@anuma/sdk 6.8.1 → 6.9.0

package/dist/server/index.d.mts

@@ -3642,8 +3642,26 @@ interface StoredConversationSummary {
  * A chunk of a message with its own embedding for fine-grained search
  */
 interface MessageChunk {
-    /** The chunk text */
-    text: string;
+    /**
+     * The chunk text — IN MEMORY ONLY. Not persisted (sdk#880).
+     *
+     * `chunkText` covers a message end to end with a 50-character overlap, so the
+     * chunk set of any message over 400 characters reconstructs the whole thing.
+     * Storing it put a fully readable copy of the message next to its own
+     * ciphertext `content` on devices with at-rest encryption enabled.
+     *
+     * `updateMessageChunksOp` now strips this before writing and readers rebuild
+     * the snippet from {@link startOffset}/{@link endOffset} against the message's
+     * own (decrypted) `content` — so the text exists exactly once, under the
+     * protection `content` already has. Encrypting the column instead was
+     * rejected: the client reads this column raw and `JSON.parse`s it in four
+     * places, each swallowing the throw and silently scoring 0.
+     *
+     * Optional because rows written before that change still carry it, and
+     * readers prefer a stored value when present. It is populated in memory by
+     * `chunkText()` and on the way out of a search.
+     */
+    text?: string;
     /**
      * Embedding vector for this chunk.
      *
@@ -6597,6 +6615,14 @@ declare function relinkMemoryTopicsOp(ctx: VaultMemoryOperationsContext, memoryI
  * row has: a curated memory's topics are recorded as `user`, everything else as
  * `auto`. Skips deleted, foreign-user, unlinked rows, and rows that already have
  * a record. Returns the ids filled.
+ *
+ * Runs as ONE writer over the whole (caller-bounded) list, in two phases:
+ * resolve every row's write — all the awaits — and only then prepare and batch,
+ * synchronously. Resolving and preparing per row inside its own writer is what
+ * fired WatermelonDB's "wasn't sent to batch() synchronously" diagnostic once
+ * per memory (~107 on a single dev launch, sdk#891); it also cost N writes.
+ * Same treatment as {@link stampTopicsExtractedAtOp}, including its
+ * transpilation hazard — the prepare pass MUST stay a `.map()`.
  */
 declare function backfillMemoryTopicsOp(ctx: VaultMemoryOperationsContext, memoryIds: readonly string[]): Promise<string[]>;
 declare function deleteAllVaultMemoriesForUserOp(ctx: VaultMemoryOperationsContext, userId: string): Promise<number>;
@@ -7789,6 +7815,22 @@ interface TurnCompleteEvent {
      * previously indistinguishable (both surfaced as zero candidates).
      */
     outcome: ExtractOutcome;
+    /**
+     * Present only alongside `outcome: "empty-after-retry"` — WHICH failure ended
+     * the turn (#888).
+     *
+     * `outcome` says extraction gave up; this says why, from a stable enum. The
+     * distinction is the whole point: a 2026-08-11 audit measured ~63% of
+     * production extraction turns ending in `empty-after-retry` and could not tell
+     * from telemetry whether the cause was the freeloader 403 everyone assumed or
+     * something else. It took a Prometheus cross-check to find the real one — the
+     * portal returning HTTP 200 with an empty body, which it counts as a success.
+     *
+     * Forward `failure.reason` into your extraction analytics event; all three
+     * fields are bounded (an enum, an HTTP status, a small attempt count) and none
+     * carries content.
+     */
+    failure?: PortalLlmFailure;
 }
 /** @public */
 /**

