PyPI - tempest-fastapi-sdk - Versions diffs - 0.89.0__tar.gz → 0.91.0__tar.gz - Mend

tempest-fastapi-sdk 0.89.0tar.gz → 0.91.0tar.gz

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (494) hide show

{tempest_fastapi_sdk-0.89.0 → tempest_fastapi_sdk-0.91.0}/CHANGELOG.md RENAMED Viewed

@@ -5,6 +5,87 @@ All notable changes to **tempest-fastapi-sdk** are listed below.
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/),
 and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
+## [0.91.0] — 2026-07-05
+### Added
+- **SSE backpressure — bounded queue + overflow policy.**
+  `EventStream` (and `SSEBroker`-created streams) now cap the buffered
+  events at `max_queue` (default `1000`) instead of growing without
+  limit when a client stalls. When the buffer fills, `overflow` decides
+  what gives:
+  - `"drop_oldest"` (default) — evict the stalest event, keep the
+    freshest data.
+  - `"drop_newest"` — discard the incoming event, keep the backlog.
+  - `"block"` — apply real backpressure (the producer waits for a slot).
+  `EventStream.dropped_events` counts events lost to overflow for
+  metrics / logs. `max_queue=0` restores the pre-0.91 unbounded
+  behavior. The `close()` sentinel is never dropped or blocked, so a
+  stream can always terminate. `SSEBroker(max_queue=..., overflow=...)`
+  applies the same policy to every stream it opens.
+- **SSE lifecycle helpers — no more hand-rolled `try/finally`.**
+  - `sse_response(..., on_disconnect=...)` runs a cleanup callback
+    (awaited if a coroutine) when the client disconnects or the stream
+    ends — the one place guaranteed to fire — so a bound producer task
+    is cancelled or a channel unregistered without boilerplate.
+  - `EventStream.response(*, on_disconnect=..., status_code=...,
+    headers=...)` wraps `stream()` in an SSE response in one call.
+  - `SSEBroker.response(channel, ...)` bundles the whole per-connection
+    lifecycle: `register` + `sse_response` + `unregister`-on-disconnect.
+    This removes the leak-prone manual wrapper the recipe used to need.
+- **JWT via query string for cookieless clients.**
+  `make_bearer_token_dependency` and `make_jwt_user_dependency` gained a
+  `query_param` argument (e.g. `query_param="access_token"`). Token
+  lookup order becomes header → cookie → query string. This unblocks
+  browser `EventSource` (SSE), whose constructor accepts neither headers
+  nor a body. Documented with a security warning: use short-lived access
+  tokens only, over TLS, and scrub the value from access logs. Prefer a
+  session cookie (`withCredentials`) whenever the client shares the
+  API's origin.
+- **`OverflowPolicy`** is exported from `tempest_fastapi_sdk.sse` and the
+  package root.
+### Fixed
+- `tempest_fastapi_sdk/sse/__init__.py` re-exports now use the explicit
+  `X as X` alias form required by the repo's re-export convention (was a
+  structural defect flagged by strict type-checkers).
+## [0.90.0] — 2026-07-04
+### Added
+- **Unified file store (`FileStoreUtils`).** A single facade over the
+  three pieces a service usually wires by hand — `UploadUtils`
+  (validate + persist), `DownloadUtils` (serve bytes through the API)
+  and the presigned-URL helpers of `AsyncMinIOClient` — behind one
+  object with one configuration, targeting one storage backend.
+  - The backend is picked once from `source`: a directory path for
+    local disk (`[upload]` extra), or an `AsyncMinIOClient` for
+    MinIO/S3 (`[minio]` extra).
+  - Convenience surface: `save` / `replace` / `delete` / `exists`,
+    `download` / `file_response` / `stream` / `resolve`, `validate`,
+    and `presigned_get_url` / `presigned_put_url` (the latter return
+    `None` on the local backend, keeping the call site uniform).
+  - Escape hatches for the internal pieces: `uploader`, `downloader`,
+    `backend` and `client`.
+  - A single `UploadStorage` backend is built and shared with the
+    upload half; on MinIO the same client instance is reused by the
+    download half, so the connection pool is shared, not duplicated.
+- **`UploadUtils` accepts an injected backend.** New keyword-only
+  `backend: UploadStorage | None` bypasses the `source`-based backend
+  selection, letting `FileStoreUtils` build one backend and share it.
+  `source` is now optional when `backend` is given; passing neither
+  raises `ValueError`. The `[upload]` extra is only required when the
+  local backend is actually selected (MinIO-only use no longer needs
+  `aiofiles`).
+### Docs
+- New bilingual recipe **File store (unificado) / Unified file store**
+  (`docs/recipes/file-store.md` + `.en.md`) and an API-reference stub
+  for `FileStoreUtils` (plus `DownloadUtils`).
 ## [0.89.0] — 2026-07-04
 ### Added

{tempest_fastapi_sdk-0.89.0 → tempest_fastapi_sdk-0.91.0}/CLAUDE.md RENAMED Viewed

@@ -55,7 +55,9 @@ without the docs being green.
 The SDK currently covers (Sep 2025+, post-v0.31.x):
-- **Auth** — JWT/bearer/role/permission/X-Token deps, full
+- **Auth** — JWT/bearer/role/permission/X-Token deps (JWT deps
+  read the token from header → cookie → query string via
+  `query_param=`, for cookieless `EventSource`/SSE clients), full
   bundled flow (`UserAuthService` + `make_auth_router` covering
   signup/activate/login/password-reset), `BaseUserModel` +
   `BaseUserTokenModel`, OAuth2/OIDC providers
@@ -88,9 +90,14 @@ The SDK currently covers (Sep 2025+, post-v0.31.x):
 - **Pagination** — offset + cursor.
 - **Settings mixins** — every `*Settings` carries
   `title`/`description`/`examples` on every field.
-- **SSE** — `EventStream`, `ServerSentEvent`, `sse_response`, and
-  `SSEBroker` (per-channel fan-out; in-memory single-process, or
-  multi-worker via an injected Redis pub/sub bridge — same call site).
+- **SSE** — `EventStream` (bounded queue + `overflow` backpressure —
+  `drop_oldest`/`drop_newest`/`block`, `dropped_events` counter,
+  `max_queue=0` to disable), `ServerSentEvent`, `sse_response`
+  (`on_disconnect=` cleanup), `EventStream.response`, and `SSEBroker`
+  (per-channel fan-out; `SSEBroker.response(channel)` bundles
+  register + response + unregister-on-disconnect; in-memory
+  single-process, or multi-worker via an injected Redis pub/sub bridge
+  — same call site).
 - **Throttle** — `AttemptThrottle` (any `ThrottleBackend`, e.g.
   `redis.asyncio.Redis`; no in-memory backend bundled).
 - **Base CRUD layers** — `BaseService[Repo, Resp, UpdateT]` and
@@ -123,8 +130,11 @@ The SDK currently covers (Sep 2025+, post-v0.31.x):
   `tempestweb` imported lazily so `import tempest_fastapi_sdk` never
   needs the extra.
 - **Upload** — `UploadUtils` with pluggable backends
-  (`LocalUploadStorage`, `MinIOUploadStorage`), download helpers,
-  presigned URLs.
+  (`LocalUploadStorage`, `MinIOUploadStorage`, opt-in injected via
+  `backend=`), download helpers, presigned URLs, plus `FileStoreUtils`
+  — a unified facade bundling upload + download + presign over one
+  shared backend (`uploader`/`downloader`/`backend`/`client` escape
+  hatches).
 - **MinIO / S3** — `AsyncMinIOClient` via `[minio]` extra
   (bucket lifecycle, object I/O, streaming download, presigned
   URLs).

