memorysync 1.7.0__tar.gz → 1.7.2__tar.gz

{memorysync-1.7.0 → memorysync-1.7.2}/.gitignore

@@ -43,6 +43,24 @@ htmlcov/
 *.cover
 out/
 /dashboard/tsconfig.tsbuildinfo
-
-# Responsive audit output (regenerated by npm run audit:responsive)
+
+# Responsive audit output (regenerated by npm run audit:responsive)
 dashboard/responsive-audit-report.json
+
+# -------------------------
+# Category 4: Local worktrees and deploy clones (NEVER COMMIT)
+# -------------------------
+# Each of these holds its own .git directory. Staging one would record a
+# gitlink with no matching .gitmodules entry, which reads as a broken
+# submodule for everyone who clones afterwards, and it would drag several
+# thousand unrelated files in with it.
+#
+# They are also why `git add .` stalls here rather than finishing: the walk
+# has to touch roughly two thousand extra files, and because this repo lives
+# under OneDrive, each one can trigger a hydration download before git is
+# allowed to read it.
+/.kiro/worktrees/
+/.production-deploy/
+/.baseline-int/
+/.baseline-plan/
+/.baseline-s3/

{memorysync-1.7.0 → memorysync-1.7.2}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.5
 Name: memorysync
-Version: 1.7.0
+Version: 1.7.2
 Summary: Official Python client for the MemorySync API.
 Project-URL: Homepage, https://memorysync.io
 Project-URL: Documentation, https://docs.memorysync.io

{memorysync-1.7.0 → memorysync-1.7.2}/pyproject.toml

@@ -4,7 +4,10 @@ build-backend = "hatchling.build"
 
 [project]
 name = "memorysync"
-version = "1.7.0"
+# Sourced from src/memorysync/_version.py rather than written here, so the
+# packaged version and the one the library reports cannot disagree. They did:
+# 1.7.1 went to PyPI while __version__ and the User-Agent both still said 1.7.0.
+dynamic = ["version"]
 description = "Official Python client for the MemorySync API."
 readme = "README.md"
 license = { text = "MIT" }
@@ -50,6 +53,9 @@ Changelog = "https://docs.memorysync.io/release-notes"
 Support = "https://docs.memorysync.io/debugging/support"
 Status = "https://status.memorysync.io"
 
+[tool.hatch.version]
+path = "src/memorysync/_version.py"
+
 [tool.hatch.build.targets.wheel]
 packages = ["src/memorysync"]
 

memorysync-1.7.2/src/memorysync/_version.py

@@ -0,0 +1 @@
+__version__ = "1.7.2"

{memorysync-1.7.0 → memorysync-1.7.2}/src/memorysync/client.py

@@ -488,8 +488,9 @@ class MemorySyncClient:
             payload = filters.to_dict() if isinstance(filters, ForgetFilters) else dict(filters or {})
             if not payload:
                 raise ValidationError(
-                    "filters must set at least one criterion; use purge_user() to "
-                    "remove everything for an end user"
+                    "filters must set at least one criterion; to remove everything "
+                    "for an end user use a wide criterion such as "
+                    '{"before": datetime.now(timezone.utc)}'
                 )
             body["filters"] = payload
             if dry_run:
@@ -628,13 +629,44 @@ class MemorySyncClient:
         return BatchUpdateResponse.from_dict(raw or {})
 
     def purge_user(self) -> Dict[str, Any]:
-        """Delete every memory belonging to the calling end user.
-
-        Separate from ``forget`` on purpose: this reads like what it does, so a
-        whole-namespace delete can never be the accidental result of an empty
-        filter.
+        """Not a memory operation, and not callable from this SDK. Always raises.
+
+        .. warning::
+
+           ``DELETE /memory/user/purge`` reads as if it clears one end user's
+           memories. It does neither. It ignores ``end_user_id`` and erases the
+           **account** behind the credential, cascading to the password hash,
+           every API key, memberships, auth providers and MFA credentials.
+           Nobody can sign in afterwards, and the API cannot repair it, because
+           the credential that would authorise a repair is one of the things it
+           destroys.
+
+        Earlier versions of this method described it as "delete every memory
+        belonging to the calling end user", and callers who believed that lost
+        accounts.
+
+        The server now refuses account erasure for every API-key caller, and
+        this client authenticates only with an API key, so the call could never
+        succeed. It raises locally rather than sending a request that can only
+        come back 403, so the reason arrives immediately and no destructive
+        intent leaves the process. Erase an account from the dashboard, where a
+        human is present.
+
+        :raises ValidationError: Always.
+
+        .. deprecated::
+           Use :meth:`forget` for anything memory related: by ids, or with a
+           wide criterion such as ``{"before": datetime.now(timezone.utc)}``.
         """
-        return self._request("DELETE", "/memory/user/purge") or {}
+        raise ValidationError(
+            "purge_user() erases the whole account, not its memories: the password "
+            "hash, every API key and all sign-in credentials go with it. The API "
+            "refuses this for API-key callers, and this client only supports API "
+            "keys, so the call cannot succeed. To delete memories use forget(), "
+            "either with ids or a wide criterion such as "
+            '{"before": datetime.now(timezone.utc)}. To close an account, use the '
+            "dashboard."
+        )
 
     # ── History and feedback ─────────────────────────────────────────
 
@@ -1149,8 +1181,9 @@ class AsyncMemorySyncClient:
             payload = filters.to_dict() if isinstance(filters, ForgetFilters) else dict(filters or {})
             if not payload:
                 raise ValidationError(
-                    "filters must set at least one criterion; use purge_user() to "
-                    "remove everything for an end user"
+                    "filters must set at least one criterion; to remove everything "
+                    "for an end user use a wide criterion such as "
+                    '{"before": datetime.now(timezone.utc)}'
                 )
             body["filters"] = payload
             if dry_run:
@@ -1267,8 +1300,22 @@ class AsyncMemorySyncClient:
         return BatchUpdateResponse.from_dict(raw or {})
 
     async def purge_user(self) -> Dict[str, Any]:
-        """Async twin of :meth:`MemorySyncClient.purge_user`."""
-        return await self._request("DELETE", "/memory/user/purge") or {}
+        """Async twin of :meth:`MemorySyncClient.purge_user`. Always raises.
+
+        Erases the **account**, not memories. Read the warning on the sync
+        method before reaching for this.
+
+        :raises ValidationError: Always.
+        """
+        raise ValidationError(
+            "purge_user() erases the whole account, not its memories: the password "
+            "hash, every API key and all sign-in credentials go with it. The API "
+            "refuses this for API-key callers, and this client only supports API "
+            "keys, so the call cannot succeed. To delete memories use forget(), "
+            "either with ids or a wide criterion such as "
+            '{"before": datetime.now(timezone.utc)}. To close an account, use the '
+            "dashboard."
+        )
 
     # ── History and feedback ─────────────────────────────────────────
 

{memorysync-1.7.0 → memorysync-1.7.2}/src/memorysync/types.py

@@ -243,7 +243,12 @@ class ForgetFilters:
 
     At least one field must be set. An all-empty filter would mean "delete
     everything I own", and the server refuses it — that has to be an explicit
-    request (``purge_user``) rather than the result of forgetting a field.
+    request rather than the result of forgetting a field.
+
+    To clear everything for an end user, say so with a wide criterion such as
+    ``{"before": datetime.now(timezone.utc)}``. Not ``purge_user``: an earlier
+    version of this docstring pointed there, and it erases the account rather
+    than its memories.
 
     ``tags`` matches memories carrying **all** the listed tags, not any of them.
     """

memorysync-1.7.0/src/memorysync/_version.py

@@ -1 +0,0 @@
-__version__ = "1.7.0"