seerdb

A pure-Python driver for a proprietary database, implementing the DB-API 2.0 interface by speaking the database's native wire protocol (TNS/TTC) directly over TCP.

No proprietary client libraries or SDKs are required.

Independent project — not affiliated with Oracle. seerdb is a clean-room, independent effort and is not affiliated with, endorsed by, or sponsored by Oracle Corporation. Oracle®, Oracle Database, and related names are trademarks of Oracle and/or its affiliates. seerdb reimplements the wire protocol for interoperability only.

Status

seerdb is a functional pure-Python driver: the core DB-API 2.0 and SQL surface is stable, and it already covers async connection pooling, server-side scrollable cursors, 23ai types (JSON / BOOLEAN / VECTOR), and the SODA document store. It is usable for the features listed below; the feature matrix spells out what is and isn't supported.

The wire protocol is reverse-engineered and implemented incrementally as a clean-room effort — see CONTRIBUTING.md for the rules contributors are expected to follow (no Oracle proprietary sources, no decompiled binaries, no copied error-message catalogs; public references and packet captures are fine).

The repository also contains the Mirror (seerdb.server) — an experimental server side of the same wire protocol, which makes a non-Oracle backend (PostgreSQL, SQLite, or a real Oracle) answer Oracle clients such as sqlplus or a thin driver. It is a development / reference component: unstable, unversioned, and not part of the published package — the PyPI distribution is the client driver only. See the examples/mirror_over_*.py launchers; its wire details live in docs/PROTOCOL.md. Everything below describes the client.

What works:

• TNS transport layer (packet framing, fragmentation, SDU negotiation)
• TTC presentation layer (token encoding/decoding)
• Authentication handshake (O3LOGON, O5LOGON with 128/192/256-bit keys)
• Token-based authentication: pass access_token= instead of a password to authenticate with an OAuth2 bearer JWT or an OCI IAM token (for Autonomous Database). Accepts a token str, a (token, private_key_pem) tuple (IAM signs the request header with RSA-SHA256), or a zero-arg callable returning either — so a short-lived token can be refreshed per connection. Sync and async. Needs the token extra — pip install seerdb[token]
• Session setup and teardown
• SQL statement execution, full result-set decoding (DCB / RXH / RXD / BVC)
• DB-API 2.0 surface: seerdb.connect(), Connection.cursor(), Cursor.execute / fetchone / fetchmany / fetchall / description / rowcount, iteration protocol, context managers, PEP 249 exception hierarchy
• DB-API conveniences: Connection.stmtcachesize (read/write statement- cache size), Connection.version (server release string, e.g. "11.2.0.2.0"), Cursor.rowfactory (callable applied to each fetched row, invoked with the column values as positional arguments), and Cursor.lastrowid (ROWID of the last row an INSERT / UPDATE / DELETE touched). Sync and async
• Scrollable cursors: open with conn.cursor(scrollable=True), then Cursor.scroll(value, mode) with mode in relative / absolute / first / last repositions the cursor and the next fetchone() returns the row at the new position (out-of-range raises IndexError). On 10g+ the cursor is opened server-side and rows are fetched on demand as you scroll; pre-10g (9i, 8i) uses a client-buffered fallback. Sync and async
• Bind variables: cur.execute(sql, [v1, v2]) (positional) or cur.execute(sql, {"name": v}) (named, :name placeholders, case- insensitive). A name the plain form cannot express — a reserved word, or one starting with a digit — can be quoted as :"name", which unlike the plain form is case-sensitive and is keyed with the quotes included: {'"name"': v}. A bind whose value cannot say what type it is — a None — takes its type from cur.setinputsizes(name=seerdb.DB_TYPE_DATE) (or positionally, or with a Python type); without that the server infers CHAR and rejects the comparison. The declaration applies to the next execute only. Accepted bind types are int, float, Decimal, str, bytes, bool, datetime.date / datetime (with optional timezone and microseconds), datetime.timedelta (→ INTERVAL DAY TO SECOND), seerdb.IntervalYM(years, months) (→ INTERVAL YEAR TO MONTH), and None. A plain float binds as NUMBER; wrap it in seerdb.BinaryFloat(x) / seerdb.BinaryDouble(x) to send a native 32/64-bit IEEE-754 binary float (the only way to bind inf / nan, which a non-finite plain float also auto-routes to BINARY_DOUBLE). str and bytes binds round-trip into CLOB / BLOB columns at any size: a value larger than the regular ~32 KiB ceiling is streamed to the server across multiple TNS packets (tested byte-for-byte to hundreds of KiB on both 11g and 12c+)
• Anonymous PL/SQL blocks with bind variables: cur.execute("BEGIN ... :x ...; END;", [val]) runs the block server-side
• Stored procedures and OUT / IN OUT binds: cur.callproc(name, [in_val, out_var, ...]) where an OUT / IN OUT argument is a cur.var(type) (type is a Python type or an seerdb constant like seerdb.NUMBER / seerdb.STRING / seerdb.DB_TYPE_TIMESTAMP / seerdb.DB_TYPE_TIMESTAMP_TZ / seerdb.DB_TYPE_BINARY_FLOAT / seerdb.DB_TYPE_BINARY_DOUBLE / seerdb.DB_TYPE_INTERVAL_DS / seerdb.DB_TYPE_INTERVAL_YM). Seed an IN OUT value with var.setvalue(0, v); read results with var.getvalue(), which gives back the Python type the var was created with — a var(float) reads as a float even though a NUMBER column can also be read as an int or a Decimal. callproc returns the argument list with OUT slots replaced by their values. OUT binds also work through cur.execute directly (pass a Var). Stored functions: cur.callfunc(name, return_type, [args...]) returns the function's value (return_type is a Python type or seerdb constant). A REF CURSOR OUT parameter is a cur.var(seerdb.CURSOR); after the call var.getvalue() is a ready-to-fetch nested cursor. Available on both the sync and async cursors
• Array DML: cur.executemany(sql, [row1, row2, ...]) binds every row and executes the whole batch in a single server round trip (one parse, N iterations) instead of one execute per row; cursor.rowcount reflects the total rows affected. Column types are taken from the first row. Sync and async
• Python type coercion for fetched values: NUMBER → int / Decimal, VARCHAR2 / CHAR → str (charset-aware), DATE / TIMESTAMP / TIMESTAMP WITH TIME ZONE → datetime.datetime (a named-region zone, e.g. US/Eastern, resolves to the correct DST-aware offset via the stdlib zoneinfo, not a frozen Oracle offset table), BINARY_FLOAT / BINARY_DOUBLE → float, INTERVAL DAY TO SECOND → datetime.timedelta, INTERVAL YEAR TO MONTH → seerdb.IntervalYM, ROWID → str (the 18-char extended rowid, usable directly in a WHERE ROWID = :r bind), UROWID → str (the *-prefixed universal rowid, e.g. for index-organized tables), LONG → str, LONG RAW → bytes, NULL → None
