@theokit/sdk-memory 0.2.0 → 0.2.2

package/CHANGELOG.md

@@ -1,5 +1,23 @@
 # Changelog — @theokit/sdk-memory
 
+## 0.2.2
+
+### Patch Changes
+
+- 453ad2d: SE43 — system-design audit fixes (public-surface changes).
+
+  - **`@theokit/sdk` (minor):** the shared persistence kernel is now reachable from the sanctioned public `@theokit/sdk/persistence` barrel — `withCwdMutex`, `sanitizeFts5Query`, and `PersistenceSchema` are added (joining `replaceFileAtomic` / `openSqliteResilient` / `atomicWriteText` / `atomicWriteJson`). The `@theokit/sdk/internal/persistence` export is now **deprecated**: it re-exports its full surface unchanged for one release (back-compat) and is scheduled for removal in a future major. No breaking change; existing imports keep working.
+  - **Satellites (patch):** `sdk-tools` / `sdk-memory` / `sdk-cache` / `sdk-handoff` / `sdk-budget` tightened their `@theokit/sdk` peer-range floor from `>=1.7.0` to `>=4.0.0`, matching the v4-only surfaces they import (prevents a non-workspace install resolving an incompatible old sdk).
+
+## 0.2.1
+
+### Patch Changes
+
+- 826bca0: Security (#56) — close two residual cross-tenant active-recall cache leaks found by adversarial review.
+
+  - `@theokit/sdk-memory` (publishable) called `cache.get`/`cache.set` with no tenant context, so two callers with the same query text but different identity shared a cached recall — a cross-tenant leak for every consumer of the package. The cache read/write are now keyed by the `{namespace, userId, scope}` tenant tuple (the primitive already supported it).
+  - In `@theokit/sdk` the production caller hardcoded `namespace: "default"` and dropped `memoryContext.tenantId`, so two tenants sharing a `userId` collided on one cache entry. The caller now threads `memoryContext.tenantId` into the tenant partition (`namespace`). `sessionId` is intentionally not a key dimension — recall is cross-session by design.
+
 ## 0.2.0
 
 ### Minor Changes

package/dist/in-memory-provider.d.ts

@@ -15,7 +15,7 @@
  *     can call to persist a fact mid-conversation.
  *   - `recordSessionSummary()` writes a markdown summary to
  *     `${cwd}/.theokit/memory/sessions/${runId}.md` (real disk write
- *     via `@theokit/sdk/internal/persistence` per ADR-008).
+ *     via `@theokit/sdk/persistence` per ADR-008).
  *   - `dispose()` clears the handle's per-agent map (releases memory).
  *
  * @public

package/dist/index.cjs

@@ -3,7 +3,7 @@
 var promises = require('fs/promises');
 var path = require('path');
 var sdk = require('@theokit/sdk');
-var persistence = require('@theokit/sdk/internal/persistence');
+var persistence = require('@theokit/sdk/persistence');
 var pathSafety = require('@theokit/sdk/path-safety');
 var crypto = require('crypto');
 var errors = require('@theokit/sdk/errors');
@@ -387,7 +387,12 @@ async function runActiveMemory(args) {
         hits: []
       });
     }
-    const cached = args.cache?.get(args.userText, cfg.queryMode);
+    const tenantCtx = {
+      namespace: args.namespace,
+      userId: args.userId,
+      scope: args.scope
+    };
+    const cached = args.cache?.get(args.userText, cfg.queryMode, tenantCtx);
     if (cached !== void 0) return endRecallSpan(span, args, cached);
     const query = buildQuery(args.userText, args.priorMessages, cfg.queryMode, cfg.recentUserTurns);
     if (query.trim().length === 0) {
@@ -484,7 +489,12 @@ function notifyBreaker(breaker, key, status) {
   else if (status === "ok" || status === "no-recall") breaker.recordSuccess(key);
 }
 async function finalize(args, queryMode, result) {
-  args.cache?.set(args.userText, queryMode, result);
+  const tenantCtx = {
+    namespace: args.namespace,
+    userId: args.userId,
+    scope: args.scope
+  };
+  args.cache?.set(args.userText, queryMode, result, tenantCtx);
   if (args.persistTranscripts === true && args.cwd !== void 0) {
     await persistActiveMemoryTranscript(args.cwd, {
       runId: args.runId ?? `run-${Date.now()}`,