cinchdb 0.1.14__py3-none-any.whl → 0.1.15__py3-none-any.whl

{cinchdb-0.1.14.dist-info → cinchdb-0.1.15.dist-info}/METADATA

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: cinchdb
-Version: 0.1.14
+Version: 0.1.15
 Summary: A Git-like SQLite database management system with branching and multi-tenancy
 Project-URL: Homepage, https://github.com/russellromney/cinchdb
 Project-URL: Documentation, https://russellromney.github.io/cinchdb
@@ -156,24 +156,16 @@ db.update("posts", post_id, {"content": "Updated content"})
 - **Python SDK**: Core functionality for local development
 - **CLI**: Full-featured command-line interface
 
-## Security & Encryption
+## Security
 
-Optional transparent encryption for tenant databases:
+CinchDB uses standard SQLite security features:
 
-```bash
-# Enable encryption
-export CINCH_ENCRYPT_DATA=true
-export CINCH_ENCRYPTION_KEY="$(python -c 'import secrets; print(secrets.token_urlsafe(32))')"
-
-# Install encryption library
-pip install pysqlcipher3
-```
+- **WAL mode**: Better concurrency and crash recovery
+- **Foreign key constraints**: Enforced data integrity  
+- **File permissions**: Standard OS-level access control
+- **Multi-tenant isolation**: Separate database files per tenant
 
-- **Tenant databases**: Encrypted with ChaCha20-Poly1305 (~2-5% overhead)
-- **Metadata**: Unencrypted for operational simplicity
-- **Integration**: Transparent - no code changes needed
-
-Works without encryption libraries - gracefully falls back to standard SQLite.
+For production deployments, consider additional security measures at the infrastructure level.
 
 ## Development
 
@@ -186,14 +178,13 @@ make test
 
 ## Future
 
-Though probably not, perhaps I'll evolve it into something bigger and more full-featured, with things like
-- data backups
-- replication to S3
-- audit access
-- SaaS-like dynamics
-- multi-project hosting
-- auth proxying
-- leader-follower abilities for edge deployment
+CinchDB focuses on being a simple, reliable SQLite management layer. Future development will prioritize:
+
+- Remote API server improvements
+- Better CLI user experience  
+- Performance optimizations
+- Additional language SDKs (TypeScript, Go, etc.)
+- Enhanced codegen features
 
