ffbb-data-client 2.4.6__tar.gz → 2.4.7__tar.gz

ffbb_data_client-2.4.7/.omc/skills/codeql-security-hardening-expertise.md

@@ -0,0 +1,49 @@
+---
+name: codeql-security-hardening-expertise
+description: Domain knowledge and mitigation patterns for Python CodeQL rules (CWE-117, CWE-918, empty-except)
+triggers:
+  - "py/log-injection"
+  - "py/partial-ssrf"
+  - "py/empty-except"
+  - "CWE-117"
+  - "CWE-918"
+  - "codeql alert"
+---
+
+# CodeQL Security Hardening (Python)
+
+## The Insight
+Static analysis tools like GitHub CodeQL build abstract syntax and taint-flow graphs from input entrypoints (e.g. FastAPI routes, query parameters) to execution sinks (loggers, HTTP request dispatchers).
+Standard defensive checks (like basic regex validation) are often insufficient if the variable remains directly connected in the taint graph. To satisfy CodeQL:
+1. **Log Injection (CWE-117)**: Explicit string transformation (`replace("\r\n", " ").replace("\r", " ").replace("\n", " ")`) must be executed directly on both the message format string and all format `*args` inside the logging method wrapper before delegating to `self.logger.log()`.
+2. **SSRF (CWE-918)**: User-supplied URL strings must be parsed and reconstructed strictly from validated components (`scheme://netloc/path?query`), protocols must be whitelisted (`http`, `https`), and raw client calls (`session.get(url)`, `session.post(url)`) in fallback branches must be eliminated in favor of unified helper functions.
+3. **Empty Excepts (`py/empty-except`)**: CodeQL flags any silent `except Exception: pass`. Adding a clear explanatory comment within the `except` block immediately resolves the warning.
+
+## Why This Matters
+Failing to satisfy CodeQL blocks security scanning checks in GitHub Actions, leaves potential injection vectors open in production, and introduces security technical debt.
+
+## Recognition Pattern
+- CodeQL alert #38 `py/log-injection` on logger calls
+- CodeQL alert #36, #37 `py/partial-ssrf` on HTTP client requests
+- CodeQL alert #43, #44, #45 `py/empty-except` on try/except blocks
+
+## The Approach
+1. In logging wrappers (`secure_logging.py`):
+   ```python
+   clean_msg = str(masked_msg).replace("\r\n", " ").replace("\r", " ").replace("\n", " ")
+   clean_args = tuple(
+       str(self._mask_sensitive_data(a)).replace("\r\n", " ").replace("\r", " ").replace("\n", " ")
+       if isinstance(a, str) else a
+       for a in args
+   )
+   self.logger.log(level, clean_msg, *clean_args, **kwargs)
+   ```
+2. In HTTP utilities (`http_requests_utils.py`, `retry_utils.py`):
+   ```python
+   parsed = urlparse(url.strip())
+   if parsed.scheme not in ("http", "https") or not parsed.netloc:
+       raise ValueError(f"Invalid URL target: {url}")
+   path = parsed.path or "/"
+   query = f"?{parsed.query}" if parsed.query else ""
+   sanitized_url = f"{parsed.scheme}://{parsed.netloc}{path}{query}"
+   ```

