volcano-sdk-python 0.12.0__tar.gz → 0.13.0__tar.gz

volcano_sdk_python-0.13.0/.release-please-manifest.json

@@ -0,0 +1,3 @@
+{
+  ".": "0.13.0"
+}

{volcano_sdk_python-0.12.0 → volcano_sdk_python-0.13.0}/CHANGELOG.md

@@ -1,5 +1,12 @@
 # Changelog
 
+## [0.13.0](https://github.com/Kong/volcano-sdk-python/compare/v0.12.0...v0.13.0) (2026-09-23)
+
+
+### Features
+
+* **quality:** type-check Python auth state tests without Any ([#345](https://github.com/Kong/volcano-sdk-python/issues/345)) ([acd2352](https://github.com/Kong/volcano-sdk-python/commit/acd235251b00c871297eff7ba1ab94e1ea9ee02c))
+
 ## [0.12.0](https://github.com/Kong/volcano-sdk-python/compare/v0.11.3...v0.12.0) (2026-09-23)
 
 

{volcano_sdk_python-0.12.0 → volcano_sdk_python-0.13.0}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.5
 Name: volcano-sdk-python
-Version: 0.12.0
+Version: 0.13.0
 Summary: Official Python SDK for Volcano
 Project-URL: Homepage, https://volcano.dev
 Project-URL: Repository, https://github.com/Kong/volcano-sdk-python

{volcano_sdk_python-0.12.0 → volcano_sdk_python-0.13.0}/maintainers/quality-policy.lock.json

@@ -25,6 +25,42 @@
           "reportUnannotatedClassAttribute": "error",
           "root": "src/volcano_sdk/_transport.py"
         },
+        {
+          "reportAny": "error",
+          "reportExplicitAny": "error",
+          "reportImplicitStringConcatenation": "error",
+          "reportInvalidCast": "error",
+          "reportUnannotatedClassAttribute": "error",
+          "reportUnusedCallResult": "error",
+          "root": "tests/unit/test_state.py"
+        },
+        {
+          "reportAny": "error",
+          "reportExplicitAny": "error",
+          "reportImplicitStringConcatenation": "error",
+          "reportInvalidCast": "error",
+          "reportUnannotatedClassAttribute": "error",
+          "reportUnusedCallResult": "error",
+          "root": "tests/unit/test_auth_facade_recovery.py"
+        },
+        {
+          "reportAny": "error",
+          "reportExplicitAny": "error",
+          "reportImplicitStringConcatenation": "error",
+          "reportInvalidCast": "error",
+          "reportUnannotatedClassAttribute": "error",
+          "reportUnusedCallResult": "error",
+          "root": "tests/unit/test_session_continuity.py"
+        },
+        {
+          "reportAny": "error",
+          "reportExplicitAny": "error",
+          "reportImplicitStringConcatenation": "error",
+          "reportInvalidCast": "error",
+          "reportUnannotatedClassAttribute": "error",
+          "reportUnusedCallResult": "error",
+          "root": "tests/unit/test_token_bootstrap.py"
+        },
         {
           "reportAny": "error",
           "reportExplicitAny": "error",

{volcano_sdk_python-0.12.0 → volcano_sdk_python-0.13.0}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "hatchling.build"
 
 [project]
 name = "volcano-sdk-python"
-version = "0.12.0"
+version = "0.13.0"
 description = "Official Python SDK for Volcano"
 readme = "README.md"
 requires-python = ">=3.11"
@@ -182,6 +182,42 @@ root = "src/volcano_sdk/_transport.py"
 reportUnannotatedClassAttribute = "error"
 reportAny = "error"
 
+[[tool.basedpyright.executionEnvironments]]
+root = "tests/unit/test_state.py"
+reportAny = "error"
+reportExplicitAny = "error"
+reportInvalidCast = "error"
+reportImplicitStringConcatenation = "error"
+reportUnannotatedClassAttribute = "error"
+reportUnusedCallResult = "error"
+
+[[tool.basedpyright.executionEnvironments]]
+root = "tests/unit/test_auth_facade_recovery.py"
+reportAny = "error"
+reportExplicitAny = "error"
+reportInvalidCast = "error"
+reportImplicitStringConcatenation = "error"
+reportUnannotatedClassAttribute = "error"
+reportUnusedCallResult = "error"
+
+[[tool.basedpyright.executionEnvironments]]
+root = "tests/unit/test_session_continuity.py"
+reportAny = "error"
+reportExplicitAny = "error"
+reportInvalidCast = "error"
+reportImplicitStringConcatenation = "error"
+reportUnannotatedClassAttribute = "error"
+reportUnusedCallResult = "error"
+
+[[tool.basedpyright.executionEnvironments]]
+root = "tests/unit/test_token_bootstrap.py"
+reportAny = "error"
+reportExplicitAny = "error"
+reportInvalidCast = "error"
+reportImplicitStringConcatenation = "error"
+reportUnannotatedClassAttribute = "error"
+reportUnusedCallResult = "error"
+
 [[tool.basedpyright.executionEnvironments]]
 root = "features"
 reportAny = "error"

{volcano_sdk_python-0.12.0 → volcano_sdk_python-0.13.0}/scripts/check_quality_policy.py

@@ -18,7 +18,7 @@ if TYPE_CHECKING:
     from collections.abc import Iterable
 
 GENERATED = "src/volcano_sdk/_generated"
-LOCK_SHA256 = "00e065b217d4a56575f14c38dfef8628e3f3439794743e17504532c32fdcdb14"
+LOCK_SHA256 = "3697eea97701caf2d0c719ba28b449823c44b7c213f6e729d0754ed6ab12d470"
 TYPE_FIXTURES = {
     "tests/typing/contract_steps.py",
     "tests/typing/durable_callbacks.py",

{volcano_sdk_python-0.12.0 → volcano_sdk_python-0.13.0}/tests/unit/fixtures/invalid_arguments.py

@@ -3,14 +3,18 @@ from __future__ import annotations
 from typing import TYPE_CHECKING
 
 if TYPE_CHECKING:
+    from collections.abc import Mapping
     from typing import BinaryIO
 
     from volcano_sdk.auth import Auth
     from volcano_sdk.logs import Logs
     from volcano_sdk.models import (
+        JSONValue,
         LinkedOAuthProvider,
         OAuthProviderTokenStatus,
         SessionPage,
+        SignUpResult,
+        User,
     )
     from volcano_sdk.realtime import Channel, Realtime
     from volcano_sdk.storage import StorageBucket
@@ -109,3 +113,30 @@ def assign_linked_provider(provider: LinkedOAuthProvider) -> None:
 
 def assign_provider_token(status: OAuthProviderTokenStatus) -> None:
     status.provider = "github"  # type: ignore[misc]
+
+
+def assign_sign_up_message(result: SignUpResult) -> None:
+    result.message = "changed"  # type: ignore[misc]
+
+
+def assign_user_email(user: User) -> None:
+    user.email = "changed@example.com"  # type: ignore[misc]
+
+
+def assign_snapshot_value(snapshot: Mapping[str, JSONValue]) -> None:
+    snapshot["email"] = "changed"  # type: ignore[index]
+
+
+def assign_metadata_value(
+    metadata: Mapping[str, JSONValue] | None, key: str, value: JSONValue
+) -> None:
+    assert metadata is not None
+    metadata[key] = value  # type: ignore[index]
+
+
+def unsupported_hosted_auth_action(auth: Auth) -> None:
+    _ = auth.get_hosted_auth_url(
+        project_id="project-id",
+        action="device",  # type: ignore[arg-type]
+        state="state-value",
+    )

{volcano_sdk_python-0.12.0 → volcano_sdk_python-0.13.0}/tests/unit/test_auth_facade_recovery.py

@@ -90,6 +90,10 @@ CASES = [
 ]
 
 
+def case_name(case: AuthCase) -> str:
+    return case.name
+
+
 def refresh_response(access: str | None = None) -> httpx.Response:
     return httpx.Response(
         200,
@@ -111,11 +115,11 @@ def client_for(handler: Callable[[httpx.Request], httpx.Response]) -> VolcanoCli
             httpx_transport=httpx.MockTransport(handler),
         ),
     )
-    client.auth.set_session(Session(access_token("original"), "refresh-1", USER))
+    _ = client.auth.set_session(Session(access_token("original"), "refresh-1", USER))
     return client
 
 
-@pytest.mark.parametrize("case", CASES, ids=lambda case: case.name)
+@pytest.mark.parametrize("case", CASES, ids=case_name)
 @pytest.mark.parametrize(
     "rejection", [b'{"error":"expired"}', b"", b"<h1>Unauthorized</h1>"]
 )
@@ -133,7 +137,7 @@ def test_auth_facade_replays_only_the_captured_request_after_401(
         return httpx.Response(case.status, json=case.body)
 
     client = client_for(handle)
-    case.invoke(client)
+    _ = case.invoke(client)
     assert [request.headers["authorization"] for request in requests] == [
         f"Bearer {access_token('original')}",
         "Bearer anon",
@@ -146,7 +150,7 @@ def test_auth_facade_replays_only_the_captured_request_after_401(
     assert client.current_session.access_token == access_token("rotated")
 
