessor, createStreamingDeAnonymizer, createVaultEmbeddingCache, createVaultFolderOp, createVaultMemoriesBatchOp, createVaultMemoryOp, createWeatherPreProcessor, createWebSearchPreProcessor, decodeChunkVector, decryptConversationTitle, deleteAllVaultMemoriesForUserOp, deleteMessageOp, deleteVaultFolderOp, deleteVaultMemoryOp, dequantizeEmbedding, discoverNotionOAuthEndpoints, eagerEmbedContent, embedAllMessages, embedMessage, encodeChunkVector, ensureDefaultFoldersOp, exchangeNotionCode, extractAndLinkEntitiesForMemoriesOp, extractAndRetain, extractEntitiesForMemories, extractFacts, formatFileProcessingNotes, generateConversationId, generateEmbedding, generateEmbeddings, generateNotionPKCE, getAllVaultFoldersOp, getAllVaultMemoriesOp, getAllVaultMemoryContentsOp, getCachedServerTools, getConversationMemoriesOp, getConversationsByProjectLazyOp, getConversationsLazyOp, getConversationsPageOp, getDecayCandidatesRawOp, getLogger, getMemoriesNeedingTopicExtractionOp, getServerTools, getUnfiledVaultMemoriesOp, getVaultFolderMemoryCountOp, getVaultMemoriesByIdsOp, getVaultMemoryOp, getVaultRankingProjectionsOp, hardDeleteDecayedOp, hasEncryptionKey, ingestPublishedPhotoMemoriesOp, injectionSignatureCatalog, isAttachedFilesText, isDegradedTopicSkip, isEncrypted, isPiiRedactor, isRerankerAvailable, maskScopedEmbeddingCache, moveMemoriesToFolderOp, noopLogger, onKeyAvailable, parseMedia, preEmbedVaultMemories, quantizeEmbedding, queueManager, rankProfileCandidates, recall, reflect, refreshEncryptionKeyIfMatches, refreshNotionAccessToken, registerNotionClient, relinkMemoryTopicsOp, requestEncryptionKey, resolvePiiRedactor, restoreVaultMemoryOp, resumeStream, retain, scoreProfileSalience, screenCandidatesForInjection, sdkMigrations, sdkModelClasses, sdkSchema, searchVaultMemories, seedEncryptionKeys, setLogger, setMemoryVisibilityOp, shouldChunkMessage, shouldRecallMemory, stampTopicsExtractedAtOp, streamCancelPath, streamReplayPath, summarizeObservationTrends, supersedeVaultMemoryOp, synthesizeProfile, traverseGraphLane, ttlForType, updateVaultFolderContextOp, updateVaultFolderOp, updateVaultMemoryEmbeddingOp, updateVaultMemoryOp, upsertMessageOp, useChat, useChatStorage, useCredits, useEncryption, useModels, verifyMemoriesForPublish, xhrTransport };
+export { type AutoExtractMessage, type AutoExtractor, type Budget, CHUNKS_DISCARDED_ORIGIN, type CachedChunkVectors, type CachedServerTools, Conversation as ChatConversation, Message as ChatMessage, type ChatRole, type ChunkVectorCache, type ChunkingOptions, type ConsolidationAction, type ConsolidationFallbackReason, type ConversationMemoryInput, ConversationMemory as ConversationMemoryModel, type ConversationMemoryOperationsContext, type CreateAutoExtractorOptions, type CreateConversationOptions, type CreateDecaySweeperOptions, type CreateMessageOptions, type CreateVaultFolderOptions, type CreateVaultMemoryOptions, type CryptoPriceClassification, type CryptoPricePreProcessorOptions, DEFAULT_CACHE_EXPIRATION_MS, DEFAULT_CHUNK_CACHE_SIZE, DEFAULT_CHUNK_OVERLAP, DEFAULT_CHUNK_SIZE, DEFAULT_DECAY_POLICY, DEFAULT_MAX_CLASSIFIER_CALLS_PER_SWEEP, DEFAULT_MIN_CHUNK_SIZE, DEFAULT_PROFILE_FACETS, DEFAULT_PROFILE_FACT_TYPE_WEIGHTS, DEFAULT_PROFILE_PROOF_ALPHA, DEFAULT_PROFILE_TREND_MULTIPLIERS, DEFAULT_VAULT_CACHE_SIZE, DatabaseManager, type DatabaseManagerLogger, type DatabaseManagerOptions, type DecayCandidateRaw, type DecayClassifier, type DecayInput, type DecayPolicy, type DecaySweepResult, type DecaySweeper, type DecayVerdict, type DurableAutoExtractorOptions, ENTITY_FANOUT, type EmbeddedWalletSignerFn, EncryptionKeyMissingError, type ExtractFactsOptions, type ExtractOutcome, type ExtractedCandidate, type ExtractedEntity, type ExtractionCursorStore, type ExtractionFunnel, type ExtractionTimings, type FactType, type FileMetadata, type FileProcessingReason, type FileProcessingStatus, type FlushResult, type GetConversationsPageOptions, type GetMessagesPageOptions, type GraphTraversalOptions, HARD_DELETE_WINDOW_MS, INFERENCE_ID_HEADER, type InjectionClassifierOptions, type InjectionReason, type LazyStoredConversation, type LlmDecayClassifierOptions, type LlmNeighborRefinerOptions, type Logger, LoggerProvider, type LoggerProviderProps, MAX_HOPS, MEDIUM_TTL_MS, type ManualFactType, type MemoriesNeedingTopicExtraction, type MemoryContextItem, type MemoryContextLane, type MemoryContextOptions, type MemoryContextResult, type EmbeddingOptions as MemoryEngineEmbeddingOptions, type MemoryEngineResult, type MemoryEngineSearchOptions, type MemoryExtractedEvent, type MemoryKind, type MemoryQuarantinedEvent, type MemoryToVerify, type MemoryVaultSearchOptions, type MemoryVaultToolOptions, type MemoryVerification, type MessageRedactionResult, type MessageSkeleton, NEVER_TTL_MS, NODE_BUDGET, NOTION_OAUTH_CONFIG, type NeighborRefiner, type NotionAuthUrlParams, type NotionClientRegistration, type NotionExchangeCodeParams, type NotionMcpCaller, type NotionOAuthEndpoints, type NotionPKCEChallenge, type NotionRefreshTokenParams, type NotionTokenResponse, type NowSource, type ObservationTrend, type ObservationTrendInput, PAST_EVENT_GRACE_MS, PII_PATTERNS, PROFILE_DOC_VERSION, type PhotoIngestResult, type PhotoMediaRef, type PiiCategory, type PiiMatch, type PiiPattern, PiiRedactor, type PiiRedactorOptions, type PlatformStorage, type PortalLlmAuth, type PortalLlmFailure, type PortalLlmFailureReason, type ProfileConfigFingerprint, type ProfileDoc, type ProfileFacet, type ProfileFacetKey, type ProfileSalienceInput, type ProfileSection, type PromptPreProcessor, type PromptPreProcessorContext, type PublishedPhotoMemory, type QuantizedEmbedding, type QuarantinedMemoryInfo, QueueManager, type QueueStatus, RECALL_MAX_LIMIT, RECALL_TOOL_NAME, type RankableVaultMemory, type RankedMemory, type RankedProfileCandidate, type RecallContext, type