matrx-orm 3.1.172__tar.gz → 3.1.174__tar.gz

{matrx_orm-3.1.172 → matrx_orm-3.1.174}/.gitignore

@@ -323,3 +323,8 @@ _kind_marker_law_scratch*/
 # stroke, which is the exact class that guard exists to stop. Ignored, never
 # deleted: they are another agent's evidence.
 apps/shared/.kit-*-witness.*/
+
+# Agent worktrees. Extra checkouts of this same repo, never product source.
+# They live at .wt/<slug> (disk-groom). Committing the folder would add a
+# second copy of the entire tree and a symlink into common-docs.
+.wt/

{matrx_orm-3.1.172 → matrx_orm-3.1.174}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.5
 Name: matrx-orm
-Version: 3.1.172
+Version: 3.1.174
 Summary: Async-first PostgreSQL ORM with bidirectional migrations, schema introspection, many-to-many relationships, and built-in state caching
 Project-URL: Homepage, https://github.com/AI-Matrix-Engine/aidream-current
 Project-URL: Repository, https://github.com/AI-Matrix-Engine/aidream-current

{matrx_orm-3.1.172 → matrx_orm-3.1.174}/matrx_orm/__init__.py

@@ -135,6 +135,7 @@ from .core.expressions import (
     OrderBy,
     OuterRef,
     Predicate,
+    PercentileCont,
     PercentRank,
     ConstantPredicate,
     Interval,
@@ -268,6 +269,7 @@ from .core.session_context import (
 from .write_actor import (
     ACTOR_REQUIRED_TABLES,
     UndeterminedWriteActor,
+    actor_named_for_write,
     set_write_feature_resolver,
     write_needs_named_actor,
     writing_system,
@@ -630,6 +632,7 @@ __all__ = [
     "Min",
     "Max",
     "Count",
+    "PercentileCont",
     "StdDev",
     "Variance",
     "ArrayAgg",
@@ -696,6 +699,7 @@ __all__ = [
     "session_context_gucs",
     "ACTOR_REQUIRED_TABLES",
     "UndeterminedWriteActor",
+    "actor_named_for_write",
     "set_write_feature_resolver",
     "write_needs_named_actor",
     "writing_system",

{matrx_orm-3.1.172 → matrx_orm-3.1.174}/matrx_orm/core/expressions.py

@@ -1880,6 +1880,62 @@ class Count(Aggregate):
         return super().as_sql(params)
 
 
+class PercentileCont(Aggregate):
+    """``percentile_cont(f) WITHIN GROUP (ORDER BY expr)`` — the continuous
+    percentile, which is what a median IS.
+
+    The ORDERED-SET aggregate seam. Without it the only way to learn a median
+    or a p90 is to transfer every value to Python and sort it there, which is
+    the "count by loading every row" defect wearing a statistics hat: the media
+    catalogue's Library header fetched 100,000 rows to report one median
+    duration. ``percentile_cont(0.5)`` is exactly :func:`statistics.median`
+    (both interpolate between the two middle values on an even count), so a
+    Python path and a SQL path can report the same number.
+
+    Usage::
+
+        .annotate(
+            median_seconds=PercentileCont(0.5, "duration_seconds"),
+            p90_seconds=PercentileCont(0.9, "duration_seconds"),
+        )
+
+    Composes with :class:`Filter` (``percentile_cont(...) WITHIN GROUP (...)
+    FILTER (WHERE ...)`` is a legal aggregate call) and with ``group_by``.
+    NULLs are ignored, exactly as every other aggregate ignores them, so the
+    result describes the MEASURED values and the caller reports the unmeasured
+    ones separately.
+
+    The fraction is rendered as a validated float LITERAL, not a bind
+    parameter: ``percentile_cont($1)`` gives Postgres no type to infer and
+    fails with *could not determine data type of parameter*. It is a float
+    this class range-checks, never caller SQL.
+    """
+
+    function = "percentile_cont"
+
+    def __init__(
+        self,
+        fraction: float,
+        field: str | F | Func,
+        *,
+        descending: bool = False,
+    ) -> None:
+        value = float(fraction)
+        if not 0.0 <= value <= 1.0:
+            raise ValueError(f"PercentileCont fraction must be within [0, 1], got {fraction!r}")
+        super().__init__(field)
+        self.fraction = value
+        self.descending = bool(descending)
+
+    def as_sql(self, params: list[Any]) -> str:
+        inner = _render_func_arg(self.args[0], params)
+        direction = " DESC" if self.descending else ""
+        return f"percentile_cont({self.fraction!r}) WITHIN GROUP (ORDER BY {inner}{direction})"
+
+    def __repr__(self) -> str:
+        return f"PercentileCont({self.fraction!r}, {self.args[0]!r})"
+
+
 class StdDev(Aggregate):
     """STDDEV(field) — population standard deviation."""
 

