🎨 Palette: OpenAPI 스키마 DX 개선 및 불필요한 기본값 제거

[seonghobae]

Current exact disposition

• protected base: develop@e06b1f3fb10903569124af011da213951e6e2473
• exact head: f5a116de0b4fd43581363f32a56ac852444e48e1
• current diff: 8 files

Fresh diff verification shows that the originally described OpenAPI/schema DX change is no longer present as a semantic product delta. src/newsdom_api/schemas.py differs only by formatter line wrapping around the already-existing json_schema_extra={"example": ...} value. The six test-file changes are likewise formatting-only and change no assertion or contract.

The only remaining non-formatting delta is uv.lock: pypdf 6.15.0 -> 6.16.2 plus the regenerated exceptiongroup marker. That security/dependency delta has a stronger canonical successor in #787 at exact head ebd6c71ba17151228c23d32705687097290c0c89: #787 carries the same 6.16.2 artifact hashes and marker, raises the declared pyproject.toml floor to pypdf>=6.16.2,<7.0, and adds the corresponding security regression/doctoring rather than relying on a lock-only drift.

Exact-head workflow evidence here is also not merge-complete: tests, container, CodeQL, ClusterFuzzLite, Security Scan, SAST and Scorecards succeeded, while dependency-review and quality-gate were cancelled. The existing CodeRabbit approval therefore does not turn this stale/mis-scoped tree into a protected merge candidate.

Succession decision

Close this lane under the fleet rule permitting closure only after complete valid-delta succession / no remaining valid unique delta:

• semantic OpenAPI/schema delta: none remains on the current diff;
• formatting-only test/schema changes: no product/test/fixture/contract value to preserve;
• pypdf lock/security delta: completely and more strongly inherited by fix: bound /parse request body before multipart parsing #787, including declaration, lock, regression and traceability.

No checks, reviews, approvals or status from this PR transfer to #787. #787 remains Draft until its own unchanged exact head satisfies then-live required checks/review/governance. This closure is not a merge, bypass, force-push, destructive rebase, or count-only cleanup.

[google-labs-jules]

👋 Jules, reporting for duty! I'm here to lend a hand with this pull request.

When you start a review, I'll add a 👀 emoji to each comment to let you know I've read it. I'll focus on feedback directed at me and will do my best to stay out of conversations between you and other bots or reviewers to keep the noise down.

I'll push a commit with your requested changes shortly after. Please note there might be a delay between these steps, but rest assured I'm on the job!

For more direct control, you can switch me to Reactive Mode. When this mode is on, I will only act on comments where you specifically mention me with @jules. You can find this option in the Pull Request section of your global Jules UI settings. You can always switch back!

New to Jules? Learn more at jules.google/docs.

---

For security, I will only act on instructions from the user who triggered this task.

[coderabbitai]

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info

⚙️ Run configuration

Configuration used: Path: .coderabbit.yaml

Review profile: CHILL

Plan: Team

Run ID: eecd6863-eef6-419d-a2f3-c201e08ea85f

📥 Commits

Reviewing files that changed from the base of the PR and between e06b1f3 and f5a116d.

⛔ Files ignored due to path filters (1)

• uv.lock is excluded by !**/*.lock

📒 Files selected for processing (7)

• src/newsdom_api/schemas.py
• tests/test_auth.py
• tests/test_auth_deployment_contract.py
• tests/test_auth_fail_closed_contract.py
• tests/test_auth_protocol_edges.py
• tests/test_project_metadata.py
• tests/test_pypdf_security_floor.py

Included review availability: Your plan provides up to 1 included review per hour; 0 remain after this review.

---

📝 Walkthrough

Walkthrough

스키마 예시와 여러 테스트 파일의 코드 서식을 정리했습니다. 값, 정규식 패턴, 테스트 로직, 제어 흐름은 변경하지 않았습니다.

Changes

서식 정리

Layer / File(s)	Summary
스키마 및 테스트 서식 정리 src/newsdom_api/schemas.py, tests/test_auth.py, tests/test_auth_deployment_contract.py, tests/test_auth_fail_closed_contract.py, tests/test_auth_protocol_edges.py, tests/test_project_metadata.py, tests/test_pypdf_security_floor.py	ArticleNode.body_blocks 예시, _PDF_FILES 리터럴, 테스트 호출, 정규식 문자열, 의존성 문자열, 딕셔너리 내포문을 재포맷했습니다. 실행 동작은 동일합니다.

Estimated code review effort: 1 (Trivial) | ~2 minutes

Merge Risk: ⚪ Minimal · up to f5a11

스키마 예시와 테스트 표현 형식만 정리되었으며, 제공된 근거상 API 동작, 인증 계약, 테스트 의미는 유지됩니다. 현재 병합을 막을 구체적인 위험은 없습니다.

🚥 Pre-merge checks | ✅ 3 | ❌ 2

❌ Failed checks (2 warnings)

Check name	Status	Explanation	Resolution
Title check	⚠️ Warning	제목은 OpenAPI 스키마 개선과 기본값 제거를 설명하지만, 제공된 변경 요약에서는 해당 기능 변경이 확인되지 않고 주로 코드 서식만 변경되었습니다.	실제 변경을 반영하도록 제목을 수정하거나, 기본값 제거와 OpenAPI 예시 변경이 포함된 변경 내용을 확인해 주세요. 예: "OpenAPI 스키마 예시 및 코드 서식 정리"
Description check	⚠️ Warning	설명에는 변경 목적이 포함되어 있지만 템플릿의 ## Summary, ## Git Flow target, ## Verification, ## Notes 섹션과 검증 결과가 없습니다.	템플릿에 맞춰 필수 섹션을 추가하세요. 대상 브랜치, pytest 및 PYTHONWARNINGS=error pytest 실행 결과, 릴리스 또는 핫픽스 후속 작업을 명시해야 합니다.

✅ Passed checks (3 passed)

Check name	Status	Explanation
Docstring Coverage	✅ Passed	Docstring coverage is 81.82% which is sufficient. The required threshold is 80.00%. Docstring coverage is scoped to functions touched by this diff. Analyzed 11 functions across 7 files.
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.

• Fix all pre-merge checks with AI

✨ Finishing Touches

📝 Generate docstrings

• Create stacked PR
• Commit on current branch

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch palette-dx-schemas-6931125032443637349

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}