RecallDegradation, type RecallDiagnostics, type RecallEmptyReason, type RecallOptions, type RecallResult, type RecallToolCallbacks, type RecallToolOptions, type RecencyOptions, type RedactionResult, type ReflectOptions, type ReflectResult, type RequestEncryptionKeyOptions, RerankerUnavailableError, type ResumeStreamOptions, type ResumeStreamResult, type ResumeStreamWithStorageResult, type RetainAction, type RetainContext, type RetainOptions, type RetainResult, type RetainSource, SDK_SCHEMA_VERSION, SHORT_TTL_MS, STREAM_RESUMABLE_HEADER, type ScoreBreakdown, type ScoreProfileSalienceOptions, type ScreenResult, type ScreenedCandidate, type SearchSource, type SendMessageWithStorageArgs, type SendMessageWithStorageDetachedResult, type SendMessageWithStorageResult, type ServerToolsOptions, type ServerToolsResponse, type SignMessageFn, type StockPriceClassification, type StockPricePreProcessorOptions, type ChatCompletionUsage as StoredChatCompletionUsage, type StoredConversation, type StoredConversationMemory, type StoredMessage, type StoredMessageWithSimilarity, type StoredVaultFolder, VaultFolder as StoredVaultFolderModel, type StoredVaultMemory, VaultMemory as StoredVaultMemoryModel, StreamExpiredError, type StreamMetaEvent, type StreamResumeHandle, type StreamSmoothingConfig, type SynthesizeProfileOptions, TOOL_RESULT_ORIGIN, TOPICS_EXTRACTION_VERSION, TOPIC_EXTRACTION_BATCH_SIZE, TREND_RECENT_WINDOW_DAYS, TREND_STALE_WINDOW_DAYS, type TextChunk, type TopicExtractOptions, type TopicExtractionInput, type TopicExtractionRunResult, type TopicSkipReason, type TurnCompleteEvent, type TurnSkippedEvent, type UncheckedReason, type UnverifiableReason, type UpdateVaultFolderOptions, type UpdateVaultMemoryOptions, type UseChatStorageOptions, type UseChatStorageResult, type UseCreditsOptions, type UseCreditsResult, type UseModelsOptions, type UseModelsResult, VAULT_SIZE_HOP_CAP, type VaultEmbeddingCache, type VaultEmbeddingExpectation, type VaultFolderOperationsContext, type VaultMemoryOperationsContext, type VaultMemoryVisibility, type VaultMemoryWriter, type VaultSaveOperation, type VaultSearchResult, type VaultWriteAction, type VaultWriteInput, type VaultWriteOutcome, type VerificationSources, type VerifyMemoriesForPublishOptions, WalletPoller, type WeatherClassification, type WeatherPreProcessorOptions, type WebSearchClassification, type WebSearchPreProcessorOptions, addConversationMemoriesOp, archiveVaultMemoryOp, assembleMemoryContext, attachFileContextToLastUserMessage, backfillMemoryTopicsOp, buildAttachedFilesText, buildNotionAuthUrl, capHopsForDensity, chatStorageMigrations, chatStorageSchema, chunkAndEmbedAllMessages, chunkAndEmbedMessage, chunkText, classifyCryptoPrice, classifyCryptoPriceBatch, classifyDecay, classifyInjectionCandidates, classifyObservationTrend, classifyStockPrice, classifyStockPriceBatch, classifyWeather, classifyWeatherBatch, classifyWebSearch, classifyWebSearchBatch, clearAllEncryptionKeys, clearAllEncryptionState, clearConversationMemoriesOp, clearEncryptionKey, clearLazyTitleCache, clearServerToolsCache, consoleLogger, conversationMemoryToStored, cosineInt8, createAutoExtractor, createChunkVectorCache, createCryptoPricePreProcessor, createDecaySweeper, createDurableAutoExtractor, createLlmDecayClassifier, createLlmNeighborRefiner, createMemoryEngineTool, createMemoryVaultSearchTool, createMemoryVaultTool, createMessageSourceResolver, createNotionProxyTools, createNotionTools, createPlatformCursorStore, createRecallTool, createStockPricePreProcessor, createStreamingDeAnonymizer, createVaultEmbeddingCache, createVaultFolderOp, createVaultMemoriesBatchOp, createVaultMemoryOp, createWeatherPreProcessor, createWebSearchPreProcessor, decodeChunkVector, decryptConversationTitle, deleteAllVaultMemoriesForUserOp, deleteMessageOp, deleteVaultFolderOp, deleteVaultMemoryOp, dequantizeEmbedding, deriveKeyFromSignatureBytes, discoverNotionOAuthEndpoints, eagerEmbedContent, embedAllMessages, embedMessage, encodeChunkVector, ensureDefaultFoldersOp, exchangeNotionCode, extractAndLinkEntitiesForMemoriesOp, extractAndRetain, extractEntitiesForMemories, extractFacts, formatFileProcessingNotes, generateConversationId, generateEmbedding, generateEmbeddings, generateNotionPKCE, getAllVaultFoldersOp, getAllVaultMemoriesOp, getAllVaultMemoryContentsOp, getCachedServerTools, getConversationMemoriesOp, getConversationsByProjectLazyOp, getConversationsLazyOp, getConversationsPageOp, getDecayCandidatesRawOp, getLogger, getMemoriesNeedingTopicExtractionOp, getServerTools, getUnfiledVaultMemoriesOp, getVaultFolderMemoryCountOp, getVaultMemoriesByIdsOp, getVaultMemoryOp, getVaultRankingProjectionsOp, hardDeleteDecayedOp, hasEncryptionKey, ingestPublishedPhotoMemoriesOp, injectionSignatureCatalog, isAttachedFilesText, isDegradedTopicSkip, isEncrypted, isPiiRedactor, isRerankerAvailable, maskScopedEmbeddingCache, moveMemoriesToFolderOp, noopLogger, onKeyAvailable, parseMedia, preEmbedVaultMemories, quantizeEmbedding, queueManager, rankProfileCandidates, recall, reflect, refreshEncryptionKeyIfMatches, refreshNotionAccessToken, registerNotionClient, relinkMemoryTopicsOp, requestEncryptionKey, resolvePiiRedactor, restoreVaultMemoryOp, resumeStream, retain, scoreProfileSalience, screenCandidatesForInjection, sdkMigrations, sdkModelClasses, sdkSchema, searchVaultMemories, seedEncryptionKeys, setLogger, setMemoryVisibilityOp, shouldChunkMessage, shouldRecallMemory, stampTopicsExtractedAtOp, streamCancelPath, streamReplayPath, summarizeObservationTrends, supersedeVaultMemoryOp, synthesizeProfile, traverseGraphLane, ttlForType, updateVaultFolderContextOp, updateVaultFolderOp, updateVaultMemoryEmbeddingOp, updateVaultMemoryOp, upsertMessageOp, useChat, useChatStorage, useCredits, useEncryption, useModels, verifyMemoriesForPublish, xhrTransport };

