b3-prosaic-harness-postgres 0.3.0__tar.gz → 0.4.1__tar.gz

{b3_prosaic_harness_postgres-0.3.0/src/b3_prosaic_harness_postgres.egg-info → b3_prosaic_harness_postgres-0.4.1}/PKG-INFO

@@ -1,13 +1,13 @@
 Metadata-Version: 2.4
 Name: b3-prosaic-harness-postgres
-Version: 0.3.0
+Version: 0.4.1
 Summary: Explicit PostgreSQL run and conversation storage for Prosaic Harness
 License-Expression: Apache-2.0
 Requires-Python: >=3.11
 Description-Content-Type: text/markdown
 License-File: LICENSE
 License-File: NOTICE
-Requires-Dist: b3-prosaic-harness<0.9,>=0.8
+Requires-Dist: b3-prosaic-harness<0.10,>=0.9
 Requires-Dist: psycopg[binary]<4,>=3.2.3
 Requires-Dist: psycopg-pool<4,>=3.2
 Provides-Extra: test
@@ -24,13 +24,35 @@ Run on worker A, inspect/resume on worker B, without a shared writable run
 directory. Core remains database-free; install this separate adapter only when
 you need shared durable state. The API is synchronous; a private I/O thread
 bounds network waits. Model execution holds no database connection/transaction.
-The conversation candidate is `b3-prosaic-harness-postgres` **0.3.0**, selecting
-`b3-prosaic-harness>=0.8,<0.9`. The adapter is maintained in this repository but
-installed and versioned separately, keeping PostgreSQL drivers optional for
-Harness users. Imports and CLI names remain unchanged. Final qualification and
-publication of this conversation release train are pending. The historical
-[Harness v0.6.1 release](https://github.com/B3Cognition/prosaic-harness/releases/tag/v0.6.1)
-retains its original 0.6.1/0.1.1 package names and receipts.
+The adapter is independently versioned: `b3-prosaic-harness-postgres` **0.4.1**
+requires `b3-prosaic-harness>=0.9,<0.10`. PostgreSQL drivers remain optional for
+core Harness users. Imports and CLI names are unchanged.
+
+## Durability profiles
+
+The default `durability_profile="postgresql"` requires `full_page_writes=on`.
+An operator who has independently verified an Amazon Aurora PostgreSQL cluster
+may explicitly select `durability_profile="aurora-postgresql"` on both
+`PostgresRunStore` and `PostgresSessionStore` (including `from_env`). This accepts
+`full_page_writes=off` under Aurora's log-based storage contract. It does not
+weaken fsync, synchronous commit, writable-primary, logged-table, lease or
+unknown-commit checks. The guard runs for every operation and connection reuse.
+Invalid profiles fail before connecting. This profile is an operator assertion,
+not engine autodetection or proof that arbitrary storage is safe. NEVER select
+it for ordinary PostgreSQL just to suppress a readiness failure.
+
+For every CLI command, pass `--durability-profile aurora-postgresql` explicitly.
+Migration and runtime must select the same profile. Verify the actual engine and
+version with AWS RDS metadata/DBA evidence; AWS also documents `aurora_version()`.
+Capture a failed SQL probe's actual error and inspect its schema/search path;
+NEVER convert an unavailable probe into permission to bypass durability checks.
+No AWS credentials or model calls are needed by the adapter.
+
+AWS describes the storage contract in
+[its architecture guide](https://aws.amazon.com/blogs/database/is-amazon-rds-for-postgresql-or-amazon-aurora-postgresql-a-better-choice-for-me/).
+Native PostgreSQL tests qualify the policy and all existing recovery behavior;
+they do not emulate Aurora storage. An actual Aurora deployment needs synthetic
+persistence/restart/failover qualification before enabling production work.
 
 ## 1. Install and supply an existing database
 
@@ -316,3 +338,22 @@ conversation backend. Run the owned PostgreSQL 16 and 18 fixtures shown above
 with `--require-postgres`. Missing infrastructure or any skipped required case
 fails qualification. Installed Linux AMD64 and ARM64 acceptance is required
 before claiming the conversation candidate is ready for production.
+
+## Optional context storage contract
+
+Conversation storage contract 2 supports `context_assembly_v1`, reads both v1
+and v2 records, and preserves existing documents. New database initialization
+creates contract 2. Existing contract-1 databases require an explicit migration;
+runtime readiness never performs it. Drain old writers, deploy upgraded workers,
+then use migration-owner credentials:
+
+```sh
+prosaic-harness-postgres migrate-conversations --dsn-env HARNESS_MIGRATION_DSN
+```
+
+`PostgresSessionStore.migrate_context_storage()` is the equivalent operator API.
+The migration is locked, transactional and repeatable; restricted runtime roles
+cannot update schema metadata. Old workers reject the upgraded storage contract.
+Keep migration-owner credentials separate from runtime credentials. Enable host
+context policies only after Runtime, Harness and store advertise the capability.
+No production token counter is bundled or certified by this storage adapter.

{b3_prosaic_harness_postgres-0.3.0 → b3_prosaic_harness_postgres-0.4.1}/README.md

