otdf-python 0.4.0__tar.gz → 0.4.2__tar.gz

{otdf_python-0.4.0 → otdf_python-0.4.2}/.pre-commit-config.yaml

@@ -34,7 +34,7 @@ repos:
 
   - repo: https://github.com/astral-sh/ruff-pre-commit
     # Ruff version.
-    rev: v0.14.5
+    rev: v0.14.8
     hooks:
       # Run the linter.
       - id: ruff-check

otdf_python-0.4.2/.release-please-manifest.json

@@ -0,0 +1,3 @@
+{
+    ".": "0.4.2"
+}

{otdf_python-0.4.0 → otdf_python-0.4.2}/.vscode/extensions.json

@@ -1,5 +1,5 @@
 {
     "recommendations": [
-        "golang.go"
+        "charliermarsh.ruff"
     ]
 }

{otdf_python-0.4.0 → otdf_python-0.4.2}/CHANGELOG.md

@@ -1,5 +1,28 @@
 # Changelog
 
+## [0.4.2](https://github.com/b-long/opentdf-python-sdk/compare/otdf-python-v0.4.1...otdf-python-v0.4.2) (2026-01-07)
+
+
+### ⚠ BREAKING CHANGES
+
+* **main:** Upgrade from connect-python 0.4.2 to 0.6.0
+
+### Bug Fixes
+
+* **main:** ensure compatibility with the latest `connect-python` ([#123](https://github.com/b-long/opentdf-python-sdk/issues/123)) ([4d160db](https://github.com/b-long/opentdf-python-sdk/commit/4d160dbed2bdedc4baaa807f97903aad710de943))
+
+
+### Miscellaneous Chores
+
+* release 0.4.2 ([a840f28](https://github.com/b-long/opentdf-python-sdk/commit/a840f284bed82a4b7de170ca1224bd232108047b))
+
+## [0.4.1](https://github.com/b-long/opentdf-python-sdk/compare/otdf-python-v0.4.0...otdf-python-v0.4.1) (2025-12-09)
+
+
+### Bug Fixes
+
+* preserve exception chain ([#119](https://github.com/b-long/opentdf-python-sdk/issues/119)) ([09984b8](https://github.com/b-long/opentdf-python-sdk/commit/09984b843b369a6d2c76dc8a81d6315f195ea773))
+
 ## [0.4.0](https://github.com/b-long/opentdf-python-sdk/compare/otdf-python-v0.3.5...otdf-python-v0.4.0) (2025-11-20)
 
 

{otdf_python-0.4.0 → otdf_python-0.4.2}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: otdf-python
-Version: 0.4.0
+Version: 0.4.2
 Summary: Unofficial OpenTDF SDK for Python
 Project-URL: Homepage, https://github.com/b-long/opentdf-python-sdk
 Project-URL: Repository, https://github.com/b-long/opentdf-python-sdk
@@ -22,13 +22,14 @@ Classifier: Topic :: Security :: Cryptography
 Classifier: Topic :: Software Development :: Libraries :: Python Modules
 Classifier: Typing :: Typed
 Requires-Python: >=3.10
-Requires-Dist: connect-python[compiler]<0.5,>=0.4.2
+Requires-Dist: connect-python<0.7,>=0.6.0
 Requires-Dist: cryptography>=45.0.4
 Requires-Dist: grpcio-status>=1.74.0
 Requires-Dist: grpcio-tools>=1.74.0
 Requires-Dist: grpcio>=1.74.0
 Requires-Dist: httpx>=0.28.1
 Requires-Dist: protobuf>=6.31.1
+Requires-Dist: protoc-gen-connect-python<0.7,>=0.6.0
 Requires-Dist: protoc-gen-openapiv2>=0.0.1
 Requires-Dist: pyjwt>=2.10.1
 Requires-Dist: typing-extensions>=4.14.1

{otdf_python-0.4.0 → otdf_python-0.4.2}/conftest.py

@@ -1,5 +1,4 @@
-"""
-Pytest configuration and fixtures for the OpenTDF Python SDK tests.
+"""Pytest configuration and fixtures for the OpenTDF Python SDK tests.
 
 This module contains pytest hooks and fixtures that will be automatically
 loaded by pytest when running tests.
@@ -14,13 +13,13 @@ from tests.server_logs import log_server_logs_on_failure
 
 @pytest.fixture(scope="session")
 def project_root(request) -> Path:
+    """Get project root directory."""
     return request.config.rootpath  # Project root
 
 
 @pytest.hookimpl(tryfirst=True, hookwrapper=True)
 def pytest_runtest_makereport(item, call):
-    """
-    Hook that runs after each test phase (setup, call, teardown).
+    """Collect server logs when test fails after each test phase.
 
     This hook automatically collects server logs when a test fails.
     """
@@ -53,8 +52,7 @@ def pytest_runtest_makereport(item, call):
 
 @pytest.fixture
 def collect_server_logs():
-    """
-    Fixture that provides a function to manually collect server logs.
+    """Fixture that provides a function to manually collect server logs.
 
     Usage:
         def test_something(collect_server_logs):

{otdf_python-0.4.0 → otdf_python-0.4.2}/otdf-python-proto/buf.gen.yaml

@@ -18,7 +18,7 @@ plugins:
     out: src/otdf_python_proto
 
   # Connect Python client generation (preferred)
-  - local: ../.venv/bin/protoc-gen-connect_python
+  - local: ../.venv/bin/protoc-gen-connect-python
     out: src/otdf_python_proto
     opt:
       - paths=source_relative

{otdf_python-0.4.0 → otdf_python-0.4.2}/otdf-python-proto/pyproject.toml

@@ -1,6 +1,6 @@
 [project]
 name = "otdf-python-proto"
-version = "0.4.0"
+version = "0.4.2"
 description = "Generated protobuf files for OpenTDF Python SDK"
 readme = "README.md"
 authors = [

{otdf_python-0.4.0 → otdf_python-0.4.2}/otdf-python-proto/scripts/generate_connect_proto.py

@@ -1,6 +1,5 @@
 #!/usr/bin/env python3
-"""
-Enhanced script to generate Python Connect RPC clients from .proto definitions.
+"""Enhanced script to generate Python Connect RPC clients from .proto definitions.
 
 This script:
 1. Downloads the latest proto files from OpenTDF platform
@@ -38,7 +37,7 @@ def check_dependencies() -> bool:
                 print("  # macOS: brew install bufbuild/buf/buf")
                 print("  # Or: go install github.com/bufbuild/buf/cmd/buf@latest")
             elif dep == "connect-python":
-                print("  uv add connect-python[compiler]")
+                print("  uv add connect-python protoc-gen-connect-python")
         return False
 
     return True
@@ -142,9 +141,9 @@ def run_buf_generate(proto_gen_dir: Path) -> bool:
     print("Generating protobuf and Connect RPC files...")
 
     try:
-        # First, get the path to protoc-gen-connect_python
+        # First, get the path to protoc-gen-connect-python
         result = subprocess.run(
-            ["uv", "run", "which", "protoc-gen-connect_python"],
+            ["uv", "run", "which", "protoc-gen-connect-python"],
             cwd=proto_gen_dir,
             capture_output=True,
             text=True,
@@ -160,7 +159,7 @@ def run_buf_generate(proto_gen_dir: Path) -> bool:
 
         # Replace the local plugin path
         updated_content = content.replace(
-            "- local: protoc-gen-connect_python", f"- local: {connect_plugin_path}"
+            "- local: protoc-gen-connect-python", f"- local: {connect_plugin_path}"
         )
 
         with buf_gen_path.open("w") as f:
@@ -200,8 +199,7 @@ def create_init_files(generated_dir: Path) -> None:
 
 
 def _fix_ignore_if_default_value(proto_files_dir):
-    """
-    TODO: Fix buf validation: Updated the proto files to use the correct enum value:
+    """TODO: Fix buf validation: Updated the proto files to use the correct enum value:
 
     Changed IGNORE_IF_DEFAULT_VALUE → IGNORE_IF_ZERO_VALUE in:
         attributes.proto

{otdf_python-0.4.0 → otdf_python-0.4.2}/otdf-python-proto/src/otdf_python_proto/__init__.py

@@ -13,25 +13,21 @@ except metadata.PackageNotFoundError:
     __version__ = "0.0.0"
 
 # Import submodules to make them available
-from . import authorization
+# Note: authorization, entityresolution, wellknownconfiguration and policy subdirectories
+# are imported lazily to avoid import errors from generated protobuf files
 from . import common
 from . import entity
-from . import entityresolution
 from . import kas
 from . import legacy_grpc
 from . import logger
 from . import policy
-from . import wellknownconfiguration
 
 # Export main module categories
 __all__ = [
-    "authorization",
     "common",
     "entity",
-    "entityresolution",
     "kas",
     "legacy_grpc",
     "logger",
     "policy",
-    "wellknownconfiguration",
 ]

otdf_python-0.4.2/otdf-python-proto/src/otdf_python_proto/authorization/__init__.py

@@ -0,0 +1,11 @@
+"""authorization protobuf definitions."""
+
+from .authorization_connect import (
+    AuthorizationServiceClient,
+    AuthorizationServiceClientSync,
+)
+
+__all__ = [
+    "AuthorizationServiceClient",
+    "AuthorizationServiceClientSync",
+]

otdf_python-0.4.2/otdf-python-proto/src/otdf_python_proto/authorization/authorization_connect.py

@@ -0,0 +1,250 @@
+# -*- coding: utf-8 -*-
+# Generated by https://github.com/connectrpc/connect-python.  DO NOT EDIT!
+# source: authorization/authorization.proto
+
+from collections.abc import AsyncGenerator, AsyncIterator, Iterable, Iterator, Mapping
+from typing import Protocol
+
+from connectrpc.client import ConnectClient, ConnectClientSync
+from connectrpc.code import Code
+from connectrpc.errors import ConnectError
+from connectrpc.interceptor import Interceptor, InterceptorSync
+from connectrpc.method import IdempotencyLevel, MethodInfo
+from connectrpc.request import Headers, RequestContext
+from connectrpc.server import ConnectASGIApplication, ConnectWSGIApplication, Endpoint, EndpointSync
+from . import authorization_pb2 as authorization_dot_authorization__pb2
+
+
+class AuthorizationService(Protocol):
+    async def get_decisions(self, request: authorization_dot_authorization__pb2.GetDecisionsRequest, ctx: RequestContext) -> authorization_dot_authorization__pb2.GetDecisionsResponse:
+        raise ConnectError(Code.UNIMPLEMENTED, "Not implemented")
+
+    async def get_decisions_by_token(self, request: authorization_dot_authorization__pb2.GetDecisionsByTokenRequest, ctx: RequestContext) -> authorization_dot_authorization__pb2.GetDecisionsByTokenResponse:
+        raise ConnectError(Code.UNIMPLEMENTED, "Not implemented")
+
+    async def get_entitlements(self, request: authorization_dot_authorization__pb2.GetEntitlementsRequest, ctx: RequestContext) -> authorization_dot_authorization__pb2.GetEntitlementsResponse:
+        raise ConnectError(Code.UNIMPLEMENTED, "Not implemented")
+
+
+class AuthorizationServiceASGIApplication(ConnectASGIApplication[AuthorizationService]):
+    def __init__(self, service: AuthorizationService | AsyncGenerator[AuthorizationService], *, interceptors: Iterable[Interceptor]=(), read_max_bytes: int | None = None) -> None:
+        super().__init__(
+            service=service,
+            endpoints=lambda svc: {
+                "/authorization.AuthorizationService/GetDecisions": Endpoint.unary(
+                    method=MethodInfo(
+                        name="GetDecisions",
+                        service_name="authorization.AuthorizationService",
+                        input=authorization_dot_authorization__pb2.GetDecisionsRequest,
+                        output=authorization_dot_authorization__pb2.GetDecisionsResponse,
+                        idempotency_level=IdempotencyLevel.UNKNOWN,
+                    ),
+                    function=svc.get_decisions,
+                ),
+                "/authorization.AuthorizationService/GetDecisionsByToken": Endpoint.unary(
+                    method=MethodInfo(
+                        name="GetDecisionsByToken",
+                        service_name="authorization.AuthorizationService",
+                        input=authorization_dot_authorization__pb2.GetDecisionsByTokenRequest,
+                        output=authorization_dot_authorization__pb2.GetDecisionsByTokenResponse,
+                        idempotency_level=IdempotencyLevel.UNKNOWN,
+                    ),
+                    function=svc.get_decisions_by_token,
+                ),
+                "/authorization.AuthorizationService/GetEntitlements": Endpoint.unary(
+                    method=MethodInfo(
+                        name="GetEntitlements",
+                        service_name="authorization.AuthorizationService",
+                        input=authorization_dot_authorization__pb2.GetEntitlementsRequest,
+                        output=authorization_dot_authorization__pb2.GetEntitlementsResponse,
+                        idempotency_level=IdempotencyLevel.UNKNOWN,
+                    ),
+                    function=svc.get_entitlements,
+                ),
+            },
+            interceptors=interceptors,
+            read_max_bytes=read_max_bytes,
+        )
+
+    @property
+    def path(self) -> str:
+        """Returns the URL path to mount the application to when serving multiple applications."""
+        return "/authorization.AuthorizationService"
+
+
+class AuthorizationServiceClient(ConnectClient):
+    async def get_decisions(
+        self,
+        request: authorization_dot_authorization__pb2.GetDecisionsRequest,
+        *,
+        headers: Headers | Mapping[str, str] | None = None,
+        timeout_ms: int | None = None,
+    ) -> authorization_dot_authorization__pb2.GetDecisionsResponse:
+        return await self.execute_unary(
+            request=request,
+            method=MethodInfo(
+                name="GetDecisions",
+                service_name="authorization.AuthorizationService",
+                input=authorization_dot_authorization__pb2.GetDecisionsRequest,
+                output=authorization_dot_authorization__pb2.GetDecisionsResponse,
+                idempotency_level=IdempotencyLevel.UNKNOWN,
+            ),
+            headers=headers,
+            timeout_ms=timeout_ms,
+        )
+
+    async def get_decisions_by_token(
+        self,
+        request: authorization_dot_authorization__pb2.GetDecisionsByTokenRequest,
+        *,
+        headers: Headers | Mapping[str, str] | None = None,
+        timeout_ms: int | None = None,
+    ) -> authorization_dot_authorization__pb2.GetDecisionsByTokenResponse:
+        return await self.execute_unary(
+            request=request,
+            method=MethodInfo(
+                name="GetDecisionsByToken",
+                service_name="authorization.AuthorizationService",
+                input=authorization_dot_authorization__pb2.GetDecisionsByTokenRequest,
+                output=authorization_dot_authorization__pb2.GetDecisionsByTokenResponse,
+                idempotency_level=IdempotencyLevel.UNKNOWN,
+            ),
+            headers=headers,
+            timeout_ms=timeout_ms,
+        )
+
+    async def get_entitlements(
+        self,
+        request: authorization_dot_authorization__pb2.GetEntitlementsRequest,
+        *,
+        headers: Headers | Mapping[str, str] | None = None,
+        timeout_ms: int | None = None,
+    ) -> authorization_dot_authorization__pb2.GetEntitlementsResponse:
+        return await self.execute_unary(
+            request=request,
+            method=MethodInfo(
+                name="GetEntitlements",
+                service_name="authorization.AuthorizationService",
+                input=authorization_dot_authorization__pb2.GetEntitlementsRequest,
+                output=authorization_dot_authorization__pb2.GetEntitlementsResponse,
+                idempotency_level=IdempotencyLevel.UNKNOWN,
+            ),
+            headers=headers,
+            timeout_ms=timeout_ms,
+        )
+
+
+class AuthorizationServiceSync(Protocol):
+    def get_decisions(self, request: authorization_dot_authorization__pb2.GetDecisionsRequest, ctx: RequestContext) -> authorization_dot_authorization__pb2.GetDecisionsResponse:
+        raise ConnectError(Code.UNIMPLEMENTED, "Not implemented")
+    def get_decisions_by_token(self, request: authorization_dot_authorization__pb2.GetDecisionsByTokenRequest, ctx: RequestContext) -> authorization_dot_authorization__pb2.GetDecisionsByTokenResponse:
+        raise ConnectError(Code.UNIMPLEMENTED, "Not implemented")
+    def get_entitlements(self, request: authorization_dot_authorization__pb2.GetEntitlementsRequest, ctx: RequestContext) -> authorization_dot_authorization__pb2.GetEntitlementsResponse:
+        raise ConnectError(Code.UNIMPLEMENTED, "Not implemented")
+
+
+class AuthorizationServiceWSGIApplication(ConnectWSGIApplication):
+    def __init__(self, service: AuthorizationServiceSync, interceptors: Iterable[InterceptorSync]=(), read_max_bytes: int | None = None) -> None:
+        super().__init__(
+            endpoints={
+                "/authorization.AuthorizationService/GetDecisions": EndpointSync.unary(
+                    method=MethodInfo(
+                        name="GetDecisions",
+                        service_name="authorization.AuthorizationService",
+                        input=authorization_dot_authorization__pb2.GetDecisionsRequest,
+                        output=authorization_dot_authorization__pb2.GetDecisionsResponse,
+                        idempotency_level=IdempotencyLevel.UNKNOWN,
+                    ),
+                    function=service.get_decisions,
+                ),
+                "/authorization.AuthorizationService/GetDecisionsByToken": EndpointSync.unary(
+                    method=MethodInfo(
+                        name="GetDecisionsByToken",
+                        service_name="authorization.AuthorizationService",
+                        input=authorization_dot_authorization__pb2.GetDecisionsByTokenRequest,
+                        output=authorization_dot_authorization__pb2.GetDecisionsByTokenResponse,
+                        idempotency_level=IdempotencyLevel.UNKNOWN,
+                    ),
+                    function=service.get_decisions_by_token,
+                ),
+                "/authorization.AuthorizationService/GetEntitlements": EndpointSync.unary(
+                    method=MethodInfo(
+                        name="GetEntitlements",
+                        service_name="authorization.AuthorizationService",
+                        input=authorization_dot_authorization__pb2.GetEntitlementsRequest,
+                        output=authorization_dot_authorization__pb2.GetEntitlementsResponse,
+                        idempotency_level=IdempotencyLevel.UNKNOWN,
+                    ),
+                    function=service.get_entitlements,
+                ),
+            },
+            interceptors=interceptors,
+            read_max_bytes=read_max_bytes,
+        )
+
+    @property
+    def path(self) -> str:
+        """Returns the URL path to mount the application to when serving multiple applications."""
+        return "/authorization.AuthorizationService"
+
+
+class AuthorizationServiceClientSync(ConnectClientSync):
+    def get_decisions(
+        self,
+        request: authorization_dot_authorization__pb2.GetDecisionsRequest,
+        *,
+        headers: Headers | Mapping[str, str] | None = None,
+        timeout_ms: int | None = None,
+    ) -> authorization_dot_authorization__pb2.GetDecisionsResponse:
+        return self.execute_unary(
+            request=request,
+            method=MethodInfo(
+                name="GetDecisions",
+                service_name="authorization.AuthorizationService",
+                input=authorization_dot_authorization__pb2.GetDecisionsRequest,
+                output=authorization_dot_authorization__pb2.GetDecisionsResponse,
+                idempotency_level=IdempotencyLevel.UNKNOWN,
+            ),
+            headers=headers,
+            timeout_ms=timeout_ms,
+        )
+
+    def get_decisions_by_token(
+        self,
+        request: authorization_dot_authorization__pb2.GetDecisionsByTokenRequest,
+        *,
+        headers: Headers | Mapping[str, str] | None = None,
+        timeout_ms: int | None = None,
+    ) -> authorization_dot_authorization__pb2.GetDecisionsByTokenResponse:
+        return self.execute_unary(
+            request=request,
+            method=MethodInfo(
+                name="GetDecisionsByToken",
+                service_name="authorization.AuthorizationService",
+                input=authorization_dot_authorization__pb2.GetDecisionsByTokenRequest,
+                output=authorization_dot_authorization__pb2.GetDecisionsByTokenResponse,
+                idempotency_level=IdempotencyLevel.UNKNOWN,
+            ),
+            headers=headers,
+            timeout_ms=timeout_ms,
+        )
+
+    def get_entitlements(
+        self,
+        request: authorization_dot_authorization__pb2.GetEntitlementsRequest,
+        *,
+        headers: Headers | Mapping[str, str] | None = None,
+        timeout_ms: int | None = None,
+    ) -> authorization_dot_authorization__pb2.GetEntitlementsResponse:
+        return self.execute_unary(
+            request=request,
+            method=MethodInfo(
+                name="GetEntitlements",
+                service_name="authorization.AuthorizationService",
+                input=authorization_dot_authorization__pb2.GetEntitlementsRequest,
+                output=authorization_dot_authorization__pb2.GetEntitlementsResponse,
+                idempotency_level=IdempotencyLevel.UNKNOWN,
+            ),
+            headers=headers,
+            timeout_ms=timeout_ms,
+        )