sarj-python-lint 0.81.5__tar.gz → 0.81.7__tar.gz

{sarj_python_lint-0.81.5 → sarj_python_lint-0.81.7}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.5
 Name: sarj-python-lint
-Version: 0.81.5
+Version: 0.81.7
 Summary: Custom Python lint rules — AST-based, pre-commit-friendly, hypermodern defaults
 Project-URL: Homepage, https://code-standards.sarj.ai/rules/python/
 Project-URL: Documentation, https://code-standards.sarj.ai/rules/python/

{sarj_python_lint-0.81.5 → sarj_python_lint-0.81.7}/pyproject.toml

@@ -1,6 +1,6 @@
 [project]
 name = "sarj-python-lint"
-version = "0.81.5"
+version = "0.81.7"
 description = "Custom Python lint rules — AST-based, pre-commit-friendly, hypermodern defaults"
 readme = "README.md"
 authors = [{ name = "sarj-ai" }]

{sarj_python_lint-0.81.5 → sarj_python_lint-0.81.7}/src/sarj_python_lint/rules/_project_index.py

@@ -193,6 +193,37 @@ class ProjectIndexSet:
     def source_unit(self, module: str) -> SourceUnit | None:
         return self._by_module.get(module)
 
+    def constructor_consumers(self, unit: SourceUnit, name: str) -> frozenset[tuple[Path, str]]:
+        if unit.module is None:
+            return frozenset()
+        target = SymbolRef(unit.module, name)
+        consumers: set[tuple[Path, str]] = set()
+        for candidate in self._units.values():
+            if candidate.tree is None:
+                continue
+            for owner in candidate.tree.body:
+                if not isinstance(owner, ast.ClassDef):
+                    continue
+                initializer = next(
+                    (
+                        statement
+                        for statement in owner.body
+                        if isinstance(statement, (ast.FunctionDef, ast.AsyncFunctionDef))
+                        and statement.name == "__init__"
+                    ),
+                    None,
+                )
+                if initializer is None:
+                    continue
+                parameters = (*initializer.args.posonlyargs, *initializer.args.args, *initializer.args.kwonlyargs)
+                if any(
+                    _annotation_contains_symbol(candidate, parameter.annotation, target)
+                    for parameter in parameters
+                    if parameter.arg != "self"
+                ):
+                    consumers.add((candidate.path, owner.name))
+        return frozenset(consumers)
+
     def class_inherits_from(self, unit: SourceUnit, name: str, qualified_bases: frozenset[str]) -> bool:
         if unit.module is None:
             return False
@@ -328,7 +359,7 @@ def _imports(module: str | None, tree: ast.Module | None, *, is_package: bool) -
         return {}
     result: dict[str, SymbolRef] = {}
     package = module if is_package else module.rpartition(".")[0]
-    for node in tree.body:
+    for node in _module_import_statements(tree):
         if isinstance(node, ast.ImportFrom) and not any(alias.name == "*" for alias in node.names):
             target = _relative_module(package, node.level, node.module)
             if target is None:
@@ -343,6 +374,37 @@ def _imports(module: str | None, tree: ast.Module | None, *, is_package: bool) -
     return result
 
 
+def _module_import_statements(tree: ast.Module) -> tuple[ast.stmt, ...]:
+    statements: list[ast.stmt] = list(tree.body)
+    for statement in tree.body:
+        if not isinstance(statement, ast.If) or not _is_type_checking_guard(statement.test):
+            continue
+        statements.extend(child for child in statement.body if isinstance(child, (ast.Import, ast.ImportFrom)))
+    return tuple(statements)
+
+
+def _is_type_checking_guard(node: ast.expr) -> bool:
+    return (isinstance(node, ast.Name) and node.id == "TYPE_CHECKING") or (
+        isinstance(node, ast.Attribute)
+        and isinstance(node.value, ast.Name)
+        and node.value.id in {"typing", "typing_extensions"}
+        and node.attr == "TYPE_CHECKING"
+    )
+
+
+def _annotation_contains_symbol(unit: SourceUnit, annotation: ast.expr | None, target: SymbolRef) -> bool:
+    if annotation is None:
+        return False
+    if isinstance(annotation, ast.Constant) and isinstance(annotation.value, str):
+        with suppress(SyntaxError):
+            annotation = ast.parse(annotation.value, mode="eval").body
+    return any(
+        _resolve(unit, candidate) == target
+        for candidate in ast.walk(annotation)
+        if isinstance(candidate, (ast.Name, ast.Attribute))
+    )
+
+
 def _relative_module(package: str, level: int, module: str | None) -> str | None:
     if level == 0:
         return module

{sarj_python_lint-0.81.5 → sarj_python_lint-0.81.7}/src/sarj_python_lint/rules/_registry.py

@@ -65,6 +65,7 @@ from sarj_python_lint.rules.no_repeated_test_body import NoRepeatedTestBody
 from sarj_python_lint.rules.no_restated_comment import NoRestatedComment
 from sarj_python_lint.rules.no_secret_in_log import NoSecretInLog
 from sarj_python_lint.rules.no_select_star import NoSelectStar
+from sarj_python_lint.rules.no_service_behavior_in_settings import NoServiceBehaviorInSettings
 from sarj_python_lint.rules.no_string_concat_in_loop import NoStringConcatInLoop
 from sarj_python_lint.rules.no_tautological_expect import NoTautologicalExpect
 from sarj_python_lint.rules.no_typed_doc_sections import NoTypedDocSections
@@ -186,6 +187,7 @@ REGISTRY: Mapping[str, type[Rule]] = MappingProxyType(
         NoRawConnectionInTests.id: NoRawConnectionInTests,
         NoAnalyticalAggregationInPostgresStore.id: NoAnalyticalAggregationInPostgresStore,
         NoSelectStar.id: NoSelectStar,
+        NoServiceBehaviorInSettings.id: NoServiceBehaviorInSettings,
         NoGenericSingleExportModule.id: NoGenericSingleExportModule,
         Stepdown.id: Stepdown,
         NoRepeatedStringLiteral.id: NoRepeatedStringLiteral,

{sarj_python_lint-0.81.5 → sarj_python_lint-0.81.7}/src/sarj_python_lint/rules/complex_postgres_query_requires_architecture_review.py

@@ -200,7 +200,7 @@ def _query_argument(call: ast.Call) -> ast.expr | None:
     tokens = frozenset(part for part in receiver.split("_") if part)
     if (
         receiver not in _QUERY_RECEIVER_TOKENS
-        and not tokens.intersection(_QUERY_RECEIVER_TOKENS)
+        and tokens.isdisjoint(_QUERY_RECEIVER_TOKENS)
         and not any(receiver.endswith(suffix) for suffix in ("conn", "cur", "cursor", "session"))
     ):
         return None

{sarj_python_lint-0.81.5 → sarj_python_lint-0.81.7}/src/sarj_python_lint/rules/no_raw_source_text_test_oracle.py

@@ -761,7 +761,7 @@ def _representation_fixture_path(node: ast.AST) -> bool:
         if not isinstance(child, ast.Constant) or not isinstance(child.value, str):
             continue
         parts = {part.lower() for part in child.value.replace("\\", "/").split("/")}
-        if parts & _REPRESENTATION_DIRS:
+        if not parts.isdisjoint(_REPRESENTATION_DIRS):
             return True
     return False
 

sarj_python_lint-0.81.7/src/sarj_python_lint/rules/no_service_behavior_in_settings.py

@@ -0,0 +1,238 @@
+from __future__ import annotations
+
+import ast
+from pathlib import PurePosixPath
+import re
+from typing import TYPE_CHECKING, ClassVar, final, override
+
+from sarj_python_lint.rule_base import (
+    AutofixPolicy,
+    Diagnostic,
+    ExampleFile,
+    ExampleOutcome,
+    Rule,
+    RuleCategory,
+    RuleDocumentation,
+    RuleExample,
+    Severity,
+    is_suppressed,
+    parse_or_none,
+)
+from sarj_python_lint.rules._paths import is_generated, is_test_path, is_test_support_path
+
+
+if TYPE_CHECKING:
+    from pathlib import Path
+
+
+_DATA_NAME_RE = re.compile(r"(?:Settings|Config|Configuration|Options)$")
+_DATA_CLASS_RE = re.compile(r"\bclass\s+\w+(?:Settings|Config|Configuration|Options)\b")
+_COLLABORATOR_RE = re.compile(
+    r"(?:Client|Service|Store|Repository|Repo|Gateway|Provider|Pool|Publisher|Queue|Scheduler)$"
+)
+_NON_BEHAVIORAL_DECORATORS = frozenset(
+    {
+        "cached_property",
+        "classmethod",
+        "computed_field",
+        "field_serializer",
+        "field_validator",
+        "model_serializer",
+        "model_validator",
+        "property",
+        "root_validator",
+        "staticmethod",
+        "validator",
+    }
+)
+
+
+@final
+class NoServiceBehaviorInSettings(Rule):
+    id: str = "no-service-behavior-in-settings"
+    code: str = "SARJ441"
+    documentation: ClassVar[RuleDocumentation | None] = RuleDocumentation(
+        summary="Settings and configuration types should not orchestrate injected collaborators.",
+        rationale=(
+            "A class named as settings or configuration promises passive data. Calling injected stores, clients, "
+            "or services from that object hides orchestration behind a data boundary and couples configuration "
+            "construction to runtime behavior."
+        ),
+        remediation=(
+            "Move collaborator calls into a service, coordinator, or compiler with an honest behavioral name; keep "
+            "the settings/configuration object as a TypedDict, Pydantic model, attrs class, or dataclass."
+        ),
+        category=RuleCategory.ARCHITECTURE,
+        autofix=AutofixPolicy.NONE,
+        limitations=(
+            "Only direct module classes named *Settings, *Config, *Configuration, or *Options are checked.",
+            "A finding requires a typed collaborator field and an ordinary public method that calls that field; pure computations, properties, validators, serializers, factories, generated files, and tests are excluded.",
+            "The rule does not require every data object to use a particular record library and does not infer behavior from a filename alone.",
+        ),
+        examples=(
+            RuleExample(
+                example_id="settings-orchestrates-store",
+                title="A settings-named class calls injected persistence",
+                outcome=ExampleOutcome.MATCH,
+                files=(
+                    ExampleFile.python(
+                        "app/batch_settings.py",
+                        "class BatchSettings:\n"
+                        "    def __init__(self, store: ScheduleStore) -> None:\n"
+                        "        self._store = store\n\n"
+                        "    async def repoint(self, batch_id: str) -> int:\n"
+                        "        return await self._store.repoint(batch_id)\n",
+                    ),
+                ),
+                focus_path=PurePosixPath("app/batch_settings.py"),
+                expected_count=1,
+                public=True,
+            ),
+            RuleExample(
+                example_id="settings-is-data-only",
+                title="A settings type remains a passive record",
+                outcome=ExampleOutcome.NO_MATCH,
+                files=(
+                    ExampleFile.python(
+                        "app/batch_settings.py",
+                        "from dataclasses import dataclass\n\n"
+                        "@dataclass(frozen=True, slots=True)\n"
+                        "class BatchSettings:\n"
+                        "    retry_limit: int\n",
+                    ),
+                ),
+                focus_path=PurePosixPath("app/batch_settings.py"),
+                expected_count=0,
+                public=True,
+            ),
+        ),
+    )
+    description: str = documentation.summary
+
+    @override
+    def check(self, path: Path, source: str) -> list[Diagnostic]:
+        if (
+            is_test_path(path)
+            or is_test_support_path(path)
+            or is_generated(path, source)
+            or _DATA_CLASS_RE.search(source) is None
+        ):
+            return []
+        tree = parse_or_none(path, source)
+        if tree is None:
+            return []
+        source_lines = source.splitlines()
+        diagnostics: list[Diagnostic] = []
+        for node in tree.body:
+            if not isinstance(node, ast.ClassDef) or _DATA_NAME_RE.search(node.name) is None:
+                continue
+            collaborator_fields = _collaborator_fields(node)
+            behavioral_methods = [
+                method.name
+                for method in _methods(node)
+                if _is_behavioral_method(method) and _calls_collaborator(method, collaborator_fields)
+            ]
+            if not behavioral_methods or is_suppressed(source_lines, node.lineno, self.code):
+                continue
+            methods = ", ".join(f"`{name}`" for name in behavioral_methods)
+            diagnostics.append(
+                Diagnostic(
+                    path=path,
+                    line=node.lineno,
+                    col=node.col_offset + 1,
+                    code=self.code,
+                    severity=Severity.WARNING,
+                    message=(
+                        f"`{node.name}` is named as passive data but {methods} calls an injected collaborator — "
+                        "move orchestration to a service/coordinator and keep settings or configuration data-only."
+                    ),
+                )
+            )
+        return diagnostics
+
+
+def _methods(node: ast.ClassDef) -> list[ast.FunctionDef | ast.AsyncFunctionDef]:
+    return [statement for statement in node.body if isinstance(statement, (ast.FunctionDef, ast.AsyncFunctionDef))]
+
+
+def _collaborator_fields(node: ast.ClassDef) -> frozenset[str]:
+    fields = {
+        statement.target.id
+        for statement in node.body
+        if isinstance(statement, ast.AnnAssign)
+        and isinstance(statement.target, ast.Name)
+        and _is_collaborator_annotation(statement.annotation)
+    }
+    init = next((method for method in _methods(node) if method.name == "__init__"), None)
+    if init is None:
+        return frozenset(fields)
+    collaborator_parameters = {
+        parameter.arg
+        for parameter in (*init.args.posonlyargs, *init.args.args, *init.args.kwonlyargs)
+        if parameter.arg != "self" and _is_collaborator_annotation(parameter.annotation)
+    }
+    for statement in init.body:
+        if not isinstance(statement, (ast.Assign, ast.AnnAssign)):
+            continue
+        value = statement.value
+        if not isinstance(value, ast.Name) or value.id not in collaborator_parameters:
+            continue
+        targets = statement.targets if isinstance(statement, ast.Assign) else [statement.target]
+        fields.update(
+            target.attr
+            for target in targets
+            if isinstance(target, ast.Attribute) and isinstance(target.value, ast.Name) and target.value.id == "self"
+        )
+    return frozenset(fields)
+
+
+def _is_collaborator_annotation(annotation: ast.expr | None) -> bool:
+    if annotation is None:
+        return False
+    return any(
+        _COLLABORATOR_RE.search(_dotted_tail(candidate) or "") is not None
+        for candidate in ast.walk(annotation)
+        if isinstance(candidate, (ast.Name, ast.Attribute))
+    )
+
+
+def _is_behavioral_method(method: ast.FunctionDef | ast.AsyncFunctionDef) -> bool:
+    if method.name.startswith("_"):
+        return False
+    return not any(
+        (_dotted_tail(decorator.func if isinstance(decorator, ast.Call) else decorator) or "")
+        in _NON_BEHAVIORAL_DECORATORS
+        for decorator in method.decorator_list
+    )
+
+
+def _calls_collaborator(method: ast.FunctionDef | ast.AsyncFunctionDef, fields: frozenset[str]) -> bool:
+    return any(
+        (field := _self_field(call.func)) is not None and field in fields
+        for call in ast.walk(method)
+        if isinstance(call, ast.Call)
+    )
+
+
+def _self_field(node: ast.expr) -> str | None:
+    current = node
+    while isinstance(current, ast.Attribute):
+        if isinstance(current.value, ast.Name) and current.value.id == "self":
+            return current.attr
+        current = current.value
+    return None
+
+
+def _dotted_tail(node: ast.expr) -> str | None:
+    current = node
+    if isinstance(current, ast.Call):
+        current = current.func
+    if isinstance(current, ast.Subscript):
+        current = current.value
+    match current:
+        case ast.Name():
+            return current.id
+        case ast.Attribute():
+            return current.attr
+        case _:
+            return None

{sarj_python_lint-0.81.5 → sarj_python_lint-0.81.7}/src/sarj_python_lint/rules/no_typed_doc_sections.py

@@ -121,7 +121,7 @@ def _public_contract_docstring_lines(path: Path, source: str) -> frozenset[int]:
         protocol_method = isinstance(owner, ast.ClassDef) and any(
             _terminal_name(base) in _PUBLIC_CONTRACT_BASES for base in owner.bases
         )
-        if decorators & _PUBLIC_CONTRACT_DECORATORS or protocol_method:
+        if not decorators.isdisjoint(_PUBLIC_CONTRACT_DECORATORS) or protocol_method:
             excluded.add(first.lineno)
     return frozenset(excluded)
 

{sarj_python_lint-0.81.5 → sarj_python_lint-0.81.7}/src/sarj_python_lint/rules/no_unnecessary_docstring.py

@@ -647,7 +647,7 @@ def _schema_docstring_consumers(tree: ast.Module, imports: dict[str, str]) -> fr
                 _resolve_imported_name(base.value if isinstance(base, ast.Subscript) else base, imports)
                 for base in class_node.bases
             }
-            if base_names & (_KNOWN_SCHEMA_BASES | consumed):
+            if not base_names.isdisjoint(_KNOWN_SCHEMA_BASES | consumed):
                 consumed.add(name)
                 changed = True
     return frozenset(id(classes[name]) for name in consumed)

{sarj_python_lint-0.81.5 → sarj_python_lint-0.81.7}/src/sarj_python_lint/rules/prefer_constant_time_secret_compare.py

@@ -299,15 +299,15 @@ def _name_role(identifier: str) -> _Role:
 def _is_authenticator_name(identifier: str) -> bool:
     tokens = identifier_tokens(identifier)
     token_set = set(tokens)
-    is_auth_header = "header" in token_set and bool(token_set & {"auth", "authorization"})
+    is_auth_header = "header" in token_set and not token_set.isdisjoint({"auth", "authorization"})
     if not is_secret_name(identifier) and not is_auth_header:
         return False
     if (token_set == {"token"} and not identifier.isupper()) or not tokens:
         return False
-    if tokens[-1] in _DESCRIPTOR_WORDS or token_set & _CATEGORY_WORDS:
+    if tokens[-1] in _DESCRIPTOR_WORDS or not token_set.isdisjoint(_CATEGORY_WORDS):
         return False
-    return bool(
-        token_set & _AUTH_WORDS
+    return (
+        not token_set.isdisjoint(_AUTH_WORDS)
         or is_auth_header
         or any(left == "api" and right == "key" for left, right in pairwise(tokens))
     )