RepoPackPy 0.1.1__tar.gz

repopackpy-0.1.1/.github/workflows/ci.yml

@@ -0,0 +1,30 @@
+name: CI
+
+on:
+  push:
+    branches: ["main"]
+  pull_request:
+    branches: ["main"]
+
+jobs:
+  test:
+    name: Test (Python ${{ matrix.python-version }})
+    runs-on: ubuntu-latest
+    strategy:
+      fail-fast: false
+      matrix:
+        python-version: ["3.10", "3.11", "3.12", "3.13"]
+
+    steps:
+      - uses: actions/checkout@v4
+
+      - uses: actions/setup-python@v5
+        with:
+          python-version: ${{ matrix.python-version }}
+          cache: pip
+
+      - name: Install dependencies
+        run: pip install -e ".[dev]"
+
+      - name: Run tests
+        run: pytest tests/ -v --tb=short

repopackpy-0.1.1/.github/workflows/publish.yml

@@ -0,0 +1,69 @@
+name: Publish to PyPI
+
+on:
+  release:
+    types: [published]
+
+jobs:
+  verify-tag:
+    name: Verify tag matches release
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+
+      - name: Check tag matches package version
+        run: |
+          # Extract version from pyproject.toml
+          PKG_VERSION=$(python - <<'EOF'
+          import tomllib, pathlib
+          data = tomllib.loads(pathlib.Path("pyproject.toml").read_text())
+          print(data["project"]["version"])
+          EOF
+          )
+          # GitHub release tag (strip leading 'v' if present)
+          TAG="${{ github.ref_name }}"
+          TAG_VERSION="${TAG#v}"
+          echo "Package version : $PKG_VERSION"
+          echo "Release tag     : $TAG_VERSION"
+          if [ "$PKG_VERSION" != "$TAG_VERSION" ]; then
+            echo "::error::Tag $TAG does not match package version $PKG_VERSION"
+            exit 1
+          fi
+
+  build:
+    name: Build distribution
+    needs: verify-tag
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+
+      - uses: actions/setup-python@v5
+        with:
+          python-version: "3.12"
+          cache: pip
+
+      - name: Build wheel and sdist
+        run: |
+          pip install build
+          python -m build
+
+      - uses: actions/upload-artifact@v4
+        with:
+          name: dist
+          path: dist/
+
+  publish:
+    name: Publish to PyPI (Trusted Publisher)
+    needs: build
+    runs-on: ubuntu-latest
+    environment: pypi
+    permissions:
+      id-token: write  # required for OIDC trusted publisher
+
+    steps:
+      - uses: actions/download-artifact@v4
+        with:
+          name: dist
+          path: dist/
+
+      - uses: pypa/gh-action-pypi-publish@release/v1

repopackpy-0.1.1/.github/workflows/security.yml

@@ -0,0 +1,33 @@
+name: Security Audit
+
+on:
+  push:
+    branches: ["main"]
+  pull_request:
+    branches: ["main"]
+  schedule:
+    - cron: "0 6 * * 1"  # every Monday at 06:00 UTC
+
+jobs:
+  audit:
+    name: Dependency & SAST audit
+    runs-on: ubuntu-latest
+
+    steps:
+      - uses: actions/checkout@v4
+
+      - uses: actions/setup-python@v5
+        with:
+          python-version: "3.12"
+          cache: pip
+
+      - name: Install project and audit tools
+        run: |
+          pip install -e ".[dev]"
+          pip install pip-audit bandit
+
+      - name: pip-audit (known CVEs)
+        run: pip-audit --strict
+
+      - name: bandit (SAST)
+        run: bandit -r repopack/ -ll -ii

