tempest-fastapi-sdk 0.36.0__tar.gz → 0.37.0__tar.gz

{tempest_fastapi_sdk-0.36.0 → tempest_fastapi_sdk-0.37.0}/CHANGELOG.md

@@ -5,6 +5,40 @@ All notable changes to **tempest-fastapi-sdk** are listed below.
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/),
 and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [0.37.0] — 2026-06-07
+
+### Added
+
+- **`[sqlite]` and `[postgres]` install extras** for the async database
+  drivers. The SDK keeps `sqlalchemy[asyncio]` as a core dependency but
+  ships **no DBAPI driver by default** — the driver is a deploy choice.
+  Install `tempest-fastapi-sdk[sqlite]` (`aiosqlite`, dev default) or
+  `[postgres]` (`asyncpg`, production); both are bundled into `[all]`.
+  Without one, the engine raised `ModuleNotFoundError` on first
+  connection.
+
+### Changed
+
+- **`tempest new` scaffold now ships a working DB driver.** The generated
+  `pyproject.toml` pins `aiosqlite` as a **runtime** dependency (it was
+  previously dev-only, so the default SQLite URL failed under a no-dev
+  install) and carries a commented `asyncpg` line next to it, ready to
+  uncomment when switching `DATABASE_URL` to PostgreSQL — matching the
+  commented Postgres URL already in `.env.example`.
+
+- **`tempest new` / `tempest generate --docker`: credentials now resolve
+  from `.env`, not hardcoded in the compose.** Every `environment:` block
+  in the generated `docker-compose.yaml` now uses the `${VAR:-default}`
+  form so Docker Compose reads the value from the `.env` next to the
+  compose file, keeping secrets out of a VCS-tracked compose. The
+  `:-default` preserves zero-config dev boot before `.env.example` is
+  copied to `.env`. Affected variables: `POSTGRES_USER` /
+  `POSTGRES_PASSWORD` / `POSTGRES_DB`, `RABBITMQ_DEFAULT_USER` /
+  `RABBITMQ_DEFAULT_PASS` / `RABBITMQ_DEFAULT_VHOST`, `MINIO_ROOT_USER` /
+  `MINIO_ROOT_PASSWORD` (plus the MinIO bootstrap container's `mc alias`).
+  `env_block_for` now emits these credential keys into `.env.example` so
+  the generated `.env` carries them with their defaults.
+
 ## [0.36.0] — 2026-06-06
 
 Admin panel brought to Django-admin parity: the list view, write CRUD,

{tempest_fastapi_sdk-0.36.0 → tempest_fastapi_sdk-0.37.0}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: tempest-fastapi-sdk
-Version: 0.36.0
+Version: 0.37.0
 Summary: Shared FastAPI building blocks: base schemas, ORM model, async repository, exceptions, pagination and settings — the conventions used across Tempest projects.
 Project-URL: Homepage, https://github.com/mauriciobenjamin700/tempest-fastapi-sdk
 Project-URL: Repository, https://github.com/mauriciobenjamin700/tempest-fastapi-sdk
@@ -32,6 +32,8 @@ Requires-Dist: jinja2>=3.1.0; extra == 'admin'
 Provides-Extra: all
 Requires-Dist: aiofiles>=24.1.0; extra == 'all'
 Requires-Dist: aiosmtplib>=4.0.0; extra == 'all'
+Requires-Dist: aiosqlite>=0.20.0; extra == 'all'
+Requires-Dist: asyncpg>=0.30.0; extra == 'all'
 Requires-Dist: bcrypt>=5.0.0; extra == 'all'
 Requires-Dist: cryptography>=42.0.0; extra == 'all'
 Requires-Dist: email-validator>=2.0.0; extra == 'all'
@@ -68,10 +70,14 @@ Provides-Extra: mfa
 Requires-Dist: pyotp>=2.9.0; extra == 'mfa'
 Provides-Extra: minio
 Requires-Dist: minio>=7.2.0; extra == 'minio'
+Provides-Extra: postgres
+Requires-Dist: asyncpg>=0.30.0; extra == 'postgres'
 Provides-Extra: prometheus
 Requires-Dist: prometheus-client>=0.20.0; extra == 'prometheus'
 Provides-Extra: queue
 Requires-Dist: faststream[rabbit]>=0.5.30; extra == 'queue'
+Provides-Extra: sqlite
+Requires-Dist: aiosqlite>=0.20.0; extra == 'sqlite'
 Provides-Extra: tasks
 Requires-Dist: taskiq-aio-pika>=0.4.0; extra == 'tasks'
 Requires-Dist: taskiq>=0.11.0; extra == 'tasks'
@@ -174,7 +180,7 @@ Via `pyproject.toml`:
 
 ```toml
 dependencies = [
-    "tempest-fastapi-sdk>=0.36.0",
+    "tempest-fastapi-sdk>=0.37.0",
 ]
 ```
 
@@ -199,13 +205,18 @@ Feature-rich helpers pull in third-party dependencies that you only need when yo
 | `[http]` | `httpx` | `HTTPClient`, `RetryPolicy`, `CircuitOpenError`, OAuth2 / OIDC providers |
 | `[prometheus]` | `prometheus-client` | `PrometheusMiddleware`, `make_prometheus_router`, `make_prometheus_registry` |
 | `[mfa]` | `pyotp` | `TOTPHelper` + MFA/2FA endpoints on the bundled auth flow |
+| `[sqlite]` | `aiosqlite` | SQLite async driver for `sqlite+aiosqlite://` URLs (dev default) |
+| `[postgres]` | `asyncpg` | PostgreSQL async driver for `postgresql+asyncpg://` URLs (production) |
 | `[all]` | everything above | every helper |
 
 ```bash
 pip install "tempest-fastapi-sdk[auth,upload]"   # only what the service uses
-pip install "tempest-fastapi-sdk[all]"           # or pull everything
+pip install "tempest-fastapi-sdk[postgres]"       # add the async DB driver you deploy with
+pip install "tempest-fastapi-sdk[all]"            # or pull everything
 ```
 
