lambda-erp 0.1.5__tar.gz → 0.1.7__tar.gz

{lambda_erp-0.1.5 → lambda_erp-0.1.7}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: lambda-erp
-Version: 0.1.5
+Version: 0.1.7
 Summary: Core ERP logic - accounting, sales, purchasing, inventory
 Author: TORUS INVESTMENTS AG
 License-Expression: MIT

{lambda_erp-0.1.5 → lambda_erp-0.1.7}/api/auth.py

@@ -196,7 +196,7 @@ def get_current_user(request: Request) -> dict:
 
     # Fall back to public manager (demo mode)
     db = get_db()
-    pub = db.sql('SELECT name, email, full_name, role, enabled FROM "User" WHERE role = "public_manager" AND enabled = 1')
+    pub = db.sql('SELECT name, email, full_name, role, enabled FROM "User" WHERE role = \'public_manager\' AND enabled = 1')
     if pub:
         return dict(pub[0])
 
@@ -373,7 +373,7 @@ def change_role(user_name: str, data: ChangeRoleRequest, user: dict = Depends(re
         raise HTTPException(status_code=404, detail="User not found")
 
     if user_name == user["name"] and data.role != "admin":
-        admin_count = db.sql('SELECT COUNT(*) as cnt FROM "User" WHERE role = "admin" AND enabled = 1')[0]["cnt"]
+        admin_count = db.sql('SELECT COUNT(*) as cnt FROM "User" WHERE role = \'admin\' AND enabled = 1')[0]["cnt"]
         if admin_count <= 1:
             raise HTTPException(status_code=409, detail="Cannot demote the only admin")
 
@@ -414,7 +414,7 @@ def create_public_manager(user: dict = Depends(require_admin)):
     turned on.
     """
     db = get_db()
-    existing = db.sql('SELECT name, enabled FROM "User" WHERE role = "public_manager"')
+    existing = db.sql('SELECT name, enabled FROM "User" WHERE role = \'public_manager\'')
     if existing:
         if not existing[0]["enabled"]:
             db.set_value("User", existing[0]["name"], {"enabled": 1, "modified": now()})
@@ -453,7 +453,7 @@ def create_public_manager(user: dict = Depends(require_admin)):
 def remove_public_manager(user: dict = Depends(require_admin)):
     """Disable the public manager account."""
     db = get_db()
-    existing = db.sql('SELECT name FROM "User" WHERE role = "public_manager"')
+    existing = db.sql('SELECT name FROM "User" WHERE role = \'public_manager\'')
     if not existing:
         return {"ok": True, "status": "not_found"}
     db.set_value("User", existing[0]["name"], {"enabled": 0, "modified": now()})
@@ -464,7 +464,7 @@ def remove_public_manager(user: dict = Depends(require_admin)):
 def get_public_manager_status():
     """Public: check if a public manager exists and is enabled."""
     db = get_db()
-    existing = db.sql('SELECT name, full_name, role, enabled FROM "User" WHERE role = "public_manager" AND enabled = 1')
+    existing = db.sql('SELECT name, full_name, role, enabled FROM "User" WHERE role = \'public_manager\' AND enabled = 1')
     if existing:
         return {"active": True, "user": dict(existing[0])}
     return {"active": False}

{lambda_erp-0.1.5 → lambda_erp-0.1.7}/api/bootstrap.py

@@ -477,7 +477,7 @@ def _format_qty(value) -> str:
 
 def _public_manager_user(db) -> dict | None:
     rows = db.sql(
-        'SELECT name, role FROM "User" WHERE role = "public_manager" LIMIT 1'
+        'SELECT name, role FROM "User" WHERE role = \'public_manager\' LIMIT 1'
     )
     if not rows:
         return None

{lambda_erp-0.1.5 → lambda_erp-0.1.7}/api/chat.py

@@ -297,7 +297,7 @@ def count_assistant_messages(session_id: str) -> int:
     """Count assistant messages in a session (used to decide when to generate title)."""
     db = get_db()
     rows = db.sql(
-        'SELECT COUNT(*) as cnt FROM "Chat Message" WHERE session_id = ? AND role = "assistant" AND message_type = "chat"',
+        'SELECT COUNT(*) as cnt FROM "Chat Message" WHERE session_id = ? AND role = \'assistant\' AND message_type = \'chat\'',
         [session_id],
     )
     return rows[0]["cnt"] if rows else 0
@@ -385,7 +385,7 @@ def load_demo_history(session_id: str) -> list[dict]:
     db = get_db()
     rows = db.sql(
         'SELECT role, content, created_at FROM "Chat Message" '
-        'WHERE session_id = ? AND message_type = "demo" ORDER BY id',
+        'WHERE session_id = ? AND message_type = \'demo\' ORDER BY id',
         [session_id],
     )
     return [dict(r) for r in rows]
@@ -1172,7 +1172,7 @@ def _handle_retrieve_chat_history(args, session_id=None):
             params.append(date_to)
         rows = db.sql(
             f'SELECT role, content, created_at FROM "Chat Message" '
-            f'WHERE role IN ("user", "assistant") {session_clause} {date_clause} '
+            f'WHERE role IN (\'user\', \'assistant\') {session_clause} {date_clause} '
             f'ORDER BY id ASC LIMIT 50',
             params,
         )
@@ -1180,7 +1180,7 @@ def _handle_retrieve_chat_history(args, session_id=None):
         num = min(int(args.get("num_messages", 20)), 50)
         rows = db.sql(
             f'SELECT role, content, created_at FROM "Chat Message" '
-            f'WHERE role IN ("user", "assistant") {session_clause} '
+            f'WHERE role IN (\'user\', \'assistant\') {session_clause} '
             f'ORDER BY id DESC LIMIT ?',
             session_params + [num],
         )
@@ -2624,7 +2624,7 @@ async def chat_websocket(
                 # (non-demo) user/assistant messages.
                 non_demo_rows = get_db().sql(
                     'SELECT COUNT(*) as cnt FROM "Chat Message" '
-                    'WHERE session_id = ? AND message_type != "demo"',
+                    'WHERE session_id = ? AND message_type != \'demo\'',
                     [session_id],
                 )
                 if non_demo_rows and non_demo_rows[0]["cnt"] > 0:
@@ -2643,7 +2643,7 @@ async def chat_websocket(
                 db = get_db()
                 db.sql(
                     'DELETE FROM "Chat Message" '
-                    'WHERE session_id = ? AND message_type = "demo"',
+                    'WHERE session_id = ? AND message_type = \'demo\'',
                     [session_id],
                 )
                 db.conn.commit()

{lambda_erp-0.1.5 → lambda_erp-0.1.7}/api/main.py

@@ -121,7 +121,7 @@ async def ws_chat(websocket: WebSocket):
 
     # Fall back to public manager
     if not user:
-        pub = db.sql('SELECT name, full_name, role, enabled FROM "User" WHERE role = "public_manager" AND enabled = 1')
+        pub = db.sql('SELECT name, full_name, role, enabled FROM "User" WHERE role = \'public_manager\' AND enabled = 1')
         user = pub[0] if pub else None
 
     if not user:

{lambda_erp-0.1.5 → lambda_erp-0.1.7}/api/pdf.py

@@ -127,7 +127,7 @@ def generate_pdf(doctype_slug: str, name: str) -> bytes:
     taxes = doc.get("taxes", [])
 
     # Page size setting
-    page_size_row = db.sql('SELECT value FROM "Settings" WHERE key = "pdf_page_size"')
+    page_size_row = db.sql('SELECT value FROM "Settings" WHERE key = \'pdf_page_size\'')
     page_size = page_size_row[0]["value"] if page_size_row else "A4"
 
     # Render

{lambda_erp-0.1.5 → lambda_erp-0.1.7}/api/routers/masters.py

@@ -67,15 +67,15 @@ DELETE_REFERENCE_CHECKS = {
         ('SELECT 1 FROM "Sales Invoice" WHERE customer = ? LIMIT 1', "sales invoice"),
         ('SELECT 1 FROM "Delivery Note" WHERE customer = ? LIMIT 1', "delivery note"),
         ('SELECT 1 FROM "POS Invoice" WHERE customer = ? LIMIT 1', "POS invoice"),
-        ('SELECT 1 FROM "Payment Entry" WHERE party_type = "Customer" AND party = ? LIMIT 1', "payment entry"),
-        ('SELECT 1 FROM "Subscription" WHERE party_type = "Customer" AND party = ? LIMIT 1', "subscription"),
+        ('SELECT 1 FROM "Payment Entry" WHERE party_type = \'Customer\' AND party = ? LIMIT 1', "payment entry"),
+        ('SELECT 1 FROM "Subscription" WHERE party_type = \'Customer\' AND party = ? LIMIT 1', "subscription"),
     ],
     "supplier": [
         ('SELECT 1 FROM "Purchase Order" WHERE supplier = ? LIMIT 1', "purchase order"),
         ('SELECT 1 FROM "Purchase Invoice" WHERE supplier = ? LIMIT 1', "purchase invoice"),
         ('SELECT 1 FROM "Purchase Receipt" WHERE supplier = ? LIMIT 1', "purchase receipt"),
-        ('SELECT 1 FROM "Payment Entry" WHERE party_type = "Supplier" AND party = ? LIMIT 1', "payment entry"),
-        ('SELECT 1 FROM "Subscription" WHERE party_type = "Supplier" AND party = ? LIMIT 1', "subscription"),
+        ('SELECT 1 FROM "Payment Entry" WHERE party_type = \'Supplier\' AND party = ? LIMIT 1', "payment entry"),
+        ('SELECT 1 FROM "Subscription" WHERE party_type = \'Supplier\' AND party = ? LIMIT 1', "subscription"),
     ],
     "item": [
         ('SELECT 1 FROM "Quotation Item" WHERE item_code = ? LIMIT 1', "quotation item"),

{lambda_erp-0.1.5 → lambda_erp-0.1.7}/lambda_erp/database.py

@@ -105,21 +105,39 @@ class _PgConn:
         self._raw = raw
 
     def execute(self, sql, params=None):
-        cur = self._raw.cursor()
-        if params:
-            # psycopg does %-substitution when params are given, so a literal %
-            # must be doubled. No params -> psycopg leaves the SQL untouched, so
-            # literal % is already safe and needs no escaping.
-            cur.execute(sql.replace("%", "%%").replace("?", "%s"), list(params))
-        else:
-            cur.execute(sql.replace("?", "%s"))
-        return cur
+        try:
+            cur = self._raw.cursor()
+            if params:
+                # psycopg does %-substitution when params are given, so a literal
+                # % must be doubled. No params -> psycopg leaves the SQL
+                # untouched, so literal % is already safe and needs no escaping.
+                cur.execute(sql.replace("%", "%%").replace("?", "%s"), list(params))
+            else:
+                cur.execute(sql.replace("?", "%s"))
+            return cur
+        except Exception:
+            # A failed statement leaves the connection in an aborted transaction
+            # (autocommit=False); every later query on this pooled/thread-local
+            # connection would then fail with InFailedSqlTransaction. Roll back
+            # so the connection stays usable, then re-raise the real error.
+            self._safe_rollback()
+            raise
 
     def executemany(self, sql, seq_params):
-        cur = self._raw.cursor()
-        cur.executemany(sql.replace("%", "%%").replace("?", "%s"),
-                        [list(p) for p in seq_params])
-        return cur
+        try:
+            cur = self._raw.cursor()
+            cur.executemany(sql.replace("%", "%%").replace("?", "%s"),
+                            [list(p) for p in seq_params])
+            return cur
+        except Exception:
+            self._safe_rollback()
+            raise
+
+    def _safe_rollback(self):
+        try:
+            self._raw.rollback()
+        except Exception:
+            pass
 
     def commit(self):
         self._raw.commit()
@@ -1308,7 +1326,11 @@ class Database:
         """
         with self._lock:
             cursor = self.conn.execute(query, values or [])
-            rows = cursor.fetchall()
+            # Only fetch when the statement produced a result set. SQLite's
+            # fetchall() after an INSERT/UPDATE/DELETE harmlessly returns [];
+            # psycopg raises ("the last operation didn't produce records"). A
+            # NULL cursor.description means no result set on both drivers.
+            rows = cursor.fetchall() if cursor.description is not None else []
         if as_dict:
             return [_dict(dict(row)) for row in rows]
         return [tuple(row) for row in rows]

{lambda_erp-0.1.5 → lambda_erp-0.1.7}/pyproject.toml

@@ -1,6 +1,6 @@
 [project]
 name = "lambda-erp"
-version = "0.1.5"
+version = "0.1.7"
 description = "Core ERP logic - accounting, sales, purchasing, inventory"
 readme = "README.md"
 license = "MIT"