parad 2.2.0__tar.gz → 2.2.2__tar.gz

{parad-2.2.0 → parad-2.2.2}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: parad
-Version: 2.2.0
+Version: 2.2.2
 Summary: Drop-in encrypted database with cloud sync — connect() and go
 Author-email: nexuss0781 <nexuss0781@gmail.com>
 Project-URL: Homepage, https://github.com/nexuss0781/Paradox-DB

{parad-2.2.0 → parad-2.2.2}/parad/__init__.py

@@ -1,8 +1,8 @@
 """parad — Encrypted local-first SQLite with cloud sync."""
 
-from parad.connection import connect, ParadConnection, parse_url, generate_url, db_state_key
+from parad.connection import connect, ParadConnection, parse_url, generate_url, db_state_key, generate_passphrase
 from parad.engine import Engine
 from parad.config import load_config, get_passphrase, get_connection_url
 
-__version__ = "2.2.0"
-__all__ = ["connect", "ParadConnection", "parse_url", "generate_url", "db_state_key", "Engine", "load_config"]
+__version__ = "2.2.2"
+__all__ = ["connect", "ParadConnection", "parse_url", "generate_url", "db_state_key", "generate_passphrase", "Engine", "load_config"]

{parad-2.2.0 → parad-2.2.2}/parad/connection.py

@@ -665,6 +665,11 @@ class ParadConnection:
 # ── Convenience factory ─────────────────────────────────────────
 
 
+def generate_passphrase() -> str:
+    """Generate a cryptographically random 256-bit database passphrase."""
+    return secrets.token_urlsafe(32)
+
+
 def _announce_passphrase(passphrase: str, db_path: str) -> None:
     """Print a newly generated passphrase once and persist it in ~/.paradox/.env."""
     msg = (
@@ -703,6 +708,7 @@ def connect(
     pull_on_startup: bool = False,
     storage_channel: str | None = None,
     log_channel: str | None = None,
+    allow_legacy_default: bool = False,
 ) -> ParadConnection:
     """Connect to a Parad database.
 
@@ -776,15 +782,21 @@ def connect(
         # on other machines. Never auto-generate for an existing DB file —
         # that keeps legacy 'default'-encrypted databases readable.
         if not os.path.exists(resolved_path):
-            resolved_passphrase = secrets.token_urlsafe(32)
+            resolved_passphrase = generate_passphrase()
             try:
                 set_config_value("encryption.passphrase", resolved_passphrase)
             except Exception:
                 pass
             _announce_passphrase(resolved_passphrase, resolved_path)
             cfg = load_config()
-        else:
+        elif allow_legacy_default:
             resolved_passphrase = "default"
+        else:
+            raise ValueError(
+                f"No passphrase configured for existing database '{resolved_path}'. "
+                "Set PARADOX_PASSPHRASE or passphrase explicitly. "
+                "Use allow_legacy_default=True only for legacy databases encrypted with 'default'."
+            )
 
     # ── resolve gateway_url ─────────────────────────────────────
     resolved_gateway = gateway_url

{parad-2.2.0 → parad-2.2.2}/parad.egg-info/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: parad
-Version: 2.2.0
+Version: 2.2.2
 Summary: Drop-in encrypted database with cloud sync — connect() and go
 Author-email: nexuss0781 <nexuss0781@gmail.com>
 Project-URL: Homepage, https://github.com/nexuss0781/Paradox-DB

{parad-2.2.0 → parad-2.2.2}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "setuptools.build_meta"
 
 [project]
 name = "parad"
-version = "2.2.0"
+version = "2.2.2"
 description = "Drop-in encrypted database with cloud sync — connect() and go"
 readme = "README.md"
 requires-python = ">=3.10"