@anuma/sdk 9.1.6 → 9.1.8

package/dist/react/index.mjs

@@ -1748,7 +1748,14 @@ function cosineSimilarity(a, b) {
 
 // src/lib/processors/encoding.ts
 var B64_ENCODE_CHUNK = 32768 * 3;
+function assertFileUrlAllowed(dataUrl) {
+  const isNode = typeof process !== "undefined" && Boolean(process.versions?.node);
+  if (isNode && !dataUrl.startsWith("data:") && !dataUrl.startsWith("blob:")) {
+    throw new Error("Server file preprocessing requires a data URL or blob URL.");
+  }
+}
 async function dataUrlToArrayBuffer(dataUrl) {
+  assertFileUrlAllowed(dataUrl);
   if (dataUrl.startsWith("blob:") || dataUrl.startsWith("http://") || dataUrl.startsWith("https://")) {
     const response = await fetch(dataUrl);
     return response.arrayBuffer();
@@ -4404,7 +4411,7 @@ var mergeHeaders = (...headers) => {
     if (!header || typeof header !== "object") {
       continue;
     }
-    const iterator = header instanceof Headers ? headersEntries(header) : Object.entries(header);
+    const iterator = Array.isArray(header) || header instanceof Headers ? headersEntries(new Headers(header)) : Object.entries(header);
     for (const [key, value] of iterator) {
       if (value === null) {
         mergedHeaders.delete(key);
@@ -4679,6 +4686,18 @@ var createClient = (config = {}) => {
 // src/client/client.gen.ts
 var client = createClient(createClientConfig(createConfig()));
 
