mdb-engine 0.2.1__tar.gz → 0.2.4__tar.gz

{mdb_engine-0.2.1/mdb_engine.egg-info → mdb_engine-0.2.4}/PKG-INFO

@@ -1,10 +1,10 @@
 Metadata-Version: 2.4
 Name: mdb-engine
-Version: 0.2.1
+Version: 0.2.4
 Summary: MongoDB Engine
 Home-page: https://github.com/ranfysvalle02/mdb-engine
-Author: Your Name
-Author-email: Your Name <your.email@example.com>
+Author: Fabian Valle
+Author-email: Fabian Valle <oblivio.company@gmail.com>
 License: AGPL-3.0
 Project-URL: Homepage, https://github.com/ranfysvalle02/mdb-engine
 Project-URL: Documentation, https://github.com/ranfysvalle02/mdb-engine#readme
@@ -15,13 +15,12 @@ Classifier: Development Status :: 4 - Beta
 Classifier: Intended Audience :: Developers
 Classifier: License :: OSI Approved :: GNU Affero General Public License v3 or later (AGPLv3+)
 Classifier: Programming Language :: Python :: 3
-Classifier: Programming Language :: Python :: 3.8
-Classifier: Programming Language :: Python :: 3.9
 Classifier: Programming Language :: Python :: 3.10
 Classifier: Programming Language :: Python :: 3.11
+Classifier: Programming Language :: Python :: 3.12
 Classifier: Topic :: Database
 Classifier: Topic :: Software Development :: Libraries :: Python Modules
-Requires-Python: >=3.8
+Requires-Python: >=3.10
 Description-Content-Type: text/markdown
 License-File: LICENSE
 Requires-Dist: motor>=3.0.0
@@ -32,7 +31,7 @@ Requires-Dist: pyjwt>=2.8.0
 Requires-Dist: jsonschema>=4.0.0
 Requires-Dist: bcrypt>=4.0.0
 Requires-Dist: cryptography>=41.0.0
-Requires-Dist: mem0ai>=1.0.0
+Requires-Dist: mem0ai>=0.1.7
 Requires-Dist: semantic-text-splitter>=0.9.0
 Requires-Dist: numpy<2.0.0,>=1.0.0
 Requires-Dist: openai>=1.0.0
@@ -50,9 +49,10 @@ Requires-Dist: pytest-asyncio>=0.21.0; extra == "test"
 Requires-Dist: pytest-cov>=4.1.0; extra == "test"
 Requires-Dist: pytest-mock>=3.11.0; extra == "test"
 Requires-Dist: pytest-timeout>=2.1.0; extra == "test"
+Requires-Dist: pytest-xdist>=3.3.0; extra == "test"
 Requires-Dist: testcontainers>=3.7.0; extra == "test"
 Provides-Extra: dev
-Requires-Dist: ruff>=0.4.0; extra == "dev"
+Requires-Dist: ruff<0.6.0,>=0.4.0; extra == "dev"
 Requires-Dist: semgrep>=1.50.0; extra == "dev"
 Provides-Extra: all
 Requires-Dist: casbin>=1.0.0; extra == "all"
@@ -73,6 +73,31 @@ Dynamic: requires-python
 
 ---
 
+## 🎯 manifest.json: The Key to Everything
+
+**`manifest.json` is the foundation of your application.** It's a single configuration file that defines your app's identity, data structure, authentication, indexes, and services. Everything flows from this file.
+
+### Your First manifest.json
+
+Create a `manifest.json` file with just 3 fields:
+
+```json
+{
+  "schema_version": "2.0",
+  "slug": "my_app",
+  "name": "My App"
+}
+```
+
+That's it! This minimal manifest gives you:
+- ✅ Automatic data scoping (all queries filtered by `app_id`)
+- ✅ Collection name prefixing (`db.tasks` → `my_app_tasks`)
+- ✅ App registration and lifecycle management
+
+**Learn more**: [Quick Start Guide](docs/QUICK_START.md) | [Manifest Deep Dive](docs/MANIFEST_DEEP_DIVE.md)
+
+---
+
 ## Installation
 
 ```bash
@@ -83,28 +108,55 @@ pip install mdb-engine
 
 ## 30-Second Quick Start
 
+**Step 1**: Create your `manifest.json`:
+
+```json
+{
+  "schema_version": "2.0",
+  "slug": "my_app",
+  "name": "My App",
+  "managed_indexes": {
+    "tasks": [
+      {
+        "type": "regular",
+        "keys": {"status": 1, "created_at": -1},
+        "name": "status_sort"
+      }
+    ]
+  }
+}
+```
+
+**Step 2**: Create your FastAPI app:
+
 ```python
 from pathlib import Path
 from fastapi import Depends
 from mdb_engine import MongoDBEngine
 from mdb_engine.dependencies import get_scoped_db
 
-# 1. Initialize the engine
+# Initialize the engine
 engine = MongoDBEngine(
     mongo_uri="mongodb://localhost:27017",
     db_name="my_database"
 )
 
-# 2. Create a FastAPI app with automatic lifecycle management
+# Create app - manifest.json is loaded automatically!
 app = engine.create_app(slug="my_app", manifest=Path("manifest.json"))
 
-# 3. Use request-scoped dependencies - all queries automatically isolated
+# Use request-scoped dependencies - all queries automatically isolated
 @app.post("/tasks")
 async def create_task(task: dict, db=Depends(get_scoped_db)):
     result = await db.tasks.insert_one(task)
     return {"id": str(result.inserted_id)}
 ```
 
+**What just happened?**
+- ✅ Engine loaded your `manifest.json`
+- ✅ Indexes created automatically from `managed_indexes`
+- ✅ Database queries automatically scoped to your app
+- ✅ Lifecycle management handled (startup/shutdown)
+
 That's it. Your data is automatically sandboxed, indexes are created, and cleanup is handled.
 
 ---
@@ -200,9 +252,11 @@ async def health():
 
 ## Why mdb-engine?
 
+- **manifest.json is everything** — Single source of truth for your entire app configuration
 - **Zero boilerplate** — No more connection setup, index creation scripts, or auth handlers
 - **Data isolation** — Multi-tenant ready with automatic app sandboxing
 - **Manifest-driven** — Define your app's "DNA" in JSON, not scattered code
+- **Incremental adoption** — Start minimal, add features as needed
 - **No lock-in** — Standard Motor/PyMongo underneath; export anytime with `mongodump --query='{"app_id":"my_app"}'`
 
 ---
@@ -300,13 +354,34 @@ async def get_items():
 
 ---
 
+## Understanding manifest.json
+
+Your `manifest.json` is the heart of your application. It defines:
+
+- **App Identity**: `slug`, `name`, `description`
+- **Data Access**: `data_access.read_scopes`, `data_access.write_scope`
+- **Indexes**: `managed_indexes` (regular, vector, text, TTL, compound)
+- **Authentication**: `auth.policy`, `auth.users` (Casbin/OSO, demo users)
+- **AI Services**: `embedding_config`, `memory_config`
+- **Real-time**: `websockets` endpoints
+- **CORS**: `cors` settings
+
+**Start minimal, grow as needed.** You can begin with just `slug`, `name`, and `schema_version`, then add features incrementally.
+
+**📖 Learn More:**
+- [Quick Start Guide](docs/QUICK_START.md) - Get started with manifest.json
+- [Manifest Deep Dive](docs/MANIFEST_DEEP_DIVE.md) - Comprehensive manifest.json guide
+- [Examples](examples/) - Real-world manifest.json files
+
+---
+
 ## Links
 
 - [GitHub Repository](https://github.com/ranfysvalle02/mdb-engine)
 - [Documentation](https://github.com/ranfysvalle02/mdb-engine/tree/main/docs)
 - [All Examples](https://github.com/ranfysvalle02/mdb-engine/tree/main/examples)
-- [Quick Start Guide](https://github.com/ranfysvalle02/mdb-engine/blob/main/docs/QUICK_START.md)
-- [Contributing](https://github.com/ranfysvalle02/mdb-engine/blob/main/CONTRIBUTING.md)
+- [Quick Start Guide](docs/QUICK_START.md) - **Start here!**
+- [Contributing](CONTRIBUTING.md)
 
 ---
 

{mdb_engine-0.2.1 → mdb_engine-0.2.4}/README.md

@@ -8,6 +8,31 @@
 
 ---
 
+## 🎯 manifest.json: The Key to Everything
+
+**`manifest.json` is the foundation of your application.** It's a single configuration file that defines your app's identity, data structure, authentication, indexes, and services. Everything flows from this file.
+
+### Your First manifest.json
+
+Create a `manifest.json` file with just 3 fields:
+
+```json
+{
+  "schema_version": "2.0",
+  "slug": "my_app",
+  "name": "My App"
+}
+```
+
+That's it! This minimal manifest gives you:
+- ✅ Automatic data scoping (all queries filtered by `app_id`)
+- ✅ Collection name prefixing (`db.tasks` → `my_app_tasks`)
+- ✅ App registration and lifecycle management
+
+**Learn more**: [Quick Start Guide](docs/QUICK_START.md) | [Manifest Deep Dive](docs/MANIFEST_DEEP_DIVE.md)
+
+---
+
 ## Installation
 
 ```bash
@@ -18,28 +43,55 @@ pip install mdb-engine
 
 ## 30-Second Quick Start
 
+**Step 1**: Create your `manifest.json`:
+
+```json
+{
+  "schema_version": "2.0",
+  "slug": "my_app",
+  "name": "My App",
+  "managed_indexes": {
+    "tasks": [
+      {
+        "type": "regular",
+        "keys": {"status": 1, "created_at": -1},
+        "name": "status_sort"
+      }
+    ]
+  }
+}
+```
+
+**Step 2**: Create your FastAPI app:
+
 ```python
 from pathlib import Path
 from fastapi import Depends
 from mdb_engine import MongoDBEngine
 from mdb_engine.dependencies import get_scoped_db
 
-# 1. Initialize the engine
+# Initialize the engine
 engine = MongoDBEngine(
     mongo_uri="mongodb://localhost:27017",
     db_name="my_database"
 )
 
-# 2. Create a FastAPI app with automatic lifecycle management
+# Create app - manifest.json is loaded automatically!
 app = engine.create_app(slug="my_app", manifest=Path("manifest.json"))
 
-# 3. Use request-scoped dependencies - all queries automatically isolated
+# Use request-scoped dependencies - all queries automatically isolated
 @app.post("/tasks")
 async def create_task(task: dict, db=Depends(get_scoped_db)):
     result = await db.tasks.insert_one(task)
     return {"id": str(result.inserted_id)}
 ```
 
+**What just happened?**
+- ✅ Engine loaded your `manifest.json`
+- ✅ Indexes created automatically from `managed_indexes`
+- ✅ Database queries automatically scoped to your app
+- ✅ Lifecycle management handled (startup/shutdown)
+
 That's it. Your data is automatically sandboxed, indexes are created, and cleanup is handled.
 
 ---
@@ -135,9 +187,11 @@ async def health():
 
 ## Why mdb-engine?
 
+- **manifest.json is everything** — Single source of truth for your entire app configuration
 - **Zero boilerplate** — No more connection setup, index creation scripts, or auth handlers
 - **Data isolation** — Multi-tenant ready with automatic app sandboxing
 - **Manifest-driven** — Define your app's "DNA" in JSON, not scattered code
+- **Incremental adoption** — Start minimal, add features as needed
 - **No lock-in** — Standard Motor/PyMongo underneath; export anytime with `mongodump --query='{"app_id":"my_app"}'`
 
 ---
@@ -235,13 +289,34 @@ async def get_items():
 
 ---
 
+## Understanding manifest.json
+
+Your `manifest.json` is the heart of your application. It defines:
+
+- **App Identity**: `slug`, `name`, `description`
+- **Data Access**: `data_access.read_scopes`, `data_access.write_scope`
+- **Indexes**: `managed_indexes` (regular, vector, text, TTL, compound)
+- **Authentication**: `auth.policy`, `auth.users` (Casbin/OSO, demo users)
+- **AI Services**: `embedding_config`, `memory_config`
+- **Real-time**: `websockets` endpoints
+- **CORS**: `cors` settings
+
+**Start minimal, grow as needed.** You can begin with just `slug`, `name`, and `schema_version`, then add features incrementally.
+
+**📖 Learn More:**
+- [Quick Start Guide](docs/QUICK_START.md) - Get started with manifest.json
+- [Manifest Deep Dive](docs/MANIFEST_DEEP_DIVE.md) - Comprehensive manifest.json guide
+- [Examples](examples/) - Real-world manifest.json files
+
+---
+
 ## Links
 
 - [GitHub Repository](https://github.com/ranfysvalle02/mdb-engine)
 - [Documentation](https://github.com/ranfysvalle02/mdb-engine/tree/main/docs)
 - [All Examples](https://github.com/ranfysvalle02/mdb-engine/tree/main/examples)
-- [Quick Start Guide](https://github.com/ranfysvalle02/mdb-engine/blob/main/docs/QUICK_START.md)
-- [Contributing](https://github.com/ranfysvalle02/mdb-engine/blob/main/CONTRIBUTING.md)
+- [Quick Start Guide](docs/QUICK_START.md) - **Start here!**
+- [Contributing](CONTRIBUTING.md)
 
 ---
 

{mdb_engine-0.2.1 → mdb_engine-0.2.4}/mdb_engine/__init__.py

@@ -78,7 +78,10 @@ from .indexes import (
 # Repository pattern
 from .repositories import Entity, MongoRepository, Repository, UnitOfWork
 
-__version__ = "0.2.1"  # Major version bump for new DI system
+# Utilities
+from .utils import clean_mongo_doc, clean_mongo_docs
+
+__version__ = "0.2.4"  # Patch version bump for exception handling improvements
 
 __all__ = [
     # Core Engine
@@ -127,4 +130,7 @@ __all__ = [
     "AsyncAtlasIndexManager",
     "AutoIndexManager",
     "run_index_creation_for_collection",
+    # Utilities
+    "clean_mongo_doc",
+    "clean_mongo_docs",
 ]

{mdb_engine-0.2.1 → mdb_engine-0.2.4}/mdb_engine/auth/README.md

@@ -42,6 +42,10 @@ All apps share a central user pool. Users authenticate once and can access any a
 {
   "auth": {
     "mode": "shared",
+    "auth_hub_url": "http://localhost:8000",
+    "related_apps": {
+      "dashboard": "http://localhost:8001"
+    },
     "roles": ["viewer", "editor", "admin"],
     "default_role": "viewer",
     "require_role": "viewer",
@@ -60,6 +64,8 @@ All apps share a central user pool. Users authenticate once and can access any a
 | Field | Description |
 |-------|-------------|
 | `roles` | Available roles for this app |
+| `auth_hub_url` | URL of the authentication hub for SSO apps. Used for redirecting unauthenticated users to login. Can be overridden via `AUTH_HUB_URL` environment variable |
+| `related_apps` | Map of related app slugs to their URLs for cross-app navigation. Keys are app slugs, values are URLs. Can be overridden via `{APP_SLUG_UPPER}_URL` environment variables |
 | `default_role` | Role assigned to new users |
 | `require_role` | Minimum role required to access app |
 | `public_routes` | Routes that don't require authentication |

{mdb_engine-0.2.1 → mdb_engine-0.2.4}/mdb_engine/auth/audit.py

@@ -35,7 +35,7 @@ Usage:
 import logging
 from datetime import datetime, timedelta
 from enum import Enum
-from typing import Any, Dict, List, Optional
+from typing import Any
 
