densemem 2.7.0__tar.gz → 2.7.2rc4__tar.gz

{densemem-2.7.0 → densemem-2.7.2rc4}/PKG-INFO

@@ -1,8 +1,8 @@
 Metadata-Version: 2.5
 Name: densemem
-Version: 2.7.0
+Version: 2.7.2rc4
 Summary: Typed async and sync clients for Dense-Mem MCP
-Project-URL: Source, https://github.com/markhuangai/dense-mem/tree/53bd87d52fe929effcc16e4889b24b75b3bf11d4
+Project-URL: Source, https://github.com/markhuangai/dense-mem/tree/73080b340db41db481837f9ebd0ee6151321a96f
 Project-URL: Repository, https://github.com/markhuangai/dense-mem
 Project-URL: Documentation, https://github.com/markhuangai/dense-mem/wiki/Framework-Integrations
 Project-URL: Issues, https://github.com/markhuangai/dense-mem/issues
@@ -61,9 +61,8 @@ use inside an active event loop.
 Methods are initialize, list_tools, remember, ingest_session, recall_memory and
 trace_memory. Requests/results are typed dictionaries with py.typed. Server
 validation and authenticated discovery remain authoritative. Current-server
-compatibility is dense-mem.v2.7.0. Refresh tool discovery when upgrading: Remember
-now requires target_space even when the previous prerelease used this version string.
-Historical requests without a target fail validation, including retries.
+compatibility is dense-mem.v2.8.0. Refresh tool discovery after upgrading.
+Retired proposal fields fail validation before provider work.
 