package/dist/expo/index.d.ts

@@ -4446,6 +4446,10 @@ declare class Conversation extends Model {
  * Encryption key version type.
  * - "v2": Legacy SHA-256 derived key (for reading enc:v2: data)
  * - "v3": HKDF derived key with domain separation (for new encryption)
+ *
+ * Raw signature bytes (Privy Solana `signMessage` returns a `Uint8Array`) are
+ * not a stored version. Derive them with {@link deriveKeyFromSignatureBytes}.
+ * {@link requestEncryptionKey} still derives v2 and v3 from a hex signature only.
  */
 type EncryptionKeyVersion = "v2" | "v3";
 /**
@@ -4515,6 +4519,25 @@ declare function clearAllEncryptionState(): void;
  * requests, and derived ECDH key pairs (both in-memory and persisted).
  */
 declare function clearAllEncryptionKeys(): void;
+/**
+ * Derives the bytes-native AES key from a raw signature.
+ *
+ * Privy Solana `signMessage` returns a `Uint8Array`. Pass those bytes here.
+ * The signature is never hex-encoded, base58-encoded, or passed through
+ * `String()`. That string round-trip is what made {@link hexToBytes} store
+ * zeros for every non-hex pair and yield a low-entropy AES key.
+ *
+ * This is the derivation for the next key version (`anuma-sdk-aes-gcm-v4`).
+ * {@link requestEncryptionKey} does not install it; v2 and v3 stay on the
+ * hex-string path so existing ciphertext keeps decrypting. The return value
+ * is the same 64-char hex form the in-memory store already uses.
+ *
+ * @param signature - Raw signature bytes. Must be at least 64 bytes.
+ * @returns 32-byte AES-GCM key as hex, without a `0x` prefix.
+ * @throws Error when `signature` is shorter than 64 bytes.
+ * @category Encryption
+ */
+declare function deriveKeyFromSignatureBytes(signature: Uint8Array): Promise<string>;
 /**
  * Checks if an encryption key exists in memory for the given wallet address.
  *
@@ -4550,6 +4573,11 @@ interface SignMessageOptions {
 /**
  * Type for the signMessage function that client must provide.
  * This is typically from Privy's useSignMessage hook.
+ *
+ * The resolved value must be a hex signature (`0x`-prefixed or bare). A
+ * non-hex string — including `String(uint8Array)` or a base58 signature —
+ * throws from key derivation instead of becoming a zero-filled AES key.
+ * Raw signature bytes go to {@link deriveKeyFromSignatureBytes}.
  */
 type SignMessageFn = (message: string, options?: SignMessageOptions) => Promise<string>;
 /**
@@ -11328,4 +11356,4 @@ declare function createNotionTools(getAccessToken: () => string | null, requestN
  */
 declare function createNotionProxyTools(callMcp: NotionMcpCaller): ToolConfig[];
 
