feat(BA-6701): expose allow-list rank on the v2 API surface

[jopemachine]

Summary

Exposes the allow-list rank (introduced in #12516) on the v2 API surface. Pure API-layer change — no schema or behavior change beyond the new field:

• DTO (common/dto/manager/v2/app_config_allow_list): optional rank on CreateAppConfigAllowListInput (defaults to the scope type's default rank when omitted), required rank on AppConfigAllowListNode, and a RANK order field.
• Adapter: maps rank between the DTO and the creator spec / domain data, and handles the RANK ordering.
• GraphQL: rank on the AppConfigAllowList node and CreateAppConfigAllowListInput (version-tagged with NEXT_RELEASE_VERSION), RANK in AppConfigAllowListOrderField; supergraph / v2 schema regenerated.
• CLI: ./bai admin app-config-allow-list create --rank.
• New update operation (rank only) — with rank on the allow list, re-ordering the merge needs a post-create adjustment (purge now cascades to fragments, so purge+recreate is not a substitute): AppConfigAllowListUpdaterSpec + service action/processor, PATCH /v2/app-config-allow-list/{id}, adminUpdateAppConfigAllowList GQL mutation, SDK admin_update, and ./bai admin app-config-allow-list update <id> --rank. The identity pair (config_name, scope_type) stays immutable.
• The SDK create/get/search need no code change (they share the DTOs).

Verified against the live server: REST/GQL/CLI create with default (user=300) and explicit (--rank 250) ranks, rank ordering in both directions, and rank update via both the CLI (update --rank 275) and the GQL mutation.

📚 Stacked PRs

Part of the AppConfigFragment / AppConfig stack under BEP-1052 (epic BA-5781). Merge in order:

1. ✅ feat(BA-6552): add app_config_fragments DB model and Alembic migration #12306 — feat(BA-6552): app_config_fragments DB model and Alembic migration
2. ✅ feat(BA-6553): add app_config_fragments repository layer #12307 — feat(BA-6553): repository layer
3. ✅ refactor(BA-6619): consolidate AppConfigScopeType into common.data (single definition) #12403 — refactor(BA-6619): consolidate AppConfigScopeType into common.data
4. ✅ refactor(BA-6620): ExistsQuerier ops primitive + AppConfigAllowList.exists #12405 — refactor(BA-6620): ExistsQuerier + AppConfigAllowList.exists
5. ✅ feat(BA-6554): add app_config_fragment service layer #12358 — feat(BA-6554): AppConfigFragment service layer
6. feat(BA-6702): move fragment rank to the allow list with scope defaults #12516 — feat(BA-6628): move fragment rank to the allow list with scope defaults (replaces feat(BA-6628): conditional-bulk repository primitives #12429)
7. 👉 feat(BA-6701): expose allow-list rank on the v2 API surface #12517 — feat(BA-6701): expose allow-list rank on the v2 API surface ← you are here
8. feat(BA-6704): cascade app config subtree deletion from the definition #12518 — feat(BA-6628): cascade fragment deletion from the allow list
9. feat(BA-6626): app_config_fragment bulk repository layer #12426 — feat(BA-6626): app_config_fragment bulk repository layer
10. feat(BA-6618): app_config_fragment bulk CRUD service layer #12401 — feat(BA-6618): AppConfigFragment bulk CRUD service layer
11. feat(BA-6555): add app_config read service (merge engine + bulk resolve) #12359 — feat(BA-6555): app_config service layer (merge engine)
12. feat(BA-6556): AppConfig REST v2 API (raw fragments and merged read/update) #12377 — feat(BA-6556): AppConfig REST v2 API

🤖 Generated with Claude Code

---

📚 Documentation preview 📚: https://sorna--12517.org.readthedocs.build/en/12517/

---

📚 Documentation preview 📚: https://sorna-ko--12517.org.readthedocs.build/ko/12517/

---

📚 Documentation preview 📚: https://sorna--12517.org.readthedocs.build/en/12517/

---

📚 Documentation preview 📚: https://sorna-ko--12517.org.readthedocs.build/ko/12517/

---

📚 Documentation preview 📚: https://sorna--12517.org.readthedocs.build/en/12517/

---

📚 Documentation preview 📚: https://sorna-ko--12517.org.readthedocs.build/ko/12517/

---

📚 Documentation preview 📚: https://sorna--12517.org.readthedocs.build/en/12517/

---

📚 Documentation preview 📚: https://sorna-ko--12517.org.readthedocs.build/ko/12517/

---

📚 Documentation preview 📚: https://sorna--12517.org.readthedocs.build/en/12517/

---

📚 Documentation preview 📚: https://sorna-ko--12517.org.readthedocs.build/ko/12517/

[Copilot]

Pull request overview

This PR exposes the app config allow-list merge rank (introduced in the stacked #12516) across the v2 API surface, and adds a rank-only update operation so admins can re-order the merge post-create (needed because purge now cascades to fragments, making purge+recreate unsuitable). It's a pure API-layer change with no new schema/behavior beyond surfacing the field and the new operation. It fits into the larger BEP-1052 AppConfigFragment/AppConfig stack (epic BA-5781).

Changes:

• Surface rank on CreateAppConfigAllowListInput (optional, scope-type default when omitted), AppConfigAllowListNode (required), and a new RANK order field, across DTO/adapter/GraphQL/OpenAPI.
• Add a rank-only admin update path end-to-end: AppConfigAllowListUpdaterSpec, repository/db_source update, service action/processor, PATCH /v2/app-config-allow-list/{id}, adminUpdateAppConfigAllowList mutation, SDK admin_update, and ./bai admin app-config-allow-list update --rank.
• Regenerate GraphQL/OpenAPI schema docs and add repository/service/GraphQL/client tests plus a changelog fragment.

Reviewed changes

Copilot reviewed 27 out of 27 changed files in this pull request and generated no comments.

Show a summary per file

File	Description
common/dto/manager/v2/app_config_allow_list/request.py	Adds optional rank to create input and new UpdateAppConfigAllowListInput.
common/dto/manager/v2/app_config_allow_list/response.py	Adds rank to node and new UpdateAppConfigAllowListPayload.
common/dto/manager/v2/app_config_allow_list/types.py	Adds RANK order field.
manager/api/adapters/app_config_allow_list/adapter.py	Maps rank in create/node, adds admin_update, handles RANK ordering.
manager/api/gql/app_config_allow_list/types.py	Adds rank GQL field, RANK order enum, and update input/payload GQL types.
manager/api/gql/app_config_allow_list/resolver.py	Adds admin_update_app_config_allow_list mutation.
manager/api/gql/app_config_allow_list/__init__.py, api/gql/schema.py	Exports/wires the new mutation.
manager/api/rest/v2/app_config_allow_list/handler.py, registry.py	Adds PATCH route + admin_update handler.
manager/repositories/app_config_allow_list/updaters.py	New AppConfigAllowListUpdaterSpec (rank-only).
manager/repositories/app_config_allow_list/repository.py, db_source/db_source.py	Adds update with not-found handling.
manager/services/app_config_allow_list/actions/update.py, service.py, processors.py	New update action/service method/processor wiring.
client/v2/domains_v2/app_config_allow_list.py, client/cli/v2/admin/app_config_allow_list.py	SDK admin_update and CLI --rank/update.
docs/manager/{rest,graphql}-reference/*	Regenerated OpenAPI/GraphQL schema docs.
changes/12517.feature.md, .claude/skills/bai-cli/SKILL.md	Changelog fragment and CLI entity reference update.
tests/unit/.../{repositories,services,api/gql,client_v2}/...	Update/rank test coverage.

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.