Simple and efficient Template Engine for Python projects
Project description
Sucuri
Simple and efficient template engine for Python projects, inspired by PugJS.
Sucuri is designed to bring an elegant, indentation-based syntax to Python. By stripping away repetitive HTML tags and taking advantage of natural code structure, Sucuri gives developers a pristine, highly readable HTML rendering experience.
Powered natively by the Lark parser, Sucuri supports deep variable nesting, loops, conditionals, seamless macro injections, and is completely framework-independent. It plays just as well with modern frameworks like FastAPI, Django, and Flask as it does in native Python scripts.
📦 Installation
Install and update using pip:
pip install sucuri
🚀 Quick Start & Integration
Sucuri returns raw HTML strings that can be seamlessly injected into any existing web framework format. All you need is the template function from sucuri.rendering.
Vanilla Python
from sucuri.rendering import template
context = {"name": "World"}
html_output = template("my_template.suc", context)
print(html_output)
⚡ FastAPI Integration
Returns a raw HTMLResponse instantly!
from fastapi import FastAPI
from fastapi.responses import HTMLResponse
from sucuri.rendering import template
app = FastAPI()
@app.get("/")
def index():
context = {"name": "FastAPI User"}
html = template('templates/index.suc', context)
return HTMLResponse(content=html, status_code=200)
🌶️ Flask Integration
Use Flask's render_template_string to wrap Sucuri's output.
from flask import Flask, render_template_string
from sucuri.rendering import template
app = Flask(__name__)
@app.route("/")
def index():
context = {"name": "Flask User"}
html = template('templates/index.suc', context)
return render_template_string(html)
🎸 Django Integration
Return the compiled string through HttpResponse.
from django.http import HttpResponse
from sucuri.rendering import template
def index(request):
context = {"name": "Django User"}
html = template('templates/index.suc', context)
return HttpResponse(html)
💻 Command Line Interface (CLI)
Sucuri provides a CLI to directly process .suc templates from your terminal—perfect for shell scripts and static site generation!
# Basic compilation (outputs to stdout)
sucuri build index.suc
# Compilation with output file
sucuri build index.suc -o index.html
# Compilation passing JSON context variables directly inline
sucuri build index.suc --context '{"title": "My Page"}' -o index.html
# Compilation using JSON data loaded from another file
sucuri build index.suc --context context.json -o index.html
📖 Syntax & Features
Basics & Indentation
A standard HTML file doesn't need brackets < >. Instead, Sucuri relies on tabs or spaces (kept strictly uniform) to determine tag hierarchies.
html
body
h1 Title
a(href='#') This is my link
Output:
<html>
<body>
<h1>Title</h1>
<a href="#">This is my link</a>
</body>
</html>
Text
Texts can be described in two ways. Inline together with the tag declaration, or spanning multiple lines starting with the | pipe character.
h3 Hello!
| Text
| with
| more than
| one line
Output:
<h3>Hello!
Text
with
more than
one line
</h3>
Attributes
HTML attributes in Sucuri must be separated by space and enclosed strictly within parentheses (). Unlike standard Pug, they are on a single line and separated by spaces (not commas).
a(href='google.com') Google
a(class='button' href='google.com') Google
div(class='div-class')
input(type="checkbox" checked)
Output:
<a href="google.com">Google</a>
<a class="button" href="google.com">Google</a>
<div class="div-class"></div>
<input type="checkbox" checked>
CSS Shortcuts
Sucuri supports PugJS-style CSS shorthand for class and id attributes. Use .class-name and #id-name directly on any tag — or even without a tag name to implicitly create a <div>.
div.container
p.card-text Text
#app.wrapper
h1 Hello
section#main.content.active
span Done
Output:
<div class="container">
<p class="card-text">Text</p>
</div>
<div id="app" class="wrapper">
<h1>Hello</h1>
</div>
<section id="main" class="content active">
<span>Done</span>
</section>
Dynamic Variables (Context)
Variables passed by Python's context can be effortlessly embedded directly into your text with {}. Sucuri also resolves deeply nested context.
Python Context: {"user": {"name": "Alice", "id": 123}}
Sucuri:
div(class="profile")
h1 Hello {user.name}!
span User ID is {user.id}
Filters
Apply built-in transformations to any variable using the pipe | operator. Filters can be chained.
| Filter | Description |
|---|---|
upper |
Converts text to UPPERCASE |
lower |
Converts text to lowercase |
title |
Capitalizes The First Letter Of Each Word |
safe |
Renders raw HTML without escaping (bypass XSS protection — use carefully!) |
h1 {title | upper}
p {subtitle | lower}
span {author | title}
div {raw_html | safe}
Filters also work inside <for> loops via the # syntax:
<for item in products>
li #item.name | title
<endfor>
Filters can be chained in sequence:
span {label | lower | title}
Control Flow
You can handle logic natively in .suc files.