 
 ## License

{cinchdb-0.1.14.dist-info → cinchdb-0.1.15.dist-info}/RECORD

@@ -1,43 +1,44 @@
-cinchdb/__init__.py,sha256=m-yJkJh1kFCBWHjgEi9Aqz7LrrxlhRWc13Daa8PJv74,477
+cinchdb/__init__.py,sha256=qnBv5kpL4GJjNbQkp-nBcOgrsskwDr7WTnUPCGwg3zs,603
 cinchdb/__main__.py,sha256=OpkDqn9zkTZhhYgvv_grswWLAHKbmxs4M-8C6Z5HfWY,85
 cinchdb/config.py,sha256=gocjMnYKLWhgvnteo6zprgwtK6Oevoxq547J_v-C9Ns,5265
 cinchdb/cli/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
-cinchdb/cli/main.py,sha256=G26O3EqOaKwOfwkOXOfp2XgyS5fslMgKidOAgW5k6qU,4764
+cinchdb/cli/main.py,sha256=x2bF19e0lY_0V3_tx6CO9M3AaFlII75bAdWaOg0ne_A,4587
 cinchdb/cli/utils.py,sha256=InAGuo7uENvsfBQu6EKIbbiNXqmvg-BecLmhLvOz5qg,6485
-cinchdb/cli/commands/__init__.py,sha256=IRUIPHgdpF4hBDbDy0SgaWn39o5GNUjH54_C42sjlQg,273
+cinchdb/cli/commands/__init__.py,sha256=Wjj_cmfscb_mpC-yFXxWW0-pJoBlI-Vpunb37SARsTs,291
 cinchdb/cli/commands/branch.py,sha256=Nz8YQYJ7lizSXEAv0usTx85TDOC-N5Ul9KIxN8JQtKc,17973
 cinchdb/cli/commands/codegen.py,sha256=WsRWmXNTDuaLPyECW5psXM9zOQnKHpUiv8BJnBAjMII,6189
 cinchdb/cli/commands/column.py,sha256=nUVgjYbxSobJR9CC-qdOvrCl1TgFySr-ctQb0djKZtQ,11676
+cinchdb/cli/commands/data.py,sha256=tRXVeYCShVp5VKJ--Q_XzTokPE6G0gaHSad48iFHa3E,12662
 cinchdb/cli/commands/database.py,sha256=A3ew8Z987a25dRxmY5XeoB-Ka6SXLKtWogj3XAKUNZE,7332
-cinchdb/cli/commands/index.py,sha256=P0sM9lu1rVliacYl49LPqtxNYdrwzKzpVKW10jC-5i4,6096
+cinchdb/cli/commands/index.py,sha256=qL3-UOk_cBLBNR4qK2uPTyFI7qAMxQSE7YtXFXNeSdg,6094
 cinchdb/cli/commands/query.py,sha256=XW_YL6M5IYHHHMpVB5p-M01kawFxwDOK5B5hGIy_BA8,5044
 cinchdb/cli/commands/remote.py,sha256=i07hfiAxgrROB9lVJVaKK_nWxT1SGiSbtFb4jvEwxEo,4445
 cinchdb/cli/commands/table.py,sha256=K233WOV102-g6QlHhL97FhfiGz67zIctbxZblAjY4Lg,10516
-cinchdb/cli/commands/tenant.py,sha256=cOWs9Gf13ZE4KTKJZ_AvDwFDdXBUn5i-Av4MoUsc8Go,6199
+cinchdb/cli/commands/tenant.py,sha256=snpMc9Jk2uGmEJCKP39zD26BZLYBhiRxP2M5oGyz0rQ,8309
 cinchdb/cli/commands/view.py,sha256=ZmS1IW7idzzHAXmgVyY3C4IQRo7toHb6fHNFY_tQJjI,6385
 cinchdb/cli/handlers/__init__.py,sha256=f2f-Cc96rSBLbVsiIbf-b4pZCKZoHfmhNEvnZ0OurRs,131
 cinchdb/cli/handlers/codegen_handler.py,sha256=i5we_AbiUW3zfO6pIKWxvtO8OvOqz3H__4xPmTLEuQM,6524
 cinchdb/core/__init__.py,sha256=iNlT0iO9cM0HLoYwzBavUBoXRh1Tcnz1l_vfbwVxK_Q,246
-cinchdb/core/connection.py,sha256=x_xMJv1DiZtWjBoSa2rJSGHs_m6pbtk2JYIYTdeWMtE,5491