+> **The SDK ships no database driver by default.** `sqlalchemy[asyncio]` is core, but the async DBAPI is your deploy choice — add `[sqlite]` (`aiosqlite`, dev default) or `[postgres]` (`asyncpg`, production). Without one, the engine raises `ModuleNotFoundError` for the driver on first connection. Services scaffolded with `tempest new` already pin `aiosqlite` and carry a commented `asyncpg` line in `pyproject.toml`.
+
 Since `0.7.1` every optional dependency is imported lazily at first instantiation, so `import tempest_fastapi_sdk` works with any subset of extras — instantiating a helper whose extra is missing raises `ImportError` with a clear hint pointing at the right one.
 
 ---
@@ -3403,7 +3414,7 @@ tempest user list --admin                             # admins only
 
 ### Admin site recipe
 
-Django-style management UI mounted under `/admin`. Operators sign in with a user row from the database (no separate admin password store) and browse every registered model from the browser, so the database port can stay closed on private networks. Phase 1 ships read-only views; create/edit/delete land in 0.14.0 and inline + bulk actions in 0.15.0.
+Django-style management UI mounted under `/admin`. Operators sign in with a user row from the database (no separate admin password store) and browse every registered model from the browser, so the database port can stay closed on private networks. The panel is feature-complete (Django-admin parity): a list view with search / per-field filters / sortable columns, full CRUD (create / edit / delete), bulk actions, CSV/JSON export, FK-select widgets, a dashboard with live row counts + system metrics, optional TOTP MFA at login, and an audit trail stamping `created_by` / `updated_by`. Still on the roadmap: file upload and inline/related editing.
 
 Requires the `[admin]` extra:
 
@@ -3522,11 +3533,19 @@ app.include_router(
 `make_admin_router` mounts:
 
 - `GET  /admin/login`, `POST /admin/login`, `POST /admin/logout` — auth flow.
-- `GET  /admin/` — dashboard listing every registered admin.
-- `GET  /admin/m/{slug}/` — list view with pagination + free-text search (`?q=`) + per-field filters (`?filter_<field>=value`).
-- `GET  /admin/m/{slug}/{identity}` — read-only detail view.
+- `GET/POST /admin/mfa` — TOTP challenge (second factor) between password and access, for principals with MFA enabled.
+- `GET  /admin/` — dashboard: a card per model with **row count** + Browse/New, plus a **metrics panel** (CPU/RAM/disk via `MetricsUtils`; on by default, omitted without the `[metrics]` extra, disabled with `make_admin_router(show_metrics=False)`).
+- `GET  /admin/m/{slug}/` — list view with pagination + free-text search (`?q=`) + per-field filters (`?filter_<field>=value`) + clickable **column sorting** (`?sort=<column>&dir=asc|desc`).
+- `GET  /admin/m/{slug}/export.csv` / `export.json` — **export** the current result set (honoring search/filters/sort) as CSV or JSON (row cap via `make_admin_router(export_max_rows=…)`, default 5000).
+- `POST /admin/m/{slug}/bulk` — **bulk actions** (delete / activate / deactivate) on selected rows.
+- `GET/POST /admin/m/{slug}/new` — **create** a record (when `can_create`).
+- `GET  /admin/m/{slug}/{identity}` — detail view with Edit/Delete buttons + an Audit panel.
+- `GET/POST /admin/m/{slug}/{identity}/edit` — **edit** a record (when `can_edit`).
+- `POST /admin/m/{slug}/{identity}/delete` — **delete** a record (when `can_delete`).
 - `GET  /admin/static/{path}` — bundled CSS/HTMX assets.
 
+Write operations (create/edit/delete/bulk) are gated by the `AdminModel` flags `can_create` / `can_edit` / `can_delete` (all `True` by default; a disabled view returns `404`), carry a per-session CSRF token validated server-side, derive form widgets from the column type, render an FK-select dropdown for foreign keys whose target has a registered `AdminModel`, and stamp `created_by` / `updated_by` (from `AuditMixin`) with the acting admin's id.
+
 #### 4. Session security defaults
 
 `SignedCookieSessionStore` uses `itsdangerous.TimestampSigner` (HMAC-SHA256) to sign a single cookie:
@@ -3535,7 +3554,7 @@ app.include_router(
 - `Secure` flagged when `cookie_secure=True` (default; flip off in local HTTP dev).
 - `SameSite=Lax` (`"lax"`/`"strict"`/`"none"` accepted).
 - Default lifetime `8h`; expired or tampered cookies are rejected silently.
-- Per-session CSRF token is generated at login and required by every form POST (only `logout` in Phase 1).
+- Per-session CSRF token is generated at login and required by every form POST (login, logout, create, edit, delete, bulk actions).
 - `secret_key` must be at least 32 bytes — short keys raise `ValueError` at construction time.
 
