svc-infra 0.1.640__py3-none-any.whl → 0.1.664__py3-none-any.whl

svc_infra/storage/easy.py

@@ -0,0 +1,182 @@
+"""
+Easy storage backend builder with auto-detection.
+
+Simplifies storage backend initialization with sensible defaults.
+"""
+
+import logging
+import os
+from typing import Optional
+
+from .backends import LocalBackend, MemoryBackend, S3Backend
+from .base import StorageBackend
+from .settings import StorageSettings
+
+logger = logging.getLogger(__name__)
+
+
+def easy_storage(
+    backend: Optional[str] = None,
+    **kwargs,
+) -> StorageBackend:
+    """
+    Create a storage backend with auto-detection or explicit selection.
+
+    This is the recommended way to initialize storage in most applications.
+    It handles environment-based configuration and provides sensible defaults.
+
+    Args:
+        backend: Explicit backend type ("local", "s3", "gcs", "cloudinary", "memory")
+                If None, auto-detects from environment variables
+        **kwargs: Backend-specific configuration overrides
+
+    Returns:
+        Initialized storage backend
+
+    Auto-Detection Order:
+        1. Explicit backend parameter
+        2. STORAGE_BACKEND environment variable
+        3. Railway volume (RAILWAY_VOLUME_MOUNT_PATH) → LocalBackend
+        4. S3 credentials (AWS_ACCESS_KEY_ID or STORAGE_S3_BUCKET) → S3Backend
+        5. GCS credentials (GOOGLE_APPLICATION_CREDENTIALS) → GCSBackend
+        6. Cloudinary credentials (CLOUDINARY_URL) → CloudinaryBackend
+        7. Default: MemoryBackend (with warning)
+
+    Examples:
+        >>> # Auto-detect backend from environment
+        >>> storage = easy_storage()
+        >>>
+        >>> # Explicit local backend
+        >>> storage = easy_storage(
+        ...     backend="local",
+        ...     base_path="/data/uploads"
+        ... )
+        >>>
+        >>> # Explicit S3 backend
+        >>> storage = easy_storage(
+        ...     backend="s3",
+        ...     bucket="my-uploads",
+        ...     region="us-west-2"
+        ... )
+        >>>
+        >>> # DigitalOcean Spaces
+        >>> storage = easy_storage(
+        ...     backend="s3",
+        ...     bucket="my-uploads",
+        ...     region="nyc3",
+        ...     endpoint="https://nyc3.digitaloceanspaces.com"
+        ... )
+
+    Environment Variables:
+        See StorageSettings for full list of environment variables.
+
+    Raises:
+        ValueError: If backend type is unsupported or configuration is invalid
+        ImportError: If required backend dependencies are not installed
+
+    Note:
+        For production deployments, it's recommended to set STORAGE_BACKEND
+        explicitly to avoid unexpected auto-detection behavior.
+    """
+    # Load settings
+    settings = StorageSettings()
+
+    # Determine backend type
+    backend_type = backend or settings.detect_backend()
+
+    logger.info(f"Initializing {backend_type} storage backend")
+
+    # Create backend instance
+    if backend_type == "memory":
+        # Memory backend
+        if backend_type == settings.detect_backend() and not backend:
+            logger.warning(
+                "Using MemoryBackend (in-memory storage). "
+                "Data will be lost on restart. "
+                "Set STORAGE_BACKEND environment variable for production."
+            )
+
+        max_size = kwargs.get("max_size", 100_000_000)
+        return MemoryBackend(max_size=max_size)
+
+    elif backend_type == "local":
+        # Local filesystem backend
+        base_path = kwargs.get("base_path") or settings.storage_base_path
+
+        # Check for Railway volume
+        railway_volume = os.getenv("RAILWAY_VOLUME_MOUNT_PATH")
+        if railway_volume and not kwargs.get("base_path"):
+            base_path = railway_volume
+            logger.info(f"Detected Railway volume at {base_path}")
+
+        base_url = kwargs.get("base_url") or settings.storage_base_url
+        signing_secret = kwargs.get("signing_secret") or settings.storage_signing_secret
+
+        return LocalBackend(
+            base_path=base_path,
+            base_url=base_url,
+            signing_secret=signing_secret,
+        )
+
+    elif backend_type == "s3":
+        # S3-compatible backend
+        bucket = kwargs.get("bucket") or settings.storage_s3_bucket
+        if not bucket:
+            raise ValueError(
+                "S3 bucket is required. "
+                "Set STORAGE_S3_BUCKET environment variable or pass bucket parameter."
+            )
+
+        region = kwargs.get("region") or settings.storage_s3_region
+        endpoint = kwargs.get("endpoint") or settings.storage_s3_endpoint
+
+        # Get credentials with fallback
+        access_key = kwargs.get("access_key")
+        secret_key = kwargs.get("secret_key")
+
+        if not access_key or not secret_key:
+            access_key_from_settings, secret_key_from_settings = settings.get_s3_credentials()
+            access_key = access_key or access_key_from_settings
+            secret_key = secret_key or secret_key_from_settings
+
+        # Log provider detection
+        if endpoint:
+            if "digitalocean" in endpoint:
+                logger.info("Detected DigitalOcean Spaces")
+            elif "wasabi" in endpoint:
+                logger.info("Detected Wasabi")
+            elif "backblaze" in endpoint:
+                logger.info("Detected Backblaze B2")
+            else:
+                logger.info(f"Using custom S3 endpoint: {endpoint}")
+        else:
+            logger.info("Using AWS S3")
+
+        return S3Backend(
+            bucket=bucket,
+            region=region,
+            endpoint=endpoint,
+            access_key=access_key,
+            secret_key=secret_key,
+        )
+
+    elif backend_type == "gcs":
+        # Google Cloud Storage backend
+        raise NotImplementedError(
+            "GCS backend not yet implemented. " "Use 'local' or 's3' backend for now."
