python-neva 5.4.0__py3-none-any.whl → 5.4.1__py3-none-any.whl

neva/arch/application.py

@@ -68,6 +68,7 @@ class Application:
         self._extra_providers: list[BaseProvider] = []
         self._container: dishka.AsyncContainer | None = None
         self._booted: bool = False
+        self._declarations_applied: bool = False
 
         configuration_path = _resolve_config_path(config_path)
         match ConfigLoader(configuration_path).load_all():
@@ -164,6 +165,15 @@ class Application:
         would orphan. Registering after boot is an error rather than a
         silently ignored call.
 
+        A provider arriving after construction has its declared config
+        namespaces validated here, and its secrets marked once it registers, so
+        that it is held to the same shape as one named in the `providers`
+        config namespace. Validation runs before the provider is instantiated:
+        a malformed namespace leaves nothing registered and no secret marked.
+        Providers registered *during* construction are skipped here and
+        validated together by `_apply_provider_config_declarations`, which
+        reports every bad namespace in one message.
+
         Returns:
             Result containing the registered provider instance or an error message.
         """
@@ -177,12 +187,18 @@ class Application:
                 "or declare them in the 'providers' config namespace."
             )
 
+        late = self._declarations_applied
+        if late and (failures := self._declaration_failures(provider)):
+            return Err("Invalid configuration: " + "; ".join(failures))
+
         registered = (
             provider(self)
             .register()
             .map(lambda p: self.providers.setdefault(provider, p))
         )
         if registered.is_ok:
+            if late:
+                self.config.mark_sensitive(*provider.sensitive)
             self._container = None
         return registered
 
@@ -194,22 +210,39 @@ class Application:
         configuration error. Every failure is reported together, so a boot
         naming three bad namespaces takes one run rather than three.
 
+        Providers registered after this point go through `register`, which
+        applies the same declarations one provider at a time.
+
         Raises:
             RuntimeError: If any declared namespace fails its shape.
         """
-        checks: list[Result[None, str]] = []
+        failures: list[str] = []
         for provider in self.providers.values():
             declaring = type(provider)
             self.config.mark_sensitive(*declaring.sensitive)
-            checks.extend(
-                self._validate_namespace(namespace, schema)
-                for namespace, schema in declaring.config_schema.items()
-            )
+            failures.extend(self._declaration_failures(declaring))
 
-        _, failures = partition(checks)
         if failures:
             raise RuntimeError("Invalid configuration: " + "; ".join(failures))
 
+        self._declarations_applied = True
+
+    def _declaration_failures(self, declaring: type[ServiceProvider]) -> list[str]:
+        """Check one provider's declared namespaces, applying nothing.
+
+        Args:
+            declaring: The provider type whose `config_schema` to check.
+
+        Returns:
+            One message per malformed namespace, empty when every declared
+            namespace is absent or valid.
+        """
+        _, failures = partition(
+            self._validate_namespace(namespace, schema)
+            for namespace, schema in declaring.config_schema.items()
+        )
+        return failures
+
     def _validate_namespace(
         self, namespace: str, schema: TypeForm[Any]
     ) -> Result[None, str]:

neva/guidelines/fragments/configuration.md

@@ -104,9 +104,9 @@ reaches the repository, frozen or not.
 
 ## Validating a namespace at boot
 
-A provider declares the shape its namespace must have, and it is checked once during
-construction (since 5.4). The declaration reuses the `TypedDict` shapes above — nothing needs
-to become a pydantic model.
+A provider declares the shape its namespace must have, and it is checked at boot (since 5.4).
+The declaration reuses the `TypedDict` shapes above — nothing needs to become a pydantic
+model.
 
 ```python
 class DatabaseServiceProvider(ServiceProvider):
@@ -120,10 +120,21 @@ class DatabaseServiceProvider(ServiceProvider):
 - A provider that declares nothing is validated not at all — the behaviour before 5.4.
 - The constructor raises, as it does for any config failure; `Application.create()` returns it
   as an `Err` instead.
+- **A provider registered after construction is checked too, and reports as an `Err` from
+  `Application.register` rather than raising** (since 5.4.1). That is the path
+  `App.register` on `neva-fastapi` and `neva-faststream` delegates to; before 5.4.1 it skipped
+  validation and marked no secrets. A rejected provider is not registered at all.
+
+**`type_` is a cast, not validation, so the value a malformed key holds is still whatever the
+file put there.** Validation only *rejects* it — nothing is coerced and written back, and
+pydantic's default lax mode accepts `"false"` for a `bool`. A namespace whose values must be
+exactly typed declares `__pydantic_config__ = ConfigDict(strict=True)` on its `TypedDict`.
 
 ## Secrets
 
 A provider marks the keys that hold secrets, and they are replaced in the display form only.
+Marking happens wherever the provider is registered — at construction, or through
+`Application.register` (since 5.4.1).
 