 #### 5. Plug in a custom auth backend

{tempest_fastapi_sdk-0.36.0 → tempest_fastapi_sdk-0.37.0}/README.md

@@ -89,7 +89,7 @@ Via `pyproject.toml`:
 
 ```toml
 dependencies = [
-    "tempest-fastapi-sdk>=0.36.0",
+    "tempest-fastapi-sdk>=0.37.0",
 ]
 ```
 
@@ -114,13 +114,18 @@ Feature-rich helpers pull in third-party dependencies that you only need when yo
 | `[http]` | `httpx` | `HTTPClient`, `RetryPolicy`, `CircuitOpenError`, OAuth2 / OIDC providers |
 | `[prometheus]` | `prometheus-client` | `PrometheusMiddleware`, `make_prometheus_router`, `make_prometheus_registry` |
 | `[mfa]` | `pyotp` | `TOTPHelper` + MFA/2FA endpoints on the bundled auth flow |
+| `[sqlite]` | `aiosqlite` | SQLite async driver for `sqlite+aiosqlite://` URLs (dev default) |
+| `[postgres]` | `asyncpg` | PostgreSQL async driver for `postgresql+asyncpg://` URLs (production) |
 | `[all]` | everything above | every helper |
 
 ```bash
 pip install "tempest-fastapi-sdk[auth,upload]"   # only what the service uses
-pip install "tempest-fastapi-sdk[all]"           # or pull everything
+pip install "tempest-fastapi-sdk[postgres]"       # add the async DB driver you deploy with
+pip install "tempest-fastapi-sdk[all]"            # or pull everything
 ```
 
+> **The SDK ships no database driver by default.** `sqlalchemy[asyncio]` is core, but the async DBAPI is your deploy choice — add `[sqlite]` (`aiosqlite`, dev default) or `[postgres]` (`asyncpg`, production). Without one, the engine raises `ModuleNotFoundError` for the driver on first connection. Services scaffolded with `tempest new` already pin `aiosqlite` and carry a commented `asyncpg` line in `pyproject.toml`.
+
 Since `0.7.1` every optional dependency is imported lazily at first instantiation, so `import tempest_fastapi_sdk` works with any subset of extras — instantiating a helper whose extra is missing raises `ImportError` with a clear hint pointing at the right one.
 
 ---
@@ -3318,7 +3323,7 @@ tempest user list --admin                             # admins only
 
 ### Admin site recipe
 
-Django-style management UI mounted under `/admin`. Operators sign in with a user row from the database (no separate admin password store) and browse every registered model from the browser, so the database port can stay closed on private networks. Phase 1 ships read-only views; create/edit/delete land in 0.14.0 and inline + bulk actions in 0.15.0.
+Django-style management UI mounted under `/admin`. Operators sign in with a user row from the database (no separate admin password store) and browse every registered model from the browser, so the database port can stay closed on private networks. The panel is feature-complete (Django-admin parity): a list view with search / per-field filters / sortable columns, full CRUD (create / edit / delete), bulk actions, CSV/JSON export, FK-select widgets, a dashboard with live row counts + system metrics, optional TOTP MFA at login, and an audit trail stamping `created_by` / `updated_by`. Still on the roadmap: file upload and inline/related editing.
 
 Requires the `[admin]` extra:
 
@@ -3437,11 +3442,19 @@ app.include_router(
 `make_admin_router` mounts:
 
 - `GET  /admin/login`, `POST /admin/login`, `POST /admin/logout` — auth flow.
-- `GET  /admin/` — dashboard listing every registered admin.
-- `GET  /admin/m/{slug}/` — list view with pagination + free-text search (`?q=`) + per-field filters (`?filter_<field>=value`).
-- `GET  /admin/m/{slug}/{identity}` — read-only detail view.
+- `GET/POST /admin/mfa` — TOTP challenge (second factor) between password and access, for principals with MFA enabled.
+- `GET  /admin/` — dashboard: a card per model with **row count** + Browse/New, plus a **metrics panel** (CPU/RAM/disk via `MetricsUtils`; on by default, omitted without the `[metrics]` extra, disabled with `make_admin_router(show_metrics=False)`).
+- `GET  /admin/m/{slug}/` — list view with pagination + free-text search (`?q=`) + per-field filters (`?filter_<field>=value`) + clickable **column sorting** (`?sort=<column>&dir=asc|desc`).
+- `GET  /admin/m/{slug}/export.csv` / `export.json` — **export** the current result set (honoring search/filters/sort) as CSV or JSON (row cap via `make_admin_router(export_max_rows=…)`, default 5000).
+- `POST /admin/m/{slug}/bulk` — **bulk actions** (delete / activate / deactivate) on selected rows.
+- `GET/POST /admin/m/{slug}/new` — **create** a record (when `can_create`).
+- `GET  /admin/m/{slug}/{identity}` — detail view with Edit/Delete buttons + an Audit panel.
+- `GET/POST /admin/m/{slug}/{identity}/edit` — **edit** a record (when `can_edit`).
+- `POST /admin/m/{slug}/{identity}/delete` — **delete** a record (when `can_delete`).
 - `GET  /admin/static/{path}` — bundled CSS/HTMX assets.
 
+Write operations (create/edit/delete/bulk) are gated by the `AdminModel` flags `can_create` / `can_edit` / `can_delete` (all `True` by default; a disabled view returns `404`), carry a per-session CSRF token validated server-side, derive form widgets from the column type, render an FK-select dropdown for foreign keys whose target has a registered `AdminModel`, and stamp `created_by` / `updated_by` (from `AuditMixin`) with the acting admin's id.
+
 #### 4. Session security defaults
 
 `SignedCookieSessionStore` uses `itsdangerous.TimestampSigner` (HMAC-SHA256) to sign a single cookie:
@@ -3450,7 +3463,7 @@ app.include_router(
 - `Secure` flagged when `cookie_secure=True` (default; flip off in local HTTP dev).
 - `SameSite=Lax` (`"lax"`/`"strict"`/`"none"` accepted).
 - Default lifetime `8h`; expired or tampered cookies are rejected silently.
-- Per-session CSRF token is generated at login and required by every form POST (only `logout` in Phase 1).
+- Per-session CSRF token is generated at login and required by every form POST (login, logout, create, edit, delete, bulk actions).
 - `secret_key` must be at least 32 bytes — short keys raise `ValueError` at construction time.
 
 #### 5. Plug in a custom auth backend

{tempest_fastapi_sdk-0.36.0 → tempest_fastapi_sdk-0.37.0}/docs/installation.en.md

@@ -30,6 +30,8 @@ Feature-rich helpers pull in third-party dependencies that you only need when yo
 | `[http]` | `httpx` | `HTTPClient` + `RetryPolicy` + circuit-breaker |
 | `[prometheus]` | `prometheus-client` | `PrometheusMiddleware`, `make_prometheus_router`, `make_prometheus_registry` |
 | `[mfa]` | `pyotp` | `TOTPHelper` + MFA/2FA (TOTP) endpoints on the bundled auth flow |
+| `[sqlite]` | `aiosqlite` | SQLite async driver for `sqlite+aiosqlite://` URLs (dev default) |
+| `[postgres]` | `asyncpg` | PostgreSQL async driver for `postgresql+asyncpg://` URLs (production) |
 | `[all]` | everything above | every helper |
 
 === "Subset (recommended)"
@@ -47,17 +49,25 @@ Feature-rich helpers pull in third-party dependencies that you only need when yo
 === "uv add"
 
     ```bash
-    uv add "tempest-fastapi-sdk[auth,upload]>=0.32.0"
+    uv add "tempest-fastapi-sdk[auth,upload,postgres]>=0.37.0"
     ```
 
 === "pyproject.toml"
 
     ```toml
     dependencies = [
-        "tempest-fastapi-sdk[auth,upload]>=0.32.0",
+        "tempest-fastapi-sdk[auth,upload,postgres]>=0.37.0",
     ]
     ```
 
+!!! warning "The SDK ships no database driver by default"
+    `sqlalchemy[asyncio]` is core, but the async DBAPI is your deploy
+    choice: install `[sqlite]` (`aiosqlite`, dev default) or `[postgres]`
+    (`asyncpg`, production). Without one, the engine raises
+    `ModuleNotFoundError` for the driver on first connection. Services
+    scaffolded with `tempest new` already pin `aiosqlite` and carry a
+    commented `asyncpg` line in `pyproject.toml`.
+
 !!! info "Lazy imports"
     Since 0.7.1 every optional dependency is imported lazily at first instantiation, so `import tempest_fastapi_sdk` works even when only a subset of extras is installed. Instantiating a helper whose extra is missing raises `ImportError` with a clear hint pointing at the right extra.
 

{tempest_fastapi_sdk-0.36.0 → tempest_fastapi_sdk-0.37.0}/docs/installation.md

@@ -30,6 +30,8 @@ Os helpers mais ricos puxam dependências de terceiros que só são necessárias
 | `[http]` | `httpx` | `HTTPClient` + `RetryPolicy` + circuit-breaker |
 | `[prometheus]` | `prometheus-client` | `PrometheusMiddleware`, `make_prometheus_router`, `make_prometheus_registry` |
 | `[mfa]` | `pyotp` | `TOTPHelper` + endpoints MFA/2FA (TOTP) do fluxo bundled de auth |
+| `[sqlite]` | `aiosqlite` | driver async SQLite para URLs `sqlite+aiosqlite://` (default de dev) |
+| `[postgres]` | `asyncpg` | driver async PostgreSQL para URLs `postgresql+asyncpg://` (produção) |
 | `[all]` | tudo acima | todos os helpers |
 
 === "Subconjunto (recomendado)"
@@ -47,17 +49,25 @@ Os helpers mais ricos puxam dependências de terceiros que só são necessárias
 === "uv add"
 
     ```bash
-    uv add "tempest-fastapi-sdk[auth,upload]>=0.32.0"
+    uv add "tempest-fastapi-sdk[auth,upload,postgres]>=0.37.0"
     ```
 
 === "pyproject.toml"
 
     ```toml
     dependencies = [
-        "tempest-fastapi-sdk[auth,upload]>=0.32.0",
+        "tempest-fastapi-sdk[auth,upload,postgres]>=0.37.0",
     ]
     ```
 
+!!! warning "O SDK não traz driver de banco por padrão"
+    `sqlalchemy[asyncio]` é dependência core, mas o DBAPI async é escolha
+    do seu deploy: instale `[sqlite]` (`aiosqlite`, default de dev) ou
+    `[postgres]` (`asyncpg`, produção). Sem nenhum, o engine levanta
+    `ModuleNotFoundError` do driver na primeira conexão. Serviços
+    criados com `tempest new` já pinam `aiosqlite` e carregam uma linha
+    `asyncpg` comentada no `pyproject.toml`.
+
 !!! info "Imports preguiçosos"
     Desde a 0.7.1 toda dependência opcional é importada de forma preguiçosa na primeira instanciação, então `import tempest_fastapi_sdk` funciona mesmo quando só um subconjunto de extras está instalado. Instanciar um helper cujo extra está faltando levanta `ImportError` com uma dica clara apontando para o extra certo.
 

