pyquickbase 0.1.0a1__tar.gz

pyquickbase-0.1.0a1/.env.example

@@ -0,0 +1,2 @@
+QB_REALM=yourrealm.quickbase.com
+QB_USER_TOKEN=your_user_token

pyquickbase-0.1.0a1/.github/workflows/ci.yml

@@ -0,0 +1,55 @@
+name: CI
+
+on:
+  push:
+    branches: [main]
+  pull_request:
+
+permissions:
+  contents: read
+
+jobs:
+  quality:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
+      - uses: astral-sh/setup-uv@68559e99cc807c1eb7e9238fd43a15bba460eec2 # v10.3.3
+      - run: uv sync --locked
+      - name: Lint
+        run: uv run ruff check .
+      - name: Check formatting
+        run: uv run ruff format --check .
+      - name: Check types
+        run: uv run pyright
+      - name: Check the generated sync code is current
+        run: uv run scripts/generate_sync.py --check
+      - name: Build the package
+        run: uv build
+
+  test:
+    runs-on: ubuntu-latest
+    strategy:
+      fail-fast: false
+      matrix:
+        python: ["3.11", "3.12", "3.13", "3.14"]
+    steps:
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
+      - uses: astral-sh/setup-uv@68559e99cc807c1eb7e9238fd43a15bba460eec2 # v10.3.3
+      - run: uv run --locked --python ${{ matrix.python }} pytest --cov
+
+  test-lowest-dependencies:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
+      - uses: astral-sh/setup-uv@68559e99cc807c1eb7e9238fd43a15bba460eec2 # v10.3.3
+      - run: uv run --isolated --resolution lowest-direct --python 3.11 pytest
+
+  secrets:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
+        with:
+          fetch-depth: 0
+      - uses: gitleaks/gitleaks-action@e0c47f4f8be36e29cdc102c57e68cb5cbf0e8d1e # v3.0.0
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}

pyquickbase-0.1.0a1/.github/workflows/release.yml

@@ -0,0 +1,32 @@
+name: Release
+
+on:
+  push:
+    tags: ["v*"]
+
+permissions:
+  contents: read
+
+jobs:
+  publish:
+    runs-on: ubuntu-latest
+    environment: pypi
+    permissions:
+      contents: read
+      id-token: write  # PyPI Trusted Publishing, so no API token is stored anywhere
+    steps:
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
+      - uses: astral-sh/setup-uv@68559e99cc807c1eb7e9238fd43a15bba460eec2 # v10.3.3
+      - run: uv sync --locked
+      - name: Check the tag matches the package version
+        run: |
+          version=$(uv run python -c "import pyquickbase; print(pyquickbase.__version__)")
+          test "$GITHUB_REF_NAME" = "v$version"
+      - name: Run the checks
+        run: |
+          uv run ruff check .
+          uv run pyright
+          uv run scripts/generate_sync.py --check
+          uv run pytest
+      - run: uv build
+      - run: uv publish --trusted-publishing always

pyquickbase-0.1.0a1/.gitignore

@@ -0,0 +1,19 @@
+# Secrets: never commit real credentials
+.env
+.env.*
+!.env.example
+
+# Python
+__pycache__/
+*.py[cod]
+.venv/
+build/
+dist/
+*.egg-info/
+
+# Tool caches
+.coverage
+.coverage.*
+htmlcov/
+.pytest_cache/
+.ruff_cache/