+        )
+
+    elif backend_type == "cloudinary":
+        # Cloudinary backend
+        raise NotImplementedError(
+            "Cloudinary backend not yet implemented. " "Use 'local' or 's3' backend for now."
+        )
+
+    else:
+        raise ValueError(
+            f"Unsupported storage backend: {backend_type}. "
+            f"Supported: local, s3, memory (gcs, cloudinary coming soon)"
+        )
+
+
+__all__ = ["easy_storage"]

svc_infra/storage/settings.py

@@ -0,0 +1,192 @@
+"""
+Storage configuration and settings.
+
+Handles environment-based configuration and auto-detection of storage backends.
+"""
+
+import os
+from typing import Literal, Optional
+
+from pydantic import Field
+from pydantic_settings import BaseSettings
+
+
+class StorageSettings(BaseSettings):
+    """
+    Storage system configuration.
+
+    Supports multiple backends with auto-detection from environment variables.
+
+    Environment Variables:
+        STORAGE_BACKEND: Explicit backend selection ("local", "s3", "gcs", "cloudinary", "memory")
+
+        Local Backend:
+            STORAGE_BASE_PATH: Base directory for file storage (default: /data/uploads)
+            STORAGE_BASE_URL: Base URL for file serving (default: http://localhost:8000/files)
+            STORAGE_SIGNING_SECRET: Secret key for URL signing (auto-generated if not set)
+
+        S3 Backend:
+            STORAGE_S3_BUCKET: S3 bucket name (required for S3)
+            STORAGE_S3_REGION: AWS region (default: us-east-1)
+            STORAGE_S3_ENDPOINT: Custom endpoint for S3-compatible services (optional)
+            STORAGE_S3_ACCESS_KEY: AWS access key (optional, uses AWS_ACCESS_KEY_ID if not set)
+            STORAGE_S3_SECRET_KEY: AWS secret key (optional, uses AWS_SECRET_ACCESS_KEY if not set)
+
+        GCS Backend:
+            STORAGE_GCS_BUCKET: GCS bucket name (required for GCS)
+            STORAGE_GCS_PROJECT: GCP project ID (optional)
+            STORAGE_GCS_CREDENTIALS_PATH: Path to service account JSON (optional)
+
+        Cloudinary Backend:
+            STORAGE_CLOUDINARY_CLOUD_NAME: Cloudinary cloud name (required)
+            STORAGE_CLOUDINARY_API_KEY: Cloudinary API key (required)
+            STORAGE_CLOUDINARY_API_SECRET: Cloudinary API secret (required)
+
+    Example:
+        >>> # Auto-detect backend from environment
+        >>> settings = StorageSettings()
+        >>> backend = settings.detect_backend()
+        >>>
+        >>> # Explicit backend selection
+        >>> settings = StorageSettings(storage_backend="s3")
+    """
+
+    # Backend selection
+    storage_backend: Optional[Literal["local", "s3", "gcs", "cloudinary", "memory"]] = Field(
+        default=None,
+        description="Storage backend type (auto-detected if not set)",
+    )
+
+    # Local backend settings
+    storage_base_path: str = Field(
+        default="/data/uploads",
+        description="Base directory for local file storage",
+    )
+    storage_base_url: str = Field(
+        default="http://localhost:8000/files",
+        description="Base URL for serving files",
+    )
+    storage_signing_secret: Optional[str] = Field(
+        default=None,
+        description="Secret key for URL signing (auto-generated if not set)",
+    )
+
+    # S3 backend settings
+    storage_s3_bucket: Optional[str] = Field(
+        default=None,
+        description="S3 bucket name",
+    )
+    storage_s3_region: str = Field(
+        default="us-east-1",
+        description="AWS region",
+    )
+    storage_s3_endpoint: Optional[str] = Field(
+        default=None,
+        description="Custom S3 endpoint (for DigitalOcean Spaces, Wasabi, etc.)",
+    )
+    storage_s3_access_key: Optional[str] = Field(
+        default=None,
+        description="S3 access key (falls back to AWS_ACCESS_KEY_ID)",
+    )
+    storage_s3_secret_key: Optional[str] = Field(
+        default=None,
+        description="S3 secret key (falls back to AWS_SECRET_ACCESS_KEY)",
+    )
+
+    # GCS backend settings
+    storage_gcs_bucket: Optional[str] = Field(
+        default=None,
+        description="Google Cloud Storage bucket name",
+    )
+    storage_gcs_project: Optional[str] = Field(
+        default=None,
+        description="GCP project ID",
+    )
+    storage_gcs_credentials_path: Optional[str] = Field(
+        default=None,
+        description="Path to GCP service account JSON",
+    )
+
+    # Cloudinary backend settings
+    storage_cloudinary_cloud_name: Optional[str] = Field(
+        default=None,
+        description="Cloudinary cloud name",
+    )
+    storage_cloudinary_api_key: Optional[str] = Field(
+        default=None,
+        description="Cloudinary API key",
+    )
+    storage_cloudinary_api_secret: Optional[str] = Field(
+        default=None,
+        description="Cloudinary API secret",
+    )
+
+    model_config = {
+        "env_file": ".env",
+        "case_sensitive": False,
+    }
+
+    def detect_backend(self) -> str:
+        """
+        Auto-detect storage backend from environment.
+
+        Detection order:
+            1. Explicit STORAGE_BACKEND setting
+            2. Railway volume (RAILWAY_VOLUME_MOUNT_PATH) → local
+            3. S3 credentials (AWS_ACCESS_KEY_ID or STORAGE_S3_BUCKET) → s3
+            4. GCS credentials (GOOGLE_APPLICATION_CREDENTIALS or STORAGE_GCS_BUCKET) → gcs
+            5. Cloudinary credentials (CLOUDINARY_URL or STORAGE_CLOUDINARY_CLOUD_NAME) → cloudinary
+            6. Default → memory (with warning)
+
+        Returns:
+            Backend type string
+
+        Example:
+            >>> settings = StorageSettings()
+            >>> backend_type = settings.detect_backend()
+            >>> print(f"Using {backend_type} backend")
+        """
+        # Explicit setting takes precedence
+        if self.storage_backend:
+            return self.storage_backend
+
+        # Check for Railway volume
+        railway_volume = os.getenv("RAILWAY_VOLUME_MOUNT_PATH")
+        if railway_volume:
+            return "local"
+
+        # Check for S3
+        has_s3_key = os.getenv("AWS_ACCESS_KEY_ID") or self.storage_s3_access_key
+        if has_s3_key or self.storage_s3_bucket:
+            return "s3"
+
+        # Check for GCS
+        has_gcs_creds = os.getenv("GOOGLE_APPLICATION_CREDENTIALS")
+        if has_gcs_creds or self.storage_gcs_bucket:
+            return "gcs"
+
+        # Check for Cloudinary
+        has_cloudinary = os.getenv("CLOUDINARY_URL")
+        if has_cloudinary or self.storage_cloudinary_cloud_name:
+            return "cloudinary"
+
+        # Default to memory (for development/testing)
+        return "memory"
+
+    def get_s3_credentials(self) -> tuple[Optional[str], Optional[str]]:
+        """
+        Get S3 credentials with fallback to AWS environment variables.
+
+        Returns:
+            Tuple of (access_key, secret_key)
+
+        Example:
+            >>> settings = StorageSettings()
+            >>> access_key, secret_key = settings.get_s3_credentials()
+        """
+        access_key = self.storage_s3_access_key or os.getenv("AWS_ACCESS_KEY_ID")
+        secret_key = self.storage_s3_secret_key or os.getenv("AWS_SECRET_ACCESS_KEY")
+        return access_key, secret_key
+
+
+__all__ = ["StorageSettings"]

{svc_infra-0.1.640.dist-info → svc_infra-0.1.664.dist-info}/METADATA

@@ -1,6 +1,6 @@
 Metadata-Version: 2.3
 Name: svc-infra
-Version: 0.1.640
+Version: 0.1.664
 Summary: Infrastructure for building and deploying prod-ready services
 License: MIT
 Keywords: fastapi,sqlalchemy,alembic,auth,infra,async,pydantic
@@ -24,10 +24,13 @@ Provides-Extra: mysql
 Provides-Extra: pg
 Provides-Extra: pg2
 Provides-Extra: redshift
+Provides-Extra: s3
 Provides-Extra: snowflake
 Provides-Extra: sqlite
 Requires-Dist: adyen (>=13.4.0,<14.0.0)
 Requires-Dist: ai-infra (>=0.1.63,<0.2.0)
+Requires-Dist: aioboto3 (>=13.0.0,<14.0.0) ; extra == "s3"
+Requires-Dist: aiofiles (>=24.1.0,<25.0.0)
 Requires-Dist: aiosqlite (>=0.20.0,<0.21.0) ; extra == "sqlite"
 Requires-Dist: alembic (>=1.13.2,<2.0.0)
 Requires-Dist: asyncpg (>=0.30.0,<0.31.0) ; extra == "pg"
@@ -89,11 +92,12 @@ svc-infra packages the shared building blocks we use to ship production FastAPI
 | Environment | Feature switches and env vars | [Environment](src/svc_infra/docs/environment.md) |
 | API | FastAPI bootstrap, middleware, docs wiring | [API guide](src/svc_infra/docs/api.md) |
 | Auth | Sessions, OAuth/OIDC, MFA, SMTP delivery | [Auth](src/svc_infra/docs/auth.md) |
-| Security | Password policy, lockout, signed cookies, headers | [Security](ssrc/svc_infra/docs/ecurity.md) |
+| Security | Password policy, lockout, signed cookies, headers | [Security](src/svc_infra/docs/security.md) |
 | Database | SQL + Mongo wiring, Alembic helpers, inbox/outbox patterns | [Database](src/svc_infra/docs/database.md) |
+| Storage | File storage with S3, local, memory backends | [Storage](src/svc_infra/docs/storage.md) |
 | Tenancy | Multi-tenant boundaries and helpers | [Tenancy](src/svc_infra/docs/tenancy.md) |
 | Idempotency | Idempotent endpoints and middleware | [Idempotency](src/svc_infra/docs/idempotency.md) |
-| Rate Limiting | Middleware, dependency limiter, headers | [Rate limiting](rsrc/svc_infra/docs/ate-limiting.md) |
+| Rate Limiting | Middleware, dependency limiter, headers | [Rate limiting](src/svc_infra/docs/rate-limiting.md) |
 | Cache | cashews decorators, namespace management, TTL helpers | [Cache](src/svc_infra/docs/cache.md) |
 | Jobs | JobQueue, scheduler, CLI worker | [Jobs](src/svc_infra/docs/jobs.md) |
 | Observability | Prometheus, Grafana, OpenTelemetry | [Observability](src/svc_infra/docs/observability.md) |
@@ -146,6 +150,7 @@ async def handle_webhook(payload = Depends(require_signature(lambda: ["current",
 - **API** – toggle logging/observability and docs exposure with `ENABLE_LOGGING`, `LOG_LEVEL`, `LOG_FORMAT`, `ENABLE_OBS`, `METRICS_PATH`, `OBS_SKIP_PATHS`, and `CORS_ALLOW_ORIGINS`. 【F:src/svc_infra/api/fastapi/ease.py†L67-L111】【F:src/svc_infra/api/fastapi/setup.py†L47-L88】
 - **Auth** – configure JWT secrets, SMTP, cookies, and policy using the `AUTH_…` settings family (e.g., `AUTH_JWT__SECRET`, `AUTH_SMTP_HOST`, `AUTH_SESSION_COOKIE_SECURE`). 【F:src/svc_infra/api/fastapi/auth/settings.py†L23-L91】
 - **Database** – set connection URLs or components via `SQL_URL`/`SQL_URL_FILE`, `DB_DIALECT`, `DB_HOST`, `DB_USER`, `DB_PASSWORD`, plus Mongo knobs like `MONGO_URL`, `MONGO_DB`, and `MONGO_URL_FILE`. 【F:src/svc_infra/api/fastapi/db/sql/add.py†L55-L114】【F:src/svc_infra/db/sql/utils.py†L85-L206】【F:src/svc_infra/db/nosql/mongo/settings.py†L9-L13】【F:src/svc_infra/db/nosql/utils.py†L56-L113】
+- **Storage** – choose backend with `STORAGE_BACKEND` (local, s3, memory) and configure with `STORAGE_S3_BUCKET`, `STORAGE_S3_REGION`, `STORAGE_BASE_PATH`, or auto-detect from `RAILWAY_VOLUME_MOUNT_PATH` / AWS credentials. 【F:src/svc_infra/storage/settings.py】【F:src/svc_infra/docs/storage.md】
 - **Jobs** – choose the queue backend with `JOBS_DRIVER` and provide Redis via `REDIS_URL`; interval schedules can be declared with `JOBS_SCHEDULE_JSON`. 【F:src/svc_infra/jobs/easy.py†L11-L27】【F:src/svc_infra/docs/jobs.md†L11-L48】
 - **Cache** – namespace keys and lifetimes through `CACHE_PREFIX`, `CACHE_VERSION`, and TTL overrides `CACHE_TTL_DEFAULT`, `CACHE_TTL_SHORT`, `CACHE_TTL_LONG`. 【F:src/svc_infra/cache/README.md†L20-L173】【F:src/svc_infra/cache/ttl.py†L26-L55】
 - **Observability** – turn metrics on/off or adjust scrape paths with `ENABLE_OBS`, `METRICS_PATH`, `OBS_SKIP_PATHS`, and Prometheus/Grafana flags like `SVC_INFRA_DISABLE_PROMETHEUS`, `SVC_INFRA_RATE_WINDOW`, `SVC_INFRA_DASHBOARD_REFRESH`, `SVC_INFRA_DASHBOARD_RANGE`. 【F:src/svc_infra/api/fastapi/ease.py†L67-L111】【F:src/svc_infra/obs/metrics/asgi.py†L49-L206】【F:src/svc_infra/obs/cloud_dash.py†L85-L108】

{svc_infra-0.1.640.dist-info → svc_infra-0.1.664.dist-info}/RECORD

@@ -17,10 +17,10 @@ svc_infra/api/fastapi/admin/__init__.py,sha256=AmuCHI5EQRCqwM40Gs1245z7MTcYZkg5x
 svc_infra/api/fastapi/admin/add.py,sha256=9mCfvKvwBf_sr-SkpCbF1YMNvg-KRovrM_WV3hHs8m8,8649
 svc_infra/api/fastapi/apf_payments/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
 svc_infra/api/fastapi/apf_payments/router.py,sha256=JIMCAZ1_Vie_EfvOS999iYSDH9ZBx1Nfizud-F_b5T0,36788
-svc_infra/api/fastapi/apf_payments/setup.py,sha256=bk_LLLXyqTA-lqf0v-mdpqLEMbXB17U1IQjG-qSBejQ,2677
+svc_infra/api/fastapi/apf_payments/setup.py,sha256=qFxImRUiaBg6YZaCcKIIsr7JTyMr_UTo9dP0MbuqpPg,2553
 svc_infra/api/fastapi/auth/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
 svc_infra/api/fastapi/auth/_cookies.py,sha256=U4heUmMnLezHx8U6ksuUEpSZ6sNMJcIO0gdLpmZ5FXw,1367
-svc_infra/api/fastapi/auth/add.py,sha256=-GOLZv-O53wfegmMQsi1wgex_IKJWBJJ4vEQNONQpnU,10014
+svc_infra/api/fastapi/auth/add.py,sha256=nQX1pdhJHMP7kn0D7LLZBrB5nRmkhd6R8b8C_yntL58,9846
 svc_infra/api/fastapi/auth/gaurd.py,sha256=CXT5oMjxy_uQNyDRxQCxY2C4JFpMJqTTAz2j8pY5jOQ,8743
 svc_infra/api/fastapi/auth/mfa/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
 svc_infra/api/fastapi/auth/mfa/models.py,sha256=Te1cpGEBguUgul2NS50W_tHgybuu-TOIMPEBy53y9xc,1232
@@ -34,7 +34,7 @@ svc_infra/api/fastapi/auth/providers.py,sha256=q-ftVn04dqYxx0rnc28uFKieQqMpc_Jnf
 svc_infra/api/fastapi/auth/routers/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
 svc_infra/api/fastapi/auth/routers/account.py,sha256=IzLCk9e6ST8oorI8GWTuU0bfPyGvONqAjxadoE6L6Fg,1614
 svc_infra/api/fastapi/auth/routers/apikey_router.py,sha256=EoX-u1uZ0_r1dZ1hDO_PmG2sfSYZPa7uzj-4c520h8Y,5314
-svc_infra/api/fastapi/auth/routers/oauth_router.py,sha256=vrqrIJSCnsWJLtA6OdE4xdWMIXQp35flf_EulXzeM2Y,26361
+svc_infra/api/fastapi/auth/routers/oauth_router.py,sha256=Aiz3-PZNerRF7sbdcHXN9YvfOmvUlaqoqU5zbEIq9YU,27319
 svc_infra/api/fastapi/auth/routers/session_router.py,sha256=CVCum8Tczdj6ailRm1oRxys_EcNrOgBMYJT25yV4u3c,2359
 svc_infra/api/fastapi/auth/security.py,sha256=FU_XlaXHO1jocUbxeMOX3w2GWkR5ZXAcWbIUKTmOYvw,6482
 svc_infra/api/fastapi/auth/sender.py,sha256=7a47HXuP0JLR4NlFQVb3TpoQHOPYybKPJ06C2fMJaec,1811
@@ -43,18 +43,18 @@ svc_infra/api/fastapi/auth/state.py,sha256=_FAGOG36EPFAl2VbB6fdsFX0W9JNIdWN9X1_O
 svc_infra/api/fastapi/billing/router.py,sha256=vy9Zsf49f3c5Ni9xnBxUVmfgWhNBbkCWiZDLNxl8uOg,2132
 svc_infra/api/fastapi/billing/setup.py,sha256=N4_yvNdvCt2l2OUmREUdUAClGwLUvCwqN1IHgY99ZMI,621
 svc_infra/api/fastapi/cache/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
-svc_infra/api/fastapi/cache/add.py,sha256=CX4TWsxrZ2EnN_TjVDOhQf382k8aUj2CXTG1GaZ5jU0,338
+svc_infra/api/fastapi/cache/add.py,sha256=eIgv8zP1Zp5Bg0i1ZeDIJlP9wtnOePx7x0e0LaEtpCM,429
 svc_infra/api/fastapi/db/__init__.py,sha256=ixNtgx8afhMDnLMEFis672r3t5yVC-Bt8VkTX15S95A,355
 svc_infra/api/fastapi/db/http.py,sha256=tD1Tj0S1G1hYBFSHdu0KfPURs0QoEmOx4zNQdKkZhN8,2280
 svc_infra/api/fastapi/db/nosql/__init__.py,sha256=Z23rgAMrWCotsUMZVr-5Z78m5w6DIzsstuwxSvqaKR8,175
 svc_infra/api/fastapi/db/nosql/mongo/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
-svc_infra/api/fastapi/db/nosql/mongo/add.py,sha256=CGk0fWLgg4xzsRvBtob4nwYOCOv0_mH6gEi4cTwtWKU,4183
+svc_infra/api/fastapi/db/nosql/mongo/add.py,sha256=LkFxqyjEetfH64uaOv1XZJP2ArdPX3MEaiBMpGVXgQo,4468
 svc_infra/api/fastapi/db/nosql/mongo/crud_router.py,sha256=9z_H-3SFCFurHv_NajtljnBfF6qH6j4GsJvj_jlfsvs,4223
 svc_infra/api/fastapi/db/nosql/mongo/health.py,sha256=OM4_Pig3IRSrBhz2yHweIhGlSBrW1bubY_mDt5uyORA,507
 svc_infra/api/fastapi/db/sql/README.md,sha256=uF_k4wbNSeWR6JF_8evWkeSFidBEXMXcIiYyR6sEv48,3082
 svc_infra/api/fastapi/db/sql/__init__.py,sha256=R9P1Vy2Uqf9gFISxChMhO9tOGciIjEymVPhpXmsY3zc,255
-svc_infra/api/fastapi/db/sql/add.py,sha256=xGZnbGnP9PQtWvr5vuXA3_PXzTKldPM_cD3L0uztAvo,4768
-svc_infra/api/fastapi/db/sql/crud_router.py,sha256=GlIYwuIBb5vKJzPG2ikLvjHqoZt87zdWUGdhhCahH-o,11533
+svc_infra/api/fastapi/db/sql/add.py,sha256=9Pg45gwdvfGaKu_c1NxEC2lJYozz_uS6LyzPt5VtfxU,4833
+svc_infra/api/fastapi/db/sql/crud_router.py,sha256=-K6UyP_wOGZu7tXnb1CVqbySNu7wZQ9KvWJfVvi7vPs,11573
 svc_infra/api/fastapi/db/sql/health.py,sha256=ELLgQerooHHnvZRhGueSAc4QJsb3C4RojUGIu_U-hA4,792
 svc_infra/api/fastapi/db/sql/session.py,sha256=5MpwHignl2OmlgWY-SOU7TQ7phJ58enOf2u1nBMZH5w,2567
 svc_infra/api/fastapi/db/sql/users.py,sha256=68HGJgYVTEjKJm4-DPPC8-6nwXJoCukmgrYIIOHEUjs,5346
@@ -62,7 +62,7 @@ svc_infra/api/fastapi/dependencies/ratelimit.py,sha256=DiOC-MJfqTtSydM6RAaeAsiXX
 svc_infra/api/fastapi/docs/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
 svc_infra/api/fastapi/docs/add.py,sha256=41asodVG_0Iokl9dpcGGmFO8z5ak3gNRmsmx6rNHnaM,5689
 svc_infra/api/fastapi/docs/landing.py,sha256=GYFF-2gcYALZOlhJJ5JCrfOpv9j_q_6cfVjY0UGCLFM,4620
-svc_infra/api/fastapi/docs/scoped.py,sha256=AuN35Op-9fUvHQCLOBtRjd5eWSpB5C9EAW_7-Boxmfo,7540
+svc_infra/api/fastapi/docs/scoped.py,sha256=3zFGPTrGQtwoNSa0gUXIKzv4ZL6SQStwcmyQ0qGFcxY,9003
 svc_infra/api/fastapi/dual/__init__.py,sha256=scHLcNFkGbgX_R21V702xnAv6GMCkQ4n7yUtNDNgliM,552
 svc_infra/api/fastapi/dual/dualize.py,sha256=OkWmuscJlBUlwt3S_P8CssXFsyf5c7F0fCA6bdSl_LU,3829
 svc_infra/api/fastapi/dual/protected.py,sha256=6e3ojMKJmgrNOEHwfCNo5UNXaqsHbp10Wzt0cCJneJI,3189
@@ -107,9 +107,10 @@ svc_infra/api/fastapi/paths/prefix.py,sha256=I1xEt1lKDlOPn2Oa-y_1B-Q8JCwAPpu3_F_
 svc_infra/api/fastapi/paths/user.py,sha256=z8xv_A3dPhG366ezJU1c839oHbU3tEg06rbx3HUUuL0,323
 svc_infra/api/fastapi/routers/__init__.py,sha256=pbyrfVZzrMFgX11K47TvTS94yN0q-t-BdrVrGG9QyDk,9163
 svc_infra/api/fastapi/routers/ping.py,sha256=71DGaklMAkCL8g_NHdQk9LXG7C_cVem1p8qtapGtnBk,576
-svc_infra/api/fastapi/setup.py,sha256=4ElbdfhzY14o366uKeWXWlpTCBuK1iMksApdiqrrWI0,10082
+svc_infra/api/fastapi/setup.py,sha256=p2nTdmhsZw9kDTgtOPiQNdez8cRiv_Z4YHO2ztyzfu4,9989
 svc_infra/api/fastapi/tenancy/add.py,sha256=47lhWoHjuqbgSckJBTNGz-Mo5R6W7SQ0hQDiOGC0HU0,509
 svc_infra/api/fastapi/tenancy/context.py,sha256=nYnUKKP88Xy5mZCY7B7ob9PTDAnaKIhrj7pN6s-lBqg,3308
+svc_infra/api/fastapi/versioned.py,sha256=O7FlSyHssvLy4Qo-pagu1zX7Y2m-40WaR1WaDe-VOHk,3238
 svc_infra/app/README.md,sha256=MqnKTVjE9txaqlcl41wAv34hWhNfc_fJXCqCTsEWNdk,5070
 svc_infra/app/__init__.py,sha256=za20ALo_kvJMgf7R_kF98DWk3h9acmvhYrCMhThcSmU,209
 svc_infra/app/env.py,sha256=AOs4ksLZDXoAWrXeSnkYZ2yyS4UP68QUYfaWDcQ1QfA,4426
@@ -211,14 +212,14 @@ svc_infra/db/sql/service.py,sha256=Jtb89FQgXWNRrh_bPLCvNyM7Up0_rn_wx1_CGWfiqNs,2
 svc_infra/db/sql/service_with_hooks.py,sha256=E2VHC-nqDp3AAop37WIM9nWyfTOsxzsa7W6jCFWxl9Q,721
 svc_infra/db/sql/templates/__init__.py,sha256=atHi2TYS0oe8ZzUv2JIMSYdPduuyvu8RcOQASo7SqwM,48
 svc_infra/db/sql/templates/models_schemas/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
-svc_infra/db/sql/templates/models_schemas/auth/models.py.tmpl,sha256=9ji7yIAh2Cy942B8f67LBZpuWjtcEclplD0bCvoQd68,9453
+svc_infra/db/sql/templates/models_schemas/auth/models.py.tmpl,sha256=ROR13DZETuDOTrIXqb0XIdJeK-FMLkkfMor2lMMw-Kw,7573
 svc_infra/db/sql/templates/models_schemas/auth/schemas.py.tmpl,sha256=EVLGBBtQIlYXz0MN4yqAgbYLw0BdYawpZSFlPiw879g,2872
