release: v2.0.4 — pack tests stop polluting the developer's ledger

Pack tests already monkeypatched LEDGER_PATH onto a per-test tmp dir,
but if anything bypassed pytest's normal flow (REPL, IDE runner,
`python -c` reproduction) the install ledger at ~/.memee/packs.json
collected drift. Got noticed when 4 stray test packs (rt-pack,
tamper-installer, dedup-pack, merge-pack) showed up in a real user's
ledger with pytest tmp paths in the `file:` column.

Two-layer fix in conftest:

1. Autouse fixture redirects `memee.engine.packs.LEDGER_PATH` to a
   per-test tmp file BEFORE every test runs. Existing per-test
   `monkeypatch.setattr` calls keep working (last-patch-wins,
   monkeypatch unwinds in LIFO order); they're now redundant but
   harmless.

2. Session-end guard snapshots size+mtime of the real ledger and
   raises if it moved. Loud regression detection — if a future
   change reintroduces a leak, the suite goes red.

Verified: full test suite (362 tests trimmed of long simulations)
passes and ~/.memee/packs.json is byte-identical before and after.

No behaviour change for end users.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

Author: Tomas Pflanzer

CHANGELOG.md

@@ -7,6 +7,24 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## [Unreleased]
 
+## [2.0.4] — 2026-04-27
+
+The "tests stop polluting the developer's ledger" patch.
+No behaviour change for end users.
+
+### Fixed
+
+- **Pack-test ledger isolation.** Pack-related tests already
+  ``monkeypatch.setattr("memee.engine.packs.LEDGER_PATH", ...)`` in
+  every test that needs it, but a forgotten patch — or an import path
+  that bypassed pytest entirely (REPL, IDE runner, ``python -c``) —
+  would silently append entries to the developer's real
+  ``~/.memee/packs.json``. Two layers of defence land in this release:
+  a session-wide autouse fixture that redirects ``LEDGER_PATH`` to a
+  per-test ``tmp_path`` for **every** test (existing per-test patches
+  are still honoured, just redundant), and a session-end leak guard
+  that fails the suite loud if the real ledger's size or mtime moved.
+
 ## [2.0.3] — 2026-04-27
 
 The "people install once and forget" patch. Three things that should

pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "hatchling.build"
 
 [project]
 name = "memee"
-version = "2.0.3"
+version = "2.0.4"
 description = "Cross-model shared memory for AI agents. One canon. Every model, every project, every teammate."
 readme = "README.md"
 requires-python = ">=3.11"

src/memee/__init__.py

@@ -1,3 +1,3 @@
 """Memee — Institutional memory for AI agent companies."""
 
-__version__ = "2.0.3"
+__version__ = "2.0.4"

tests/conftest.py

@@ -47,3 +47,83 @@ def session(db_engine):
 def org(session):
     """Return the test organization."""
     return session.query(Organization).filter_by(name="test-org").first()
+
+
+# ── Test-time isolation of the pack-install ledger ──────────────────────
+#
+# The ledger normally lives at ``~/.memee/packs.json`` and is appended to
+# every time ``install_pack`` succeeds. Individual pack tests already
+# monkeypatch ``LEDGER_PATH``, but a forgotten patch (or a test that
+# imports through a side path — REPL, ``python -c``, IDE runner) silently
+# pollutes the developer's real ledger. We saw this happen.
+#
+# The autouse fixture below makes that impossible: every test, in every
+# file, gets ``memee.engine.packs.LEDGER_PATH`` repointed at a per-test
+# ``tmp_path``. Existing per-test ``monkeypatch.setattr`` calls keep
+# working — they just override the redirect with another tmp_path, which
+# is also fine.
+
+
+@pytest.fixture(autouse=True)
+def _isolate_pack_ledger(tmp_path, monkeypatch):
+    """Redirect ``memee.engine.packs.LEDGER_PATH`` to a per-test tmp file.
+
+    Belt-and-suspenders default isolation. Without this, any test (or
+    fixture) that calls ``install_pack`` without an explicit patch would
+    write to the developer's real ``~/.memee/packs.json``.
+    """
+    # Importing the engine module here (lazily) avoids loading SQLAlchemy
+    # for tests that never touch packs — keeps suite startup fast.
+    try:
+        import memee.engine.packs as _packs
+    except ImportError:
+        # Engine missing in some minimal environments — nothing to patch.
+        yield
+        return
+    fake = tmp_path / "test-ledger" / "packs.json"
+    fake.parent.mkdir(parents=True, exist_ok=True)
+    monkeypatch.setattr(_packs, "LEDGER_PATH", fake)
+    yield
+
+
+@pytest.fixture(scope="session", autouse=True)
+def _ledger_leak_guard():
+    """Fail the suite if any test wrote to the real ``~/.memee/packs.json``.
+
+    Snapshots size + mtime at session start; checks again at session end.
+    A drift means *something* bypassed the autouse fixture above — that's
+    a regression we want loud. The guard skips when no real ledger exists
+    yet (fresh checkout, CI sandbox).
+    """
+    real = Path.home() / ".memee" / "packs.json"
+    before: tuple | None = None
+    if real.exists():
+        st = real.stat()
+        before = (st.st_size, st.st_mtime_ns)
+
+    yield
+
+    if before is None:
+        # No real ledger before the run. If one appeared, that's a leak.
+        if real.exists():
+            raise AssertionError(
+                f"Test suite created a real ledger at {real}. "
+                "Some test bypassed the _isolate_pack_ledger autouse fixture. "
+                "Check for direct imports of LEDGER_PATH or for tests that "
+                "construct paths relative to Path.home() directly."
+            )
+        return
+    if not real.exists():
+        # Existed before, gone now — the suite deleted it. Loud.
+        raise AssertionError(
+            f"Test suite removed the real ledger at {real}. "
+            "Refuse to assume it's safe — restore from backup."
+        )
+    st = real.stat()
+    after = (st.st_size, st.st_mtime_ns)
+    if after != before:
+        raise AssertionError(
+            f"Test suite modified the real ledger at {real} "
+            f"(size/mtime changed from {before} to {after}). "
+            "A test bypassed the _isolate_pack_ledger autouse fixture."
+        )