pyquickbase-0.1.0a1/.python-version

@@ -0,0 +1 @@
+3.11

pyquickbase-0.1.0a1/CHANGELOG.md

@@ -0,0 +1,28 @@
+# Changelog
+
+All notable changes to this project are documented here. The format follows
+[Keep a Changelog](https://keepachangelog.com/en/1.1.0/), and the project uses
+[Semantic Versioning](https://semver.org/spec/v2.0.0.html).
+
+## [Unreleased]
+
+## [0.1.0a1] - 2026-11-02
+
+First alpha release.
+
+### Added
+
+- `Quickbase` and `AsyncQuickbase` clients with `request()` for calling any endpoint.
+- `RetryPolicy`, with retries for HTTP 429 and connection failures.
+- The `QuickbaseError` exception hierarchy.
+- `qb.app()` and `app.table()`, with app, table, field, and relationship metadata and a schema cache.
+- `F` for building queries by field label, with values escaped for you.
+- Checks that reject broken `where` strings that Quickbase would otherwise accept.
+- `table.query()` for automatic paging, plus `query_page()` and `count()`.
+- `Record`, with access by label or ID and date and timestamp conversion.
+- `read_only=True` on the clients, which refuses any request that could change data.
+- `allowed_writes` on the clients, which limits them to reads plus the writes you list.
+- `parse_where()` for inspecting a hand-written `where` string.
+- `table.insert()`, `update()`, `upsert()`, and `delete()`, with per-row error reporting in `WriteError`.
+- `app.create_table()`, `table.create_field()`, `update_field()`, `delete_fields()`,
+  `create_relationship()`, and `drop()`.

pyquickbase-0.1.0a1/CONTRIBUTING.md

@@ -0,0 +1,38 @@
+# Contributing
+
+## Setup
+
+Install [uv](https://docs.astral.sh/uv/), then run `uv sync`. Before opening a pull request, run:
+
+```bash
+uv run ruff check .
+uv run ruff format .
+uv run pyright
+uv run scripts/generate_sync.py
+uv run pytest --cov
+```
+
+Tests use mocked HTTP and need no Quickbase account.
+
+## Sync and async code
+
+**Only edit the async code.** `src/pyquickbase/_sync/` and `tests/_sync/` are generated from their
+`_async` counterparts, and CI fails if they are out of date. After changing async code, run
+`uv run scripts/generate_sync.py` and commit the result.
+
+Code that does no network access, such as parsing and validation, belongs outside `_async` so both
+clients share it.
+
+## Public API
+
+Anything exported from `pyquickbase/__init__.py` or defined in `errors.py` is public. Modules
+starting with `_` are private and may change at any time. Update `CHANGELOG.md` for changes that
+users would notice.
+
+## Secrets
+
+Never commit real tokens, realm names, or customer data, including in test fixtures. Tokens must
+never appear in exceptions, `repr`s, or logs.
+
+`docs/api-notes.md` tracks which Quickbase API behavior has been confirmed. Please update it if you
+confirm or disprove something.

pyquickbase-0.1.0a1/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 Matthew Williams
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

