python-conventions

A set of Python coding and FastAPI rules. FastAPI is a Python framework for building web APIs, and these rules cover type annotations, documentation, imports, asynchronous input and output, and endpoint layout.

In plain words
What is it for?
Use it when adding Python functions, public classes, or FastAPI endpoints, especially when defining request and response data and documenting errors.
Why use it?
It gives contributors one predictable way to organize and write Python code, reducing inconsistent endpoints and blocking work inside asynchronous code.

Cursor rule for Claude Code

Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

agentmods
npx agentmods add rules/eliornl/rolemule/python-conventions
Clone the repo
git clone --depth 1 https://github.com/eliornl/rolemule

Made for: Claude Code.

Per session 0 Nothing until a file matches its globs; then the whole rule loads.
When invoked 1,307 The whole file, excluding the scripts and references it only reads on demand.
Security scan A 0 findings. Scan, not verified.
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5 $0.00000 $0.01307
Opus 5 $0.00000 $0.00654
Sonnet 5 $0.00000 $0.00261
Haiku 4.5 $0.00000 $0.00131

Measured yesterday against content hash 1b70e56009ec, method: parsed. Prices are Anthropic first-party input rates as of 2026-08-30, from the pricing page.

Security

Grade A, and why

python-conventions scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured yesterday.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

.claude/rules/python-conventions.mdc · 179 lines

How it starts

The opening of the file, as written. The whole thing — 179 lines — stays where its author put it; the contents beside it link to each section on GitHub.

Python Conventions

Style Rules

  • Type hints on all function parameters and return values
  • Docstrings with Args / Returns / Raises sections on every public function
  • Constants: UPPERCASE_SNAKE_CASE at module level
  • async/await for all I/O — never mix sync blocking calls in async context
  • Imports: stdlib → third-party → local, blank line between groups
  • Explicit annotations: List[str], Dict[str, Any], Optional[T]

File Section Template

# =============================================================================
# CONSTANTS AND CONFIGURATION
# =============================================================================

# =============================================================================
# GLOBAL VARIABLES
# =============================================================================

# =============================================================================
# CLASSES/FUNCTIONS
# =============================================================================

FastAPI Endpoint Template

@router.post("/endpoint", response_model=ResponseModel)
async def endpoint_handler(
    request_data: RequestModel,
    current_user: Dict[str, Any] = Depends(get_current_user),
    db: AsyncSession = Depends(get_database),
) -> ResponseModel:
    """
    Short description.

    Args:
        request_data: Description
        current_user: Authenticated user from JWT
        db: PostgreSQL database session

    Returns:
        ResponseModel with result data

    Raises:
        APIError: 400/404/422/500 depending on failure type
    """
    try:
        # implementation
        return ResponseModel(...)
    except APIError:
        raise  # re-raise typed errors unchanged
    except Exception as e:
        logger.error(f"Operation failed: {e}", exc_info=True)
        raise internal_error("Operation failed")

Key rules:

  • except APIError: raise — never catch and re-wrap typed errors
  • Use raise internal_error(...) not raise HTTPException(500, ...)
  • Always log the exception before re-raising internal errors
  • Check resource ownership before modifying it

Read the full file on GitHub · 179 lines

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. yesterday First seen · 179 lines · 1,307 tokens per session scan A 1b70e56009ec

Subscribe to this mod's changes

python-conventions is a cursor rule published in the GitHub repository eliornl/rolemule (37 stars, last pushed 2d ago), licensed MIT. It costs nothing until one of its globs matches a file; then it loads 1,307 tokens. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.

Related

Other cursor rules, from other repositories

cursorrules

Agent2 is a framework for building production AI agents with typed HTTP APIs. PydanticAI handles the agent loop. Agent2 handles everything else: API, auth, pause/resume, approvals, provider routing, knowledge search.

Artesiana/agent2 · 399 tokens

product-manager

Holistic product leader who owns the full product lifecycle — from discovery and strategy through roadmap, stakeholder alignment, go-to-market, and outcome measurement. Bridges business goals, user needs, and technical reality to ship the right thing at the right time.

Treevu-ai/cli-market-world · 5,350 tokens

api-tester

Expert API testing specialist focused on comprehensive API validation, performance testing, and quality assurance across all systems and third-party integrations.

Treevu-ai/cli-market-world · 23 tokens

developer-advocate

Expert developer advocate specializing in building developer communities, creating compelling technical content, optimizing developer experience (DX), and driving platform adoption through authentic engineering engagement. Bridges product and engineering teams with external developers.

Treevu-ai/cli-market-world · 38 tokens

architectural-and-structural-rules

The project follows a layered architecture with clear separation of concerns.

mrharishkumar/fastapi-cursor-boilerplate · 559 tokens

angular-20

This rule provides comprehensive best practices and coding standards for Angular development, focusing on modern TypeScript, standalone components, signals, and performance optimizations.

angular/angular · 0 tokens