mainsequence-metatable 0.1.21.dev33__tar.gz → 0.1.21.dev34__tar.gz

{mainsequence_metatable-0.1.21.dev33/src/mainsequence_metatable.egg-info → mainsequence_metatable-0.1.21.dev34}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: mainsequence-metatable
-Version: 0.1.21.dev33
+Version: 0.1.21.dev34
 Summary: Main Sequence MetaTables Python client and standalone API
 Author-email: Main Sequence GmbH <dev@main-sequence.io>
 License-Expression: MIT

{mainsequence_metatable-0.1.21.dev33 → mainsequence_metatable-0.1.21.dev34}/docs/api/data-sources.md

@@ -201,9 +201,19 @@ responsibility.
 Hosted sources require a password Secret to derive per-User database credentials.
 MySQL global mandatory roles are unsupported. Registration admits ordinary tables
 only; it does not transfer external ownership. Privileged routines and triggers
-must not provide owner access, and registered foreign keys must use `RESTRICT` or
-`NO ACTION`. Setup and schema changes verify these safeguards, while the database
-checks permissions during each query. See [security](../security/index.md).
+must not provide owner access. Setup and schema changes verify these safeguards,
+while the database checks permissions during each query. See
+[security](../security/index.md).
+
+Registered foreign keys may use any referential action, including `CASCADE`,
+`SET NULL` and `SET DEFAULT`. The database runs a cascade as the table owner,
+authorized by the referencing table's own foreign key, so writing a referenced
+table needs no access to the tables that reference it. Local SQLite runtimes are
+the exception: SQLite's authorizer cannot tell a foreign-key action from the
+caller's own statement, so a local delete or key update on a referenced table
+fails unless the caller can access every referencing table. See
+[ADR 0007](../adr/api/0007-database-enforced-table-access.md#sqlite) and
+[ADR 0016](../adr/api/0016-impact-preflight.md).
 
 MySQL uses `pyformat` parameters and SQL Server uses ordered `qmark` parameters.
 Both share the normal compiled SQL endpoint and limits. SQL Server upserts use a

{mainsequence_metatable-0.1.21.dev33 → mainsequence_metatable-0.1.21.dev34}/docs/api/openapi.json

@@ -281,7 +281,6 @@
         "type": "object"
       },
       "CredentialStoreDescriptor": {
-        "additionalProperties": false,
         "properties": {
           "error": {
             "anyOf": [
@@ -765,7 +764,6 @@
         "type": "object"
       },
       "HostedEnvironment": {
-        "additionalProperties": false,
         "properties": {
           "is_production": {
             "anyOf": [
@@ -2894,7 +2892,6 @@
         "type": "object"
       },
       "RuntimeBootstrapDescriptor": {
-        "additionalProperties": false,
         "properties": {
           "active": {
             "title": "Active",
@@ -3035,7 +3032,6 @@
         "type": "object"
       },
       "RuntimeContext": {
-        "additionalProperties": false,
         "properties": {
           "api_endpoint": {
             "default": "",
@@ -4355,7 +4351,6 @@
         "type": "object"
       },
       "TransferLimits": {
-        "additionalProperties": false,
         "properties": {
           "chunk_receipts": {
             "default": true,

{mainsequence_metatable-0.1.21.dev33 → mainsequence_metatable-0.1.21.dev34}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "setuptools.build_meta"
 
 [project]
 name = "mainsequence-metatable"
-version = "0.1.21.dev33"
+version = "0.1.21.dev34"
 description = "Main Sequence MetaTables Python client and standalone API"
 readme = "README.md"
 requires-python = ">=3.13"

{mainsequence_metatable-0.1.21.dev33 → mainsequence_metatable-0.1.21.dev34/src/mainsequence_metatable.egg-info}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: mainsequence-metatable
-Version: 0.1.21.dev33
+Version: 0.1.21.dev34
 Summary: Main Sequence MetaTables Python client and standalone API
 Author-email: Main Sequence GmbH <dev@main-sequence.io>
 License-Expression: MIT

{mainsequence_metatable-0.1.21.dev33 → mainsequence_metatable-0.1.21.dev34}/src/mainsequence_metatable.egg-info/SOURCES.txt

@@ -436,6 +436,7 @@ tests/contracts/test_bounded_transfer.py
 tests/contracts/test_compiler_runtime_source.py
 tests/contracts/test_relation_batching.py
 tests/contracts/test_relation_import.py
+tests/contracts/test_runtime_contract_compat.py
 tests/contracts/test_storage_layouts.py
 tests/contracts/test_table_contracts.py
 tests/database_backend/Dockerfile

