create-caspian-app 1.3.26 → 1.4.0

package/dist/src/app/error.py

@@ -20,21 +20,9 @@ def page(error_message: str, error_trace: Optional[str] = None):
            fill="none"
            xmlns="http://www.w3.org/2000/svg"
            aria-hidden="true">
-        <path d="M11.001 2a1 1 0 0 1 .998 0L21 7v9a3 3 0 0 1-3 3H6a3 3 0 0 1-3-3V7l8.001-5z"
-              stroke="currentColor"
-              stroke-width="1.5"
-              stroke-linecap="round"
-              stroke-linejoin="round" />
-        <path d="M12 8v4"
-              stroke="currentColor"
-              stroke-width="1.5"
-              stroke-linecap="round"
-              stroke-linejoin="round" />
-        <path d="M12 16h.01"
-              stroke="currentColor"
-              stroke-width="1.5"
-              stroke-linecap="round"
-              stroke-linejoin="round" />
+        <path d="M11.001 2a1 1 0 0 1 .998 0L21 7v9a3 3 0 0 1-3 3H6a3 3 0 0 1-3-3V7l8.001-5z" stroke="currentColor" stroke-width="1.5" stroke-linecap="round" stroke-linejoin="round" />
+        <path d="M12 8v4" stroke="currentColor" stroke-width="1.5" stroke-linecap="round" stroke-linejoin="round" />
+        <path d="M12 16h.01" stroke="currentColor" stroke-width="1.5" stroke-linecap="round" stroke-linejoin="round" />
       </svg>
 
       <div class="flex-1">
@@ -51,37 +39,29 @@ def page(error_message: str, error_trace: Optional[str] = None):
             Home
           </a>
           <button class="inline-block rounded bg-blue-600 px-3 py-1.5 text-sm text-white"
-                  onclick="window.location.reload()">
-            Reload
-          </button>
+                  onclick="window.location.reload()">Reload</button>
           {% if error_trace %}
-          <button class="inline-block rounded border border-gray-200 bg-transparent px-3 py-1.5 text-sm text-black"
-                  onclick="setShowTrace(current => !current)">
-            {showTrace ? "Hide details" : "Show details"}
-          </button>
+            <button class="inline-block rounded border border-gray-200 bg-transparent px-3 py-1.5 text-sm text-black"
+                    onclick="setShowTrace(current => !current)">{showTrace ? "Hide details" : "Show details"}</button>
           {% endif %}
         </div>
       </div>
     </div>
 
     {% if error_trace %}
-    <section class="mt-4" hidden="{!showTrace}">
-      <div class="mb-2 flex items-center justify-between">
-        <div class="text-xs text-gray-500">Error details (development only)</div>
-        <div class="flex gap-2">
-          <button class="rounded border bg-gray-100 px-2 py-1 text-xs text-black"
-                  onclick="copyTrace()">
-            {traceCopied ? "Copied" : "Copy"}
-          </button>
-          <button class="rounded border bg-gray-100 px-2 py-1 text-xs text-black"
-                  onclick="downloadTrace()">
-            Download
-          </button>
+      <section class="mt-4" hidden="{!showTrace}">
+        <div class="mb-2 flex items-center justify-between">
+          <div class="text-xs text-gray-500">Error details (development only)</div>
+          <div class="flex gap-2">
+            <button class="rounded border bg-gray-100 px-2 py-1 text-xs text-black"
+                    onclick="copyTrace()">{traceCopied ? "Copied" : "Copy"}</button>
+            <button class="rounded border bg-gray-100 px-2 py-1 text-xs text-black"
+                    onclick="downloadTrace()">Download</button>
+          </div>
         </div>
-      </div>
-      <pre pp-ref="{tracePre}"
-           class="overflow-auto rounded bg-gray-100 p-4 text-xs text-black">{{ error_trace }}</pre>
-    </section>
+        <pre pp-ref="{tracePre}"
+             class="overflow-auto rounded bg-gray-100 p-4 text-xs text-black">{{ error_trace }}</pre>
+      </section>
     {% endif %}
 
     <script>
@@ -109,4 +89,7 @@ def page(error_message: str, error_trace: Optional[str] = None):
     </script>
   </div>
 </main>
-""", error_message=error_message, error_trace=error_trace)
+""",
+        error_message=error_message,
+        error_trace=error_trace,
+    )

package/dist/src/app/not_found.py

@@ -15,16 +15,12 @@ def page():
   <div class="text-center">
     <h1 class="text-9xl font-black text-gray-200">404</h1>
 
