simpleaudit-studio 0.2.3__tar.gz → 0.2.4__tar.gz

{simpleaudit_studio-0.2.3 → simpleaudit_studio-0.2.4}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.5
 Name: simpleaudit-studio
-Version: 0.2.3
+Version: 0.2.4
 Summary: Production AI model audit platform — one-liner demo mode via uvx
 License: MIT
 License-File: LICENSE
@@ -54,6 +54,12 @@ uvx simpleaudit-studio
 
 [`uvx`](https://docs.astral.sh/uv/#uvx) installs the [`simpleaudit-studio`](https://pypi.org/project/simpleaudit-studio/) package and runs it in an isolated environment. No Docker, no Postgres, no manual setup. Opens at http://localhost:8000 (login: `studio` / `admin123`). A mock model server is pre-seeded so you can start exploring audit results immediately.
 
+Want the **latest unreleased code** from this repo instead of the PyPI release? Same one-liner, pointed at git:
+
+```bash
+uvx --from "git+https://github.com/SushantGautam/SimpleAuditStudio" spin
+```
+
 🌐 Or skip the setup entirely — try the live demo: <a href="https://sushantgautam-simpleaudit-studio.hf.space" target="_blank" rel="noopener noreferrer">sushantgautam-simpleaudit-studio.hf.space</a>
 
 ### 🤖 Using Real Models

{simpleaudit_studio-0.2.3 → simpleaudit_studio-0.2.4}/README.md

@@ -27,6 +27,12 @@ uvx simpleaudit-studio
 
 [`uvx`](https://docs.astral.sh/uv/#uvx) installs the [`simpleaudit-studio`](https://pypi.org/project/simpleaudit-studio/) package and runs it in an isolated environment. No Docker, no Postgres, no manual setup. Opens at http://localhost:8000 (login: `studio` / `admin123`). A mock model server is pre-seeded so you can start exploring audit results immediately.
 
+Want the **latest unreleased code** from this repo instead of the PyPI release? Same one-liner, pointed at git:
+
+```bash
+uvx --from "git+https://github.com/SushantGautam/SimpleAuditStudio" spin
+```
+
 🌐 Or skip the setup entirely — try the live demo: <a href="https://sushantgautam-simpleaudit-studio.hf.space" target="_blank" rel="noopener noreferrer">sushantgautam-simpleaudit-studio.hf.space</a>
 
 ### 🤖 Using Real Models

{simpleaudit_studio-0.2.3 → simpleaudit_studio-0.2.4}/infra/middleware.py

@@ -70,17 +70,23 @@ class CsrfCookieMiddleware(MiddlewareMixin):
     Django only sets the cookie when a response renders ``{% csrf_token %}``.
     In the HF Space iframe (demo mode) the login page may be the only place
     that does so; if the user signed in via WorkOS magic auth or the cookie
-    expired, subsequent fetch POSTs fail with 403. Marking the CSRF cookie
-    for update on every authenticated request fixes this.
+    expired, subsequent fetch POSTs fail with 403.
+
+    We only set the cookie if it is missing, rather than rotating it on every
+    request. Rotating on every request causes token/cookie drift: a form
+    rendered with token A becomes stale after any other request rotates the
+    cookie to secret B, producing 403 "CSRF token from POST incorrect".
     """
 
     def process_request(self, request):
         if hasattr(request, "user") and request.user.is_authenticated:
+            from django.conf import settings
             from django.middleware.csrf import _add_new_csrf_cookie
 
-            # Generates a secret in request.META and marks it for update;
-            # CsrfViewMiddleware.process_response then sets the cookie.
-            _add_new_csrf_cookie(request)
+            # Only set the cookie if it's not already present in the request.
+            existing = request.COOKIES.get(settings.CSRF_COOKIE_NAME)
+            if not existing:
+                _add_new_csrf_cookie(request)
 
 
 class ProjectMiddleware(MiddlewareMixin):

{simpleaudit_studio-0.2.3 → simpleaudit_studio-0.2.4}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "hatchling.build"
 
 [project]
 name = "simpleaudit-studio"
-version = "0.2.3"
+version = "0.2.4"
 description = "Production AI model audit platform — one-liner demo mode via uvx"
 readme = "README.md"
 requires-python = ">=3.11"
@@ -33,6 +33,7 @@ dev = ["factory_boy==3.3.2", "pytest", "pytest-django"]
 
 [project.scripts]
 simpleaudit-studio = "simpleaudit_studio.cli:main"
+spin = "simpleaudit_studio.cli:main"
 
 [tool.hatch.build.targets.wheel]
 packages = [