{tempest_fastapi_sdk-0.36.0 → tempest_fastapi_sdk-0.37.0}/docs/recipes/admin.en.md

@@ -1,7 +1,7 @@
 # Admin site
 
 
-Django-style management UI mounted under `/admin`. Operators sign in with a user row from the database (no separate admin password store) and browse every registered model from the browser, so the database port can stay closed on private networks. Phase 1 ships read-only views; create/edit/delete land in 0.14.0 and inline + bulk actions in 0.15.0.
+Django-style management UI mounted under `/admin`. Operators sign in with a user row from the database (no separate admin password store) and browse every registered model from the browser, so the database port can stay closed on private networks. The panel is feature-complete (Django-admin parity): a list view with search / per-field filters / sortable columns, full CRUD (create / edit / delete), bulk actions, CSV/JSON export, FK-select widgets, a dashboard with live row counts + system metrics, optional TOTP MFA at login, and an audit trail stamping `created_by` / `updated_by`. Still on the roadmap: file upload and inline/related editing.
 
 Requires the `[admin]` extra:
 
@@ -155,7 +155,7 @@ app.include_router(
 - `Secure` flagged when `cookie_secure=True` (default; flip off in local HTTP dev).
 - `SameSite=Lax` (`"lax"`/`"strict"`/`"none"` accepted).
 - Default lifetime `8h`; expired or tampered cookies are rejected silently.
-- Per-session CSRF token is generated at login and required by every form POST (only `logout` in Phase 1).
+- Per-session CSRF token is generated at login and required by every form POST (login, logout, create, edit, delete, bulk actions).
 - `secret_key` must be at least 32 bytes — short keys raise `ValueError` at construction time.
 
 #### 5. Plug in a custom auth backend

{tempest_fastapi_sdk-0.36.0 → tempest_fastapi_sdk-0.37.0}/docs/recipes/admin.md

@@ -1,7 +1,7 @@
 # Painel admin
 
 
-UI de gerenciamento no estilo Django montada sob `/admin`. Operadores entram com uma linha de usuário do banco (sem store de senha de admin separado) e navegam por todo modelo registrado pelo navegador, então a porta do banco pode ficar fechada em redes privadas. A Fase 1 entrega views somente leitura; criar/editar/apagar chegam na 0.14.0 e ações inline + em lote na 0.15.0.
+UI de gerenciamento no estilo Django montada sob `/admin`. Operadores entram com uma linha de usuário do banco (sem store de senha de admin separado) e navegam por todo modelo registrado pelo navegador, então a porta do banco pode ficar fechada em redes privadas. O painel é completo (paridade com o Django admin): list view com busca / filtros por campo / colunas ordenáveis, CRUD completo (criar / editar / excluir), ações em massa, export CSV/JSON, widgets FK-select, dashboard com contagens de linhas + métricas de sistema, MFA TOTP opcional no login, e trilha de auditoria carimbando `created_by` / `updated_by`. Ainda no roadmap: upload de arquivo e edição inline/relacionada.
 
 Requer o extra `[admin]`:
 
@@ -155,7 +155,7 @@ app.include_router(
 - `Secure` marcado quando `cookie_secure=True` (padrão; desligue no dev HTTP local).
 - `SameSite=Lax` (`"lax"`/`"strict"`/`"none"` aceitos).
 - Tempo de vida padrão `8h`; cookies expirados ou adulterados são rejeitados silenciosamente.
-- Um token CSRF por sessão é gerado no login e exigido por todo POST de formulário (apenas `logout` na Fase 1).
+- Um token CSRF por sessão é gerado no login e exigido por todo POST de formulário (login, logout, criar, editar, excluir, ações em massa).
 - `secret_key` deve ter ao menos 32 bytes — chaves curtas levantam `ValueError` no momento da construção.
 
 #### 5. Plugue um backend de auth customizado

{tempest_fastapi_sdk-0.36.0 → tempest_fastapi_sdk-0.37.0}/docs/recipes/cli.en.md

@@ -56,9 +56,9 @@ Since v0.25.0 the scaffold generates a `docker-compose.yaml` carrying **only** t
 
 | Extra | Container | Exposed port(s) |
 |-------|-----------|-----------------|
-| (always) | `postgres:16-alpine` | 5432 |
-| `[cache]` | `redis:7-alpine` | 6379 |
-| `[queue]` / `[tasks]` | `rabbitmq:3-management-alpine` | 5672 (AMQP) + 15672 (UI) |
+| (always) | `postgres:18-alpine` | 5432 |
+| `[cache]` | `redis:8-alpine` | 6379 |
+| `[queue]` / `[tasks]` | `rabbitmq:4-management-alpine` | 5672 (AMQP) + 15672 (UI) |
 | `[minio]` | `minio/minio` + bootstrap mc | 9000 (API) + 9001 (Console) |
 | `[email]` | `mailhog/mailhog` | 1025 (SMTP) + 8025 (UI) |
 
@@ -73,6 +73,18 @@ Generates:
 - `postgres`, `redis`, `minio` (+ `minio-bootstrap` creating the `uploads` bucket), `mailhog`
 - `.env.example` with `REDIS_URL`, `MINIO_*`, `EMAIL_HOST=localhost`, `EMAIL_PORT=1025`
 
