tempest-fastapi-sdk 0.44.0__tar.gz → 0.45.0__tar.gz

{tempest_fastapi_sdk-0.44.0 → tempest_fastapi_sdk-0.45.0}/CHANGELOG.md

@@ -5,6 +5,28 @@ All notable changes to **tempest-fastapi-sdk** are listed below.
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/),
 and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [0.45.0] — 2026-06-11
+
+### Added
+
+- **`TenantScopedRepository[ModelType]`** — a `BaseRepository` locked
+  to a single tenant for shared-schema multi-tenancy. Bind a
+  `tenant_id` (and optional `tenant_field`, default `"tenant_id"`) at
+  construction; it injects `WHERE tenant_id = ?` into **every** read
+  (`get`/`get_or_none`/`get_by_id`/`exists`/`first`/`list`/`count`/
+  `paginate`/`cursor_paginate`/`delete_many`) and stamps the tenant id
+  onto **every** write (`add`/`add_all`). `delete` / `delete_batch` add
+  the tenant predicate to the `DELETE` so a guessed id from another
+  tenant matches nothing — cross-tenant access (even probing existence
+  by id) is impossible through the repository. The constructor raises
+  `AttributeError` at boot if the model lacks the tenant column.
+  `tenant_column` property exposes the mapped column for custom queries.
+
+### Docs
+
+- New bilingual recipe **Multi-tenant**, added to the nav (under
+  Database), the recipes index, and the API reference.
+
 ## [0.44.0] — 2026-06-11
 
 ### Added

{tempest_fastapi_sdk-0.44.0 → tempest_fastapi_sdk-0.45.0}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: tempest-fastapi-sdk
-Version: 0.44.0
+Version: 0.45.0
 Summary: Shared FastAPI building blocks: base schemas, ORM model, async repository, exceptions, pagination and settings — the conventions used across Tempest projects.
 Project-URL: Homepage, https://github.com/mauriciobenjamin700/tempest-fastapi-sdk
 Project-URL: Repository, https://github.com/mauriciobenjamin700/tempest-fastapi-sdk
@@ -238,7 +238,7 @@ Since `0.7.1` every optional dependency is imported lazily at first instantiatio
 | Module | Exports |
 | --- | --- |
 | `tempest_fastapi_sdk.schemas` | `BaseSchema`, `BaseResponseSchema`, `BasePaginationFilterSchema`, `BasePaginationSchema[T]`, `CursorPaginationFilterSchema`, `CursorPaginationSchema`, `LogEntrySchema`, `encode_cursor`, `decode_cursor`, `build_pagination_link_header` |
-| `tempest_fastapi_sdk.db` | `BaseModel`, `BaseUserModel`, `BaseUserTokenModel`, `BaseUserRecoveryCodeModel`, `make_user_recovery_code_model`, `UserTokenPurpose`, `BaseRepository[ModelType]`, `AsyncDatabaseManager`, `AlembicHelper`, `NAMING_CONVENTION`, `AuditMixin`, `SoftDeleteMixin`, `MFAMixin`, `BASE_COLUMN_ORDER`, `reorder_base_columns_first`, `compose_hooks`, `SlowQueryLogger`, `BaseOutboxModel`, `OutboxRelay`, `OutboxStatus`, `BaseRepository.save_with_outbox` |
+| `tempest_fastapi_sdk.db` | `BaseModel`, `BaseUserModel`, `BaseUserTokenModel`, `BaseUserRecoveryCodeModel`, `make_user_recovery_code_model`, `UserTokenPurpose`, `BaseRepository[ModelType]`, `TenantScopedRepository[ModelType]`, `AsyncDatabaseManager`, `AlembicHelper`, `NAMING_CONVENTION`, `AuditMixin`, `SoftDeleteMixin`, `MFAMixin`, `BASE_COLUMN_ORDER`, `reorder_base_columns_first`, `compose_hooks`, `SlowQueryLogger`, `BaseOutboxModel`, `OutboxRelay`, `OutboxStatus`, `BaseRepository.save_with_outbox` |
 | `tempest_fastapi_sdk.exceptions` | `AppException`, `NotFoundException`, `ConflictException`, `ValidationException`, `UnauthorizedException`, `ForbiddenException`, `InvalidTokenException`, `ExpiredTokenException`, `FileTooLargeException`, `InvalidFileTypeException`, `TooManyRequestsException` |
 | `tempest_fastapi_sdk.settings` | `BaseAppSettings`, `ServerSettings`, `LogSettings`, `DatabaseSettings`, `RedisSettings`, `RabbitMQSettings`, `JWTSettings`, `CORSSettings`, `EmailSettings`, `UploadSettings`, `TokenSettings`, `WebPushSettings`, `TaskIQSettings`, `MinIOSettings`, `AuthSettings` |
 | `tempest_fastapi_sdk.api` | `register_exception_handlers`, `app_exception_handler`, `apply_cors`, `make_health_router`, `make_logs_router`, `make_prometheus_router`, `make_prometheus_registry`, `PrometheusMiddleware`, `LogSource`, `make_tool_spec_router`, `make_token_dependency`, `make_bearer_token_dependency`, `make_jwt_user_dependency`, `make_role_dependency`, `make_permission_dependency`, `require_x_token`, `run_server`, `RequestIDMiddleware`, `RateLimitMiddleware`, `IdempotencyMiddleware`, `MemoryIdempotencyStore`, `RedisIdempotencyStore`, `BodySizeLimitMiddleware`, `CSRFMiddleware`, `make_csrf_token_dependency`, `WebhookSignatureVerifier`, `RSAWebhookSignatureVerifier`, OAuth2 (`GoogleOAuthClient`, `GitHubOAuthClient`, `OIDCProvider`), `HardenedStaticFiles`, `DEFAULT_STATIC_SECURITY_HEADERS`, `set_cookie`, `clear_cookie`, `SameSite`, `HealthCheck`, `setup_tracing` *(extra: `[otel]`)* |

