databricks-tellr-app 0.4.3.dev3463__tar.gz → 0.4.3.dev3464__tar.gz

{databricks_tellr_app-0.4.3.dev3463 → databricks_tellr_app-0.4.3.dev3464}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: databricks-tellr-app
-Version: 0.4.3.dev3463
+Version: 0.4.3.dev3464
 Summary: Tellr application package for Databricks Apps
 Requires-Python: >=3.10
 Description-Content-Type: text/markdown
@@ -42,7 +42,7 @@ Requires-Dist: google-auth-oauthlib==1.2.4
 Requires-Dist: google-auth-httplib2==0.3.0
 Requires-Dist: cryptography==46.0.3
 Requires-Dist: sse-starlette==3.0.3
-Requires-Dist: databricks-sdk==0.120.0
+Requires-Dist: databricks-sdk==0.157.0
 Requires-Dist: mlflow[databricks]==3.14.0
 Requires-Dist: mlflow-skinny==3.14.0
 Requires-Dist: databricks-agents==1.11.0

{databricks_tellr_app-0.4.3.dev3463 → databricks_tellr_app-0.4.3.dev3464}/databricks_tellr_app.egg-info/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: databricks-tellr-app
-Version: 0.4.3.dev3463
+Version: 0.4.3.dev3464
 Summary: Tellr application package for Databricks Apps
 Requires-Python: >=3.10
 Description-Content-Type: text/markdown
@@ -42,7 +42,7 @@ Requires-Dist: google-auth-oauthlib==1.2.4
 Requires-Dist: google-auth-httplib2==0.3.0
 Requires-Dist: cryptography==46.0.3
 Requires-Dist: sse-starlette==3.0.3
-Requires-Dist: databricks-sdk==0.120.0
+Requires-Dist: databricks-sdk==0.157.0
 Requires-Dist: mlflow[databricks]==3.14.0
 Requires-Dist: mlflow-skinny==3.14.0
 Requires-Dist: databricks-agents==1.11.0

{databricks_tellr_app-0.4.3.dev3463 → databricks_tellr_app-0.4.3.dev3464}/databricks_tellr_app.egg-info/SOURCES.txt

@@ -62,6 +62,7 @@ setup.py
 ./src/api/services/session_manager.py
 ./src/api/services/session_naming.py
 ./src/api/services/slide_repository.py
+./src/api/services/slide_style_preview_queue.py
 ./src/api/services/usage_events.py
 ./src/api/services/usage_service.py
 ./src/api/utils/__init__.py
@@ -117,6 +118,7 @@ setup.py
 ./src/database/models/session.py
 ./src/database/models/slide_deck_prompt.py
 ./src/database/models/slide_style_library.py
+./src/database/models/slide_style_preview.py
 ./src/database/models/usage_event.py
 ./src/database/models/user_preference.py
 ./src/domain/__init__.py
@@ -183,6 +185,8 @@ setup.py
 ./src/services/profile_service.py
 ./src/services/prompt_assembler.py
 ./src/services/shared_deck_attribution.py
+./src/services/slide_style_preview_fixture.py
+./src/services/slide_style_preview_storage.py
 ./src/services/spec_sync.py
 ./src/services/streaming_callback.py
 ./src/services/svg_sanitizer.py
@@ -297,6 +301,7 @@ src/api/services/job_queue.py
 src/api/services/session_manager.py
 src/api/services/session_naming.py
 src/api/services/slide_repository.py
+src/api/services/slide_style_preview_queue.py
 src/api/services/usage_events.py
 src/api/services/usage_service.py
 src/api/utils/__init__.py
@@ -352,6 +357,7 @@ src/database/models/request_log.py
 src/database/models/session.py
 src/database/models/slide_deck_prompt.py
 src/database/models/slide_style_library.py
+src/database/models/slide_style_preview.py
 src/database/models/usage_event.py
 src/database/models/user_preference.py
 src/domain/__init__.py
@@ -418,6 +424,8 @@ src/services/pptx_prompts_defaults.py
 src/services/profile_service.py
 src/services/prompt_assembler.py
 src/services/shared_deck_attribution.py
+src/services/slide_style_preview_fixture.py
+src/services/slide_style_preview_storage.py
 src/services/spec_sync.py
 src/services/streaming_callback.py
 src/services/svg_sanitizer.py