{matrx_orm-3.1.172 → matrx_orm-3.1.174}/matrx_orm/resources/org_assignment_trigger_baseline.json

@@ -15,9 +15,359 @@
     "public.files_inherit_org_from_folder",
     "users._stamp_secret_audit_org"
   ],
-  "removed_function_identities": {},
-  "removed_historical_four_family_triggers": [],
-  "removed_historical_specialized_triggers": [],
+  "removed_function_identities": {
+    "public.dm_default_org": "dropped by the concurrent matrx-frontend lane, 2026-09-19 default-organization annihilation",
+    "public._stamp_org_default": "db/migrations/0929_no_trigger_stamps_a_personal_organization.sql \u2014 stamped ensure_personal_organization onto 328 tables; writers now pass an explicit organization",
+    "platform.stamp_run_org": "db/migrations/0929_no_trigger_stamps_a_personal_organization.sql \u2014 personal org of the run's actor, else the first is_system org; both implicit",
+    "ops._stamp_capture_org": "db/migrations/0929_no_trigger_stamps_a_personal_organization.sql \u2014 personal-org lookup then a hardcoded system uuid on the capture lane",
+    "users._stamp_secret_audit_org": "db/migrations/0929_no_trigger_stamps_a_personal_organization.sql \u2014 dropped whole: platform._ddl_guard forbids creating a replacement that assigns organization_id, and users.user_secret_audit.organization_id is NOT NULL"
+  },
+  "removed_historical_four_family_triggers": [
+    "platform.stamp_run_org|chat.agent_run|stamp_run_org",
+    "platform.stamp_run_org|docproc.derive_runs|stamp_run_org",
+    "platform.stamp_run_org|docproc.page_extraction_page_runs|stamp_run_org",
+    "platform.stamp_run_org|docproc.page_extraction_runs|stamp_run_org",
+    "platform.stamp_run_org|files.file_rag_jobs|stamp_run_org",
+    "platform.stamp_run_org|legal.ingest_runs|stamp_run_org",
+    "platform.stamp_run_org|podcast.pc_studio_runs|stamp_run_org",
+    "platform.stamp_run_org|rag.kg_sweep_run|stamp_run_org",
+    "platform.stamp_run_org|scheduler.sch_run|stamp_run_org",
+    "platform.stamp_run_org|transcripts.studio_runs|stamp_run_org",
+    "public._stamp_org_default|agent.cmp_comparison_sets|_stamp_org_default",
+    "public._stamp_org_default|agent.cmp_response_feedback|_stamp_org_default",
+    "public._stamp_org_default|agent.definition|_stamp_org_default",
+    "public._stamp_org_default|agent.exemplar|_stamp_org_default",
+    "public._stamp_org_default|agent.mandate_note|_stamp_org_default",
+    "public._stamp_org_default|agent.message_template|_stamp_org_default",
+    "public._stamp_org_default|agent.shortcut|_stamp_org_default",
+    "public._stamp_org_default|agent.template|_stamp_org_default",
+    "public._stamp_org_default|ai.api|_stamp_org_default",
+    "public._stamp_org_default|ai.endpoint|_stamp_org_default",
+    "public._stamp_org_default|ai.model_alias|_stamp_org_default",
+    "public._stamp_org_default|ai.model_definition|_stamp_org_default",
+    "public._stamp_org_default|ai.offering|_stamp_org_default",
+    "public._stamp_org_default|ai.provider|_stamp_org_default",
+    "public._stamp_org_default|ai.setting|_stamp_org_default",
+    "public._stamp_org_default|ai.voices|_stamp_org_default",
+    "public._stamp_org_default|app.definition|_stamp_org_default",
+    "public._stamp_org_default|assignment.session|_stamp_org_default",
+    "public._stamp_org_default|batch.cost_event|_stamp_org_default",
+    "public._stamp_org_default|batch.provider_batch|_stamp_org_default",
+    "public._stamp_org_default|batch.work_item|_stamp_org_default",
+    "public._stamp_org_default|billing.account_addon|_stamp_org_default",
+    "public._stamp_org_default|billing.org_plan|_stamp_org_default",
+    "public._stamp_org_default|billing.usage_ledger|_stamp_org_default",
+    "public._stamp_org_default|browser.account_binding|_stamp_org_default",
+    "public._stamp_org_default|browser.action_event|_stamp_org_default",
+    "public._stamp_org_default|browser.authenticator_window|_stamp_org_default",
+    "public._stamp_org_default|browser.capture|_stamp_org_default",
+    "public._stamp_org_default|browser.control_request|_stamp_org_default",
+    "public._stamp_org_default|browser.handoff|_stamp_org_default",
+    "public._stamp_org_default|browser.login_attempt|_stamp_org_default",
+    "public._stamp_org_default|browser.login_recipe|_stamp_org_default",
+    "public._stamp_org_default|browser.profile_checkpoint|_stamp_org_default",
+    "public._stamp_org_default|browser.profile|_stamp_org_default",
