volcano-sdk-python 0.13.1__tar.gz → 0.13.2__tar.gz

volcano_sdk_python-0.13.2/.release-please-manifest.json

@@ -0,0 +1,3 @@
+{
+  ".": "0.13.2"
+}

{volcano_sdk_python-0.13.1 → volcano_sdk_python-0.13.2}/CHANGELOG.md

@@ -1,5 +1,13 @@
 # Changelog
 
+## [0.13.2](https://github.com/Kong/volcano-sdk-python/compare/v0.13.1...v0.13.2) (2026-09-24)
+
+
+### Bug Fixes
+
+* **python:** guard function resolution and lock expiry boundaries ([#361](https://github.com/Kong/volcano-sdk-python/issues/361)) ([505b7e2](https://github.com/Kong/volcano-sdk-python/commit/505b7e2e8c79be9a086430cc462a04191994be84))
+* validate log JSON boundaries and close mutation gaps ([#356](https://github.com/Kong/volcano-sdk-python/issues/356)) ([d1e76da](https://github.com/Kong/volcano-sdk-python/commit/d1e76da9a7c164a69b87f570bd2216ebe20afe82))
+
 ## [0.13.1](https://github.com/Kong/volcano-sdk-python/compare/v0.13.0...v0.13.1) (2026-09-24)
 
 

{volcano_sdk_python-0.13.1 → volcano_sdk_python-0.13.2}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.5
 Name: volcano-sdk-python
-Version: 0.13.1
+Version: 0.13.2
 Summary: Official Python SDK for Volcano
 Project-URL: Homepage, https://volcano.dev
 Project-URL: Repository, https://github.com/Kong/volcano-sdk-python

{volcano_sdk_python-0.13.1 → volcano_sdk_python-0.13.2}/maintainers/mutation-testing.md

@@ -14,7 +14,7 @@ when mutants survive. `scripts/mutation.sh` selects module names from Git and
 report at `reports/mutation.json` distinguishes killed, statically invalid,
 surviving, uncovered, timed-out, crashed, interrupted, and missing results.
 A pytest internal error is a harness crash, not a killed mutant.
-The pinned Pyrefly check rejects type-invalid realtime mutants before pytest;
+The pinned Pyrefly check rejects type-invalid realtime and auth mutants before pytest;
 the report counts these as `type_checked`, separately from test-killed mutants.
 Surviving, uncovered, timed-out, crashed, and incomplete mutants still fail.
 Mutmut passes pytest `-x` so a selected test's first assertion failure kills the

volcano_sdk_python-0.13.2/maintainers/quality-exceptions.json

@@ -0,0 +1,20 @@
+[
+  {
+    "rule": "S603",
+    "scope": "scripts/generate_openapi.py:generate",
+    "rationale": "The command invokes the current Python interpreter with an argument list and no shell. The output path is passed as data.",
+    "evidence": "scripts/generate_openapi.py:52-70; the executable is sys.executable and all command switches are literals.",
+    "approved_by": "swkeever",
+    "approved_at": "2026-08-27",
+    "approval_evidence": "Original suppression introduced in commit 95ea362b and merged by swkeever in PR #1 on 2026-08-27."
+  },
+  {
+    "rule": "pytest.filterwarnings",
+    "scope": "tests/unit/test_durable_authoring.py:pytestmark",
+    "rationale": "The AWS durable local test runner calls asyncio.iscoroutinefunction, deprecated in Python 3.14. This exact upstream warning does not originate in SDK code; all other warnings remain errors.",
+    "evidence": "The module-scoped marker was introduced in commit f97aeee6 (PR #133) with its upstream-runner rationale at tests/unit/test_durable_authoring.py:48-56.",
+    "approved_by": "subnetmarco",
+    "approved_at": "2026-09-19",
+    "approval_evidence": "Existing filter shipped in PR #133, merged by subnetmarco on 2026-09-19."
+  }
+]

{volcano_sdk_python-0.13.1 → volcano_sdk_python-0.13.2}/maintainers/quality-policy.lock.json

