matrx-orm 3.1.244__tar.gz → 3.1.245__tar.gz

{matrx_orm-3.1.244 → matrx_orm-3.1.245}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.5
 Name: matrx-orm
-Version: 3.1.244
+Version: 3.1.245
 Summary: Async-first PostgreSQL ORM with bidirectional migrations, schema introspection, many-to-many relationships, and built-in state caching
 Project-URL: Homepage, https://github.com/AI-Matrix-Engine/aidream-current
 Project-URL: Repository, https://github.com/AI-Matrix-Engine/aidream-current

{matrx_orm-3.1.244 → matrx_orm-3.1.245}/matrx_orm/session/fallback.py

@@ -269,6 +269,16 @@ def _op_user_id(op: SessionOp, safe_user_id: str | None) -> str | None:
     return None
 
 
+#: The refusal text of the database's confidential-content guard (chat.refuse_sealed_content).
+CONFIDENTIAL_REFUSAL_MARK = "may not be stored on the server (chat.confidential)"
+_CONFIDENTIAL_KEPT_KEYS = ("id", "conversation_id", "user_request_id", "message_id", "role", "position")
+
+
+def _confidential_payload(payload: Any) -> Any:
+    kept = {k: payload.get(k) for k in _CONFIDENTIAL_KEPT_KEYS if isinstance(payload, dict) and k in payload}
+    return _serialize_payload({**kept, "redacted": "confidential conversation: content refused, not kept"})
+
+
 def _op_failure_row(
     op: SessionOp,
     *,
@@ -285,6 +295,12 @@ def _op_failure_row(
     values. Used by BOTH the DB insert and the disk spill, so a spilled file is
     byte-identical in shape to a table row (drain re-inserts it verbatim)."""
     row_user_id = _op_user_id(op, safe_user_id)
+    payload = _serialize_payload(op.payload)
+    if CONFIDENTIAL_REFUSAL_MARK in (error_text or ""):
+        # The database refused this row because its conversation is CONFIDENTIAL
+        # (trigger chat.refuse_sealed_content): its content must never land on our
+        # server, so the failure record keeps the row's identity, never its values.
+        payload = _confidential_payload(op.payload)
     return {
         "op_id": op.op_id,
         "request_id": request_id or session_id,
@@ -294,7 +310,7 @@ def _op_failure_row(
         "table_target": op.table,
         "op_type": op.op_type,
         "primary_key": _serialize_primary_key(op.pk_field, op.pk_value),
-        "payload": _serialize_payload(op.payload),
+        "payload": payload,
         "depends_on": json.dumps([]),  # FK-inferred deps aren't tracked on the op
         "error_text": error_text,
         "traceback": tb_text,

{matrx_orm-3.1.244 → matrx_orm-3.1.245}/pyproject.toml

@@ -1,6 +1,6 @@
 [project]
 name = "matrx-orm"
-version = "3.1.244"
+version = "3.1.245"
 description = "Async-first PostgreSQL ORM with bidirectional migrations, schema introspection, many-to-many relationships, and built-in state caching"
 readme = "README.md"
 license = { text = "MIT" }