+    "public._stamp_org_default|browser.run|_stamp_org_default",
+    "public._stamp_org_default|browser.site_observation|_stamp_org_default",
+    "public._stamp_org_default|browser.site_policy|_stamp_org_default",
+    "public._stamp_org_default|browser.stream_ticket|_stamp_org_default",
+    "public._stamp_org_default|canvas.canvas_comment_likes|_stamp_org_default",
+    "public._stamp_org_default|canvas.canvas_comments|_stamp_org_default",
+    "public._stamp_org_default|canvas.canvas_item_state|_stamp_org_default",
+    "public._stamp_org_default|canvas.canvas_items|_stamp_org_default",
+    "public._stamp_org_default|canvas.canvas_likes|_stamp_org_default",
+    "public._stamp_org_default|canvas.canvas_scores|_stamp_org_default",
+    "public._stamp_org_default|canvas.canvas_views|_stamp_org_default",
+    "public._stamp_org_default|canvas.shared_canvas_items|_stamp_org_default",
+    "public._stamp_org_default|chat.agent_memory|_stamp_org_default",
+    "public._stamp_org_default|chat.agent_plan|_stamp_org_default",
+    "public._stamp_org_default|chat.agent_run|_stamp_org_default",
+    "public._stamp_org_default|chat.artifact|_stamp_org_default",
+    "public._stamp_org_default|chat.code_message_file|_stamp_org_default",
+    "public._stamp_org_default|chat.conversation_value|_stamp_org_default",
+    "public._stamp_org_default|chat.conversation|_stamp_org_default",
+    "public._stamp_org_default|chat.message|_stamp_org_default",
+    "public._stamp_org_default|chat.observational_memory|_stamp_org_default",
+    "public._stamp_org_default|chat.tool_call|_stamp_org_default",
+    "public._stamp_org_default|chat.user_request|_stamp_org_default",
+    "public._stamp_org_default|chat.user_todo|_stamp_org_default",
+    "public._stamp_org_default|code.code_file_folders|_stamp_org_default",
+    "public._stamp_org_default|code.code_files|_stamp_org_default",
+    "public._stamp_org_default|code.code_repositories|_stamp_org_default",
+    "public._stamp_org_default|communication.contact_submissions|_stamp_org_default",
+    "public._stamp_org_default|communication.dm_conversation_participants|_stamp_org_default",
+    "public._stamp_org_default|communication.dm_conversations|_stamp_org_default",
+    "public._stamp_org_default|communication.dm_messages|_stamp_org_default",
+    "public._stamp_org_default|communication.notification_event_type|_stamp_org_default",
+    "public._stamp_org_default|communication.notification_preference|_stamp_org_default",
+    "public._stamp_org_default|communication.notification|_stamp_org_default",
+    "public._stamp_org_default|communication.sms_consent|_stamp_org_default",
+    "public._stamp_org_default|communication.sms_conversations|_stamp_org_default",
+    "public._stamp_org_default|communication.sms_media|_stamp_org_default",
+    "public._stamp_org_default|communication.sms_messages|_stamp_org_default",
+    "public._stamp_org_default|communication.sms_notification_preferences|_stamp_org_default",
+    "public._stamp_org_default|communication.sms_notifications|_stamp_org_default",
+    "public._stamp_org_default|communication.sms_phone_numbers|_stamp_org_default",
+    "public._stamp_org_default|content_ir.io_contract|_stamp_org_default",
+    "public._stamp_org_default|content_ir.kind_component_incident|_stamp_org_default",
+    "public._stamp_org_default|content_ir.kind_component|_stamp_org_default",
+    "public._stamp_org_default|content_ir.kind_definition|_stamp_org_default",
+    "public._stamp_org_default|content_ir.kind_edge|_stamp_org_default",
+    "public._stamp_org_default|content_ir.kind_example|_stamp_org_default",
+    "public._stamp_org_default|content_ir.kind_instance|_stamp_org_default",
+    "public._stamp_org_default|content_ir.kind_surface|_stamp_org_default",
+    "public._stamp_org_default|context.scope_types|_stamp_org_default",
+    "public._stamp_org_default|context.scopes|_stamp_org_default",
+    "public._stamp_org_default|crm.blocklist_entry|_stamp_org_default",
+    "public._stamp_org_default|crm.contact_candidate|_stamp_org_default",
+    "public._stamp_org_default|crm.contact_medium|_stamp_org_default",
+    "public._stamp_org_default|crm.deal_stage_event|_stamp_org_default",
+    "public._stamp_org_default|crm.deal|_stamp_org_default",
+    "public._stamp_org_default|crm.enrichment_call|_stamp_org_default",
+    "public._stamp_org_default|crm.merge_candidate|_stamp_org_default",