@@ -99,6 +99,54 @@
           "reportUnusedCallResult": "error",
           "root": "tests/package"
         },
+        {
+          "reportAny": "error",
+          "reportExplicitAny": "error",
+          "reportInvalidCast": "error",
+          "reportUnannotatedClassAttribute": "error",
+          "root": "tests/unit/test_realtime_callback_boundaries.py"
+        },
+        {
+          "reportAny": "error",
+          "reportExplicitAny": "error",
+          "reportInvalidCast": "error",
+          "reportUnannotatedClassAttribute": "error",
+          "root": "tests/unit/test_realtime_cleanup_boundaries.py"
+        },
+        {
+          "reportAny": "error",
+          "reportExplicitAny": "error",
+          "reportInvalidCast": "error",
+          "reportUnannotatedClassAttribute": "error",
+          "root": "tests/unit/test_realtime_connection_boundaries.py"
+        },
+        {
+          "reportAny": "error",
+          "reportExplicitAny": "error",
+          "reportInvalidCast": "error",
+          "reportUnannotatedClassAttribute": "error",
+          "root": "tests/unit/test_realtime_delivery_boundaries.py"
+        },
+        {
+          "reportAny": "error",
+          "reportExplicitAny": "error",
+          "reportInvalidCast": "error",
+          "reportUnannotatedClassAttribute": "error",
+          "root": "tests/unit/test_realtime_input_boundaries.py"
+        },
+        {
+          "extraPaths": [
+            ".",
+            "src",
+            "tests/unit",
+            "features"
+          ],
+          "reportAny": "error",
+          "reportExplicitAny": "error",
+          "reportInvalidCast": "error",
+          "reportUnannotatedClassAttribute": "error",
+          "root": "tests/unit/test_mutation_results.py"
+        },
         {
           "extraPaths": [
             ".",
@@ -149,6 +197,7 @@
       "reportUnnecessaryTypeIgnoreComment": "error",
       "reportUnreachable": "error",
       "reportUnsafeMultipleInheritance": "error",
+      "reportUnusedCallResult": "error",
       "reportUnusedParameter": "error",
       "stubPath": "typings",
       "typeCheckingMode": "strict",
@@ -220,7 +269,12 @@
         "pyrefly",
         "check",
         "--output-format=json",
-        "src/volcano_sdk/realtime.py"
+        "src/volcano_sdk/realtime.py",
+        "src/volcano_sdk/auth.py",
+        "src/volcano_sdk/storage.py",
+        "src/volcano_sdk/functions.py",
+        "src/volcano_sdk/database.py",
+        "src/volcano_sdk/_function_resolution.py"
       ]
     },
     "mypy": {
@@ -295,7 +349,10 @@
             }
           ]
         },
-        "coverage": "uv run --locked --isolated --python 3.12 pytest -c pyproject.toml tests/unit -q --cov --cov-config=pyproject.toml --cov-report=term-missing --cov-report=json:reports/coverage.json --junitxml=reports/coverage-unit.xml",
+        "coverage": {
+          "interpreter": "bash",
+          "shell": "set -euo pipefail\nreport_dir=\"$(mktemp -d)\"\ntrap 'rm -rf \"$report_dir\"' EXIT\ntest_status=0\nuv run --locked --isolated --python 3.12 pytest -c pyproject.toml tests/unit -q --cov --cov-config=pyproject.toml --cov-report=term-missing --cov-report=json:\"$report_dir/coverage.json\" --junitxml=\"$report_dir/unit.xml\" || test_status=$?\nmkdir -p reports\nif test -s \"$report_dir/coverage.json\"; then\n  mv \"$report_dir/coverage.json\" reports/coverage.json\nelse\n  echo 'pytest-cov did not write a coverage report' >&2\n  if [[ $test_status -eq 0 ]]; then test_status=1; fi\nfi\nif test -s \"$report_dir/unit.xml\"; then\n  mv \"$report_dir/unit.xml\" reports/coverage-unit.xml\nelse\n  echo 'pytest did not write a JUnit report' >&2\n  if [[ $test_status -eq 0 ]]; then test_status=1; fi\nfi\nexit \"$test_status\"\n"
+        },
         "format-check": "ruff format --check --config pyproject.toml .",
         "generated": "python -m scripts.check_openapi",
         "lint": "ruff check --config pyproject.toml .",
@@ -314,7 +371,10 @@
           "checks",
           "mutation"
         ],
-        "test": "pytest -c pyproject.toml tests/unit -q --junitxml=reports/unit.xml",
+        "test": {
+          "interpreter": "bash",
+          "shell": "set -euo pipefail\nreport_dir=\"$(mktemp -d)\"\ntrap 'rm -rf \"$report_dir\"' EXIT\ntest_status=0\npytest -c pyproject.toml tests/unit -q --junitxml=\"$report_dir/unit.xml\" || test_status=$?\nmkdir -p reports\nif test -s \"$report_dir/unit.xml\"; then\n  mv \"$report_dir/unit.xml\" reports/unit.xml\nelse\n  echo 'pytest did not write a JUnit report' >&2\n  if [[ $test_status -eq 0 ]]; then test_status=1; fi\nfi\nexit \"$test_status\"\n"
+        },
         "types": [
           "mypy",
           "basedpyright"