 ## Complete Remember request and safe replay
 
@@ -73,45 +72,31 @@ from densemem import RememberRequest
 request: RememberRequest = {
     "target_space": "team_shared",
     "idempotency_key": retained_operation_key,
-    "evidence": [
-        {
-            "content": "Dense-Mem stores durable memory in PostgreSQL.",
-            "source_type": "manual",
-            "source": "Python core example",
-            "metadata": {"origin": "python-example"},
-        }
-    ],
-    "relationships": [
-        {
-            "ref": "durable-store",
-            "subject": {"name": "Dense-Mem", "entity_kind": "project"},
-            "predicate": {"proposed_key": "stores_durable_memory_in"},
-            "object": {"entity": {"name": "PostgreSQL", "entity_kind": "product"}},
-            "polarity": "+",
-            "evidence_indices": [0],
-        }
-    ],
+    "evidence": [{
+        "content": "Dense-Mem stores durable memory in PostgreSQL.",
+        "source_type": "manual",
+        "source": "Python core example",
+        "metadata": {"origin": "python-example"},
+    }],
 }
 result = await client.remember(request)
 ~~~
 
-Create the operation key once for a deliberate new operation, and retain this
-entire request before sending it. For a replay, resend this unchanged request,
-including target_space, metadata, and key. Never rotate a key to bypass a conflict. The client
-never retries automatically or fills in keys/defaults. Remember requires at least
-one proposal citing every evidence item. The client does not infer Relationships.
+Retain the complete request and key before sending. Replay the unchanged request
+including target, metadata, and key to reconcile an unknown outcome. The client
+never retries automatically or invents defaults. Legacy operation keys return
+non-retryable retired_contract guidance without duplicating accepted Evidence.
 
-Choose private for personal preferences or automation experience and team_shared
-for team knowledge. Every credential has separate private memory, including
-SSO-issued keys. Team-read-only credentials may remember privately; team_shared
-requires team write permission. The server never redirects a denied shared write.
-The response's space_kind confirms the selected destination.
+Choose private for personal memory and team_shared for team knowledge.
+Authentication selects the actual team, owner, and space. Every credential has
+separate private memory. Team-read-only credentials may remember privately;
+shared writes require current permission. The server never redirects a denied
+shared write.
 
-Inspect evidence and relationship_results: completed processing can include
-not_stored proposals and remediation. Returned warnings remain visible. Recall
-results preserve server order, equivalent IDs, conflicts, topic communities,
-provenance, search states and degradations. These frontiers do not
-establish new factual support. Trace requires a returned relationship_id.
+Inspect Evidence outcomes, search states, and explicit warnings. Recall preserves
+server order, equivalent IDs, Evidence conflicts, topic hints, and degradations.
+Trace takes an evidence_id. Export accepts 1–500 Evidence IDs and returns a
+versioned Evidence/provenance artifact with hashes and omission reporting.
 
 ## Exact private session ingestion
 
@@ -141,9 +126,10 @@ never authorization or private-space selection. The server must enable session
 ingestion and the caller must have effective private write access. Every active
 credential has its own private space, including team-read-only credentials;
 SSO sessions use their user/team membership's separate private space. Discovery
-hides unavailable tools. Remember requires its explicit target and proposals.
-Session semantic acceptance is atomic across the request. A no-fact completed
-result with search_state not_required is valid.
+hides unavailable tools. Remember requires its explicit target.
+Session acceptance is atomic across the request. The server selects exact
+current-event excerpts with original offsets using session_evidence_excerpts_v2.
+Empty extraction returns memory_outcome no_memory with search_state not_required.
 
 ## Failures and unknown outcomes
 
@@ -249,15 +235,16 @@ version matrix, and scripts/e2e.sh python_client for real server boundaries.
 The example scripts require DENSEMEM_ENDPOINT, DENSEMEM_TOKEN and a retained
 DENSEMEM_OPERATION_KEY. Keep the exact request unchanged when rerunning them.
 
-The isolated ADK dependency audit temporarily accepts
-[CVE-2026-114603](https://github.com/advisories/GHSA-xcq7-p3pf-p88h) only in
-`opentelemetry-api==1.43.0` with `google-adk==2.7.0`, until **2026-11-21 at
-00:00 UTC**. ADK's dependency cap excludes the patched OpenTelemetry 1.45.1.
-This accepts the advisory's malformed inbound `tracestate` header CPU denial
