@pentatonic-ai/ai-agent-sdk 0.9.5 → 0.10.0

package/packages/memory/package-lock.json

@@ -1,20 +1,19 @@
 {
-  "name": "@pentatonic/memory",
-  "version": "0.1.0",
+  "name": "memory",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
-      "name": "@pentatonic/memory",
+      "name": "memory",
       "dependencies": {
         "@modelcontextprotocol/sdk": "^1.0.0",
         "pg": "^8.13.0"
       }
     },
     "node_modules/@hono/node-server": {
-      "version": "1.19.13",
-      "resolved": "https://registry.npmjs.org/@hono/node-server/-/node-server-1.19.13.tgz",
-      "integrity": "sha512-TsQLe4i2gvoTtrHje625ngThGBySOgSK3Xo2XRYOdqGN1teR8+I7vchQC46uLJi8OF62YTYA3AhSpumtkhsaKQ==",
+      "version": "1.19.14",
+      "resolved": "https://registry.npmjs.org/@hono/node-server/-/node-server-1.19.14.tgz",
+      "integrity": "sha512-GwtvgtXxnWsucXvbQXkRgqksiH2Qed37H9xHZocE5sA3N8O8O8/8FA3uclQXxXVzc9XBZuEOMK7+r02FmSpHtw==",
       "license": "MIT",
       "engines": {
         "node": ">=18.14.1"
@@ -77,9 +76,9 @@
       }
     },
     "node_modules/ajv": {
-      "version": "8.18.0",
-      "resolved": "https://registry.npmjs.org/ajv/-/ajv-8.18.0.tgz",
-      "integrity": "sha512-PlXPeEWMXMZ7sPYOHqmDyCJzcfNrUr3fGNKtezX14ykXOEIvyK81d+qydx89KY5O71FKMPaQ2vBfBFI5NHR63A==",
+      "version": "8.20.0",
+      "resolved": "https://registry.npmjs.org/ajv/-/ajv-8.20.0.tgz",
+      "integrity": "sha512-Thbli+OlOj+iMPYFBVBfJ3OmCAnaSyNn4M1vz9T6Gka5Jt9ba/HIR56joy65tY6kx/FCF5VXNB819Y7/GUrBGA==",
       "license": "MIT",
       "dependencies": {
         "fast-deep-equal": "^3.1.3",
@@ -355,9 +354,9 @@
       }
     },
     "node_modules/eventsource-parser": {
-      "version": "3.0.6",
-      "resolved": "https://registry.npmjs.org/eventsource-parser/-/eventsource-parser-3.0.6.tgz",
-      "integrity": "sha512-Vo1ab+QXPzZ4tCa8SwIHJFaSzy4R6SHf7BY79rFBDf0idraZWAkYrDjDj8uWaSm3S2TK+hJ7/t1CEmZ7jXw+pg==",
+      "version": "3.0.8",
+      "resolved": "https://registry.npmjs.org/eventsource-parser/-/eventsource-parser-3.0.8.tgz",
+      "integrity": "sha512-70QWGkr4snxr0OXLRWsFLeRBIRPuQOvt4s8QYjmUlmlkyTZkRqS7EDVRZtzU3TiyDbXSzaOeF0XUKy8PchzukQ==",
       "license": "MIT",
       "engines": {
         "node": ">=18.0.0"
@@ -407,12 +406,12 @@
       }
     },
     "node_modules/express-rate-limit": {
-      "version": "8.3.2",
-      "resolved": "https://registry.npmjs.org/express-rate-limit/-/express-rate-limit-8.3.2.tgz",
-      "integrity": "sha512-77VmFeJkO0/rvimEDuUC5H30oqUC4EyOhyGccfqoLebB0oiEYfM7nwPrsDsBL1gsTpwfzX8SFy2MT3TDyRq+bg==",
+      "version": "8.5.1",
+      "resolved": "https://registry.npmjs.org/express-rate-limit/-/express-rate-limit-8.5.1.tgz",
+      "integrity": "sha512-5O6KYmyJEpuPJV5hNTXKbAHWRqrzyu+OI3vUnSd2kXFubIVpG7ezpgxQy76Zo5GQZtrQBg86hF+CM/NX+cioiQ==",
       "license": "MIT",
       "dependencies": {
-        "ip-address": "10.1.0"
+        "ip-address": "^10.2.0"
       },
       "engines": {
         "node": ">= 16"
@@ -556,9 +555,9 @@
       }
     },
     "node_modules/hasown": {
-      "version": "2.0.2",
-      "resolved": "https://registry.npmjs.org/hasown/-/hasown-2.0.2.tgz",
-      "integrity": "sha512-0hJU9SCPvmMzIBdZFqNPXWa6dqh7WdH0cII9y+CyS8rG3nL48Bclra9HmKhVVUHyPWNH5Y7xDwAB7bfgSjkUMQ==",
+      "version": "2.0.3",
+      "resolved": "https://registry.npmjs.org/hasown/-/hasown-2.0.3.tgz",
