@neralabs/rerail-pack-python 0.1.1

package/rules/ruff-async230-blocking-open-call-in-async-function.json

@@ -0,0 +1,339 @@
+{
+ "format": "rerail.policy/v1",
+ "id": "ruff-async230-blocking-open-call-in-async-function",
+ "revision": 1,
+ "mode": "steer",
+ "description": "Port of Ruff's ASYNC230 (blocking-open-call-in-async-function): a call to the builtin `open` (`builtins.open`, `io.open`, `io.open_code`), or `.open()` on a `pathlib.Path(...)` call or on a name whose binding holds one (Ruff's find_binding_value through `resolves.binding`: a plain name assignment, annotated assignment or walrus value, an unpacked name's element of a tuple or list display, or a `with` item's context expression; and, as Ruff's match_value, an unpacked name paired with a display element by index where the engine gives no value: a set display, unequal arities, a position after a starred value), inside an `async def` body whose function is the nearest enclosing function, lambda body or class, reported on the callee. Names resolve as in Ruff's resolve_qualified_name, through the engine's `resolves` (M7).",
+ "scope": {
+  "include": [
+   "**/*"
+  ],
+  "exclude": []
+ },
+ "clauses": [
+  {
+   "id": "blocking-open",
+   "forbid": {
+    "ast": {
+     "language": "python",
+     "utils": {
+      "scope-body": {
+       "kind": "block",
+       "inside": {
+        "stopBy": "neighbor",
+        "any": [
+         {
+          "kind": "function_definition"
+         },
+         {
+          "kind": "class_definition"
+         }
+        ]
+       }
+      },
+      "lambda-body": {
+       "inside": {
+        "stopBy": "neighbor",
+        "kind": "lambda"
+       },
+       "follows": {
+        "stopBy": "end",
+        "regex": "^:$"
+       }
+      },
+      "callee-position": {
+       "any": [
+        {
+         "inside": {
+          "stopBy": "neighbor",
+          "kind": "call"
+         },
+         "precedes": {
+          "stopBy": "neighbor",
+          "any": [
+           {
+            "kind": "argument_list"
+           },
+           {
+            "kind": "generator_expression"
+           }
+          ]
+         }
+        },
+        {
+         "inside": {
+          "stopBy": "neighbor",
+          "kind": "parenthesized_expression",
+          "matches": "callee-position"
+         }
+        }
+       ]
+      },
+      "async-context": {
+       "inside": {
+        "stopBy": {
+         "any": [
+          {
+           "matches": "scope-body"
+          },
+          {
+           "matches": "lambda-body"
+          }
+         ]
+        },
+        "kind": "block",
+        "inside": {
+         "stopBy": "neighbor",
+         "kind": "function_definition",
+         "has": {
+          "stopBy": "neighbor",
+          "regex": "^async$"
+         }
+        }
+       }
+      },
+      "init": {
+       "any": [
+        {
+         "kind": "call",
+         "has": {
+          "stopBy": "neighbor",
+          "any": [
+           {
+            "kind": "identifier"
+           },
+           {
+            "kind": "attribute"
+           }
+          ],
+          "resolves": {
+           "import": [
+            "pathlib.Path"
+           ]
+          },
+          "precedes": {
+           "stopBy": "neighbor",
+           "kind": "argument_list"
+          }
+         }
+        },
+        {
+         "kind": "parenthesized_expression",
+         "has": {
+          "stopBy": "neighbor",
+          "matches": "init"
+         }
+        }
+       ]
+      },
+      "plain-target": {
+       "any": [
+        {
+         "kind": "identifier"
+        },
+        {
+         "kind": "parenthesized_expression",
+         "has": {
+          "stopBy": "neighbor",
+          "matches": "plain-target"
+         }
+        }
+       ]
+      },
+      "typed-name": {
+       "kind": "identifier",
+       "pattern": "$TN",
+       "any": [
+        {
+         "resolves": {
+          "binding": {
+           "value": {
+            "matches": "init"
+           }
+          }
+         }
+        },
+        {