{volcano_sdk_python-0.13.1 → volcano_sdk_python-0.13.2}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "hatchling.build"
 
 [project]
 name = "volcano-sdk-python"
-version = "0.13.1"
+version = "0.13.2"
 description = "Official Python SDK for Volcano"
 readme = "README.md"
 requires-python = ">=3.11"
@@ -159,6 +159,7 @@ reportCallInDefaultInitializer = "error"
 reportImplicitRelativeImport = "error"
 reportUnnecessaryCast = "error"
 reportUnnecessaryComparison = "error"
+reportUnusedCallResult = "error"
 reportIncompatibleVariableOverride = "error"
 # Package-level collaborators intentionally share private implementation details;
 # Ruff still enforces private access everywhere else.
@@ -258,6 +259,49 @@ reportPrivateUsage = "error"
 reportUnannotatedClassAttribute = "error"
 reportUnusedCallResult = "error"
 
+[[tool.basedpyright.executionEnvironments]]
+root = "tests/unit/test_realtime_callback_boundaries.py"
+reportAny = "error"
+reportExplicitAny = "error"
+reportInvalidCast = "error"
+reportUnannotatedClassAttribute = "error"
+
+[[tool.basedpyright.executionEnvironments]]
+root = "tests/unit/test_realtime_cleanup_boundaries.py"
+reportAny = "error"
+reportExplicitAny = "error"
+reportInvalidCast = "error"
+reportUnannotatedClassAttribute = "error"
+
+[[tool.basedpyright.executionEnvironments]]
+root = "tests/unit/test_realtime_connection_boundaries.py"
+reportAny = "error"
+reportExplicitAny = "error"
+reportInvalidCast = "error"
+reportUnannotatedClassAttribute = "error"
+
+[[tool.basedpyright.executionEnvironments]]
+root = "tests/unit/test_realtime_delivery_boundaries.py"
+reportAny = "error"
+reportExplicitAny = "error"
+reportInvalidCast = "error"
+reportUnannotatedClassAttribute = "error"
+
+[[tool.basedpyright.executionEnvironments]]
+root = "tests/unit/test_realtime_input_boundaries.py"
+reportAny = "error"
+reportExplicitAny = "error"
+reportInvalidCast = "error"
+reportUnannotatedClassAttribute = "error"
+
+[[tool.basedpyright.executionEnvironments]]
+root = "tests/unit/test_mutation_results.py"
+extraPaths = [".", "src", "tests/unit", "features"]
+reportAny = "error"
+reportExplicitAny = "error"
+reportInvalidCast = "error"
+reportUnannotatedClassAttribute = "error"
+
 [[tool.basedpyright.executionEnvironments]]
 root = "scripts"
 extraPaths = [".", "src", "tests/unit", "features"]
@@ -376,7 +420,15 @@ partial_branches = []
 
 [tool.mutmut]
 source_paths = ["src/volcano_sdk"]
-type_check_command = ["pyrefly", "check", "--output-format=json", "src/volcano_sdk/realtime.py"]
+type_check_command = [
+  "pyrefly", "check", "--output-format=json",
+  "src/volcano_sdk/realtime.py",
+  "src/volcano_sdk/auth.py",
+  "src/volcano_sdk/storage.py",
+  "src/volcano_sdk/functions.py",
+  "src/volcano_sdk/database.py",
+  "src/volcano_sdk/_function_resolution.py",
+]
 cache_invalidation_files = ["tests/**/*.py"]
 pytest_add_cli_args_test_selection = ["tests/unit"]
 pytest_add_cli_args = ["-c", "pyproject.toml", "-x"]
@@ -405,11 +457,51 @@ format-check = "ruff format --check --config pyproject.toml ."
 types = ["mypy", "basedpyright"]
 mypy = "mypy --config-file pyproject.toml"
 basedpyright = "basedpyright --project pyproject.toml"
-test = "pytest -c pyproject.toml tests/unit -q --junitxml=reports/unit.xml"
-coverage = "uv run --locked --isolated --python 3.12 pytest -c pyproject.toml tests/unit -q --cov --cov-config=pyproject.toml --cov-report=term-missing --cov-report=json:reports/coverage.json --junitxml=reports/coverage-unit.xml"
 mutation = "bash scripts/mutation.sh"
 mutation-full = "MUTATION_FULL=1 bash scripts/mutation.sh"
 
+[tool.poe.tasks.test]
+interpreter = "bash"
+shell = """
+set -euo pipefail
+report_dir="$(mktemp -d)"
+trap 'rm -rf "$report_dir"' EXIT
+test_status=0
+pytest -c pyproject.toml tests/unit -q --junitxml="$report_dir/unit.xml" || test_status=$?
+mkdir -p reports
+if test -s "$report_dir/unit.xml"; then
+  mv "$report_dir/unit.xml" reports/unit.xml
+else
+  echo 'pytest did not write a JUnit report' >&2
+  if [[ $test_status -eq 0 ]]; then test_status=1; fi
+fi
+exit "$test_status"
+"""
+
+[tool.poe.tasks.coverage]
+interpreter = "bash"
+shell = """
+set -euo pipefail
+report_dir="$(mktemp -d)"
+trap 'rm -rf "$report_dir"' EXIT
+test_status=0
+uv run --locked --isolated --python 3.12 pytest -c pyproject.toml tests/unit -q --cov --cov-config=pyproject.toml --cov-report=term-missing --cov-report=json:"$report_dir/coverage.json" --junitxml="$report_dir/unit.xml" || test_status=$?
+mkdir -p reports
+if test -s "$report_dir/coverage.json"; then
+  mv "$report_dir/coverage.json" reports/coverage.json
+else
+  echo 'pytest-cov did not write a coverage report' >&2
+  if [[ $test_status -eq 0 ]]; then test_status=1; fi
+fi
+if test -s "$report_dir/unit.xml"; then
+  mv "$report_dir/unit.xml" reports/coverage-unit.xml
+else
+  echo 'pytest did not write a JUnit report' >&2
+  if [[ $test_status -eq 0 ]]; then test_status=1; fi
+fi
+exit "$test_status"
+"""
+
 [tool.poe.tasks.contract-check]
 sequence = [
   { cmd = "chmod 600 tests/fixtures/sdk-contract-dry-run.json" },

{volcano_sdk_python-0.13.1 → volcano_sdk_python-0.13.2}/scripts/check_package.sh

@@ -23,7 +23,16 @@ strict = True
 INI
 cat > "$smoke_dir/consumer.py" <<'PY'
 from typing import assert_type
-from volcano_sdk import Session, User, VolcanoClient
+from volcano_sdk import (
+    DurableExecution,
+    FunctionResponse,
+    LockLease,
+    LogActivityResponse,
+    LogSearchResponse,
+    Session,
+    User,
+    VolcanoClient,
+)
 
 client = VolcanoClient(anon_key="example", access_token="supplied-access")
 assert_type(client.auth.get_session(), Session | None)
@@ -33,6 +42,13 @@ if session is not None:
     assert_type(session.user_id, str | None)
 assert_type(client.auth.get_user(), User)
 assert_type(client.storage.from_("assets").download("hello.txt"), bytes)
+assert_type(client.functions.invoke("echo"), FunctionResponse)
+assert_type(client.database("main").from_("items").execute(), list[dict[str, object]])
+assert_type(client.logs.search("project", {}), LogSearchResponse)
+assert_type(client.logs.activity("project", {}), LogActivityResponse)
+assert_type(client.locks.acquire("build", ttl=30), LockLease)
+assert_type(client.durable.get("project", "function", "execution"), DurableExecution)
+assert_type(client.realtime.is_connected, bool)
 PY
 for artifact in "${artifacts[@]}"; do
   artifact_digest="$(shasum -a 256 "$artifact")"
@@ -41,6 +57,7 @@ for artifact in "${artifacts[@]}"; do
   "$smoke_dir/venv/bin/python" -I - <<'PY'
 import os
 from importlib.metadata import distribution
+from importlib.resources import files
 from volcano_sdk import VolcanoClient
 
 package = distribution("volcano-sdk-python")
@@ -48,6 +65,7 @@ assert package.metadata["Name"] == "volcano-sdk-python"
 assert package.version == os.environ["PACKAGE_VERSION"]
 assert VolcanoClient
 assert package.read_text("WHEEL")
+assert files("volcano_sdk").joinpath("py.typed").is_file()
 print(f"Installed {package.metadata['Name']} {package.version}; volcano_sdk import OK")
 PY
   env -i PATH="$PATH" HOME="$smoke_dir" \

