ffbb-data-client 2.0.1__tar.gz → 2.1.0__tar.gz

{ffbb_data_client-2.0.1 → ffbb_data_client-2.1.0}/.coveragerc

@@ -3,7 +3,7 @@
 
 [run]
 branch = True
-source = ffbb_api_client_v3
+source = ffbb_data_client
 parallel = True
 # CRITICAL for Coveralls: ensures paths are relative to the git root
 # Without this, Coveralls reports 0% or fails to map files
@@ -21,9 +21,9 @@ omit =
 # Maps coverage paths from different environments (tox, Docker, etc.)
 # to the canonical source root. Order matters: first match wins.
 source =
-    src/ffbb_api_client_v3
-    */ffbb_api_client_v3
-    */src/ffbb_api_client_v3
+    src/ffbb_data_client
+    */ffbb_data_client
+    */src/ffbb_data_client
 
 [report]
 # Minimum coverage threshold — CI will fail below this
@@ -62,7 +62,7 @@ exclude_lines =
 
 [html]
 directory = htmlcov
-title = FFBBApiClientV3 Coverage
+title = FFBB Data Client Coverage
 
 [xml]
 # Required by coverallsapp/github-action@v2 Universal Coverage Reporter

ffbb_data_client-2.1.0/.github/dependabot.yml

@@ -0,0 +1,19 @@
+version: 2
+updates:
+  - package-ecosystem: "github-actions"
+    directory: "/"
+    schedule:
+      interval: "weekly"
+    open-pull-requests-limit: 5
+
+  - package-ecosystem: "pip"
+    directory: "/"
+    schedule:
+      interval: "weekly"
+    open-pull-requests-limit: 5
+
+  - package-ecosystem: "pip"
+    directory: "/docs"
+    schedule:
+      interval: "weekly"
+    open-pull-requests-limit: 5

{ffbb_data_client-2.0.1 → ffbb_data_client-2.1.0}/.github/scripts/check_wrapper_parity.py

@@ -74,11 +74,24 @@ def main() -> int:
         return 0
 
     # Build markdown report
+    missing_detail = " ".join(
+        [
+            "The following methods exist in inner clients but are **not exposed**",
+            "in `FFBBDataClient`:",
+        ]
+    )
+    fix_detail = " ".join(
+        [
+            "Add the missing method(s) to",
+            "`src/ffbb_data_client/clients/ffbb_data_client.py`",
+            "so they delegate to the appropriate inner client.",
+        ]
+    )
+
     lines = [
         "## ⚠️ Wrapper parity check failed",
         "",
-        "The following methods exist in inner clients but are **not exposed** "
-        "in `FFBBDataClient`:",
+        missing_detail,
         "",
         "| Method | Source client |",
         "|---|---|",
@@ -94,9 +107,7 @@ def main() -> int:
     lines += [
         "",
         "### How to fix",
-        "Add the missing method(s) to "
-        "`src/ffbb_data_client/clients/ffbb_data_client.py` "
-        "so they delegate to the appropriate inner client.",
+        fix_detail,
     ]
 
     report = "\n".join(lines)

{ffbb_data_client-2.0.1 → ffbb_data_client-2.1.0}/.github/workflows/check_wrapper_parity.yml

@@ -23,10 +23,10 @@ jobs:
 
     steps:
       - name: Checkout
-        uses: actions/checkout@v6
+        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd  # v6.0.2
 
       - name: Set up Python
-        uses: actions/setup-python@v6
+        uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405  # v6.2.0
         with:
           python-version: '3.11'
 

{ffbb_data_client-2.0.1 → ffbb_data_client-2.1.0}/.github/workflows/ci.yml

@@ -37,6 +37,10 @@ jobs:
         with: {python-version: "3.14"}
       - name: Run static analysis and format checkers
         run: pipx run pre-commit run --all-files --show-diff-on-failure
+      - name: Run type checks
+        run: >-
+          pipx run --python '${{ steps.setup-python.outputs.python-path }}'
+          tox -e type
       - name: Build package distribution files
         run: >-
           pipx run --python '${{ steps.setup-python.outputs.python-path }}'
@@ -74,7 +78,7 @@ jobs:
           tox -e validate
       - name: Record the path of wheel distribution
         id: wheel-distribution
-        run: echo "path=$(ls dist/*.whl)" >> $GITHUB_OUTPUT
+        run: echo "path=$(ls dist/*.whl)" >> "$GITHUB_OUTPUT"
       - name: Store the distribution files for use in other stages
         uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a  # v7.0.1
         with:
@@ -118,6 +122,7 @@ jobs:
       # `parallel: true` signals that more reports are coming from other jobs.
       # `flag-name` labels this specific combination for per-flag drill-down on Coveralls.
       - name: Upload coverage to Coveralls (parallel)
+        if: ${{ github.ref_type != 'tag' }}
         uses: coverallsapp/github-action@648a8eb78e6d50909eff900e4ec85cab4524a45b  # v2.3.6
         with:
           file: coverage.lcov
@@ -136,6 +141,7 @@ jobs:
     if: ${{ always() }}
     steps:
       - name: Finalize coverage report on Coveralls
+        if: ${{ github.ref_type != 'tag' }}
         uses: coverallsapp/github-action@648a8eb78e6d50909eff900e4ec85cab4524a45b  # v2.3.6
         with:
           github-token: ${{ secrets.GITHUB_TOKEN }}

ffbb_data_client-2.1.0/.github/workflows/codeql.yml

@@ -0,0 +1,33 @@
+name: CodeQL
+
+on:
+  push:
+    branches: [master]
+  pull_request:
+  schedule:
+    - cron: '31 2 * * 1'
+
+permissions:
+  contents: read
+
+jobs:
+  analyze:
+    name: Analyze Python
+    runs-on: ubuntu-latest
+    permissions:
+      actions: read
+      contents: read
+      security-events: write
+
+    steps:
+      - name: Checkout
+        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd  # v6.0.2
+
+      - name: Initialize CodeQL
+        uses: github/codeql-action/init@9e0d7b8d25671d64c341c19c0152d693099fb5ba  # v4
+        with:
+          languages: python
+          queries: security-extended,security-and-quality
+
+      - name: Perform CodeQL Analysis
+        uses: github/codeql-action/analyze@9e0d7b8d25671d64c341c19c0152d693099fb5ba  # v4

ffbb_data_client-2.1.0/.github/workflows/deploy-pages.yml

@@ -0,0 +1,55 @@
+name: Deploy landing page to Pages
+
+on:
+  push:
+    branches: ["master"]
+  # Permet de lancer manuellement depuis l'onglet Actions
+  workflow_dispatch:
+
+# Permissions par défaut minimales
+permissions:
+  contents: read
+
+# Permet d'annuler les déploiements obsolètes
+concurrency:
+  group: "pages"
+  cancel-in-progress: true
+
+jobs:
+  build:
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout
+        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd  # v6.0.2
+        with:
+          fetch-depth: 0
+
+      - name: Inject Dynamic Version for SEO
+        run: |
+          set -euo pipefail
+          LATEST_TAG=$(git describe --tags --abbrev=0)
+          VERSION=${LATEST_TAG#v}
+          echo "Dernière version trouvée : $VERSION. Injection dans le JSON-LD Schema..."
+          sed -i "s/\"softwareVersion\": \"[^\"]*\"/\"softwareVersion\": \"$VERSION\"/g" website/index.html
+
+      - name: Add Pages marker
+        run: touch website/.nojekyll
+
+      - name: Upload Pages artifact
+        uses: actions/upload-pages-artifact@fc324d3547104276b827a68afc52ff2a11cc49c9  # v5
+        with:
+          path: website
+
+  deploy:
+    needs: build
+    runs-on: ubuntu-latest
+    permissions:
+      pages: write
+      id-token: write
+    environment:
+      name: github-pages
+      url: ${{ steps.deployment.outputs.page_url }}
+    steps:
+      - name: Deploy to GitHub Pages
+        id: deployment
+        uses: actions/deploy-pages@cd2ce8fcbc39b97be8ca5fce6e763baed58fa128  # v5

{ffbb_data_client-2.0.1 → ffbb_data_client-2.1.0}/.github/workflows/publish.yml

@@ -5,19 +5,26 @@ on:
     tags:
       - 'v*'
 
+permissions:
+  contents: read
+
 jobs:
   build:
     name: Build distribution
     runs-on: ubuntu-latest
+    permissions:
+      attestations: write
+      contents: read
+      id-token: write
 
     steps:
       - name: Checkout
-        uses: actions/checkout@v6
+        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd  # v6.0.2
         with:
           fetch-depth: 0  # Required for setuptools_scm to resolve version from tags
 
       - name: Set up Python
-        uses: actions/setup-python@v6
+        uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405  # v6.2.0
         with:
           python-version: '3.11'
 
@@ -56,11 +63,16 @@ jobs:
           PY
 
       - name: Upload distribution artifacts
-        uses: actions/upload-artifact@v7
+        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a  # v7.0.1
         with:
           name: dist
           path: dist/
 
+      - name: Generate artifact attestation
+        uses: actions/attest@59d89421af93a897026c735860bf21b6eb4f7b26  # v4
+        with:
+          subject-path: dist/*
+
   publish-pypi:
     name: Publish to PyPI
     needs: build
@@ -71,13 +83,13 @@ jobs:
 
     steps:
       - name: Download distribution artifacts
-        uses: actions/download-artifact@v8
+        uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c  # v8.0.1
         with:
           name: dist
           path: dist/
 
       - name: Publish to PyPI
-        uses: pypa/gh-action-pypi-publish@release/v1
+        uses: pypa/gh-action-pypi-publish@cef221092ed1bacb1cc03d23a2d87d1d172e277b  # release/v1
 
   publish-github-release:
     name: Create GitHub Release
@@ -88,13 +100,13 @@ jobs:
 
     steps:
       - name: Download distribution artifacts
-        uses: actions/download-artifact@v8
+        uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c  # v8.0.1
         with:
           name: dist
           path: dist/
 
       - name: Create GitHub Release
-        uses: softprops/action-gh-release@v3
+        uses: softprops/action-gh-release@b4309332981a82ec1c5618f44dd2e27cc8bfbfda  # v3
         with:
           files: dist/*
           generate_release_notes: true
@@ -106,7 +118,7 @@ jobs:
 
     steps:
       - name: Dispatch bump event to FFBB-MCP-Server
-        uses: peter-evans/repository-dispatch@v4
+        uses: peter-evans/repository-dispatch@28959ce8df70de7be546dd1250a005dd32156697  # v4
         with:
           token: ${{ secrets.MCP_SERVER_PAT }}
           repository: nickdesi/FFBB-MCP-Server

{ffbb_data_client-2.0.1 → ffbb_data_client-2.1.0}/.github/workflows/release-after-discovery-merge.yml

@@ -51,7 +51,7 @@ jobs:
 
       - name: Checkout tested commit
         if: steps.pr.outputs.release == 'true'
-        uses: actions/checkout@v6
+        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd  # v6.0.2
         with:
           ref: ${{ github.event.workflow_run.head_sha }}
           fetch-depth: 0

{ffbb_data_client-2.0.1 → ffbb_data_client-2.1.0}/.github/workflows/update-ffbb-api-discovery.yml

@@ -19,10 +19,10 @@ jobs:
 
     steps:
       - name: Checkout
-        uses: actions/checkout@v6
+        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd  # v6.0.2
 
       - name: Set up Python
-        uses: actions/setup-python@v6
+        uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405  # v6.2.0
         with:
           python-version: '3.11'
 
@@ -44,7 +44,7 @@ jobs:
 
       - name: Upload discovery summary
         if: always()
-        uses: actions/upload-artifact@v7
+        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a  # v7.0.1
         with:
           name: ffbb-api-update-summary
           path: data/api_update_summary.md
@@ -53,7 +53,7 @@ jobs:
 
       - name: Create pull request
         if: steps.changes.outputs.changed == 'true'
-        uses: peter-evans/create-pull-request@v8
+        uses: peter-evans/create-pull-request@5f6978faf089d4d20b00c7766989d076bb2fc7f1  # v8
         with:
           token: ${{ secrets.GITHUB_TOKEN }}
           branch: chore/update-ffbb-api-discovery

{ffbb_data_client-2.0.1 → ffbb_data_client-2.1.0}/.pre-commit-config.yaml

@@ -61,6 +61,16 @@ repos:
   hooks:
   - id: flake8
 
+# Type-checking on push (mypy + pyright via tox)
+- repo: local
+  hooks:
+  - id: type-check
+    name: type-check (mypy + pyright)
+    entry: bash -c 'PATH="$PWD/.venv/bin:$PATH" tox -e type'
+    language: system
+    pass_filenames: false
+    stages: [pre-push]
+
 # Check for misspells in documentation files:
 # - repo: https://github.com/codespell-project/codespell
 #   rev: v2.2.5

{ffbb_data_client-2.0.1 → ffbb_data_client-2.1.0}/CHANGELOG.md

@@ -5,6 +5,36 @@ All notable changes to this project will be documented in this file.
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
 and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [2.1.0] - 2026-05-17
+
+### Changed
+- **BREAKING (internal)**: Sync methods now delegate to async counterparts via `_run_async()` helper, eliminating ~604 lines of duplication
+- Sync and async share a single source of truth — async methods are canonical
+- `ThreadPoolExecutor` fallback handles nested event loops gracefully
+
+### Added
+- **NEW**: Pre-push hook for type-check (mypy + pyright) — catches type errors before push
+- **NEW**: CodeQL security scanning in CI
+- **NEW**: Dependabot for automated dependency updates (GitHub Actions + pip)
+- **NEW**: `SECURITY.md` security policy
+
+### Fixed
+- SQLite cache concurrency: sync uses `http_cache.db`, async uses `http_cache_async.db` (prevents `database is locked`)
+- CI type check failures with proper generic typing for `_run_async(coro: Awaitable[T]) -> T`
+- `FFBBDataClient` wrapper parity — added 8 missing async method delegations
+
+### Removed
+- Dead `invalidate_pattern()` from `CacheManager` and related tests
+- `ffbb_api_client_v3` shim, dead scripts, and backward-compat alias
+
+### Security
+- CI supply chain hardened with pinned action versions and trusted publishers
+
+## [2.0.2] - 2026-05-17
+
+### Changed
+- README version updated to v2.0.2
+
 ## [1.6.1] - 2026-04-29
 
 ### Changed

{ffbb_data_client-2.0.1/src/ffbb_data_client.egg-info → ffbb_data_client-2.1.0}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: ffbb-data-client
-Version: 2.0.1
+Version: 2.1.0
 Summary: FFBB Data Client — SDK Python asynchrone pour les Statistiques de Basket France. Type-safe Pydantic models, async/sync, Meilisearch.
 Home-page: https://github.com/nickdesi/ffbb-data-client
 Author: nickdesi
@@ -9,9 +9,9 @@ License: Apache-2.0
 Project-URL: Homepage, https://nickdesi.github.io/ffbb-data-client/
 Project-URL: Documentation, https://nickdesi.github.io/ffbb-data-client/
 Project-URL: Source, https://github.com/nickdesi/ffbb-data-client
-Project-URL: Changelog, https://github.com/nickdesi/ffbb-data-client/blob/main/CHANGELOG.md
+Project-URL: Changelog, https://github.com/nickdesi/ffbb-data-client/blob/master/CHANGELOG.md
 Project-URL: Tracker, https://github.com/nickdesi/ffbb-data-client/issues
-Project-URL: Release Notes, https://github.com/nickdesi/ffbb-data-client/blob/main/RELEASE_NOTES.md
+Project-URL: Release Notes, https://github.com/nickdesi/ffbb-data-client/blob/master/RELEASE_NOTES.md
 Keywords: ffbb,basketball,statistiques,france,api,python-sdk,pydantic,asynchrone,meilisearch,basket-france
 Platform: any
 Classifier: Development Status :: 4 - Beta
@@ -37,7 +37,7 @@ Requires-Dist: readme_renderer[md]>=44.0
 Requires-Dist: python-dateutil>=2.9.0.post0
 Requires-Dist: httpx>=0.28.1
 Requires-Dist: hishel[async]>=1.2.1
-Requires-Dist: pydantic>=2.13.3
+Requires-Dist: pydantic>=2.13.4
 Provides-Extra: testing
 Requires-Dist: setuptools>=82.0.1; extra == "testing"
 Requires-Dist: coverage>=7.13.5; extra == "testing"
@@ -89,16 +89,15 @@ Dynamic: license-file
 
 ---
 
-## 🚀 Version v1.7.0 — 30 avril 2026
+## 🚀 Version v2.1.0 — Mai 2026
 
 Principales évolutions récentes :
 
-- ajout d'entités REST et Meilisearch : rencontres, officiels, entraîneurs, communes et assets ;
-- réutilisation des clients `httpx` synchrones et asynchrones ;
-- cache Meilisearch optimisé pour limiter les copies coûteuses ;
-- retries de transport configurables via `CacheConfig.transport_retries` ;
-- mise à jour des schémas OpenAPI, collections et index ;
-- stabilisation CI, typage, tests et formatage.
+- **unification sync/async** : les méthodes synchrones délèguent désormais à leurs homologues asynchrones via `_run_async()`, éliminant ~604 lignes de duplication ;
+- **nouvelles entités** : EDF (matches, joueurs, rosters, équipes), Genius Sport (matches, live logs), Rematch Videos ;
+- **cache SQLite concurrency-safe** : fichiers séparés pour sync (`http_cache.db`) et async (`http_cache_async.db`) ;
+- **CI renforcée** : mypy + pyright + CodeQL + Dependabot + hook pre-push ;
+- **nettoyage** : suppression du shim `ffbb_api_client_v3`, scripts morts et code mort (`invalidate_pattern`).
 
 Voir aussi : [`CHANGELOG.md`](CHANGELOG.md) et [`RELEASE_NOTES.md`](RELEASE_NOTES.md).
 
@@ -107,7 +106,7 @@ Voir aussi : [`CHANGELOG.md`](CHANGELOG.md) et [`RELEASE_NOTES.md`](RELEASE_NOTE
 ## 📦 Installation
 
 ```bash
-pip install ffbb_data_client
+pip install ffbb-data-client
 ```
 
 Pour contribuer ou exécuter les tests :
@@ -148,11 +147,12 @@ lives = client.get_lives()
 | Domaine | Capacités |
 |---|---|
 | API FFBB | clubs, compétitions, organismes, saisons, poules, classements, rencontres, lives |
+| Entités additionnelles | EDF (matches, joueurs, rosters, équipes), Genius Sport, Rematch Videos |
 | Recherche | organismes, compétitions, rencontres, salles, terrains, pratiques, tournois, engagements et formations |
 | REST typé | récupération de ressources individuelles avec modèles Pydantic v2 |
-| Async | méthodes `*_async()` pour les appels réseau non bloquants |
-| Cache | cache HTTP `hishel`, sessions `httpx` réutilisées, retries configurables |
-| Sécurité | masquage des tokens dans les logs |
+| Async | méthodes `*_async()` — source de vérité ; sync délègue via `_run_async()` |
+| Cache | cache HTTP `hishel`, sessions `httpx` réutilisées, retries configurables, SQLite séparés sync/async |
+| Sécurité | masquage des tokens dans les logs, CodeQL scanning, Dependabot |
 | IA / MCP | structure compatible avec des wrappers MCP et agents IA |
 
 ---
@@ -272,15 +272,17 @@ Il est donc possible de laisser le client résoudre les tokens automatiquement o
 ```text
 src/ffbb_data_client/
 ├── clients/
-│   ├── ffbb_data_client.py       # Façade publique
-│   ├── api_ffbb_app_client.py      # Client REST FFBB
-│   └── meilisearch_ffbb_client.py  # Client recherche Meilisearch
-├── helpers/                        # Requêtes HTTP, multi-search, conversions
-├── models/                         # Modèles Pydantic v2
-├── utils/                          # cache, tokens, logging sécurisé
-└── data/                           # schémas et métadonnées embarqués
+│   ├── ffbb_data_client.py       # Façade publique (sync → async delegation)
+│   ├── api_ffbb_app_client.py    # Client REST FFBB (async source of truth)
+│   └── meilisearch_ffbb_client.py # Client recherche Meilisearch
+├── helpers/                       # Requêtes HTTP, multi-search, conversions
+├── models/                        # Modèles Pydantic v2
+├── utils/                         # cache (sync/async séparés), tokens, logging sécurisé
+└── data/                          # schémas et métadonnées embarqués
 ```
 
+> **Architecture sync/async** : Depuis v2.1.0, les méthodes asynchrones sont la source de vérité. Les méthodes synchrones délèguent via `_run_async()`, un helper qui gère les event loops imbriqués avec `ThreadPoolExecutor`.
+
 ---
 
 ## 🧪 Développement local
@@ -296,8 +298,13 @@ Commandes utiles :
 pytest tests/unit/
 pytest tests/integration/
 pytest tests/ --cov=src
+tox -e type          # mypy + pyright
 ```
 
+Hooks automatiques :
+- **pre-push** : exécute mypy + pyright avant chaque push
+- **pre-commit** : black, isort, flake8, trailing-whitespace
+
 Documentation complémentaire :
 
 - [`LOCAL_CI_GUIDE.md`](LOCAL_CI_GUIDE.md)

{ffbb_data_client-2.0.1 → ffbb_data_client-2.1.0}/README.md

@@ -37,16 +37,15 @@
 
 ---
 
-## 🚀 Version v1.7.0 — 30 avril 2026
+## 🚀 Version v2.1.0 — Mai 2026
 
 Principales évolutions récentes :
 
-- ajout d'entités REST et Meilisearch : rencontres, officiels, entraîneurs, communes et assets ;
-- réutilisation des clients `httpx` synchrones et asynchrones ;
-- cache Meilisearch optimisé pour limiter les copies coûteuses ;
-- retries de transport configurables via `CacheConfig.transport_retries` ;
-- mise à jour des schémas OpenAPI, collections et index ;
-- stabilisation CI, typage, tests et formatage.
+- **unification sync/async** : les méthodes synchrones délèguent désormais à leurs homologues asynchrones via `_run_async()`, éliminant ~604 lignes de duplication ;
+- **nouvelles entités** : EDF (matches, joueurs, rosters, équipes), Genius Sport (matches, live logs), Rematch Videos ;
+- **cache SQLite concurrency-safe** : fichiers séparés pour sync (`http_cache.db`) et async (`http_cache_async.db`) ;
+- **CI renforcée** : mypy + pyright + CodeQL + Dependabot + hook pre-push ;
+- **nettoyage** : suppression du shim `ffbb_api_client_v3`, scripts morts et code mort (`invalidate_pattern`).
 
 Voir aussi : [`CHANGELOG.md`](CHANGELOG.md) et [`RELEASE_NOTES.md`](RELEASE_NOTES.md).
 
@@ -55,7 +54,7 @@ Voir aussi : [`CHANGELOG.md`](CHANGELOG.md) et [`RELEASE_NOTES.md`](RELEASE_NOTE
 ## 📦 Installation
 
 ```bash
-pip install ffbb_data_client
+pip install ffbb-data-client
 ```
 
 Pour contribuer ou exécuter les tests :
@@ -96,11 +95,12 @@ lives = client.get_lives()
 | Domaine | Capacités |
 |---|---|
 | API FFBB | clubs, compétitions, organismes, saisons, poules, classements, rencontres, lives |
+| Entités additionnelles | EDF (matches, joueurs, rosters, équipes), Genius Sport, Rematch Videos |
 | Recherche | organismes, compétitions, rencontres, salles, terrains, pratiques, tournois, engagements et formations |
 | REST typé | récupération de ressources individuelles avec modèles Pydantic v2 |
-| Async | méthodes `*_async()` pour les appels réseau non bloquants |
-| Cache | cache HTTP `hishel`, sessions `httpx` réutilisées, retries configurables |
-| Sécurité | masquage des tokens dans les logs |
+| Async | méthodes `*_async()` — source de vérité ; sync délègue via `_run_async()` |
+| Cache | cache HTTP `hishel`, sessions `httpx` réutilisées, retries configurables, SQLite séparés sync/async |
+| Sécurité | masquage des tokens dans les logs, CodeQL scanning, Dependabot |
 | IA / MCP | structure compatible avec des wrappers MCP et agents IA |
 
 ---
@@ -220,15 +220,17 @@ Il est donc possible de laisser le client résoudre les tokens automatiquement o
 ```text
 src/ffbb_data_client/
 ├── clients/
-│   ├── ffbb_data_client.py       # Façade publique
-│   ├── api_ffbb_app_client.py      # Client REST FFBB
-│   └── meilisearch_ffbb_client.py  # Client recherche Meilisearch
-├── helpers/                        # Requêtes HTTP, multi-search, conversions
-├── models/                         # Modèles Pydantic v2
-├── utils/                          # cache, tokens, logging sécurisé
-└── data/                           # schémas et métadonnées embarqués
+│   ├── ffbb_data_client.py       # Façade publique (sync → async delegation)
+│   ├── api_ffbb_app_client.py    # Client REST FFBB (async source of truth)
+│   └── meilisearch_ffbb_client.py # Client recherche Meilisearch
+├── helpers/                       # Requêtes HTTP, multi-search, conversions
+├── models/                        # Modèles Pydantic v2
+├── utils/                         # cache (sync/async séparés), tokens, logging sécurisé
+└── data/                          # schémas et métadonnées embarqués
 ```
 
+> **Architecture sync/async** : Depuis v2.1.0, les méthodes asynchrones sont la source de vérité. Les méthodes synchrones délèguent via `_run_async()`, un helper qui gère les event loops imbriqués avec `ThreadPoolExecutor`.
+
 ---
 
 ## 🧪 Développement local
@@ -244,8 +246,13 @@ Commandes utiles :
 pytest tests/unit/
 pytest tests/integration/
 pytest tests/ --cov=src
+tox -e type          # mypy + pyright
 ```
 
+Hooks automatiques :
+- **pre-push** : exécute mypy + pyright avant chaque push
+- **pre-commit** : black, isort, flake8, trailing-whitespace
+
 Documentation complémentaire :
 
 - [`LOCAL_CI_GUIDE.md`](LOCAL_CI_GUIDE.md)

ffbb_data_client-2.1.0/SECURITY.md

@@ -0,0 +1,15 @@
+# Security Policy
+
+## Reporting a Vulnerability
+
+Please report suspected vulnerabilities privately by email to the maintainer listed in `setup.cfg` or through GitHub Security Advisories when available.
+
+Do not disclose security issues publicly until a fix or mitigation has been released.
+
+## Supported Versions
+
+Security fixes target the latest released version of `ffbb-data-client` on PyPI and the current `master` branch.
+
+## Sensitive Data
+
+Do not include FFBB bearer tokens, Meilisearch tokens, logs containing credentials, or private user data in reports. If such data is required to reproduce the issue, redact it first.

{ffbb_data_client-2.0.1 → ffbb_data_client-2.1.0}/docs/conf.py

@@ -35,10 +35,7 @@ except ImportError:
 
 output_dir = os.path.join(__location__, "api")
 module_dir = os.path.join(__location__, "../src/ffbb_data_client")
-try:
-    shutil.rmtree(output_dir)
-except FileNotFoundError:
-    pass
+shutil.rmtree(output_dir, ignore_errors=True)
 
 try:
     import sphinx

{ffbb_data_client-2.0.1 → ffbb_data_client-2.1.0}/docs/requirements.txt

@@ -1,6 +1,6 @@
 hishel[async]>=1.2.1
 httpx>=0.28.1
-pydantic>=2.13.3
+pydantic>=2.13.4
 python-dateutil>=2.9.0.post0
 python-dotenv>=1.2.2
 readme_renderer[md]>=44.0
@@ -8,5 +8,5 @@ requests_cache
 # Requirements file for ReadTheDocs, check .readthedocs.yml.
 # To build the module reference correctly, make sure every external package
 # under `install_requires` in `setup.cfg` is also listed here!
-sphinx>=3.2.1
+sphinx>=9.1.0
 # sphinx_rtd_theme