Repository navigation

feat(python): the Python SDK, stackencrypt - #1284

Open

yujiyokoo wants to merge 109 commits into

nextfrom

feat/python-sdk-tracer-adr

Open

feat(python): the Python SDK, stackencrypt#1284
yujiyokoo wants to merge 109 commits into
nextfrom
feat/python-sdk-tracer-adr

Commits on Nov 13, 2026
- docs(python): findings and ledger from the first tracer attempt
  yujiyokoo
  committed
  d2707a7
- docs(python): ADR-0001, the declaration is checked when the class is defined
  
  yujiyokoo
  and
  claude
  committed
  8112223
- docs(python): ADR-0001 fixes
  
  yujiyokoo
  and
  claude
  committed
  1a52ddb
- docs(python): revise ADR-0001 for the review and the next branch
  
  yujiyokoo
  and
  claude
  committed
  aea2888
- docs(python): count the producible EQL types as next has them today
  
  yujiyokoo
  and
  claude
  committed
  931dd37
- docs(python): close the review threads on ADR-0001
  
  yujiyokoo
  and
  claude
  committed
  f7979e7
- docs(python): amend ADR-0001 from the spec review
  
  yujiyokoo
  and
  claude
  committed
  21b7853
- feat(python): walking skeleton for the Python SDK (#1382)
  
  yujiyokoo
  and
  claude
  committed
  f22603c
- fix(python): mark the engine dirty for any stack-* edit, and trim the comments
  
  yujiyokoo
  and
  claude
  committed
  4f0ee8a
- fix(python): address the first review of the walking skeleton
  
  yujiyokoo
  and
  claude
  committed
  b563176
- fix(python): resolve the workspace lockfile against vitaminc 0.8
  
  yujiyokoo
  and
  claude
  committed
  2ecc794
- feat(ci): tests-python.yml for the Python SDK workspace (#1383)
  
  yujiyokoo
  and
  claude
  committed
  f5b1a3d
- fix(ci): address the review of tests-python.yml (#1383)
  
  yujiyokoo
  and
  claude
  committed
  4bb2953
- fix(ci): hand the engine commit to the container wheel builds (#1383)
  
  yujiyokoo
  and
  claude
  committed
  f071f04
- fix(ci): address the second review of tests-python.yml (#1383)
  
  yujiyokoo
  and
  claude
  committed
  94f236b
- test(python): verify the two engine facts the spec depends on (#1384)
  
  yujiyokoo
  and
  claude
  committed
  d4cbdc3
- docs(python): use lower_snake_case error codes in frame-reader.md (#1384)
  
  yujiyokoo
  and
  claude
  committed
  26e9bec
- feat(python): generate the EQL type markers from the catalog (#1385)
  
  yujiyokoo
  and
  claude
  committed
  3dbba4a
- fix(python): address the review of the generated EQL markers (#1385)
  
  yujiyokoo
  and
  claude
  committed
  f236a42
- feat(python): read a model's declaration and check rule A (#1386)
  
  yujiyokoo
  and
  claude
  committed
  f78c05c
- refactor(python): use lower_snake_case error codes and reasons (#1386)
  
  yujiyokoo
  and
  claude
  committed
  dc0ebf2
- feat(python): check what a declaration means (#1387)
  
  yujiyokoo
  and
  claude
  committed
  f4c4f83
- fix(python): address the review of the declaration checks (#1387)
  
  yujiyokoo
  and
  claude
  committed
  8684edb
- feat(python): redact declared classes and build a Cipher (#1388)
  
  yujiyokoo
  and
  claude
  committed
  1ed99c3
- fix(python): address the reviews of redaction and Cipher (#1388)
  
  yujiyokoo
  and
  claude
  committed
  a580e2c
- feat(python): redact declared classes and build a Cipher (#1388)
  
  yujiyokoo
  and
  claude
  committed
  306ab5f
- feat(python): encrypt models into EQL v4 rows (#1389)
  
  yujiyokoo
  and
  claude
  committed
  db749a1
- fix(python): address the review of encrypt (#1389)
  
  yujiyokoo
  and
  claude
  committed
  d448064
- fix(python): write a passthrough value as a plain scalar (#1389)
  
  yujiyokoo
  and
  claude
  committed
  815c0fa
- feat(python): decrypt rows back into models (#1390)
  
  yujiyokoo
  and
  claude
  committed
  125a655
- fix(python): address the review of decrypt (#1390)
  
  yujiyokoo
  and
  claude
  committed
  4705ec6
- fix(python): encode a str column value once, and share untouched (#1390)
  
  yujiyokoo
  and
  claude
  committed
  272c6e9
- test(python): name the target of the ignored SQLAlchemy relationship (#1390)
  
  yujiyokoo
  and
  claude
  committed
  d5a5c4b
- docs(python): record that Ignore does not work on a SQLAlchemy collection (#1390)
  
