`maqpna memory erase`

Erase a user's memory and write a signed erasure certificate

Govern-o json | yaml

Synopsis#

maqpna memory erase --user U [--gateway URL] [-n NS] [--store NAME] [--certificate-out FILE] [--yes]

Flag	Type	Description	Default
`--certificate-out`	string	write the erasure certificate JSON to FILE	none
`--gateway`	string	gateway base URL (env MAQPNA_GATEWAY_URL; default: the context's gateway)	none
`--oidc-token-file`	string	file holding an OIDC access token for the admin API (env MAQPNA_OIDC_TOKEN_FILE); wins over `--token`	none
`--store`	string	only this store (needs -n)	none
`--token`	string	static admin token (env MAQPNA_ADMIN_TOKEN; dev/break-glass)	none
`--user`	string	user (token sub) whose memory entries are erased (required)	none
`-y`, `--yes`	switch	do not ask for confirmation (required when stdin is not a terminal)	none

The global flags (--context, -o, --no-color, ...) work with every command.

$ maqpna memory erase --user alice@example.com -n team-a --certificate-out erasure.json

Talks to the gateway: --gateway, else MAQPNA_GATEWAY_URL, else the current context's gateway (maqpna context).
Authenticates to the admin API with the token stored by maqpna login, --oidc-token-file, or a static --token (MAQPNA_ADMIN_TOKEN).
--yes: do not ask for confirmation (required when stdin is not a terminal).
Prints a table by default; -o json or -o yaml print the data, and --jq EXPR filters the JSON.

Code	Meaning
`0`	success
`1`	error (the message says what failed, with a hint when there is one)
`2`	usage error: unknown flag, missing argument or bad value; the synopsis is printed
`3`	a check failed, a change is blocked, or a result did not match (tamper, policy mismatch) (not used by this command)

maqpna memory erase --help.cast

This needs a gateway feature the local MAQPNA does not enable (memory, the token vault or signed audit checkpoints), so the recording shows its help.