domainkit 1.7.1__tar.gz → 2.0.0__tar.gz

{domainkit-1.7.1 → domainkit-2.0.0}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: domainkit
-Version: 1.7.1
+Version: 2.0.0
 Summary: A Django-style framework for domain-driven FastAPI services.
 License-Expression: MIT
 License-File: LICENSE
@@ -100,8 +100,8 @@ Requires-Dist: starlette (>=1.8.0,<2.0.0)
 Requires-Dist: tzdata (>=2025.2) ; extra == "tzdata"
 Requires-Dist: uvicorn[standard] (>=0.54.0,<1.0.0)
 Requires-Dist: uvloop (>=0.23.0,<1.0.0) ; (sys_platform != "win32") and (extra == "uvloop")
-Project-URL: Changelog, https://github.com/karimmattar/domainkit/blob/v1.7.1/CHANGELOG.md
-Project-URL: Documentation, https://github.com/karimmattar/domainkit/blob/v1.7.1/docs/reference.md
+Project-URL: Changelog, https://github.com/karimmattar/domainkit/blob/v2.0.0/CHANGELOG.md
+Project-URL: Documentation, https://github.com/karimmattar/domainkit/blob/v2.0.0/docs/reference.md
 Project-URL: Homepage, https://github.com/karimmattar/domainkit
 Project-URL: Issues, https://github.com/karimmattar/domainkit/issues
 Description-Content-Type: text/markdown
@@ -169,71 +169,71 @@ the pages of that release's tag; on GitHub, `main` describes the next
 release, and a release's pages are under its tag
 (`https://github.com/karimmattar/domainkit/tree/vX.Y.Z/docs`).
 
-- [docs/tutorial.md](https://github.com/karimmattar/domainkit/blob/v1.7.1/docs/tutorial.md): getting started, in five
+- [docs/tutorial.md](https://github.com/karimmattar/domainkit/blob/v2.0.0/docs/tutorial.md): getting started, in five
   parts: a first resource, rules, permissions, events and the worker, and
   tests and production; every command and code change run in CI
-- [docs/operations.md](https://github.com/karimmattar/domainkit/blob/v1.7.1/docs/operations.md): running in production:
+- [docs/operations.md](https://github.com/karimmattar/domainkit/blob/v2.0.0/docs/operations.md): running in production:
   processes, configuration, sizing, migrations in a rollout, the worker,
-  sealing, backups, and what to alert on; [docs/runbook.md](https://github.com/karimmattar/domainkit/blob/v1.7.1/docs/runbook.md)
-  for each alarm, [docs/security.md](https://github.com/karimmattar/domainkit/blob/v1.7.1/docs/security.md) the hardening
-  checklist, and [docs/upgrading.md](https://github.com/karimmattar/domainkit/blob/v1.7.1/docs/upgrading.md) from one version
+  sealing, backups, and what to alert on; [docs/runbook.md](https://github.com/karimmattar/domainkit/blob/v2.0.0/docs/runbook.md)
+  for each alarm, [docs/security.md](https://github.com/karimmattar/domainkit/blob/v2.0.0/docs/security.md) the hardening
+  checklist, and [docs/upgrading.md](https://github.com/karimmattar/domainkit/blob/v2.0.0/docs/upgrading.md) from one version
   to the next, and from 0.12 to 1.0
 
-- [docs/reference.md](https://github.com/karimmattar/domainkit/blob/v1.7.1/docs/reference.md): settings, deployment checks,
+- [docs/reference.md](https://github.com/karimmattar/domainkit/blob/v2.0.0/docs/reference.md): settings, deployment checks,
   middleware, errors, the API surface (OpenAPI, versions, deprecations),
   observability, testing, commands, and extension points, a page for each
-- [docs/databases.md](https://github.com/karimmattar/domainkit/blob/v1.7.1/docs/databases.md): several databases, routing,
+- [docs/databases.md](https://github.com/karimmattar/domainkit/blob/v2.0.0/docs/databases.md): several databases, routing,
   sharding, partitioning, and ledgers
-- [docs/queries.md](https://github.com/karimmattar/domainkit/blob/v1.7.1/docs/queries.md): querying repositories,
+- [docs/queries.md](https://github.com/karimmattar/domainkit/blob/v2.0.0/docs/queries.md): querying repositories,
   pages, filters, soft delete, row locks, and savepoints
-- [docs/resources.md](https://github.com/karimmattar/domainkit/blob/v1.7.1/docs/resources.md): aggregates over REST:
+- [docs/resources.md](https://github.com/karimmattar/domainkit/blob/v2.0.0/docs/resources.md): aggregates over REST:
   resource routes, commands and queries, derived schemas, partial changes,
   ETags and conditional writes, field policies, nesting, the generators,
   and the generic admin
-- [docs/runtime.md](https://github.com/karimmattar/domainkit/blob/v1.7.1/docs/runtime.md): how async work runs
+- [docs/runtime.md](https://github.com/karimmattar/domainkit/blob/v2.0.0/docs/runtime.md): how async work runs
   (event loops, background tasks, clean contexts, logging off the loop,
   finding blocking code, free-threaded Python, the shutdown budget,
   readiness, event-handler timeouts, workers and the outbox), running under
   load (request deadlines, load shedding, database timeouts and PgBouncer,
   outgoing HTTP calls), and servers
-- [docs/cache.md](https://github.com/karimmattar/domainkit/blob/v1.7.1/docs/cache.md): caches in memory, Redis, and Valkey,
+- [docs/cache.md](https://github.com/karimmattar/domainkit/blob/v2.0.0/docs/cache.md): caches in memory, Redis, and Valkey,
   and shared rate limits
-- [docs/money.md](https://github.com/karimmattar/domainkit/blob/v1.7.1/docs/money.md): amounts, currencies, rounding, and
+- [docs/money.md](https://github.com/karimmattar/domainkit/blob/v2.0.0/docs/money.md): amounts, currencies, rounding, and
   allocation, and money in tables, queries, and schemas
-- [docs/contrib.md](https://github.com/karimmattar/domainkit/blob/v1.7.1/docs/contrib.md): messaging (and workers on RabbitMQ),
+- [docs/contrib.md](https://github.com/karimmattar/domainkit/blob/v2.0.0/docs/contrib.md): messaging (and workers on RabbitMQ),
   webhooks, audit and records' history, idempotency, evidence, feature
   flags, keys and encrypted fields, the double-entry ledger, approvals,
   and limits
-- [docs/auth.md](https://github.com/karimmattar/domainkit/blob/v1.7.1/docs/auth.md): users, groups, permissions, content
+- [docs/auth.md](https://github.com/karimmattar/domainkit/blob/v2.0.0/docs/auth.md): users, groups, permissions, content
   types, passwords, backends, tokens, route rules, and the admin API
-- [docs/mail.md](https://github.com/karimmattar/domainkit/blob/v1.7.1/docs/mail.md): email, mail templates, text messages,
+- [docs/mail.md](https://github.com/karimmattar/domainkit/blob/v2.0.0/docs/mail.md): email, mail templates, text messages,
   and push notifications, sent through the outbox
-- [docs/i18n.md](https://github.com/karimmattar/domainkit/blob/v1.7.1/docs/i18n.md): responses in the caller's language,
+- [docs/i18n.md](https://github.com/karimmattar/domainkit/blob/v2.0.0/docs/i18n.md): responses in the caller's language,
   time zones, and number and date formats
-- [docs/uploads.md](https://github.com/karimmattar/domainkit/blob/v1.7.1/docs/uploads.md): file storages, receiving uploads,
+- [docs/uploads.md](https://github.com/karimmattar/domainkit/blob/v2.0.0/docs/uploads.md): file storages, receiving uploads,
   and serving files
-- [docs/live.md](https://github.com/karimmattar/domainkit/blob/v1.7.1/docs/live.md): WebSockets and Server-Sent Events,
+- [docs/live.md](https://github.com/karimmattar/domainkit/blob/v2.0.0/docs/live.md): WebSockets and Server-Sent Events,
   bounded and re-authorized while open, and committed events streamed live
-- [docs/privacy.md](https://github.com/karimmattar/domainkit/blob/v1.7.1/docs/privacy.md): exporting and erasing a person's
+- [docs/privacy.md](https://github.com/karimmattar/domainkit/blob/v2.0.0/docs/privacy.md): exporting and erasing a person's
   data, and retention
-- [docs/testing.md](https://github.com/karimmattar/domainkit/blob/v1.7.1/docs/testing.md): the pytest plugin: test databases,
+- [docs/testing.md](https://github.com/karimmattar/domainkit/blob/v2.0.0/docs/testing.md): the pytest plugin: test databases,
   sync and async clients, factories, a clock to freeze, and query counts
-- [docs/performance.md](https://github.com/karimmattar/domainkit/blob/v1.7.1/docs/performance.md): what a request costs, the
+- [docs/performance.md](https://github.com/karimmattar/domainkit/blob/v2.0.0/docs/performance.md): what a request costs, the
   benchmark ladder CI gates on, and how to make requests cheaper
-- [docs/versioning.md](https://github.com/karimmattar/domainkit/blob/v1.7.1/docs/versioning.md): compatibility, deprecations,
+- [docs/versioning.md](https://github.com/karimmattar/domainkit/blob/v2.0.0/docs/versioning.md): compatibility, deprecations,
   releases, and which releases get security fixes
-- [docs/threat-model.md](https://github.com/karimmattar/domainkit/blob/v1.7.1/docs/threat-model.md): what domainkit protects,
+- [docs/threat-model.md](https://github.com/karimmattar/domainkit/blob/v2.0.0/docs/threat-model.md): what domainkit protects,
   where the trust boundaries are, what it does at each, and what is left to
   a project
-- [docs/fintech.md](https://github.com/karimmattar/domainkit/blob/v1.7.1/docs/fintech.md): a bank's first review, answered: each
+- [docs/fintech.md](https://github.com/karimmattar/domainkit/blob/v2.0.0/docs/fintech.md): a bank's first review, answered: each
   control's page, setting, and test, and `domainkit init --profile fintech`,
   a project with them all on and wired
-- [docs/audit/0.9.0.md](https://github.com/karimmattar/domainkit/blob/v1.7.1/docs/audit/0.9.0.md): the 0.9.0 audit's findings
+- [docs/audit/0.9.0.md](https://github.com/karimmattar/domainkit/blob/v2.0.0/docs/audit/0.9.0.md): the 0.9.0 audit's findings
   that the CHANGELOG names, with their status
-- [docs/api.md](https://github.com/karimmattar/domainkit/blob/v1.7.1/docs/api.md): the public API, module by module, one line a name;
+- [docs/api.md](https://github.com/karimmattar/domainkit/blob/v2.0.0/docs/api.md): the public API, module by module, one line a name;
   `mkdocs.yml` builds these pages into a site, with every name's docstring
 - [docs/adr/](https://github.com/karimmattar/domainkit/tree/main/docs/adr): the decisions behind the design
-- [CHANGELOG.md](https://github.com/karimmattar/domainkit/blob/v1.7.1/CHANGELOG.md) and [SECURITY.md](https://github.com/karimmattar/domainkit/blob/v1.7.1/SECURITY.md)
+- [CHANGELOG.md](https://github.com/karimmattar/domainkit/blob/v2.0.0/CHANGELOG.md) and [SECURITY.md](https://github.com/karimmattar/domainkit/blob/v2.0.0/SECURITY.md)
 
 ## Quick start
 
@@ -261,7 +261,7 @@ shell history:
 
 ```bash
 read -rsp "Password: " PASSWORD && export PASSWORD
-TOKEN=$(python -c "import json, os; print(json.dumps({'username': 'admin', 'password': os.environ['PASSWORD']}))" \
+TOKEN=$(python -c "import json, os; print(json.dumps({'identifier': 'admin@example.com', 'password': os.environ['PASSWORD']}))" \
   | curl -s http://127.0.0.1:8000/auth/login -H "Content-Type: application/json" -d @- \
   | python -c "import json, sys; print(json.load(sys.stdin)['access_token'])")
 unset PASSWORD
@@ -279,7 +279,7 @@ grow it. Without `--minimal`, `startdomain` writes a fuller example (notes
 as child entities, an owner, events and a handler, filters); the tutorial
 starts from that one. A route the caller may not reach answers 404, as an unknown path does,
 so check the path first (`/docs` lists every route). `createsuperuser`
-without options asks for each value instead. [docs/tutorial.md](https://github.com/karimmattar/domainkit/blob/v1.7.1/docs/tutorial.md)
+without options asks for each value instead. [docs/tutorial.md](https://github.com/karimmattar/domainkit/blob/v2.0.0/docs/tutorial.md)
 goes on from here, in six parts from a first route: rules written by
 hand, permissions, events run by the worker, and tests.
 
@@ -287,7 +287,7 @@ hand, permissions, events run by the worker, and tests.
 Users, groups, and permissions are installed, requests are authenticated,
 and every route must say who may call it: generated domains need their
 model permissions, and `/auth` and `/admin/auth` log users in and manage
-them ([docs/auth.md](https://github.com/karimmattar/domainkit/blob/v1.7.1/docs/auth.md)).
+them ([docs/auth.md](https://github.com/karimmattar/domainkit/blob/v2.0.0/docs/auth.md)).
 
 
 ```text
@@ -319,13 +319,13 @@ also turn the API docs off, send HSTS for a year, and limit each caller to
 
 Serve it with one worker process per core, each on its own event loop:
 `uvicorn config.asgi:application --workers 4 --loop uvloop`, or Granian
-(`pip install 'domainkit[granian]'`). [docs/reference/servers.md](https://github.com/karimmattar/domainkit/blob/v1.7.1/docs/reference/servers.md)
-gives the whole command with its limits, and [docs/performance.md](https://github.com/karimmattar/domainkit/blob/v1.7.1/docs/performance.md)
+(`pip install 'domainkit[granian]'`). [docs/reference/servers.md](https://github.com/karimmattar/domainkit/blob/v2.0.0/docs/reference/servers.md)
+gives the whole command with its limits, and [docs/performance.md](https://github.com/karimmattar/domainkit/blob/v2.0.0/docs/performance.md)
 how many cores a load needs.
 
 ## Developing domainkit
 
-[CONTRIBUTING.md](https://github.com/karimmattar/domainkit/blob/v1.7.1/CONTRIBUTING.md)
+[CONTRIBUTING.md](https://github.com/karimmattar/domainkit/blob/v2.0.0/CONTRIBUTING.md)
 says how to set up, which checks a change must pass, and how to write it
 up. In short:
 
@@ -375,9 +375,9 @@ not the whole suite. A release reuses the run of its commit's push to
 A full mutation testing run happens weekly, in 17 shards that run side by
 side; each writes its score and the mutants no test caught to its job
 summary. Releases are published to PyPI
-from a version tag; see [docs/versioning.md](https://github.com/karimmattar/domainkit/blob/v1.7.1/docs/versioning.md).
+from a version tag; see [docs/versioning.md](https://github.com/karimmattar/domainkit/blob/v2.0.0/docs/versioning.md).
 
 ## License
 
-MIT; see [LICENSE](https://github.com/karimmattar/domainkit/blob/v1.7.1/LICENSE).
+MIT; see [LICENSE](https://github.com/karimmattar/domainkit/blob/v2.0.0/LICENSE).
 

{domainkit-1.7.1 → domainkit-2.0.0}/README.md

@@ -61,71 +61,71 @@ the pages of that release's tag; on GitHub, `main` describes the next
 release, and a release's pages are under its tag
 (`https://github.com/karimmattar/domainkit/tree/vX.Y.Z/docs`).
 
