volcano-sdk-python 0.7.1__tar.gz → 0.7.2__tar.gz

volcano_sdk_python-0.7.2/.release-please-manifest.json

@@ -0,0 +1,3 @@
+{
+  ".": "0.7.2"
+}

{volcano_sdk_python-0.7.1 → volcano_sdk_python-0.7.2}/CHANGELOG.md

@@ -1,5 +1,12 @@
 # Changelog
 
+## [0.7.2](https://github.com/Kong/volcano-sdk-python/compare/v0.7.1...v0.7.2) (2026-09-17)
+
+
+### Bug Fixes
+
+* **storage:** refresh rejected sessions and replay bounded requests ([#154](https://github.com/Kong/volcano-sdk-python/issues/154)) ([5b1f93f](https://github.com/Kong/volcano-sdk-python/commit/5b1f93fa59fda0a5cd5b06c6e9cc2da3f372ab8a))
+
 ## [0.7.1](https://github.com/Kong/volcano-sdk-python/compare/v0.7.0...v0.7.1) (2026-09-17)
 
 

{volcano_sdk_python-0.7.1 → volcano_sdk_python-0.7.2}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.5
 Name: volcano-sdk-python
-Version: 0.7.1
+Version: 0.7.2
 Summary: Official Python SDK for Volcano
 Project-URL: Homepage, https://volcano.dev
 Project-URL: Repository, https://github.com/Kong/volcano-sdk-python
@@ -219,7 +219,8 @@ events. Pass `next_cursor` back as `cursor` to continue a search. `logs.activity
 returns immutable time buckets using the same resource selector and query syntax.
 Both methods require an active user session.
 
-Database selects, inserts, updates, deletes, and log reads refresh the captured
+Database selects, inserts, updates, deletes, log reads, and authenticated storage
+requests (including upload sessions and parts) refresh the captured
 session after an HTTP 401 and retry the same request once. Concurrent requests reuse a successful
 refresh for that session.
 Replacing or signing out the session before replay, or while replay is in flight,

{volcano_sdk_python-0.7.1 → volcano_sdk_python-0.7.2}/README.md

@@ -197,7 +197,8 @@ events. Pass `next_cursor` back as `cursor` to continue a search. `logs.activity
 returns immutable time buckets using the same resource selector and query syntax.
 Both methods require an active user session.
 
-Database selects, inserts, updates, deletes, and log reads refresh the captured
+Database selects, inserts, updates, deletes, log reads, and authenticated storage
+requests (including upload sessions and parts) refresh the captured
 session after an HTTP 401 and retry the same request once. Concurrent requests reuse a successful
 refresh for that session.
 Replacing or signing out the session before replay, or while replay is in flight,

volcano_sdk_python-0.7.2/features/staged/README.md

@@ -0,0 +1,11 @@
+# Staged contract scenarios
+
+These copies are pending additions to hosting's canonical SDK contract. They do
+not count as active coverage and ordinary contract runs do not execute them.
+Keep each file byte-identical to its coordinated hosting change and add its
+language binding before merging the SDK change.
+
+Hosting activates a scenario only after every SDK has the matching copy. Once
+that hosting change reaches main, move the copy into `features/contract` and
+update the native copy checks. Keep active copies unchanged until activation;
+hosting's current main must remain compatible throughout the rollout.

volcano_sdk_python-0.7.2/features/staged/storage-refresh.feature

@@ -0,0 +1,11 @@
+Feature: SDK storage authentication recovery
+
+  @storage @SDK-STORAGE-005
+  Scenario: A rejected upload refreshes the session and preserves its bytes
+    Given an authenticated client
+    And the client replaces its access token with a rejected token
+    When the client uploads and downloads the contract object
+    Then the SDK operation succeeds
+    And the downloaded bytes equal the uploaded bytes
+    And the stored object path equals the contract path
+    And the storage operation replaces the rejected token for the same user

{volcano_sdk_python-0.7.1 → volcano_sdk_python-0.7.2}/features/steps/sdk_contract_steps.py

@@ -175,6 +175,7 @@ def replace_access_token(context: Any) -> None:
     )
 
 
+@then("the storage operation replaces the rejected token for the same user")
 @then("the database read replaces the rejected token for the same user")
 def read_replaced_token(context: Any) -> None:
     world = _world(context)

{volcano_sdk_python-0.7.1 → volcano_sdk_python-0.7.2}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "hatchling.build"
 
 [project]
 name = "volcano-sdk-python"
-version = "0.7.1"
+version = "0.7.2"
 description = "Official Python SDK for Volcano"
 readme = "README.md"
 requires-python = ">=3.11"

{volcano_sdk_python-0.7.1 → volcano_sdk_python-0.7.2}/src/volcano_sdk/auth.py

@@ -1007,12 +1007,20 @@ class Auth:
         )
 
     def _session_request(
-        self, operation: Callable[[str], TransportResponse]
+        self,
+        operation: Callable[[str], TransportResponse],
+        *,
+        binding: tuple[int, int, Session | None] | None = None,
     ) -> TransportResponse:
-        binding = self._client._capture_session_binding()
+        if binding is None:
+            binding = self._client._capture_session_binding()
         if binding[2] is None:
             raise RuntimeError(_NO_ACTIVE_SESSION)
-        response = operation(binding[2].access_token)
+        binding = self._owned_refresh_session(binding)
+        current = binding[2]
+        if current is None:
+            raise SessionChangedError
+        response = operation(current.access_token)
         if response.status_code != HTTPStatus.UNAUTHORIZED:
             return response
         try:

{volcano_sdk_python-0.7.1 → volcano_sdk_python-0.7.2}/src/volcano_sdk/storage.py

@@ -11,7 +11,7 @@ from dataclasses import dataclass
 from datetime import datetime
 from io import SEEK_END, BytesIO
 from tempfile import TemporaryFile
-from typing import Any, BinaryIO, Protocol, cast
+from typing import TYPE_CHECKING, Any, BinaryIO, Protocol, cast
 from urllib.parse import quote
 
 from ._transport import (
@@ -25,6 +25,7 @@ from ._transport import (
 )
 from .models import (
     JSONValue,
+    Session,
     StorageObject,
     StoragePage,
     UploadPart,
@@ -33,6 +34,9 @@ from .models import (
     UploadSessionStatus,
 )
 
+if TYPE_CHECKING:
+    from .auth import Auth
+
 _INVALID_STORAGE_PAGE = "Expected a complete storage page"
 _INVALID_CONTENT_TYPE = "content_type must be a non-blank printable ASCII string"
 _INVALID_STORAGE_PATH = "Storage path must be a non-empty string"
@@ -280,6 +284,7 @@ class StorageContext(Protocol):
     """Client capabilities required by object storage."""
 
     _transport: Transport
+    auth: Auth
 
     def _anon_token(self) -> str: ...
 
@@ -287,6 +292,8 @@ class StorageContext(Protocol):
 
     def _session_token(self) -> str: ...
 
+    def _capture_session_binding(self) -> tuple[int, int, Session | None]: ...
+
 
 class StorageListTransport(Protocol):
     """Transport capability required to list storage objects."""
@@ -462,25 +469,33 @@ class StorageBucket:
     ) -> dict[str, Any]:
         """Upload bytes or the remaining contents of a binary stream."""
         mime_type = _upload_content_type(content_type)
-        response = invoke(
-            self._client._transport.upload_storage_object,
-            authorization=self._client._session_token(),
-            bucket_name=self._name,
-            path=path,
-            data=_simple_upload_bytes(data),
-            content_type=mime_type,
+        binding = self._client._capture_session_binding()
+        self._client._session_token()
+        content = _simple_upload_bytes(data)
+        response = self._client.auth._session_request(
+            lambda token: invoke(
+                self._client._transport.upload_storage_object,
+                authorization=token,
+                bucket_name=self._name,
+                path=path,
+                data=content,
+                content_type=mime_type,
+            ),
+            binding=binding,
         )
         payload = response_payload(response, 201)
         return dict(payload)
 
     def download(self, path: str, *, byte_range: str | None = None) -> bytes:
         """Download bytes from a path in this bucket."""
-        response = invoke(
-            self._client._transport.download_storage_object,
-            authorization=self._client._session_token(),
-            bucket_name=self._name,
-            path=path,
-            byte_range=byte_range,
+        response = self._client.auth._session_request(
+            lambda token: invoke(
+                self._client._transport.download_storage_object,
+                authorization=token,
+                bucket_name=self._name,
+                path=path,
+                byte_range=byte_range,
+            )
         )
         expected_status = (
             _HTTP_PARTIAL_CONTENT
@@ -500,16 +515,18 @@ class StorageBucket:
     ) -> UploadSession:
         """Create server state for a resumable upload."""
         transport = cast("StorageUploadSessionTransport", self._client._transport)
-        response = invoke(
-            transport.create_upload_session,
-            authorization=self._client._session_token(),
-            bucket_name=self._name,
-            request=StorageUploadSessionRequest(
-                path=_storage_path(path),
-                content_type=content_type,
-                total_size=total_size,
-                part_size=part_size,
-            ),
+        response = self._client.auth._session_request(
+            lambda token: invoke(
+                transport.create_upload_session,
+                authorization=token,
+                bucket_name=self._name,
+                request=StorageUploadSessionRequest(
+                    path=_storage_path(path),
+                    content_type=content_type,
+                    total_size=total_size,
+                    part_size=part_size,
+                ),
+            )
         )
         return _upload_session(response_payload(response, 201))
 