{mainsequence_metatable-0.1.21.dev33 → mainsequence_metatable-0.1.21.dev34}/src/metatables/runtime_contract.py

@@ -1,4 +1,9 @@
-"""Pure runtime descriptor schema shared by the API and clients."""
+"""Pure runtime descriptor schema shared by the API and clients.
+
+Clients parse these from the API's response. They ignore fields they do not know,
+so a client can talk to an API that is older or newer than itself; a breaking
+change belongs in a new field or contract version, never in a field's removal.
+"""
 
 from typing import Literal
 
@@ -10,7 +15,7 @@ class DataSourceResolutionError(RuntimeError):
 
 
 class HostedEnvironment(BaseModel):
-    model_config = ConfigDict(extra="forbid", frozen=True)
+    model_config = ConfigDict(extra="ignore", frozen=True)
     uid: str | None
     status: Literal["verified", "not_found", "unavailable", "not_configured"]
     name: str | None = None
@@ -19,7 +24,7 @@ class HostedEnvironment(BaseModel):
 
 
 class RuntimeBootstrapDescriptor(BaseModel):
-    model_config = ConfigDict(extra="forbid", frozen=True)
+    model_config = ConfigDict(extra="ignore", frozen=True)
     status: Literal["unconfigured", "migration_required", "registration_required", "migrating", "ready", "incompatible", "unavailable"]
     error: str | None = None
     candidate: dict | None = None
@@ -36,7 +41,7 @@ class RuntimeBootstrapDescriptor(BaseModel):
 
 
 class CredentialStoreDescriptor(BaseModel):
-    model_config = ConfigDict(extra="forbid", frozen=True)
+    model_config = ConfigDict(extra="ignore", frozen=True)
     provider: Literal["unconfigured", "sdk_secrets", "local_encrypted"]
     status: Literal["uninitialized", "unavailable", "ready", "managed"]
     error: str | None = None
@@ -50,7 +55,7 @@ class RuntimeContext(BaseModel):
     credential_store: CredentialStoreDescriptor | None = None
     is_admin: bool = False
     user_uid: str | None = None
-    model_config = ConfigDict(extra="forbid", frozen=True)
+    model_config = ConfigDict(extra="ignore", frozen=True)
     git_source: dict[str, str] | None
     local_mode: bool = False
     local_mode_available: bool = False

{mainsequence_metatable-0.1.21.dev33 → mainsequence_metatable-0.1.21.dev34}/src/metatables/transfer_contract.py

@@ -12,7 +12,7 @@ logger = logging.getLogger(__name__)
 
 
 class TransferLimits(BaseModel):
-    model_config = ConfigDict(frozen=True, extra="forbid")
+    model_config = ConfigDict(frozen=True, extra="ignore")
 
     version: int = 1
     max_page_rows: int = Field(default=10_000, ge=1, le=10_000)

mainsequence_metatable-0.1.21.dev34/tests/contracts/test_runtime_contract_compat.py

@@ -0,0 +1,26 @@
+"""A client parses runtime descriptors from APIs older or newer than itself."""
+
+from metatables.runtime_contract import RuntimeContext
+
+
+def test_runtime_context_ignores_fields_from_other_api_versions():
+    # 0.1.18 still sent the runtime switch and hosted target fields that 0.1.19
+    # removed; the nested objects stand in for fields a newer API might add.
+    payload = {
+        "git_source": None, "dialect": "postgresql", "paramstyle": "pyformat",
+        "data_source": {"uid": "source-uid"}, "default_schema": "public",
+        "runtime_switch_available": False, "runtime_switch_error": None,
+        "hosted_environment_target": {"uid": "environment-uid"},
+        "hosted_environment": {"uid": "environment-uid", "status": "verified", "region": "eu"},
+        "credential_store": {"provider": "sdk_secrets", "status": "managed", "rotation": "daily"},
+        "bootstrap": {"status": "ready", "current_revisions": [], "required_revisions": [],
+                      "active": True, "can_configure": False, "operator": "workflow"},
+        "transfer_limits": {"version": 1, "max_page_rows": 500, "max_stream_rows": 1},
+    }
+    context = RuntimeContext.model_validate(payload)
+    assert context.require_data_source_uid() == "source-uid"
+    assert context.hosted_environment.status == "verified"
+    assert context.credential_store.provider == "sdk_secrets"
+    assert context.bootstrap.status == "ready"
+    assert context.transfer_limits.max_page_rows == 500
+    assert "runtime_switch_available" not in context.model_dump()