-of service risk; it does not patch the dependency. The scan still runs and
-retains the complete report. Other findings, skipped dependencies and scanner
-failures remain blocking. Enforcement resumes automatically at expiry; remove
-the exception sooner when a compatible ADK release supports the patched version.
+The root [dependency exception policy](../../dependency-exceptions.json) is the
+sole source of approved Go and Python vulnerability exceptions. It records exact
+advisories, dependencies, versions, ADK prerequisites, reasons, approval links,
+and exclusive UTC expiry dates. Both scanners resolve it from their repository
+location, independently of the working directory; environment variables cannot
+replace approvals. Missing or invalid policy fails closed. Empty sections grant
+no exceptions. Scans still run and retain complete reports in output files or
+console logs. Other findings, skipped dependencies and scanner failures remain
+blocking, and enforcement resumes automatically at expiry. Remove an exception
+sooner when compatible dependencies support its patched version.
 
 The server prerelease and stable-release workflows call publish-python to build
 and verify artifacts after their release gates pass, then upload through their own
@@ -318,9 +305,7 @@ or credential logging; caller-configured LangChain callbacks receive the normal
 queries and returned Documents.
 
 k defaults to 10 and accepts only integers from 1 through 50. recall_options
-accepts the existing public options: relationship_limit, community_limit,
-community_relationship_limit, valid_at, known_at, known_evidence_ids,
-known_relationship_ids and expand_from_entity_ids. Values pass to the server
+accepts topic_ids, topic_limit, valid_at, known_at, and known_evidence_ids. Values pass to the server
 unchanged and are validated there. Query, limit, team and space overrides are
 rejected; invocation-time recall overrides are unsupported. Options are copied
 for each call. Server validation and authorization remain authoritative.
@@ -329,9 +314,9 @@ Each returned evidence item becomes one Document in server order. Document.id
 is its evidence_id, and page_content is the exact server-bounded context without
 additional truncation. Document.metadata["densemem"] contains evidence_id,
 equivalent_evidence_ids, equivalents_truncated, space_kind, recall_id,
-related_relationships, related_communities, conflicts, search_states, degradations
-and suggested_actions. These relationship/community frontiers describe the whole
-query, rather than a new per-document support association. The current public
+related_topics, topics_truncated, conflicts, search_states, degradations
+and suggested_actions. Topic hints describe the query and support bounded
+follow-up through 1–10 unique topic_ids without descendant expansion. The current public
 response exposes no document scores, ranks or source URLs, so none are invented.
 Identical private and shared text remains separate Documents.
 

{densemem-2.7.0 → densemem-2.7.2rc4}/README.md

@@ -36,9 +36,8 @@ use inside an active event loop.
 Methods are initialize, list_tools, remember, ingest_session, recall_memory and
 trace_memory. Requests/results are typed dictionaries with py.typed. Server
 validation and authenticated discovery remain authoritative. Current-server
-compatibility is dense-mem.v2.7.0. Refresh tool discovery when upgrading: Remember
-now requires target_space even when the previous prerelease used this version string.
-Historical requests without a target fail validation, including retries.
+compatibility is dense-mem.v2.8.0. Refresh tool discovery after upgrading.
+Retired proposal fields fail validation before provider work.
 
 ## Complete Remember request and safe replay
 
@@ -48,45 +47,31 @@ from densemem import RememberRequest
 request: RememberRequest = {
     "target_space": "team_shared",
     "idempotency_key": retained_operation_key,
-    "evidence": [
-        {
-            "content": "Dense-Mem stores durable memory in PostgreSQL.",
-            "source_type": "manual",
-            "source": "Python core example",
-            "metadata": {"origin": "python-example"},
-        }
-    ],
-    "relationships": [
-        {
-            "ref": "durable-store",
-            "subject": {"name": "Dense-Mem", "entity_kind": "project"},
-            "predicate": {"proposed_key": "stores_durable_memory_in"},
-            "object": {"entity": {"name": "PostgreSQL", "entity_kind": "product"}},
-            "polarity": "+",
-            "evidence_indices": [0],
-        }
-    ],
+    "evidence": [{
+        "content": "Dense-Mem stores durable memory in PostgreSQL.",
+        "source_type": "manual",
+        "source": "Python core example",
+        "metadata": {"origin": "python-example"},
+    }],
 }
 result = await client.remember(request)
 ~~~
 
