pyUSPTO 0.4.0__tar.gz → 0.4.1__tar.gz

{pyuspto-0.4.0 → pyuspto-0.4.1}/ADVANCED.md

@@ -31,7 +31,28 @@ config = USPTOConfig(
 client = PatentDataClient(config=config)
 ```
 
-Configure HTTP settings via environment variables:
+## Session Lifecycle
+
+`USPTOConfig` manages an underlying `requests.Session`. For short-lived scripts this is cleaned up automatically, but for long-running applications or tests you may close it explicitly:
+
+```python
+from pyUSPTO import PatentDataClient, USPTOConfig
+
+# Option 1: Context manager
+with USPTOConfig(api_key="your_key") as config:
+    client = PatentDataClient(config=config)
+    response = client.search_applications(limit=1)
+
+# Option 2: Explicit close
+config = USPTOConfig(api_key="your_key")
+try:
+    client = PatentDataClient(config=config)
+    response = client.search_applications(limit=1)
+finally:
+    config.close()
+```
+
+## HTTP Configuration via Environment Variables
 
 ```bash
 export USPTO_REQUEST_TIMEOUT=60.0       # Read timeout
@@ -75,24 +96,32 @@ All clients support configuration via environment variables. This is the recomme
 | `USPTO_PATENT_DATA_BASE_URL`        | Base URL for Patent Data API                   | `https://api.uspto.gov` |
 | `USPTO_PETITION_DECISIONS_BASE_URL` | Base URL for Petition Decisions API            | `https://api.uspto.gov` |
 | `USPTO_PTAB_BASE_URL`               | Base URL for PTAB APIs                         | `https://api.uspto.gov` |
-| `USPTO_DOWNLOAD_CHUNK_SIZE`         | Chunk size in bytes for file downloads         | `8192`                  |
+
+> [!NOTE]
+> The base URL variables are provided in case the USPTO introduces alternate environments (e.g., a development or testing endpoint) in the future. Currently there are no such endpoints, and these defaults should not be changed.
 
 ### HTTP Transport Configuration
 
-| Environment Variable       | Description                                | Default  |
-| -------------------------- | ------------------------------------------ | -------- |
-| `USPTO_REQUEST_TIMEOUT`  | Read timeout in seconds                    | `30.0` |
-| `USPTO_CONNECT_TIMEOUT`  | Connection timeout in seconds              | `10.0` |
-| `USPTO_MAX_RETRIES`      | Maximum number of retry attempts           | `3`    |
-| `USPTO_BACKOFF_FACTOR`   | Exponential backoff multiplier for retries | `2.0`  |
-| `USPTO_POOL_CONNECTIONS` | Number of connection pools to cache        | `10`   |
-| `USPTO_POOL_MAXSIZE`     | Maximum connections per pool               | `10`   |
+| Environment Variable          | Description                                | Default         |
+| ----------------------------- | ------------------------------------------ | --------------- |
+| `USPTO_REQUEST_TIMEOUT`     | Read timeout in seconds                    | `30.0`        |
+| `USPTO_CONNECT_TIMEOUT`     | Connection timeout in seconds              | `10.0`        |
+| `USPTO_MAX_RETRIES`         | Maximum number of retry attempts           | `3`           |
+| `USPTO_BACKOFF_FACTOR`      | Exponential backoff multiplier for retries | `2.0`         |
+| `USPTO_POOL_CONNECTIONS`    | Number of connection pools to cache        | `10`          |
+| `USPTO_POOL_MAXSIZE`        | Maximum connections per pool               | `10`          |
+| `USPTO_DOWNLOAD_CHUNK_SIZE` | Chunk size in bytes for file downloads     | `8192`        |
+| `USPTO_MAX_EXTRACT_SIZE`    | Maximum bytes to extract from archives     | None (no limit) |
 
