@theokit/sdk-memory 0.1.0 → 0.2.1

package/CHANGELOG.md

@@ -1,7 +1,31 @@
 # Changelog — @theokit/sdk-memory
 
+## 0.2.1
+
+### Patch Changes
+
+- 826bca0: Security (#56) — close two residual cross-tenant active-recall cache leaks found by adversarial review.
+
+  - `@theokit/sdk-memory` (publishable) called `cache.get`/`cache.set` with no tenant context, so two callers with the same query text but different identity shared a cached recall — a cross-tenant leak for every consumer of the package. The cache read/write are now keyed by the `{namespace, userId, scope}` tenant tuple (the primitive already supported it).
+  - In `@theokit/sdk` the production caller hardcoded `namespace: "default"` and dropped `memoryContext.tenantId`, so two tenants sharing a `userId` collided on one cache entry. The caller now threads `memoryContext.tenantId` into the tenant partition (`namespace`). `sessionId` is intentionally not a key dimension — recall is cross-session by design.
+
+## 0.2.0
+
+### Minor Changes
+
+- 809418a: M4-3 — typed categorized memory store (plan `m4-categorized-memory`).
+
+  - `createCategorizedMemory({ root, categories })` — a typed, category-partitioned markdown memory store. `add(category, text)` validates `category` against the closed `categories` taxonomy (fail-loud `ConfigurationError(code: "unknown_category")` before any I/O), redacts secrets, and appends a bullet to `<root>/<category>.md` (frontmatter header + `## Facts`) atomically and serialized per category file (`withCwdMutex` — no lost update under concurrent adds). `list(category?)` returns `CategorizedFact[]` for one category or all; never throws (a missing file → no facts). Construction validates the taxonomy is non-empty, unique, sanitizable, and sanitized-unique.
+  - `MemoryFact` gains an optional `category?: string` (backward-compatible — flat-store facts omit it).
+
+  Composes the shipped `safePathJoin`/`sanitizeIdentifier` (`@theokit/sdk/path-safety`), `redactSecrets`, and `replaceFileAtomic`/`withCwdMutex` (`@theokit/sdk/internal/persistence`). Zero new dependencies — explicitly NOT adding `zod` (the closed `categories` set is the runtime-checked schema).
+
 ## [Unreleased]
 
+### Changed
+
+- Reorganized the flat 43-file `src/internal/` god folder into 5 sub-concern folders (arch-review M5): `embedding/` (10), `index/` (12), `active-memory/` (5), `dreaming/` (3), `store/` (7); 6 cross-cutting files (`adapter-catalog`, `adapter-http-error`, `circuit-breaker`, `memory-scope`, `memory-types`, `tools`) remain at the `internal/` root. Pure file moves + import-path updates — no behavior/API change (the package barrel `index.ts` re-exports identically); all 324 tests GREEN, `madge --circular` clean.
+
 ### Security (drift sync — iter 112/114/115, 2026-06-09)
 
 Three security/perf hardenings shipped in `@theokit/sdk`'s
@@ -28,7 +52,7 @@ they have now been synced. Consumers routing through
 - **T5.2 — Lance SQL escape hardening (iter 115)** —
   `lance-index.ts`'s `escapeSqlValue` now rejects NUL bytes,
   C0 control chars, and DEL via `ConfigurationError({code:
-  'sql_injection_blocked'})`, and escapes backslashes (`\` →
+'sql_injection_blocked'})`, and escapes backslashes (`\` →
   `\\`) in addition to single quotes. Pre-sync, only `'` → `''`
   was applied — `\'` could escape the closing quote on engines
   that interpret backslash-escapes.
@@ -41,6 +65,7 @@ for v1.x back-compat; consumers installing this package get the
 canonical surface that sdk-core's Stage 4 routing delegates to.
 
 **Closed clusters:**
+
 - Dreaming (iter 54+59+60): `dreaming-phases.ts`, `dreaming-diary.ts`,
   `dreaming-run.ts` + `active-memory-types.ts` (iter 48)
 - Sessions (iter 61+62): `session-summary-writer.ts`, `session-loader.ts`
@@ -62,6 +87,7 @@ canonical surface that sdk-core's Stage 4 routing delegates to.
   `active-memory.ts`
 
 **Optional peers** (sdk-memory dynamically loads when present):
+
 - `better-sqlite3` (iter 65)
 - `sqlite-vec` (iter 66)
 - `@lancedb/lancedb` (iter 68)
@@ -71,6 +97,7 @@ canonical surface that sdk-core's Stage 4 routing delegates to.
 (verified by the Stage 3 drift detector, iter 93).
 
 ### Added (Phase 1 Stage 3 prep — iter 33-35, 2026-06-08)
+
 - `createInMemoryMarkdownProvider.recordSessionSummary` ships REAL
   filesystem-backed impl (was no-op). Writes
   `${cwd}/.theokit/memory/sessions/${sanitizeRunId(runId)}.md` via
@@ -89,6 +116,7 @@ canonical surface that sdk-core's Stage 4 routing delegates to.
   conversations. Returns JSON `{ok, count, results: [{id, snippet}]}`.
 
 ### Changed (Phase 1 physical Stage 1 — iter 19, 2026-06-08)
+
 - `createInMemoryMarkdownProvider` now implements the new optional
   `sync(handle)` port method (no-op for the in-process impl — facts
   are written synchronously to the Map at handler-call time; nothing
@@ -99,6 +127,7 @@ canonical surface that sdk-core's Stage 4 routing delegates to.
 ## [0.1.0] — 2026-06-08
 
 ### Added
+
 - Initial release. Consumes the `MemoryProvider` port from `@theokit/sdk@>=1.7.0`
   (SDK 2.0 Phase 1 / T1.6).
 - `createInMemoryMarkdownProvider()` — first concrete impl. In-process
@@ -106,6 +135,7 @@ canonical surface that sdk-core's Stage 4 routing delegates to.
   `systemPromptAdditions` for recalled facts; full lifecycle compliance.
 
 ### Notes
+
 - LanceDB / embeddings / circuit-breaker / dreaming-sweep deferred to future
   versions. This release ships the package foundation + a working impl so
   the SDK 2.0 cohort can publish (Phase 7).