weightsdb 0.2.0__tar.gz → 0.2.1__tar.gz

{weightsdb-0.2.0 → weightsdb-0.2.1}/CHANGELOG.md

@@ -7,12 +7,16 @@ packaging and release standards §3.
 
 ## [Unreleased]
 
-### Fixed
-- **Coverage fell below the 95 % floor on Python 3.12 (94.89 %).** The uncovered lines were real
-  gaps, not measurement noise: `upsert`'s documented refusal of a third dialect, the `StorageBusy`
-  translation on a *read-only* `BEGIN`, `temporary_postgres`'s `WEIGHTSDB_REQUIRE_POSTGRES=1`
-  failure path, longest-prefix mount selection against an unsorted mount table, and two backups
-  sharing an mtime. Each now has a test; the floor is met on 3.12, 3.13 and 3.14 with margin.
+## [0.2.1] — 2026-08-31
+
+### Added
+- **SQLite connections now set `PRAGMA secure_delete=ON`** alongside the existing per-connection
+  pragmas. `secure_delete` defaults to whatever the host's SQLite build chose, so whether a
+  deleted row's content was actually overwritten on disk varied by machine — and a consumer's
+  retention scrub is a promise about the disk, not about the schema (the M4 handoff's
+  "WeightsDB 0.2.1" item, raised by LoadCoach's retention verification). The pragma is applied
+  by the same `connect` listener as the rest, so a pool reconnect keeps it, and the test observes
+  it on a live connection rather than trusting the connect string.
 
 ## [0.2.0] — 2026-08-29
 
@@ -34,6 +38,14 @@ packaging and release standards §3.
 - SQLite lock contention beyond `busy_timeout` now raises the typed `StorageBusy` instead of a raw
   `sqlalchemy.exc.OperationalError` — a gap in the code this package was extracted from, invisible
   with one consumer and no test for it.
+- `database_health()` no longer conflates a database *ahead of head* with a *pending migration*:
+  any `current != head` read as "pending migration", which is actively misleading when the
+  database was written by a newer build. Phase 3's own test list names the two as distinct cases.
+- **Coverage fell below the 95 % floor on Python 3.12 (94.89 %).** The uncovered lines were real
+  gaps, not measurement noise: `upsert`'s documented refusal of a third dialect, the `StorageBusy`
+  translation on a *read-only* `BEGIN`, `temporary_postgres`'s `WEIGHTSDB_REQUIRE_POSTGRES=1`
+  failure path, longest-prefix mount selection against an unsorted mount table, and two backups
+  sharing an mtime. Each now has a test; the floor is met on 3.12, 3.13 and 3.14 with margin.
 - **`psycopg[binary]` is now part of the `dev` extra.** Seventeen tests assert dialect-specific
   behaviour by building a `postgresql://` engine — no server involved — which SQLAlchemy cannot do
   without an importable DBAPI. Every environment that installed `[dev]` alone failed them with

{weightsdb-0.2.0 → weightsdb-0.2.1}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.5
 Name: weightsdb
-Version: 0.2.0
+Version: 0.2.1
 Summary: Shared SQLAlchemy + Alembic plumbing: engines, sessions, pragmas, migrations, backup and health. No application table, no shared schema.
 Project-URL: Homepage, https://github.com/JPKell/WeightsDB
 Project-URL: Documentation, https://github.com/JPKell/WeightsDB/tree/main/docs

{weightsdb-0.2.0 → weightsdb-0.2.1}/docs/packages/weightsdb/development-plan.md

@@ -1,7 +1,7 @@
 # WeightsDB — Development Plan
 
 **Sequence position:** extracted during **LoadCoach Phase 1**, from FreeWeight's in-application
-storage layer. Not built speculatively (ADR-0011).
+storage layer. Not built speculatively ([ADR-0011](../../adr/0011-shared-package-boundaries.md)).
 **Target:** `weightsdb 0.2.0` by the end of Phase 3; FreeWeight adopts it in FreeWeight Phase 12.
 