{tempest_fastapi_sdk-0.44.0 → tempest_fastapi_sdk-0.45.0}/README.md

@@ -136,7 +136,7 @@ Since `0.7.1` every optional dependency is imported lazily at first instantiatio
 | Module | Exports |
 | --- | --- |
 | `tempest_fastapi_sdk.schemas` | `BaseSchema`, `BaseResponseSchema`, `BasePaginationFilterSchema`, `BasePaginationSchema[T]`, `CursorPaginationFilterSchema`, `CursorPaginationSchema`, `LogEntrySchema`, `encode_cursor`, `decode_cursor`, `build_pagination_link_header` |
-| `tempest_fastapi_sdk.db` | `BaseModel`, `BaseUserModel`, `BaseUserTokenModel`, `BaseUserRecoveryCodeModel`, `make_user_recovery_code_model`, `UserTokenPurpose`, `BaseRepository[ModelType]`, `AsyncDatabaseManager`, `AlembicHelper`, `NAMING_CONVENTION`, `AuditMixin`, `SoftDeleteMixin`, `MFAMixin`, `BASE_COLUMN_ORDER`, `reorder_base_columns_first`, `compose_hooks`, `SlowQueryLogger`, `BaseOutboxModel`, `OutboxRelay`, `OutboxStatus`, `BaseRepository.save_with_outbox` |
+| `tempest_fastapi_sdk.db` | `BaseModel`, `BaseUserModel`, `BaseUserTokenModel`, `BaseUserRecoveryCodeModel`, `make_user_recovery_code_model`, `UserTokenPurpose`, `BaseRepository[ModelType]`, `TenantScopedRepository[ModelType]`, `AsyncDatabaseManager`, `AlembicHelper`, `NAMING_CONVENTION`, `AuditMixin`, `SoftDeleteMixin`, `MFAMixin`, `BASE_COLUMN_ORDER`, `reorder_base_columns_first`, `compose_hooks`, `SlowQueryLogger`, `BaseOutboxModel`, `OutboxRelay`, `OutboxStatus`, `BaseRepository.save_with_outbox` |
 | `tempest_fastapi_sdk.exceptions` | `AppException`, `NotFoundException`, `ConflictException`, `ValidationException`, `UnauthorizedException`, `ForbiddenException`, `InvalidTokenException`, `ExpiredTokenException`, `FileTooLargeException`, `InvalidFileTypeException`, `TooManyRequestsException` |
 | `tempest_fastapi_sdk.settings` | `BaseAppSettings`, `ServerSettings`, `LogSettings`, `DatabaseSettings`, `RedisSettings`, `RabbitMQSettings`, `JWTSettings`, `CORSSettings`, `EmailSettings`, `UploadSettings`, `TokenSettings`, `WebPushSettings`, `TaskIQSettings`, `MinIOSettings`, `AuthSettings` |
 | `tempest_fastapi_sdk.api` | `register_exception_handlers`, `app_exception_handler`, `apply_cors`, `make_health_router`, `make_logs_router`, `make_prometheus_router`, `make_prometheus_registry`, `PrometheusMiddleware`, `LogSource`, `make_tool_spec_router`, `make_token_dependency`, `make_bearer_token_dependency`, `make_jwt_user_dependency`, `make_role_dependency`, `make_permission_dependency`, `require_x_token`, `run_server`, `RequestIDMiddleware`, `RateLimitMiddleware`, `IdempotencyMiddleware`, `MemoryIdempotencyStore`, `RedisIdempotencyStore`, `BodySizeLimitMiddleware`, `CSRFMiddleware`, `make_csrf_token_dependency`, `WebhookSignatureVerifier`, `RSAWebhookSignatureVerifier`, OAuth2 (`GoogleOAuthClient`, `GitHubOAuthClient`, `OIDCProvider`), `HardenedStaticFiles`, `DEFAULT_STATIC_SECURITY_HEADERS`, `set_cookie`, `clear_cookie`, `SameSite`, `HealthCheck`, `setup_tracing` *(extra: `[otel]`)* |