+         "resolves": {
+          "binding": {
+           "site": {
+            "kind": "as_pattern",
+            "inside": {
+             "stopBy": "neighbor",
+             "kind": "with_item"
+            },
+            "all": [
+             {
+              "has": {
+               "stopBy": "neighbor",
+               "matches": "init",
+               "precedes": {
+                "stopBy": "end",
+                "regex": "^as$"
+               }
+              }
+             },
+             {
+              "has": {
+               "stopBy": "neighbor",
+               "kind": "as_pattern_target",
+               "has": {
+                "stopBy": "neighbor",
+                "matches": "plain-target"
+               }
+              }
+             }
+            ]
+           }
+          }
+         }
+        },
+        {
+         "resolves": {
+          "binding": {
+           "site": {
+            "kind": "assignment",
+            "all": [
+             {
+              "has": {
+               "field": "left",
+               "has": {
+                "stopBy": "neighbor",
+                "kind": "identifier",
+                "pattern": "$UT",
+                "compare": {
+                 "left": "UT",
+                 "op": "eq",
+                 "right": "TN",
+                 "text": "tokens"
+                },
+                "not": {
+                 "precedes": {
+                  "stopBy": "end",
+                  "kind": "identifier",
+                  "pattern": "$UU",
+                  "compare": {
+                   "left": "UU",
+                   "op": "eq",
+                   "right": "TN",
+                   "text": "tokens"
+                  }
+                 }
+                }
+               }
+              }
+             },
+             {
+              "has": {
+               "field": "right",
+               "has": {
+                "stopBy": "neighbor",
+                "matches": "init",
+                "pattern": "$UV"
+               }
+              }
+             },
+             {
+              "compare": {
+               "left": "UV",
+               "op": "eq",
+               "right": "UT",
+               "text": "index"
+              }
+             }
+            ]
+           }
+          }
+         }
+        }
+       ]
+      },
+      "target": {
+       "any": [
+        {
+         "any": [
+          {
+           "kind": "identifier"
+          },
+          {
+           "kind": "attribute"
+          }
+         ],
+         "resolves": {
+          "global": [
+           "open"
+          ],
+          "import": [
+           "builtins.open",
+           "io.open",
+           "io.open_code"
+          ]
+         }
+        },
+        {
+         "kind": "attribute",
+         "pattern": "$OBJ.$METH",
+         "has": {
+          "stopBy": "neighbor",
+          "pattern": "$OBJ",
+          "precedes": {
+           "stopBy": "end",
+           "regex": "^\\.$"
+          },
+          "any": [
+           {
+            "matches": "init"
+           },
+           {
+            "matches": "typed-name"
+           }
+          ]
+         },
+         "all": [
+          {
+           "has": {
+            "stopBy": "neighbor",
+            "kind": "identifier",
+            "pattern": "$METH",
+            "regex": "^open$",
+            "follows": {
+             "stopBy": "end",
+             "regex": "^\\.$"
+            }
+           }
+          }
+         ]
+        }
+       ]
+      }
+     },
+     "rule": {
+      "all": [
+       {
+        "matches": "callee-position"
+       },
+       {
+        "matches": "async-context"
+       },
+       {
+        "matches": "target"
+       }
+      ]
+     }
+    }
+   },
+   "violation": {
+    "anchor": "witness.span",
+    "code": "ASYNC230",
+    "message": "Async functions should not open files with blocking methods like `open`",
+    "suppress": {
+      "noqa": {
+        "codes": [
+          "ASYNC230"
+        ]
+      }
+    }
+   }
+  }
+ ]
+}

package/rules/ruff-async250-blocking-input-in-async-function.json

@@ -0,0 +1,143 @@
+{
+ "format": "rerail.policy/v1",
+ "id": "ruff-async250-blocking-input-in-async-function",
+ "revision": 1,
+ "mode": "steer",
+ "description": "Port of Ruff's ASYNC250 (blocking-input-in-async-function): a call to the builtin `input` (the unshadowed name, or `builtins.input`) inside an `async def` body whose function is the nearest enclosing function, lambda body or class, reported on the callee. Names resolve as in Ruff's resolve_qualified_name, through the engine's `resolves` (M7).",
+ "scope": {
+  "include": [
+   "**/*"
+  ],
+  "exclude": []
+ },
+ "clauses": [
+  {
+   "id": "blocking-input",
+   "forbid": {
+    "ast": {
+     "language": "python",
+     "utils": {
+      "scope-body": {
+       "kind": "block",
+       "inside": {
+        "stopBy": "neighbor",
+        "any": [
+         {
+          "kind": "function_definition"
+         },
+         {
+          "kind": "class_definition"
+         }
+        ]
+       }
+      },
+      "lambda-body": {
+       "inside": {
+        "stopBy": "neighbor",
+        "kind": "lambda"
+       },
+       "follows": {
+        "stopBy": "end",
+        "regex": "^:$"
+       }
+      },
+      "callee-position": {
+       "any": [
+        {
+         "inside": {
+          "stopBy": "neighbor",
+          "kind": "call"
+         },
+         "precedes": {
+          "stopBy": "neighbor",
+          "any": [
+           {
+            "kind": "argument_list"
+           },
+           {
+            "kind": "generator_expression"
+           }
+          ]
+         }
+        },
+        {
+         "inside": {
+          "stopBy": "neighbor",
+          "kind": "parenthesized_expression",
+          "matches": "callee-position"
+         }
+        }
+       ]
+      },
+      "async-context": {
+       "inside": {
+        "stopBy": {
+         "any": [
+          {
+           "matches": "scope-body"
+          },
+          {
+           "matches": "lambda-body"
+          }
+         ]
+        },
+        "kind": "block",
+        "inside": {
+         "stopBy": "neighbor",
+         "kind": "function_definition",
+         "has": {
+          "stopBy": "neighbor",
+          "regex": "^async$"
+         }
+        }
+       }
+      },
+      "target": {
+       "any": [
+        {
+         "kind": "identifier"
+        },
+        {
+         "kind": "attribute"
+        }
+       ],
+       "resolves": {
+        "global": [
+         "input"
+        ],
+        "import": [
+         "builtins.input"
+        ]
+       }
+      }
+     },
+     "rule": {
+      "all": [
+       {
+        "matches": "callee-position"
+       },
+       {
+        "matches": "async-context"
+       },
+       {
+        "matches": "target"
+       }
+      ]
+     }
+    }
+   },
+   "violation": {
+    "anchor": "witness.span",
+    "code": "ASYNC250",
+    "message": "Blocking call to `input()` in async context",
+    "suppress": {
+      "noqa": {
+        "codes": [
+          "ASYNC250"
+        ]
+      }
+    }
+   }
+  }
+ ]
+}

package/rules/ruff-async251-blocking-sleep-in-async-function.json

@@ -0,0 +1,140 @@
+{
+ "format": "rerail.policy/v1",
+ "id": "ruff-async251-blocking-sleep-in-async-function",
+ "revision": 1,
+ "mode": "steer",
+ "description": "Port of Ruff's ASYNC251 (blocking-sleep-in-async-function): a call to `time.sleep` inside an `async def` body whose function is the nearest enclosing function, lambda body or class, reported on the callee. Names resolve as in Ruff's resolve_qualified_name, through the engine's `resolves` (M7).",
+ "scope": {
+  "include": [
+   "**/*"
+  ],
+  "exclude": []
+ },
+ "clauses": [
+  {
+   "id": "blocking-sleep",
+   "forbid": {
+    "ast": {
+     "language": "python",
+     "utils": {
+      "scope-body": {
+       "kind": "block",
+       "inside": {
+        "stopBy": "neighbor",
+        "any": [
+         {
+          "kind": "function_definition"
+         },
+         {
+          "kind": "class_definition"
+         }
+        ]
+       }
+      },
+      "lambda-body": {
+       "inside": {
+        "stopBy": "neighbor",
+        "kind": "lambda"
+       },
+       "follows": {
+        "stopBy": "end",
+        "regex": "^:$"
+       }
+      },
+      "callee-position": {
+       "any": [
+        {
+         "inside": {
+          "stopBy": "neighbor",
+          "kind": "call"
+         },
+         "precedes": {
+          "stopBy": "neighbor",
+          "any": [
+           {
+            "kind": "argument_list"
+           },
+           {
+            "kind": "generator_expression"
+           }
+          ]
+         }
+        },
+        {
+         "inside": {
+          "stopBy": "neighbor",
+          "kind": "parenthesized_expression",
+          "matches": "callee-position"
+         }
+        }
+       ]
+      },
+      "async-context": {
+       "inside": {
+        "stopBy": {
+         "any": [
+          {
+           "matches": "scope-body"
+          },
+          {
+           "matches": "lambda-body"
+          }
+         ]
+        },
+        "kind": "block",
+        "inside": {
+         "stopBy": "neighbor",
+         "kind": "function_definition",
+         "has": {
+          "stopBy": "neighbor",
+          "regex": "^async$"
+         }
+        }
+       }
+      },
+      "target": {
+       "any": [
+        {
+         "kind": "identifier"
+        },
+        {
+         "kind": "attribute"
+        }
+       ],
+       "resolves": {
+        "import": [
+         "time.sleep"
+        ]
+       }
+      }
+     },
+     "rule": {
+      "all": [
+       {
+        "matches": "callee-position"
+       },
+       {
+        "matches": "async-context"
+       },
+       {
+        "matches": "target"
+       }
+      ]
+     }
+    }
+   },
+   "violation": {
+    "anchor": "witness.span",
+    "code": "ASYNC251",
+    "message": "Async functions should not call `time.sleep`",
+    "suppress": {
+      "noqa": {
+        "codes": [
+          "ASYNC251"
+        ]
+      }
+    }
+   }
+  }
+ ]
+}

package/rules/ruff-b002-unary-prefix-increment-decrement.json

@@ -0,0 +1,54 @@
+{
+  "format": "rerail.policy/v1",
+  "id": "ruff-b002-unary-prefix-increment-decrement",
+  "revision": 1,
+  "mode": "steer",
+  "description": "Port of Ruff's B002 (unary-prefix-increment-decrement): a unary `+` whose operand is a unary `+`, or a unary `-` whose operand is a unary `-` (parentheses around the operand are transparent, as in Ruff's AST). Reported on the outer unary expression.",
+  "scope": { "include": ["**/*"], "exclude": [] },
+  "clauses": [
+    {
+      "id": "unary-prefix-increment",
+      "forbid": {
+        "ast": {
+          "language": "python",
+          "utils": {
+            "plus": {
+              "any": [
+                { "kind": "unary_operator", "regex": "^\\+" },
+                { "kind": "parenthesized_expression", "has": { "stopBy": "neighbor", "matches": "plus" } }
+              ]
+            }
+          },
+          "rule": {
+            "kind": "unary_operator",
+            "regex": "^\\+",
+            "has": { "stopBy": "neighbor", "matches": "plus" }
+          }
+        }
+      },
+      "violation": { "anchor": "witness.span", "code": "B002", "message": "Python does not support the unary prefix increment operator (`++`)", "suppress": { "noqa": { "codes": ["B002"] } } }
+    },
+    {
+      "id": "unary-prefix-decrement",
+      "forbid": {
+        "ast": {
+          "language": "python",
+          "utils": {
+            "minus": {
+              "any": [
+                { "kind": "unary_operator", "regex": "^-" },
+                { "kind": "parenthesized_expression", "has": { "stopBy": "neighbor", "matches": "minus" } }
+              ]
+            }
+          },
+          "rule": {
+            "kind": "unary_operator",
+            "regex": "^-",
+            "has": { "stopBy": "neighbor", "matches": "minus" }
+          }
+        }
+      },
+      "violation": { "anchor": "witness.span", "code": "B002", "message": "Python does not support the unary prefix decrement operator (`--`)", "suppress": { "noqa": { "codes": ["B002"] } } }
+    }
+  ]
+}