From 49035d35f00ce0b99ef09aba65fc87dffa3fb7e8 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?=E2=80=9CNaeel=E2=80=9D?= <tazet@narod.ru>
Date: Mon, 9 Mar 2026 10:10:43 +0400
Subject: [PATCH] =?UTF-8?q?refactor:=20notes-python=20=E2=80=94=20=D0=BE?=
 =?UTF-8?q?=D0=BF=D0=B8=D1=81=D0=B0=D1=82=D0=B5=D0=BB=D1=8C=D0=BD=D1=8B?=
 =?UTF-8?q?=D0=B5=20=D0=B8=D0=BC=D0=B5=D0=BD=D0=B0=20=D1=84=D0=B0=D0=B9?=
 =?UTF-8?q?=D0=BB=D0=BE=D0=B2/=D1=80=D0=B5=D1=81=D1=83=D1=80=D1=81=D0=BE?=
 =?UTF-8?q?=D0=B2=20+=20=D0=BA=D0=BE=D0=BC=D0=BC=D0=B5=D0=BD=D1=82=D0=B0?=
 =?UTF-8?q?=D1=80=D0=B8=D0=B8?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Python файлы:
- handler.py → sql_runner.py   (entrypoint: sql_runner.handle)
- handler.py → notes_crud.py   (entrypoint: notes_crud.handle)
- handler.py → notes_list.py   (entrypoint: notes_list.handle)

TF ресурсы переименованы:
- sless_function.notes         → sless_function.notes_crud
- sless_trigger.notes_http     → sless_trigger.notes_crud_http
- sless_job.create_table       → sless_job.notes_table_init
- sless_job.create_index       → sless_job.notes_index_init
- archive_file.notes           → archive_file.notes_crud_zip
- archive_file.sql_runner      → archive_file.sql_runner_zip
- archive_file.notes_list      → archive_file.notes_list_zip

Добавлены подробные комментарии во все .tf файлы
---
 notes-python/code/notes-list/handler.py       |  22 --
 notes-python/code/notes-list/notes_list.py    |  31 ++
 .../code/notes/{handler.py => notes_crud.py}  |  19 +-
 notes-python/code/sql-runner/handler.py       |  26 --
 notes-python/code/sql-runner/sql_runner.py    |  39 ++
 notes-python/dist/notes-list.zip              | Bin 746 -> 961 bytes
 notes-python/dist/notes.zip                   | Bin 1226 -> 1492 bytes
 notes-python/dist/sql-runner.zip              | Bin 796 -> 1038 bytes
 notes-python/init.tf                          |  26 +-
 notes-python/main.tf                          |  17 +-
 notes-python/notes-list.tf                    |  25 +-
 notes-python/notes.tf                         |  37 +-
 notes-python/outputs.tf                       |  21 +-
 notes-python/sql-runner.tf                    |  24 +-
 .../terraform.tfstate.1773036471.backup       | 369 ++++++++++++++++++
 .../terraform.tfstate.1773036482.backup       | 365 +++++++++++++++++
 .../terraform.tfstate.1773036493.backup       | 365 +++++++++++++++++
 .../terraform.tfstate.1773036504.backup       | 360 +++++++++++++++++
 notes-python/variables.tf                     |   8 +-
 19 files changed, 1656 insertions(+), 98 deletions(-)
 delete mode 100644 notes-python/code/notes-list/handler.py
 create mode 100644 notes-python/code/notes-list/notes_list.py
 rename notes-python/code/notes/{handler.py => notes_crud.py} (69%)
 delete mode 100644 notes-python/code/sql-runner/handler.py
 create mode 100644 notes-python/code/sql-runner/sql_runner.py
 create mode 100644 notes-python/terraform.tfstate.1773036471.backup
 create mode 100644 notes-python/terraform.tfstate.1773036482.backup
 create mode 100644 notes-python/terraform.tfstate.1773036493.backup
 create mode 100644 notes-python/terraform.tfstate.1773036504.backup

diff --git a/notes-python/code/notes-list/handler.py b/notes-python/code/notes-list/handler.py
deleted file mode 100644
index 84a0cf4..0000000
--- a/notes-python/code/notes-list/handler.py
+++ /dev/null
@@ -1,22 +0,0 @@
-# 2026-03-09
-# handler.py — возвращает все записи из таблицы notes.
-# GET/POST /fn/default/notes-list → JSON массив записей, сортировка по created_at DESC.
-import os
-import psycopg2
-import psycopg2.extras
-
-
-def handle(event):
-    dsn = os.environ['PG_DSN']
-    conn = psycopg2.connect(dsn)
-    try:
-        cur = conn.cursor(cursor_factory=psycopg2.extras.RealDictCursor)
-        cur.execute(
-            "SELECT id, title, body, created_at::text FROM notes ORDER BY created_at DESC"
-        )
-        rows = cur.fetchall()
-        return [dict(r) for r in rows]
-    except Exception as e:
-        return {'error': str(e)}
-    finally:
-        conn.close()
diff --git a/notes-python/code/notes-list/notes_list.py b/notes-python/code/notes-list/notes_list.py
new file mode 100644
index 0000000..af04860
--- /dev/null
+++ b/notes-python/code/notes-list/notes_list.py
@@ -0,0 +1,31 @@
+# 2026-03-09
+# notes_list.py — чтение всех записей из таблицы notes.
+#
+# Назначение: отдать полный список заметок одним запросом.
+# Принимает GET или POST — тело/query параметры игнорируются.
+# Возвращает JSON-массив, сортировка: новые записи первые (ORDER BY created_at DESC).
+#
+# Пример ответа:
+#   [
+#     {"id": 3, "title": "Hello", "body": "World", "created_at": "2026-03-09 ..."},
+#     {"id": 1, "title": "First", "body": "Note",  "created_at": "2026-03-08 ..."}
+#   ]
+import os
+import psycopg2
+import psycopg2.extras
+
+
+def handle(event):
+    dsn = os.environ['PG_DSN']
+    conn = psycopg2.connect(dsn)
+    try:
+        cur = conn.cursor(cursor_factory=psycopg2.extras.RealDictCursor)
+        cur.execute(
+            "SELECT id, title, body, created_at::text FROM notes ORDER BY created_at DESC"
+        )
+        rows = cur.fetchall()
+        return [dict(r) for r in rows]
+    except Exception as e:
+        return {'error': str(e)}
+    finally:
+        conn.close()
diff --git a/notes-python/code/notes/handler.py b/notes-python/code/notes/notes_crud.py
similarity index 69%
rename from notes-python/code/notes/handler.py
rename to notes-python/code/notes/notes_crud.py
index cce026f..23e307a 100644
--- a/notes-python/code/notes/handler.py
+++ b/notes-python/code/notes/notes_crud.py
@@ -1,10 +1,17 @@
 # 2026-03-09
-# handler.py — CRUD роутер для таблицы notes.
-# Роутинг по event._path (sub-path URL):
-#   POST /fn/default/notes/add?title=...&body=...    → INSERT
-#   POST /fn/default/notes/update?id=1&title=...     → UPDATE
-#   POST /fn/default/notes/delete?id=1               → DELETE
-# _path и _query добавляет runtime из HTTP запроса (server.py).
+# notes_crud.py — CRUD роутер для таблицы notes.
+#
+# Назначение: единая функция, которая обрабатывает все операции с записями.
+# Роутинг осуществляется по sub-path URL (event._path), который runtime
+# берёт из входящего HTTP-запроса и добавляет в event автоматически.
+#
+# Доступные маршруты (все POST):
+#   /fn/default/notes/add?title=...&body=...              → создать запись
+#   /fn/default/notes/update?id=1&title=...&body=...      → обновить запись
+#   /fn/default/notes/delete?id=1                         → удалить запись
+#
+# Параметры берутся из query string (event._query) или из тела запроса (event).
+# event._path и event._query добавляет Python runtime (server.py) автоматически.
 import os
 import psycopg2
 import psycopg2.extras
diff --git a/notes-python/code/sql-runner/handler.py b/notes-python/code/sql-runner/handler.py
deleted file mode 100644
index 2b39304..0000000
--- a/notes-python/code/sql-runner/handler.py
+++ /dev/null
@@ -1,26 +0,0 @@
-# 2026-03-09
-# handler.py — универсальный исполнитель SQL запросов.
-# Принимает event.statements — массив SQL строк, выполняет последовательно.
-# Используется sless_job для DDL операций (CREATE TABLE, миграции и т.д.)
-import os
-import psycopg2
-
-
-def handle(event):
-    dsn = os.environ['PG_DSN']
-    statements = event.get('statements', [])
-    if not statements:
-        return {'error': 'no statements provided'}
-
-    conn = psycopg2.connect(dsn)
-    try:
-        cur = conn.cursor()
-        for sql in statements:
-            cur.execute(sql)
-        conn.commit()
-        return {'ok': True, 'executed': len(statements)}
-    except Exception as e:
-        conn.rollback()
-        return {'error': str(e)}
-    finally:
-        conn.close()
diff --git a/notes-python/code/sql-runner/sql_runner.py b/notes-python/code/sql-runner/sql_runner.py
new file mode 100644
index 0000000..d71828e
--- /dev/null
+++ b/notes-python/code/sql-runner/sql_runner.py
@@ -0,0 +1,39 @@
+# 2026-03-09
+# sql_runner.py — универсальный DDL/SQL исполнитель.
+#
+# Назначение: выполнять произвольные SQL запросы переданные через event.
+# Используется ТОЛЬКО через sless_job (init.tf) — HTTP-триггера нет намеренно,
+# чтобы никто снаружи не мог выполнить произвольный SQL.
+#
+# Входящий event:
+#   {
+#     "statements": [
+#       "CREATE TABLE IF NOT EXISTS ...",
+#       "CREATE INDEX IF NOT EXISTS ..."
+#     ]
+#   }
+#
+# Все statements выполняются последовательно в одной транзакции.
+# Если хотя бы один упал — транзакция откатывается целиком.
+import os
+import psycopg2
+
+
+def handle(event):
+    dsn = os.environ['PG_DSN']
+    statements = event.get('statements', [])
+    if not statements:
+        return {'error': 'no statements provided'}
+
+    conn = psycopg2.connect(dsn)
+    try:
+        cur = conn.cursor()
+        for sql in statements:
+            cur.execute(sql)
+        conn.commit()
+        return {'ok': True, 'executed': len(statements)}
+    except Exception as e:
+        conn.rollback()
+        return {'error': str(e)}
+    finally:
+        conn.close()
diff --git a/notes-python/dist/notes-list.zip b/notes-python/dist/notes-list.zip
index 1e3b0367130cc3e103e500a5a5cd44a4521569bb..ee6206fdd94c4535871a1002a2d1298405c03361 100644
GIT binary patch
delta 788
zcmV+v1MB?i1;Gc98h;G{003@pbY*j2Y-w|JE^v8tlizCNMij>H^%MvB!ZIjonm}m<
zxoPaAlr|1_pp+1dDvcX~s&Pl-)FuREmo^laU0C*Z*;mkdW30rn@(Sm?!am6|BPaF-
z;tR`j{`|gkK94G}v%T}p*7ok!_IE}FVlG+IiNZuWy&-%`-+uyK(->#C#2jaUQySrn
z{sEk0h7XvlBi;h$I0qVIh97W&IsHqM66F{bqXPI2Go0fRGrE3cxqt<Y@dh&*)Bk`E
zSl|MeG{IY-(TZK*T`6^sGa8r20&g_oel-N8Sm@GwM@hY>6!WqGGt~u$jT1HC0&_TS
zwol5f)J_X5zJL0&&%{uvXOuqbP)ZZk@e!9;C>*8qH@%`Ujp(%&d4mPcajIJAzm?37
z?dH*z5~UH1FvqE__9!T&u_9oBQ@q2>1x3XvO_ZN&8*??pjM7!cYPRZ)7JUCJ_=0(o
z1szX9z0uyUtt>6~RP&~#lT&R`<{A|MIMv?(mu484E`RLWV9HQN%yhy0fkhEFZ7_f1
z!B7Q$;UWrDU@fJ>>x%)7<Cs_Wm&~s>nFpar<R<foOJ>^eBJ<mlsgY+!_(zWm2|RiH
z)k}sx@BO~>{OquS6kcK&M!>po?!`gGEOx<SS#u3FT#&@D2Rw0Dd=UyBpH`0#JN5Qa
z^-QOI9)GL+6Hc9(FRdVnYq~&+VF}XJeF1yA$MO3j;le5(ov!CgE{1#0#&TNBi|U~-
z_jOrq6XdV~^ZSxnPeJuD+l`+Z`zH_vHfS?#P!8G~|GMi+Hjr@8YW`flQ}EK&FrUzC
zWx@YS)DC^&beZ(ey(qFavP||x45vZpOH0(C%Si<Y2xHw=I>rV*>q%(nN62IF5@7Cg
z!ex~S!9~@DL<)=5u5>{+jJ+t@G*nv|@q}45<8uH20RR6`O9u!On_Nhv0ssJe1ONb#
z8j~afN+=VXTu7q=004Ug000dD0000000000005+c00000Zf|sDb6;#}b99rF0xbdF
SlfeQX3V8qk05Ssr0000H+iBDQ

delta 584
zcmX@e{)%;iR6Q3114Bk)UP?}CkzPS%%*6X$xBNtozyB=K{`C-xNtgW(N7npRFP$>4
zyYAKWo>)?JiFb*yQSqiwFUP$R8hf>CCxi&RmA?~i@tNzl%F&Hmlk)uh_TB${a?bmZ
z1y^(a#^?VF&$s)iRUmy@#a-4f?SsXCu04-r^D9!H$K3Ld`E;vZuQ9yrVD<yv>3<GH
z?|z{BVVZfu^q5cP|4v3%=i4`jw5Wa2Dv<1zy8ibeht$d(l^Mre{dkvO`+P>g=3af{
z^TYo{Kj`bdP2zuYRkQx={p<wsJ)4VnKUq8Xb6@zMX72~=_Zlxq2&+Awu|S-6_rmFW
zXKVN_ICFn{=S)u1%G*}&o#)g~>g#=8$+@h4+V_uqs;s&E3<`!qRttPOKIvWdx)-uu
z|M=dAp<lO7Zk<&9x8wGAjT8PoJaZbqykRJM=j43+Y|EkxZkhiBj%Dh2yo`MQCgLH(
z<2}<kUs**LaB&rOEmHW>FaQ1gQG+VMQuhg}rVDzC)*O_cdL~O<aO>@s;HLEEfAyyi
z^E%dF=w|!y<!WW0xcis=_Ss+Wy(!lynW5Bq+v5CRVbPTrgz_f&OjytCF_n#XW=V4U
zkpis(CxM-lG&wgi=FAti3kl3#x;ocjNiC0^mGi8V7U%t$O9P*sS|DGspP7N-|Nj7Q
zc8;HA&D@t585mA6F)##pGqZ>=Z~!3#!$cmw$v>F9RFUODNdg9zG=f;r1Tr~`S(lM(
R@(gBqt}>u#9MCKV1^}8E1fT!_

diff --git a/notes-python/dist/notes.zip b/notes-python/dist/notes.zip
index 54023097c2f594e0e6471c7a3b7309aa54d7a9aa..a282a9076acca02b25087c61a450a68bed03ba1c 100644
GIT binary patch
delta 1349
zcmV-L1-kmm3DgUa8h;G{003@pbY*j2V{&z5E^v9wR^4hFM-;x-QygTRUBP;trckIr
zgb=GqAa#r^w}BAEW@i)+k$2_U*~G#aB)Lsflww+PTiQpE9Sf_mEx*E<SICo;GrO`^
zl5Nt9wA~xc-}%lt-}lXG=it`OTVE~Q{Bq&u*SR?eLdBz+FMng^He2wq{SNL{)|NoG
zain*37YDixc!<Y(4|Es%xR1v;)US0fiF9*wxjDe!v5!Z1ihcbP4)7F*I4A-R@DPV)
zbr19pdKXXegMN)ez2^Xaz>)6aNVm;4j&PrbxQ~6^)jd4GJ`Qvj@IZHPK>KG@3-$>B
zhoC!vN7%<R9DnML-oq0dx>U)ZY2B3fJ>W=p^sfFH2fCxXctCv+EQJ7`;RvGm*+SD(
z>#$aN2sVGo1Lf9ep^&Xn_wX-}aiGKor!4zai~g1B8{!ca`6G_-Q14MHe2*izU#+ez
zBo!JiJJ<&t5|tzB@uC#K12AcURw*5x5C=FUE_DY#n19YF>pRm<SMTB(p6VXaLPy*B
zjc!xZx(9a3*UF>SYN42$1AxVPu*i7biyLauXtwAvc3TP6;3d~}Z#)ZGiv}?9e0=>I
z=njtX2oH@UZ?k;Ay#hIIGEec_f|b6waa9IFHYA+l2oG@hso0D+c!~{IJ*Mhis@T|c
z7MW=LgMT=~KAspSv~_Q+=kC}Tr0HhNWeXxDMezLG7-q3R2aZWhI!AW|k4fE0v6GMj
znKI)l@<0~rGDEDi)Or|<?FM$l<x4KzCMCYcB4VQ%N(Esw9yOzuA2y%gnx4CSOGz)v
z<#LSIVciQ@gQwLNbHpNx0w_Tkxjc9&WEecLR)6l*mR6Uor)GQZ;?fXt#{YEJlZ$5D
zuRD0Gf6;HSUxd8JSl)qr;td)lO6Coi=PMCXx`dVIT-lak%5uP3v<faM(6ni2&Tmc~
zH7r^VZ0{6u=71jt1b5yn&AG2^76l1{lC7job2^q#GBK_n%P5p~@>8pOz6xclG)0<Q
z;eTFZN%-onIhN+6N7T=IDS_oNW?f`4Y3VvZ2{x0$&D1JDD6{P(s}5Lcx8sLy&_yiG
zW<t&4Y^12ui#o|ZSr9#vt5^oGZE-0>X%!)<07L|mZ^lA$X6;Nw`LT5Q7WZSt?HRcI
zgXPt7r3w$0tB;cZ2e1vGV>&3ncXuAHm48>ko{t=uj|%x&1gMm&Yn9~(%lAMq2QtwP
z_>y~yvzn)hMa8#N-kFJ?NH?)NIg{Zl(mj@LohyGm47fdcAhATau_4sdPRbb*zOrTb
zDq{iOm^4A+_$eO<R=ZGAuo)d`=`sZct9^=of?Xrtf8@dIJ+rp5bf;QQ?Xp^~CVy3y
z$Rg&CV?KiK@0TlO5UeyGeO}8rAOd9zRxA8V<{@<njyEEnm5~&$hjBm(Ug@voJ^DZL
z*Y!d#l^>R?W%#D@=-X87jII+RUZ&Dm80YgUvz@ZatRkU3A-<mO{6m?dsaNe7d#0;%
zq`DOcFM{w@km_56#qDIYW6hFbtze5lQT{mMaK-1G1DUU}$CrGKIgt6JdTdQ3NxR`&
zK5r^0n;&wW7eS^qL#7NHjc1<!B17klYa%6WUP!!B7lGGkw5Cw}Mi`M+e+K{n|Nl@+
z2MB?&9Kp5(005p000590lLQ1xD1osY!L|ed0G<p001W^D00000000000HlEc0001P
zZ**mIUt@B0WRr6QEh_N@0044jadl~OWo>0{baO6rcyv%p1qJ{B000620swgc002b=
H00000T;_3a

delta 1052
zcmV+%1mpYE3(5(Q8h;7^003xVZe(m_axQRr%vSAc8%GrVucx@k*t-ksmFq&G0ue&A
zO$@GV^w9=F5bK@Uc*uH2o|&~RjKOgrw3JdPeSkiKoJ81Q>b%12E96Pa%&cUs<cRi1
z+RPu#?B09s+;h&3W(77kHosZl_<DWg+sX>;M--))2ZJGeJb(WK9<_T-$j{Yn{yM)<
z<NO@ddv%ll2Kj{=sY`XEuJbqfFF={ZBB-o@`m>0=R)48?pgyQuz(<(Mpg)M@KDZ*=
zTQ{>_d)up5Rsdjkr_+U6LTd;oQI^V@L90awJ&;7ExDf=w+8#qgJplmt_~v)mYIVYP
zcUgWmK#{}`2!CpPwKm0pNq%p)`LG)<%SSlHMLv{=&Tod>p~<&>scYyTW|$8(LAUBs
zjnrFBlp5z3z%wez0S0xguHZ?xy9??{jnoH2>?<__S73f*SoeYoIT$c5fr-g%Acip;
zyx5#y2lzztNK`5ngp)!!*O2YiD|(+uP-p-X0j5WUGk^Nb*?rt^c3RGJ^LhoQVyH_s
zR#%|js<C>Xzs`SFWA#qmLjFqK<iF-WsZkxO5kgfTs+LzhvkX-YSQJabbUCZ`3oKp7
zP~-UE)EqAml9Pd}rzZYzF4U0c_;7mWRZKw4sD_(1tJgS|E)vutNItY}n&^x}!{h{U
z#s%Z9{eS5vQ7joBHs(kR+Biy^B$kg%SW#0Cl1zJPfD<9)+*L7UwUwX&hj!y;>3G2S
zY&-U;4^GkTWM~)P<?7W!s(HAWNfP~$+3MvD>A|tgIE7OObI!O^2fG6x0ysX*2*=1d
zD`mwQ5AX?&Gl|^=xT^iSV5`;LvEMeh2GBPhcz^K2!|h(!0e4mSuqwRjA_BC-Zm-?i
zYCQ&me3;4hA?7%e81*AruS<L)tNucMsa)x8dBxeW);;4vf@QqVD0a&M))MUCfXKNw
z1!suF(&g-U#sWAko4`7L&Ibhb@028HK}Y@QJ_QNt{}cTPS|Z;6<iX{hu_tO_mrmHV
zyMJtGi<rZERltu=!gdG*HCDyvwTushN|&I%_aB)@tE=H~D)6j~TJeNsR4e#Nf7x^N
z3-Z@;q3vHEeAnLjzEFEc*OG|$sWcJB|Gdha7OWztuF;-pzMh}`OPR#nQ9Hq2=xU0T
zI2nCO*)c8jtwZh9&d!`gGMs%vrLLa|3{{`F@c1xulX<#!Z@}GE<*8FDQgnk)Vmy!#
znjh`DNWe^MhD^@VbT5iu&d|Bw8X>uhJ?oW(&?rrZb0~4jgx2cs00030|4>T@2vJY(
zBC-Pj09Oi=?*wKgQBUt8vI77BR|)_C3IG5A0000000000q=5hc003xVZe(m_a+7@p
WEduHTldJ_E3U&Yh06qi&0000{`2L*$

diff --git a/notes-python/dist/sql-runner.zip b/notes-python/dist/sql-runner.zip
index b684fdd65a10ad88487bf655a57212f82318e1ce..d2083fe0bcd5f914057cf83b4b9c8f3374e404ec 100644
GIT binary patch
delta 911
zcmV;A191GD295}j8k1H6Jdpwze+>Wt0CRC{UvhPBZe?;VaCvl8-D(?06u#f5I9L}e
zfxR^@6e{pVTC1(WxM{76fHB5djnZw_Gs^7B!~}yR(}ZGELusM3G#9<@g(^qY`bVo*
z_|7ZzNy-_mEG2Ptq1m1Je$IU7uq9esUHfEZ_2ZS*PrVW)&*FXC)>_%1e|1d%b$%f}
z#TXd|7;=ZZ=;MaZG3GN|(Z<HsM?2qa5i;&#f*dyj<sOCt3cQk6BK(OyMi`^duP}5{
z!zy9GXEO$0aF5Rk6Yd~Kh7ksGP`C`qIgHSs0=Ua(go#vxA>N>mae)(kw>ctpq;wjH
z`){+#_#7iX#gKd4<qN`Je|U{Q@Hc+P>qTY~t0dX~-aMvqq@y%Qn-!PBSM~bC74C5d
z87^_@@O{Eq1ZC;tw$K=3jC|QE5x?Rda{MFp%C)cMmALD&=<q52MdlO;x5#n%RwxqV
zheNrNP>Oti<{yyb4PWq&$Z$2id(|ru(F^xaw3MU=sXA0TO_r*(e_QMlEq(rN?Loap
z^#`AA)oAkz+WxvuwMUyf^&JX=U}^b1<mUE9?a@8R0=VbalUZS13~6rtZqt97wPGS&
z#f@ucjsg0!36dlU1Csm6Gp@+BKzc3%am_E0A#;uX)k$O|X>d<uUGT!pFqSEv$m~u>
z`aKcB=iI}!nDdzwe{nY|{8Fls1|r98;6;ZmV^cE8?5UL;ho<#p&GWp5YSMQHx)H0g
z>qDjLNiK~<(>j?XQ2HpcM(_F$zue#0+4lF`@j^!H#q2&&Y1yCe`^&VuS8?E|N!p|f
zoT-KUtV-Kf(+gi&Yph=-Uz<homNiFFLpA&p&v8PdrLI~1e}TNKFfBI{J@rcM@mxJ@
zTUvLVAZ**j*mC9WtZA%#Iw;cj7FN&$^<0JRRF#uw@tiwVG>3;#x}bP>7xUDwQr))I
zGWi9+;a4eEx;(e4oH(L-9;#MKHMc}Y(?LS2`nHobas2ooe0rbPEVm@JWmRZ4BYhCZ
z$M2|wu}M_97vlXN00960P)i30Gg%>T@B#n;KLr2)lgI)pWdHyG0CHt<b!l>CZDnqB
zb1rmvbWlqH0u%!j00;mG0000XiZfXuZ}0*D06zr)01W^D00000000000HlFb0001U
lacp05b#88DaxQRrP)h{{000000ssO4c>n+ae**vj005R>sKx*Q

delta 661
zcmeC<n8P+fs-BC1fgvL?FC{0nNUxwWXM$taZ3mII?^Z{fbyOOao48x0_IPAp?$ykF
z9LsTV;<1%dm2NX7XU`DYAoD_vF@M*Kb>Rl<e5dT%w*JFC(W*&C$*0S_w@h^V|L6br
z{pAc#7k@f^c(Hi9`}#S|Kdw9qJd`rw+r#q@q%X+o864+4m*F5;-&g3zzhgml4bvIT
z!=ieHdFw6+q`S3D=I1@&F7vpHZO0Ox=@y)Gm=DOC9JsUW?=i!3860bl@8Fw~mw7EQ
zM%&v&D|L$GD&ECCZE9TgQyJ7t;teuWoX<=&n)8@vd0Xq_MO=CXnJ4deFZ$BZUy`0P
z<swJOp($4Xb@UjPTPzp6l2y-pKy}@jEf&kx&v-0ck#Bdce|Bkx-2S{P-pk_q?6+6(
z&0ywbp2N0JxI9SFlq0le=_>iIFPq+2_#L@5`)O5K-u_1n3@%;HqAgq!?~ew32>$-}
z_UBtCt-qf+RegG8-nY_|Tb{rBw_DZ1_Ve4PJ9uMW*q)b4lsj1xUi9OUk!EX&cKw5*
zjq>xnE_N%6?cCn?wWVoxoa_Gsb0Syl_4sJ&efpoC?HjKZQT_sDONB0d-X0b05pbRJ
z$e)`@($xp@B5qtg6MX&Tx!ryubN$wQ7uvqLLwh@u@6A-z0`q?-);b*8vEBLS_G>5d
zoTg>1xE-!zu|;IVsr@RNlb$RRjk7(j^=;XfFKRc`Hp_kvoAl+sH>dEz8PBcjnHd=V
z{}1qH=lFB<vNH=414ATGWI~u3Ba;ZT2m=QYGB7B1Axnai5DYA71hEhaYH~fZmX;0B
ll%mwa(#)dN+|<01V!e`zk^pa3Hjq*#AS?sY6M$+M7y#-ZB8dP1

diff --git a/notes-python/init.tf b/notes-python/init.tf
index a76760f..0924819 100644
--- a/notes-python/init.tf
+++ b/notes-python/init.tf
@@ -1,9 +1,19 @@
-# 2025-06-05
-# init.tf — джобы инициализации БД: создание таблицы + индекса.
-# Запускаются один раз при terraform apply.
-# Для повторного запуска (например после drop) — увеличь run_id.
+# 2026-03-09
+# init.tf — однократная инициализация схемы БД через sless_job.
+#
+# Джобы запускаются один раз при terraform apply и ждут завершения.
+# Использует функцию sql_runner (без HTTP-триггера) для безопасного DDL.
+#
+# Порядок выполнения гарантирован через depends_on:
+#   1. notes_table_init  — создаём таблицу
+#   2. notes_index_init  — создаём индекс (требует таблицу)
+#
+# Для повторного запуска (например, после DROP TABLE) — увеличь run_id.
+# run_id отслеживается в state: при изменении terraform перезапустит джоб.
 
-resource "sless_job" "create_table" {
+# Джоб создания таблицы notes.
+# CREATE TABLE IF NOT EXISTS — безопасно запускать повторно, таблица не пересоздаётся.
+resource "sless_job" "notes_table_init" {
   namespace        = "default"
   name             = "notes-create-table"
   function         = sless_function.sql_runner.name
@@ -17,8 +27,10 @@ resource "sless_job" "create_table" {
   })
 }
 
-resource "sless_job" "create_index" {
-  depends_on = [sless_job.create_table]
+# Джоб создания индекса для сортировки по дате.
+# depends_on гарантирует, что таблица уже создана до создания индекса.
+resource "sless_job" "notes_index_init" {
+  depends_on = [sless_job.notes_table_init]
 
   namespace        = "default"
   name             = "notes-create-index"
diff --git a/notes-python/main.tf b/notes-python/main.tf
index 5f5e71f..65124e0 100644
--- a/notes-python/main.tf
+++ b/notes-python/main.tf
@@ -1,13 +1,22 @@
-# 2025-06-05
-# main.tf — terraform{} + provider для notes-python примера.
-# Ресурсы вынесены в отдельные .tf файлы.
+# 2026-03-09
+# main.tf — конфигурация terraform и провайдеров.
+#
+# Все ресурсы вынесены в отдельные .tf файлы по назначению:
+#   variables.tf   — входные переменные (pg_dsn)
+#   sql-runner.tf  — служебная DDL-функция (без HTTP-триггера)
+#   init.tf        — однократная инициализация схемы БД
+#   notes.tf       — CRUD функция + HTTP-триггер
+#   notes-list.tf  — read-only функция + HTTP-триггер
+#   outputs.tf     — URLs развёрнутых эндпоинтов
 
 terraform {
   required_providers {
+    # Провайдер для управления serverless функциями через sless API
     sless = {
       source  = "terra.k8c.ru/naeel/sless"
       version = "~> 0.1.7"
     }
+    # hashicorp/archive — для упаковки исходников в zip перед загрузкой
     archive = {
       source  = "hashicorp/archive"
       version = "~> 2.0"
@@ -15,6 +24,8 @@ terraform {
   }
 }
 
+# sless провайдер подключается к API кластера.
+# В продакшне token следует передавать через TF_VAR или secrets.
 provider "sless" {
   endpoint = "https://sless-api.kube5s.ru"
   token    = "dev-token-change-me"
diff --git a/notes-python/notes-list.tf b/notes-python/notes-list.tf
index 2dc4fcf..3e5e2f7 100644
--- a/notes-python/notes-list.tf
+++ b/notes-python/notes-list.tf
@@ -1,18 +1,27 @@
-# 2025-06-05
-# notes-list.tf — функция для получения всех записей из таблицы notes.
-# GET или POST /fn/default/notes-list → JSON массив всех записей, сортировка по дате (новые первые).
+# 2026-03-09
+# notes-list.tf — функция для чтения всех заметок одним запросом.
+#
+# Отдельная от CRUD функция — «read-only» эндпоинт без роутинга.
+# Принимает GET или POST, параметры игнорирует.
+# Возвращает JSON-массив всех записей, сортировка: новые первые.
+#
+# Пример запроса:
+#   curl https://sless-api.kube5s.ru/fn/default/notes-list
 
-data "archive_file" "notes_list" {
+# Упаковка исходников notes_list.py в zip.
+data "archive_file" "notes_list_zip" {
   type        = "zip"
   source_dir  = "${path.module}/code/notes-list"
   output_path = "${path.module}/dist/notes-list.zip"
 }
 
+# Read-only функция в кластере.
+# entrypoint = "notes_list.handle" → файл notes_list.py, функция handle().
 resource "sless_function" "notes_list" {
   namespace   = "default"
   name        = "notes-list"
   runtime     = "python3.11"
-  entrypoint  = "handler.handle"
+  entrypoint  = "notes_list.handle"
   memory_mb   = 128
   timeout_sec = 30
 
@@ -20,10 +29,12 @@ resource "sless_function" "notes_list" {
     PG_DSN = var.pg_dsn
   }
 
-  code_path = data.archive_file.notes_list.output_path
-  code_hash = filesha256("${path.module}/code/notes-list/handler.py")
+  code_path = data.archive_file.notes_list_zip.output_path
+  code_hash = filesha256("${path.module}/code/notes-list/notes_list.py")
 }
 
+# HTTP-триггер для read-only функции.
+# Создаёт Ingress, URL доступен в outputs.tf.
 resource "sless_trigger" "notes_list_http" {
   namespace = "default"
   name      = "notes-list-http"
diff --git a/notes-python/notes.tf b/notes-python/notes.tf
index 9d0cb64..64e989f 100644
--- a/notes-python/notes.tf
+++ b/notes-python/notes.tf
@@ -1,21 +1,29 @@
-# 2025-06-05
-# notes.tf — CRUD функция для таблицы notes.
-# Роутинг по sub-path URL:
-#   POST /fn/default/notes/add?title=...&body=...        → INSERT записи
-#   POST /fn/default/notes/update?id=1&title=...&body=... → UPDATE записи
-#   POST /fn/default/notes/delete?id=1                   → DELETE записи
+# 2026-03-09
+# notes.tf — CRUD функция для управления заметками (CREATE / UPDATE / DELETE).
+#
+# Одна функция обрабатывает все операции — роутинг по sub-path URL.
+# Sub-path и query string пробрасывает прокси (invoke.go) → runtime добавляет
+# их в event как _path и _query.
+#
+# Маршруты (все методы принимаются, рекомендуется POST):
+#   /fn/default/notes/add?title=...&body=...              → INSERT, возвращает запись
+#   /fn/default/notes/update?id=1&title=...&body=...      → UPDATE, возвращает запись
+#   /fn/default/notes/delete?id=1                         → DELETE, возвращает {deleted: id}
 
-data "archive_file" "notes" {
+# Упаковка исходников notes_crud.py в zip.
+data "archive_file" "notes_crud_zip" {
   type        = "zip"
   source_dir  = "${path.module}/code/notes"
   output_path = "${path.module}/dist/notes.zip"
 }
 
-resource "sless_function" "notes" {
+# CRUD функция в кластере.
+# entrypoint = "notes_crud.handle" → файл notes_crud.py, функция handle().
+resource "sless_function" "notes_crud" {
   namespace   = "default"
   name        = "notes"
   runtime     = "python3.11"
-  entrypoint  = "handler.handle"
+  entrypoint  = "notes_crud.handle"
   memory_mb   = 128
   timeout_sec = 30
 
@@ -23,13 +31,16 @@ resource "sless_function" "notes" {
     PG_DSN = var.pg_dsn
   }
 
-  code_path = data.archive_file.notes.output_path
-  code_hash = filesha256("${path.module}/code/notes/handler.py")
+  code_path = data.archive_file.notes_crud_zip.output_path
+  code_hash = filesha256("${path.module}/code/notes/notes_crud.py")
 }
 
-resource "sless_trigger" "notes_http" {
+# HTTP-триггер для CRUD функции.
+# Создаёт Ingress в кластере, URL доступен в outputs.tf.
+# Базовый URL: https://sless-api.kube5s.ru/fn/default/notes
+resource "sless_trigger" "notes_crud_http" {
   namespace = "default"
   name      = "notes-http"
   type      = "http"
-  function  = sless_function.notes.name
+  function  = sless_function.notes_crud.name
 }
diff --git a/notes-python/outputs.tf b/notes-python/outputs.tf
index d14f579..f89c48b 100644
--- a/notes-python/outputs.tf
+++ b/notes-python/outputs.tf
@@ -1,12 +1,23 @@
-# 2025-06-05
-# outputs.tf — URL эндпоинтов для notes-python примера.
+# 2026-03-09
+# outputs.tf — публичные URL развёрнутых функций.
+#
+# После terraform apply используй эти URLs для тестирования:
+#   terraform output notes_url      → базовый URL для CRUD
+#   terraform output notes_list_url → URL для получения всех записей
 
+# URL CRUD-функции (notes_crud).
+# Базовый URL — к нему добавляй sub-path:
+#   POST $(terraform output -raw notes_url)/add?title=Hello&body=World
+#   POST $(terraform output -raw notes_url)/update?id=1&title=Updated
+#   POST $(terraform output -raw notes_url)/delete?id=1
 output "notes_url" {
-  value       = sless_trigger.notes_http.url
-  description = "Базовый URL CRUD: /add?title=...&body=..., /update?id=X&title=...&body=..., /delete?id=X"
+  value       = sless_trigger.notes_crud_http.url
+  description = "CRUD: /add?title=...&body=..., /update?id=X&title=...&body=..., /delete?id=X"
 }
 
+# URL read-only функции (notes_list).
+# Принимает GET или POST, параметры игнорирует, возвращает все записи.
 output "notes_list_url" {
   value       = sless_trigger.notes_list_http.url
-  description = "URL для получения всех записей (GET или POST)"
+  description = "Список всех записей (GET или POST)"
 }
diff --git a/notes-python/sql-runner.tf b/notes-python/sql-runner.tf
index fe5a56c..86bcabc 100644
--- a/notes-python/sql-runner.tf
+++ b/notes-python/sql-runner.tf
@@ -1,19 +1,26 @@
-# 2025-06-05
-# sql-runner.tf — универсальная функция для выполнения SQL запросов.
-# Используется джобами для DDL операций (CREATE TABLE, индексы, миграции).
-# event.statements — массив SQL строк, выполняются последовательно в одной транзакции.
+# 2026-03-09
+# sql-runner.tf — служебная DDL-функция для инициализации и миграций БД.
+#
+# ВАЖНО: эта функция не имеет HTTP-триггера — только вызов через sless_job.
+# Это сделано намеренно: функция выполняет произвольный SQL, и открывать её
+# наружу через HTTP было бы небезопасно.
 
-data "archive_file" "sql_runner" {
+# Упаковка исходников в zip для загрузки в кластер.
+# archive_file пересоздаёт zip при изменении любого файла в source_dir.
+data "archive_file" "sql_runner_zip" {
   type        = "zip"
   source_dir  = "${path.module}/code/sql-runner"
   output_path = "${path.module}/dist/sql-runner.zip"
 }
 
+# Сама функция в кластере.
+# entrypoint = "sql_runner.handle" → файл sql_runner.py, функция handle().
+# memory_mb=128 достаточно — DDL запросы не требуют памяти на вычисления.
 resource "sless_function" "sql_runner" {
   namespace   = "default"
   name        = "sql-runner"
   runtime     = "python3.11"
-  entrypoint  = "handler.handle"
+  entrypoint  = "sql_runner.handle"
   memory_mb   = 128
   timeout_sec = 30
 
@@ -21,6 +28,7 @@ resource "sless_function" "sql_runner" {
     PG_DSN = var.pg_dsn
   }
 
-  code_path = data.archive_file.sql_runner.output_path
-  code_hash = filesha256("${path.module}/code/sql-runner/handler.py")
+  code_path = data.archive_file.sql_runner_zip.output_path
+  # code_hash — при изменении кода terraform пересобирает образ функции
+  code_hash = filesha256("${path.module}/code/sql-runner/sql_runner.py")
 }
diff --git a/notes-python/terraform.tfstate.1773036471.backup b/notes-python/terraform.tfstate.1773036471.backup
new file mode 100644
index 0000000..f0b6146
--- /dev/null
+++ b/notes-python/terraform.tfstate.1773036471.backup
@@ -0,0 +1,369 @@
+{
+  "version": 4,
+  "terraform_version": "1.12.2",
+  "serial": 15,
+  "lineage": "46b43916-6d6b-060c-ad36-6176e18b5f7b",
+  "outputs": {
+    "notes_list_url": {
+      "value": "https://sless-api.kube5s.ru/fn/default/notes-list",
+      "type": "string"
+    },
+    "notes_url": {
+      "value": "https://sless-api.kube5s.ru/fn/default/notes",
+      "type": "string"
+    }
+  },
+  "resources": [
+    {
+      "mode": "data",
+      "type": "archive_file",
+      "name": "notes",
+      "provider": "provider[\"registry.terraform.io/hashicorp/archive\"]",
+      "instances": [
+        {
+          "schema_version": 0,
+          "attributes": {
+            "exclude_symlink_directories": null,
+            "excludes": null,
+            "id": "d1fed6f90a4b4fde556aa2cd18e6ffaa9877c377",
+            "output_base64sha256": "HMlgBvSu0gccGVilru2ybzC7v31uzG1Zy96bK4p+C1E=",
+            "output_base64sha512": "GoV68HbQgbVaBtR4v1kLUhh+kMpJRIoBz30SrgYlVGz13SzV1wZ/lPvedqYvhmirG0fQf63wHYThOmvOR7lvgQ==",
+            "output_file_mode": null,
+            "output_md5": "cf96673e4f09c58d2e49c1664cdee1c2",
+            "output_path": "./dist/notes.zip",
+            "output_sha": "d1fed6f90a4b4fde556aa2cd18e6ffaa9877c377",
+            "output_sha256": "1cc96006f4aed2071c1958a5aeedb26f30bbbf7d6ecc6d59cbde9b2b8a7e0b51",
+            "output_sha512": "1a857af076d081b55a06d478bf590b52187e90ca49448a01cf7d12ae0625546cf5dd2cd5d7067f94fbde76a62f8668ab1b47d07fadf01d84e13a6bce47b96f81",
+            "output_size": 1226,
+            "source": [],
+            "source_content": null,
+            "source_content_filename": null,
+            "source_dir": "./code/notes",
+            "source_file": null,
+            "type": "zip"
+          },
+          "sensitive_attributes": [],
+          "identity_schema_version": 0
+        }
+      ]
+    },
+    {
+      "mode": "data",
+      "type": "archive_file",
+      "name": "notes_list",
+      "provider": "provider[\"registry.terraform.io/hashicorp/archive\"]",
+      "instances": [
+        {
+          "schema_version": 0,
+          "attributes": {
+            "exclude_symlink_directories": null,
+            "excludes": null,
+            "id": "b5730a0d98ae778f80c27881147e14d060151fce",
+            "output_base64sha256": "1pbtfCE8qjpAP5Ddz9c9afhOUXq3aq56ordi5t4vX00=",
+            "output_base64sha512": "nTUnbRKT4d5g5g3HANTGxZi5FmUIaM3C660XzZmGQLJIQ+WNYNLJ/no/H30KzafwE1mJf2qkdcZ8cT3xZdciNg==",
+            "output_file_mode": null,
+            "output_md5": "090088f39e1ef9d8d7d152944441edb7",
+            "output_path": "./dist/notes-list.zip",
+            "output_sha": "b5730a0d98ae778f80c27881147e14d060151fce",
+            "output_sha256": "d696ed7c213caa3a403f90ddcfd73d69f84e517ab76aae7aa2b762e6de2f5f4d",
+            "output_sha512": "9d35276d1293e1de60e60dc700d4c6c598b916650868cdc2ebad17cd998640b24843e58d60d2c9fe7a3f1f7d0acda7f01359897f6aa475c67c713df165d72236",
+            "output_size": 746,
+            "source": [],
+            "source_content": null,
+            "source_content_filename": null,
+            "source_dir": "./code/notes-list",
+            "source_file": null,
+            "type": "zip"
+          },
+          "sensitive_attributes": [],
+          "identity_schema_version": 0
+        }
+      ]
+    },
+    {
+      "mode": "data",
+      "type": "archive_file",
+      "name": "sql_runner",
+      "provider": "provider[\"registry.terraform.io/hashicorp/archive\"]",
+      "instances": [
+        {
+          "schema_version": 0,
+          "attributes": {
+            "exclude_symlink_directories": null,
+            "excludes": null,
+            "id": "241f12b31b5d970c697341292954b220e44f8d2a",
+            "output_base64sha256": "w/IUipIki9V1lf33x06/gHq+KWVdfJO9Ni98DkhC+Xw=",
+            "output_base64sha512": "aLpBXApQ5Nltm6ODUqQc6VZQCoxgn68mHlcrOF8bFrdem8psnz7dujkJE5PYvB5VDNKmdsViDAKPNTwHxut4XA==",
+            "output_file_mode": null,
+            "output_md5": "1fe2ab7afe4730b1141146363d69bd23",
+            "output_path": "./dist/sql-runner.zip",
+            "output_sha": "241f12b31b5d970c697341292954b220e44f8d2a",
+            "output_sha256": "c3f2148a92248bd57595fdf7c74ebf807abe29655d7c93bd362f7c0e4842f97c",
+            "output_sha512": "68ba415c0a50e4d96d9ba38352a41ce956500a8c609faf261e572b385f1b16b75e9bca6c9f3eddba39091393d8bc1e550cd2a676c5620c028f353c07c6eb785c",
+            "output_size": 796,
+            "source": [],
+            "source_content": null,
+            "source_content_filename": null,
+            "source_dir": "./code/sql-runner",
+            "source_file": null,
+            "type": "zip"
+          },
+          "sensitive_attributes": [],
+          "identity_schema_version": 0
+        }
+      ]
+    },
+    {
+      "mode": "managed",
+      "type": "sless_function",
+      "name": "notes",
+      "provider": "provider[\"terra.k8c.ru/naeel/sless\"]",
+      "instances": [
+        {
+          "schema_version": 0,
+          "attributes": {
+            "build_timeout_sec": 300,
+            "code_hash": "aaefd6de16697af6ac7331c7e1795a5446c71e351e6cacc3f4b490b683feb0cb",
+            "code_path": "./dist/notes.zip",
+            "entrypoint": "handler.handle",
+            "env_vars": {
+              "PG_DSN": "postgres://sless:sless-pg-password@postgres.sless.svc.cluster.local:5432/sless?sslmode=disable"
+            },
+            "image_ref": "naeel/sless-default-notes:80b15a8b73f5",
+            "memory_mb": 128,
+            "name": "notes",
+            "namespace": "default",
+            "phase": "Ready",
+            "runtime": "python3.11",
+            "timeout_sec": 30
+          },
+          "sensitive_attributes": [
+            [
+              {
+                "type": "get_attr",
+                "value": "env_vars"
+              },
+              {
+                "type": "index",
+                "value": {
+                  "value": "PG_DSN",
+                  "type": "string"
+                }
+              }
+            ]
+          ],
+          "identity_schema_version": 0,
+          "dependencies": [
+            "data.archive_file.notes"
+          ]
+        }
+      ]
+    },
+    {
+      "mode": "managed",
+      "type": "sless_function",
+      "name": "notes_list",
+      "provider": "provider[\"terra.k8c.ru/naeel/sless\"]",
+      "instances": [
+        {
+          "schema_version": 0,
+          "attributes": {
+            "build_timeout_sec": 300,
+            "code_hash": "4091f7c79ca8c9c5663c812eb08f25ef5257af217bf2b412add670a4737b9d7f",
+            "code_path": "./dist/notes-list.zip",
+            "entrypoint": "handler.handle",
+            "env_vars": {
+              "PG_DSN": "postgres://sless:sless-pg-password@postgres.sless.svc.cluster.local:5432/sless?sslmode=disable"
+            },
+            "image_ref": "naeel/sless-default-notes-list:07f2d5ae5ee4",
+            "memory_mb": 128,
+            "name": "notes-list",
+            "namespace": "default",
+            "phase": "Ready",
+            "runtime": "python3.11",
+            "timeout_sec": 30
+          },
+          "sensitive_attributes": [
+            [
+              {
+                "type": "get_attr",
+                "value": "env_vars"
+              },
+              {
+                "type": "index",
+                "value": {
+                  "value": "PG_DSN",
+                  "type": "string"
+                }
+              }
+            ]
+          ],
+          "identity_schema_version": 0,
+          "dependencies": [
+            "data.archive_file.notes_list"
+          ]
+        }
+      ]
+    },
+    {
+      "mode": "managed",
+      "type": "sless_function",
+      "name": "sql_runner",
+      "provider": "provider[\"terra.k8c.ru/naeel/sless\"]",
+      "instances": [
+        {
+          "schema_version": 0,
+          "attributes": {
+            "build_timeout_sec": 300,
+            "code_hash": "fcde93e59e6fd7f3db426482da7667d5d402aaaaaf56f79a7a60bb1722ec603a",
+            "code_path": "./dist/sql-runner.zip",
+            "entrypoint": "handler.handle",
+            "env_vars": {
+              "PG_DSN": "postgres://sless:sless-pg-password@postgres.sless.svc.cluster.local:5432/sless?sslmode=disable"
+            },
+            "image_ref": "naeel/sless-default-sql-runner:22bce581a299",
+            "memory_mb": 128,
+            "name": "sql-runner",
+            "namespace": "default",
+            "phase": "Ready",
+            "runtime": "python3.11",
+            "timeout_sec": 30
+          },
+          "sensitive_attributes": [
+            [
+              {
+                "type": "get_attr",
+                "value": "env_vars"
+              },
+              {
+                "type": "index",
+                "value": {
+                  "value": "PG_DSN",
+                  "type": "string"
+                }
+              }
+            ]
+          ],
+          "identity_schema_version": 0,
+          "dependencies": [
+            "data.archive_file.sql_runner"
+          ]
+        }
+      ]
+    },
+    {
+      "mode": "managed",
+      "type": "sless_job",
+      "name": "create_index",
+      "provider": "provider[\"terra.k8c.ru/naeel/sless\"]",
+      "instances": [
+        {
+          "schema_version": 0,
+          "attributes": {
+            "completion_time": "2026-03-09T05:44:59Z",
+            "event_json": "{\"statements\":[\"CREATE INDEX IF NOT EXISTS notes_created_idx ON notes(created_at DESC)\"]}",
+            "function": "sql-runner",
+            "message": "completed successfully",
+            "name": "notes-create-index",
+            "namespace": "default",
+            "phase": "Succeeded",
+            "run_id": 1,
+            "start_time": "2026-03-09T05:44:54Z",
+            "wait_timeout_sec": 60
+          },
+          "sensitive_attributes": [],
+          "identity_schema_version": 0,
+          "dependencies": [
+            "data.archive_file.sql_runner",
+            "sless_function.sql_runner",
+            "sless_job.create_table"
+          ]
+        }
+      ]
+    },
+    {
+      "mode": "managed",
+      "type": "sless_job",
+      "name": "create_table",
+      "provider": "provider[\"terra.k8c.ru/naeel/sless\"]",
+      "instances": [
+        {
+          "schema_version": 0,
+          "attributes": {
+            "completion_time": "2026-03-09T05:44:54Z",
+            "event_json": "{\"statements\":[\"CREATE TABLE IF NOT EXISTS notes (id serial PRIMARY KEY, title text NOT NULL, body text, created_at timestamp DEFAULT now())\"]}",
+            "function": "sql-runner",
+            "message": "completed successfully",
+            "name": "notes-create-table",
+            "namespace": "default",
+            "phase": "Succeeded",
+            "run_id": 1,
+            "start_time": "2026-03-09T05:44:39Z",
+            "wait_timeout_sec": 120
+          },
+          "sensitive_attributes": [],
+          "identity_schema_version": 0,
+          "dependencies": [
+            "data.archive_file.sql_runner",
+            "sless_function.sql_runner"
+          ]
+        }
+      ]
+    },
+    {
+      "mode": "managed",
+      "type": "sless_trigger",
+      "name": "notes_http",
+      "provider": "provider[\"terra.k8c.ru/naeel/sless\"]",
+      "instances": [
+        {
+          "schema_version": 0,
+          "attributes": {
+            "active": true,
+            "enabled": true,
+            "function": "notes",
+            "name": "notes-http",
+            "namespace": "default",
+            "schedule": null,
+            "type": "http",
+            "url": "https://sless-api.kube5s.ru/fn/default/notes"
+          },
+          "sensitive_attributes": [],
+          "identity_schema_version": 0,
+          "dependencies": [
+            "data.archive_file.notes",
+            "sless_function.notes"
+          ]
+        }
+      ]
+    },
+    {
+      "mode": "managed",
+      "type": "sless_trigger",
+      "name": "notes_list_http",
+      "provider": "provider[\"terra.k8c.ru/naeel/sless\"]",
+      "instances": [
+        {
+          "schema_version": 0,
+          "attributes": {
+            "active": true,
+            "enabled": true,
+            "function": "notes-list",
+            "name": "notes-list-http",
+            "namespace": "default",
+            "schedule": null,
+            "type": "http",
+            "url": "https://sless-api.kube5s.ru/fn/default/notes-list"
+          },
+          "sensitive_attributes": [],
+          "identity_schema_version": 0,
+          "dependencies": [
+            "data.archive_file.notes_list",
+            "sless_function.notes_list"
+          ]
+        }
+      ]
+    }
+  ],
+  "check_results": null
+}
diff --git a/notes-python/terraform.tfstate.1773036482.backup b/notes-python/terraform.tfstate.1773036482.backup
new file mode 100644
index 0000000..b6402da
--- /dev/null
+++ b/notes-python/terraform.tfstate.1773036482.backup
@@ -0,0 +1,365 @@
+{
+  "version": 4,
+  "terraform_version": "1.12.2",
+  "serial": 16,
+  "lineage": "46b43916-6d6b-060c-ad36-6176e18b5f7b",
+  "outputs": {
+    "notes_list_url": {
+      "value": "https://sless-api.kube5s.ru/fn/default/notes-list",
+      "type": "string"
+    },
+    "notes_url": {
+      "value": "https://sless-api.kube5s.ru/fn/default/notes",
+      "type": "string"
+    }
+  },
+  "resources": [
+    {
+      "mode": "data",
+      "type": "archive_file",
+      "name": "notes",
+      "provider": "provider[\"registry.terraform.io/hashicorp/archive\"]",
+      "instances": [
+        {
+          "schema_version": 0,
+          "attributes": {
+            "exclude_symlink_directories": null,
+            "excludes": null,
+            "id": "d1fed6f90a4b4fde556aa2cd18e6ffaa9877c377",
+            "output_base64sha256": "HMlgBvSu0gccGVilru2ybzC7v31uzG1Zy96bK4p+C1E=",
+            "output_base64sha512": "GoV68HbQgbVaBtR4v1kLUhh+kMpJRIoBz30SrgYlVGz13SzV1wZ/lPvedqYvhmirG0fQf63wHYThOmvOR7lvgQ==",
+            "output_file_mode": null,
+            "output_md5": "cf96673e4f09c58d2e49c1664cdee1c2",
+            "output_path": "./dist/notes.zip",
+            "output_sha": "d1fed6f90a4b4fde556aa2cd18e6ffaa9877c377",
+            "output_sha256": "1cc96006f4aed2071c1958a5aeedb26f30bbbf7d6ecc6d59cbde9b2b8a7e0b51",
+            "output_sha512": "1a857af076d081b55a06d478bf590b52187e90ca49448a01cf7d12ae0625546cf5dd2cd5d7067f94fbde76a62f8668ab1b47d07fadf01d84e13a6bce47b96f81",
+            "output_size": 1226,
+            "source": [],
+            "source_content": null,
+            "source_content_filename": null,
+            "source_dir": "./code/notes",
+            "source_file": null,
+            "type": "zip"
+          },
+          "sensitive_attributes": [],
+          "identity_schema_version": 0
+        }
+      ]
+    },
+    {
+      "mode": "data",
+      "type": "archive_file",
+      "name": "notes_list",
+      "provider": "provider[\"registry.terraform.io/hashicorp/archive\"]",
+      "instances": [
+        {
+          "schema_version": 0,
+          "attributes": {
+            "exclude_symlink_directories": null,
+            "excludes": null,
+            "id": "b5730a0d98ae778f80c27881147e14d060151fce",
+            "output_base64sha256": "1pbtfCE8qjpAP5Ddz9c9afhOUXq3aq56ordi5t4vX00=",
+            "output_base64sha512": "nTUnbRKT4d5g5g3HANTGxZi5FmUIaM3C660XzZmGQLJIQ+WNYNLJ/no/H30KzafwE1mJf2qkdcZ8cT3xZdciNg==",
+            "output_file_mode": null,
+            "output_md5": "090088f39e1ef9d8d7d152944441edb7",
+            "output_path": "./dist/notes-list.zip",
+            "output_sha": "b5730a0d98ae778f80c27881147e14d060151fce",
+            "output_sha256": "d696ed7c213caa3a403f90ddcfd73d69f84e517ab76aae7aa2b762e6de2f5f4d",
+            "output_sha512": "9d35276d1293e1de60e60dc700d4c6c598b916650868cdc2ebad17cd998640b24843e58d60d2c9fe7a3f1f7d0acda7f01359897f6aa475c67c713df165d72236",
+            "output_size": 746,
+            "source": [],
+            "source_content": null,
+            "source_content_filename": null,
+            "source_dir": "./code/notes-list",
+            "source_file": null,
+            "type": "zip"
+          },
+          "sensitive_attributes": [],
+          "identity_schema_version": 0
+        }
+      ]
+    },
+    {
+      "mode": "data",
+      "type": "archive_file",
+      "name": "sql_runner",
+      "provider": "provider[\"registry.terraform.io/hashicorp/archive\"]",
+      "instances": [
+        {
+          "schema_version": 0,
+          "attributes": {
+            "exclude_symlink_directories": null,
+            "excludes": null,
+            "id": "241f12b31b5d970c697341292954b220e44f8d2a",
+            "output_base64sha256": "w/IUipIki9V1lf33x06/gHq+KWVdfJO9Ni98DkhC+Xw=",
+            "output_base64sha512": "aLpBXApQ5Nltm6ODUqQc6VZQCoxgn68mHlcrOF8bFrdem8psnz7dujkJE5PYvB5VDNKmdsViDAKPNTwHxut4XA==",
+            "output_file_mode": null,
+            "output_md5": "1fe2ab7afe4730b1141146363d69bd23",
+            "output_path": "./dist/sql-runner.zip",
+            "output_sha": "241f12b31b5d970c697341292954b220e44f8d2a",
+            "output_sha256": "c3f2148a92248bd57595fdf7c74ebf807abe29655d7c93bd362f7c0e4842f97c",
+            "output_sha512": "68ba415c0a50e4d96d9ba38352a41ce956500a8c609faf261e572b385f1b16b75e9bca6c9f3eddba39091393d8bc1e550cd2a676c5620c028f353c07c6eb785c",
+            "output_size": 796,
+            "source": [],
+            "source_content": null,
+            "source_content_filename": null,
+            "source_dir": "./code/sql-runner",
+            "source_file": null,
+            "type": "zip"
+          },
+          "sensitive_attributes": [],
+          "identity_schema_version": 0
+        }
+      ]
+    },
+    {
+      "mode": "managed",
+      "type": "sless_function",
+      "name": "notes_crud",
+      "provider": "provider[\"terra.k8c.ru/naeel/sless\"]",
+      "instances": [
+        {
+          "schema_version": 0,
+          "attributes": {
+            "build_timeout_sec": 300,
+            "code_hash": "aaefd6de16697af6ac7331c7e1795a5446c71e351e6cacc3f4b490b683feb0cb",
+            "code_path": "./dist/notes.zip",
+            "entrypoint": "handler.handle",
+            "env_vars": {
+              "PG_DSN": "postgres://sless:sless-pg-password@postgres.sless.svc.cluster.local:5432/sless?sslmode=disable"
+            },
+            "image_ref": "naeel/sless-default-notes:80b15a8b73f5",
+            "memory_mb": 128,
+            "name": "notes",
+            "namespace": "default",
+            "phase": "Ready",
+            "runtime": "python3.11",
+            "timeout_sec": 30
+          },
+          "sensitive_attributes": [
+            [
+              {
+                "type": "get_attr",
+                "value": "env_vars"
+              },
+              {
+                "type": "index",
+                "value": {
+                  "value": "PG_DSN",
+                  "type": "string"
+                }
+              }
+            ]
+          ],
+          "identity_schema_version": 0,
+          "dependencies": [
+            "data.archive_file.notes"
+          ]
+        }
+      ]
+    },
+    {
+      "mode": "managed",
+      "type": "sless_function",
+      "name": "notes_list",
+      "provider": "provider[\"terra.k8c.ru/naeel/sless\"]",
+      "instances": [
+        {
+          "schema_version": 0,
+          "attributes": {
+            "build_timeout_sec": 300,
+            "code_hash": "4091f7c79ca8c9c5663c812eb08f25ef5257af217bf2b412add670a4737b9d7f",
+            "code_path": "./dist/notes-list.zip",
+            "entrypoint": "handler.handle",
+            "env_vars": {
+              "PG_DSN": "postgres://sless:sless-pg-password@postgres.sless.svc.cluster.local:5432/sless?sslmode=disable"
+            },
+            "image_ref": "naeel/sless-default-notes-list:07f2d5ae5ee4",
+            "memory_mb": 128,
+            "name": "notes-list",
+            "namespace": "default",
+            "phase": "Ready",
+            "runtime": "python3.11",
+            "timeout_sec": 30
+          },
+          "sensitive_attributes": [
+            [
+              {
+                "type": "get_attr",
+                "value": "env_vars"
+              },
+              {
+                "type": "index",
+                "value": {
+                  "value": "PG_DSN",
+                  "type": "string"
+                }
+              }
+            ]
+          ],
+          "identity_schema_version": 0,
+          "dependencies": [
+            "data.archive_file.notes_list"
+          ]
+        }
+      ]
+    },
+    {
+      "mode": "managed",
+      "type": "sless_function",
+      "name": "sql_runner",
+      "provider": "provider[\"terra.k8c.ru/naeel/sless\"]",
+      "instances": [
+        {
+          "schema_version": 0,
+          "attributes": {
+            "build_timeout_sec": 300,
+            "code_hash": "fcde93e59e6fd7f3db426482da7667d5d402aaaaaf56f79a7a60bb1722ec603a",
+            "code_path": "./dist/sql-runner.zip",
+            "entrypoint": "handler.handle",
+            "env_vars": {
+              "PG_DSN": "postgres://sless:sless-pg-password@postgres.sless.svc.cluster.local:5432/sless?sslmode=disable"
+            },
+            "image_ref": "naeel/sless-default-sql-runner:22bce581a299",
+            "memory_mb": 128,
+            "name": "sql-runner",
+            "namespace": "default",
+            "phase": "Ready",
+            "runtime": "python3.11",
+            "timeout_sec": 30
+          },
+          "sensitive_attributes": [
+            [
+              {
+                "type": "get_attr",
+                "value": "env_vars"
+              },
+              {
+                "type": "index",
+                "value": {
+                  "value": "PG_DSN",
+                  "type": "string"
+                }
+              }
+            ]
+          ],
+          "identity_schema_version": 0,
+          "dependencies": [
+            "data.archive_file.sql_runner"
+          ]
+        }
+      ]
+    },
+    {
+      "mode": "managed",
+      "type": "sless_job",
+      "name": "create_index",
+      "provider": "provider[\"terra.k8c.ru/naeel/sless\"]",
+      "instances": [
+        {
+          "schema_version": 0,
+          "attributes": {
+            "completion_time": "2026-03-09T05:44:59Z",
+            "event_json": "{\"statements\":[\"CREATE INDEX IF NOT EXISTS notes_created_idx ON notes(created_at DESC)\"]}",
+            "function": "sql-runner",
+            "message": "completed successfully",
+            "name": "notes-create-index",
+            "namespace": "default",
+            "phase": "Succeeded",
+            "run_id": 1,
+            "start_time": "2026-03-09T05:44:54Z",
+            "wait_timeout_sec": 60
+          },
+          "sensitive_attributes": [],
+          "identity_schema_version": 0,
+          "dependencies": [
+            "data.archive_file.sql_runner",
+            "sless_function.sql_runner",
+            "sless_job.create_table"
+          ]
+        }
+      ]
+    },
+    {
+      "mode": "managed",
+      "type": "sless_job",
+      "name": "create_table",
+      "provider": "provider[\"terra.k8c.ru/naeel/sless\"]",
+      "instances": [
+        {
+          "schema_version": 0,
+          "attributes": {
+            "completion_time": "2026-03-09T05:44:54Z",
+            "event_json": "{\"statements\":[\"CREATE TABLE IF NOT EXISTS notes (id serial PRIMARY KEY, title text NOT NULL, body text, created_at timestamp DEFAULT now())\"]}",
+            "function": "sql-runner",
+            "message": "completed successfully",
+            "name": "notes-create-table",
+            "namespace": "default",
+            "phase": "Succeeded",
+            "run_id": 1,
+            "start_time": "2026-03-09T05:44:39Z",
+            "wait_timeout_sec": 120
+          },
+          "sensitive_attributes": [],
+          "identity_schema_version": 0,
+          "dependencies": [
+            "data.archive_file.sql_runner",
+            "sless_function.sql_runner"
+          ]
+        }
+      ]
+    },
+    {
+      "mode": "managed",
+      "type": "sless_trigger",
+      "name": "notes_http",
+      "provider": "provider[\"terra.k8c.ru/naeel/sless\"]",
+      "instances": [
+        {
+          "schema_version": 0,
+          "attributes": {
+            "active": true,
+            "enabled": true,
+            "function": "notes",
+            "name": "notes-http",
+            "namespace": "default",
+            "schedule": null,
+            "type": "http",
+            "url": "https://sless-api.kube5s.ru/fn/default/notes"
+          },
+          "sensitive_attributes": [],
+          "identity_schema_version": 0
+        }
+      ]
+    },
+    {
+      "mode": "managed",
+      "type": "sless_trigger",
+      "name": "notes_list_http",
+      "provider": "provider[\"terra.k8c.ru/naeel/sless\"]",
+      "instances": [
+        {
+          "schema_version": 0,
+          "attributes": {
+            "active": true,
+            "enabled": true,
+            "function": "notes-list",
+            "name": "notes-list-http",
+            "namespace": "default",
+            "schedule": null,
+            "type": "http",
+            "url": "https://sless-api.kube5s.ru/fn/default/notes-list"
+          },
+          "sensitive_attributes": [],
+          "identity_schema_version": 0,
+          "dependencies": [
+            "data.archive_file.notes_list",
+            "sless_function.notes_list"
+          ]
+        }
+      ]
+    }
+  ],
+  "check_results": null
+}
diff --git a/notes-python/terraform.tfstate.1773036493.backup b/notes-python/terraform.tfstate.1773036493.backup
new file mode 100644
index 0000000..a4b3e6a
--- /dev/null
+++ b/notes-python/terraform.tfstate.1773036493.backup
@@ -0,0 +1,365 @@
+{
+  "version": 4,
+  "terraform_version": "1.12.2",
+  "serial": 17,
+  "lineage": "46b43916-6d6b-060c-ad36-6176e18b5f7b",
+  "outputs": {
+    "notes_list_url": {
+      "value": "https://sless-api.kube5s.ru/fn/default/notes-list",
+      "type": "string"
+    },
+    "notes_url": {
+      "value": "https://sless-api.kube5s.ru/fn/default/notes",
+      "type": "string"
+    }
+  },
+  "resources": [
+    {
+      "mode": "data",
+      "type": "archive_file",
+      "name": "notes",
+      "provider": "provider[\"registry.terraform.io/hashicorp/archive\"]",
+      "instances": [
+        {
+          "schema_version": 0,
+          "attributes": {
+            "exclude_symlink_directories": null,
+            "excludes": null,
+            "id": "d1fed6f90a4b4fde556aa2cd18e6ffaa9877c377",
+            "output_base64sha256": "HMlgBvSu0gccGVilru2ybzC7v31uzG1Zy96bK4p+C1E=",
+            "output_base64sha512": "GoV68HbQgbVaBtR4v1kLUhh+kMpJRIoBz30SrgYlVGz13SzV1wZ/lPvedqYvhmirG0fQf63wHYThOmvOR7lvgQ==",
+            "output_file_mode": null,
+            "output_md5": "cf96673e4f09c58d2e49c1664cdee1c2",
+            "output_path": "./dist/notes.zip",
+            "output_sha": "d1fed6f90a4b4fde556aa2cd18e6ffaa9877c377",
+            "output_sha256": "1cc96006f4aed2071c1958a5aeedb26f30bbbf7d6ecc6d59cbde9b2b8a7e0b51",
+            "output_sha512": "1a857af076d081b55a06d478bf590b52187e90ca49448a01cf7d12ae0625546cf5dd2cd5d7067f94fbde76a62f8668ab1b47d07fadf01d84e13a6bce47b96f81",
+            "output_size": 1226,
+            "source": [],
+            "source_content": null,
+            "source_content_filename": null,
+            "source_dir": "./code/notes",
+            "source_file": null,
+            "type": "zip"
+          },
+          "sensitive_attributes": [],
+          "identity_schema_version": 0
+        }
+      ]
+    },
+    {
+      "mode": "data",
+      "type": "archive_file",
+      "name": "notes_list",
+      "provider": "provider[\"registry.terraform.io/hashicorp/archive\"]",
+      "instances": [
+        {
+          "schema_version": 0,
+          "attributes": {
+            "exclude_symlink_directories": null,
+            "excludes": null,
+            "id": "b5730a0d98ae778f80c27881147e14d060151fce",
+            "output_base64sha256": "1pbtfCE8qjpAP5Ddz9c9afhOUXq3aq56ordi5t4vX00=",
+            "output_base64sha512": "nTUnbRKT4d5g5g3HANTGxZi5FmUIaM3C660XzZmGQLJIQ+WNYNLJ/no/H30KzafwE1mJf2qkdcZ8cT3xZdciNg==",
+            "output_file_mode": null,
+            "output_md5": "090088f39e1ef9d8d7d152944441edb7",
+            "output_path": "./dist/notes-list.zip",
+            "output_sha": "b5730a0d98ae778f80c27881147e14d060151fce",
+            "output_sha256": "d696ed7c213caa3a403f90ddcfd73d69f84e517ab76aae7aa2b762e6de2f5f4d",
+            "output_sha512": "9d35276d1293e1de60e60dc700d4c6c598b916650868cdc2ebad17cd998640b24843e58d60d2c9fe7a3f1f7d0acda7f01359897f6aa475c67c713df165d72236",
+            "output_size": 746,
+            "source": [],
+            "source_content": null,
+            "source_content_filename": null,
+            "source_dir": "./code/notes-list",
+            "source_file": null,
+            "type": "zip"
+          },
+          "sensitive_attributes": [],
+          "identity_schema_version": 0
+        }
+      ]
+    },
+    {
+      "mode": "data",
+      "type": "archive_file",
+      "name": "sql_runner",
+      "provider": "provider[\"registry.terraform.io/hashicorp/archive\"]",
+      "instances": [
+        {
+          "schema_version": 0,
+          "attributes": {
+            "exclude_symlink_directories": null,
+            "excludes": null,
+            "id": "241f12b31b5d970c697341292954b220e44f8d2a",
+            "output_base64sha256": "w/IUipIki9V1lf33x06/gHq+KWVdfJO9Ni98DkhC+Xw=",
+            "output_base64sha512": "aLpBXApQ5Nltm6ODUqQc6VZQCoxgn68mHlcrOF8bFrdem8psnz7dujkJE5PYvB5VDNKmdsViDAKPNTwHxut4XA==",
+            "output_file_mode": null,
+            "output_md5": "1fe2ab7afe4730b1141146363d69bd23",
+            "output_path": "./dist/sql-runner.zip",
+            "output_sha": "241f12b31b5d970c697341292954b220e44f8d2a",
+            "output_sha256": "c3f2148a92248bd57595fdf7c74ebf807abe29655d7c93bd362f7c0e4842f97c",
+            "output_sha512": "68ba415c0a50e4d96d9ba38352a41ce956500a8c609faf261e572b385f1b16b75e9bca6c9f3eddba39091393d8bc1e550cd2a676c5620c028f353c07c6eb785c",
+            "output_size": 796,
+            "source": [],
+            "source_content": null,
+            "source_content_filename": null,
+            "source_dir": "./code/sql-runner",
+            "source_file": null,
+            "type": "zip"
+          },
+          "sensitive_attributes": [],
+          "identity_schema_version": 0
+        }
+      ]
+    },
+    {
+      "mode": "managed",
+      "type": "sless_function",
+      "name": "notes_crud",
+      "provider": "provider[\"terra.k8c.ru/naeel/sless\"]",
+      "instances": [
+        {
+          "schema_version": 0,
+          "attributes": {
+            "build_timeout_sec": 300,
+            "code_hash": "aaefd6de16697af6ac7331c7e1795a5446c71e351e6cacc3f4b490b683feb0cb",
+            "code_path": "./dist/notes.zip",
+            "entrypoint": "handler.handle",
+            "env_vars": {
+              "PG_DSN": "postgres://sless:sless-pg-password@postgres.sless.svc.cluster.local:5432/sless?sslmode=disable"
+            },
+            "image_ref": "naeel/sless-default-notes:80b15a8b73f5",
+            "memory_mb": 128,
+            "name": "notes",
+            "namespace": "default",
+            "phase": "Ready",
+            "runtime": "python3.11",
+            "timeout_sec": 30
+          },
+          "sensitive_attributes": [
+            [
+              {
+                "type": "get_attr",
+                "value": "env_vars"
+              },
+              {
+                "type": "index",
+                "value": {
+                  "value": "PG_DSN",
+                  "type": "string"
+                }
+              }
+            ]
+          ],
+          "identity_schema_version": 0,
+          "dependencies": [
+            "data.archive_file.notes"
+          ]
+        }
+      ]
+    },
+    {
+      "mode": "managed",
+      "type": "sless_function",
+      "name": "notes_list",
+      "provider": "provider[\"terra.k8c.ru/naeel/sless\"]",
+      "instances": [
+        {
+          "schema_version": 0,
+          "attributes": {
+            "build_timeout_sec": 300,
+            "code_hash": "4091f7c79ca8c9c5663c812eb08f25ef5257af217bf2b412add670a4737b9d7f",
+            "code_path": "./dist/notes-list.zip",
+            "entrypoint": "handler.handle",
+            "env_vars": {
+              "PG_DSN": "postgres://sless:sless-pg-password@postgres.sless.svc.cluster.local:5432/sless?sslmode=disable"
+            },
+            "image_ref": "naeel/sless-default-notes-list:07f2d5ae5ee4",
+            "memory_mb": 128,
+            "name": "notes-list",
+            "namespace": "default",
+            "phase": "Ready",
+            "runtime": "python3.11",
+            "timeout_sec": 30
+          },
+          "sensitive_attributes": [
+            [
+              {
+                "type": "get_attr",
+                "value": "env_vars"
+              },
+              {
+                "type": "index",
+                "value": {
+                  "value": "PG_DSN",
+                  "type": "string"
+                }
+              }
+            ]
+          ],
+          "identity_schema_version": 0,
+          "dependencies": [
+            "data.archive_file.notes_list"
+          ]
+        }
+      ]
+    },
+    {
+      "mode": "managed",
+      "type": "sless_function",
+      "name": "sql_runner",
+      "provider": "provider[\"terra.k8c.ru/naeel/sless\"]",
+      "instances": [
+        {
+          "schema_version": 0,
+          "attributes": {
+            "build_timeout_sec": 300,
+            "code_hash": "fcde93e59e6fd7f3db426482da7667d5d402aaaaaf56f79a7a60bb1722ec603a",
+            "code_path": "./dist/sql-runner.zip",
+            "entrypoint": "handler.handle",
+            "env_vars": {
+              "PG_DSN": "postgres://sless:sless-pg-password@postgres.sless.svc.cluster.local:5432/sless?sslmode=disable"
+            },
+            "image_ref": "naeel/sless-default-sql-runner:22bce581a299",
+            "memory_mb": 128,
+            "name": "sql-runner",
+            "namespace": "default",
+            "phase": "Ready",
+            "runtime": "python3.11",
+            "timeout_sec": 30
+          },
+          "sensitive_attributes": [
+            [
+              {
+                "type": "get_attr",
+                "value": "env_vars"
+              },
+              {
+                "type": "index",
+                "value": {
+                  "value": "PG_DSN",
+                  "type": "string"
+                }
+              }
+            ]
+          ],
+          "identity_schema_version": 0,
+          "dependencies": [
+            "data.archive_file.sql_runner"
+          ]
+        }
+      ]
+    },
+    {
+      "mode": "managed",
+      "type": "sless_job",
+      "name": "create_index",
+      "provider": "provider[\"terra.k8c.ru/naeel/sless\"]",
+      "instances": [
+        {
+          "schema_version": 0,
+          "attributes": {
+            "completion_time": "2026-03-09T05:44:59Z",
+            "event_json": "{\"statements\":[\"CREATE INDEX IF NOT EXISTS notes_created_idx ON notes(created_at DESC)\"]}",
+            "function": "sql-runner",
+            "message": "completed successfully",
+            "name": "notes-create-index",
+            "namespace": "default",
+            "phase": "Succeeded",
+            "run_id": 1,
+            "start_time": "2026-03-09T05:44:54Z",
+            "wait_timeout_sec": 60
+          },
+          "sensitive_attributes": [],
+          "identity_schema_version": 0,
+          "dependencies": [
+            "data.archive_file.sql_runner",
+            "sless_function.sql_runner",
+            "sless_job.create_table"
+          ]
+        }
+      ]
+    },
+    {
+      "mode": "managed",
+      "type": "sless_job",
+      "name": "create_table",
+      "provider": "provider[\"terra.k8c.ru/naeel/sless\"]",
+      "instances": [
+        {
+          "schema_version": 0,
+          "attributes": {
+            "completion_time": "2026-03-09T05:44:54Z",
+            "event_json": "{\"statements\":[\"CREATE TABLE IF NOT EXISTS notes (id serial PRIMARY KEY, title text NOT NULL, body text, created_at timestamp DEFAULT now())\"]}",
+            "function": "sql-runner",
+            "message": "completed successfully",
+            "name": "notes-create-table",
+            "namespace": "default",
+            "phase": "Succeeded",
+            "run_id": 1,
+            "start_time": "2026-03-09T05:44:39Z",
+            "wait_timeout_sec": 120
+          },
+          "sensitive_attributes": [],
+          "identity_schema_version": 0,
+          "dependencies": [
+            "data.archive_file.sql_runner",
+            "sless_function.sql_runner"
+          ]
+        }
+      ]
+    },
+    {
+      "mode": "managed",
+      "type": "sless_trigger",
+      "name": "notes_crud_http",
+      "provider": "provider[\"terra.k8c.ru/naeel/sless\"]",
+      "instances": [
+        {
+          "schema_version": 0,
+          "attributes": {
+            "active": true,
+            "enabled": true,
+            "function": "notes",
+            "name": "notes-http",
+            "namespace": "default",
+            "schedule": null,
+            "type": "http",
+            "url": "https://sless-api.kube5s.ru/fn/default/notes"
+          },
+          "sensitive_attributes": [],
+          "identity_schema_version": 0
+        }
+      ]
+    },
+    {
+      "mode": "managed",
+      "type": "sless_trigger",
+      "name": "notes_list_http",
+      "provider": "provider[\"terra.k8c.ru/naeel/sless\"]",
+      "instances": [
+        {
+          "schema_version": 0,
+          "attributes": {
+            "active": true,
+            "enabled": true,
+            "function": "notes-list",
+            "name": "notes-list-http",
+            "namespace": "default",
+            "schedule": null,
+            "type": "http",
+            "url": "https://sless-api.kube5s.ru/fn/default/notes-list"
+          },
+          "sensitive_attributes": [],
+          "identity_schema_version": 0,
+          "dependencies": [
+            "data.archive_file.notes_list",
+            "sless_function.notes_list"
+          ]
+        }
+      ]
+    }
+  ],
+  "check_results": null
+}
diff --git a/notes-python/terraform.tfstate.1773036504.backup b/notes-python/terraform.tfstate.1773036504.backup
new file mode 100644
index 0000000..13a4818
--- /dev/null
+++ b/notes-python/terraform.tfstate.1773036504.backup
@@ -0,0 +1,360 @@
+{
+  "version": 4,
+  "terraform_version": "1.12.2",
+  "serial": 18,
+  "lineage": "46b43916-6d6b-060c-ad36-6176e18b5f7b",
+  "outputs": {
+    "notes_list_url": {
+      "value": "https://sless-api.kube5s.ru/fn/default/notes-list",
+      "type": "string"
+    },
+    "notes_url": {
+      "value": "https://sless-api.kube5s.ru/fn/default/notes",
+      "type": "string"
+    }
+  },
+  "resources": [
+    {
+      "mode": "data",
+      "type": "archive_file",
+      "name": "notes",
+      "provider": "provider[\"registry.terraform.io/hashicorp/archive\"]",
+      "instances": [
+        {
+          "schema_version": 0,
+          "attributes": {
+            "exclude_symlink_directories": null,
+            "excludes": null,
+            "id": "d1fed6f90a4b4fde556aa2cd18e6ffaa9877c377",
+            "output_base64sha256": "HMlgBvSu0gccGVilru2ybzC7v31uzG1Zy96bK4p+C1E=",
+            "output_base64sha512": "GoV68HbQgbVaBtR4v1kLUhh+kMpJRIoBz30SrgYlVGz13SzV1wZ/lPvedqYvhmirG0fQf63wHYThOmvOR7lvgQ==",
+            "output_file_mode": null,
+            "output_md5": "cf96673e4f09c58d2e49c1664cdee1c2",
+            "output_path": "./dist/notes.zip",
+            "output_sha": "d1fed6f90a4b4fde556aa2cd18e6ffaa9877c377",
+            "output_sha256": "1cc96006f4aed2071c1958a5aeedb26f30bbbf7d6ecc6d59cbde9b2b8a7e0b51",
+            "output_sha512": "1a857af076d081b55a06d478bf590b52187e90ca49448a01cf7d12ae0625546cf5dd2cd5d7067f94fbde76a62f8668ab1b47d07fadf01d84e13a6bce47b96f81",
+            "output_size": 1226,
+            "source": [],
+            "source_content": null,
+            "source_content_filename": null,
+            "source_dir": "./code/notes",
+            "source_file": null,
+            "type": "zip"
+          },
+          "sensitive_attributes": [],
+          "identity_schema_version": 0
+        }
+      ]
+    },
+    {
+      "mode": "data",
+      "type": "archive_file",
+      "name": "notes_list",
+      "provider": "provider[\"registry.terraform.io/hashicorp/archive\"]",
+      "instances": [
+        {
+          "schema_version": 0,
+          "attributes": {
+            "exclude_symlink_directories": null,
+            "excludes": null,
+            "id": "b5730a0d98ae778f80c27881147e14d060151fce",
+            "output_base64sha256": "1pbtfCE8qjpAP5Ddz9c9afhOUXq3aq56ordi5t4vX00=",
+            "output_base64sha512": "nTUnbRKT4d5g5g3HANTGxZi5FmUIaM3C660XzZmGQLJIQ+WNYNLJ/no/H30KzafwE1mJf2qkdcZ8cT3xZdciNg==",
+            "output_file_mode": null,
+            "output_md5": "090088f39e1ef9d8d7d152944441edb7",
+            "output_path": "./dist/notes-list.zip",
+            "output_sha": "b5730a0d98ae778f80c27881147e14d060151fce",
+            "output_sha256": "d696ed7c213caa3a403f90ddcfd73d69f84e517ab76aae7aa2b762e6de2f5f4d",
+            "output_sha512": "9d35276d1293e1de60e60dc700d4c6c598b916650868cdc2ebad17cd998640b24843e58d60d2c9fe7a3f1f7d0acda7f01359897f6aa475c67c713df165d72236",
+            "output_size": 746,
+            "source": [],
+            "source_content": null,
+            "source_content_filename": null,
+            "source_dir": "./code/notes-list",
+            "source_file": null,
+            "type": "zip"
+          },
+          "sensitive_attributes": [],
+          "identity_schema_version": 0
+        }
+      ]
+    },
+    {
+      "mode": "data",
+      "type": "archive_file",
+      "name": "sql_runner",
+      "provider": "provider[\"registry.terraform.io/hashicorp/archive\"]",
+      "instances": [
+        {
+          "schema_version": 0,
+          "attributes": {
+            "exclude_symlink_directories": null,
+            "excludes": null,
+            "id": "241f12b31b5d970c697341292954b220e44f8d2a",
+            "output_base64sha256": "w/IUipIki9V1lf33x06/gHq+KWVdfJO9Ni98DkhC+Xw=",
+            "output_base64sha512": "aLpBXApQ5Nltm6ODUqQc6VZQCoxgn68mHlcrOF8bFrdem8psnz7dujkJE5PYvB5VDNKmdsViDAKPNTwHxut4XA==",
+            "output_file_mode": null,
+            "output_md5": "1fe2ab7afe4730b1141146363d69bd23",
+            "output_path": "./dist/sql-runner.zip",
+            "output_sha": "241f12b31b5d970c697341292954b220e44f8d2a",
+            "output_sha256": "c3f2148a92248bd57595fdf7c74ebf807abe29655d7c93bd362f7c0e4842f97c",
+            "output_sha512": "68ba415c0a50e4d96d9ba38352a41ce956500a8c609faf261e572b385f1b16b75e9bca6c9f3eddba39091393d8bc1e550cd2a676c5620c028f353c07c6eb785c",
+            "output_size": 796,
+            "source": [],
+            "source_content": null,
+            "source_content_filename": null,
+            "source_dir": "./code/sql-runner",
+            "source_file": null,
+            "type": "zip"
+          },
+          "sensitive_attributes": [],
+          "identity_schema_version": 0
+        }
+      ]
+    },
+    {
+      "mode": "managed",
+      "type": "sless_function",
+      "name": "notes_crud",
+      "provider": "provider[\"terra.k8c.ru/naeel/sless\"]",
+      "instances": [
+        {
+          "schema_version": 0,
+          "attributes": {
+            "build_timeout_sec": 300,
+            "code_hash": "aaefd6de16697af6ac7331c7e1795a5446c71e351e6cacc3f4b490b683feb0cb",
+            "code_path": "./dist/notes.zip",
+            "entrypoint": "handler.handle",
+            "env_vars": {
+              "PG_DSN": "postgres://sless:sless-pg-password@postgres.sless.svc.cluster.local:5432/sless?sslmode=disable"
+            },
+            "image_ref": "naeel/sless-default-notes:80b15a8b73f5",
+            "memory_mb": 128,
+            "name": "notes",
+            "namespace": "default",
+            "phase": "Ready",
+            "runtime": "python3.11",
+            "timeout_sec": 30
+          },
+          "sensitive_attributes": [
+            [
+              {
+                "type": "get_attr",
+                "value": "env_vars"
+              },
+              {
+                "type": "index",
+                "value": {
+                  "value": "PG_DSN",
+                  "type": "string"
+                }
+              }
+            ]
+          ],
+          "identity_schema_version": 0,
+          "dependencies": [
+            "data.archive_file.notes"
+          ]
+        }
+      ]
+    },
+    {
+      "mode": "managed",
+      "type": "sless_function",
+      "name": "notes_list",
+      "provider": "provider[\"terra.k8c.ru/naeel/sless\"]",
+      "instances": [
+        {
+          "schema_version": 0,
+          "attributes": {
+            "build_timeout_sec": 300,
+            "code_hash": "4091f7c79ca8c9c5663c812eb08f25ef5257af217bf2b412add670a4737b9d7f",
+            "code_path": "./dist/notes-list.zip",
+            "entrypoint": "handler.handle",
+            "env_vars": {
+              "PG_DSN": "postgres://sless:sless-pg-password@postgres.sless.svc.cluster.local:5432/sless?sslmode=disable"
+            },
+            "image_ref": "naeel/sless-default-notes-list:07f2d5ae5ee4",
+            "memory_mb": 128,
+            "name": "notes-list",
+            "namespace": "default",
+            "phase": "Ready",
+            "runtime": "python3.11",
+            "timeout_sec": 30
+          },
+          "sensitive_attributes": [
+            [
+              {
+                "type": "get_attr",
+                "value": "env_vars"
+              },
+              {
+                "type": "index",
+                "value": {
+                  "value": "PG_DSN",
+                  "type": "string"
+                }
+              }
+            ]
+          ],
+          "identity_schema_version": 0,
+          "dependencies": [
+            "data.archive_file.notes_list"
+          ]
+        }
+      ]
+    },
+    {
+      "mode": "managed",
+      "type": "sless_function",
+      "name": "sql_runner",
+      "provider": "provider[\"terra.k8c.ru/naeel/sless\"]",
+      "instances": [
+        {
+          "schema_version": 0,
+          "attributes": {
+            "build_timeout_sec": 300,
+            "code_hash": "fcde93e59e6fd7f3db426482da7667d5d402aaaaaf56f79a7a60bb1722ec603a",
+            "code_path": "./dist/sql-runner.zip",
+            "entrypoint": "handler.handle",
+            "env_vars": {
+              "PG_DSN": "postgres://sless:sless-pg-password@postgres.sless.svc.cluster.local:5432/sless?sslmode=disable"
+            },
+            "image_ref": "naeel/sless-default-sql-runner:22bce581a299",
+            "memory_mb": 128,
+            "name": "sql-runner",
+            "namespace": "default",
+            "phase": "Ready",
+            "runtime": "python3.11",
+            "timeout_sec": 30
+          },
+          "sensitive_attributes": [
+            [
+              {
+                "type": "get_attr",
+                "value": "env_vars"
+              },
+              {
+                "type": "index",
+                "value": {
+                  "value": "PG_DSN",
+                  "type": "string"
+                }
+              }
+            ]
+          ],
+          "identity_schema_version": 0,
+          "dependencies": [
+            "data.archive_file.sql_runner"
+          ]
+        }
+      ]
+    },
+    {
+      "mode": "managed",
+      "type": "sless_job",
+      "name": "create_index",
+      "provider": "provider[\"terra.k8c.ru/naeel/sless\"]",
+      "instances": [
+        {
+          "schema_version": 0,
+          "attributes": {
+            "completion_time": "2026-03-09T05:44:59Z",
+            "event_json": "{\"statements\":[\"CREATE INDEX IF NOT EXISTS notes_created_idx ON notes(created_at DESC)\"]}",
+            "function": "sql-runner",
+            "message": "completed successfully",
+            "name": "notes-create-index",
+            "namespace": "default",
+            "phase": "Succeeded",
+            "run_id": 1,
+            "start_time": "2026-03-09T05:44:54Z",
+            "wait_timeout_sec": 60
+          },
+          "sensitive_attributes": [],
+          "identity_schema_version": 0
+        }
+      ]
+    },
+    {
+      "mode": "managed",
+      "type": "sless_job",
+      "name": "notes_table_init",
+      "provider": "provider[\"terra.k8c.ru/naeel/sless\"]",
+      "instances": [
+        {
+          "schema_version": 0,
+          "attributes": {
+            "completion_time": "2026-03-09T05:44:54Z",
+            "event_json": "{\"statements\":[\"CREATE TABLE IF NOT EXISTS notes (id serial PRIMARY KEY, title text NOT NULL, body text, created_at timestamp DEFAULT now())\"]}",
+            "function": "sql-runner",
+            "message": "completed successfully",
+            "name": "notes-create-table",
+            "namespace": "default",
+            "phase": "Succeeded",
+            "run_id": 1,
+            "start_time": "2026-03-09T05:44:39Z",
+            "wait_timeout_sec": 120
+          },
+          "sensitive_attributes": [],
+          "identity_schema_version": 0,
+          "dependencies": [
+            "data.archive_file.sql_runner",
+            "sless_function.sql_runner"
+          ]
+        }
+      ]
+    },
+    {
+      "mode": "managed",
+      "type": "sless_trigger",
+      "name": "notes_crud_http",
+      "provider": "provider[\"terra.k8c.ru/naeel/sless\"]",
+      "instances": [
+        {
+          "schema_version": 0,
+          "attributes": {
+            "active": true,
+            "enabled": true,
+            "function": "notes",
+            "name": "notes-http",
+            "namespace": "default",
+            "schedule": null,
+            "type": "http",
+            "url": "https://sless-api.kube5s.ru/fn/default/notes"
+          },
+          "sensitive_attributes": [],
+          "identity_schema_version": 0
+        }
+      ]
+    },
+    {
+      "mode": "managed",
+      "type": "sless_trigger",
+      "name": "notes_list_http",
+      "provider": "provider[\"terra.k8c.ru/naeel/sless\"]",
+      "instances": [
+        {
+          "schema_version": 0,
+          "attributes": {
+            "active": true,
+            "enabled": true,
+            "function": "notes-list",
+            "name": "notes-list-http",
+            "namespace": "default",
+            "schedule": null,
+            "type": "http",
+            "url": "https://sless-api.kube5s.ru/fn/default/notes-list"
+          },
+          "sensitive_attributes": [],
+          "identity_schema_version": 0,
+          "dependencies": [
+            "data.archive_file.notes_list",
+            "sless_function.notes_list"
+          ]
+        }
+      ]
+    }
+  ],
+  "check_results": null
+}
diff --git a/notes-python/variables.tf b/notes-python/variables.tf
index d0ffeb4..d4e0af0 100644
--- a/notes-python/variables.tf
+++ b/notes-python/variables.tf
@@ -1,6 +1,12 @@
-# 2025-06-05
+# 2026-03-09
 # variables.tf — входные переменные для notes-python примера.
+#
+# PG_DSN передаётся во все функции через env_vars.
+# Хранится как sensitive чтобы не светился в terraform output и логах.
+# В продакшне — не хардкоди DSN здесь, используй TF_VAR_pg_dsn или secrets manager.
 
+# DSN для подключения к PostgreSQL внутри кластера.
+# Формат: postgres://user:password@host:port/dbname?sslmode=...
 variable "pg_dsn" {
   description = "PostgreSQL DSN для подключения к БД внутри кластера"
   type        = string