wontopos 2.2.38 → 2.2.39

package/README.md

@@ -80,12 +80,12 @@ const hits = await mem.search("...the conversation so far...", "alice", 10,
 
 Built in, no configuration needed:
 
-- **Automatic retries** — 429 always, and 502 / 503 or a connection error only when a
-  retry cannot double-process a write. The writes and the searches are POSTs, and a
-  502 on one of those may have been returned *after* the service already stored and
-  billed it, so those get 429 and connect-level failures only. The reads and the
+- **Automatic retries** — 429 always, and 408 / 502 / 503 / 504 or a connection error
+  only when a retry cannot double-process a write. The writes and the searches are
+  POSTs, and any of those four may have been returned *after* the write already
+  landed, so those get 429 and connect-level failures only. The reads and the
   deletes that address a whole store — `listStores`, `listSpeakers`, `deleteStore`,
-  `removeSpeaker`, `forgetImage` — are GET or DELETE and do retry a 502. Twice, with
+  `removeSpeaker`, `forgetImage` — are GET or DELETE and do retry all four. Twice, with
   exponential backoff + jitter, honoring the server's `Retry-After`. Tune with
   `new Client({ maxRetries })`; `0` disables.
 - **Redirects refused** — the API key never follows a 3xx to another host.
@@ -106,9 +106,7 @@ Built in, no configuration needed:
 ### Behind a corporate proxy
 
 Node's global `fetch` (undici) ignores `HTTP_PROXY` / `HTTPS_PROXY`, so behind an
-egress proxy this SDK could not connect at all — while the Python and Rust SDKs went
-through, because `requests` and `reqwest` both read those variables. Pass a
-proxy-aware `fetch` and the three behave the same:
+egress proxy no request leaves at all. Pass a proxy-aware `fetch` and they go through:
 
 This one needs `npm i undici` — Node's global `fetch` is built on undici, but the
 package itself is not installed for you.
@@ -211,7 +209,7 @@ data to fix it.
 ## Changelog
 
 The three clients release in lockstep — same version, same surface, same day. Patch
-releases are additive. Four inside 2.2 were not, deliberately and each with its
+releases are additive. Five inside 2.2 were not, deliberately and each with its
 reason; the changelog lists them.
 
 See [CHANGELOG.md](https://github.com/wontopos/wontopos-node/blob/main/CHANGELOG.md).