@@ -4,13 +4,35 @@ Run on worker A, inspect/resume on worker B, without a shared writable run
 directory. Core remains database-free; install this separate adapter only when
 you need shared durable state. The API is synchronous; a private I/O thread
 bounds network waits. Model execution holds no database connection/transaction.
-The conversation candidate is `b3-prosaic-harness-postgres` **0.3.0**, selecting
-`b3-prosaic-harness>=0.8,<0.9`. The adapter is maintained in this repository but
-installed and versioned separately, keeping PostgreSQL drivers optional for
-Harness users. Imports and CLI names remain unchanged. Final qualification and
-publication of this conversation release train are pending. The historical
-[Harness v0.6.1 release](https://github.com/B3Cognition/prosaic-harness/releases/tag/v0.6.1)
-retains its original 0.6.1/0.1.1 package names and receipts.
+The adapter is independently versioned: `b3-prosaic-harness-postgres` **0.4.1**
+requires `b3-prosaic-harness>=0.9,<0.10`. PostgreSQL drivers remain optional for
+core Harness users. Imports and CLI names are unchanged.
+
+## Durability profiles
+
+The default `durability_profile="postgresql"` requires `full_page_writes=on`.
+An operator who has independently verified an Amazon Aurora PostgreSQL cluster
+may explicitly select `durability_profile="aurora-postgresql"` on both
+`PostgresRunStore` and `PostgresSessionStore` (including `from_env`). This accepts
+`full_page_writes=off` under Aurora's log-based storage contract. It does not
+weaken fsync, synchronous commit, writable-primary, logged-table, lease or
+unknown-commit checks. The guard runs for every operation and connection reuse.
+Invalid profiles fail before connecting. This profile is an operator assertion,
+not engine autodetection or proof that arbitrary storage is safe. NEVER select
+it for ordinary PostgreSQL just to suppress a readiness failure.
+
+For every CLI command, pass `--durability-profile aurora-postgresql` explicitly.
+Migration and runtime must select the same profile. Verify the actual engine and
+version with AWS RDS metadata/DBA evidence; AWS also documents `aurora_version()`.
+Capture a failed SQL probe's actual error and inspect its schema/search path;
+NEVER convert an unavailable probe into permission to bypass durability checks.
+No AWS credentials or model calls are needed by the adapter.
+
+AWS describes the storage contract in
+[its architecture guide](https://aws.amazon.com/blogs/database/is-amazon-rds-for-postgresql-or-amazon-aurora-postgresql-a-better-choice-for-me/).
+Native PostgreSQL tests qualify the policy and all existing recovery behavior;
+they do not emulate Aurora storage. An actual Aurora deployment needs synthetic
+persistence/restart/failover qualification before enabling production work.
 
 ## 1. Install and supply an existing database
 
@@ -296,3 +318,22 @@ conversation backend. Run the owned PostgreSQL 16 and 18 fixtures shown above
 with `--require-postgres`. Missing infrastructure or any skipped required case
 fails qualification. Installed Linux AMD64 and ARM64 acceptance is required
 before claiming the conversation candidate is ready for production.
+
+## Optional context storage contract
+
+Conversation storage contract 2 supports `context_assembly_v1`, reads both v1
+and v2 records, and preserves existing documents. New database initialization
+creates contract 2. Existing contract-1 databases require an explicit migration;
+runtime readiness never performs it. Drain old writers, deploy upgraded workers,
+then use migration-owner credentials:
+
+```sh
+prosaic-harness-postgres migrate-conversations --dsn-env HARNESS_MIGRATION_DSN
+```
+
+`PostgresSessionStore.migrate_context_storage()` is the equivalent operator API.
+The migration is locked, transactional and repeatable; restricted runtime roles
+cannot update schema metadata. Old workers reject the upgraded storage contract.
+Keep migration-owner credentials separate from runtime credentials. Enable host
+context policies only after Runtime, Harness and store advertise the capability.
+No production token counter is bundled or certified by this storage adapter.

{b3_prosaic_harness_postgres-0.3.0 → b3_prosaic_harness_postgres-0.4.1}/pyproject.toml

@@ -4,13 +4,13 @@ build-backend = "setuptools.build_meta"
 
 [project]
 name = "b3-prosaic-harness-postgres"
-version = "0.3.0"
+version = "0.4.1"
 description = "Explicit PostgreSQL run and conversation storage for Prosaic Harness"
 requires-python = ">=3.11"
 readme = "README.md"
 license = "Apache-2.0"
 license-files = ["LICENSE", "NOTICE"]
-dependencies = ["b3-prosaic-harness>=0.8,<0.9", "psycopg[binary]>=3.2.3,<4", "psycopg-pool>=3.2,<4"]
+dependencies = ["b3-prosaic-harness>=0.9,<0.10", "psycopg[binary]>=3.2.3,<4", "psycopg-pool>=3.2,<4"]
 
 [project.optional-dependencies]
 test = ["pytest>=8", "build>=1", "setuptools>=77", "wheel", "packaging"]

{b3_prosaic_harness_postgres-0.3.0 → b3_prosaic_harness_postgres-0.4.1/src/b3_prosaic_harness_postgres.egg-info}/PKG-INFO

@@ -1,13 +1,13 @@
 Metadata-Version: 2.4
 Name: b3-prosaic-harness-postgres
-Version: 0.3.0
+Version: 0.4.1
 Summary: Explicit PostgreSQL run and conversation storage for Prosaic Harness
 License-Expression: Apache-2.0
 Requires-Python: >=3.11
 Description-Content-Type: text/markdown
 License-File: LICENSE
 License-File: NOTICE
-Requires-Dist: b3-prosaic-harness<0.9,>=0.8
+Requires-Dist: b3-prosaic-harness<0.10,>=0.9
 Requires-Dist: psycopg[binary]<4,>=3.2.3
 Requires-Dist: psycopg-pool<4,>=3.2
 Provides-Extra: test
@@ -24,13 +24,35 @@ Run on worker A, inspect/resume on worker B, without a shared writable run
 directory. Core remains database-free; install this separate adapter only when
 you need shared durable state. The API is synchronous; a private I/O thread
 bounds network waits. Model execution holds no database connection/transaction.
-The conversation candidate is `b3-prosaic-harness-postgres` **0.3.0**, selecting
-`b3-prosaic-harness>=0.8,<0.9`. The adapter is maintained in this repository but
-installed and versioned separately, keeping PostgreSQL drivers optional for
-Harness users. Imports and CLI names remain unchanged. Final qualification and
-publication of this conversation release train are pending. The historical
-[Harness v0.6.1 release](https://github.com/B3Cognition/prosaic-harness/releases/tag/v0.6.1)
-retains its original 0.6.1/0.1.1 package names and receipts.
+The adapter is independently versioned: `b3-prosaic-harness-postgres` **0.4.1**
+requires `b3-prosaic-harness>=0.9,<0.10`. PostgreSQL drivers remain optional for
+core Harness users. Imports and CLI names are unchanged.
+
+## Durability profiles
+
+The default `durability_profile="postgresql"` requires `full_page_writes=on`.
+An operator who has independently verified an Amazon Aurora PostgreSQL cluster
+may explicitly select `durability_profile="aurora-postgresql"` on both
+`PostgresRunStore` and `PostgresSessionStore` (including `from_env`). This accepts
+`full_page_writes=off` under Aurora's log-based storage contract. It does not
+weaken fsync, synchronous commit, writable-primary, logged-table, lease or
+unknown-commit checks. The guard runs for every operation and connection reuse.
+Invalid profiles fail before connecting. This profile is an operator assertion,
+not engine autodetection or proof that arbitrary storage is safe. NEVER select
+it for ordinary PostgreSQL just to suppress a readiness failure.
+
+For every CLI command, pass `--durability-profile aurora-postgresql` explicitly.
+Migration and runtime must select the same profile. Verify the actual engine and
+version with AWS RDS metadata/DBA evidence; AWS also documents `aurora_version()`.
+Capture a failed SQL probe's actual error and inspect its schema/search path;
+NEVER convert an unavailable probe into permission to bypass durability checks.
+No AWS credentials or model calls are needed by the adapter.
+
+AWS describes the storage contract in
+[its architecture guide](https://aws.amazon.com/blogs/database/is-amazon-rds-for-postgresql-or-amazon-aurora-postgresql-a-better-choice-for-me/).
+Native PostgreSQL tests qualify the policy and all existing recovery behavior;
+they do not emulate Aurora storage. An actual Aurora deployment needs synthetic
+persistence/restart/failover qualification before enabling production work.
 