If Conditions
Wrap standard comparisons using <if condition> and <endif>.
<if user.status != "banned">
h1 User is active!
<endif>
For Loops
Iterate elegantly using <for item in list>. Access your iterated items dynamically using the hash # symbol (which also supports nested resolution like #item.id!).
Python Context: {"invoices": [{"id": 1}, {"id": 2}]}
ul
<for inv in invoices>
li Invoice Number: #inv.id
<endfor>
📦 Preloaded Templates (Built-in Magic)
Instead of manually crafting standard HTML configurations like ul/li and table setups, Sucuri comes packed with pre-compiled macros for lists and tables to drastically speed up repetitive boilerplate code!
1. Lists & Checkboxes
Pass ANY variable containing an Array, and use the list() built-in to render an entire list matrix automatically.
Python Context: {"my_array": ["Apple", "Orange"], "opts": ["Apple"]}
Unordered List:
list(my_array class="ul-squares")
Result:
<ul class="ul-squares">
<li> Apple </li>
<li> Orange </li>
</ul>
Checkboxes: (Just provide the secondary array containing the checked values!)
list(my_array opts class="survey")
Result:
<input type="checkbox" id="ck-Apple" checked="checked">Apple
<input type="checkbox" id="ck-Orange">Orange
2. Tables
Need a comprehensive HTML table constructed in one go? The table() syntax takes header arrays, rows matrices, and footer arrays automatically!
Python Context:
context = {
"heads": ["Name", "Age"],
"rows": [["Alice", 21], ["Bob", 45]],
"footers": ["End", "End"]
}
Sucuri:
table(heads rows footers class="table" id="tb-authors")
Result:
<table class="table" id="tb-authors">
<thead>
<tr>
<th>Name</th>
<th>Age</th>
</tr>
</thead>
<tbody>
<tr>
<td>Alice</td>
<td>21</td>
</tr>
<tr>
<td>Bob</td>
<td>45</td>
</tr>
</tbody>
<tfoot>
<tr>
<td>End</td>
<td>End</td>
</tr>
</tfoot>
</table>
(Positional order: Headers array, Data Matrix array, Footer array.)
🧩 Modularity: Includes, Styles & Scripts
Sucuri acts efficiently as an asset distributor through macro tagging and external inclusions. The engine caches everything natively during execution.
Including Other .suc files
Declare your macro inclusions at the top using include, and instantiate them using the + sign.
modules/button.suc:
button(class='btn-primary') {text}
index.suc:
include modules/button
html
body
h1 Welcome
+button
Passing Parameters to Macros
You can pass inline parameters to any macro directly at the call site using the () syntax. Parameters override context variables only for that macro invocation.
inc/card.suc:
div.card
h2 {title}
p {type}
index.suc:
include inc/card
+card(title="Warning" type="danger")
+card(title="Success" type="info")
Output:
<div class="card">
<h2>Warning</h2>
<p>danger</p>
</div>
<div class="card">
<h2>Success</h2>
<p>info</p>
</div>
Template Inheritance (extends / block)
Sucuri supports full template inheritance. A parent layout defines named block regions, and child templates extend it with extends, overriding only the blocks they need.
layout.suc:
html
head
title {title}
body
div(id="content")
block content
div(id="footer")
block footer
page.suc:
extends layout
block content
h1 Welcome to the Home Page
p Here comes the content.
block footer
p Page Footer
Python:
html = template("page.suc", {"title": "My Site"})
Output:
<html>
<head>
<title>My Site</title>
</head>
<body>
<div id="content">
<h1>Welcome to the Home Page</h1>
<p>Here comes the content.</p>
</div>
<div id="footer">
<p>Page Footer</p>
</div>
</body>
</html>
Blocks not overridden by the child template render their default content from the parent.
Injecting CSS Styles and JS Scripts
Need global JS or CSS appended without manually crafting raw headers/footers everywhere? Merely use style and script top-level declarations, supplying their raw path! They will be automatically wrapped in <style> and <script> HTML tags and beautifully appended to the file.
style static/css/global.css
script static/js/app.js
html
body
h1 Wow!
🔒 Security
XSS Protection
By default, all variables are automatically HTML-escaped before rendering. This prevents cross-site scripting (XSS) attacks from untrusted context values.
Python Context: {"msg": "<script>alert(1)</script>"}
h1 {msg}
Output:
<h1><script>alert(1)</script></h1>
To render trusted raw HTML intentionally, use the safe filter:
div {html_content | safe}
Warning: Only use
safeon content you fully control. Never apply it to user-supplied input.
⚙️ Advanced: Environment & Custom Filters
For greater control — custom filters, isolated environments, or multi-app setups — use the Environment class directly instead of the top-level template() function.
Registering Custom Filters
from sucuri import Environment
env = Environment()
@env.register_filter('exclaim')
def exclaim(val):
return f"{val}!!!"
env.register_filter('reverse', lambda x: str(x)[::-1])
html = env.template("templates/index.suc", {"title": "Hello"})
Custom filters are used in templates exactly like built-in ones:
h1 {title | exclaim}
span {title | exclaim | reverse}
Custom filters also work inside loops:
<for item in items>
li #item | exclaim
<endfor>
Multiple Environments
Each Environment instance has its own filter registry and base directory, making it safe to run isolated configurations side by side (e.g., multiple apps in the same process).
env_a = Environment(base_dir="templates/app_a")
env_b = Environment(base_dir="templates/app_b")
env_a.register_filter('shout', lambda v: v.upper() + "!")
# env_b has no 'shout' filter — fully isolated
Project details
Release history Release notifications | RSS feed
Download files
Download the file for your platform. If you're not sure which to choose, learn more about installing packages.
Source Distribution
Built Distribution
Filter files by name, interpreter, ABI, and platform.
If you're not sure about the file name format, learn more about wheel file names.
Copy a direct link to the current filters
File details
Details for the file sucuri-1.0.9.tar.gz.
File metadata
- Download URL: sucuri-1.0.9.tar.gz
- Upload date:
- Size: 23.5 kB
- Tags: Source
- Uploaded using Trusted Publishing? Yes
- Uploaded via: twine/6.1.0 CPython/3.13.12
File hashes
| Algorithm | Hash digest | |
|---|---|---|
| SHA256 |
5cc9e8dde4c85e3111a4edf630f3a57fc4f13341ea117aa72db3e11b8fa8a425
|
|
| MD5 |
d23cec685c1fb849e05ed3a815810192
|
|
| BLAKE2b-256 |
a45c900b8de6dc5f420ba88b37561c3bfbaee0c3b918b3ff4c371786129a3e35
|
Provenance
The following attestation bundles were made for sucuri-1.0.9.tar.gz:
Publisher:
publish-pypi.yml on marcosstefani/sucuri
-
Statement:
-
Statement type:
https://in-toto.io/Statement/v1 -
Predicate type:
https://docs.pypi.org/attestations/publish/v1 -
Subject name:
sucuri-1.0.9.tar.gz -
Subject digest:
5cc9e8dde4c85e3111a4edf630f3a57fc4f13341ea117aa72db3e11b8fa8a425 - Sigstore transparency entry: 1575049618
- Sigstore integration time:
-
Permalink:
marcosstefani/sucuri@8c6064c5518d7a92f91e2b55593dc1f9b5d83380 -
Branch / Tag:
refs/tags/v1.0.9 - Owner: https://github.com/marcosstefani
-
Access:
public
-
Token Issuer:
https://token.actions.githubusercontent.com -
Runner Environment:
github-hosted -
Publication workflow:
publish-pypi.yml@8c6064c5518d7a92f91e2b55593dc1f9b5d83380 -
Trigger Event:
push
-
Statement type:
File details
Details for the file sucuri-1.0.9-py2.py3-none-any.whl.
File metadata
- Download URL: sucuri-1.0.9-py2.py3-none-any.whl
- Upload date:
- Size: 15.7 kB
- Tags: Python 2, Python 3
- Uploaded using Trusted Publishing? Yes
- Uploaded via: twine/6.1.0 CPython/3.13.12
File hashes
| Algorithm | Hash digest | |
|---|---|---|
| SHA256 |
cbb89dfe98176c44558f3b821b54c6da39132153c24005315e3c666694beb63d
|
|
| MD5 |
b0a5ac1c4e35fe9e80bf26df1cad8b87
|
|
| BLAKE2b-256 |
12b49f892fc0616ecec07a2504113114f68b57e9eff13b09fe09804be54548e0
|
Provenance
The following attestation bundles were made for sucuri-1.0.9-py2.py3-none-any.whl:
Publisher:
publish-pypi.yml on marcosstefani/sucuri
-
Statement:
-
Statement type:
https://in-toto.io/Statement/v1 -
Predicate type:
https://docs.pypi.org/attestations/publish/v1 -
Subject name:
sucuri-1.0.9-py2.py3-none-any.whl -
Subject digest:
cbb89dfe98176c44558f3b821b54c6da39132153c24005315e3c666694beb63d - Sigstore transparency entry: 1575049661
- Sigstore integration time:
-
Permalink:
marcosstefani/sucuri@8c6064c5518d7a92f91e2b55593dc1f9b5d83380 -
Branch / Tag:
refs/tags/v1.0.9 - Owner: https://github.com/marcosstefani
-
Access:
public
-
Token Issuer:
https://token.actions.githubusercontent.com -
Runner Environment:
github-hosted -
Publication workflow:
publish-pypi.yml@8c6064c5518d7a92f91e2b55593dc1f9b5d83380 -
Trigger Event:
push
-
Statement type: