justin
dffd05d303
Wires the data model through repository -> service -> API/v1. The privacy engine (app/services/privacy.py) is the single enforcement point: every read resolves visibility there (tree role, tree visibility, per-person override; living-person redaction is a marked Phase 2 TODO). All writes record an attributable AuditEntry.
Endpoints: POST /users (open dev bootstrap until auth), GET /users/me, POST/GET /trees, GET /trees/{id}, and POST/GET /trees/{id}/persons. Authn is a temporary X-User-Id header shim; authz is membership-based (owner/editor/viewer). Domain errors map to 401/403/404/409. Verified on the deploy target: private tree -> 403 for non-members, missing actor -> 401, audit log populated.
Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
Signed-off-by: Justin Paul <justin@jpaul.me>
44 lines
1.3 KiB
Python
44 lines
1.3 KiB
Python
"""Async database engine, session factory, and the FastAPI session dependency.
|
|
|
|
The repository layer builds on ``get_session``; ``get_engine`` also backs the
|
|
readiness probe. Everything is lazy so importing the app never opens a
|
|
connection (important for tests and for ``--help``-style invocations).
|
|
"""
|
|
|
|
from collections.abc import AsyncIterator
|
|
|
|
from sqlalchemy.ext.asyncio import (
|
|
AsyncEngine,
|
|
AsyncSession,
|
|
async_sessionmaker,
|
|
create_async_engine,
|
|
)
|
|
|
|
from app.core.config import get_settings
|
|
|
|
_engine: AsyncEngine | None = None
|
|
_sessionmaker: async_sessionmaker[AsyncSession] | None = None
|
|
|
|
|
|
def get_engine() -> AsyncEngine:
|
|
global _engine
|
|
if _engine is None:
|
|
_engine = create_async_engine(get_settings().database_url, pool_pre_ping=True)
|
|
return _engine
|
|
|
|
|
|
def get_sessionmaker() -> async_sessionmaker[AsyncSession]:
|
|
global _sessionmaker
|
|
if _sessionmaker is None:
|
|
_sessionmaker = async_sessionmaker(
|
|
get_engine(), expire_on_commit=False, class_=AsyncSession
|
|
)
|
|
return _sessionmaker
|
|
|
|
|
|
async def get_session() -> AsyncIterator[AsyncSession]:
|
|
"""FastAPI dependency. One session per request; commits are explicit in the
|
|
service layer."""
|
|
async with get_sessionmaker()() as session:
|
|
yield session
|