+    "public._stamp_org_default|crm.outreach_acceptance|_stamp_org_default",
+    "public._stamp_org_default|crm.outreach_list|_stamp_org_default",
+    "public._stamp_org_default|crm.party|_stamp_org_default",
+    "public._stamp_org_default|crm.registry_ingest_run|_stamp_org_default",
+    "public._stamp_org_default|crm.registry_source|_stamp_org_default",
+    "public._stamp_org_default|crm.saved_view|_stamp_org_default",
+    "public._stamp_org_default|crm.sending_event|_stamp_org_default",
+    "public._stamp_org_default|crm.sending_identity_check|_stamp_org_default",
+    "public._stamp_org_default|crm.sending_identity|_stamp_org_default",
+    "public._stamp_org_default|crm.sending_policy|_stamp_org_default",
+    "public._stamp_org_default|dictionary.dict_settings|_stamp_org_default",
+    "public._stamp_org_default|docproc.derive_runs|_stamp_org_default",
+    "public._stamp_org_default|docproc.page_extraction_jobs|_stamp_org_default",
+    "public._stamp_org_default|docproc.page_extraction_page_runs|_stamp_org_default",
+    "public._stamp_org_default|education.assessment_result|_stamp_org_default",
+    "public._stamp_org_default|education.assessment|_stamp_org_default",
+    "public._stamp_org_default|education.fc_card|_stamp_org_default",
+    "public._stamp_org_default|education.fc_detail|_stamp_org_default",
+    "public._stamp_org_default|education.fc_set|_stamp_org_default",
+    "public._stamp_org_default|education.game_badge|_stamp_org_default",
+    "public._stamp_org_default|education.game_result|_stamp_org_default",
+    "public._stamp_org_default|education.game_room|_stamp_org_default",
+    "public._stamp_org_default|education.item_mastery|_stamp_org_default",
+    "public._stamp_org_default|education.league_membership|_stamp_org_default",
+    "public._stamp_org_default|education.quiz_sessions|_stamp_org_default",
+    "public._stamp_org_default|education.study_attempt|_stamp_org_default",
+    "public._stamp_org_default|education.study_goal|_stamp_org_default",
+    "public._stamp_org_default|education.study_media|_stamp_org_default",
+    "public._stamp_org_default|education.study_plan_block|_stamp_org_default",
+    "public._stamp_org_default|education.study_plan_day|_stamp_org_default",
+    "public._stamp_org_default|education.study_plan|_stamp_org_default",
+    "public._stamp_org_default|education.study_session|_stamp_org_default",
+    "public._stamp_org_default|education.study_streak|_stamp_org_default",
+    "public._stamp_org_default|extend.wbx_capture|_stamp_org_default",
+    "public._stamp_org_default|extend.wbx_demo|_stamp_org_default",
+    "public._stamp_org_default|extend.wbx_guidance|_stamp_org_default",
+    "public._stamp_org_default|extend.wbx_highlight|_stamp_org_default",
+    "public._stamp_org_default|extend.wbx_pattern|_stamp_org_default",
+    "public._stamp_org_default|extend.wbx_screenshot|_stamp_org_default",
+    "public._stamp_org_default|extend.wbx_seo_audit|_stamp_org_default",
+    "public._stamp_org_default|files.file_rag_jobs|_stamp_org_default",
+    "public._stamp_org_default|files.file_versions|_stamp_org_default",
+    "public._stamp_org_default|files.files|_stamp_org_default",
+    "public._stamp_org_default|files.folders|_stamp_org_default",
+    "public._stamp_org_default|graveyard.mandate_binding|_stamp_org_default",
+    "public._stamp_org_default|graveyard.mandate|_stamp_org_default",
+    "public._stamp_org_default|graveyard.provision|_stamp_org_default",
+    "public._stamp_org_default|graveyard.user_flashcard_reviews|_stamp_org_default",
+    "public._stamp_org_default|graveyard.user_flashcard_sets|_stamp_org_default",
+    "public._stamp_org_default|growth.loop_run|_stamp_org_default",
+    "public._stamp_org_default|hindsight.enrollment|_stamp_org_default",
+    "public._stamp_org_default|hindsight.finding|_stamp_org_default",
+    "public._stamp_org_default|hindsight.regression_case|_stamp_org_default",
+    "public._stamp_org_default|hindsight.replay_step|_stamp_org_default",
+    "public._stamp_org_default|hindsight.replay|_stamp_org_default",
+    "public._stamp_org_default|hindsight.review|_stamp_org_default",
+    "public._stamp_org_default|iam.access_requests|_stamp_org_default",
+    "public._stamp_org_default|iam.industry_curators|_stamp_org_default",
+    "public._stamp_org_default|iam.invitations|_stamp_org_default",
+    "public._stamp_org_default|iam.memberships|_stamp_org_default",