ffbb_data_client-2.4.7/.omc/skills/pypi-immutable-release-workflow.md

@@ -0,0 +1,31 @@
+---
+name: pypi-immutable-release-workflow
+description: Workflow procedure for PyPI package releases and post-release patch handling
+triggers:
+  - "pypi release"
+  - "publish to pypi"
+  - "HTTP 400 File already exists"
+  - "release tag failed"
+---
+
+# PyPI Immutable Release Workflow
+
+## The Insight
+The Python Package Index (PyPI) enforces strict immutability: once any artifact (`.whl` or `.tar.gz`) is uploaded for version `X.Y.Z`, PyPI permanently rejects any subsequent upload for the same version with HTTP 400 `File already exists`.
+Never attempt to force-push an existing git tag or re-run a publish workflow on the same tag after applying a fix.
+
+## Why This Matters
+If a CI check or build step fails after a partial publish or if a linter/security issue is discovered post-release, pushing to the existing tag will fail the GitHub Actions publish job.
+
+## Recognition Pattern
+- `Publish to PyPI` workflow fails with `HTTPError: 400 Bad Request from https://upload.pypi.org/legacy/`
+- "File already exists" error during twine/flit/uv publish
+
+## The Approach
+1. **Never reuse or overwrite an existing release tag**.
+2. When applying any code, linter, typings, or security fix post-release:
+   - Increment the patch version in `CHANGELOG.md` and `RELEASE_NOTES.md` (`2.4.0` -> `2.4.1` -> `...`).
+   - Commit changes to `master` / `main`.
+   - Create a brand new git annotated tag: `git tag -a vX.Y.Z+1 -m "Release vX.Y.Z+1"`.
+   - Push both the branch and the new tag: `git push origin master && git push origin vX.Y.Z+1`.
+   - Monitor the GitHub Actions `Publish to PyPI` and `tests` workflows until completion.

ffbb_data_client-2.4.7/.omc/skills/terminal-output-hygiene-expertise.md

@@ -0,0 +1,33 @@
+---
+name: terminal-output-hygiene-expertise
+description: Principle of zero tolerance for terminal warnings, deprecation notices, and proactive tool maintenance
+triggers:
+  - "warning:"
+  - "new version available"
+  - "DeprecationWarning"
+  - "terminal output hygiene"
+---
+
+# Terminal Output Hygiene & Zero Warning Policy
+
+## The Insight
+An `exit code 0` does not mean an execution is clean. Compilers, linters, test runners, and package managers often emit warnings, deprecation notices, or update recommendations alongside a successful exit code.
+Treating warnings as noise leads to creeping technical debt, stale dependencies, and unnoticed regressions.
+
+## Why This Matters
+- Deprecation warnings often turn into breaking errors in subsequent minor releases.
+- Outdated tools (like `pyright`, `eslint`, `vitest`) may produce false positives or miss newly supported language features.
+- Cluttered terminal output hides real, critical warnings.
+
+## Recognition Pattern
+- Console output contains strings like `WARNING: there is a new version available`
+- Pytest output shows unhandled `DeprecationWarning` or `StarletteDeprecationWarning`
+- Jest/Vitest output shows module resolution warnings (e.g. Haste duplicate package names)
+
+## The Approach
+1. **Active Log Inspection**: Always read the complete `stdout` and `stderr` of every executed command, not just the exit status.
+2. **Immediate Remediation**:
+   - For outdated tooling warnings (e.g., `pyright`): Run `uv pip install -U <package>` or `npm update <package>` immediately.
+   - For deprecation warnings: Add appropriate pytest filters (`filterwarnings`) or update the calling code to modern APIs (e.g. FastAPI `lifespan`).
+   - For Jest Haste collisions: Add `modulePathIgnorePatterns: ['<rootDir>/.next/', '<rootDir>/.agent/']` in `jest.config.ts`.
+3. **Clean Baseline**: Maintain a clean terminal baseline where routine check commands run with 0 errors and 0 warnings.

{ffbb_data_client-2.4.6 → ffbb_data_client-2.4.7}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: ffbb-data-client
-Version: 2.4.6
+Version: 2.4.7
 Summary: API FFBB — SDK Python moderne & asynchrone pour les donnees officielles de la Federation Francaise de BasketBall (clubs, classements, calendriers, lives, Meilisearch). Alternative moderne a ffbb-api-client.
 Home-page: https://github.com/nickdesi/ffbb-data-client
 Author: nickdesi
@@ -83,6 +83,10 @@ Dynamic: license-file
 
 </div>
 
+<!-- DISCOVERY_METRICS:START -->
+> 🔄 **Cartographie API synchronisée** : `162` collections Directus OpenAPI cartographiées, `13` index Meilisearch surveillés.
+<!-- DISCOVERY_METRICS:END -->
+
 ---
 
 ## 📌 À propos

{ffbb_data_client-2.4.6 → ffbb_data_client-2.4.7}/README.md

@@ -27,6 +27,10 @@
 
 </div>
 
+<!-- DISCOVERY_METRICS:START -->
+> 🔄 **Cartographie API synchronisée** : `162` collections Directus OpenAPI cartographiées, `13` index Meilisearch surveillés.
+<!-- DISCOVERY_METRICS:END -->
+
 ---
 
 ## 📌 À propos

ffbb_data_client-2.4.7/data/api_update_summary.md

@@ -0,0 +1,28 @@
+# FFBB API update summary
+
+- Timestamp: `2026-09-11T09:44:26.132076+00:00`
+- API base URL: `https://api.ffbb.app/`
+- Meilisearch base URL: `https://meilisearch-prod.ffbb.app/`
+- OpenAPI version: `5e5f138eae2de296226e37d6c0ac5a9ee7a96f2e`
+- OpenAPI SHA256: `6769caa03ee9be1fe2722bab2fd734d66f4efa436caa1e0031d4254120bcc28c`
+
+## Directus collections
+- Total: `162`
+- Added: None
+- Removed: None
+
+## OpenAPI paths (items, assets, files)
+- Total: `327`
+- Added: None
+- Removed: None
+
+## Meilisearch indexes
+- Available total: `13`
+- Added: None
+- Removed: None
+
+## Meilisearch index attributes drift
+- **ffbbserver_organismes** :
+  - Added attributes: `code_emploi`
+
+Generated by `python scripts/discover_endpoints.py`.

{ffbb_data_client-2.4.6 → ffbb_data_client-2.4.7}/data/endpoint_discovery.json

@@ -329,9 +329,9 @@
       "items/youtube_videos_youtube_tags"
     ],
     "metadata": {
-      "openapi_version": "e5f76d83e876077e80ab344bbb4fc03606f63ca4",
+      "openapi_version": "5e5f138eae2de296226e37d6c0ac5a9ee7a96f2e",
       "source": "https://api.ffbb.app/server/specs/oas",
-      "timestamp": "2026-08-10T19:59:19.080946+00:00"
+      "timestamp": "2026-09-11T09:44:26.132076+00:00"
     },
     "paths": {
       "items/configuration": [
@@ -1353,42 +1353,15 @@
   "drift": {
     "directus_openapi": {
       "added_schemas": [],
-      "modified_schemas": {
-        "ItemsFfbbnationalPratiques": {
-          "added_properties": [
-            "code_structure",
-            "date_validation_ffbb"
-          ],
-          "modified_properties": {},
-          "removed_properties": []
-        }
-      },
-      "removed_schemas": [
-        "ItemsFfbbsiteFormsEntries",
-        "ItemsFfbbsiteFormsEntriesDirectusFiles"
-      ]
+      "modified_schemas": {},
+      "removed_schemas": []
     },
     "meilisearch_indexes": {
-      "ffbbnational_pratiques": {
+      "ffbbserver_organismes": {
         "added": [
-          "code_structure",
-          "date_validation_ffbb",
-          "date_validation_ffbb_timestamp"
+          "code_emploi"
         ],
         "removed": []
-      },
-      "ffbbserver_rencontres": {
-        "added": [],
-        "removed": [
-          "competition_orgine",
-          "competition_origine",
-          "horaire",
-          "logo",
-          "nomExtended",
-          "pro",
-          "sexe",
-          "typeCompetitionGenerique"
-        ]
       }
     }
   },
@@ -1434,7 +1407,7 @@
       },
       {
         "available": true,
-        "estimatedTotalHits": 253,
+        "estimatedTotalHits": 429,
         "indexUid": "ffbbnational_pratiques",
         "sampleKeys": [
           "_geo",
@@ -1491,7 +1464,7 @@
       },
       {
         "available": true,
-        "estimatedTotalHits": 4104,
+        "estimatedTotalHits": 4228,
         "indexUid": "ffbbnational_rss",
         "sampleKeys": [
           "categories",
@@ -1521,7 +1494,7 @@
       },
       {
         "available": true,
-        "estimatedTotalHits": 571,
+        "estimatedTotalHits": 1680,
         "indexUid": "ffbbserver_competitions",
         "sampleKeys": [
           "age",
@@ -1601,7 +1574,7 @@
       },
       {
         "available": true,
-        "estimatedTotalHits": 144,
+        "estimatedTotalHits": 146,
         "indexUid": "ffbbserver_formations",
         "sampleKeys": [
           "certification",
@@ -1636,7 +1609,7 @@
       },
       {
         "available": true,
-        "estimatedTotalHits": 4642,
+        "estimatedTotalHits": 4714,
         "indexUid": "ffbbserver_organismes",
         "sampleKeys": [
           "_geo",
@@ -1644,6 +1617,7 @@
           "adresseClubPro",
           "cartographie",
           "code",
+          "code_emploi",
           "commune",
           "communeClubPro",
           "dateAffiliation",
@@ -1671,7 +1645,7 @@
       },
       {
         "available": true,
-        "estimatedTotalHits": 96,
+        "estimatedTotalHits": 5000,
         "indexUid": "ffbbserver_rencontres",
         "sampleKeys": [
           "_geo",
@@ -1763,7 +1737,7 @@
       },
       {
         "available": true,
-        "estimatedTotalHits": 19,
+        "estimatedTotalHits": 7,
         "indexUid": "ffbbserver_tournois",
         "sampleKeys": [
           "_geo",
@@ -1802,7 +1776,7 @@
       },
       {
         "available": true,
-        "estimatedTotalHits": 6106,
+        "estimatedTotalHits": 6229,
         "indexUid": "ffbbsite_news",
         "sampleKeys": [
           "author",
@@ -1831,7 +1805,7 @@
       },
       {
         "available": true,
-        "estimatedTotalHits": 1842,
+        "estimatedTotalHits": 1858,
         "indexUid": "youtube_videos",
         "sampleKeys": [
           "channelId",
@@ -1864,7 +1838,7 @@
     ],
     "metadata": {
       "source": "https://meilisearch-prod.ffbb.app/multi-search",
-      "timestamp": "2026-08-10T19:59:19.080946+00:00"
+      "timestamp": "2026-09-11T09:44:26.132076+00:00"
     },
     "unavailable_indexes": [
       {
@@ -1900,9 +1874,9 @@
   "metadata": {
     "api_base_url": "https://api.ffbb.app/",
     "meilisearch_base_url": "https://meilisearch-prod.ffbb.app/",
-    "openapi_sha256": "d42e75cfb86a35bd5e17f12cc75785563d25a33ac9885ffa1ac0996c0140ff31",
-    "openapi_snapshot_sha256": "8a7b1fa7c2e9b499a050bcf7a7d9282c3daa7805f2d43ab61d5dc14d1686ed4d",
-    "openapi_version": "e5f76d83e876077e80ab344bbb4fc03606f63ca4",
-    "timestamp": "2026-08-10T19:59:19.080946+00:00"
+    "openapi_sha256": "6769caa03ee9be1fe2722bab2fd734d66f4efa436caa1e0031d4254120bcc28c",
+    "openapi_snapshot_sha256": "93e278fcfb74b4fceb6eef145020bef5bb2b0c0ea6fb3826d3d6d6c5b4b2ac16",
+    "openapi_version": "5e5f138eae2de296226e37d6c0ac5a9ee7a96f2e",
+    "timestamp": "2026-09-11T09:44:26.132076+00:00"
   }
 }

{ffbb_data_client-2.4.6/src/ffbb_data_client → ffbb_data_client-2.4.7}/data/indexes.json

@@ -40,7 +40,7 @@
     },
     {
       "available": true,
-      "estimatedTotalHits": 253,
+      "estimatedTotalHits": 429,
       "indexUid": "ffbbnational_pratiques",
       "sampleKeys": [
         "_geo",
@@ -97,7 +97,7 @@
     },
     {
       "available": true,
-      "estimatedTotalHits": 4104,
+      "estimatedTotalHits": 4228,
       "indexUid": "ffbbnational_rss",
       "sampleKeys": [
         "categories",
@@ -127,7 +127,7 @@
     },
     {
       "available": true,
-      "estimatedTotalHits": 571,
+      "estimatedTotalHits": 1680,
       "indexUid": "ffbbserver_competitions",
       "sampleKeys": [
         "age",
@@ -207,7 +207,7 @@
     },
     {
       "available": true,
-      "estimatedTotalHits": 144,
+      "estimatedTotalHits": 146,
       "indexUid": "ffbbserver_formations",
       "sampleKeys": [
         "certification",
@@ -242,7 +242,7 @@
     },
     {
       "available": true,
-      "estimatedTotalHits": 4642,
+      "estimatedTotalHits": 4714,
       "indexUid": "ffbbserver_organismes",
       "sampleKeys": [
         "_geo",
@@ -250,6 +250,7 @@
         "adresseClubPro",
         "cartographie",
         "code",
+        "code_emploi",
         "commune",
         "communeClubPro",
         "dateAffiliation",
@@ -277,7 +278,7 @@
     },
     {
       "available": true,
-      "estimatedTotalHits": 96,
+      "estimatedTotalHits": 5000,
       "indexUid": "ffbbserver_rencontres",
       "sampleKeys": [
         "_geo",
@@ -369,7 +370,7 @@
     },
     {
       "available": true,
-      "estimatedTotalHits": 19,
+      "estimatedTotalHits": 7,
       "indexUid": "ffbbserver_tournois",
       "sampleKeys": [
         "_geo",
@@ -408,7 +409,7 @@
     },
     {
       "available": true,
-      "estimatedTotalHits": 6106,
+      "estimatedTotalHits": 6229,
       "indexUid": "ffbbsite_news",
       "sampleKeys": [
         "author",
@@ -437,7 +438,7 @@
     },
     {
       "available": true,
-      "estimatedTotalHits": 1842,
+      "estimatedTotalHits": 1858,
       "indexUid": "youtube_videos",
       "sampleKeys": [
         "channelId",
@@ -470,7 +471,7 @@
   ],
   "metadata": {
     "source": "https://meilisearch-prod.ffbb.app/multi-search",
-    "timestamp": "2026-08-10T19:59:19.080946+00:00"
+    "timestamp": "2026-09-11T09:44:26.132076+00:00"
   },
   "unavailable_indexes": [
     {

{ffbb_data_client-2.4.6 → ffbb_data_client-2.4.7}/data/openapi_full.json

@@ -12181,7 +12181,7 @@
   "info": {
     "description": "This is a dynamically generated API specification for all endpoints existing on the current project.",
     "title": "Dynamic API Specification",
-    "version": "e5f76d83e876077e80ab344bbb4fc03606f63ca4"
+    "version": "5e5f138eae2de296226e37d6c0ac5a9ee7a96f2e"
   },
   "openapi": "3.0.1",
   "paths": {
@@ -36953,6 +36953,10 @@
       "name": "ItemsFfbbserverOfficielsRencontres",
       "x-collection": "ffbbserver_officiels_rencontres"
     },
+    {
+      "name": "ItemsFfbbserverOrganismes",
+      "x-collection": "ffbbserver_organismes"
+    },
     {
       "name": "ItemsFfbbserverOfficiels",
       "x-collection": "ffbbserver_officiels"
@@ -36985,10 +36989,6 @@
       "name": "ItemsFfbbserverOrganismesFfbbserverOffresPratiques",
       "x-collection": "ffbbserver_organismes_ffbbserver_offres_pratiques"
     },
-    {
-      "name": "ItemsFfbbserverOrganismes",
-      "x-collection": "ffbbserver_organismes"
-    },
     {
       "name": "ItemsFfbbserverTournois",
       "x-collection": "ffbbserver_tournois"