-    <p class="text-2xl font-bold tracking-tight text-gray-900 sm:text-4xl">
-      Uh-oh!
-    </p>
+    <p class="text-2xl font-bold tracking-tight text-gray-900 sm:text-4xl">Uh-oh!</p>
 
     <p class="mt-4 text-gray-500">We can't find that page.</p>
 
-    <a
-      href="/"
-      class="mt-6 inline-block rounded bg-indigo-600 px-5 py-3 text-sm font-medium text-white hover:bg-indigo-700 focus:outline-none focus:ring"
-    >
+    <a href="/"
+       class="mt-6 inline-block rounded bg-indigo-600 px-5 py-3 text-sm font-medium text-white hover:bg-indigo-700 focus:outline-none focus:ring">
       Go Back Home
     </a>
   </div>

package/dist/src/lib/auth/auth_config.py

@@ -21,7 +21,6 @@ def build_auth_settings() -> AuthSettings:
         default_token_validity="1h",
         # Sliding-session refresh only matters when the request flow calls auth.refresh_session().
         token_auto_refresh=False,
-
         # Route protection
         # This app-owned starter config begins public-first; switch to True only when most routes require auth.
         # Use all-private mode when only a few routes should stay public.
@@ -30,11 +29,9 @@ def build_auth_settings() -> AuthSettings:
         # Sign-in and signup stay public by default; only change this when the app explicitly needs it.
         auth_routes=["/signin", "/signup"],
         private_routes=[],  # unused when all-routes-private is True
-
         # Role-based access
         is_role_based=False,
         role_identifier="role",
-
         # RBAC policy is app-owned here; the runtime expects ROUTE/PATTERN -> [ROLES].
         # Example (when enabled):
         # role_based_routes={
@@ -42,7 +39,6 @@ def build_auth_settings() -> AuthSettings:
         #     "/admin": ["admin", "superadmin"],
         # },
         role_based_routes={},
-
         # Redirects / prefixes
         default_signin_redirect="/dashboard",
         default_signout_redirect="/signin",

package/dist/src/lib/websocket/sockets.py

@@ -123,9 +123,7 @@ def _rate_window_seconds() -> int:
 # Ceiling on simultaneous open sockets. Every open connection is a live task
 # plus a broadcast target, so an unbounded count lets cheap clients grow
 # server memory and turn each broadcast into an amplification.
-MAX_WEBSOCKET_CONNECTIONS = max(
-    1, int(os.getenv("MAX_WEBSOCKET_CONNECTIONS", 200))
-)
+MAX_WEBSOCKET_CONNECTIONS = max(1, int(os.getenv("MAX_WEBSOCKET_CONNECTIONS", 200)))
 
 
 def _is_production() -> bool:
@@ -147,11 +145,7 @@ def _configured_websocket_origins() -> set[str]:
     ):
         raw_values.extend(os.getenv(env_name, "").split(","))
 
-    return {
-        _normalized_origin(origin)
-        for origin in raw_values
-        if _normalized_origin(origin)
-    }
+    return {_normalized_origin(origin) for origin in raw_values if _normalized_origin(origin)}
 
 
 def _websocket_same_origin(websocket: WebSocket) -> str:
@@ -208,8 +202,7 @@ class SocketEntry:
 SOCKET_REGISTRY: dict[str, SocketEntry] = {}
 
 
-def socket(require_auth: bool = False,
-           allowed_roles: list[str] | None = None):
+def socket(require_auth: bool = False, allowed_roles: list[str] | None = None):
     """Register an async function as a named socket.
 
     The function's own name is the name the browser connects with, so it must
@@ -309,9 +302,7 @@ class _Shared:
     """State the `Socket` and every cloned `SocketSender` see together."""
 
     def __init__(self) -> None:
-        self.outgoing: asyncio.Queue[str | None] = asyncio.Queue(
-            maxsize=SEND_QUEUE_SIZE
-        )
+        self.outgoing: asyncio.Queue[str | None] = asyncio.Queue(maxsize=SEND_QUEUE_SIZE)
         self.closed = False
         self.last_activity = time.monotonic()
 
@@ -452,8 +443,7 @@ class Socket:
             return json.loads(text)
         except json.JSONDecodeError as e:
             raise ValueError(
-                f"`{self._name}` could not read a frame -- {e}. Each frame is "
-                "one JSON value."
+                f"`{self._name}` could not read a frame -- {e}. Each frame is one JSON value."
             ) from e
 
     async def recv_text(self) -> str | None:
@@ -467,9 +457,7 @@ class Socket:
         idle_timeout = _idle_timeout_seconds()
         while not self._shared.closed:
             try:
-                text = await asyncio.wait_for(
-                    self._websocket.receive_text(), timeout=idle_timeout
-                )
+                text = await asyncio.wait_for(self._websocket.receive_text(), timeout=idle_timeout)
             except asyncio.TimeoutError:
                 # Outbound traffic counts as liveness: a passive listener in
                 # an active room is not idle, it is listening.
@@ -520,7 +508,7 @@ class Socket:
         """Let queued frames drain, then reclaim the writer task."""
         try:
             await asyncio.wait_for(self._writer, timeout=5)
-        except (asyncio.CancelledError, Exception):
+        except asyncio.CancelledError, Exception:
             self._writer.cancel()
         self._shared.closed = True
 
@@ -574,9 +562,7 @@ def _authorize(websocket: WebSocket, entry: SocketEntry) -> _Refusal | None:
 
     if auth.is_authenticated():
         payload = auth.get_payload() or {}
-        if entry.allowed_roles and not auth.check_role(
-            payload, list(entry.allowed_roles)
-        ):
+        if entry.allowed_roles and not auth.check_role(payload, list(entry.allowed_roles)):
             return _Refusal(f"The socket `{entry.name}` is not available to this account.")
         return None
 
@@ -596,9 +582,7 @@ async def _first_frame(websocket: WebSocket) -> dict[str, Any] | _Refusal | None
     mid-handshake. Not an error, and nobody left to tell.
     """
     try:
-        text = await asyncio.wait_for(
-            websocket.receive_text(), timeout=ARGS_TIMEOUT_SECONDS
-        )
+        text = await asyncio.wait_for(websocket.receive_text(), timeout=ARGS_TIMEOUT_SECONDS)
     except asyncio.TimeoutError:
         return _Refusal(
             "This socket opened and sent no arguments. The first frame is the "
@@ -631,14 +615,13 @@ def _call_kwargs(
     from the wire.
     """
     parameters = inspect.signature(entry.handler).parameters.values()
-    accepts_kwargs = any(
-        p.kind is inspect.Parameter.VAR_KEYWORD for p in parameters
-    )
+    accepts_kwargs = any(p.kind is inspect.Parameter.VAR_KEYWORD for p in parameters)
 
     accepted = {
         p.name
         for p in parameters
-        if p.kind in (
+        if p.kind
+        in (
             inspect.Parameter.POSITIONAL_OR_KEYWORD,
             inspect.Parameter.KEYWORD_ONLY,
         )
@@ -647,15 +630,13 @@ def _call_kwargs(
     missing = [
         p.name
         for p in parameters
-        if p.name in accepted
-        and p.default is inspect.Parameter.empty
-        and p.name not in args
+        if p.name in accepted and p.default is inspect.Parameter.empty and p.name not in args
     ]
     if missing:
         return _Refusal(
             f"`{entry.name}` is missing its `{missing[0]}` argument. The "
             f'browser opens pp.socket("{entry.name}", '
-            f'{{ {missing[0]}: ... }}).'
+            f"{{ {missing[0]}: ... }})."
         )
 
     if accepts_kwargs:
@@ -729,11 +710,7 @@ async def serve_named_socket(websocket: WebSocket) -> None:
     except Exception as e:
         print(f"[Socket Error] {entry.name}: {e}")
         traceback.print_exc()
-        message = (
-            "Internal server error"
-            if is_production_environment()
-            else f"{entry.name}: {e}"
-        )
+        message = "Internal server error" if is_production_environment() else f"{entry.name}: {e}"
         await sock.sender()._error(message)
         await sock._finish()
     finally:

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "create-caspian-app",
-  "version": "1.3.26",
+  "version": "1.4.0",
   "description": "Scaffold a new Caspian project (FastAPI-powered reactive Python framework).",
   "main": "dist/index.js",
   "type": "module",