-- [docs/tutorial.md](https://github.com/karimmattar/domainkit/blob/v1.7.1/docs/tutorial.md): getting started, in five
+- [docs/tutorial.md](https://github.com/karimmattar/domainkit/blob/v2.0.0/docs/tutorial.md): getting started, in five
   parts: a first resource, rules, permissions, events and the worker, and
   tests and production; every command and code change run in CI
-- [docs/operations.md](https://github.com/karimmattar/domainkit/blob/v1.7.1/docs/operations.md): running in production:
+- [docs/operations.md](https://github.com/karimmattar/domainkit/blob/v2.0.0/docs/operations.md): running in production:
   processes, configuration, sizing, migrations in a rollout, the worker,
-  sealing, backups, and what to alert on; [docs/runbook.md](https://github.com/karimmattar/domainkit/blob/v1.7.1/docs/runbook.md)
-  for each alarm, [docs/security.md](https://github.com/karimmattar/domainkit/blob/v1.7.1/docs/security.md) the hardening
-  checklist, and [docs/upgrading.md](https://github.com/karimmattar/domainkit/blob/v1.7.1/docs/upgrading.md) from one version
+  sealing, backups, and what to alert on; [docs/runbook.md](https://github.com/karimmattar/domainkit/blob/v2.0.0/docs/runbook.md)
+  for each alarm, [docs/security.md](https://github.com/karimmattar/domainkit/blob/v2.0.0/docs/security.md) the hardening
+  checklist, and [docs/upgrading.md](https://github.com/karimmattar/domainkit/blob/v2.0.0/docs/upgrading.md) from one version
   to the next, and from 0.12 to 1.0
 