@@ -523,16 +540,18 @@ class StorageBucket:
     ) -> UploadPart:
         """Upload one part of a resumable upload session."""
         transport = cast("StorageUploadPartTransport", self._client._transport)
-        response = invoke(
-            transport.upload_part,
-            authorization=self._client._session_token(),
-            bucket_name=self._name,
-            request=StorageUploadPartRequest(
-                path=_storage_path(path),
-                session_id=session_id,
-                part_number=part_number,
-                data=data,
-            ),
+        response = self._client.auth._session_request(
+            lambda token: invoke(
+                transport.upload_part,
+                authorization=token,
+                bucket_name=self._name,
+                request=StorageUploadPartRequest(
+                    path=_storage_path(path),
+                    session_id=session_id,
+                    part_number=part_number,
+                    data=data,
+                ),
+            )
         )
         return _upload_part(response_payload(response, 200))
 
@@ -544,14 +563,16 @@ class StorageBucket:
     ) -> StorageObject:
         """Complete a resumable upload and return the stored object."""
         transport = cast("StorageCompleteUploadTransport", self._client._transport)
-        response = invoke(
-            transport.complete_upload_session,
-            authorization=self._client._session_token(),
-            bucket_name=self._name,
-            request=StorageUploadSessionReference(
-                path=_storage_path(path),
-                session_id=session_id,
-            ),
+        response = self._client.auth._session_request(
+            lambda token: invoke(
+                transport.complete_upload_session,
+                authorization=token,
+                bucket_name=self._name,
+                request=StorageUploadSessionReference(
+                    path=_storage_path(path),
+                    session_id=session_id,
+                ),
+            )
         )
         payload = cast("Mapping[str, object]", response_payload(response, 200))
         return _storage_object(payload["object"])
@@ -564,14 +585,16 @@ class StorageBucket:
     ) -> UploadSessionStatus:
         """Get resumable upload progress and uploaded part metadata."""
         transport = cast("StorageUploadStatusTransport", self._client._transport)
-        response = invoke(
-            transport.get_upload_session,
-            authorization=self._client._session_token(),
-            bucket_name=self._name,
-            request=StorageUploadSessionReference(
-                path=_storage_path(path),
-                session_id=session_id,
-            ),
+        response = self._client.auth._session_request(
+            lambda token: invoke(
+                transport.get_upload_session,
+                authorization=token,
+                bucket_name=self._name,
+                request=StorageUploadSessionReference(
+                    path=_storage_path(path),
+                    session_id=session_id,
+                ),
+            )
         )
         return _upload_session_status(response_payload(response, 200))
 
@@ -583,14 +606,16 @@ class StorageBucket:
     ) -> None:
         """Abort a resumable upload and discard its uploaded parts."""
         transport = cast("StorageAbortUploadTransport", self._client._transport)
-        response = invoke(
-            transport.abort_upload_session,
-            authorization=self._client._session_token(),
-            bucket_name=self._name,
-            request=StorageUploadSessionReference(
-                path=_storage_path(path),
-                session_id=session_id,
-            ),
+        response = self._client.auth._session_request(
+            lambda token: invoke(
+                transport.abort_upload_session,
+                authorization=token,
+                bucket_name=self._name,
+                request=StorageUploadSessionReference(
+                    path=_storage_path(path),
+                    session_id=session_id,
+                ),
+            )
         )
         response_payload(response, 200)
 