• TLS connections (pass ssl=True to seerdb.connect for the system trust store; or ssl={"ca_certs": ..., "certfile": ..., ...} for a custom configuration; or hand in an ssl.SSLContext directly)
• Wallet-based mutual TLS (Oracle / ADB connection wallet): pass wallet_location="/path/to/wallet" (with wallet_password=... for a password-protected ewallet.p12, or none for an auto-login ewallet.pem) and, optionally, dsn="mydb_high" to resolve the host / port / service and the server-certificate DN from the wallet's tnsnames.ora / sqlnet.ora (SSL_SERVER_DN_MATCH is enforced after the handshake). Needs the wallet extra — pip install seerdb[wallet] — which pulls in cryptography for the X.509 / PKCS#12 decode
• Native network encryption (Advanced Networking / ANO): when the server sets SQLNET.ENCRYPTION_SERVER and/or SQLNET.CRYPTO_CHECKSUM_SERVER, the connection negotiates a cipher and data-integrity algorithm at connect time and transparently encrypts every packet — AES (128 / 192 / 256-bit CBC) plus an SHA-2 MAC — using pycryptodome, no extra dependency. Negotiated and validated live against a 26ai server that requires AES256 + SHA256. Sync and async
• Negotiation cache (opt-in): pass negotiation_cache=True to remember a server's field-version protocol negotiation (keyed by host / port / service) so reconnects to the same target skip the bare-protocol probe round trip; a stale entry is detected and transparently retried from scratch
• DML rowcount and full server error messages: cursor.rowcount reflects the rows affected by INSERT / UPDATE / DELETE (read from the OER block); DatabaseError(code=NNN) carries the full "ORA-NNNNN: ..." text the server sent, not just the numeric code
• Follow-up TTI_FETCH flow for result sets larger than a single server response — OracleConnect.execute automatically drains the cursor when the EXEC OER signals call_status = 1
• Arrow / DataFrame bulk fetch: cur.fetch_df_all() returns the result set as a pyarrow.Table, cur.fetch_df_batches(size=N) yields it as record batches (column types derived from the describe, so a NUMBER / Decimal column lands as the right Arrow type without inference). Sync and async
• LOB content: CLOB / BLOB columns in a SELECT round-trip as str / bytes of any size. Cursor.execute automatically issues a TTI_LOBOPS READ for each non-empty LOB cell, materialising the content from the server. NULL LOBs come back as None; EMPTY_CLOB() / EMPTY_BLOB() as "" / b""
• BFILE read: SELECT of a BFILENAME(...) / BFILE column round-trips the external file contents as bytes, read natively over TTI_LOBOPS (FILE_OPEN → READ → FILE_CLOSE). The only privilege the user needs is READ on the relevant DIRECTORY object — no server-side PL/SQL helper or CREATE PROCEDURE is installed
• Transaction control (commit, rollback, ping); sessionless transactions (start / suspend / resume by transaction id)
• End-to-end application tracing: connection.module / action / client_identifier / clientinfo / dbop flow to the server for monitoring (V$SESSION etc.)
• Multiple character set support, including the national charset: bind full Unicode through DB_TYPE_NVARCHAR / DB_TYPE_NCHAR regardless of the database charset, and read NVARCHAR2 / NCHAR / NCLOB back as str
• Cursor caching for DML: repeat execute() of the same INSERT / UPDATE / DELETE reuses the server-side cursor handle and skips the parse step. Cache size capped at 32 entries per connection (LRU eviction)
• Connection pool: seerdb.create_pool(host=..., user=..., password=..., service_name=..., min=2, max=10) returns a thread-safe pool of warm authenticated connections. pool.acquire() returns a context manager that releases on __exit__. Idle connections health-check on next acquire (configurable via idle_timeout)
• Async (asyncio) API: await seerdb.connect_async(...) returns an AsyncOracleConnect; conn.cursor() returns an AsyncCursor with await cur.execute(...), await cur.fetchone(), async for row in cur iteration, and async with context managers. LOB cells (CLOB / BLOB / BFILE) auto-resolve through await lob.aread() exactly like the sync path. Async pool via await seerdb.create_pool_async(...) with the same acquire/release/idle health-check semantics as the sync Pool. Shares the protocol code with the sync APIs; the duplication is just the I/O layer
• SODA (Simple Oracle Document Access), 18c+: conn.getSodaDatabase() returns a SodaDatabase for JSON document collections — createCollection / openCollection / getCollectionNames, document insertOne / insertOneAndGet / insertMany, upsert save / saveAndGet, query-by-example find().filter(...).getDocuments() / getOne() / count() / skip / limit and streaming getCursor(), replaceOne / replaceOneAndGet / remove, and createIndex / dropIndex / getDataGuide. Built on DBMS_SODA. Sync and async

Design goals & non-goals

seerdb is pure Python by design — no C extensions, no build step, no compiler, and no Oracle Instant Client. It installs anywhere CPython runs (pip install, no per-platform wheels), the whole package is type-annotated and mypy-checked in CI, and the source stays easy to read, audit, and contribute to.

Staying pure Python is a deliberate non-goal to add Cython or native extensions: they would trade that portability and readability for speed the project does not need today. If a hot path ever warrants it, the plan is to profile with the benchmark harness (#166) and optimize the Python — or ship an optional accelerator with a pure-Python fallback — never a hard C dependency.

Compatibility

Oracle 8i and 9i. RETURNING ... INTO is refused with NotSupportedError below 10g: the 9i server rejects the clause for this client's request form (ORA-00439) and 8i drops the connection when such a statement fails, so the driver says so before sending anything. DatabaseError.offset is None on those servers, whose error reply carries no position.

The driver negotiates the wire dialect per connection, so a single build speaks to every supported server — from Oracle 8i (8.1.7) through 26ai:

CI runs the offline suite on Python 3.10–3.14 and the integration suite against live 11g, 21c and 23ai; 10g, 9i and 8i are validated locally, and 12c–19c share the 12c+ protocol the 21c tier exercises.

Feature matrix

Most of the above works across every supported server version; a few features are inherently version-scoped: the 23ai types need 23ai (VECTOR / BOOLEAN) or 21c+ (JSON), SODA needs 18c+, and array DML needs 12.1+.

Oracle 9i (the legacy field-version-2 / TTI_ALL7 dialect) runs the common surface — DB-API, scalar and national-charset binds, DATE / TIMESTAMP / INTERVAL, RAW, small LONG, LOB reads, single-row DML, PL/SQL blocks with IN / OUT / IN OUT binds, transactions, and the full async API — but not the features later versions layer on top: BINARY_FLOAT / BINARY_DOUBLE, large streamed LOB / LONG binds, array DML, REF CURSOR, the cursor cache, and changepassword. Its DB charset also can't store text it doesn't cover, so use DB_TYPE_NVARCHAR / NCHAR for full Unicode there rather than a plain str bind.

Oracle 8i (8.1.7, the 9.2-era OALL8 dialect) is the oldest and most limited tier. It runs connect (O3LOGON), SELECT, single-row DML / DDL, PL/SQL blocks with IN / OUT binds, CLOB / BLOB and native BFILE reads, LONG / LONG RAW, ROWID / UROWID, and transactions — sync and async. On top of the 9i gaps above it predates TIMESTAMP and INTERVAL (only DATE), the AL16UTF16 national charset (WE8ISO8859P1 only), and returns a single row for CONNECT BY LEVEL. Oracle 8.0 (pre-8i) is out of scope — 8.1.7 is the floor.

Intentional differences from python-oracledb

seerdb matches oracledb's types — cursor.description type codes are the same DB_TYPE_* objects, with the same precision / scale / display_size / internal_size semantics — but is deliberately more forgiving about bind parameters, where its behaviour is the saner default:

• a positional list may supply a single value for a repeated placeholder — cur.execute("… :x … :x …", [v]) reuses v for every :x; oracledb requires one value per textual occurrence and raises otherwise.
• extra keys in a named-bind dict are ignored rather than rejected.

In both cases the bind values that reach the server are identical to a strict call; seerdb just doesn't second-guess the count. Pass exactly the binds the statement uses if you want oracledb's stricter validation.

A server-side scrollable cursor (conn.cursor(scrollable=True), 10g+) also treats scrolling past the last row like file.seek() past EOF — the next fetchone() returns None and a later in-range scroll() repositions back — rather than raising IndexError. That lets a relative scroll into an unknown position return None instead of forcing a try/except. (A target before the first row still raises IndexError, and the buffered non-scrollable path raises for out-of-range in either direction, matching PEP 249 / oracledb.)

LOB columns are fetched as their content directly — a CLOB / NCLOB comes back as str, a BLOB as bytes — rather than as a LOB object you have to .read() (oracledb's default). Simplest for typical values; note the whole LOB is materialised in memory. (Oracle's '' == NULL rule still applies, so an empty-string / empty-bytes bind stores — and reads back — as None.)

Requirements

Core (installed automatically):

• Python >= 3.10
• pycryptodome — login/auth crypto (O3LOGON / O5LOGON) and the AES + SHA-2 of native network encryption (ANO)
• tzdata — IANA time-zone database for named-region TIMESTAMP WITH TIME ZONE values (a no-op where the OS ships system zoneinfo)
• pyarrow — backs the Arrow / DataFrame bulk fetch (cursor.fetch_df_all / fetch_df_batches)

Optional — cryptography is the only extra dependency, needed by two features that pycryptodome can't cover. It is imported lazily, so the core install stays lean and import seerdb works without it; install the matching extra only if you use the feature:

• pip install "seerdb[token]" — token-based auth (access_token=): OAuth2 / OCI IAM sign the auth header with RSA-SHA256.
• pip install "seerdb[wallet]" — wallet mutual TLS: decoding an Oracle / ADB wallet (X.509 / PKCS#12).

