@gen3/workspaces 0.12.64 → 0.12.65

package/LICENSE

@@ -0,0 +1,201 @@
+                                 Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "[]"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright [yyyy] [name of copyright owner]
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.

package/dist/jupyterlite-builds/free-private/jupyter_lite_config.json

@@ -3,24 +3,10 @@
     "apps": ["lab"],
     "output_dir": "site"
   },
-  "LiteServerConfig": {
-    "contents": ["./notebooks"],
-    "settings_overrides": {
-      "@jupyterlite/piplite-extension:plugin": {
-        "pipliteDeps": [
-          "numpy",
-          "pandas",
-          "scipy",
-          "matplotlib",
-          "seaborn",
-          "biopython",
-          "scanpy",
-          "anndata",
-          "pysam",
-          "boto3",
-          "s3fs"
-        ]
-      }
-    }
+  "PyodideAddon": {
+    "pyodide_url": "https://github.com/pyodide/pyodide/releases/download/314.0.5/pyodide-314.0.5.tar.bz2"
+  },
+  "PyodideLockAddon": {
+    "enabled": false
   }
 }

package/dist/jupyterlite-builds/free-private/requirements.txt

@@ -1,3 +1,3 @@
 jupyterlite-core>=0.8.1
 jupyterlab>=4.6.0
-jupyterlite-pyodide-kernel
+jupyterlite-pyodide-kernel[lock]

package/dist/jupyterlite-builds/scripts/build-gen3sdk-lite.sh

@@ -0,0 +1,428 @@
+#!/usr/bin/env bash
+# =============================================================================
+# build-gen3sdk-lite.sh — Build Gen3 SDK and dependencies as pure-Python wheels
+#
+# All packages in REPOS are pure Python (fastavro has Python fallbacks for its
+# C extensions). They are therefore built with `pip wheel` and retagged to
+# py3-none-any, which loads under any Pyodide/Python version.
+#
+# If a package with genuine C extensions is added to REPOS, the pure-Python
+# assertion below will fail the build rather than silently shipping a wheel
+# that cannot load in the browser.
+#
+# Prerequisites:
+#   - uv  (https://docs.astral.sh/uv/getting-started/installation/)
+#   - git
+#
+# Usage:
+#   ./build-gen3sdk-lite.sh            # full build (setup + all packages)
+#   ./build-gen3sdk-lite.sh --setup    # environment setup only
+#   ./build-gen3sdk-lite.sh --build    # build wheels only (assumes setup done)
+#   ./build-gen3sdk-lite.sh --clean    # remove build artifacts
+# =============================================================================
+set -euo pipefail
+
+SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
+
+# ── Parse flags (strip before positional args are consumed) ──────────────────
+NO_EXTRAS=false
+POSITIONAL_ARGS=()
+for _arg in "$@"; do
+  case "$_arg" in
+    --no-extras) NO_EXTRAS=true ;;
+    *)           POSITIONAL_ARGS+=("$_arg") ;;
+  esac
+done
+set -- "${POSITIONAL_ARGS[@]+"${POSITIONAL_ARGS[@]}"}"
+
+# ── Path constants (always defined, no external dependency) ──────────────────
+ROOT_DIR="$(cd "${SCRIPT_DIR}/.." && pwd)"
+SRC_DIR="$ROOT_DIR/free-private"
+
+# Resolves a possibly-relative path against INIT_CWD (or $PWD) rather than
+# whatever directory happens to be current when this runs. See setup-env.sh
+# for why: it's what keeps a relative build_dir out of dist/ or node_modules.
+_resolve_against_init_cwd() {
+  local path="$1"
+  local base="${INIT_CWD:-$(pwd)}"
+  case "$path" in
+    /*) printf '%s' "$path" ;;
+    *)  printf '%s/%s' "$base" "$path" ;;
+  esac
+}
+
+BUILD_DIR="$(_resolve_against_init_cwd "${2:-builds}")"
+mkdir -p "$BUILD_DIR"
+BUILD_DIR="$(cd "$BUILD_DIR" && pwd)"
+
+VENV_DIR="$BUILD_DIR/.venv"
+WORK_DIR="$BUILD_DIR/work"
+SOURCES_DIR="$BUILD_DIR/sources"
+OUTPUT_DIR="$BUILD_DIR/pypi"
+LOG_DIR="$BUILD_DIR/logs"
+
+export BUILD_DIR   # setup-env.sh reads this
+
+# Browser Python version, used for `pip download` of pure-Python extras.
