@terpjs/spec 0.14.0 → 0.16.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/LICENSE +201 -201
- package/README.md +417 -417
- package/VERSION +1 -1
- package/app-check-report.schema.json +122 -122
- package/assurance-profile.schema.json +70 -70
- package/catalog/backend/alembic_downgrades_not_empty.json +22 -22
- package/catalog/backend/base_query_not_overridden.json +27 -27
- package/catalog/backend/canonical_module_shape.json +22 -22
- package/catalog/backend/datetime_columns_are_timezone_aware.json +23 -23
- package/catalog/backend/escape_hatch_budget.json +21 -21
- package/catalog/backend/events_reference_catalog.json +27 -27
- package/catalog/backend/input_schemas_exclude_managed_columns.json +27 -27
- package/catalog/backend/input_str_fields_have_max_length.json +22 -22
- package/catalog/backend/jobs_reference_catalog.json +27 -27
- package/catalog/backend/list_routes_paginate.json +32 -32
- package/catalog/backend/modules_declare_policy.json +26 -26
- package/catalog/backend/mutations_emit_audit.json +26 -26
- package/catalog/backend/mutations_require_write_role.json +32 -32
- package/catalog/backend/no_adhoc_background_runtime.json +22 -22
- package/catalog/backend/no_adhoc_config_decrypt.json +27 -27
- package/catalog/backend/no_adhoc_logging_config.json +22 -22
- package/catalog/backend/no_adhoc_middleware.json +27 -27
- package/catalog/backend/no_adhoc_permission_literals.json +27 -27
- package/catalog/backend/no_app_instantiation.json +22 -22
- package/catalog/backend/no_blocking_sleep.json +22 -22
- package/catalog/backend/no_cross_module_imports.json +21 -21
- package/catalog/backend/no_dependency_overrides.json +27 -27
- package/catalog/backend/no_destructive_migrations.json +22 -22
- package/catalog/backend/no_dynamic_sql.json +22 -22
- package/catalog/backend/no_empty_tests.json +22 -22
- package/catalog/backend/no_eval_or_exec.json +22 -22
- package/catalog/backend/no_hardcoded_credentials.json +21 -21
- package/catalog/backend/no_internal_imports.json +22 -22
- package/catalog/backend/no_manual_actor_stamping.json +27 -27
- package/catalog/backend/no_manual_ownership_checks.json +32 -32
- package/catalog/backend/no_manual_scope_filtering.json +27 -27
- package/catalog/backend/no_manual_table_schema.json +22 -22
- package/catalog/backend/no_manual_version_assignment.json +22 -22
- package/catalog/backend/no_mutable_default_args.json +22 -22
- package/catalog/backend/no_naive_datetime.json +22 -22
- package/catalog/backend/no_oversized_python_files.json +22 -22
- package/catalog/backend/no_print.json +22 -22
- package/catalog/backend/no_raw_app_routes.json +26 -26
- package/catalog/backend/no_raw_connection_access.json +27 -27
- package/catalog/backend/no_raw_file_references.json +27 -27
- package/catalog/backend/no_raw_outbound_http.json +22 -22
- package/catalog/backend/no_raw_session_construction.json +22 -22
- package/catalog/backend/no_star_imports.json +22 -22
- package/catalog/backend/no_todo_fixme.json +22 -22
- package/catalog/backend/no_unique_columns_on_soft_delete_models.json +22 -22
- package/catalog/backend/offset_queries_declare_ordering.json +22 -22
- package/catalog/backend/path_id_params_are_uuid.json +22 -22
- package/catalog/backend/policy_refs_resolve.json +27 -27
- package/catalog/backend/public_modules_are_read_only.json +26 -26
- package/catalog/backend/reads_use_base_query.json +27 -27
- package/catalog/backend/response_model_not_table_model.json +27 -27
- package/catalog/backend/routes_declare_response_model.json +27 -27
- package/catalog/backend/safe_methods_are_read_only.json +31 -31
- package/catalog/backend/schemas_exclude_sensitive_fields.json +32 -32
- package/catalog/backend/session_imported_from_sqlmodel.json +22 -22
- package/catalog/backend/table_models_use_base_table.json +22 -22
- package/catalog/backend/tables_have_migrations.json +27 -27
- package/catalog/backend/tenant_scoped_models_use_scoped_service.json +22 -22
- package/catalog/backend/ungoverned_escape_hatch.json +21 -21
- package/catalog/backend/update_schemas_inherit_base_update_schema.json +32 -32
- package/catalog/frontend/escape-hatch.json +21 -21
- package/catalog/frontend/generated-client-only.json +26 -26
- package/catalog/frontend/layout-contract.json +26 -26
- package/catalog/frontend/no-cross-module-imports.json +21 -21
- package/catalog/frontend/no-deep-imports.json +25 -25
- package/catalog/frontend/no-dom-html-injection.json +22 -22
- package/catalog/frontend/no-eval.json +21 -21
- package/catalog/frontend/no-inline-styling.json +25 -25
- package/catalog/frontend/no-style-imports.json +24 -24
- package/catalog/frontend/no-unsafe-href.json +21 -21
- package/catalog/frontend/no-unsafe-target-blank.json +21 -21
- package/catalog/frontend/router-links.json +22 -22
- package/catalog/frontend/token-styled-elements.json +25 -25
- package/catalog/schema.json +95 -95
- package/corpus/PENDING.json +4 -4
- package/corpus/RESIDUALS.json +21 -21
- package/corpus/backend/alembic_downgrades_not_empty/compliant-01/modules/notes/migrations/versions/0001_change.py +6 -6
- package/corpus/backend/alembic_downgrades_not_empty/violation-01/modules/notes/migrations/versions/0001_change.py +6 -6
- package/corpus/backend/base_query_not_overridden/compliant-01/modules/notes/service.py +8 -8
- package/corpus/backend/base_query_not_overridden/compliant-02/modules/notes/service.py +8 -8
- package/corpus/backend/base_query_not_overridden/violation-01/modules/notes/service.py +8 -8
- package/corpus/backend/base_query_not_overridden/violation-02/expected-findings.json +7 -7
- package/corpus/backend/base_query_not_overridden/violation-02/modules/notes/service.py +8 -8
- package/corpus/backend/canonical_module_shape/compliant-01/modules/notes/models.py +6 -6
- package/corpus/backend/canonical_module_shape/compliant-01/modules/notes/module.py +7 -7
- package/corpus/backend/canonical_module_shape/compliant-01/modules/notes/router.py +3 -3
- package/corpus/backend/canonical_module_shape/compliant-01/modules/notes/schemas.py +10 -10
- package/corpus/backend/canonical_module_shape/compliant-01/modules/notes/service.py +5 -5
- package/corpus/backend/canonical_module_shape/violation-01/modules/notes/router.py +3 -3
- package/corpus/backend/datetime_columns_are_timezone_aware/compliant-01/modules/notes/models.py +12 -12
- package/corpus/backend/datetime_columns_are_timezone_aware/violation-01/modules/notes/models.py +12 -12
- package/corpus/backend/datetime_columns_are_timezone_aware/violation-02/modules/notes/models.py +13 -13
- package/corpus/backend/datetime_columns_are_timezone_aware/violation-03/modules/notes/models.py +15 -15
- package/corpus/backend/escape_hatch_budget/compliant-01/escape-hatch-budget.json +3 -3
- package/corpus/backend/escape_hatch_budget/compliant-01/modules/notes/service.py +2 -2
- package/corpus/backend/escape_hatch_budget/compliant-02/escape-hatch-budget.json +1 -1
- package/corpus/backend/escape_hatch_budget/compliant-02/modules/notes/service.py +4 -4
- package/corpus/backend/escape_hatch_budget/violation-01/escape-hatch-budget.json +1 -1
- package/corpus/backend/escape_hatch_budget/violation-01/modules/notes/service.py +2 -2
- package/corpus/backend/escape_hatch_budget/violation-02/escape-hatch-budget.json +3 -3
- package/corpus/backend/escape_hatch_budget/violation-02/modules/notes/service.py +4 -4
- package/corpus/backend/events_reference_catalog/compliant-01/modules/notes/module.py +9 -9
- package/corpus/backend/events_reference_catalog/violation-01/modules/notes/module.py +8 -8
- package/corpus/backend/input_schemas_exclude_managed_columns/compliant-01/modules/notes/schemas.py +6 -6
- package/corpus/backend/input_schemas_exclude_managed_columns/violation-01/expected-findings.json +7 -7
- package/corpus/backend/input_schemas_exclude_managed_columns/violation-01/modules/notes/schemas.py +9 -9
- package/corpus/backend/input_schemas_exclude_managed_columns/violation-02/expected-findings.json +12 -12
- package/corpus/backend/input_schemas_exclude_managed_columns/violation-02/modules/notes/router.py +14 -14
- package/corpus/backend/input_str_fields_have_max_length/compliant-01/modules/notes/schemas.py +4 -4
- package/corpus/backend/input_str_fields_have_max_length/violation-01/modules/notes/schemas.py +2 -2
- package/corpus/backend/jobs_reference_catalog/compliant-01/modules/notes/service.py +5 -5
- package/corpus/backend/jobs_reference_catalog/violation-01/modules/notes/service.py +2 -2
- package/corpus/backend/list_routes_paginate/compliant-01/modules/notes/router.py +6 -6
- package/corpus/backend/list_routes_paginate/violation-01/modules/notes/router.py +3 -3
- package/corpus/backend/modules_declare_policy/compliant-01/modules/notes/module.py +7 -7
- package/corpus/backend/modules_declare_policy/violation-01/modules/notes/module.py +6 -6
- package/corpus/backend/mutations_emit_audit/compliant-01/modules/notes/service.py +9 -9
- package/corpus/backend/mutations_emit_audit/violation-01/modules/notes/service.py +4 -4
- package/corpus/backend/mutations_require_write_role/compliant-01/modules/notes/module.py +7 -7
- package/corpus/backend/mutations_require_write_role/compliant-01/modules/notes/router.py +3 -3
- package/corpus/backend/mutations_require_write_role/compliant-02/modules/notes/module.py +7 -7
- package/corpus/backend/mutations_require_write_role/compliant-02/modules/notes/router.py +3 -3
- package/corpus/backend/mutations_require_write_role/violation-01/expected-findings.json +7 -7
- package/corpus/backend/mutations_require_write_role/violation-01/modules/notes/module.py +7 -7
- package/corpus/backend/mutations_require_write_role/violation-01/modules/notes/router.py +3 -3
- package/corpus/backend/mutations_require_write_role/violation-02/expected-findings.json +7 -7
- package/corpus/backend/mutations_require_write_role/violation-02/modules/notes/module.py +7 -7
- package/corpus/backend/mutations_require_write_role/violation-02/modules/notes/router.py +5 -5
- package/corpus/backend/mutations_require_write_role/violation-03/expected-findings.json +7 -7
- package/corpus/backend/mutations_require_write_role/violation-03/modules/notes/module.py +10 -10
- package/corpus/backend/mutations_require_write_role/violation-03/modules/notes/router.py +3 -3
- package/corpus/backend/no_adhoc_background_runtime/compliant-01/modules/notes/service.py +9 -9
- package/corpus/backend/no_adhoc_background_runtime/violation-01/modules/notes/service.py +5 -5
- package/corpus/backend/no_adhoc_background_runtime/violation-02/modules/notes/service.py +3 -3
- package/corpus/backend/no_adhoc_config_decrypt/compliant-01/modules/billing/service.py +2 -2
- package/corpus/backend/no_adhoc_config_decrypt/violation-01/modules/billing/service.py +2 -2
- package/corpus/backend/no_adhoc_logging_config/compliant-01/modules/notes/service.py +3 -3
- package/corpus/backend/no_adhoc_logging_config/violation-01/modules/notes/service.py +3 -3
- package/corpus/backend/no_adhoc_middleware/compliant-01/main.py +3 -3
- package/corpus/backend/no_adhoc_middleware/violation-01/main.py +4 -4
- package/corpus/backend/no_adhoc_middleware/violation-02/main.py +5 -5
- package/corpus/backend/no_adhoc_permission_literals/compliant-01/modules/notes/module.py +3 -3
- package/corpus/backend/no_adhoc_permission_literals/compliant-02/modules/notes/router.py +5 -5
- package/corpus/backend/no_adhoc_permission_literals/violation-01/expected-findings.json +7 -7
- package/corpus/backend/no_adhoc_permission_literals/violation-01/modules/notes/module.py +1 -1
- package/corpus/backend/no_adhoc_permission_literals/violation-02/expected-findings.json +7 -7
- package/corpus/backend/no_adhoc_permission_literals/violation-02/modules/notes/router.py +2 -2
- package/corpus/backend/no_adhoc_permission_literals/violation-03/expected-findings.json +12 -12
- package/corpus/backend/no_adhoc_permission_literals/violation-03/modules/notes/module.py +10 -10
- package/corpus/backend/no_app_instantiation/compliant-01/main.py +3 -3
- package/corpus/backend/no_app_instantiation/violation-01/main.py +3 -3
- package/corpus/backend/no_blocking_sleep/compliant-01/modules/notes/service.py +2 -2
- package/corpus/backend/no_blocking_sleep/violation-01/modules/notes/service.py +5 -5
- package/corpus/backend/no_cross_module_imports/compliant-01/modules/a/service.py +1 -1
- package/corpus/backend/no_cross_module_imports/violation-01/modules/a/service.py +1 -1
- package/corpus/backend/no_cross_module_imports/violation-02/modules/a/service.py +1 -1
- package/corpus/backend/no_dependency_overrides/compliant-01/main.py +12 -12
- package/corpus/backend/no_dependency_overrides/violation-01/main.py +11 -11