+!!! info "Credentials come from `.env`, not hardcoded in the compose"
+    As of v0.37.0, no credential is written straight into
+    `docker-compose.yaml`. Each `environment:` block uses the
+    `${VAR:-default}` form, and Docker Compose resolves `VAR` from the
+    `.env` next to the compose file. The `:-default` keeps the stack
+    bootable before you copy `.env.example` to `.env` — but set real
+    secrets in `.env` for any non-throwaway deploy. Variables read by
+    compose: `POSTGRES_USER` / `POSTGRES_PASSWORD` / `POSTGRES_DB`,
+    `RABBITMQ_DEFAULT_USER` / `RABBITMQ_DEFAULT_PASS` /
+    `RABBITMQ_DEFAULT_VHOST`, `MINIO_ROOT_USER` / `MINIO_ROOT_PASSWORD`
+    — all with their defaults already in `.env.example`.
+
 Boot it all:
 
 ```bash

{tempest_fastapi_sdk-0.36.0 → tempest_fastapi_sdk-0.37.0}/docs/recipes/cli.md

@@ -56,9 +56,9 @@ Desde a v0.25.0 o scaffold gera um `docker-compose.yaml` com **apenas** os servi
 
 | Extra | Container subido | Porta(s) exposta(s) |
 |-------|------------------|---------------------|
-| (sempre) | `postgres:16-alpine` | 5432 |
-| `[cache]` | `redis:7-alpine` | 6379 |
-| `[queue]` / `[tasks]` | `rabbitmq:3-management-alpine` | 5672 (AMQP) + 15672 (UI) |
+| (sempre) | `postgres:18-alpine` | 5432 |
+| `[cache]` | `redis:8-alpine` | 6379 |
+| `[queue]` / `[tasks]` | `rabbitmq:4-management-alpine` | 5672 (AMQP) + 15672 (UI) |
 | `[minio]` | `minio/minio` + bootstrap mc | 9000 (API) + 9001 (Console) |
 | `[email]` | `mailhog/mailhog` | 1025 (SMTP) + 8025 (UI) |
 
@@ -73,6 +73,18 @@ Gera:
 - `postgres`, `redis`, `minio` (+ `minio-bootstrap` que cria o bucket `uploads`), `mailhog`
 - `.env.example` com `REDIS_URL`, `MINIO_*`, `EMAIL_HOST=localhost`, `EMAIL_PORT=1025`
 
+!!! info "Credenciais vêm do `.env`, não estão hardcoded no compose"
+    A partir da v0.37.0, nenhuma credencial é gravada direto no
+    `docker-compose.yaml`. Cada bloco `environment:` usa a forma
+    `${VAR:-default}`, e o Docker Compose resolve `VAR` a partir do
+    `.env` ao lado do compose. O `:-default` mantém o stack subindo
+    antes de você copiar `.env.example` para `.env` — mas defina
+    segredos reais no `.env` para qualquer deploy não-descartável.
+    Variáveis lidas pelo compose: `POSTGRES_USER` / `POSTGRES_PASSWORD`
+    / `POSTGRES_DB`, `RABBITMQ_DEFAULT_USER` / `RABBITMQ_DEFAULT_PASS`
+    / `RABBITMQ_DEFAULT_VHOST`, `MINIO_ROOT_USER` /
+    `MINIO_ROOT_PASSWORD` — todas com seus padrões já no `.env.example`.
+
 Subir tudo:
 
 ```bash

{tempest_fastapi_sdk-0.36.0 → tempest_fastapi_sdk-0.37.0}/docs/recipes/uploads.en.md

@@ -151,4 +151,4 @@ url = await storage.presigned_url("logo.png", expires=timedelta(hours=1))
 
 ## When to use presigned PUT directly
 
-For files > 50 MB, skip the in-memory buffer — have the client `PUT` straight to MinIO via a presigned URL. See [Storage MinIO/S3](storage.md#presigned-url--direct-browser-upload).
+For files > 50 MB, skip the in-memory buffer — have the client `PUT` straight to MinIO via a presigned URL. See [Storage MinIO/S3](storage.md#presigned-url-direct-browser-upload).

{tempest_fastapi_sdk-0.36.0 → tempest_fastapi_sdk-0.37.0}/docs/roadmap.en.md

@@ -3,7 +3,7 @@
 What the SDK **doesn't ship yet** + what already landed. Sorted by impact, not implementation order — the current release is pulled by business pressure, not list position.
 
