simpleaudit-studio 0.2.6__tar.gz → 0.2.7__tar.gz

{simpleaudit_studio-0.2.6 → simpleaudit_studio-0.2.7}/.gitignore

@@ -24,6 +24,7 @@ simpleaudit-dependency.yaml
 .idea/
 *.swp
 .DS_Store
+copilot-instructions.md
 
 # Test/coverage
 .coverage
@@ -37,5 +38,8 @@ docker-data/
 *.log
 logs/
 
+# Runtime artifacts
+app.pid
+
 # Data artifacts (prototype)
 data/

{simpleaudit_studio-0.2.6 → simpleaudit_studio-0.2.7}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.5
 Name: simpleaudit-studio
-Version: 0.2.6
+Version: 0.2.7
 Summary: Production AI model audit platform — one-liner demo mode via uvx
 License: MIT
 License-File: LICENSE
@@ -80,6 +80,39 @@ The pre-seeded connections point at a built-in mock server. To run real audits,
 
 Set the API key in the connection form (leave blank for local servers that don't require auth), then launch an audit from the Scenario Library.
 
+## 🛠️ Local Development
+
+For contributors working on the codebase, use [uv](https://docs.astral.sh/uv/) — no manual venv steps, no Makefile. Two verbs cover everything:
+
+- **`uv sync`** — create/update `.venv` from `pyproject.toml` + `uv.lock`
+- **`uv run <cmd>`** — run any command inside `.venv` (auto-syncs first if the lockfile changed)
+
+### Setup (one time)
+
+```bash
+git clone https://github.com/SushantGautam/SimpleAuditStudio
+cd SimpleAuditStudio
+cp .env.local.example .env          # minimal local config (SQLite + mock models)
+
+uv sync --extra dev --extra postgres   # create .venv + install all deps
+uv run manage.py setup_local           # migrate + create admin (studio/admin123) + seed data
+```
+
+`setup_local` chains the three idempotent first-run steps (migrate → bootstrap admin → seed scenario packs & model connections) into one command. Re-run it any time — it skips what already exists.
+
+### Daily work
+
+```bash
+uv run manage.py dev_server --embedded   # easiest: web UI + API + audit worker, zero-Docker → http://localhost:8000
+```
+
+Other options:
+```bash
+uv run manage.py runserver               # web UI + API only (no worker)
+uv run manage.py dev_server              # web UI + worker, uses .env (edit POSTGRES_*/HATCHET_* to point at your infra)
+SIMPLEAUDIT_LOCAL_SQLITE=1 uv run manage.py test infra   # tests
+```
+
 ## 🐳 Self-Hosting
 
 For teams or multi-user setups, use Docker Compose:

{simpleaudit_studio-0.2.6 → simpleaudit_studio-0.2.7}/README.md

@@ -50,6 +50,39 @@ The pre-seeded connections point at a built-in mock server. To run real audits,
 
 Set the API key in the connection form (leave blank for local servers that don't require auth), then launch an audit from the Scenario Library.
 
+## 🛠️ Local Development
+
+For contributors working on the codebase, use [uv](https://docs.astral.sh/uv/) — no manual venv steps, no Makefile. Two verbs cover everything:
+
+- **`uv sync`** — create/update `.venv` from `pyproject.toml` + `uv.lock`
+- **`uv run <cmd>`** — run any command inside `.venv` (auto-syncs first if the lockfile changed)
+
+### Setup (one time)
+
+```bash
+git clone https://github.com/SushantGautam/SimpleAuditStudio
+cd SimpleAuditStudio
+cp .env.local.example .env          # minimal local config (SQLite + mock models)
+
+uv sync --extra dev --extra postgres   # create .venv + install all deps
+uv run manage.py setup_local           # migrate + create admin (studio/admin123) + seed data
+```
+
+`setup_local` chains the three idempotent first-run steps (migrate → bootstrap admin → seed scenario packs & model connections) into one command. Re-run it any time — it skips what already exists.
+
+### Daily work
+
+```bash
+uv run manage.py dev_server --embedded   # easiest: web UI + API + audit worker, zero-Docker → http://localhost:8000
+```
+
+Other options:
+```bash
+uv run manage.py runserver               # web UI + API only (no worker)
+uv run manage.py dev_server              # web UI + worker, uses .env (edit POSTGRES_*/HATCHET_* to point at your infra)
+SIMPLEAUDIT_LOCAL_SQLITE=1 uv run manage.py test infra   # tests
+```
+
 ## 🐳 Self-Hosting
 
 For teams or multi-user setups, use Docker Compose:

simpleaudit_studio-0.2.7/accounts/admin_urls.py

@@ -0,0 +1,11 @@
+from django.urls import path
+
+from . import views
+
+urlpatterns = [
+    path("stats/", views.admin_stats, name="admin-stats"),
+    path("workspaces/<int:project_id>/archive/", views.admin_archive_workspace, name="admin-workspace-archive"),
+    path("workspaces/<int:project_id>/unarchive/", views.admin_unarchive_workspace, name="admin-workspace-unarchive"),
+    path("users/", views.admin_create_user_view, name="admin-user-create"),
+    path("users/<int:user_id>/", views.admin_update_user_view, name="admin-user-update"),
+]

{simpleaudit_studio-0.2.6 → simpleaudit_studio-0.2.7}/accounts/auth_urls.py

@@ -6,4 +6,5 @@ urlpatterns = [
     path("register/", views.register, name="auth-register"),
     path("token/", views.obtain_token, name="auth-token"),
     path("me/", views.me, name="auth-me"),
+    path("profile/", views.update_profile, name="auth-profile"),
 ]

simpleaudit_studio-0.2.7/accounts/migrations/0003_project_archived.py

@@ -0,0 +1,17 @@
+# Generated by Django 5.2.4 on 2026-09-26 08:58
+
+from django.db import migrations, models
+
+
+class Migration(migrations.Migration):
+    dependencies = [
+        ("accounts", "0002_user_workos_user_id"),
+    ]
+
+    operations = [
+        migrations.AddField(
+            model_name="project",
+            name="archived",
+            field=models.BooleanField(db_index=True, default=False),
+        ),
+    ]

{simpleaudit_studio-0.2.6 → simpleaudit_studio-0.2.7}/accounts/models.py

@@ -45,6 +45,9 @@ class Project(models.Model):
     name = models.CharField(max_length=200, unique=True)
     slug = models.SlugField(max_length=200, unique=True)
     description = models.TextField(blank=True)
+    # Soft-hide a workspace that still contains data. Members keep read access;
+    # all mutations are blocked for non-superusers. Never deletes data.
+    archived = models.BooleanField(default=False, db_index=True)
     created_at = models.DateTimeField(auto_now_add=True)
     updated_at = models.DateTimeField(auto_now=True)
 

simpleaudit_studio-0.2.7/accounts/serializers.py

@@ -0,0 +1,180 @@
+from django.contrib.auth.password_validation import validate_password
+from rest_framework import serializers
+
+from accounts.models import Project, ProjectMembership, User
+
+
+class UserSerializer(serializers.ModelSerializer):
+    class Meta:
+        model = User
+        fields = ("id", "username", "email", "first_name", "last_name", "is_active")
+        read_only_fields = ("id",)
+
+
+class RegisterSerializer(serializers.Serializer):
+    username = serializers.CharField(max_length=150)
+    email = serializers.EmailField()
+    password = serializers.CharField(write_only=True, style={"input_type": "password"})
+    first_name = serializers.CharField(required=False, allow_blank=True, default="")
+    last_name = serializers.CharField(required=False, allow_blank=True, default="")
+
+    def validate_username(self, value):
+        if User.objects.filter(username__iexact=value).exists():
+            raise serializers.ValidationError("Username already exists.")
+        return value
+
+    def validate_email(self, value):
+        if User.objects.filter(email__iexact=value).exists():
+            raise serializers.ValidationError("Email already exists.")
+        return value
+
+    def validate_password(self, value):
+        validate_password(value)
+        return value
+
+    def create(self, validated_data):
+        return User.objects.create_user(**validated_data)
+
+
+class ProjectSerializer(serializers.ModelSerializer):
+    class Meta:
+        model = Project
+        fields = ("id", "name", "slug", "description", "created_at", "updated_at")
+        read_only_fields = ("id", "created_at", "updated_at")
+
+
+class WorkspaceItemSerializer(serializers.ModelSerializer):
+    """Workspace as shown in lists/detail, including whether the requesting
+    user can administer it (drives UI affordances)."""
+
+    is_admin = serializers.SerializerMethodField()
+
+    class Meta:
+        model = Project
+        fields = ("id", "name", "slug", "description", "is_admin", "archived", "created_at", "updated_at")
+        read_only_fields = fields
+
+    def get_is_admin(self, obj) -> bool:
+        request = self.context.get("request")
+        user = getattr(request, "user", None)
+        if user is None or not user.is_authenticated:
+            return False
+        if user.is_superuser:
+            return True
+        return ProjectMembership.objects.filter(
+            project=obj, user=user, role=ProjectMembership.Role.ADMIN
+        ).exists()
+
+
+class WorkspaceCreateSerializer(serializers.Serializer):
+    name = serializers.CharField(max_length=200)
+    description = serializers.CharField(required=False, allow_blank=True, default="")
+
+
+class WorkspaceUpdateSerializer(serializers.Serializer):
+    name = serializers.CharField(max_length=200, required=False)
+    description = serializers.CharField(required=False, allow_blank=True)
+
+
+class MemberAddSerializer(serializers.Serializer):
+    username = serializers.CharField(max_length=150)
+    role = serializers.ChoiceField(choices=ProjectMembership.Role.choices, default=ProjectMembership.Role.VIEWER)
+
+
+class MemberRoleSerializer(serializers.Serializer):
+    role = serializers.ChoiceField(choices=ProjectMembership.Role.choices)
+
+
+# ─── Profile (self-service) ──────────────────────────────────────────────────
+
+
+class ProfileUpdateSerializer(serializers.Serializer):
+    """Self-service profile update. All fields optional; only provided fields
+    are changed. Password change requires the current password."""
+
+    first_name = serializers.CharField(required=False, allow_blank=True, max_length=150)
+    last_name = serializers.CharField(required=False, allow_blank=True, max_length=150)
+    email = serializers.EmailField(required=False, allow_blank=True)
+    username = serializers.CharField(required=False, max_length=150)
+    current_password = serializers.CharField(required=False, style={"input_type": "password"}, write_only=True)
+    new_password = serializers.CharField(required=False, style={"input_type": "password"}, write_only=True)
+
+    def validate_username(self, value):
+        value = (value or "").strip()
+        if not value:
+            raise serializers.ValidationError("Username cannot be empty.")
+        if User.objects.filter(username__iexact=value).exclude(pk=self.context["user"].pk).exists():
+            raise serializers.ValidationError("Username already exists.")
+        return value
+
+    def validate_email(self, value):
+        value = (value or "").strip()
+        if value and User.objects.filter(email__iexact=value).exclude(pk=self.context["user"].pk).exists():
+            raise serializers.ValidationError("Email already exists.")
+        return value
+
+    def validate(self, attrs):
+        from accounts.services import has_local_password
+
+        user = self.context["user"]
+        if "new_password" in attrs:
+            if not attrs.get("new_password"):
+                raise serializers.ValidationError({"new_password": "Enter a new password."})
+            # SSO users (and anyone without a local password) have nothing to
+            # verify against, so they set a password directly.
+            if has_local_password(user):
+                if not attrs.get("current_password"):
+                    raise serializers.ValidationError({"current_password": "Current password is required."})
+                if not user.check_password(attrs["current_password"]):
+                    raise serializers.ValidationError({"current_password": "Current password is incorrect."})
+            validate_password(attrs["new_password"])
+        return attrs
+
+    def save(self):
+        user = self.context["user"]
+        attrs = self.validated_data
+        if "first_name" in attrs:
+            user.first_name = attrs["first_name"]
+        if "last_name" in attrs:
+            user.last_name = attrs["last_name"]
+        if "email" in attrs:
+            user.email = attrs["email"]
+        if "username" in attrs:
+            user.username = attrs["username"]
+        user.save()
+        if attrs.get("new_password"):
+            user.set_password(attrs["new_password"])
+            user.save(update_fields=["password"])
+        return user
+
+
+# ─── Super-admin user management ─────────────────────────────────────────────
+
+
+class UserCreateSerializer(serializers.Serializer):
+    username = serializers.CharField(max_length=150)
+    email = serializers.EmailField(required=False, allow_blank=True)
+    password = serializers.CharField(write_only=True, style={"input_type": "password"})
+    first_name = serializers.CharField(required=False, allow_blank=True, default="")
+    last_name = serializers.CharField(required=False, allow_blank=True, default="")
+
+
+class UserAdminUpdateSerializer(serializers.Serializer):
+    """Super-admin edit of any user. All fields optional."""
+
+    first_name = serializers.CharField(required=False, allow_blank=True, max_length=150)
+    last_name = serializers.CharField(required=False, allow_blank=True, max_length=150)
+    email = serializers.EmailField(required=False, allow_blank=True)
+    is_active = serializers.BooleanField(required=False)
+    is_superuser = serializers.BooleanField(required=False)
+    password = serializers.CharField(required=False, write_only=True, style={"input_type": "password"})
+
+
+class ProjectMembershipSerializer(serializers.ModelSerializer):
+    username = serializers.CharField(source="user.username", read_only=True)
+    email = serializers.EmailField(source="user.email", read_only=True)
+
+    class Meta:
+        model = ProjectMembership
+        fields = ("id", "project", "user", "username", "email", "role", "created_at")
+        read_only_fields = ("id", "created_at")