@vercel/python-analysis 0.8.0 → 0.8.2

package/dist/index.cjs

@@ -66,13 +66,15 @@ __export(src_exports, {
   containsAppOrHandler: () => containsAppOrHandler,
   createMinimalManifest: () => createMinimalManifest,
   discoverPythonPackage: () => discoverPythonPackage,
+  extendDistRecord: () => extendDistRecord,
   getStringConstant: () => getStringConstant,
   isPrivatePackageSource: () => isPrivatePackageSource,
-  normalizePackageName: () => normalizePackageName,
+  normalizePackageName: () => normalizePackageName2,
   parseDjangoSettingsModule: () => parseDjangoSettingsModule,
   parseUvLock: () => parseUvLock,
   scanDistributions: () => scanDistributions,
   selectPython: () => selectPython,
+  selectPythonVersion: () => selectPythonVersion,
   stringifyManifest: () => stringifyManifest
 });
 module.exports = __toCommonJS(src_exports);
@@ -139,8 +141,51 @@ async function parseDjangoSettingsModule(content) {
 }
 
 // src/manifest/dist-metadata.ts
+var import_node_crypto = require("crypto");
+var import_node_fs = require("fs");
 var import_promises2 = require("fs/promises");
 var import_node_path2 = require("path");
+
+// src/manifest/pep508.ts
+var EXTRAS_REGEX = /^(.+)\[([^\]]+)\]$/;
+function splitExtras(spec) {
+  const match = EXTRAS_REGEX.exec(spec);
+  if (!match) {
+    return [spec, void 0];
+  }
+  const extras = match[2].split(",").map((e) => e.trim());
+  return [match[1], extras];
+}
+function normalizePackageName(name) {
+  return name.toLowerCase().replace(/[-_.]+/g, "-");
+}
+function formatPep508(req) {
+  let result = req.name;
+  if (req.extras && req.extras.length > 0) {
+    result += `[${req.extras.join(",")}]`;
+  }
+  if (req.url) {
+    result += ` @ ${req.url}`;
+  } else if (req.version && req.version !== "*") {
+    result += req.version;
+  }
+  if (req.markers) {
+    result += ` ; ${req.markers}`;
+  }
+  return result;
+}
+function mergeExtras(existing, additional) {
+  const result = new Set(existing || []);
+  if (additional) {
+    const additionalArray = Array.isArray(additional) ? additional : [additional];
+    for (const extra of additionalArray) {
+      result.add(extra);
+    }
+  }
+  return result.size > 0 ? Array.from(result) : void 0;
+}
+
+// src/manifest/dist-metadata.ts
 async function readDistInfoFile(distInfoDir, filename) {
   try {
     return await (0, import_promises2.readFile)((0, import_node_path2.join)(distInfoDir, filename), "utf-8");
@@ -227,6 +272,62 @@ async function scanDistributions(sitePackagesDir) {
   }
   return index;
 }
+function hashFile(filePath) {
+  return new Promise((resolve, reject) => {
+    const h = (0, import_node_crypto.createHash)("sha256");
+    let size = 0;
+    const stream = (0, import_node_fs.createReadStream)(filePath);
+    stream.on("data", (chunk) => {
+      size += chunk.length;
+      h.update(chunk);
+    });
+    stream.on("error", reject);
+    stream.on("end", () => {
+      resolve({ hash: h.digest("base64url"), size });
+    });
+  });
+}
+async function extendDistRecord(sitePackagesDir, packageName, paths) {
+  const normalizedTarget = normalizePackageName(packageName);
+  const entries = await (0, import_promises2.readdir)(sitePackagesDir);
+  const distInfoDirName = entries.find((e) => {
+    if (!e.endsWith(".dist-info"))
+      return false;
+    const withoutSuffix = e.slice(0, -".dist-info".length);
+    const lastHyphen = withoutSuffix.lastIndexOf("-");
+    if (lastHyphen === -1)
+      return false;
+    const dirName = withoutSuffix.slice(0, lastHyphen);
+    return normalizePackageName(dirName) === normalizedTarget;
+  });
+  if (!distInfoDirName) {
+    throw new Error(
+      `No .dist-info directory found for package "${packageName}" in ${sitePackagesDir}`
+    );
+  }
+  const recordPath = (0, import_node_path2.join)(sitePackagesDir, distInfoDirName, "RECORD");
+  let existingRecord;
+  try {
+    existingRecord = await (0, import_promises2.readFile)(recordPath, "utf-8");
+  } catch {
+    throw new Error(`RECORD file not found in ${distInfoDirName}`);
+  }
+  const existingPaths = new Set(
+    existingRecord.split("\n").filter((line) => line.length > 0).map((line) => line.split(",")[0])
+  );
+  const newEntries = paths.filter((p) => !existingPaths.has(p));
+  if (newEntries.length > 0) {
+    const prefix = existingRecord.length > 0 && !existingRecord.endsWith("\n") ? "\n" : "";
+    const lines = [];
+    for (const p of newEntries) {
+      const fullPath = (0, import_node_path2.join)(sitePackagesDir, p);
+      const { hash, size } = await hashFile(fullPath);
+      lines.push(`${p},sha256=${hash},${size}`);
+    }
+    await (0, import_promises2.appendFile)(recordPath, prefix + lines.join("\n") + "\n");
+  }
+  return newEntries.length;
+}
 
