wontopos 2.2.37 → 2.2.38

package/dist/cjs/wontopos.js

@@ -3,7 +3,7 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.WME = exports.Client = exports.ServerError = exports.RateLimitError = exports.ConflictError = exports.NotFoundError = exports.PermissionDeniedError = exports.PaymentRequiredError = exports.AuthenticationError = exports.BadRequestError = exports.APIConnectionError = exports.WosError = exports.CONTEXT_LIMIT_MAX = exports.CONTEXT_LIMIT_MIN = exports.SEARCH_LIMIT_MAX = exports.SEARCH_LIMIT_MIN = void 0;
 exports._resetStoreIdWarnings = _resetStoreIdWarnings;
 exports._resetFilterWarnings = _resetFilterWarnings;
-const VERSION = "2.2.37";
+const VERSION = "2.2.38";
 const RUNTIME = (() => {
     const p = globalThis?.process;
     return p?.version ? ` (node/${p.version}; ${p.platform}-${p.arch})` : "";
@@ -29,6 +29,12 @@ function normalizeStoreId(id) {
     return id.toLowerCase().replace(/[^a-z0-9_]/g, "_");
 }
 const WARNED_STORE_IDS_MAX = 1024;
+function assertUsableStoreId(userId) {
+    if (userId !== undefined && (typeof userId !== "string" || !userId.trim())) {
+        throw new Error(`userId must be a non-blank string; got ${JSON.stringify(userId)}. Omit it to use the client's ` +
+            "default store, or pass a real store id — anything else would silently write into the default store.");
+    }
+}
 const WARNED_FILTER_KEYS_MAX = 1024;
 const warnedStoreIds = new Set();
 function warnIfStoreIdCollapses(id) {
@@ -212,6 +218,47 @@ const KNOWN_FILTER_KEYS = new Set([
     "min_importance",
 ]);
 const warnedFilterKeys = new Set();
+const KNOWN_SEARCH_KEYS = new Set([
+    "cache_control", "speaker", "filters", "verify", "max_images", "extra",
+]);
+const RESERVED_SEARCH_KEYS = new Set(["user_id", "query", "max_results"]);
+const KNOWN_RECALL_KEYS = new Set(["form", "tz", "limit", "context_limit"]);
+function checkSearchOpts(opts) {
+    checkOpts(opts, KNOWN_SEARCH_KEYS, "search");
+}
+function checkOpts(opts, known, what) {
+    for (const k of Object.keys(opts)) {
+        if (RESERVED_SEARCH_KEYS.has(k))
+            throw new Error(`${JSON.stringify(k)} is set by the call, not by options — pass it as an argument. ` +
+                `An app forwarding untrusted input as options cannot steer the store, the query ` +
+                `or the count, and this says so rather than dropping it silently.`);
+        if (known.has(k))
+            continue;
+        const near = [...known].find((n) => n !== "extra" && editWithin(k, n, 2));
+        throw new Error(`unknown ${what} option ${JSON.stringify(k)}` +
+            (near ? ` — did you mean ${JSON.stringify(near)}?` : "") +
+            `. The service drops keys it does not know and answers anyway, so this would ` +
+            `have looked like it worked.` +
+            (known.has("extra")
+                ? ` Pass it under \`extra\` if the service accepts it and this client does not know it yet.`
+                : ""));
+    }
+}
+function editWithin(a, b, max) {
+    if (Math.abs(a.length - b.length) > max)
+        return false;
+    const prev = Array.from({ length: b.length + 1 }, (_, j) => j);
+    for (let i = 1; i <= a.length; i++) {
+        let diag = prev[0];
+        prev[0] = i;
+        for (let j = 1; j <= b.length; j++) {
+            const tmp = prev[j];
+            prev[j] = Math.min(prev[j] + 1, prev[j - 1] + 1, diag + (a[i - 1] === b[j - 1] ? 0 : 1));
+            diag = tmp;
+        }
+    }
+    return prev[b.length] <= max;
+}
 function warnOnUnknownFilters(filters) {
     if (!filters || typeof filters !== "object" || Array.isArray(filters))
         return;
@@ -257,6 +304,11 @@ class Client {
             throw new Error("apiKey contains whitespace - check for a stray newline or paste error");
         if (/[\x00-\x1f\x7f]/.test(key))
             throw new Error("apiKey contains a control character - check for a stray byte or paste error");
+        if (/[^\x00-\x7f]/.test(key)) {
+            const bad = key.match(/[^\x00-\x7f]/)?.[0];
+            throw new Error(`apiKey contains a non-ASCII character (${JSON.stringify(bad)}) - rich text turns '-' into an ` +
+                "en dash; copy the key from a plain-text field");
+        }
         this.apiKey = key;
         this.base = (opts.baseUrl ?? DEFAULT_BASE_URL).replace(/\/+$/, "");
