memwal 0.1.7.dev0__tar.gz → 0.1.7.dev1__tar.gz

{memwal-0.1.7.dev0 → memwal-0.1.7.dev1}/CHANGELOG.md

@@ -1,5 +1,11 @@
 # memwal
 
+## Unreleased
+
+### Added
+
+- Added `MemWalClockDriftError`, raised when the relayer rejects a request because the signed timestamp is outside its accepted clock-drift window (`401` + `x-auth-error: ERR_TIMESTAMP_OUT_OF_BOUNDS`). Surfaces an actionable "synchronize the client clock" message instead of an opaque `401`. Subclasses `MemWalError`, so existing `except MemWalError` handlers still catch it.
+
 ## 0.1.7
 
 ### Added

{memwal-0.1.7.dev0 → memwal-0.1.7.dev1}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.5
 Name: memwal
-Version: 0.1.7.dev0
+Version: 0.1.7.dev1
 Summary: Python SDK for Walrus Memory — Privacy-first AI memory with Ed25519 signing
 Project-URL: Homepage, https://memory.walrus.xyz
 Project-URL: Documentation, https://memory.walrus.xyz

{memwal-0.1.7.dev0 → memwal-0.1.7.dev1}/memwal/__init__.py

@@ -24,6 +24,7 @@ Quick start::
 
 from .client import (
     MemWal,
+    MemWalClockDriftError,
     MemWalCompatibilityError,
     MemWalError,
     MemWalRememberJobFailed,
@@ -78,6 +79,7 @@ __all__ = [
     "MemWalMockSeed",
     "MemWalError",
     "MemWalCompatibilityError",
+    "MemWalClockDriftError",
     "MemWalRememberJobFailed",
     "MemWalRememberJobNotFound",
     "MemWalRememberJobTimeout",
@@ -120,4 +122,4 @@ __all__ = [
     "RecallManualResult",
 ]
 
-__version__ = "0.1.7.dev0"
+__version__ = "0.1.7.dev1"

{memwal-0.1.7.dev0 → memwal-0.1.7.dev1}/memwal/client.py

@@ -1189,6 +1189,16 @@ class MemWal:
                     f"(HTTP 426 Upgrade Required). Relayer response: "
                     f"{err_text[:300] or 'upgrade required'}"
                 )
+            # A stale/future-dated signature is rejected with 401 + a machine-
+            # readable reason header. Surface it as an actionable clock-drift
+            # error rather than an opaque 401 so the caller can fix node time.
+            if response.headers.get("x-auth-error") == "ERR_TIMESTAMP_OUT_OF_BOUNDS":
+                raise MemWalClockDriftError(
+                    "Request rejected: signed timestamp is outside the relayer's "
+                    "accepted clock-drift window. Synchronize this client's clock "
+                    "(NTP); if the deployment needs a wider tolerance, raise "
+                    "AUTH_MAX_CLOCK_DRIFT_SECS on the relayer."
+                )
             raise _HttpStatusError(
                 status=response.status_code,
                 body=err_text,
@@ -1209,6 +1219,15 @@ class MemWalCompatibilityError(MemWalError):
     pass
 
 
+class MemWalClockDriftError(MemWalError):
+    """Raised when the relayer rejects a request because the signed timestamp is
+    outside its accepted clock-drift window (401 + ``x-auth-error:
+    ERR_TIMESTAMP_OUT_OF_BOUNDS``). Indicates the client's clock is skewed
+    relative to the relayer; sync via NTP or widen the relayer's window."""
+
+    pass
+
+
 class _HttpStatusError(MemWalError):
     """Internal: raised when an HTTP response status is not in ``accepted_statuses``.
 

{memwal-0.1.7.dev0 → memwal-0.1.7.dev1}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "hatchling.build"
 
 [project]
 name = "memwal"
-version = "0.1.7.dev0"
+version = "0.1.7.dev1"
 description = "Python SDK for Walrus Memory — Privacy-first AI memory with Ed25519 signing"
 readme = "README.md"
 license = "MIT"

{memwal-0.1.7.dev0 → memwal-0.1.7.dev1}/tests/test_client.py

@@ -17,7 +17,13 @@ import nacl.signing
 import pytest
 import respx
 
-from memwal.client import MemWal, MemWalCompatibilityError, MemWalError, MemWalSync
+from memwal.client import (
+    MemWal,
+    MemWalClockDriftError,
+    MemWalCompatibilityError,
+    MemWalError,
+    MemWalSync,
+)
 from memwal.types import (
     RecallManualOptions,
     RecallParams,
@@ -468,6 +474,24 @@ class TestErrorHandling:
         ):
             await memwal_client.recall("test")
 
+    @respx.mock
+    async def test_clock_drift_header_raises_clock_drift_error(
+        self, memwal_client: MemWal
+    ) -> None:
+        """A 401 carrying x-auth-error: ERR_TIMESTAMP_OUT_OF_BOUNDS should surface
+        as an actionable MemWalClockDriftError, not an opaque HTTP error."""
+        mock_seal_session_prereqs()
+        respx.post(f"{_TEST_SERVER}/api/remember").mock(
+            return_value=httpx.Response(
+                401,
+                headers={"x-auth-error": "ERR_TIMESTAMP_OUT_OF_BOUNDS"},
+                text="",
+            )
+        )
+
+        with pytest.raises(MemWalClockDriftError, match="clock-drift window"):
+            await memwal_client.remember("test")
+
     @respx.mock
     async def test_500_raises_memwal_error(self, memwal_client: MemWal) -> None:
         """Server errors should raise MemWalError."""