Installation

pip install .

Quick start

import seerdb

with seerdb.connect(host="dbhost", port=1521, user="scott",
                    password="tiger", service_name="MYDB") as conn:
    with conn.cursor() as cur:
        cur.execute(
            "SELECT id, name FROM employees WHERE dept = :dept ORDER BY id",
            {"dept": "ENG"},
        )
        for row in cur:
            print(row)

Quick start (async)

import asyncio
import seerdb


async def main():
    async with await seerdb.connect_async(
        host="dbhost", port=1521, user="scott",
        password="tiger", service_name="MYDB",
    ) as conn:
        async with conn.cursor() as cur:
            await cur.execute(
                "SELECT id, name FROM employees WHERE dept = :dept ORDER BY id",
                {"dept": "ENG"},
            )
            async for row in cur:
                print(row)


asyncio.run(main())

A connection pool keeps authenticated sessions warm. Sync:

pool = seerdb.create_pool(host="dbhost", user="scott",
                          password="tiger", service_name="MYDB",
                          min=2, max=10)
with pool.acquire() as conn:
    ...
pool.close()

Async:

pool = await seerdb.create_pool_async(host="dbhost", user="scott",
                                       password="tiger", service_name="MYDB",
                                       min=2, max=10)
async with pool.acquire() as conn:
    ...
await pool.close()

Running tests

The default test suite is offline (encoders, crypto, packet round-trips):

python3 -m unittest discover -v tests/

A second suite of integration tests exercises type coercion and the Cursor API against a real database. They are skipped unless connection parameters are exported in the environment:

export SEERDB_TEST_USER=pyo
export SEERDB_TEST_PASSWORD=pyo123
export SEERDB_TEST_HOST=127.0.0.1          # optional, default 127.0.0.1
export SEERDB_TEST_PORT=1521               # optional, default 1521
export SEERDB_TEST_SERVICE=XE              # optional, default XE
python3 -m unittest discover -v tests/

The user only needs CREATE SESSION and CREATE TABLE privileges plus a writable tablespace. Each test creates and drops its own scratch table.

Connect-rate note. Oracle XE rate-limits very rapid new connections at the listener (issue #7). The suite opens a fresh connection per test, so it keeps a small pre-connect pause (default 50 ms, override with SEERDB_TEST_CONNECT_DELAY) to stay under that limit; the Pool (issue #6) avoids it entirely by keeping connections warm. At the default pace the suite runs clean.

Earlier this surfaced as a ORA-01013 ("user requested cancel") flake roughly one run in five: a mid-session cancel (from the throttle or an errored call) tripped the driver's break/reset handling, desynced the connection and cascaded into many failures. That driver bug was fixed in issue #45, so the default-pace suite is now reliably green. Only running with no pre-connect pause at all still trips the raw listener throttle, which now shows up as dropped connections rather than ORA-01013.

A third, opt-in suite exercises wallet-based mutual TLS against a real TCPS (TLS) Oracle listener. It is skipped unless SEERDB_WALLET_LIVE is set; docs/wallet_mtls_live_testing.md walks through standing up a self-hosted 23ai Free + TCPS test bed (reusing the committed fixture wallet) and running tests/test_wallet_live.py.

Contributing

Pull requests are welcome. Please read CONTRIBUTING.md first — seerdb's clean-room posture means there are a few sources you must NOT consult when preparing a contribution, and a few citation expectations to follow when you open a PR.

Trademarks

Oracle and Oracle Database are trademarks or registered trademarks of Oracle Corporation and/or its affiliates. seerdb is an independent, unaffiliated, clean-room project — not endorsed by, sponsored by, or affiliated with Oracle Corporation. References to "Oracle" are nominative, describing the database this driver interoperates with. See NOTICE.

License

Licensed under the MIT License. This project is REUSE compliant.