+      "integrity": "sha512-ej4AhfhfL2Q2zpMmLo7U1Uv9+PyhIZpgQLGT1F9miIGmiCJIoCgSmczFdrc97mWT4kVY72KA+WnnhJ5pghSvSg==",
       "license": "MIT",
       "dependencies": {
         "function-bind": "^1.1.2"
@@ -619,9 +618,9 @@
       "license": "ISC"
     },
     "node_modules/ip-address": {
-      "version": "10.1.0",
-      "resolved": "https://registry.npmjs.org/ip-address/-/ip-address-10.1.0.tgz",
-      "integrity": "sha512-XXADHxXmvT9+CRxhXg56LJovE+bmWnEWB78LB83VZTprKTmaC5QfruXocxzTZ2Kl0DNwKuBdlIhjL8LeY8Sf8Q==",
+      "version": "10.2.0",
+      "resolved": "https://registry.npmjs.org/ip-address/-/ip-address-10.2.0.tgz",
+      "integrity": "sha512-/+S6j4E9AHvW9SWMSEY9Xfy66O5PWvVEJ08O0y5JGyEKQpojb0K0GKpz/v5HJ/G0vi3D2sjGK78119oXZeE0qA==",
       "license": "MIT",
       "engines": {
         "node": ">= 12"
@@ -649,9 +648,9 @@
       "license": "ISC"
     },
     "node_modules/jose": {
-      "version": "6.2.2",
-      "resolved": "https://registry.npmjs.org/jose/-/jose-6.2.2.tgz",
-      "integrity": "sha512-d7kPDd34KO/YnzaDOlikGpOurfF0ByC2sEV4cANCtdqLlTfBlw2p14O/5d/zv40gJPbIQxfES3nSx1/oYNyuZQ==",
+      "version": "6.2.3",
+      "resolved": "https://registry.npmjs.org/jose/-/jose-6.2.3.tgz",
+      "integrity": "sha512-YYVDInQKFJfR/xa3ojUTl8c2KoTwiL1R5Wg9YCydwH0x0B9grbzlg5HC7mMjCtUJjbQ/YnGEZIhI5tCgfTb4Hw==",
       "license": "MIT",
       "funding": {
         "url": "https://github.com/sponsors/panva"
@@ -1201,17 +1200,34 @@
       }
     },
     "node_modules/type-is": {
-      "version": "2.0.1",
-      "resolved": "https://registry.npmjs.org/type-is/-/type-is-2.0.1.tgz",
-      "integrity": "sha512-OZs6gsjF4vMp32qrCbiVSkrFmXtG/AZhY3t0iAMrMBiAZyV9oALtXO8hsrHbMXF9x6L3grlFuwW2oAz7cav+Gw==",
+      "version": "2.1.0",
+      "resolved": "https://registry.npmjs.org/type-is/-/type-is-2.1.0.tgz",
+      "integrity": "sha512-faYHw0anBbc/kWF3zFTEnxSFOAGUX9GFbOBthvDdLsIlEoWOFOtS0zgCiQYwIskL9iGXZL3kAXD8OoZ4GmMATA==",
       "license": "MIT",
       "dependencies": {
-        "content-type": "^1.0.5",
+        "content-type": "^2.0.0",
         "media-typer": "^1.1.0",
         "mime-types": "^3.0.0"
       },
       "engines": {
-        "node": ">= 0.6"
+        "node": ">= 18"
+      },
+      "funding": {
+        "type": "opencollective",
+        "url": "https://opencollective.com/express"
+      }
+    },
+    "node_modules/type-is/node_modules/content-type": {
+      "version": "2.0.0",
+      "resolved": "https://registry.npmjs.org/content-type/-/content-type-2.0.0.tgz",
+      "integrity": "sha512-j/O/d7GcZCyNl7/hwZAb606rzqkyvaDctLmckbxLzHvFBzTJHuGEdodATcP3yIRoDrLHkIATJuvzbFlp/ki2cQ==",
+      "license": "MIT",
+      "engines": {
+        "node": ">=18"
+      },
+      "funding": {
+        "type": "opencollective",
+        "url": "https://opencollective.com/express"
       }
     },
     "node_modules/unpipe": {
@@ -1263,9 +1279,9 @@
       }
     },
     "node_modules/zod": {
-      "version": "4.3.6",
-      "resolved": "https://registry.npmjs.org/zod/-/zod-4.3.6.tgz",
-      "integrity": "sha512-rftlrkhHZOcjDwkGlnUtZZkvaPHCsDATp4pGpuOOMDaTdDDXF91wuVDJoWoPsKX/3YPQ5fHuF3STjcYyKr+Qhg==",
+      "version": "4.4.3",
+      "resolved": "https://registry.npmjs.org/zod/-/zod-4.4.3.tgz",
+      "integrity": "sha512-ytENFjIJFl2UwYglde2jchW2Hwm4GJFLDiSXWdTrJQBIN9Fcyp7n4DhxJEiWNAJMV1/BqWfW/kkg71UDcHJyTQ==",
       "license": "MIT",
       "funding": {
         "url": "https://github.com/sponsors/colinhacks"