 
-@pytest.mark.parametrize("case", CASES, ids=lambda case: case.name)
+@pytest.mark.parametrize("case", CASES, ids=case_name)
 def test_auth_facade_bounds_repeated_auth_rejection(case: AuthCase) -> None:
     requests: list[httpx.Request] = []
 
@@ -159,12 +163,12 @@ def test_auth_facade_bounds_repeated_auth_rejection(case: AuthCase) -> None:
         )
 
     with pytest.raises(VolcanoError) as caught:
-        case.invoke(client_for(handle))
+        _ = case.invoke(client_for(handle))
     assert caught.value.status == 401
     assert len(requests) == 3
 
 
-@pytest.mark.parametrize("case", CASES, ids=lambda case: case.name)
+@pytest.mark.parametrize("case", CASES, ids=case_name)
 @pytest.mark.parametrize("failure", ["transport", "503"])
 def test_auth_facade_does_not_replay_ambiguous_failure(
     case: AuthCase, failure: str
@@ -179,23 +183,23 @@ def test_auth_facade_does_not_replay_ambiguous_failure(
         return httpx.Response(503, json={"error": "unavailable"})
 
     with pytest.raises(VolcanoError):
-        case.invoke(client_for(handle))
+        _ = case.invoke(client_for(handle))
     assert len(requests) == 1
 
 
-@pytest.mark.parametrize("case", CASES, ids=lambda case: case.name)
+@pytest.mark.parametrize("case", CASES, ids=case_name)
 def test_auth_facade_preserves_replacement_without_replaying(case: AuthCase) -> None:
     requests: list[httpx.Request] = []
     replacement = Session("other", "other-refresh", "other-user")
 
     def handle(request: httpx.Request) -> httpx.Response:
         requests.append(request)
-        client.auth.set_session(replacement)
+        _ = client.auth.set_session(replacement)
         return httpx.Response(401, json={"error": "expired"})
 
     client = client_for(handle)
     with pytest.raises(SessionChangedError):
-        case.invoke(client)
+        _ = case.invoke(client)
     assert len(requests) == 1
     assert client.current_session == replacement
 
@@ -232,7 +236,7 @@ def test_oauth_recovery_replays_a_snapshot_of_the_nested_body() -> None:
             },
         )
 
-    client_for(handle).auth.call_oauth_api(
+    _ = client_for(handle).auth.call_oauth_api(
         provider="github", endpoint="/user", method="POST", body=body
     )
     assert requests[0].content == requests[2].content
@@ -252,12 +256,14 @@ def test_oauth_captures_ownership_before_copying_the_request(
     client = client_for(handle)
 
     def replace_while_copying(value: dict[str, JSONValue]) -> dict[str, JSONValue]:
-        client.auth.set_session(replacement)
+        _ = client.auth.set_session(replacement)
         return deepcopy(value)
 
     monkeypatch.setattr(auth_module, "deepcopy", replace_while_copying)
     with pytest.raises(SessionChangedError):
-        client.auth.call_oauth_api(provider="github", endpoint="/user", body={"x": 1})
+        _ = client.auth.call_oauth_api(
+            provider="github", endpoint="/user", body={"x": 1}
+        )
     assert client.current_session == replacement
     assert not requests
 
@@ -265,7 +271,7 @@ def test_oauth_captures_ownership_before_copying_the_request(
 @pytest.mark.parametrize(
     "case",
     [case for case in CASES if case.name in {"token", "refresh_token", "provider_api"}],
-    ids=lambda case: case.name,
+    ids=case_name,
 )
 @pytest.mark.parametrize(
     "payload", [b"", b"not-json", b"null", b"42", b"true", b"\xff"]
@@ -288,7 +294,7 @@ def test_malformed_oauth_response_preserves_session_without_retry(
     )
 
     with pytest.raises(VolcanoError, match=message) as error:
-        case.invoke(client)
+        _ = case.invoke(client)
 
     assert error.value.__cause__ is not None
     assert client.current_session is original
@@ -332,11 +338,11 @@ def test_delete_current_session_clears_refreshed_descendant(
         if len(requests) == 1:
             if timing == "401":
                 return httpx.Response(401)
-            client.auth.refresh_session()
+            _ = client.auth.refresh_session()
         return deletion_response(request, failure=failure)
 
     client = client_for(handle)
-    client.auth.set_session(Session(session_token(), "refresh-1", USER))
+    _ = client.auth.set_session(Session(session_token(), "refresh-1", USER))
     delete_current_session(client, failure=failure)
     assert client.current_session is None
     assert len(requests) == (3 if timing == "401" else 2)
@@ -349,11 +355,11 @@ def test_delete_current_session_preserves_explicit_replacement(
     replacement = Session("other", "other-refresh", "other-user")
 
     def handle(request: httpx.Request) -> httpx.Response:
-        client.auth.set_session(replacement)
+        _ = client.auth.set_session(replacement)
         return deletion_response(request, failure=failure)
 
     client = client_for(handle)
-    client.auth.set_session(Session(session_token(), "refresh-1", USER))
+    _ = client.auth.set_session(Session(session_token(), "refresh-1", USER))
     with pytest.raises(SessionChangedError):
         client.auth.delete_session(session_id=SESSION)
     assert client.current_session == replacement
@@ -371,7 +377,7 @@ def test_delete_other_session_rejects_completion_after_local_clear(
                 client.auth.sign_out()
             else:
                 with pytest.raises(VolcanoError, match="expired refresh"):
-                    client.auth.refresh_session()
+                    _ = client.auth.refresh_session()
         return httpx.Response(204)
 
     client = client_for(handle)

{volcano_sdk_python-0.12.0 → volcano_sdk_python-0.13.0}/tests/unit/test_session_continuity.py

@@ -87,9 +87,9 @@ def test_refresh_cannot_replay_a_bootstrap_mutation_in_another_server_session(
 
     client = client_for(handle)
     if profile_first:
-        client.auth.get_user()
+        _ = client.auth.get_user()
     with pytest.raises(AuthenticationError):
-        client.database("main").from_("items").insert({"name": "example"}).execute()
+        _ = client.database("main").from_("items").insert({"name": "example"}).execute()
     assert client.current_session is not None
     assert client.current_session.access_token == access_token(SESSION_A)
     assert len([r for r in requests if r.url.path != "/auth/user"]) == 2
@@ -114,7 +114,7 @@ def test_unidentified_bootstrap_cannot_refresh_without_a_continuity_identifier()
         ),
     )
     with pytest.raises(AuthenticationError, match="session identifier"):
-        client.auth.refresh_session()
+        _ = client.auth.refresh_session()
     assert not requests
 
 
@@ -129,7 +129,7 @@ def test_sign_out_renews_expired_access_only_for_the_same_captured_session(
         requests.append(request)
         if request.url.path == "/auth/refresh":
             if replace:
-                client.auth.set_session(replacement)
+                _ = client.auth.set_session(replacement)
             return refreshed(SESSION_A)
         return expired_session_response(request)
 
@@ -151,7 +151,7 @@ def test_sign_out_prevents_a_new_refresh_of_the_same_server_session() -> None:
         if request.url.path == "/auth/refresh":
             return refreshed(SESSION_A)
         with pytest.raises(SessionChangedError):
-            client.auth.refresh_session()
+            _ = client.auth.refresh_session()
         return httpx.Response(204)
 
     client = client_for(handle)
@@ -178,12 +178,12 @@ def test_deeply_nested_access_claims_remain_untrusted(operation: str) -> None:
         return httpx.Response(204)
 
     client = client_for(handle)
-    client.auth.set_session(
+    _ = client.auth.set_session(
         Session(f"header.{encoded}.signature", "unverified-refresh", USER_A)
     )
     if operation == "refresh":
         with pytest.raises(AuthenticationError, match="without a session identifier"):
-            client.auth.refresh_session()
+            _ = client.auth.refresh_session()
         assert client.current_session is not None
     else:
         client = VolcanoClient(
@@ -246,14 +246,14 @@ def test_sign_out_joins_a_refresh_that_already_owns_the_rotating_token(
             assert sign_out_captured.wait(2)
             assert not signing_out.done()
             if replace_session:
-                client.auth.set_session(
+                _ = client.auth.set_session(
                     Session("replacement", "replacement-refresh", USER_B)
                 )
         finally:
             finish_refresh.set()
         # Logout may clear the lineage before the refresh caller reads it.
         with suppress(SessionChangedError):
-            refreshing.result(timeout=2)
+            _ = refreshing.result(timeout=2)
         if replace_session:
             with pytest.raises(SessionChangedError):
                 signing_out.result(timeout=2)
@@ -295,7 +295,7 @@ def test_sign_out_surfaces_the_refresh_it_joined_without_claiming_replacement(
 
     client = client_for(rejected_refresh_handler(requests, entered, release, status))
     if known_pair:
-        client.auth.sign_in(email="user@example.com", password="synthetic")
+        _ = client.auth.sign_in(email="user@example.com", password="synthetic")
         requests.clear()
     original = client.auth._sign_out_captured
 
@@ -319,7 +319,7 @@ def test_sign_out_surfaces_the_refresh_it_joined_without_claiming_replacement(
         finally:
             release.set()
         with suppress(VolcanoError):
-            refreshing.result(timeout=2)
+            _ = refreshing.result(timeout=2)
         if known_pair and status == 429:
             assert signing_out.result(timeout=2) is None
         else:
@@ -379,10 +379,10 @@ def test_sign_out_revokes_a_server_issued_pair_without_access_renewal(
         return verified_pair_response(request)
 
     client = client_for(handle)
-    client.auth.sign_in(email="user@example.com", password="synthetic")
+    _ = client.auth.sign_in(email="user@example.com", password="synthetic")
     if refresh_first:
         with pytest.raises(VolcanoError) as caught:
-            client.auth.refresh_session()
+            _ = client.auth.refresh_session()
         assert caught.value.status == 429
     owner = client._capture_session_binding()[1]
     client.auth.sign_out()
@@ -412,11 +412,11 @@ def test_explicit_adoption_does_not_inherit_server_pair_provenance(
     original = client.auth.sign_in(email="user@example.com", password="synthetic")
     supplied = Session(access_token(SESSION_B), original.refresh_token, USER_B)
     if hosted:
-        client.auth.adopt_hosted_auth_session(
+        _ = client.auth.adopt_hosted_auth_session(
             supplied, state="nonce", expected_state="nonce"
         )
     else:
-        client.auth.set_session(supplied)
+        _ = client.auth.set_session(supplied)
     client.auth.sign_out()
     assert [r.url.path for r in requests] == [
         "/auth/signin",
@@ -532,12 +532,12 @@ def test_supplied_profile_does_not_authorize_refresh_without_sid(
         return refreshed(SESSION_B)
 
     client = client_for(handle)
-    client.auth.set_session(Session("opaque", "foreign-refresh", USER_A))
+    _ = client.auth.set_session(Session("opaque", "foreign-refresh", USER_A))
     if enriched:
-        client.auth.get_user()
+        _ = client.auth.get_user()
         requests.clear()
     with pytest.raises(AuthenticationError, match="session identifier"):
-        client.auth.refresh_session()
+        _ = client.auth.refresh_session()
     assert not requests
     assert client.current_session is not None
     assert client.current_session.access_token == "opaque"
@@ -554,8 +554,8 @@ def test_delete_current_session_discards_retained_credentials(*, fails: bool) ->
         return httpx.Response(204)
 
     client = client_for(handle)
-    client.auth.sign_in(email="u@example.com", password="synthetic")
-    client.auth.refresh_session()
+    _ = client.auth.sign_in(email="u@example.com", password="synthetic")
+    _ = client.auth.refresh_session()
     _, owner, session = client._capture_session_binding()
     assert session is not None
     if fails:
@@ -589,7 +589,7 @@ def test_deletion_does_not_retain_a_later_refresh_result() -> None:
         finally:
             release.set()
         with pytest.raises(SessionChangedError):
-            refreshing.result(2)
+            _ = refreshing.result(2)
     assert client.current_session is None
     assert owner.refreshing is None
     assert owner._verified_pair is None
@@ -625,7 +625,7 @@ def test_local_clear_before_refresh_claim_prevents_io(
         finally:
             release.set()
         with pytest.raises(SessionChangedError):
-            refreshing.result(2)
+            _ = refreshing.result(2)
     assert len(requests) == 1
     assert requests[0].url.path == f"/auth/user/sessions/{SESSION_A}"
     assert client.current_session is None
@@ -648,11 +648,11 @@ def test_refresh_rechecks_ownership_after_notifying_subscribers(action: str) ->
             if action == "sign_out":
                 client.auth.sign_out()
             else:
-                client.auth.set_session(replacement)
+                _ = client.auth.set_session(replacement)
 
-    client.auth.on_auth_state_change(on_change)
+    _ = client.auth.on_auth_state_change(on_change)
     with pytest.raises(SessionChangedError):
-        client.auth.refresh_session()
+        _ = client.auth.refresh_session()
     assert client.current_session == (None if action == "sign_out" else replacement)