-- [docs/reference.md](https://github.com/karimmattar/domainkit/blob/v1.7.1/docs/reference.md): settings, deployment checks,
+- [docs/reference.md](https://github.com/karimmattar/domainkit/blob/v2.0.0/docs/reference.md): settings, deployment checks,
   middleware, errors, the API surface (OpenAPI, versions, deprecations),
   observability, testing, commands, and extension points, a page for each
-- [docs/databases.md](https://github.com/karimmattar/domainkit/blob/v1.7.1/docs/databases.md): several databases, routing,
+- [docs/databases.md](https://github.com/karimmattar/domainkit/blob/v2.0.0/docs/databases.md): several databases, routing,
   sharding, partitioning, and ledgers
-- [docs/queries.md](https://github.com/karimmattar/domainkit/blob/v1.7.1/docs/queries.md): querying repositories,
+- [docs/queries.md](https://github.com/karimmattar/domainkit/blob/v2.0.0/docs/queries.md): querying repositories,
   pages, filters, soft delete, row locks, and savepoints
-- [docs/resources.md](https://github.com/karimmattar/domainkit/blob/v1.7.1/docs/resources.md): aggregates over REST:
+- [docs/resources.md](https://github.com/karimmattar/domainkit/blob/v2.0.0/docs/resources.md): aggregates over REST:
   resource routes, commands and queries, derived schemas, partial changes,
   ETags and conditional writes, field policies, nesting, the generators,
   and the generic admin
-- [docs/runtime.md](https://github.com/karimmattar/domainkit/blob/v1.7.1/docs/runtime.md): how async work runs
+- [docs/runtime.md](https://github.com/karimmattar/domainkit/blob/v2.0.0/docs/runtime.md): how async work runs
   (event loops, background tasks, clean contexts, logging off the loop,
   finding blocking code, free-threaded Python, the shutdown budget,
   readiness, event-handler timeouts, workers and the outbox), running under
   load (request deadlines, load shedding, database timeouts and PgBouncer,
   outgoing HTTP calls), and servers
-- [docs/cache.md](https://github.com/karimmattar/domainkit/blob/v1.7.1/docs/cache.md): caches in memory, Redis, and Valkey,
+- [docs/cache.md](https://github.com/karimmattar/domainkit/blob/v2.0.0/docs/cache.md): caches in memory, Redis, and Valkey,
   and shared rate limits
-- [docs/money.md](https://github.com/karimmattar/domainkit/blob/v1.7.1/docs/money.md): amounts, currencies, rounding, and
+- [docs/money.md](https://github.com/karimmattar/domainkit/blob/v2.0.0/docs/money.md): amounts, currencies, rounding, and
   allocation, and money in tables, queries, and schemas
-- [docs/contrib.md](https://github.com/karimmattar/domainkit/blob/v1.7.1/docs/contrib.md): messaging (and workers on RabbitMQ),
+- [docs/contrib.md](https://github.com/karimmattar/domainkit/blob/v2.0.0/docs/contrib.md): messaging (and workers on RabbitMQ),
   webhooks, audit and records' history, idempotency, evidence, feature
   flags, keys and encrypted fields, the double-entry ledger, approvals,
   and limits
-- [docs/auth.md](https://github.com/karimmattar/domainkit/blob/v1.7.1/docs/auth.md): users, groups, permissions, content
+- [docs/auth.md](https://github.com/karimmattar/domainkit/blob/v2.0.0/docs/auth.md): users, groups, permissions, content
   types, passwords, backends, tokens, route rules, and the admin API
-- [docs/mail.md](https://github.com/karimmattar/domainkit/blob/v1.7.1/docs/mail.md): email, mail templates, text messages,
+- [docs/mail.md](https://github.com/karimmattar/domainkit/blob/v2.0.0/docs/mail.md): email, mail templates, text messages,
   and push notifications, sent through the outbox
-- [docs/i18n.md](https://github.com/karimmattar/domainkit/blob/v1.7.1/docs/i18n.md): responses in the caller's language,
+- [docs/i18n.md](https://github.com/karimmattar/domainkit/blob/v2.0.0/docs/i18n.md): responses in the caller's language,
   time zones, and number and date formats
-- [docs/uploads.md](https://github.com/karimmattar/domainkit/blob/v1.7.1/docs/uploads.md): file storages, receiving uploads,
+- [docs/uploads.md](https://github.com/karimmattar/domainkit/blob/v2.0.0/docs/uploads.md): file storages, receiving uploads,
   and serving files
-- [docs/live.md](https://github.com/karimmattar/domainkit/blob/v1.7.1/docs/live.md): WebSockets and Server-Sent Events,
+- [docs/live.md](https://github.com/karimmattar/domainkit/blob/v2.0.0/docs/live.md): WebSockets and Server-Sent Events,
   bounded and re-authorized while open, and committed events streamed live
-- [docs/privacy.md](https://github.com/karimmattar/domainkit/blob/v1.7.1/docs/privacy.md): exporting and erasing a person's
+- [docs/privacy.md](https://github.com/karimmattar/domainkit/blob/v2.0.0/docs/privacy.md): exporting and erasing a person's
   data, and retention
-- [docs/testing.md](https://github.com/karimmattar/domainkit/blob/v1.7.1/docs/testing.md): the pytest plugin: test databases,
+- [docs/testing.md](https://github.com/karimmattar/domainkit/blob/v2.0.0/docs/testing.md): the pytest plugin: test databases,
   sync and async clients, factories, a clock to freeze, and query counts
-- [docs/performance.md](https://github.com/karimmattar/domainkit/blob/v1.7.1/docs/performance.md): what a request costs, the
+- [docs/performance.md](https://github.com/karimmattar/domainkit/blob/v2.0.0/docs/performance.md): what a request costs, the
   benchmark ladder CI gates on, and how to make requests cheaper
-- [docs/versioning.md](https://github.com/karimmattar/domainkit/blob/v1.7.1/docs/versioning.md): compatibility, deprecations,
+- [docs/versioning.md](https://github.com/karimmattar/domainkit/blob/v2.0.0/docs/versioning.md): compatibility, deprecations,
   releases, and which releases get security fixes
-- [docs/threat-model.md](https://github.com/karimmattar/domainkit/blob/v1.7.1/docs/threat-model.md): what domainkit protects,
+- [docs/threat-model.md](https://github.com/karimmattar/domainkit/blob/v2.0.0/docs/threat-model.md): what domainkit protects,
   where the trust boundaries are, what it does at each, and what is left to
   a project
-- [docs/fintech.md](https://github.com/karimmattar/domainkit/blob/v1.7.1/docs/fintech.md): a bank's first review, answered: each
+- [docs/fintech.md](https://github.com/karimmattar/domainkit/blob/v2.0.0/docs/fintech.md): a bank's first review, answered: each
   control's page, setting, and test, and `domainkit init --profile fintech`,
   a project with them all on and wired
-- [docs/audit/0.9.0.md](https://github.com/karimmattar/domainkit/blob/v1.7.1/docs/audit/0.9.0.md): the 0.9.0 audit's findings
+- [docs/audit/0.9.0.md](https://github.com/karimmattar/domainkit/blob/v2.0.0/docs/audit/0.9.0.md): the 0.9.0 audit's findings
   that the CHANGELOG names, with their status
-- [docs/api.md](https://github.com/karimmattar/domainkit/blob/v1.7.1/docs/api.md): the public API, module by module, one line a name;
+- [docs/api.md](https://github.com/karimmattar/domainkit/blob/v2.0.0/docs/api.md): the public API, module by module, one line a name;
   `mkdocs.yml` builds these pages into a site, with every name's docstring
 - [docs/adr/](https://github.com/karimmattar/domainkit/tree/main/docs/adr): the decisions behind the design
-- [CHANGELOG.md](https://github.com/karimmattar/domainkit/blob/v1.7.1/CHANGELOG.md) and [SECURITY.md](https://github.com/karimmattar/domainkit/blob/v1.7.1/SECURITY.md)
+- [CHANGELOG.md](https://github.com/karimmattar/domainkit/blob/v2.0.0/CHANGELOG.md) and [SECURITY.md](https://github.com/karimmattar/domainkit/blob/v2.0.0/SECURITY.md)
 
