mainsequence-metatable 0.1.19.dev31__tar.gz → 0.1.20.dev32__tar.gz

{mainsequence_metatable-0.1.19.dev31/src/mainsequence_metatable.egg-info → mainsequence_metatable-0.1.20.dev32}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: mainsequence-metatable
-Version: 0.1.19.dev31
+Version: 0.1.20.dev32
 Summary: Main Sequence MetaTables Python client and standalone API
 Author-email: Main Sequence GmbH <dev@main-sequence.io>
 License-Expression: MIT
@@ -14,7 +14,7 @@ Classifier: Operating System :: OS Independent
 Requires-Python: >=3.13
 Description-Content-Type: text/markdown
 License-File: LICENSE
-Requires-Dist: mainsequence[server]<10,>=9.0.4
+Requires-Dist: mainsequence<10,>=9.0.6
 Requires-Dist: alembic<2,>=1.18
 Requires-Dist: cachetools
 Requires-Dist: cryptography<51,>=46

{mainsequence_metatable-0.1.19.dev31 → mainsequence_metatable-0.1.20.dev32}/docs/api/authentication-and-errors.md

@@ -5,7 +5,7 @@ Reader/Writer ownership, live namespace inheritance, and sharing endpoints.
 
 ## Hosted requests
 
-The API's request boundary calls the verifier from `mainsequence[server]` for
+The API's request boundary calls the verifier from the `mainsequence` SDK for
 platform-signed caller assertions. The SDK owns issuer, key discovery, claim,
 request-target, signature, and expiry verification. MetaTables only maps
 its verified identity and exceptions into request context and HTTP responses.

{mainsequence_metatable-0.1.19.dev31 → mainsequence_metatable-0.1.20.dev32}/docs/client/installation-and-connection.md