- package/corpus/backend/no_destructive_migrations/compliant-01/modules/notes/migrations/versions/0001_change.py +3 -3
- package/corpus/backend/no_destructive_migrations/compliant-02/modules/notes/migrations/versions/0001_change.py +8 -8
- package/corpus/backend/no_destructive_migrations/violation-01/expected-findings.json +7 -7
- package/corpus/backend/no_destructive_migrations/violation-01/modules/notes/migrations/versions/0001_change.py +2 -2
- package/corpus/backend/no_destructive_migrations/violation-02/expected-findings.json +7 -7
- package/corpus/backend/no_destructive_migrations/violation-02/modules/notes/migrations/versions/0001_change.py +2 -2
- package/corpus/backend/no_destructive_migrations/violation-03/expected-findings.json +7 -7
- package/corpus/backend/no_destructive_migrations/violation-03/modules/notes/migrations/versions/0001_change.py +3 -3
- package/corpus/backend/no_destructive_migrations/violation-04/expected-findings.json +12 -12
- package/corpus/backend/no_destructive_migrations/violation-04/modules/notes/migrations/versions/0001_change.py +6 -6
- package/corpus/backend/no_destructive_migrations/violation-05/expected-findings.json +12 -12
- package/corpus/backend/no_destructive_migrations/violation-05/modules/notes/migrations/versions/0001_change.py +3 -3
- package/corpus/backend/no_dynamic_sql/compliant-01/modules/notes/service.py +1 -1
- package/corpus/backend/no_dynamic_sql/compliant-02/modules/notes/service.py +20 -20
- package/corpus/backend/no_dynamic_sql/violation-01/modules/notes/service.py +2 -2
- package/corpus/backend/no_dynamic_sql/violation-02/modules/notes/service.py +2 -2
- package/corpus/backend/no_dynamic_sql/violation-03/modules/notes/service.py +7 -7
- package/corpus/backend/no_dynamic_sql/violation-04/modules/notes/service.py +16 -16
- package/corpus/backend/no_empty_tests/compliant-01/tests/test_notes.py +2 -2
- package/corpus/backend/no_empty_tests/violation-01/tests/test_notes.py +2 -2
- package/corpus/backend/no_eval_or_exec/compliant-01/modules/notes/service.py +2 -2
- package/corpus/backend/no_eval_or_exec/violation-01/modules/notes/service.py +2 -2
- package/corpus/backend/no_hardcoded_credentials/compliant-01/modules/billing/service.py +3 -3
- package/corpus/backend/no_hardcoded_credentials/compliant-02/modules/billing/service.py +18 -18
- package/corpus/backend/no_hardcoded_credentials/violation-01/expected-findings.json +7 -7
- package/corpus/backend/no_hardcoded_credentials/violation-01/modules/billing/service.py +2 -2
- package/corpus/backend/no_hardcoded_credentials/violation-02/expected-findings.json +7 -7
- package/corpus/backend/no_hardcoded_credentials/violation-02/modules/billing/service.py +1 -1
- package/corpus/backend/no_hardcoded_credentials/violation-03/expected-findings.json +22 -22
- package/corpus/backend/no_hardcoded_credentials/violation-03/modules/billing/service.py +11 -11
- package/corpus/backend/no_hardcoded_credentials/violation-04/expected-findings.json +12 -12
- package/corpus/backend/no_hardcoded_credentials/violation-04/modules/billing/service.py +8 -8
- package/corpus/backend/no_hardcoded_credentials/violation-05/expected-findings.json +12 -12
- package/corpus/backend/no_hardcoded_credentials/violation-05/modules/billing/service.py +4 -4
- package/corpus/backend/no_internal_imports/compliant-01/modules/notes/service.py +1 -1
- package/corpus/backend/no_internal_imports/violation-01/modules/notes/service.py +1 -1
- package/corpus/backend/no_manual_actor_stamping/compliant-01/modules/notes/service.py +5 -5
- package/corpus/backend/no_manual_actor_stamping/compliant-02/modules/notes/schemas.py +12 -12
- package/corpus/backend/no_manual_actor_stamping/violation-01/modules/notes/service.py +3 -3
- package/corpus/backend/no_manual_actor_stamping/violation-02/expected-findings.json +7 -7
- package/corpus/backend/no_manual_actor_stamping/violation-02/modules/notes/service.py +4 -4
- package/corpus/backend/no_manual_ownership_checks/compliant-01/modules/journals/service.py +3 -3
- package/corpus/backend/no_manual_ownership_checks/compliant-02/modules/journals/schemas.py +11 -11
- package/corpus/backend/no_manual_ownership_checks/violation-01/modules/journals/service.py +3 -3
- package/corpus/backend/no_manual_ownership_checks/violation-02/expected-findings.json +7 -7
- package/corpus/backend/no_manual_ownership_checks/violation-02/modules/journals/service.py +9 -9
- package/corpus/backend/no_manual_ownership_checks/violation-03/expected-findings.json +7 -7
- package/corpus/backend/no_manual_ownership_checks/violation-03/modules/notes/jobs.py +1 -1
- package/corpus/backend/no_manual_ownership_checks/violation-03/modules/notes/models.py +7 -7
- package/corpus/backend/no_manual_ownership_checks/violation-03/modules/notes/module.py +11 -11
- package/corpus/backend/no_manual_ownership_checks/violation-03/modules/notes/service.py +7 -7
- package/corpus/backend/no_manual_scope_filtering/compliant-01/modules/notes/service.py +8 -8
- package/corpus/backend/no_manual_scope_filtering/compliant-02/modules/notes/schemas.py +12 -12
- package/corpus/backend/no_manual_scope_filtering/violation-01/modules/notes/service.py +2 -2
- package/corpus/backend/no_manual_scope_filtering/violation-02/modules/notes/service.py +2 -2
- package/corpus/backend/no_manual_scope_filtering/violation-03/expected-findings.json +7 -7
- package/corpus/backend/no_manual_scope_filtering/violation-03/modules/notes/service.py +7 -7
- package/corpus/backend/no_manual_table_schema/compliant-01/modules/notes/models.py +6 -6
- package/corpus/backend/no_manual_table_schema/violation-01/modules/notes/models.py +8 -8
- package/corpus/backend/no_manual_version_assignment/compliant-01/modules/notes/service.py +5 -5
- package/corpus/backend/no_manual_version_assignment/violation-01/modules/notes/service.py +3 -3
- package/corpus/backend/no_manual_version_assignment/violation-02/modules/notes/service.py +3 -3
- package/corpus/backend/no_manual_version_assignment/violation-03/modules/notes/service.py +3 -3
- package/corpus/backend/no_mutable_default_args/compliant-01/modules/notes/service.py +3 -3
- package/corpus/backend/no_mutable_default_args/violation-01/modules/notes/service.py +2 -2
- package/corpus/backend/no_naive_datetime/compliant-01/modules/notes/service.py +2 -2