 ### Example: Configuration
 
 ```bash
 # API Configuration
 export USPTO_API_KEY="your_api_key"
+export USPTO_BULK_DATA_BASE_URL="https://api.uspto.gov"
+export USPTO_PATENT_DATA_BASE_URL="https://api.uspto.gov"
+export USPTO_PETITION_DECISIONS_BASE_URL="https://api.uspto.gov"
+export USPTO_PTAB_BASE_URL="https://api.uspto.gov"
 
 # Increase timeouts for large downloads
 export USPTO_REQUEST_TIMEOUT=120.0
@@ -108,6 +137,9 @@ export USPTO_POOL_MAXSIZE=20
 
 # Larger chunk size for faster downloads
 export USPTO_DOWNLOAD_CHUNK_SIZE=65536
+
+# Limit total bytes extracted from archives
+export USPTO_MAX_EXTRACT_SIZE=10737418240
 ```
 
 ## Debugging with Raw Data Preservation
@@ -212,3 +244,31 @@ warnings.filterwarnings('always', category=USPTODataWarning)
 ```
 
 The library's permissive parsing philosophy returns `None` for fields that cannot be parsed, allowing you to retrieve partial data even when some fields have issues. Warnings inform you when this happens without stopping execution.
+
+## Archive Extraction Safety
+
+Download methods that accept `extract=True` (e.g., `BulkDataClient.download_file`) automatically extract archive files (tar.gz, zip). The extraction includes the following protections:
+
+- **Path traversal protection**: Archive members with paths that resolve outside the extraction directory are rejected.
+- **Size limits**: Set `max_extract_size` on `HTTPConfig` to cap the total bytes extracted, protecting against zip bombs or file system size limitations.
+
+```python
+from pyUSPTO import USPTOConfig, HTTPConfig, BulkDataClient
+
+http_config = HTTPConfig(
+    max_extract_size=10 * 1024 * 1024 * 1024  # 10 GB
+)
+config = USPTOConfig(api_key="your_key", http_config=http_config)
+client = BulkDataClient(config=config)
+
+# Extraction will raise ValueError if total extracted size exceeds 10 GB
+client.download_file(product_file, destination="/tmp", extract=True)
+```
+
+Or via environment variable:
+
+```bash
+export USPTO_MAX_EXTRACT_SIZE=10737418240  # 10 GB
+```
+
+By default, `extract` is `False` on `BulkDataClient.download_file` and there is no size limit.

{pyuspto-0.4.0 → pyuspto-0.4.1}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: pyUSPTO
-Version: 0.4.0
+Version: 0.4.1
 Summary: A Modern Python client for accessing the United States Patent and Trademark Office (USPTO) Open Data Portal (ODP) APIs.
 Author-email: Andrew Piechocki <apiechocki@dunlapcodding.com>
 License-Expression: MIT
@@ -70,7 +70,7 @@ A Python client library for interacting with the United Stated Patent and Tradem
 This package provides clients for interacting with the USPTO Bulk Data API, Patent Data API, Final Petition Decisions API, and PTAB (Patent Trial and Appeal Board) APIs.
 
 > [!IMPORTANT]
-> The USPTO is in the process of moving their API. This package is only concerned with the new API. The [old API](https://developer.uspto.gov/) will be retired at the end of 2025.
+> The USPTO is in the process of moving their Developer API. This package is only concerned with the new API. The [old API](https://developer.uspto.gov/) was officially retired at the end of 2025; however, some products have not yet been fully transitioned to the Open Data Portal API. The USPTO expects the remaining products to be transitioned to the Open Data Portal in early 2026.
 
 ## Quick Start
 
@@ -97,33 +97,12 @@ print(f"Found {results.count} applications")
 
 ## Configuration
 
-All clients require a `USPTOConfig` object for configuration. There are two methods:
+All clients require a `USPTOConfig` object. You can create one from environment variables (recommended) or by passing the API key directly.
 
-### Method 1: Using USPTOConfig
-
-```python
-from pyUSPTO import (
-    BulkDataClient,
-    PatentDataClient,
-    FinalPetitionDecisionsClient,
-    PTABTrialsClient,
-    PTABAppealsClient,
-    PTABInterferencesClient
-)
-
-from pyUSPTO.config import USPTOConfig
-
-config = USPTOConfig(api_key="your_api_key_here")
-
-patent_client = PatentDataClient(config=config)
-bulk_client = BulkDataClient(config=config)
-petition_client = FinalPetitionDecisionsClient(config=config)
-trials_client = PTABTrialsClient(config=config)
-appeals_client = PTABAppealsClient(config=config)
-interferences_client = PTABInterferencesClient(config=config)
-```
+> [!TIP]
+> `USPTOConfig` manages an underlying HTTP session. For long-running applications, use it as a context manager (`with USPTOConfig(...) as config:`) or call `config.close()` when done. See [ADVANCED.md](ADVANCED.md#session-lifecycle) for details.
 
-### Method 2: Environment Variables (Recommended)
+### Environment Variables (Recommended)
 
 Set the environment variable in your shell:
 
@@ -140,9 +119,9 @@ from pyUSPTO import (
     FinalPetitionDecisionsClient,
     PTABTrialsClient,
     PTABAppealsClient,
-    PTABInterferencesClient
+    PTABInterferencesClient,
+    USPTOConfig,
 )
-from pyUSPTO.config import USPTOConfig
 
 # Load configuration from environment
 config = USPTOConfig.from_env()
@@ -155,7 +134,17 @@ appeals_client = PTABAppealsClient(config=config)
 interferences_client = PTABInterferencesClient(config=config)
 ```
 
-## API Usage Examples
+### Direct API Key
+
+Alternatively, you can pass your API key directly when creating the config:
+
+```python
+from pyUSPTO import USPTOConfig
+
+config = USPTOConfig(api_key="your_api_key_here")
+```
+
+## Client Usage Examples
 
 > [!TIP]
 > For comprehensive examples with detailed explanations, see the [`examples/`](examples/) directory.
@@ -163,7 +152,7 @@ interferences_client = PTABInterferencesClient(config=config)
 ### Patent Data API
 
 ```python
-from pyUSPTO import PatentDataClient
+from pyUSPTO import PatentDataClient, USPTOConfig
 
 config = USPTOConfig(api_key="your_api_key_here")
 client = PatentDataClient(config=config)
@@ -178,12 +167,47 @@ if app.application_meta_data:
     print(f"Title: {app.application_meta_data.invention_title}")
 ```
 
+`PatentDataClient` also provides convenience methods for common lookups:
+
+```python
+# Look up a patent wrapper by any identifier type (you must use keyword names).
+wrapper = client.get_IFW_metadata(application_number="18/045,436")
+wrapper = client.get_IFW_metadata(patent_number="11,234,567")
+wrapper = client.get_IFW_metadata(publication_number="2023/0012345")
+wrapper = client.get_IFW_metadata(PCT_app_number="PCT/US24/12345")
+
+# Look up USPTO status codes
+status_codes = client.get_status_codes()
+```
+
 See [`examples/patent_data_example.py`](examples/patent_data_example.py) for detailed examples including downloading documents and publications.
 
