ememdev 2.4.0__tar.gz → 2.4.2__tar.gz

{ememdev-2.4.0 → ememdev-2.4.2}/.gitignore

@@ -89,3 +89,4 @@ examples/3d-worlds/out/
 
 # Agent scratch notes belong in .well-known/agent-notes/, never the repo root.
 /AGENT_*.md
+web/channel.json

{ememdev-2.4.0 → ememdev-2.4.2}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.5
 Name: ememdev
-Version: 2.4.0
+Version: 2.4.2
 Summary: Python client for emem: shared, verifiable memory for AI agents. One address per fact, one signature you can check. No key to read.
 Project-URL: Homepage, https://emem.dev
 Project-URL: Repository, https://github.com/Vortx-AI/emem

{ememdev-2.4.0 → ememdev-2.4.2}/pyproject.toml

@@ -9,7 +9,7 @@ name = "ememdev"
 # without a framework. 1.0.1 first superseded the empty 1.0.0 on PyPI (it
 # shipped dist-info and no modules, so `import emem` raised ModuleNotFoundError;
 # PyPI versions are immutable, so the only fix was to supersede it).
-version = "2.4.0"
+version = "2.4.2"
 description = "Python client for emem: shared, verifiable memory for AI agents. One address per fact, one signature you can check. No key to read."
 readme = "README.md"
 requires-python = ">=3.9"

{ememdev-2.4.0 → ememdev-2.4.2}/src/ememdev/__main__.py

@@ -149,12 +149,17 @@ def _build_attester(signer, args: argparse.Namespace) -> dict:
     body = _read_body(args)
     if verb == "delete" and body:
         raise SystemExit("delete carries no body; drop --body/--body-file/--stdin")
+    if verb == "delete" and not args.base:
+        raise SystemExit(
+            "delete is refused under the v1 preimage; pass --base <file_cid now at --path> "
+            "(GET the note with Accept: application/json and read file_cid)"
+        )
     if verb in ("create", "str_replace", "insert") and not body and not args.allow_empty:
         raise SystemExit(
             f"{verb} needs a body (the whole post-edit file for str_replace/insert). "
             "Pass --body/--body-file/--stdin, or --allow-empty to sign an empty body."
         )
-    return signer.attester_block(verb, args.path, body)
+    return signer.attester_block(verb, args.path, body, base=args.base)
 
 
 def _cmd_sign(args: argparse.Namespace) -> int:
@@ -216,6 +221,11 @@ def main(argv: Optional[list] = None) -> int:
     )
     p_sign.add_argument("--path", required=True, help="the memory path being written")
     p_sign.add_argument("--old-path", help="rename only: the source path")
+    p_sign.add_argument(
+        "--base",
+        help="the file_cid now at --path, which a delete must name (signs v2); "
+        "'absent' for a new path",
+    )
     _add_body_args(p_sign)
 
     p_write = sub.add_parser(

{ememdev-2.4.0 → ememdev-2.4.2}/src/ememdev/client.py

@@ -290,11 +290,6 @@ class Client:
             _jepa_predict_body(cell, band, lookback_months, forecast_horizon_months),
         )
 
-    def jepa_predict_v2(self, cell: str, *, band: str = "indices.ndvi", k_history: int = 5) -> Any:
-        return self._post(
-            "/v1/jepa_predict_v2", _jepa_predict_v2_body(cell, band, k_history)
-        )
-
     # ── Boring lat/lng shortcuts ───────────────────────────────────────
     def _boring_get(self, path: str, *, lat: float | None, lng: float | None, place: str | None) -> Any:
         return self._get(path, _boring_get_params(lat, lng, place))
@@ -764,10 +759,6 @@ def _jepa_predict_body(
     }
 
 
-def _jepa_predict_v2_body(cell: str, band: str, k_history: int) -> dict[str, Any]:
-    return {"cell": cell, "band": band, "k_history": k_history}
-
-
 def _boring_get_params(
     lat: float | None, lng: float | None, place: str | None
 ) -> dict[str, Any]:
@@ -1118,13 +1109,6 @@ class AsyncClient:
             _jepa_predict_body(cell, band, lookback_months, forecast_horizon_months),
         )
 
-    async def jepa_predict_v2(
-        self, cell: str, *, band: str = "indices.ndvi", k_history: int = 5
-    ) -> Any:
-        return await self._post(
-            "/v1/jepa_predict_v2", _jepa_predict_v2_body(cell, band, k_history)
-        )
-
     # ── Boring lat/lng shortcuts ───────────────────────────────────────
     async def _boring_get(
         self, path: str, *, lat: float | None, lng: float | None, place: str | None