  yujiyokoo
  and
  claude
  committed
  ca8e429
- feat(python): query an equality term (#1391)
  
  yujiyokoo
  and
  claude
  committed
  e877db5
- fix(python): refuse a query on a field with no eq index (#1391)
  yujiyokoo
  committed
  5430df0
- feat(python): value rules for every producible type (#1392)
  
  yujiyokoo
  and
  claude
  committed
  9e47677
- fix(python): address the review of the value rules (#1392)
  
  yujiyokoo
  and
  claude
  committed
  dc5977a
- fix(python): derive fuzz.yml's path filter from the fuzz locks (#1392)
  
  yujiyokoo
  and
  claude
  committed
  b57646f
- test(python): read the fuzz crates' compiled files with the shared walk (#1392)
  
  yujiyokoo
  and
  claude
  committed
  94ece28
- fix(python): leave the copied value corpus out of Biome (#1392)
  
  yujiyokoo
  and
  claude
  committed
  a6ba223
- feat(python): parity with the Go SDK's rows, and heap hygiene (#1393)
  
  yujiyokoo
  and
  claude
  committed
  6175365
- fix(python): address the review of parity and heap hygiene (#1393)
  
  yujiyokoo
  and
  claude
  committed
  49f4747
- fix(python): wipe opened numbers, and close the switch race (#1393)
  
  yujiyokoo
  and
  claude
  committed
  4d6400a
- fix(python): one client switch, and no plaintext moved out of a row (#1393)
  
  yujiyokoo
  and
  claude
  committed
  079626b
- fix(python): take the datetime refusal's cause from to_python (#1393)
  
  yujiyokoo
  and
  claude
  committed
  ea4c96b
- feat(python): test the shared client from several threads (#1394)
  
  yujiyokoo
  and
  claude
  committed
  32e71f1
- test(python): share the sync contract helpers, and time the interrupt (#1394)
  
  yujiyokoo
  and
  claude
  committed
  dbe9a71
- test(python): count ZeroKMS requests by endpoint (#1394)
  
  yujiyokoo
  and
  claude
  committed
  6fc9550
- docs(python): complete the README, test it, and score the SDK (#1395)
  
  yujiyokoo
  and
  claude
  committed
  fda6b53
- chore(python): lock the test dependencies with uv.lock
  
  yujiyokoo
  and
  claude
  committed
  6a8008a
- docs(python): say that Dependabot groups the test updates
  
  yujiyokoo
  and
  claude
  committed
  fa09562
- feat(python): add a customer directory example
  
  yujiyokoo
  and
  claude
  committed
  733ccf9
- feat(python): add a SQLAlchemy version of the customer directory
  
  yujiyokoo
  and
  claude
  committed
  306f770
- docs(python): record one method for each query operator
  
  yujiyokoo
  and
  claude
  committed
  546c2ba
- feat(python): one query method for each order operator
  
  yujiyokoo
  and
  claude
  committed
  f37e072
- docs(python): between waits for the engine
  
  yujiyokoo
  and
  claude
  committed
  0f75eb2
- feat(python): match search with matches, verify and target_limit
  
  yujiyokoo
  and
  claude
  committed
  4b0dee1
- test(python): heap hygiene covers verify
  
  yujiyokoo
  and
  claude
  committed
  6fbefb9
- feat(python): encrypt_rows for rows that contain only some fields
  
  yujiyokoo
  and
  claude
  committed
  e2bd3a0
- feat(python): decrypt_rows, the reverse of encrypt_rows
  
  yujiyokoo
  and
  claude
  committed
  338e333
- feat(python): configure_encryption for the SQLAlchemy ORM
  
  yujiyokoo
  and
  claude
  committed
  0b011f4
- feat(python): search encrypted columns through the SQLAlchemy ORM
  
  yujiyokoo
  and
  claude
  committed
  de617f5
- feat(python): Alembic migrations for encrypted columns and their indexes
  
  yujiyokoo
  and
  claude
  committed
  84c004e
- refactor(python): the SQLAlchemy example uses configure_encryption
  
  yujiyokoo
  and
  claude
  committed
  1190fbd
- feat(python): !=, in_ and passthrough checks in the SQLAlchemy layer
  
  yujiyokoo
  and
  claude
  committed
  ce71efd
- feat(python): a declared index replaces the SDK's; refuse unique EQL columns
  
  yujiyokoo
  and
  claude
  committed
  1f14ce1
- docs(python): record the SQLAlchemy layer's design in ADR-0004
  
  yujiyokoo
  and
  claude
  committed
  e563a6d
- feat(python): decrypt the encrypted columns of a session query
  
  yujiyokoo
  and
  claude
  committed
  f88719f
- feat(python): match search through the SQLAlchemy ORM
  
  yujiyokoo
  and
  claude
  committed
  1d82ecb
- docs(python): scorecard G6 covers the SQLAlchemy layer
  
  yujiyokoo
  and
  claude
  committed
  5694c4d
- feat(python): a field declared Optional stores None as SQL NULL
  