package/dist/cjs/wontopos.d.cts

@@ -26,8 +26,8 @@
  * and searching call no LLM.
  *
  * Reliability: every call retries transient failures with exponential backoff +
- * jitter, honoring `Retry-After` — 429 always; 502/503 and connection errors only
- * when a retry can never double-process a write (idempotent calls, or a failure
+ * jitter, honoring `Retry-After` — 429 always; 408/502/503/504 and connection errors
+ * only when a retry can never double-process a write (idempotent calls, or a failure
  * at connect time). Tune with `maxRetries` (0 disables) and `timeoutMs`, or per
  * call site via the `withTimeout()` / `withRetries()` clones.
  *
@@ -86,8 +86,8 @@ export declare class RateLimitError extends WosError {
 /**
  * 5xx — the service failed.
  *
- * `502` / `503` are transient: the client already retries them for calls where a
- * retry cannot double-process a write, and retrying yourself is reasonable.
+ * `502` / `503` / `504` are transient: the client already retries them for calls
+ * where a retry cannot double-process a write, and retrying yourself is reasonable.
  *
  * `501` is NOT transient. It means the engine behind the model you selected does
  * not implement that endpoint at all (the error carries `model` and `endpoint`).
@@ -428,6 +428,9 @@ export interface EngramCatalog {
     engrams: EngramInfo[];
     forms: EngramInfo[];
     note?: string;
+    /** Anything else the reply carried. Responses widen; the runtime keeps those fields
+     *  and this is what lets a typed caller read them. */
+    [key: string]: unknown;
 }
 /** `createStore` / `deleteStore` → `{ user_id, status }`. */
 export interface StoreOpResult {
@@ -548,9 +551,9 @@ export interface SearchOptions {
  * arrives with a different body. Use it when a retry is your own (a job that died and
  * was re-run, a queue that redelivers). The SDK retries a write on exactly one
  * status: 429, which the service answers before it processes anything, so nothing
- * was stored. It never retries a write on 502 / 503 or a dropped body, where the
- * request may already have been stored and billed — without a key it cannot know
- * whether that first attempt landed.
+ * was stored. It never retries a write on 408 / 502 / 503 / 504 or a dropped body,
+ * where the first attempt may already have landed — without a key the client cannot
+ * know whether it did.
  *
  * The key must be UNIQUE PER LOGICAL WRITE — derive it from the thing being stored
  * (`` `import:${row.id}` ``), never a constant, or the second write replays the first
@@ -582,8 +585,8 @@ export interface ClientOptions {
      * to the account's built-in `default` store. */
     userId?: string;
     /** How many times to retry transient failures before throwing — 429 always;
-     * 502/503 and connection errors only when a retry can never double-process a
-     * write. 0 disables retries (default 2). */
+     * 408/502/503/504 and connection errors only when a retry can never
+     * double-process a write. 0 disables retries (default 2). */
     maxRetries?: number;
     /** Alias of `maxRetries`. The Python SDK calls this option `retries`, and these
      *  SDKs are published in lockstep as "the same surface" — so code ported between
@@ -611,10 +614,8 @@ export interface ClientOptions {
      *
      *  This is the seam for anything the runtime cannot express through options.
      *  The one that matters in practice is a corporate egress proxy: Node's global
-     *  fetch (undici) IGNORES `HTTP_PROXY` / `HTTPS_PROXY`, so behind such a proxy
-     *  this SDK could not connect at all — while the Python and Rust SDKs went
-     *  through, because `requests` and `reqwest` both read those variables. Pass a
-     *  proxy-aware fetch and the three behave the same again:
+     *  fetch (undici) IGNORES `HTTP_PROXY` / `HTTPS_PROXY`, so behind such a proxy no
+     *  request leaves at all. Pass a proxy-aware fetch and they go through:
      *
      *      import { ProxyAgent } from "undici";
      *      const agent = new ProxyAgent(process.env.HTTPS_PROXY!);
@@ -696,7 +697,7 @@ export declare class Client {
     addTurn(userMsg: string, assistantMsg: string, userId?: string, opts?: WriteOptions): Promise<StatusResult>;
     /** Bulk-ingest a large blob of text in one call. For backfilling.
      *  The call most worth an `opts.idempotencyKey`: a backfill that dies halfway and is
-     *  re-run would otherwise re-ingest and re-bill the whole blob. */
+     *  re-run would otherwise ingest the whole blob a second time. */
     addBulk(content: string, userId?: string, category?: string, timestamp?: string, opts?: WriteOptions): Promise<StatusResult>;
     /** Supersede an old memory with new content. Payload first, userId last — same shape as add/search. */
     update(oldMemoryId: string, newContent: string, userId?: string, opts?: WriteOptions): Promise<UpdateResult>;
@@ -812,6 +813,11 @@ export declare class Client {
     }): AsyncGenerator<Memory>;
     /** Collect ALL of a store's memories into an array (the text you stored, and its metadata). */
     exportMemories(userId?: string): Promise<Memory[]>;
+    /** Collect ALL of a store's image memories into an array — the image-side pair of
+     *  `exportMemories`. */
+    exportImages(userId?: string, opts?: {
+        pageSize?: number;
+    }): Promise<Memory[]>;
     /**
      * Fetch the bytes of an image memory — the picture the SERVICE holds.
      *