 ## 1. Install and supply an existing database
 
@@ -316,3 +338,22 @@ conversation backend. Run the owned PostgreSQL 16 and 18 fixtures shown above
 with `--require-postgres`. Missing infrastructure or any skipped required case
 fails qualification. Installed Linux AMD64 and ARM64 acceptance is required
 before claiming the conversation candidate is ready for production.
+
+## Optional context storage contract
+
+Conversation storage contract 2 supports `context_assembly_v1`, reads both v1
+and v2 records, and preserves existing documents. New database initialization
+creates contract 2. Existing contract-1 databases require an explicit migration;
+runtime readiness never performs it. Drain old writers, deploy upgraded workers,
+then use migration-owner credentials:
+
+```sh
+prosaic-harness-postgres migrate-conversations --dsn-env HARNESS_MIGRATION_DSN
+```
+
+`PostgresSessionStore.migrate_context_storage()` is the equivalent operator API.
+The migration is locked, transactional and repeatable; restricted runtime roles
+cannot update schema metadata. Old workers reject the upgraded storage contract.
+Keep migration-owner credentials separate from runtime credentials. Enable host
+context policies only after Runtime, Harness and store advertise the capability.
+No production token counter is bundled or certified by this storage adapter.

{b3_prosaic_harness_postgres-0.3.0 → b3_prosaic_harness_postgres-0.4.1}/src/b3_prosaic_harness_postgres.egg-info/SOURCES.txt

@@ -21,6 +21,7 @@ src/prosaic_harness_postgres/transport.py
 tests/conftest.py
 tests/test_cli.py
 tests/test_durability.py
+tests/test_durability_profiles.py
 tests/test_engine.py
 tests/test_examples.py
 tests/test_leases.py
@@ -31,6 +32,7 @@ tests/test_recovery.py
 tests/test_registration.py
 tests/test_routing.py
 tests/test_schema.py
+tests/test_session_context.py
 tests/test_session_fencing.py
 tests/test_session_recovery.py
 tests/test_session_schema.py

{b3_prosaic_harness_postgres-0.3.0 → b3_prosaic_harness_postgres-0.4.1}/src/b3_prosaic_harness_postgres.egg-info/requires.txt

@@ -1,4 +1,4 @@
-b3-prosaic-harness<0.9,>=0.8
+b3-prosaic-harness<0.10,>=0.9
 psycopg[binary]<4,>=3.2.3
 psycopg-pool<4,>=3.2
 

{b3_prosaic_harness_postgres-0.3.0 → b3_prosaic_harness_postgres-0.4.1}/src/prosaic_harness_postgres/__init__.py

@@ -1,5 +1,5 @@
 """Separate PostgreSQL adapter for Prosaic Harness."""
-__version__ = '0.3.0'
+__version__ = '0.4.1'
 
 from .store import PostgresRunStore
 from .session_store import PostgresSessionStore

{b3_prosaic_harness_postgres-0.3.0 → b3_prosaic_harness_postgres-0.4.1}/src/prosaic_harness_postgres/cli.py

@@ -44,15 +44,23 @@ def check_write(store):
 def main(argv=None):
     parser = argparse.ArgumentParser(description='Initialize/check an existing Harness database')
     commands = parser.add_subparsers(dest='command', required=True)
-    for name in ('init', 'doctor'):
+    for name in ('init', 'doctor', 'migrate-conversations'):
         command = commands.add_parser(name)
         command.add_argument('--dsn-env', required=True, help='name of the DSN environment variable, never its value')
+        command.add_argument('--durability-profile', choices=['postgresql', 'aurora-postgresql'],
+                             default='postgresql', help='explicit operator-verified database storage contract')
         if name == 'doctor':
             command.add_argument('--check-write', action='store_true', help='explicit disposable write test; DELETE credentials required')
     args = parser.parse_args(argv)
     try:
+        if args.command == 'migrate-conversations':
+            from .session_store import PostgresSessionStore
+            with PostgresSessionStore.from_env(args.dsn_env, namespace='conversation-migration', durability_profile=args.durability_profile) as store:
+                store.migrate_context_storage()
+            print(json.dumps({'migrated': True, 'conversation_storage_contract': 2}))
+            return 0
         namespace = 'prosaic-diagnostic-' + uuid.uuid4().hex
-        with PostgresRunStore.from_env(args.dsn_env, namespace=namespace) as store:
+        with PostgresRunStore.from_env(args.dsn_env, namespace=namespace, durability_profile=args.durability_profile) as store:
             if args.command == 'init':
                 store.initialize()
                 result = {'initialized': True, 'schema_version': 1}