package/dist/server/index.d.ts

@@ -3642,8 +3642,26 @@ interface StoredConversationSummary {
  * A chunk of a message with its own embedding for fine-grained search
  */
 interface MessageChunk {
-    /** The chunk text */
-    text: string;
+    /**
+     * The chunk text — IN MEMORY ONLY. Not persisted (sdk#880).
+     *
+     * `chunkText` covers a message end to end with a 50-character overlap, so the
+     * chunk set of any message over 400 characters reconstructs the whole thing.
+     * Storing it put a fully readable copy of the message next to its own
+     * ciphertext `content` on devices with at-rest encryption enabled.
+     *
+     * `updateMessageChunksOp` now strips this before writing and readers rebuild
+     * the snippet from {@link startOffset}/{@link endOffset} against the message's
+     * own (decrypted) `content` — so the text exists exactly once, under the
+     * protection `content` already has. Encrypting the column instead was
+     * rejected: the client reads this column raw and `JSON.parse`s it in four
+     * places, each swallowing the throw and silently scoring 0.
+     *
+     * Optional because rows written before that change still carry it, and
+     * readers prefer a stored value when present. It is populated in memory by
+     * `chunkText()` and on the way out of a search.
+     */
+    text?: string;
     /**
      * Embedding vector for this chunk.
      *
@@ -6597,6 +6615,14 @@ declare function relinkMemoryTopicsOp(ctx: VaultMemoryOperationsContext, memoryI
  * row has: a curated memory's topics are recorded as `user`, everything else as
  * `auto`. Skips deleted, foreign-user, unlinked rows, and rows that already have
  * a record. Returns the ids filled.
+ *
+ * Runs as ONE writer over the whole (caller-bounded) list, in two phases:
+ * resolve every row's write — all the awaits — and only then prepare and batch,
+ * synchronously. Resolving and preparing per row inside its own writer is what
+ * fired WatermelonDB's "wasn't sent to batch() synchronously" diagnostic once
+ * per memory (~107 on a single dev launch, sdk#891); it also cost N writes.
+ * Same treatment as {@link stampTopicsExtractedAtOp}, including its
+ * transpilation hazard — the prepare pass MUST stay a `.map()`.
  */
 declare function backfillMemoryTopicsOp(ctx: VaultMemoryOperationsContext, memoryIds: readonly string[]): Promise<string[]>;
 declare function deleteAllVaultMemoriesForUserOp(ctx: VaultMemoryOperationsContext, userId: string): Promise<number>;
@@ -7789,6 +7815,22 @@ interface TurnCompleteEvent {
      * previously indistinguishable (both surfaced as zero candidates).
      */
     outcome: ExtractOutcome;
+    /**
+     * Present only alongside `outcome: "empty-after-retry"` — WHICH failure ended
+     * the turn (#888).
+     *
+     * `outcome` says extraction gave up; this says why, from a stable enum. The
+     * distinction is the whole point: a 2026-08-11 audit measured ~63% of
+     * production extraction turns ending in `empty-after-retry` and could not tell
+     * from telemetry whether the cause was the freeloader 403 everyone assumed or
+     * something else. It took a Prometheus cross-check to find the real one — the
+     * portal returning HTTP 200 with an empty body, which it counts as a success.
+     *
+     * Forward `failure.reason` into your extraction analytics event; all three
+     * fields are bounded (an enum, an HTTP status, a small attempt count) and none
+     * carries content.
+     */
+    failure?: PortalLlmFailure;
 }
 /** @public */
 /**

package/dist/server/index.mjs

@@ -141,7 +141,7 @@ import {
   updateVaultMemoryOp,
   upsertMessageOp,
   vaultMemoryToStored
-} from "./chunk-FS6DNUNT.mjs";
+} from "./chunk-I56324FR.mjs";
 import {
   createStreamingDeAnonymizer,
   notifyConsolidationFallback,
@@ -6371,7 +6371,7 @@ function createAutoExtractor(options) {
     const t0 = Date.now();
     void (async () => {
       try {
-        const { candidates, results, failedCount, outcome } = await extractAndRetain(
+        const { candidates, results, failedCount, outcome, failure } = await extractAndRetain(
           window2,
           retainCtx,
           {
@@ -6411,7 +6411,11 @@ function createAutoExtractor(options) {
           failedCount,
           durationMs: Date.now() - t0,
           conversationId,
-          outcome
+          outcome,
+          // Only set alongside `outcome: "empty-after-retry"`. Spread so the key
+          // is absent rather than explicitly undefined on a healthy turn —
+          // analytics backends store an explicit undefined as a real value.
+          ...failure !== void 0 && { failure }
         });
       } catch (err) {
         options.onError?.(err instanceof Error ? err : new Error(String(err)), conversationId);

package/dist/server/{recall-2GAPE2XH.mjs → recall-T7CNXTQ3.mjs}

@@ -1,6 +1,6 @@
 import {
   recall
-} from "./chunk-FS6DNUNT.mjs";
+} from "./chunk-I56324FR.mjs";
 import "./chunk-KF5OU4IN.mjs";
 import "./chunk-3RPGXXPZ.mjs";
 export {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@anuma/sdk",
-  "version": "6.8.1",
+  "version": "6.9.0",
   "description": "",
   "main": "./dist/index.cjs",
   "module": "./dist/index.mjs",
@@ -160,7 +160,7 @@
   "homepage": "https://github.com/anuma-ai/sdk#readme",
   "packageManager": "pnpm@10.23.0",
   "dependencies": {
-    "@anuma/portal": "1.0.0-next.20260806040449",
+    "@anuma/portal": "1.0.0-next.20260811055217",
     "@babel/parser": "^7.29.2",
     "@babel/types": "^7.29.0",
     "ai": "6.0.202",