package/dist/cjs/wontopos.js

@@ -3,7 +3,7 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.WME = exports.Client = exports.ServerError = exports.RateLimitError = exports.ConflictError = exports.NotFoundError = exports.PermissionDeniedError = exports.PaymentRequiredError = exports.AuthenticationError = exports.BadRequestError = exports.APIConnectionError = exports.WosError = exports.CONTEXT_LIMIT_MAX = exports.CONTEXT_LIMIT_MIN = exports.SEARCH_LIMIT_MAX = exports.SEARCH_LIMIT_MIN = void 0;
 exports._resetStoreIdWarnings = _resetStoreIdWarnings;
 exports._resetFilterWarnings = _resetFilterWarnings;
-const VERSION = "2.2.38";
+const VERSION = "2.2.39";
 const RUNTIME = (() => {
     const p = globalThis?.process;
     return p?.version ? ` (node/${p.version}; ${p.platform}-${p.arch})` : "";
@@ -18,7 +18,7 @@ function logDebug(msg) {
 const DEFAULT_BASE_URL = "https://api.wontopos.com";
 const DEFAULT_MODEL = "tablet-2";
 const RETRY_ALWAYS = new Set([429]);
-const RETRY_IF_IDEMPOTENT = new Set([502, 503]);
+const RETRY_IF_IDEMPOTENT = new Set([408, 502, 503, 504]);
 const IDEMPOTENT_METHODS = new Set(["GET", "HEAD", "PUT", "DELETE", "OPTIONS"]);
 const LOOPBACK_HOSTS = new Set(["localhost", "127.0.0.1", "::1", "0.0.0.0"]);
 const MAX_RESPONSE_BYTES = 64 * 1024 * 1024;
@@ -223,6 +223,7 @@ const KNOWN_SEARCH_KEYS = new Set([
 ]);
 const RESERVED_SEARCH_KEYS = new Set(["user_id", "query", "max_results"]);
 const KNOWN_RECALL_KEYS = new Set(["form", "tz", "limit", "context_limit"]);
+const KNOWN_ENGRAM_KEYS = new Set(["form", "tz"]);
 function checkSearchOpts(opts) {
     checkOpts(opts, KNOWN_SEARCH_KEYS, "search");
 }
@@ -237,8 +238,7 @@ function checkOpts(opts, known, what) {
         const near = [...known].find((n) => n !== "extra" && editWithin(k, n, 2));
         throw new Error(`unknown ${what} option ${JSON.stringify(k)}` +
             (near ? ` — did you mean ${JSON.stringify(near)}?` : "") +
-            `. The service drops keys it does not know and answers anyway, so this would ` +
-            `have looked like it worked.` +
+            `. It would have had no effect, and the call would have looked like it worked.` +
             (known.has("extra")
                 ? ` Pass it under \`extra\` if the service accepts it and this client does not know it yet.`
                 : ""));
@@ -407,25 +407,25 @@ class Client {
     withRetries(maxRetries) {
         return this.clone({ maxRetries });
     }
-    add(content, userId, metadata = {}, opts = {}) {
+    async add(content, userId, metadata = {}, opts = {}) {
         const body = { user_id: this.uid(userId), content, metadata };
         if (opts.image !== undefined)
             body.image = normalizeImage(opts.image);
         return this.post("/api/v1/memory/store", body, opts.idempotencyKey);
     }
-    store(content, userId, metadata = {}, opts = {}) {
+    async store(content, userId, metadata = {}, opts = {}) {
         return this.add(content, userId, metadata, opts);
     }
-    addTurn(userMsg, assistantMsg, userId, opts = {}) {
+    async addTurn(userMsg, assistantMsg, userId, opts = {}) {
         return this.post("/api/v1/memory/store-turn", { user_id: this.uid(userId), user_msg: userMsg, assistant_msg: assistantMsg }, opts.idempotencyKey);
     }
-    addBulk(content, userId, category = "general", timestamp, opts = {}) {
+    async addBulk(content, userId, category = "general", timestamp, opts = {}) {
         const body = { user_id: this.uid(userId), content, category };
         if (timestamp)
             body.timestamp = timestamp;
         return this.post("/api/v1/memory/bulk-store", body, opts.idempotencyKey);
     }
-    update(oldMemoryId, newContent, userId, opts = {}) {
+    async update(oldMemoryId, newContent, userId, opts = {}) {
         return this.post("/api/v1/memory/supersede", { user_id: this.uid(userId), old_memory_id: oldMemoryId, new_content: newContent }, opts.idempotencyKey);
     }
     async search(query, userId, limit = 10, opts = {}) {
@@ -470,14 +470,15 @@ class Client {
         }
         return this.post("/api/v1/memory/recall", withForm(body, opts.form, opts.tz));
     }
-    engram(name, query, userId, opts = {}) {
+    async engram(name, query, userId, opts = {}) {
+        checkOpts(opts, KNOWN_ENGRAM_KEYS, "engram");
         return this.post("/api/v1/engram/run", withForm({ name, user_id: this.uid(userId), query }, opts.form, opts.tz));
     }
     async history(userId) {
         const r = await this.post("/api/v1/memory/history", { user_id: this.uid(userId) });
         return asRecords(r.turns);
     }
-    stats(userId) {
+    async stats(userId) {
         return this.post("/api/v1/memory/stats", { user_id: this.uid(userId) });
     }
     async usage(days = 7) {
@@ -486,13 +487,13 @@ class Client {
         }
         return this.request("GET", `/api/v1/won/usage?days=${days}`);
     }
-    get(userId, memoryId) {
+    async get(userId, memoryId) {
         if (typeof memoryId !== "string" || !memoryId.trim()) {
             throw new Error("memoryId is required — the id that add/store or listMemories returned.");
         }
         return this.post("/api/v1/memory/get", { user_id: this.uid(userId), memory_id: memoryId.trim() }).then((r) => asObj(r.memory));
     }
-    listMemories(userId, opts = {}) {
+    async listMemories(userId, opts = {}) {
         const body = { user_id: this.uid(userId), limit: opts.limit ?? 100 };
         if (opts.cursor)
             body.cursor = opts.cursor;
@@ -520,13 +521,19 @@ class Client {
             out.push(m);
         return out;
     }
-    getImage(userId, memoryId) {
+    async exportImages(userId, opts = {}) {
+        const out = [];
+        for await (const m of this.iterImages(userId, opts))
+            out.push(m);
+        return out;
+    }
+    async getImage(userId, memoryId) {
         if (typeof memoryId !== "string" || !memoryId.trim()) {
             throw new Error("memoryId is required — the id that add/store or listImages returned.");
         }
         return this.requestBytes("/api/v1/memory/image", { user_id: this.uid(userId), memory_id: memoryId.trim() });
     }
-    forgetImage(userId, memoryId, opts = {}) {
+    async forgetImage(userId, memoryId, opts = {}) {
         if (typeof memoryId !== "string" || !memoryId.trim()) {
             throw new Error("memoryId is required — the id of the memory whose image you want removed.");
         }
@@ -535,7 +542,7 @@ class Client {
             body.preview = true;
         return this.request("DELETE", "/api/v1/memory/image", body);
     }
-    listImages(userId, opts = {}) {
+    async listImages(userId, opts = {}) {
         const body = { user_id: this.uid(userId) };
         if (opts.limit !== undefined)
             body.limit = opts.limit;
@@ -565,7 +572,7 @@ class Client {
         throw new Error(`stopped after ${MAX_PAGES} pages — the store did not end. This is a truncated ` +
             `answer, not the whole store.`);
     }
-    revisions(userId, opts = {}) {
+    async revisions(userId, opts = {}) {
         const body = {};
         if (opts.include !== undefined)
             body.include = opts.include;
@@ -578,13 +585,13 @@ class Client {
         body.user_id = this.uid(userId);
         return this.post("/api/v1/won/revisions", body);
     }
-    lineage(userId, memoryId) {
+    async lineage(userId, memoryId) {
         if (typeof memoryId !== "string" || !memoryId.trim()) {
             throw new Error("memoryId is required — the memory whose history you want.");
         }
         return this.post("/api/v1/memory/lineage", { user_id: this.uid(userId), memory_id: memoryId.trim() });
     }
-    bySpeaker(speaker, userId, opts = {}) {
+    async bySpeaker(speaker, userId, opts = {}) {