package/packages/memory/package.json

@@ -1,10 +1,13 @@
 {
   "private": true,
   "name": "memory",
-  "description": "Memory subsystem — imported via @pentatonic-ai/ai-agent-sdk/memory",
+  "description": "Memory subsystem \u2014 imported via @pentatonic-ai/ai-agent-sdk/memory",
   "type": "module",
   "dependencies": {
     "@modelcontextprotocol/sdk": "^1.0.0",
     "pg": "^8.13.0"
+  },
+  "overrides": {
+    "ip-address": "^10.1.1"
   }
 }

package/packages/memory/src/__tests__/engine.test.js

@@ -730,15 +730,22 @@ describe("engine HTTP client", () => {
   });
 
   describe("engineForget", () => {
-    it("forwards id when provided", async () => {
+    it("forwards id when provided (no arena composition for id-based deletes)", async () => {
       mockOk({ deleted: 1 });
       await engineForget("https://e", { clientId: "acme", id: "abc" });
       const body = JSON.parse(calls[0].init.body);
       expect(calls[0].url).toBe("https://e/forget");
-      expect(body).toEqual({ arena: "acme", id: "abc" });
+      // id-only deletes target the global record id; the engine's
+      // id path doesn't read arena scope, so we don't inject it.
+      expect(body).toEqual({ id: "abc" });
     });
 
-    it("forwards metadata_contains when provided", async () => {
+    it("forwards metadata_contains and injects arena INSIDE it (tenant default)", async () => {
+      // The engine reads `metadata_contains.arena` (not top-level
+      // arena) to scope a forget at L2. Pre-2026-05-14 this helper
+      // put arena at the top level, which the engine silently
+      // ignored — only L6 ever got wiped. Pinning the post-fix
+      // contract here so a regression can't sneak back in.
       mockOk({ deleted: 5 });
       await engineForget("https://e", {
         clientId: "acme",
@@ -746,11 +753,39 @@ describe("engine HTTP client", () => {
       });
       const body = JSON.parse(calls[0].init.body);
       expect(body).toEqual({
-        arena: "acme",
-        metadata_contains: { source_repo: "monorepo" },
+        metadata_contains: { arena: "acme", source_repo: "monorepo" },
+      });
+      // Top-level arena must NOT be sent — the engine ignores it and
+      // its presence would mislead anyone reading wire dumps.
+      expect(body.arena).toBeUndefined();
+    });
+
+    it("composes user-scoped arena when userId is supplied", async () => {
+      mockOk({ deleted: 12 });
+      await engineForget("https://e", {
+        clientId: "acme",
+        userId: "u-1",
+        metadataContains: { actor_user_id: "u-1" },
+      });
+      const body = JSON.parse(calls[0].init.body);
+      expect(body).toEqual({
+        metadata_contains: { arena: "acme:u-1", actor_user_id: "u-1" },
       });
     });
 
