wontopos 2.2.14 → 2.2.16

package/README.md

@@ -22,7 +22,7 @@ const ctx = await mem.recall("what does alice drink?", "alice");
 
 ## Methods
 
-`add` · `addTurn` · `addBulk` · `update` · `search` · `recall` · `history` · `stats` · `delete` · `deleteAll`
+`add` · `addTurn` · `addBulk` · `update` · `search` · `recall` · `history` · `stats` · `get` · `listMemories` · `delete` · `deleteAll`
 
 All methods take `{ userId }` — it names the **store**: one isolated memory space per end-user, agent, or topic, then per account. WHO said each memory inside a store is the `speaker` tag below — storing the assistant's own words never needs a separate id.
 

package/dist/wontopos.d.ts

@@ -25,7 +25,11 @@
  * Reliability: every call retries transient failures with exponential backoff +
  * jitter, honoring `Retry-After` — 429 always; 502/503 and connection errors only
  * when a retry can never double-process a write (idempotent calls, or a failure
- * at connect time). Tune with `maxRetries` (0 disables) and `timeoutMs`.
+ * at connect time). Tune with `maxRetries` (0 disables) and `timeoutMs`, or per
+ * call site via the `withTimeout()` / `withRetries()` clones.
+ *
+ * Debugging: set `WONTOPOS_LOG=debug` to log method/path/status/timing/retries
+ * to stderr — never memory content, request bodies, or the API key.
  *
  * Security posture (not configurable off): redirects are refused so the API key
  * can never follow one to another host; responses over 64MB are refused; the key
@@ -264,6 +268,11 @@ export declare class Client {
     withModel(model: string): Client;
     /** A client bound to `userId` as its default store (everything else kept). */
     withUser(userId: string): Client;
+    /** A client with a different per-request timeout in ms (everything else kept).
+     * `mem.withTimeout(120_000).addBulk(bigBlob)` — this slow call only. */
+    withTimeout(timeoutMs: number): Client;
+    /** A client with a different retry budget (everything else kept). 0 disables retries. */
+    withRetries(maxRetries: number): Client;
     /** Store one memory. `metadata` optional (e.g. { event_date: "2026-03-01" }).
      * `metadata.speaker`: "me" = the assistant's own words, or a person's name (up to 50 per store). */
     add(content: string, userId?: string, metadata?: Record<string, unknown>): Promise<StoreResult>;
@@ -285,6 +294,11 @@ export declare class Client {
     history(userId?: string): Promise<HistoryTurn[]>;
     /** Memory counts for a store: { total_memories, short_term_turns }. */
     stats(userId?: string): Promise<StatsResult>;
+    /** Fetch ONE memory by id — the original text + metadata, never the vector.
+     * The id is what `add`/`store` or `listMemories` returned. Same visibility as
+     * `listMemories`: an id from another store, a decomposed atom sentence, or an
+     * invalidated memory rejects with `NotFoundError`. `userId` optional (default store). */
+    get(userId: string | undefined, memoryId: string): Promise<Memory>;
     /** List a store's stored memories — the original text plus metadata, never the
      * vector. Paginated: pass the returned `next_cursor` back as `cursor` for the next
      * page; a `null` cursor means the last page. Use it to browse or export a store.

package/dist/wontopos.js

@@ -25,7 +25,11 @@
  * Reliability: every call retries transient failures with exponential backoff +
  * jitter, honoring `Retry-After` — 429 always; 502/503 and connection errors only
  * when a retry can never double-process a write (idempotent calls, or a failure
- * at connect time). Tune with `maxRetries` (0 disables) and `timeoutMs`.
+ * at connect time). Tune with `maxRetries` (0 disables) and `timeoutMs`, or per
+ * call site via the `withTimeout()` / `withRetries()` clones.
+ *
+ * Debugging: set `WONTOPOS_LOG=debug` to log method/path/status/timing/retries
+ * to stderr — never memory content, request bodies, or the API key.
  *
  * Security posture (not configurable off): redirects are refused so the API key
  * can never follow one to another host; responses over 64MB are refused; the key
@@ -33,8 +37,23 @@
  * runtime's (never disabled by this SDK; Node 18+ floors TLS at 1.2). Prefer
  * `Client.fromEnv()` over keys in source code.
  */
-const VERSION = "2.2.14";
-const USER_AGENT = `wontopos-node/${VERSION}`;
+const VERSION = "2.2.16";
+/** Runtime info helps support debug a report ("node 18 on Windows...") —
+ * platform only, never anything identifying. Browsers have no `process` (and
+ * silently drop the UA header anyway). */
+const RUNTIME = (() => {
+    const p = globalThis?.process;
+    return p?.version ? ` (node/${p.version}; ${p.platform}-${p.arch})` : "";
+})();
+const USER_AGENT = `wontopos-node/${VERSION}${RUNTIME}`;
+/** Wire-level debug logging: set WONTOPOS_LOG=debug. Logs method/path/status/
+ * timing/retries to stderr — NEVER memory content, request bodies, or the key. */
+function logDebug(msg) {
+    const env = globalThis?.process?.env;
+    if (typeof env?.WONTOPOS_LOG === "string" && env.WONTOPOS_LOG.toLowerCase() === "debug") {
+        console.error(`wontopos: ${msg}`);
+    }
+}
 const DEFAULT_BASE_URL = "https://api.wontopos.com";
 const DEFAULT_MODEL = "tablet-1";
 /** 429 = rate-limited BEFORE processing → always safe to retry (no write, no bill). */
@@ -50,6 +69,10 @@ const LOOPBACK_HOSTS = new Set(["localhost", "127.0.0.1", "::1", "0.0.0.0"]);
 const MAX_RESPONSE_BYTES = 64 * 1024 * 1024;
 /** Model names travel in a header — only header-safe characters. */
 const MODEL_RE = /^[A-Za-z0-9._-]+$/;
+/** Cap a server-controlled error message so a hostile body can't blow up a log. */
+const MAX_ERR_MSG = 4096;
+/** Paging backstop: bound the walk so a fresh-cursor-forever server can't loop us. */
+const MAX_PAGES = 1_000_000;
 /** Error codes that only occur while ESTABLISHING a connection — the request
  * never reached the server, so a retry can't double-process a write. Mid-stream
  * codes (ECONNRESET, EPIPE, UND_ERR_SOCKET, ETIMEDOUT) are ambiguous: the server
@@ -263,6 +286,15 @@ export class Client {
     withUser(userId) {
         return this.clone({ userId });
     }
+    /** A client with a different per-request timeout in ms (everything else kept).
+     * `mem.withTimeout(120_000).addBulk(bigBlob)` — this slow call only. */
+    withTimeout(timeoutMs) {
+        return this.clone({ timeoutMs });
+    }
+    /** A client with a different retry budget (everything else kept). 0 disables retries. */
+    withRetries(maxRetries) {
+        return this.clone({ maxRetries });
+    }
     // ----- write -----
     // `userId` is optional in every call below - omit it to use the client's default
     // store (set via `new Client({ apiKey, userId })` or `withUser`).
@@ -315,6 +347,18 @@ export class Client {
     stats(userId) {
         return this.post("/api/v1/memory/stats", { user_id: this.uid(userId) });
     }
+    /** Fetch ONE memory by id — the original text + metadata, never the vector.
+     * The id is what `add`/`store` or `listMemories` returned. Same visibility as
+     * `listMemories`: an id from another store, a decomposed atom sentence, or an
+     * invalidated memory rejects with `NotFoundError`. `userId` optional (default store). */
+    get(userId, memoryId) {
+        // Sync throw (same shape as `delete`), so a missing id fails loudly even
+        // when the caller forgets to await.
+        if (!memoryId || typeof memoryId !== "string") {
+            throw new Error("memoryId is required — the id that add/store or listMemories returned.");
+        }
+        return this.post("/api/v1/memory/get", { user_id: this.uid(userId), memory_id: memoryId }).then((r) => (r.memory ?? {}));
+    }
     /** List a store's stored memories — the original text plus metadata, never the
      * vector. Paginated: pass the returned `next_cursor` back as `cursor` for the next
      * page; a `null` cursor means the last page. Use it to browse or export a store.
@@ -341,12 +385,13 @@ export class Client {
     async *iterMemories(userId, opts = {}) {
         let cursor;
         const seen = new Set();
-        for (;;) {
-            const page = await this.listMemories(userId, { limit: opts.pageSize ?? 100, cursor });
-            for (const m of page.memories ?? [])
+        // Backstop: the cursor-repeat guard catches a repeated cursor, but not a
+        // server that mints a FRESH cursor every page forever — bound the walk.
+        for (let page = 0; page < MAX_PAGES; page++) {
+            const p = await this.listMemories(userId, { limit: opts.pageSize ?? 100, cursor });
+            for (const m of p.memories ?? [])
                 yield m;
-            const next = page.next_cursor ?? undefined;
-            // Stop on last page OR a server that repeats a cursor (would loop forever).
+            const next = p.next_cursor ?? undefined;
             if (!next || seen.has(next))
                 break;
             seen.add(next);
@@ -475,7 +520,11 @@ export class Client {
     }
     async request(method, path, body) {
         const attempts = this.maxRetries + 1;
+        // Debug logging shows the path WITHOUT its query string — a query can carry
+        // a store id (listSpeakers), and logs must never carry data.
+        const logPath = path.split("?")[0];
         for (let attempt = 0; attempt < attempts; attempt++) {
+            const start = Date.now();
             const ctrl = new AbortController();
             const timer = setTimeout(() => ctrl.abort(), this.timeoutMs);
             let res;
@@ -500,7 +549,9 @@ export class Client {
                 // a POST may already have stored + billed server-side.
                 const safe = IDEMPOTENT_METHODS.has(method.toUpperCase()) || isConnectFailure(e);
                 if (!timedOut && safe && attempt + 1 < attempts) {
-                    await new Promise((r) => setTimeout(r, this.backoffMs(attempt)));
+                    const delay = this.backoffMs(attempt);
+                    logDebug(`${method} ${logPath}: ${e?.code ?? e?.name ?? "network error"} — retrying in ${delay}ms (attempt ${attempt + 1}/${attempts})`);
+                    await new Promise((r) => setTimeout(r, delay));
                     continue;
                 }
                 throw new APIConnectionError(0, timedOut ? `request timed out after ${this.timeoutMs}ms` : `network error: ${e?.message ?? e}`);
@@ -511,11 +562,14 @@ export class Client {
                 clearTimeout(timer);
                 const retryAfter = res.headers.get("Retry-After");
                 void res.body?.cancel();
-                await new Promise((r) => setTimeout(r, this.backoffMs(attempt, retryAfter)));
+                const delay = this.backoffMs(attempt, retryAfter);
+                logDebug(`${method} ${logPath} -> ${res.status} — retrying in ${delay}ms (attempt ${attempt + 1}/${attempts})`);
+                await new Promise((r) => setTimeout(r, delay));
                 continue;
             }
             if ((res.status >= 300 && res.status < 400) || res.type === "opaqueredirect") {
                 clearTimeout(timer);
+                void res.body?.cancel(); // release the stream — otherwise the connection leaks
                 throw new WosError(res.status, "unexpected redirect — refused (the API key never follows a redirect). Check baseUrl: exact host, https://.");
             }
             this._rateLimit = parseRateLimit(res.headers) ?? this._rateLimit;
@@ -539,6 +593,7 @@ export class Client {
             finally {
                 clearTimeout(timer);
             }
+            logDebug(`${method} ${logPath} -> ${res.status} in ${Date.now() - start}ms (attempt ${attempt + 1}/${attempts})`);
             if (!res.ok) {
                 // Server returns either Anthropic-style envelope
                 //   {"type":"error","error":{"type":...,"message":...,"request_id":...}}
@@ -563,6 +618,10 @@ export class Client {
                 catch {
                     /* keep raw text */
                 }
+                // Cap the FINAL message (a string `error` field can be as huge as the body),
+                // so a hostile server can't turn our exception/log into a giant string.
+                if (typeof msg === "string" && msg.length > MAX_ERR_MSG)
+                    msg = msg.slice(0, MAX_ERR_MSG) + "…(truncated)";
                 throw errorFor(res.status, msg, requestId);
             }
             if (!text)

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "wontopos",
-  "version": "2.2.14",
+  "version": "2.2.16",
   "description": "Wontopos — long-term memory for AI agents. Pure semantic retrieval, identical recall in every language, ~100× lower LLM bill.",
   "keywords": [
     "memory",