         if (!speaker || typeof speaker !== "string" || speaker.trim() === "") {
             throw new Error('speaker is required — "me" for the assistant, or a person\'s name.');
         }
@@ -608,41 +615,42 @@ class Client {
     async listEngrams() {
         const data = await this.request("GET", "/api/v1/engram");
         return {
+            ...data,
             engrams: asRecords(data.engrams),
             forms: asRecords(data.forms),
             note: typeof data.note === "string" ? data.note : undefined,
         };
     }
-    createStore(userId) {
+    async createStore(userId) {
         return this.post("/api/v1/memory/collection", { user_id: this.uid(userId) });
     }
     async listStores() {
         const r = await this.request("GET", "/api/v1/memory/collections");
         return asRecords(r.collections);
     }
-    deleteStore(userId) {
+    async deleteStore(userId) {
         if (typeof userId !== "string" || !userId.trim())
             throw new Error("userId is required (a non-blank string) — deleteStore never falls back to the default store.");
         warnIfStoreIdCollapses(userId);
         return this.request("DELETE", "/api/v1/memory/collection", { user_id: userId });
     }
-    addSpeaker(speaker, userId) {
+    async addSpeaker(speaker, userId) {
         return this.post("/api/v1/memory/speakers", { user_id: this.uid(userId), speaker });
     }
     async listSpeakers(userId) {
         const r = await this.request("GET", `/api/v1/memory/speakers?user_id=${encodeURIComponent(this.uid(userId))}`);
         return { ...r, speakers: asRecords(r?.speakers) };
     }
-    removeSpeaker(speaker, userId) {
+    async removeSpeaker(speaker, userId) {
         return this.request("DELETE", "/api/v1/memory/speakers", { user_id: this.uid(userId), speaker });
     }
-    delete(userId, memoryId) {
+    async delete(userId, memoryId) {
         if (typeof memoryId !== "string" || !memoryId.trim()) {
             throw new Error("memoryId is required (non-blank). To delete every memory in a store, call deleteAll(userId) explicitly.");
         }
         return this.post("/api/v1/memory/forget", { user_id: this.uid(userId), memory_id: memoryId.trim() });
     }
-    deleteAll(userId) {
+    async deleteAll(userId) {
         if (typeof userId !== "string" || !userId.trim())
             throw new Error("userId is required (a non-blank string) for deleteAll — anything else would wipe the default store.");
         warnIfStoreIdCollapses(userId);
@@ -777,7 +785,9 @@ class Client {
                     if (e?.name === "AbortError" || att.signal.aborted) {
                         throw new APIConnectionError(0, this.abortMessage(att.why()));
                     }
-                    throw e;
+                    if (e instanceof WosError)
+                        throw e;
+                    throw new APIConnectionError(0, `network error: ${e?.message ?? e}`);
                 }
                 if (buf.byteLength === 0) {
                     throw new WosError(res.status, "empty image body — the service returned no bytes");
@@ -910,7 +920,14 @@ class Client {
                 }
                 if (e instanceof WosError)
                     throw e;
-                throw new APIConnectionError(0, `network error: ${e?.message ?? e}`);
+                if (!(IDEMPOTENT_METHODS.has(method.toUpperCase()) && attempt + 1 < attempts)) {
+                    throw new APIConnectionError(0, `network error: ${e?.message ?? e}`);
+                }
+                att.clear();
+                const delay = this.backoffMs(attempt);
+                logDebug(`${method} ${logPath} — body dropped mid-stream, retrying in ${delay}ms (attempt ${attempt + 1}/${attempts})`);
+                await this.backoffSleep(delay, deadlineAt);
+                continue;
             }
             finally {
                 att.clear();

package/dist/wontopos.d.ts

@@ -26,8 +26,8 @@
  * and searching call no LLM.
  *
  * Reliability: every call retries transient failures with exponential backoff +
- * jitter, honoring `Retry-After` — 429 always; 502/503 and connection errors only
- * when a retry can never double-process a write (idempotent calls, or a failure
+ * jitter, honoring `Retry-After` — 429 always; 408/502/503/504 and connection errors
+ * only when a retry can never double-process a write (idempotent calls, or a failure
  * at connect time). Tune with `maxRetries` (0 disables) and `timeoutMs`, or per
  * call site via the `withTimeout()` / `withRetries()` clones.
  *
@@ -86,8 +86,8 @@ export declare class RateLimitError extends WosError {
 /**
  * 5xx — the service failed.
  *
- * `502` / `503` are transient: the client already retries them for calls where a
- * retry cannot double-process a write, and retrying yourself is reasonable.
+ * `502` / `503` / `504` are transient: the client already retries them for calls
+ * where a retry cannot double-process a write, and retrying yourself is reasonable.
  *
  * `501` is NOT transient. It means the engine behind the model you selected does
  * not implement that endpoint at all (the error carries `model` and `endpoint`).
@@ -428,6 +428,9 @@ export interface EngramCatalog {
     engrams: EngramInfo[];
     forms: EngramInfo[];
     note?: string;
+    /** Anything else the reply carried. Responses widen; the runtime keeps those fields
+     *  and this is what lets a typed caller read them. */
+    [key: string]: unknown;
 }
 /** `createStore` / `deleteStore` → `{ user_id, status }`. */
 export interface StoreOpResult {
@@ -548,9 +551,9 @@ export interface SearchOptions {
  * arrives with a different body. Use it when a retry is your own (a job that died and
  * was re-run, a queue that redelivers). The SDK retries a write on exactly one
  * status: 429, which the service answers before it processes anything, so nothing
- * was stored. It never retries a write on 502 / 503 or a dropped body, where the
- * request may already have been stored and billed — without a key it cannot know
- * whether that first attempt landed.
+ * was stored. It never retries a write on 408 / 502 / 503 / 504 or a dropped body,
+ * where the first attempt may already have landed — without a key the client cannot
+ * know whether it did.
  *
  * The key must be UNIQUE PER LOGICAL WRITE — derive it from the thing being stored
  * (`` `import:${row.id}` ``), never a constant, or the second write replays the first
@@ -582,8 +585,8 @@ export interface ClientOptions {
      * to the account's built-in `default` store. */
     userId?: string;
     /** How many times to retry transient failures before throwing — 429 always;
-     * 502/503 and connection errors only when a retry can never double-process a
-     * write. 0 disables retries (default 2). */
+     * 408/502/503/504 and connection errors only when a retry can never
+     * double-process a write. 0 disables retries (default 2). */
     maxRetries?: number;
     /** Alias of `maxRetries`. The Python SDK calls this option `retries`, and these
      *  SDKs are published in lockstep as "the same surface" — so code ported between
@@ -611,10 +614,8 @@ export interface ClientOptions {
      *
      *  This is the seam for anything the runtime cannot express through options.
      *  The one that matters in practice is a corporate egress proxy: Node's global
-     *  fetch (undici) IGNORES `HTTP_PROXY` / `HTTPS_PROXY`, so behind such a proxy
-     *  this SDK could not connect at all — while the Python and Rust SDKs went
-     *  through, because `requests` and `reqwest` both read those variables. Pass a
-     *  proxy-aware fetch and the three behave the same again:
+     *  fetch (undici) IGNORES `HTTP_PROXY` / `HTTPS_PROXY`, so behind such a proxy no
+     *  request leaves at all. Pass a proxy-aware fetch and they go through:
      *
      *      import { ProxyAgent } from "undici";
      *      const agent = new ProxyAgent(process.env.HTTPS_PROXY!);
@@ -696,7 +697,7 @@ export declare class Client {
     addTurn(userMsg: string, assistantMsg: string, userId?: string, opts?: WriteOptions): Promise<StatusResult>;
     /** Bulk-ingest a large blob of text in one call. For backfilling.
      *  The call most worth an `opts.idempotencyKey`: a backfill that dies halfway and is
-     *  re-run would otherwise re-ingest and re-bill the whole blob. */
+     *  re-run would otherwise ingest the whole blob a second time. */
     addBulk(content: string, userId?: string, category?: string, timestamp?: string, opts?: WriteOptions): Promise<StatusResult>;
     /** Supersede an old memory with new content. Payload first, userId last — same shape as add/search. */
     update(oldMemoryId: string, newContent: string, userId?: string, opts?: WriteOptions): Promise<UpdateResult>;
@@ -812,6 +813,11 @@ export declare class Client {
     }): AsyncGenerator<Memory>;
     /** Collect ALL of a store's memories into an array (the text you stored, and its metadata). */
     exportMemories(userId?: string): Promise<Memory[]>;
+    /** Collect ALL of a store's image memories into an array — the image-side pair of
+     *  `exportMemories`. */
+    exportImages(userId?: string, opts?: {
+        pageSize?: number;
+    }): Promise<Memory[]>;
     /**
      * Fetch the bytes of an image memory — the picture the SERVICE holds.
      *

package/dist/wontopos.js

@@ -1,4 +1,4 @@
-const VERSION = "2.2.38";
+const VERSION = "2.2.39";
 const RUNTIME = (() => {
     const p = globalThis?.process;
     return p?.version ? ` (node/${p.version}; ${p.platform}-${p.arch})` : "";
@@ -13,7 +13,7 @@ function logDebug(msg) {
 const DEFAULT_BASE_URL = "https://api.wontopos.com";
 const DEFAULT_MODEL = "tablet-2";
 const RETRY_ALWAYS = new Set([429]);
-const RETRY_IF_IDEMPOTENT = new Set([502, 503]);
+const RETRY_IF_IDEMPOTENT = new Set([408, 502, 503, 504]);
 const IDEMPOTENT_METHODS = new Set(["GET", "HEAD", "PUT", "DELETE", "OPTIONS"]);
 const LOOPBACK_HOSTS = new Set(["localhost", "127.0.0.1", "::1", "0.0.0.0"]);
 const MAX_RESPONSE_BYTES = 64 * 1024 * 1024;
@@ -208,6 +208,7 @@ const KNOWN_SEARCH_KEYS = new Set([
 ]);
 const RESERVED_SEARCH_KEYS = new Set(["user_id", "query", "max_results"]);
 const KNOWN_RECALL_KEYS = new Set(["form", "tz", "limit", "context_limit"]);
+const KNOWN_ENGRAM_KEYS = new Set(["form", "tz"]);
 function checkSearchOpts(opts) {
     checkOpts(opts, KNOWN_SEARCH_KEYS, "search");
 }
@@ -222,8 +223,7 @@ function checkOpts(opts, known, what) {
         const near = [...known].find((n) => n !== "extra" && editWithin(k, n, 2));
         throw new Error(`unknown ${what} option ${JSON.stringify(k)}` +
             (near ? ` — did you mean ${JSON.stringify(near)}?` : "") +
-            `. The service drops keys it does not know and answers anyway, so this would ` +
-            `have looked like it worked.` +
+            `. It would have had no effect, and the call would have looked like it worked.` +
             (known.has("extra")
                 ? ` Pass it under \`extra\` if the service accepts it and this client does not know it yet.`
                 : ""));
@@ -392,25 +392,25 @@ export class Client {
     withRetries(maxRetries) {
         return this.clone({ maxRetries });
     }
-    add(content, userId, metadata = {}, opts = {}) {
+    async add(content, userId, metadata = {}, opts = {}) {
         const body = { user_id: this.uid(userId), content, metadata };
         if (opts.image !== undefined)
             body.image = normalizeImage(opts.image);
         return this.post("/api/v1/memory/store", body, opts.idempotencyKey);
     }
-    store(content, userId, metadata = {}, opts = {}) {
+    async store(content, userId, metadata = {}, opts = {}) {
         return this.add(content, userId, metadata, opts);
     }
-    addTurn(userMsg, assistantMsg, userId, opts = {}) {
+    async addTurn(userMsg, assistantMsg, userId, opts = {}) {
         return this.post("/api/v1/memory/store-turn", { user_id: this.uid(userId), user_msg: userMsg, assistant_msg: assistantMsg }, opts.idempotencyKey);
     }
-    addBulk(content, userId, category = "general", timestamp, opts = {}) {
+    async addBulk(content, userId, category = "general", timestamp, opts = {}) {
         const body = { user_id: this.uid(userId), content, category };
         if (timestamp)
             body.timestamp = timestamp;
         return this.post("/api/v1/memory/bulk-store", body, opts.idempotencyKey);
     }
-    update(oldMemoryId, newContent, userId, opts = {}) {
+    async update(oldMemoryId, newContent, userId, opts = {}) {
         return this.post("/api/v1/memory/supersede", { user_id: this.uid(userId), old_memory_id: oldMemoryId, new_content: newContent }, opts.idempotencyKey);
     }
     async search(query, userId, limit = 10, opts = {}) {
@@ -455,14 +455,15 @@ export class Client {
         }
         return this.post("/api/v1/memory/recall", withForm(body, opts.form, opts.tz));
     }
-    engram(name, query, userId, opts = {}) {
+    async engram(name, query, userId, opts = {}) {
+        checkOpts(opts, KNOWN_ENGRAM_KEYS, "engram");
         return this.post("/api/v1/engram/run", withForm({ name, user_id: this.uid(userId), query }, opts.form, opts.tz));
     }
     async history(userId) {
         const r = await this.post("/api/v1/memory/history", { user_id: this.uid(userId) });
         return asRecords(r.turns);
     }
-    stats(userId) {
+    async stats(userId) {
         return this.post("/api/v1/memory/stats", { user_id: this.uid(userId) });
     }
     async usage(days = 7) {
@@ -471,13 +472,13 @@ export class Client {
         }
         return this.request("GET", `/api/v1/won/usage?days=${days}`);
     }
-    get(userId, memoryId) {
+    async get(userId, memoryId) {
         if (typeof memoryId !== "string" || !memoryId.trim()) {
             throw new Error("memoryId is required — the id that add/store or listMemories returned.");
         }
         return this.post("/api/v1/memory/get", { user_id: this.uid(userId), memory_id: memoryId.trim() }).then((r) => asObj(r.memory));
     }
-    listMemories(userId, opts = {}) {
+    async listMemories(userId, opts = {}) {
         const body = { user_id: this.uid(userId), limit: opts.limit ?? 100 };
         if (opts.cursor)
             body.cursor = opts.cursor;
@@ -505,13 +506,19 @@ export class Client {
             out.push(m);
         return out;
     }
-    getImage(userId, memoryId) {
+    async exportImages(userId, opts = {}) {
+        const out = [];
+        for await (const m of this.iterImages(userId, opts))
+            out.push(m);
+        return out;
+    }
+    async getImage(userId, memoryId) {
         if (typeof memoryId !== "string" || !memoryId.trim()) {
             throw new Error("memoryId is required — the id that add/store or listImages returned.");
         }
         return this.requestBytes("/api/v1/memory/image", { user_id: this.uid(userId), memory_id: memoryId.trim() });
     }
-    forgetImage(userId, memoryId, opts = {}) {
+    async forgetImage(userId, memoryId, opts = {}) {
         if (typeof memoryId !== "string" || !memoryId.trim()) {
             throw new Error("memoryId is required — the id of the memory whose image you want removed.");
         }
@@ -520,7 +527,7 @@ export class Client {
             body.preview = true;
         return this.request("DELETE", "/api/v1/memory/image", body);
     }
-    listImages(userId, opts = {}) {
+    async listImages(userId, opts = {}) {
         const body = { user_id: this.uid(userId) };
         if (opts.limit !== undefined)
             body.limit = opts.limit;
@@ -550,7 +557,7 @@ export class Client {
         throw new Error(`stopped after ${MAX_PAGES} pages — the store did not end. This is a truncated ` +
             `answer, not the whole store.`);
     }
-    revisions(userId, opts = {}) {
+    async revisions(userId, opts = {}) {
         const body = {};
         if (opts.include !== undefined)
             body.include = opts.include;
@@ -563,13 +570,13 @@ export class Client {
         body.user_id = this.uid(userId);
         return this.post("/api/v1/won/revisions", body);
     }
-    lineage(userId, memoryId) {
+    async lineage(userId, memoryId) {
         if (typeof memoryId !== "string" || !memoryId.trim()) {
             throw new Error("memoryId is required — the memory whose history you want.");
         }
         return this.post("/api/v1/memory/lineage", { user_id: this.uid(userId), memory_id: memoryId.trim() });
     }
-    bySpeaker(speaker, userId, opts = {}) {
+    async bySpeaker(speaker, userId, opts = {}) {
         if (!speaker || typeof speaker !== "string" || speaker.trim() === "") {
             throw new Error('speaker is required — "me" for the assistant, or a person\'s name.');
         }
@@ -593,41 +600,42 @@ export class Client {
     async listEngrams() {
         const data = await this.request("GET", "/api/v1/engram");
         return {
+            ...data,
             engrams: asRecords(data.engrams),
             forms: asRecords(data.forms),
             note: typeof data.note === "string" ? data.note : undefined,
         };
     }
-    createStore(userId) {
+    async createStore(userId) {
         return this.post("/api/v1/memory/collection", { user_id: this.uid(userId) });
     }
     async listStores() {
         const r = await this.request("GET", "/api/v1/memory/collections");
         return asRecords(r.collections);
     }
-    deleteStore(userId) {
+    async deleteStore(userId) {
         if (typeof userId !== "string" || !userId.trim())
             throw new Error("userId is required (a non-blank string) — deleteStore never falls back to the default store.");
         warnIfStoreIdCollapses(userId);
         return this.request("DELETE", "/api/v1/memory/collection", { user_id: userId });
     }
-    addSpeaker(speaker, userId) {
+    async addSpeaker(speaker, userId) {
         return this.post("/api/v1/memory/speakers", { user_id: this.uid(userId), speaker });
     }
     async listSpeakers(userId) {
         const r = await this.request("GET", `/api/v1/memory/speakers?user_id=${encodeURIComponent(this.uid(userId))}`);
         return { ...r, speakers: asRecords(r?.speakers) };
     }
-    removeSpeaker(speaker, userId) {
+    async removeSpeaker(speaker, userId) {
         return this.request("DELETE", "/api/v1/memory/speakers", { user_id: this.uid(userId), speaker });
     }
-    delete(userId, memoryId) {
+    async delete(userId, memoryId) {
         if (typeof memoryId !== "string" || !memoryId.trim()) {
             throw new Error("memoryId is required (non-blank). To delete every memory in a store, call deleteAll(userId) explicitly.");
         }
         return this.post("/api/v1/memory/forget", { user_id: this.uid(userId), memory_id: memoryId.trim() });
     }
-    deleteAll(userId) {
+    async deleteAll(userId) {
         if (typeof userId !== "string" || !userId.trim())
             throw new Error("userId is required (a non-blank string) for deleteAll — anything else would wipe the default store.");
         warnIfStoreIdCollapses(userId);
@@ -762,7 +770,9 @@ export class Client {
                     if (e?.name === "AbortError" || att.signal.aborted) {
                         throw new APIConnectionError(0, this.abortMessage(att.why()));
                     }
-                    throw e;
+                    if (e instanceof WosError)
+                        throw e;
+                    throw new APIConnectionError(0, `network error: ${e?.message ?? e}`);
                 }
                 if (buf.byteLength === 0) {
                     throw new WosError(res.status, "empty image body — the service returned no bytes");
@@ -895,7 +905,14 @@ export class Client {
                 }
                 if (e instanceof WosError)
                     throw e;
-                throw new APIConnectionError(0, `network error: ${e?.message ?? e}`);
+                if (!(IDEMPOTENT_METHODS.has(method.toUpperCase()) && attempt + 1 < attempts)) {
+                    throw new APIConnectionError(0, `network error: ${e?.message ?? e}`);
+                }
+                att.clear();
+                const delay = this.backoffMs(attempt);
+                logDebug(`${method} ${logPath} — body dropped mid-stream, retrying in ${delay}ms (attempt ${attempt + 1}/${attempts})`);
+                await this.backoffSleep(delay, deadlineAt);
+                continue;
             }
             finally {
                 att.clear();

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "wontopos",
-  "version": "2.2.38",
+  "version": "2.2.39",
   "description": "Wontopos \u2014 long-term memory for AI agents. Identical recall in every language, ~100\u00d7 lower LLM bill.",
   "keywords": [
     "memory",