Require Python 3.14, ruff formatting for simpler typing.

paskia/authsession.py

@@ -36,7 +36,7 @@ def reset_expires() -> datetime:
     return datetime.now(UTC) + RESET_LIFETIME
 
 
-def get_reset(token: str) -> "ResetToken":
+def get_reset(token: str) -> ResetToken:
     """Validate a credential reset token."""
 
     record = ResetToken.by_passphrase(token)

paskia/db/bootstrap.py

@@ -44,7 +44,7 @@ def log_reset_link(passphrase: str, message: str | None = None) -> str:
 
 
 def bootstrap(
-    data: "DB",
+    data: DB,
     org_name: str = "Organization",
     admin_name: str = "Admin",
     reset_passphrase: str | None = None,

paskia/fastapi/admin/oidc_clients.py

@@ -54,7 +54,7 @@ async def admin_create_oidc_client(
 
     try:
         client_uuid = UUID(client_id)
-    except (ValueError, AttributeError):
+    except ValueError, AttributeError:
         raise ValueError("client_id must be a valid UUID")
 
     try:

paskia/fastapi/admin/users.py

@@ -65,7 +65,7 @@ async def admin_update_user_role(
         raise ValueError("role_uuid is required")
     try:
         new_role_uuid = UUID(role_uuid_str)
-    except (ValueError, TypeError):
+    except ValueError, TypeError:
         raise ValueError("Invalid role UUID")
     new_role = db.data().roles.get(new_role_uuid)
     if not new_role or new_role.org_uuid != user.org.uuid:

paskia/fastapi/authz.py

@@ -56,7 +56,7 @@ async def auth_error_content(exc: AuthException) -> dict:
 async def verify(
     auth: str | None,
     perm: list[str] | list[tuple[str, ...]],
-    match: "Callable | None" = None,
+    match: Callable | None = None,
     host: str | None = None,
     max_age: str | None = None,
 ):

paskia/fastapi/logging.py

@@ -223,7 +223,7 @@ def log_ws_close(ws_id: int, close_code: int | None, duration: float) -> None:
 
 
 def log_permission_denied(
-    ctx: "SessionContext", required: list[str], missing: list[str], *, require_all: bool
+    ctx: SessionContext, required: list[str], missing: list[str], *, require_all: bool
 ) -> None:
     """Log permission denied with org, role, user and highlighted missing scopes."""
     missing_set = set(missing)

paskia/fastapi/oid.py

@@ -422,7 +422,7 @@ async def userinfo(
     # Get user
     try:
         user_uuid = UUID(payload["sub"])
-    except (KeyError, ValueError):
+    except KeyError, ValueError:
         raise HTTPException(401, "Invalid token")
 
     user = db.data().users.get(user_uuid)

paskia/util/runtime.py

@@ -22,7 +22,7 @@ class RuntimeConfig(msgspec.Struct):
 
 
 @lru_cache(maxsize=1)
-def _load_config() -> "RuntimeConfig | None":
+def _load_config() -> RuntimeConfig | None:
     """Load RuntimeConfig from PASKIA_CONFIG env var."""
     config_json = os.getenv("PASKIA_CONFIG")
     if not config_json:
@@ -31,7 +31,7 @@ def _load_config() -> "RuntimeConfig | None":
     return msgspec.json.decode(config_json.encode(), type=RuntimeConfig)
 
 
-def config() -> "RuntimeConfig | None":
+def config() -> RuntimeConfig | None:
     """Return cached runtime config loaded from PASKIA_CONFIG."""
     return _load_config()