-export { type AutoExtractMessage, type AutoExtractor, type Budget, CHUNKS_DISCARDED_ORIGIN, type CachedChunkVectors, type CachedServerTools, Conversation as ChatConversation, Message as ChatMessage, type ChatRole, type ChunkVectorCache, type ChunkingOptions, type ConsolidationAction, type ConsolidationFallbackReason, type ConversationMemoryInput, ConversationMemory as ConversationMemoryModel, type ConversationMemoryOperationsContext, type CreateAutoExtractorOptions, type CreateConversationOptions, type CreateDecaySweeperOptions, type CreateMessageOptions, type CreateVaultFolderOptions, type CreateVaultMemoryOptions, type CryptoPriceClassification, type CryptoPricePreProcessorOptions, DEFAULT_CACHE_EXPIRATION_MS, DEFAULT_CHUNK_CACHE_SIZE, DEFAULT_CHUNK_OVERLAP, DEFAULT_CHUNK_SIZE, DEFAULT_DECAY_POLICY, DEFAULT_MAX_CLASSIFIER_CALLS_PER_SWEEP, DEFAULT_MIN_CHUNK_SIZE, DEFAULT_PROFILE_FACETS, DEFAULT_PROFILE_FACT_TYPE_WEIGHTS, DEFAULT_PROFILE_PROOF_ALPHA, DEFAULT_PROFILE_TREND_MULTIPLIERS, DEFAULT_VAULT_CACHE_SIZE, DatabaseManager, type DatabaseManagerLogger, type DatabaseManagerOptions, type DecayCandidateRaw, type DecayClassifier, type DecayInput, type DecayPolicy, type DecaySweepResult, type DecaySweeper, type DecayVerdict, type DurableAutoExtractorOptions, ENTITY_FANOUT, type EmbeddedWalletSignerFn, EncryptionKeyMissingError, type ExtractFactsOptions, type ExtractOutcome, type ExtractedCandidate, type ExtractedEntity, type ExtractionCursorStore, type ExtractionFunnel, type ExtractionTimings, type FactType, type FileMetadata, type FileProcessingReason, type FileProcessingStatus, type FlushResult, type GetConversationsPageOptions, type GetMessagesPageOptions, type GraphTraversalOptions, HARD_DELETE_WINDOW_MS, INFERENCE_ID_HEADER, type InjectionClassifierOptions, type InjectionReason, type LazyStoredConversation, type LlmDecayClassifierOptions, type LlmNeighborRefinerOptions, type Logger, LoggerProvider, type LoggerProviderProps, MAX_HOPS, MEDIUM_TTL_MS, type ManualFactType, type MemoriesNeedingTopicExtraction, type MemoryContextItem, type MemoryContextLane, type MemoryContextOptions, type MemoryContextResult, type EmbeddingOptions as MemoryEngineEmbeddingOptions, type MemoryEngineResult, type MemoryEngineSearchOptions, type MemoryExtractedEvent, type MemoryKind, type MemoryQuarantinedEvent, type MemoryToVerify, type MemoryVaultSearchOptions, type MemoryVaultToolOptions, type MemoryVerification, type MessageRedactionResult, type MessageSkeleton, NEVER_TTL_MS, NODE_BUDGET, NOTION_OAUTH_CONFIG, type NeighborRefiner, type NotionAuthUrlParams, type NotionClientRegistration, type NotionExchangeCodeParams, type NotionMcpCaller, type NotionOAuthEndpoints, type NotionPKCEChallenge, type NotionRefreshTokenParams, type NotionTokenResponse, type NowSource, type ObservationTrend, type ObservationTrendInput, PAST_EVENT_GRACE_MS, PII_PATTERNS, PROFILE_DOC_VERSION, type PhotoIngestResult, type PhotoMediaRef, type PiiCategory, type PiiMatch, type PiiPattern, PiiRedactor, type PiiRedactorOptions, type PlatformStorage, type PortalLlmAuth, type PortalLlmFailure, type PortalLlmFailureReason, type ProfileConfigFingerprint, type ProfileDoc, type ProfileFacet, type ProfileFacetKey, type ProfileSalienceInput, type ProfileSection, type PromptPreProcessor, type PromptPreProcessorContext, type PublishedPhotoMemory, type QuantizedEmbedding, type QuarantinedMemoryInfo, QueueManager, type QueueStatus, RECALL_MAX_LIMIT, RECALL_TOOL_NAME, type RankableVaultMemory, type RankedMemory, type RankedProfileCandidate, type RecallContext, type RecallDegradation, type RecallDiagnostics, type RecallEmptyReason, type RecallOptions, type RecallResult, type RecallToolCallbacks, type RecallToolOptions, type RecencyOptions, type RedactionResult, type ReflectOptions, type ReflectResult, type RequestEncryptionKeyOptions, RerankerUnavailableError, type ResumeStreamOptions, type ResumeStreamResult, type ResumeStreamWithStorageResult, type RetainAction, type RetainContext, type RetainOptions, type RetainResult, type RetainSource, SDK_SCHEMA_VERSION, SHORT_TTL_MS, STREAM_RESUMABLE_HEADER, type ScoreBreakdown, type ScoreProfileSalienceOptions, type ScreenResult, type ScreenedCandidate, type SearchSource, type SendMessageWithStorageArgs, type SendMessageWithStorageDetachedResult, type SendMessageWithStorageResult, type ServerToolsOptions, type ServerToolsResponse, type SignMessageFn, type StockPriceClassification, type StockPricePreProcessorOptions, type ChatCompletionUsage as StoredChatCompletionUsage, type StoredConversation, type StoredConversationMemory, type StoredMessage, type StoredMessageWithSimilarity, type StoredVaultFolder, VaultFolder as StoredVaultFolderModel, type StoredVaultMemory, VaultMemory as StoredVaultMemoryModel, StreamExpiredError, type StreamMetaEvent, type StreamResumeHandle, type StreamSmoothingConfig, type SynthesizeProfileOptions, TOOL_RESULT_ORIGIN, TOPICS_EXTRACTION_VERSION, TOPIC_EXTRACTION_BATCH_SIZE, TREND_RECENT_WINDOW_DAYS, TREND_STALE_WINDOW_DAYS, type TextChunk, type TopicExtractOptions, type TopicExtractionInput, type TopicExtractionRunResult, type TopicSkipReason, type TurnCompleteEvent, type TurnSkippedEvent, type UncheckedReason, type UnverifiableReason, type UpdateVaultFolderOptions, type UpdateVaultMemoryOptions, type UseChatStorageOptions, type UseChatStorageResult, type UseCreditsOptions, type UseCreditsResult, type UseModelsOptions, type UseModelsResult, VAULT_SIZE_HOP_CAP, type VaultEmbeddingCache, type VaultEmbeddingExpectation, type VaultFolderOperationsContext, type VaultMemoryOperationsContext, type VaultMemoryVisibility, type VaultMemoryWriter, type VaultSaveOperation, type VaultSearchResult, type VaultWriteAction, type VaultWriteInput, type VaultWriteOutcome, type VerificationSources, type VerifyMemoriesForPublishOptions, WalletPoller, type WeatherClassification, type WeatherPreProcessorOptions, type WebSearchClassification, type