matrx-orm 3.1.253__tar.gz → 3.1.254__tar.gz

{matrx_orm-3.1.253 → matrx_orm-3.1.254}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.5
 Name: matrx-orm
-Version: 3.1.253
+Version: 3.1.254
 Summary: Async-first PostgreSQL ORM with bidirectional migrations, schema introspection, many-to-many relationships, and built-in state caching
 Project-URL: Homepage, https://github.com/AI-Matrix-Engine/aidream-current
 Project-URL: Repository, https://github.com/AI-Matrix-Engine/aidream-current
@@ -26,7 +26,7 @@ Requires-Dist: asyncpg>=0.31.0
 Requires-Dist: cbor2<7,>=6.1.3
 Requires-Dist: cryptography>=43.0
 Requires-Dist: gitpython>=3.1.40
-Requires-Dist: matrx-utils>=2.0.87
+Requires-Dist: matrx-utils>=2.0.88
 Requires-Dist: psycopg-pool>=3.2.5
 Requires-Dist: psycopg[binary]>=3.2.5
 Requires-Dist: python-dotenv>=1.0

{matrx_orm-3.1.253 → matrx_orm-3.1.254}/matrx_orm/core/pooler_role.py

@@ -294,7 +294,7 @@ async def learn_login_role(conn: Any) -> str:
     both resets put a borrowed role back before ``session_user`` is read, so the
     answer is the role the backend authenticated as — never a borrowed one.
     """
-    async with conn.transaction():
+    async with conn.transaction(readonly=True):
         await conn.execute("RESET SESSION AUTHORIZATION")
         await conn.execute("RESET ROLE")
         row = await conn.fetchrow("SELECT session_user AS login_, current_user AS current_")
@@ -463,7 +463,7 @@ async def _pinned_reread(
     """
     last_role: tuple[str, str] | None = None
     for _ in range(REPROVE_ATTEMPTS):
-        async with conn.transaction():
+        async with conn.transaction(readonly=True):
             before = await conn.fetchrow("SELECT current_user, session_user")
             before_current = before["current_user"]
             before_session = before["session_user"]

{matrx_orm-3.1.253 → matrx_orm-3.1.254}/pyproject.toml

@@ -1,6 +1,6 @@
 [project]
 name = "matrx-orm"
-version = "3.1.253"
+version = "3.1.254"
 description = "Async-first PostgreSQL ORM with bidirectional migrations, schema introspection, many-to-many relationships, and built-in state caching"
 readme = "README.md"
 license = { text = "MIT" }
@@ -41,7 +41,7 @@ dependencies = [
     "gitpython>=3.1.40",
     "psycopg[binary]>=3.2.5",
     "psycopg-pool>=3.2.5",
-    "matrx-utils>=2.0.87",
+    "matrx-utils>=2.0.88",
     "pyyaml>=6.0.3",
     "python-dotenv>=1.0",
     "cryptography>=43.0",

{matrx_orm-3.1.253 → matrx_orm-3.1.254}/tests/level1/test_guarded_read_never_reruns_empty.py

@@ -47,7 +47,8 @@ class _Conn:
         self.borrowed = borrowed
         self.log: list[str] = []
 
-    def transaction(self) -> _Tx:
+    def transaction(self, *, readonly: bool = False) -> _Tx:
+        assert readonly is True
         return _Tx(self)
 
     async def execute(self, sql: str, *_a: object, **_k: object) -> None:

{matrx_orm-3.1.253 → matrx_orm-3.1.254}/tests/level1/test_read_connection_retry.py

@@ -71,7 +71,8 @@ async def test_read_retries_disconnect_masked_by_reproof_transaction(monkeypatch
                 "connection was closed in the middle of operation"
             )
 
-        def transaction(self):
+        def transaction(self, *, readonly: bool = False):
+            assert readonly is True
             return MaskingTransaction()
 
         def is_closed(self) -> bool:
@@ -91,7 +92,8 @@ async def test_read_retries_disconnect_masked_by_reproof_transaction(monkeypatch
         async def fetchrow(self, *_args, **_kwargs):
             return {"login_": "postgres", "current_": "postgres"}
 
-        def transaction(self):
+        def transaction(self, *, readonly: bool = False):
+            assert readonly is True
             class _Tx:
                 async def __aenter__(self):
                     return self

{matrx_orm-3.1.253 → matrx_orm-3.1.254}/tests/test_a_sealed_field_shows_no_character_of_its_value.py

@@ -1,6 +1,6 @@
 """A SEALED FIELD'S value_hint IS EMPTY — no character of a secret reaches a client (lane VISION-REACH wave 3).
 