-Create the operation key once for a deliberate new operation, and retain this
-entire request before sending it. For a replay, resend this unchanged request,
-including target_space, metadata, and key. Never rotate a key to bypass a conflict. The client
-never retries automatically or fills in keys/defaults. Remember requires at least
-one proposal citing every evidence item. The client does not infer Relationships.
+Retain the complete request and key before sending. Replay the unchanged request
+including target, metadata, and key to reconcile an unknown outcome. The client
+never retries automatically or invents defaults. Legacy operation keys return
+non-retryable retired_contract guidance without duplicating accepted Evidence.
 
-Choose private for personal preferences or automation experience and team_shared
-for team knowledge. Every credential has separate private memory, including
-SSO-issued keys. Team-read-only credentials may remember privately; team_shared
-requires team write permission. The server never redirects a denied shared write.
-The response's space_kind confirms the selected destination.
+Choose private for personal memory and team_shared for team knowledge.
+Authentication selects the actual team, owner, and space. Every credential has
+separate private memory. Team-read-only credentials may remember privately;
+shared writes require current permission. The server never redirects a denied
+shared write.
 
-Inspect evidence and relationship_results: completed processing can include
-not_stored proposals and remediation. Returned warnings remain visible. Recall
-results preserve server order, equivalent IDs, conflicts, topic communities,
-provenance, search states and degradations. These frontiers do not
-establish new factual support. Trace requires a returned relationship_id.
+Inspect Evidence outcomes, search states, and explicit warnings. Recall preserves
+server order, equivalent IDs, Evidence conflicts, topic hints, and degradations.
+Trace takes an evidence_id. Export accepts 1–500 Evidence IDs and returns a
+versioned Evidence/provenance artifact with hashes and omission reporting.
 
 ## Exact private session ingestion
 
@@ -116,9 +101,10 @@ never authorization or private-space selection. The server must enable session
 ingestion and the caller must have effective private write access. Every active
 credential has its own private space, including team-read-only credentials;
 SSO sessions use their user/team membership's separate private space. Discovery
-hides unavailable tools. Remember requires its explicit target and proposals.
-Session semantic acceptance is atomic across the request. A no-fact completed
-result with search_state not_required is valid.
+hides unavailable tools. Remember requires its explicit target.
+Session acceptance is atomic across the request. The server selects exact
+current-event excerpts with original offsets using session_evidence_excerpts_v2.
+Empty extraction returns memory_outcome no_memory with search_state not_required.
 
 ## Failures and unknown outcomes
 
@@ -224,15 +210,16 @@ version matrix, and scripts/e2e.sh python_client for real server boundaries.
 The example scripts require DENSEMEM_ENDPOINT, DENSEMEM_TOKEN and a retained
 DENSEMEM_OPERATION_KEY. Keep the exact request unchanged when rerunning them.
 
-The isolated ADK dependency audit temporarily accepts
-[CVE-2026-114603](https://github.com/advisories/GHSA-xcq7-p3pf-p88h) only in
-`opentelemetry-api==1.43.0` with `google-adk==2.7.0`, until **2026-11-21 at
-00:00 UTC**. ADK's dependency cap excludes the patched OpenTelemetry 1.45.1.
-This accepts the advisory's malformed inbound `tracestate` header CPU denial
-of service risk; it does not patch the dependency. The scan still runs and
-retains the complete report. Other findings, skipped dependencies and scanner
-failures remain blocking. Enforcement resumes automatically at expiry; remove
-the exception sooner when a compatible ADK release supports the patched version.
+The root [dependency exception policy](../../dependency-exceptions.json) is the
+sole source of approved Go and Python vulnerability exceptions. It records exact
+advisories, dependencies, versions, ADK prerequisites, reasons, approval links,
+and exclusive UTC expiry dates. Both scanners resolve it from their repository
+location, independently of the working directory; environment variables cannot
+replace approvals. Missing or invalid policy fails closed. Empty sections grant
+no exceptions. Scans still run and retain complete reports in output files or
+console logs. Other findings, skipped dependencies and scanner failures remain
+blocking, and enforcement resumes automatically at expiry. Remove an exception
+sooner when compatible dependencies support its patched version.
 
 The server prerelease and stable-release workflows call publish-python to build
 and verify artifacts after their release gates pass, then upload through their own
@@ -293,9 +280,7 @@ or credential logging; caller-configured LangChain callbacks receive the normal
 queries and returned Documents.
 
 k defaults to 10 and accepts only integers from 1 through 50. recall_options
-accepts the existing public options: relationship_limit, community_limit,
-community_relationship_limit, valid_at, known_at, known_evidence_ids,
-known_relationship_ids and expand_from_entity_ids. Values pass to the server
+accepts topic_ids, topic_limit, valid_at, known_at, and known_evidence_ids. Values pass to the server
 unchanged and are validated there. Query, limit, team and space overrides are
 rejected; invocation-time recall overrides are unsupported. Options are copied
 for each call. Server validation and authorization remain authoritative.
@@ -304,9 +289,9 @@ Each returned evidence item becomes one Document in server order. Document.id
 is its evidence_id, and page_content is the exact server-bounded context without
 additional truncation. Document.metadata["densemem"] contains evidence_id,
 equivalent_evidence_ids, equivalents_truncated, space_kind, recall_id,
-related_relationships, related_communities, conflicts, search_states, degradations
-and suggested_actions. These relationship/community frontiers describe the whole
-query, rather than a new per-document support association. The current public
+related_topics, topics_truncated, conflicts, search_states, degradations
+and suggested_actions. Topic hints describe the query and support bounded
+follow-up through 1–10 unique topic_ids without descendant expansion. The current public
 response exposes no document scores, ranks or source URLs, so none are invented.
 Identical private and shared text remains separate Documents.
 