 !!! tip "What the SDK already covers"
-    Full auth (JWT/bearer/role/permission/X-Token + bundled signup/activate/login/reset via `UserAuthService` + `make_auth_router`), OAuth2/OIDC (Google/GitHub + generic), CSRF middleware, DB (`AsyncDatabaseManager` + `BaseRepository` + bulk ops + `AlembicHelper` + `BaseModel` + `BaseUserModel` + `BaseUserTokenModel` + audit/soft-delete mixins + Alembic hook reordering base columns), standardized exceptions, structured logging + per-level files + `/logs` endpoint, metrics (CPU/RAM/GPU/Disk + Prometheus `/metrics` + `PrometheusMiddleware`), rate limiting, idempotency (`IdempotencyMiddleware` + memory/Redis stores), body-size limit, pagination (offset + cursor), settings mixins with `title`/`description`/`examples`, SSE, throttle, local upload/download + pluggable storage (`LocalUploadStorage` + `MinIOUploadStorage`), MinIO/S3 (`AsyncMinIOClient`), WebPush, webhook signatures, BR validators (CPF/CNPJ/CEP/phone), admin panel (Jinja + HTMX), email (SMTP + Jinja2 templates), Redis cache, FastStream queue, TaskIQ tasks, hardened static files, server runner, health, tool-spec router, request-id middleware, CORS, typed HTTP client (`HTTPClient` httpx wrapper with retry/backoff/circuit-breaker), full CLI (`tempest new`, `tempest generate --docker`, `tempest db <subcommand>`, `tempest user <subcommand>`, quality gates).
+    Full auth (JWT/bearer/role/permission/X-Token + bundled signup/activate/login/reset via `UserAuthService` + `make_auth_router`), OAuth2/OIDC (Google/GitHub + generic), CSRF middleware, DB (`AsyncDatabaseManager` + `BaseRepository` + bulk ops + `AlembicHelper` + `BaseModel` + `BaseUserModel` + `BaseUserTokenModel` + audit/soft-delete mixins + Alembic hook reordering base columns), standardized exceptions, structured logging + per-level files + `/logs` endpoint, metrics (CPU/RAM/GPU/Disk + Prometheus `/metrics` + `PrometheusMiddleware`), rate limiting, idempotency (`IdempotencyMiddleware` + memory/Redis stores), body-size limit, pagination (offset + cursor), settings mixins with `title`/`description`/`examples`, SSE, throttle, local upload/download + pluggable storage (`LocalUploadStorage` + `MinIOUploadStorage`), MinIO/S3 (`AsyncMinIOClient`), WebPush, webhook signatures, BR validators (CPF/CNPJ/CEP/phone), admin panel (Jinja + HTMX, Django-admin parity — list view with search/filters/sortable columns, full CRUD, bulk actions, CSV/JSON export, FK-select widgets, dashboard with counts + metrics, TOTP MFA at login, `created_by`/`updated_by` audit trail), email (SMTP + Jinja2 templates), Redis cache, FastStream queue, TaskIQ tasks, hardened static files, server runner, health, tool-spec router, request-id middleware, CORS, typed HTTP client (`HTTPClient` httpx wrapper with retry/backoff/circuit-breaker), full CLI (`tempest new`, `tempest generate --docker` — compose credentials resolved from `.env` via `${VAR:-default}`, not hardcoded —, `tempest db <subcommand>`, `tempest user <subcommand>`, quality gates).
 
 ## Tier S — every serious API needs these
 
@@ -32,7 +32,7 @@ What the SDK **doesn't ship yet** + what already landed. Sorted by impact, not i
 | 2FA / TOTP (`pyotp` wrapper + recovery codes) | ✅ v0.35.0 | `TOTPHelper` + `UserAuthService.mfa_*` + `BaseUserRecoveryCodeModel` |
 | `tempest db` + `tempest user` CLI | ✅ v0.30.0 | `tempest_fastapi_sdk.cli.db` / `cli.user` |
 | `BaseRepository.bulk_update` (filters + values) | ✅ pre-existing | `BaseRepository.bulk_update` |
-| **Multi-tenant scope** — `TenantScopedRepository(tenant_id)` auto-injecting `WHERE tenant_id = …` on every repository query | ❌ planned v0.37.0 | — |
+| **Multi-tenant scope** — `TenantScopedRepository(tenant_id)` auto-injecting `WHERE tenant_id = …` on every repository query | ❌ pending | — |
 
 ## Tier B — when the service grows
 

{tempest_fastapi_sdk-0.36.0 → tempest_fastapi_sdk-0.37.0}/docs/roadmap.md

@@ -3,7 +3,7 @@
 Esta página lista o que o SDK **ainda não oferece** + o que já foi entregue. Ordenado por impacto, não por ordem de implementação — a release atual é puxada pela pressão de negócio, não pela posição na lista.
 
 !!! tip "O que o SDK já cobre"
-    Auth completa (JWT/bearer/role/permission/X-Token + bundled signup/activate/login/reset via `UserAuthService` + `make_auth_router`), OAuth2/OIDC (Google/GitHub + genérico), CSRF middleware, DB (`AsyncDatabaseManager` + `BaseRepository` + bulk ops + `AlembicHelper` + `BaseModel` + `BaseUserModel` + `BaseUserTokenModel` + mixins de auditoria/soft-delete + Alembic hook que reordena colunas base), exceções padronizadas, logging estruturado + arquivos por nível + endpoint `/logs`, métricas (CPU/RAM/GPU/Disco + Prometheus `/metrics` + `PrometheusMiddleware`), rate limiting, idempotência (`IdempotencyMiddleware` + memory/Redis stores), body-size limit, paginação (offset + cursor), settings por mixin com `title`/`description`/`examples`, SSE, throttle, upload/download local + storage pluggável (`LocalUploadStorage` + `MinIOUploadStorage`), MinIO/S3 (`AsyncMinIOClient`), WebPush, assinatura de webhook, validadores BR (CPF/CNPJ/CEP/telefone), painel admin (Jinja + HTMX), email (SMTP + Jinja2 templates), cache Redis, fila FastStream, tarefas TaskIQ, hardened static files, runner de servidor, health, tool-spec router, request-id middleware, CORS, HTTP client typed (`HTTPClient` httpx wrapper com retry/backoff/circuit-breaker), CLI completo (`tempest new`, `tempest generate --docker`, `tempest db <subcommand>`, `tempest user <subcommand>`, quality gates).
+    Auth completa (JWT/bearer/role/permission/X-Token + bundled signup/activate/login/reset via `UserAuthService` + `make_auth_router`), OAuth2/OIDC (Google/GitHub + genérico), CSRF middleware, DB (`AsyncDatabaseManager` + `BaseRepository` + bulk ops + `AlembicHelper` + `BaseModel` + `BaseUserModel` + `BaseUserTokenModel` + mixins de auditoria/soft-delete + Alembic hook que reordena colunas base), exceções padronizadas, logging estruturado + arquivos por nível + endpoint `/logs`, métricas (CPU/RAM/GPU/Disco + Prometheus `/metrics` + `PrometheusMiddleware`), rate limiting, idempotência (`IdempotencyMiddleware` + memory/Redis stores), body-size limit, paginação (offset + cursor), settings por mixin com `title`/`description`/`examples`, SSE, throttle, upload/download local + storage pluggável (`LocalUploadStorage` + `MinIOUploadStorage`), MinIO/S3 (`AsyncMinIOClient`), WebPush, assinatura de webhook, validadores BR (CPF/CNPJ/CEP/telefone), painel admin (Jinja + HTMX, paridade com Django admin — list view com busca/filtros/colunas ordenáveis, CRUD completo, ações em massa, export CSV/JSON, widgets FK-select, dashboard com contagens + métricas, MFA TOTP no login, trilha de auditoria `created_by`/`updated_by`), email (SMTP + Jinja2 templates), cache Redis, fila FastStream, tarefas TaskIQ, hardened static files, runner de servidor, health, tool-spec router, request-id middleware, CORS, HTTP client typed (`HTTPClient` httpx wrapper com retry/backoff/circuit-breaker), CLI completo (`tempest new`, `tempest generate --docker` — credenciais do compose resolvidas do `.env` via `${VAR:-default}`, não hardcoded —, `tempest db <subcommand>`, `tempest user <subcommand>`, quality gates).
 