@@ -11,7 +11,7 @@ require running another service locally.
 Install in your application's Python environment on macOS or Linux:
 
 ```bash
-python -m pip install "mainsequence-metatable==0.1.8" "mainsequence[server]==9.0.4"
+python -m pip install "mainsequence-metatable==0.1.20" "mainsequence==9.0.6"
 mainsequence login
 metatables init --local
 metatables serve --local --admin
@@ -19,11 +19,11 @@ metatables serve --local --admin
 
 Run from an application Git checkout with a commit and an `origin` remote. Python
 3.13+ is required. Admin also needs Node.js 22.12+ (or 20.19+) and npm. The package
-requires published `mainsequence[server]>=9.0.4,<10`; no SDK checkout is needed.
-The next stable release is MetaTables 0.1.8, paired with published SDK 9.0.4.
+requires published `mainsequence>=9.0.6,<10`; no SDK checkout is needed.
+The next stable release is MetaTables 0.1.20, paired with published SDK 9.0.6.
 The pinned command above applies after that stable release is published; before
-then, install the exact `0.1.8.devN` artifact produced by the development publishing
-workflow alongside `mainsequence[server]==9.0.4`. SDK 8 is outside this release's
+then, install the exact `0.1.20.devN` artifact produced by the development publishing
+workflow alongside `mainsequence==9.0.6`. SDK 8 is outside this release's
 dependency range.
 `python -m metatables.sdk_compat` checks the required SDK interfaces without network
 requests. Local SQLite uses the standard library driver.

{mainsequence_metatable-0.1.19.dev31 → mainsequence_metatable-0.1.20.dev32}/docs/contributing/releasing.md

@@ -40,14 +40,16 @@ distribution.
 CI installs dependencies from `uv.lock` and PyPI. An editable SDK checkout cannot
 substitute for the published SDK in a release. The selected SDK artifact must
 provide ordinary `Secret.get_by_uid`, independent Git source context, and
-`CallerAssertionVerifier.from_environment` through its `server` extra.
-
-The next MetaTables stable release is `0.1.8`; its supported SDK range is
-`mainsequence[server]>=9.0.4,<10`. Development builds use `0.1.8.devN`.
-The minimum and lockfile now select published SDK `9.0.4`, which supplies those
-interfaces and is the first SDK whose caller-assertion verifier accepts the
-platform's EdDSA (Ed25519) caller assertions. Earlier SDKs verify only RS256, so a
-hosted API built with them cannot authenticate platform callers.
+`CallerAssertionVerifier.from_environment`.
+
+The next MetaTables stable release is `0.1.20`; its supported SDK range is
+`mainsequence>=9.0.6,<10`. Development builds use `0.1.20.devN`.
+The minimum and lockfile now select published SDK `9.0.6`. SDK 9.0.4 is the first
+whose caller-assertion verifier accepts the platform's EdDSA (Ed25519) caller
+assertions; earlier SDKs verify only RS256, so a hosted API built with them cannot
+authenticate platform callers. SDK 9.0.6 ships the verifier's dependencies in the
+base package (there is no `server` extra) and bounds each call, retries included,
+by its timeout without replaying a POST, which runtime-access discovery relies on.
 Runtime compatibility is verified manually with the published artifact;
 package/static CI does not establish runtime compatibility. When changing the SDK
 minimum, update it in `pyproject.toml`, then run:

{mainsequence_metatable-0.1.19.dev31 → mainsequence_metatable-0.1.20.dev32}/docs/contributing/testing.md

@@ -104,7 +104,7 @@ The distribution check requires exactly one wheel and one sdist in `dist/` and
 compares packaged Python modules with current source. Also test importing the
 wheel in a fresh environment with the compatible published SDK installed, and verify
 both catalog migrations and application revision templates are packaged.
-The package requires published SDK 9.0.4 or newer within its declared major version.
+The package requires published SDK 9.0.6 or newer within its declared major version.
 
 Run the installed-wheel smoke tests manually from outside the checkout, using a
 fresh virtual environment with the compatible SDK and built MetaTables wheel:

{mainsequence_metatable-0.1.19.dev31 → mainsequence_metatable-0.1.20.dev32}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "setuptools.build_meta"
 
 [project]
 name = "mainsequence-metatable"
-version = "0.1.19.dev31"
+version = "0.1.20.dev32"
 description = "Main Sequence MetaTables Python client and standalone API"
 readme = "README.md"
 requires-python = ">=3.13"
@@ -18,7 +18,7 @@ classifiers = [
   "Operating System :: OS Independent",
 ]
 dependencies = [
-  "mainsequence[server]>=9.0.4,<10",
+  "mainsequence>=9.0.6,<10",
   "alembic>=1.18,<2",
   "cachetools",
   "cryptography>=46,<51",

{mainsequence_metatable-0.1.19.dev31 → mainsequence_metatable-0.1.20.dev32}/scripts/test_databases.py

@@ -30,7 +30,7 @@ def prepare_sdk(source=None):
     destination = ROOT / ".local/database-tests/sdk"
     destination.mkdir(parents=True, exist_ok=True)
     source = Path(source) if source else Path(mainsequence.__file__).resolve().parent.parent
-    requirement = f"mainsequence[server]=={version('mainsequence')}"
+    requirement = f"mainsequence=={version('mainsequence')}"
     if (source / "pyproject.toml").is_file():
         with TemporaryDirectory(prefix="metatables-test-sdk-") as directory:
             package = Path(directory)

{mainsequence_metatable-0.1.19.dev31 → mainsequence_metatable-0.1.20.dev32/src/mainsequence_metatable.egg-info}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: mainsequence-metatable
-Version: 0.1.19.dev31
+Version: 0.1.20.dev32
 Summary: Main Sequence MetaTables Python client and standalone API
 Author-email: Main Sequence GmbH <dev@main-sequence.io>
 License-Expression: MIT
@@ -14,7 +14,7 @@ Classifier: Operating System :: OS Independent
 Requires-Python: >=3.13
 Description-Content-Type: text/markdown
 License-File: LICENSE
-Requires-Dist: mainsequence[server]<10,>=9.0.4
+Requires-Dist: mainsequence<10,>=9.0.6
 Requires-Dist: alembic<2,>=1.18
 Requires-Dist: cachetools
 Requires-Dist: cryptography<51,>=46

{mainsequence_metatable-0.1.19.dev31 → mainsequence_metatable-0.1.20.dev32}/src/mainsequence_metatable.egg-info/requires.txt

@@ -1,4 +1,4 @@
-mainsequence[server]<10,>=9.0.4
+mainsequence<10,>=9.0.6
 alembic<2,>=1.18
 cachetools
 cryptography<51,>=46

{mainsequence_metatable-0.1.19.dev31 → mainsequence_metatable-0.1.20.dev32}/src/metatables/endpoint.py

@@ -136,13 +136,30 @@ def deployment_name() -> str:
         raise ApiResolutionError("MetaTables requires exactly one automatic FastAPI target with an api/<name>/main.py source_path in its deployment workflow.") from exc
 
 
+# Each runtime-access request gets the full time the platform may need to
+# answer (12 s was observed while a runtime woke); the discovery budget only
+# decides whether another request is sent, never how long one may take.
+_RUNTIME_ACCESS_REQUEST_TIMEOUT = 20.0
+_FAILED_ATTEMPT_DELAY = 1.0
+
+
 def _release_access(release, *, timeout: float = 30.0):
+    from mainsequence.client.exceptions import TransportError
+
     deadline = time.monotonic() + timeout
+    failure = None
     while True:
-        remaining = deadline - time.monotonic()
-        if remaining <= 0:
-            raise ApiResolutionError("MetaTables deployment did not become available before the discovery timeout.")
-        result = release.resolve_runtime_access(timeout=remaining)
+        if time.monotonic() >= deadline:
+            raise ApiResolutionError(
+                "MetaTables deployment did not become available before the discovery timeout.") from failure
+        try:
+            result = release.resolve_runtime_access(timeout=_RUNTIME_ACCESS_REQUEST_TIMEOUT)
+        except TransportError as exc:
+            # The SDK sends the POST once and reports a timeout or an unreachable
+            # platform here; that is one failed attempt within the budget.
+            failure = exc
+            time.sleep(min(_FAILED_ATTEMPT_DELAY, max(0, deadline - time.monotonic())))
+            continue
         if str(result.resource_release_uid) != str(release.uid) or result.release_kind != "fastapi":
             raise ApiResolutionError("SDK runtime access returned a different deployment target.")
         admission = result.runtime_access

{mainsequence_metatable-0.1.19.dev31 → mainsequence_metatable-0.1.20.dev32}/src/metatables/sdk_compat.py

@@ -24,7 +24,7 @@ def require_sdk_capabilities(*, server: bool = False) -> None:
     except ImportError as exc:
         raise ImportError(
             "MetaTables requires a compatible mainsequence SDK with platform Secrets "
-            "and the server extra. Install a compatible SDK artifact or the documented local checkout; "
+            "and caller-assertion verification. Install a compatible SDK artifact or the documented local checkout; "
             "see docs/client/installation-and-connection.md."
         ) from exc
 

{mainsequence_metatable-0.1.19.dev31 → mainsequence_metatable-0.1.20.dev32}/tests/e2e/test_api_endpoint.py

@@ -331,6 +331,70 @@ def test_starting_runtime_has_bounded_timeout(platform, monkeypatch):
     monkeypatch.setattr(endpoint.time, 'sleep', lambda _: None)
     with pytest.raises(endpoint.ApiResolutionError, match='timeout'):
         endpoint.get_api_url()
+    # Nothing is sent once the budget is spent.
+    assert [kw for name, kw in platform.calls if name == 'access'] == [
+        {'timeout': endpoint._RUNTIME_ACCESS_REQUEST_TIMEOUT}]
+
+
+def test_slow_wake_never_shrinks_the_request_timeout(platform, monkeypatch):
+    # The platform answers in 3 s and the API wakes at 25 s of the 30 s budget.
+    now = [0.0]
+    def resolve(self, **kwargs):
+        platform.calls.append(('access', kwargs))
+        now[0] += 3
+        platform.access.runtime_access.state = 'ready' if now[0] >= 25 else 'waking'
+        return platform.access
+    def sleep(delay):
+        now[0] += delay
+    platform.access.runtime_access.retry_after_ms = 1000
+    monkeypatch.setattr(platform.cls, 'resolve_runtime_access', resolve)
+    monkeypatch.setattr(endpoint.time, 'monotonic', lambda: now[0])
+    monkeypatch.setattr(endpoint.time, 'sleep', sleep)
+    assert endpoint.get_api_url() == 'https://release.test/api'
+    timeouts = [kw['timeout'] for name, kw in platform.calls if name == 'access']
+    assert len(timeouts) > 1
+    assert set(timeouts) == {endpoint._RUNTIME_ACCESS_REQUEST_TIMEOUT}
+
+
+def test_timed_out_request_is_one_failed_attempt(platform, monkeypatch):
+    from mainsequence.client.exceptions import TransportError
+
+    now = [0.0]
+    answers = iter([TransportError('Read timed out.'), platform.access])
+    def resolve(self, **kwargs):
+        platform.calls.append(('access', kwargs))
+        now[0] += endpoint._RUNTIME_ACCESS_REQUEST_TIMEOUT
+        answer = next(answers)
+        if isinstance(answer, Exception):
+            raise answer
+        return answer
+    def sleep(delay):
+        now[0] += delay
+    monkeypatch.setattr(platform.cls, 'resolve_runtime_access', resolve)
+    monkeypatch.setattr(endpoint.time, 'monotonic', lambda: now[0])
+    monkeypatch.setattr(endpoint.time, 'sleep', sleep)
+    assert endpoint.get_api_url() == 'https://release.test/api'
+    assert [name for name, _ in platform.calls] == ['lookup', 'access', 'access']
+
+
+def test_failed_attempts_stop_at_the_discovery_deadline(platform, monkeypatch):
+    from mainsequence.client.exceptions import TransportError
+
+    now = [0.0]
+    def resolve(self, **kwargs):
+        platform.calls.append(('access', kwargs))
+        now[0] += endpoint._RUNTIME_ACCESS_REQUEST_TIMEOUT
+        raise TransportError('Read timed out.')
+    def sleep(delay):
+        now[0] += delay
+    monkeypatch.setattr(platform.cls, 'resolve_runtime_access', resolve)
+    monkeypatch.setattr(endpoint.time, 'monotonic', lambda: now[0])
+    monkeypatch.setattr(endpoint.time, 'sleep', sleep)
+    with pytest.raises(endpoint.ApiResolutionError, match='timeout') as failure:
+        endpoint.get_api_url()
+    assert isinstance(failure.value.__cause__, TransportError)
+    # 20 s per timed-out request inside a 30 s budget leaves room for two.
+    assert [name for name, _ in platform.calls] == ['lookup', 'access', 'access']
 
 
 def test_runtime_descriptor_remains_fresh_at_cached_endpoint(platform, monkeypatch):

{mainsequence_metatable-0.1.19.dev31 → mainsequence_metatable-0.1.20.dev32}/uv.lock

@@ -599,7 +599,7 @@ wheels = [
 
 [[package]]
 name = "mainsequence"
-version = "9.0.4"
+version = "9.0.6"
 source = { registry = "https://pypi.org/simple" }
 dependencies = [
     { name = "cachetools" },
@@ -614,25 +614,21 @@ dependencies = [
     { name = "psutil" },
     { name = "pydantic" },
     { name = "pygments" },
+    { name = "pyjwt", extra = ["crypto"] },
     { name = "pyyaml" },
     { name = "requests" },
     { name = "structlog" },
     { name = "typer" },
     { name = "urllib3" },
 ]
-sdist = { url = "https://files.pythonhosted.org/packages/7f/e4/22e6207f49aa3d770a7f8b9fbc5b2cbedeb5ad456226190dfa31360350b3/mainsequence-9.0.4.tar.gz", hash = "sha256:e79595f04984ccd59813474f0c42d6be78cd2c498569efa7bfffb5afe93f34de", size = 361627, upload-time = "2026-10-02T14:10:13.982Z" }
+sdist = { url = "https://files.pythonhosted.org/packages/90/f3/739a9908e4ac343185dfcf5f179c2c23c54fdd1e2fbedfee9ce35261b3e6/mainsequence-9.0.6.tar.gz", hash = "sha256:97fe53353330262d8dae24a63af6bab3e5d658b7d193fd82830f1a31c76af43a", size = 365345, upload-time = "2026-10-04T07:25:59.311Z" }
 wheels = [
-    { url = "https://files.pythonhosted.org/packages/1f/8f/53ebebe3549d1750cd9b29d73793080f7951ca152ce3ca71e8e61c8ac56d/mainsequence-9.0.4-py3-none-any.whl", hash = "sha256:405ae7ccd683a1e760bdad701b44a6da0a8f904f7a2f93fd57158a2336aaade4", size = 255273, upload-time = "2026-10-02T14:10:12.605Z" },
-]
-
-[package.optional-dependencies]
-server = [
-    { name = "pyjwt", extra = ["crypto"] },
+    { url = "https://files.pythonhosted.org/packages/ee/f8/a67added714f0c45e32f1dab2d63300a2022bd13a5eaf8edde22e2cdba83/mainsequence-9.0.6-py3-none-any.whl", hash = "sha256:9c0ed66a8387afa823a4d0793f7e1ada853d5309c820710810d89993a2a01891", size = 256831, upload-time = "2026-10-04T07:25:57.339Z" },
 ]
 
 [[package]]
 name = "mainsequence-metatable"
-version = "0.1.19"
+version = "0.1.20"
 source = { editable = "." }
 dependencies = [
     { name = "alembic" },
@@ -641,7 +637,7 @@ dependencies = [
     { name = "fastapi" },
     { name = "httpx" },
     { name = "keyring" },
-    { name = "mainsequence", extra = ["server"] },
+    { name = "mainsequence" },
     { name = "numpy" },
     { name = "opentelemetry-api" },
     { name = "opentelemetry-exporter-otlp" },
@@ -687,7 +683,7 @@ requires-dist = [
     { name = "fastapi", specifier = ">=0.110,<1" },
     { name = "httpx", specifier = ">=0.28,<1" },
     { name = "keyring", specifier = ">=25,<26" },
-    { name = "mainsequence", extras = ["server"], specifier = ">=9.0.4,<10" },
+    { name = "mainsequence", specifier = ">=9.0.6,<10" },
     { name = "mkdocs", marker = "extra == 'docs'", specifier = ">=1.6,<2" },
     { name = "numpy" },
     { name = "opentelemetry-api" },