{b3_prosaic_harness_postgres-0.3.0 → b3_prosaic_harness_postgres-0.4.1}/src/prosaic_harness_postgres/session_schema.py

@@ -1,7 +1,7 @@
 """Independent, explicit version-1 conversation storage and readiness."""
 from prosaic_harness import StoreUninitialized, StoreIncompatible
 
-SCHEMA_VERSION = STORAGE_CONTRACT_VERSION = 1
+SCHEMA_VERSION = STORAGE_CONTRACT_VERSION = 2
 MIGRATION_LOCK = 0x50524348415401
 SCHEMA = 'prosaic_harness_conversations'
 
@@ -33,7 +33,7 @@ CREATE TABLE prosaic_harness_conversations.receipts (
  PRIMARY KEY(namespace, session_id, invocation_id),
  FOREIGN KEY(namespace, session_id, scope_identity) REFERENCES
  prosaic_harness_conversations.sessions(namespace, session_id, scope_identity));
-INSERT INTO prosaic_harness_conversations.schema_version VALUES(TRUE, 1, 1);
+INSERT INTO prosaic_harness_conversations.schema_version VALUES(TRUE, 2, 2);
 """
 
 COLUMNS = {
@@ -69,7 +69,7 @@ CONSTRAINTS = {
 }
 
 
-async def ready_on_connection(conn):
+async def ready_on_connection(conn, *, expected_versions=None):
     namespace = await (await conn.execute("SELECT oid,pg_catalog.has_schema_privilege(oid,'USAGE'), "
         "pg_catalog.pg_has_role(nspowner,'USAGE') "
         "FROM pg_catalog.pg_namespace WHERE nspname=%s", (SCHEMA,))).fetchone()
@@ -154,7 +154,7 @@ async def ready_on_connection(conn):
                     raise StoreIncompatible('use least-privilege conversation runtime grants')
     versions = await (await conn.execute('SELECT schema_version,storage_contract_version '
         'FROM prosaic_harness_conversations.schema_version')).fetchall()
-    if versions != [(SCHEMA_VERSION, STORAGE_CONTRACT_VERSION)]:
+    if versions != [expected_versions or (SCHEMA_VERSION, STORAGE_CONTRACT_VERSION)]:
         raise StoreIncompatible('conversation schema version is incompatible; no automatic migration')
 
 
@@ -183,3 +183,30 @@ def initialize(transport):
         await conn.execute(DDL)
         await ready_on_connection(conn)
     transport.call(migrate, timeout_s=30)
+
+
+def migrate_context_storage(transport):
+    async def migrate(conn):
+        await conn.execute("SELECT pg_catalog.set_config('lock_timeout','25000ms',true), "
+                           "pg_catalog.set_config('statement_timeout','28000ms',true)")
+        await conn.execute('SELECT pg_catalog.pg_advisory_xact_lock(%s)', (MIGRATION_LOCK,))
+        namespace = await (await conn.execute("SELECT pg_catalog.pg_has_role(nspowner,'USAGE') "
+            'FROM pg_catalog.pg_namespace WHERE nspname=%s', (SCHEMA,))).fetchone()
+        if namespace is None:
+            raise StoreUninitialized('initialize conversation storage explicitly first')
+        if not namespace[0]:
+            raise StoreIncompatible('migration role must own conversation schema')
+        versions = await (await conn.execute('SELECT schema_version,storage_contract_version '
+            'FROM prosaic_harness_conversations.schema_version')).fetchall()
+        if versions == [(2, 2)]:
+            await ready_on_connection(conn)
+            return
+        if versions != [(1, 1)]:
+            raise StoreIncompatible('conversation migration requires intact version-1 storage')
+        await ready_on_connection(conn, expected_versions=(1, 1))
+        cursor = await conn.execute('UPDATE prosaic_harness_conversations.schema_version '
+            'SET schema_version=2,storage_contract_version=2 WHERE singleton IS TRUE')
+        if cursor.rowcount != 1:
+            raise StoreIncompatible('conversation version metadata is incompatible')
+        await ready_on_connection(conn)
+    transport.call(migrate, timeout_s=30)

{b3_prosaic_harness_postgres-0.3.0 → b3_prosaic_harness_postgres-0.4.1}/src/prosaic_harness_postgres/session_store.py

@@ -33,7 +33,7 @@ class PostgresSessionStore:
 
     def __init__(self, dsn, *, namespace, lease_s=60, renew_s=15,
                  operation_timeout_s=10, pool_timeout_s=5, connect_timeout_s=5,
-                 lock_timeout_s=1, statement_timeout_s=5, pool_size=8, max_active_leases=4):
+                 lock_timeout_s=1, statement_timeout_s=5, pool_size=8, max_active_leases=4, durability_profile="postgresql"):
         self._namespace = validate_namespace(namespace)
         positive(lease_s, 'lease_s')
         positive(renew_s, 'renew_s')
@@ -49,7 +49,7 @@ class PostgresSessionStore:
         self._transport = PostgresTransport(dsn, operation_timeout_s=operation_timeout_s,
             pool_timeout_s=pool_timeout_s, connect_timeout_s=connect_timeout_s,
             lock_timeout_s=lock_timeout_s, statement_timeout_s=statement_timeout_s,
-            pool_size=pool_size, max_active_leases=max_active_leases)
+            pool_size=pool_size, max_active_leases=max_active_leases, durability_profile=durability_profile)
 
     @property
     def namespace(self):
@@ -60,6 +60,13 @@ class PostgresSessionStore:
 
     def check_ready(self):
         session_schema.check_ready(self._transport)
+    @property
+    def capabilities(self):
+        self.check_ready()
+        return frozenset({'context_assembly_v1'})
+
+    def migrate_context_storage(self):
+        session_schema.migrate_context_storage(self._transport)
 
     def _scope(self, scope):
         if type(scope) is not ConversationScope or scope.namespace != self.namespace:

{b3_prosaic_harness_postgres-0.3.0 → b3_prosaic_harness_postgres-0.4.1}/src/prosaic_harness_postgres/store.py

@@ -29,7 +29,7 @@ class PostgresRunStore:
 
     def __init__(self, dsn, *, namespace, lease_s=60, renew_s=15,
                  operation_timeout_s=10, pool_timeout_s=5, connect_timeout_s=5,
-                 lock_timeout_s=1, statement_timeout_s=5, pool_size=8, max_active_leases=4):
+                 lock_timeout_s=1, statement_timeout_s=5, pool_size=8, max_active_leases=4, durability_profile="postgresql"):
         self.namespace = validate_namespace(namespace)
         positive(lease_s, 'lease_s')
         positive(renew_s, 'renew_s')
@@ -46,7 +46,7 @@ class PostgresRunStore:
         self._transport = PostgresTransport(dsn, operation_timeout_s=operation_timeout_s,
             pool_timeout_s=pool_timeout_s, connect_timeout_s=connect_timeout_s,
             lock_timeout_s=lock_timeout_s, statement_timeout_s=statement_timeout_s,
-            pool_size=pool_size, max_active_leases=max_active_leases)
+            pool_size=pool_size, max_active_leases=max_active_leases, durability_profile=durability_profile)
 
     def initialize(self):
         schema.initialize(self._transport)

{b3_prosaic_harness_postgres-0.3.0 → b3_prosaic_harness_postgres-0.4.1}/src/prosaic_harness_postgres/transport.py

@@ -47,7 +47,10 @@ class _Operation:
 class PostgresTransport:
     def __init__(self, dsn, *, operation_timeout_s=10, pool_timeout_s=5,
                  connect_timeout_s=5, lock_timeout_s=1, statement_timeout_s=5,
-                 pool_size=8, max_active_leases=4):
+                 pool_size=8, max_active_leases=4, durability_profile="postgresql"):
+        if type(durability_profile) is not str or durability_profile not in {'postgresql', 'aurora-postgresql'}:
+            raise ValueError('durability_profile must be postgresql or aurora-postgresql')
+        self.durability_profile = durability_profile
         for name, value in locals().copy().items():
             if name.endswith('_s'):
                 positive(value, name)
@@ -138,7 +141,9 @@ class PostgresTransport:
             pg_catalog.current_setting('transaction_read_only'),
             pg_catalog.current_setting('fsync'), pg_catalog.current_setting('full_page_writes'),
             pg_catalog.current_setting('synchronous_commit')""")).fetchone()
-        if not row or row[0] or row[1:4] != ('off', 'on', 'on') or row[4] not in {'on', 'remote_apply'}:
+        full_page_values = {'on', 'off'} if self.durability_profile == 'aurora-postgresql' else {'on'}
+        if (not row or row[0] or row[1:3] != ('off', 'on')
+                or row[3] not in full_page_values or row[4] not in {'on', 'remote_apply'}):
             raise StoreIncompatible('require writable primary, logged durability and safe WAL settings')
 
     async def _sql(self, operation, callback, renewal, budget):

{b3_prosaic_harness_postgres-0.3.0 → b3_prosaic_harness_postgres-0.4.1}/tests/support/local_cluster.py

@@ -40,7 +40,7 @@ def candidate_wheels(root):
     spec.loader.exec_module(release)
     release.verify_upstream(Path(receipt_directory).resolve(strict=True), wheelhouse)
     return [wheelhouse / 'b3_prosaic-0.4.1-py3-none-any.whl',
-            wheelhouse / 'b3_prosaic_runtime-0.9.0-py3-none-any.whl']
+            wheelhouse / 'b3_prosaic_runtime-0.9.7-py3-none-any.whl']
 
 
 class LocalCluster:
@@ -177,12 +177,12 @@ class LocalCluster:
 set -eu
 apt-get update -qq
 python -m venv /tmp/core
-/tmp/core/bin/python -m pip install /core-wheels/b3_prosaic_harness-0.8.0-py3-none-any.whl >/dev/null
+/tmp/core/bin/python -m pip install /core-wheels/b3_prosaic_harness-0.9.4-py3-none-any.whl >/dev/null
 /tmp/core/bin/python -I -c 'import importlib.util,prosaic_harness; assert importlib.util.find_spec("psycopg") is None; assert importlib.util.find_spec("prosaic_harness_postgres") is None'
 /tmp/core/bin/python -I /fixture/workflow_factory_smoke.py
 /tmp/core/bin/python -I /fixture/conversation_smoke.py
 python -m venv /tmp/both
-/tmp/both/bin/python -m pip install /core-wheels/b3_prosaic_harness-0.8.0-py3-none-any.whl /adapter-wheels/b3_prosaic_harness_postgres-0.3.0-py3-none-any.whl >/dev/null
+/tmp/both/bin/python -m pip install /core-wheels/b3_prosaic_harness-0.9.4-py3-none-any.whl /adapter-wheels/b3_prosaic_harness_postgres-0.4.1-py3-none-any.whl >/dev/null
 /tmp/both/bin/python -I /fixture/linux_wheel_smoke.py
 '''
         if dependencies:
@@ -266,12 +266,13 @@ def main():
             cluster.stop()
         else:
             env = os.environ | {'HARNESS_TEST_DATABASE_URL': cluster.dsn,
-                'HARNESS_TEST_CONTAINER_ENGINE': cluster.engine, 'HARNESS_TEST_POSTGRES_VERSION': cluster.version}
+                'HARNESS_TEST_CONTAINER_ENGINE': cluster.engine, 'HARNESS_TEST_POSTGRES_VERSION': cluster.version,
+                'PROSAIC_LIFECYCLE_TEST_DSN': cluster.dsn}
             root = Path(__file__).resolve().parents[4]
             report = (['--junitxml=' + env['HARNESS_TEST_JUNIT_XML']]
                       if env.get('HARNESS_TEST_JUNIT_XML') else [])
             raise SystemExit(subprocess.run([sys.executable, '-m', 'pytest', '-q',
-                'adapters/postgres/tests', '--require-postgres', *report],
+                'adapters/postgres/tests', 'tests/test_conversation_postgres_lifecycle.py', '--require-postgres', *report],
                 cwd=root, env=env, timeout=600).returncode)
 