 ## Tier S — toda API séria precisa
 
@@ -32,7 +32,7 @@ Esta página lista o que o SDK **ainda não oferece** + o que já foi entregue.
 | 2FA / TOTP (`pyotp` wrapper + recovery codes) | ✅ v0.35.0 | `TOTPHelper` + `UserAuthService.mfa_*` + `BaseUserRecoveryCodeModel` |
 | `tempest db` + `tempest user` CLI | ✅ v0.30.0 | `tempest_fastapi_sdk.cli.db` / `cli.user` |
 | `BaseRepository.bulk_update` (filters + values) | ✅ pré-existente | `BaseRepository.bulk_update` |
-| **Escopo multi-tenant** — `TenantScopedRepository(tenant_id)` auto-injetando `WHERE tenant_id = …` em toda query do repository | ❌ planejado v0.37.0 | — |
+| **Escopo multi-tenant** — `TenantScopedRepository(tenant_id)` auto-injetando `WHERE tenant_id = …` em toda query do repository | ❌ pendente | — |
 
 ## Tier B — quando o serviço crescer
 

{tempest_fastapi_sdk-0.36.0 → tempest_fastapi_sdk-0.37.0}/pyproject.toml

@@ -1,6 +1,6 @@
 [project]
 name = "tempest-fastapi-sdk"
-version = "0.36.0"
+version = "0.37.0"
 description = "Shared FastAPI building blocks: base schemas, ORM model, async repository, exceptions, pagination and settings — the conventions used across Tempest projects."
 readme = "README.md"
 requires-python = ">=3.11"
@@ -87,6 +87,12 @@ prometheus = [
 mfa = [
     "pyotp>=2.9.0",
 ]
+sqlite = [
+    "aiosqlite>=0.20.0",
+]
+postgres = [
+    "asyncpg>=0.30.0",
+]
 all = [
     "bcrypt>=5.0.0",
     "pyjwt>=2.12.1",
@@ -108,6 +114,8 @@ all = [
     "prometheus-client>=0.20.0",
     "pyotp>=2.9.0",
     "email-validator>=2.0.0",
+    "aiosqlite>=0.20.0",
+    "asyncpg>=0.30.0",
 ]
 
 [project.urls]
@@ -203,6 +211,9 @@ ignore = [
 "tests/*" = ["S101"]
 "**/__init__.py" = ["F401"]
 "tempest_fastapi_sdk/db/repository.py" = ["UP006", "UP035"]
+# Renders YAML compose snippets as f-string literals — long lines
+# (healthcheck commands, `mc` entrypoints) are content, not code.
+"tempest_fastapi_sdk/cli/docker_compose.py" = ["E501"]
 
 [tool.ruff.format]
 quote-style = "double"

{tempest_fastapi_sdk-0.36.0 → tempest_fastapi_sdk-0.37.0}/tempest_fastapi_sdk/__init__.py

@@ -242,7 +242,7 @@ from tempest_fastapi_sdk.websockets import (
     make_websocket_router,
 )
 
-__version__: str = "0.36.0"
+__version__: str = "0.37.0"
 
 __all__: list[str] = [
     "BASE_COLUMN_ORDER",

{tempest_fastapi_sdk-0.36.0 → tempest_fastapi_sdk-0.37.0}/tempest_fastapi_sdk/cli/_templates/pyproject.toml.tmpl

@@ -8,6 +8,11 @@ authors = [{ name = "you", email = "you@example.com" }]
 dependencies = [
     "__SDK_DEP__",
     "uvicorn>=0.30.0",
+    # SQLite async driver — the default DATABASE_URL uses sqlite+aiosqlite.
+    "aiosqlite>=0.20.0",
+    # PostgreSQL async driver — docker-compose always ships Postgres.
+    # Uncomment when you switch DATABASE_URL to postgresql+asyncpg://...
+    # "asyncpg>=0.30.0",
 ]
 
 [dependency-groups]
@@ -18,7 +23,6 @@ dev = [
     "pytest-cov>=6.0.0",
     "ruff>=0.8.0",
     "httpx>=0.28.1",
-    "aiosqlite>=0.20.0",
 ]
 
 [build-system]