WebSearchPreProcessorOptions, addConversationMemoriesOp, archiveVaultMemoryOp, assembleMemoryContext, attachFileContextToLastUserMessage, backfillMemoryTopicsOp, buildAttachedFilesText, buildNotionAuthUrl, capHopsForDensity, chatStorageMigrations, chatStorageSchema, chunkAndEmbedAllMessages, chunkAndEmbedMessage, chunkText, classifyCryptoPrice, classifyCryptoPriceBatch, classifyDecay, classifyInjectionCandidates, classifyObservationTrend, classifyStockPrice, classifyStockPriceBatch, classifyWeather, classifyWeatherBatch, classifyWebSearch, classifyWebSearchBatch, clearAllEncryptionKeys, clearAllEncryptionState, clearConversationMemoriesOp, clearEncryptionKey, clearLazyTitleCache, clearServerToolsCache, consoleLogger, conversationMemoryToStored, cosineInt8, createAutoExtractor, createChunkVectorCache, createCryptoPricePreProcessor, createDecaySweeper, createDurableAutoExtractor, createLlmDecayClassifier, createLlmNeighborRefiner, createMemoryEngineTool, createMemoryVaultSearchTool, createMemoryVaultTool, createMessageSourceResolver, createNotionProxyTools, createNotionTools, createPlatformCursorStore, createRecallTool, createStockPricePreProcessor, createStreamingDeAnonymizer, createVaultEmbeddingCache, createVaultFolderOp, createVaultMemoriesBatchOp, createVaultMemoryOp, createWeatherPreProcessor, createWebSearchPreProcessor, decodeChunkVector, decryptConversationTitle, deleteAllVaultMemoriesForUserOp, deleteMessageOp, deleteVaultFolderOp, deleteVaultMemoryOp, dequantizeEmbedding, discoverNotionOAuthEndpoints, eagerEmbedContent, embedAllMessages, embedMessage, encodeChunkVector, ensureDefaultFoldersOp, exchangeNotionCode, extractAndLinkEntitiesForMemoriesOp, extractAndRetain, extractEntitiesForMemories, extractFacts, formatFileProcessingNotes, generateConversationId, generateEmbedding, generateEmbeddings, generateNotionPKCE, getAllVaultFoldersOp, getAllVaultMemoriesOp, getAllVaultMemoryContentsOp, getCachedServerTools, getConversationMemoriesOp, getConversationsByProjectLazyOp, getConversationsLazyOp, getConversationsPageOp, getDecayCandidatesRawOp, getLogger, getMemoriesNeedingTopicExtractionOp, getServerTools, getUnfiledVaultMemoriesOp, getVaultFolderMemoryCountOp, getVaultMemoriesByIdsOp, getVaultMemoryOp, getVaultRankingProjectionsOp, hardDeleteDecayedOp, hasEncryptionKey, ingestPublishedPhotoMemoriesOp, injectionSignatureCatalog, isAttachedFilesText, isDegradedTopicSkip, isEncrypted, isPiiRedactor, isRerankerAvailable, maskScopedEmbeddingCache, moveMemoriesToFolderOp, noopLogger, onKeyAvailable, parseMedia, preEmbedVaultMemories, quantizeEmbedding, queueManager, rankProfileCandidates, recall, reflect, refreshEncryptionKeyIfMatches, refreshNotionAccessToken, registerNotionClient, relinkMemoryTopicsOp, requestEncryptionKey, resolvePiiRedactor, restoreVaultMemoryOp, resumeStream, retain, scoreProfileSalience, screenCandidatesForInjection, sdkMigrations, sdkModelClasses, sdkSchema, searchVaultMemories, seedEncryptionKeys, setLogger, setMemoryVisibilityOp, shouldChunkMessage, shouldRecallMemory, stampTopicsExtractedAtOp, streamCancelPath, streamReplayPath, summarizeObservationTrends, supersedeVaultMemoryOp, synthesizeProfile, traverseGraphLane, ttlForType, updateVaultFolderContextOp, updateVaultFolderOp, updateVaultMemoryEmbeddingOp, updateVaultMemoryOp, upsertMessageOp, useChat, useChatStorage, useCredits, useEncryption, useModels, verifyMemoriesForPublish, xhrTransport };
+export { type AutoExtractMessage, type AutoExtractor, type Budget, CHUNKS_DISCARDED_ORIGIN, type CachedChunkVectors, type CachedServerTools, Conversation as ChatConversation, Message as ChatMessage, type ChatRole, type ChunkVectorCache, type ChunkingOptions, type ConsolidationAction, type ConsolidationFallbackReason, type ConversationMemoryInput, ConversationMemory as ConversationMemoryModel, type ConversationMemoryOperationsContext, type CreateAutoExtractorOptions, type CreateConversationOptions, type CreateDecaySweeperOptions, type CreateMessageOptions, type CreateVaultFolderOptions, type CreateVaultMemoryOptions, type CryptoPriceClassification, type CryptoPricePreProcessorOptions, DEFAULT_CACHE_EXPIRATION_MS, DEFAULT_CHUNK_CACHE_SIZE, DEFAULT_CHUNK_OVERLAP, DEFAULT_CHUNK_SIZE, DEFAULT_DECAY_POLICY, DEFAULT_MAX_CLASSIFIER_CALLS_PER_SWEEP, DEFAULT_MIN_CHUNK_SIZE, DEFAULT_PROFILE_FACETS, DEFAULT_PROFILE_FACT_TYPE_WEIGHTS, DEFAULT_PROFILE_PROOF_ALPHA, DEFAULT_PROFILE_TREND_MULTIPLIERS, DEFAULT_VAULT_CACHE_SIZE, DatabaseManager, type DatabaseManagerLogger, type DatabaseManagerOptions, type DecayCandidateRaw, type DecayClassifier, type DecayInput, type DecayPolicy, type DecaySweepResult, type DecaySweeper, type DecayVerdict, type DurableAutoExtractorOptions, ENTITY_FANOUT, type EmbeddedWalletSignerFn, EncryptionKeyMissingError, type ExtractFactsOptions, type ExtractOutcome, type ExtractedCandidate, type ExtractedEntity, type ExtractionCursorStore, type ExtractionFunnel, type ExtractionTimings, type FactType, type FileMetadata, type FileProcessingReason, type FileProcessingStatus, type FlushResult, type GetConversationsPageOptions, type GetMessagesPageOptions, type GraphTraversalOptions, HARD_DELETE_WINDOW_MS, INFERENCE_ID_HEADER, type InjectionClassifierOptions, type InjectionReason, type LazyStoredConversation, type LlmDecayClassifierOptions, type LlmNeighborRefinerOptions, type Logger, LoggerProvider, type LoggerProviderProps, MAX_HOPS, MEDIUM_TTL_MS, type ManualFactType, type MemoriesNeedingTopicExtraction, type MemoryContextItem, type MemoryContextLane, type MemoryContextOptions, type MemoryContextResult, type EmbeddingOptions as MemoryEngineEmbeddingOptions, type MemoryEngineResult, type MemoryEngineSearchOptions, type MemoryExtractedEvent, type MemoryKind, type MemoryQuarantinedEvent, type MemoryToVerify, type MemoryVaultSearchOptions, type MemoryVaultToolOptions, type MemoryVerification, type MessageRedactionResult, type MessageSkeleton, NEVER_TTL_MS, NODE_BUDGET, NOTION_OAUTH_CONFIG, type NeighborRefiner, type NotionAuthUrlParams, type NotionClientRegistration, type NotionExchangeCodeParams, type NotionMcpCaller, type NotionOAuthEndpoints, type NotionPKCEChallenge, type NotionRefreshTokenParams, type NotionTokenResponse, type NowSource, type ObservationTrend, type ObservationTrendInput, PAST_EVENT_GRACE_MS, PII_PATTERNS, PROFILE_DOC_VERSION, type PhotoIngestResult, type PhotoMediaRef, type PiiCategory, type PiiMatch, type PiiPattern, PiiRedactor, type PiiRedactorOptions, type PlatformStorage, type PortalLlmAuth, type PortalLlmFailure, type PortalLlmFailureReason, type ProfileConfigFingerprint, type ProfileDoc, type ProfileFacet, type ProfileFacetKey, type ProfileSalienceInput, type ProfileSection, type PromptPreProcessor, type PromptPreProcessorContext, type PublishedPhotoMemory, type QuantizedEmbedding, type QuarantinedMemoryInfo, QueueManager, type QueueStatus, RECALL_MAX_LIMIT, RECALL_TOOL_NAME, type RankableVaultMemory, type RankedMemory, type RankedProfileCandidate, type RecallContext, type RecallDegradation, type RecallDiagnostics, type RecallEmptyReason, type RecallOptions, type RecallResult, type RecallToolCallbacks, type RecallToolOptions, type RecencyOptions, type RedactionResult, type ReflectOptions, type ReflectResult, type RequestEncryptionKeyOptions, RerankerUnavailableError, type ResumeStreamOptions, type ResumeStreamResult, type ResumeStreamWithStorageResult, type RetainAction, type RetainContext, type RetainOptions, type RetainResult, type RetainSource, SDK_SCHEMA_VERSION, SHORT_TTL_MS, STREAM_RESUMABLE_HEADER, type ScoreBreakdown, type ScoreProfileSalienceOptions, type ScreenResult, type ScreenedCandidate, type SearchSource, type SendMessageWithStorageArgs, type SendMessageWithStorageDetachedResult, type SendMessageWithStorageResult, type ServerToolsOptions, type ServerToolsResponse, type SignMessageFn, type StockPriceClassification, type StockPricePreProcessorOptions, type ChatCompletionUsage as StoredChatCompletionUsage, type StoredConversation, type StoredConversationMemory, type StoredMessage, type StoredMessageWithSimilarity, type StoredVaultFolder, VaultFolder as StoredVaultFolderModel, type StoredVaultMemory, VaultMemory as StoredVaultMemoryModel, StreamExpiredError, type StreamMetaEvent, type StreamResumeHandle, type StreamSmoothingConfig, type SynthesizeProfileOptions, TOOL_RESULT_ORIGIN, TOPICS_EXTRACTION_VERSION, TOPIC_EXTRACTION_BATCH_SIZE, TREND_RECENT_WINDOW_DAYS, TREND_STALE_WINDOW_DAYS, type TextChunk, type TopicExtractOptions, type TopicExtractionInput, type TopicExtractionRunResult, type TopicSkipReason, type TurnCompleteEvent, type TurnSkippedEvent, type UncheckedReason, type UnverifiableReason, type UpdateVaultFolderOptions, type UpdateVaultMemoryOptions, type UseChatStorageOptions, type UseChatStorageResult, type UseCreditsOptions, type UseCreditsResult, type UseModelsOptions, type UseModelsResult, VAULT_SIZE_HOP_CAP, type VaultEmbeddingCache, type VaultEmbeddingExpectation, type VaultFolderOperationsContext, type VaultMemoryOperationsContext, type VaultMemoryVisibility, type VaultMemoryWriter, type VaultSaveOperation, type VaultSearchResult, type VaultWriteAction, type VaultWriteInput, type VaultWriteOutcome, type VerificationSources, type VerifyMemoriesForPublishOptions, WalletPoller, type WeatherClassification, type WeatherPreProcessorOptions, type WebSearchClassification, type WebSearchPreProcessorOptions, addConversationMemoriesOp, archiveVaultMemoryOp, assembleMemoryContext, attachFileContextToLastUserMessage, backfillMemoryTopicsOp, buildAttachedFilesText, buildNotionAuthUrl, capHopsForDensity, chatStorageMigrations, chatStorageSchema, chunkAndEmbedAllMessages, chunkAndEmbedMessage, chunkText, classifyCryptoPrice, classifyCryptoPriceBatch, classifyDecay, classifyInjectionCandidates, classifyObservationTrend, classifyStockPrice, classifyStockPriceBatch, classifyWeather, classifyWeatherBatch, classifyWebSearch, classifyWebSearchBatch, clearAllEncryptionKeys, clearAllEncryptionState, clearConversationMemoriesOp, clearEncryptionKey, clearLazyTitleCache, clearServerToolsCache, consoleLogger, conversationMemoryToStored, cosineInt8, createAutoExtractor, createChunkVectorCache, createCryptoPricePreProcessor, createDecaySweeper, createDurableAutoExtractor, createLlmDecayClassifier, createLlmNeighborRefiner, createMemoryEngineTool, createMemoryVaultSearchTool, createMemoryVaultTool, createMessageSourceResolver, createNotionProxyTools, createNotionTools, createPlatformCursorStore, createRecallTool, createStockPricePreProcessor, createStreamingDeAnonymizer, createVaultEmbeddingCache, createVaultFolderOp, createVaultMemoriesBatchOp, createVaultMemoryOp, createWeatherPreProcessor, createWebSearchPreProcessor, decodeChunkVector, decryptConversationTitle, deleteAllVaultMemoriesForUserOp, deleteMessageOp, deleteVaultFolderOp, deleteVaultMemoryOp, dequantizeEmbedding, deriveKeyFromSignatureBytes, discoverNotionOAuthEndpoints, eagerEmbedContent, embedAllMessages, embedMessage, encodeChunkVector, ensureDefaultFoldersOp, exchangeNotionCode, extractAndLinkEntitiesForMemoriesOp, extractAndRetain, extractEntitiesForMemories, extractFacts, formatFileProcessingNotes, generateConversationId, generateEmbedding, generateEmbeddings, generateNotionPKCE, getAllVaultFoldersOp, getAllVaultMemoriesOp, getAllVaultMemoryContentsOp, getCachedServerTools, getConversationMemoriesOp, getConversationsByProjectLazyOp, getConversationsLazyOp, getConversationsPageOp, getDecayCandidatesRawOp, getLogger, getMemoriesNeedingTopicExtractionOp, getServerTools, getUnfiledVaultMemoriesOp, getVaultFolderMemoryCountOp, getVaultMemoriesByIdsOp, getVaultMemoryOp, getVaultRankingProjectionsOp, hardDeleteDecayedOp, hasEncryptionKey, ingestPublishedPhotoMemoriesOp, injectionSignatureCatalog, isAttachedFilesText, isDegradedTopicSkip, isEncrypted, isPiiRedactor, isRerankerAvailable, maskScopedEmbeddingCache, moveMemoriesToFolderOp, noopLogger, onKeyAvailable, parseMedia, preEmbedVaultMemories, quantizeEmbedding, queueManager, rankProfileCandidates, recall, reflect, refreshEncryptionKeyIfMatches, refreshNotionAccessToken, registerNotionClient, relinkMemoryTopicsOp, requestEncryptionKey, resolvePiiRedactor, restoreVaultMemoryOp, resumeStream, retain, scoreProfileSalience, screenCandidatesForInjection, sdkMigrations, sdkModelClasses, sdkSchema, searchVaultMemories, seedEncryptionKeys, setLogger, setMemoryVisibilityOp, shouldChunkMessage, shouldRecallMemory, stampTopicsExtractedAtOp, streamCancelPath, streamReplayPath, summarizeObservationTrends, supersedeVaultMemoryOp, synthesizeProfile, traverseGraphLane, ttlForType, updateVaultFolderContextOp, updateVaultFolderOp, updateVaultMemoryEmbeddingOp, updateVaultMemoryOp, upsertMessageOp, useChat, useChatStorage, useCredits, useEncryption, useModels, verifyMemoriesForPublish, xhrTransport };