 from motor.motor_asyncio import AsyncIOMotorDatabase
 from pymongo.errors import OperationFailure
@@ -161,12 +161,12 @@ class AuthAuditLog:
         self,
         action: AuthAction,
         success: bool,
-        user_email: Optional[str] = None,
-        user_id: Optional[str] = None,
-        app_slug: Optional[str] = None,
-        ip_address: Optional[str] = None,
-        user_agent: Optional[str] = None,
-        details: Optional[Dict[str, Any]] = None,
+        user_email: str | None = None,
+        user_id: str | None = None,
+        app_slug: str | None = None,
+        ip_address: str | None = None,
+        user_agent: str | None = None,
+        details: dict[str, Any] | None = None,
     ) -> str:
         """
         Log an authentication event.
@@ -217,9 +217,9 @@ class AuthAuditLog:
     async def log_login_success(
         self,
         email: str,
-        ip_address: Optional[str] = None,
-        user_agent: Optional[str] = None,
-        app_slug: Optional[str] = None,
+        ip_address: str | None = None,
+        user_agent: str | None = None,
+        app_slug: str | None = None,
     ) -> str:
         """Convenience method to log successful login."""
         return await self.log_event(
@@ -235,9 +235,9 @@ class AuthAuditLog:
         self,
         email: str,
         reason: str = "invalid_credentials",
-        ip_address: Optional[str] = None,
-        user_agent: Optional[str] = None,
-        app_slug: Optional[str] = None,
+        ip_address: str | None = None,
+        user_agent: str | None = None,
+        app_slug: str | None = None,
     ) -> str:
         """Convenience method to log failed login."""
         return await self.log_event(
@@ -253,8 +253,8 @@ class AuthAuditLog:
     async def log_logout(
         self,
         email: str,
-        ip_address: Optional[str] = None,
-        app_slug: Optional[str] = None,
+        ip_address: str | None = None,
+        app_slug: str | None = None,
     ) -> str:
         """Convenience method to log logout."""
         return await self.log_event(
@@ -268,9 +268,9 @@ class AuthAuditLog:
     async def log_register(
         self,
         email: str,
-        ip_address: Optional[str] = None,
-        user_agent: Optional[str] = None,
-        app_slug: Optional[str] = None,
+        ip_address: str | None = None,
+        user_agent: str | None = None,
+        app_slug: str | None = None,
     ) -> str:
         """Convenience method to log new user registration."""
         return await self.log_event(
@@ -286,10 +286,10 @@ class AuthAuditLog:
         self,
         email: str,
         app_slug: str,
-        old_roles: List[str],
-        new_roles: List[str],
-        changed_by: Optional[str] = None,
-        ip_address: Optional[str] = None,
+        old_roles: list[str],
+        new_roles: list[str],
+        changed_by: str | None = None,
+        ip_address: str | None = None,
     ) -> str:
         """Log a role change event."""
         action = (
@@ -312,8 +312,8 @@ class AuthAuditLog:
         self,
         email: str,
         reason: str = "logout",
-        ip_address: Optional[str] = None,
-        app_slug: Optional[str] = None,
+        ip_address: str | None = None,
+        app_slug: str | None = None,
     ) -> str:
         """Log token revocation."""
         return await self.log_event(
@@ -329,8 +329,8 @@ class AuthAuditLog:
         self,
         ip_address: str,
         endpoint: str,
-        email: Optional[str] = None,
-        app_slug: Optional[str] = None,
+        email: str | None = None,
+        app_slug: str | None = None,
     ) -> str:
         """Log rate limit exceeded event."""
         return await self.log_event(
@@ -349,10 +349,10 @@ class AuthAuditLog:
     async def get_recent_events(
         self,
         hours: int = 24,
-        action: Optional[AuthAction] = None,
-        success: Optional[bool] = None,
+        action: AuthAction | None = None,
+        success: bool | None = None,
         limit: int = 100,
-    ) -> List[Dict[str, Any]]:
+    ) -> list[dict[str, Any]]:
         """
         Get recent audit events.
 
@@ -367,7 +367,7 @@ class AuthAuditLog:
         """
         since = datetime.utcnow() - timedelta(hours=hours)
 
-        query: Dict[str, Any] = {"timestamp": {"$gte": since}}
+        query: dict[str, Any] = {"timestamp": {"$gte": since}}
         if action:
             query["action"] = action.value if isinstance(action, AuthAction) else action
         if success is not None:
@@ -384,11 +384,11 @@ class AuthAuditLog:
 
     async def get_failed_logins(
         self,
-        email: Optional[str] = None,
-        ip_address: Optional[str] = None,
+        email: str | None = None,
+        ip_address: str | None = None,
         hours: int = 24,
         limit: int = 100,
-    ) -> List[Dict[str, Any]]:
+    ) -> list[dict[str, Any]]:
         """
         Get failed login attempts.
 
@@ -403,7 +403,7 @@ class AuthAuditLog:
         """
         since = datetime.utcnow() - timedelta(hours=hours)
 
-        query: Dict[str, Any] = {
+        query: dict[str, Any] = {
             "action": AuthAction.LOGIN_FAILED.value,
             "timestamp": {"$gte": since},
         }
@@ -425,7 +425,7 @@ class AuthAuditLog:
         email: str,
         hours: int = 168,  # 7 days
         limit: int = 100,
-    ) -> List[Dict[str, Any]]:
+    ) -> list[dict[str, Any]]:
         """
         Get all activity for a specific user.
 
@@ -462,7 +462,7 @@ class AuthAuditLog:
         ip_address: str,
         hours: int = 24,
         limit: int = 100,
-    ) -> List[Dict[str, Any]]:
+    ) -> list[dict[str, Any]]:
         """
         Get all activity from a specific IP address.
 