+// src/clientHeaders.ts
+function normalizeHeaders(headers) {
+  if (headers instanceof Headers || Array.isArray(headers)) {
+    const normalized = /* @__PURE__ */ Object.create(null);
+    new Headers(headers).forEach((value, name) => {
+      normalized[name] = value;
+    });
+    return normalized;
+  }
+  return headers;
+}
+
 // src/client/sdk.gen.ts
 var getApiV1Config = (options) => (options?.client ?? client).get({ url: "/api/v1/config", ...options });
 var getApiV1CreditsBalance = (options) => (options?.client ?? client).get({ url: "/api/v1/credits/balance", ...options });
@@ -4688,7 +4707,7 @@ var postApiV1CreditsPurchase = (options) => (options.client ?? client).post({
   ...options,
   headers: {
     "Content-Type": "application/json",
-    ...options.headers
+    ...normalizeHeaders(options.headers)
   }
 });
 var postApiV1Embeddings = (options) => (options.client ?? client).post({
@@ -4696,7 +4715,7 @@ var postApiV1Embeddings = (options) => (options.client ?? client).post({
   ...options,
   headers: {
     "Content-Type": "application/json",
-    ...options.headers
+    ...normalizeHeaders(options.headers)
   }
 });
 var getApiV1Models = (options) => (options?.client ?? client).get({ url: "/api/v1/models", ...options });
@@ -4705,7 +4724,7 @@ var postApiV1PhoneCalls = (options) => (options.client ?? client).post({
   ...options,
   headers: {
     "Content-Type": "application/json",
-    ...options.headers
+    ...normalizeHeaders(options.headers)
   }
 });
 var getApiV1PhoneCallsByCallId = (options) => (options.client ?? client).get({ url: "/api/v1/phone-calls/{call_id}", ...options });
@@ -4714,7 +4733,7 @@ var postApiV1SubscriptionsCancel = (options) => (options?.client ?? client).post
   ...options,
   headers: {
     "Content-Type": "application/json",
-    ...options?.headers
+    ...normalizeHeaders(options?.headers)
   }
 });
 var postApiV1SubscriptionsCreateCheckoutSession = (options) => (options.client ?? client).post({
@@ -4722,7 +4741,7 @@ var postApiV1SubscriptionsCreateCheckoutSession = (options) => (options.client ?
   ...options,
   headers: {
     "Content-Type": "application/json",
-    ...options.headers
+    ...normalizeHeaders(options.headers)
   }
 });
 var postApiV1SubscriptionsCustomerPortal = (options) => (options.client ?? client).post({
@@ -4730,7 +4749,7 @@ var postApiV1SubscriptionsCustomerPortal = (options) => (options.client ?? clien
   ...options,
   headers: {
     "Content-Type": "application/json",
-    ...options.headers
+    ...normalizeHeaders(options.headers)
   }
 });
 var postApiV1SubscriptionsRenew = (options) => (options?.client ?? client).post({ url: "/api/v1/subscriptions/renew", ...options });
@@ -4741,7 +4760,7 @@ var postApiV1WalletsBinding = (options) => (options.client ?? client).post({
   ...options,
   headers: {
     "Content-Type": "application/json",
-    ...options.headers
+    ...normalizeHeaders(options.headers)
   }
 });
 var postApiV1WalletsBindingNonce = (options) => (options?.client ?? client).post({ url: "/api/v1/wallets/binding/nonce", ...options });
@@ -14812,10 +14831,10 @@ async function getVaultRankingProjectionsOp(ctx, options) {
 function baseVaultSql(ctx, options) {
   const clauses = [
     `"_status" is not 'deleted'`,
-    '"is_deleted" = 0',
+    ...options?.includeDeleted ? [] : ['"is_deleted" = 0'],
     ...options?.includeArchived ? [] : ['"archived_at" is null'],
     ...options?.includeQuarantined ? [] : [`"trust_tier" is not 'quarantined'`],
-    '"superseded_by" is null'
+    ...options?.includeSuperseded ? [] : ['"superseded_by" is null']
   ];
   const args = [];
   if (ctx.userId !== void 0) {
@@ -14824,6 +14843,38 @@ function baseVaultSql(ctx, options) {
   }
   return { sql: clauses.join(" and "), args };
 }
+async function getVaultProfileMetadataOp(ctx, options) {
+  const mapRaw = (raw) => ({
+    uniqueId: raw.id,
+    scope: raw.scope ?? "",
+    createdAt: new Date(raw.created_at),
+    updatedAt: new Date(raw.updated_at),
+    lastObservedAt: raw.last_observed_at ?? null,
+    supersededAt: raw.superseded_at ?? null,
+    supersededBy: raw.superseded_by ?? null,
+    isDeleted: raw.is_deleted === true || raw.is_deleted === 1,
+    proofCount: raw.proof_count ?? null
+  });
+  const listOptions = { ...options, includeDeleted: true, includeSuperseded: true };
+  let rows;
+  try {
+    const base = baseVaultSql(ctx, listOptions);
+    const clauses = [base.sql, `"_status" != 'deleted'`];
+    const args = [...base.args];
+    if (options?.scopes?.length) {
+      clauses.push(`"scope" in (${options.scopes.map(() => "?").join(",")})`);
+      args.push(...options.scopes);
+    }
+    const sql = `select "id", "scope", "created_at", "updated_at", "last_observed_at", "superseded_at", "superseded_by", "is_deleted", "proof_count" from "memory_vault" where ${clauses.join(" and ")}`;
+    rows = await ctx.vaultMemoryCollection.query(Q9.unsafeSqlQuery(sql, args)).unsafeFetchRaw();
+  } catch (err) {
+    getLogger().debug(
+      "memoryVault: getVaultProfileMetadataOp uses the query fallback: " + (err instanceof Error ? err.message : String(err))
+    );
+    rows = await ctx.vaultMemoryCollection.query(...vaultListConditions(ctx, listOptions)).unsafeFetchRaw();
+  }
+  return rows.map(mapRaw);
+}
 async function getVaultCandidateKeysOp(ctx, options) {
   const mapRaw = (raw) => ({
     uniqueId: raw.id,
@@ -24981,7 +25032,7 @@ async function synthesizeProfile(ctx, options = {}) {
   };
   const previous = options.previous && options.previous.version === PROFILE_DOC_VERSION && configMatches(options.previous.config, config) ? options.previous : void 0;
   const listOptions = { scopes, includeDeleted: true, includeSuperseded: true };
-  const [memories, projections] = store ? await Promise.all([store.list(listOptions), store.listProjections(listOptions)]) : [await getAllVaultMemoriesOp(vaultCtx, listOptions), []];
+  const [memories, projections] = store ? await Promise.all([store.list(listOptions), store.listProjections(listOptions)]) : [await getVaultProfileMetadataOp(vaultCtx, { scopes }), []];
   const watermark = computeVaultWatermark(memories);
   const observationTrends = summarizeObservationTrends(
     memories.filter((m) => !m.isDeleted && m.supersededBy === null).map((m) => ({
@@ -25017,7 +25068,8 @@ async function synthesizeProfile(ctx, options = {}) {
     previous,
     watermark,
     options.reviewedMemoryIds,
-    previousUnreadable
+    previousUnreadable,
+    store ? void 0 : (ids) => getVaultEmbeddingsByIdsOp(vaultCtx, ids)
   );
   const memoriesById = new Map(memories.map((memory) => [memory.uniqueId, memory]));
   const fallbackPriors = /* @__PURE__ */ new Map();
@@ -25104,7 +25156,7 @@ function computeVaultWatermark(memories) {
   }
   return max;
 }
-async function computeStaleFacetKeys(ctx, memories, facets, previous, watermark, reviewedMemoryIds, previouslyUnreadable) {
+async function computeStaleFacetKeys(ctx, memories, facets, previous, watermark, reviewedMemoryIds, previouslyUnreadable, loadEmbeddings) {
   const allKeys = new Set(facets.map((f) => f.key));
   if (previous && watermark < previous.vaultWatermark) return allKeys;
   if (!previous) return allKeys;
@@ -25137,7 +25189,9 @@ async function computeStaleFacetKeys(ctx, memories, facets, previous, watermark,
     toAttribute = toAttribute.filter((m) => allowed.has(m.uniqueId));
   }
   if (toAttribute.length > 0) {
-    const attributed = await attributeFacts(ctx, toAttribute, facets);
+    const candidates = loadEmbeddings ? await loadEmbeddings(toAttribute.map((m) => m.uniqueId)) : toAttribute;
+    if (candidates.length !== toAttribute.length) return allKeys;
+    const attributed = await attributeFacts(ctx, candidates, facets);
     if (attributed === null) return allKeys;
     for (const k of attributed) stale.add(k);
   }
@@ -27701,6 +27755,7 @@ async function getPdfjs() {
   return pdfjsModule;
 }
 async function withPdfDocument(pdfDataUrl, fn) {
+  assertFileUrlAllowed(pdfDataUrl);
   const pdfjs = await getPdfjs();
   const loadingTask = pdfjs.getDocument(pdfDataUrl);
   let pdf;
@@ -28497,6 +28552,7 @@ async function preprocessFiles(files, options = {}) {
         skip("no_data");
         continue;
       }
+      assertFileUrlAllowed(file.url);
       const fileWithData = {
         ...file,
         dataUrl: file.url

package/dist/server/index.cjs

@@ -17686,7 +17686,14 @@ function cosineSimilarity(a, b) {
 
 // src/lib/processors/encoding.ts
 var B64_ENCODE_CHUNK = 32768 * 3;
+function assertFileUrlAllowed(dataUrl) {
+  const isNode = typeof process !== "undefined" && Boolean(process.versions?.node);
+  if (isNode && !dataUrl.startsWith("data:") && !dataUrl.startsWith("blob:")) {
+    throw new Error("Server file preprocessing requires a data URL or blob URL.");
+  }
+}
 async function dataUrlToArrayBuffer(dataUrl) {
+  assertFileUrlAllowed(dataUrl);
   if (dataUrl.startsWith("blob:") || dataUrl.startsWith("http://") || dataUrl.startsWith("https://")) {
     const response = await fetch(dataUrl);
     return response.arrayBuffer();
@@ -20016,7 +20023,7 @@ var mergeHeaders = (...headers) => {
     if (!header || typeof header !== "object") {
       continue;
     }
-    const iterator = header instanceof Headers ? headersEntries(header) : Object.entries(header);
+    const iterator = Array.isArray(header) || header instanceof Headers ? headersEntries(new Headers(header)) : Object.entries(header);
     for (const [key, value] of iterator) {
       if (value === null) {
         mergedHeaders.delete(key);
@@ -20292,13 +20299,25 @@ var createClient = (config = {}) => {
 init_clientConfig();
 var client = createClient(createClientConfig(createConfig()));
 
+// src/clientHeaders.ts
+function normalizeHeaders(headers) {
+  if (headers instanceof Headers || Array.isArray(headers)) {
+    const normalized = /* @__PURE__ */ Object.create(null);
+    new Headers(headers).forEach((value, name) => {
+      normalized[name] = value;
+    });
+    return normalized;
+  }
+  return headers;
+}
+
 // src/client/sdk.gen.ts
 var postApiV1Embeddings = (options) => (options.client ?? client).post({
   url: "/api/v1/embeddings",
   ...options,
   headers: {
     "Content-Type": "application/json",
-    ...options.headers
+    ...normalizeHeaders(options.headers)
   }
 });
 
@@ -28952,10 +28971,10 @@ async function getVaultRankingProjectionsOp(ctx, options) {
 function baseVaultSql(ctx, options) {
   const clauses = [
     `"_status" is not 'deleted'`,
-    '"is_deleted" = 0',
+    ...options?.includeDeleted ? [] : ['"is_deleted" = 0'],
     ...options?.includeArchived ? [] : ['"archived_at" is null'],
     ...options?.includeQuarantined ? [] : [`"trust_tier" is not 'quarantined'`],
-    '"superseded_by" is null'
+    ...options?.includeSuperseded ? [] : ['"superseded_by" is null']
   ];
   const args = [];
   if (ctx.userId !== void 0) {
@@ -28964,6 +28983,38 @@ function baseVaultSql(ctx, options) {
   }
   return { sql: clauses.join(" and "), args };
 }
+async function getVaultProfileMetadataOp(ctx, options) {
+  const mapRaw = (raw) => ({
+    uniqueId: raw.id,
+    scope: raw.scope ?? "",
+    createdAt: new Date(raw.created_at),
+    updatedAt: new Date(raw.updated_at),
+    lastObservedAt: raw.last_observed_at ?? null,
+    supersededAt: raw.superseded_at ?? null,
+    supersededBy: raw.superseded_by ?? null,
+    isDeleted: raw.is_deleted === true || raw.is_deleted === 1,
+    proofCount: raw.proof_count ?? null
+  });
+  const listOptions = { ...options, includeDeleted: true, includeSuperseded: true };
+  let rows;
+  try {
+    const base = baseVaultSql(ctx, listOptions);
+    const clauses = [base.sql, `"_status" != 'deleted'`];
+    const args = [...base.args];
+    if (options?.scopes?.length) {
+      clauses.push(`"scope" in (${options.scopes.map(() => "?").join(",")})`);
+      args.push(...options.scopes);
+    }
+    const sql = `select "id", "scope", "created_at", "updated_at", "last_observed_at", "superseded_at", "superseded_by", "is_deleted", "proof_count" from "memory_vault" where ${clauses.join(" and ")}`;
+    rows = await ctx.vaultMemoryCollection.query(import_watermelondb19.Q.unsafeSqlQuery(sql, args)).unsafeFetchRaw();
+  } catch (err) {
+    getLogger().debug(
+      "memoryVault: getVaultProfileMetadataOp uses the query fallback: " + (err instanceof Error ? err.message : String(err))
+    );
+    rows = await ctx.vaultMemoryCollection.query(...vaultListConditions(ctx, listOptions)).unsafeFetchRaw();
+  }
+  return rows.map(mapRaw);
+}
 async function getVaultCandidateKeysOp(ctx, options) {
   const mapRaw = (raw) => ({
     uniqueId: raw.id,
@@ -36698,7 +36749,7 @@ async function synthesizeProfile(ctx, options = {}) {
   };
   const previous = options.previous && options.previous.version === PROFILE_DOC_VERSION && configMatches(options.previous.config, config) ? options.previous : void 0;
   const listOptions = { scopes, includeDeleted: true, includeSuperseded: true };
-  const [memories, projections] = store ? await Promise.all([store.list(listOptions), store.listProjections(listOptions)]) : [await getAllVaultMemoriesOp(vaultCtx, listOptions), []];
+  const [memories, projections] = store ? await Promise.all([store.list(listOptions), store.listProjections(listOptions)]) : [await getVaultProfileMetadataOp(vaultCtx, { scopes }), []];
   const watermark = computeVaultWatermark(memories);
   const observationTrends = summarizeObservationTrends(
     memories.filter((m) => !m.isDeleted && m.supersededBy === null).map((m) => ({
@@ -36734,7 +36785,8 @@ async function synthesizeProfile(ctx, options = {}) {
     previous,
     watermark,
     options.reviewedMemoryIds,
-    previousUnreadable
+    previousUnreadable,
+    store ? void 0 : (ids) => getVaultEmbeddingsByIdsOp(vaultCtx, ids)
   );
   const memoriesById = new Map(memories.map((memory) => [memory.uniqueId, memory]));
   const fallbackPriors = /* @__PURE__ */ new Map();
@@ -36821,7 +36873,7 @@ function computeVaultWatermark(memories) {
   }
   return max;
 }
-async function computeStaleFacetKeys(ctx, memories, facets, previous, watermark, reviewedMemoryIds, previouslyUnreadable) {
+async function computeStaleFacetKeys(ctx, memories, facets, previous, watermark, reviewedMemoryIds, previouslyUnreadable, loadEmbeddings) {
   const allKeys = new Set(facets.map((f) => f.key));
   if (previous && watermark < previous.vaultWatermark) return allKeys;
   if (!previous) return allKeys;
@@ -36854,7 +36906,9 @@ async function computeStaleFacetKeys(ctx, memories, facets, previous, watermark,
     toAttribute = toAttribute.filter((m) => allowed.has(m.uniqueId));
   }
   if (toAttribute.length > 0) {
-    const attributed = await attributeFacts(ctx, toAttribute, facets);
+    const candidates = loadEmbeddings ? await loadEmbeddings(toAttribute.map((m) => m.uniqueId)) : toAttribute;
+    if (candidates.length !== toAttribute.length) return allKeys;
+    const attributed = await attributeFacts(ctx, candidates, facets);
     if (attributed === null) return allKeys;
     for (const k of attributed) stale.add(k);
   }
@@ -39071,6 +39125,7 @@ async function getPdfjs() {
   return pdfjsModule;
 }
 async function withPdfDocument(pdfDataUrl, fn) {
+  assertFileUrlAllowed(pdfDataUrl);
   const pdfjs = await getPdfjs();
   const loadingTask = pdfjs.getDocument(pdfDataUrl);
   let pdf;
@@ -39865,6 +39920,7 @@ async function preprocessFiles(files, options = {}) {
         skip("no_data");
         continue;
       }
+      assertFileUrlAllowed(file.url);
       const fileWithData = {
         ...file,
         dataUrl: file.url

package/dist/server/index.mjs

@@ -15987,7 +15987,14 @@ function cosineSimilarity(a, b) {
 
 // src/lib/processors/encoding.ts
 var B64_ENCODE_CHUNK = 32768 * 3;
+function assertFileUrlAllowed(dataUrl) {
+  const isNode = typeof process !== "undefined" && Boolean(process.versions?.node);
+  if (isNode && !dataUrl.startsWith("data:") && !dataUrl.startsWith("blob:")) {
+    throw new Error("Server file preprocessing requires a data URL or blob URL.");
+  }
+}
 async function dataUrlToArrayBuffer(dataUrl) {
+  assertFileUrlAllowed(dataUrl);
   if (dataUrl.startsWith("blob:") || dataUrl.startsWith("http://") || dataUrl.startsWith("https://")) {
     const response = await fetch(dataUrl);
     return response.arrayBuffer();
@@ -18311,7 +18318,7 @@ var mergeHeaders = (...headers) => {
     if (!header || typeof header !== "object") {
       continue;
     }
-    const iterator = header instanceof Headers ? headersEntries(header) : Object.entries(header);
+    const iterator = Array.isArray(header) || header instanceof Headers ? headersEntries(new Headers(header)) : Object.entries(header);
     for (const [key, value] of iterator) {
       if (value === null) {
         mergedHeaders.delete(key);
@@ -18586,13 +18593,25 @@ var createClient = (config = {}) => {
 // src/client/client.gen.ts
 var client = createClient(createClientConfig(createConfig()));
 
+// src/clientHeaders.ts
+function normalizeHeaders(headers) {
+  if (headers instanceof Headers || Array.isArray(headers)) {
+    const normalized = /* @__PURE__ */ Object.create(null);
+    new Headers(headers).forEach((value, name) => {
+      normalized[name] = value;
+    });
+    return normalized;
+  }
+  return headers;
+}
+
 // src/client/sdk.gen.ts
 var postApiV1Embeddings = (options) => (options.client ?? client).post({
   url: "/api/v1/embeddings",
   ...options,
   headers: {
     "Content-Type": "application/json",
-    ...options.headers
+    ...normalizeHeaders(options.headers)
   }
 });
 
