matrx-orm 3.1.246__tar.gz → 3.1.249__tar.gz

matrx_orm-3.1.249/.gitignore

@@ -0,0 +1,8 @@
+# Keep local caches, build output, and non-example environment files out of the package.
+__pycache__/
+*.py[cod]
+.pytest_cache/
+dist/
+.env
+.env.*
+!.env.example

{matrx_orm-3.1.246 → matrx_orm-3.1.249}/CHANGELOG.md

@@ -2,6 +2,14 @@
 
 ## Unreleased
 
+- **Fix: include the ORM package in built wheels.** Hatch inherited the monorepo's
+  `/matrx_orm/` ignore rule relative to the package root, which omitted all Python
+  modules from source and published wheels. The wheel target now ignores VCS rules
+  while retaining its `matrx_orm` package selector; the source target allowlists the
+  reviewed package, docs, tests, scripts, and fixtures and excludes caches and local
+  environment files. A wheel-content guard checks the import modules, typing marker,
+  resources, and absence of Python cache files.
+
 - **Fix: an instance `update()` / `save()` runs a SQL expression instead of storing it.**
   `row.update(metadata=JsonbMerge("metadata", {...}))` sent the expression through
   `JSONField.get_db_prep_value`, and `json.dumps` wrote its attribute dict over the

{matrx_orm-3.1.246 → matrx_orm-3.1.249}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.5
 Name: matrx-orm
-Version: 3.1.246
+Version: 3.1.249
 Summary: Async-first PostgreSQL ORM with bidirectional migrations, schema introspection, many-to-many relationships, and built-in state caching
 Project-URL: Homepage, https://github.com/AI-Matrix-Engine/aidream-current
 Project-URL: Repository, https://github.com/AI-Matrix-Engine/aidream-current
@@ -26,7 +26,7 @@ Requires-Dist: asyncpg>=0.31.0
 Requires-Dist: cbor2<7,>=6.1.3
 Requires-Dist: cryptography>=43.0
 Requires-Dist: gitpython>=3.1.40
-Requires-Dist: matrx-utils>=2.0.84
+Requires-Dist: matrx-utils>=2.0.85
 Requires-Dist: psycopg-pool>=3.2.5
 Requires-Dist: psycopg[binary]>=3.2.5
 Requires-Dist: python-dotenv>=1.0

{matrx_orm-3.1.246 → matrx_orm-3.1.249}/pyproject.toml

@@ -1,6 +1,6 @@
 [project]
 name = "matrx-orm"
-version = "3.1.246"
+version = "3.1.249"
 description = "Async-first PostgreSQL ORM with bidirectional migrations, schema introspection, many-to-many relationships, and built-in state caching"
 readme = "README.md"
 license = { text = "MIT" }
@@ -41,7 +41,7 @@ dependencies = [
     "gitpython>=3.1.40",
     "psycopg[binary]>=3.2.5",
     "psycopg-pool>=3.2.5",
-    "matrx-utils>=2.0.84",
+    "matrx-utils>=2.0.85",
     "pyyaml>=6.0.3",
     "python-dotenv>=1.0",
     "cryptography>=43.0",
@@ -80,8 +80,54 @@ dev = [
 
 [tool.hatch.build.targets.wheel]
 packages = ["matrx_orm"]
+# The monorepo root .gitignore has a package-root-relative /matrx_orm/ pattern.
+# Hatch otherwise inherits it here and produces a wheel with no Python modules.
+ignore-vcs = true
+exclude = ["**/__pycache__", "**/*.py[cod]"]
 include = ["matrx_orm/py.typed", "matrx_orm/resources/*.json"]
 
+[tool.hatch.build.targets.sdist]
+# Build the sdist from the package's reviewed source and fixtures only; do not
+# inherit the monorepo ignore rule that hides matrx_orm from this package root.
+ignore-vcs = true
+only-include = [
+    "matrx_orm",
+    "tests",
+    "scripts",
+    "docs",
+    "database",
+    "pyproject.toml",
+    "README.md",
+    "CHANGELOG.md",
+    "CLAUDE.md",
+    "AGENTS.md",
+    "BASE_CLASS_METHODS.md",
+    "MODEL_API.md",
+]
+exclude = [
+    "**/.*",
+    "**/__pycache__",
+    "**/*.py[cod]",
+    "**/.pytest_cache",
+    "**/.pytest_cache/**",
+    "**/dist",
+    "**/dist/**",
+    "**/.env",
+    "**/.env.local",
+    "**/.env.development",
+    "**/.env.production",
+    "**/.env.staging",
+    "**/.env.test",
+    "**/.env.secret",
+    "**/.env.*.local",
+    "**/.env.*.secret",
+]
+
+[tool.hatch.build.targets.sdist.force-include]
+"tests/sample_project/.env.example" = "tests/sample_project/.env.example"
+"tests/sample_project/generated/.gitkeep" = "tests/sample_project/generated/.gitkeep"
+"tests/sample_project_desktop/.env.example" = "tests/sample_project_desktop/.env.example"
+
 [tool.hatch.metadata]
 allow-direct-references = true
 

matrx_orm-3.1.249/scripts/verify_wheel.py

@@ -0,0 +1,60 @@
+"""Verify that a matrx-orm wheel contains its runtime package and resources."""
+
+from __future__ import annotations
+
+import argparse
+import sys
+import zipfile
+from pathlib import Path
+
+REQUIRED_MEMBERS = {
+    "matrx_orm/__init__.py",
+    "matrx_orm/core/__init__.py",
+    "matrx_orm/core/base.py",
+    "matrx_orm/query/builder.py",
+    "matrx_orm/migrations/cli.py",
+    "matrx_orm/py.typed",
+    "matrx_orm/resources/additional-assigners-2026-09-12.json",
+    "matrx_orm/resources/org_assignment_trigger_baseline.json",
+}
+
+
+def verify_wheel(path: Path) -> None:
+    with zipfile.ZipFile(path) as wheel:
+        members = set(wheel.namelist())
+
+    missing = REQUIRED_MEMBERS - members
+    if missing:
+        raise AssertionError("wheel is missing required members: " + ", ".join(sorted(missing)))
+
+    unexpected = sorted(
+        name
+        for name in members
+        if name.startswith("matrx_orm/")
+        and ("__pycache__/" in name or name.endswith((".pyc", ".pyo")))
+    )
+    if unexpected:
+        raise AssertionError("wheel contains Python cache files: " + ", ".join(unexpected[:10]))
+
+    unexpected_roots = sorted(
+        name for name in members if not name.startswith("matrx_orm/") and ".dist-info/" not in name
+    )
+    if unexpected_roots:
+        raise AssertionError("wheel contains files outside matrx_orm and dist-info: " + ", ".join(unexpected_roots[:10]))
+
+
+def main() -> int:
+    parser = argparse.ArgumentParser(description=__doc__)
+    parser.add_argument("wheel", type=Path)
+    args = parser.parse_args()
+    verify_wheel(args.wheel)
+    print(f"PASS {args.wheel}: matrx-orm runtime package and resources are present")
+    return 0
+
+
+if __name__ == "__main__":
+    try:
+        raise SystemExit(main())
+    except (AssertionError, OSError, zipfile.BadZipFile) as exc:
+        print(f"FAIL: {exc}", file=sys.stderr)
+        raise SystemExit(1) from exc

matrx_orm-3.1.249/tests/level1/test_wheel_contents.py

@@ -0,0 +1,47 @@
+"""Tests for the matrx-orm wheel payload guard."""
+
+from __future__ import annotations
+
+import importlib.util
+import zipfile
+from pathlib import Path
+
+import pytest
+
+_GUARD_PATH = Path(__file__).parents[2] / "scripts/verify_wheel.py"
+_SPEC = importlib.util.spec_from_file_location("matrx_orm_wheel_guard", _GUARD_PATH)
+assert _SPEC and _SPEC.loader
+_GUARD = importlib.util.module_from_spec(_SPEC)
+_SPEC.loader.exec_module(_GUARD)
+REQUIRED_MEMBERS = _GUARD.REQUIRED_MEMBERS
+verify_wheel = _GUARD.verify_wheel
+
+
+def _wheel(path: Path, members: set[str]) -> Path:
+    wheel = path / "matrx_orm_test-0-py3-none-any.whl"
+    with zipfile.ZipFile(wheel, "w") as archive:
+        archive.writestr("matrx_orm_test-0.dist-info/METADATA", "Name: matrx-orm-test\n")
+        archive.writestr("matrx_orm_test-0.dist-info/WHEEL", "Wheel-Version: 1.0\n")
+        for member in members:
+            archive.writestr(member, "")
+    return wheel
+
+
+def test_wheel_guard_accepts_runtime_modules_and_package_resources(tmp_path: Path) -> None:
+    verify_wheel(_wheel(tmp_path, REQUIRED_MEMBERS))
+
+
+def test_wheel_guard_rejects_a_missing_runtime_module(tmp_path: Path) -> None:
+    with pytest.raises(AssertionError, match="matrx_orm/core/base.py"):
+        verify_wheel(_wheel(tmp_path, REQUIRED_MEMBERS - {"matrx_orm/core/base.py"}))
+
+
+def test_wheel_guard_rejects_metadata_only_wheel(tmp_path: Path) -> None:
+    with pytest.raises(AssertionError, match="matrx_orm/__init__.py"):
+        verify_wheel(_wheel(tmp_path, set()))
+
+
+def test_wheel_guard_rejects_python_cache_files(tmp_path: Path) -> None:
+    wheel = _wheel(tmp_path, REQUIRED_MEMBERS | {"matrx_orm/core/__pycache__/base.cpython-313.pyc"})
+    with pytest.raises(AssertionError, match="cache files"):
+        verify_wheel(wheel)

matrx_orm-3.1.246/.gitignore

@@ -1,362 +0,0 @@
-*.pyc
-secrets/
-ignore/
-temp/
-logs/
-# The broad `logs/` rule above is for RUNTIME log output, but it also matched
-# the dashboard's SOURCE directory and silently swallowed an entire feature's
-# files (only the pre-existing index.tsx stayed tracked), breaking the prod
-# Docker build with "Could not resolve ./structured-tab". Re-include the source.
-!apps/dashboard/src/features/logs/
-!apps/dashboard/src/features/logs/**
-todo
-text_notes/
-aidream/secrets/2.env
-automation_matrix/matrix_processing/temp/*
-cd
-# Byte-compiled / optimized / DLL files
-__pycache__/
-*.py[cod]
-*$py.class
-
-# C extensions
-*.so
-.venv/
-
-# Distribution / packaging
-.Python
-build/
-develop-eggs/
-dist/
-downloads/
-eggs/
-.eggs/
-lib/
-lib64/
-# The blanket lib/ rule above is from the standard Python .gitignore template
-# and was silently swallowing TS source under the SPA `src/lib/` folders.
-# Re-allow them explicitly so frontend builds don't ship without their lib layer.
-!apps/dashboard/src/lib/
-!apps/dashboard/src/lib/**
-!apps/dashboard/src/features/crawler/lib/
-!apps/dashboard/src/features/crawler/lib/**
-!apps/workflow-studio/src/lib/
-!apps/workflow-studio/src/lib/**
-# Shared package source: a `lib/` folder under apps/shared/<pkg>/src is TS source, never a Python build dir.
-# 2026-10-16: data's src/access/lib/governedActionError.ts stayed untracked, so the publish gate (a clean
-# checkout) failed TS2307 and blocked data and every dependent.
-!apps/shared/*/src/**/lib/
-!apps/shared/*/src/**/lib/**
-parts/
-sdist/
-var/
-wheels/
-share/python-wheels/
-*.egg-info/
-.installed.cfg
-*.egg
-MANIFEST
-
-# PyInstaller
-#  Usually these files are written by a python script from a template
-#  before PyInstaller builds the exe, so as to inject date/other infos into it.
-*.manifest
-*.spec
-
-# Installer logs
-pip-log.txt
-pip-delete-this-directory.txt
-
-# Unit test / coverage reports
-ai/tests/clean_response.json
-ai/tests/cx_storage_response.json
-ai/tests/execution_test.py
-ai/tests/final_response.json
-htmlcov/
-.tox/
-.nox/
-.coverage
-.coverage.*
-.cache
-nosetests.xml
-coverage.xml
-*.cover
-*.py,cover
-.hypothesis/
-.pytest_cache/
-cover/
-
-# Translations
-*.mo
-*.pot
-
-# Django stuff:
-*.log
-local_settings.py
-db.sqlite3
-db.sqlite3-journal
-
-# Flask stuff:
-/instance/
-.webassets-cache
-
-# Scrapy stuff:
-.scrapy
-
-# Sphinx documentation
-docs/_build/
-
-# PyBuilder
-.pybuilder/
-target/
-
-# Jupyter Notebook
-.ipynb_checkpoints
-
-# IPython
-profile_default/
-ipython_config.py
-
-# pyenv
-#   For a library or package, you might want to ignore these files since the code is
-#   intended to run in multiple environments; otherwise, check them in:
-# .python-version
-
-# pipenv
-#   According to pypa/pipenv#598, it is recommended to include Pipfile.lock in version control.
-#   However, in case of collaboration, if having platform-specific dependencies or dependencies
-#   having no cross-platform support, pipenv may install dependencies that don't work, or not
-#   install all needed dependencies.
-#Pipfile.lock
-
-# poetry
-#   Similar to Pipfile.lock, it is generally recommended to include poetry.lock in version control.
-#   This is especially recommended for binary packages to ensure reproducibility, and is more
-#   commonly ignored for libraries.
-#   https://python-poetry.org/docs/basic-usage/#commit-your-poetrylock-file-to-version-control
-
-# pdm
-#   Similar to Pipfile.lock, it is generally recommended to include pdm.lock in version control.
-#pdm.lock
-#   pdm stores project-wide configurations in .pdm.toml, but it is recommended to not include it
-#   in version control.
-#   https://pdm.fming.dev/#use-with-ide
-.pdm.toml
-
-# PEP 582; used by e.g. github.com/David-OConnor/pyflow and github.com/pdm-project/pdm
-__pypackages__/
-
-# Celery stuff
-celerybeat-schedule
-celerybeat.pid
-
-# SageMath parsed files
-*.sage.py
-
-# Environments
-.env
-.env_remote
-.venv
-env/
-venv/
-ENV/
-env.bak/
-venv.bak/
-.env.armanonly
-
-# Spyder project settings
-.spyderproject
-.spyproject
-
-# Rope project settings
-.ropeproject
-
-# mkdocs documentation
-/site
-
-# mypy
-.mypy_cache/
-.dmypy.json
-dmypy.json
-
-# Pyre type checker
-.pyre/
-
-# random armani files
-/armani_dev/secrets/
-/armani/
-/_armani/
-
-
-
-# pytype static type analyzer
-.pytype/
-
-# Cython debug symbols
-cython_debug/
-
-.idea/
-.vscode/
-/node_modules/
-
-# Frontend pnpm workspace (apps/) — node_modules at the workspace root and any
-# member, plus Vite caches and build output. The unified lockfile (apps/pnpm-lock.yaml)
-# IS committed; everything below is regenerated.
-#
-# 🚨 BOTH SPELLINGS. `node_modules/` with the slash matches a DIRECTORY only, so
-# a SYMLINK named `node_modules` slipped straight past it: five of them — each
-# an absolute path into one machine's checkout — were committed on main and
-# broke `pnpm install --frozen-lockfile` on every CI runner, where the symlink
-# is dangling and pnpm's `mkdir` of it answers ENOENT. Every package release was
-# blocked by it. The bare spelling below matches the symlink too.
-node_modules
-node_modules/
-apps/**/.vite/
-apps/**/dist/
-.vite/
-
-dump.rdb
-
-frontend/
-
-# AME Temp Files and directory structure
-# Ignore all files in the temp directory and its subdirectories
-/temp/**/*
-/tmp/**/*
-
-# Allow .gitkeep files to retain directory structure
-!/temp/**/.gitkeep
-!/tmp/**/.gitkeep
-
-# Armani
-.history*
-.history/
-/local_data/
-local_reports_data/
-webscraper/quick_scrapes/temp/
-automation_matrix/ai_apis/fireworks/_dev/*
-automation_matrix/ai_apis/fireworks/_dev/fireworks_sample.py
-*.pdf
-*.flac
-*.mp3
-*.wav
-miniconda.sh
-/database/python_sql/temp_data/
- .history*
- .history/
-.history/
-
-_dev/
-/_dev/
-requirements_filtered.txt
-
-# matrx-dev-tools backups
-.env-backups/
-# Matrx Ship config (contains API key)
-.matrx-ship.json
-
-# Matrx config (contains API keys)
-.matrx.json
-.matrx-tools.conf
-
-# Claude Code local worktrees and per-user settings
-.claude/worktrees/
-.worktrees/
-.claude/settings.local.json
-
-# Append-only snapshots from matrx_utils.update_history (unbounded; do not commit)
-common/utils/data_in_code/data_history.json
-packages/matrx-utils/matrx_utils/data_in_code/data_history.json
-
-# Tool-dispatch debug logs — one file per server start, never committed
-.matrx-debug/
-# Per-definition BEFORE snapshots written by a live migration script. They are
-# the recovery record for one machine's run, not repo content — the durable
-# audit trail is the `metadata.migrations` stamp on the row itself.
-.matrx-migrations/
-
-# Trial Bench records written on THIS machine — the trial's JSON record, its §8
-# report and the index that finds them (aidream/services/masterworks/bench/index.py,
-# and the runs a product-started trial writes beside it). They are never repo
-# content: a record carries every arm's full text INCLUDING the expert's ground
-# truth, which is material deliberately withheld from the Rulebook, and a trial
-# that matters is published deliberately under common-docs/projects/<its trial>/.
-# Untracked-but-not-ignored meant one `git add -A` away from committing an
-# expert's withheld work.
-.matrx/bench/
-
-# macOS Finder metadata
-.DS_Store
-**/.DS_Store
-
-# Environment files
-.env
-.env.*
-*.env
-*.env.*
-
-# Keep safe templates trackable
-!.env.example
-!.env.sample
-!.env.template
-
-# Never commit local OAuth client/token artifacts
-credentials.json
-token*.pickle
-token*.json
-tests_trials/rag_tests/kg_export_output/
-
-# Pooler-contamination watch output (machine-local evidence, not source)
-db/evidence/
-
-# Pooler contamination evidence — machine-local forensic capture, not source
-db/evidence/
-db/mirror/.env.mirror
-supabase/.temp/
-**/supabase/.temp/
-# Packed npm artifacts. Kept locally for a one-time bootstrap publish; never
-# committed (they are large binaries regenerable with `pnpm pack`).
-apps/shared/*/*.tgz
-
-# Guard forcing-function scratch packages. These tests plant real files inside
-# the real tree the guard scans (a temp dir would prove nothing) and delete
-# them in teardown — ignoring them keeps the auto-commit tooling from
-# capturing one mid-run.
-_kind_boundary_scratch*/
-_kind_marker_law_scratch*/
-
-# packed npm tarballs are build output, never source (doctrine: typescript-package-standard)
-*.tgz
-
-# Peers' kit scratch witnesses. A `.kit-<name>-witness.XXXXXX/` directory is a
-# full COPY of kit/src planted inside the packages tree — three of them held a
-# duplicate `format.ts` on 2026-09-12 — and it sits in the `check:package-twins`
-# scan ROOT. `git ls-files` only reaches TRACKED files, so the guard never saw
-# them; the risk was a broad `git add` committing three formatter twins in one
-# stroke, which is the exact class that guard exists to stop. Ignored, never
-# deleted: they are another agent's evidence.
-apps/shared/.kit-*-witness.*/
-
-# Agent worktrees. Extra checkouts of this same repo, never product source.
-# They live at .wt/<slug> (disk-groom). Committing the folder would add a
-# second copy of the entire tree and a symlink into common-docs.
-.wt/
-.matrx/fixer-dispatch.json
-.matrx/fixer-ledger.json
-
-# Release streak ledger (scripts/release_repeats.py): per-machine state, never committed
-.matrx/release-repeats.json
-.matrx/release-repeats.json.tmp
-.matrx/fixer-ledger.json
-/.config-manifest.json
-
-# Agents' scratch "proof" copies of shared packages — never tracked (they break the npm planner and the frozen lockfile)
-apps/shared/zz-proof-*/
-
-# tsup writes this temp file while it builds a config; never commit it
-tsup.config.bundled_*.mjs
-
-# db/tests/test_provision_pull.py writes a projection for a spec row it ALWAYS rolls back;
-# if the test is interrupted before its scrub, a sweep commit must never pick it up
-# (2026-10-19: one was swept in and failed 5 aidream releases with identity.token.taken).
-db/migrations/*_provision_provision_pull_selftest.sql