+    "public._stamp_org_default|iam.org_member_controls|_stamp_org_default",
+    "public._stamp_org_default|iam.system_personal_org_failures|_stamp_org_default",
+    "public._stamp_org_default|interview.document_revision|_stamp_org_default",
+    "public._stamp_org_default|interview.hole|_stamp_org_default",
+    "public._stamp_org_default|interview.question|_stamp_org_default",
+    "public._stamp_org_default|interview.session|_stamp_org_default",
+    "public._stamp_org_default|interview.turn|_stamp_org_default",
+    "public._stamp_org_default|legal.wc_claim|_stamp_org_default",
+    "public._stamp_org_default|mandate.binding|_stamp_org_default",
+    "public._stamp_org_default|mandate.definition|_stamp_org_default",
+    "public._stamp_org_default|mandate.provision|_stamp_org_default",
+    "public._stamp_org_default|mandate.treatment|_stamp_org_default",
+    "public._stamp_org_default|marketing.initiative|_stamp_org_default",
+    "public._stamp_org_default|ops.ops_issue_event|_stamp_org_default",
+    "public._stamp_org_default|ops.proof_check|_stamp_org_default",
+    "public._stamp_org_default|ops.proof_run|_stamp_org_default",
+    "public._stamp_org_default|ops.proof_scenario|_stamp_org_default",
+    "public._stamp_org_default|ops.system_error|_stamp_org_default",
+    "public._stamp_org_default|ops.system_write_failure|_stamp_org_default",
+    "public._stamp_org_default|pdf.pdf_redaction_audits|_stamp_org_default",
+    "public._stamp_org_default|plan.entity|_stamp_org_default",
+    "public._stamp_org_default|plan.node|_stamp_org_default",
+    "public._stamp_org_default|plan.profile|_stamp_org_default",
+    "public._stamp_org_default|platform._base_entity|_stamp_org_default",
+    "public._stamp_org_default|platform.activity_log|_stamp_org_default",
+    "public._stamp_org_default|platform.approach|_stamp_org_default",
+    "public._stamp_org_default|platform.categories|_stamp_org_default",
+    "public._stamp_org_default|platform.comments|_stamp_org_default",
+    "public._stamp_org_default|platform.domain_classification|_stamp_org_default",
+    "public._stamp_org_default|platform.flexible_data|_stamp_org_default",
+    "public._stamp_org_default|platform.guided_checklist_run|_stamp_org_default",
+    "public._stamp_org_default|platform.judge_verdict|_stamp_org_default",
+    "public._stamp_org_default|platform.masterwork_corpus_item|_stamp_org_default",
+    "public._stamp_org_default|platform.org_change_policy|_stamp_org_default",
+    "public._stamp_org_default|platform.org_module_config|_stamp_org_default",
+    "public._stamp_org_default|platform.outcome_event|_stamp_org_default",
+    "public._stamp_org_default|platform.purpose|_stamp_org_default",
+    "public._stamp_org_default|platform.rulebook|_stamp_org_default",
+    "public._stamp_org_default|platform.saved_view|_stamp_org_default",
+    "public._stamp_org_default|podcast.pc_articles|_stamp_org_default",
+    "public._stamp_org_default|podcast.pc_episodes|_stamp_org_default",
+    "public._stamp_org_default|podcast.pc_race|_stamp_org_default",
+    "public._stamp_org_default|podcast.pc_shows|_stamp_org_default",
+    "public._stamp_org_default|podcast.pc_studio_runs|_stamp_org_default",
+    "public._stamp_org_default|public.app_instances|_stamp_org_default",
+    "public._stamp_org_default|public.app_settings|_stamp_org_default",
+    "public._stamp_org_default|public.app_sync_status|_stamp_org_default",
+    "public._stamp_org_default|public.sandbox_instances|_stamp_org_default",
+    "public._stamp_org_default|rag.ingest_run|_stamp_org_default",
+    "public._stamp_org_default|rag.kg_suggestion_ack|_stamp_org_default",
+    "public._stamp_org_default|rag.kg_sweep_queue|_stamp_org_default",
+    "public._stamp_org_default|rag.kg_sweep_run|_stamp_org_default",
+    "public._stamp_org_default|rag.kg_sweep_state|_stamp_org_default",
+    "public._stamp_org_default|rag.library_docs|_stamp_org_default",
+    "public._stamp_org_default|rag.scope_association_suggestions|_stamp_org_default",
+    "public._stamp_org_default|rag.scope_item_value_suggestions|_stamp_org_default",
+    "public._stamp_org_default|research.rs_analysis|_stamp_org_default",
+    "public._stamp_org_default|research.rs_content|_stamp_org_default",
+    "public._stamp_org_default|research.rs_document|_stamp_org_default",
+    "public._stamp_org_default|research.rs_keyword|_stamp_org_default",
+    "public._stamp_org_default|research.rs_media|_stamp_org_default",
