feat(BA-6618): app_config_fragment bulk CRUD service layer

[jopemachine]

Resolves #12400 (BA-6618)

Summary

Bulk create / update / purge for app_config_fragment at the service layer, on top of the repository bulk operations in #12426. Partial success: rejected/failed items are reported per item (batch index + reason) rather than failing the whole batch.

• Bulk actions: create carries Sequence[AppConfigFragmentCreatorSpec]; update / purge carry plain Updater / Purger sequences. No service-level gate — each fragment's FK to app_config_allow_list authorizes the write (an insert with no matching allow-list row is rejected as write-not-allowed; feat(BA-6704): cascade app config subtree deletion from the definition #12518), and an existing fragment is always writable at its own scope.
• AppConfigFragmentBulkAction base with per-item targets() (per-entity RBAC extension point — no validator wired yet); action results carry succeeded + failed[index, message].

Test plan

• Service unit tests (mocked repository): bulk create/update/purge delegate correctly and map partial-success results
• pants check / lint / test pass

📚 Stacked PRs

Part of the AppConfigFragment / AppConfig stack under BEP-1052 (epic BA-5781). Merge in order:

1. ✅ feat(BA-6552): add app_config_fragments DB model and Alembic migration #12306 — feat(BA-6552): app_config_fragments DB model and Alembic migration
2. ✅ feat(BA-6553): add app_config_fragments repository layer #12307 — feat(BA-6553): repository layer
3. ✅ refactor(BA-6619): consolidate AppConfigScopeType into common.data (single definition) #12403 — refactor(BA-6619): consolidate AppConfigScopeType into common.data
4. ✅ refactor(BA-6620): ExistsQuerier ops primitive + AppConfigAllowList.exists #12405 — refactor(BA-6620): ExistsQuerier + AppConfigAllowList.exists
5. ✅ feat(BA-6554): add app_config_fragment service layer #12358 — feat(BA-6554): AppConfigFragment service layer
6. ✅ feat(BA-6702): move fragment rank to the allow list with scope defaults #12516 — feat(BA-6702): move fragment rank to the allow list with scope defaults
7. ✅ feat(BA-6701): expose allow-list rank on the v2 API surface #12517 — feat(BA-6701): expose allow-list rank on the v2 API surface
8. ✅ feat(BA-6704): cascade app config subtree deletion from the definition #12518 — feat(BA-6704): cascade app config subtree deletion from the definition
9. ✅ feat(BA-6626): app_config_fragment bulk repository layer #12426 — feat(BA-6626): app_config_fragment bulk repository layer
10. 👉 feat(BA-6618): app_config_fragment bulk CRUD service layer #12401 — feat(BA-6618): app_config_fragment bulk CRUD service layer ← you are here
11. feat(BA-6555): AppConfig merge engine + resolve service (service layer) #12359 — feat(BA-6555): app_config service layer (merge engine)
12. feat(BA-6556): AppConfig REST v2 API (raw fragments and merged read/update) #12377 — feat(BA-6556): AppConfig REST v2 API

🤖 Generated with Claude Code

[Copilot]

Pull request overview

This PR adds the bulk mutation service layer for app_config_fragment (BA-6618, part of the BEP-1052 AppConfigFragment stack), building on the bulk repository operations from #12426. It exposes bulk create / update / purge with partial-success semantics: individually rejected or failed items are reported per-item (batch index + reason) instead of failing the whole batch. There is no service-level gate — each fragment's FK to app_config_allow_list authorizes the write, and existing fragments are always writable at their own scope.

Changes:

• New AppConfigFragmentBulkAction / AppConfigFragmentBulkActionResult base classes plus three concrete bulk actions (bulk_create, bulk_update, bulk_purge) with a per-item targets() RBAC extension point (no validator wired yet).
• AppConfigFragmentService bulk methods delegating to the repository, and BulkActionProcessor wiring in the processor package.
• Mocked-repository unit tests for the three bulk delegation paths.

Reviewed changes

Copilot reviewed 8 out of 8 changed files in this pull request and generated 1 comment.

Show a summary per file

File	Description
services/app_config_fragment/actions/base.py	Adds AppConfigFragmentBulkTarget, AppConfigFragmentBulkAction, and AppConfigFragmentBulkActionResult base types (entity/element RBAC refs).
services/app_config_fragment/actions/bulk_create.py	Bulk create action carrying Sequence[AppConfigFragmentCreatorSpec]; empty targets() (rows don't exist yet).
services/app_config_fragment/actions/bulk_update.py	Bulk update action carrying Sequence[Updater]; targets() maps each pk_value to a fragment target.
services/app_config_fragment/actions/bulk_purge.py	Bulk purge action carrying Sequence[Purger]; targets() maps each pk_value.
services/app_config_fragment/service.py	Adds bulk_create / bulk_update / bulk_purge delegating to the repository and mapping partial-success results.
services/app_config_fragment/processors.py	Registers the three bulk BulkActionProcessors and their action specs.
tests/.../app_config_fragment/test_service.py	Adds delegation tests for the three bulk service methods.
changes/12401.feature.md	Changelog fragment describing the bulk service layer.

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.