- package/corpus/backend/no_naive_datetime/violation-01/modules/notes/service.py +2 -2
- package/corpus/backend/no_naive_datetime/violation-02/modules/notes/service.py +2 -2
- package/corpus/backend/no_oversized_python_files/compliant-01/modules/notes/service.py +9 -9
- package/corpus/backend/no_oversized_python_files/violation-01/modules/notes/service.py +530 -530
- package/corpus/backend/no_print/compliant-01/modules/notes/service.py +7 -7
- package/corpus/backend/no_print/violation-01/modules/notes/service.py +2 -2
- package/corpus/backend/no_raw_app_routes/compliant-01/main.py +12 -12
- package/corpus/backend/no_raw_app_routes/violation-01/main.py +10 -10
- package/corpus/backend/no_raw_app_routes/violation-02/main.py +16 -16
- package/corpus/backend/no_raw_app_routes/violation-03/main.py +12 -12
- package/corpus/backend/no_raw_app_routes/violation-04/main.py +10 -10
- package/corpus/backend/no_raw_app_routes/violation-05/main.py +12 -12
- package/corpus/backend/no_raw_app_routes/violation-06/main.py +10 -10
- package/corpus/backend/no_raw_connection_access/compliant-01/modules/notes/service.py +5 -5
- package/corpus/backend/no_raw_connection_access/violation-01/modules/notes/service.py +2 -2
- package/corpus/backend/no_raw_connection_access/violation-02/modules/notes/service.py +2 -2
- package/corpus/backend/no_raw_file_references/compliant-01/modules/notes/models.py +10 -10
- package/corpus/backend/no_raw_file_references/violation-01/modules/notes/models.py +9 -9
- package/corpus/backend/no_raw_outbound_http/compliant-01/modules/notes/service.py +2 -2
- package/corpus/backend/no_raw_outbound_http/compliant-03/modules/notes/service.py +12 -12
- package/corpus/backend/no_raw_outbound_http/violation-01/expected-findings.json +7 -7
- package/corpus/backend/no_raw_outbound_http/violation-01/modules/notes/service.py +1 -1
- package/corpus/backend/no_raw_outbound_http/violation-02/expected-findings.json +7 -7
- package/corpus/backend/no_raw_outbound_http/violation-02/modules/notes/service.py +1 -1
- package/corpus/backend/no_raw_outbound_http/violation-03/expected-findings.json +7 -7
- package/corpus/backend/no_raw_outbound_http/violation-03/modules/notes/service.py +1 -1
- package/corpus/backend/no_raw_outbound_http/violation-04/expected-findings.json +12 -12
- package/corpus/backend/no_raw_outbound_http/violation-04/modules/notes/service.py +7 -7
- package/corpus/backend/no_raw_outbound_http/violation-05/expected-findings.json +12 -12
- package/corpus/backend/no_raw_outbound_http/violation-05/modules/notes/service.py +5 -5
- package/corpus/backend/no_raw_outbound_http/violation-06/expected-findings.json +12 -12
- package/corpus/backend/no_raw_outbound_http/violation-06/modules/notes/service.py +2 -2
- package/corpus/backend/no_raw_session_construction/compliant-01/modules/notes/service.py +3 -3
- package/corpus/backend/no_raw_session_construction/violation-01/modules/notes/service.py +3 -3
- package/corpus/backend/no_star_imports/compliant-01/modules/notes/service.py +1 -1
- package/corpus/backend/no_star_imports/violation-01/modules/notes/service.py +1 -1
- package/corpus/backend/no_todo_fixme/compliant-01/modules/notes/service.py +3 -3
- package/corpus/backend/no_todo_fixme/violation-01/modules/notes/service.py +3 -3
- package/corpus/backend/no_unique_columns_on_soft_delete_models/compliant-01/modules/notes/models.py +17 -17
- package/corpus/backend/no_unique_columns_on_soft_delete_models/violation-01/expected-findings.json +7 -7
- package/corpus/backend/no_unique_columns_on_soft_delete_models/violation-01/modules/notes/models.py +6 -6
- package/corpus/backend/no_unique_columns_on_soft_delete_models/violation-02/expected-findings.json +7 -7
- package/corpus/backend/no_unique_columns_on_soft_delete_models/violation-02/modules/notes/models.py +13 -13
- package/corpus/backend/no_unique_columns_on_soft_delete_models/violation-03/expected-findings.json +7 -7
- package/corpus/backend/no_unique_columns_on_soft_delete_models/violation-03/modules/notes/models.py +16 -16
- package/corpus/backend/offset_queries_declare_ordering/compliant-01/modules/notes/service.py +4 -4
- package/corpus/backend/offset_queries_declare_ordering/violation-01/modules/notes/service.py +2 -2
- package/corpus/backend/path_id_params_are_uuid/compliant-01/modules/notes/router.py +6 -6
- package/corpus/backend/path_id_params_are_uuid/violation-01/modules/notes/router.py +6 -6
- package/corpus/backend/policy_refs_resolve/compliant-01/modules/notes/module.py +7 -7
- package/corpus/backend/policy_refs_resolve/violation-01/modules/notes/module.py +8 -8
- package/corpus/backend/public_modules_are_read_only/compliant-01/modules/notes/module.py +7 -7
- package/corpus/backend/public_modules_are_read_only/compliant-01/modules/notes/router.py +3 -3
- package/corpus/backend/public_modules_are_read_only/violation-01/expected-findings.json +7 -7
- package/corpus/backend/public_modules_are_read_only/violation-01/modules/notes/module.py +7 -7
- package/corpus/backend/public_modules_are_read_only/violation-01/modules/notes/router.py +3 -3
- package/corpus/backend/public_modules_are_read_only/violation-02/expected-findings.json +7 -7
- package/corpus/backend/public_modules_are_read_only/violation-02/modules/notes/module.py +7 -7
- package/corpus/backend/public_modules_are_read_only/violation-02/modules/notes/router.py +5 -5
- package/corpus/backend/reads_use_base_query/compliant-01/modules/notes/models.py +6 -6
- package/corpus/backend/reads_use_base_query/compliant-01/modules/notes/service.py +8 -8
- package/corpus/backend/reads_use_base_query/compliant-02/modules/notes/models.py +9 -9
- package/corpus/backend/reads_use_base_query/compliant-02/modules/notes/service.py +9 -9
- package/corpus/backend/reads_use_base_query/violation-01/modules/notes/models.py +6 -6
- package/corpus/backend/reads_use_base_query/violation-01/modules/notes/service.py +9 -9
- package/corpus/backend/reads_use_base_query/violation-02/expected-findings.json +7 -7
- package/corpus/backend/reads_use_base_query/violation-02/modules/notes/models.py +6 -6
- package/corpus/backend/reads_use_base_query/violation-02/modules/notes/service.py +8 -8
- package/corpus/backend/response_model_not_table_model/compliant-01/modules/notes/models.py +6 -6
- package/corpus/backend/response_model_not_table_model/compliant-01/modules/notes/router.py +3 -3
- package/corpus/backend/response_model_not_table_model/compliant-01/modules/notes/schemas.py +5 -5
- package/corpus/backend/response_model_not_table_model/violation-01/modules/notes/models.py +6 -6
- package/corpus/backend/response_model_not_table_model/violation-01/modules/notes/router.py +3 -3
- package/corpus/backend/routes_declare_response_model/compliant-01/modules/notes/router.py +8 -8
- package/corpus/backend/routes_declare_response_model/violation-01/modules/notes/router.py +3 -3
- package/corpus/backend/safe_methods_are_read_only/compliant-01/modules/notes/router.py +6 -6
- package/corpus/backend/safe_methods_are_read_only/compliant-02/modules/notes/router.py +5 -5
- package/corpus/backend/safe_methods_are_read_only/violation-01/expected-findings.json +7 -7
- package/corpus/backend/safe_methods_are_read_only/violation-01/modules/notes/router.py +3 -3
- package/corpus/backend/safe_methods_are_read_only/violation-02/expected-findings.json +7 -7
- package/corpus/backend/safe_methods_are_read_only/violation-02/modules/notes/router.py +5 -5
- package/corpus/backend/safe_methods_are_read_only/violation-03/expected-findings.json +7 -7
- package/corpus/backend/safe_methods_are_read_only/violation-03/modules/notes/router.py +3 -3
- package/corpus/backend/schemas_exclude_sensitive_fields/compliant-01/modules/users/schemas.py +5 -5
- package/corpus/backend/schemas_exclude_sensitive_fields/compliant-02/modules/accounts/schemas.py +12 -12
- package/corpus/backend/schemas_exclude_sensitive_fields/violation-01/expected-findings.json +7 -7
- package/corpus/backend/schemas_exclude_sensitive_fields/violation-01/modules/users/schemas.py +3 -3
- package/corpus/backend/schemas_exclude_sensitive_fields/violation-02/expected-findings.json +7 -7
- package/corpus/backend/schemas_exclude_sensitive_fields/violation-02/modules/connectors/router.py +8 -8
- package/corpus/backend/schemas_exclude_sensitive_fields/violation-03/expected-findings.json +17 -17
- package/corpus/backend/schemas_exclude_sensitive_fields/violation-03/modules/integrations/schemas.py +7 -7
- package/corpus/backend/session_imported_from_sqlmodel/compliant-01/modules/notes/service.py +5 -5
- package/corpus/backend/session_imported_from_sqlmodel/violation-01/modules/notes/service.py +5 -5
- package/corpus/backend/table_models_use_base_table/compliant-01/modules/notes/models.py +6 -6
- package/corpus/backend/table_models_use_base_table/violation-01/modules/notes/models.py +5 -5
- package/corpus/backend/tables_have_migrations/compliant-01/modules/notes/migrations/versions/0a1b2c3d4e5f_create_notes_tables.py +22 -22
- package/corpus/backend/tables_have_migrations/compliant-01/modules/notes/models.py +6 -6
- package/corpus/backend/tables_have_migrations/compliant-02/capabilities/ledger/models.py +6 -6
- package/corpus/backend/tables_have_migrations/violation-01/expected-findings.json +7 -7
- package/corpus/backend/tables_have_migrations/violation-01/modules/notes/models.py +6 -6
- package/corpus/backend/tables_have_migrations/violation-02/expected-findings.json +7 -7
- package/corpus/backend/tables_have_migrations/violation-02/modules/notes/models.py +10 -10
- package/corpus/backend/tenant_scoped_models_use_scoped_service/compliant-01/modules/projects/models.py +6 -6
- package/corpus/backend/tenant_scoped_models_use_scoped_service/compliant-01/modules/projects/service.py +5 -5
- package/corpus/backend/tenant_scoped_models_use_scoped_service/compliant-02/modules/projects/models.py +8 -8
- package/corpus/backend/tenant_scoped_models_use_scoped_service/compliant-02/modules/projects/service.py +5 -5
- package/corpus/backend/tenant_scoped_models_use_scoped_service/violation-01/modules/projects/models.py +6 -6
- package/corpus/backend/tenant_scoped_models_use_scoped_service/violation-01/modules/projects/service.py +5 -5
- package/corpus/backend/ungoverned_escape_hatch/compliant-01/modules/notes/service.py +5 -5
- package/corpus/backend/ungoverned_escape_hatch/compliant-02/modules/notes/service.py +4 -4
- package/corpus/backend/ungoverned_escape_hatch/violation-01/modules/notes/service.py +2 -2
- package/corpus/backend/update_schemas_inherit_base_update_schema/compliant-01/modules/notes/schemas.py +2 -2
- package/corpus/backend/update_schemas_inherit_base_update_schema/violation-01/modules/notes/schemas.py +2 -2
- package/corpus/backend/update_schemas_inherit_base_update_schema/violation-02/modules/notes/schemas.py +5 -5
- package/corpus/frontend/escape-hatch/compliant-01/src/modules/widgets/Widget.tsx +4 -4
- package/corpus/frontend/escape-hatch/violation-01/src/modules/widgets/Widget.tsx +4 -4
- package/corpus/frontend/escape-hatch/violation-02/src/modules/widgets/Widget.tsx +7 -7
- package/corpus/frontend/escape-hatch/violation-03/src/modules/widgets/Widget.tsx +7 -7
- package/corpus/frontend/generated-client-only/compliant-01/src/modules/widgets/Widget.tsx +6 -6
- package/corpus/frontend/generated-client-only/compliant-02/src/modules/widgets/Widget.tsx +21 -21
- package/corpus/frontend/generated-client-only/compliant-03/src/modules/widgets/Widget.tsx +7 -7
- package/corpus/frontend/generated-client-only/compliant-04/src/modules/widgets/Widget.tsx +17 -17
- package/corpus/frontend/generated-client-only/violation-01/src/modules/widgets/Widget.tsx +3 -3
- package/corpus/frontend/generated-client-only/violation-02/src/modules/widgets/Widget.tsx +9 -9
- package/corpus/frontend/generated-client-only/violation-03/src/modules/widgets/Widget.tsx +14 -14
- package/corpus/frontend/generated-client-only/violation-04/src/modules/widgets/Widget.tsx +6 -6
- package/corpus/frontend/layout-contract/compliant-01/layout-contract.json +3 -3
- package/corpus/frontend/layout-contract/compliant-01/src/modules/widgets/Widget.tsx +8 -8
- package/corpus/frontend/layout-contract/violation-01/layout-contract.json +3 -3
- package/corpus/frontend/layout-contract/violation-01/src/modules/widgets/Widget.tsx +8 -8
- package/corpus/frontend/no-cross-module-imports/compliant-01/src/modules/widgets/Widget.tsx +4 -4
- package/corpus/frontend/no-cross-module-imports/violation-01/src/modules/widgets/Widget.tsx +3 -3
- package/corpus/frontend/no-deep-imports/compliant-01/src/modules/widgets/Widget.tsx +4 -4
- package/corpus/frontend/no-deep-imports/violation-01/src/modules/widgets/Widget.tsx +2 -2
- package/corpus/frontend/no-dom-html-injection/compliant-01/src/modules/widgets/Widget.tsx +4 -4
- package/corpus/frontend/no-dom-html-injection/compliant-02/src/modules/widgets/Widget.tsx +11 -11
- package/corpus/frontend/no-dom-html-injection/violation-01/src/modules/widgets/Widget.tsx +3 -3
- package/corpus/frontend/no-dom-html-injection/violation-02/src/modules/widgets/Widget.tsx +7 -7
- package/corpus/frontend/no-dom-html-injection/violation-03/src/modules/widgets/Widget.tsx +12 -12
- package/corpus/frontend/no-eval/compliant-01/src/modules/widgets/Widget.tsx +4 -4
- package/corpus/frontend/no-eval/compliant-02/src/modules/widgets/Widget.tsx +11 -11
- package/corpus/frontend/no-eval/violation-01/src/modules/widgets/Widget.tsx +3 -3
- package/corpus/frontend/no-eval/violation-02/src/modules/widgets/Widget.tsx +7 -7
- package/corpus/frontend/no-eval/violation-03/src/modules/widgets/Widget.tsx +10 -10
- package/corpus/frontend/no-eval/violation-04/src/modules/widgets/Widget.tsx +6 -6
- package/corpus/frontend/no-inline-styling/compliant-01/src/modules/widgets/Widget.tsx +4 -4
- package/corpus/frontend/no-inline-styling/violation-01/src/modules/widgets/Widget.tsx +3 -3
- package/corpus/frontend/no-inline-styling/violation-02/src/modules/widgets/Widget.tsx +6 -6
- package/corpus/frontend/no-style-imports/compliant-01/src/modules/widgets/Widget.tsx +4 -4
- package/corpus/frontend/no-style-imports/violation-01/src/modules/widgets/Widget.tsx +2 -2
- package/corpus/frontend/no-unsafe-href/compliant-01/src/modules/widgets/Widget.tsx +3 -3
- package/corpus/frontend/no-unsafe-href/violation-01/src/modules/widgets/Widget.tsx +3 -3
- package/corpus/frontend/no-unsafe-target-blank/compliant-01/src/modules/widgets/Widget.tsx +3 -3
- package/corpus/frontend/no-unsafe-target-blank/violation-01/src/modules/widgets/Widget.tsx +3 -3
- package/corpus/frontend/router-links/compliant-01/src/modules/widgets/Widget.tsx +4 -4
- package/corpus/frontend/router-links/violation-01/src/modules/widgets/Widget.tsx +3 -3
- package/corpus/frontend/token-styled-elements/compliant-01/src/modules/widgets/Widget.tsx +4 -4
- package/corpus/frontend/token-styled-elements/compliant-02/src/modules/widgets/Widget.tsx +4 -4
- package/corpus/frontend/token-styled-elements/violation-01/src/modules/widgets/Widget.tsx +3 -3
- package/findings.schema.json +40 -40
- package/package.json +23 -23
- package/restricted-surface.json +10 -10
- package/scorecard.schema.json +52 -52
|
@@ -1,12 +1,12 @@
|
|
|
1
|
-
[
|
|
2
|
-
{
|
|
3
|
-
"rule": "backend/no_hardcoded_credentials",
|
|
4
|
-
"path": "modules/billing/service.py",
|
|
5
|
-
"line": 2
|
|
6
|
-
},
|
|
7
|
-
{
|
|
8
|
-
"rule": "backend/no_hardcoded_credentials",
|
|
9
|
-
"path": "modules/billing/service.py",
|
|
10
|
-
"line": 3
|
|
11
|
-
}
|
|
12
|
-
]
|
|
1
|
+
[
|
|
2
|
+
{
|
|
3
|
+
"rule": "backend/no_hardcoded_credentials",
|
|
4
|
+
"path": "modules/billing/service.py",
|
|
5
|
+
"line": 2
|
|
6
|
+
},
|
|
7
|
+
{
|
|
8
|
+
"rule": "backend/no_hardcoded_credentials",
|
|
9
|
+
"path": "modules/billing/service.py",
|
|
10
|
+
"line": 3
|
|
11
|
+
}
|
|
12
|
+
]
|
|
@@ -1,4 +1,4 @@
|
|
|
1
|
-
def connect(config):
|
|
2
|
-
user, password = 'svc', 'hunter2'
|
|
3
|
-
header_value = 'ghp_0123456789abcdefghijklmnopqrstuvwxyz0123'
|
|
4
|
-
return user, header_value
|
|
1
|
+
def connect(config):
|
|
2
|
+
user, password = 'svc', 'hunter2'
|
|
3
|
+
header_value = 'ghp_0123456789abcdefghijklmnopqrstuvwxyz0123'
|
|
4
|
+
return user, header_value
|
|
@@ -1 +1 @@
|
|
|
1
|
-
from terp.core import BaseService
|
|
1
|
+
from terp.core import BaseService
|
|
@@ -1 +1 @@
|
|
|
1
|
-
from terp.core._internal.engine import get_engine
|
|
1
|
+
from terp.core._internal.engine import get_engine
|
|
@@ -1,5 +1,5 @@
|
|
|
1
|
-
from terp.core import BaseService
|
|
2
|
-
|
|
3
|
-
|
|
4
|
-
class NoteService(BaseService):
|
|
5
|
-
model = Note
|
|
1
|
+
from terp.core import BaseService
|
|
2
|
+
|
|
3
|
+
|
|
4
|
+
class NoteService(BaseService):
|
|
5
|
+
model = Note
|
|
@@ -1,12 +1,12 @@
|
|
|
1
|
-
import uuid
|
|
2
|
-
|
|
3
|
-
from terp.core import BaseSchema
|
|
4
|
-
|
|
5
|
-
|
|
6
|
-
class NoteRead(BaseSchema):
|
|
7
|
-
"""A read DTO may EXPOSE the actor-stamp columns (annotation only) —
|
|
8
|
-
only attribute access (set / compare) is policed."""
|
|
9
|
-
|
|
10
|
-
title: str
|
|
11
|
-
created_by_id: uuid.UUID | None
|
|
12
|
-
modified_by_id: uuid.UUID | None
|
|
1
|
+
import uuid
|
|
2
|
+
|
|
3
|
+
from terp.core import BaseSchema
|
|
4
|
+
|
|
5
|
+
|
|
6
|
+
class NoteRead(BaseSchema):
|
|
7
|
+
"""A read DTO may EXPOSE the actor-stamp columns (annotation only) —
|
|
8
|
+
only attribute access (set / compare) is policed."""
|
|
9
|
+
|
|
10
|
+
title: str
|
|
11
|
+
created_by_id: uuid.UUID | None
|
|
12
|
+
modified_by_id: uuid.UUID | None
|
|
@@ -1,3 +1,3 @@
|
|
|
1
|
-
def create_note(note, actor):
|
|
2
|
-
note.created_by_id = actor.id
|
|
3
|
-
note.modified_by_id = actor.id
|
|
1
|
+
def create_note(note, actor):
|
|
2
|
+
note.created_by_id = actor.id
|
|
3
|
+
note.modified_by_id = actor.id
|
|
@@ -1,7 +1,7 @@
|
|
|
1
|
-
[
|
|
2
|
-
{
|
|
3
|
-
"rule": "backend/no_manual_actor_stamping",
|
|
4
|
-
"path": "modules/notes/service.py",
|
|
5
|
-
"line": 3
|
|
6
|
-
}
|
|
7
|
-
]
|
|
1
|
+
[
|
|
2
|
+
{
|
|
3
|
+
"rule": "backend/no_manual_actor_stamping",
|
|
4
|
+
"path": "modules/notes/service.py",
|
|
5
|
+
"line": 3
|
|
6
|
+
}
|
|
7
|
+
]
|
|
@@ -1,4 +1,4 @@
|
|
|
1
|
-
def import_note(note, source_row, actor):
|
|
2
|
-
note.title = source_row["title"]
|
|
3
|
-
note.created_by_id = actor.id
|
|
4
|
-
return note
|
|
1
|
+
def import_note(note, source_row, actor):
|
|
2
|
+
note.title = source_row["title"]
|
|
3
|
+
note.created_by_id = actor.id
|
|
4
|
+
return note
|
|
@@ -1,3 +1,3 @@
|
|
|
1
|
-
from terp.core import BaseService
|
|
2
|
-
class JournalService(BaseService):
|
|
3
|
-
model = Journal
|
|
1
|
+
from terp.core import BaseService
|
|
2
|
+
class JournalService(BaseService):
|
|
3
|
+
model = Journal
|
|
@@ -1,11 +1,11 @@
|
|
|
1
|
-
import uuid
|
|
2
|
-
|
|
3
|
-
from terp.core import BaseSchema
|
|
4
|
-
|
|
5
|
-
|
|
6
|
-
class JournalRead(BaseSchema):
|
|
7
|
-
"""A read DTO may EXPOSE owner_id (annotation only) — only attribute
|
|
8
|
-
access (set / filter / compare) is policed."""
|
|
9
|
-
|
|
10
|
-
title: str
|
|
11
|
-
owner_id: uuid.UUID | None
|
|
1
|
+
import uuid
|
|
2
|
+
|
|
3
|
+
from terp.core import BaseSchema
|
|
4
|
+
|
|
5
|
+
|
|
6
|
+
class JournalRead(BaseSchema):
|
|
7
|
+
"""A read DTO may EXPOSE owner_id (annotation only) — only attribute
|
|
8
|
+
access (set / filter / compare) is policed."""
|
|
9
|
+
|
|
10
|
+
title: str
|
|
11
|
+
owner_id: uuid.UUID | None
|
|
@@ -1,3 +1,3 @@
|
|
|
1
|
-
def guard(entry, principal):
|
|
2
|
-
if entry.owner_id != principal.id:
|
|
3
|
-
raise PermissionDeniedError()
|
|
1
|
+
def guard(entry, principal):
|
|
2
|
+
if entry.owner_id != principal.id:
|
|
3
|
+
raise PermissionDeniedError()
|
|
@@ -1,7 +1,7 @@
|
|
|
1
|
-
[
|
|
2
|
-
{
|
|
3
|
-
"rule": "backend/no_manual_ownership_checks",
|
|
4
|
-
"path": "modules/journals/service.py",
|
|
5
|
-
"line": 7
|
|
6
|
-
}
|
|
7
|
-
]
|
|
1
|
+
[
|
|
2
|
+
{
|
|
3
|
+
"rule": "backend/no_manual_ownership_checks",
|
|
4
|
+
"path": "modules/journals/service.py",
|
|
5
|
+
"line": 7
|
|
6
|
+
}
|
|
7
|
+
]
|
|
@@ -1,9 +1,9 @@
|
|
|
1
|
-
from sqlmodel import select
|
|
2
|
-
|
|
3
|
-
|
|
4
|
-
def entries_for(session, principal):
|
|
5
|
-
return session.exec(
|
|
6
|
-
select(Journal).where(
|
|
7
|
-
Journal.owner_id == principal.id,
|
|
8
|
-
)
|
|
9
|
-
).all()
|
|
1
|
+
from sqlmodel import select
|
|
2
|
+
|
|
3
|
+
|
|
4
|
+
def entries_for(session, principal):
|
|
5
|
+
return session.exec(
|
|
6
|
+
select(Journal).where(
|
|
7
|
+
Journal.owner_id == principal.id,
|
|
8
|
+
)
|
|
9
|
+
).all()
|
|
@@ -1,7 +1,7 @@
|
|
|
1
|
-
[
|
|
2
|
-
{
|
|
3
|
-
"rule": "backend/no_manual_ownership_checks",
|
|
4
|
-
"path": "modules/notes/service.py",
|
|
5
|
-
"line": 6
|
|
6
|
-
}
|
|
7
|
-
]
|
|
1
|
+
[
|
|
2
|
+
{
|
|
3
|
+
"rule": "backend/no_manual_ownership_checks",
|
|
4
|
+
"path": "modules/notes/service.py",
|
|
5
|
+
"line": 6
|
|
6
|
+
}
|
|
7
|
+
]
|
|
@@ -1 +1 @@
|
|
|
1
|
-
PURGE_EXPIRED_NOTES = object()
|
|
1
|
+
PURGE_EXPIRED_NOTES = object()
|
|
@@ -1,7 +1,7 @@
|
|
|
1
|
-
from sqlmodel import Field
|
|
2
|
-
|
|
3
|
-
from terp.core import ActorStampedMixin, BaseTable
|
|
4
|
-
|
|
5
|
-
|
|
6
|
-
class Note(BaseTable, ActorStampedMixin, table=True):
|
|
7
|
-
title: str = Field(max_length=200)
|
|
1
|
+
from sqlmodel import Field
|
|
2
|
+
|
|
3
|
+
from terp.core import ActorStampedMixin, BaseTable
|
|
4
|
+
|
|
5
|
+
|
|
6
|
+
class Note(BaseTable, ActorStampedMixin, table=True):
|
|
7
|
+
title: str = Field(max_length=200)
|
|
@@ -1,11 +1,11 @@
|
|
|
1
|
-
from terp.core import ModuleSpec
|
|
2
|
-
|
|
3
|
-
from .jobs import PURGE_EXPIRED_NOTES
|
|
4
|
-
from .service import NoteService
|
|
5
|
-
|
|
6
|
-
|
|
7
|
-
module = ModuleSpec(
|
|
8
|
-
name="notes",
|
|
9
|
-
services=(NoteService,),
|
|
10
|
-
jobs=(PURGE_EXPIRED_NOTES,),
|
|
11
|
-
)
|
|
1
|
+
from terp.core import ModuleSpec
|
|
2
|
+
|
|
3
|
+
from .jobs import PURGE_EXPIRED_NOTES
|
|
4
|
+
from .service import NoteService
|
|
5
|
+
|
|
6
|
+
|
|
7
|
+
module = ModuleSpec(
|
|
8
|
+
name="notes",
|
|
9
|
+
services=(NoteService,),
|
|
10
|
+
jobs=(PURGE_EXPIRED_NOTES,),
|
|
11
|
+
)
|
|
@@ -1,7 +1,7 @@
|
|
|
1
|
-
from terp.core import BaseService
|
|
2
|
-
|
|
3
|
-
from .models import Note
|
|
4
|
-
|
|
5
|
-
|
|
6
|
-
class NoteService(BaseService):
|
|
7
|
-
model = Note
|
|
1
|
+
from terp.core import BaseService
|
|
2
|
+
|
|
3
|
+
from .models import Note
|
|
4
|
+
|
|
5
|
+
|
|
6
|
+
class NoteService(BaseService):
|
|
7
|
+
model = Note
|
|
@@ -1,8 +1,8 @@
|
|
|
1
|
-
from terp.core import BaseService
|
|
2
|
-
|
|
3
|
-
|
|
4
|
-
class NoteService(BaseService):
|
|
5
|
-
model = Note
|
|
6
|
-
|
|
7
|
-
def visible(self, session):
|
|
8
|
-
return session.exec(self.base_query())
|
|
1
|
+
from terp.core import BaseService
|
|
2
|
+
|
|
3
|
+
|
|
4
|
+
class NoteService(BaseService):
|
|
5
|
+
model = Note
|
|
6
|
+
|
|
7
|
+
def visible(self, session):
|
|
8
|
+
return session.exec(self.base_query())
|
|
@@ -1,12 +1,12 @@
|
|
|
1
|
-
import datetime
|
|
2
|
-
|
|
3
|
-
from terp.core import BaseSchema
|
|
4
|
-
|
|
5
|
-
|
|
6
|
-
class NoteRead(BaseSchema):
|
|
7
|
-
"""A read DTO may EXPOSE a managed scope column (annotation only) —
|
|
8
|
-
only attribute access (filter / set / compare) is policed."""
|
|
9
|
-
|
|
10
|
-
title: str
|
|
11
|
-
deleted_at: datetime.datetime | None
|
|
12
|
-
tenant_id: str | None
|
|
1
|
+
import datetime
|
|
2
|
+
|
|
3
|
+
from terp.core import BaseSchema
|
|
4
|
+
|
|
5
|
+
|
|
6
|
+
class NoteRead(BaseSchema):
|
|
7
|
+
"""A read DTO may EXPOSE a managed scope column (annotation only) —
|
|
8
|
+
only attribute access (filter / set / compare) is policed."""
|
|
9
|
+
|
|
10
|
+
title: str
|
|
11
|
+
deleted_at: datetime.datetime | None
|
|
12
|
+
tenant_id: str | None
|
|
@@ -1,2 +1,2 @@
|
|
|
1
|
-
def visible_notes(session):
|
|
2
|
-
return session.exec(select(Note).where(Note.deleted_at == None)) # noqa: E711
|
|
1
|
+
def visible_notes(session):
|
|
2
|
+
return session.exec(select(Note).where(Note.deleted_at == None)) # noqa: E711
|
|
@@ -1,2 +1,2 @@
|
|
|
1
|
-
def move_note(note, target):
|
|
2
|
-
note.tenant_id = target
|
|
1
|
+
def move_note(note, target):
|
|
2
|
+
note.tenant_id = target
|
|
@@ -1,7 +1,7 @@
|
|
|
1
|
-
[
|
|
2
|
-
{
|
|
3
|
-
"rule": "backend/no_manual_scope_filtering",
|
|
4
|
-
"path": "modules/notes/service.py",
|
|
5
|
-
"line": 5
|
|
6
|
-
}
|
|
7
|
-
]
|
|
1
|
+
[
|
|
2
|
+
{
|
|
3
|
+
"rule": "backend/no_manual_scope_filtering",
|
|
4
|
+
"path": "modules/notes/service.py",
|
|
5
|
+
"line": 5
|
|
6
|
+
}
|
|
7
|
+
]
|
|
@@ -1,7 +1,7 @@
|
|
|
1
|
-
def partition(notes, current_tenant):
|
|
2
|
-
mine = []
|
|
3
|
-
for note in notes:
|
|
4
|
-
holder = note
|
|
5
|
-
if holder.tenant_id == current_tenant:
|
|
6
|
-
mine.append(note)
|
|
7
|
-
return mine
|
|
1
|
+
def partition(notes, current_tenant):
|
|
2
|
+
mine = []
|
|
3
|
+
for note in notes:
|
|
4
|
+
holder = note
|
|
5
|
+
if holder.tenant_id == current_tenant:
|
|
6
|
+
mine.append(note)
|
|
7
|
+
return mine
|
|
@@ -1,6 +1,6 @@
|
|
|
1
|
-
from sqlmodel import Field
|
|
2
|
-
from terp.core import BaseTable
|
|
3
|
-
|
|
4
|
-
|
|
5
|
-
class Note(BaseTable, table=True):
|
|
6
|
-
title: str = Field(max_length=200)
|
|
1
|
+
from sqlmodel import Field
|
|
2
|
+
from terp.core import BaseTable
|
|
3
|
+
|
|
4
|
+
|
|
5
|
+
class Note(BaseTable, table=True):
|
|
6
|
+
title: str = Field(max_length=200)
|
|
@@ -1,8 +1,8 @@
|
|
|
1
|
-
from sqlmodel import Field
|
|
2
|
-
from terp.core import BaseTable
|
|
3
|
-
|
|
4
|
-
|
|
5
|
-
class Note(BaseTable, table=True):
|
|
6
|
-
__table_args__ = {"schema": "notes"}
|
|
7
|
-
|
|
8
|
-
title: str = Field(max_length=200)
|
|
1
|
+
from sqlmodel import Field
|
|
2
|
+
from terp.core import BaseTable
|
|
3
|
+
|
|
4
|
+
|
|
5
|
+
class Note(BaseTable, table=True):
|
|
6
|
+
__table_args__ = {"schema": "notes"}
|
|
7
|
+
|
|
8
|
+
title: str = Field(max_length=200)
|
|
@@ -1,5 +1,5 @@
|
|
|
1
|
-
def apply(db_obj, data):
|
|
2
|
-
# The concurrency token is left untouched; the persistence layer bumps it.
|
|
3
|
-
db_obj.title = data.title
|
|
4
|
-
token = db_obj.version
|
|
5
|
-
return db_obj, token
|
|
1
|
+
def apply(db_obj, data):
|
|
2
|
+
# The concurrency token is left untouched; the persistence layer bumps it.
|
|
3
|
+
db_obj.title = data.title
|
|
4
|
+
token = db_obj.version
|
|
5
|
+
return db_obj, token
|
|
@@ -1,3 +1,3 @@
|
|
|
1
|
-
def apply(db_obj, data):
|
|
2
|
-
db_obj.version = data.version
|
|
3
|
-
return db_obj
|
|
1
|
+
def apply(db_obj, data):
|
|
2
|
+
db_obj.version = data.version
|
|
3
|
+
return db_obj
|
|
@@ -1,3 +1,3 @@
|
|
|
1
|
-
def bump(row):
|
|
2
|
-
row.version += 1
|
|
3
|
-
return row
|
|
1
|
+
def bump(row):
|
|
2
|
+
row.version += 1
|
|
3
|
+
return row
|
|
@@ -1,3 +1,3 @@
|
|
|
1
|
-
def apply(db_obj, data):
|
|
2
|
-
setattr(db_obj, "version", data.version)
|
|
3
|
-
return db_obj
|
|
1
|
+
def apply(db_obj, data):
|
|
2
|
+
setattr(db_obj, "version", data.version)
|
|
3
|
+
return db_obj
|
|
@@ -1,3 +1,3 @@
|
|
|
1
|
-
def run(items=None):
|
|
2
|
-
items = items or []
|
|
3
|
-
return items
|
|
1
|
+
def run(items=None):
|
|
2
|
+
items = items or []
|
|
3
|
+
return items
|
|
@@ -1,2 +1,2 @@
|
|
|
1
|
-
def run(items=[]):
|
|
2
|
-
return items
|
|
1
|
+
def run(items=[]):
|
|
2
|
+
return items
|
|
@@ -1,2 +1,2 @@
|
|
|
1
|
-
def run():
|
|
2
|
-
return datetime.now(UTC)
|
|
1
|
+
def run():
|
|
2
|
+
return datetime.now(UTC)
|
|
@@ -1,2 +1,2 @@
|
|
|
1
|
-
def run():
|
|
2
|
-
return datetime.utcnow()
|
|
1
|
+
def run():
|
|
2
|
+
return datetime.utcnow()
|
|
@@ -1,2 +1,2 @@
|
|
|
1
|
-
def run():
|
|
2
|
-
return datetime.now()
|
|
1
|
+
def run():
|
|
2
|
+
return datetime.now()
|
|
@@ -1,9 +1,9 @@
|
|
|
1
|
-
"""A small, cohesive service — well under the file-size cap."""
|
|
2
|
-
|
|
3
|
-
from terp.core import BaseService
|
|
4
|
-
|
|
5
|
-
from .models import Note
|
|
6
|
-
|
|
7
|
-
|
|
8
|
-
class NoteService(BaseService[Note]):
|
|
9
|
-
model = Note
|
|
1
|
+
"""A small, cohesive service — well under the file-size cap."""
|
|
2
|
+
|
|
3
|
+
from terp.core import BaseService
|
|
4
|
+
|
|
5
|
+
from .models import Note
|
|
6
|
+
|
|
7
|
+
|
|
8
|
+
class NoteService(BaseService[Note]):
|
|
9
|
+
model = Note
|