python-flashapi 0.2.0__tar.gz → 0.4.0__tar.gz

python_flashapi-0.4.0/.github/workflows/release-please.yml

@@ -0,0 +1,48 @@
+name: Release Please
+
+on:
+  push:
+    branches: [main]
+
+permissions:
+  contents: write
+  pull-requests: write
+
+jobs:
+  release-please:
+    runs-on: ubuntu-latest
+    outputs:
+      release_created: ${{ steps.release.outputs.release_created }}
+      tag_name: ${{ steps.release.outputs.tag_name }}
+
+    steps:
+      - uses: googleapis/release-please-action@v4
+        id: release
+        with:
+          release-type: python
+          package-name: python-flashapi
+
+  publish:
+    needs: release-please
+    if: ${{ needs.release-please.outputs.release_created }}
+    runs-on: ubuntu-latest
+
+    steps:
+      - uses: actions/checkout@v4
+
+      - name: Set up Python
+        uses: actions/setup-python@v5
+        with:
+          python-version: '3.12'
+
+      - name: Install build tools
+        run: pip install build twine
+
+      - name: Build package
+        run: python -m build
+
+      - name: Publish to PyPI
+        run: twine upload dist/*
+        env:
+          TWINE_USERNAME: __token__
+          TWINE_PASSWORD: ${{ secrets.PYPI_API_TOKEN }}

python_flashapi-0.4.0/.release-please-manifest.json

@@ -0,0 +1,3 @@
+{
+  ".": "0.4.0"
+}

python_flashapi-0.4.0/CHANGELOG.md

@@ -0,0 +1,57 @@
+# Changelog
+
+## [0.4.0](https://github.com/HackermanMe/flashapi/compare/v0.3.0...v0.4.0) (2026-09-18)
+
+
+### Features
+
+* add field selection (?fields=id,name,price) ([4c07e45](https://github.com/HackermanMe/flashapi/commit/4c07e4536ab442f3a984ec8108154ef47f361098))
+* add idempotency keys, cache layer, and currentUserField auto-injection ([141ae08](https://github.com/HackermanMe/flashapi/commit/141ae084afd4d605540a0cead5c4aac9cd6c41f6))
+* add interactive CRUD dashboard with HTMX and real-time WebSocket ([1b1b4a5](https://github.com/HackermanMe/flashapi/commit/1b1b4a5c9924db5858119a69fb9c2585c687fe6d))
+
+
+### Bug Fixes
+
+* **django:** convert URL path params to OpenAPI format in discover_django_views ([78e5675](https://github.com/HackermanMe/flashapi/commit/78e5675b8fafe0a87a7711f30f9b3db26bfd9dd6))
+* simplify nested if statement for ruff linter ([73fb95b](https://github.com/HackermanMe/flashapi/commit/73fb95bdd7282141081a85d0f44d6d8c4478967e))
+* sync release-please manifest and README version to 0.3.0 ([1538199](https://github.com/HackermanMe/flashapi/commit/1538199c6f9edc3fb4be9a17d9b69c67838a90bb))
+
+## [0.3.0](https://github.com/HackermanMe/flashapi/compare/v0.2.0...v0.3.0) (2026-08-08)
+
+
+### Features
+
+* add production health check endpoints (/health and /ready) ([cc4e881](https://github.com/HackermanMe/flashapi/commit/cc4e881f09055fa990bb054298ebc8c1f55af7af))
+
+
+### Bug Fixes
+
+* corriger les gradients et les couleurs dans les fichiers SVG du logo ([50aadaf](https://github.com/HackermanMe/flashapi/commit/50aadaff44919e5666621cc3f645dd34c1364a64))
+
+
+### Documentation
+
+* add release-please version marker in README ([515aeb8](https://github.com/HackermanMe/flashapi/commit/515aeb83c2f021bebac25d9690c4726003769746))
+
+## 0.1.0 (2026-07-09)
+
+Initial release.
+
+### Features
+- Auto-generate REST API + CRUD from model definitions
+- Framework support: FastAPI, Django, Flask
+- Model support: Django ORM, SQLAlchemy, Pydantic, dataclass
+- Pagination, filtering, sorting, full-text search
+- Relation detection: nested routes and `?expand=`
+- OpenAPI 3.1.0 schema generation + Swagger UI
+- French + English pluralization
+- `Model()` wrapper: readonly, exclude, only, plural
+- `@api_doc()` decorator for custom routes in Swagger
+- `engine=` parameter for SQLAlchemy database reuse
+- Custom response formatter support
+
+### Security
+- SQL identifier validation (prevents injection via table/column names)
+- Session rollback on SQLAlchemy errors
+- Input validation for pagination parameters
+- CSRF exempt on Django API views (documented behavior)