-THE USE CASE: Cedar Ridge Physical Therapy connects its own Postgres to AI Matrx. The connection string
+THE USE CASE: Cedar Ridge Dental connects its own Postgres to AI Matrx. The connection string
 is a SEALED vault field (nobody can ever reveal it), yet every vault listing carried its ``value_hint`` —
 ``postg…uire`` — eight characters of the secret, to every browser that opened the item (verifier,
 2026-10-03). The hint is the only value-derived data a field row may carry, so it is the one thing to

{matrx_orm-3.1.253 → matrx_orm-3.1.254}/tests/test_pooler_role_guard.py

@@ -15,6 +15,7 @@ from matrx_orm.core.pooler_role import (
     PoolerRoleContamination,
     SessionRoleChangeRefused,
     assert_no_session_role_change,
+    learn_login_role,
     register_contamination_sink,
     prove_empty_in_one_statement,
     reprove_empty_read,
@@ -54,11 +55,13 @@ def test_transaction_scoped_and_ordinary_sql_pass(query: str) -> None:
 
 
 class _FakeTransaction:
-    def __init__(self, conn: _FakeConn) -> None:
+    def __init__(self, conn: _FakeConn, *, readonly: bool) -> None:
         self._conn = conn
+        self._readonly = readonly
 
     async def __aenter__(self) -> None:
-        self._conn.log.append("BEGIN")
+        assert self._readonly is True, "role-proving transactions must be read-only"
+        self._conn.log.append("BEGIN READ ONLY")
 
     async def __aexit__(self, *exc: object) -> bool:
         self._conn.log.append("COMMIT")
@@ -87,14 +90,19 @@ class _FakeConn:
         self._rows = rows
         self._probe = probe
         self.log: list[str] = []
+        self.transaction_modes: list[bool] = []
 
-    def transaction(self) -> _FakeTransaction:
-        return _FakeTransaction(self)
+    def transaction(self, *, readonly: bool = False) -> _FakeTransaction:
+        self.transaction_modes.append(readonly)
+        return _FakeTransaction(self, readonly=readonly)
 
     async def execute(self, sql: str) -> None:
         self.log.append(sql)
 
     async def fetchrow(self, sql: str, *args: object, **kwargs: object):
+        if sql == "SELECT session_user AS login_, current_user AS current_":
+            self.log.append("LOGIN ROLE")
+            return {"login_": "postgres", "current_": "postgres"}
         if sql.startswith(_PROBE_PREFIX):
             self.log.append("PROBE")
             if isinstance(self._probe, BaseException):
@@ -117,6 +125,21 @@ class _FakeConn:
         return list(self._rows)
 
 
+@pytest.mark.asyncio
+async def test_login_role_is_learned_inside_read_only_transaction() -> None:
+    conn = _FakeConn(identities=[], rows=[])
+
+    assert await learn_login_role(conn) == "postgres"
+    assert conn.transaction_modes == [True]
+    assert conn.log == [
+        "BEGIN READ ONLY",
+        "RESET SESSION AUTHORIZATION",
+        "RESET ROLE",
+        "LOGIN ROLE",
+        "COMMIT",
+    ]
+
+
 async def _reprove(conn: _FakeConn):
     return await reprove_empty_read(
         conn,
@@ -141,6 +164,7 @@ async def test_genuinely_empty_read_stays_empty_and_is_silent() -> None:
     assert await _reprove(conn) is None
     assert events == []
     assert "RESET SESSION AUTHORIZATION" in conn.log
+    assert conn.transaction_modes == [True]
     assert "RESET ROLE" in conn.log
     reset_contamination_sinks()
 
@@ -272,6 +296,7 @@ async def test_anything_the_probe_cannot_prove_takes_the_full_reproof(probe) ->
 
     assert rows == [{"id": "a"}]
     assert "RESET ROLE" in conn.log
+    assert conn.transaction_modes == [True]
     assert len(events) == 1
     reset_contamination_sinks()