# Default: every file requires review from the Python platform team.
#
# The slug is the org's actual team name, "python-platfrom" (sic) — the
# Python counterpart of the Go repos' "golang-platfrom". The previous
# "@…/platform-team" does not exist in the org, so GitHub ignored this file
# entirely. CODEOWNERS only takes effect for teams with WRITE access to this
# repository: python-platfrom currently has read, so an org admin must grant
# it write (Settings → Collaborators and teams) before reviews are enforced.
* @BCBP-SOLUTIONS-FZC-LLC/python-platfrom

# Workflow and release automation changes require explicit sign-off.
.github/workflows/ @BCBP-SOLUTIONS-FZC-LLC/python-platfrom
.github/scripts/ @BCBP-SOLUTIONS-FZC-LLC/python-platfrom
.github/dependabot.yml @BCBP-SOLUTIONS-FZC-LLC/python-platfrom

# Public API surface — every symbol re-exported from `pgcommon` is a contract
# with the consuming FastAPI services (and platform-eventcommon). Changes
# ripple into all of them.
src/pgcommon/ @BCBP-SOLUTIONS-FZC-LLC/python-platfrom

# Tenant isolation and secret handling — RLS GUC injection/reset (contextvars
# propagation, per-acquire injection) and DSN password redaction. A regression
# here is a cross-tenant data leak or a credential leak.
src/pgcommon/guc.py @BCBP-SOLUTIONS-FZC-LLC/python-platfrom
src/pgcommon/pool.py @BCBP-SOLUTIONS-FZC-LLC/python-platfrom
src/pgcommon/tx.py @BCBP-SOLUTIONS-FZC-LLC/python-platfrom
src/pgcommon/_internal/dsn.py @BCBP-SOLUTIONS-FZC-LLC/python-platfrom
src/pgcommon/integrations/fastapi.py @BCBP-SOLUTIONS-FZC-LLC/python-platfrom

# Migration runner + CLI — consumers apply their production schema through
# it; its advisory-lock identity must stay stable across versions.
src/pgcommon/migrate/ @BCBP-SOLUTIONS-FZC-LLC/python-platfrom

# Dependency ranges become every consumer's constraints (asyncpg is capped
# because pgcommon relies on non-public behaviour); the lock and the build
# backend constraints decide what the image and the published wheel contain.
# pyproject.toml also holds the import-linter architecture contracts.
pyproject.toml @BCBP-SOLUTIONS-FZC-LLC/python-platfrom
uv.lock @BCBP-SOLUTIONS-FZC-LLC/python-platfrom
build-constraints.txt @BCBP-SOLUTIONS-FZC-LLC/python-platfrom

# The published image's supply chain.
Dockerfile @BCBP-SOLUTIONS-FZC-LLC/python-platfrom
.dockerignore @BCBP-SOLUTIONS-FZC-LLC/python-platfrom