{python_flashapi-0.2.0 → python_flashapi-0.4.0}/PKG-INFO

@@ -1,6 +1,6 @@
-Metadata-Version: 2.4
+Metadata-Version: 2.5
 Name: python-flashapi
-Version: 0.2.0
+Version: 0.4.0
 Summary: Define your models. FlashAPI does the rest.
 Project-URL: Homepage, https://github.com/HackermanMe/flashapi
 Project-URL: Documentation, https://github.com/HackermanMe/flashapi#readme
@@ -64,10 +64,12 @@ Description-Content-Type: text/markdown
 
 ---
 
-FlashAPI generates a full REST API with CRUD, pagination, filtering, sorting, full-text search, relations, soft delete, bulk operations, export, audit trail, webhooks, rate limiting, and a live dashboard — from your existing models, in one line.
+FlashAPI generates a full REST API with CRUD, pagination, filtering, sorting, full-text search, relations, soft delete, bulk operations, export, audit trail, webhooks, rate limiting, **idempotency keys**, **cache layer**, **currentUser auto-injection**, and a live dashboard — from your existing models, in one line.
 
 Part of the **FlashAPI Ecosystem** — ensuring SDK client compatibility across all backends (Python, Java Spring, Node.js).
 
+**New in 0.4.0:** Idempotency keys (prevent double-click/retry duplicates), cache layer with graceful fallback, currentUserField auto-injection, and audit enabled by default.
+
 ---
 
 ## Documentation
@@ -88,7 +90,12 @@ Part of the **FlashAPI Ecosystem** — ensuring SDK client compatibility across
 ## Installation
 
 ```bash
-pip install python-flashapi[fastapi]   # or python-flashapi[flask] or python-flashapi[all]
+# x-release-please-start-version
+pip install python-flashapi==0.3.0
+# x-release-please-end
+
+# With framework extras:
+pip install python-flashapi[fastapi]   # or [flask] or [django] or [all]
 ```
 
 ---
@@ -226,8 +233,9 @@ FlashAPI(
         Model(Config, readonly=True, access="admin"),      # GET only, admin
         Model(Log, only=["list"]),                         # List only
         Model(Animal, plural="animaux"),                   # Custom plural
-        Model(Invoice, soft_delete=True, audit=True),      # Opt-in features
+        Model(Invoice, soft_delete=True, audit=True),      # Opt-in features (audit=True by default)
         Model(Eleve, access="staff", scope="tenant", tenant_field="ecole_id"),
+        Model(Post, current_user_field="author"),          # Auto-inject authenticated user on create
     ],
     base_path="/api",       # Configurable prefix (default: /api)
     auth_backend=MyAuth(),  # Your AuthBackend implementation
@@ -235,6 +243,14 @@ FlashAPI(
     rate_limit=100,         # 100 requests per window
     rate_window=60,         # 60 seconds window
 )
+
+# Enable idempotency (prevents duplicate operations from double-click/retry)
+# Client sends: Idempotency-Key: <uuid> header
+# Same key + same request → returns stored response (no duplicate created)
+
+# Enable cache layer (graceful fallback if Redis down)
+from flashapi.features.cache import CacheLayer, RedisCache, register_cache
+register_cache(CacheLayer(RedisCache(host='localhost')))
 ```
 
 See [Customization docs](docs/customization.md) for all options.

{python_flashapi-0.2.0 → python_flashapi-0.4.0}/README.md

@@ -22,10 +22,12 @@
 
 ---
 
-FlashAPI generates a full REST API with CRUD, pagination, filtering, sorting, full-text search, relations, soft delete, bulk operations, export, audit trail, webhooks, rate limiting, and a live dashboard — from your existing models, in one line.
+FlashAPI generates a full REST API with CRUD, pagination, filtering, sorting, full-text search, relations, soft delete, bulk operations, export, audit trail, webhooks, rate limiting, **idempotency keys**, **cache layer**, **currentUser auto-injection**, and a live dashboard — from your existing models, in one line.
 
 Part of the **FlashAPI Ecosystem** — ensuring SDK client compatibility across all backends (Python, Java Spring, Node.js).
 
+**New in 0.4.0:** Idempotency keys (prevent double-click/retry duplicates), cache layer with graceful fallback, currentUserField auto-injection, and audit enabled by default.
+
 ---
 
 ## Documentation
@@ -46,7 +48,12 @@ Part of the **FlashAPI Ecosystem** — ensuring SDK client compatibility across
 ## Installation
 