+    "public._stamp_org_default|research.rs_source|_stamp_org_default",
+    "public._stamp_org_default|research.rs_synthesis|_stamp_org_default",
+    "public._stamp_org_default|research.rs_tag|_stamp_org_default",
+    "public._stamp_org_default|research.rs_template|_stamp_org_default",
+    "public._stamp_org_default|research.rs_topic|_stamp_org_default",
+    "public._stamp_org_default|research.youtube_search|_stamp_org_default",
+    "public._stamp_org_default|research.youtube_video|_stamp_org_default",
+    "public._stamp_org_default|runtime.global_origin|_stamp_org_default",
+    "public._stamp_org_default|runtime.global_request|_stamp_org_default",
+    "public._stamp_org_default|scheduler.sch_run|_stamp_org_default",
+    "public._stamp_org_default|scheduler.sch_task|_stamp_org_default",
+    "public._stamp_org_default|scheduler.sch_trigger|_stamp_org_default",
+    "public._stamp_org_default|seo.ai_visibility_panel|_stamp_org_default",
+    "public._stamp_org_default|seo.backlink_change_event|_stamp_org_default",
+    "public._stamp_org_default|seo.collection_run|_stamp_org_default",
+    "public._stamp_org_default|seo.coverage_mention|_stamp_org_default",
+    "public._stamp_org_default|seo.coverage_tracker|_stamp_org_default",
+    "public._stamp_org_default|seo.dimension_value_matcher|_stamp_org_default",
+    "public._stamp_org_default|seo.geo_place|_stamp_org_default",
+    "public._stamp_org_default|seo.gsc_dig_rule|_stamp_org_default",
+    "public._stamp_org_default|seo.keyword_class_rule|_stamp_org_default",
+    "public._stamp_org_default|seo.keyword_facet|_stamp_org_default",
+    "public._stamp_org_default|seo.keyword_place|_stamp_org_default",
+    "public._stamp_org_default|seo.keyword_saved_view|_stamp_org_default",
+    "public._stamp_org_default|seo.landscape_brief|_stamp_org_default",
+    "public._stamp_org_default|seo.link_gap_domain|_stamp_org_default",
+    "public._stamp_org_default|seo.link_gap_match|_stamp_org_default",
+    "public._stamp_org_default|seo.page_measurement_health|_stamp_org_default",
+    "public._stamp_org_default|seo.rank_target|_stamp_org_default",
+    "public._stamp_org_default|seo.serp_mention|_stamp_org_default",
+    "public._stamp_org_default|seo.serp_opportunity|_stamp_org_default",
+    "public._stamp_org_default|seo.site_geo_area|_stamp_org_default",
+    "public._stamp_org_default|seo.site_value_combo|_stamp_org_default",
+    "public._stamp_org_default|seo.site_value_worth|_stamp_org_default",
+    "public._stamp_org_default|seo.site_vocabulary|_stamp_org_default",
+    "public._stamp_org_default|seo.source_request|_stamp_org_default",
+    "public._stamp_org_default|seo.starter_pack_item|_stamp_org_default",
+    "public._stamp_org_default|seo.starter_pack|_stamp_org_default",
+    "public._stamp_org_default|seo.story_angle|_stamp_org_default",
+    "public._stamp_org_default|skill.definition|_stamp_org_default",
+    "public._stamp_org_default|skill.render_definition|_stamp_org_default",
+    "public._stamp_org_default|tool.bundle|_stamp_org_default",
+    "public._stamp_org_default|tool.definition|_stamp_org_default",
+    "public._stamp_org_default|transcripts.studio_documents|_stamp_org_default",
+    "public._stamp_org_default|transcripts.studio_recording_chunks|_stamp_org_default",
+    "public._stamp_org_default|transcripts.studio_recording_segments|_stamp_org_default",
+    "public._stamp_org_default|transcripts.studio_runs|_stamp_org_default",
+    "public._stamp_org_default|transcripts.studio_session_settings|_stamp_org_default",
+    "public._stamp_org_default|transcripts.studio_sessions|_stamp_org_default",
+    "public._stamp_org_default|transcripts.transcripts|_stamp_org_default",
+    "public._stamp_org_default|ui.ui_surface_agent_pref|_stamp_org_default",
+    "public._stamp_org_default|ui.ui_surface_config|_stamp_org_default",
+    "public._stamp_org_default|users.profiles|_stamp_org_default",
+    "public._stamp_org_default|users.user_achievements|_stamp_org_default",
+    "public._stamp_org_default|users.user_analysis_preferences|_stamp_org_default",
+    "public._stamp_org_default|users.user_bookmarks|_stamp_org_default",
+    "public._stamp_org_default|users.user_email_preferences|_stamp_org_default",
+    "public._stamp_org_default|users.user_feedback|_stamp_org_default",
+    "public._stamp_org_default|users.user_form_profile|_stamp_org_default",
+    "public._stamp_org_default|users.user_markdown_samples|_stamp_org_default",