{volcano_sdk_python-0.13.1 → volcano_sdk_python-0.13.2}/scripts/check_quality_policy.py

@@ -18,7 +18,7 @@ if TYPE_CHECKING:
     from collections.abc import Iterable
 
 GENERATED = "src/volcano_sdk/_generated"
-LOCK_SHA256 = "b59fb5e30f45b129d625d758bb1fae2447c0b015d233a9a67b9fbbb0d1b7b450"
+LOCK_SHA256 = "925d505fd245bd815fffe4a94ec89298294589e5b536aeb51e24d613eb86b6f0"
 TYPE_FIXTURES = {
     "tests/typing/contract_steps.py",
     "tests/typing/durable_callbacks.py",
@@ -48,9 +48,18 @@ CONFIG_NAMES = {
     ".coveragerc",
 }
 APPROVED_EXCEPTION_SHA256 = (
-    "a00f1cb0e255bea7f8ac7ada615ae8953e3e30c20ca5580a7a41333e695bfb23"
+    "e97935a8767e870713640b4cf9ec1d65ec65464b68cb156ea4e40e8e9c763cf7"
+)
+APPROVED_RULES = {
+    ("scripts/generate_openapi.py:generate", "S603"),
+    ("tests/unit/test_durable_authoring.py:pytestmark", "pytest.filterwarnings"),
+}
+WARNING_PREFIX = "ignore:'asyncio.iscoroutinefunction' is deprecated"
+REVIEWED_WARNING = f"{WARNING_PREFIX}:{DeprecationWarning.__name__}"
+REVIEWED_WARNING_FILTER = ast.dump(
+    ast.parse(f"pytestmark = pytest.mark.filterwarnings({REVIEWED_WARNING!r})").body[0],
+    include_attributes=False,
 )
-APPROVED_RULES = {("scripts/generate_openapi.py:generate", "S603")}
 FORBIDDEN = re.compile(
     r"""
     \b(?:noqa|nosec|pragma:\s*no\s+(?:cover|branch))\b
@@ -278,6 +287,15 @@ def check_comments(
         source = (root / name).read_text(encoding="utf-8")
         for token in tokenize.generate_tokens(io.StringIO(source).readline):
             errors.extend(check_token(name, source, token, approved, used))
+        if (
+            name == "tests/unit/test_durable_authoring.py"
+            and sum(
+                ast.dump(statement, include_attributes=False) == REVIEWED_WARNING_FILTER
+                for statement in ast.parse(source).body
+            )
+            == 1
+        ):
+            used.add((f"{name}:pytestmark", "pytest.filterwarnings"))
     errors.extend(
         f"unused exception: {scope} {rule}" for scope, rule in sorted(approved - used)
     )

{volcano_sdk_python-0.13.1 → volcano_sdk_python-0.13.2}/src/volcano_sdk/_function_resolution.py

@@ -15,6 +15,8 @@ from dataclasses import dataclass
 from typing import TYPE_CHECKING
 from urllib.parse import urlsplit
 
+import httpx
+
 if TYPE_CHECKING:
     from .errors import NotFoundError
 
@@ -106,28 +108,30 @@ def valid_invoke_url(value: object, api_url: str) -> str | None:
     return None
 
 
-def _absolute_url_scheme(value: str) -> str:
-    """Return the lowercase scheme of an absolute URL, or "" when there is none.
+def _absolute_url_scheme(value: str) -> str | None:
+    """Return the lowercase scheme of an absolute URL, or None when unusable.
 
-    Unparseable input yields "" rather than raising, so a malformed URL reads
+    Unparseable input yields None rather than raising, so a malformed URL reads
     as unusable to every caller.
 
     Returns
     -------
-    str
-        The lowercase scheme, or an empty string for an invalid authority or URL.
+    str or None
+        The lowercase scheme, or None for an invalid authority or URL.
 
