supython 0.1.4__tar.gz → 0.1.6__tar.gz

{supython-0.1.4 → supython-0.1.6}/.gitignore

@@ -31,6 +31,7 @@ dev-app/functions/__pycache__/
 dev-app/.tmp/
 
 .references/
+.references/*.md
 .claude/
 
 ts-sdk/node_modules/

{supython-0.1.4 → supython-0.1.6}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: supython
-Version: 0.1.4
+Version: 0.1.6
 Summary: A lightweight Postgres-first BaaS framework for Python
 Project-URL: Homepage, https://github.com/Tkeby/supython
 Project-URL: Repository, https://github.com/Tkeby/supython
@@ -42,7 +42,7 @@ Provides-Extra: arq
 Requires-Dist: arq>=0.26; extra == 'arq'
 Provides-Extra: client
 Requires-Dist: httpx>=0.28; extra == 'client'
-Requires-Dist: postgrest-py>=0.16.0; extra == 'client'
+Requires-Dist: postgrest>=0.16.0; extra == 'client'
 Requires-Dist: realtime>=2.0.0; extra == 'client'
 Provides-Extra: cron-inproc
 Requires-Dist: croniter>=2.0; extra == 'cron-inproc'
@@ -95,7 +95,7 @@ Shipped [v0.1.2]:
 **Jobs & cron**
 - **Job queue** — Postgres-backed (`SELECT FOR UPDATE SKIP LOCKED`), idempotent enqueue, retry with backoff
 - **Cron scheduling** — `pg_cron` (primary) or in-process `croniter` fallback
-- **Generic hooks** — `@app.on_signup` / `@app.on_login` lifecycle hooks; `@app.claims_provider` for custom JWT claims
+- **Generic hooks** — `@app.on_signup` / `@app.on_login` lifecycle hooks; `@claims_provider` (from `supython.auth.claims`) for custom JWT claims
 - **`supython worker run`** — long-running worker with graceful SIGTERM drain
 
 **Operations & security**
@@ -420,15 +420,20 @@ equivalents) to `.env`. Providers without credentials are silently disabled.
 
 ### Custom JWT claims [shipped v0.1.3]
 
-Register a `claims_provider` to inject application-specific claims into every
+Register a claims provider to inject application-specific claims into every
 access token minted by the auth endpoints. Each provider is an async callable
 `(user, conn) -> dict` whose return value is merged into the token payload —
 on signup, password login, refresh, magic-link, OTP, and OAuth callbacks.
 
+Import `register` directly from `supython.auth.claims` (typically aliased to
+`claims_provider`). Don't reach for `supython.app.app` — extensions load
+*during* `create_app()`, before `app` is bound, so importing it from a
+user-side `EXTENSIONS` module is a circular import.
+
 ```python
-from supython.app import app
+from supython.auth.claims import register as claims_provider
 
-@app.claims_provider
+@claims_provider
 async def add_org(user, conn):
     org_id = await conn.fetchval(
         "select org_id from public.memberships where user_id = $1", user.id
@@ -472,7 +477,7 @@ async def me(user_id: Annotated[UUID, Depends(current_user_id)]) -> dict:
 
 @router.get("/whoami")
 async def whoami(claims: Annotated[dict, Depends(current_claims)]) -> dict:
-    # Read whatever your `claims_provider` injected — e.g. org_id.
+    # Read whatever your claims provider injected — e.g. org_id.
     return {"user_id": claims["sub"], "org_id": claims.get("org_id")}
 ```
 

{supython-0.1.4 → supython-0.1.6}/README.md

@@ -37,7 +37,7 @@ Shipped [v0.1.2]:
 **Jobs & cron**
 - **Job queue** — Postgres-backed (`SELECT FOR UPDATE SKIP LOCKED`), idempotent enqueue, retry with backoff
 - **Cron scheduling** — `pg_cron` (primary) or in-process `croniter` fallback
-- **Generic hooks** — `@app.on_signup` / `@app.on_login` lifecycle hooks; `@app.claims_provider` for custom JWT claims
+- **Generic hooks** — `@app.on_signup` / `@app.on_login` lifecycle hooks; `@claims_provider` (from `supython.auth.claims`) for custom JWT claims
 - **`supython worker run`** — long-running worker with graceful SIGTERM drain
 
 **Operations & security**
@@ -362,15 +362,20 @@ equivalents) to `.env`. Providers without credentials are silently disabled.
 