-cinchdb/core/database.py,sha256=vzVr6Y6iydf9kOU0OO7yVYoHQJ3zlfwAWF2LylJUV0I,27162
+cinchdb/core/connection.py,sha256=FdYVQuoFYo7B0JSHfCTZFTq3DkM_NWHF4ei-fMyyEMI,5171
+cinchdb/core/database.py,sha256=K5zPG8wXdh9-jAg69QZ7ImE0u3qAuvCDulfAx1fOq5U,33307
 cinchdb/core/initializer.py,sha256=CAzq947plgEF-KXV-PD-ycJ8Zy4zXCQqCrmQ0-pV0i4,14474
 cinchdb/core/maintenance.py,sha256=PAgrSL7Cj9p3rKHV0h_L7gupN6nLD0-5eQpJZNiqyEs,2097
-cinchdb/core/path_utils.py,sha256=OPT5WGx6CPdjZbvNsB5fjJGKsl5RtW8-IFacE4TWSxA,4884
-cinchdb/infrastructure/metadata_connection_pool.py,sha256=oq4z2B43_kEPUA0QVZz6AI_xl4adOuOSJ7VeZ7ecmP4,4899
-cinchdb/infrastructure/metadata_db.py,sha256=QLVHtvto9c2yJw7022JXwfaEilS-k-OICsbHQvA6QSQ,15314
+cinchdb/core/path_utils.py,sha256=Va4y2Dkd5QI6FI5h1ePyVH5pwr7tzRpYZLA4KEpDV0Q,4874
+cinchdb/infrastructure/metadata_connection_pool.py,sha256=PeVsyuZKdI3Y7_InWMOn9HcSNhE0MVcP7I7wAj9esmI,4859
+cinchdb/infrastructure/metadata_db.py,sha256=t3WDyE9SjWhTB2S0-v82AmWKXfl1571V_dv4Bv1-u10,15894
 cinchdb/managers/__init__.py,sha256=ic61ZUdsg-muq0ETYO6fuZRQWF4j7l920PthTkt2QrE,808
-cinchdb/managers/branch.py,sha256=ctX2RpodtQ-fLMpGzHyJMydseb0rK4gLjMz2ix82seU,9455
+cinchdb/managers/branch.py,sha256=bEzl83mN9a9KW8AHC_w50QHtVdVPHUzEY-j9T2EAyR4,9445
 cinchdb/managers/change_applier.py,sha256=cCgjUL6SJvrgVCCHAw0mAbGqZqKmMsLa0QbziSiuW68,15576
 cinchdb/managers/change_comparator.py,sha256=08pwybpSt36cFwhZRSIkHynvFMUaLKEVwa8Ajn_R9yQ,6862
 cinchdb/managers/change_tracker.py,sha256=U93BPnuGv8xSaO5qr_y5Q8ppKrVXygozdp5zUvLUqwg,5054
 cinchdb/managers/codegen.py,sha256=1CfIwjgHnNDdjrq4SzQ9VE7DFgnWfk7RtpupBFUTqxk,21804
 cinchdb/managers/column.py,sha256=i0EzDKavMvZeeaVrY9OVRNHOW60v0rUEkDjMtIs3PaE,20749
-cinchdb/managers/data.py,sha256=zS1HkMGf436m6f8VdFAqQbQFgo4sL5yKJRcRf4A6lIc,16253
-cinchdb/managers/index.py,sha256=n9bCXggZP6muJQZXCpTT46JvuvcbbnYgeV3j6iXtTVM,10371
+cinchdb/managers/data.py,sha256=9JAcJ1bxTKb15s0Zb0ATH4YW-6O03iSvyJnk1SsDq80,23170
+cinchdb/managers/index.py,sha256=55_fafWd4lSju4Nw32B_1Fi1c2DPHxOgAhdsqcTR404,10343
 cinchdb/managers/merge_manager.py,sha256=R8S2hLkLJg4hLDpeJTzjVkduZgqPOjXtYgOSJhTXXrE,15690
-cinchdb/managers/query.py,sha256=mBWsWjdAqWDzuvxKsY49onAOP6dsZOMhVKwA7Y1kunE,8617
-cinchdb/managers/table.py,sha256=8w6L4-DJgvsvpTYDW123Y9JuXO95O-SfOs-XMqWSvzA,14028
-cinchdb/managers/tenant.py,sha256=szmgErdqs3KXPi5LugMnUR76PxWARMj6H6y-JvcYd68,33965
