style: ruff autofix (auto)

Author: autofix-ci[bot]

alembic/versions/0006_revoke_provider_override_nonadmin.py

@@ -14,16 +14,18 @@
 join rows for the two non-admin roles are removed.
 
 """
-from typing import Sequence, Union
 
-from alembic import op
+from collections.abc import Sequence
+from typing import Union
+
 import sqlalchemy as sa
 
+from alembic import op
 
 revision: str = "0006_revoke_provider_override_nonadmin"
-down_revision: Union[str, Sequence[str], None] = "0005_user_fk_ondelete"
-branch_labels: Union[str, Sequence[str], None] = None
-depends_on: Union[str, Sequence[str], None] = None
+down_revision: str | Sequence[str] | None = "0005_user_fk_ondelete"
+branch_labels: str | Sequence[str] | None = None
+depends_on: str | Sequence[str] | None = None
 
 _PERM_NAME = "providers:override:self"
 _ROLE_NAMES = ["developer", "user"]
@@ -62,9 +64,7 @@ def downgrade() -> None:
     existing = {
         row[0]
         for row in bind.execute(
-            sa.text(
-                "SELECT role_id FROM role_permissions WHERE permission_id = :perm_id"
-            ),
+            sa.text("SELECT role_id FROM role_permissions WHERE permission_id = :perm_id"),
             {"perm_id": perm_id},
         ).fetchall()
     }
@@ -73,10 +73,6 @@ def downgrade() -> None:
         sa.column("role_id", sa.String),
         sa.column("permission_id", sa.String),
     )
-    rows = [
-        {"role_id": rid, "permission_id": perm_id}
-        for rid in role_ids
-        if rid not in existing
-    ]
+    rows = [{"role_id": rid, "permission_id": perm_id} for rid in role_ids if rid not in existing]
     if rows:
         op.bulk_insert(rp_table, rows)

src/api/models.py

@@ -1,32 +1,33 @@
 from typing import Optional
 
 from fastapi import Depends
-from pydantic import BaseModel
 from fastapi.responses import JSONResponse
-from utils.logging_config import get_logger
+from pydantic import BaseModel
+
 from config.settings import get_openrag_config
 from dependencies import get_models_service, require_permission
 from session_manager import User
+from utils.logging_config import get_logger
 
 logger = get_logger(__name__)
 
 
 class OpenAIBody(BaseModel):
-    api_key: Optional[str] = None
+    api_key: str | None = None
 
 
 class AnthropicBody(BaseModel):
-    api_key: Optional[str] = None
+    api_key: str | None = None
 
 
 class IBMBody(BaseModel):
-    api_key: Optional[str] = None
-    endpoint: Optional[str] = None
-    project_id: Optional[str] = None
+    api_key: str | None = None
+    endpoint: str | None = None
+    project_id: str | None = None
 
 
 async def get_openai_models(
-    body: Optional[OpenAIBody] = None,
+    body: OpenAIBody | None = None,
     models_service=Depends(get_models_service),
     user: User = Depends(require_permission("providers:read")),
 ):
@@ -50,11 +51,13 @@ async def get_openai_models(
         return JSONResponse(models)
     except Exception as e:
         logger.error(f"Failed to get OpenAI models: {str(e)}")
-        return JSONResponse({"error": f"Failed to retrieve OpenAI models: {str(e)}"}, status_code=500)
+        return JSONResponse(
+            {"error": f"Failed to retrieve OpenAI models: {str(e)}"}, status_code=500
+        )
 
 
 async def get_anthropic_models(
-    body: Optional[AnthropicBody] = None,
+    body: AnthropicBody | None = None,
     models_service=Depends(get_models_service),
     user: User = Depends(require_permission("providers:read")),
 ):
@@ -70,19 +73,23 @@ async def get_anthropic_models(
 
         if not api_key:
             return JSONResponse(
-                {"error": "Anthropic API key is required either in request body or in configuration"},
+                {
+                    "error": "Anthropic API key is required either in request body or in configuration"
+                },
                 status_code=400,
             )
 
         models = await models_service.get_anthropic_models(api_key=api_key)
         return JSONResponse(models)
     except Exception as e:
         logger.error(f"Failed to get Anthropic models: {str(e)}")
-        return JSONResponse({"error": f"Failed to retrieve Anthropic models: {str(e)}"}, status_code=500)
+        return JSONResponse(
+            {"error": f"Failed to retrieve Anthropic models: {str(e)}"}, status_code=500
+        )
 
 
 async def get_ollama_models(
-    endpoint: Optional[str] = None,
+    endpoint: str | None = None,
     models_service=Depends(get_models_service),
     user: User = Depends(require_permission("providers:read")),
 ):
@@ -105,11 +112,13 @@ async def get_ollama_models(
         return JSONResponse(models)
     except Exception as e:
         logger.error(f"Failed to get Ollama models: {str(e)}")
-        return JSONResponse({"error": f"Failed to retrieve Ollama models: {str(e)}"}, status_code=500)
+        return JSONResponse(
+            {"error": f"Failed to retrieve Ollama models: {str(e)}"}, status_code=500
+        )
 
 
 async def get_ibm_models(
-    body: Optional[IBMBody] = None,
+    body: IBMBody | None = None,
     models_service=Depends(get_models_service),
     user: User = Depends(require_permission("providers:read")),
 ):

src/api/settings/endpoints.py

@@ -211,7 +211,9 @@ async def get_settings(
                     endpoint=openrag_config.providers.ollama.endpoint or None,
                     configured=openrag_config.providers.ollama.configured,
                 ),
-            ) if show_providers else None,
+            )
+            if show_providers
+            else None,
             knowledge=KnowledgeConfig(
                 embedding_model=knowledge_config.embedding_model,
                 embedding_provider=knowledge_config.embedding_provider,

src/db/seed.py

@@ -28,7 +28,6 @@
     ("providers", "write", "Write workspace provider configuration"),
     ("providers", "override:self", "Override providers in own user preferences"),
     ("opensearch", "admin", "Administer OpenSearch security"),
-
     # Users / RBAC
     ("users", "list", "List users"),
     ("users", "read", "Read user profile"),
@@ -40,15 +39,13 @@
     ("roles", "edit", "Edit custom roles"),
     ("roles", "delete", "Delete custom roles"),
     ("audit", "read", "Read audit log"),
-
     # Connectors
     ("connectors", "list:own", "List own connectors"),
     ("connectors", "list:all", "List all connectors in the workspace"),
     ("connectors", "create", "Create connectors"),
     ("connectors", "delete:own", "Delete own connectors"),
     ("connectors", "delete:any", "Delete any connector"),
     ("connectors", "use", "Use connector OAuth and browse"),
-
     # Knowledge
     ("knowledge", "upload", "Upload documents"),
     ("knowledge", "delete:own", "Delete own documents"),
@@ -59,21 +56,18 @@
     ("kf", "edit:own", "Edit own knowledge filters"),
     ("kf", "edit:any", "Edit any knowledge filter"),
     ("kf", "share", "Share knowledge filters"),
-
     # Chat / search
     ("chat", "use", "Use chat"),
     ("search", "use", "Use search"),
     ("conversations", "read:own", "Read own conversations"),
     ("conversations", "read:all", "Read all conversations"),
     ("conversations", "delete:own", "Delete own conversations"),
     ("conversations", "delete:any", "Delete any conversation"),
-
     # Flows / agent
     ("flows", "read", "Read flows"),
     ("flows", "edit", "Edit flows"),
     ("agent", "prompt:override", "Override agent system prompt for self"),
     ("agent", "prompt:global", "Edit global agent system prompt"),
-
     # API keys
     ("apikeys", "create:self", "Create own API keys"),
     ("apikeys", "revoke:self", "Revoke own API keys"),
@@ -93,7 +87,11 @@ def permission_name(resource: str, action: str) -> str:
 BUILTIN_ROLES: list[tuple[str, str, str]] = [
     # (id, name, description)
     ("role-admin", "admin", "Full control over infra, users, and all data."),
-    ("role-developer", "developer", "Manages own connectors, flows, and ingestion. No infra writes."),
+    (
+        "role-developer",
+        "developer",
+        "Manages own connectors, flows, and ingestion. No infra writes.",
+    ),
     ("role-user", "user", "Default end-user. Chat, search, and own connectors."),
     ("role-viewer", "viewer", "Read-only chat and search."),
 ]
@@ -106,35 +104,56 @@ def _admin_perms() -> set[str]:
 def _developer_perms() -> set[str]:
     return {
         # NOTE: providers are admin-only — no provider perms for developers.
-        "connectors:list:own", "connectors:create", "connectors:delete:own", "connectors:use",
-        "knowledge:upload", "knowledge:delete:own", "knowledge:read:own",
-        "kf:create", "kf:edit:own",
-        "chat:use", "search:use",
-        "conversations:read:own", "conversations:delete:own",
-        "flows:read", "flows:edit",
+        "connectors:list:own",
+        "connectors:create",
+        "connectors:delete:own",
+        "connectors:use",
+        "knowledge:upload",
+        "knowledge:delete:own",
+        "knowledge:read:own",
+        "kf:create",
+        "kf:edit:own",
+        "chat:use",
+        "search:use",
+        "conversations:read:own",
+        "conversations:delete:own",
+        "flows:read",
+        "flows:edit",
         "agent:prompt:override",
-        "apikeys:create:self", "apikeys:revoke:self",
+        "apikeys:create:self",
+        "apikeys:revoke:self",
     }
 
 
 def _user_perms() -> set[str]:
     return {
         # NOTE: providers are admin-only — no provider perms for users.
-        "connectors:list:own", "connectors:create", "connectors:delete:own", "connectors:use",
-        "knowledge:upload", "knowledge:delete:own", "knowledge:read:own",
-        "kf:create", "kf:edit:own",
-        "chat:use", "search:use",
-        "conversations:read:own", "conversations:delete:own",
+        "connectors:list:own",
+        "connectors:create",
+        "connectors:delete:own",
+        "connectors:use",
+        "knowledge:upload",
+        "knowledge:delete:own",
+        "knowledge:read:own",
+        "kf:create",
+        "kf:edit:own",
+        "chat:use",
+        "search:use",
+        "conversations:read:own",
+        "conversations:delete:own",
         "flows:read",
         "agent:prompt:override",
-        "apikeys:create:self", "apikeys:revoke:self",
+        "apikeys:create:self",
+        "apikeys:revoke:self",
     }
 
 
 def _viewer_perms() -> set[str]:
     return {
-        "chat:use", "search:use",
-        "conversations:read:own", "conversations:delete:own",
+        "chat:use",
+        "search:use",
+        "conversations:read:own",
+        "conversations:delete:own",
         "flows:read",
     }
 
@@ -151,6 +170,7 @@ def _viewer_perms() -> set[str]:
 # Idempotent seeder
 # ---------------------------------------------------------------------------
 
+
 async def seed_roles_and_permissions(session: AsyncSession) -> None:
     """Insert any missing roles/permissions/role_permissions. Safe to call repeatedly.
 
@@ -160,8 +180,7 @@ async def seed_roles_and_permissions(session: AsyncSession) -> None:
 
     # Permissions
     existing_perms = {
-        p.name: p
-        for p in (await session.execute(select(Permission))).scalars().all()
+        p.name: p for p in (await session.execute(select(Permission))).scalars().all()
     }
     perm_id_by_name: dict[str, str] = {p.name: p.id for p in existing_perms.values()}
 
@@ -183,10 +202,7 @@ async def seed_roles_and_permissions(session: AsyncSession) -> None:
     await session.flush()
 
     # Roles
-    existing_roles = {
-        r.name: r
-        for r in (await session.execute(select(Role))).scalars().all()
-    }
+    existing_roles = {r.name: r for r in (await session.execute(select(Role))).scalars().all()}
     for role_id, role_name, description in BUILTIN_ROLES:
         if role_name in existing_roles:
             continue
@@ -201,10 +217,7 @@ async def seed_roles_and_permissions(session: AsyncSession) -> None:
     await session.flush()
 
     # Re-fetch so we have IDs for the just-inserted rows.
-    role_id_by_name = {
-        r.name: r.id
-        for r in (await session.execute(select(Role))).scalars().all()
-    }
+    role_id_by_name = {r.name: r.id for r in (await session.execute(select(Role))).scalars().all()}
 
     # Role permissions (additive only — never remove perms set by an admin via UI)
     existing_rp = set(