+# Must match jupyterlite_pyodide_kernel.constants.PYODIDE_PYTHON_VERSION.
+# Check with:
+#   python -c "from jupyterlite_pyodide_kernel.constants import \
+#     PYODIDE_PYTHON_VERSION; print(PYODIDE_PYTHON_VERSION)"
+BROWSER_PYTHON_TAG="${BROWSER_PYTHON_TAG:-314}"
+
+# ── Colours / helpers (available immediately, before setup-env.sh) ───────────
+RED='\033[0;31m'
+GREEN='\033[0;32m'
+YELLOW='\033[1;33m'
+CYAN='\033[0;36m'
+NC='\033[0m'
+
+info()    { echo -e "${CYAN}[INFO]${NC}  $*"; }
+success() { echo -e "${GREEN}[OK]${NC}    $*"; }
+warn()    { echo -e "${YELLOW}[WARN]${NC}  $*"; }
+fail()    { echo -e "${RED}[FAIL]${NC}  $*"; exit 1; }
+
+elapsed() {
+  local t=$1
+  printf '%dm%ds' $((t/60)) $((t%60))
+}
+
+# Portable in-place sed. GNU sed reads `-i ''` as the script and the following
+# expression as a filename; BSD/macOS sed requires the empty suffix. Detect once.
+if sed --version >/dev/null 2>&1; then
+  sedi() { sed -i "$@"; }          # GNU
+else
+  sedi() { sed -i '' "$@"; }       # BSD / macOS
+fi
+
+# Apply a sed substitution and fail loudly if it changed nothing. `sed` exits 0
+# on a non-match, which previously let stale patterns pass as "Patched …".
+patch_file() {
+  local desc="$1" expr="$2" path="$3"
+  [[ -f "$path" ]] || { warn "${desc}: file not found, skipping (${path})"; return 0; }
+  local before after
+  before="$(cat "$path")"
+  sedi "$expr" "$path"
+  after="$(cat "$path")"
+  if [[ "$before" == "$after" ]]; then
+    warn "${desc}: pattern did not match — upstream may have changed"
+    return 0
+  fi
+  info "${desc}"
+}
+
+# ── Repositories to build (order matters — independent packages first) ───────
+# Format: "name|git_url|subdir"  (subdir is optional)
+REPOS=(
+  "cdislogging|https://github.com/uc-cdis/cdislogging.git"
+  "python-json-logger|https://github.com/nhairs/python-json-logger.git"
+  "fastavro|https://github.com/fastavro/fastavro.git"
+  "drsclient|https://github.com/uc-cdis/drsclient.git"
+  "indexd|https://github.com/uc-cdis/indexd.git|indexclient"
+  "dictionaryutils|https://github.com/uc-cdis/dictionaryutils.git"
+  "pypfb|https://github.com/uc-cdis/pypfb.git"
+  "gen3sdk-python|https://github.com/uc-cdis/gen3sdk-python.git"
+  "gen3users|https://github.com/uc-cdis/gen3users.git"
+  "gen3dictionary|https://github.com/uc-cdis/datadictionary.git"
+)
+
+# ── Source shared environment (venv + Python + core tooling) ────────────────
+source_shared_env() {
+  # shellcheck disable=SC1091
+  source "${SCRIPT_DIR}/setup-env.sh"
+}
+
+# ── Environment setup ───────────────────────────────────────────────────────
+setup_environment() {
+  source_shared_env
+  mkdir -p "${WORK_DIR}" "${SOURCES_DIR}" "${OUTPUT_DIR}" "${LOG_DIR}"
+
+  # `wheel` provides `python -m wheel tags`, used to retag to py3-none-any.
+  info "Installing wheel …"
+  uv pip install wheel 2>&1 | tail -2
+  success "Build tooling ready"
+}
+
+# ── Clone / update sources ──────────────────────────────────────────────────
+clone_repos() {
+  info "Cloning / updating repositories …"
+  for entry in "${REPOS[@]}"; do
+    IFS='|' read -r name url _subdir <<< "${entry}"
+    local dest="${SOURCES_DIR}/${name}"
+    if [[ -d "${dest}/.git" ]]; then
+      # Sources are patched in place below, so a pull would conflict. Reset to
+      # a clean tree first, otherwise the pull fails silently through the pipe.
+      info "  ${name}: resetting and pulling latest …"
+      git -C "${dest}" checkout -- . 2>&1 | tail -1 || true
+      git -C "${dest}" pull --ff-only 2>&1 | tail -1
+    else
+      info "  ${name}: cloning …"
+      git clone "${url}" "${dest}" 2>&1 | tail -1
+    fi
+  done
+  success "All repositories ready"
+}
+
+# ── Source patches ──────────────────────────────────────────────────────────
+apply_patches() {
+  # gen3users: old poetry.masonry.api → poetry.core.masonry.api
+  patch_file "Patched gen3users: build-backend updated to poetry.core.masonry.api" \
+    's|build-backend = "poetry.masonry.api"|build-backend = "poetry.core.masonry.api"|' \
+    "${SOURCES_DIR}/gen3users/pyproject.toml"
+
+  # gen3sdk-python: relax indexclient pin so the locally built 6.3.0 satisfies it
+  patch_file "Patched gen3sdk-python: indexclient constraint relaxed to >=2.3.0" \
+    's/indexclient = "\^2\.3\.0"/indexclient = ">=2.3.0"/' \
+    "${SOURCES_DIR}/gen3sdk-python/pyproject.toml"
+
+  # dictionaryutils: relax the jsonschema pin.
+  #
+  # NOTE: upstream pins jsonschema<=4.23.0 deliberately — "limiting to a version
+  # where RefResolver is deprecated but still functioning". Relaxing it resolves
+  # jsonschema 4.26.0 in the browser, where RefResolver exists only as a
+  # module-level __getattr__ shim forwarding to validators._RefResolver. It
+  # imports and works today, but this is borrowed time. If dictionaryutils
+  # starts failing on import, this patch is the first thing to revert.
+  patch_file "Patched dictionaryutils: jsonschema constraint relaxed to >=4.0.0" \
+    's/jsonschema = "<=4\.23\.0"/jsonschema = ">=4.0.0"/' \
+    "${SOURCES_DIR}/dictionaryutils/pyproject.toml"
+
+
+
+  # fastavro: force setup.py to skip building the Cython/C extensions.
+  #
+  # FASTAVRO_USE_PYTHON only selects the pure-Python fallback at import time
+  # (fastavro/__init__.py) — setup.py itself always builds the _read/_write/
+  # etc. extensions unless the interpreter is PyPy, so `pip wheel` still
+  # invokes `cc`, which the build image doesn't have.yes Short-circuit the PyPy check instead
+  # so ext_modules stays empty and the wheel is genuinely pure Python.
+  patch_file "Patched fastavro: setup.py forced to skip C extensions" \
+    's/if not hasattr(sys, "pypy_version_info"):/if False:  # gen3-lite: force pure-Python build/' \
+    "${SOURCES_DIR}/fastavro/setup.py"
+}
+
+# ── Build wheels ────────────────────────────────────────────────────────────
+build_wheels() {
+  # shellcheck disable=SC1091
+  source "${VENV_DIR}/bin/activate"
+
+  local total=${#REPOS[@]}
+  local built=0
+  local failed=0
+  local failed_names=()
+
+  apply_patches
+
+  info "Building ${total} packages …"
+  echo ""
+
+  for entry in "${REPOS[@]}"; do
+    IFS='|' read -r name _url subdir <<< "${entry}"
+    local src="${SOURCES_DIR}/${name}"
+    local build_dir="${src}"
+    [[ -n "${subdir}" ]] && build_dir="${src}/${subdir}"
+    local logfile="${LOG_DIR}/${name}.log"
+    local start_ts
+    start_ts=$(date +%s)
+
+    local label="${name}"
+    [[ -n "${subdir}" ]] && label="${name}/${subdir}"
+    printf "  [%d/%d] %-25s " $((built + failed + 1)) "${total}" "${label}"
+
+    # Build as a normal wheel, then force the py3-none-any tag. `pip wheel` can
+    # emit a platform-specific tag on macOS even for pure Python; retagging
+    # makes the result portable and loadable by micropip under any Pyodide ABI.
+    local build_cmd='rm -rf dist && pip wheel . --no-deps -w dist/ \
+      && python -m wheel tags --python-tag py3 --abi-tag none --platform-tag any --remove dist/*.whl'
+
+    # fastavro ships Python fallbacks for every C extension; this env var
+    # selects them so no compiler is needed and the wheel stays pure Python.
+    [[ "${name}" == "fastavro" ]] && build_cmd="FASTAVRO_USE_PYTHON=1 ${build_cmd}"
+
+    if (cd "${build_dir}" && eval "${build_cmd}") > "${logfile}" 2>&1; then
+      local end_ts
+      end_ts=$(date +%s)
+      echo -e "${GREEN}OK${NC}  ($(elapsed $((end_ts - start_ts))))"
+      built=$((built + 1))
+    else
+      local end_ts
+      end_ts=$(date +%s)
+      echo -e "${RED}FAILED${NC}  ($(elapsed $((end_ts - start_ts)))) — see ${logfile}"
+      failed=$((failed + 1))
+      failed_names+=("${name}")
+    fi
+  done
+
+  echo ""
+
+  # ── Collect wheels ─────────────────────────────────────────────────────
+  info "Collecting .whl files into ${OUTPUT_DIR} …"
+  local count=0
+  for entry in "${REPOS[@]}"; do
+    IFS='|' read -r name _url subdir <<< "${entry}"
+    local src="${SOURCES_DIR}/${name}"
+    local build_dir="${src}"
+    [[ -n "${subdir}" ]] && build_dir="${src}/${subdir}"
+    if compgen -G "${build_dir}/dist/*.whl" > /dev/null 2>&1; then
+      cp "${build_dir}"/dist/*.whl "${OUTPUT_DIR}/"
+      count=$((count + $(ls -1 "${build_dir}"/dist/*.whl 2>/dev/null | wc -l)))
+    fi
+  done
+
+  download_extras
+
+  verify_pure_python
+
+  # ── Summary ────────────────────────────────────────────────────────────
+  echo ""
+  echo "========================================="
+  echo "  Build Summary"
+  echo "========================================="
+  echo "  Succeeded : ${built}"
+  echo "  Failed    : ${failed}"
+  echo "  Wheels    : ${count} built, $(ls -1 "${OUTPUT_DIR}"/*.whl 2>/dev/null | wc -l | tr -d ' ') total in ${OUTPUT_DIR}/"
+  if (( failed > 0 )); then
+    echo ""
+    echo "  Failed packages:"
+    for n in "${failed_names[@]}"; do
+      echo "    - ${n}  (log: ${LOG_DIR}/${n}.log)"
+    done
+  fi
+  echo "========================================="
+  echo ""
+
+  if (( failed > 0 )); then
+    warn "Some packages failed. Check the logs above."
+    return 1
+  fi
+
+  success "All wheels built and collected in ${OUTPUT_DIR}/"
+  echo ""
+  ls -lh "${OUTPUT_DIR}"/*.whl
+}
+
+# ── Pure-Python deps not present in the Pyodide distribution ────────────────
+# PyodideLockAddon is disabled (it cannot resolve a vendored local distribution
+# in jupyterlite-pyodide-kernel 0.8.5), so nothing resolves these for us. They
+# reach the browser through PipliteAddon, which indexes everything in
+# OUTPUT_DIR. Without them, micropip falls back to PyPI at runtime.
+download_extras() {
+  if [[ "${NO_EXTRAS}" == "true" ]]; then
+    info "Skipping pure-Python extras download (--no-extras)"
+    warn "  gen3's pure-Python deps will be fetched from PyPI in the browser"
+    return 0
+  fi
+
+  local deps=(
+    "aiofiles"
+    "backoff"
+    "dataclasses-json<=0.5.9"
+    "humanfriendly"
+    "importlib-metadata>=8,<9"
+    "marshmallow>=3.3.0,<4.0.0"
+    "marshmallow-enum"
+    "mypy-extensions"
+    "python-dateutil"
+    "typing-inspect"
+    "xmltodict>=0.13.0,<0.14.0"
+    "zipp"
+  )
+
+  info "Downloading pure-Python deps missing from the Pyodide distribution …"
+  local dep base
+  for dep in "${deps[@]}"; do
+    # Strip any version specifier to get the distribution name for the glob.
+    base="${dep%%[<>=!~]*}"
+    if compgen -G "${OUTPUT_DIR}/${base//-/_}-*.whl" > /dev/null 2>&1 || \
+       compgen -G "${OUTPUT_DIR}/${base}-*.whl" > /dev/null 2>&1; then
+      info "  ${base}: already present, skipping"
+      continue
+    fi
+    if pip download "${dep}" \
+        --no-deps \
+        --only-binary=:all: \
+        --python-version "${BROWSER_PYTHON_TAG}" \
+        --platform any \
+        -d "${OUTPUT_DIR}" \
+        --quiet 2>/dev/null; then
+      info "  ${base}: downloaded"
+    else
+      warn "  ${base}: download failed — will fall back to PyPI in the browser"
+    fi
+  done
+}
+
+# ── Verify every wheel is loadable in the browser ───────────────────────────
+verify_pure_python() {
+  info "Verifying all wheels are pure-Python (py3-none-any) …"
+  local bad=()
+  local whl base
+  for whl in "${OUTPUT_DIR}"/*.whl; do
+    [[ -f "${whl}" ]] || continue
+    base="$(basename "${whl}")"
+    case "${base}" in
+      *-py3-none-any.whl|*-py2.py3-none-any.whl) ;;
+      *) bad+=("${base}") ;;
+    esac
+  done
+
+  if (( ${#bad[@]} > 0 )); then
+    for base in "${bad[@]}"; do
+      warn "  not pure-Python: ${base}"
+    done
+    fail "${#bad[@]} wheel(s) carry a platform tag and cannot load in the browser.
+       Either the package has real C extensions (it needs a Pyodide-ABI build
+       matching the vendored distribution), or 'python -m wheel tags' did not
+       run. Check ${LOG_DIR}/ for the corresponding build log."
+  fi
+
+  success "All $(ls -1 "${OUTPUT_DIR}"/*.whl 2>/dev/null | wc -l | tr -d ' ') wheels are pure-Python"
+}
+
+# ── Clean ───────────────────────────────────────────────────────────────────
+clean() {
+  info "Cleaning build artifacts …"
+  rm -rf "${WORK_DIR}" "${OUTPUT_DIR}" "${LOG_DIR}"
+  success "Clean complete"
+}
+
+# ── Main ────────────────────────────────────────────────────────────────────
+main() {
+  local mode="${1:-all}"
+
+  case "${mode}" in
+    --setup)
+      setup_environment
+      ;;
+    --build)
+      source_shared_env
+      clone_repos
+      build_wheels
+      ;;
+    --clean)
+      clean
+      ;;
+    --help|-h)
+      echo "Usage: $0 [--setup | --build | --clean | --help] [--no-extras] [build_dir]"
+      echo ""
+      echo "  (no flag)    Full run: setup environment, clone repos, build wheels"
+      echo "  --setup      Set up Python venv and build tooling"
+      echo "  --build      Clone/update repos and build wheels (requires prior --setup)"
+      echo "  --clean      Remove work/, pypi/, and logs/"
+      echo "  --help       Show this message"
+      echo ""
+      echo "  --no-extras  Skip downloading pure-Python deps (aiofiles, backoff, etc.)"
+      echo "               Only safe if 'import gen3' is not needed"
+      echo ""
+      echo "Env:"
+      echo "  BROWSER_PYTHON_TAG  Python version for extras download (default 314)"
+      ;;
+    *)
+      setup_environment
+      clone_repos
+      build_wheels
+      ;;
+  esac
+}
+
+main "$@"