fastapi-fullstack 0.2.5__tar.gz → 0.2.6__tar.gz

{fastapi_fullstack-0.2.5 → fastapi_fullstack-0.2.6}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: fastapi-fullstack
-Version: 0.2.5
+Version: 0.2.6
 Summary: Full-stack FastAPI + Next.js template generator with PydanticAI/LangChain agents, WebSocket streaming, 20+ enterprise integrations, and Logfire/LangSmith observability. Ship AI apps fast. CLI tool to generate production-ready FastAPI + Next.js projects with AI agents, auth, and observability.
 Project-URL: Homepage, https://github.com/vstorm-co/full-stack-ai-agent-template
 Project-URL: Documentation, https://github.com/vstorm-co/full-stack-ai-agent-template#readme
@@ -397,6 +397,7 @@ Generated projects include **CLAUDE.md** and **AGENTS.md** files optimized for A
 - **Messaging Channels** - Telegram and Slack multi-bot integration with polling, webhooks, per-thread sessions, group concurrency control
 - **Conversation Sharing** - Share conversations with users or via public links, admin conversation browser
 - **Conversation Persistence** - Save chat history to database
+- **Message Ratings** - Like/dislike responses with feedback, admin analytics
 - **Image Description** - Extract images from documents, describe via LLM vision
 - **Multimodal Embeddings** - Google Gemini embedding model (text + images)
 - **Document Sources** - Local files, API upload, Google Drive, S3/MinIO

{fastapi_fullstack-0.2.5 → fastapi_fullstack-0.2.6}/README.md

@@ -357,6 +357,7 @@ Generated projects include **CLAUDE.md** and **AGENTS.md** files optimized for A
 - **Messaging Channels** - Telegram and Slack multi-bot integration with polling, webhooks, per-thread sessions, group concurrency control
 - **Conversation Sharing** - Share conversations with users or via public links, admin conversation browser
 - **Conversation Persistence** - Save chat history to database
+- **Message Ratings** - Like/dislike responses with feedback, admin analytics
 - **Image Description** - Extract images from documents, describe via LLM vision
 - **Multimodal Embeddings** - Google Gemini embedding model (text + images)
 - **Document Sources** - Local files, API upload, Google Drive, S3/MinIO

{fastapi_fullstack-0.2.5 → fastapi_fullstack-0.2.6}/pyproject.toml

@@ -1,6 +1,6 @@
 [project]
 name = "fastapi-fullstack"
-version = "0.2.5"
+version = "0.2.6"
 description = "Full-stack FastAPI + Next.js template generator with PydanticAI/LangChain agents, WebSocket streaming, 20+ enterprise integrations, and Logfire/LangSmith observability. Ship AI apps fast. CLI tool to generate production-ready FastAPI + Next.js projects with AI agents, auth, and observability."
 readme = "README.md"
 requires-python = ">=3.11"
@@ -170,4 +170,5 @@ exclude_lines = [
 dev = [
     "ty>=0.0.29",
     "pytest-cov>=7.0.0",
+    "sqlalchemy>=2.0.40",
 ]

{fastapi_fullstack-0.2.5 → fastapi_fullstack-0.2.6}/template/{{cookiecutter.project_slug}}/.gitignore

@@ -103,5 +103,5 @@ Thumbs.db
 
 # Project specific
 {%- if cookiecutter.use_sqlite %}
-{{ cookiecutter.project_slug }}.db
+data/
 {%- endif %}

{fastapi_fullstack-0.2.5 → fastapi_fullstack-0.2.6}/template/{{cookiecutter.project_slug}}/README.md

@@ -131,6 +131,18 @@ Chat with the agent at http://localhost:{{ cookiecutter.frontend_port }}/chat
 - **Add tools:** See `docs/howto/add-agent-tool.md`
 - **Agent config:** `.env` → `AI_MODEL`, `AI_TEMPERATURE`
 
+## Message Ratings
+
+Users can rate AI responses with 👍/👎 and optional feedback comments.
+Administrators can view analytics and export rating data.
+
+{%- if cookiecutter.use_frontend %}
+- Rate messages at http://localhost:{{ cookiecutter.frontend_port }}/chat
+- Admin dashboard at http://localhost:{{ cookiecutter.frontend_port }}/admin/ratings
+{%- endif %}
+
+See `docs/howto/use-ratings.md` for full documentation.
+
 {%- if cookiecutter.enable_rag %}
 
 ## RAG (Knowledge Base)

{fastapi_fullstack-0.2.5 → fastapi_fullstack-0.2.6}/template/{{cookiecutter.project_slug}}/backend/.env.example

@@ -39,7 +39,7 @@ MONGO_DB={{ cookiecutter.project_slug }}
 {%- if cookiecutter.use_sqlite %}
 
 # === SQLite ===
-SQLITE_PATH=./{{ cookiecutter.project_slug }}.db
+SQLITE_PATH=./data/{{ cookiecutter.project_slug }}.db
 {%- endif %}
 
 {%- if cookiecutter.use_jwt %}

{fastapi_fullstack-0.2.5 → fastapi_fullstack-0.2.6}/template/{{cookiecutter.project_slug}}/backend/alembic/env.py

@@ -3,6 +3,7 @@
 # ruff: noqa: I001 - Imports structured for Jinja2 template conditionals
 
 from logging.config import fileConfig
+from pathlib import Path
 
 from alembic import context
 from sqlalchemy import engine_from_config, pool
@@ -19,6 +20,22 @@ from app.db.base import Base
 {%- if cookiecutter.use_jwt %}
 from app.db.models.user import User  # noqa: F401
 {%- endif %}
+from app.db.models.conversation import Conversation, Message, ToolCall  # noqa: F401
+{%- if cookiecutter.use_jwt %}
+from app.db.models.message_rating import MessageRating  # noqa: F401
+{%- endif %}
+{%- if cookiecutter.enable_session_management and cookiecutter.use_jwt %}
+from app.db.models.session import Session  # noqa: F401
+{%- endif %}
+{%- if cookiecutter.enable_webhooks %}
+from app.db.models.webhook import Webhook, WebhookDelivery  # noqa: F401
+{%- endif %}
+from app.db.models.chat_file import ChatFile  # noqa: F401
+{%- if cookiecutter.enable_rag %}
+from app.db.models.rag_document import RAGDocument  # noqa: F401
+from app.db.models.sync_log import SyncLog  # noqa: F401
+from app.db.models.sync_source import SyncSource  # noqa: F401
+{%- endif %}
 
 config = context.config
 
@@ -32,6 +49,13 @@ target_metadata = Base.metadata
 {%- endif %}
 
 
+# Ensure SQLite data directory exists before connecting
+{%- if cookiecutter.use_sqlite %}
+db_path = Path(settings.SQLITE_PATH)
+db_path.parent.mkdir(parents=True, exist_ok=True)
+{%- endif %}
+
+
 def get_url() -> str:
     """Get database URL from settings."""
 {%- if cookiecutter.use_postgresql %}

{fastapi_fullstack-0.2.5 → fastapi_fullstack-0.2.6}/template/{{cookiecutter.project_slug}}/backend/app/api/deps.py

@@ -198,6 +198,27 @@ def get_channel_bot_service() -> ChannelBotService:
 
 ChannelBotSvc = Annotated[ChannelBotService, Depends(get_channel_bot_service)]
 {%- endif %}
+{%- if cookiecutter.use_database and cookiecutter.use_jwt %}
+
+# Message rating service
+from app.services.message_rating import MessageRatingService
+{%- if cookiecutter.use_postgresql or cookiecutter.use_sqlite %}
+
+
+def get_rating_service(db: DBSession) -> MessageRatingService:
+    """Create MessageRatingService instance with database session."""
+    return MessageRatingService(db)
+{%- elif cookiecutter.use_mongodb %}
+
+
+def get_rating_service() -> MessageRatingService:
+    """Create MessageRatingService instance."""
+    return MessageRatingService()
+{%- endif %}
+
+
+MessageRatingSvc = Annotated[MessageRatingService, Depends(get_rating_service)]
+{%- endif %}
 
 {%- if cookiecutter.enable_rag and (cookiecutter.use_postgresql or cookiecutter.use_sqlite) %}
 from app.services.rag_document import RAGDocumentService
@@ -238,7 +259,6 @@ FileUploadSvc = Annotated[FileUploadService, Depends(get_file_upload_service)]
 {%- endif %}
 
