Sharang Parnerkar
256deb70c7
Build + Deploy ran in parallel with CI's lint/test/loc, so a deploy could ship even when CI failed. Gate Build + Deploy on CI success via workflow_run, and add per-service change detection so only affected services rebuild and only relevant lint/test jobs run on PRs. - scripts/detect-changes.sh: shared diff helper that emits per-service + aggregate flags from a BASE_SHA diff; falls back to "rebuild all" when the base is missing or unreachable - ci.yaml: detect-changes job runs first; loc-budget, *-lint, *-build, and test-* jobs gate on the relevant outputs - build-push-deploy.yml: triggered via workflow_run on CI completion; diff base is the last-build/main git tag, force-pushed by a new mark-last-build job after each green run (handles multi-commit pushes, force pushes, and the "all skipped" case) - check-loc.sh: exclude Office/binary extensions (xlsm, docx, pptx, zip, tar, gz) so binary docs aren't counted as source - loc-exceptions.txt: grandfather two existing >500 LOC files (tender_handlers.go, DecisionTreeWizard.tsx) as Phase 5+ backlog Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
112 lines
5.8 KiB
Plaintext
112 lines
5.8 KiB
Plaintext
# loc-exceptions.txt — files allowed to exceed the 500-line hard cap.
|
|
#
|
|
# Format: one repo-relative path per line. Comments start with '#' and are ignored.
|
|
# Each exception MUST be preceded by a comment explaining why splitting is not viable.
|
|
#
|
|
# Phase 0 baseline: this list is initially empty. Phases 1-4 will add grandfathered
|
|
# entries as we encounter legitimate exceptions (e.g. large generated data tables).
|
|
# The goal is for this list to SHRINK over time, never grow.
|
|
|
|
# --- admin-compliance: static data catalogs (Phase 3) ---
|
|
# Splitting these would fragment lookup tables without improving readability.
|
|
admin-compliance/lib/sdk/tom-generator/controls/loader.ts
|
|
admin-compliance/lib/sdk/vendor-compliance/risk/controls-library.ts
|
|
admin-compliance/lib/sdk/compliance-scope-triggers.ts
|
|
admin-compliance/lib/sdk/vendor-compliance/catalog/processing-activities.ts
|
|
admin-compliance/lib/sdk/catalog-manager/catalog-registry.ts
|
|
admin-compliance/lib/sdk/dsfa/mitigation-library.ts
|
|
admin-compliance/lib/sdk/vvt-baseline-catalog.ts
|
|
admin-compliance/lib/sdk/dsfa/eu-legal-frameworks.ts
|
|
admin-compliance/lib/sdk/dsfa/risk-catalog.ts
|
|
admin-compliance/lib/sdk/loeschfristen-baseline-catalog.ts
|
|
admin-compliance/lib/sdk/vendor-compliance/catalog/vendor-templates.ts
|
|
admin-compliance/lib/sdk/vendor-compliance/catalog/legal-basis.ts
|
|
admin-compliance/lib/sdk/vendor-compliance/contract-review/findings.ts
|
|
admin-compliance/lib/sdk/vendor-compliance/contract-review/checklists.ts
|
|
admin-compliance/lib/sdk/compliance-scope-types/document-scope-matrix-core.ts
|
|
admin-compliance/lib/sdk/compliance-scope-types/document-scope-matrix-extended.ts
|
|
admin-compliance/lib/sdk/demo-data/index.ts
|
|
admin-compliance/lib/sdk/tom-generator/demo-data/index.ts
|
|
|
|
# --- admin-compliance: self-contained export generators (Phase 3) ---
|
|
# Each file generates a complete document format. Splitting mid-generation
|
|
# logic would create artificial module boundaries without benefit.
|
|
admin-compliance/lib/sdk/tom-generator/export/zip.ts
|
|
admin-compliance/lib/sdk/tom-generator/export/docx.ts
|
|
admin-compliance/lib/sdk/tom-generator/export/pdf.ts
|
|
admin-compliance/lib/sdk/einwilligungen/export/pdf.ts
|
|
admin-compliance/lib/sdk/einwilligungen/generator/privacy-policy-sections.ts
|
|
|
|
# --- backend-compliance: legacy utility services (Phase 1) ---
|
|
# Pre-refactor utility modules not yet split. Phase 5 targets.
|
|
backend-compliance/compliance/services/control_generator.py
|
|
backend-compliance/compliance/services/audit_pdf_generator.py
|
|
backend-compliance/compliance/services/regulation_scraper.py
|
|
backend-compliance/compliance/services/llm_provider.py
|
|
backend-compliance/compliance/services/export_generator.py
|
|
backend-compliance/compliance/services/pdf_extractor.py
|
|
backend-compliance/compliance/services/ai_compliance_assistant.py
|
|
|
|
# --- backend-compliance: Phase 1 code refactor backlog ---
|
|
# These are the remaining oversized route/service/data/auth files that Phase 1
|
|
# did not reach. Each entry is a tracked refactor debt item — the list must shrink.
|
|
backend-compliance/compliance/services/decomposition_pass.py
|
|
backend-compliance/compliance/api/schemas.py
|
|
backend-compliance/compliance/api/canonical_control_routes.py
|
|
backend-compliance/compliance/db/repository.py
|
|
backend-compliance/compliance/db/models.py
|
|
backend-compliance/compliance/api/evidence_check_routes.py
|
|
backend-compliance/compliance/api/control_generator_routes.py
|
|
backend-compliance/compliance/api/process_task_routes.py
|
|
backend-compliance/compliance/api/evidence_routes.py
|
|
backend-compliance/compliance/api/crosswalk_routes.py
|
|
backend-compliance/compliance/api/dashboard_routes.py
|
|
backend-compliance/compliance/api/dsfa_routes.py
|
|
backend-compliance/compliance/api/routes.py
|
|
backend-compliance/compliance/api/tom_mapping_routes.py
|
|
backend-compliance/compliance/services/control_dedup.py
|
|
backend-compliance/compliance/services/framework_decomposition.py
|
|
backend-compliance/compliance/services/pipeline_adapter.py
|
|
backend-compliance/compliance/services/batch_dedup_runner.py
|
|
backend-compliance/compliance/services/obligation_extractor.py
|
|
backend-compliance/compliance/services/control_composer.py
|
|
backend-compliance/compliance/services/pattern_matcher.py
|
|
backend-compliance/compliance/data/iso27001_annex_a.py
|
|
backend-compliance/compliance/data/service_modules.py
|
|
backend-compliance/compliance/data/controls.py
|
|
backend-compliance/services/pdf_service.py
|
|
backend-compliance/services/file_processor.py
|
|
backend-compliance/auth/keycloak_auth.py
|
|
|
|
# --- scripts: one-off ingestion, QA, and migration scripts ---
|
|
# These are operational scripts, not production application code.
|
|
# LOC rules don't apply in the same way to single-purpose scripts.
|
|
scripts/ingest-legal-corpus.sh
|
|
scripts/ingest-ce-corpus.sh
|
|
scripts/ingest-dsfa-bundesland.sh
|
|
scripts/edpb-crawler.py
|
|
scripts/apply_templates_023.py
|
|
scripts/qa/phase74_generate_gap_controls.py
|
|
scripts/qa/pdf_qa_all.py
|
|
scripts/qa/benchmark_llm_controls.py
|
|
backend-compliance/scripts/seed_policy_templates.py
|
|
|
|
# --- docs-src: copies of backend source for documentation rendering ---
|
|
# These are not production code; they are rendered into the static docs site.
|
|
docs-src/control_generator.py
|
|
docs-src/control_generator_routes.py
|
|
|
|
# --- consent-sdk: platform-native mobile SDKs (Swift / Dart) ---
|
|
# Flutter and iOS SDKs follow platform conventions (verbose verbose) that make
|
|
# splitting into multiple files awkward without sacrificing single-import ergonomics.
|
|
consent-sdk/src/mobile/flutter/consent_sdk.dart
|
|
consent-sdk/src/mobile/ios/ConsentManager.swift
|
|
|
|
# --- admin-compliance: oversized component refactor backlog ---
|
|
# Phase 5+ target for splitting into smaller subcomponents per wizard step.
|
|
admin-compliance/components/sdk/ai-act/DecisionTreeWizard.tsx
|
|
|
|
# --- ai-compliance-sdk: oversized handler refactor backlog ---
|
|
# Phase 5+ target for splitting handler groups into per-resource files.
|
|
ai-compliance-sdk/internal/api/handlers/tender_handlers.go
|