+    it("respects caller-supplied arena inside metadataContains (super-admin override)", async () => {
+      // Super-admin tooling that wipes "some other tenant's user arena"
+      // — pass the explicit arena and the SDK leaves it alone instead
+      // of recomposing from (clientId, userId).
+      mockOk({ deleted: 99 });
+      await engineForget("https://e", {
+        clientId: "tes-admin",
+        metadataContains: { arena: "victim-tenant:u-7", source: "x" },
+      });
+      const body = JSON.parse(calls[0].init.body);
+      expect(body.metadata_contains.arena).toBe("victim-tenant:u-7");
+    });
+
     it("requires id or metadataContains", async () => {
       await expect(
         engineForget("https://e", { clientId: "acme" })

package/packages/memory/src/engine.js

@@ -328,9 +328,31 @@ export async function engineSearch(engineUrl, opts) {
  *
  * Caller must supply exactly one of `id` or `metadataContains`.
  *
+ * Arena scope: the engine extracts the arena from `metadata_contains.arena`
+ * (see memory-engine `compat/server.py:1048-1052`). Top-level `arena` is
+ * NOT read by the engine — previous versions of this helper put it there
+ * and the resulting calls only ever wiped L6, leaving L0/L2/L3/L4 records
+ * untouched. The 2026-05-14 Pip dedup cutover surfaced the bug: an
+ * actor_user_id wipe returned 0 against an arena that personFacets
+ * confirmed held thousands of records. This helper now injects `arena`
+ * into `metadata_contains` so the engine forwards to L2 /forget-internal
+ * and actually wipes the cross-layer arena.
+ *
+ * By default the row is **user-scoped** (`arena = clientId:userId`) when
+ * `userId` is supplied, otherwise **tenant-wide** (`arena = clientId`).
+ * Pass `scope: "tenant"` explicitly to bypass the user-arena scope from a
+ * user-context. Matches `engineStore`'s arena semantics for symmetry.
+ *
+ * If the caller passes `arena` inside `metadataContains` themselves, the
+ * SDK respects it as-is and skips composition — useful for super-admin
+ * tools that need to wipe an arena other than the one derived from
+ * (clientId, userId).
+ *
  * @param {string} engineUrl
  * @param {object} opts
  * @param {string} opts.clientId
+ * @param {string} [opts.userId]            user id within the tenant; controls default scope
+ * @param {"tenant"|"user"} [opts.scope]    override the default scope. "user" requires userId.
  * @param {string} [opts.id]                forget a single record by engine id
  * @param {object} [opts.metadataContains]  forget all records matching every key=value pair
  * @param {Record<string,string>} [opts.headers]  forwarded HTTP headers
@@ -338,15 +360,28 @@ export async function engineSearch(engineUrl, opts) {
  * @returns {Promise<{deleted: number}>}
  */
 export async function engineForget(engineUrl, opts) {
-  const { clientId, id, metadataContains, headers } = opts || {};
+  const { clientId, userId, scope, id, metadataContains, headers } = opts || {};
   if (!clientId) throw new Error("engineForget: clientId required");
   if (!id && !metadataContains) {
     throw new Error("engineForget: provide id or metadataContains");
   }
+
+  // Compose arena from (clientId, userId, scope) using the same shape
+  // engineStore uses. Caller-supplied `metadataContains.arena` wins —
+  // the SDK shouldn't second-guess a super-admin explicitly targeting
+  // a specific arena.
+  let mergedMetadata;
+  if (metadataContains) {
+    const hasExplicitArena =
+      typeof metadataContains.arena === "string" && metadataContains.arena;
+    mergedMetadata = hasExplicitArena
+      ? metadataContains
+      : { ...metadataContains, arena: composeArena(clientId, userId, scope) };
+  }
+
   const body = {
-    arena: clientId,
     ...(id ? { id } : {}),
-    ...(metadataContains ? { metadata_contains: metadataContains } : {}),
+    ...(mergedMetadata ? { metadata_contains: mergedMetadata } : {}),
   };
   return fetchEngine(engineUrl, "/forget", body, { headers });
 }

package/packages/memory/src/server.js

@@ -42,14 +42,14 @@ process.on("unhandledRejection", (err) => {
 
 // Deprecation notice — see packages/memory/README.md for context.
 // This MCP server (Postgres+pgvector+Ollama, single-process) is being
-// retired in favour of the 7-layer engine at packages/memory-engine/.
+// retired in favour of the 7-layer engine at packages/memory-engine-v2/.
 // Targeted for removal in v1.0; in the meantime everything keeps
 // working. Print once on startup so operators see the signal in logs
 // without flooding the conversation surface.
 if (process.env.PENTATONIC_DEPRECATION_QUIET !== "1") {
   process.stderr.write(
     "[memory-server] DEPRECATED: this server (Postgres+pgvector+Ollama MCP) " +
-      "is superseded by the 7-layer memory engine at packages/memory-engine/. " +
+      "is superseded by the 7-layer memory engine at packages/memory-engine-v2/. " +
       "Existing deployments keep working; removal targeted for v1.0. " +
       "See README → Memory → Local for the migration path. " +
       "Suppress this warning with PENTATONIC_DEPRECATION_QUIET=1.\n"

package/packages/memory-engine-v2/.env.example

@@ -0,0 +1,30 @@
+# pentatonic-memory-engine v2 environment.
+# Copy to .env on the engine box; never commit a populated copy.
+
+# --- Embed gateway (same as v1) -----------------------------------
+NV_EMBED_URL=https://lambda-gateway.pentatonic.com/v1/embed
+PENTATONIC_AI_GATEWAY_KEY=<rotate-on-deploy>
+NV_EMBED_PROVIDER=pentatonic-gateway
+
+# --- Postgres (org-model) -----------------------------------------
+PME_V2_PG_USER=pme
+PME_V2_PG_PASSWORD=<random-strong-password>
+PME_V2_PG_DB=org_model
+PME_V2_PG_DSN=postgresql://pme:<password>@org-model:5432/org_model
+
+# --- Ports (host-side) --------------------------------------------
+# v1 runs on 8099; if you want v2 alongside, give it a different port
+# until the cutover. Compose maps these to internal 8099 / 5432 / 6333.
+PME_V2_COMPAT_PORT=8199                 # v2 alongside v1
+PME_V2_ORG_MODEL_PORT=15433
+PME_V2_QDRANT_HTTP_PORT=16335
+PME_V2_QDRANT_GRPC_PORT=16336
+
+# --- Embedding dimension ------------------------------------------
+PME_V2_EMBED_DIM=4096
+
+# --- Cloudflared (optional, only set if exposing v2 publicly) -----
+# TUNNEL_TOKEN_V2=<cut-a-new-tunnel-or-reuse-v1>
+
+# --- LLM endpoint (extractor-async; stub mode if empty) -----------
+# PME_V2_LLM_ENDPOINT=https://lambda-gateway.pentatonic.com/v1/chat/completions

