matrx-orm 3.1.249__tar.gz → 3.1.251__tar.gz

{matrx_orm-3.1.249 → matrx_orm-3.1.251}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.5
 Name: matrx-orm
-Version: 3.1.249
+Version: 3.1.251
 Summary: Async-first PostgreSQL ORM with bidirectional migrations, schema introspection, many-to-many relationships, and built-in state caching
 Project-URL: Homepage, https://github.com/AI-Matrix-Engine/aidream-current
 Project-URL: Repository, https://github.com/AI-Matrix-Engine/aidream-current
@@ -26,7 +26,7 @@ Requires-Dist: asyncpg>=0.31.0
 Requires-Dist: cbor2<7,>=6.1.3
 Requires-Dist: cryptography>=43.0
 Requires-Dist: gitpython>=3.1.40
-Requires-Dist: matrx-utils>=2.0.85
+Requires-Dist: matrx-utils>=2.0.87
 Requires-Dist: psycopg-pool>=3.2.5
 Requires-Dist: psycopg[binary]>=3.2.5
 Requires-Dist: python-dotenv>=1.0

{matrx_orm-3.1.249 → matrx_orm-3.1.251}/matrx_orm/secrets_battery/items.py

@@ -1921,6 +1921,8 @@ async def set_item_grants(
         await UserSecretGrant.delete_where(credential_item_id=item_id, organization_id__isnull=True)
         for g in recipients:
             await UserSecretGrant.create(
+                # This is a person grant; organization_id selects an organization grantee.
+                organization_id=None,
                 credential_item_id=item_id,
                 user_secret_id=None,
                 user_id=g.user_id,
@@ -2076,6 +2078,8 @@ async def add_item_grant(
         action = "grant_changed"
     else:
         instance = await UserSecretGrant.create(
+            # This is a person grant; organization_id selects an organization grantee.
+            organization_id=None,
             credential_item_id=item_id,
             user_secret_id=None,
             user_id=user_id,

{matrx_orm-3.1.249 → matrx_orm-3.1.251}/matrx_orm/secrets_battery/org_service.py

@@ -520,10 +520,12 @@ async def set_org_secret_grants(
         raise ValueError(f"access_mode must be one of {ACCESS_MODES}; got {access_mode!r}")
     recipients = [] if access_mode == "all_members" else sorted(set(user_ids))
     async with transaction(UserSecret._database):
-        raw = await _lock_generic_org_secret(secret_id)
+        await _lock_generic_org_secret(secret_id)
         await UserSecretGrant.delete_where(user_secret_id=secret_id)
         for user_id in recipients:
             await UserSecretGrant.create(
+                # This is a person grant; organization_id selects an organization grantee.
+                organization_id=None,
                 user_secret_id=secret_id,
                 user_id=user_id,
                 can_use=True,

{matrx_orm-3.1.249 → matrx_orm-3.1.251}/matrx_orm/secrets_battery/service.py

@@ -425,6 +425,8 @@ async def create_user_secret(
     ciphertext = encrypt_value(value)
     hint = mask_value(value)
     row_data = {
+        # Personal ownership is explicit; audit_organization_id is audit context only.
+        "organization_id": None,
         "user_id": user_id,
         "key": key,
         "value_encrypted": ciphertext,

{matrx_orm-3.1.249 → matrx_orm-3.1.251}/pyproject.toml

@@ -1,6 +1,6 @@
 [project]
 name = "matrx-orm"
-version = "3.1.249"
+version = "3.1.251"
 description = "Async-first PostgreSQL ORM with bidirectional migrations, schema introspection, many-to-many relationships, and built-in state caching"
 readme = "README.md"
 license = { text = "MIT" }
@@ -41,7 +41,7 @@ dependencies = [
     "gitpython>=3.1.40",
     "psycopg[binary]>=3.2.5",
     "psycopg-pool>=3.2.5",
-    "matrx-utils>=2.0.85",
+    "matrx-utils>=2.0.87",
     "pyyaml>=6.0.3",
     "python-dotenv>=1.0",
     "cryptography>=43.0",

{matrx_orm-3.1.249 → matrx_orm-3.1.251}/tests/sample_project/test_schema_generation.py

@@ -22,17 +22,13 @@ import os
 from pathlib import Path
 
 import pytest
+from dotenv import load_dotenv
 
 # ---------------------------------------------------------------------------
 # Credential check — skip entire module if no passwords are set
 # ---------------------------------------------------------------------------
 _env_path = Path(__file__).parent / ".env"
-try:
-    from dotenv import load_dotenv
-    if _env_path.exists():
-        load_dotenv(_env_path)
-except ImportError:
-    pass
+load_dotenv(_env_path)
 
 _PRIMARY_AVAILABLE = bool(os.environ.get("PRIMARY_DB_PASSWORD"))
 _SECONDARY_AVAILABLE = bool(os.environ.get("SECONDARY_DB_PASSWORD"))