@@ -662,41 +687,51 @@ class StorageBucket:
     ) -> StoragePage:
         """List objects under a prefix and return the next-page cursor."""
         transport = cast("StorageListTransport", self._client._transport)
-        response = invoke(
-            transport.list_storage_objects,
-            authorization=self._client._session_token(),
-            bucket_name=self._name,
-            prefix=prefix,
-            limit=limit,
-            cursor=cursor,
+        response = self._client.auth._session_request(
+            lambda token: invoke(
+                transport.list_storage_objects,
+                authorization=token,
+                bucket_name=self._name,
+                prefix=prefix,
+                limit=limit,
+                cursor=cursor,
+            )
         )
         return _storage_page(response_payload(response, 200))
 
     def remove(self, paths: str | Sequence[str]) -> tuple[str, ...]:
         """Delete one or more object paths and return their immutable snapshot."""
         path_list = _storage_paths(paths)
-        transport = cast("StorageDeleteTransport", self._client._transport)
-        authorization = self._client._session_token()
+        binding = self._client._capture_session_binding()
         for path in path_list:
-            response = invoke(
+            self._remove_path(path, binding)
+        return path_list
+
+    def _remove_path(self, path: str, binding: tuple[int, int, Session | None]) -> None:
+        transport = cast("StorageDeleteTransport", self._client._transport)
+        response = self._client.auth._session_request(
+            lambda token: invoke(
                 transport.delete_storage_object,
-                authorization=authorization,
+                authorization=token,
                 bucket_name=self._name,
                 path=path,
-            )
-            response_payload(response, 200)
-        return path_list
+            ),
+            binding=binding,
+        )
+        response_payload(response, 200)
 
     def move(self, from_path: str, to_path: str) -> StorageObject:
         """Move or rename an object within this bucket."""
         source, destination = _storage_paths((from_path, to_path))
         transport = cast("StorageMoveTransport", self._client._transport)
-        response = invoke(
-            transport.move_storage_object,
-            authorization=self._client._session_token(),
-            bucket_name=self._name,
-            from_path=source,
-            to_path=destination,
+        response = self._client.auth._session_request(
+            lambda token: invoke(
+                transport.move_storage_object,
+                authorization=token,
+                bucket_name=self._name,
+                from_path=source,
+                to_path=destination,
+            )
         )
         return _storage_object(response_payload(response, 200))
 
@@ -704,12 +739,14 @@ class StorageBucket:
         """Copy an object to another path within this bucket."""
         source, destination = _storage_paths((from_path, to_path))
         transport = cast("StorageCopyTransport", self._client._transport)
-        response = invoke(
-            transport.copy_storage_object,
-            authorization=self._client._session_token(),
-            bucket_name=self._name,
-            from_path=source,
-            to_path=destination,
+        response = self._client.auth._session_request(
+            lambda token: invoke(
+                transport.copy_storage_object,
+                authorization=token,
+                bucket_name=self._name,
+                from_path=source,
+                to_path=destination,
+            )
         )
         return _storage_object(response_payload(response, 201))
 
@@ -718,12 +755,14 @@ class StorageBucket:
         object_path = _storage_paths(path)[0]
         visibility = _storage_visibility(is_public)
         transport = cast("StorageVisibilityTransport", self._client._transport)
-        response = invoke(
-            transport.update_storage_object_visibility,
-            authorization=self._client._session_token(),
-            bucket_name=self._name,
-            path=object_path,
-            is_public=visibility,
+        response = self._client.auth._session_request(
+            lambda token: invoke(
+                transport.update_storage_object_visibility,
+                authorization=token,
+                bucket_name=self._name,
+                path=object_path,
+                is_public=visibility,
+            )
         )
         return _storage_object(response_payload(response, 200))
 

{volcano_sdk_python-0.7.1 → volcano_sdk_python-0.7.2}/tests/unit/test_contract_bindings.py

@@ -78,6 +78,12 @@ def test_contract_features_match_shared_source() -> None:
         assert hashlib.sha256((copied / name).read_bytes()).hexdigest() == expected
 
 
+def test_staged_storage_feature_matches_proposed_shared_source() -> None:
+    staged = ROOT / "features" / "staged" / "storage-refresh.feature"
+    expected = "00257b455f9897791db7fd82c4166c7f34c7134b5b9f4ea92f509bba533751a1"
+    assert hashlib.sha256(staged.read_bytes()).hexdigest() == expected
+
+
 def test_every_contract_phrase_is_bound_verbatim() -> None:
     registry.clear()
     _load_module(
@@ -102,6 +108,7 @@ def test_every_contract_phrase_is_bound_verbatim() -> None:
         "the uploaded and listed object content types are text/plain",
         "the client replaces its access token with a rejected token",
         "the database read replaces the rejected token for the same user",
+        "the storage operation replaces the rejected token for the same user",
         (
             "one client pauses delivery for 1 second "
             "and then resumes with the same handler"