supython 0.1.9__tar.gz → 0.1.10__tar.gz

{supython-0.1.9 → supython-0.1.10}/CHANGELOG.md

@@ -31,6 +31,29 @@ Each entry links the relevant `PROJECT.md` section and decision-log row
 
 ---
 
+## [0.1.10] — 2026-06-12
+
+### Added
+
+- `python-dotenv` is now a direct dependency (previously only transitive via
+  `pydantic-settings`), backing the new boot-time `.env` export.
+
+### Fixed
+
+- `.env` is now exported into `os.environ` at the start of every boot path
+  (`create_app`, `supython worker run`, CLI subcommands) via the shared
+  `settings.export_env_file()` helper, **before** extensions load. Previously
+  pydantic-settings loaded `.env` into the typed `Settings` model only, so
+  dynamically-named secrets read via `os.environ.get(<name>)` (the `secret_ref`
+  convention) resolved to `None` under `supython dev` / `worker run` / CLI —
+  working in containers only because docker-compose's `env_file:` injected
+  `.env` first. The export uses `override=False`, so real environment variables
+  set by an orchestrator always win, and the path is sourced from the same
+  `SettingsConfigDict.env_file`. Downstream apps can delete their ad-hoc
+  `load_dotenv()` boot shims. (#1)
+
+---
+
 ## [0.1.9] — 2026-05-29
 
 ### Fixed
@@ -234,5 +257,6 @@ v0.1–v0.7 plus a v1.1.x admin track; see §19 decision log
 ---
 
 
+[0.1.10]: https://github.com/Tkeby/supython/releases/tag/v0.1.10
 [0.1.9]: https://github.com/Tkeby/supython/releases/tag/v0.1.9
 [0.1.0]: https://github.com/Tkeby/supython/releases/tag/v0.1.0

{supython-0.1.9 → supython-0.1.10}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: supython
-Version: 0.1.9
+Version: 0.1.10
 Summary: A lightweight Postgres-first BaaS framework for Python
 Project-URL: Homepage, https://github.com/Tkeby/supython
 Project-URL: Repository, https://github.com/Tkeby/supython
@@ -35,6 +35,7 @@ Requires-Dist: itsdangerous>=2.2
 Requires-Dist: pydantic-settings>=2.6
 Requires-Dist: pydantic>=2.9
 Requires-Dist: pyjwt[crypto]>=2.10
+Requires-Dist: python-dotenv>=1.0
 Requires-Dist: python-multipart>=0.0.20
 Requires-Dist: typer>=0.15
 Requires-Dist: uvicorn[standard]>=0.32

{supython-0.1.9 → supython-0.1.10}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "hatchling.build"
 
 [project]
 name = "supython"
-version = "0.1.9"
+version = "0.1.10"
 description = "A lightweight Postgres-first BaaS framework for Python"
 readme = "README.md"
 requires-python = ">=3.11"
@@ -32,6 +32,7 @@ dependencies = [
     "asyncpg>=0.30",
     "pydantic>=2.9",
     "pydantic-settings>=2.6",
+    "python-dotenv>=1.0",
     "email-validator>=2.2",
     "argon2-cffi>=23.1",
     "pyjwt[crypto]>=2.10",

{supython-0.1.9 → supython-0.1.10}/src/supython/app.py

@@ -27,7 +27,7 @@ from .body_size import BodySizeLimitMiddleware
 from .security_headers import SecurityHeadersMiddleware
 from .realtime import get_broker
 from .realtime.router import router as realtime_router
-from .settings import get_settings
+from .settings import export_env_file, get_settings
 from .storage.router import router as storage_router
 
 logger = logging.getLogger(__name__)
@@ -96,6 +96,7 @@ async def _lifespan(app: FastAPI) -> AsyncIterator[None]:
 
 
 def create_app() -> FastAPI:
+    export_env_file()
     settings = get_settings()
     configure_logging(settings.log_level, json_format=settings.log_json)
 

{supython-0.1.9 → supython-0.1.10}/src/supython/cli.py

@@ -22,7 +22,7 @@ from .db_admin import rotate_role_password
 from .gen import render_types_py, render_types_ts
 from .logging_config import configure_logging
 from .scaffold import scaffold
-from .settings import Settings, get_settings
+from .settings import Settings, export_env_file, get_settings
 
 app = typer.Typer(
     help="supython — lightweight Postgres-first BaaS for Python",
@@ -126,6 +126,7 @@ def _bootstrap_user_modules() -> None:
     from .extensions import load_extensions
     from .settings_module import UserSettings, load_user_settings
 
+    export_env_file()
     s = get_settings()
     user = load_user_settings(s.settings_module) if s.settings_module else UserSettings()
     load_extensions([*s.extensions, *user.extensions])
@@ -248,6 +249,7 @@ def worker_run(
     from .jobs.worker import Worker
     from .settings_module import UserSettings, load_user_settings
 
+    export_env_file()
     s = get_settings()
     configure_logging(s.log_level, json_format=s.log_json)
     s.jobs_queue_default = queue

{supython-0.1.9 → supython-0.1.10}/src/supython/settings.py

@@ -2,6 +2,7 @@ from functools import lru_cache
 from pathlib import Path
 from typing import Annotated, Literal
 
+from dotenv import load_dotenv
 from pydantic import Field, field_validator
 from pydantic_settings import BaseSettings, NoDecode, SettingsConfigDict
 
@@ -242,3 +243,33 @@ class Settings(BaseSettings):
 @lru_cache
 def get_settings() -> Settings:
     return Settings()
+
+
+def export_env_file() -> None:
+    """Export the env file ``Settings`` reads into ``os.environ``.
+
+    pydantic-settings loads ``env_file`` into the typed ``Settings`` model only;
+    it never touches ``os.environ``. Code that resolves a *dynamically-named*
+    secret — one whose env var name is not known until runtime (e.g. read from a
+    DB column) and so cannot be a typed ``Settings`` field but must be read via
+    ``os.environ.get(<name>)`` — therefore sees nothing from ``.env`` when the
+    process is launched by supython itself (``supython dev``, ``worker run``, a
+    CLI subcommand). In a container it works only by accident: docker-compose's
+    ``env_file:`` injects ``.env`` into the real process environment first.
+
+    Mirror ``uvicorn --env-file``: load the same file with ``override=False`` so
+    variables already present in the real environment (set by the orchestrator)
+    always win over a checked-in ``.env``. The path is sourced from the same
+    ``SettingsConfigDict.env_file`` ``Settings`` uses, never re-hardcoded.
+    Idempotent — safe to call from every boot path; a missing file is a no-op.
+    """
+    env_file = Settings.model_config.get("env_file")
+    if not env_file:
+        return
+    encoding = Settings.model_config.get("env_file_encoding") or "utf-8"
+    paths = [env_file] if isinstance(env_file, str | Path) else list(env_file)
+    # pydantic gives the *last* listed file precedence; load_dotenv(override=
+    # False) gives the *first*-loaded value precedence — so walk in reverse to
+    # preserve that ordering while still letting the real environment win.
+    for path in reversed(paths):
+        load_dotenv(path, override=False, encoding=encoding)