matrx-orm 3.1.258__tar.gz → 3.1.259__tar.gz

{matrx_orm-3.1.258 → matrx_orm-3.1.259}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.5
 Name: matrx-orm
-Version: 3.1.258
+Version: 3.1.259
 Summary: Async-first PostgreSQL ORM with bidirectional migrations, schema introspection, many-to-many relationships, and built-in state caching
 Project-URL: Homepage, https://github.com/AI-Matrix-Engine/aidream-current
 Project-URL: Repository, https://github.com/AI-Matrix-Engine/aidream-current

{matrx_orm-3.1.258 → matrx_orm-3.1.259}/matrx_orm/secrets_battery/FEATURE.md

@@ -109,7 +109,7 @@ soft, atomic across item + fields + grants) · `add_credential_field` ·
 · `set_item_grants` · `list_granted_credential_items` ·
 `transfer_credential_item` (owner flip, no value copy, references survive) ·
 `fork_credential_item` (independent copy) · `resolve_legacy_env_key` (compat
-read that SCREAMS in logs until call sites migrate to stable references).
+read that SCREAMS in logs for legacy env-key access).
 
 Attachment surface (`attachments.py`): add/list/get/update metadata/replace/
 soft-delete; `reveal_credential_attachment` is the audited human download and
@@ -368,7 +368,7 @@ contributed org copies show `out_of_sync` afterward (cosmetic).
   (`totp_seed`, extend via `register_non_transferable_field_key`) are retired —
   soft-deleted, deactivated, audited — inside the transfer transaction, and are
   never copied by a fork; `TransferResult.fields_not_transferred` names them so
-  the confirmation can say the seed did not travel (D-15). 🚨 This is
+  the confirmation can say the seed did not travel. This is
   deliberately NOT "every sealed field": a sealed OAuth refresh token exists to
   move with the item it authenticates, and retiring those would break live
   integrations silently.

{matrx_orm-3.1.258 → matrx_orm-3.1.259}/pyproject.toml

@@ -1,6 +1,6 @@
 [project]
 name = "matrx-orm"
-version = "3.1.258"
+version = "3.1.259"
 description = "Async-first PostgreSQL ORM with bidirectional migrations, schema introspection, many-to-many relationships, and built-in state caching"
 readme = "README.md"
 license = { text = "MIT" }

{matrx_orm-3.1.258 → matrx_orm-3.1.259}/tests/test_native_enable.py

@@ -278,3 +278,21 @@ async def test_organization_enable_retains_exact_owner_equality(_primitive_bound
             actor_id="actor", audit_organization_id="org",
         )
     assert _primitive_boundary[0].calls == _primitive_boundary[1].calls == []
+
+
+@pytest.mark.asyncio
+@pytest.mark.parametrize("breakage", ["source_parent", "metadata_parent", "metadata_source"])
+async def test_enable_refuses_wrong_native_component_linkage(_primitive_boundary, breakage):
+    parent, fields, metadata = _aggregate()
+    if breakage == "source_parent":
+        fields[0]["credential_item_id"] = "00000000-0000-4000-8000-000000000099"
+    elif breakage == "metadata_parent":
+        metadata[0]["credential_item_id"] = "00000000-0000-4000-8000-000000000099"
+    else:
+        metadata[0]["source_field_id"] = "00000000-0000-4000-8000-000000000099"
+    with pytest.raises(CredentialRestoreConflictError):
+        await native_enable.enable_native_passkey(
+            parent, fields, [], metadata, deletion_id=DELETION,
+            actor_id="actor", audit_organization_id="org",
+        )
+    assert _primitive_boundary[0].calls == _primitive_boundary[1].calls == []