+cinchdb/managers/query.py,sha256=hgNHda20PWMijbVRnjTKFGFBvBthep2fulkJEK1gkqU,8562
+cinchdb/managers/table.py,sha256=GgwW_lVl9qmbr5x6JXDdvTBL_Ylkk4AzAD2HXQAOH0E,15246
+cinchdb/managers/tenant.py,sha256=Oy60CKWTgDetF_SpbTFcS8bjumlNjEInd_APRg86f5M,31628
 cinchdb/managers/view.py,sha256=v9gYtRufZyxywPKLGvIjvlUXcxYh9CLRArefu9QX6zk,7809
 cinchdb/models/__init__.py,sha256=cZ-ailJ6qu44Iap5Rq555iB-_w9ufXVDBH3rDH-ojk0,622
 cinchdb/models/base.py,sha256=7j4rlFTP5K9ZuF8vxwC7lMFEaL7O90NJ47Ig5i7ubcw,1320
@@ -48,13 +49,15 @@ cinchdb/models/project.py,sha256=6GMXUZUsEIebqQJgRXIthWzpWKuNNmJ3drgI1vFDrMo,644
 cinchdb/models/table.py,sha256=nxf__C_YvDOW-6-vdOQ4xKmwWPZwgEdYw1I4mO_C44o,2955
 cinchdb/models/tenant.py,sha256=wTvGoO_tQdtueVB0faZFVIhSjh_DNJzywflrUpngWTM,1072
 cinchdb/models/view.py,sha256=q6j-jYzFJuhRJO87rKt6Uv8hOizHQx8xwoPKoH6XnNY,530
-cinchdb/security/__init__.py,sha256=GWV6OIczkPhJazLvMFcT54aDUI6_mU9MTZu09TEGrJ0,45
-cinchdb/security/encryption.py,sha256=nEmjNot2NyJZivrsf4jYB9Ei-LJdb2_O6BfXsO9-pww,4168
+cinchdb/plugins/__init__.py,sha256=cpqB9y9sY6b9N5Gy9f78Zd2LJ-VpRnwEMS6GpQeW-KY,301
+cinchdb/plugins/base.py,sha256=f0WOTVOLAqWLOSKI6GSNLhHN-wziBGWJza7z1QH0_MY,3038
+cinchdb/plugins/decorators.py,sha256=vSTDC3TDywqDi8Da5aoKe7rRVA2EbTuJXAk6VV4BosM,1533
+cinchdb/plugins/manager.py,sha256=1GcDhCwJvdkXSrgYe-jGA7g8NJNyYk0037_tMNugijE,6807
 cinchdb/utils/__init__.py,sha256=yQQhEjndDiB2SUJybUmp9dvEOQKiR-GySe-WiCius5E,490
 cinchdb/utils/name_validator.py,sha256=dyGX5bjlTFRA9EGrWRQKp6kR__HSV04hLV5VueJs4IQ,4027
 cinchdb/utils/sql_validator.py,sha256=aWOGlPX0gBkuR6R1EBP2stbP4PHZuI6FUBi2Ljx7JUI,5815
-cinchdb-0.1.14.dist-info/METADATA,sha256=uNJzcdK2TKRlTyob3Kpf9mJQldTrxw-nDJcqOiz9wAo,6116
-cinchdb-0.1.14.dist-info/WHEEL,sha256=qtCwoSJWgHk21S1Kb4ihdzI2rlJ1ZKaIurTj_ngOhyQ,87
-cinchdb-0.1.14.dist-info/entry_points.txt,sha256=VBOIzvnGbkKudMCCmNORS3885QSyjZUVKJQ-Syqa62w,47
-cinchdb-0.1.14.dist-info/licenses/LICENSE,sha256=xx0jnfkXJvxRnG63LTGOxlggYnIysveWIZ6H3PNdCrQ,11357
-cinchdb-0.1.14.dist-info/RECORD,,
+cinchdb-0.1.15.dist-info/METADATA,sha256=LdviGmMLfCUhko3Y6v9ViCFPVaX9KtiXv_ZwGhKwwlo,5958
+cinchdb-0.1.15.dist-info/WHEEL,sha256=qtCwoSJWgHk21S1Kb4ihdzI2rlJ1ZKaIurTj_ngOhyQ,87
+cinchdb-0.1.15.dist-info/entry_points.txt,sha256=VBOIzvnGbkKudMCCmNORS3885QSyjZUVKJQ-Syqa62w,47
+cinchdb-0.1.15.dist-info/licenses/LICENSE,sha256=xx0jnfkXJvxRnG63LTGOxlggYnIysveWIZ6H3PNdCrQ,11357
+cinchdb-0.1.15.dist-info/RECORD,,

cinchdb/security/__init__.py

@@ -1 +0,0 @@
-"""Security module for CinchDB encryption."""

cinchdb/security/encryption.py

@@ -1,108 +0,0 @@
-"""Simple SQLite encryption using environment variables with KMS upgrade path."""
-
-import os
-import sqlite3
-import logging
-from pathlib import Path
-
-logger = logging.getLogger(__name__)
-
-
-class SQLiteEncryption:
-    """Simple SQLite encryption with static keys and KMS upgrade path."""
-    
-    def __init__(self):
-        # Encryption is optional for open source users
-        self.enabled = os.getenv("CINCH_ENCRYPT_DATA", "false").lower() == "true"
-        self._encryption_key = None
-        
-        if self.enabled:
-            self._encryption_key = self._get_encryption_key()
-    
-    def _get_encryption_key(self) -> str:
-        """Get encryption key with future KMS support."""
-        
-        # Future KMS support - check for KMS configuration first
-        kms_provider = os.getenv("CINCH_KMS_PROVIDER")
-        if kms_provider:
-            # TODO: Implement KMS key retrieval
-            # return self._get_key_from_kms(kms_provider)
-            logger.warning("KMS provider configured but not implemented yet")
-        
-        # Require explicit key
-        static_key = os.getenv("CINCH_ENCRYPTION_KEY")
-        if static_key:
-            return static_key
-        
-        # Fail fast if no key provided
-        raise ValueError(
-            "CINCH_ENCRYPTION_KEY environment variable is required when CINCH_ENCRYPT_DATA=true. "
-            "Generate a key with: python -c \"import secrets; print(secrets.token_urlsafe(32))\""
-        )
-    
-    def get_connection(self, db_path: Path) -> sqlite3.Connection:
-        """Get SQLite connection with optional encryption."""
-        # Connect with datetime parsing support
-        conn = sqlite3.connect(
-            str(db_path),
-            detect_types=sqlite3.PARSE_DECLTYPES | sqlite3.PARSE_COLNAMES,
-        )
-        
-        if self.enabled and self._encryption_key:
-            try:
-                # Apply encryption key
-                conn.execute(f"PRAGMA key = '{self._encryption_key}'")
-                
-                # Configure recommended cipher (ChaCha20-Poly1305) if supported
-                try:
-                    conn.execute("PRAGMA cipher = 'chacha20'")
-                except sqlite3.OperationalError:
-                    # Fallback to default cipher if ChaCha20 not available
-                    logger.debug("ChaCha20 cipher not available, using default")
-                
-                # Security hardening
-                conn.execute("PRAGMA temp_store = MEMORY")  # Encrypt temp data
-                conn.execute("PRAGMA secure_delete = ON")   # Overwrite deleted data
-                
-            except sqlite3.OperationalError as e:
-                logger.error(f"Failed to apply encryption to {db_path}: {e}")
-                # Close connection and re-raise with helpful message
-                conn.close()
-                raise sqlite3.OperationalError(
-                    f"Failed to apply encryption. Make sure SQLite3MultipleCiphers is installed. Error: {e}"
-                ) from e
-        
-        # Standard SQLite optimizations
-        conn.execute("PRAGMA journal_mode = WAL")
-        conn.execute("PRAGMA synchronous = NORMAL")
-        conn.execute("PRAGMA cache_size = -2000")
-        
-        return conn
-    
-    def is_encrypted(self, db_path: Path) -> bool:
-        """Check if database file is encrypted."""
-        if not db_path.exists():
-            return False
-        
-        try:
-            # Try to open without key
-            test_conn = sqlite3.connect(str(db_path))
-            test_conn.execute("SELECT name FROM sqlite_master LIMIT 1")
-            test_conn.close()
-            return False  # Successfully opened = not encrypted
-        except sqlite3.DatabaseError:
-            return True   # Failed to open = likely encrypted
-    
-    def test_encryption_support(self) -> bool:
-        """Test if SQLite encryption is available."""
-        try:
-            conn = sqlite3.connect(':memory:')
-            conn.execute("PRAGMA key = 'test'")
-            conn.close()
-            return True
-        except sqlite3.OperationalError:
-            return False
-
-
-# Global instance for easy access
-encryption = SQLiteEncryption()