pyquickbase-0.1.0a1/PKG-INFO

@@ -0,0 +1,223 @@
+Metadata-Version: 2.5
+Name: pyquickbase
+Version: 0.1.0a1
+Summary: An unofficial, typed Python SDK for the Quickbase API, with sync and async clients.
+Project-URL: Repository, https://github.com/matthew-williams-solutions/pyquickbase
+Project-URL: Issues, https://github.com/matthew-williams-solutions/pyquickbase/issues
+Project-URL: Changelog, https://github.com/matthew-williams-solutions/pyquickbase/blob/main/CHANGELOG.md
+Author: Matthew Williams
+License-Expression: MIT
+License-File: LICENSE
+Keywords: api,async,client,quickbase,sdk
+Classifier: Development Status :: 3 - Alpha
+Classifier: Framework :: AnyIO
+Classifier: Intended Audience :: Developers
+Classifier: Programming Language :: Python :: 3 :: Only
+Classifier: Programming Language :: Python :: 3.11
+Classifier: Programming Language :: Python :: 3.12
+Classifier: Programming Language :: Python :: 3.13
+Classifier: Programming Language :: Python :: 3.14
+Classifier: Typing :: Typed
+Requires-Python: >=3.11
+Requires-Dist: anyio<5,>=4.0
+Requires-Dist: httpx<1,>=0.27
+Description-Content-Type: text/markdown
+
+# pyquickbase
+
+An unofficial, typed Python SDK for the [Quickbase](https://www.quickbase.com/) API, with matching
+sync and async clients.
+
+> **Status: early alpha.** Anything may change before 1.0. This project is not affiliated with or endorsed by Quickbase, Inc.
+
+## What works today
+
+- Sync and async clients with the same API, and support for asyncio and Trio
+- Field labels instead of numeric IDs, and table names instead of table IDs
+- A Python query builder that escapes values, and checks for hand-written queries that Quickbase would
+  otherwise accept and answer incorrectly
+- Automatic paging, and records with real `date` and `datetime` values
+- Automatic retries for rate limits, honoring `Retry-After`, and for connection failures
+- Specific exceptions that include Quickbase's error message and request ID
+- Tokens kept out of `repr`s, exceptions, and logs, and never sent to other hosts or over plain HTTP
+- Creating, updating, and deleting records, with errors reported for each failed row
+- Creating and changing tables, fields, and relationships
+- `qb.request()` for calling any Quickbase endpoint directly
+
+## Coming next
+
+Reports, formulas, file attachments, temporary tokens, and generated typed tables.
+
+## Usage
+
+```bash
+pip install pyquickbase==0.1.0a1
+```
+
+This is an alpha release, so pin the exact version.
+
+```python
+from datetime import date
+from pyquickbase import F, Quickbase
+
+with Quickbase(realm="acme", token="your_user_token") as qb:
+    tasks = qb.app("bq1234567").table("Tasks")
+
+    overdue = (F("Status") != "Done") & (F("Due Date") < date.today())
+    for task in tasks.query(where=overdue, select=["Title", "Due Date"], order_by="-Due Date"):
+        print(task.id, task["Title"], task["Due Date"])
+
+    print(tasks.count(F("Status") == "Done"))
+```
+
+The async client has the same API:
+
+```python
+from pyquickbase import AsyncQuickbase, F
+
+async with AsyncQuickbase(realm="acme", token="your_user_token") as qb:
+    tasks = qb.app("bq1234567").table("Tasks")
+    async for task in tasks.query(where=F("Status") == "Done"):
+        print(task["Title"])
+```
+
+`Quickbase.from_env()` reads `QB_REALM` and `QB_USER_TOKEN` from the environment instead.
+
+## Writing queries
+
+Build conditions with `F`, combining them with `&` and `|` and wrapping each in parentheses.
+
+| Python | Matches |
+|---|---|
+| `F("Status") == "Done"`, `!=` | Equal, not equal, ignoring case |
+| `F("Hours") > 10`, `>=`, `<`, `<=` | Numbers and dates |
+| `F("Notes") == None` | Empty fields |
+| `F("Title").contains("x")`, `.not_contains()` | Text anywhere in the value |
+| `F("Title").starts_with("x")`, `.not_starts_with()` | Text at the start of the value |
+| `F("Status").is_in(["Done", "Blocked"])` | Any of the values |
+| `F("Tags").op("HAS", "x")` | Any other Quickbase operator |
+
+Use `F` for any text you don't control. It escapes quotes and rejects values containing `{` or `}`,
+which Quickbase can't search for and which could otherwise change the meaning of the query.
+
+You can also pass a Quickbase query string as `where`, using field IDs:
+`"({7.EX.'Done'}OR{7.EX.'Blocked'})AND{9.BF.'today'}"`. The SDK raises `QueryError` before sending a
+string with a mistake that Quickbase would silently accept, such as a lowercase operator, which it
+treats as "contains", or an unknown field, which matches nothing.
+
+## Reading records
+
+`query()` fetches further pages as you iterate, and `limit` stops it early. Read values by label or
+ID, with `record["Status"]` or `record[7]`. `dict(record)` gives you `{label: value}`. Record ID# is
+always selected, and without `order_by`, records come back in Record ID# order so that pages stay
+stable. For one page at a time, use `query_page()`, which returns the records, the `total` number of
+matches, `has_more`, and `next_skip`.
+
+Table and field metadata is cached for five minutes. Set `schema_ttl` on the client to change this,
+or call `qb.clear_schema_cache()` after changing a table.
+
+## Writing records
+
+Rows are dictionaries keyed by field label or ID. Python dates, timezone-aware datetimes, and
+`Decimal` values are converted for you, and `None` clears a field.
+
+| Method | What it does |
+|---|---|
+| `table.insert(rows)` | Creates records, and never changes existing ones |
+| `table.update(rows)` | Changes records. Each row needs a `Record ID#`, and a missing record is an error |
+| `table.upsert(rows, merge_on="Code")` | Updates the record whose unique field matches, or creates one |
+| `table.delete(where)` | Deletes matching records and returns the count. `where` is required |
+
+```python
+from pyquickbase import F, WriteError
+
+result = tasks.insert([{"Title": "Pour slab", "Status": "Not Started", "Due Date": date.today()}])
+print(result.created_ids)
+
+tasks.update([{"Record ID#": 7, "Status": "Done", "Notes": None}])
+tasks.delete(F("Status") == "Cancelled")
+
+try:
+    tasks.insert(rows)
+except WriteError as error:
+    print(error.result.created_ids)  # these were written
+    for failed in error.result.errors:
+        print(rows[failed.index], failed.messages)
+```
+
+Quickbase writes the rows it can and reports the rest, so a `WriteError` doesn't mean nothing changed.
+Large writes are split into batches of 1,000 rows, which you can change with `batch_size`. Check
+`error.result` before trying again.
+
+## Changing the schema
+
+```python
+projects = app.create_table("Projects", single_record_name="Project")
+projects.create_field("Name", "text")
+projects.create_field("Status", "text-multiple-choice", choices=["Active", "Done"])
+projects.create_field("Code", "text", unique=True)
+
+tasks.create_relationship(projects, foreign_key_label="Project", lookup_fields=["Name"])
+tasks.update_field("Notes", label="Comments")
+tasks.delete_fields("Old Field")
+tasks.drop(confirm="Tasks")  # deletes the table and its records
+```
+
+## Handling errors
+
+Every exception derives from `QuickbaseError`.
+
+```python
+from pyquickbase import AuthenticationError, QuickbaseError, RateLimitError
+
+try:
+    app = qb.request("GET", "/apps/bq1234567")
+except AuthenticationError:
+    app = None
+except RateLimitError as error:
+    print(f"Still rate limited. Try again in {error.retry_after} seconds.")
+except QuickbaseError as error:
+    print(error)
+```
+
+Quickbase answers with a 401, not a 404, for an app or table that doesn't exist, so
+`AuthenticationError` can mean either a bad token or a wrong ID.
+
+Only rate limits and connection failures are retried. A timed-out write isn't retried because
+Quickbase may already have applied it, so check the data before trying again.
+
+## Limiting what a client can do
+
+Pass `read_only=True` to guarantee a client can't change data. It only sends GET requests and record
+queries, including through `qb.request()`, and raises `ReadOnlyError` for anything else without
+contacting Quickbase.
+
+To allow specific writes and nothing else, pass `allowed_writes={("POST", "/records")}` instead.
+
+## Customizing
+
+Adjust retries with `RetryPolicy`. For proxies, custom TLS, logging hooks, or custom transports,
+pass your own [httpx](https://www.python-httpx.org/) client, which you remain responsible for
+closing.
+
+```python
+import httpx
+from pyquickbase import Quickbase, RetryPolicy
+
+http_client = httpx.Client(proxy="http://proxy.internal:8080")
+qb = Quickbase(
+    realm="acme",
+    token="your_user_token",
+    retry=RetryPolicy(max_retries=2),
+    user_agent="my-app/1.0",
+    http_client=http_client,
+)
+```
+
+## Contributing
+
+See [CONTRIBUTING.md](CONTRIBUTING.md). To report a vulnerability, see [SECURITY.md](SECURITY.md).
+
+## License
+
+[MIT](LICENSE)

pyquickbase-0.1.0a1/README.md

@@ -0,0 +1,198 @@
+# pyquickbase
+
+An unofficial, typed Python SDK for the [Quickbase](https://www.quickbase.com/) API, with matching
+sync and async clients.
+
+> **Status: early alpha.** Anything may change before 1.0. This project is not affiliated with or endorsed by Quickbase, Inc.
+
+## What works today
+
+- Sync and async clients with the same API, and support for asyncio and Trio
+- Field labels instead of numeric IDs, and table names instead of table IDs
+- A Python query builder that escapes values, and checks for hand-written queries that Quickbase would
+  otherwise accept and answer incorrectly
+- Automatic paging, and records with real `date` and `datetime` values
+- Automatic retries for rate limits, honoring `Retry-After`, and for connection failures
+- Specific exceptions that include Quickbase's error message and request ID
+- Tokens kept out of `repr`s, exceptions, and logs, and never sent to other hosts or over plain HTTP
+- Creating, updating, and deleting records, with errors reported for each failed row
+- Creating and changing tables, fields, and relationships
+- `qb.request()` for calling any Quickbase endpoint directly
+
+## Coming next
+
+Reports, formulas, file attachments, temporary tokens, and generated typed tables.
+
+## Usage
+
+```bash
+pip install pyquickbase==0.1.0a1
+```
+
+This is an alpha release, so pin the exact version.
+
+```python
+from datetime import date
+from pyquickbase import F, Quickbase
+
+with Quickbase(realm="acme", token="your_user_token") as qb:
+    tasks = qb.app("bq1234567").table("Tasks")
+
+    overdue = (F("Status") != "Done") & (F("Due Date") < date.today())
+    for task in tasks.query(where=overdue, select=["Title", "Due Date"], order_by="-Due Date"):
+        print(task.id, task["Title"], task["Due Date"])
+
+    print(tasks.count(F("Status") == "Done"))
+```
+
+The async client has the same API:
+
+```python
+from pyquickbase import AsyncQuickbase, F
+
+async with AsyncQuickbase(realm="acme", token="your_user_token") as qb:
+    tasks = qb.app("bq1234567").table("Tasks")
+    async for task in tasks.query(where=F("Status") == "Done"):
+        print(task["Title"])
+```
+
+`Quickbase.from_env()` reads `QB_REALM` and `QB_USER_TOKEN` from the environment instead.
+
+## Writing queries
+
+Build conditions with `F`, combining them with `&` and `|` and wrapping each in parentheses.
+
+| Python | Matches |
+|---|---|
+| `F("Status") == "Done"`, `!=` | Equal, not equal, ignoring case |
+| `F("Hours") > 10`, `>=`, `<`, `<=` | Numbers and dates |
+| `F("Notes") == None` | Empty fields |
+| `F("Title").contains("x")`, `.not_contains()` | Text anywhere in the value |
+| `F("Title").starts_with("x")`, `.not_starts_with()` | Text at the start of the value |
+| `F("Status").is_in(["Done", "Blocked"])` | Any of the values |
+| `F("Tags").op("HAS", "x")` | Any other Quickbase operator |
+
+Use `F` for any text you don't control. It escapes quotes and rejects values containing `{` or `}`,
+which Quickbase can't search for and which could otherwise change the meaning of the query.
+
+You can also pass a Quickbase query string as `where`, using field IDs:
+`"({7.EX.'Done'}OR{7.EX.'Blocked'})AND{9.BF.'today'}"`. The SDK raises `QueryError` before sending a
+string with a mistake that Quickbase would silently accept, such as a lowercase operator, which it
+treats as "contains", or an unknown field, which matches nothing.
+
+## Reading records
+
+`query()` fetches further pages as you iterate, and `limit` stops it early. Read values by label or
+ID, with `record["Status"]` or `record[7]`. `dict(record)` gives you `{label: value}`. Record ID# is
+always selected, and without `order_by`, records come back in Record ID# order so that pages stay
+stable. For one page at a time, use `query_page()`, which returns the records, the `total` number of
+matches, `has_more`, and `next_skip`.
+
+Table and field metadata is cached for five minutes. Set `schema_ttl` on the client to change this,
+or call `qb.clear_schema_cache()` after changing a table.
+
+## Writing records
+
+Rows are dictionaries keyed by field label or ID. Python dates, timezone-aware datetimes, and
+`Decimal` values are converted for you, and `None` clears a field.
+
+| Method | What it does |
+|---|---|
+| `table.insert(rows)` | Creates records, and never changes existing ones |
+| `table.update(rows)` | Changes records. Each row needs a `Record ID#`, and a missing record is an error |
+| `table.upsert(rows, merge_on="Code")` | Updates the record whose unique field matches, or creates one |
+| `table.delete(where)` | Deletes matching records and returns the count. `where` is required |
+
+```python
+from pyquickbase import F, WriteError
+
+result = tasks.insert([{"Title": "Pour slab", "Status": "Not Started", "Due Date": date.today()}])
+print(result.created_ids)
+
+tasks.update([{"Record ID#": 7, "Status": "Done", "Notes": None}])
+tasks.delete(F("Status") == "Cancelled")
+
+try:
+    tasks.insert(rows)
+except WriteError as error:
+    print(error.result.created_ids)  # these were written
+    for failed in error.result.errors:
+        print(rows[failed.index], failed.messages)
+```
+
+Quickbase writes the rows it can and reports the rest, so a `WriteError` doesn't mean nothing changed.
+Large writes are split into batches of 1,000 rows, which you can change with `batch_size`. Check
+`error.result` before trying again.
+
+## Changing the schema
+
+```python
+projects = app.create_table("Projects", single_record_name="Project")
+projects.create_field("Name", "text")
+projects.create_field("Status", "text-multiple-choice", choices=["Active", "Done"])
+projects.create_field("Code", "text", unique=True)
+
+tasks.create_relationship(projects, foreign_key_label="Project", lookup_fields=["Name"])
+tasks.update_field("Notes", label="Comments")
+tasks.delete_fields("Old Field")
+tasks.drop(confirm="Tasks")  # deletes the table and its records
+```
+
+## Handling errors
+
+Every exception derives from `QuickbaseError`.
+
+```python
+from pyquickbase import AuthenticationError, QuickbaseError, RateLimitError
+
+try:
+    app = qb.request("GET", "/apps/bq1234567")
+except AuthenticationError:
+    app = None
+except RateLimitError as error:
+    print(f"Still rate limited. Try again in {error.retry_after} seconds.")
+except QuickbaseError as error:
+    print(error)
+```
+
+Quickbase answers with a 401, not a 404, for an app or table that doesn't exist, so
+`AuthenticationError` can mean either a bad token or a wrong ID.
+
+Only rate limits and connection failures are retried. A timed-out write isn't retried because
+Quickbase may already have applied it, so check the data before trying again.
+
+## Limiting what a client can do
+
+Pass `read_only=True` to guarantee a client can't change data. It only sends GET requests and record
+queries, including through `qb.request()`, and raises `ReadOnlyError` for anything else without
+contacting Quickbase.
+
+To allow specific writes and nothing else, pass `allowed_writes={("POST", "/records")}` instead.
+
+## Customizing
+
+Adjust retries with `RetryPolicy`. For proxies, custom TLS, logging hooks, or custom transports,
+pass your own [httpx](https://www.python-httpx.org/) client, which you remain responsible for
+closing.
+
+```python
+import httpx
+from pyquickbase import Quickbase, RetryPolicy
+
+http_client = httpx.Client(proxy="http://proxy.internal:8080")
+qb = Quickbase(
+    realm="acme",
+    token="your_user_token",
+    retry=RetryPolicy(max_retries=2),
+    user_agent="my-app/1.0",
+    http_client=http_client,
+)
+```
+
+## Contributing
+
+See [CONTRIBUTING.md](CONTRIBUTING.md). To report a vulnerability, see [SECURITY.md](SECURITY.md).
+
+## License
+
+[MIT](LICENSE)

pyquickbase-0.1.0a1/SECURITY.md

@@ -0,0 +1,9 @@
+# Security policy
+
+Please don't report vulnerabilities in public issues. Use GitHub's
+[private vulnerability reporting](https://github.com/matthew-williams-solutions/pyquickbase/security/advisories/new)
+instead, and include steps to reproduce the problem.
+
+Only the latest release is supported. This is a volunteer project, so response times may vary.
+
+If a Quickbase token may have been exposed, revoke it in Quickbase right away.