     """
     if not value or any(character.isspace() for character in value):
-        return ""
+        return None
     try:
         parsed = urlsplit(value)
         # Reading the authority is the validation: an unclosed IPv6 literal or
         # a port out of range raises here rather than at request time.
         host, _port = parsed.hostname, parsed.port
-    except ValueError:
-        return ""
-    return parsed.scheme.lower() if host else ""
+        # urlsplit accepts controls that HTTPX rejects when invoking the URL.
+        _ = httpx.URL(value)
+    except (ValueError, httpx.InvalidURL):
+        return None
+    return parsed.scheme.lower() if host else None
 
 
 def lookup(api_url: str, authorization: str, name: str) -> CachedOutcome | None:

{volcano_sdk_python-0.13.1 → volcano_sdk_python-0.13.2}/src/volcano_sdk/_log_response.py

@@ -2,8 +2,9 @@
 
 from __future__ import annotations
 
+import math
 from collections.abc import Mapping
-from typing import TYPE_CHECKING, cast
+from typing import TYPE_CHECKING, TypeGuard
 
 if TYPE_CHECKING:
     from .models import JSONValue
@@ -11,6 +12,38 @@ if TYPE_CHECKING:
 INVALID_LOG_RESPONSE = "Expected a complete log response"
 
 
+def _is_object_mapping(value: object) -> TypeGuard[Mapping[object, object]]:
+    return isinstance(value, Mapping)
+
+
+def _is_object_list(value: object) -> TypeGuard[list[object]]:
+    return isinstance(value, list)
+
+
+def _is_object_tuple(value: object) -> TypeGuard[tuple[object, ...]]:
+    return isinstance(value, tuple)
+
+
+def _is_json_scalar(value: object) -> TypeGuard[str | int | float | bool | None]:
+    if isinstance(value, float):
+        return math.isfinite(value)
+    return value is None or isinstance(value, (str, int, bool))
+
+
+def _is_json_value(value: object) -> TypeGuard[JSONValue]:
+    if _is_json_scalar(value):
+        return True
+    if _is_object_list(value):
+        return all(_is_json_value(item) for item in value)
+    if _is_object_tuple(value):
+        return all(_is_json_value(item) for item in value)
+    if _is_object_mapping(value):
+        return all(
+            isinstance(key, str) and _is_json_value(item) for key, item in value.items()
+        )
+    return False
+
+
 def response_values(payload: object) -> Mapping[str, object]:
     """Require a JSON object for the response envelope.
 
@@ -21,9 +54,25 @@ def response_values(payload: object) -> Mapping[str, object]:
         TypeError: The response envelope is not an object.
 
     """
-    if not isinstance(payload, Mapping):
+    if not _is_object_mapping(payload):
         raise TypeError(INVALID_LOG_RESPONSE)
-    return cast("Mapping[str, object]", payload)
+    values: dict[str, object] = {}
+    for key, value in payload.items():
+        if not isinstance(key, str):
+            raise TypeError(INVALID_LOG_RESPONSE)
+        values[key] = value
+    return values
+
+
+def _row_values(item: object) -> Mapping[str, JSONValue]:
+    if not _is_object_mapping(item):
+        raise TypeError(INVALID_LOG_RESPONSE)
+    row: dict[str, JSONValue] = {}
+    for key, value in item.items():
+        if not isinstance(key, str) or not _is_json_value(value):
+            raise TypeError(INVALID_LOG_RESPONSE)
+        row[key] = value
+    return row
 
 
 def response_data(values: Mapping[str, object]) -> tuple[Mapping[str, JSONValue], ...]:
@@ -37,12 +86,9 @@ def response_data(values: Mapping[str, object]) -> tuple[Mapping[str, JSONValue]
 
     """
     raw_data = values.get("data")
-    if not isinstance(raw_data, list):
-        raise TypeError(INVALID_LOG_RESPONSE)
-    data = cast("list[object]", raw_data)
-    if any(not isinstance(item, Mapping) for item in data):
+    if not _is_object_list(raw_data):
         raise TypeError(INVALID_LOG_RESPONSE)
-    return tuple(cast("Mapping[str, JSONValue]", item) for item in data)
+    return tuple(_row_values(item) for item in raw_data)
 
 
 def search_metadata(values: Mapping[str, object]) -> tuple[int, bool, str | None]: