@pentatonic-ai/ai-agent-sdk 0.10.25 → 0.10.27

package/dist/index.cjs

@@ -878,7 +878,7 @@ function fireAndForgetEmit(clientConfig, sessionOpts, messages, result, model) {
 }
 
 // src/telemetry.js
-var VERSION = "0.10.25";
+var VERSION = "0.10.27";
 var TELEMETRY_URL = "https://sdk-telemetry.philip-134.workers.dev";
 function machineId() {
   const raw = typeof process !== "undefined" ? `${process.env?.USER || process.env?.USERNAME || "u"}:${process.platform || "x"}:${process.arch || "x"}` : "browser";

package/dist/index.js

@@ -847,7 +847,7 @@ function fireAndForgetEmit(clientConfig, sessionOpts, messages, result, model) {
 }
 
 // src/telemetry.js
-var VERSION = "0.10.25";
+var VERSION = "0.10.27";
 var TELEMETRY_URL = "https://sdk-telemetry.philip-134.workers.dev";
 function machineId() {
   const raw = typeof process !== "undefined" ? `${process.env?.USER || process.env?.USERNAME || "u"}:${process.platform || "x"}:${process.arch || "x"}` : "browser";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pentatonic-ai/ai-agent-sdk",
-  "version": "0.10.25",
+  "version": "0.10.27",
   "description": "TES SDK — LLM observability and lifecycle tracking via Pentatonic Thing Event System. Track token usage, tool calls, and conversations. Manage things through event-sourced lifecycle stages with AI enrichment and vector search.",
   "type": "module",
   "main": "./dist/index.cjs",

package/packages/memory-engine-v2/compat/server.py

@@ -460,7 +460,7 @@ class StoreRequest(BaseModel):
 
 class StoreBatchRequest(BaseModel):
     records: list[dict[str, Any]] = Field(default_factory=list)
-    arena: str | None = "general"
+    arena: str | None = None  # no "general" default — fail closed if absent
     # v1's optional pre-computed embeddings — passed through but we
     # re-embed regardless. The shared-embed optimisation lives at the
     # SDK level now (PR #58 retry-with-jitter); compat trusts the
@@ -611,7 +611,14 @@ async def _extract(arena: str, clientId: str, userId: str | None,
     return r.json()["event_id"]
 
 
-def _arena_of(meta: dict[str, Any] | None, fallback: str = "general") -> str:
+def _arena_of(meta: dict[str, Any] | None, fallback: str | None = None) -> str | None:
+    # No "general" fallback. An arena-less write used to silently land in a
+    # shared "general" bucket that belongs to no tenant — a cross-tenant
+    # hazard (and the one thing that could co-mingle entities across tenants,
+    # since entity ids embed the arena). Callers MUST supply an arena; the
+    # /store + /store-batch handlers reject when this returns None. The SDK
+    # (engineStore/composeArena) always stamps one, so only a raw direct
+    # caller can hit the rejection — which is the point (fail closed).
     if not meta:
         return fallback
     if isinstance(meta.get("arena"), str) and meta["arena"]:
@@ -690,6 +697,10 @@ async def store(req: StoreRequest):
     { id, content, layerId, engine }."""
     meta = req.metadata or {}
     arena = _arena_of(meta)
+    if not arena:
+        # Fail closed: no arena = no tenant. Mirrors /search. (Was a silent
+        # "general" bucket — a cross-tenant hazard.)
+        raise HTTPException(400, "arena required")
     clientId = meta.get("clientId") or arena.split(":")[0]
     userId = meta.get("user_id") or (arena.split(":", 1)[1] if ":" in arena else None)
     source_kind = _source_kind_of(meta)
@@ -778,7 +789,7 @@ async def store_batch(req: StoreBatchRequest):
     if not req.records:
         return {"status": "ok", "inserted": 0, "ids": [], "engine": {}}
 
-    arena_default = req.arena or "general"
+    arena_default = req.arena  # may be None; per-record arena can still supply it
     texts = [r["content"] for r in req.records]
     embeddings = await _embed_batch(texts)
     if len(embeddings) != len(texts):
@@ -809,6 +820,10 @@ async def store_batch(req: StoreBatchRequest):
     for r in req.records:
         meta = r.get("metadata") or {}
         arena = _arena_of(meta, fallback=arena_default)
+        if not arena:
+            # Fail closed: every record needs an arena (batch-level or its own).
+            # No "general" bucket — an arena-less write belongs to no tenant.
+            raise HTTPException(400, "arena required (batch-level or per-record)")
         clientId = meta.get("clientId") or arena.split(":")[0]
         userId = meta.get("user_id") or (arena.split(":", 1)[1] if ":" in arena else None)
         source_kind = _source_kind_of(meta)

package/packages/memory-engine-v2/extractor-async/worker.py

@@ -2180,7 +2180,15 @@ def upsert_relationships(
                   %s, %s, %s, %s, %s, %s, %s, %s, %s::disclosure_class,
                   %s::jsonb, COALESCE(%s, NOW()), COALESCE(%s, NOW())
                 )
-                ON CONFLICT (id) DO UPDATE SET
+                -- Conflict on the DECLARED idempotency key (arena, from, to,
+                -- type), NOT the content-hash `id`. Fusion-Drive entity merges
+                -- repoint from/to onto the master but keep the pre-merge `id`
+                -- (fusion_drive/merge.py), so `id` no longer equals
+                -- _content_id(current tuple). Conflicting on `id` then MISSES
+                -- the repointed row and slams into the UNIQUE(arena,from,to,
+                -- type) constraint — the UniqueViolation that was failing live
+                -- distillation + the SEE-490 backfill on merged-entity edges.
+                ON CONFLICT (arena, from_entity_id, to_entity_id, relationship_type) DO UPDATE SET
                   weight = relationships.weight + EXCLUDED.weight,
                   provenance_event_ids = (
                     SELECT ARRAY(SELECT DISTINCT UNNEST(relationships.provenance_event_ids || EXCLUDED.provenance_event_ids))