+    "public._stamp_org_default|users.user_memory|_stamp_org_default",
+    "public._stamp_org_default|users.user_preferences|_stamp_org_default",
+    "public._stamp_org_default|users.user_secret_audit|_stamp_org_default",
+    "public._stamp_org_default|users.user_stats|_stamp_org_default",
+    "public._stamp_org_default|users.user_surface_state|_stamp_org_default",
+    "public._stamp_org_default|web.analysis_item|_stamp_org_default",
+    "public._stamp_org_default|web.analysis_result|_stamp_org_default",
+    "public._stamp_org_default|web.brand_asset|_stamp_org_default",
+    "public._stamp_org_default|web.brand|_stamp_org_default",
+    "public._stamp_org_default|web.business_fact|_stamp_org_default",
+    "public._stamp_org_default|web.business_location|_stamp_org_default",
+    "public._stamp_org_default|web.crawl_event|_stamp_org_default",
+    "public._stamp_org_default|web.crawl_preset|_stamp_org_default",
+    "public._stamp_org_default|web.crawl_schedule|_stamp_org_default",
+    "public._stamp_org_default|web.crawl_session|_stamp_org_default",
+    "public._stamp_org_default|web.crawl_url|_stamp_org_default",
+    "public._stamp_org_default|web.discovered_item|_stamp_org_default",
+    "public._stamp_org_default|web.finding|_stamp_org_default",
+    "public._stamp_org_default|web.gsc_page_stat|_stamp_org_default",
+    "public._stamp_org_default|web.link_edge|_stamp_org_default",
+    "public._stamp_org_default|web.listing_publisher|_stamp_org_default",
+    "public._stamp_org_default|web.location_listing|_stamp_org_default",
+    "public._stamp_org_default|web.page_content|_stamp_org_default",
+    "public._stamp_org_default|web.page_evidence|_stamp_org_default",
+    "public._stamp_org_default|web.page_sitemap|_stamp_org_default",
+    "public._stamp_org_default|web.page|_stamp_org_default",
+    "public._stamp_org_default|web.property|_stamp_org_default",
+    "public._stamp_org_default|web.provider|_stamp_org_default",
+    "public._stamp_org_default|web.screenshot|_stamp_org_default",
+    "public._stamp_org_default|web.site_endpoint_rule|_stamp_org_default",
+    "public._stamp_org_default|web.site_item_config|_stamp_org_default",
+    "public._stamp_org_default|web.sitemap|_stamp_org_default",
+    "public._stamp_org_default|web.site|_stamp_org_default",
+    "public._stamp_org_default|web.snapshot|_stamp_org_default",
+    "public._stamp_org_default|workbench.heatmap_saves|_stamp_org_default",
+    "public._stamp_org_default|workbench.note_folders|_stamp_org_default",
+    "public._stamp_org_default|workbench.notes|_stamp_org_default",
+    "public._stamp_org_default|workbench.udt_dataset_fields|_stamp_org_default",
+    "public._stamp_org_default|workbench.udt_dataset_rows|_stamp_org_default",
+    "public._stamp_org_default|workbench.udt_dataset_templates|_stamp_org_default",
+    "public._stamp_org_default|workbench.udt_datasets|_stamp_org_default",
+    "public._stamp_org_default|workbench.udt_workbooks|_stamp_org_default",
+    "public._stamp_org_default|workbench.working_documents|_stamp_org_default",
+    "public._stamp_org_default|workflow.definition|_stamp_org_default",
+    "public._stamp_org_default|workflow.idempotency|_stamp_org_default",
+    "public._stamp_org_default|workflow.recovery_audit|_stamp_org_default",
+    "public._stamp_org_default|workflow.run_log|_stamp_org_default",
+    "public._stamp_org_default|workflow.runtime_surface|_stamp_org_default",
+    "public._stamp_org_default|workflow.run|_stamp_org_default",
+    "public._stamp_org_default|workflow.template|_stamp_org_default",
+    "public._stamp_org_default|workflow.trigger|_stamp_org_default",
+    "public._stamp_org_default|workspace.projects|_stamp_org_default",
+    "public._stamp_org_default|workspace.tasks|_stamp_org_default",
+    "public._stamp_org_default|workspace.threads|_stamp_org_default",
+    "public._stamp_org_default|workspace.war_rooms|_stamp_org_default"
+  ],
+  "removed_historical_specialized_triggers": [
+    "ops._stamp_capture_org|ops.system_error|_120_stamp_capture_org",
+    "ops._stamp_capture_org|ops.system_write_failure|_120_stamp_capture_org",
+    "public.dm_default_org|communication.dm_conversations|trg_default_org",
+    "users._stamp_secret_audit_org|users.user_secret_audit|_0_stamp_secret_audit_org"
+  ],
   "removed_historical_organization_defaults": [
     "admin.feature_docs|'39c38960-d30c-4840-b0c1-c9960de95582'::uuid"
   ],