@@ -27218,10 +27237,10 @@ async function getVaultRankingProjectionsOp(ctx, options) {
 function baseVaultSql(ctx, options) {
   const clauses = [
     `"_status" is not 'deleted'`,
-    '"is_deleted" = 0',
+    ...options?.includeDeleted ? [] : ['"is_deleted" = 0'],
     ...options?.includeArchived ? [] : ['"archived_at" is null'],
     ...options?.includeQuarantined ? [] : [`"trust_tier" is not 'quarantined'`],
-    '"superseded_by" is null'
+    ...options?.includeSuperseded ? [] : ['"superseded_by" is null']
   ];
   const args = [];
   if (ctx.userId !== void 0) {
@@ -27230,6 +27249,38 @@ function baseVaultSql(ctx, options) {
   }
   return { sql: clauses.join(" and "), args };
 }
+async function getVaultProfileMetadataOp(ctx, options) {
+  const mapRaw = (raw) => ({
+    uniqueId: raw.id,
+    scope: raw.scope ?? "",
+    createdAt: new Date(raw.created_at),
+    updatedAt: new Date(raw.updated_at),
+    lastObservedAt: raw.last_observed_at ?? null,
+    supersededAt: raw.superseded_at ?? null,
+    supersededBy: raw.superseded_by ?? null,
+    isDeleted: raw.is_deleted === true || raw.is_deleted === 1,
+    proofCount: raw.proof_count ?? null
+  });
+  const listOptions = { ...options, includeDeleted: true, includeSuperseded: true };
+  let rows;
+  try {
+    const base = baseVaultSql(ctx, listOptions);
+    const clauses = [base.sql, `"_status" != 'deleted'`];
+    const args = [...base.args];
+    if (options?.scopes?.length) {
+      clauses.push(`"scope" in (${options.scopes.map(() => "?").join(",")})`);
+      args.push(...options.scopes);
+    }
+    const sql = `select "id", "scope", "created_at", "updated_at", "last_observed_at", "superseded_at", "superseded_by", "is_deleted", "proof_count" from "memory_vault" where ${clauses.join(" and ")}`;
+    rows = await ctx.vaultMemoryCollection.query(import_watermelondb19.Q.unsafeSqlQuery(sql, args)).unsafeFetchRaw();
+  } catch (err) {
+    getLogger().debug(
+      "memoryVault: getVaultProfileMetadataOp uses the query fallback: " + (err instanceof Error ? err.message : String(err))
+    );
+    rows = await ctx.vaultMemoryCollection.query(...vaultListConditions(ctx, listOptions)).unsafeFetchRaw();
+  }
+  return rows.map(mapRaw);
+}
 async function getVaultCandidateKeysOp(ctx, options) {
   const mapRaw = (raw) => ({
     uniqueId: raw.id,
@@ -34920,7 +34971,7 @@ async function synthesizeProfile(ctx, options = {}) {
   };
   const previous = options.previous && options.previous.version === PROFILE_DOC_VERSION && configMatches(options.previous.config, config) ? options.previous : void 0;
   const listOptions = { scopes, includeDeleted: true, includeSuperseded: true };
-  const [memories, projections] = store ? await Promise.all([store.list(listOptions), store.listProjections(listOptions)]) : [await getAllVaultMemoriesOp(vaultCtx, listOptions), []];
+  const [memories, projections] = store ? await Promise.all([store.list(listOptions), store.listProjections(listOptions)]) : [await getVaultProfileMetadataOp(vaultCtx, { scopes }), []];
   const watermark = computeVaultWatermark(memories);
   const observationTrends = summarizeObservationTrends(
     memories.filter((m) => !m.isDeleted && m.supersededBy === null).map((m) => ({
@@ -34956,7 +35007,8 @@ async function synthesizeProfile(ctx, options = {}) {
     previous,
     watermark,
     options.reviewedMemoryIds,
-    previousUnreadable
+    previousUnreadable,
+    store ? void 0 : (ids) => getVaultEmbeddingsByIdsOp(vaultCtx, ids)
   );
   const memoriesById = new Map(memories.map((memory) => [memory.uniqueId, memory]));
   const fallbackPriors = /* @__PURE__ */ new Map();
@@ -35043,7 +35095,7 @@ function computeVaultWatermark(memories) {
   }
   return max;
 }
-async function computeStaleFacetKeys(ctx, memories, facets, previous, watermark, reviewedMemoryIds, previouslyUnreadable) {
+async function computeStaleFacetKeys(ctx, memories, facets, previous, watermark, reviewedMemoryIds, previouslyUnreadable, loadEmbeddings) {
   const allKeys = new Set(facets.map((f) => f.key));
   if (previous && watermark < previous.vaultWatermark) return allKeys;
   if (!previous) return allKeys;
@@ -35076,7 +35128,9 @@ async function computeStaleFacetKeys(ctx, memories, facets, previous, watermark,
     toAttribute = toAttribute.filter((m) => allowed.has(m.uniqueId));
   }
   if (toAttribute.length > 0) {
-    const attributed = await attributeFacts(ctx, toAttribute, facets);
+    const candidates = loadEmbeddings ? await loadEmbeddings(toAttribute.map((m) => m.uniqueId)) : toAttribute;
+    if (candidates.length !== toAttribute.length) return allKeys;
+    const attributed = await attributeFacts(ctx, candidates, facets);
     if (attributed === null) return allKeys;
     for (const k of attributed) stale.add(k);
   }
@@ -37286,6 +37340,7 @@ async function getPdfjs() {
   return pdfjsModule;
 }
 async function withPdfDocument(pdfDataUrl, fn) {
+  assertFileUrlAllowed(pdfDataUrl);
   const pdfjs = await getPdfjs();
   const loadingTask = pdfjs.getDocument(pdfDataUrl);
   let pdf;
@@ -38074,6 +38129,7 @@ async function preprocessFiles(files, options = {}) {
         skip("no_data");
         continue;
       }
+      assertFileUrlAllowed(file.url);
       const fileWithData = {
         ...file,
         dataUrl: file.url

package/dist/tools/selection/index.cjs

@@ -643,7 +643,7 @@ var mergeHeaders = (...headers) => {
     if (!header || typeof header !== "object") {
       continue;
     }
-    const iterator = header instanceof Headers ? headersEntries(header) : Object.entries(header);
+    const iterator = Array.isArray(header) || header instanceof Headers ? headersEntries(new Headers(header)) : Object.entries(header);
     for (const [key, value] of iterator) {
       if (value === null) {
         mergedHeaders.delete(key);
@@ -919,13 +919,25 @@ var createClient = (config = {}) => {
 init_clientConfig();
 var client = createClient(createClientConfig(createConfig()));
 
+// src/clientHeaders.ts
+function normalizeHeaders(headers) {
+  if (headers instanceof Headers || Array.isArray(headers)) {
+    const normalized = /* @__PURE__ */ Object.create(null);
+    new Headers(headers).forEach((value, name) => {
+      normalized[name] = value;
+    });
+    return normalized;
+  }
+  return headers;
+}
+
 // src/client/sdk.gen.ts
 var postApiV1Embeddings = (options) => (options.client ?? client).post({
   url: "/api/v1/embeddings",
   ...options,
   headers: {
     "Content-Type": "application/json",
-    ...options.headers
+    ...normalizeHeaders(options.headers)
   }
 });
 

package/dist/tools/selection/index.mjs

@@ -525,7 +525,7 @@ var mergeHeaders = (...headers) => {
     if (!header || typeof header !== "object") {
       continue;
     }
-    const iterator = header instanceof Headers ? headersEntries(header) : Object.entries(header);
+    const iterator = Array.isArray(header) || header instanceof Headers ? headersEntries(new Headers(header)) : Object.entries(header);
     for (const [key, value] of iterator) {
       if (value === null) {
         mergedHeaders.delete(key);
@@ -800,13 +800,25 @@ var createClient = (config = {}) => {
 // src/client/client.gen.ts
 var client = createClient(createClientConfig(createConfig()));
 
+// src/clientHeaders.ts
+function normalizeHeaders(headers) {
+  if (headers instanceof Headers || Array.isArray(headers)) {
+    const normalized = /* @__PURE__ */ Object.create(null);
+    new Headers(headers).forEach((value, name) => {
+      normalized[name] = value;
+    });
+    return normalized;
+  }
+  return headers;
+}
+
 // src/client/sdk.gen.ts
 var postApiV1Embeddings = (options) => (options.client ?? client).post({
   url: "/api/v1/embeddings",
   ...options,
   headers: {
     "Content-Type": "application/json",
-    ...options.headers
+    ...normalizeHeaders(options.headers)
   }
 });
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@anuma/sdk",
-  "version": "9.1.6",
+  "version": "9.1.8",
   "description": "",
   "main": "./dist/index.cjs",
   "module": "./dist/index.mjs",