{databricks_tellr_app-0.4.3.dev3463 → databricks_tellr_app-0.4.3.dev3464}/databricks_tellr_app.egg-info/requires.txt

@@ -36,7 +36,7 @@ google-auth-oauthlib==1.2.4
 google-auth-httplib2==0.3.0
 cryptography==46.0.3
 sse-starlette==3.0.3
-databricks-sdk==0.120.0
+databricks-sdk==0.157.0
 mlflow[databricks]==3.14.0
 mlflow-skinny==3.14.0
 databricks-agents==1.11.0

{databricks_tellr_app-0.4.3.dev3463 → databricks_tellr_app-0.4.3.dev3464}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "setuptools.build_meta"
 
 [project]
 name = "databricks-tellr-app"
-version = "0.4.3.dev3463"
+version = "0.4.3.dev3464"
 description = "Tellr application package for Databricks Apps"
 readme = "README.md"
 requires-python = ">=3.10"
@@ -86,7 +86,7 @@ dependencies = [
     # langgraph-prebuilt 1.0.10→1.1.0, added langgraph-sdk==0.4.2. These match
     # the repo-root requirements.txt and pyproject.toml. MUST be re-verified via
     # a devloop deploy on db-tellr-dev-pinfix or equivalent before PR3 ships.
-    "databricks-sdk==0.120.0",
+    "databricks-sdk==0.157.0",
     "mlflow[databricks]==3.14.0",
     "mlflow-skinny==3.14.0",
     "databricks-agents==1.11.0",

{databricks_tellr_app-0.4.3.dev3463 → databricks_tellr_app-0.4.3.dev3464}/src/api/main.py

@@ -49,6 +49,7 @@ from src.api.services.export_job_queue import (
     start_export_worker,
 )
 from src.api.services.job_queue import recover_stuck_requests, start_worker
+from src.api.services.slide_style_preview_queue import start_preview_worker
 from src.core.database import (
     is_lakebase_environment,
     start_token_refresh,
@@ -70,6 +71,7 @@ IS_TESTING = ENVIRONMENT == "test"
 _worker_task = None
 _export_worker_task = None
 _export_cleanup_task: asyncio.Task | None = None
+_preview_worker_task = None
 _cleanup_task = None
 _timeout_task = None
 _spec_sweeper_task = None
@@ -79,7 +81,7 @@ _frontend_assets_stack: ExitStack | None = None
 @asynccontextmanager
 async def lifespan(app: FastAPI):
     """Lifespan context manager for startup/shutdown events."""
-    global _worker_task, _export_worker_task, _export_cleanup_task
+    global _worker_task, _export_worker_task, _export_cleanup_task, _preview_worker_task
     global _cleanup_task, _timeout_task, _spec_sweeper_task, _frontend_assets_stack
 
     # Startup
@@ -151,6 +153,20 @@ async def lifespan(app: FastAPI):
         _export_cleanup_task = await start_export_cleanup_worker()
         logger.info("Export job cleanup worker started")
 
+        # Start the slide-style preview generation worker
+        _preview_worker_task = await start_preview_worker()
+        logger.info("Slide-style preview worker started")
+
+        # Pre-warm previews for active styles so viewers hit a warm cache instead
+        # of a cold LLM generation. Bounded + deduplicated; runs off the event loop.
+        try:
+            from src.api.services.slide_style_preview_queue import warm_missing_previews
+
+            warmed = await asyncio.to_thread(warm_missing_previews)
+            logger.info("Slide-style preview warm backfill enqueued", extra={"enqueued": warmed})
+        except Exception:  # noqa: BLE001 — warming must never block startup
+            logger.warning("Slide-style preview warm backfill failed", exc_info=True)
+
         # Start the MCP job timeout sweeper
         from src.api.services.job_queue import mark_timed_out_jobs_loop
         _timeout_task = asyncio.create_task(mark_timed_out_jobs_loop())
@@ -214,6 +230,14 @@ async def lifespan(app: FastAPI):
             pass
         logger.info("Export job cleanup worker stopped")
 