 ## Quick start
 
@@ -153,7 +153,7 @@ shell history:
 
 ```bash
 read -rsp "Password: " PASSWORD && export PASSWORD
-TOKEN=$(python -c "import json, os; print(json.dumps({'username': 'admin', 'password': os.environ['PASSWORD']}))" \
+TOKEN=$(python -c "import json, os; print(json.dumps({'identifier': 'admin@example.com', 'password': os.environ['PASSWORD']}))" \
   | curl -s http://127.0.0.1:8000/auth/login -H "Content-Type: application/json" -d @- \
   | python -c "import json, sys; print(json.load(sys.stdin)['access_token'])")
 unset PASSWORD
@@ -171,7 +171,7 @@ grow it. Without `--minimal`, `startdomain` writes a fuller example (notes
 as child entities, an owner, events and a handler, filters); the tutorial
 starts from that one. A route the caller may not reach answers 404, as an unknown path does,
 so check the path first (`/docs` lists every route). `createsuperuser`
-without options asks for each value instead. [docs/tutorial.md](https://github.com/karimmattar/domainkit/blob/v1.7.1/docs/tutorial.md)
+without options asks for each value instead. [docs/tutorial.md](https://github.com/karimmattar/domainkit/blob/v2.0.0/docs/tutorial.md)
 goes on from here, in six parts from a first route: rules written by
 hand, permissions, events run by the worker, and tests.
 
@@ -179,7 +179,7 @@ hand, permissions, events run by the worker, and tests.
 Users, groups, and permissions are installed, requests are authenticated,
 and every route must say who may call it: generated domains need their
 model permissions, and `/auth` and `/admin/auth` log users in and manage
-them ([docs/auth.md](https://github.com/karimmattar/domainkit/blob/v1.7.1/docs/auth.md)).
+them ([docs/auth.md](https://github.com/karimmattar/domainkit/blob/v2.0.0/docs/auth.md)).
 
 
 ```text
@@ -211,13 +211,13 @@ also turn the API docs off, send HSTS for a year, and limit each caller to
 
 Serve it with one worker process per core, each on its own event loop:
 `uvicorn config.asgi:application --workers 4 --loop uvloop`, or Granian
-(`pip install 'domainkit[granian]'`). [docs/reference/servers.md](https://github.com/karimmattar/domainkit/blob/v1.7.1/docs/reference/servers.md)
-gives the whole command with its limits, and [docs/performance.md](https://github.com/karimmattar/domainkit/blob/v1.7.1/docs/performance.md)
+(`pip install 'domainkit[granian]'`). [docs/reference/servers.md](https://github.com/karimmattar/domainkit/blob/v2.0.0/docs/reference/servers.md)
+gives the whole command with its limits, and [docs/performance.md](https://github.com/karimmattar/domainkit/blob/v2.0.0/docs/performance.md)
 how many cores a load needs.
 
 ## Developing domainkit
 
-[CONTRIBUTING.md](https://github.com/karimmattar/domainkit/blob/v1.7.1/CONTRIBUTING.md)
+[CONTRIBUTING.md](https://github.com/karimmattar/domainkit/blob/v2.0.0/CONTRIBUTING.md)
 says how to set up, which checks a change must pass, and how to write it
 up. In short:
 
@@ -267,8 +267,8 @@ not the whole suite. A release reuses the run of its commit's push to
 A full mutation testing run happens weekly, in 17 shards that run side by
 side; each writes its score and the mutants no test caught to its job
 summary. Releases are published to PyPI
-from a version tag; see [docs/versioning.md](https://github.com/karimmattar/domainkit/blob/v1.7.1/docs/versioning.md).
+from a version tag; see [docs/versioning.md](https://github.com/karimmattar/domainkit/blob/v2.0.0/docs/versioning.md).
 
 ## License
 
-MIT; see [LICENSE](https://github.com/karimmattar/domainkit/blob/v1.7.1/LICENSE).
+MIT; see [LICENSE](https://github.com/karimmattar/domainkit/blob/v2.0.0/LICENSE).

{domainkit-1.7.1 → domainkit-2.0.0}/pyproject.toml

@@ -1,6 +1,6 @@
 [project]
 name = "domainkit"
-version = "1.7.1"
+version = "2.0.0"
 description = "A Django-style framework for domain-driven FastAPI services."
 readme = "README.md"
 license = "MIT"
@@ -148,8 +148,8 @@ domainkit = "domainkit.management:execute_from_command_line"
 
 [project.urls]
 Homepage = "https://github.com/karimmattar/domainkit"
-Documentation = "https://github.com/karimmattar/domainkit/blob/v1.7.1/docs/reference.md"
-Changelog = "https://github.com/karimmattar/domainkit/blob/v1.7.1/CHANGELOG.md"
+Documentation = "https://github.com/karimmattar/domainkit/blob/v2.0.0/docs/reference.md"
+Changelog = "https://github.com/karimmattar/domainkit/blob/v2.0.0/CHANGELOG.md"
 Issues = "https://github.com/karimmattar/domainkit/issues"
 
 [build-system]

{domainkit-1.7.1 → domainkit-2.0.0}/src/domainkit/conf/global_settings.py

@@ -1543,7 +1543,7 @@ class Settings(BaseModel):
         if self.SECRET_KEY is None:
             yield CheckMessage(
                 "security.E016",
-                f"SECRET_KEY is required {where}: it signs reset links, cookies, "
+                f"SECRET_KEY is required {where}: it signs cookies, codes, "
                 "and other values the service hands out",
                 "Make one with: python -c 'import secrets; "
                 "print(secrets.token_urlsafe(64))'.",

