@theokit/sdk 4.56.0 → 4.57.0

package/CHANGELOG.md

@@ -1,5 +1,76 @@
 # Changelog
 
+## 4.57.0
+
+### Minor Changes
+
+- 43e4247: A memory fact's `kind` can now actually be written. `Remember (feedback): prefer tabs` types the
+  fact; a bare `Remember:` leaves it untyped, as before.
+
+  The field was added so the local memory store would converge with the format Claude Code uses, and
+  it worked in one direction only: the SDK read a kind off an existing memory and honoured it, but no
+  path could ever produce one. `appendMemoryFact` rebuilt the fact as `{ text }` alone, so a kind was
+  severed at the single chokepoint every write passes through — the round-trip through the file format
+  was real and unreachable.
+
+  Only the four kinds the store accepts (`user`, `feedback`, `project`, `reference`) are recognised, so
+  an arbitrary parenthetical is never mistaken for one and no fact is silently typed wrong. `modified`
+  is still stamped by the SDK and ignored when supplied: a timestamp the caller controls can lie about
+  when something was learned, which defeats weighing a note from this morning against one from four
+  months ago.
+
+- b85dab4: Session transcripts are now named with a UUID, so the Claude Code CLI can actually `--continue` a
+  session this SDK wrote.
+
+  That interoperability is the difference this project claims over a proprietary session store, and it
+  did not hold. Measured against CLI 2.1.236: a transcript resumes only when its basename is a UUID —
+  `billing-bot.jsonl` and `agent-<uuid>.jsonl` are both ignored, silently, with the session simply not
+  offered. Every session written under a human-readable agent id was invisible.
+
+  The filename is now derived from the agent id with a UUIDv8 over SHA-256, so it is deterministic:
+  the same agent id always yields the same transcript and nothing has to be persisted to map one back
+  to the other. Version 8 is RFC 9562's slot for an implementation-defined scheme, which is what this
+  is — v5 would have been the obvious choice but RFC 4122 fixes its hash to SHA-1, and a weak
+  primitive in the tree costs a permanent argument with every scanner that sees it. An
+  agent id that is already a UUID passes through unchanged, so a transcript Claude Code wrote keeps its
+  own name and the two directions stay symmetric.
+
+  Existing transcripts are not orphaned: a session whose file already exists under the old name keeps
+  using it, so history continues to accumulate in one place rather than being abandoned for an empty
+  file under the new name. Those sessions do not gain `--continue` support — their name is what the CLI
+  cannot read — but nothing that was written is lost or hidden.
+
+### Patch Changes
+
+- 18a68a0: A provider that does not take its credential from the caller is no longer refused for lacking one.
+  `createLocalAgent` read the provider descriptor two lines below the `throw` that guaranteed
+  execution never reached it, so `ollama/llama3.2` failed with `missing_api_key` before any runtime
+  work began — and so did every OAuth profile, Bedrock and Vertex.
+
+  Only `authType: "api_key"` requires a key from the caller. The other four modes source their own:
+  `none` sends no Authorization header at all, and `aws_bearer` / `gcp_oauth` / `oauth_device_code` /
+  `oauth_external` build their client with a placeholder and resolve a real token at stream time.
+
+  Fail-closed is preserved in both directions that matter: an unregistered provider prefix yields no
+  profile and is still refused, so a typo cannot become a free pass; and a provider that does
+  authenticate is refused exactly as before.
+
+- 4565e43: `zod` is now a regular dependency, so `npm install @theokit/sdk` produces a package that imports.
+
+  It was declared as an OPTIONAL peer dependency while 27 source files imported it — 14 of them at
+  module scope, on the paths that load agent context, read credentials and parse persistence. npm
+  honoured the declaration and did not install it, so a fresh consumer hit
+  `Cannot find package 'zod'` on the first line of the quickstart, from `dist/index.js` itself. 12 of
+  the 33 published subpaths could not be loaded at all.
+
+  Every suite in this repository runs inside the workspace, where `zod` is hoisted whether or not the
+  package declares it — which is why 5000+ green tests, `publint` and `attw` all saw nothing. The
+  release chain now packs the tarball, installs it outside the workspace and imports every declared
+  subpath, so this class of defect fails before publishing rather than after.
+
+  Consumers already on `zod ^4` are unaffected: the ranges overlap and the tree still resolves to a
+  single copy, so a schema you build still crosses into the SDK as the same type.
+
 ## 4.56.0
 