+    if _preview_worker_task:
+        _preview_worker_task.cancel()
+        try:
+            await _preview_worker_task
+        except asyncio.CancelledError:
+            pass
+        logger.info("Slide-style preview worker stopped")
+
     if _cleanup_task:
         _cleanup_task.cancel()
         try:

{databricks_tellr_app-0.4.3.dev3463 → databricks_tellr_app-0.4.3.dev3464}/src/api/middleware/security_headers.py

@@ -24,6 +24,13 @@ Content-Security-Policy differentiated by response type:
      Radix UI injects inline styles at runtime; CSP hashes apply to
      <style>/<script> *elements*, not style *attributes*, so
      ``style-src`` needs 'unsafe-inline'.
+  3. Monaco: the editors load from jsDelivr via @monaco-editor/react, the
+     JS through ``script-src`` and ``editor.main.css`` as a stylesheet
+     link, so ``style-src`` also allows ``https://cdn.jsdelivr.net``.
+     Without it the sheet is blocked and the editor renders broken (its
+     input textarea shows as a stray box above the text). Given
+     'unsafe-inline' already, the origin adds no real style-injection
+     surface; ``script-src`` already trusts it.
 
   ``script-src 'unsafe-inline'`` + CDNs is a deliberate, documented
   trade-off forced by srcdoc inheritance: slides remain confined by the
@@ -83,7 +90,7 @@ from starlette.responses import Response
 DOCUMENT_CSP = (
     "default-src 'self'; "
     "script-src 'self' 'unsafe-inline' https://cdn.jsdelivr.net https://cdn.tailwindcss.com; "
-    "style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; "
+    "style-src 'self' 'unsafe-inline' https://cdn.jsdelivr.net https://fonts.googleapis.com; "
     "img-src 'self' data:; "
     "font-src 'self' data: https://cdn.jsdelivr.net https://fonts.gstatic.com; "
     "connect-src 'self'; "

{databricks_tellr_app-0.4.3.dev3463 → databricks_tellr_app-0.4.3.dev3464}/src/api/routes/settings/slide_styles.py

@@ -16,9 +16,14 @@ from sqlalchemy.orm import Session
 from src.api.routes._authz import require_admin
 from src.core.database import get_db, get_db_session
 from src.database.models import SlideStyleLibrary
+from src.services import slide_style_preview_fixture as preview_fixture
+from src.services import slide_style_preview_storage as preview_storage
 
 logger = logging.getLogger(__name__)
 
+# Fields whose change invalidates a generated preview (see cache-invalidation).
+_PREVIEW_AFFECTING_FIELDS = ("style_content", "image_guidelines")
+
 router = APIRouter(prefix="/slide-styles", tags=["slide-styles"])
 
 
@@ -68,6 +73,26 @@ class SlideStyleListResponse(BaseModel):
     total: int
 
 
+class SlideStylePreviewResponse(BaseModel):
+    """Read-only preview state for a slide style.
+
+    ``status`` drives the client: ``ready`` (current), ``stale`` (a usable but
+    out-of-date copy while regeneration runs), ``queued``/``generating`` (in
+    flight), ``failed`` (with optional last-known-good copy), ``missing`` (never
+    generated). HTTP is always 200; the client polls on ``status`` rather than
+    on status codes.
+    """
+    style_id: int
+    status: str
+    fingerprint: Optional[str] = None
+    slides: Optional[List[str]] = None
+    css: Optional[str] = None
+    assets: Optional[List[dict]] = None
+    generated_at: Optional[str] = None
+    error_code: Optional[str] = None
+    stale: bool = False
+
+
 # API endpoints
 
 @router.get("", response_model=SlideStyleListResponse)
@@ -238,6 +263,15 @@ def create_slide_style(
         db.refresh(style)
         
         logger.info(f"Created slide style: {style.name} (id={style.id})")
+
+        # Warm the visual preview immediately so the first viewer gets a cache
+        # hit instead of waiting on a cold generation. Deduplicated + best-effort.
+        try:
+            from src.api.services.slide_style_preview_queue import try_enqueue
+
+            try_enqueue(style.id)
+        except Exception:  # noqa: BLE001 — warming must never fail the create
+            logger.warning("Preview warm-on-create failed", exc_info=True)
         
         return SlideStyleResponse(
             id=style.id,
@@ -321,11 +355,38 @@ def update_slide_style(
             style.description = request.description
         if request.category is not None:
             style.category = request.category
+
+        # Detect preview-affecting changes BEFORE mutating, so we can invalidate
+        # the cached preview in the SAME transaction as the edit (cache-invalidation).
+        preview_affected = False
+        if request.style_content is not None and request.style_content != style.style_content:
+            preview_affected = True
+        if (
+            request.image_guidelines is not None
+            and request.image_guidelines != style.image_guidelines
+        ):
+            preview_affected = True
+
         if request.style_content is not None:
             style.style_content = request.style_content
         if request.image_guidelines is not None:
             style.image_guidelines = request.image_guidelines
 
+        if preview_affected:
+            # Bump the revision (the generation write-back guard) and reset the
+            # cached preview to 'missing' so it regenerates. The last-known-good
+            # payload row is left in storage until the next successful prune.
+            style.style_revision = (style.style_revision or 0) + 1
+            style.preview_status = "missing"
+            style.preview_fingerprint = None
+            style.preview_payload_id = None
+            style.preview_error_code = None
+            style.preview_error_message = None
+            logger.info(
+                "Invalidated slide-style preview after edit",
+                extra={"style_id": style.id, "style_revision": style.style_revision},
+            )
+
         # Update the user (skip Databricks call in test/dev to avoid network timeout)
         if os.getenv("ENVIRONMENT") in ("development", "test"):
             style.updated_by = "system"
@@ -344,6 +405,16 @@ def update_slide_style(
         db.refresh(style)
         
         logger.info(f"Updated slide style: {style.name} (id={style.id})")
+
+        # If the edit invalidated the preview, warm it right away (against the
+        # now-committed new revision) so viewers don't hit a cold regeneration.
+        if preview_affected:
+            try:
+                from src.api.services.slide_style_preview_queue import try_enqueue
+
+                try_enqueue(style.id)
+            except Exception:  # noqa: BLE001 — warming must never fail the update
+                logger.warning("Preview warm-on-update failed", exc_info=True)
         
