PyPI - mainsequence-metatable - Versions diffs - 0.1.30.dev54__tar.gz → 0.1.30.dev56__tar.gz - Mend

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: mainsequence-metatable
-Version: 0.1.30.dev54
+Version: 0.1.30.dev56
 Summary: Main Sequence MetaTables Python client and standalone API
 Author-email: Main Sequence GmbH <dev@main-sequence.io>
 License-Expression: MIT

@@ -5,6 +5,10 @@
 > stay outside the one-hour cache, just like Agent lookup failures, so the next
 > request can restore the Analyst after a temporary platform outage. Successful
 > facts still expire normally; an expired verified result is never served on failure.
+> A hosted API also fails startup when its declared database is unavailable,
+> allowing the deployment's restart policy to retry instead of serving a replica
+> whose failed bootstrap cannot recover. Secret lookup allows 30 seconds and
+> distinguishes a missing Secret from a failed platform request in its message.
 >
 > Amendment (2026-10-08): The API names this branch's Analyst to applications.
 > `GET /runtime-context/` returns `hosted_agent` (`uid`, `name`, `status`) beside

@@ -4,7 +4,7 @@ build-backend = "setuptools.build_meta"
 [project]
 name = "mainsequence-metatable"
-version = "0.1.30.dev54"
+version = "0.1.30.dev56"
 description = "Main Sequence MetaTables Python client and standalone API"
 readme = "README.md"
 requires-python = ">=3.13"

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: mainsequence-metatable
-Version: 0.1.30.dev54
+Version: 0.1.30.dev56
 Summary: Main Sequence MetaTables Python client and standalone API
 Author-email: Main Sequence GmbH <dev@main-sequence.io>
 License-Expression: MIT

@@ -261,6 +261,12 @@ def initialize_runtime(config: RuntimeConfig) -> RuntimeState:
             bootstrap.error = ("Saved runtime configuration is invalid. Configure the DataSource again in Settings."
                                if config.local_mode else "The declared runtime database configuration is invalid. "
                                "Fix runtime_database in the API's configuration.yaml, then deploy the API.")
+    if not (config.local_mode or config.developer_mode) and bootstrap.status == "unavailable":
+        # A hosted pod cannot repair its database through Settings. Fail startup
+        # so it never advertises readiness with a permanently failed bootstrap;
+        # the deployment's restart policy retries transient platform failures.
+        bootstrap.close()
+        raise RuntimeError(bootstrap.error or "The declared runtime database is unavailable.")
     state = RuntimeState(config=config, identity=identity, bootstrap=bootstrap, credential_store=bootstrap.credential_store)
     if identity is not None and identity.actor_facts is not None:
         state.actor_facts_cache.seed(identity.user_uid, identity.actor_facts,

@@ -40,15 +40,19 @@ class RuntimeDatabaseError(RuntimeError):
 def read_secret(name: str) -> tuple[UUID, str]:
     """Read one Secret of the caller's Environment by name."""
     from mainsequence.client import Secret
+    from mainsequence.client.utils import DoesNotExist
     try:
-        secret = Secret.get(name=name, timeout=15)
+        secret = Secret.get(name=name, timeout=30)
         value = secret.value.get_secret_value() if secret.value is not None else ""
         if not secret.uid or not value:
             raise ValueError("Empty Secret")
         return UUID(str(secret.uid)), value
-    except Exception as exc:
+    except DoesNotExist as exc:
         raise RuntimeDatabaseError("unavailable", f"Cannot read the Environment Secret {name}. Create it in this "
                                    "Environment, then deploy the API.") from exc
+    except Exception as exc:
+        raise RuntimeDatabaseError("unavailable", f"Cannot read the Environment Secret {name}. Check platform "
+                                   "connectivity and the API's access to this Secret.") from exc
 def declaration(config):

@@ -128,3 +128,22 @@ def test_developer_launcher_uses_the_deployment_declaration(tmp_path, monkeypatc
 def test_packaged_deployment_declares_its_runtime_database():
     declared = DeploymentConfiguration.load(DEPLOYMENT_CONFIGURATION).runtime_database
     assert declared.uri_secret == "METATABLES_RUNTIME_DATABASE" and declared.tls.mode == "require"
+def test_secret_timeout_fails_hosted_startup_instead_of_serving_a_broken_runtime(tmp_path, monkeypatch):
+    from mainsequence.client import Secret
+    from mainsequence.client.exceptions import TransportError
+    from metatables.api.app.runtime import initialize_runtime
+    path = tmp_path / "configuration.yaml"
+    path.write_text(POSTGRESQL)
+    def timed_out(cls, **kwargs):
+        raise TransportError("private upstream details")
+    monkeypatch.setattr(Secret, "get", classmethod(timed_out))
+    with pytest.raises(RuntimeError, match="Check platform connectivity") as raised:
+        initialize_runtime(RuntimeConfig(local_mode=False, configuration_path=path))
+    assert "Create it" not in str(raised.value)
+    assert "private upstream details" not in str(raised.value)

@@ -121,7 +121,7 @@ def test_hosted_mode_uses_the_deployment_declared_database(tmp_path, monkeypatch
         reads.append(name)
         return secret_uid, "postgresql://metatables:s3cr%40t@tunnel.example.invalid:20989/development"
     monkeypatch.setattr("metatables.api.app.runtime_database.read_secret", read_secret)
-    def inspect_without_remote_connection(self):
+    def inspect_without_remote_connection(self, **kwargs):
         self.status, self.error, self.current = "migration_required", None, []
     monkeypatch.setattr(RuntimeBootstrap, "inspect", inspect_without_remote_connection)
     monkeypatch.setattr(RuntimeBootstrap, "migration_descriptor", lambda self: dict(

mainsequence-metatable 0.1.30.dev54__tar.gz → 0.1.30.dev56__tar.gz