         const tm = opts.timeoutMs;
@@ -265,7 +317,8 @@ class Client {
         if (this.model && !MODEL_RE.test(this.model)) {
             throw new Error(`invalid model name: ${JSON.stringify(this.model)} (letters, digits, '.', '_', '-' only)`);
         }
-        this.defaultUser = opts.userId || DEFAULT_USER;
+        assertUsableStoreId(opts.userId);
+        this.defaultUser = opts.userId ?? DEFAULT_USER;
         const mr = opts.maxRetries ?? opts.retries;
         this.maxRetries = typeof mr === "number" && Number.isFinite(mr) ? Math.max(0, Math.floor(mr)) : 2;
         const dl = opts.deadlineMs;
@@ -313,11 +366,8 @@ class Client {
         return `Client(${this.base}, model=${this.model}, userId=${this.defaultUser}, apiKey=${maskKey(this.apiKey)})`;
     }
     uid(userId) {
-        if (userId !== undefined && (typeof userId !== "string" || !userId.trim())) {
-            throw new Error(`userId must be a non-blank string; got ${JSON.stringify(userId)}. Omit it to use the client's ` +
-                "default store, or pass a real store id — anything else would silently write into the default store.");
-        }
-        const id = userId || this.defaultUser;
+        assertUsableStoreId(userId);
+        const id = userId ?? this.defaultUser;
         warnIfStoreIdCollapses(id);
         return id;
     }
@@ -339,6 +389,10 @@ class Client {
         return this.clone({ model });
     }
     withUser(userId) {
+        if (userId === undefined) {
+            throw new Error("withUser() needs a store id. It was called with undefined — usually a lookup that " +
+                "found nothing. Use the client's own default instead of calling withUser at all.");
+        }
         return this.clone({ userId });
     }
     withSignal(signal) {
@@ -375,21 +429,27 @@ class Client {
         return this.post("/api/v1/memory/supersede", { user_id: this.uid(userId), old_memory_id: oldMemoryId, new_content: newContent }, opts.idempotencyKey);
     }
     async search(query, userId, limit = 10, opts = {}) {
+        checkSearchOpts(opts);
         warnOnUnknownFilters(opts.filters);
         checkCount(limit, "limit");
-        const r = await this.post("/api/v1/memory/search", { ...opts, user_id: this.uid(userId), query, max_results: limit });
+        const { extra, ...known } = opts;
+        const r = await this.post("/api/v1/memory/search", { ...extra, ...known, user_id: this.uid(userId), query, max_results: limit });
         return mergeResults(r);
     }
     async searchSelf(query, userId, limit = 10, opts = {}) {
+        checkSearchOpts(opts);
         warnOnUnknownFilters(opts.filters);
         checkCount(limit, "limit");
-        const r = await this.post("/api/v1/memory/search", { ...opts, user_id: this.uid(userId), query, max_results: limit });
+        const { extra, ...known } = opts;
+        const r = await this.post("/api/v1/memory/search", { ...extra, ...known, user_id: this.uid(userId), query, max_results: limit });
         return { memories: asRecords(r.memories), self_memories: asRecords(r.self_memories) };
     }
     async searchFull(query, userId, limit = 10, opts = {}) {
+        checkSearchOpts(opts);
         warnOnUnknownFilters(opts.filters);
         checkCount(limit, "limit");
-        const r = await this.post("/api/v1/memory/search", { ...opts, user_id: this.uid(userId), query, max_results: limit });
+        const { extra, ...known } = opts;
+        const r = await this.post("/api/v1/memory/search", { ...extra, ...known, user_id: this.uid(userId), query, max_results: limit });
         return {
             ...r,
             memories: asRecords(r.memories),
@@ -398,6 +458,7 @@ class Client {
         };
     }
     async recall(query, userId, opts = {}) {
+        checkOpts(opts, KNOWN_RECALL_KEYS, "recall");
         const body = { user_id: this.uid(userId), query };
         if (opts.limit !== undefined) {
             checkCount(opts.limit, "limit");
@@ -426,10 +487,10 @@ class Client {
         return this.request("GET", `/api/v1/won/usage?days=${days}`);
     }
     get(userId, memoryId) {
-        if (!memoryId || typeof memoryId !== "string") {
+        if (typeof memoryId !== "string" || !memoryId.trim()) {
             throw new Error("memoryId is required — the id that add/store or listMemories returned.");
         }
-        return this.post("/api/v1/memory/get", { user_id: this.uid(userId), memory_id: memoryId }).then((r) => asObj(r.memory));
+        return this.post("/api/v1/memory/get", { user_id: this.uid(userId), memory_id: memoryId.trim() }).then((r) => asObj(r.memory));
     }
     listMemories(userId, opts = {}) {
         const body = { user_id: this.uid(userId), limit: opts.limit ?? 100 };
@@ -460,16 +521,16 @@ class Client {
         return out;
     }
     getImage(userId, memoryId) {
-        if (!memoryId || typeof memoryId !== "string") {
+        if (typeof memoryId !== "string" || !memoryId.trim()) {
             throw new Error("memoryId is required — the id that add/store or listImages returned.");
         }
-        return this.requestBytes("/api/v1/memory/image", { user_id: this.uid(userId), memory_id: memoryId });
+        return this.requestBytes("/api/v1/memory/image", { user_id: this.uid(userId), memory_id: memoryId.trim() });
     }
     forgetImage(userId, memoryId, opts = {}) {
-        if (!memoryId || typeof memoryId !== "string") {
+        if (typeof memoryId !== "string" || !memoryId.trim()) {
             throw new Error("memoryId is required — the id of the memory whose image you want removed.");
         }
-        const body = { user_id: this.uid(userId), memory_id: memoryId };
+        const body = { user_id: this.uid(userId), memory_id: memoryId.trim() };
         if (opts.preview)
             body.preview = true;
         return this.request("DELETE", "/api/v1/memory/image", body);
@@ -518,10 +579,10 @@ class Client {
         return this.post("/api/v1/won/revisions", body);
     }
     lineage(userId, memoryId) {
-        if (!memoryId || typeof memoryId !== "string") {
+        if (typeof memoryId !== "string" || !memoryId.trim()) {
             throw new Error("memoryId is required — the memory whose history you want.");
         }
-        return this.post("/api/v1/memory/lineage", { user_id: this.uid(userId), memory_id: memoryId });
+        return this.post("/api/v1/memory/lineage", { user_id: this.uid(userId), memory_id: memoryId.trim() });
     }
     bySpeaker(speaker, userId, opts = {}) {
         if (!speaker || typeof speaker !== "string" || speaker.trim() === "") {
@@ -789,6 +850,14 @@ class Client {
         const attempts = this.maxRetries + 1;
         const logPath = path.split("?")[0];
         const deadlineAt = this.deadlineAt();
+        let payload;
+        try {
+            payload = body === undefined ? undefined : JSON.stringify(body);
+        }
+        catch (e) {
+            throw new Error(`request body could not be serialized: ${e instanceof Error ? e.message : String(e)}. ` +
+                "Pass plain JSON values — an ORM entity, a BigInt or a circular reference cannot be sent.");
+        }
         for (let attempt = 0; attempt < attempts; attempt++) {
             const start = Date.now();
             const att = this.beginAttempt(deadlineAt);
@@ -797,7 +866,7 @@ class Client {
                 res = await this.fetchImpl(`${this.base}${path}`, {
                     method,
                     headers: extraHeaders ? { ...this.headers, ...extraHeaders } : this.headers,
-                    body: body === undefined ? undefined : JSON.stringify(body),
+                    body: payload,
                     signal: att.signal,
                     redirect: "manual",
                 });

package/dist/wontopos.d.ts

@@ -490,7 +490,10 @@ export interface SearchFilters {
 }
 /** Test hook — the warn-once set is process-global by design. */
 export declare function _resetFilterWarnings(): void;
-/** Known `search` options; extra fields pass through to the API untouched. */
+/** Known `search` options. An unknown key is refused before anything is sent — the
+ *  service drops keys it does not recognise and answers normally, so a misspelling
+ *  could not be told from an option that worked. Put a genuinely new one under
+ *  `extra`. */
 export interface SearchOptions {
     /** Recall caching. A hit inside the TTL bills at 0.1× — but the FIRST call
      *  writes the cache and bills the query tokens at 2× (`5m`) or 3× (`1h`), so
@@ -519,7 +522,9 @@ export interface SearchOptions {
      */
     verify?: number;
     /**
-     * How many image memories the answer may carry, 0–5. Default 1; 0 asks for none.
+     * How many image memories the answer may carry, 0–5. Omit it and the service uses
+     * 1; `0` asks for none. The MCP server defaults its own tool to 0 instead, so most
+     * searches through it carry no image rows.
      * Out of range is refused, not clamped — silently cutting 5 to 1 would leave you
      * believing you got five.
      *
@@ -527,7 +532,13 @@ export interface SearchOptions {
      * than answering with no images.
      */
     max_images?: number;
-    [key: string]: unknown;
+    /**
+     * Fields the service accepts that this version does not know about, merged into the
+     * request as written. Every other key is refused, so a typo cannot reach the wire —
+     * `verfy: 3` used to be sent, dropped by the service, and answered normally, leaving
+     * a caller billed for one pass believing they had bought three.
+     */
+    extra?: Record<string, unknown>;
 }
 /**
  * Per-call options for a write.
@@ -690,6 +701,11 @@ export declare class Client {
     /** Supersede an old memory with new content. Payload first, userId last — same shape as add/search. */
     update(oldMemoryId: string, newContent: string, userId?: string, opts?: WriteOptions): Promise<UpdateResult>;
     /** Search a store's memories. Returns them most relevant first.
+     *
+     *  `limit` is 5-20, and out of range is refused rather than clamped: asking for 50
+     *  and silently receiving 20 reads as "that is all there is". The default is 10, so
+     *  a call that passes no count is unaffected. Before 2.2.35 the count was sent on
+     *  unchecked.
      *
      *  `limit` bounds `memories`, not the returned array. On a model that keeps the
      *  assistant's own words separate (Scroll 1.2+) those come back as well, so the

package/dist/wontopos.js

@@ -1,4 +1,4 @@
-const VERSION = "2.2.37";
+const VERSION = "2.2.38";
 const RUNTIME = (() => {
     const p = globalThis?.process;
     return p?.version ? ` (node/${p.version}; ${p.platform}-${p.arch})` : "";
@@ -24,6 +24,12 @@ function normalizeStoreId(id) {
     return id.toLowerCase().replace(/[^a-z0-9_]/g, "_");
 }
 const WARNED_STORE_IDS_MAX = 1024;
+function assertUsableStoreId(userId) {
+    if (userId !== undefined && (typeof userId !== "string" || !userId.trim())) {
+        throw new Error(`userId must be a non-blank string; got ${JSON.stringify(userId)}. Omit it to use the client's ` +
+            "default store, or pass a real store id — anything else would silently write into the default store.");
+    }
+}
 const WARNED_FILTER_KEYS_MAX = 1024;
 const warnedStoreIds = new Set();
 function warnIfStoreIdCollapses(id) {
@@ -197,6 +203,47 @@ const KNOWN_FILTER_KEYS = new Set([
     "min_importance",
 ]);
 const warnedFilterKeys = new Set();
+const KNOWN_SEARCH_KEYS = new Set([
+    "cache_control", "speaker", "filters", "verify", "max_images", "extra",
+]);
+const RESERVED_SEARCH_KEYS = new Set(["user_id", "query", "max_results"]);
+const KNOWN_RECALL_KEYS = new Set(["form", "tz", "limit", "context_limit"]);
+function checkSearchOpts(opts) {
+    checkOpts(opts, KNOWN_SEARCH_KEYS, "search");
+}
+function checkOpts(opts, known, what) {
+    for (const k of Object.keys(opts)) {
+        if (RESERVED_SEARCH_KEYS.has(k))
+            throw new Error(`${JSON.stringify(k)} is set by the call, not by options — pass it as an argument. ` +
+                `An app forwarding untrusted input as options cannot steer the store, the query ` +
+                `or the count, and this says so rather than dropping it silently.`);
+        if (known.has(k))
+            continue;
+        const near = [...known].find((n) => n !== "extra" && editWithin(k, n, 2));
+        throw new Error(`unknown ${what} option ${JSON.stringify(k)}` +
+            (near ? ` — did you mean ${JSON.stringify(near)}?` : "") +
+            `. The service drops keys it does not know and answers anyway, so this would ` +
+            `have looked like it worked.` +
+            (known.has("extra")
+                ? ` Pass it under \`extra\` if the service accepts it and this client does not know it yet.`
+                : ""));
+    }
+}
+function editWithin(a, b, max) {
+    if (Math.abs(a.length - b.length) > max)
+        return false;
+    const prev = Array.from({ length: b.length + 1 }, (_, j) => j);
+    for (let i = 1; i <= a.length; i++) {
+        let diag = prev[0];
+        prev[0] = i;
+        for (let j = 1; j <= b.length; j++) {
+            const tmp = prev[j];
+            prev[j] = Math.min(prev[j] + 1, prev[j - 1] + 1, diag + (a[i - 1] === b[j - 1] ? 0 : 1));
+            diag = tmp;
+        }
+    }
+    return prev[b.length] <= max;
+}
 function warnOnUnknownFilters(filters) {
     if (!filters || typeof filters !== "object" || Array.isArray(filters))
         return;
@@ -242,6 +289,11 @@ export class Client {
             throw new Error("apiKey contains whitespace - check for a stray newline or paste error");
         if (/[\x00-\x1f\x7f]/.test(key))
             throw new Error("apiKey contains a control character - check for a stray byte or paste error");
+        if (/[^\x00-\x7f]/.test(key)) {
+            const bad = key.match(/[^\x00-\x7f]/)?.[0];
+            throw new Error(`apiKey contains a non-ASCII character (${JSON.stringify(bad)}) - rich text turns '-' into an ` +
+                "en dash; copy the key from a plain-text field");
+        }
         this.apiKey = key;
         this.base = (opts.baseUrl ?? DEFAULT_BASE_URL).replace(/\/+$/, "");
         const tm = opts.timeoutMs;
@@ -250,7 +302,8 @@ export class Client {
         if (this.model && !MODEL_RE.test(this.model)) {
             throw new Error(`invalid model name: ${JSON.stringify(this.model)} (letters, digits, '.', '_', '-' only)`);
         }
-        this.defaultUser = opts.userId || DEFAULT_USER;
+        assertUsableStoreId(opts.userId);
+        this.defaultUser = opts.userId ?? DEFAULT_USER;
         const mr = opts.maxRetries ?? opts.retries;
         this.maxRetries = typeof mr === "number" && Number.isFinite(mr) ? Math.max(0, Math.floor(mr)) : 2;
         const dl = opts.deadlineMs;
@@ -298,11 +351,8 @@ export class Client {
         return `Client(${this.base}, model=${this.model}, userId=${this.defaultUser}, apiKey=${maskKey(this.apiKey)})`;
     }
     uid(userId) {
-        if (userId !== undefined && (typeof userId !== "string" || !userId.trim())) {
-            throw new Error(`userId must be a non-blank string; got ${JSON.stringify(userId)}. Omit it to use the client's ` +
-                "default store, or pass a real store id — anything else would silently write into the default store.");
-        }
-        const id = userId || this.defaultUser;
+        assertUsableStoreId(userId);
+        const id = userId ?? this.defaultUser;
         warnIfStoreIdCollapses(id);
         return id;
     }
@@ -324,6 +374,10 @@ export class Client {
         return this.clone({ model });
     }
     withUser(userId) {
+        if (userId === undefined) {
+            throw new Error("withUser() needs a store id. It was called with undefined — usually a lookup that " +
+                "found nothing. Use the client's own default instead of calling withUser at all.");
+        }
         return this.clone({ userId });
     }
     withSignal(signal) {
@@ -360,21 +414,27 @@ export class Client {
         return this.post("/api/v1/memory/supersede", { user_id: this.uid(userId), old_memory_id: oldMemoryId, new_content: newContent }, opts.idempotencyKey);
     }
     async search(query, userId, limit = 10, opts = {}) {
+        checkSearchOpts(opts);
         warnOnUnknownFilters(opts.filters);
         checkCount(limit, "limit");
-        const r = await this.post("/api/v1/memory/search", { ...opts, user_id: this.uid(userId), query, max_results: limit });
+        const { extra, ...known } = opts;
+        const r = await this.post("/api/v1/memory/search", { ...extra, ...known, user_id: this.uid(userId), query, max_results: limit });
         return mergeResults(r);
     }
     async searchSelf(query, userId, limit = 10, opts = {}) {
+        checkSearchOpts(opts);
         warnOnUnknownFilters(opts.filters);
         checkCount(limit, "limit");
-        const r = await this.post("/api/v1/memory/search", { ...opts, user_id: this.uid(userId), query, max_results: limit });
+        const { extra, ...known } = opts;
+        const r = await this.post("/api/v1/memory/search", { ...extra, ...known, user_id: this.uid(userId), query, max_results: limit });
         return { memories: asRecords(r.memories), self_memories: asRecords(r.self_memories) };
     }
     async searchFull(query, userId, limit = 10, opts = {}) {
+        checkSearchOpts(opts);
         warnOnUnknownFilters(opts.filters);
         checkCount(limit, "limit");
-        const r = await this.post("/api/v1/memory/search", { ...opts, user_id: this.uid(userId), query, max_results: limit });
+        const { extra, ...known } = opts;
+        const r = await this.post("/api/v1/memory/search", { ...extra, ...known, user_id: this.uid(userId), query, max_results: limit });
         return {
             ...r,
             memories: asRecords(r.memories),
@@ -383,6 +443,7 @@ export class Client {
         };
     }
     async recall(query, userId, opts = {}) {
+        checkOpts(opts, KNOWN_RECALL_KEYS, "recall");
         const body = { user_id: this.uid(userId), query };
         if (opts.limit !== undefined) {
             checkCount(opts.limit, "limit");
@@ -411,10 +472,10 @@ export class Client {
         return this.request("GET", `/api/v1/won/usage?days=${days}`);
     }
     get(userId, memoryId) {
-        if (!memoryId || typeof memoryId !== "string") {
+        if (typeof memoryId !== "string" || !memoryId.trim()) {
             throw new Error("memoryId is required — the id that add/store or listMemories returned.");
         }
-        return this.post("/api/v1/memory/get", { user_id: this.uid(userId), memory_id: memoryId }).then((r) => asObj(r.memory));
+        return this.post("/api/v1/memory/get", { user_id: this.uid(userId), memory_id: memoryId.trim() }).then((r) => asObj(r.memory));
     }
     listMemories(userId, opts = {}) {
         const body = { user_id: this.uid(userId), limit: opts.limit ?? 100 };
@@ -445,16 +506,16 @@ export class Client {
         return out;
     }
     getImage(userId, memoryId) {
-        if (!memoryId || typeof memoryId !== "string") {
+        if (typeof memoryId !== "string" || !memoryId.trim()) {
             throw new Error("memoryId is required — the id that add/store or listImages returned.");
         }
-        return this.requestBytes("/api/v1/memory/image", { user_id: this.uid(userId), memory_id: memoryId });
+        return this.requestBytes("/api/v1/memory/image", { user_id: this.uid(userId), memory_id: memoryId.trim() });
     }
     forgetImage(userId, memoryId, opts = {}) {
-        if (!memoryId || typeof memoryId !== "string") {
+        if (typeof memoryId !== "string" || !memoryId.trim()) {
             throw new Error("memoryId is required — the id of the memory whose image you want removed.");
         }
-        const body = { user_id: this.uid(userId), memory_id: memoryId };
+        const body = { user_id: this.uid(userId), memory_id: memoryId.trim() };
         if (opts.preview)
             body.preview = true;
         return this.request("DELETE", "/api/v1/memory/image", body);
@@ -503,10 +564,10 @@ export class Client {
         return this.post("/api/v1/won/revisions", body);
     }
     lineage(userId, memoryId) {
-        if (!memoryId || typeof memoryId !== "string") {
+        if (typeof memoryId !== "string" || !memoryId.trim()) {
             throw new Error("memoryId is required — the memory whose history you want.");
         }
-        return this.post("/api/v1/memory/lineage", { user_id: this.uid(userId), memory_id: memoryId });
+        return this.post("/api/v1/memory/lineage", { user_id: this.uid(userId), memory_id: memoryId.trim() });
     }
     bySpeaker(speaker, userId, opts = {}) {
         if (!speaker || typeof speaker !== "string" || speaker.trim() === "") {
@@ -774,6 +835,14 @@ export class Client {
         const attempts = this.maxRetries + 1;
         const logPath = path.split("?")[0];
         const deadlineAt = this.deadlineAt();
+        let payload;
+        try {
+            payload = body === undefined ? undefined : JSON.stringify(body);
+        }
+        catch (e) {
+            throw new Error(`request body could not be serialized: ${e instanceof Error ? e.message : String(e)}. ` +
+                "Pass plain JSON values — an ORM entity, a BigInt or a circular reference cannot be sent.");
+        }
         for (let attempt = 0; attempt < attempts; attempt++) {
             const start = Date.now();
             const att = this.beginAttempt(deadlineAt);
@@ -782,7 +851,7 @@ export class Client {
                 res = await this.fetchImpl(`${this.base}${path}`, {
                     method,
                     headers: extraHeaders ? { ...this.headers, ...extraHeaders } : this.headers,
-                    body: body === undefined ? undefined : JSON.stringify(body),
+                    body: payload,
                     signal: att.signal,
                     redirect: "manual",
                 });

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "wontopos",
-  "version": "2.2.37",
-  "description": "Wontopos — long-term memory for AI agents. Identical recall in every language, ~100× lower LLM bill.",
+  "version": "2.2.38",
+  "description": "Wontopos \u2014 long-term memory for AI agents. Identical recall in every language, ~100\u00d7 lower LLM bill.",
   "keywords": [
     "memory",
     "ai",
@@ -20,11 +20,17 @@
   "types": "./dist/wontopos.d.ts",
   "exports": {
     ".": {
-      "types": "./dist/wontopos.d.ts",
-      "import": "./dist/wontopos.js",
-      "require": "./dist/cjs/wontopos.js",
+      "import": {
+        "types": "./dist/wontopos.d.ts",
+        "default": "./dist/wontopos.js"
+      },
+      "require": {
+        "types": "./dist/cjs/wontopos.d.cts",
+        "default": "./dist/cjs/wontopos.js"
+      },
       "default": "./dist/wontopos.js"
-    }
+    },
+    "./package.json": "./package.json"
   },
   "files": [
     "dist",
@@ -35,7 +41,7 @@
     "node": ">=18"
   },
   "scripts": {
-    "build": "tsc && tsc -p tsconfig.types.json && tsc -p tsconfig.cjs.json && node -e \"require('fs').writeFileSync('dist/cjs/package.json','{\\\"type\\\":\\\"commonjs\\\"}\\n')\"",
+    "build": "tsc && tsc -p tsconfig.types.json && tsc -p tsconfig.cjs.json && node -e \"const fs=require('fs');fs.writeFileSync('dist/cjs/package.json','{\\\"type\\\":\\\"commonjs\\\"}\\n');fs.copyFileSync('dist/wontopos.d.ts','dist/cjs/wontopos.d.cts')\"",
     "test": "npm run build && node --test tests/client.test.mjs tests/cjs.test.cjs",
     "prepublishOnly": "npm run build && node scripts/pre-publish.mjs"
   },
@@ -44,5 +50,9 @@
   },
   "bugs": {
     "url": "https://wontopos.com/contact?topic=bug"
+  },
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/wontopos/wontopos-node.git"
   }
 }