 ### Minor Changes

package/dist/{agent-PJMBK7HQ.cjs → agent-2T2EJIP6.cjs}

@@ -1,20 +1,20 @@
 'use strict';
 
-var chunkLQYQHXIW_cjs = require('./chunk-LQYQHXIW.cjs');
-require('./chunk-V2UUGUY4.cjs');
-require('./chunk-6VLKVX7O.cjs');
+var chunkM2JWHKO6_cjs = require('./chunk-M2JWHKO6.cjs');
+require('./chunk-KKK3FZ4A.cjs');
+require('./chunk-E7JHD6QJ.cjs');
 require('./chunk-53CBTBWO.cjs');
 require('./chunk-BV2MWEMV.cjs');
 require('./chunk-NGESVVJN.cjs');
 require('./chunk-BUUUWQMB.cjs');
 require('./chunk-EI2Q7SJ5.cjs');
 require('./chunk-GHX4P3V2.cjs');
-require('./chunk-YPJ5NH5N.cjs');
-require('./chunk-HLPSLDGL.cjs');
+require('./chunk-QI7WE46I.cjs');
+require('./chunk-43GFJ5SD.cjs');
 require('./chunk-F3YZMOAU.cjs');
 require('./chunk-4OTIXDMU.cjs');
 require('./chunk-DQKERTND.cjs');
-require('./chunk-CTCGWIUD.cjs');
+require('./chunk-Z4BCLVTI.cjs');
 require('./chunk-2ZPEDVLM.cjs');
 require('./chunk-E3WZ6Y4H.cjs');
 require('./chunk-KRD3GQAA.cjs');
@@ -33,7 +33,7 @@ require('./chunk-VKJ7V7EB.cjs');
 require('./chunk-ILCGLTSA.cjs');
 require('./chunk-CQGYNZ3K.cjs');
 require('./chunk-4I55V454.cjs');
-require('./chunk-JHPGF3FP.cjs');
+require('./chunk-BUIK7GUA.cjs');
 require('./chunk-SKXBJ2NU.cjs');
 require('./chunk-2ADR2GSO.cjs');
 require('./chunk-ZF2LDKQQ.cjs');
@@ -56,7 +56,7 @@ require('./chunk-NUKRL3I6.cjs');
 
 Object.defineProperty(exports, "Agent", {
   enumerable: true,
-  get: function () { return chunkLQYQHXIW_cjs.Agent; }
+  get: function () { return chunkM2JWHKO6_cjs.Agent; }
 });
-//# sourceMappingURL=agent-PJMBK7HQ.cjs.map
-//# sourceMappingURL=agent-PJMBK7HQ.cjs.map
+//# sourceMappingURL=agent-2T2EJIP6.cjs.map
+//# sourceMappingURL=agent-2T2EJIP6.cjs.map

package/dist/{agent-PJMBK7HQ.cjs.map → agent-2T2EJIP6.cjs.map}

@@ -1 +1 @@
-{"version":3,"sources":[],"names":[],"mappings":"","file":"agent-PJMBK7HQ.cjs"}
+{"version":3,"sources":[],"names":[],"mappings":"","file":"agent-2T2EJIP6.cjs"}

package/dist/{agent-K3PQBS7D.js → agent-ZIYCVEZL.js}

@@ -1,18 +1,18 @@
-export { Agent } from './chunk-KBXWEWKS.js';
-import './chunk-OHBIUXKM.js';
-import './chunk-ODTZ7HX3.js';
+export { Agent } from './chunk-7TCRNXNK.js';
+import './chunk-WG7R5W6R.js';
+import './chunk-G6EEYRDD.js';
 import './chunk-YMA4S2WO.js';
 import './chunk-2SFBB54R.js';
 import './chunk-SUKXXLWD.js';
 import './chunk-K2BQQ445.js';
 import './chunk-XN7NOENA.js';
 import './chunk-H73MEMQB.js';
-import './chunk-GJ6RK75E.js';
-import './chunk-MVAPK2BX.js';
+import './chunk-YJDH3CKG.js';
+import './chunk-IACR5LEM.js';
 import './chunk-3E77SX4H.js';
 import './chunk-WTMU7J4U.js';
 import './chunk-5JLFFPCH.js';
-import './chunk-BMAZLQQ4.js';
+import './chunk-G24KZRSA.js';
 import './chunk-HKCKOAIO.js';
 import './chunk-7FHZ4VQX.js';
 import './chunk-KVNWIAO4.js';
@@ -31,7 +31,7 @@ import './chunk-RIAM53CP.js';
 import './chunk-UC3HT2S4.js';
 import './chunk-OC4NTGMN.js';
 import './chunk-44JAAH4X.js';
-import './chunk-DZBSJX6J.js';
+import './chunk-FKMUFNQE.js';
 import './chunk-CQ2TQ32Y.js';
 import './chunk-CV7XMBHP.js';
 import './chunk-Q5EWJPRY.js';
@@ -49,5 +49,5 @@ import './chunk-3OR54XG4.js';
 import './chunk-IDCKSLYH.js';
 import './chunk-T7XEKOVW.js';
 import './chunk-T7O6K6PX.js';
-//# sourceMappingURL=agent-K3PQBS7D.js.map
-//# sourceMappingURL=agent-K3PQBS7D.js.map
+//# sourceMappingURL=agent-ZIYCVEZL.js.map
+//# sourceMappingURL=agent-ZIYCVEZL.js.map

package/dist/{agent-K3PQBS7D.js.map → agent-ZIYCVEZL.js.map}

@@ -1 +1 @@
-{"version":3,"sources":[],"names":[],"mappings":"","file":"agent-K3PQBS7D.js"}
+{"version":3,"sources":[],"names":[],"mappings":"","file":"agent-ZIYCVEZL.js"}

package/dist/agent-session-store-G2BMUZQV.js

@@ -0,0 +1,7 @@
+export { appendCompactBoundaryRecord, persistTurn, readSessionMessages } from './chunk-G24KZRSA.js';
+import './chunk-FKMUFNQE.js';
+import './chunk-VF7EWVDG.js';
+import './chunk-T7XEKOVW.js';
+import './chunk-T7O6K6PX.js';
+//# sourceMappingURL=agent-session-store-G2BMUZQV.js.map
+//# sourceMappingURL=agent-session-store-G2BMUZQV.js.map

package/dist/{agent-session-store-P6V3FINW.js.map → agent-session-store-G2BMUZQV.js.map}

@@ -1 +1 @@
-{"version":3,"sources":[],"names":[],"mappings":"","file":"agent-session-store-P6V3FINW.js"}
+{"version":3,"sources":[],"names":[],"mappings":"","file":"agent-session-store-G2BMUZQV.js"}

package/dist/agent-session-store-WAKLOKWK.cjs

@@ -0,0 +1,24 @@
+'use strict';
+
+var chunkZ4BCLVTI_cjs = require('./chunk-Z4BCLVTI.cjs');
+require('./chunk-BUIK7GUA.cjs');
+require('./chunk-I6TGFUCO.cjs');
+require('./chunk-JTB5Q42C.cjs');
+require('./chunk-NUKRL3I6.cjs');
+
+
+
+Object.defineProperty(exports, "appendCompactBoundaryRecord", {
+  enumerable: true,
+  get: function () { return chunkZ4BCLVTI_cjs.appendCompactBoundaryRecord; }
+});
+Object.defineProperty(exports, "persistTurn", {
+  enumerable: true,
+  get: function () { return chunkZ4BCLVTI_cjs.persistTurn; }
+});
+Object.defineProperty(exports, "readSessionMessages", {
+  enumerable: true,
+  get: function () { return chunkZ4BCLVTI_cjs.readSessionMessages; }
+});
+//# sourceMappingURL=agent-session-store-WAKLOKWK.cjs.map
+//# sourceMappingURL=agent-session-store-WAKLOKWK.cjs.map

package/dist/{agent-session-store-ZJ3JSRS4.cjs.map → agent-session-store-WAKLOKWK.cjs.map}

@@ -1 +1 @@
-{"version":3,"sources":[],"names":[],"mappings":"","file":"agent-session-store-ZJ3JSRS4.cjs"}
+{"version":3,"sources":[],"names":[],"mappings":"","file":"agent-session-store-WAKLOKWK.cjs"}

package/dist/{chunk-HLPSLDGL.cjs → chunk-43GFJ5SD.cjs}

@@ -5,7 +5,7 @@ var chunk4OTIXDMU_cjs = require('./chunk-4OTIXDMU.cjs');
 var chunkDQKERTND_cjs = require('./chunk-DQKERTND.cjs');
 var chunk6JSIEDKL_cjs = require('./chunk-6JSIEDKL.cjs');
 var chunkFRITRLZQ_cjs = require('./chunk-FRITRLZQ.cjs');
-var chunkJHPGF3FP_cjs = require('./chunk-JHPGF3FP.cjs');
+var chunkBUIK7GUA_cjs = require('./chunk-BUIK7GUA.cjs');
 var chunkXSX2UU6Y_cjs = require('./chunk-XSX2UU6Y.cjs');
 var chunkNIRE5CNO_cjs = require('./chunk-NIRE5CNO.cjs');
 var chunkK3FW2XZD_cjs = require('./chunk-K3FW2XZD.cjs');
@@ -757,7 +757,7 @@ async function resolveBedrockToken(region) {
     return cachedToken.value;
   }
   try {
-    const r = module$1.createRequire((typeof document === 'undefined' ? require('u' + 'rl').pathToFileURL(__filename).href : (_documentCurrentScript && _documentCurrentScript.tagName.toUpperCase() === 'SCRIPT' && _documentCurrentScript.src || new URL('chunk-HLPSLDGL.cjs', document.baseURI).href)));
+    const r = module$1.createRequire((typeof document === 'undefined' ? require('u' + 'rl').pathToFileURL(__filename).href : (_documentCurrentScript && _documentCurrentScript.tagName.toUpperCase() === 'SCRIPT' && _documentCurrentScript.src || new URL('chunk-43GFJ5SD.cjs', document.baseURI).href)));
     const gen = r("@aws/bedrock-token-generator");
     if (typeof gen.getToken !== "function") return void 0;
     const providers = r("@aws-sdk/credential-providers");
@@ -2504,7 +2504,7 @@ async function resolveVertexAccessToken() {
 async function getAuthClientOrThrow() {
   let mod;
   try {
-    const r = module$1.createRequire((typeof document === 'undefined' ? require('u' + 'rl').pathToFileURL(__filename).href : (_documentCurrentScript && _documentCurrentScript.tagName.toUpperCase() === 'SCRIPT' && _documentCurrentScript.src || new URL('chunk-HLPSLDGL.cjs', document.baseURI).href)));
+    const r = module$1.createRequire((typeof document === 'undefined' ? require('u' + 'rl').pathToFileURL(__filename).href : (_documentCurrentScript && _documentCurrentScript.tagName.toUpperCase() === 'SCRIPT' && _documentCurrentScript.src || new URL('chunk-43GFJ5SD.cjs', document.baseURI).href)));
     mod = r("google-auth-library");
   } catch (err) {
     const isModuleMissing = err instanceof Error && (err.message.includes("Cannot find module") || err.code === "MODULE_NOT_FOUND");
@@ -3019,7 +3019,7 @@ function plainText(content) {
 }
 async function compactSessionTranscript(opts) {
   const prior = await opts.store.readRecords(opts.loc.agentId);
-  const history = chunkJHPGF3FP_cjs.reconstructMessages(prior);
+  const history = chunkBUIK7GUA_cjs.reconstructMessages(prior);
   const compressible = [];
   for (const m of history) {
     const text = plainText(m.content);
@@ -3048,7 +3048,7 @@ async function compactSessionTranscript(opts) {
   }
   const summary = `${COMPACT_SUMMARY_MARKER}
 ${summaryBody}`;
-  const transcript = chunkJHPGF3FP_cjs.SessionTranscript.fromRecords(prior, {
+  const transcript = chunkBUIK7GUA_cjs.SessionTranscript.fromRecords(prior, {
     cwd: opts.loc.cwd,
     sessionId: opts.sessionId,
     model: opts.loc.model ?? "unknown"
@@ -3174,5 +3174,5 @@ exports.shouldUseFixtureMode = shouldUseFixtureMode;
 exports.shouldUseRealLocalRuntime = shouldUseRealLocalRuntime;
 exports.tryFirstEvent = tryFirstEvent;
 exports.warnProviderPrecedenceOnce = warnProviderPrecedenceOnce;
-//# sourceMappingURL=chunk-HLPSLDGL.cjs.map
-//# sourceMappingURL=chunk-HLPSLDGL.cjs.map
+//# sourceMappingURL=chunk-43GFJ5SD.cjs.map
+//# sourceMappingURL=chunk-43GFJ5SD.cjs.map