{domainkit-1.7.1 → domainkit-2.0.0}/src/domainkit/contrib/audit/apps.py

@@ -129,5 +129,10 @@ class AuditConfig(DomainConfig):
         await write(uow.session, event_rows(events, config))
 
     def databases(self, router: DatabaseRouter) -> frozenset[str]:
-        """Every hosting target: events are audited where they commit."""
-        return frozenset(router.hosting_targets())
+        """Every hosting target, where events are audited as they commit.
+
+        And ``AUDIT.DATABASE``, which keeps the explicit records and the
+        ledger states, when no domain lives there.
+        """
+        config = registry.settings(AuditSettings)
+        return frozenset({*router.hosting_targets(), config.DATABASE})

{domainkit-1.7.1 → domainkit-2.0.0}/src/domainkit/contrib/audit/baseline.py

@@ -7,16 +7,17 @@ that seals on a schedule (the worker, with ``domainkit.contrib.messaging``,
 or ``audit seal`` from cron, ``AUDIT.SEALED_EXTERNALLY``), and the
 ``protect()`` triggers on PostgreSQL. ``check`` lists the settings that
 are missing; the application, when it starts, also asks each audited
-PostgreSQL database for the triggers. With ``AUDIT.REQUIRE_BASELINE``, the
-default since 0.10, both refuse: each problem is an error (``audit.E001`` to
-``audit.E005``), which ``SILENCED_CHECKS`` cannot silence. A project that sets
-it to False gets the same problems as warnings (``audit.W001`` to
-``audit.W005``), as in 0.9.
+PostgreSQL database for the triggers, in its own schema and in each
+tenant's schema that holds a trail (``TENANCY.SCHEMA_DATABASES``). With
+``AUDIT.REQUIRE_BASELINE``, the default since 0.10, both refuse: each
+problem is an error (``audit.E001`` to ``audit.E005``), which
+``SILENCED_CHECKS`` cannot silence. A project that sets it to False gets
+the same problems as warnings (``audit.W001`` to ``audit.W005``), as in 0.9.
 """
 
 import asyncio
 import logging
-from typing import Final
+from typing import Any, Final
 
 from sqlalchemy import text
 from sqlalchemy.exc import SQLAlchemyError
@@ -26,6 +27,7 @@ from domainkit.checks import CheckFailed, CheckMessage
 from domainkit.conf import settings
 from domainkit.conf.global_settings import DEPLOYED_ENVIRONMENTS
 from domainkit.db import connections
+from domainkit.db.uow import tenant_schemas
 
 from .personal import audited_databases
 from .protection import ROW_TRIGGER, TRUNCATE_TRIGGER, function_body, trigger_names
@@ -48,6 +50,28 @@ _TRIGGERS: Final = text(
 )
 """The triggers on the trail and its seals, as ``search_path`` finds them,
 with what decides whether they fire and what they run."""
+_OWN_TRAIL: Final = text("SELECT to_regclass(:log)")
+"""The connection's own schema's trail, if it holds one."""
+_TENANT_TRAILS: Final = text(
+    "SELECT n.nspname FROM pg_class AS c "
+    "JOIN pg_namespace AS n ON n.oid = c.relnamespace "
+    "WHERE c.relname = :log AND n.nspname = ANY(:schemas)"
+)
+"""The tenant schemas, of those named, that hold an audit trail."""
+_TENANT_TRIGGERS: Final = text(
+    "SELECT n.nspname, c.relname, t.tgname, t.tgenabled::text AS enabled, "
+    "t.tgtype, "
+    "t.tgqual IS NULL AND t.tgnargs = 0 AND cardinality(t.tgattr::int2[]) = 0 "
+    "AS plain, p.proname, p.prosrc, l.lanname "
+    "FROM pg_trigger AS t "
+    "JOIN pg_class AS c ON c.oid = t.tgrelid "
+    "JOIN pg_namespace AS n ON n.oid = c.relnamespace "
+    "JOIN pg_proc AS p ON p.oid = t.tgfoid "
+    "JOIN pg_language AS l ON l.oid = p.prolang "
+    "WHERE c.relname IN (:log, :seals) AND n.nspname = ANY(:schemas) "
+    "AND NOT t.tgisinternal"
+)
+"""The same triggers in every tenant schema named, in one round trip."""
 FIRING: Final = frozenset({"O", "A"})
 """``tgenabled`` of a trigger that fires for the application's sessions.
 