 // src/manifest/package.ts
 var import_node_path6 = __toESM(require("path"), 1);
@@ -447,42 +548,6 @@ var PipfileLikeSchema = pipfileLikeSchema;
 var PipfileLockMetaSchema = pipfileLockMetaSchema.passthrough();
 var PipfileLockLikeSchema = pipfileLockLikeSchema;
 
-// src/manifest/pep508.ts
-var EXTRAS_REGEX = /^(.+)\[([^\]]+)\]$/;
-function splitExtras(spec) {
-  const match = EXTRAS_REGEX.exec(spec);
-  if (!match) {
-    return [spec, void 0];
-  }
-  const extras = match[2].split(",").map((e) => e.trim());
-  return [match[1], extras];
-}
-function formatPep508(req) {
-  let result = req.name;
-  if (req.extras && req.extras.length > 0) {
-    result += `[${req.extras.join(",")}]`;
-  }
-  if (req.url) {
-    result += ` @ ${req.url}`;
-  } else if (req.version && req.version !== "*") {
-    result += req.version;
-  }
-  if (req.markers) {
-    result += ` ; ${req.markers}`;
-  }
-  return result;
-}
-function mergeExtras(existing, additional) {
-  const result = new Set(existing || []);
-  if (additional) {
-    const additionalArray = Array.isArray(additional) ? additional : [additional];
-    for (const extra of additionalArray) {
-      result.add(extra);
-    }
-  }
-  return result.size > 0 ? Array.from(result) : void 0;
-}
-
 // src/util/type.ts
 function isPlainObject(value) {
   return value != null && typeof value === "object" && !Array.isArray(value);
@@ -675,17 +740,24 @@ function convertPipfileToPyprojectToml(pipfile) {
 function convertPipfileLockToPyprojectToml(pipfileLock) {
   const sources = {};
   const pyproject = {};
+  const pythonVersion = pipfileLock._meta?.requires?.python_version;
   const deps = [];
   for (const dep of pipfileLockDepsToRequirements(pipfileLock.default || {})) {
     deps.push(formatPep508(dep));
     addDepSource(sources, dep);
   }
-  if (deps.length > 0) {
-    pyproject.project = {
+  if (deps.length > 0 || pythonVersion) {
+    const project = {
       name: "app",
-      version: "0.1.0",
-      dependencies: deps
+      version: "0.1.0"
     };
+    if (pythonVersion) {
+      project["requires-python"] = `==${pythonVersion}.*`;
+    }
+    if (deps.length > 0) {
+      project.dependencies = deps;
+    }
+    pyproject.project = project;
   }
   const devDeps = [];
   for (const dep of pipfileLockDepsToRequirements(pipfileLock.develop || {})) {
@@ -1866,8 +1938,10 @@ async function discoverPythonPackage({
   let workspaceManifest;
   let workspaceLockFile;
   if (manifests.length === 0) {
+    const requiresPython2 = computeRequiresPython(void 0, void 0, configs);
     return {
-      configs
+      configs,
+      requiresPython: requiresPython2
     };
   } else {
     entrypointManifest = manifests[0];
@@ -1901,37 +1975,44 @@ async function discoverPythonPackage({
 }
 function computeRequiresPython(manifest, workspaceManifest, configs) {
   const constraints = [];
+  let hasPythonVersionFile = false;
   for (const configSet of configs) {
     const pythonVersionConfig = configSet[".python-version" /* PythonVersion */];
     if (pythonVersionConfig !== void 0) {
       constraints.push({
         request: pythonVersionConfig.data,
-        source: `${pythonVersionConfig.path}`
+        source: pythonVersionConfig.path,
+        prettySource: pythonVersionConfig.path
       });
+      hasPythonVersionFile = true;
       break;
     }
   }
-  const manifestRequiresPython = manifest?.data.project?.["requires-python"];
-  if (manifestRequiresPython) {
-    const parsed = (0, import_specifier.parse)(manifestRequiresPython);
-    if (parsed?.length) {
-      const request = pythonRequestFromConstraint(parsed);
-      constraints.push({
-        request: [request],
-        source: `"requires-python" key in ${manifest.path}`
-      });
-    }
-  } else {
-    const workspaceRequiresPython = workspaceManifest?.data.project?.["requires-python"];
-    if (workspaceRequiresPython) {
-      const parsed = (0, import_specifier.parse)(workspaceRequiresPython);
+  if (!hasPythonVersionFile) {
+    const manifestRequiresPython = manifest?.data.project?.["requires-python"];
+    if (manifestRequiresPython) {
+      const parsed = (0, import_specifier.parse)(manifestRequiresPython);
       if (parsed?.length) {
         const request = pythonRequestFromConstraint(parsed);
         constraints.push({
           request: [request],
-          source: `"requires-python" key in ${workspaceManifest.path}`
+          source: manifest.path,
+          prettySource: `"requires-python" key in ${manifest.path}`
         });
       }
+    } else {
+      const workspaceRequiresPython = workspaceManifest?.data.project?.["requires-python"];
+      if (workspaceRequiresPython) {
+        const parsed = (0, import_specifier.parse)(workspaceRequiresPython);
+        if (parsed?.length) {
+          const request = pythonRequestFromConstraint(parsed);
+          constraints.push({
+            request: [request],
+            source: workspaceManifest.path,
+            prettySource: `"requires-python" key in ${workspaceManifest.path}`
+          });
+        }
+      }
     }
   }
   return constraints;
@@ -2280,7 +2361,7 @@ function isPrivatePackageSource(source) {
   }
   return false;
 }
-function normalizePackageName(name) {
+function normalizePackageName2(name) {
   return name.toLowerCase().replace(/[-_.]+/g, "-");
 }
 function classifyPackages(options) {
@@ -2288,9 +2369,9 @@ function classifyPackages(options) {
   const privatePackages = [];
   const publicPackages = [];
   const packageVersions = {};
-  const excludeSet = new Set(excludePackages.map(normalizePackageName));
+  const excludeSet = new Set(excludePackages.map(normalizePackageName2));
   for (const pkg of lockFile.packages) {
-    if (excludeSet.has(normalizePackageName(pkg.name))) {
+    if (excludeSet.has(normalizePackageName2(pkg.name))) {
       continue;
     }
     packageVersions[pkg.name] = pkg.version;
@@ -2343,13 +2424,15 @@ function selectPython(constraints, available) {
       }
     }
     if (constraintsWithMatches.length > 1) {
-      const sources = constraintsWithMatches.map((i) => constraints[i].source);
+      const sources = constraintsWithMatches.map(
+        (i) => constraints[i].prettySource
+      );
       warnings.push(
         `Python version constraints may not overlap: ${sources.join(", ")}`
       );
     }
   }
-  const constraintDescriptions = constraints.map((c) => c.source).join(", ");
+  const constraintDescriptions = constraints.map((c) => c.prettySource).join(", ");
   errors.push(
     `No Python build satisfies all constraints: ${constraintDescriptions}`
   );
@@ -2359,6 +2442,126 @@ function selectPython(constraints, available) {
     warnings: warnings.length > 0 ? warnings : void 0
   };
 }
+function selectPythonVersion({
+  constraints,
+  availableBuilds,
+  allBuilds,
+  defaultBuild,
+  majorMinorOnly,
+  legacyTildeEquals
+}) {
+  const source = constraints?.[0]?.source;
+  if (!constraints || constraints.length === 0) {
+    return { build: defaultBuild };
+  }
+  let effectiveConstraints = majorMinorOnly ? constraints.map((c) => ({
+    ...c,
+    request: c.request.map(truncatePatchVersionsInRequest)
+  })) : constraints;
+  if (legacyTildeEquals) {
+    effectiveConstraints = effectiveConstraints.map((c) => ({
+      ...c,
+      request: c.request.map(legacyTildeEqualsTransform)
+    }));
+  }
+  const result = selectPython(effectiveConstraints, availableBuilds);
+  if (result.build) {
+    return { build: result.build, source };
+  }
+  const allResult = selectPython(effectiveConstraints, allBuilds);
+  if (allResult.build) {
+    const version = pythonVersionToString(allResult.build.version);
+    return {
+      build: defaultBuild,
+      source,
+      notAvailable: { build: allResult.build, version }
+    };
+  }
+  const versionString = extractConstraintVersionString(constraints);
+  return {
+    build: defaultBuild,
+    source,
+    invalidConstraint: { versionString }
+  };
+}
+function extractConstraintVersionString(constraints) {
+  for (const c of constraints) {
+    for (const req of c.request) {
+      if (req.version?.constraint && req.version.constraint.length > 0) {
+        const specs = req.version.constraint;
+        if (specs.length === 1 && specs[0].operator === "==" && (!specs[0].prefix || specs[0].prefix === ".*")) {
+          return specs[0].version;
+        }
+        return pep440ConstraintsToString(specs);
+      }
+    }
+  }
+  return "unknown";
+}
+function truncatePatchVersionsInRequest(req) {
+  if (!req.version?.constraint || req.version.constraint.length === 0) {
+    return req;
+  }
+  const newConstraints = [];
+  for (const c of req.version.constraint) {
+    const result = truncatePatchConstraint(c);
+    if (result !== null) {
+      newConstraints.push(result);
+    }
+  }
+  const newVersion = {
+    ...req.version,
+    constraint: newConstraints
+  };
+  return { ...req, version: newVersion };
+}
+function truncatePatchConstraint(c) {
+  if (c.operator === "===") {
+    return c;
+  }
+  const parts = c.version.split(".");
+  if (parts.length < 3) {
+    return c;
+  }
+  const majorMinor = parts.slice(0, 2).join(".");
+  const patch = parseInt(parts[2], 10);
+  switch (c.operator) {
+    case "==":
+      return { operator: "==", version: majorMinor, prefix: ".*" };
+    case "!=":
+      return null;
+    case "~=":
+      return { operator: "==", version: majorMinor, prefix: ".*" };
+    case ">=":
+      return { operator: ">=", version: majorMinor, prefix: "" };
+    case "<=":
+      return { operator: "<=", version: majorMinor, prefix: "" };
+    case ">":
+      return patch === 0 ? { operator: ">", version: majorMinor, prefix: "" } : { operator: ">=", version: majorMinor, prefix: "" };
+    case "<":
+      return patch === 0 ? { operator: "<", version: majorMinor, prefix: "" } : { operator: "<=", version: majorMinor, prefix: "" };
+    default:
+      return c;
+  }
+}
+function legacyTildeEqualsTransform(req) {
+  if (!req.version?.constraint || req.version.constraint.length === 0) {
+    return req;
+  }
+  const newConstraints = req.version.constraint.map((c) => {
+    if (c.operator !== "~=")
+      return c;
+    const parts = c.version.split(".");
+    if (parts.length === 2) {
+      return { operator: "==", version: c.version, prefix: ".*" };
+    }
+    return c;
+  });
+  return {
+    ...req,
+    version: { ...req.version, constraint: newConstraints }
+  };
+}
 function pythonVersionToString(version) {
   let str = `${version.major}.${version.minor}`;
   if (version.patch !== void 0) {
@@ -2370,7 +2573,7 @@ function pythonVersionToString(version) {
   return str;
 }
 function pep440ConstraintsToString(constraints) {
-  return constraints.map((c) => `${c.operator}${c.prefix}${c.version}`).join(",");
+  return constraints.map((c) => `${c.operator}${c.version}${c.prefix ?? ""}`).join(",");
 }
 function implementationsMatch(buildImpl, requestImpl) {
   if (PythonImplementation.isUnknown(buildImpl)) {
@@ -2490,6 +2693,7 @@ var HashDigestSchema = hashDigestSchema;
   containsAppOrHandler,
   createMinimalManifest,
   discoverPythonPackage,
+  extendDistRecord,
   getStringConstant,
   isPrivatePackageSource,
   normalizePackageName,
@@ -2497,5 +2701,6 @@ var HashDigestSchema = hashDigestSchema;
   parseUvLock,
   scanDistributions,
   selectPython,
+  selectPythonVersion,
   stringifyManifest
 });

package/dist/index.d.ts

@@ -8,14 +8,14 @@
  */
 export { containsAppOrHandler, getStringConstant, parseDjangoSettingsModule, } from './semantic/entrypoints';
 export type { Distribution, DistributionIndex, PackagePath, DirectUrlInfo, } from './manifest/dist-metadata';
-export { scanDistributions } from './manifest/dist-metadata';
+export { extendDistRecord, scanDistributions } from './manifest/dist-metadata';
 export type { PythonConfig, PythonConfigs, PythonLockFile, PythonManifest, PythonManifestOrigin, PythonPackage, PythonVersionConfig, } from './manifest/package';
 export { discoverPythonPackage, PythonConfigKind, PythonLockFileKind, PythonManifestConvertedKind, PythonManifestKind, } from './manifest/package';
 export { createMinimalManifest, stringifyManifest, type CreateMinimalManifestOptions, } from './manifest/serialize';
 export type { ClassifyPackagesOptions, PackageClassification, UvLockFile, UvLockPackage, UvLockPackageSource, } from './manifest/uv-lock-parser';
 export { classifyPackages, isPrivatePackageSource, normalizePackageName, parseUvLock, } from './manifest/uv-lock-parser';
-export type { PythonSelectionResult } from './manifest/python-selector';
-export { selectPython } from './manifest/python-selector';
+export type { PythonSelectionResult, PythonVersionSelectionResult, } from './manifest/python-selector';
+export { selectPython, selectPythonVersion } from './manifest/python-selector';
 export { PythonAnalysisError } from './util/error';
 export { LicenseObjectSchema, LicenseSchema, PersonSchema, PyProjectBuildSystemSchema, PyProjectDependencyGroupsSchema, PyProjectProjectSchema, PyProjectToolSectionSchema, PyProjectTomlSchema, ReadmeObjectSchema, ReadmeSchema, } from './manifest/pyproject/schema';
 export type { License, LicenseObject, Person, PyProjectBuildSystem, PyProjectDependencyGroups, PyProjectProject, PyProjectToml, PyProjectToolSection, Readme, ReadmeObject, } from './manifest/pyproject/types';

package/dist/index.js

@@ -60,8 +60,51 @@ async function parseDjangoSettingsModule(content) {
 }
 
 // src/manifest/dist-metadata.ts
-import { readdir, readFile as readFile2 } from "fs/promises";
+import { createHash } from "crypto";
+import { createReadStream } from "fs";
+import { appendFile, readdir, readFile as readFile2 } from "fs/promises";
 import { join as join2 } from "path";
+
+// src/manifest/pep508.ts
+var EXTRAS_REGEX = /^(.+)\[([^\]]+)\]$/;
+function splitExtras(spec) {
+  const match = EXTRAS_REGEX.exec(spec);
+  if (!match) {
+    return [spec, void 0];
+  }
+  const extras = match[2].split(",").map((e) => e.trim());
+  return [match[1], extras];
+}
+function normalizePackageName(name) {
+  return name.toLowerCase().replace(/[-_.]+/g, "-");
+}
+function formatPep508(req) {
+  let result = req.name;
+  if (req.extras && req.extras.length > 0) {
+    result += `[${req.extras.join(",")}]`;
+  }
+  if (req.url) {
+    result += ` @ ${req.url}`;
+  } else if (req.version && req.version !== "*") {
+    result += req.version;
+  }
+  if (req.markers) {
+    result += ` ; ${req.markers}`;
+  }
+  return result;
+}
+function mergeExtras(existing, additional) {
+  const result = new Set(existing || []);
+  if (additional) {
+    const additionalArray = Array.isArray(additional) ? additional : [additional];
+    for (const extra of additionalArray) {
+      result.add(extra);
+    }
+  }
+  return result.size > 0 ? Array.from(result) : void 0;
+}
+
+// src/manifest/dist-metadata.ts
 async function readDistInfoFile(distInfoDir, filename) {
   try {
     return await readFile2(join2(distInfoDir, filename), "utf-8");
@@ -148,6 +191,62 @@ async function scanDistributions(sitePackagesDir) {
   }
   return index;
 }
+function hashFile(filePath) {
+  return new Promise((resolve, reject) => {
+    const h = createHash("sha256");
+    let size = 0;
+    const stream = createReadStream(filePath);
+    stream.on("data", (chunk) => {
+      size += chunk.length;
+      h.update(chunk);
+    });
+    stream.on("error", reject);
+    stream.on("end", () => {
+      resolve({ hash: h.digest("base64url"), size });
+    });
+  });
+}
+async function extendDistRecord(sitePackagesDir, packageName, paths) {
+  const normalizedTarget = normalizePackageName(packageName);
+  const entries = await readdir(sitePackagesDir);
+  const distInfoDirName = entries.find((e) => {
+    if (!e.endsWith(".dist-info"))
+      return false;
+    const withoutSuffix = e.slice(0, -".dist-info".length);
+    const lastHyphen = withoutSuffix.lastIndexOf("-");
+    if (lastHyphen === -1)
+      return false;
+    const dirName = withoutSuffix.slice(0, lastHyphen);
+    return normalizePackageName(dirName) === normalizedTarget;
+  });
+  if (!distInfoDirName) {
+    throw new Error(
+      `No .dist-info directory found for package "${packageName}" in ${sitePackagesDir}`
+    );
+  }
+  const recordPath = join2(sitePackagesDir, distInfoDirName, "RECORD");
+  let existingRecord;
+  try {
+    existingRecord = await readFile2(recordPath, "utf-8");
+  } catch {
+    throw new Error(`RECORD file not found in ${distInfoDirName}`);
+  }
+  const existingPaths = new Set(
+    existingRecord.split("\n").filter((line) => line.length > 0).map((line) => line.split(",")[0])
+  );
+  const newEntries = paths.filter((p) => !existingPaths.has(p));
+  if (newEntries.length > 0) {
+    const prefix = existingRecord.length > 0 && !existingRecord.endsWith("\n") ? "\n" : "";
+    const lines = [];
+    for (const p of newEntries) {
+      const fullPath = join2(sitePackagesDir, p);
+      const { hash, size } = await hashFile(fullPath);
+      lines.push(`${p},sha256=${hash},${size}`);
+    }
+    await appendFile(recordPath, prefix + lines.join("\n") + "\n");
+  }
+  return newEntries.length;
+}
 
 // src/manifest/package.ts
 import path3 from "path";
@@ -371,42 +470,6 @@ var PipfileLikeSchema = pipfileLikeSchema;
 var PipfileLockMetaSchema = pipfileLockMetaSchema.passthrough();
 var PipfileLockLikeSchema = pipfileLockLikeSchema;
 
-// src/manifest/pep508.ts
-var EXTRAS_REGEX = /^(.+)\[([^\]]+)\]$/;
-function splitExtras(spec) {
-  const match = EXTRAS_REGEX.exec(spec);
-  if (!match) {
-    return [spec, void 0];
-  }
-  const extras = match[2].split(",").map((e) => e.trim());
-  return [match[1], extras];
-}
-function formatPep508(req) {
-  let result = req.name;
-  if (req.extras && req.extras.length > 0) {
-    result += `[${req.extras.join(",")}]`;
-  }
-  if (req.url) {
-    result += ` @ ${req.url}`;
-  } else if (req.version && req.version !== "*") {
-    result += req.version;
-  }
-  if (req.markers) {
-    result += ` ; ${req.markers}`;
-  }
-  return result;
-}
-function mergeExtras(existing, additional) {
-  const result = new Set(existing || []);
-  if (additional) {
-    const additionalArray = Array.isArray(additional) ? additional : [additional];
-    for (const extra of additionalArray) {
-      result.add(extra);
-    }
-  }
-  return result.size > 0 ? Array.from(result) : void 0;
-}
-
 // src/util/type.ts
 function isPlainObject(value) {
   return value != null && typeof value === "object" && !Array.isArray(value);
@@ -599,17 +662,24 @@ function convertPipfileToPyprojectToml(pipfile) {
 function convertPipfileLockToPyprojectToml(pipfileLock) {
   const sources = {};
   const pyproject = {};
+  const pythonVersion = pipfileLock._meta?.requires?.python_version;
   const deps = [];
   for (const dep of pipfileLockDepsToRequirements(pipfileLock.default || {})) {
     deps.push(formatPep508(dep));
     addDepSource(sources, dep);
   }
-  if (deps.length > 0) {
-    pyproject.project = {
+  if (deps.length > 0 || pythonVersion) {
+    const project = {
       name: "app",
-      version: "0.1.0",
-      dependencies: deps
+      version: "0.1.0"
     };
+    if (pythonVersion) {
+      project["requires-python"] = `==${pythonVersion}.*`;
+    }
+    if (deps.length > 0) {
+      project.dependencies = deps;
+    }
+    pyproject.project = project;
   }
   const devDeps = [];
   for (const dep of pipfileLockDepsToRequirements(pipfileLock.develop || {})) {
@@ -1790,8 +1860,10 @@ async function discoverPythonPackage({
   let workspaceManifest;
   let workspaceLockFile;
   if (manifests.length === 0) {
+    const requiresPython2 = computeRequiresPython(void 0, void 0, configs);
     return {
-      configs
+      configs,
+      requiresPython: requiresPython2
     };
   } else {
     entrypointManifest = manifests[0];
@@ -1825,37 +1897,44 @@ async function discoverPythonPackage({
 }
 function computeRequiresPython(manifest, workspaceManifest, configs) {
   const constraints = [];
+  let hasPythonVersionFile = false;
   for (const configSet of configs) {
     const pythonVersionConfig = configSet[".python-version" /* PythonVersion */];
     if (pythonVersionConfig !== void 0) {
       constraints.push({
         request: pythonVersionConfig.data,
-        source: `${pythonVersionConfig.path}`
+        source: pythonVersionConfig.path,
+        prettySource: pythonVersionConfig.path
       });
+      hasPythonVersionFile = true;
       break;
     }
   }
-  const manifestRequiresPython = manifest?.data.project?.["requires-python"];
-  if (manifestRequiresPython) {
-    const parsed = parse2(manifestRequiresPython);
-    if (parsed?.length) {
-      const request = pythonRequestFromConstraint(parsed);
-      constraints.push({
-        request: [request],
-        source: `"requires-python" key in ${manifest.path}`
-      });
-    }
-  } else {
-    const workspaceRequiresPython = workspaceManifest?.data.project?.["requires-python"];
-    if (workspaceRequiresPython) {
-      const parsed = parse2(workspaceRequiresPython);
+  if (!hasPythonVersionFile) {
+    const manifestRequiresPython = manifest?.data.project?.["requires-python"];
+    if (manifestRequiresPython) {
+      const parsed = parse2(manifestRequiresPython);
       if (parsed?.length) {
         const request = pythonRequestFromConstraint(parsed);
         constraints.push({
           request: [request],
-          source: `"requires-python" key in ${workspaceManifest.path}`
+          source: manifest.path,
+          prettySource: `"requires-python" key in ${manifest.path}`
         });
       }
+    } else {
+      const workspaceRequiresPython = workspaceManifest?.data.project?.["requires-python"];
+      if (workspaceRequiresPython) {
+        const parsed = parse2(workspaceRequiresPython);
+        if (parsed?.length) {
+          const request = pythonRequestFromConstraint(parsed);
+          constraints.push({
+            request: [request],
+            source: workspaceManifest.path,
+            prettySource: `"requires-python" key in ${workspaceManifest.path}`
+          });
+        }
+      }
     }
   }
   return constraints;
@@ -2204,7 +2283,7 @@ function isPrivatePackageSource(source) {
   }
   return false;
 }
-function normalizePackageName(name) {
+function normalizePackageName2(name) {
   return name.toLowerCase().replace(/[-_.]+/g, "-");
 }
 function classifyPackages(options) {
@@ -2212,9 +2291,9 @@ function classifyPackages(options) {
   const privatePackages = [];
   const publicPackages = [];
   const packageVersions = {};
-  const excludeSet = new Set(excludePackages.map(normalizePackageName));
+  const excludeSet = new Set(excludePackages.map(normalizePackageName2));
   for (const pkg of lockFile.packages) {
-    if (excludeSet.has(normalizePackageName(pkg.name))) {
+    if (excludeSet.has(normalizePackageName2(pkg.name))) {
       continue;
     }
     packageVersions[pkg.name] = pkg.version;
@@ -2267,13 +2346,15 @@ function selectPython(constraints, available) {
       }
     }
     if (constraintsWithMatches.length > 1) {
-      const sources = constraintsWithMatches.map((i) => constraints[i].source);
+      const sources = constraintsWithMatches.map(
+        (i) => constraints[i].prettySource
+      );
       warnings.push(
         `Python version constraints may not overlap: ${sources.join(", ")}`
       );
     }
   }
-  const constraintDescriptions = constraints.map((c) => c.source).join(", ");
+  const constraintDescriptions = constraints.map((c) => c.prettySource).join(", ");
   errors.push(
     `No Python build satisfies all constraints: ${constraintDescriptions}`
   );
@@ -2283,6 +2364,126 @@ function selectPython(constraints, available) {
     warnings: warnings.length > 0 ? warnings : void 0
   };
 }
+function selectPythonVersion({
+  constraints,
+  availableBuilds,
+  allBuilds,
+  defaultBuild,
+  majorMinorOnly,
+  legacyTildeEquals
+}) {
+  const source = constraints?.[0]?.source;
+  if (!constraints || constraints.length === 0) {
+    return { build: defaultBuild };
+  }
+  let effectiveConstraints = majorMinorOnly ? constraints.map((c) => ({
+    ...c,
+    request: c.request.map(truncatePatchVersionsInRequest)
+  })) : constraints;
+  if (legacyTildeEquals) {
+    effectiveConstraints = effectiveConstraints.map((c) => ({
+      ...c,
+      request: c.request.map(legacyTildeEqualsTransform)
+    }));
+  }
+  const result = selectPython(effectiveConstraints, availableBuilds);
+  if (result.build) {
+    return { build: result.build, source };
+  }
+  const allResult = selectPython(effectiveConstraints, allBuilds);
+  if (allResult.build) {
+    const version = pythonVersionToString(allResult.build.version);
+    return {
+      build: defaultBuild,
+      source,
+      notAvailable: { build: allResult.build, version }
+    };
+  }
+  const versionString = extractConstraintVersionString(constraints);
+  return {
+    build: defaultBuild,
+    source,
+    invalidConstraint: { versionString }
+  };
+}
+function extractConstraintVersionString(constraints) {
+  for (const c of constraints) {
+    for (const req of c.request) {
+      if (req.version?.constraint && req.version.constraint.length > 0) {
+        const specs = req.version.constraint;
+        if (specs.length === 1 && specs[0].operator === "==" && (!specs[0].prefix || specs[0].prefix === ".*")) {
+          return specs[0].version;
+        }
+        return pep440ConstraintsToString(specs);
+      }
+    }
+  }
+  return "unknown";
+}
+function truncatePatchVersionsInRequest(req) {
+  if (!req.version?.constraint || req.version.constraint.length === 0) {
+    return req;
+  }
+  const newConstraints = [];
+  for (const c of req.version.constraint) {
+    const result = truncatePatchConstraint(c);
+    if (result !== null) {
+      newConstraints.push(result);
+    }
+  }
+  const newVersion = {
+    ...req.version,
+    constraint: newConstraints
+  };
+  return { ...req, version: newVersion };
+}
+function truncatePatchConstraint(c) {
+  if (c.operator === "===") {
+    return c;
+  }
+  const parts = c.version.split(".");
+  if (parts.length < 3) {
+    return c;
+  }
+  const majorMinor = parts.slice(0, 2).join(".");
+  const patch = parseInt(parts[2], 10);
+  switch (c.operator) {
+    case "==":
+      return { operator: "==", version: majorMinor, prefix: ".*" };
+    case "!=":
+      return null;
+    case "~=":
+      return { operator: "==", version: majorMinor, prefix: ".*" };
+    case ">=":
+      return { operator: ">=", version: majorMinor, prefix: "" };
+    case "<=":
+      return { operator: "<=", version: majorMinor, prefix: "" };
+    case ">":
+      return patch === 0 ? { operator: ">", version: majorMinor, prefix: "" } : { operator: ">=", version: majorMinor, prefix: "" };
+    case "<":
+      return patch === 0 ? { operator: "<", version: majorMinor, prefix: "" } : { operator: "<=", version: majorMinor, prefix: "" };
+    default:
+      return c;
+  }
+}
+function legacyTildeEqualsTransform(req) {
+  if (!req.version?.constraint || req.version.constraint.length === 0) {
+    return req;
+  }
+  const newConstraints = req.version.constraint.map((c) => {
+    if (c.operator !== "~=")
+      return c;
+    const parts = c.version.split(".");
+    if (parts.length === 2) {
+      return { operator: "==", version: c.version, prefix: ".*" };
+    }
+    return c;
+  });
+  return {
+    ...req,
+    version: { ...req.version, constraint: newConstraints }
+  };
+}
 function pythonVersionToString(version) {
   let str = `${version.major}.${version.minor}`;
   if (version.patch !== void 0) {
@@ -2294,7 +2495,7 @@ function pythonVersionToString(version) {
   return str;
 }
 function pep440ConstraintsToString(constraints) {
-  return constraints.map((c) => `${c.operator}${c.prefix}${c.version}`).join(",");
+  return constraints.map((c) => `${c.operator}${c.version}${c.prefix ?? ""}`).join(",");
 }
 function implementationsMatch(buildImpl, requestImpl) {
   if (PythonImplementation.isUnknown(buildImpl)) {
@@ -2413,12 +2614,14 @@ export {
   containsAppOrHandler,
   createMinimalManifest,
   discoverPythonPackage,
+  extendDistRecord,
   getStringConstant,
   isPrivatePackageSource,
-  normalizePackageName,
+  normalizePackageName2 as normalizePackageName,
   parseDjangoSettingsModule,
   parseUvLock,
   scanDistributions,
   selectPython,
+  selectPythonVersion,
   stringifyManifest
 };

package/dist/manifest/dist-metadata.d.ts

@@ -101,3 +101,17 @@ export type DistributionIndex = Map<string, Distribution>;
  * @returns Map of normalized package name to distribution info
  */
 export declare function scanDistributions(sitePackagesDir: string): Promise<DistributionIndex>;
+/**
+ * Append new file entries to a distribution's RECORD file.
+ *
+ * Finds the `.dist-info` directory for the given package, reads its RECORD,
+ * and appends any paths not already tracked. The caller is responsible for
+ * scanning directories and building the path list.
+ *
+ * @param sitePackagesDir - Absolute path to a site-packages directory
+ * @param packageName - Distribution name (matched via PEP 503 normalization)
+ * @param paths - File paths relative to site-packages to add
+ * @returns Count of new entries appended (skips paths already in RECORD)
+ * @throws If the dist-info directory or RECORD file is not found
+ */
+export declare function extendDistRecord(sitePackagesDir: string, packageName: string, paths: string[]): Promise<number>;

package/dist/manifest/python-selector.d.ts

@@ -20,6 +20,47 @@ export interface PythonSelectionResult {
  * @returns The first matching build, or null with errors/warnings if none match
  */
 export declare function selectPython(constraints: PythonConstraint[], available: PythonBuild[]): PythonSelectionResult;
+/**
+ * Result of the higher-level selectPythonVersion function.
+ */
+export interface PythonVersionSelectionResult {
+    /** The selected build. Falls back to defaultBuild if no constraints match. */
+    build: PythonBuild;
+    /** Source file where the constraint originated (e.g. "pyproject.toml"). */
+    source?: string;
+    /** Diagnostic indicating the constraint was found but the build isn't in availableBuilds. */
+    notAvailable?: {
+        build: PythonBuild;
+        /** The version string of the unavailable build. */
+        version: string;
+    };
+    /** Diagnostic indicating no build matches the constraint at all. */
+    invalidConstraint?: {
+        /** Human-readable version string from the constraint. */
+        versionString: string;
+    };
+}
+/**
+ * Higher-level Python version selection with two-pass matching and diagnostics.
+ *
+ * First tries to match constraints against availableBuilds. If no match,
+ * tries against allBuilds to produce diagnostic information. Falls back
+ * to defaultBuild if no constraints are provided or no match is found.
+ */
+export declare function selectPythonVersion({ constraints, availableBuilds, allBuilds, defaultBuild, majorMinorOnly, legacyTildeEquals, }: {
+    constraints?: PythonConstraint[];
+    availableBuilds: PythonBuild[];
+    allBuilds: PythonBuild[];
+    defaultBuild: PythonBuild;
+    majorMinorOnly?: boolean;
+    /**
+     * When true, treat 2-part compatible-release specifiers (`~=X.Y`) as
+     * pinning to exactly that minor version (`==X.Y.*`) rather than the
+     * PEP 440 correct `>=X.Y, <(X+1).0`.  This preserves the historical
+     * behaviour of the Python builder prior to the python-analysis migration.
+     */
+    legacyTildeEquals?: boolean;
+}): PythonVersionSelectionResult;
 /**
  * Convert a PythonVersion to a string suitable for PEP 440 comparison.
  *

package/dist/manifest/python-specifiers.d.ts

@@ -51,8 +51,10 @@ export interface PythonVersionRequest {
 export interface PythonConstraint {
     /** The Python version request(s) that define this constraint. */
     request: PythonRequest[];
-    /** Human-readable description of where this constraint came from. */
+    /** Config file name where this constraint originated (e.g. "pyproject.toml", ".python-version"). */
     source: string;
+    /** Human-readable description of where this constraint came from. */
+    prettySource: string;
 }
 export type PythonVersion = {
     major: number;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@vercel/python-analysis",
-  "version": "0.8.0",
+  "version": "0.8.2",
   "main": "./dist/index.cjs",
   "module": "./dist/index.js",
   "types": "./dist/index.d.ts",