package/packages/memory-engine-v2/README.md

@@ -0,0 +1,125 @@
+# pentatonic-memory-engine v2
+
+Keystone-first rebuild. Three stores, not seven. Wire-compatible with
+v1's compat shim so TES can flip via a single env var.
+
+## Status
+
+- Infrastructure scaffolded (this directory)
+- Not yet released to npm; not yet CI'd
+- Currently deployed to AWS engine box at `/opt/engine-v2` via rsync
+- Real LLM extraction (extractor-async) stubbed pending keystone spec
+  (#285 extraction-objectives.md)
+
+## Layout
+
+```
+packages/memory-engine-v2/
+  docker-compose.yml            # 5 services: org-model, vector-index,
+                                # extractor-sync, extractor-async, compat
+  docker-compose.aws.yml        # AWS overlay (bind-mount volumes, prod env)
+  compat/                       # FastAPI v1-wire-compatible shim
+    Dockerfile + server.py + requirements.txt
+  extractor-sync/               # Deterministic per-source extraction
+    Dockerfile + server.py + requirements.txt
+  extractor-async/              # LLM distillation worker (stub for now)
+    Dockerfile + worker.py + requirements.txt
+  org-model/migrations/         # Postgres schema
+    001_init.sql                # Initial schema with provenance cols
+```
+
+## What's in here vs v1
+
+| v1 has | v2 has | Notes |
+|---|---|---|
+| L0 (sqlite FTS5) inside L2 | not yet — falls back to vector-only on /search | Keyword fallback comes once the typed router lands |
+| L2 HybridRAG proxy | compat shim does the routing | Single shim, no separate proxy service |
+| L3 Neo4j knowledge graph | recursive-CTE on org-model (pending spike #278) | If quality acceptable, Neo4j retires entirely |
+| L4 sqlite-vec sidecar | gone | Already removed in SDK PR #51 |
+| L4 QMD (vectors as JSON text in SQLite) | gone | Replaced by Qdrant + content-hash IDs |
+| L5 Milvus chats | folded into Qdrant via source_kind=chat | One vector store, payload-filtered |
+| L6 Milvus doc-store | folded into Qdrant via source_kind=doc | Same |
+| Compat shim | compat (same wire contract) | Same external surface, totally new internals |
+| nv-embed service | external (NV_EMBED_URL points at GH200) | Same as v1's AWS deploy |
+| HyDE per query | gone | Confidence-gated query rewrite if needed later |
+
+## Deploy (AWS engine box, via rsync — no CI)
+
+```bash
+# From SDK repo on your laptop:
+rsync -av --delete \
+  packages/memory-engine-v2/ \
+  ubuntu@<engine-host>:/opt/engine-v2/
+
+# On the box:
+ssh ubuntu@<engine-host>
+cd /opt/engine-v2
+# CRITICAL: production deploys MUST include `-f docker-compose.aws.yml`.
+# The base `docker-compose.yml` uses named docker volumes (anonymous,
+# project-scoped). The AWS overlay re-points those to bind mounts under
+# `/var/lib/pme-v2/<service>` — that's where the actual production data
+# lives. Omitting the overlay creates fresh empty volumes and effectively
+# "hides" the real data until the overlay is re-applied. The data is not
+# lost; the container just mounts the wrong path.
+sudo docker compose --env-file .env \
+  -f docker-compose.yml -f docker-compose.aws.yml \
+  up -d --build
+
+# Verify:
+curl http://localhost:8099/health        # cheap liveness
+curl http://localhost:8099/health/deep   # round-trips all stores
+
+# Single-service redeploy (e.g. just rebuild extractor-async after a
+# code change). --no-deps avoids touching other healthy services.
+# Same overlay rule applies here.
+sudo docker compose --env-file .env \
+  -f docker-compose.yml -f docker-compose.aws.yml \
+  up -d --no-deps --build extractor-async
+```
+
+Required env vars (set in `.env` next to the compose file):
+
+```bash
+NV_EMBED_URL=https://lambda-gateway.pentatonic.com/v1/embed
+PENTATONIC_AI_GATEWAY_KEY=<the key>
+NV_EMBED_PROVIDER=pentatonic-gateway
+PME_V2_PG_PASSWORD=<random>
+PME_V2_PG_DSN=postgresql://pme:<password>@org-model:5432/org_model
+
+# Optional:
+PME_V2_LLM_ENDPOINT=https://lambda-gateway.pentatonic.com/v1/chat/completions
+PME_V2_COMPAT_PORT=8099  # match v1 so the env-var flip is one line
+```
+
+## Cutover from v1 → v2
+
+```bash
+# On TES wrangler secrets:
+wrangler pages secret put MEMORY_ENGINE_URL --project-name <project>
+# Enter: https://memory-engine-v2.thingeventsystem.ai (or whichever
+# cloudflared tunnel hostname routes to v2's compat:8099)
+```
+
+Then v1's containers can be stopped:
+
+```bash
+cd /opt/engine
+sudo docker compose stop l2 l3 l5 l6 compat
+```
+
+Roll back by reverting the wrangler secret.
+
+## Open work (not in this scaffold)
+
+1. **Keystone (PR #285)** — extraction-objectives.md. Per-source typed
+   schemas, κ / false-omission bars. Drives the real extractor-async
+   prompts. Until this lands, extractor-async is a stub that drains
+   the queue at no-op speed.
+2. **Typed router** in /search — intent classify → org-model and/or
+   vector-index → fuse. Currently /search is vector-only.
+3. **BM25 fallback** — sqlite FTS5 service or inline in compat.
+4. **Graph spike (#278)** — recursive-CTE personFacets/peopleList over
+   org-model. Outcome decides whether Neo4j retires.
+5. **Memory-proxy Worker** (separate from v2) — removes the public
+   tunnel surface. Design doc at
+   `thing-event-system/modules/pentatonic-memory/proxy/DESIGN.md`.

package/packages/memory-engine-v2/compat/Dockerfile

@@ -0,0 +1,11 @@
+FROM python:3.12-slim
+
+WORKDIR /app
+
+COPY requirements.txt .
+RUN pip install --no-cache-dir -r requirements.txt
+
+COPY server.py .
+
+EXPOSE 8099
+CMD ["uvicorn", "server:app", "--host", "0.0.0.0", "--port", "8099", "--workers", "4"]

package/packages/memory-engine-v2/compat/requirements.txt

@@ -0,0 +1,6 @@
+fastapi==0.115.0
+uvicorn[standard]==0.32.0
+psycopg[binary,pool]==3.2.3
+httpx==0.27.2
+qdrant-client==1.12.1
+pydantic==2.9.2