@@ -132,24 +156,76 @@ async def missing_triggers(database: str) -> list[str]:
     same events, for each row or statement, with no ``WHEN``, columns, or
     arguments, and running the plpgsql function ``protect()`` writes, its
     body the same but for whitespace. None on databases other than
-    PostgreSQL: ``protect()`` does nothing there.
+    PostgreSQL: ``protect()`` does nothing there. None either on a database
+    that keeps a schema per tenant and holds no trail of its own: plain
+    ``migrate`` leaves its own schema out (``missing_in_tenant_trails``).
     """
+    tenancy = settings.TENANCY
+    per_tenant = tenancy is not None and database in tenancy.SCHEMA_DATABASES
     async with connections.engine(database).connect() as connection:
         if connection.dialect.name != "postgresql":
             return []
+        if (
+            per_tenant
+            and await connection.scalar(_OWN_TRAIL, {"log": audit_log.name}) is None
+        ):
+            return []
         found = await connection.execute(
             _TRIGGERS, {"log": audit_log.name, "seals": audit_seals.name}
         )
+        present = {(row.relname, row.tgname) for row in found if _as_protect_made(row)}
+    return sorted(name for table, name in PROTECTED.keys() - present)
+
+
+async def missing_in_tenant_trails(database: str) -> dict[str, list[str]]:
+    """The ``protect()`` triggers each tenant's trail of ``database`` lacks.
+
+    By trail (``<alias>/<schema>``), for each tenant schema that holds an
+    audit trail; empty where the database keeps no schema per tenant. Two
+    round trips, however many tenants there are.
+    """
+    tenants = [schema for schema in await tenant_schemas(database) if schema]
+    if not tenants:
+        return {}
+    async with connections.engine(database).connect() as connection:
+        trails = set(
+            (
+                await connection.execute(
+                    _TENANT_TRAILS, {"log": audit_log.name, "schemas": tenants}
+                )
+            ).scalars()
+        )
+        found = await connection.execute(
+            _TENANT_TRIGGERS,
+            {"log": audit_log.name, "seals": audit_seals.name, "schemas": tenants},
+        )
         present = {
-            (row.relname, row.tgname)
+            (row.nspname, row.relname, row.tgname)
             for row in found
-            if row.enabled in FIRING
-            and row.plain
-            and row.lanname == "plpgsql"
-            and PROTECTED.get((row.relname, row.tgname))
-            == (row.tgtype, row.proname, " ".join(row.prosrc.split()))
+            if _as_protect_made(row)
         }
-    return sorted(name for table, name in PROTECTED.keys() - present)
+    return {
+        f"{database}/{schema}": missing
+        for schema in sorted(trails)
+        if (
+            missing := sorted(
+                name
+                for table, name in PROTECTED
+                if (schema, table, name) not in present
+            )
+        )
+    }
+
+
+def _as_protect_made(row: Any) -> bool:  # noqa: ANN401 - a row of either query.
+    """Whether a trigger fires, and runs, as ``protect()`` made it."""
+    return bool(
+        row.enabled in FIRING
+        and row.plain
+        and row.lanname == "plpgsql"
+        and PROTECTED.get((row.relname, row.tgname))
+        == (row.tgtype, row.proname, " ".join(row.prosrc.split()))
+    )
 
 
 async def protection_problems() -> list[str]:
@@ -159,6 +235,8 @@ async def protection_problems() -> list[str]:
         try:
             async with asyncio.timeout(PROBE_TIMEOUT):
                 missing = await missing_triggers(database)
+                by_trail = {database: missing} if missing else {}
+                by_trail |= await missing_in_tenant_trails(database)
         except (SQLAlchemyError, OSError, TimeoutError) as exc:
             problems.append(
                 _problem(
@@ -169,18 +247,29 @@ async def protection_problems() -> list[str]:
                 )
             )
             continue
-        if missing:
-            problems.append(
-                _problem(
-                    5,
-                    f"The audit trail in {database!r} is not append-only: triggers "
-                    f"{', '.join(missing)} are missing, disabled, or changed. Run "
-                    "'manage.py migrate', which makes them.",
-                )
+        problems.extend(
+            _problem(
+                5,
+                f"The audit trail in {trail!r} is not append-only: triggers "
+                f"{', '.join(lacking)} are missing, disabled, or changed. Run "
+                f"'manage.py {_migrate(trail)}', which makes them.",
             )
+            for trail, lacking in by_trail.items()
+        )
     return problems
 
 
+def _migrate(trail: str) -> str:
+    """The command that makes a trail's triggers: a tenant's is migrated as it."""
+    _, _, schema = trail.partition("/")
+    config = settings.TENANCY
+    if not schema or config is None:
+        return "migrate"
+    prefix, _, suffix = config.SCHEMA.partition("{tenant}")
+    tenant = schema.removeprefix(prefix).removesuffix(suffix)
+    return f"migrate --tenant {tenant}"
+
+
 async def check_at_startup() -> None:
     """Warn, or refuse with ``AUDIT.REQUIRE_BASELINE``, in staging and production.
 

{domainkit-1.7.1 → domainkit-2.0.0}/src/domainkit/contrib/audit/management/commands/audit.py

@@ -262,17 +262,19 @@ class Command(ActionCommand):
         before = clock.now() - timedelta(days=keep_days)
         async with self.recorded("auditprune", keep_days=keep_days) as record:
             record["rows"] = 0
-            for alias in (database,) if database else audited_databases():
+            aliases = (database,) if database else audited_databases()
+            for alias, schema in await trails(aliases):
                 try:
-                    pruned = await prune(alias, before=before, ledger=ledger)
+                    with in_trail(schema):
+                        pruned = await prune(alias, before=before, ledger=ledger)
                 except PruneRefused as exc:
                     raise CommandError(str(exc)) from None
                 record["rows"] = int(str(record["rows"])) + pruned.rows
                 if pruned.checkpoint is None:
-                    self.write(f"{alias}: nothing to prune.")
+                    self.write(f"{pruned.database}: nothing to prune.")
                 else:
                     self.write(
-                        f"{alias}: pruned {pruned.rows} "
+                        f"{pruned.database}: pruned {pruned.rows} "
                         f"row{'' if pruned.rows == 1 else 's'} below seal "
                         f"#{pruned.checkpoint.seq}."
                     )