{matrx_orm-3.1.172 → matrx_orm-3.1.174}/matrx_orm/secrets_battery/FEATURE.md

@@ -62,7 +62,10 @@ single-field resolution refuses it before decrypt with the stable
 Item metadata and grants remain metadata-only, while generic child mutation,
 fork, and transfer refuse a protected child. Every competing child/lifecycle
 mutation locks and re-reads the parent in its transaction; whole-item delete
-remains atomic.
+remains atomic. `export_native_passkey_source` is a dedicated host `manage`
+reader for native transfer; it is not generic export and not the assertion
+materialize path. `native_passkey_public_shape_valid` remains the public
+ownership/shape helper and does not decrypt.
 
 **Native source admission (`native_source.py`).** `validate_native_source` is the server reader of the provider's exact source-v1 byte format; Rust remains the encoder and authenticator. It requires an explicit positive source-size limit, preserves nullable names and bytes, rejects duplicate/noncanonical JSON and COSE, and derives public metadata only after maintained P-256 key-pair validation. The result is provider-custody data, never a response model or generic field. `repr` and fixed failures omit material. `scripts/check_native_source_parity.py --rust-core <native-vault-provider/core>` compares the real compiled Rust reader against the server corpus; no mocked oracle. This prerequisite adds no creator, materializer, database row or native readiness. Verified September19 against132 focused tests and525 cross-language cases.
 

{matrx_orm-3.1.172 → matrx_orm-3.1.174}/matrx_orm/secrets_battery/native_passkeys.py

@@ -333,3 +333,63 @@ async def materialize_native_passkey_source(
         return source
     except Exception:
         raise NativePasskeyUnavailableError() from None
+
+
+async def export_native_passkey_source(
+    record: NativePasskeyRecord,
+    *,
+    actor_id: str,
+    request_organization_id: str,
+    max_source_bytes: int,
+) -> ValidatedNativeSource:
+    """Dedicated owner-authorized native transfer reader; never an assertion path."""
+    _transaction_required()
+    await require_host_authorization(
+        record.item_id,
+        actor_id,
+        capability="manage",
+        operation="native_passkey_export",
+        audit_organization_id=request_organization_id,
+    )
+    rows = (
+        await UserSecret.filter(
+            id=record.field_id,
+            credential_item_id=record.item_id,
+            deleted_at__isnull=True,
+            is_active=True,
+            execution_purpose="passkey_private",
+            handling="sealed",
+            editable=False,
+            inject_into_sandbox=False,
+        )
+        .select_for_update()
+        .values("value_encrypted")
+    )
+    if len(rows) != 1:
+        raise NativePasskeyUnavailableError()
+    try:
+        raw = decrypt_value(rows[0]["value_encrypted"]).encode("utf-8")
+        if not hmac.compare_digest(hashlib.sha256(raw).digest(), record.source_sha256):
+            raise NativePasskeyUnavailableError()
+        source = validate_native_source(raw, max_source_bytes=max_source_bytes)
+        if (
+            source.rp_id,
+            source.credential_id,
+            source.user_handle,
+            source.username,
+            source.display_name,
+            source.public_x,
+            source.public_y,
+        ) != (
+            record.rp_id,
+            record.credential_id,
+            record.user_handle,
+            record.username,
+            record.display_name,
+            record.public_x,
+            record.public_y,
+        ):
+            raise NativePasskeyUnavailableError()
+        return source
+    except Exception:
+        raise NativePasskeyUnavailableError() from None

{matrx_orm-3.1.172 → matrx_orm-3.1.174}/matrx_orm/write_actor.py

@@ -192,6 +192,25 @@ async def actor_named_for_write(database: str) -> AsyncIterator[None]:
 
     Pass-through when ``current_actor()`` is set: a caller that named itself is
     never second-guessed, and no transaction is opened on its behalf.
+
+    PUBLIC ON PURPOSE (2026-09-19). The ``names_its_actor`` decorator only
+    protects a write whose OWN table is in :data:`ACTOR_REQUIRED_TABLES` — it
+    is blind to a table with no such requirement whose AFTER-INSERT trigger
+    turns around and writes ``platform.associations`` itself (an owner writing
+    the row never sees a "you touched associations" branch, because it did
+    not, in Python; the database's trigger did, on the database's own
+    connection, inside the caller's transaction). ``docproc.processed_documents``
+    (``sync_processed_doc_file_association``), ``docproc.processed_document_pages``
+    (``sync_page_image_file_association``) and ``rag.data_store_members``
+    (``sync_data_store_member_association``) are the ones this repo has;
+    ``pg_get_functiondef(...) ilike '%insert into platform.associations%'``
+    finds the rest. Any call site that opens ITS OWN top-level transaction (or
+    a bare DML call with none) around a write to one of those tables from code
+    that might run with no ambient actor — a detached background task, a
+    script, a queue worker — wraps that transaction in this function instead
+    of ``matrx_orm.transaction()`` directly. It names the actor from the SAME
+    registry every other call site uses (:func:`writing_system`'s feature
+    resolver / calling-frame walk), never a hand-typed string.
     """
     from matrx_orm.core.session_context import current_actor, declaring_actor
     from matrx_orm.core.transaction import set_local_guc, transaction

{matrx_orm-3.1.172 → matrx_orm-3.1.174}/pyproject.toml

@@ -1,6 +1,6 @@
 [project]
 name = "matrx-orm"
-version = "3.1.172"
+version = "3.1.174"
 description = "Async-first PostgreSQL ORM with bidirectional migrations, schema introspection, many-to-many relationships, and built-in state caching"
 readme = "README.md"
 license = { text = "MIT" }