 ```bash
-pip install python-flashapi[fastapi]   # or python-flashapi[flask] or python-flashapi[all]
+# x-release-please-start-version
+pip install python-flashapi==0.3.0
+# x-release-please-end
+
+# With framework extras:
+pip install python-flashapi[fastapi]   # or [flask] or [django] or [all]
 ```
 
 ---
@@ -184,8 +191,9 @@ FlashAPI(
         Model(Config, readonly=True, access="admin"),      # GET only, admin
         Model(Log, only=["list"]),                         # List only
         Model(Animal, plural="animaux"),                   # Custom plural
-        Model(Invoice, soft_delete=True, audit=True),      # Opt-in features
+        Model(Invoice, soft_delete=True, audit=True),      # Opt-in features (audit=True by default)
         Model(Eleve, access="staff", scope="tenant", tenant_field="ecole_id"),
+        Model(Post, current_user_field="author"),          # Auto-inject authenticated user on create
     ],
     base_path="/api",       # Configurable prefix (default: /api)
     auth_backend=MyAuth(),  # Your AuthBackend implementation
@@ -193,6 +201,14 @@ FlashAPI(
     rate_limit=100,         # 100 requests per window
     rate_window=60,         # 60 seconds window
 )
+
+# Enable idempotency (prevents duplicate operations from double-click/retry)
+# Client sends: Idempotency-Key: <uuid> header
+# Same key + same request → returns stored response (no duplicate created)
+
+# Enable cache layer (graceful fallback if Redis down)
+from flashapi.features.cache import CacheLayer, RedisCache, register_cache
+register_cache(CacheLayer(RedisCache(host='localhost')))
 ```
 
 See [Customization docs](docs/customization.md) for all options.

{python_flashapi-0.2.0 → python_flashapi-0.4.0}/docs/custom-logic.md

@@ -66,6 +66,7 @@ Just add `@api_doc()` on your views. FlashAPI auto-discovers them:
 # views.py
 from django.http import JsonResponse
 from django.views.decorators.csrf import csrf_exempt
+from django.views.decorators.http import require_POST
 from flashapi import api_doc
 import json
 
@@ -73,6 +74,7 @@ import json
          body={"client_id": "int", "table_id": "int", "plats": "array"},
          body_required=["client_id", "table_id", "plats"])
 @csrf_exempt
+@require_POST
 def checkout(request):
     body = json.loads(request.body)
     # your business logic...
@@ -106,12 +108,49 @@ custom_views = [
 urlpatterns = [
     path("api/", include(
         generate_urls(models=[Plat, Commande, Client], extra_views=custom_views)
-        + custom_views
     )),
+    # Register custom views for actual routing (extra_views only adds them to Swagger)
+    path("api/checkout/", views.checkout),
+    path("api/stats/chiffre-affaires/", views.chiffre_affaires),
+    path("api/reports/bestsellers/", views.bestsellers),
+]
+```
+
+That's it. `@api_doc` on the view + pass `extra_views` to `generate_urls()` for Swagger documentation, and register the same paths in `urlpatterns` for actual routing.
+
+#### Path parameters
+
+Django URL parameters (`<int:id>`, `<str:slug>`, etc.) are automatically converted to OpenAPI path parameters in Swagger:
+
+```python
+# views.py
+@api_doc(
+    tag="Ingestion",
+    summary="Ingest a book from its uploaded PDF",
+    methods=["post"],
+    params={"book_id": "int"},
+    body={"force": "bool"},
+    body_required=[],
+    response={"status": "string", "total_sentences": "int"},
+)
+@csrf_exempt
+@require_POST
+def ingest_view(request, book_id):
+    # book_id comes from the URL path
+    ...
+
+# urls.py
+extra_views = [
+    path("books/<int:book_id>/ingest/", views.ingest_view),
+]
+
+urlpatterns = [
+    path("api/", include(generate_urls(models=[Book], extra_views=extra_views))),
+    path("api/books/<int:book_id>/ingest/", views.ingest_view),
 ]
 ```
 
-That's it. `@api_doc` on the view + pass `extra_views` to `generate_urls()`. FlashAPI reads the decorator metadata and adds your endpoints to Swagger — no duplicate declarations.
+In Swagger, this renders as `/books/{book_id}/ingest/` with `book_id` as a required integer path parameter. The `params` dict in `@api_doc` controls the type shown in Swagger (`"int"` → integer, `"string"` → string, etc.).
 
 ### Custom routes (Flask)
 

python_flashapi-0.4.0/docs/logo.svg

@@ -0,0 +1,25 @@
+<svg width="387" height="122" xmlns="http://www.w3.org/2000/svg">
+ <defs>
+  <linearGradient id="bolt" x1="0%" y1="0%" x2="100%" y2="100%">
+   <stop offset="0%" stop-color="#FFD700"/>
+   <stop offset="100%" stop-color="#FF8C00"/>
+  </linearGradient>
+ </defs>
+ <!-- Lightning bolt icon -->
+ <!-- FlashAPI text -->
+ <!-- Tagline -->
+ <g>
+  <title>Layer 1</title>
+  <text x="113" y="71" font-family="Inter, -apple-system, sans-serif" font-size="42" font-weight="bold" fill="#ff5000" id="svg_2" font-style="italic">Flash</text>
+  <text x="222" y="70" font-family="Inter, -apple-system, sans-serif" font-size="42" font-weight="bold" fill="url(#bolt)" id="svg_3" font-style="italic">API</text>
+  <text x="113" y="95" font-family="Inter, -apple-system, sans-serif" font-size="13" fill="#666" id="svg_4">Define your models. FlashAPI does the rest.</text>
+  <g id="svg_1">
+   <circle id="svg_5" cx="52" cy="63.5" r="48" opacity="0.35"/>
+   <circle id="svg_6" cx="52" cy="59.5" r="48" fill="#ffc400"/>
+   <circle id="svg_7" cx="52" cy="63.5" r="39" opacity="0.35"/>
+   <circle id="svg_8" cx="52" cy="59.5" r="39" fill="#ff1200"/>
+   <polygon id="svg_9" points="83,8.5 34,59.5 50.01200866699219,56.45100402832031 29.772994995117188,85.5 45,82.5 22,117.5 69,70.5 55,72.5 76,44.5 59,49.5 " opacity="0.35"/>
+   <polygon id="svg_10" fill="#ffc400" points="83,4.5 34,55.5 50.01200866699219,52.45100402832031 29.772994995117188,81.5 45,78.5 22,113.5 69,66.5 55,68.5 76,40.5 59,45.5 "/>
+  </g>
+ </g>
+</svg>

{python_flashapi-0.2.0 → python_flashapi-0.4.0}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "hatchling.build"
 
 [project]
 name = "python-flashapi"
-version = "0.2.0"
+version = "0.4.0"
 description = "Define your models. FlashAPI does the rest."
 readme = "README.md"
 license = "Apache-2.0"

python_flashapi-0.4.0/release-please-config.json

@@ -0,0 +1,10 @@
+{
+  "packages": {
+    ".": {
+      "release-type": "python",
+      "package-name": "python-flashapi",
+      "bump-minor-pre-major": true,
+      "extra-files": ["pyproject.toml", "README.md"]
+    }
+  }
+}

{python_flashapi-0.2.0 → python_flashapi-0.4.0}/src/flashapi/adapters/django.py

@@ -9,9 +9,10 @@ from flashapi.core.custom_routes import (
 )
 from flashapi.core.response import create_error_response, create_item_response, create_list_response
 from flashapi.core.schema import Model, ModelSchema
-from flashapi.core.visibility import export_fields, filter_response, writable_fields
+from flashapi.core.visibility import export_fields, filter_response, select_fields, writable_fields
 from flashapi.docs.openapi import generate_openapi_schema, get_swagger_html
 from flashapi.features import apply_filters, apply_search, apply_sorting, paginate
+from flashapi.features.health import get_health_check
 from flashapi.inspectors import inspect_model
 from flashapi.storage.orm import DjangoORMStorage
 
@@ -77,6 +78,7 @@ def generate_urls(
         schema.scope = wrapper.scope
         schema.tenant_field = wrapper.tenant_field
         schema.owner_field = wrapper.owner_field
+        schema.current_user_field = wrapper.current_user_field
 
         from flashapi.core.schema import validate_soft_delete
         validate_soft_delete(wrapper.model_class, wrapper.soft_delete)
@@ -113,6 +115,7 @@ def generate_urls(
         ))
 
     urlpatterns.extend(_create_api_root_view(all_schemas, docs))
+    urlpatterns.extend(_create_health_views())
 
     return urlpatterns
 
@@ -264,6 +267,7 @@ def _create_django_views(
     model_scope = schema.scope
     model_tenant_field = schema.tenant_field
     model_owner_field = schema.owner_field
+    model_current_user_field = schema.current_user_field
     patterns = []
 
     def _check_auth(request, operation):
@@ -333,6 +337,7 @@ def _create_django_views(
                 sort = params.get("sort")
                 search = params.get("search")
                 deleted_param = params.get("deleted", "false").lower() == "true"
+                fields_param = params.get("fields")  # Field selection: ?fields=id,name,price
 
                 only_deleted = deleted_param and supports_soft_delete
                 items = storage.list_all(_table, only_deleted=only_deleted)
@@ -348,6 +353,12 @@ def _create_django_views(
                 items = apply_sorting(items, sort, _fields)
                 page_items, total = paginate(items, page, size)
                 page_items = [filter_response(item, _schema) for item in page_items]
+
+                # Apply field selection if ?fields parameter provided
+                if fields_param:
+                    field_list = [f.strip() for f in fields_param.split(",")]
+                    page_items = [select_fields(item, field_list, _schema) for item in page_items]
+
                 if metrics:
                     metrics.record("READ", entity_name)
                 return JsonResponse(
@@ -369,6 +380,24 @@ def _create_django_views(
                 if scope_filter:
                     data.update(scope_filter)
 
+                # Auto-inject current user if current_user_field specified
+                if model_current_user_field and user and auth_backend:
+                    user_id = auth_backend.get_owner_id(user)
+                    if user_id is not None:
+                        # For ForeignKey fields, Django expects field_id
+                        # For non-FK fields, use field directly
+                        # Try FK syntax first (most common case)
+                        try:
+                            storage._model._meta.get_field(model_current_user_field)
+                            field = storage._model._meta.get_field(model_current_user_field)
+                            if field.many_to_one:  # ForeignKey
+                                data[f"{model_current_user_field}_id"] = user_id
+                            else:
+                                data[model_current_user_field] = user_id
+                        except Exception:
+                            # Fallback: assume FK
+                            data[f"{model_current_user_field}_id"] = user_id
+
                 item = storage.create(_table, data)
                 if metrics:
                     metrics.record("CREATE", entity_name, str(item.get("id", "")))
@@ -659,6 +688,13 @@ def _create_django_views(
                     return JsonResponse(create_error_response("Not found", 404), status=404)
 
                 item = filter_response(item, _schema)
+
+                # Apply field selection if ?fields parameter provided
+                fields_param = request.GET.get("fields")
+                if fields_param:
+                    field_list = [f.strip() for f in fields_param.split(",")]
+                    item = select_fields(item, field_list, _schema)
+
                 return JsonResponse(create_item_response(item, formatter))
 
             if request.method == "PUT" and "update" in _schema.permissions:
@@ -769,3 +805,38 @@ def _create_django_views(
             patterns.append(path(f"{table}/<str:item_id>/history/", history_view, name=f"{table}_history"))
 
     return patterns
+
+
+def _create_health_views():
+    """Create health check views for production monitoring."""
+    from django.http import JsonResponse
+    from django.urls import path
+
+    health_check = get_health_check()
+
+    def liveness_view(request):
+        """Liveness probe — is the application running?"""
+        return JsonResponse(health_check.liveness())
+
+    def readiness_view(request):
+        """Readiness probe — is the application ready to serve traffic?"""
+        data, status_code = health_check.readiness()
+        return JsonResponse(data, status=status_code)
+
+    # Register database check for Django ORM
+    def check_database():
+        try:
+            from django.db import connection
+            with connection.cursor() as cursor:
+                cursor.execute("SELECT 1")
+            return True
+        except Exception:
+            return False
+
+    health_check.register_check("database", check_database)
+    health_check.mark_ready()
+
+    return [
+        path("health/", liveness_view, name="health_liveness"),
+        path("ready/", readiness_view, name="health_readiness"),
+    ]

{python_flashapi-0.2.0 → python_flashapi-0.4.0}/src/flashapi/adapters/fastapi.py

@@ -10,10 +10,11 @@ from pydantic import BaseModel, create_model
 from flashapi.core.relations import find_expandable_fields, resolve_relations
 from flashapi.core.response import create_error_response, create_item_response, create_list_response
 from flashapi.core.schema import FieldType, Model, ModelSchema
-from flashapi.core.visibility import export_fields, filter_response, writable_fields
+from flashapi.core.visibility import export_fields, filter_response, select_fields, writable_fields
 from flashapi.features import apply_filters, apply_search, apply_sorting, paginate
 from flashapi.features.dashboard import DASHBOARD_HTML, MetricsCollector
 from flashapi.features.export import CONTENT_TYPES, EXPORTERS
+from flashapi.features.health import get_health_check
 from flashapi.inspectors import inspect_model
 from flashapi.storage.auto import AutoStorage
 from flashapi.storage.sqlalchemy import SQLAlchemyStorage
@@ -143,6 +144,7 @@ class FlashAPI:
         self._add_dashboard_routes()
         self._add_websocket_route()
         self._add_api_root()
+        self._add_health_routes()
 
     def _prepare_model(self, model_entry) -> None:
         wrapper = model_entry if isinstance(model_entry, Model) else Model(model_entry)
@@ -248,6 +250,36 @@ class FlashAPI:
             }
             return {"resources": resources, "links": links}
 
+    def _add_health_routes(self) -> None:
+        """Add health check endpoints for production monitoring."""
+        health_check = get_health_check()
+
+        @self._app.get("/health", tags=["Health"], include_in_schema=False)
+        async def liveness():
+            """Liveness probe — is the application running?"""
+            return health_check.liveness()
+
+        @self._app.get("/ready", tags=["Health"], include_in_schema=False)
+        async def readiness():
+            """Readiness probe — is the application ready to serve traffic?"""
+            data, status_code = health_check.readiness()
+            return JSONResponse(content=data, status_code=status_code)
+
+        # Register database check if using SQLAlchemy
+        if self._session_factory:
+            def check_database():
+                try:
+                    session = self._session_factory()
+                    session.execute("SELECT 1")
+                    session.close()
+                    return True
+                except Exception:
+                    return False
+            health_check.register_check("database", check_database)
+
+        # Mark ready after all routes are registered
+        health_check.mark_ready()
+
     def _add_rate_limit_middleware(self) -> None:
         from starlette.middleware.base import BaseHTTPMiddleware
 
@@ -418,6 +450,13 @@ class FlashAPI:
 
             metrics.record("READ", tag)
             page_items = [filter_response(item, model_schema) for item in page_items]
+
+            # Apply field selection if ?fields parameter provided
+            fields_param = request.query_params.get("fields")
+            if fields_param:
+                field_list = [f.strip() for f in fields_param.split(",")]
+                page_items = [select_fields(item, field_list, model_schema) for item in page_items]
+
             return create_list_response(page_items, total, page, size, formatter)
 
     def _add_read_route(self, table, formatter, storage, tag, expandable, model_schema, lookup_field="id") -> None:
@@ -449,6 +488,13 @@ class FlashAPI:
                 item = self._expand_items([item], expand, expandable)[0]
 
             item = filter_response(item, model_schema)
+
+            # Apply field selection if ?fields parameter provided
+            fields_param = request.query_params.get("fields")
+            if fields_param:
+                field_list = [f.strip() for f in fields_param.split(",")]
+                item = select_fields(item, field_list, model_schema)
+
             return create_item_response(item, formatter)
 
     def _add_history_route(self, table, entity_name, lookup_field="id", model_schema=None) -> None:

{python_flashapi-0.2.0 → python_flashapi-0.4.0}/src/flashapi/adapters/flask.py

@@ -10,9 +10,10 @@ from flashapi.core.custom_routes import (
 from flashapi.core.relations import find_expandable_fields, resolve_relations
 from flashapi.core.response import create_error_response, create_item_response, create_list_response
 from flashapi.core.schema import Model, ModelSchema
-from flashapi.core.visibility import export_fields, filter_response, writable_fields
+from flashapi.core.visibility import export_fields, filter_response, select_fields, writable_fields
 from flashapi.docs.openapi import generate_openapi_schema, get_swagger_html
 from flashapi.features import apply_filters, apply_search, apply_sorting, paginate
+from flashapi.features.health import get_health_check
 from flashapi.inspectors import inspect_model
 from flashapi.storage.auto import AutoStorage
 from flashapi.storage.sqlalchemy import SQLAlchemyStorage
@@ -138,6 +139,7 @@ def register_models(
         _add_docs_routes(blueprint, all_schemas, custom_routes or [], flask_app=app)
 
     _add_api_root_route(blueprint, all_schemas, base_path, docs)
+    _add_health_routes(app, session_factory)
 
     app.register_blueprint(blueprint)
 
@@ -439,6 +441,13 @@ def _create_flask_routes(
             if _metrics:
                 _metrics.record("READ", entity_name)
             page_items = [filter_response(item, _schema) for item in page_items]
+
+            # Apply field selection if ?fields parameter provided
+            fields_param = request.args.get("fields")
+            if fields_param:
+                field_list = [f.strip() for f in fields_param.split(",")]
+                page_items = [select_fields(item, field_list, _schema) for item in page_items]
+
             return jsonify(create_list_response(page_items, total, page, size, formatter))
 
     if "read" in schema.permissions:
@@ -461,6 +470,13 @@ def _create_flask_routes(
                 item = _expand_items([item], expand, _exp, storage)[0]
 
             item = filter_response(item, _schema)
+
+            # Apply field selection if ?fields parameter provided
+            fields_param = request.args.get("fields")
+            if fields_param:
+                field_list = [f.strip() for f in fields_param.split(",")]
+                item = select_fields(item, field_list, _schema)
+
             return jsonify(create_item_response(item, formatter))
 
     if "read" in schema.permissions and entity_audit:
@@ -726,3 +742,35 @@ def _create_flask_routes(
                 mimetype=CONTENT_TYPES[fmt],
                 headers={"Content-Disposition": f'attachment; filename="{_table}.{fmt}"'},
             )
+
+
+def _add_health_routes(app, session_factory) -> None:
+    """Add health check endpoints for production monitoring."""
+    from flask import jsonify
+    health_check = get_health_check()
+
+    @app.route("/health")
+    def liveness():
+        """Liveness probe — is the application running?"""
+        return jsonify(health_check.liveness())
+
+    @app.route("/ready")
+    def readiness():
+        """Readiness probe — is the application ready to serve traffic?"""
+        data, status_code = health_check.readiness()
+        return jsonify(data), status_code
+
+    # Register database check if using SQLAlchemy
+    if session_factory:
+        def check_database():
+            try:
+                session = session_factory()
+                session.execute("SELECT 1")
+                session.close()
+                return True
+            except Exception:
+                return False
+        health_check.register_check("database", check_database)
+
+    # Mark ready after all routes are registered
+    health_check.mark_ready()