@@ -498,8 +498,8 @@ class AuthAuditLog:
 
     async def count_failed_logins(
         self,
-        email: Optional[str] = None,
-        ip_address: Optional[str] = None,
+        email: str | None = None,
+        ip_address: str | None = None,
         hours: int = 1,
     ) -> int:
         """
@@ -517,7 +517,7 @@ class AuthAuditLog:
         """
         since = datetime.utcnow() - timedelta(hours=hours)
 
-        query: Dict[str, Any] = {
+        query: dict[str, Any] = {
             "action": AuthAction.LOGIN_FAILED.value,
             "timestamp": {"$gte": since},
         }
@@ -531,7 +531,7 @@ class AuthAuditLog:
     async def get_security_summary(
         self,
         hours: int = 24,
-    ) -> Dict[str, Any]:
+    ) -> dict[str, Any]:
         """
         Get security summary statistics.
 

{mdb_engine-0.2.1 → mdb_engine-0.2.4}/mdb_engine/auth/base.py

@@ -11,7 +11,7 @@ from __future__ import annotations
 
 import abc
 import logging
-from typing import Any, Optional
+from typing import Any
 
 logger = logging.getLogger(__name__)
 
@@ -71,7 +71,7 @@ class BaseAuthorizationProvider(abc.ABC):
         subject: str,
         resource: str,
         action: str,
-        user_object: Optional[dict[str, Any]] = None,
+        user_object: dict[str, Any] | None = None,
     ) -> bool:
         """
         Check if a subject is allowed to perform an action on a resource.
@@ -195,7 +195,7 @@ class BaseAuthorizationProvider(abc.ABC):
         resource: str,
         action: str,
         error: Exception,
-        context: Optional[str] = None,
+        context: str | None = None,
     ) -> bool:
         """
         Handle authorization evaluation errors with fail-closed security.

{mdb_engine-0.2.1 → mdb_engine-0.2.4}/mdb_engine/auth/casbin_factory.py

@@ -11,7 +11,7 @@ from __future__ import annotations
 
 import logging
 from pathlib import Path
-from typing import TYPE_CHECKING, Any, Optional
+from typing import TYPE_CHECKING, Any
 
 from .casbin_models import DEFAULT_RBAC_MODEL, SIMPLE_ACL_MODEL
 
@@ -46,7 +46,7 @@ async def get_casbin_model(model_type: str = "rbac") -> str:
                 # Try async file reading (non-blocking)
                 import aiofiles
 
-                async with aiofiles.open(model_path, "r") as f:
+                async with aiofiles.open(model_path) as f:
                     content = await f.read()
                     logger.debug(f"Read model file asynchronously: {model_path}")
                     return content
@@ -67,7 +67,7 @@ async def create_casbin_enforcer(
     db_name: str,
     model: str = "rbac",
     policies_collection: str = "casbin_policies",
-    default_roles: Optional[list] = None,
+    default_roles: list | None = None,
 ) -> casbin.AsyncEnforcer:
     """
     Create a Casbin AsyncEnforcer with MongoDB adapter.
@@ -189,7 +189,7 @@ async def create_casbin_enforcer(
 
 async def initialize_casbin_from_manifest(
     engine, app_slug: str, auth_config: dict[str, Any]
-) -> Optional[CasbinAdapter]:
+) -> CasbinAdapter | None:
     """
     Initialize Casbin provider from manifest configuration.
 
@@ -261,7 +261,7 @@ async def initialize_casbin_from_manifest(
         if initial_policies:
             logger.info(f"Setting up {len(initial_policies)} initial policies...")
             for policy in initial_policies:
-                if isinstance(policy, (list, tuple)) and len(policy) >= 3:
+                if isinstance(policy, list | tuple) and len(policy) >= 3:
                     role, resource, action = policy[0], policy[1], policy[2]
                     try:
                         # Check if policy already exists
@@ -331,7 +331,7 @@ async def initialize_casbin_from_manifest(
         if initial_policies:
             verified = 0
             for policy in initial_policies:
-                if isinstance(policy, (list, tuple)) and len(policy) >= 3:
+                if isinstance(policy, list | tuple) and len(policy) >= 3:
                     role, resource, action = policy[0], policy[1], policy[2]
                     if await adapter.has_policy(role, resource, action):
                         verified += 1