+### Bulk Data API
+
+```python
+from pyUSPTO import BulkDataClient, USPTOConfig
+
+config = USPTOConfig(api_key="your_api_key_here")
+client = BulkDataClient(config=config)
+
+# Search for bulk data products
+response = client.search_products(query="patent", limit=5)
+print(f"Found {response.count} products matching 'patent'")
+
+for product in response.bulk_data_product_bag:
+    print(f"  {product.product_title_text} ({product.product_identifier})")
+
+# Get a specific product with its files
+product = client.get_product_by_id("PTGRXML", include_files=True, latest=True)
+print(f"Product: {product.product_title_text}")
+```
+
+See [`examples/bulk_data_example.py`](examples/bulk_data_example.py) for detailed examples including file downloads and archive extraction.
+
 ### Final Petition Decisions API
 
 ```python
-from pyUSPTO import FinalPetitionDecisionsClient
+from pyUSPTO import FinalPetitionDecisionsClient, USPTOConfig
 
 config = USPTOConfig(api_key="your_api_key_here")
 client = FinalPetitionDecisionsClient(config=config)
@@ -207,7 +231,7 @@ See [`examples/petition_decisions_example.py`](examples/petition_decisions_examp
 ### PTAB Trials API
 
 ```python
-from pyUSPTO import PTABTrialsClient
+from pyUSPTO import PTABTrialsClient, USPTOConfig
 
 config = USPTOConfig(api_key="your_api_key_here")
 client = PTABTrialsClient(config=config)
@@ -235,7 +259,7 @@ See [`examples/ptab_trials_example.py`](examples/ptab_trials_example.py) for det
 ### PTAB Appeals API
 
 ```python
-from pyUSPTO import PTABAppealsClient
+from pyUSPTO import PTABAppealsClient, USPTOConfig
 
 config = USPTOConfig(api_key="your_api_key_here")
 client = PTABAppealsClient(config=config)
@@ -255,7 +279,7 @@ See [`examples/ptab_appeals_example.py`](examples/ptab_appeals_example.py) for d
 ### PTAB Interferences API
 
 ```python
-from pyUSPTO import PTABInterferencesClient
+from pyUSPTO import PTABInterferencesClient, USPTOConfig
 
 config = USPTOConfig(api_key="your_api_key_here")
 client = PTABInterferencesClient(config=config)
@@ -276,64 +300,7 @@ Full documentation may be found on [Read the Docs](https://pyuspto.readthedocs.i
 
 ## Data Models
 
-The library uses Python dataclasses to represent API responses. All data models include type annotations for attributes and methods, making them fully compatible with static type checkers.
-
-#### Bulk Data API
-
-- `BulkDataResponse`: Top-level response from the API
-- `BulkDataProduct`: Information about a specific product
-- `ProductFileBag`: Container for file data elements
-- `FileData`: Information about an individual file
-
-#### Patent Data API
-
-- `PatentDataResponse`: Top-level response from the API
-- `PatentFileWrapper`: Information about a patent application
-- `ApplicationMetaData`: Metadata about a patent application
-- `Person`, `Applicant`, `Inventor`, `Attorney`: Person-related data classes
-- `Assignment`, `Assignor`, `Assignee`: Assignment-related data classes
-- `Continuity`, `ParentContinuity`, `ChildContinuity`: Continuity-related data classes
-- `PatentTermAdjustmentData`: Patent term adjustment information
-- `DocumentBag`, `EntityStatus`, `RecordAttorney`: Additional data classes for patent data
-- And many more specialized classes for different aspects of patent data
-
-#### Final Petition Decisions API
-
-- `PetitionDecisionResponse`: Top-level response from the API
-- `PetitionDecision`: Complete information about a petition decision
-- `PetitionDecisionDocument`: Document associated with a petition decision
-- `DecisionTypeCode`: Enum for petition decision types
-- `DocumentDirectionCategory`: Enum for document direction categories
-
-#### PTAB Trials API
-
-- `PTABTrialProceedingResponse`: Top-level response from the API
-- `PTABTrialProceeding`: Information about a PTAB trial proceeding (IPR, PGR, CBM, DER)
-- `PTABTrialDocumentResponse`: Response containing trial documents
-- `PTABTrialDocument`: Document associated with a trial proceeding
-- `TrialDecisionData`: Decision information for a trial proceeding
-- `TrialDocumentData`: Document metadata for trial documents
-- `TrialMetaData`: Trial metadata and status information
-- `RegularPetitionerData`, `RespondentData`, `DerivationPetitionerData`: Party data for different trial types
-
-#### PTAB Appeals API
-
-- `PTABAppealResponse`: Top-level response from the API
-- `PTABAppealDecision`: Ex parte appeal decision information
-- `AppellantData`: Appellant information and application details
-- `AppealMetaData`: Appeal metadata and filing information
-- `AppealDocumentData`: Document and decision details
-
-#### PTAB Interferences API
-
-- `PTABInterferenceResponse`: Top-level response from the API
-- `PTABInterferenceDecision`: Interference proceeding decision information
-- `SeniorPartyData`, `JuniorPartyData`, `AdditionalPartyData`: Party data classes
-- `InterferenceMetaData`: Interference metadata and status information
-- `InterferenceDocumentData`: Document and outcome details
-- `DecisionData`: Decision information for interference proceedings
-
-For a complete list of all data models, see the [API Reference docuentation](https://pyuspto.readthedocs.io/en/latest/api/models/index.html).
+The library uses Python dataclasses to represent API responses. All data models include type annotations and are fully compatible with static type checkers. For a complete list of all data models, see the [API Reference documentation](https://pyuspto.readthedocs.io/en/latest/api/models/index.html).
 
