@hasna/mementos 0.14.70 → 0.14.71

package/dist/lib/gdpr.d.ts

@@ -12,9 +12,24 @@ export interface GdprErasureResult {
 }
 /**
  * Erase all memories containing the given PII identifier.
- * Replaces value, summary, and key with "[REDACTED]".
- * Clears tags and metadata that might contain PII.
+ *
+ * Replaces `value` with "[REDACTED]", clears `summary`, `tags` and `metadata`,
+ * and rewrites `key` to `[REDACTED]:<random token>` — per-row, for the reason
+ * given at the UPDATE below. Nothing derived from the original key or imported
+ * row id is retained.
+ *
+ * The erase runs in ONE TRANSACTION and is therefore all-or-nothing: a caller
+ * never observes a partially-erased subject, and a failed attempt leaves the
+ * store fully intact so a retry starts from a clean, still-fully-matching set.
+ *
  * Preserves the audit trail (audit_log entries have hashes, not content).
+ *
+ * NOTE: an erased memory is no longer reachable by its original key, so a later
+ * `save` under that key creates a NEW record rather than merging into the
+ * tombstone. That is deliberate: silently resurrecting an erased row and
+ * re-associating it with the data subject is precisely what erasure must
+ * prevent. Every foreign key into `memories` references `memories(id)` — no
+ * relational integrity depends on `key`, which is a human lookup handle only.
  */
 export declare function gdprErase(identifier: string, options?: {
     project_id?: string;

package/dist/lib/gdpr.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"gdpr.d.ts","sourceRoot":"","sources":["../../src/lib/gdpr.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,aAAa,IAAI,QAAQ,EAAE,MAAM,eAAe,CAAC;AAG1D,MAAM,WAAW,iBAAiB;IAChC,YAAY,EAAE,MAAM,CAAC;IACrB,UAAU,EAAE,MAAM,EAAE,CAAC;IACrB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED;;;;;GAKG;AACH,wBAAgB,SAAS,CACvB,UAAU,EAAE,MAAM,EAClB,OAAO,GAAE;IACP,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,OAAO,CAAC,EAAE,OAAO,CAAC;CACd,EACN,EAAE,CAAC,EAAE,QAAQ,GACZ,iBAAiB,CA+FnB"}
+{"version":3,"file":"gdpr.d.ts","sourceRoot":"","sources":["../../src/lib/gdpr.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,aAAa,IAAI,QAAQ,EAAE,MAAM,eAAe,CAAC;AAG1D,MAAM,WAAW,iBAAiB;IAChC,YAAY,EAAE,MAAM,CAAC;IACrB,UAAU,EAAE,MAAM,EAAE,CAAC;IACrB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,wBAAgB,SAAS,CACvB,UAAU,EAAE,MAAM,EAClB,OAAO,GAAE;IACP,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,OAAO,CAAC,EAAE,OAAO,CAAC;CACd,EACN,EAAE,CAAC,EAAE,QAAQ,GACZ,iBAAiB,CA8JnB"}

package/dist/mcp/index.js

@@ -12074,18 +12074,23 @@ function gdprErase(identifier, options = {}, db) {
       timestamp
     };
   }
-  const memoryIds = [];
-  for (const row of rows) {
-    d.run(`UPDATE memories SET
+  const memoryIds = d.transaction(() => {
+    const ids = [];
+    for (const row of rows) {
+      const redactedKey = `[REDACTED]:${crypto.randomUUID()}`;
+      d.run(`UPDATE memories SET
+        key = ?,
         value = '[REDACTED]',
         summary = NULL,
         tags = '[]',
         metadata = '{}',
         updated_at = ?
-       WHERE id = ?`, [timestamp, row.id]);
-    d.run("DELETE FROM memory_tags WHERE memory_id = ?", [row.id]);
-    memoryIds.push(row.id);
-  }
+       WHERE id = ?`, [redactedKey, timestamp, row.id]);
+      d.run("DELETE FROM memory_tags WHERE memory_id = ?", [row.id]);
+      ids.push(row.id);
+    }
+    return ids;
+  });
   return {
     erased_count: memoryIds.length,
     memory_ids: memoryIds,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@hasna/mementos",
-  "version": "0.14.70",
+  "version": "0.14.71",
   "description": "Universal memory system for AI agents - CLI + MCP server + library API",
   "type": "module",
   "main": "dist/index.js",