 **Precondition for starting:** FreeWeight is shipping with a working `freeweight.infrastructure.db`
@@ -26,7 +26,7 @@ identical (not yet swapped).
 * `upsert(session, model, values, *, index_elements)` — the suite's one sanctioned
   `INSERT … ON CONFLICT DO UPDATE`, because select-then-insert is a race under both dialects and a
   hand-written clause is how a dialect-specific variant gets in
-  (ADR-0006).
+  ([ADR-0006](../../adr/0006-sqlite-and-postgresql-roles.md)).
 * Errors: `DatabaseUnavailable`, `StorageBusy`, `SchemaAhead`, `MigrationRequired`,
   `MigrationFailed`.
 * Credential redaction helper used by every error and log path.

{weightsdb-0.2.0 → weightsdb-0.2.1}/docs/packages/weightsdb/spec.md

@@ -2,8 +2,8 @@
 
 **Type:** Python package · **Import/distribution name:** `weightsdb` · **Layer:** 3 (capability package)
 **Status:** Specified, not implemented. **Extraction timing:** LoadCoach Phase 1, from FreeWeight's
-`freeweight.infrastructure.db` (ADR-0011).
-**Decision records:** ADR-0005, ADR-0006.
+`freeweight.infrastructure.db` ([ADR-0011](../../adr/0011-shared-package-boundaries.md)).
+**Decision records:** [ADR-0005](../../adr/0005-database-strategy.md), [ADR-0006](../../adr/0006-sqlite-and-postgresql-roles.md).
 
 ---
 
@@ -40,7 +40,7 @@ mechanics are shared.
 | Responsibility | Detail |
 |---|---|
 | Engine | `create_engine_for(url, …)` applying dialect-correct settings and pooling |
-| SQLite settings | `foreign_keys=ON`, `journal_mode=WAL`, `busy_timeout`, `synchronous=NORMAL`, applied per connection |
+| SQLite settings | `foreign_keys=ON`, `journal_mode=WAL`, `busy_timeout`, `synchronous=NORMAL`, `secure_delete=ON`, applied per connection |
 | PostgreSQL settings | `statement_timeout`, `lock_timeout`, application name, schema selection |
 | Sessions | `session_factory`, `session_scope()` context manager with commit/rollback semantics |
 | Transactions | `transaction(session)` including `BEGIN IMMEDIATE` on SQLite |
@@ -262,4 +262,4 @@ Coverage floor: **95 %**.
 * Query-plan assertion helpers for tests (`assert_uses_index`), currently duplicated in applications.
 * Retention/pruning helpers for high-volume tables (samples, telemetry, events).
 * Optional DuckDB analytics attachment for FreeWeight, if the aggregate budgets are ever missed
-  (ADR-0006 revisit trigger).
+  ([ADR-0006](../../adr/0006-sqlite-and-postgresql-roles.md) revisit trigger).

weightsdb-0.2.1/src/weightsdb/__about__.py

@@ -0,0 +1 @@
+__version__ = "0.2.1"

{weightsdb-0.2.0 → weightsdb-0.2.1}/src/weightsdb/engine.py

@@ -1,7 +1,8 @@
 """weightsdb.engine — dialect-correct engine construction.
 
 Database standards §2: SQLite gets ``foreign_keys=ON``, ``journal_mode=WAL``, ``busy_timeout``,
-``synchronous=NORMAL``, applied per connection so a pool reconnect never silently loses them;
+``synchronous=NORMAL``, ``secure_delete=ON``, applied per connection so a pool reconnect never
+silently loses them;
 PostgreSQL gets ``statement_timeout``, ``lock_timeout`` and ``application_name``. Only these two
 dialects are supported (§2) — a third requires an ADR, not a code change here.
 