  yujiyokoo
  and
  claude
  committed
  93c3afa
- feat(python): an or_ of match searches through the SQLAlchemy ORM
  
  yujiyokoo
  and
  claude
  committed
  768f5d3
- fix(python): an or_ of matches across an outer join no longer crashes
  
  yujiyokoo
  and
  claude
  committed
  5e8def4
- fix(python): sort encrypted columns by their order term
  
  yujiyokoo
  and
  claude
  committed
  d87bc86
- feat(python): a SQLAlchemy relationship needs no marker
  
  yujiyokoo
  and
  claude
  committed
  b5993cf
- fix(python): rewrite ORDER BY in an ORM select run on a connection
  
  yujiyokoo
  and
  claude
  committed
  19a9d6a
- fix(python): sort by the order term in aliases and subqueries
  
  yujiyokoo
  and
  claude
  committed
  5016066
- fix(python): sort a labelled encrypted column by its order term
  
  yujiyokoo
  and
  claude
  committed
  d846c2e
- fix(python): sort a column named by a string by its order term
  
  yujiyokoo
  and
  claude
  committed
  30b15f8
- fix(python): a plaintext label hides an encrypted column in ORDER BY
  
  yujiyokoo
  and
  claude
  committed
  d4c1e60
- feat(python)!: configure_encryption covers every engine in a process
  
  yujiyokoo
  and
  claude
  committed
  687fe15
- fix(python): refuse an encrypted column inside a UniqueConstraint
  
  yujiyokoo
  and
  claude
  committed
  c2f2bb5
- test(python): run the SQLAlchemy tests with no profile and a keyword DSN
  
  yujiyokoo
  and
  claude
  committed
  59e8659
- fix(python): cover Value::Null in the value_frame fuzz target
  yujiyokoo
  committed
  7fcaff6
- fix(python): keep the test key source out of wheels, and tighten CI
  
  yujiyokoo
  and
  claude
  committed
  980cb29
- fix(python): refuse hand-written methods and read declarations correctly
  
  yujiyokoo
  and
  claude
  committed
  4a7cc24
- fix(python): give encrypt and decrypt the right error for each bad input
  
  yujiyokoo
  and
  claude
  committed
  7043009
- test(python): cover the paths the review found without a test
  
  yujiyokoo
  and
  claude
  committed
  46f3365
- fix(python): small fixes from the review, with tighter tests
  
  yujiyokoo
  and
  claude
  committed
  98a41f9
- fix(python): say how to fix a bare ClassVar on Python 3.9
  
  yujiyokoo
  and
  claude
  committed
  c917a7c
- fix(python): build a new engine client in a forked child
  
  yujiyokoo
  and
  claude
  committed
  1ae877b
- fix(python): refuse a forked child the client its parent built
  
  yujiyokoo
  and
  claude
  committed
  c7593a3
- fix(python): resolve the root workspace's vitaminc, and test that it stays so
  
  yujiyokoo
  and
  claude
  committed
  12aad08
- ci(python): give the CS_* credentials to the live test step alone
  
  yujiyokoo
  and
  claude
  committed
  14576a2
- fix(python): let the fuzz seeds reach the value frame read check
  
  yujiyokoo
  and
  claude
  committed
  fa6f259
- docs(python): add the customer directory example's findings
  
  yujiyokoo
  and
  claude
  committed
  d20d8dc
- docs(python): say which decrypt errors do not name the row
  
  yujiyokoo
  and
  claude
  committed
  2733f59
- refactor(python): read the endpoint and client key with the engine's own code
  
  yujiyokoo
  and
  claude
  committed
  7943fd0
- build(python): lock maturin, and build with the locked copy
  
  yujiyokoo
  and
  claude
  committed
  3b4e6ab
- chore(ci): say that Dependabot updates the locked maturin
  
  yujiyokoo
  and
  claude
  committed
  0c51f59
- fix(python): clearer refusal messages, and seal Pydantic's other print hooks
  
  yujiyokoo
  and
  claude
  committed
  df241a8
- test(python): pin the value numbers, the commit rules, and the generator guards
  
  yujiyokoo
  and
  claude
  committed
  f75009f
- test(python): close the gaps the review marked low
  
  yujiyokoo
  and
  claude
  committed
  2d15f20
- ci(python): cache both workspaces in one step, and check two more steps
  
  yujiyokoo
  and
  claude
  committed
  fed21a2
- docs(python): close the example's first four findings
  
  yujiyokoo
  and
  claude
  committed
  6691f7d
- fix(python): close the review findings on #1635
  
  yujiyokoo
  and
  claude
  committed
  f4318ee
- fix(python): close the review findings on #1622
  
  yujiyokoo
  and
  claude
  committed
  732d755
- fix(python): build and pass the tests on next
  
  yujiyokoo
  and
  claude
  committed
  24cd35f

Commits

Commits on Nov 13, 2026