package/dist/expo/index.mjs

@@ -273,11 +273,32 @@ function clearAllEncryptionState() {
 function clearAllEncryptionKeys() {
   clearAllEncryptionState();
 }
+function hexNibble(code) {
+  if (code >= 48 && code <= 57) return code - 48;
+  if (code >= 65 && code <= 70) return code - 55;
+  if (code >= 97 && code <= 102) return code - 87;
+  return -1;
+}
 function hexToBytes(hex) {
+  if (typeof hex !== "string") {
+    throw new TypeError(
+      "hexToBytes: expected a hex string. Pass raw signature bytes to deriveKeyFromSignatureBytes instead of stringifying them."
+    );
+  }
   const cleanHex = hex.startsWith("0x") ? hex.slice(2) : hex;
+  if (cleanHex.length === 0 || cleanHex.length % 2 !== 0) {
+    throw new Error(
+      `hexToBytes: invalid hex string (expected a non-empty even length, got ${cleanHex.length})`
+    );
+  }
   const bytes = new Uint8Array(cleanHex.length / 2);
   for (let i = 0; i < cleanHex.length; i += 2) {
-    bytes[i / 2] = parseInt(cleanHex.slice(i, i + 2), 16);
+    const hi = hexNibble(cleanHex.charCodeAt(i));
+    const lo = hexNibble(cleanHex.charCodeAt(i + 1));
+    if (hi < 0 || lo < 0) {
+      throw new Error(`hexToBytes: invalid hex string (non-hex character at index ${i})`);
+    }
+    bytes[i / 2] = hi << 4 | lo;
   }
   return bytes;
 }
@@ -289,15 +310,12 @@ var SHARED_TEXT_DECODER = new TextDecoder();
 function isValidWalletAddress(address) {
   return /^0x[a-fA-F0-9]{40}$/.test(address);
 }
-async function deriveKeyFromSignature(signature) {
-  const sigBytes = hexToBytes(signature);
-  const hashBuffer = await crypto.subtle.digest("SHA-256", sigBytes.buffer);
-  const hashBytes = new Uint8Array(hashBuffer);
-  return bytesToHex(hashBytes);
-}
-async function deriveKeyFromSignatureV3(signature) {
-  const sigBytes = hexToBytes(signature);
-  const ikm = await crypto.subtle.digest("SHA-256", sigBytes.buffer);
+var AES_GCM_V3_INFO = "anuma-sdk-aes-gcm-v3";
+var AES_GCM_V4_INFO = "anuma-sdk-aes-gcm-v4";
+var MIN_SIGNATURE_BYTES = 64;
+async function deriveHkdfAesKeyHex(signatureBytes, info) {
+  const sigBytes = new Uint8Array(signatureBytes);
+  const ikm = await crypto.subtle.digest("SHA-256", sigBytes);
   const hkdfKey = await crypto.subtle.importKey("raw", ikm, { name: "HKDF" }, false, [
     "deriveBits"
   ]);
@@ -307,13 +325,32 @@ async function deriveKeyFromSignatureV3(signature) {
       hash: "SHA-256",
       salt: new Uint8Array(32),
       // Zero salt (HKDF spec: uses hash-length zero buffer)
-      info: SHARED_TEXT_ENCODER.encode("anuma-sdk-aes-gcm-v3")
+      info: SHARED_TEXT_ENCODER.encode(info)
     },
     hkdfKey,
     256
   );
   return bytesToHex(new Uint8Array(derivedBits));
 }
+async function deriveKeyFromSignature(signature) {
+  const sigBytes = hexToBytes(signature);
+  const hashBuffer = await crypto.subtle.digest("SHA-256", sigBytes.buffer);
+  return bytesToHex(new Uint8Array(hashBuffer));
+}
+async function deriveKeyFromSignatureV3(signature) {
+  return deriveHkdfAesKeyHex(hexToBytes(signature), AES_GCM_V3_INFO);
+}
+async function deriveKeyFromSignatureBytes(signature) {
+  if (!(signature instanceof Uint8Array)) {
+    throw new TypeError("deriveKeyFromSignatureBytes: expected a Uint8Array signature");
+  }
+  if (signature.byteLength < MIN_SIGNATURE_BYTES) {
+    throw new Error(
+      `deriveKeyFromSignatureBytes: signature must be at least ${MIN_SIGNATURE_BYTES} bytes, got ${signature.byteLength}`
+    );
+  }
+  return deriveHkdfAesKeyHex(signature, AES_GCM_V4_INFO);
+}
 function getStoredKeyPair(address) {
   return keyPairStore.get(address) ?? null;
 }
@@ -331,8 +368,9 @@ async function deriveKeyPairFromSignature(signature, address) {
     {
       name: "HKDF",
       hash: "SHA-256",
+      // EVM addresses are case-insensitive. Base58 is not — this salt stays
+      // behind the EVM address gate in requestKeyPair.
       salt: SHARED_TEXT_ENCODER.encode(address.toLowerCase()),
-      // Wallet address as salt
       info: SHARED_TEXT_ENCODER.encode("ECDH-P256-KeyPair")
       // Context info
     },
@@ -24019,6 +24057,7 @@ export {
   deleteVaultFolderOp,
   deleteVaultMemoryOp,
   dequantizeEmbedding,
+  deriveKeyFromSignatureBytes,
   discoverNotionOAuthEndpoints,
   eagerEmbedContent,
   embedAllMessages,

package/dist/index.cjs

@@ -2916,11 +2916,32 @@ function getStoredKeyByVersion(address, version) {
   const value = version === "v2" ? keys.legacy : keys.current;
   return value ?? null;
 }
+function hexNibble(code) {
+  if (code >= 48 && code <= 57) return code - 48;
+  if (code >= 65 && code <= 70) return code - 55;
+  if (code >= 97 && code <= 102) return code - 87;
+  return -1;
+}
 function hexToBytes(hex) {
+  if (typeof hex !== "string") {
+    throw new TypeError(
+      "hexToBytes: expected a hex string. Pass raw signature bytes to deriveKeyFromSignatureBytes instead of stringifying them."
+    );
+  }
   const cleanHex = hex.startsWith("0x") ? hex.slice(2) : hex;
+  if (cleanHex.length === 0 || cleanHex.length % 2 !== 0) {
+    throw new Error(
+      `hexToBytes: invalid hex string (expected a non-empty even length, got ${cleanHex.length})`
+    );
+  }
   const bytes = new Uint8Array(cleanHex.length / 2);
   for (let i = 0; i < cleanHex.length; i += 2) {
-    bytes[i / 2] = parseInt(cleanHex.slice(i, i + 2), 16);
+    const hi = hexNibble(cleanHex.charCodeAt(i));
+    const lo = hexNibble(cleanHex.charCodeAt(i + 1));
+    if (hi < 0 || lo < 0) {
+      throw new Error(`hexToBytes: invalid hex string (non-hex character at index ${i})`);
+    }
+    bytes[i / 2] = hi << 4 | lo;
   }
   return bytes;
 }

package/dist/index.mjs

@@ -2710,11 +2710,32 @@ function getStoredKeyByVersion(address, version) {
   const value = version === "v2" ? keys.legacy : keys.current;
   return value ?? null;
 }
+function hexNibble(code) {
+  if (code >= 48 && code <= 57) return code - 48;
+  if (code >= 65 && code <= 70) return code - 55;
+  if (code >= 97 && code <= 102) return code - 87;
+  return -1;
+}
 function hexToBytes(hex) {
+  if (typeof hex !== "string") {
+    throw new TypeError(
+      "hexToBytes: expected a hex string. Pass raw signature bytes to deriveKeyFromSignatureBytes instead of stringifying them."
+    );
+  }
   const cleanHex = hex.startsWith("0x") ? hex.slice(2) : hex;
+  if (cleanHex.length === 0 || cleanHex.length % 2 !== 0) {
+    throw new Error(
+      `hexToBytes: invalid hex string (expected a non-empty even length, got ${cleanHex.length})`
+    );
+  }
   const bytes = new Uint8Array(cleanHex.length / 2);
   for (let i = 0; i < cleanHex.length; i += 2) {
-    bytes[i / 2] = parseInt(cleanHex.slice(i, i + 2), 16);
+    const hi = hexNibble(cleanHex.charCodeAt(i));
+    const lo = hexNibble(cleanHex.charCodeAt(i + 1));
+    if (hi < 0 || lo < 0) {
+      throw new Error(`hexToBytes: invalid hex string (non-hex character at index ${i})`);
+    }
+    bytes[i / 2] = hi << 4 | lo;
   }
   return bytes;
 }