 {%- if cookiecutter.use_jwt %}
-
 # === Authentication Dependencies ===
 
 from app.core.exceptions import AuthenticationError, AuthorizationError
@@ -247,8 +267,6 @@ from app.db.models.user import User, UserRole
 oauth2_scheme = OAuth2PasswordBearer(tokenUrl=f"{settings.API_V1_STR}/auth/login")
 
 {%- if cookiecutter.use_postgresql %}
-
-
 async def get_current_user(
     token: Annotated[str, Depends(oauth2_scheme)],
     user_service: UserSvc,
@@ -510,19 +528,44 @@ CurrentAdmin = Annotated[User, Depends(RoleChecker(UserRole.ADMIN))]
 
 
 # WebSocket authentication dependency
-from fastapi import WebSocket, Query, Cookie
+from fastapi import WebSocket, Cookie
+
+
+_WS_TOKEN_PROTOCOL_PREFIX = "access_token."
+
+
+def _extract_ws_auth(websocket: WebSocket) -> tuple[str | None, str | None]:
+    """Parse Sec-WebSocket-Protocol header for an auth token + app subprotocol.
+
+    Clients pass the token as a subprotocol of the form
+    ``access_token.<JWT>`` alongside an optional application subprotocol
+    (e.g. ``chat``). Returns (token, app_subprotocol) — either may be None.
+    """
+    raw = websocket.headers.get("sec-websocket-protocol") or ""
+    token: str | None = None
+    app_subprotocol: str | None = None
+    for proto in (p.strip() for p in raw.split(",") if p.strip()):
+        if proto.startswith(_WS_TOKEN_PROTOCOL_PREFIX):
+            token = proto[len(_WS_TOKEN_PROTOCOL_PREFIX):]
+        elif app_subprotocol is None:
+            app_subprotocol = proto
+    return token, app_subprotocol
 
 
 async def get_current_user_ws(
     websocket: WebSocket,
-    token: str | None = Query(None, alias="token"),
     access_token: str | None = Cookie(None),
 ) -> User:
-    """Get current user from WebSocket JWT token.
+    """Authenticate a WebSocket connection.
+
+    Token sources, checked in order:
+    1. ``Sec-WebSocket-Protocol`` header, in the form ``access_token.<JWT>``.
+       The chosen application subprotocol (e.g. ``chat``) is echoed back on
+       ``accept()`` via ``websocket.state.accept_subprotocol``.
+    2. Same-origin ``access_token`` cookie (fallback for same-origin clients).
 
-    Token can be passed either as:
-    - Query parameter: ws://...?token=<jwt>
-    - Cookie: access_token cookie (set by HTTP login)
+    Tokens in query strings are NOT accepted — they leak into logs and
+    Referer headers.
 
     Raises:
         AuthenticationError: If token is invalid or user not found.
@@ -531,8 +574,10 @@ async def get_current_user_ws(
 
     from app.core.security import verify_token
 
-    # Try query parameter first, then cookie
-    auth_token = token or access_token
+    subprotocol_token, app_subprotocol = _extract_ws_auth(websocket)
+    websocket.state.accept_subprotocol = app_subprotocol
+
+    auth_token = subprotocol_token or access_token
 
     if not auth_token:
         await websocket.close(code=4001, reason="Missing authentication token")
@@ -558,10 +603,26 @@ async def get_current_user_ws(
     async with get_db_context() as db:
         user_service = UserService(db)
         user = await user_service.get_by_id(UUID(user_id))
+
+        if not user.is_active:
+            await websocket.close(code=4001, reason="User account is disabled")
+            raise AuthenticationError(message="User account is disabled")
+
+        # Eagerly load all columns, then detach from session to avoid
+        # "instance not bound to a Session" errors after the context manager exits
+        await db.refresh(user)
+        db.expunge(user)
+        return user
 {%- elif cookiecutter.use_mongodb %}
 
     user_service = UserService()
     user = await user_service.get_by_id(user_id)
+
+    if not user.is_active:
+        await websocket.close(code=4001, reason="User account is disabled")
+        raise AuthenticationError(message="User account is disabled")
+
+    return user
 {%- elif cookiecutter.use_sqlite %}
 
     from contextlib import contextmanager
@@ -569,13 +630,17 @@ async def get_current_user_ws(
     with contextmanager(get_db_session)() as db:
         user_service = UserService(db)
         user = user_service.get_by_id(user_id)
-{%- endif %}
 
-    if not user.is_active:
-        await websocket.close(code=4001, reason="User account is disabled")
-        raise AuthenticationError(message="User account is disabled")
+        if not user.is_active:
+            await websocket.close(code=4001, reason="User account is disabled")
+            raise AuthenticationError(message="User account is disabled")
 
-    return user
+        # Eagerly load all columns, then detach from session for
+        # consistency with async behavior
+        db.refresh(user)
+        db.expunge(user)
+        return user
+{%- endif %}
 {%- endif %}
 
 {%- if cookiecutter.use_api_key %}

{fastapi_fullstack-0.2.5 → fastapi_fullstack-0.2.6}/template/{{cookiecutter.project_slug}}/backend/app/api/exception_handlers.py

@@ -4,9 +4,8 @@ These handlers convert domain exceptions to proper HTTP responses.
 """
 
 import logging
-from typing import Union
 
-from fastapi import FastAPI, Request, WebSocket
+from fastapi import FastAPI, Request
 from fastapi.responses import JSONResponse
 
 from app.core.exceptions import AppException
@@ -15,25 +14,19 @@ logger = logging.getLogger(__name__)
 
 
 async def app_exception_handler(
-    request: Union[Request, WebSocket], exc: AppException
+    request: Request, exc: AppException
 ) -> JSONResponse:
     """Handle application exceptions.
 
     Logs 5xx errors as errors and 4xx as warnings.
     Returns a standardized JSON error response.
-
-    Note: For WebSocket connections, this handler may not be able to return
-    a response if the connection was already closed.
     """
-    # WebSocket objects don't have a method attribute
-    method = getattr(request, "method", "WEBSOCKET")
-
     log_extra = {
         "error_code": exc.code,
         "status_code": exc.status_code,
         "details": exc.details,
         "path": request.url.path,
-        "method": method,
+        "method": request.method,
     }
 
     if exc.status_code >= 500:
@@ -59,20 +52,18 @@ async def app_exception_handler(
 
 
 async def unhandled_exception_handler(
-    request: Union[Request, WebSocket], exc: Exception
+    request: Request, exc: Exception
 ) -> JSONResponse:
     """Handle unexpected exceptions.
 
     Logs the full exception but returns a generic error to the client
     to avoid leaking sensitive information.
     """
-    method = getattr(request, "method", "WEBSOCKET")
-
     logger.exception(
         "Unhandled exception",
         extra={
             "path": request.url.path,
-            "method": method,
+            "method": request.method,
         },
     )
 
@@ -93,6 +84,6 @@ def register_exception_handlers(app: FastAPI) -> None:
 
     Call this after creating the FastAPI application instance.
     """
-    app.add_exception_handler(AppException, app_exception_handler)  # type: ignore[arg-type]
+    app.add_exception_handler(AppException, app_exception_handler)
     # Uncomment to catch all unhandled exceptions:
     # app.add_exception_handler(Exception, unhandled_exception_handler)

{fastapi_fullstack-0.2.5 → fastapi_fullstack-0.2.6}/template/{{cookiecutter.project_slug}}/backend/app/api/routes/v1/__init__.py

@@ -7,7 +7,7 @@ from fastapi import APIRouter
 
 from app.api.routes.v1 import health
 {%- if cookiecutter.use_jwt %}
-from app.api.routes.v1 import auth, users
+from app.api.routes.v1 import admin_ratings, auth, users
 {%- endif %}
 {%- if cookiecutter.enable_oauth %}
 from app.api.routes.v1 import oauth
@@ -56,6 +56,9 @@ v1_router.include_router(auth.router, prefix="/auth", tags=["auth"])
 
 # User routes
 v1_router.include_router(users.router, prefix="/users", tags=["users"])
+
+# Admin routes
+v1_router.include_router(admin_ratings.router, prefix="/admin/ratings", tags=["admin:ratings"])
 {%- endif %}
 
 {%- if cookiecutter.enable_oauth %}