{tempest_fastapi_sdk-0.89.0 → tempest_fastapi_sdk-0.91.0}/PKG-INFO RENAMED Viewed

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: tempest-fastapi-sdk
-Version: 0.89.0
+Version: 0.91.0
 Summary: Shared FastAPI building blocks: base schemas, ORM model, async repository, exceptions, pagination and settings — the conventions used across Tempest projects.
 Project-URL: Homepage, https://github.com/mauriciobenjamin700/tempest-fastapi-sdk
 Project-URL: Repository, https://github.com/mauriciobenjamin700/tempest-fastapi-sdk
@@ -119,7 +119,7 @@ Description-Content-Type: text/markdown
 > 💡 `uv run mkdocs serve` (ou `make docs-serve`) é só para preview local — em produção use as URLs do GitHub Pages acima. / For local preview only — in production use the GitHub Pages URLs above.
-Shared FastAPI/SQLAlchemy/Pydantic building blocks used across Tempest projects: base schemas, ORM model, async repository, pagination, settings, exceptions, Alembic helper, FastStream/TaskIQ broker managers, Redis cache, Server-Sent Events, Web Push, a Django-style **admin site** (`AdminSite` + `AdminModel`), **typed SSR pages** (`Page` + `html_response`, HTMX-ready), and the utility classes (`PasswordUtils`, `JWTUtils`, `EmailUtils`, `UploadUtils`, `DownloadUtils`, `MetricsUtils`, `LogUtils`).
+Shared FastAPI/SQLAlchemy/Pydantic building blocks used across Tempest projects: base schemas, ORM model, async repository, pagination, settings, exceptions, Alembic helper, FastStream/TaskIQ broker managers, Redis cache, Server-Sent Events, Web Push, a Django-style **admin site** (`AdminSite` + `AdminModel`), **typed SSR pages** (`Page` + `html_response`, HTMX-ready), and the utility classes (`PasswordUtils`, `JWTUtils`, `EmailUtils`, `UploadUtils`, `DownloadUtils`, `FileStoreUtils`, `MetricsUtils`, `LogUtils`).
 The goal is to start every new backend with the same opinionated foundation already in place — no copy-pasting `BaseModel`, no rewriting the same CRUD repository, no re-inventing the exception envelope.
@@ -200,7 +200,7 @@ Via `pyproject.toml`:
 ```toml
 dependencies = [
-    "tempest-fastapi-sdk>=0.41.0",
+    "tempest-fastapi-sdk>=0.91.0",
 ]
 ```
@@ -258,7 +258,7 @@ Since `0.7.1` every optional dependency is imported lazily at first instantiatio
 | `tempest_fastapi_sdk.services` | `BaseService` |
 | `tempest_fastapi_sdk.core` | `configure_logging`, `JSONFormatter`, `get_request_id`/`set_request_id`/`clear_request_id`, `request_id_ctx`, `BaseStrEnum`, `BaseIntEnum`, `strict_types`/`typed`/`require_annotations` |
 | `tempest_fastapi_sdk.admin` *(extra: `[admin]`)* | `AdminSite`, `AdminModel`, `make_admin_router`, `AdminAuthBackend`, `UserModelAuthBackend`, `AdminAuthError` |
-| `tempest_fastapi_sdk.sse` | `EventStream`, `SSEBroker` (multi-worker fan-out via Redis), `ServerSentEvent`, `sse_response` |
+| `tempest_fastapi_sdk.sse` | `EventStream` (bounded queue + `overflow` backpressure), `SSEBroker` (multi-worker fan-out via Redis, `.response()` lifecycle helper), `ServerSentEvent`, `sse_response` (`on_disconnect=` cleanup) |
 | `tempest_fastapi_sdk.cache` *(extra: `[cache]`)* | `AsyncRedisManager`, `cached` (with `namespace` / `tags`), `CacheInvalidator`, `namespace_registry_key`, `tag_registry_key` |
 | `tempest_fastapi_sdk.flags` | `FeatureFlags`, `FeatureFlagBackend`, `MemoryFeatureFlagBackend`, `EnvFeatureFlagBackend`, `RedisFeatureFlagBackend`, `CompositeFeatureFlagBackend`, `make_flag_dependency`, `coerce_flag` |
 | `tempest_fastapi_sdk.webpush` *(extra: `[webpush]`)* | `WebPushDispatcher`, `WebPushSubscriptionService`, `make_web_push_router`, `WebPushError`, `WebPushGoneError`, `WebPushSubscriptionSchema`, `WebPushKeysSchema`, `WebPushPayloadSchema` |
@@ -269,7 +269,7 @@ Since `0.7.1` every optional dependency is imported lazily at first instantiatio
 | `tempest_fastapi_sdk.tasks` *(extra: `[tasks]`)* | `AsyncTaskBrokerManager` (TaskIQ lifecycle wrapper), `AsyncTaskScheduler` (periodic / cron tasks) |
 | `tempest_fastapi_sdk.vision` *(extra: `[vision]`)* | `Detector`, `Classifier`, `Segmenter` (ONNX, lazy), `DetectionSchema`/`ClassificationSchema`/`SegmentationSchema`/`BoundingBoxSchema`/`ClassProbabilitySchema`, `to_detection_schemas`/`to_classification_schema`/`to_segmentation_schemas` |
 | `tempest_fastapi_sdk.ssr` *(extra: `[ssr]`)* | `Page` (typed component base), `html_response` (widget tree → `HTMLResponse`, full document or HTMX fragment), `make_htmx_router` (serves bundled HTMX locally, no CDN) |
-| `tempest_fastapi_sdk.utils` | `to_utc`, `utcnow`, `modify_dict`, `LogUtils`, `AttemptThrottle`/`ThrottleBackend`/`ThrottleStatus`, `generate_opaque_token`/`hash_opaque_token`/`verify_opaque_token`, `get_client_ip`/`get_client_ip_from_scope`, `PasswordUtils` *(extra: `[auth]`)*, `JWTUtils` *(extra: `[auth]`)*, `TOTPHelper` *(extra: `[mfa]`)*, `EmailUtils` *(extra: `[email]`)*, `UploadUtils`/`sniff_mime` *(extra: `[upload]`)*, `DownloadUtils`/`build_content_disposition` *(no extra)*, `MetricsUtils`/`CPUMetrics`/`MemoryMetrics`/`DiskMetrics`/`GPUMetrics`/`SystemMetrics` *(extra: `[metrics]`)*, validated field types (`PositiveIntField`, `NonNegativeIntField`, `CentsField`, `PortField`, `PositiveFloatField`, `NonNegativeFloatField`, `PercentField`, `RatioField`, `LatitudeField`, `LongitudeField`, `PriceField`, `NonEmptyStrField`, `SlugField`, `HexColorField`), BR regex helpers (`CPFField`, `CNPJField`, `CPFOrCNPJField`, `PhoneBRField`, `CEPField` — old names without the suffix kept as deprecated aliases — `is_valid_*`, `normalize_*`, `only_digits`, `*_PATTERN`), BR states/cities (`UF`, `Region`, `StateBR`, `CityBR`, `ChoiceBR`, `UFField`, `CityNameField`, `list_states`, `get_state`, `cities_by_uf`, `states_by_region`, `uf_choices`/`region_choices`/`city_choices`, `is_valid_uf`/`normalize_uf`, `is_valid_city`/`normalize_city`) |