package/dist/memory/context.d.mts

@@ -10,6 +10,11 @@ interface SignMessageOptions {
 /**
  * Type for the signMessage function that client must provide.
  * This is typically from Privy's useSignMessage hook.
+ *
+ * The resolved value must be a hex signature (`0x`-prefixed or bare). A
+ * non-hex string — including `String(uint8Array)` or a base58 signature —
+ * throws from key derivation instead of becoming a zero-filled AES key.
+ * Raw signature bytes go to {@link deriveKeyFromSignatureBytes}.
  */
 type SignMessageFn = (message: string, options?: SignMessageOptions) => Promise<string>;
 /**

package/dist/memory/context.d.ts

@@ -10,6 +10,11 @@ interface SignMessageOptions {
 /**
  * Type for the signMessage function that client must provide.
  * This is typically from Privy's useSignMessage hook.
+ *
+ * The resolved value must be a hex signature (`0x`-prefixed or bare). A
+ * non-hex string — including `String(uint8Array)` or a base58 signature —
+ * throws from key derivation instead of becoming a zero-filled AES key.
+ * Raw signature bytes go to {@link deriveKeyFromSignatureBytes}.
  */
 type SignMessageFn = (message: string, options?: SignMessageOptions) => Promise<string>;
 /**

package/dist/react/index.cjs

@@ -1591,6 +1591,7 @@ __export(index_exports, {
   deleteVaultFolderOp: () => deleteVaultFolderOp,
   deleteVaultMemoryOp: () => deleteVaultMemoryOp,
   dequantizeEmbedding: () => dequantizeEmbedding,
+  deriveKeyFromSignatureBytes: () => deriveKeyFromSignatureBytes,
   eagerEmbedContent: () => eagerEmbedContent,
   embedAllMessages: () => embedAllMessages,
   embedMessage: () => embedMessage,
@@ -2244,11 +2245,32 @@ function clearAllEncryptionState() {
 function clearAllEncryptionKeys() {
   clearAllEncryptionState();
 }
+function hexNibble(code) {
+  if (code >= 48 && code <= 57) return code - 48;
+  if (code >= 65 && code <= 70) return code - 55;
+  if (code >= 97 && code <= 102) return code - 87;
+  return -1;
+}
 function hexToBytes(hex) {
+  if (typeof hex !== "string") {
+    throw new TypeError(
+      "hexToBytes: expected a hex string. Pass raw signature bytes to deriveKeyFromSignatureBytes instead of stringifying them."
+    );
+  }
   const cleanHex = hex.startsWith("0x") ? hex.slice(2) : hex;
+  if (cleanHex.length === 0 || cleanHex.length % 2 !== 0) {
+    throw new Error(
+      `hexToBytes: invalid hex string (expected a non-empty even length, got ${cleanHex.length})`
+    );
+  }
   const bytes = new Uint8Array(cleanHex.length / 2);
   for (let i = 0; i < cleanHex.length; i += 2) {
-    bytes[i / 2] = parseInt(cleanHex.slice(i, i + 2), 16);
+    const hi = hexNibble(cleanHex.charCodeAt(i));
+    const lo = hexNibble(cleanHex.charCodeAt(i + 1));
+    if (hi < 0 || lo < 0) {
+      throw new Error(`hexToBytes: invalid hex string (non-hex character at index ${i})`);
+    }
+    bytes[i / 2] = hi << 4 | lo;
   }
   return bytes;
 }
@@ -2260,15 +2282,12 @@ var SHARED_TEXT_DECODER = new TextDecoder();
 function isValidWalletAddress(address) {
   return /^0x[a-fA-F0-9]{40}$/.test(address);
 }
-async function deriveKeyFromSignature(signature) {
-  const sigBytes = hexToBytes(signature);
-  const hashBuffer = await crypto.subtle.digest("SHA-256", sigBytes.buffer);
-  const hashBytes = new Uint8Array(hashBuffer);
-  return bytesToHex(hashBytes);
-}
-async function deriveKeyFromSignatureV3(signature) {
-  const sigBytes = hexToBytes(signature);
-  const ikm = await crypto.subtle.digest("SHA-256", sigBytes.buffer);
+var AES_GCM_V3_INFO = "anuma-sdk-aes-gcm-v3";
+var AES_GCM_V4_INFO = "anuma-sdk-aes-gcm-v4";
+var MIN_SIGNATURE_BYTES = 64;
+async function deriveHkdfAesKeyHex(signatureBytes, info) {
+  const sigBytes = new Uint8Array(signatureBytes);
+  const ikm = await crypto.subtle.digest("SHA-256", sigBytes);
   const hkdfKey = await crypto.subtle.importKey("raw", ikm, { name: "HKDF" }, false, [
     "deriveBits"
   ]);
@@ -2278,13 +2297,32 @@ async function deriveKeyFromSignatureV3(signature) {
       hash: "SHA-256",
       salt: new Uint8Array(32),
       // Zero salt (HKDF spec: uses hash-length zero buffer)
-      info: SHARED_TEXT_ENCODER.encode("anuma-sdk-aes-gcm-v3")
+      info: SHARED_TEXT_ENCODER.encode(info)
     },
     hkdfKey,
     256
   );
   return bytesToHex(new Uint8Array(derivedBits));
 }
+async function deriveKeyFromSignature(signature) {
+  const sigBytes = hexToBytes(signature);
+  const hashBuffer = await crypto.subtle.digest("SHA-256", sigBytes.buffer);
+  return bytesToHex(new Uint8Array(hashBuffer));
+}
+async function deriveKeyFromSignatureV3(signature) {
+  return deriveHkdfAesKeyHex(hexToBytes(signature), AES_GCM_V3_INFO);
+}
+async function deriveKeyFromSignatureBytes(signature) {
+  if (!(signature instanceof Uint8Array)) {
+    throw new TypeError("deriveKeyFromSignatureBytes: expected a Uint8Array signature");
+  }
+  if (signature.byteLength < MIN_SIGNATURE_BYTES) {
+    throw new Error(
+      `deriveKeyFromSignatureBytes: signature must be at least ${MIN_SIGNATURE_BYTES} bytes, got ${signature.byteLength}`
+    );
+  }
+  return deriveHkdfAesKeyHex(signature, AES_GCM_V4_INFO);
+}
 function getStoredKeyPair(address) {
   return keyPairStore.get(address) ?? null;
 }
@@ -2302,8 +2340,9 @@ async function deriveKeyPairFromSignature(signature, address) {
     {
       name: "HKDF",
       hash: "SHA-256",
+      // EVM addresses are case-insensitive. Base58 is not — this salt stays
+      // behind the EVM address gate in requestKeyPair.
       salt: SHARED_TEXT_ENCODER.encode(address.toLowerCase()),
-      // Wallet address as salt
       info: SHARED_TEXT_ENCODER.encode("ECDH-P256-KeyPair")
       // Context info
     },
@@ -36861,6 +36900,7 @@ function renderAnumaJsx(jsx3) {
   deleteVaultFolderOp,
   deleteVaultMemoryOp,
   dequantizeEmbedding,
+  deriveKeyFromSignatureBytes,
   eagerEmbedContent,
   embedAllMessages,
   embedMessage,