 ```python
 class SecurityProvider(ServiceProvider):

neva/guidelines/fragments/drivers.md

@@ -1,7 +1,7 @@
 ---
 id: drivers
 title: Swappable drivers
-requires: python-neva>=5.3
+requires: python-neva>=5.0
 triggers: [swappable backend, driver manager, multiple implementations, choosing an implementation from config, registering a driver, plugin extension point]
 priority: 70
 verified_by: [tests/support/test_strategy.py, tests/support/test_strategy_imports.py]

{python_neva-5.4.0.dist-info → python_neva-5.4.1.dist-info}/METADATA

@@ -1,6 +1,6 @@
 Metadata-Version: 2.5
 Name: python-neva
-Version: 5.4.0
+Version: 5.4.1
 Summary: Add your description here
 Requires-Python: >=3.12
 Requires-Dist: aiosqlite>=0.20.0

{python_neva-5.4.0.dist-info → python_neva-5.4.1.dist-info}/RECORD

@@ -1,5 +1,5 @@
 neva/arch/__init__.py,sha256=S9I9HUL9G-ylfzMdIfhLS8ux1heyFSti1auXpKvZrEY,523
-neva/arch/application.py,sha256=g34eAOVNI87rW8RF0U89NnTgmOr5_KNqTuk96XfMduI,14220
+neva/arch/application.py,sha256=9vZoN05D7qCP24WOYjZVvw1jd0ET5579Ng1IKxAJahQ,15728
 neva/arch/config.py,sha256=F_4TNIYJpqnAbQrfeYsKKHK9Py6L0ew1UkW0P9YkFro,1478
 neva/arch/facade.py,sha256=6flXZFgWb_n46NEO2DPXg7s6f89wMAHmogRJ81bN7c8,7985
 neva/arch/markers.py,sha256=STdhmW88qV8uogIa9kSD9gs-uMRaglZI8HOw3PrhX1Q,103
@@ -36,9 +36,9 @@ neva/events/contracts/listener.py,sha256=0xwPrjprkMzXu9vY1Z-EjSLFdvOUpomiE65hH16
 neva/guidelines/__init__.py,sha256=YY5RUpzw8AOuQQmMgNEOUUYiOSEaJPXJtyOicnkTVWY,148
 neva/guidelines/manifest.py,sha256=FE1I5-UEUcMpYwmIjvel6aEf25AMlap-oT9vw-8MUfg,662
 neva/guidelines/py.typed,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
-neva/guidelines/fragments/configuration.md,sha256=DnumMDixu0a5PtHClzPHG5QNL8pY89OlIareBeTwmZ0,7188
+neva/guidelines/fragments/configuration.md,sha256=IaJ31s0AU4tze4FvqwyukrAljsH3wA6ZliRlFkOl2vU,8010
 neva/guidelines/fragments/database-transactions.md,sha256=i0IBbz_DZ19w7Sz_e8t-sAwYQiVU55GJRxM11azjGcM,5941
-neva/guidelines/fragments/drivers.md,sha256=YbvJcYQ5Vj1JGCx52q2YEPVDmv2Kt8dxvLVKcQcqTQg,3591
+neva/guidelines/fragments/drivers.md,sha256=yyirWyCMsQUToR9BzWMfccov9eKTkKDsL0JtDKrr400,3591
 neva/guidelines/fragments/events.md,sha256=h4WAo8I5_6FC2kz_IWuqS34Q6XU5zK0PIHQukhsRkHs,7089
 neva/guidelines/fragments/facades.md,sha256=4GCoeUGCiuduWY0msgZO0yJ8MOfDwqqQfm_WsWvjHq8,4308
 neva/guidelines/fragments/factories.md,sha256=4ajYgtN1z4Fwb55FnXw7ROGQUrhqE4N9sgGHbg7UUmA,3101
@@ -110,7 +110,7 @@ neva/testing/fakes.py,sha256=w2dnFaO6x14l0_si7iBNELMCxaFi8VsVOSQ6PmTlclE,2936
 neva/testing/fixtures.py,sha256=oiPa5ntUkW-SbySDvwEHXtti8NqSwI-R0CT1_ezTx_Y,1445
 neva/testing/py.typed,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
 neva/testing/test_case.py,sha256=GdIKrHz9ZuirJybUuaXbW8o-PhOzkvg-pJwe8PAwFD4,9789
-python_neva-5.4.0.dist-info/METADATA,sha256=vyRJ0DLLLt4vevzTTs07KpUHk3sspu36tx063ZlzjKE,7352
-python_neva-5.4.0.dist-info/WHEEL,sha256=zOwg4jB6zX2kU910N-cMawjivD6tO8NEWvE12je1bVk,87
-python_neva-5.4.0.dist-info/entry_points.txt,sha256=DmWZ-qNgvl4eUAXxwX4iLgb38e6X-zU8JDx_brlmkyk,45
-python_neva-5.4.0.dist-info/RECORD,,
+python_neva-5.4.1.dist-info/METADATA,sha256=EXjysaABKXk9Rw4ycPfWFZroMzWWBbKEdXic6IE5hig,7352
+python_neva-5.4.1.dist-info/WHEEL,sha256=zOwg4jB6zX2kU910N-cMawjivD6tO8NEWvE12je1bVk,87
+python_neva-5.4.1.dist-info/entry_points.txt,sha256=DmWZ-qNgvl4eUAXxwX4iLgb38e6X-zU8JDx_brlmkyk,45
+python_neva-5.4.1.dist-info/RECORD,,