+| `tempest_fastapi_sdk.utils` | `to_utc`, `utcnow`, `modify_dict`, `LogUtils`, `AttemptThrottle`/`ThrottleBackend`/`ThrottleStatus`, `generate_opaque_token`/`hash_opaque_token`/`verify_opaque_token`, `get_client_ip`/`get_client_ip_from_scope`, `PasswordUtils` *(extra: `[auth]`)*, `JWTUtils` *(extra: `[auth]`)*, `TOTPHelper` *(extra: `[mfa]`)*, `EmailUtils` *(extra: `[email]`)*, `UploadUtils`/`sniff_mime` *(extra: `[upload]`)*, `DownloadUtils`/`build_content_disposition` *(no extra)*, `FileStoreUtils` — unified upload+download+presign facade *(extra: `[upload]` local / `[minio]` MinIO)*, `MetricsUtils`/`CPUMetrics`/`MemoryMetrics`/`DiskMetrics`/`GPUMetrics`/`SystemMetrics` *(extra: `[metrics]`)*, validated field types (`PositiveIntField`, `NonNegativeIntField`, `CentsField`, `PortField`, `PositiveFloatField`, `NonNegativeFloatField`, `PercentField`, `RatioField`, `LatitudeField`, `LongitudeField`, `PriceField`, `NonEmptyStrField`, `SlugField`, `HexColorField`), BR regex helpers (`CPFField`, `CNPJField`, `CPFOrCNPJField`, `PhoneBRField`, `CEPField` — old names without the suffix kept as deprecated aliases — `is_valid_*`, `normalize_*`, `only_digits`, `*_PATTERN`), BR states/cities (`UF`, `Region`, `StateBR`, `CityBR`, `ChoiceBR`, `UFField`, `CityNameField`, `list_states`, `get_state`, `cities_by_uf`, `states_by_region`, `uf_choices`/`region_choices`/`city_choices`, `is_valid_uf`/`normalize_uf`, `is_valid_city`/`normalize_city`) |
 | `tempest_fastapi_sdk.cli` | `tempest` console script — `new <name>` (scaffold layered service), `lint` / `format` / `fmt-check` / `type` / `test` / `check` (run preferred quality gates), `version` / `--version` |
 Core primitives are re-exported from `tempest_fastapi_sdk` at the top level — `from tempest_fastapi_sdk import BaseModel, BaseRepository, AppException` always works. The extras-gated managers in `tempest_fastapi_sdk.cache`, `tempest_fastapi_sdk.queue`, `tempest_fastapi_sdk.tasks`, `tempest_fastapi_sdk.vision` and `tempest_fastapi_sdk.ssr` must be imported from their own submodule (`from tempest_fastapi_sdk.queue import AsyncBrokerManager`).
@@ -1050,7 +1050,7 @@ tokens = JWTUtils(
 #### Signup
-Reuse the `UserService.create` defined in the tutorial — it already hashes the password.
+Reuse the `UserService.signup` defined in the tutorial — it already hashes the password.
 #### Login
@@ -2445,7 +2445,7 @@ import asyncio
 from fastapi import APIRouter
-from tempest_fastapi_sdk import EventStream, sse_response
+from tempest_fastapi_sdk import EventStream
 router = APIRouter()
@@ -2460,8 +2460,9 @@ async def events() -> "StreamingResponse":  # forward-declared by Starlette
             await asyncio.sleep(1)
         await stream.close()
-    asyncio.create_task(producer())
-    return sse_response(stream.stream())
+    task = asyncio.create_task(producer())
+    # on_disconnect cancels the producer when the client drops — no leak.
+    return stream.response(on_disconnect=task.cancel)
 ```
 Browser side:
@@ -2473,6 +2474,8 @@ es.addEventListener("counter", (e) => console.log("got", JSON.parse(e.data)));
 `heartbeat_seconds` emits a `: keepalive` SSE comment when idle so load-balancers don't close long-lived connections. `ServerSentEvent.data` accepts strings, bytes or any JSON-serializable Python object — non-strings are JSON-encoded automatically. Pass `retry=` to hint the browser at the reconnect delay (milliseconds).
+The queue is **bounded** (`max_queue`, default `1000`): a slow client can't grow memory without limit. `overflow` picks the eviction policy — `"drop_oldest"` (default), `"drop_newest"`, or `"block"` (real backpressure); `EventStream.dropped_events` counts the discards. For broadcast, `SSEBroker.response(channel)` bundles `register` + `sse_response` + `unregister`-on-disconnect in one call. Authenticating an `EventSource` (which can't send an `Authorization` header): prefer a session cookie (`make_jwt_user_dependency(..., cookie_name="access_token")` + `withCredentials`); for cookieless clients pass a short-lived access token in the query string with `query_param="access_token"` (over TLS, scrubbed from logs). See the [SSE recipe](https://mauriciobenjamin700.github.io/tempest-fastapi-sdk/recipes/sse/) for the full guide.
 ### Web Push notifications recipe
 `WebPushDispatcher` wraps the synchronous `pywebpush` library in `asyncio.to_thread` and surfaces the two errors the application cares about: `WebPushGoneError` (HTTP 404/410 — delete the subscription) and `WebPushError` (everything else). Install with `[webpush]`.
@@ -4187,9 +4190,6 @@ Short version — recently shipped and what's next:
 - **v0.31.2** — `UserAuthService` methods type `session` as
   `AsyncSession` everywhere (no more `Any`).
-Still on the roadmap: OpenTelemetry tracing + outbox pattern
-for transactional events. Tracked on the docs page.
 ---
 ## License

{tempest_fastapi_sdk-0.89.0 → tempest_fastapi_sdk-0.91.0}/README.md RENAMED Viewed

@@ -10,7 +10,7 @@
 > 💡 `uv run mkdocs serve` (ou `make docs-serve`) é só para preview local — em produção use as URLs do GitHub Pages acima. / For local preview only — in production use the GitHub Pages URLs above.
-Shared FastAPI/SQLAlchemy/Pydantic building blocks used across Tempest projects: base schemas, ORM model, async repository, pagination, settings, exceptions, Alembic helper, FastStream/TaskIQ broker managers, Redis cache, Server-Sent Events, Web Push, a Django-style **admin site** (`AdminSite` + `AdminModel`), **typed SSR pages** (`Page` + `html_response`, HTMX-ready), and the utility classes (`PasswordUtils`, `JWTUtils`, `EmailUtils`, `UploadUtils`, `DownloadUtils`, `MetricsUtils`, `LogUtils`).
+Shared FastAPI/SQLAlchemy/Pydantic building blocks used across Tempest projects: base schemas, ORM model, async repository, pagination, settings, exceptions, Alembic helper, FastStream/TaskIQ broker managers, Redis cache, Server-Sent Events, Web Push, a Django-style **admin site** (`AdminSite` + `AdminModel`), **typed SSR pages** (`Page` + `html_response`, HTMX-ready), and the utility classes (`PasswordUtils`, `JWTUtils`, `EmailUtils`, `UploadUtils`, `DownloadUtils`, `FileStoreUtils`, `MetricsUtils`, `LogUtils`).
 The goal is to start every new backend with the same opinionated foundation already in place — no copy-pasting `BaseModel`, no rewriting the same CRUD repository, no re-inventing the exception envelope.
@@ -91,7 +91,7 @@ Via `pyproject.toml`:
 ```toml
 dependencies = [
-    "tempest-fastapi-sdk>=0.41.0",
+    "tempest-fastapi-sdk>=0.91.0",
 ]
 ```
@@ -149,7 +149,7 @@ Since `0.7.1` every optional dependency is imported lazily at first instantiatio
 | `tempest_fastapi_sdk.services` | `BaseService` |
 | `tempest_fastapi_sdk.core` | `configure_logging`, `JSONFormatter`, `get_request_id`/`set_request_id`/`clear_request_id`, `request_id_ctx`, `BaseStrEnum`, `BaseIntEnum`, `strict_types`/`typed`/`require_annotations` |
 | `tempest_fastapi_sdk.admin` *(extra: `[admin]`)* | `AdminSite`, `AdminModel`, `make_admin_router`, `AdminAuthBackend`, `UserModelAuthBackend`, `AdminAuthError` |
-| `tempest_fastapi_sdk.sse` | `EventStream`, `SSEBroker` (multi-worker fan-out via Redis), `ServerSentEvent`, `sse_response` |
+| `tempest_fastapi_sdk.sse` | `EventStream` (bounded queue + `overflow` backpressure), `SSEBroker` (multi-worker fan-out via Redis, `.response()` lifecycle helper), `ServerSentEvent`, `sse_response` (`on_disconnect=` cleanup) |
 | `tempest_fastapi_sdk.cache` *(extra: `[cache]`)* | `AsyncRedisManager`, `cached` (with `namespace` / `tags`), `CacheInvalidator`, `namespace_registry_key`, `tag_registry_key` |
 | `tempest_fastapi_sdk.flags` | `FeatureFlags`, `FeatureFlagBackend`, `MemoryFeatureFlagBackend`, `EnvFeatureFlagBackend`, `RedisFeatureFlagBackend`, `CompositeFeatureFlagBackend`, `make_flag_dependency`, `coerce_flag` |
 | `tempest_fastapi_sdk.webpush` *(extra: `[webpush]`)* | `WebPushDispatcher`, `WebPushSubscriptionService`, `make_web_push_router`, `WebPushError`, `WebPushGoneError`, `WebPushSubscriptionSchema`, `WebPushKeysSchema`, `WebPushPayloadSchema` |
@@ -160,7 +160,7 @@ Since `0.7.1` every optional dependency is imported lazily at first instantiatio
 | `tempest_fastapi_sdk.tasks` *(extra: `[tasks]`)* | `AsyncTaskBrokerManager` (TaskIQ lifecycle wrapper), `AsyncTaskScheduler` (periodic / cron tasks) |
 | `tempest_fastapi_sdk.vision` *(extra: `[vision]`)* | `Detector`, `Classifier`, `Segmenter` (ONNX, lazy), `DetectionSchema`/`ClassificationSchema`/`SegmentationSchema`/`BoundingBoxSchema`/`ClassProbabilitySchema`, `to_detection_schemas`/`to_classification_schema`/`to_segmentation_schemas` |
 | `tempest_fastapi_sdk.ssr` *(extra: `[ssr]`)* | `Page` (typed component base), `html_response` (widget tree → `HTMLResponse`, full document or HTMX fragment), `make_htmx_router` (serves bundled HTMX locally, no CDN) |
-| `tempest_fastapi_sdk.utils` | `to_utc`, `utcnow`, `modify_dict`, `LogUtils`, `AttemptThrottle`/`ThrottleBackend`/`ThrottleStatus`, `generate_opaque_token`/`hash_opaque_token`/`verify_opaque_token`, `get_client_ip`/`get_client_ip_from_scope`, `PasswordUtils` *(extra: `[auth]`)*, `JWTUtils` *(extra: `[auth]`)*, `TOTPHelper` *(extra: `[mfa]`)*, `EmailUtils` *(extra: `[email]`)*, `UploadUtils`/`sniff_mime` *(extra: `[upload]`)*, `DownloadUtils`/`build_content_disposition` *(no extra)*, `MetricsUtils`/`CPUMetrics`/`MemoryMetrics`/`DiskMetrics`/`GPUMetrics`/`SystemMetrics` *(extra: `[metrics]`)*, validated field types (`PositiveIntField`, `NonNegativeIntField`, `CentsField`, `PortField`, `PositiveFloatField`, `NonNegativeFloatField`, `PercentField`, `RatioField`, `LatitudeField`, `LongitudeField`, `PriceField`, `NonEmptyStrField`, `SlugField`, `HexColorField`), BR regex helpers (`CPFField`, `CNPJField`, `CPFOrCNPJField`, `PhoneBRField`, `CEPField` — old names without the suffix kept as deprecated aliases — `is_valid_*`, `normalize_*`, `only_digits`, `*_PATTERN`), BR states/cities (`UF`, `Region`, `StateBR`, `CityBR`, `ChoiceBR`, `UFField`, `CityNameField`, `list_states`, `get_state`, `cities_by_uf`, `states_by_region`, `uf_choices`/`region_choices`/`city_choices`, `is_valid_uf`/`normalize_uf`, `is_valid_city`/`normalize_city`) |
+| `tempest_fastapi_sdk.utils` | `to_utc`, `utcnow`, `modify_dict`, `LogUtils`, `AttemptThrottle`/`ThrottleBackend`/`ThrottleStatus`, `generate_opaque_token`/`hash_opaque_token`/`verify_opaque_token`, `get_client_ip`/`get_client_ip_from_scope`, `PasswordUtils` *(extra: `[auth]`)*, `JWTUtils` *(extra: `[auth]`)*, `TOTPHelper` *(extra: `[mfa]`)*, `EmailUtils` *(extra: `[email]`)*, `UploadUtils`/`sniff_mime` *(extra: `[upload]`)*, `DownloadUtils`/`build_content_disposition` *(no extra)*, `FileStoreUtils` — unified upload+download+presign facade *(extra: `[upload]` local / `[minio]` MinIO)*, `MetricsUtils`/`CPUMetrics`/`MemoryMetrics`/`DiskMetrics`/`GPUMetrics`/`SystemMetrics` *(extra: `[metrics]`)*, validated field types (`PositiveIntField`, `NonNegativeIntField`, `CentsField`, `PortField`, `PositiveFloatField`, `NonNegativeFloatField`, `PercentField`, `RatioField`, `LatitudeField`, `LongitudeField`, `PriceField`, `NonEmptyStrField`, `SlugField`, `HexColorField`), BR regex helpers (`CPFField`, `CNPJField`, `CPFOrCNPJField`, `PhoneBRField`, `CEPField` — old names without the suffix kept as deprecated aliases — `is_valid_*`, `normalize_*`, `only_digits`, `*_PATTERN`), BR states/cities (`UF`, `Region`, `StateBR`, `CityBR`, `ChoiceBR`, `UFField`, `CityNameField`, `list_states`, `get_state`, `cities_by_uf`, `states_by_region`, `uf_choices`/`region_choices`/`city_choices`, `is_valid_uf`/`normalize_uf`, `is_valid_city`/`normalize_city`) |
 | `tempest_fastapi_sdk.cli` | `tempest` console script — `new <name>` (scaffold layered service), `lint` / `format` / `fmt-check` / `type` / `test` / `check` (run preferred quality gates), `version` / `--version` |
 Core primitives are re-exported from `tempest_fastapi_sdk` at the top level — `from tempest_fastapi_sdk import BaseModel, BaseRepository, AppException` always works. The extras-gated managers in `tempest_fastapi_sdk.cache`, `tempest_fastapi_sdk.queue`, `tempest_fastapi_sdk.tasks`, `tempest_fastapi_sdk.vision` and `tempest_fastapi_sdk.ssr` must be imported from their own submodule (`from tempest_fastapi_sdk.queue import AsyncBrokerManager`).
@@ -941,7 +941,7 @@ tokens = JWTUtils(
 #### Signup
-Reuse the `UserService.create` defined in the tutorial — it already hashes the password.
+Reuse the `UserService.signup` defined in the tutorial — it already hashes the password.
 #### Login
@@ -2336,7 +2336,7 @@ import asyncio
 from fastapi import APIRouter
-from tempest_fastapi_sdk import EventStream, sse_response
+from tempest_fastapi_sdk import EventStream
 router = APIRouter()
@@ -2351,8 +2351,9 @@ async def events() -> "StreamingResponse":  # forward-declared by Starlette
             await asyncio.sleep(1)
         await stream.close()
-    asyncio.create_task(producer())
-    return sse_response(stream.stream())
+    task = asyncio.create_task(producer())
+    # on_disconnect cancels the producer when the client drops — no leak.
+    return stream.response(on_disconnect=task.cancel)
 ```
 Browser side:
@@ -2364,6 +2365,8 @@ es.addEventListener("counter", (e) => console.log("got", JSON.parse(e.data)));
 `heartbeat_seconds` emits a `: keepalive` SSE comment when idle so load-balancers don't close long-lived connections. `ServerSentEvent.data` accepts strings, bytes or any JSON-serializable Python object — non-strings are JSON-encoded automatically. Pass `retry=` to hint the browser at the reconnect delay (milliseconds).
+The queue is **bounded** (`max_queue`, default `1000`): a slow client can't grow memory without limit. `overflow` picks the eviction policy — `"drop_oldest"` (default), `"drop_newest"`, or `"block"` (real backpressure); `EventStream.dropped_events` counts the discards. For broadcast, `SSEBroker.response(channel)` bundles `register` + `sse_response` + `unregister`-on-disconnect in one call. Authenticating an `EventSource` (which can't send an `Authorization` header): prefer a session cookie (`make_jwt_user_dependency(..., cookie_name="access_token")` + `withCredentials`); for cookieless clients pass a short-lived access token in the query string with `query_param="access_token"` (over TLS, scrubbed from logs). See the [SSE recipe](https://mauriciobenjamin700.github.io/tempest-fastapi-sdk/recipes/sse/) for the full guide.
 ### Web Push notifications recipe
 `WebPushDispatcher` wraps the synchronous `pywebpush` library in `asyncio.to_thread` and surfaces the two errors the application cares about: `WebPushGoneError` (HTTP 404/410 — delete the subscription) and `WebPushError` (everything else). Install with `[webpush]`.
@@ -4078,9 +4081,6 @@ Short version — recently shipped and what's next:
 - **v0.31.2** — `UserAuthService` methods type `session` as
   `AsyncSession` everywhere (no more `Any`).
-Still on the roadmap: OpenTelemetry tracing + outbox pattern
-for transactional events. Tracked on the docs page.
 ---
 ## License

{tempest_fastapi_sdk-0.89.0 → tempest_fastapi_sdk-0.91.0}/docs/architecture.en.md RENAMED Viewed

@@ -213,7 +213,7 @@ class UserController(BaseController[UserService, UserResponse]):
 from fastapi import Depends
 from sqlalchemy.ext.asyncio import AsyncSession
-from src.api.app import db
+from src.api.dependencies.resources import db
 from src.controllers.user_controller import UserController
 from src.db.repositories import UserRepository
 from src.services.user_service import UserService

{tempest_fastapi_sdk-0.89.0 → tempest_fastapi_sdk-0.91.0}/docs/architecture.md RENAMED Viewed

@@ -213,7 +213,7 @@ class UserController(BaseController[UserService, UserResponse]):
 from fastapi import Depends
 from sqlalchemy.ext.asyncio import AsyncSession
-from src.api.app import db
+from src.api.dependencies.resources import db
 from src.controllers.user_controller import UserController
 from src.db.repositories import UserRepository
 from src.services.user_service import UserService

{tempest_fastapi_sdk-0.89.0 → tempest_fastapi_sdk-0.91.0}/docs/installation.en.md RENAMED Viewed

@@ -32,7 +32,9 @@ Feature-rich helpers pull in third-party dependencies that you only need when yo
 | `[mfa]` | `pyotp` | `TOTPHelper` + MFA/2FA (TOTP) endpoints on the bundled auth flow |
 | `[sqlite]` | `aiosqlite` | SQLite async driver for `sqlite+aiosqlite://` URLs (dev default) |
 | `[postgres]` | `asyncpg` | PostgreSQL async driver for `postgresql+asyncpg://` URLs (production) |
-| `[all]` | everything above | every helper |
+| `[vision]` | `ort-vision-sdk` | vision helpers (`Detector`, `Classifier`, `Segmenter` + `to_detection_schemas`/`to_classification_schema`/`to_segmentation_schemas`) |
+| `[otel]` | `opentelemetry-sdk`, OTLP exporter + FastAPI/SQLAlchemy/httpx instrumentations | OpenTelemetry instrumentation via `setup_tracing` |
+| `[all]` | everything above (includes `[vision]` and `[otel]`) | every helper |
 === "Subset (recommended)"
@@ -49,14 +51,14 @@ Feature-rich helpers pull in third-party dependencies that you only need when yo
 === "uv add"
     ```bash
-    uv add "tempest-fastapi-sdk[auth,upload,postgres]>=0.41.0"
+    uv add "tempest-fastapi-sdk[auth,upload,postgres]>=0.89.0"
     ```
 === "pyproject.toml"
     ```toml
     dependencies = [
-        "tempest-fastapi-sdk[auth,upload,postgres]>=0.41.0",
+        "tempest-fastapi-sdk[auth,upload,postgres]>=0.89.0",
     ]
     ```

{tempest_fastapi_sdk-0.89.0 → tempest_fastapi_sdk-0.91.0}/docs/installation.md RENAMED Viewed

@@ -32,7 +32,9 @@ Os helpers mais ricos puxam dependências de terceiros que só são necessárias
 | `[mfa]` | `pyotp` | `TOTPHelper` + endpoints MFA/2FA (TOTP) do fluxo bundled de auth |
 | `[sqlite]` | `aiosqlite` | driver async SQLite para URLs `sqlite+aiosqlite://` (default de dev) |
 | `[postgres]` | `asyncpg` | driver async PostgreSQL para URLs `postgresql+asyncpg://` (produção) |
-| `[all]` | tudo acima | todos os helpers |
+| `[vision]` | `ort-vision-sdk` | helpers de visão (`Detector`, `Classifier`, `Segmenter` + `to_detection_schemas`/`to_classification_schema`/`to_segmentation_schemas`) |
+| `[otel]` | `opentelemetry-sdk`, exporter OTLP + instrumentações FastAPI/SQLAlchemy/httpx | instrumentação OpenTelemetry via `setup_tracing` |
+| `[all]` | tudo acima (inclui `[vision]` e `[otel]`) | todos os helpers |
 === "Subconjunto (recomendado)"
@@ -49,14 +51,14 @@ Os helpers mais ricos puxam dependências de terceiros que só são necessárias
 === "uv add"
     ```bash
-    uv add "tempest-fastapi-sdk[auth,upload,postgres]>=0.41.0"
+    uv add "tempest-fastapi-sdk[auth,upload,postgres]>=0.89.0"
     ```
 === "pyproject.toml"
     ```toml
     dependencies = [
-        "tempest-fastapi-sdk[auth,upload,postgres]>=0.41.0",
+        "tempest-fastapi-sdk[auth,upload,postgres]>=0.89.0",
     ]
     ```

{tempest_fastapi_sdk-0.89.0 → tempest_fastapi_sdk-0.91.0}/docs/learning/marketplace/api.en.md RENAMED Viewed

@@ -7,6 +7,7 @@ The full REST API of the marketplace in a single table, ready to paste into the
     - **Idem**: ✅ = accepts `Idempotency-Key` (cached by `IdempotencyMiddleware`).
     - **Pagination**: cursor by default; offset where explicitly noted.
     - **Errors**: every error follows the SDK envelope `{detail, code, details}`.
+    - **`X-NN` rules**: the codes cited in the descriptions (e.g. `rule O-02`, `rule D-01`) refer to the [business rules](business-rules.en.md) page, where each rule is detailed.
 ## Auth

{tempest_fastapi_sdk-0.89.0 → tempest_fastapi_sdk-0.91.0}/docs/learning/marketplace/api.md RENAMED Viewed

@@ -7,6 +7,7 @@ Toda a API REST do marketplace numa tabela só, pronta pra colar no contrato do
     - **Idem**: ✅ = aceita `Idempotency-Key` (cacheado pelo `IdempotencyMiddleware`).
     - **Paginação**: cursor por padrão; offset onde explícito.
     - **Erros**: todo erro vem no envelope SDK `{detail, code, details}`.
+    - **Regras `X-NN`**: os códigos citados nas descrições (ex.: `regra O-02`, `regra D-01`) remetem à página de [regras de negócio](business-rules.md), onde cada regra está detalhada.
 ## Auth

{tempest_fastapi_sdk-0.89.0 → tempest_fastapi_sdk-0.91.0}/docs/learning/marketplace/business-rules.en.md RENAMED Viewed

@@ -4,7 +4,6 @@ This page is the **domain contract**. Every modeling, endpoint, or test decision
 !!! warning "Severity convention"
     **MUST** = domain invariant, violation is a bug.
-    **SHOULD** = default behavior, override requires justification.
     **MAY** = intentional opening, decided case by case.
 ## 1. Users

{tempest_fastapi_sdk-0.89.0 → tempest_fastapi_sdk-0.91.0}/docs/learning/marketplace/business-rules.md RENAMED Viewed

@@ -4,7 +4,6 @@ Esta página é o **contrato do domínio**. Toda decisão de modelagem, endpoint
 !!! warning "Convenção de severidade"
     **MUST** = invariante de domínio, violação é bug.
-    **SHOULD** = comportamento padrão, override exige justificativa.
     **MAY** = abertura intencional, decidir caso a caso.
 ## 1. Usuários

{tempest_fastapi_sdk-0.89.0 → tempest_fastapi_sdk-0.91.0}/docs/learning/marketplace/domain.en.md RENAMED Viewed

@@ -359,12 +359,12 @@ classDiagram
 | `Product` | `BaseModel + AuditMixin + SoftDeleteMixin` | custom (JOINs variant+price) | `BaseService` |
 | `ProductVariant` | `BaseModel + AuditMixin` | custom | `BaseService` |
 | `PriceHistory` | `BaseModel` (no updated_at) | append-only | `BaseService` |
-| `StockMovement` | `BaseModel` (no updated_at) | append-only via `bulk_create` when batching | `BaseService` |
+| `StockMovement` | `BaseModel` (no updated_at) | append-only via `bulk_create_values` when batching | `BaseService` |
 | `Cart`/`CartItem` | `BaseModel + AuditMixin` | `BaseRepository[CartModel]` | `BaseService` |
 | `Order`/`OrderItem` | `BaseModel + AuditMixin` | custom | `BaseService` |
 | `Review` | `BaseModel + AuditMixin` | `BaseRepository[ReviewModel]` | `BaseService` |
-`PriceHistory` and `StockMovement` are append-only, so their repository **doesn't expose `update` or `delete`** — only `create`/`list`/`get`. That prevents accidental ALTER on history.
+`PriceHistory` and `StockMovement` are append-only, so their repository **doesn't expose `update` or `delete`** — only `add`/`list`/`get`. That prevents accidental ALTER on history.
 ## Next step

{tempest_fastapi_sdk-0.89.0 → tempest_fastapi_sdk-0.91.0}/docs/learning/marketplace/domain.md RENAMED Viewed

@@ -359,12 +359,12 @@ classDiagram
 | `Product` | `BaseModel + AuditMixin + SoftDeleteMixin` | custom (com JOINs em variant+price) | `BaseService` |
 | `ProductVariant` | `BaseModel + AuditMixin` | custom | `BaseService` |
 | `PriceHistory` | `BaseModel` (sem updated_at) | append-only | `BaseService` |
-| `StockMovement` | `BaseModel` (sem updated_at) | append-only via `bulk_create` quando lote | `BaseService` |
+| `StockMovement` | `BaseModel` (sem updated_at) | append-only via `bulk_create_values` quando lote | `BaseService` |
 | `Cart`/`CartItem` | `BaseModel + AuditMixin` | `BaseRepository[CartModel]` | `BaseService` |
 | `Order`/`OrderItem` | `BaseModel + AuditMixin` | custom | `BaseService` |
 | `Review` | `BaseModel + AuditMixin` | `BaseRepository[ReviewModel]` | `BaseService` |
-`PriceHistory` e `StockMovement` são append-only, então o repositório deles **não expõe `update` nem `delete`** — só `create`/`list`/`get`. Isso impede ALTER acidental no histórico.
+`PriceHistory` e `StockMovement` são append-only, então o repositório deles **não expõe `update` nem `delete`** — só `add`/`list`/`get`. Isso impede ALTER acidental no histórico.
 ## Próximo passo

{tempest_fastapi_sdk-0.89.0 → tempest_fastapi_sdk-0.91.0}/docs/learning/marketplace/flows.en.md RENAMED Viewed

@@ -76,11 +76,14 @@ sequenceDiagram
 **SDK touchpoints:**
-- `generate_opaque_token(48)` returns `(plain, hash)`. Database stores only the hash.
+- `generate_opaque_token(48)` returns `(plain, hash)`.
 - `EmailUtils.render_template("invitation.html", ctx)` (v0.24+).
 - Send is async (TaskIQ) — endpoint returns `201` without waiting on SMTP.
 - The acceptance is **one single transaction** — membership + invitation status are atomic.
+!!! warning "The database stores only the hash"
+    `generate_opaque_token(48)` returns `(plain, hash)`: the `plain` value only ever lives in the email sent to the invitee, and the database persists just `hash`. On acceptance the service calls `hash_opaque_token(plain)` and looks the row up by hash — a leak of the `invitations` table exposes no usable tokens.
 ## 3. Create product + variant + images
 ```mermaid
@@ -91,7 +94,7 @@ sequenceDiagram
     participant CT as ProductController
     participant PS as ProductService
     participant VS as VariantService
-    participant ST as MinIOUploadStorage
+    participant ST as AsyncMinIOClient
     participant DB as Postgres
     M->>R: POST /products {title, description, variants:[{sku, attrs, price_cents}]}
@@ -123,7 +126,7 @@ sequenceDiagram
 **SDK touchpoints:**
 - Product creation is a single transaction — product + variants + first `PriceHistory` row.
-- Images **never flow through the API** — the client `PUT`s directly to MinIO via a presigned URL (`MinIOUploadStorage.presigned_url` or `AsyncMinIOClient.presigned_put_url` directly).
+- Images **never flow through the API** — the client `PUT`s directly to MinIO via a presigned URL minted by `AsyncMinIOClient.presigned_put_url` (`MinIOUploadStorage.presigned_url` is GET/read-only and cannot be used for upload).
 - The public catalog reads `image_keys` and mints presigned read URLs (1h TTL).
 ## 4. Idempotent checkout
@@ -172,11 +175,14 @@ sequenceDiagram
 **SDK touchpoints:**
-- `IdempotencyMiddleware` covers the endpoint without the handler having to care. If the buyer retries with the same `Idempotency-Key`, the middleware replays the original response — the handler does not run twice, stock is not decremented twice.
+- `IdempotencyMiddleware` covers the endpoint without the handler having to care.
 - Stock reservation lives **inside the same transaction** as the order `INSERT`. A failure on any item rolls everything back.
 - The `SSE` notifies the stream (the buyer's client listening on `/orders/{id}/events`).
 - `notify_seller` is queued — does not block the checkout response.
+!!! note "Idempotency prevents double stock decrement"
+    If the buyer retries with the same `Idempotency-Key` (reload, network timeout, double-tap), the middleware replays the original response — the handler **does not run twice**, so stock is **not decremented twice** and no duplicate order is created.
 ## 5. Shipping + real-time updates
 ```mermaid
@@ -234,7 +240,8 @@ stateDiagram-v2
     RETURNED --> [*]
 ```
-Forbidden transitions (any other arrow) **MUST** fail with `ConflictException("invalid state transition")`. Typical implementation is an enum + `dict[from, set[to]]` in the service.
+!!! warning "Invalid transitions must fail with ConflictException"
+    Forbidden transitions (any other arrow) **MUST** fail with `ConflictException("invalid state transition")`. Typical implementation is an enum + `dict[from, set[to]]` in the service.
 ## State machine — Invitation

{tempest_fastapi_sdk-0.89.0 → tempest_fastapi_sdk-0.91.0}/docs/learning/marketplace/flows.md RENAMED Viewed

@@ -76,11 +76,14 @@ sequenceDiagram
 **Pontos do SDK:**
-- `generate_opaque_token(48)` retorna par `(plain, hash)`. Banco guarda só o hash.
+- `generate_opaque_token(48)` retorna par `(plain, hash)`.
 - `EmailUtils.render_template("invitation.html", ctx)` (v0.24+).
 - O envio é assíncrono (TaskIQ) — endpoint retorna `201` sem esperar SMTP.
 - Toda a aceitação é **uma única transação** — membership + status do convite são atomic.
+!!! warning "O banco guarda só o hash"
+    `generate_opaque_token(48)` devolve `(plain, hash)`: o valor `plain` só existe no email enviado ao convidado, e o banco persiste apenas `hash`. Na aceitação, o service faz `hash_opaque_token(plain)` e busca pelo hash — um vazamento da tabela `invitations` não expõe tokens utilizáveis.
 ## 3. Criar produto com variante + imagens
 ```mermaid
@@ -91,7 +94,7 @@ sequenceDiagram
     participant CT as ProductController
     participant PS as ProductService
     participant VS as VariantService
-    participant ST as MinIOUploadStorage
+    participant ST as AsyncMinIOClient
     participant DB as Postgres
     M->>R: POST /products {title, description, variants:[{sku, attrs, price_cents}]}
@@ -123,7 +126,7 @@ sequenceDiagram
 **Pontos do SDK:**
 - Criação de produto é transação única — produto + variantes + primeira linha de `PriceHistory`.
-- Imagens **não trafegam pela API** — cliente faz `PUT` direto no MinIO via URL presigned (`MinIOUploadStorage.presigned_url` ou direto `AsyncMinIOClient.presigned_put_url`).
+- Imagens **não trafegam pela API** — cliente faz `PUT` direto no MinIO via URL presigned gerada por `AsyncMinIOClient.presigned_put_url` (o `MinIOUploadStorage.presigned_url` é GET/leitura, não serve pra upload).
 - Catálogo público lê `image_keys` e gera URLs presigned de leitura (TTL 1h).
 ## 4. Checkout idempotente
@@ -172,11 +175,14 @@ sequenceDiagram
 **Pontos do SDK:**
-- `IdempotencyMiddleware` cobre o endpoint sem o handler precisar saber. Se o comprador retentar com a mesma `Idempotency-Key`, o middleware devolve a resposta original — handler não roda 2x, estoque não é decrementado 2x.
+- `IdempotencyMiddleware` cobre o endpoint sem o handler precisar saber.
 - Reserva de estoque é **dentro da mesma transação** do `INSERT` do pedido. Falha em qualquer item aborta tudo.
 - A `SSE` notifica o stream (cliente do comprador escutando em `/orders/{id}/events`).
 - O notify_seller vai pra fila — não bloqueia a resposta do checkout.
+!!! note "Idempotência evita decremento duplo de estoque"
+    Se o comprador retentar com a mesma `Idempotency-Key` (reload, timeout de rede, double-tap), o middleware devolve a resposta original — o handler **não roda 2x**, então o estoque **não é decrementado 2x** e nenhum pedido duplicado é criado.
 ## 5. Expedição + atualização em tempo real
 ```mermaid
@@ -234,7 +240,8 @@ stateDiagram-v2
     RETURNED --> [*]
 ```
-Transições proibidas (qualquer outra setinha) **MUST** falhar com `ConflictException("invalid state transition")`. Implementação típica num enum + `dict[from, set[to]]` no service.
+!!! warning "Transições inválidas devem falhar com ConflictException"
+    Transições proibidas (qualquer outra setinha) **MUST** falhar com `ConflictException("invalid state transition")`. Implementação típica num enum + `dict[from, set[to]]` no service.
 ## Máquina de estados — Invitation

{tempest_fastapi_sdk-0.89.0 → tempest_fastapi_sdk-0.91.0}/docs/learning/marketplace/index.en.md RENAMED Viewed

@@ -45,6 +45,9 @@ When the service boots you have:
 - **RabbitMQ UI** at `http://localhost:15672` (`guest/guest`)
 - **MailHog UI** at `http://localhost:8025`
+!!! warning "Local-development credentials only"
+    The logins and passwords above (`minioadmin/minioadmin`, `guest/guest`, the `admin-pass-12` admin) are local-development defaults. Never deploy with them: rotate or replace every one with strong secrets before any shared or production environment.
 ## SDK stack exercised
 | Need | SDK primitive |

{tempest_fastapi_sdk-0.89.0 → tempest_fastapi_sdk-0.91.0}/docs/learning/marketplace/index.md RENAMED Viewed

@@ -45,6 +45,9 @@ Quando o serviço subir você terá:
 - **RabbitMQ UI** em `http://localhost:15672` (`guest/guest`)
 - **MailHog UI** em `http://localhost:8025`
+!!! warning "Credenciais só de desenvolvimento local"
+    Os logins e senhas acima (`minioadmin/minioadmin`, `guest/guest`, o admin `admin-pass-12`) são padrões de desenvolvimento local. Nunca faça deploy com eles: rotacione ou substitua todos por segredos fortes antes de qualquer ambiente compartilhado ou de produção.
 ## Stack do SDK exercitada
 | Necessidade | Primitivo do SDK |

{tempest_fastapi_sdk-0.89.0 → tempest_fastapi_sdk-0.91.0}/docs/migration.en.md RENAMED Viewed

@@ -1,6 +1,6 @@
 # Migration guide
-Breaking-change walkthroughs grouped by minor release. Stick to the version that matches what you're upgrading **from**.
+Breaking-change walkthroughs grouped by minor release. Stick to the version that matches what you're upgrading **from**. The release sections are listed newest-first, so on a multi-version jump read and apply them bottom-up.
 ## 0.63.0 — authenticated user loaded on the request session

{tempest_fastapi_sdk-0.89.0 → tempest_fastapi_sdk-0.91.0}/docs/migration.md RENAMED Viewed

@@ -1,6 +1,6 @@
 # Guia de migração
-Passo a passo das mudanças que quebram compatibilidade, agrupadas por release minor. Siga a versão que casa com aquela **de onde** você está atualizando.
+Passo a passo das mudanças que quebram compatibilidade, agrupadas por release minor. Siga a versão que casa com aquela **de onde** você está atualizando. As seções estão listadas da mais nova para a mais antiga, então num salto de várias versões leia e aplique-as de baixo para cima.
 ## 0.63.0 — usuário autenticado carregado na sessão de request

tempest-fastapi-sdk 0.89.0__tar.gz → 0.91.0__tar.gz

tempest-fastapi-sdk 0.89.0tar.gz → 0.91.0tar.gz