core-framework 2.3.0__tar.gz → 2.3.1__tar.gz

{core_framework-2.3.0 → core_framework-2.3.1}/.cursor/rules/postgres-config-conventions.mdc

@@ -45,3 +45,12 @@ Use explicit write/read configuration and keep schema names shared.
   - `read_postgres`
 - Domain dependencies pass `(write, read, strong)` explicitly to repositories.
 - Until a dedicated strong instance exists, use write instance for the strong argument intentionally.
+
+## Schema names in SQL
+
+- Schema names come only from `settings.postgres_schemas` (see **Settings Model** above).
+- Domain `dependencies.py` passes unquoted `schema=runtime.settings.postgres_schemas.schema_<domain>` into repositories (keyword-only `__init__`).
+- Repositories cache `self.schema_sql = quote_postgres_identifier(schema)` and use `{self.schema_sql}.table` in f-string SQL — never hard-coded `"post".` literals.
+- Outbox producer adapter is wired per domain with `schema` at construction; consumer adapter receives unquoted `schema` per call and caches quoted SQL.
+
+Repository isolation rules (no cross-domain schema access): **`repository-schema-isolation.mdc`**.

{core_framework-2.3.0 → core_framework-2.3.1}/.cursor/rules/repository-schema-isolation.mdc

@@ -11,10 +11,19 @@ Each domain repository may only read/write tables in **its own** Postgres schema
 
 Canonical rule: `docs/platform/layers-and-boundaries.md` — *no cross-domain schema reads, writes, joins, or foreign keys*.
 
+## Schema qualification
+
+Repositories receive unquoted `schema` from `runtime.settings.postgres_schemas` in `dependencies.py` (keyword-only `__init__` arg). In `__init__`:
+
+- `self.schema` — config schema name (e.g. `post`)
+- `self.schema_sql` — `quote_postgres_identifier(schema)` for SQL interpolation
+
+Use `{self.schema_sql}.table` in f-string SQL — not hard-coded `"post".` literals.
+
 ## Allowed in a repository
 
-- SQL qualified with that domain's schema only (e.g. `"post".posts` in `PostRepository`).
-- **Within-schema** policy gates (e.g. `insert_post_like` checks `"post".posts.status = active`).
+- SQL qualified with that domain's schema only (e.g. `{self.schema_sql}.posts` in `PostRepository`).
+- **Within-schema** policy gates (e.g. `insert_post_like` checks `{self.schema_sql}.posts.status = active`).
 - **Lookup mirrors** in the same schema (`user_blocks_lookup`, `user_restrictions_lookup`, `user_followers_lookup`) — synced by application flows; mirrors are not authoritative.
 
 ## Forbidden in a repository
@@ -23,18 +32,18 @@ Canonical rule: `docs/platform/layers-and-boundaries.md` — *no cross-domain sc
 - Importing another domain's `service`, `repository`, or models to enforce policy.
 
 ```python
-# ❌ moderation/repository.py — cross-domain EXISTS
-insert into "moderation".post_reports (...)
+# ❌ moderation/repository.py — cross-domain EXISTS (illustrative schema literals)
+insert into {moderation_schema_sql}.post_reports (...)
 select $1, $2, $3, $4
 where exists (
-    select 1 from "post".posts
+    select 1 from {post_schema_sql}.posts
     where id = $2 and status = 'active'
 )
 
 # ❌ notification/repository.py — cross-domain mute gate
-insert into "notification".notification_mutes (...)
+insert into {notification_schema_sql}.notification_mutes (...)
 select ...
-where exists (select 1 from "comment".comments where ...)
+where exists (select 1 from {comment_schema_sql}.comments where ...)
 ```
 
 ## Alembic migrations (different convention)
@@ -69,4 +78,8 @@ Before adding a repository write that depends on another domain's row state:
 
 ## Self-check (repositories only)
 
-In `domains/<name>/repository.py`, every `"<schema>".` qualifier in SQL must be `<name>` (or that domain's documented mirror tables in the same schema).
+In `domains/<name>/repository.py`:
+
+- Every table/type qualifier in SQL must use `{self.schema_sql}.…` (that domain's schema only).
+- Do not hard-code `"user".`, `"post".`, etc. — use `self.schema` / `self.schema_sql` from config.
+- Mirror lookup tables (`user_blocks_lookup`, etc.) still live under `{self.schema_sql}` when they belong to that domain's schema.

{core_framework-2.3.0 → core_framework-2.3.1}/CHANGELOG.md

@@ -4,6 +4,19 @@ Notable changes to **core-framework** (import **`core_framework`**). Format foll
 
 ## [Unreleased]
 
+## [2.3.1] - 2026-07-03
+
+### Added
+
+- **Partial admin user deletions:** `tombstone_authored_posts_only` and `tombstone_authored_comments_only` on `POST /admin/users/{user_id}/deletions` — moderator tombstone of authored posts or comments while keeping the account. See **`docs/domains/deletion/users.md`**.
+- **`docs/testing.md`** — usage-focused pytest plugin guide for host adopters (wiring, fixtures, tiers, troubleshooting). Design reference remains **`docs/library/testing-plugin-design.md`**.
+- **Post/comment attachment integration tests:** v1.1 create/edit coverage — best-effort attach (unknown or already-linked assets), attach before worker publish, edit-budget enforcement, clear-all patch, and tombstone finals cleanup. See **`tests/integration/api/posts/post_attachments_integration_test.py`** and **`tests/integration/api/comments/comment_attachments_integration_test.py`**.
+- **Analytics rollup:** `retrieve_daily_fact_kind_totals_for_range` on `AnalyticsService` and `retrieve_analytics_kind_totals_for_range` in `application/analytics/read_service` — sum `daily_fact` counts per `kind` over an inclusive UTC day range (for host catalog and similar reads).
+
+### Fixed
+
+- **Admin outbox schemas:** rename response field `schema` to `producing_schema` with JSON alias `schema` so Pydantic no longer warns about shadowing `BaseModel.schema`.
+
 ## [2.3.0] - 2026-07-03
 
 Analytics rollup domain (materialized daily activity counts), admin read API, and retention prune. Hosts must add **`[analytics]`** and **`schema_analytics`**, run **`cf-alembic`**, and run the worker for rollup refresh and daily-fact prune.

{core_framework-2.3.0 → core_framework-2.3.1}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: core-framework
-Version: 2.3.0
+Version: 2.3.1
 Summary: Core framework package (import as core_framework)
 Project-URL: Homepage, https://github.com/NepNepFFXIV/core-framework
 Project-URL: Repository, https://github.com/NepNepFFXIV/core-framework

{core_framework-2.3.0 → core_framework-2.3.1}/core_framework/api/admin/outbox/schemas.py

@@ -2,7 +2,7 @@ from datetime import datetime
 from typing import Annotated, Any
 
 from fastapi import Path, Query
-from pydantic import BaseModel
+from pydantic import BaseModel, ConfigDict, Field
 
 OutboxRowId = Annotated[
     int,
@@ -34,7 +34,9 @@ class OutboxOldestPendingRow(BaseModel):
 
 
 class OutboxSummaryResponse(BaseModel):
-    schema: str
+    model_config = ConfigDict(populate_by_name=True)
+
+    producing_schema: str = Field(alias="schema")
     total_pending: int
     total_dead: int
     pending_by_event: list[OutboxEventCountItem]
@@ -43,8 +45,10 @@ class OutboxSummaryResponse(BaseModel):
 
 
 class OutboxDeadRowResponse(BaseModel):
+    model_config = ConfigDict(populate_by_name=True)
+
     id: int
-    schema: str
+    producing_schema: str = Field(alias="schema")
     event_name: str
     aggregate_type: str
     aggregate_id: str

{core_framework-2.3.0 → core_framework-2.3.1}/core_framework/application/analytics/read_service.py

@@ -27,6 +27,31 @@ async def retrieve_analytics_daily_range(
     }
 
 
+async def retrieve_analytics_kind_totals_for_range(
+    *,
+    subject_type: str,
+    activity_type: str,
+    from_day: date,
+    to_day: date,
+    kind: str | None = None,
+) -> dict[str, Any]:
+    """Return per-kind rollup totals summed over an inclusive UTC day range."""
+    totals = await analytics_deps.analytics_service.retrieve_daily_fact_kind_totals_for_range(
+        subject_type=subject_type,
+        activity_type=activity_type,
+        from_day=from_day,
+        to_day=to_day,
+        kind=kind,
+    )
+    return {
+        "subject_type": subject_type,
+        "activity_type": activity_type,
+        "from_day": from_day,
+        "to_day": to_day,
+        "items": [{"kind": total.kind, "count": total.count} for total in totals],
+    }
+
+
 async def retrieve_analytics_daily_day(
     *,
     subject_type: str,

{core_framework-2.3.0 → core_framework-2.3.1}/core_framework/application/analytics/sources/comment_created.py

@@ -5,12 +5,18 @@ from core_framework.domains.analytics import ActivityCount
 
 
 class CommentCreatedSource:
+    """Activity source for comment creation counts."""
+
     @property
     def subject_type(self) -> str:
+        """Return the analytics subject type for this source."""
+
         return "comment"
 
     @property
     def activity_type(self) -> str:
+        """Return the analytics activity type for this source."""
+
         return "created"
 
     async def retrieve_activity_counts_for_day(
@@ -19,6 +25,7 @@ class CommentCreatedSource:
         *,
         final: bool = False,
     ) -> list[ActivityCount]:
+        """Return per-kind comment created counts for one UTC day."""
         if final:
             rows = await comment_deps.comment_service.retrieve_comment_created_activity_counts_for_day_strong(day=day)
         else:

{core_framework-2.3.0 → core_framework-2.3.1}/core_framework/application/analytics/sources/post_created.py

@@ -5,12 +5,18 @@ from core_framework.domains.analytics import ActivityCount
 
 
 class PostCreatedSource:
+    """Activity source for post creation counts."""
+
     @property
     def subject_type(self) -> str:
+        """Return the analytics subject type for this source."""
+
         return "post"
 
     @property
     def activity_type(self) -> str:
+        """Return the analytics activity type for this source."""
+
         return "created"
 
     async def retrieve_activity_counts_for_day(
@@ -19,6 +25,7 @@ class PostCreatedSource:
         *,
         final: bool = False,
     ) -> list[ActivityCount]:
+        """Return per-kind post created counts for one UTC day."""
         if final:
             rows = await post_deps.post_service.retrieve_post_created_activity_counts_for_day_strong(day=day)
         else:

{core_framework-2.3.0 → core_framework-2.3.1}/core_framework/application/analytics/sources/post_viewed.py

@@ -5,12 +5,18 @@ from core_framework.domains.analytics import ActivityCount
 
 
 class PostViewedSource:
+    """Activity source for post view counts."""
+
     @property
     def subject_type(self) -> str:
+        """Return the analytics subject type for this source."""
+
         return "post"
 
     @property
     def activity_type(self) -> str:
+        """Return the analytics activity type for this source."""
+
         return "viewed"
 
     async def retrieve_activity_counts_for_day(
@@ -19,6 +25,7 @@ class PostViewedSource:
         *,
         final: bool = False,
     ) -> list[ActivityCount]:
+        """Return per-kind post viewed counts for one UTC day."""
         if final:
             rows = await post_deps.post_service.retrieve_post_viewed_activity_counts_for_day_strong(day=day)
         else:

{core_framework-2.3.0 → core_framework-2.3.1}/core_framework/application/analytics/sources/user_registered.py

@@ -5,12 +5,18 @@ from core_framework.domains.analytics import ActivityCount
 
 
 class UserRegisteredSource:
+    """Activity source for user registration counts."""
+
     @property
     def subject_type(self) -> str:
+        """Return the analytics subject type for this source."""
+
         return "user"
 
     @property
     def activity_type(self) -> str:
+        """Return the analytics activity type for this source."""
+
         return "registered"
 
     async def retrieve_activity_counts_for_day(
@@ -19,6 +25,7 @@ class UserRegisteredSource:
         *,
         final: bool = False,
     ) -> list[ActivityCount]:
+        """Return per-kind user registered counts for one UTC day."""
         if final:
             rows = await user_deps.user_service.retrieve_user_registered_activity_counts_for_day_strong(day=day)
         else:

{core_framework-2.3.0 → core_framework-2.3.1}/core_framework/application/auth/models.py

@@ -6,5 +6,7 @@ from core_framework.domains.user import UserIdentity
 
 @dataclass(frozen=True, slots=True, kw_only=True)
 class UserDetail:
+    """Authenticated user identity plus moderation snapshot for access checks."""
+
     identity: UserIdentity
     moderation: UserModeration

{core_framework-2.3.0 → core_framework-2.3.1}/core_framework/application/cache/models.py

@@ -5,11 +5,15 @@ from core_framework.core import CacheKey
 
 @dataclass(frozen=True, slots=True, kw_only=True)
 class CacheInvalidateTarget:
+    """One exact cache key invalidation target."""
+
     resource: CacheKey
     params: dict[str, str]
 
 
 @dataclass(frozen=True, slots=True, kw_only=True)
 class CacheInvalidatePatternTarget:
+    """One pattern-based cache invalidation target."""
+
     resource: CacheKey
     params: dict[str, str]

{core_framework-2.3.0 → core_framework-2.3.1}/core_framework/application/events/models.py

@@ -3,5 +3,7 @@ from dataclasses import dataclass
 
 @dataclass(frozen=True, slots=True, kw_only=True)
 class Event:
+    """Analytics event payload enqueued for asynchronous recording."""
+
     subject_type: str
     subject: str

{core_framework-2.3.0 → core_framework-2.3.1}/core_framework/application/media/attachment_read.py

@@ -52,6 +52,7 @@ def _serialize_attachment_variant(
 
 
 def serialize_image_attachments(*, attachment_links: Sequence[_ImageAttachmentLink]) -> dict[str, Any]:
+    """Serialize image attachment links into API-ready thumb and display variant payloads."""
     _, _, default_fallback_url = require_attachment_read_urls()
     sorted_attachment_links = sorted(attachment_links, key=lambda link: link.asset_id)
     return {

{core_framework-2.3.0 → core_framework-2.3.1}/core_framework/application/media/attachment_service.py

@@ -116,6 +116,8 @@ async def attachment_asset_has_link_row(*, asset_id: str) -> bool:
 
 
 class _InsertImageAttachmentLink(Protocol):
+    """Insert one image attachment link row for a content item."""
+
     def __call__(
         self,
         *,
@@ -123,15 +125,25 @@ class _InsertImageAttachmentLink(Protocol):
         asset_id: str,
         display_width: int | None,
         display_height: int | None,
-    ) -> Awaitable[bool]: ...
+    ) -> Awaitable[bool]:
+        """Insert a link row and return whether a new row was created."""
+        ...
 
 
 class _DeleteImageAttachmentLink(Protocol):
-    def __call__(self, *, content_id: str, asset_id: str) -> Awaitable[bool]: ...
+    """Delete one image attachment link row for a content item."""
+
+    def __call__(self, *, content_id: str, asset_id: str) -> Awaitable[bool]:
+        """Delete a link row and return whether a row was removed."""
+        ...
 
 
 class _SelectImageAttachmentAssetIds(Protocol):
-    def __call__(self, *, content_id: str) -> Awaitable[list[str]]: ...
+    """List image attachment asset ids linked to a content item."""
+
+    def __call__(self, *, content_id: str) -> Awaitable[list[str]]:
+        """Return asset ids currently linked to the content item."""
+        ...
 
 
 @dataclass(frozen=True)

{core_framework-2.3.0 → core_framework-2.3.1}/core_framework/application/media/read_url_config.py

@@ -12,6 +12,7 @@ _attachment_default_fallback_url: str | None = None
 
 
 def configure_media_read_urls(*, settings: Settings) -> None:
+    """Load avatar, banner, and attachment public read URL settings from bootstrap config."""
     global _avatar_default_url, _avatar_public_base_url, _avatar_extension
     global _banner_default_url, _banner_public_base_url, _banner_extension
     global _attachment_public_base_url, _attachment_extension, _attachment_default_fallback_url
@@ -27,6 +28,7 @@ def configure_media_read_urls(*, settings: Settings) -> None:
 
 
 def require_avatar_read_urls() -> tuple[str, str, str]:
+    """Return configured avatar default URL, public base URL, and file extension."""
     if _avatar_default_url is None or _avatar_public_base_url is None or _avatar_extension is None:
         raise RuntimeError(
             "Media read URLs are not configured. Call configure_media_read_urls() during application bootstrap."
@@ -35,6 +37,7 @@ def require_avatar_read_urls() -> tuple[str, str, str]:
 
 
 def require_banner_read_urls() -> tuple[str, str, str]:
+    """Return configured banner default URL, public base URL, and file extension."""
     if _banner_default_url is None or _banner_public_base_url is None or _banner_extension is None:
         raise RuntimeError(
             "Media read URLs are not configured. Call configure_media_read_urls() during application bootstrap."
@@ -43,6 +46,7 @@ def require_banner_read_urls() -> tuple[str, str, str]:
 
 
 def require_attachment_read_urls() -> tuple[str, str, str]:
+    """Return configured attachment public base URL, file extension, and default fallback URL."""
     if _attachment_public_base_url is None or _attachment_extension is None or _attachment_default_fallback_url is None:
         raise RuntimeError(
             "Media read URLs are not configured. Call configure_media_read_urls() during application bootstrap."

{core_framework-2.3.0 → core_framework-2.3.1}/core_framework/application/notifications/enums.py

@@ -2,6 +2,8 @@ from enum import StrEnum
 
 
 class NotificationInboxListItemType(StrEnum):
+    """Notification kinds surfaced in the authenticated inbox list."""
+
     COMMENT_ON_POST = "comment_on_post"
     REPLY_TO_COMMENT = "reply_to_comment"
     MENTION_IN_POST = "mention_in_post"

{core_framework-2.3.0 → core_framework-2.3.1}/core_framework/application/outbox/events.py

@@ -9,6 +9,8 @@ USER_BLOCK_MIRROR_ORDERING_LOCK_PREFIX: Final[str] = "user.block"
 
 
 class UserBlockRelationshipChangedPayload(TypedDict):
+    """Outbox payload for a user block relationship change."""
+
     blocker_id: str
     blocked_id: str
 
@@ -24,6 +26,7 @@ def build_user_block_relationship_changed_enqueue(
     blocked_id: str,
     commit_token: str,
 ) -> OutboxEnqueue:
+    """Build an outbox enqueue for a user block relationship change."""
     aggregate_id = aggregate_id_for_user_block(blocker_id=blocker_id, blocked_id=blocked_id)
     payload: UserBlockRelationshipChangedPayload = {
         "blocker_id": blocker_id,
@@ -46,6 +49,8 @@ USER_FOLLOW_MIRROR_ORDERING_LOCK_PREFIX: Final[str] = "user.follow"
 
 
 class UserFollowRelationshipChangedPayload(TypedDict):
+    """Outbox payload for a user follow relationship change."""
+
     follower_id: str
     followee_id: str
 
@@ -61,6 +66,7 @@ def build_user_follow_relationship_changed_enqueue(
     followee_id: str,
     commit_token: str,
 ) -> OutboxEnqueue:
+    """Build an outbox enqueue for a user follow relationship change."""
     aggregate_id = aggregate_id_for_user_follow(follower_id=follower_id, followee_id=followee_id)
     payload: UserFollowRelationshipChangedPayload = {
         "follower_id": follower_id,
@@ -83,6 +89,8 @@ MODERATION_RESTRICTION_MIRROR_ORDERING_LOCK_PREFIX: Final[str] = "moderation.res
 
 
 class ModerationRestrictionRelationshipChangedPayload(TypedDict):
+    """Outbox payload for a moderation restriction relationship change."""
+
     user_id: str
 
 
@@ -96,6 +104,7 @@ def build_moderation_restriction_relationship_changed_enqueue(
     user_id: str,
     commit_token: str,
 ) -> OutboxEnqueue:
+    """Build an outbox enqueue for a moderation restriction relationship change."""
     payload: ModerationRestrictionRelationshipChangedPayload = {
         "user_id": user_id,
     }

{core_framework-2.3.0 → core_framework-2.3.1}/core_framework/application/shared/enums.py

@@ -2,16 +2,22 @@ from enum import StrEnum
 
 
 class EventType(StrEnum):
+    """Analytics event kinds recorded for subject activity."""
+
     LOGIN = "login"
     VIEW = "view"
 
 
 class SubjectType(StrEnum):
+    """Analytics subject kinds aggregated in daily facts."""
+
     POST = "post"
     USER = "user"
 
 
 class WorkerJobName(StrEnum):
+    """Registered ARQ worker job names."""
+
     PROCESS_ACCOUNT_DELETION = "process_account_deletion"
     PROCESS_USER_CONTENT_DELETION = "process_user_content_deletion"
     PROCESS_ADMIN_USER_DELETION = "process_admin_user_deletion"

{core_framework-2.3.0 → core_framework-2.3.1}/core_framework/application/shared/exceptions.py

@@ -1,58 +1,78 @@
 class UnauthorizedException(Exception):
+    """Signal that the caller lacks valid authentication."""
+
     def __init__(self, message: str = "Unauthorized") -> None:
         self.message = message
         super().__init__(self.message)
 
 
 class ForbiddenException(Exception):
+    """Signal that the caller is authenticated but not permitted."""
+
     def __init__(self, message: str = "Forbidden") -> None:
         self.message = message
         super().__init__(self.message)
 
 
 class UserNotFoundException(Exception):
+    """Signal that the requested user does not exist or is not visible."""
+
     def __init__(self, message: str = "User not found") -> None:
         self.message = message
         super().__init__(self.message)
 
 
 class ContentNotFoundException(Exception):
+    """Signal that the requested content does not exist or is not visible."""
+
     def __init__(self, message: str = "Content not found") -> None:
         self.message = message
         super().__init__(self.message)
 
 
 class BadRequestException(Exception):
+    """Signal a caller mistake that should map to HTTP 400."""
+
     def __init__(self, message: str = "Bad request") -> None:
         self.message = message
         super().__init__(self.message)
 
 
 class ConflictException(Exception):
+    """Signal a state conflict that should map to HTTP 409."""
+
     def __init__(self, message: str = "Conflict") -> None:
         self.message = message
         super().__init__(self.message)
 
 
 class IngestBodyTooLargeException(Exception):
+    """Signal that an ingest payload exceeds the configured size limit."""
+
     def __init__(self, message: str = "Ingest body too large") -> None:
         self.message = message
         super().__init__(self.message)
 
 
 class IngestUnsupportedMediaTypeException(Exception):
+    """Signal that an ingest Content-Type is not allowed."""
+
     def __init__(self, message: str = "Ingest unsupported media type") -> None:
         self.message = message
         super().__init__(self.message)
 
 
 class AppealAlreadyDecidedException(Exception):
+    """Signal that a moderation appeal was already decided."""
+
     def __init__(self, message: str = "Appeal already decided") -> None:
         self.message = message
         super().__init__(self.message)
 
 
 class InvariantViolationException(Exception):
+    """Signal an internal invariant breach that should map to HTTP 500."""
+
     def __init__(self, message: str = "Invariant violation") -> None:
         self.message = message
         super().__init__(self.message)

{core_framework-2.3.0 → core_framework-2.3.1}/core_framework/application/users/deletion_audit.py

@@ -3,6 +3,7 @@ from core_framework.domains.user import UserIdentity
 
 
 def username_for_audit_from_identity(*, identity: UserIdentity) -> str | None:
+    """Return a username for deletion audit logs, or ``None`` for the default identity."""
     return identity.username if identity != UserIdentity.DEFAULT else None
 
 

{core_framework-2.3.0 → core_framework-2.3.1}/core_framework/application/users/enums.py

@@ -2,5 +2,9 @@ from enum import StrEnum
 
 
 class AdminUserDeletionType(StrEnum):
+    """Admin-initiated user deletion strategies."""
+
     REMOVE_ACCOUNT_TOMBSTONE_AUTHORED_CONTENT = "remove_account_tombstone_authored_content"
     REMOVE_ACCOUNT_DELETE_AUTHORED_CONTENT = "remove_account_delete_authored_content"
+    TOMBSTONE_AUTHORED_POSTS_ONLY = "tombstone_authored_posts_only"
+    TOMBSTONE_AUTHORED_COMMENTS_ONLY = "tombstone_authored_comments_only"

{core_framework-2.3.0 → core_framework-2.3.1}/core_framework/application/users/user_deletion_service.py

@@ -145,14 +145,25 @@ async def _run_remove_account_delete_authored_content(*, target_user_id: str) ->
     await _remove_user(target_user_id=target_user_id, preserve_authored_content=False)
 
 
-async def _tombstone_moderator_authored_content_for_user(*, user_id: str) -> None:
-    """Tombstone active authored posts and comments as ``tombstoned_by_moderator`` without per-item audit."""
+async def _run_tombstone_authored_posts_only(*, target_user_id: str) -> None:
+    await _tombstone_moderator_authored_posts_for_user(user_id=target_user_id)
+
+
+async def _run_tombstone_authored_comments_only(*, target_user_id: str) -> None:
+    await _tombstone_moderator_authored_comments_for_user(user_id=target_user_id)
+
+
+async def _tombstone_moderator_authored_posts_for_user(*, user_id: str) -> None:
+    """Tombstone active authored posts as ``tombstoned_by_moderator`` without per-item audit."""
     post_impact = await post_deps.post_service.tombstone_posts_by_author_id(
         author_id=user_id,
         tombstone_status=PostStatus.TOMBSTONED_BY_MODERATOR,
     )
     await finalize_author_posts_tombstone_cleanup(impact=post_impact)
 
+
+async def _tombstone_moderator_authored_comments_for_user(*, user_id: str) -> None:
+    """Tombstone active authored comments as ``tombstoned_by_moderator`` without per-item audit."""
     comment_impact = await comment_deps.comment_service.tombstone_comments_by_author_id(
         author_id=user_id,
         tombstone_status=CommentStatus.TOMBSTONED_BY_MODERATOR,
@@ -164,6 +175,12 @@ async def _tombstone_moderator_authored_content_for_user(*, user_id: str) -> Non
     )
 
 
+async def _tombstone_moderator_authored_content_for_user(*, user_id: str) -> None:
+    """Tombstone active authored posts and comments as ``tombstoned_by_moderator`` without per-item audit."""
+    await _tombstone_moderator_authored_posts_for_user(user_id=user_id)
+    await _tombstone_moderator_authored_comments_for_user(user_id=user_id)
+
+
 async def _destructive_authored_content_purge(*, author_id: str) -> None:
     """Destructively remove all posts and remaining comments authored by ``author_id``."""
     authored_post_ids = frozenset(
@@ -216,6 +233,8 @@ async def _mark_stats_dirty_for_author_comment_impacts(
 _ADMIN_USER_DELETION_STRATEGIES: dict[AdminUserDeletionType, AdminUserDeletionRunner] = {
     AdminUserDeletionType.REMOVE_ACCOUNT_TOMBSTONE_AUTHORED_CONTENT: _run_remove_account_tombstone_authored_content,
     AdminUserDeletionType.REMOVE_ACCOUNT_DELETE_AUTHORED_CONTENT: _run_remove_account_delete_authored_content,
+    AdminUserDeletionType.TOMBSTONE_AUTHORED_POSTS_ONLY: _run_tombstone_authored_posts_only,
+    AdminUserDeletionType.TOMBSTONE_AUTHORED_COMMENTS_ONLY: _run_tombstone_authored_comments_only,
 }
 
 

{core_framework-2.3.0 → core_framework-2.3.1}/core_framework/core/database.py

@@ -14,6 +14,11 @@ DB_NOT_CONNECTED_MSG: Final[str] = "Database is not connected"
 DB_ALREADY_CONNECTED_MSG: Final[str] = "Database is already connected"
 
 
+def quote_postgres_identifier(identifier: str) -> str:
+    """Return a double-quoted Postgres identifier (schema, table, or column name)."""
+    return f'"{identifier.replace('"', '""')}"'
+
+
 class Postgres:
     __slots__ = ("_pool", "_database_url", "_min_connections", "_max_connections")
 

{core_framework-2.3.0 → core_framework-2.3.1}/core_framework/domains/analytics/__init__.py

@@ -1,6 +1,6 @@
 from core_framework.domains.analytics.constants import DAILY_FACT_RETENTION_DAYS
 from core_framework.domains.analytics.exceptions import BaseAnalyticsException
-from core_framework.domains.analytics.models import DailyFactBucket, DailyFactDayTotal
+from core_framework.domains.analytics.models import DailyFactBucket, DailyFactDayTotal, DailyFactKindTotal
 from core_framework.domains.analytics.ports.activity_source import ActivityCount, ActivitySourcePort
 
 __all__ = [
@@ -10,4 +10,5 @@ __all__ = [
     "DAILY_FACT_RETENTION_DAYS",
     "DailyFactBucket",
     "DailyFactDayTotal",
+    "DailyFactKindTotal",
 ]