 

{b3_prosaic_harness_postgres-0.3.0 → b3_prosaic_harness_postgres-0.4.1}/tests/support/session_documents.py

@@ -38,3 +38,29 @@ def receipt(state, *, invocation_id='b' * 32, failure=None, uncertain=False):
     result = TurnResult(Result(1 if failure else 0, '' if failure else 'Done', failure or ''),
                         completed, evidence)
     return make_receipt(state, invocation_id, result)
+
+
+def context_document(scope, *, session_id='a'*32):
+    from prosaic_runtime import (ContextPolicy, TokenCounterDescriptor,
+        TokenCounterRegistry, TokenCounterRegistration)
+    base = bindings()
+    class Counter:
+        def count_tokens(self, request): return 10
+    descriptor = TokenCounterDescriptor('fixture-v1', 'openai-compatible',
+        'synthetic', 'openai-chat-v1', 4096, '1', '0'*64, '1'*64,
+        'exact', 'Synthetic fixed fixture grammar only.')
+    counters = TokenCounterRegistry({'fixture-v1': TokenCounterRegistration(descriptor, Counter())})
+    policy = ContextPolicy('fullHistory', 4096, 128, 0, 'fixture-v1')
+    binding = ConversationBindings(base.agent, version='context-v1', config=base.config,
+        policy=base.policy, run_policy=base.run_policy,
+        context_policy=policy, token_counters=counters)
+    state = new_session(session_id, scope, binding)
+    prepared = binding.runtime().prepare_turn(binding.agent, message='Hello ž',
+        policy=binding.run_policy, limits=binding.turn_limits,
+        context_policy=policy, token_counters=counters)
+    state = reserve_attempt(state, message_id='message', message='Hello ž',
+        invocation_id='b'*32, context_identity=prepared.context_identity,
+        encoding_version=prepared.encoding_version, input_bytes=prepared.input_bytes,
+        provider_allowance=2, tool_allowance=0, context_selection=prepared.context_selection,
+        context_report=prepared.context_report, context_work=prepared.context_work)
+    return state, prepared

b3_prosaic_harness_postgres-0.4.1/tests/test_durability_profiles.py

@@ -0,0 +1,96 @@
+"""An explicit storage contract changes only the full-page-write guard."""
+import asyncio
+from unittest.mock import AsyncMock
+
+import pytest
+from prosaic_harness import StoreIncompatible
+from prosaic_harness_postgres.transport import PostgresTransport
+
+
+@pytest.mark.parametrize('profile', ['postgresql', 'aurora-postgresql'])
+@pytest.mark.parametrize('row,accepted', [
+    ((False, 'off', 'on', 'on', 'on'), True),
+    ((False, 'off', 'on', 'off', 'on'), 'aurora'),
+    ((False, 'off', 'off', 'off', 'on'), False),
+    ((False, 'off', 'on', 'off', 'off'), False),
+    ((True, 'off', 'on', 'off', 'on'), False),
+    ((False, 'on', 'on', 'off', 'on'), False),
+    ((False, 'off', 'on', 'on', 'remote_apply'), True),
+    ((False, 'off', 'on', 'on', 'local'), False),
+    ((False, 'off', 'on', 'invalid', 'on'), False),
+    (None, False),
+])
+def test_profile_changes_only_full_page_requirement(profile, row, accepted):
+    transport = object.__new__(PostgresTransport)
+    transport.durability_profile = profile
+    cursor = AsyncMock()
+    cursor.fetchone.return_value = row
+    connection = AsyncMock()
+    connection.execute.return_value = cursor
+    allowed = accepted is True or (accepted == 'aurora' and profile == 'aurora-postgresql')
+    if allowed:
+        asyncio.run(transport._guard(connection))
+    else:
+        with pytest.raises(StoreIncompatible):
+            asyncio.run(transport._guard(connection))
+
+
+@pytest.mark.parametrize('profile', ['', 'storage', 'Aurora', None, True])
+def test_unknown_profile_rejected_before_connection(profile):
+    with pytest.raises(ValueError, match='durability_profile'):
+        PostgresTransport('unused', durability_profile=profile)
+
+
+@pytest.mark.parametrize('module_name,class_name', [('store', 'PostgresRunStore'), ('session_store', 'PostgresSessionStore')])
+def test_public_store_and_from_env_forward_profile(monkeypatch, module_name, class_name):
+    import importlib
+    module = importlib.import_module('prosaic_harness_postgres.' + module_name)
+    captured = []
+    monkeypatch.setattr(module, 'PostgresTransport', lambda dsn, **kw: captured.append(kw))
+    monkeypatch.setenv('SYNTHETIC_DSN', 'synthetic')
+    cls = getattr(module, class_name)
+    cls('synthetic', namespace='fixture')
+    cls.from_env('SYNTHETIC_DSN', namespace='fixture', durability_profile='aurora-postgresql')
+    assert [kw['durability_profile'] for kw in captured] == ['postgresql', 'aurora-postgresql']
+
+
+@pytest.mark.parametrize('command', ['init', 'doctor', 'migrate-conversations'])
+def test_cli_forwards_explicit_profile(monkeypatch, command):
+    from prosaic_harness_postgres import cli, session_store
+    calls = []
+    class Store:
+        def __enter__(self): return self
+        def __exit__(self, *args): pass
+        def initialize(self): pass
+        def check_ready(self): pass
+        def migrate_context_storage(self): pass
+    def create(name, **kwargs):
+        calls.append(kwargs['durability_profile'])
+        return Store()
+    monkeypatch.setattr(cli.PostgresRunStore, 'from_env', create)
+    monkeypatch.setattr(session_store.PostgresSessionStore, 'from_env', create)
+    assert cli.main([command, '--dsn-env', 'SYNTHETIC_DSN', '--durability-profile', 'aurora-postgresql']) == 0
+    assert calls == ['aurora-postgresql']
+
+
+@pytest.mark.parametrize('class_name', ['PostgresRunStore', 'PostgresSessionStore'])
+def test_explicit_profile_retains_real_connection_guards(db_admin_dsn, class_name):
+    import prosaic_harness_postgres
+    cls = getattr(prosaic_harness_postgres, class_name)
+    with cls(db_admin_dsn, namespace='fixture', durability_profile='aurora-postgresql', pool_size=1) as store:
+        store.initialize()
+        store.check_ready()
+        store._transport.call(lambda conn: conn.execute('SET synchronous_commit=off'))
+        with pytest.raises(StoreIncompatible):
+            store.check_ready()
+
+
+def test_public_version_matches_distribution():
+    import ast
+    from pathlib import Path
+    import tomllib
+    root = Path(__file__).resolve().parents[1]
+    version = tomllib.loads((root/'pyproject.toml').read_text())['project']['version']
+    module = ast.parse((root/'src/prosaic_harness_postgres/__init__.py').read_text())
+    assert next(ast.literal_eval(n.value) for n in module.body if isinstance(n, ast.Assign)
+                and any(isinstance(t, ast.Name) and t.id=='__version__' for t in n.targets)) == version

{b3_prosaic_harness_postgres-0.3.0 → b3_prosaic_harness_postgres-0.4.1}/tests/test_packaging.py

@@ -13,8 +13,8 @@ import pytest
 import yaml
 
 ROOT = Path(__file__).resolve().parents[3]
-CORE = ROOT / 'dist/b3_prosaic_harness-0.8.0-py3-none-any.whl'
-ADAPTER = ROOT / 'adapters/postgres/dist/b3_prosaic_harness_postgres-0.3.0-py3-none-any.whl'
+CORE = ROOT / 'dist/b3_prosaic_harness-0.9.4-py3-none-any.whl'
+ADAPTER = ROOT / 'adapters/postgres/dist/b3_prosaic_harness_postgres-0.4.1-py3-none-any.whl'
 
 def test_owned_fixture_uses_free_explicit_subnet_when_default_pool_is_exhausted():
     from support.local_cluster import owned_subnet
@@ -73,13 +73,13 @@ def metadata(path):
 def test_wheel_contents_and_dependency_boundaries():
     core, names = metadata(CORE)
     assert core['Name'] == 'b3-prosaic-harness'
-    assert core['Version'] == '0.8.0'
+    assert core['Version'] == '0.9.4'
     assert not any(name.startswith('prosaic_harness_postgres/') for name in names)
     assert not any('psycopg' in value.lower() for value in core.get_all('Requires-Dist'))
     adapter, names = metadata(ADAPTER)
     assert adapter['Name'] == 'b3-prosaic-harness-postgres'
-    assert adapter['Version'] == '0.3.0'
-    assert any(value.startswith('b3-prosaic-harness<0.9,>=0.8') for value in adapter.get_all('Requires-Dist'))
+    assert adapter['Version'] == '0.4.1'
+    assert any(value.startswith('b3-prosaic-harness<0.10,>=0.9') for value in adapter.get_all('Requires-Dist'))
     assert 'prosaic_harness_postgres/cli.py' in names
     assert any(value.startswith('psycopg[binary]<4,>=3.2.3')
                for value in adapter.get_all('Requires-Dist'))
@@ -134,7 +134,8 @@ def test_installed_memory_file_conversations_and_saved_receipt_recovery(wheel_en
     report = json.loads(result.stdout)
     assert set(report['stores']) == {'memory', 'file'}
     for evidence in report['stores'].values():
-        assert evidence['providerRequests'] == 4
+        assert evidence['providerRequests'] == 6
+        assert evidence['sameMessageFailedRetry'] is True
         assert evidence['savedReceiptAdoptedWithoutDispatch'] is True
         assert evidence['failedCorrectionRetained'] is True
 
@@ -184,7 +185,7 @@ def curated_candidates(release_tool, tmp_path):
     candidates = []
     for repo, expected in (
         ('B3Cognition/prosaic', {'b3-prosaic': '0.4.1'}),
-        ('B3Cognition/prosaic-runtime', {'b3-prosaic-runtime': '0.9.0',
+        ('B3Cognition/prosaic-runtime', {'b3-prosaic-runtime': '0.9.7',
                                        'b3-prosaic-runtime-postgres': '0.3.0'})):
         artifacts = []
         for name, version in expected.items():
@@ -252,4 +253,4 @@ def test_container_mounts_verified_dependency_bytes_read_only(
     create = calls[0]
     assert str(wheelhouse) + ':/candidate-wheels:ro' in create
     assert 'PIP_FIND_LINKS=/candidate-wheels' in create[-1]
-    assert '/candidate-wheels/b3_prosaic_runtime-0.9.0-py3-none-any.whl' in create[-1]
+    assert '/candidate-wheels/b3_prosaic_runtime-0.9.7-py3-none-any.whl' in create[-1]

b3_prosaic_harness_postgres-0.4.1/tests/test_session_context.py

@@ -0,0 +1,112 @@
+"""Owner-only explicit v1->v2 migration; real PostgreSQL transactional evidence."""
+import pytest
+import psycopg
+from prosaic_harness import StoreIncompatible, ConversationScope
+from prosaic_harness.session_contracts import new_session
+import prosaic_harness_postgres as pg
+from prosaic_harness_postgres import session_schema
+from test_session_schema import grant_conversations
+from support.session_documents import bindings
+from dataclasses import replace
+
+
+def legacy_storage(db_admin_dsn):
+    with pg.PostgresSessionStore(db_admin_dsn, namespace='context-test') as owner:
+        owner.initialize()
+    # Table/role contract is identical in v1; only explicit contract metadata changes.
+    with psycopg.connect(db_admin_dsn) as connection:
+        connection.execute('UPDATE prosaic_harness_conversations.schema_version '
+            'SET schema_version=1,storage_contract_version=1')
+
+
+def test_owner_migration_is_explicit_repeatable_and_keeps_v1_records(db_admin_dsn):
+    scope = ConversationScope('context-test', 'sandbox', 'app', 'tenant', 'actor')
+    state = new_session('a'*32, scope, bindings())
+    with pg.PostgresSessionStore(db_admin_dsn, namespace='context-test') as owner:
+        owner.initialize()
+        with owner.lease('a'*32, scope=scope) as lease:
+            owner.create_session('a'*32, state, lease, scope=scope)
+        before = owner.load_session('a'*32, scope=scope)
+    with psycopg.connect(db_admin_dsn) as connection:
+        connection.execute('UPDATE prosaic_harness_conversations.schema_version '
+            'SET schema_version=1,storage_contract_version=1')
+    with pg.PostgresSessionStore(db_admin_dsn, namespace='context-test') as owner:
+        with pytest.raises(StoreIncompatible): owner.check_ready()
+        with pytest.raises(StoreIncompatible): owner.initialize()
+        owner.migrate_context_storage()
+        owner.migrate_context_storage()
+        assert 'context_assembly_v1' in owner.capabilities
+        assert owner.load_session('a'*32, scope=scope) == before
+        with pytest.raises(StoreIncompatible):
+            owner._transport.call(lambda connection:
+                session_schema.ready_on_connection(connection, expected_versions=(1, 1)))
+
+
+def test_runtime_role_cannot_migrate_or_gain_owner_privileges(db_admin_dsn, runtime_dsn):
+    legacy_storage(db_admin_dsn)
+    grant_conversations(db_admin_dsn, runtime_dsn)
+    with pg.PostgresSessionStore(runtime_dsn, namespace='context-test') as runtime:
+        with pytest.raises(StoreIncompatible): runtime.migrate_context_storage()
+    with psycopg.connect(db_admin_dsn) as connection:
+        assert connection.execute('SELECT schema_version,storage_contract_version '
+            'FROM prosaic_harness_conversations.schema_version').fetchone() == (1, 1)
+    with pg.PostgresSessionStore(db_admin_dsn, namespace='context-test') as owner:
+        owner.migrate_context_storage()
+    with pg.PostgresSessionStore(runtime_dsn, namespace='context-test') as runtime:
+        assert 'context_assembly_v1' in runtime.capabilities
+
+
+def test_v2_checkpoint_is_fenced_and_owner_filtered(db_admin_dsn, runtime_dsn):
+    from prosaic_runtime import ContextWorkState
+    from prosaic_harness import LeaseLost, SessionNotFound
+    from prosaic_harness.session_context import checkpoint_context_work
+    from support.session_documents import context_document
+    scope = ConversationScope('context-test', 'sandbox', 'app', 'tenant', 'actor')
+    with pg.PostgresSessionStore(db_admin_dsn, namespace='context-test') as owner:
+        owner.initialize()
+    grant_conversations(db_admin_dsn, runtime_dsn)
+    state, prepared = context_document(scope)
+    with pg.PostgresSessionStore(runtime_dsn, namespace='context-test') as first, \
+            pg.PostgresSessionStore(runtime_dsn, namespace='context-test') as replica:
+        with first.lease('a'*32, scope=scope) as lease:
+            revision = first.create_session('a'*32, state, lease, scope=scope)
+            before = prepared.context_work.to_dict()
+            work = ContextWorkState.from_dict({**before, 'checkpointSequence': 1,
+                'reservedActiveMicros': 2_000_000 - before['activeAssemblyMicros']})
+            changed = checkpoint_context_work(state, 'b'*32, work)
+            current = first.save_session('a'*32, changed, revision, lease, scope=scope)
+            assert replica.load_session('a'*32, scope=scope).state == changed
+            with pytest.raises(SessionNotFound):
+                replica.load_session('a'*32, scope=replace(scope, actor='foreign'))
+            with psycopg.connect(db_admin_dsn) as admin:
+                admin.execute('UPDATE prosaic_harness_conversations.leases '
+                    'SET generation=generation+1 WHERE namespace=%s AND session_id=%s',
+                    ('context-test', 'a'*32))
+            with pytest.raises(LeaseLost):
+                first.save_session('a'*32, changed, current, lease, scope=scope)
+def test_failed_postupdate_validation_rolls_back_metadata(db_admin_dsn, monkeypatch):
+    legacy_storage(db_admin_dsn)
+    original = session_schema.ready_on_connection
+    async def reject_v2(connection, **kwargs):
+        row = await (await connection.execute('SELECT schema_version FROM '
+            'prosaic_harness_conversations.schema_version')).fetchone()
+        if row == (2,): raise StoreIncompatible('synthetic postupdate validation failure')
+        return await original(connection, **kwargs)
+    monkeypatch.setattr(session_schema, 'ready_on_connection', reject_v2)
+    with pg.PostgresSessionStore(db_admin_dsn, namespace='context-test') as owner:
+        with pytest.raises(StoreIncompatible): owner.migrate_context_storage()
+    with psycopg.connect(db_admin_dsn) as connection:
+        assert connection.execute('SELECT schema_version,storage_contract_version '
+            'FROM prosaic_harness_conversations.schema_version').fetchone() == (1, 1)
+
+
+def test_operator_cli_migrates_without_exposing_connection_details(db_admin_dsn, monkeypatch, capsys):
+    import json
+    from prosaic_harness_postgres.cli import main
+    legacy_storage(db_admin_dsn)
+    monkeypatch.setenv('CONTEXT_TEST_DSN', db_admin_dsn)
+    assert main(['migrate-conversations', '--dsn-env', 'CONTEXT_TEST_DSN']) == 0
+    output = capsys.readouterr()
+    assert json.loads(output.out) == {'migrated': True, 'conversation_storage_contract': 2}
+    assert output.err == ''
+    assert db_admin_dsn not in output.out