unique_toolkit 1.49.0__tar.gz → 1.50.1__tar.gz

{unique_toolkit-1.49.0 → unique_toolkit-1.50.1}/CHANGELOG.md

@@ -5,8 +5,16 @@ All notable changes to this project will be documented in this file.
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
 and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [1.50.1] - 2026-03-02
+- Security: upgrade pillow from 10.4.0 to 12.1.1 (CVE / Dependabot alert — out-of-bounds write in PSD loader)
+- Security: upgrade starlette from 0.48.0 to 0.49.1 (Dependabot alert)
+
+## [1.50.0] - 2026-03-02
+- Add async download-to-bytes functions: `download_content_to_bytes_async` on `KnowledgeBaseService`, `ContentService`, and `download_chat_content_to_bytes_async` on `ChatService`
+
 ## [1.49.0] - 2026-03-02
 - Make the code execution tool always available to the agent
+
 ## [1.48.1] - 2026-03-02
 - Revert `DocxGeneratorConfig` and `DocxGeneratorService` additions from 1.47.11 (broke SWOT tool, pending further testing)
 
@@ -207,7 +215,7 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 ## [1.43.1] - 2026-01-12
 - Remove accidental example report.md from repo
 
-##[1.43.0] - 2026-01-11
+## [1.43.0] - 2026-01-11
 - Add `WriteUpAgent` as an experimental service
 
 ## [1.42.9] - 2026-01-11
@@ -304,7 +312,7 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 ## [1.34.0] - 2025-12-02
 - Add option to upload code interpreter generated files to the chat.
 
-##[1.33.3] - 2025-12-02
+## [1.33.3] - 2025-12-02
 - Fix serialization of ToolBuildConfig `configuration` field.
 
 ## [1.33.2] - 2025-12-01
@@ -350,17 +358,17 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 - Add early return in `create_message_log_entry` if chat_service doesn't have assistant_message_id (relevant for agentic
   table)
 
-##[1.29.0] - 2025-11-21
+## [1.29.0] - 2025-11-21
 - Add option to force include references in sub agent responses even if unused by main agent response.
 
 ## [1.28.9] - 2025-11-21
 - Remove `knolwedge_base_service` from DocXGeneratorService
 
-##[1.28.8] - 2025-11-20
+## [1.28.8] - 2025-11-20
 - Add query params to api operation
 - Add query params to endpoint builder
 
-##[1.28.7] - 2025-11-20
+## [1.28.7] - 2025-11-20
 - Adding Message Step Logger Class to the agentic tools.
 
 ## [1.28.6] - 2025-11-20

{unique_toolkit-1.49.0 → unique_toolkit-1.50.1}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.3
 Name: unique_toolkit
-Version: 1.49.0
+Version: 1.50.1
 Summary: 
 License: Proprietary
 Author: Cedric Klinkert
@@ -21,7 +21,7 @@ Requires-Dist: markdown-it-py (>=4.0.0,<5.0.0)
 Requires-Dist: numpy (>=2.4.2,<3.0.0)
 Requires-Dist: openai (>=1.99.9,<2.0.0)
 Requires-Dist: pandas (>=2.3.0,<3.0.0)
-Requires-Dist: pillow (>=10.4.0,<11.0.0)
+Requires-Dist: pillow (>=12.1.1)
 Requires-Dist: platformdirs (>=4.0.0,<5.0.0)
 Requires-Dist: pydantic (>=2.8.2,<3.0.0)
 Requires-Dist: pydantic-settings (>=2.10.1,<3.0.0)
@@ -129,8 +129,16 @@ All notable changes to this project will be documented in this file.
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
 and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [1.50.1] - 2026-03-02
+- Security: upgrade pillow from 10.4.0 to 12.1.1 (CVE / Dependabot alert — out-of-bounds write in PSD loader)
+- Security: upgrade starlette from 0.48.0 to 0.49.1 (Dependabot alert)
+
+## [1.50.0] - 2026-03-02
+- Add async download-to-bytes functions: `download_content_to_bytes_async` on `KnowledgeBaseService`, `ContentService`, and `download_chat_content_to_bytes_async` on `ChatService`
+
 ## [1.49.0] - 2026-03-02
 - Make the code execution tool always available to the agent
+
 ## [1.48.1] - 2026-03-02
 - Revert `DocxGeneratorConfig` and `DocxGeneratorService` additions from 1.47.11 (broke SWOT tool, pending further testing)
 
@@ -331,7 +339,7 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 ## [1.43.1] - 2026-01-12
 - Remove accidental example report.md from repo
 
-##[1.43.0] - 2026-01-11
+## [1.43.0] - 2026-01-11
 - Add `WriteUpAgent` as an experimental service
 
 ## [1.42.9] - 2026-01-11
@@ -428,7 +436,7 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 ## [1.34.0] - 2025-12-02
 - Add option to upload code interpreter generated files to the chat.
 
-##[1.33.3] - 2025-12-02
+## [1.33.3] - 2025-12-02
 - Fix serialization of ToolBuildConfig `configuration` field.
 
 ## [1.33.2] - 2025-12-01
@@ -474,17 +482,17 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 - Add early return in `create_message_log_entry` if chat_service doesn't have assistant_message_id (relevant for agentic
   table)
 
-##[1.29.0] - 2025-11-21
+## [1.29.0] - 2025-11-21
 - Add option to force include references in sub agent responses even if unused by main agent response.
 
 ## [1.28.9] - 2025-11-21
 - Remove `knolwedge_base_service` from DocXGeneratorService
 
-##[1.28.8] - 2025-11-20
+## [1.28.8] - 2025-11-20
 - Add query params to api operation
 - Add query params to endpoint builder
 
-##[1.28.7] - 2025-11-20
+## [1.28.7] - 2025-11-20
 - Adding Message Step Logger Class to the agentic tools.
 
 ## [1.28.6] - 2025-11-20

{unique_toolkit-1.49.0 → unique_toolkit-1.50.1}/pyproject.toml

@@ -1,6 +1,6 @@
 [tool.poetry]
 name = "unique_toolkit"
-version = "1.49.0"
+version = "1.50.1"
 description = ""
 authors = [
     "Cedric Klinkert <cedric.klinkert@unique.ch>",
@@ -28,7 +28,7 @@ pydantic-settings = "^2.10.1"
 sseclient = "^0.0.27"
 openai = "^1.99.9"
 platformdirs = "^4.0.0"
-pillow = "^10.4.0"
+pillow = ">=12.1.1"
 unique-sdk = "^0.10.80"
 jambo = "^0.1.2"
 jinja2 = "^3.1.6"
@@ -56,7 +56,8 @@ langchain-core = "^0.3.0"
 optional = true
 
 [tool.poetry.group.fastapi.dependencies]
-fastapi = "^0.119.0"
+fastapi = "^0.121.0"
+starlette = ">=0.49.1"
 uvicorn = "^0.37.0"
 
 [tool.poetry.group.ci.dependencies]
@@ -84,6 +85,11 @@ pandas = "^2.3.3"
 requires = ["poetry-core"]
 build-backend = "poetry.core.masonry.api"
 
+[tool.uv]
+constraint-dependencies = [
+    "starlette>=0.49.1",
+]
+
 [tool.poe.tasks]
 lint = "ruff check ."
 lint-fix = "ruff check . --fix"

{unique_toolkit-1.49.0 → unique_toolkit-1.50.1}/unique_toolkit/agentic/tools/openai_builtin/code_interpreter/service.py

@@ -125,9 +125,9 @@ async def _upload_files_to_container(
             logger.info(
                 "Uploding file %s to container %s", file.id, memory.container_id
             )
-            file_content = content_service.download_content_to_bytes(
+            file_content = await content_service.download_content_to_bytes_async(
                 content_id=file.id, chat_id=chat_id
-            )  # TODO: Use async version when available
+            )
 
             openai_file = await client.containers.files.create(
                 container_id=container_id,

{unique_toolkit-1.49.0 → unique_toolkit-1.50.1}/unique_toolkit/content/functions.py

@@ -677,6 +677,39 @@ def request_content_by_id(
     return requests.get(url, headers=headers)
 
 
+async def request_content_by_id_async(
+    user_id: str, company_id: str, content_id: str, chat_id: str | None
+) -> httpx.Response:
+    """
+    Sends an async request to download content.
+
+    Args:
+        user_id (str): The user ID.
+        company_id (str): The company ID.
+        content_id (str): The ID of the content to download.
+        chat_id (str): The ID of the chat from which to download the content. Defaults to None to download from knowledge base.
+
+    Returns:
+        httpx.Response: The response object containing the downloaded content.
+
+    """
+    logger.info(f"Requesting content with content_id: {content_id}")
+    url = f"{unique_sdk.api_base}/content/{content_id}/file"
+    if chat_id:
+        url = f"{url}?chatId={chat_id}"
+
+    headers = {
+        "x-api-version": unique_sdk.api_version,
+        "x-app-id": unique_sdk.app_id,
+        "x-user-id": user_id,
+        "x-company-id": company_id,
+        "Authorization": "Bearer %s" % (unique_sdk.api_key,),
+    }
+
+    async with httpx.AsyncClient() as client:
+        return await client.get(url, headers=headers)
+
+
 def download_content_to_file_by_id(
     user_id: str,
     company_id: str,
@@ -747,6 +780,40 @@ def download_content_to_bytes(
     return response.content
 
 
+async def download_content_to_bytes_async(
+    user_id: str,
+    company_id: str,
+    content_id: str,
+    chat_id: str | None,
+) -> bytes:
+    """
+    Asynchronously downloads content to memory.
+
+    Args:
+        user_id (str): The user ID.
+        company_id (str): The company ID.
+        content_id (str): The ID of the content to download.
+        chat_id (str | None): The chat ID, or None to download from the knowledge base.
+
+    raises:
+        httpx.HTTPStatusError: If the download fails.
+    """
+    logger.info(f"Downloading content with content_id: {content_id}")
+    response = await request_content_by_id_async(
+        user_id, company_id, content_id, chat_id
+    )
+
+    if not response.is_success:
+        logger.error(
+            "Error downloading file %s: Status code %s",
+            content_id,
+            response.status_code,
+        )
+        response.raise_for_status()
+
+    return response.content
+
+
 # TODO: Discuss if we should deprecate this method due to unclear use by content_name
 def download_content(
     user_id: str,

{unique_toolkit-1.49.0 → unique_toolkit-1.50.1}/unique_toolkit/content/service.py

@@ -15,6 +15,7 @@ from unique_toolkit.content.constants import DEFAULT_SEARCH_LANGUAGE
 from unique_toolkit.content.functions import (
     download_content,
     download_content_to_bytes,
+    download_content_to_bytes_async,
     download_content_to_file_by_id,
     request_content_by_id,
     search_content_chunks,
@@ -736,6 +737,32 @@ class ContentService:
             chat_id=chat_id,
         )
 
+    async def download_content_to_bytes_async(
+        self,
+        content_id: str,
+        chat_id: str | None = None,
+    ) -> bytes:
+        """
+        Asynchronously downloads content to memory.
+
+        Args:
+            content_id (str): The id of the uploaded content.
+            chat_id (Optional[str]): The chat_id, defaults to None.
+
+        Returns:
+            bytes: The downloaded content.
+
+        Raises:
+            Exception: If the download fails.
+        """
+        chat_id = chat_id or self._chat_id  # type: ignore
+        return await download_content_to_bytes_async(
+            user_id=self._user_id,
+            company_id=self._company_id,
+            content_id=content_id,
+            chat_id=chat_id,
+        )
+
     def get_documents_uploaded_to_chat(self) -> list[Content]:
         chat_contents = self.search_contents(
             where={

{unique_toolkit-1.49.0 → unique_toolkit-1.50.1}/unique_toolkit/services/chat_service.py

@@ -70,6 +70,7 @@ from unique_toolkit.chat.schemas import (
 )
 from unique_toolkit.content.functions import (
     download_content_to_bytes,
+    download_content_to_bytes_async,
     search_contents,
     upload_content_from_bytes,
     upload_content_from_bytes_async,
@@ -1736,6 +1737,25 @@ class ChatService(ChatServiceDeprecated):
             chat_id=self._content_scope_chat_id,
         )
 
+    async def download_chat_content_to_bytes_async(self, *, content_id: str) -> bytes:
+        """Async download content by id from the content-scope chat (e.g. parent chat when subagent).
+
+        Uses the service's content-scope chat id, so when running as a subagent
+        with correlation, this accesses files from the primary chat session.
+
+        Args:
+            content_id: The content id to download.
+
+        Returns:
+            bytes: The raw content bytes.
+        """
+        return await download_content_to_bytes_async(
+            user_id=self._user_id,
+            company_id=self._company_id,
+            content_id=content_id,
+            chat_id=self._content_scope_chat_id,
+        )
+
     def download_chat_images_and_documents(self) -> tuple[list[Content], list[Content]]:
         """Return images and documents from the content-scope chat (e.g. parent chat when subagent).
 

{unique_toolkit-1.49.0 → unique_toolkit-1.50.1}/unique_toolkit/services/knowledge_base.py

@@ -17,6 +17,7 @@ from unique_toolkit.content.functions import (
     delete_content,
     delete_content_async,
     download_content_to_bytes,
+    download_content_to_bytes_async,
     download_content_to_file_by_id,
     get_content_info,
     get_folder_info,
@@ -536,6 +537,31 @@ class KnowledgeBaseService:
             chat_id=None,
         )
 
+    async def download_content_to_bytes_async(
+        self,
+        *,
+        content_id: str,
+    ) -> bytes:
+        """
+        Asynchronously downloads content to memory.
+
+        Args:
+            content_id (str): The id of the uploaded content.
+
+        Returns:
+            bytes: The downloaded content.
+
+        Raises:
+            Exception: If the download fails.
+        """
+
+        return await download_content_to_bytes_async(
+            user_id=self._user_id,
+            company_id=self._company_id,
+            content_id=content_id,
+            chat_id=None,
+        )
+
     def batch_file_upload(
         self,
         *,