 svc_infra/db/sql/templates/models_schemas/entity/models.py.tmpl,sha256=cSUAfYgATv2SI0NQoHkn9Bzvt7RbOZ3_V8_p_VQsNMk,4349
 svc_infra/db/sql/templates/models_schemas/entity/schemas.py.tmpl,sha256=xHTXk8u2uiqmQe8XpXjGAPg8pDpdr0rLtsSOC_fo9vo,1032
 svc_infra/db/sql/templates/setup/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
 svc_infra/db/sql/templates/setup/alembic.ini.tmpl,sha256=7SHSOyUq9S7XqVdKpWLJW7gIWadv58t4AIooa306gDo,771
-svc_infra/db/sql/templates/setup/env_async.py.tmpl,sha256=XZ5jcZXaYdBca5cRaY_m4Zuhz5IGekO2cqLuwiVSK8Y,13201
-svc_infra/db/sql/templates/setup/env_sync.py.tmpl,sha256=Q0GbhtHj45Kt3hep27V_pFqeZ53y08lamOZiWa7p0GU,14560
+svc_infra/db/sql/templates/setup/env_async.py.tmpl,sha256=yJyf4zw5fHaHOvurfFJb-XEqEArlnOksMNeGWgo-7dc,13908
+svc_infra/db/sql/templates/setup/env_sync.py.tmpl,sha256=EiH8OS9uN-6IUT4p-XtmziqSwbq6-NjoojW9X6o1NSo,15357
 svc_infra/db/sql/templates/setup/script.py.mako.tmpl,sha256=RiEMqF6dTN0S_lSRr90w5K2VtyK0_C81kBPZ02qQDZU,588
 svc_infra/db/sql/tenant.py,sha256=erCB_TjZ62NXXIiOjsTOV_u3mM8kj0-R7gy4RFc-NrE,2779
 svc_infra/db/sql/types.py,sha256=aDcYS-lEb3Aw9nlc8D67wyS5rmE9ZOkblxPjPFbMM_0,863
@@ -227,7 +228,7 @@ svc_infra/db/sql/uniq_hooks.py,sha256=6gCnO0_Y-rhB0p-VuY0mZ9m1u3haiLWI3Ns_iUTqF_
 svc_infra/db/sql/utils.py,sha256=fm6wihJ90MUNqP8WBG4hScOndUoNiwkBFzSvOg2AzI4,33574
 svc_infra/db/sql/versioning.py,sha256=okZu2ad5RAFXNLXJgGpcQvZ5bc6gPjRWzwiBT0rEJJw,400
 svc_infra/db/utils.py,sha256=aTD49VJSEu319kIWJ1uijUoP51co4lNJ3S0_tvuyGio,802
-svc_infra/docs/acceptance-matrix.md,sha256=1J0722pdxNGVtjI5tAZA2wzzr1UiagjvPgzB8zo0Ks8,2383
+svc_infra/docs/acceptance-matrix.md,sha256=Z2YUb0BICmRQwb9aPwUInhVdhefkOUU69mdDY7KHXUw,3425
 svc_infra/docs/acceptance.md,sha256=1e9Ym4YOwnKHLfCTjx9garKlSKEnxzIYunx4cqoWhZ8,2327
 svc_infra/docs/admin.md,sha256=_KCrfNbpfEJhAcl1kuMQrSkRLXt2VIivRalvakgn4r8,12124
 svc_infra/docs/adr/0002-background-jobs-and-scheduling.md,sha256=iscWFmDmMFcaON3W1FePZT9aHvlBLWCoB4QE7iA5BBI,2418
@@ -240,7 +241,8 @@ svc_infra/docs/adr/0008-billing-primitives.md,sha256=6em0RYeDAQScN7oSZfD_XslzrzI
 svc_infra/docs/adr/0009-acceptance-harness.md,sha256=jDmoWn2uJTeK28YZo75YR1ym6NdgcmPOlMfupZlCCBs,2146
 svc_infra/docs/adr/0010-timeouts-and-resource-limits.md,sha256=tpOTjncKJAjTsDN8jSUOTNqEKHfhVcfooxfW0nnbnro,2815
 svc_infra/docs/adr/0011-admin-scope-and-impersonation.md,sha256=tHg0vXzyefr6qEQOes2OyQByZsK-ogDe1VQ1dQn2Ibc,4850
-svc_infra/docs/api.md,sha256=AlPL9kBS6_dM0NrOteDQ9WqalSfKf_p9_zdy1CtGJdU,2384
+svc_infra/docs/adr/0012-generic-file-storage.md,sha256=jzDm9aLzzqbIn7sHKYb-tzGUEOjebbAOIrx_V96DUHM,15397
+svc_infra/docs/api.md,sha256=PbTbp6LSNfKgxKAgDmirRaUgNsycM9ddeE2ZkAful8U,6076
 svc_infra/docs/auth.md,sha256=PRl9G4UW78cT_7c4koVh5NDlheNAr02CpJT2YFbEXto,1333
 svc_infra/docs/billing.md,sha256=MArKbKhzFwMLaOMABNDRtT_2D0zGgyFZ2r54o-99v68,7884
 svc_infra/docs/cache.md,sha256=mwObz4F_9KwGO2ftcYSvWfieYekJs1dva3UzaIHFI64,2454
@@ -258,8 +260,10 @@ svc_infra/docs/ops.md,sha256=Tvqg5qvJ2RqLWbHAUlH3JPgK8yn-lNpyHb-lIpYUakg,1508
 svc_infra/docs/rate-limiting.md,sha256=j1df-D9t5sJtv6HVaATfSxQrv5S8zLTo2N9S_3HHzkM,4156
 svc_infra/docs/repo-review.md,sha256=REz2zT1LXURQUB9yZiBn9ICXHkpdpBSJCRTp-AKH190,8153
 svc_infra/docs/security.md,sha256=DMOg58ZvFrmRyGDmuAYdJtF_q22DnhK4d3_q6ijdry0,7081
+svc_infra/docs/storage.md,sha256=6_u2HAdiLJeJU0KcuXoZCo8oqP0YLyQF3zp3yiOhkL0,26218
 svc_infra/docs/tenancy.md,sha256=k7mOvIQWZF1b3-CETyE8UsIPdhGjNNa9Q4j5AXAqQrQ,2023
 svc_infra/docs/timeouts-and-resource-limits.md,sha256=M3AoKQlCmMvgXAGOoBWeVQ-0Fwm0t5Zz0dYUCf54Mbo,6559
+svc_infra/docs/versioned-integrations.md,sha256=bpEAOexrBqHiajTCBn6mQMp83jr2HUGtdatk1zmpwcA,4681
 svc_infra/docs/webhooks.md,sha256=b0F2vnkxOWdYWwCBAo9i39xdi11nbgEtl05JE3e0lrE,3671
 svc_infra/dx/add.py,sha256=FAnLGP0BPm_q_VCEcpUwfj-b0mEse988chh9DHeS7GU,1474
 svc_infra/dx/changelog.py,sha256=9SD29ZzKzbGTA6kHQXiPLtb7uueL1wrRiiLE2qMzz8o,1941
@@ -331,12 +335,22 @@ svc_infra/security/headers.py,sha256=CcdNC1j14oj6LS8-TMW2K-l7LIfXYlL12mw8R32b2R0
 svc_infra/security/hibp.py,sha256=dTJXEdUNxLpxS5Eq8vUuWUdzDXh_b3_OjmvlR5jPHvQ,2894
 svc_infra/security/jwt_rotation.py,sha256=VXPRQeSCoJEl2kQnIJZELWIS0-rGUZrxCdH4Fr47vig,1767
 svc_infra/security/lockout.py,sha256=KdKN9FWejuzHRKS9jXzi_f3-lNF6QZyiEDBXCej0LSY,2804
-svc_infra/security/models.py,sha256=US5jxgeZf7C_tWW3QZRj5RTuRZE_yS6RHZBEK0ea9tA,9535
+svc_infra/security/models.py,sha256=sX6bDpLdv1pUypIANab3eISL-bFPbqcPQTxodrQrYHU,10003
+svc_infra/security/oauth_models.py,sha256=zrJnf69xB3mwEcV2wZIIBJkXcjpESv_1vBFexSTgLbM,2125
 svc_infra/security/org_invites.py,sha256=TuXEstZp5GfRQflz8OR2q6m7GpSOonSxm0QU7ojkbH0,3876
 svc_infra/security/passwords.py,sha256=zUiduHFOWYT7USzMkBntI3-LNEyVMn2A78CvaKpB7MY,2459
 svc_infra/security/permissions.py,sha256=gQijNud6jh0yY2JIuZazAVE8i9zYhbwAR6tSjbncv5o,4556
 svc_infra/security/session.py,sha256=JkClqoZ-Moo9yqHzCREXMVSpzyjbn2Zh6zCjtWO93Ik,2848
 svc_infra/security/signed_cookies.py,sha256=2t61BgjsBaTzU46bt7IUJo7lwDRE9_eS4vmAQXJ8mlY,2219
+svc_infra/storage/__init__.py,sha256=M_djbln1nv1YhOANHu_XZDi_fZ37hTnp2qMXiHYOlJo,2828
+svc_infra/storage/add.py,sha256=tGAvuUEgb5HbQ-8sGCTVLeykZJtIfj1R9hRHLVYxjeo,8214
+svc_infra/storage/backends/__init__.py,sha256=zlbPU7TbDKg-VhWSZaRA-qTHfD17bx-ZQ445kDqlB-o,205
+svc_infra/storage/backends/local.py,sha256=r6dPrq0VcMbQBdY1U9m-FrXOteD8iIipnLx-JH9Q9xc,10655
+svc_infra/storage/backends/memory.py,sha256=AQg7GNkpZcL9rdPtCu7tPMB3XKlIfho65YDw_lC_gcA,6467
+svc_infra/storage/backends/s3.py,sha256=hUpzpNKFSkLBC5vaGz-Sm_t3F3sb70jf7W7xViBnkic,11284
+svc_infra/storage/base.py,sha256=l6BmP9TVAwCZbjHtXaaLSnCSvYzTAx0Du2zadnQRmmg,6225
+svc_infra/storage/easy.py,sha256=DDUUqFKN2gJBtuU4ftF6HMqePMDjkJIOPV436iceANA,6138
+svc_infra/storage/settings.py,sha256=FmHEPGm4QSRooekQF6zgaGEeunmmXJO08mIBaNXEksk,6620
 svc_infra/utils.py,sha256=VX1yjTx61-YvAymyRhGy18DhybiVdPddiYD_FlKTbJU,952
 svc_infra/webhooks/__init__.py,sha256=fvPhbFoS6whoT67DWp43pL3m1o-et104vwqxunCUAPA,398
 svc_infra/webhooks/add.py,sha256=u9Spfwg0ztQmXg7uXP1sZ9-_qwnagnW4UnV9HvQtPwc,12191
@@ -344,7 +358,7 @@ svc_infra/webhooks/fastapi.py,sha256=BCNvGNxukf6dC2a4i-6en-PrjBGV19YvCWOot5lXWsA
 svc_infra/webhooks/router.py,sha256=6JvAVPMEth_xxHX-IsIOcyMgHX7g1H0OVxVXKLuMp9w,1596
 svc_infra/webhooks/service.py,sha256=hh-rw0otc00vipZ998XaV5mHsk0IDGYqon0FnhaGr60,2229
 svc_infra/webhooks/signing.py,sha256=NCwdZzmravUe7HVIK_uXK0qqf12FG-_MVsgPvOw6lsM,784
-svc_infra-0.1.640.dist-info/METADATA,sha256=X32-JTUY-XFNvnNmOFE9kAGy5mvlLmbHmM_wcsfWZJg,9543
-svc_infra-0.1.640.dist-info/WHEEL,sha256=IYZQI976HJqqOpQU6PHkJ8fb3tMNBFjg-Cn-pwAbaFM,88
-svc_infra-0.1.640.dist-info/entry_points.txt,sha256=6x_nZOsjvn6hRZsMgZLgTasaCSKCgAjsGhACe_CiP0U,48
-svc_infra-0.1.640.dist-info/RECORD,,
+svc_infra-0.1.664.dist-info/METADATA,sha256=28hGY3d7_RmbdcyvA4O0L4vnPhmIacLgJodyh1bU2kQ,10070
+svc_infra-0.1.664.dist-info/WHEEL,sha256=IYZQI976HJqqOpQU6PHkJ8fb3tMNBFjg-Cn-pwAbaFM,88
+svc_infra-0.1.664.dist-info/entry_points.txt,sha256=6x_nZOsjvn6hRZsMgZLgTasaCSKCgAjsGhACe_CiP0U,48
+svc_infra-0.1.664.dist-info/RECORD,,