@@ -168,6 +169,11 @@ def _configure_sqlite(engine: Engine, *, busy_timeout_ms: int) -> None:
             cursor.execute("PRAGMA journal_mode=WAL")
             cursor.execute(f"PRAGMA busy_timeout={int(busy_timeout_ms)}")
             cursor.execute("PRAGMA synchronous=NORMAL")
+            # secure_delete defaults to whatever the host's SQLite build chose, so whether a
+            # deleted row's content is actually overwritten on disk would otherwise vary by
+            # machine — and a consumer's retention scrub is a promise about the disk, not about
+            # the schema. Set explicitly so the scrub means the same thing everywhere.
+            cursor.execute("PRAGMA secure_delete=ON")
         finally:
             cursor.close()
 

{weightsdb-0.2.0 → weightsdb-0.2.1}/tests/integration/test_migrations.py

@@ -32,6 +32,26 @@ def test_fresh_database_migrates_to_head_sqlite() -> None:
         assert columns == {"id", "name", "note"}
 
 
+def test_the_default_version_table_name_is_a_contract() -> None:
+    """The revision lives in ``alembic_version`` unless a consumer says otherwise.
+
+    Both applications' shipped databases record their revision under the default name
+    (FreeWeight P12's named failure mode): a changed default would make every existing consumer
+    database look unmigrated — so the default is pinned here, in WeightsDB itself, not only in
+    its consumers' suites.
+    """
+    with temporary_sqlite() as engine:
+        MigrationRunner(engine, script_location=_SCRIPT_LOCATION).upgrade(backup=False)
+        with engine.connect() as connection:
+            tables = {
+                row[0]
+                for row in connection.execute(
+                    text("SELECT name FROM sqlite_master WHERE type='table'")
+                )
+            }
+    assert "alembic_version" in tables
+
+
 def test_fresh_database_migrates_to_head_postgres() -> None:
     with temporary_postgres() as engine:
         runner = MigrationRunner(engine, script_location=_SCRIPT_LOCATION)

{weightsdb-0.2.0 → weightsdb-0.2.1}/tests/unit/test_engine.py

@@ -30,6 +30,19 @@ def test_sqlite_pragmas_applied_on_fresh_connection() -> None:
     assert pragmas["journal_mode"] == "wal"
 
 
+def test_sqlite_secure_delete_is_on_for_every_connection() -> None:
+    """A retention scrub must mean the same thing on every machine.
+
+    ``secure_delete`` defaults to whatever the host's SQLite build chose, so whether deleted
+    content is actually overwritten on disk would otherwise vary by machine (the M4 handoff's
+    WeightsDB 0.2.1 item). Observed on a live connection, not trusted from the connect string.
+    """
+    with temporary_sqlite() as engine:
+        with engine.connect() as connection:
+            secure_delete = connection.execute(text("PRAGMA secure_delete")).scalar_one()
+    assert secure_delete == 1
+
+
 def test_sqlite_pragmas_applied_after_forced_reconnect() -> None:
     """A pool recycle must not silently drop the pragmas (spec §7, §11.1)."""
     with temporary_sqlite() as engine:
@@ -44,8 +57,10 @@ def test_sqlite_pragmas_applied_after_forced_reconnect() -> None:
             connection.rollback()
             foreign_keys = connection.execute(text("PRAGMA foreign_keys")).scalar_one()
             journal_mode = connection.execute(text("PRAGMA journal_mode")).scalar_one()
+            secure_delete = connection.execute(text("PRAGMA secure_delete")).scalar_one()
     assert foreign_keys == 1
     assert journal_mode == "wal"
+    assert secure_delete == 1
 
 
 def test_sqlite_busy_timeout_raises_storage_busy() -> None:
@@ -202,6 +217,7 @@ def test_sqlite_connect_listener_hands_transaction_control_to_sqlalchemy() -> No
         "PRAGMA journal_mode=WAL",
         "PRAGMA busy_timeout=5000",
         "PRAGMA synchronous=NORMAL",
+        "PRAGMA secure_delete=ON",
     ]
 
 

weightsdb-0.2.0/src/weightsdb/__about__.py

@@ -1 +0,0 @@
-__version__ = "0.2.0"