 ## Advanced Topics
 

{pyuspto-0.4.0 → pyuspto-0.4.1}/README.md

@@ -10,7 +10,7 @@ A Python client library for interacting with the United Stated Patent and Tradem
 This package provides clients for interacting with the USPTO Bulk Data API, Patent Data API, Final Petition Decisions API, and PTAB (Patent Trial and Appeal Board) APIs.
 
 > [!IMPORTANT]
-> The USPTO is in the process of moving their API. This package is only concerned with the new API. The [old API](https://developer.uspto.gov/) will be retired at the end of 2025.
+> The USPTO is in the process of moving their Developer API. This package is only concerned with the new API. The [old API](https://developer.uspto.gov/) was officially retired at the end of 2025; however, some products have not yet been fully transitioned to the Open Data Portal API. The USPTO expects the remaining products to be transitioned to the Open Data Portal in early 2026.
 
 ## Quick Start
 
@@ -37,33 +37,12 @@ print(f"Found {results.count} applications")
 
 ## Configuration
 
-All clients require a `USPTOConfig` object for configuration. There are two methods:
+All clients require a `USPTOConfig` object. You can create one from environment variables (recommended) or by passing the API key directly.
 
-### Method 1: Using USPTOConfig
-
-```python
-from pyUSPTO import (
-    BulkDataClient,
-    PatentDataClient,
-    FinalPetitionDecisionsClient,
-    PTABTrialsClient,
-    PTABAppealsClient,
-    PTABInterferencesClient
-)
-
-from pyUSPTO.config import USPTOConfig
-
-config = USPTOConfig(api_key="your_api_key_here")
-
-patent_client = PatentDataClient(config=config)
-bulk_client = BulkDataClient(config=config)
-petition_client = FinalPetitionDecisionsClient(config=config)
-trials_client = PTABTrialsClient(config=config)
-appeals_client = PTABAppealsClient(config=config)
-interferences_client = PTABInterferencesClient(config=config)
-```
+> [!TIP]
+> `USPTOConfig` manages an underlying HTTP session. For long-running applications, use it as a context manager (`with USPTOConfig(...) as config:`) or call `config.close()` when done. See [ADVANCED.md](ADVANCED.md#session-lifecycle) for details.
 
-### Method 2: Environment Variables (Recommended)
+### Environment Variables (Recommended)
 
 Set the environment variable in your shell:
 
@@ -80,9 +59,9 @@ from pyUSPTO import (
     FinalPetitionDecisionsClient,
     PTABTrialsClient,
     PTABAppealsClient,
-    PTABInterferencesClient
+    PTABInterferencesClient,
+    USPTOConfig,
 )
-from pyUSPTO.config import USPTOConfig
 
 # Load configuration from environment
 config = USPTOConfig.from_env()
@@ -95,7 +74,17 @@ appeals_client = PTABAppealsClient(config=config)
 interferences_client = PTABInterferencesClient(config=config)
 ```
 
-## API Usage Examples
+### Direct API Key
+
+Alternatively, you can pass your API key directly when creating the config:
+
+```python
+from pyUSPTO import USPTOConfig
+
+config = USPTOConfig(api_key="your_api_key_here")
+```
+
+## Client Usage Examples
 
 > [!TIP]
 > For comprehensive examples with detailed explanations, see the [`examples/`](examples/) directory.
@@ -103,7 +92,7 @@ interferences_client = PTABInterferencesClient(config=config)
 ### Patent Data API
 
 ```python
-from pyUSPTO import PatentDataClient
+from pyUSPTO import PatentDataClient, USPTOConfig
 
 config = USPTOConfig(api_key="your_api_key_here")
 client = PatentDataClient(config=config)
@@ -118,12 +107,47 @@ if app.application_meta_data:
     print(f"Title: {app.application_meta_data.invention_title}")
 ```
 
+`PatentDataClient` also provides convenience methods for common lookups:
+
+```python
+# Look up a patent wrapper by any identifier type (you must use keyword names).
+wrapper = client.get_IFW_metadata(application_number="18/045,436")
+wrapper = client.get_IFW_metadata(patent_number="11,234,567")
+wrapper = client.get_IFW_metadata(publication_number="2023/0012345")
+wrapper = client.get_IFW_metadata(PCT_app_number="PCT/US24/12345")
+
+# Look up USPTO status codes
+status_codes = client.get_status_codes()
+```
+
 See [`examples/patent_data_example.py`](examples/patent_data_example.py) for detailed examples including downloading documents and publications.
 
+### Bulk Data API
+
+```python
+from pyUSPTO import BulkDataClient, USPTOConfig
+
+config = USPTOConfig(api_key="your_api_key_here")
+client = BulkDataClient(config=config)
+
+# Search for bulk data products
+response = client.search_products(query="patent", limit=5)
+print(f"Found {response.count} products matching 'patent'")
+
+for product in response.bulk_data_product_bag:
+    print(f"  {product.product_title_text} ({product.product_identifier})")
+
+# Get a specific product with its files
+product = client.get_product_by_id("PTGRXML", include_files=True, latest=True)
+print(f"Product: {product.product_title_text}")
+```
+
+See [`examples/bulk_data_example.py`](examples/bulk_data_example.py) for detailed examples including file downloads and archive extraction.
+
 ### Final Petition Decisions API
 
 ```python
-from pyUSPTO import FinalPetitionDecisionsClient
+from pyUSPTO import FinalPetitionDecisionsClient, USPTOConfig
 
 config = USPTOConfig(api_key="your_api_key_here")
 client = FinalPetitionDecisionsClient(config=config)
@@ -147,7 +171,7 @@ See [`examples/petition_decisions_example.py`](examples/petition_decisions_examp
 ### PTAB Trials API
 
 ```python
-from pyUSPTO import PTABTrialsClient
+from pyUSPTO import PTABTrialsClient, USPTOConfig
 
 config = USPTOConfig(api_key="your_api_key_here")
 client = PTABTrialsClient(config=config)
@@ -175,7 +199,7 @@ See [`examples/ptab_trials_example.py`](examples/ptab_trials_example.py) for det
 ### PTAB Appeals API
 
 ```python
-from pyUSPTO import PTABAppealsClient
+from pyUSPTO import PTABAppealsClient, USPTOConfig
 
 config = USPTOConfig(api_key="your_api_key_here")
 client = PTABAppealsClient(config=config)
@@ -195,7 +219,7 @@ See [`examples/ptab_appeals_example.py`](examples/ptab_appeals_example.py) for d
 ### PTAB Interferences API
 
 ```python
-from pyUSPTO import PTABInterferencesClient
+from pyUSPTO import PTABInterferencesClient, USPTOConfig
 
 config = USPTOConfig(api_key="your_api_key_here")
 client = PTABInterferencesClient(config=config)
@@ -216,64 +240,7 @@ Full documentation may be found on [Read the Docs](https://pyuspto.readthedocs.i
 
 ## Data Models
 
-The library uses Python dataclasses to represent API responses. All data models include type annotations for attributes and methods, making them fully compatible with static type checkers.
-
-#### Bulk Data API
-
-- `BulkDataResponse`: Top-level response from the API
-- `BulkDataProduct`: Information about a specific product
-- `ProductFileBag`: Container for file data elements
-- `FileData`: Information about an individual file
-
-#### Patent Data API
-
-- `PatentDataResponse`: Top-level response from the API
-- `PatentFileWrapper`: Information about a patent application
-- `ApplicationMetaData`: Metadata about a patent application
-- `Person`, `Applicant`, `Inventor`, `Attorney`: Person-related data classes
-- `Assignment`, `Assignor`, `Assignee`: Assignment-related data classes
-- `Continuity`, `ParentContinuity`, `ChildContinuity`: Continuity-related data classes
-- `PatentTermAdjustmentData`: Patent term adjustment information
-- `DocumentBag`, `EntityStatus`, `RecordAttorney`: Additional data classes for patent data
-- And many more specialized classes for different aspects of patent data
-
-#### Final Petition Decisions API
-
-- `PetitionDecisionResponse`: Top-level response from the API
-- `PetitionDecision`: Complete information about a petition decision
-- `PetitionDecisionDocument`: Document associated with a petition decision
-- `DecisionTypeCode`: Enum for petition decision types
-- `DocumentDirectionCategory`: Enum for document direction categories
-
-#### PTAB Trials API
-
-- `PTABTrialProceedingResponse`: Top-level response from the API
-- `PTABTrialProceeding`: Information about a PTAB trial proceeding (IPR, PGR, CBM, DER)
-- `PTABTrialDocumentResponse`: Response containing trial documents
-- `PTABTrialDocument`: Document associated with a trial proceeding
-- `TrialDecisionData`: Decision information for a trial proceeding
-- `TrialDocumentData`: Document metadata for trial documents
-- `TrialMetaData`: Trial metadata and status information
-- `RegularPetitionerData`, `RespondentData`, `DerivationPetitionerData`: Party data for different trial types
-
-#### PTAB Appeals API
-
-- `PTABAppealResponse`: Top-level response from the API
-- `PTABAppealDecision`: Ex parte appeal decision information
-- `AppellantData`: Appellant information and application details
-- `AppealMetaData`: Appeal metadata and filing information
-- `AppealDocumentData`: Document and decision details
-
-#### PTAB Interferences API
-
-- `PTABInterferenceResponse`: Top-level response from the API
-- `PTABInterferenceDecision`: Interference proceeding decision information
-- `SeniorPartyData`, `JuniorPartyData`, `AdditionalPartyData`: Party data classes
-- `InterferenceMetaData`: Interference metadata and status information
-- `InterferenceDocumentData`: Document and outcome details
-- `DecisionData`: Decision information for interference proceedings
-
-For a complete list of all data models, see the [API Reference docuentation](https://pyuspto.readthedocs.io/en/latest/api/models/index.html).
+The library uses Python dataclasses to represent API responses. All data models include type annotations and are fully compatible with static type checkers. For a complete list of all data models, see the [API Reference documentation](https://pyuspto.readthedocs.io/en/latest/api/models/index.html).
 
 ## Advanced Topics
 

{pyuspto-0.4.0 → pyuspto-0.4.1}/src/pyUSPTO/clients/base.py

@@ -562,12 +562,18 @@ class BaseUSPTOClient(Generic[T]):
                 else:
                     filename = "download"
 
-        if destination:
-            dest_path = Path(destination)
-            dest_path.mkdir(parents=True, exist_ok=True)
-            final_path = dest_path / filename
-        else:
-            final_path = Path.cwd() / filename
+        filename = Path(filename).name
+        if not filename or filename in (".", ".."):
+            filename = "download"
+
+        dest_path = Path(destination) if destination else Path.cwd()
+        dest_path.mkdir(parents=True, exist_ok=True)
+        final_path = dest_path / filename
+
+        if not self._is_safe_path(dest_path, final_path):
+            raise ValueError(
+                f"Filename {filename!r} resolves outside destination directory"
+            )
 
         if final_path.exists() and not overwrite:
             raise FileExistsError(f"File exists: {final_path}. Use overwrite=True")
@@ -642,9 +648,11 @@ class BaseUSPTOClient(Generic[T]):
             with tarfile.open(archive_path, "r:*") as tar:
                 # Extract members one by one with validation
                 for member in tar.getmembers():
-                    # Skip directories
+                    # Skip directories and symlinks
                     if member.isdir():
                         continue
+                    if member.issym() or member.islnk():
+                        continue
 
                     # Path traversal check
                     member_path = extract_to / member.name
@@ -670,9 +678,11 @@ class BaseUSPTOClient(Generic[T]):
             with zipfile.ZipFile(archive_path, "r") as zip_ref:
                 # Extract members one by one with validation
                 for zip_info in zip_ref.infolist():
-                    # Skip directories
+                    # Skip directories and symlinks
                     if zip_info.is_dir():
                         continue
+                    if (zip_info.external_attr >> 16) & 0o170000 == 0o120000:
+                        continue
 
                     # Path traversal check
                     member_path = extract_to / zip_info.filename
@@ -714,6 +724,10 @@ class BaseUSPTOClient(Generic[T]):
     ) -> str:
         """Download file and auto-extract if it's an archive.
 
+        Archives are extracted with path traversal protection. Extraction size
+        can be limited via ``http_config.max_extract_size`` to guard against
+        zip bombs.
+
         Args:
             url: URL to download
             destination: Directory to save/extract to
@@ -726,7 +740,8 @@ class BaseUSPTOClient(Generic[T]):
         Raises:
             TypeError: If response is not a valid Response object
             FileExistsError: If file exists and overwrite is False
-            ValueError: If downloaded file is not a valid archive when extraction attempted
+            ValueError: If downloaded file is not a valid archive when extraction
+                attempted, or if extraction exceeds max_extract_size
         """
         import tarfile
         import zipfile
@@ -743,7 +758,11 @@ class BaseUSPTOClient(Generic[T]):
         )
 
         if is_archive:
-            return self._extract_archive(path_obj, remove_archive=True)
+            return self._extract_archive(
+                path_obj,
+                remove_archive=True,
+                max_size=self.http_config.max_extract_size,
+            )
         else:
             return downloaded_path
 

{pyuspto-0.4.0 → pyuspto-0.4.1}/src/pyUSPTO/clients/patent_data.py

@@ -1005,6 +1005,7 @@ class PatentDataClient(BaseUSPTOClient[PatentDataResponse]):
 
     def get_IFW_metadata(
         self,
+        *,
         application_number: str | None = None,
         publication_number: str | None = None,
         patent_number: str | None = None,

{pyuspto-0.4.0 → pyuspto-0.4.1}/src/pyUSPTO/config.py

@@ -124,6 +124,7 @@ class USPTOConfig:
             total=self.http_config.max_retries,
             backoff_factor=self.http_config.backoff_factor,
             status_forcelist=self.http_config.retry_status_codes,
+            allowed_methods={"GET", "POST"},
         )
 
         # Configure connection pooling