{ememdev-2.4.0 → ememdev-2.4.2}/src/ememdev/signing.py

@@ -54,7 +54,7 @@ another key's namespace is refused with a 403.
 from __future__ import annotations
 
 import base64
-from typing import Union
+from typing import Union, Optional
 
 try:
     from blake3 import blake3
@@ -75,6 +75,11 @@ PUBKEY_SHORT_LEN = 8
 WRITE_VERBS = ("create", "str_replace", "insert", "delete", "rename")
 
 _PREIMAGE_TAG = b"emem.memory_write|"
+_PREIMAGE_V2_TAG = b"emem.memory_write.v2|"
+#: What `base` is when nothing is at the path yet (emem_primitives::BASE_ABSENT).
+BASE_ABSENT = "absent"
+#: Verbs the responder refuses to verify under the v1 preimage.
+V2_REQUIRED_VERBS = ("delete", "rename")
 _SEP = b"|"
 
 
@@ -123,6 +128,33 @@ def attester_preimage(verb: str, path: str, body_digest: bytes) -> bytes:
     return h.digest()
 
 
+def attester_preimage_v2(verb: str, path: str, body_digest: bytes, base: str) -> bytes:
+    """The v2 digest, which the responder tries first and requires for
+    delete and rename.
+
+    `base` is the `file_cid` now at `path`, or `BASE_ABSENT` when nothing is
+    there. It binds the signature to the version being replaced, so a
+    signature read off the public log cannot be replayed once the path moves
+    on. Mirrors emem_primitives::attester_preimage_v2 byte for byte.
+    """
+    if verb not in WRITE_VERBS:
+        raise ValueError(f"unknown write verb {verb!r}; expected one of {', '.join(WRITE_VERBS)}")
+    if len(body_digest) != 32:
+        raise ValueError(f"body_digest must be 32 bytes, got {len(body_digest)}")
+    if not base:
+        raise ValueError("base must be the current file_cid or BASE_ABSENT")
+    h = blake3()
+    h.update(_PREIMAGE_V2_TAG)
+    h.update(verb.encode("utf-8"))
+    h.update(_SEP)
+    h.update(path.encode("utf-8"))
+    h.update(_SEP)
+    h.update(body_digest)
+    h.update(_SEP)
+    h.update(base.encode("utf-8"))
+    return h.digest()
+
+
 def pubkey_short_from_b32(pubkey_b32: str) -> str:
     """First 8 chars of the lowercased base32 pubkey: the segment the
     responder matches against `/memories/by_attester/<pubkey8>/...`."""
@@ -203,7 +235,9 @@ class EmemSigner:
         """Raw ed25519 signature (64 bytes) over an already-built preimage."""
         return self._key.sign(preimage)
 
-    def attester_block(self, verb: str, path: str, body: bytes = b"") -> dict:
+    def attester_block(
+        self, verb: str, path: str, body: bytes = b"", base: Optional[str] = None
+    ) -> dict:
         """Build the wire `attester` block for one write.
 
         `body` is the byte string the responder will hash for this verb
@@ -211,7 +245,16 @@ class EmemSigner:
         which is right for `delete`. For `rename`, prefer
         `rename_attester_block`.
         """
-        digest = attester_preimage(verb, path, body_hash(body))
+        if base is None and verb in V2_REQUIRED_VERBS:
+            raise ValueError(
+                f"{verb} is refused under the v1 preimage; pass base= the file_cid "
+                "now at the path (for rename, use rename_attester_block)"
+            )
+        digest = (
+            attester_preimage_v2(verb, path, body_hash(body), base)
+            if base is not None
+            else attester_preimage(verb, path, body_hash(body))
+        )
         return {
             "pubkey_b32": self.pubkey_b32,
             "sig_b32": b32_nopad_lc(self.sign_preimage(digest)),
@@ -233,7 +276,9 @@ class EmemSigner:
             "pubkey_b32": self.pubkey_b32,
             "sig_b32": b32_nopad_lc(
                 self.sign_preimage(
-                    attester_preimage("rename", new_path, rename_body_hash(old_path))
+                    attester_preimage_v2(
+                        "rename", new_path, rename_body_hash(old_path), BASE_ABSENT
+                    )
                 )
             ),
         }