{densemem-2.7.0 → densemem-2.7.2rc4}/examples/remember.py

@@ -13,19 +13,10 @@ def make_request(key: str) -> RememberRequest:
                 "content": "Dense-Mem stores durable memory in PostgreSQL.",
                 "source_type": "manual",
                 "source": "Python core example",
-                "metadata": {"origin": "python-example"},
-            }
-        ],
-        "relationships": [
-            {
-                "ref": "durable-store",
-                "subject": {"name": "Dense-Mem", "entity_kind": "project"},
-                "predicate": {"proposed_key": "stores_durable_memory_in"},
-                "object": {"entity": {"name": "PostgreSQL", "entity_kind": "product"}},
-                "polarity": "+",
-                "evidence_indices": [0],
+                "metadata": {"origin": "python-example", "revision": "1"},
             }
         ],
+
     }
 
 
@@ -35,9 +26,8 @@ async def run(client: DenseMemClient, key: str) -> RememberResult:
     replay = await client.remember(request)
     assert replay == result
     await client.recall_memory({"query": "Dense-Mem durable memory PostgreSQL", "limit": 5})
-    for proposal in result["relationship_results"]:
-        for split in proposal["splits"]:
-            await client.trace_memory({"relationship_id": split["relationship_id"]})
+    for item in result["evidence"]:
+        await client.trace_memory({"evidence_id": item["evidence_id"]})
     return result
 
 

{densemem-2.7.0 → densemem-2.7.2rc4}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "hatchling.build"
 
 [project]
 name = "densemem"
-version = "2.7.0"
+version = "2.7.2rc4"
 description = "Typed async and sync clients for Dense-Mem MCP"
 readme = "README.md"
 requires-python = ">=3.11,<3.15"
@@ -21,7 +21,7 @@ classifiers = [
 ]
 
 [project.urls]
-Source = "https://github.com/markhuangai/dense-mem/tree/53bd87d52fe929effcc16e4889b24b75b3bf11d4"
+Source = "https://github.com/markhuangai/dense-mem/tree/73080b340db41db481837f9ebd0ee6151321a96f"
 Repository = "https://github.com/markhuangai/dense-mem"
 Documentation = "https://github.com/markhuangai/dense-mem/wiki/Framework-Integrations"
 Issues = "https://github.com/markhuangai/dense-mem/issues"

densemem-2.7.2rc4/scripts/audit.py

@@ -0,0 +1,160 @@
+import argparse
+import json
+import re
+import subprocess
+import sys
+from datetime import UTC, date, datetime
+from pathlib import Path
+
+
+def load_policy(path: Path) -> list[dict]:
+    policy = json.loads(path.read_text())
+    if (
+        not isinstance(policy, dict)
+        or type(policy.get("schema_version")) is not int
+        or policy["schema_version"] != 1
+        or not isinstance(policy.get("go"), list)
+        or not isinstance(policy.get("python"), list)
+    ):
+        raise ValueError("Expected schema_version 1 with go and python arrays")
+    for rule in policy["python"]:
+        if (
+            not isinstance(rule, dict)
+            or any(
+                not isinstance(rule.get(key), str) or not rule[key].strip()
+                for key in ("package", "version", "expires", "reason", "reference")
+            )
+            or not isinstance(rule.get("advisories"), list)
+            or not rule["advisories"]
+            or any(not isinstance(item, str) or not item.strip() for item in rule["advisories"])
+            or not isinstance(rule.get("requires"), dict)
+            or any(
+                not isinstance(rule["requires"].get(key), str) or not rule["requires"][key].strip()
+                for key in ("package", "version")
+            )
+        ):
+            raise ValueError("Invalid Python dependency exception")
+        if not re.fullmatch(r"\d{4}-\d{2}-\d{2}", rule["expires"]):
+            raise ValueError("Exception expiry must be YYYY-MM-DD")
+        date.fromisoformat(rule["expires"])
+    return policy["python"]
+
+
+def audit_status(
+    report: object, status: int, today: date, exceptions: list[dict]
+) -> tuple[int, list[str]]:
+    if status not in (0, 1):
+        return status, [f"ERROR: reason=scanner_execution_failed scanner_status={status}"]
+    dependencies = report.get("dependencies") if isinstance(report, dict) else None
+    if not isinstance(dependencies, list) or not dependencies:
+        raise ValueError("Invalid pip-audit dependency report")
+    packages, findings = set(), []
+    for dependency in dependencies:
+        if (
+            not isinstance(dependency, dict)
+            or "skip_reason" in dependency
+            or not isinstance(dependency.get("name"), str)
+            or not dependency["name"]
+            or not isinstance(dependency.get("version"), str)
+            or not dependency["version"]
+            or not isinstance(dependency.get("vulns"), list)
+        ):
+            raise ValueError("Invalid pip-audit dependency")
+        package = (dependency["name"], dependency["version"])
+        packages.add(package)
+        for vulnerability in dependency["vulns"]:
+            advisory = vulnerability.get("id") if isinstance(vulnerability, dict) else None
+            aliases = vulnerability.get("aliases", []) if isinstance(vulnerability, dict) else None
+            if (
+                not isinstance(advisory, str)
+                or not advisory
+                or not isinstance(aliases, list)
+                or any(not isinstance(alias, str) or not alias for alias in aliases)
+            ):
+                raise ValueError("Invalid pip-audit vulnerability")
+            findings.append((package, advisory, {advisory, *aliases}))
+    if not findings:
+        return status, [f"reason=no_findings scanner_status={status}"]
+    approved, messages = True, []
+    for package, advisory, identities in findings:
+        candidates = [rule for rule in exceptions if identities.intersection(rule["advisories"])]
+        exact = [rule for rule in candidates if package == (rule["package"], rule["version"])]
+        environment = [
+            rule for rule in exact
+            if (rule["requires"]["package"], rule["requires"]["version"]) in packages
+        ]
+        active = [rule for rule in environment if today < date.fromisoformat(rule["expires"])]
+        if status == 0:
+            reason = "scanner_status_inconsistent"
+        elif not candidates:
+            reason = "unapproved_advisory"
+        elif not exact:
+            reason = "dependency_mismatch"
+        elif not environment:
+            reason = "required_dependency_missing"
+        elif not active:
+            reason = "exception_expired"
+        else:
+            reason = "accepted_exception"
+        accepted = reason == "accepted_exception"
+        approved &= accepted
+        messages.append(
+            f"{'WARNING' if accepted else 'ERROR'}: advisory={advisory} "
+            f"dependency={package[0]}=={package[1]} reason={reason} scanner_status={status}"
+        )
+    return (0 if approved else 1), messages
+
+
+def main() -> int:
+    parser = argparse.ArgumentParser()
+    parser.add_argument("requirements", type=Path)
+    parser.add_argument("output", type=Path)
+    args = parser.parse_args()
+    policy_path = Path(__file__).resolve().parents[3] / "dependency-exceptions.json"
+    try:
+        exceptions = load_policy(policy_path)
+    except (OSError, ValueError) as error:
+        print(f"ERROR: policy={policy_path} reason=invalid_policy: {error}", file=sys.stderr)
+        return 1
+    print(f"policy={policy_path} scanner=pip-audit report={args.output}", file=sys.stderr)
+    for rule in exceptions:
+        print(
+            f"advisories={','.join(rule['advisories'])} "
+            f"dependency={rule['package']}=={rule['version']} expires={rule['expires']} "
+            f"requires={rule['requires']['package']}=={rule['requires']['version']} "
+            f"reason={rule['reason']} reference={rule['reference']}", file=sys.stderr,
+        )
+    result = subprocess.run(
+        [
+            sys.executable, "-m", "pip_audit", "-r", str(args.requirements),
+            "--no-deps", "--disable-pip", "--strict", "--format", "json",
+        ],
+        stdout=subprocess.PIPE,
+        text=True,
+        check=False,
+    )
+    args.output.write_text(result.stdout)
+    sys.stdout.write(result.stdout)
+    if result.returncode not in (0, 1):
+        print(
+            f"ERROR: reason=scanner_execution_failed scanner_status={result.returncode} "
+            f"report={args.output}", file=sys.stderr,
+        )
+        return result.returncode
+    try:
+        status, messages = audit_status(
+            json.loads(result.stdout), result.returncode, datetime.now(UTC).date(), exceptions
+        )
+    except ValueError as error:
+        print(
+            f"ERROR: pip-audit report rejected: {error}; scanner_status={result.returncode} "
+            f"report={args.output}", file=sys.stderr,
+        )
+        return 1
+    for message in messages:
+        print(f"{message} report={args.output}", file=sys.stderr)
+    return status
+
+
+if __name__ == "__main__":
+    raise SystemExit(main())

{densemem-2.7.0 → densemem-2.7.2rc4}/scripts/matrix.sh

@@ -2,6 +2,10 @@
 set -euo pipefail
 ROOT="$(cd "$(dirname "${BASH_SOURCE[0]}")/../../.." && pwd)"
 OUTPUT="${1:?Provide a new output directory}"
+if [[ $# != 1 && $# != 3 ]]; then
+  printf 'Usage: matrix.sh OUTPUT [PYTHON SDK]\n' >&2
+  exit 2
+fi
 [[ ! -e "$OUTPUT" ]] || { printf 'Output already exists\n' >&2; exit 1; }
 mkdir -p "$OUTPUT"
 CONTAINER=""
@@ -15,15 +19,17 @@ EPOCH="$(git -C "$ROOT" show -s --format=%ct HEAD)"
 
 run_case() {
   local version="$1" sdk="$2" destination="$3" status
+  printf 'Checking Python %s (%s SDK)\n' "$version" "$sdk"
   mkdir -p "$destination"
-  CONTAINER="$(docker create --workdir /package \
+  CONTAINER="$(docker create --workdir /workspace/packages/python \
     -e "SOURCE_DATE_EPOCH=$EPOCH" "python:$version-slim" \
     bash -c 'set -euo pipefail
       apt-get update -qq
       apt-get install -y --no-install-recommends git
-      exec bash /package/scripts/check.sh --output /results --sdk "$1"
+      exec bash /workspace/packages/python/scripts/check.sh --output /results --sdk "$1"
     ' -- "$sdk")"
-  docker cp "$ROOT/packages/python/." "$CONTAINER:/package"
+  docker cp "$ROOT/packages/python/." "$CONTAINER:/workspace/packages/python"
+  docker cp "$ROOT/dependency-exceptions.json" "$CONTAINER:/workspace/dependency-exceptions.json"
   if docker start --attach "$CONTAINER"; then
     status="$(docker inspect --format '{{.State.ExitCode}}' "$CONTAINER")"
   else
@@ -33,8 +39,13 @@ run_case() {
   docker inspect --format '{{json .Image}}' "$CONTAINER" > "$destination/image.json"
   docker rm "$CONTAINER" >/dev/null
   CONTAINER=""
+  printf 'Python %s (%s SDK) completed with status %s\n' "$version" "$sdk" "$status"
   return "$status"
 }
+if [[ $# == 3 ]]; then
+  run_case "$2" "$3" "$OUTPUT/$2-$3"
+  exit
+fi
 for version in 3.11 3.12 3.13 3.14; do
   run_case "$version" latest "$OUTPUT/$version"
 done

{densemem-2.7.0 → densemem-2.7.2rc4}/src/densemem/__init__.py

@@ -10,14 +10,14 @@ from .errors import (
 )
 from .requests import (
     Evidence,
+    ExportRequest,
     RecallRequest,
-    RelationshipProposal,
     RememberRequest,
     SessionEvent,
     SessionRequest,
     TraceRequest,
 )
-from .results import RecallResult, RememberResult, SessionResult, TraceResult
+from .results import ExportResult, RecallResult, RememberResult, SessionResult, TraceResult
 
 __all__ = [
     "DenseMemAuthenticationError",
@@ -31,7 +31,8 @@ __all__ = [
     "Evidence",
     "RecallRequest",
     "RecallResult",
-    "RelationshipProposal",
+    "ExportRequest",
+    "ExportResult",
     "RememberRequest",
     "RememberResult",
     "SessionEvent",

{densemem-2.7.0 → densemem-2.7.2rc4}/src/densemem/client.py

@@ -25,8 +25,8 @@ from .errors import (
     DenseMemTimeoutError,
     DenseMemTransportError,
 )
-from .requests import RecallRequest, RememberRequest, SessionRequest, TraceRequest
-from .results import RecallResult, RememberResult, SessionResult, TraceResult
+from .requests import ExportRequest, RecallRequest, RememberRequest, SessionRequest, TraceRequest
+from .results import ExportResult, RecallResult, RememberResult, SessionResult, TraceResult
 
 _operation_token: ContextVar[str] = ContextVar("densemem_operation_token", default="")
 
@@ -108,6 +108,11 @@ class DenseMemClient:
     async def trace_memory(self, request: TraceRequest) -> TraceResult:
         return cast(TraceResult, await self._execute("trace_memory", cast(dict[str, Any], request)))
 
+    async def export_memory_pack(self, request: ExportRequest) -> ExportResult:
+        return cast(
+            ExportResult, await self._execute("export_memory_pack", cast(dict[str, Any], request))
+        )
+
     async def _execute(self, method: str, request: dict[str, Any] | None = None) -> Any:
         payload = copy.deepcopy(request)
         token = ""
@@ -308,3 +313,6 @@ class SyncDenseMemClient:
 
     def trace_memory(self, request: TraceRequest) -> TraceResult:
         return self._run(lambda: self._async.trace_memory(request))
+
+    def export_memory_pack(self, request: ExportRequest) -> ExportResult:
+        return self._run(lambda: self._async.export_memory_pack(request))

{densemem-2.7.0 → densemem-2.7.2rc4}/src/densemem/langchain.py

@@ -107,8 +107,7 @@ def _documents(result: RecallResult, k: int) -> list[Document]:
             raise ValueError
         context = {key: public[key] for key in RecallResult.__annotations__ if key != "results"}
         for key in (
-            "related_relationships",
-            "related_communities",
+            "related_topics",
             "conflicts",
             "degradations",
             "suggested_actions",
@@ -117,10 +116,12 @@ def _documents(result: RecallResult, k: int) -> list[Document]:
                 not isinstance(item, dict) for item in context[key]
             ):
                 raise ValueError
+        if type(result["topics_truncated"]) is not bool:
+            raise ValueError
         states = result["search_states"]
         if not isinstance(states, dict) or any(
             states[key] not in ("current", "not_required", "pending", "failed")
-            for key in ("evidence", "relationships")
+            for key in ("evidence",)
         ):
             raise ValueError
         for degradation in result["degradations"]: