feat(memory): validate official clients on current stack

.github/workflows/ci.yml

@@ -10,11 +10,11 @@ jobs:
   ci:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v7
 
-      - uses: pnpm/action-setup@v4
+      - uses: pnpm/action-setup@v6
 
-      - uses: actions/setup-node@v4
+      - uses: actions/setup-node@v7
         with:
           node-version: 22
           cache: pnpm
@@ -43,16 +43,16 @@ jobs:
     runs-on: ubuntu-latest
     timeout-minutes: 20
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v7
 
-      - uses: pnpm/action-setup@v4
+      - uses: pnpm/action-setup@v6
 
-      - uses: actions/setup-node@v4
+      - uses: actions/setup-node@v7
         with:
           node-version: 22
           cache: pnpm
 
-      - uses: actions/setup-python@v5
+      - uses: actions/setup-python@v7
         with:
           python-version: '3.12'
 

.github/workflows/publish.yml

@@ -10,17 +10,17 @@ jobs:
   verify:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v7
 
-      - uses: pnpm/action-setup@v4
+      - uses: pnpm/action-setup@v6
 
-      - uses: actions/setup-node@v4
+      - uses: actions/setup-node@v7
         with:
           node-version: 22
           cache: pnpm
           registry-url: https://registry.npmjs.org
 
-      - uses: actions/setup-python@v5
+      - uses: actions/setup-python@v7
         with:
           python-version: '3.12'
 
@@ -65,20 +65,20 @@ jobs:
       contents: read
       id-token: write
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v7
 
-      - uses: pnpm/action-setup@v4
+      - uses: pnpm/action-setup@v6
 
-      - uses: actions/setup-node@v4
+      - uses: actions/setup-node@v7
         with:
           node-version: 22
           cache: pnpm
 
       - run: pnpm install --frozen-lockfile
       - run: pnpm run build
 
-      # Tokenless OIDC trusted publishing — no NPM_TOKEN to expire. The
-      # id-token→credential exchange is an npm-CLI feature (>= 11.5.1; Node 22
+      # Tokenless OIDC trusted publishing uses a short-lived credential. The
+      # exchange is an npm CLI feature (>= 11.5.1; Node 22
       # bundles npm 10) and pnpm only signs provenance (the PUT then 404s on
       # auth), so upgrade npm and publish with it. This package has no
       # `workspace:` deps, so npm publish is safe. No setup-node registry-url:
@@ -87,7 +87,9 @@ jobs:
       # agent-knowledge, workflow publish.yml.
       - name: Publish to npm (OIDC trusted publishing)
         run: |
-          npm install -g npm@latest
+          # npm 12.0.0 omits a provenance dependency required by libnpmpublish.
+          # npm 11 supports OIDC and is the current known-good release line.
+          npm install -g npm@11
           NAME=$(node -p "require('./package.json').name")
           VERSION=$(node -p "require('./package.json').version")
           if npm view "$NAME@$VERSION" version >/dev/null 2>&1; then

.npmrc

@@ -0,0 +1 @@
+ignore-scripts=false

CHANGELOG.md

@@ -1,5 +1,15 @@
 # Changelog
 
+## 6.1.0
+
+### Changed
+
+- Updated `@tangle-network/agent-eval` to `0.130.1`, `@tangle-network/agent-interface` to `0.35.0`, Mem0 to `3.1.2`, and the maintained build toolchain.
+- Replaced tsup with tsdown so declaration builds support TypeScript 7.
+- Added package export validation with publint and Are the Types Wrong to every release.
+- Split Mem0 hosted and OSS client contracts, compile them against Mem0 3.1.2, and exercise the OSS SQLite lifecycle locally.
+- Updated GitHub Actions to their current stable releases.
+
 ## 6.0.0
 
 ### Breaking Changes

README.md

@@ -9,7 +9,7 @@ Supply application callbacks for those decisions, or use `@tangle-network/agent-
 ## Install
 
 ```bash
-pnpm add @tangle-network/agent-knowledge @tangle-network/agent-eval@0.129.0
+pnpm add @tangle-network/agent-knowledge @tangle-network/agent-eval@0.130.1
 ```
 
 Requires Node.js 20.19 or later.

package.json

@@ -1,6 +1,6 @@
 {
   "name": "@tangle-network/agent-knowledge",
-  "version": "6.0.0",
+  "version": "6.1.0",
   "description": "Build, search, evaluate, and improve source-backed knowledge bases.",
   "homepage": "https://github.com/tangle-network/agent-knowledge#readme",
   "repository": {
@@ -60,36 +60,47 @@
     "access": "public"
   },
   "scripts": {
-    "build": "tsup",
-    "dev": "tsup --watch",
+    "build": "tsdown",
+    "dev": "tsdown --watch",
     "prepublishOnly": "pnpm build",
     "test": "vitest run",
     "test:watch": "vitest",
-    "typecheck": "tsc --noEmit",
+    "typecheck": "pnpm run typecheck:src && pnpm run typecheck:contracts",
+    "typecheck:src": "tsc --noEmit",
+    "typecheck:contracts": "tsc --noEmit -p tsconfig.contracts.json",
     "lint": "biome check src tests",
     "format": "biome format --write src tests",
     "check:skills": "node scripts/check-skills.mjs",
-    "verify:package": "pnpm run check:skills && node scripts/verify-package.mjs",
+    "verify:package": "pnpm run check:skills && publint && attw --pack --profile esm-only . && node scripts/verify-package.mjs",
     "verify:official-optimizers": "node scripts/verify-official-optimizers.mjs"
   },
   "dependencies": {
-    "@tangle-network/agent-eval": "0.129.0",
-    "@tangle-network/agent-interface": "0.34.0",
+    "@tangle-network/agent-eval": "0.130.1",
+    "@tangle-network/agent-interface": "0.35.0",
     "proper-lockfile": "4.1.2",
     "zod": "^4.4.3"
   },
   "devDependencies": {
+    "@arethetypeswrong/cli": "^0.18.5",
     "@biomejs/biome": "^2.5.5",
     "@neo4j-labs/agent-memory": "0.4.1",
     "@types/node": "^26.1.1",
     "@types/proper-lockfile": "4.1.4",
-    "mem0ai": "3.1.1",
-    "tsup": "^8.0.0",
-    "typescript": "^6.0.3",
+    "mem0ai": "3.1.2",
+    "publint": "^0.3.22",
+    "tsdown": "^0.22.14",
+    "typescript": "^7.0.2",
     "vite": "8.1.5",
     "vitest": "^4.1.10"
   },
   "pnpm": {
+    "ignoredBuiltDependencies": [
+      "@ax-llm/ax",
+      "esbuild"
+    ],
+    "onlyBuiltDependencies": [
+      "better-sqlite3"
+    ],
     "minimumReleaseAge": 4320,
     "minimumReleaseAgeExclude": [
       "@tangle-network/agent-eval",
@@ -98,7 +109,7 @@
       "vite"
     ],
     "overrides": {
-      "@hono/node-server": "2.0.11",
+      "@hono/node-server": "2.0.12",
       "esbuild": "0.28.1",
       "hono": "4.12.32",
       "vite": "8.1.5",