{tempest_fastapi_sdk-0.44.0 → tempest_fastapi_sdk-0.45.0}/docs/recipes/index.en.md

@@ -10,6 +10,7 @@ Bite-sized "I want to wire X" walkthroughs. Each page starts with **what problem
 | Theme | Covers |
 | --- | --- |
 | **[Database »](database.md)** | `BaseRepository`, `BaseModel`, `AuditMixin` / `SoftDeleteMixin`, cursor pagination, Alembic helper |
+| **[Multi-tenant »](multi-tenant.md)** | `TenantScopedRepository` — `tenant_id` isolation on every query |
 | **[HTTP layer »](http.md)** | `apply_cors`, `RequestIDMiddleware`, `RateLimitMiddleware`, `make_health_router`, JWT / role / permission dependencies, webhook signature verifier, pagination Link headers, tool-spec router |
 | **[HTTP client (outbound) »](http-client.md)** | `HTTPClient` — typed httpx with retry/backoff, circuit-breaker, X-Request-ID; `RetryPolicy`, `CircuitOpenError` |
 | **[Cache »](cache.md)** | `AsyncRedisManager`, `@cached` decorator |

{tempest_fastapi_sdk-0.44.0 → tempest_fastapi_sdk-0.45.0}/docs/recipes/index.md

@@ -10,6 +10,7 @@ Passo a passo curtos no estilo "quero conectar X". Cada página começa com **qu
 | Tema | Cobre |
 | --- | --- |
 | **[Banco de dados »](database.md)** | `BaseRepository`, `BaseModel`, `AuditMixin` / `SoftDeleteMixin`, paginação por cursor, helper de Alembic |
+| **[Multi-tenant »](multi-tenant.md)** | `TenantScopedRepository` — isolamento por `tenant_id` em toda query |
 | **[Camada HTTP »](http.md)** | `apply_cors`, `RequestIDMiddleware`, `RateLimitMiddleware`, `make_health_router`, dependências de JWT / role / permissão, verificador de assinatura de webhook, headers Link de paginação, router de tool-spec |
 | **[HTTP client (saída) »](http-client.md)** | `HTTPClient` — httpx tipado com retry/backoff, circuit-breaker, X-Request-ID; `RetryPolicy`, `CircuitOpenError` |
 | **[Cache »](cache.md)** | `AsyncRedisManager`, decorator `@cached` |

tempest_fastapi_sdk-0.45.0/docs/recipes/multi-tenant.en.md

@@ -0,0 +1,120 @@
+# Multi-tenant (TenantScopedRepository)
+
+In a **shared-schema** multi-tenant database, every tenant's rows live in
+the same table, told apart by a `tenant_id` column. The danger is obvious:
+forget **one** `WHERE tenant_id = ?` and tenant A reads (or deletes)
+tenant B's data. `TenantScopedRepository` takes that risk off the table —
+you bind the `tenant_id` at construction and it injects the filter into
+**every** read and stamps it onto **every** write. Call sites can't get it
+wrong.
+
+!!! info "Where this fits"
+    It's a `BaseRepository` that behaves identically — same API
+    ([Database](database.md)). The difference is invisible to the caller:
+    tenant scoping is automatic.
+
+## 1. The model needs a tenant column
+
+```python
+from uuid import UUID
+
+from sqlalchemy import String, Uuid
+from sqlalchemy.orm import Mapped, mapped_column
+
+from tempest_fastapi_sdk import BaseModel
+
+
+class OrderModel(BaseModel):
+    """Order — isolated per tenant."""
+
+    __tablename__ = "order"
+
+    tenant_id: Mapped[UUID] = mapped_column(Uuid(), nullable=False, index=True)
+    total: Mapped[int] = mapped_column(nullable=False)
+```
+
+## 2. Build the repository bound to the tenant
+
+The `tenant_id` usually comes from the request's JWT / session / header:
+
+```python
+from uuid import UUID
+
+from sqlalchemy.ext.asyncio import AsyncSession
+
+from tempest_fastapi_sdk import TenantScopedRepository
+
+from src.db.models import OrderModel
+
+
+def get_order_repo(
+    session: AsyncSession, tenant_id: UUID
+) -> TenantScopedRepository[OrderModel]:
+    """Order repository locked to the request's tenant."""
+    return TenantScopedRepository(session, model=OrderModel, tenant_id=tenant_id)
+```
+
+If the model has no `tenant_id` column, the constructor raises
+`AttributeError` immediately — you catch the mistake at boot, not in
+production. Different column name? Pass `tenant_field="org_id"`.
+
+## 3. Use it like any repository
+
+Every read comes filtered; every write comes stamped:
+
+```python
+from uuid import UUID
+
+from tempest_fastapi_sdk import TenantScopedRepository
+
+from src.db.models import OrderModel
+
+
+async def list_orders(repo: TenantScopedRepository[OrderModel]) -> list[OrderModel]:
+    """Only THIS tenant's orders — no manual WHERE."""
+    return await repo.list()  # WHERE tenant_id = <bound tenant>
+
+
+async def create_order(
+    repo: TenantScopedRepository[OrderModel], total: int
+) -> OrderModel:
+    """tenant_id is stamped automatically on insert."""
+    return await repo.add(OrderModel(total=total))
+```
+
+### Cross-tenant access is impossible, even by id
+
+`get_by_id`, `delete` and `delete_batch` are scoped too. An id from another
+tenant simply **doesn't match** — indistinguishable from a row that never
+existed:
+
+```python
+from uuid import UUID
+
+from tempest_fastapi_sdk import TenantScopedRepository
+
+from src.db.models import OrderModel
+
+
+async def fetch(repo: TenantScopedRepository[OrderModel], order_id: UUID) -> OrderModel:
+    """Raises NotFound if the order belongs to ANOTHER tenant — no existence leak."""
+    return await repo.get_by_id(order_id)
+```
+
+`delete_many({})` deletes only **this** tenant's rows, never the whole
+table — the tenant predicate is always added.
+
+!!! warning "Raw queries are your responsibility"
+    A subclass that builds its own `select(...)` without going through
+    `_apply_filters` — or a pre-built `query=` passed to `paginate` — is
+    **not** auto-scoped. In those cases, add
+    `.where(self.tenant_column == self.tenant_id)` yourself.
+
+## Recap
+
+- The model declares `tenant_id` (or another column, via `tenant_field=`).
+- `TenantScopedRepository(session, model=..., tenant_id=...)` injects the
+  filter into every read and stamps every write.
+- `get_by_id` / `delete` / `delete_batch` / `delete_many` are scoped —
+  cross-tenant access is impossible through the repository methods.
+- The constructor validates the tenant column exists at boot.

tempest_fastapi_sdk-0.45.0/docs/recipes/multi-tenant.md

@@ -0,0 +1,120 @@
+# Multi-tenant (TenantScopedRepository)
+
+Num banco multi-tenant de **schema compartilhado**, as linhas de todos os
+tenants moram na mesma tabela, separadas por uma coluna `tenant_id`. O
+perigo é claro: esquecer **um** `WHERE tenant_id = ?` e o tenant A lê (ou
+apaga) os dados do tenant B. `TenantScopedRepository` tira esse risco da
+mesa — você amarra o `tenant_id` na construção e ele injeta o filtro em
+**toda** leitura e carimba em **toda** escrita. Os call sites não têm como
+errar.
+
+!!! info "Onde isso encaixa"
+    É um `BaseRepository` que se comporta igualzinho — mesma API
+    ([Banco de dados](database.md)). A diferença é invisível pro chamador:
+    o escopo de tenant é automático.
+
+## 1. O modelo precisa da coluna de tenant
+
+```python
+from uuid import UUID
+
+from sqlalchemy import String, Uuid
+from sqlalchemy.orm import Mapped, mapped_column
+
+from tempest_fastapi_sdk import BaseModel
+
+
+class OrderModel(BaseModel):
+    """Pedido — isolado por tenant."""
+
+    __tablename__ = "order"
+
+    tenant_id: Mapped[UUID] = mapped_column(Uuid(), nullable=False, index=True)
+    total: Mapped[int] = mapped_column(nullable=False)
+```
+
+## 2. Construa o repositório amarrado ao tenant
+
+O `tenant_id` normalmente vem do JWT / sessão / header do request:
+
+```python
+from uuid import UUID
+
+from sqlalchemy.ext.asyncio import AsyncSession
+
+from tempest_fastapi_sdk import TenantScopedRepository
+
+from src.db.models import OrderModel
+
+
+def get_order_repo(
+    session: AsyncSession, tenant_id: UUID
+) -> TenantScopedRepository[OrderModel]:
+    """Repositório de pedidos travado no tenant do request."""
+    return TenantScopedRepository(session, model=OrderModel, tenant_id=tenant_id)
+```
+
+Se o modelo não tiver a coluna `tenant_id`, o construtor levanta
+`AttributeError` na hora — você descobre o erro no boot, não em produção.
+Coluna com outro nome? Passe `tenant_field="org_id"`.
+
+## 3. Use como qualquer repositório
+
+Toda leitura já vem filtrada; toda escrita já vem carimbada:
+
+```python
+from uuid import UUID
+
+from tempest_fastapi_sdk import TenantScopedRepository
+
+from src.db.models import OrderModel
+
+
+async def list_orders(repo: TenantScopedRepository[OrderModel]) -> list[OrderModel]:
+    """Só os pedidos DESTE tenant — sem WHERE manual."""
+    return await repo.list()  # WHERE tenant_id = <tenant amarrado>
+
+
+async def create_order(
+    repo: TenantScopedRepository[OrderModel], total: int
+) -> OrderModel:
+    """tenant_id é carimbado automaticamente no insert."""
+    return await repo.add(OrderModel(total=total))
+```
+
+### Acesso cruzado é impossível, mesmo por id
+
+`get_by_id`, `delete` e `delete_batch` também são escopados. Um id de outro
+tenant simplesmente **não casa** — é indistinguível de uma linha que nunca
+existiu:
+
+```python
+from uuid import UUID
+
+from tempest_fastapi_sdk import TenantScopedRepository
+
+from src.db.models import OrderModel
+
+
+async def fetch(repo: TenantScopedRepository[OrderModel], order_id: UUID) -> OrderModel:
+    """Levanta NotFound se o pedido for de OUTRO tenant — sem vazar existência."""
+    return await repo.get_by_id(order_id)
+```
+
+`delete_many({})` apaga só as linhas **deste** tenant, nunca a tabela
+inteira — o predicado de tenant é sempre adicionado.
+
+!!! warning "Queries cruas são responsabilidade sua"
+    Uma subclasse que monta o próprio `select(...)` sem passar por
+    `_apply_filters` — ou um `query=` pré-montado passado pro `paginate` —
+    **não** é escopado automaticamente. Nesses casos, adicione
+    `.where(self.tenant_column == self.tenant_id)` você mesmo.
+
+## Recap
+
+- O modelo declara `tenant_id` (ou outra coluna, via `tenant_field=`).
+- `TenantScopedRepository(session, model=..., tenant_id=...)` injeta o
+  filtro em toda leitura e carimba toda escrita.
+- `get_by_id` / `delete` / `delete_batch` / `delete_many` são escopados —
+  acesso cruzado entre tenants é impossível pelos métodos do repositório.
+- Construtor valida a existência da coluna de tenant no boot.

{tempest_fastapi_sdk-0.44.0 → tempest_fastapi_sdk-0.45.0}/docs/reference.md

@@ -31,6 +31,7 @@ Gerada automaticamente a partir das docstrings do SDK via [`mkdocstrings`](https
 ::: tempest_fastapi_sdk.db.user_recovery_code_model.BaseUserRecoveryCodeModel
 ::: tempest_fastapi_sdk.db.user_recovery_code_model.make_user_recovery_code_model
 ::: tempest_fastapi_sdk.db.repository.BaseRepository
+::: tempest_fastapi_sdk.db.tenant.TenantScopedRepository
 ::: tempest_fastapi_sdk.db.mixins.SoftDeleteMixin
 ::: tempest_fastapi_sdk.db.mixins.AuditMixin
 ::: tempest_fastapi_sdk.db.mixins.MFAMixin

{tempest_fastapi_sdk-0.44.0 → tempest_fastapi_sdk-0.45.0}/mkdocs.yml

@@ -86,6 +86,7 @@ plugins:
             Tutorial: Tutorial
             Receitas: Recipes
             Banco de dados: Database
+            Multi-tenant: Multi-tenant
             Camada HTTP: HTTP layer
             "HTTP client (saída)": "HTTP client (outbound)"
             Cache: Cache
@@ -200,6 +201,7 @@ nav:
   - Receitas:
       - recipes/index.md
       - Banco de dados: recipes/database.md
+      - Multi-tenant: recipes/multi-tenant.md
       - Camada HTTP: recipes/http.md
       - "HTTP client (saída)": recipes/http-client.md
       - Cache: recipes/cache.md

{tempest_fastapi_sdk-0.44.0 → tempest_fastapi_sdk-0.45.0}/pyproject.toml

@@ -1,6 +1,6 @@
 [project]
 name = "tempest-fastapi-sdk"
-version = "0.44.0"
+version = "0.45.0"
 description = "Shared FastAPI building blocks: base schemas, ORM model, async repository, exceptions, pagination and settings — the conventions used across Tempest projects."
 readme = "README.md"
 requires-python = ">=3.11"

{tempest_fastapi_sdk-0.44.0 → tempest_fastapi_sdk-0.45.0}/tempest_fastapi_sdk/__init__.py

@@ -109,6 +109,7 @@ from tempest_fastapi_sdk.db import (
     OutboxStatus,
     SlowQueryLogger,
     SoftDeleteMixin,
+    TenantScopedRepository,
     UserTokenPurpose,
     compose_hooks,
     make_user_recovery_code_model,
@@ -247,7 +248,7 @@ from tempest_fastapi_sdk.websockets import (
     make_websocket_router,
 )
 
-__version__: str = "0.44.0"
+__version__: str = "0.45.0"
 
 __all__: list[str] = [
     "BASE_COLUMN_ORDER",
@@ -387,6 +388,7 @@ __all__: list[str] = [
     "SystemMetrics",
     "TOTPHelper",
     "TaskIQSettings",
+    "TenantScopedRepository",
     "ThrottleBackend",
     "ThrottleStatus",
     "TokenSettings",

{tempest_fastapi_sdk-0.44.0 → tempest_fastapi_sdk-0.45.0}/tempest_fastapi_sdk/db/__init__.py

@@ -26,6 +26,9 @@ from tempest_fastapi_sdk.db.outbox import OutboxRelay as OutboxRelay
 from tempest_fastapi_sdk.db.outbox import OutboxStatus as OutboxStatus
 from tempest_fastapi_sdk.db.repository import BaseRepository as BaseRepository
 from tempest_fastapi_sdk.db.slow_query import SlowQueryLogger as SlowQueryLogger
+from tempest_fastapi_sdk.db.tenant import (
+    TenantScopedRepository as TenantScopedRepository,
+)
 from tempest_fastapi_sdk.db.user_model import BaseUserModel as BaseUserModel
 from tempest_fastapi_sdk.db.user_recovery_code_model import (
     BaseUserRecoveryCodeModel as BaseUserRecoveryCodeModel,
@@ -58,6 +61,7 @@ __all__: list[str] = [
     "OutboxStatus",
     "SlowQueryLogger",
     "SoftDeleteMixin",
+    "TenantScopedRepository",
     "UserTokenPurpose",
     "compose_hooks",
     "make_user_recovery_code_model",