lex-exec 0.1.5 → 0.1.7

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 9a079df771b24d55acbeee57d43f988f69d03959dd2b50781d1d968517e0efbf
-  data.tar.gz: 8044b380d16e17f0ed5931c40001fcafe605399e1a5bfe85c0783e7570f15730
+  metadata.gz: 7d8694405797d859fb276bf9ffb3fdd2b9ae66ed3f3c1cc35a1b6fb5b43541cd
+  data.tar.gz: 2b46aac5a8817673d6ac641d04b4b880c2531f5c79a1b076ef77b83053d1a008
 SHA512:
-  metadata.gz: 9a3d5a024a74c3500fd417c9e601b81881bff68ac5facb79afd3f012893145c2fd8e24c744ee732c3dff9696fccff770e46c3a32bf9b780379640fabcbf17a09
-  data.tar.gz: 5ac1a85eaee2d7376e7060126e8a660ebfe63b8753b39ccee03c310993befda664b909408cb49ab86bbc63f1c6a1d2cf9abe8fcc27b92c24cbbcd286df03ef0d
+  metadata.gz: 9cd2bd04a54f2c430d9d51cf11b6d356fdcce17664fcddd83d1e2d5a4a63e1f89c2b25aa89855f406ab4b3f69c4b3611d98c47b1ffbf8d6eacce214efeb7b2a5
+  data.tar.gz: 4b2fba88d6554fbdf73ab0206f6ada2cf730094d366ee96bfcef61c96240dd0d9e1c5deeda3c4729b99d42a28f0cc14126673a5c001ccda37d1874254137dce6

data/.github/workflows/ci.yml

@@ -10,8 +10,8 @@ jobs:
   ci:
     uses: LegionIO/.github/.github/workflows/ci.yml@main
 
-  lint:
-    uses: LegionIO/.github/.github/workflows/lint-patterns.yml@main
+  excluded-files:
+    uses: LegionIO/.github/.github/workflows/excluded-files.yml@main
 
   security:
     uses: LegionIO/.github/.github/workflows/security-scan.yml@main
@@ -27,7 +27,7 @@ jobs:
     uses: LegionIO/.github/.github/workflows/stale.yml@main
 
   release:
-    needs: [ci, lint]
+    needs: [ci, excluded-files]
     if: github.event_name == 'push' && github.ref == 'refs/heads/main'
     uses: LegionIO/.github/.github/workflows/release.yml@main
     secrets:

data/.rubocop.yml

@@ -1,56 +1,2 @@
-AllCops:
-  TargetRubyVersion: 3.4
-  NewCops: enable
-  SuggestExtensions: false
-
-Layout/LineLength:
-  Max: 160
-
-Layout/SpaceAroundEqualsInParameterDefault:
-  EnforcedStyle: space
-
-Layout/HashAlignment:
-  EnforcedHashRocketStyle: table
-  EnforcedColonStyle: table
-
-Metrics/MethodLength:
-  Max: 50
-
-Metrics/ClassLength:
-  Max: 1500
-
-Metrics/ModuleLength:
-  Max: 1500
-
-Metrics/BlockLength:
-  Max: 40
-  Exclude:
-    - 'spec/**/*'
-
-Metrics/AbcSize:
-  Max: 60
-
-Metrics/CyclomaticComplexity:
-  Max: 15
-
-Metrics/PerceivedComplexity:
-  Max: 17
-
-Style/Documentation:
-  Enabled: false
-
-Style/SymbolArray:
-  Enabled: true
-
-Style/FrozenStringLiteralComment:
-  Enabled: true
-  EnforcedStyle: always
-
-Naming/FileName:
-  Enabled: false
-
-Naming/PredicateMethod:
-  Enabled: false
-
-Naming/PredicatePrefix:
-  Enabled: false
+inherit_gem:
+  rubocop-legion: config/lex.yml

data/CHANGELOG.md

@@ -1,5 +1,17 @@
 # Changelog
 
+## [0.1.7] - 2026-04-09
+
+### Added
+- Python venv integration: route bare `python3`/`pip3` commands to Legion-managed venv (`~/.legionio/python`)
+- `python3`, `python`, `pip3`, `pip` added to sandbox allowlist
+- Runtime venv resolution via `Constants.venv_python`/`.venv_pip`/`.venv_exists?` (no longer frozen at load time)
+
+## [0.1.6] - 2026-03-30
+
+### Changed
+- update to rubocop-legion 0.1.7, resolve all offenses
+
 ## [0.1.5] - 2026-03-29
 
 ### Changed

data/Gemfile

@@ -8,6 +8,7 @@ group :test do
   gem 'rspec', '~> 3.13'
   gem 'rspec_junit_formatter'
   gem 'rubocop', '~> 1.75'
+  gem 'rubocop-legion', '~> 0.1'
   gem 'rubocop-rspec'
   gem 'simplecov'
 end

data/lib/legion/extensions/exec/helpers/constants.rb

@@ -5,14 +5,24 @@ module Legion
     module Exec
       module Helpers
         module Constants
-          DEFAULT_TIMEOUT   = 120_000 # 120 seconds in ms
-          MAX_TIMEOUT       = 600_000 # 10 minutes in ms
-          MAX_OUTPUT_BYTES  = 1_048_576 # 1 MB
+          DEFAULT_TIMEOUT  = 120_000 # 120 seconds in ms
+          MAX_TIMEOUT      = 600_000 # 10 minutes in ms
+          MAX_OUTPUT_BYTES = 1_048_576 # 1 MB
 
-          ALLOWED_COMMANDS = %w[
+          LEGION_PYTHON_VENV = File.expand_path('~/.legionio/python').freeze
+
+          BASE_ALLOWED_COMMANDS = %w[
             bundle git gh ruby rspec rubocop ls cat mkdir cp mv rm touch echo wc head tail
+            python3 pip3
+          ].freeze
+
+          VENV_ALLOWED_COMMANDS = [
+            "#{LEGION_PYTHON_VENV}/bin/python3",
+            "#{LEGION_PYTHON_VENV}/bin/pip3"
           ].freeze
 
+          ALLOWED_COMMANDS = (BASE_ALLOWED_COMMANDS + VENV_ALLOWED_COMMANDS).freeze
+
           BLOCKED_PATTERNS = [
             %r{rm\s+-rf\s+/},
             /rm\s+-rf\s+~/,
@@ -25,6 +35,20 @@ module Legion
           ].freeze
 
           AUDIT_FIELDS = %i[command cwd exit_code duration_ms executed_at truncated].freeze
+
+          module_function
+
+          def venv_python
+            "#{LEGION_PYTHON_VENV}/bin/python3"
+          end
+
+          def venv_pip
+            "#{LEGION_PYTHON_VENV}/bin/pip3"
+          end
+
+          def venv_exists?
+            File.exist?("#{LEGION_PYTHON_VENV}/pyvenv.cfg")
+          end
         end
       end
     end

data/lib/legion/extensions/exec/runners/bundler.rb

@@ -4,7 +4,7 @@ module Legion
   module Extensions
     module Exec
       module Runners
-        module Bundler
+        module Bundler # rubocop:disable Legion/Extension/RunnerIncludeHelpers
           module_function
 
           def install(path:, **)
@@ -17,7 +17,7 @@ module Legion
               cwd:     path,
               timeout: 300_000
             )
-            return result unless result[:stdout] || result[:stderr]
+            return result unless result[:stdout] || result[:stderr] # rubocop:disable Legion/Extension/RunnerReturnHash
 
             raw     = result[:stdout] || result[:stderr] || ''
             parsed  = Helpers::ResultParser.parse_rspec(raw)
@@ -27,7 +27,7 @@ module Legion
           def exec_rubocop(path:, autocorrect: false, **)
             cmd    = autocorrect ? 'bundle exec rubocop -A' : 'bundle exec rubocop'
             result = Runners::Shell.execute(command: cmd, cwd: path, timeout: 120_000)
-            return result unless result[:stdout]
+            return result unless result[:stdout] # rubocop:disable Legion/Extension/RunnerReturnHash
 
             parsed = Helpers::ResultParser.parse_rubocop(result[:stdout] || '')
             result.merge(parsed: parsed)

data/lib/legion/extensions/exec/runners/git.rb

@@ -4,7 +4,7 @@ module Legion
   module Extensions
     module Exec
       module Runners
-        module Git
+        module Git # rubocop:disable Legion/Extension/RunnerIncludeHelpers
           module_function
 
           def init(path:, **)
@@ -28,7 +28,7 @@ module Legion
 
           def status(path:, **)
             result = Runners::Shell.execute(command: 'git status --porcelain', cwd: path)
-            return result unless result[:success]
+            return result unless result[:success] # rubocop:disable Legion/Extension/RunnerReturnHash
 
             parsed = Helpers::ResultParser.parse_git_status(result[:stdout] || '')
             result.merge(parsed: parsed)

data/lib/legion/extensions/exec/runners/shell.rb

@@ -14,6 +14,11 @@ module Legion
             check = default_sandbox.allowed?(command)
             return { success: false, error: :blocked, reason: check[:reason] } unless check[:allowed]
 
+            # Rewrite bare `python3` / `python` / `pip3` / `pip` invocations to use
+            # the Legion-managed venv interpreter so scripts always run inside the
+            # correct environment with pre-installed packages (python-pptx, etc.).
+            command = rewrite_python_command(command)
+
             start_time = ::Process.clock_gettime(::Process::CLOCK_MONOTONIC)
             timeout_secs = [timeout, Helpers::Constants::MAX_TIMEOUT].min / 1000.0
 
@@ -21,7 +26,7 @@ module Legion
               stdout, stderr, status = Timeout.timeout(timeout_secs) do
                 Open3.capture3(env, command, chdir: cwd)
               end
-            rescue Timeout::Error
+            rescue Timeout::Error => _e
               return { success: false, error: :timeout, timeout_ms: timeout }
             rescue ArgumentError => e
               return { success: false, error: e.message }
@@ -41,7 +46,7 @@ module Legion
             audit_log.record(command: command, cwd: cwd, exit_code: exit_code,
                              duration_ms: duration_ms, truncated: truncated)
 
-            Legion::Logging.debug("[lex-exec] exit=#{exit_code} duration=#{duration_ms}ms cmd=#{command}")
+            Legion::Logging.debug("[lex-exec] exit=#{exit_code} duration=#{duration_ms}ms cmd=#{command}") # rubocop:disable Legion/HelperMigration/DirectLogging
 
             {
               success:     exit_code.zero?,
@@ -59,6 +64,20 @@ module Legion
 
           private
 
+          # Replace bare `python3`, `python`, `pip3`, `pip` at the start of a command
+          # with the absolute venv paths — but only when the venv actually exists.
+          # Full absolute paths that already point into the venv are left unchanged.
+          def rewrite_python_command(command)
+            return command unless Helpers::Constants.venv_exists? # rubocop:disable Legion/Extension/RunnerReturnHash
+
+            python = Helpers::Constants.venv_python
+            pip    = Helpers::Constants.venv_pip
+
+            command
+              .sub(/\Apython3(\s|\z)/, "#{python}\\1")
+              .sub(/\Apip3(\s|\z)/,    "#{pip}\\1")
+          end
+
           def default_sandbox
             @default_sandbox ||= Helpers::Sandbox.new
           end

data/lib/legion/extensions/exec/version.rb

@@ -3,7 +3,7 @@
 module Legion
   module Extensions
     module Exec
-      VERSION = '0.1.5'
+      VERSION = '0.1.7'
     end
   end
 end

data/lib/legion/extensions/exec.rb

@@ -16,7 +16,7 @@ require_relative 'exec/client'
 module Legion
   module Extensions
     module Exec
-      extend Legion::Extensions::Core if Legion::Extensions.const_defined? :Core
+      extend Legion::Extensions::Core if Legion::Extensions.const_defined? :Core, false
     end
   end
 end

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: lex-exec
 version: !ruby/object:Gem::Version
-  version: 0.1.5
+  version: 0.1.7
 platform: ruby
 authors:
 - Esity