 ### Custom JWT claims [shipped v0.1.3]
 
-Register a `claims_provider` to inject application-specific claims into every
+Register a claims provider to inject application-specific claims into every
 access token minted by the auth endpoints. Each provider is an async callable
 `(user, conn) -> dict` whose return value is merged into the token payload —
 on signup, password login, refresh, magic-link, OTP, and OAuth callbacks.
 
+Import `register` directly from `supython.auth.claims` (typically aliased to
+`claims_provider`). Don't reach for `supython.app.app` — extensions load
+*during* `create_app()`, before `app` is bound, so importing it from a
+user-side `EXTENSIONS` module is a circular import.
+
 ```python
-from supython.app import app
+from supython.auth.claims import register as claims_provider
 
-@app.claims_provider
+@claims_provider
 async def add_org(user, conn):
     org_id = await conn.fetchval(
         "select org_id from public.memberships where user_id = $1", user.id
@@ -414,7 +419,7 @@ async def me(user_id: Annotated[UUID, Depends(current_user_id)]) -> dict:
 
 @router.get("/whoami")
 async def whoami(claims: Annotated[dict, Depends(current_claims)]) -> dict:
-    # Read whatever your `claims_provider` injected — e.g. org_id.
+    # Read whatever your claims provider injected — e.g. org_id.
     return {"user_id": claims["sub"], "org_id": claims.get("org_id")}
 ```
 

{supython-0.1.4 → supython-0.1.6}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "hatchling.build"
 
 [project]
 name = "supython"
-version = "0.1.4"
+version = "0.1.6"
 description = "A lightweight Postgres-first BaaS framework for Python"
 readme = "README.md"
 requires-python = ">=3.11"
@@ -62,7 +62,7 @@ cron-inproc = [
     "croniter>=2.0",
 ]
 client = [
-    "postgrest-py>=0.16.0",
+    "postgrest>=0.16.0",
     "realtime>=2.0.0",
     "httpx>=0.28",
 ]

{supython-0.1.4 → supython-0.1.6}/src/supython/app.py

@@ -11,7 +11,6 @@ from fastapi.middleware.cors import CORSMiddleware
 from . import __version__, db, jwks
 from .admin import router as admin_api_router
 from .admin import spa as admin_spa
-from .auth import claims as auth_claims
 from .auth.router import router as auth_router
 from .extensions import load_extensions
 from .settings_module import UserSettings, load_user_settings
@@ -156,7 +155,6 @@ def create_app() -> FastAPI:
     app.on_signup = _make_hook_decorator("signup")
     app.on_login = _make_hook_decorator("login")
     app.on_logout = _make_hook_decorator("logout")
-    app.claims_provider = auth_claims.register
 
     return app
 

{supython-0.1.4 → supython-0.1.6}/src/supython/auth/claims.py

@@ -1,9 +1,10 @@
 """Custom-claim providers for access-token issuance.
 
-Library users register an async callable via ``@app.claims_provider`` (or
-``claims.register``) and the auth service invokes it inside ``_issue_pair``
-just before minting the JWT. Each provider returns a ``dict`` that is
-merged into the access token's payload.
+Library users register an async callable via ``claims.register`` (typically
+imported as ``from supython.auth.claims import register as claims_provider``)
+and the auth service invokes it inside ``_issue_pair`` just before minting
+the JWT. Each provider returns a ``dict`` that is merged into the access
+token's payload.
 
 Contract (intentionally narrower than ``hooks.fire``):