         return SlideStyleResponse(
             id=style.id,
@@ -510,3 +581,133 @@ def set_default_slide_style(style_id: int):
             status_code=status.HTTP_500_INTERNAL_SERVER_ERROR,
             detail="Failed to set default slide style",
         )
+
+
+@router.get("/{style_id}/preview", response_model=SlideStylePreviewResponse)
+def get_slide_style_preview(
+    style_id: int,
+    db: Session = Depends(get_db),
+):
+    """Read the cached visual preview for a slide style. NEVER generates inline.
+
+    Visibility mirrors ``GET /{style_id}`` (404 parity). When the cached preview
+    is missing or stale relative to the current generation fingerprint, this
+    enqueues a deduplicated background job and returns the current state (with a
+    stale copy if one exists) so the UI stays fast and crawlers/prefetch/scroll
+    never trigger LLM cost.
+    """
+    from src.api.services.slide_style_preview_queue import try_enqueue
+
+    style = db.query(SlideStyleLibrary).filter(SlideStyleLibrary.id == style_id).first()
+    if not style:
+        raise HTTPException(
+            status_code=status.HTTP_404_NOT_FOUND,
+            detail=f"Slide style {style_id} not found",
+        )
+
+    current_fp = preview_fixture.compute_fingerprint(
+        style.style_content,
+        style.image_guidelines,
+        preview_fixture.current_builder_definition(db),
+    )
+    status_val = style.preview_status or "missing"
+
+    # Load any stored payload (ready OR last-known-good) once.
+    payload = None
+    if style.preview_payload_id:
+        payload = preview_storage.load_payload(db, style.preview_payload_id)
+
+    def _resp(status_str: str, *, include_payload: bool, stale: bool = False):
+        has = include_payload and payload
+        return SlideStylePreviewResponse(
+            style_id=style_id,
+            status=status_str,
+            fingerprint=style.preview_fingerprint if include_payload else None,
+            slides=(payload or {}).get("slides") if has else None,
+            css=(payload or {}).get("css") if has else None,
+            assets=(payload or {}).get("assets") if has else None,
+            generated_at=style.preview_generated_at.isoformat()
+            if (has and style.preview_generated_at)
+            else None,
+            error_code=style.preview_error_code,
+            stale=stale,
+        )
+
+    # Ready and current (cache hit).
+    if status_val == "ready" and style.preview_fingerprint == current_fp and payload:
+        logger.info(
+            "slide_style_preview.cache_hit",
+            extra={"style_id": style_id, "status": "ready"},
+        )
+        return _resp("ready", include_payload=True)
+
+    # Ready but stale (fingerprint moved). Serve the stale copy, kick a refresh.
+    if status_val == "ready" and payload:
+        age_s = None
+        if style.preview_generated_at:
+            from datetime import datetime as _dt
+
+            age_s = (_dt.utcnow() - style.preview_generated_at).total_seconds()
+        logger.info(
+            "slide_style_preview.cache_stale",
+            extra={"style_id": style_id, "stale_age_s": age_s},
+        )
+        try_enqueue(style_id)
+        return _resp("stale", include_payload=True, stale=True)
+
+    # In flight. Serve stale copy underneath if present. try_enqueue no-ops a
+    # live job and re-queues one whose worker died, so a viewer recovers it.
+    if status_val in ("queued", "generating"):
+        try_enqueue(style_id)
+        return _resp(status_val, include_payload=bool(payload), stale=bool(payload))
+
+    # Failed. Return last-known-good if we have one; otherwise just the error.
+    if status_val == "failed":
+        return _resp("failed", include_payload=bool(payload), stale=bool(payload))
+
+    # Missing (or unknown): enqueue and report queued.
+    try_enqueue(style_id)
+    # Re-read status: try_enqueue may have transitioned it to 'queued'.
+    return SlideStylePreviewResponse(style_id=style_id, status="queued")
+
+
+# SDR-4437 HIGH-3: workspace-global library writes are admin-only.
+@router.post(
+    "/{style_id}/preview/regenerate",
+    response_model=SlideStylePreviewResponse,
+    dependencies=[Depends(require_admin)],
+)
+def regenerate_slide_style_preview(
+    style_id: int,
+    db: Session = Depends(get_db),
+):
+    """Explicitly (re)generate a slide-style preview. Admin-only, deduplicated.
+
+    Enqueues a background job against the current style snapshot. Idempotent: if
+    a generation is already in flight this is a no-op that returns the in-flight
+    status.
+    """
+    from datetime import datetime as _dt
+
+    from src.api.services.slide_style_preview_queue import claimable_clause, try_enqueue
+
+    style = db.query(SlideStyleLibrary).filter(SlideStyleLibrary.id == style_id).first()
+    if not style:
+        raise HTTPException(
+            status_code=status.HTTP_404_NOT_FOUND,
+            detail=f"Slide style {style_id} not found",
+        )
+
+    # Force a re-attempt even from a 'failed'/'ready' terminal state by clearing
+    # to 'missing' first (in its own committed txn), then enqueue. A live job is
+    # left alone (no duplicate generation); an abandoned one is claimable.
+    db.query(SlideStyleLibrary).filter(
+        SlideStyleLibrary.id == style_id, claimable_clause(_dt.utcnow())
+    ).update({"preview_status": "missing"}, synchronize_session=False)
+    db.commit()
+
+    try_enqueue(style_id)
+    db.refresh(style)
+    return SlideStylePreviewResponse(
+        style_id=style_id, status=style.preview_status or "queued"
+    )