repopackpy-0.1.1/.gitignore

@@ -0,0 +1,218 @@
+# Byte-compiled / optimized / DLL files
+__pycache__/
+*.py[codz]
+*$py.class
+
+# C extensions
+*.so
+
+# Distribution / packaging
+.Python
+build/
+develop-eggs/
+dist/
+downloads/
+eggs/
+.eggs/
+lib/
+lib64/
+parts/
+sdist/
+var/
+wheels/
+share/python-wheels/
+*.egg-info/
+.installed.cfg
+*.egg
+MANIFEST
+
+# PyInstaller
+#   Usually these files are written by a python script from a template
+#   before PyInstaller builds the exe, so as to inject date/other infos into it.
+*.manifest
+*.spec
+
+# Installer logs
+pip-log.txt
+pip-delete-this-directory.txt
+
+# Unit test / coverage reports
+htmlcov/
+.tox/
+.nox/
+.coverage
+.coverage.*
+.cache
+nosetests.xml
+coverage.xml
+*.cover
+*.py.cover
+.hypothesis/
+.pytest_cache/
+cover/
+
+# Translations
+*.mo
+*.pot
+
+# Django stuff:
+*.log
+local_settings.py
+db.sqlite3
+db.sqlite3-journal
+
+# Flask stuff:
+instance/
+.webassets-cache
+
+# Scrapy stuff:
+.scrapy
+
+# Sphinx documentation
+docs/_build/
+
+# PyBuilder
+.pybuilder/
+target/
+
+# Jupyter Notebook
+.ipynb_checkpoints
+
+# IPython
+profile_default/
+ipython_config.py
+
+# pyenv
+#   For a library or package, you might want to ignore these files since the code is
+#   intended to run in multiple environments; otherwise, check them in:
+# .python-version
+
+# pipenv
+#   According to pypa/pipenv#598, it is recommended to include Pipfile.lock in version control.
+#   However, in case of collaboration, if having platform-specific dependencies or dependencies
+#   having no cross-platform support, pipenv may install dependencies that don't work, or not
+#   install all needed dependencies.
+# Pipfile.lock
+
+# UV
+#   Similar to Pipfile.lock, it is generally recommended to include uv.lock in version control.
+#   This is especially recommended for binary packages to ensure reproducibility, and is more
+#   commonly ignored for libraries.
+# uv.lock
+
+# poetry
+#   Similar to Pipfile.lock, it is generally recommended to include poetry.lock in version control.
+#   This is especially recommended for binary packages to ensure reproducibility, and is more
+#   commonly ignored for libraries.
+#   https://python-poetry.org/docs/basic-usage/#commit-your-poetrylock-file-to-version-control
+# poetry.lock
+# poetry.toml
+
+# pdm
+#   Similar to Pipfile.lock, it is generally recommended to include pdm.lock in version control.
+#   pdm recommends including project-wide configuration in pdm.toml, but excluding .pdm-python.
+#   https://pdm-project.org/en/latest/usage/project/#working-with-version-control
+# pdm.lock
+# pdm.toml
+.pdm-python
+.pdm-build/
+
+# pixi
+#   Similar to Pipfile.lock, it is generally recommended to include pixi.lock in version control.
+# pixi.lock
+#   Pixi creates a virtual environment in the .pixi directory, just like venv module creates one
+#   in the .venv directory. It is recommended not to include this directory in version control.
+.pixi
+
+# PEP 582; used by e.g. github.com/David-OConnor/pyflow and github.com/pdm-project/pdm
+__pypackages__/
+
+# Celery stuff
+celerybeat-schedule
+celerybeat.pid
+
+# Redis
+*.rdb
+*.aof
+*.pid
+
+# RabbitMQ
+mnesia/
+rabbitmq/
+rabbitmq-data/
+
+# ActiveMQ
+activemq-data/
+
+# SageMath parsed files
+*.sage.py
+
+# Environments
+.env
+.envrc
+.venv
+env/
+venv/
+ENV/
+env.bak/
+venv.bak/
+
+# Spyder project settings
+.spyderproject
+.spyproject
+
+# Rope project settings
+.ropeproject
+
+# mkdocs documentation
+/site
+
+# mypy
+.mypy_cache/
+.dmypy.json
+dmypy.json
+
+# Pyre type checker
+.pyre/
+
+# pytype static type analyzer
+.pytype/
+
+# Cython debug symbols
+cython_debug/
+
+# PyCharm
+#   JetBrains specific template is maintained in a separate JetBrains.gitignore that can
+#   be found at https://github.com/github/gitignore/blob/main/Global/JetBrains.gitignore
+#   and can be added to the global gitignore or merged into this file.  For a more nuclear
+#   option (not recommended) you can uncomment the following to ignore the entire idea folder.
+# .idea/
+
+# Abstra
+#   Abstra is an AI-powered process automation framework.
+#   Ignore directories containing user credentials, local state, and settings.
+#   Learn more at https://abstra.io/docs
+.abstra/
+
+# Visual Studio Code
+#   Visual Studio Code specific template is maintained in a separate VisualStudioCode.gitignore 
+#   that can be found at https://github.com/github/gitignore/blob/main/Global/VisualStudioCode.gitignore
+#   and can be added to the global gitignore or merged into this file. However, if you prefer, 
+#   you could uncomment the following to ignore the entire vscode folder
+# .vscode/
+# Temporary file for partial code execution
+tempCodeRunnerFile.py
+
+# Ruff stuff:
+.ruff_cache/
+
+# PyPI configuration file
+.pypirc
+
+# Marimo
+marimo/_static/
+marimo/_lsp/
+__marimo__/
+
+# Streamlit
+.streamlit/secrets.toml

repopackpy-0.1.1/CLAUDE.md

@@ -0,0 +1,123 @@
+# RepoPack — CLAUDE.md
+
+## Project Purpose
+
+RepoPack is a Python CLI application and MCP server that packs/unpacks any source workspace (regardless of tech stack) into a structured JSON payload. It supports Python, Node.js, React, Angular, Vue, Rust, Go, Java, C#, and more.
+
+---
+
+## Architecture
+
+```
+repopack/
+├── pyproject.toml
+├── README.md
+└── repopack/
+    ├── __init__.py
+    ├── cli.py          # Typer CLI entry point
+    ├── mcp_server.py   # FastMCP server (stdio)
+    ├── packer.py       # Directory walker & JSON builder
+    ├── unpacker.py     # JSON extractor & path-safe reconstructor
+    └── utils.py        # Gitignore engine, binary detector, path safety
+```
+
+---
+
+## Technical Stack
+
+| Concern | Library |
+|---|---|
+| Python version | 3.10+ |
+| CLI | `typer` |
+| MCP integration | `mcp` (FastMCP) |
+| Ignore matching | `pathspec` (Git wildmatch) |
+| Packaging | `hatchling` or `flit` via `pyproject.toml` |
+
+---
+
+## CLI Commands
+
+Executable name: `repopack`
+
+```
+repopack pack [DIRECTORY] [-o OUTPUT.json] [--include-binary] [--custom-ignore ".next,dist"]
+repopack unpack <INPUT.json> [-t TARGET_DIR] [--force]
+repopack serve    # starts stdio-based MCP server
+```
+
+---
+
+## MCP Server Tools (FastMCP)
+
+**`export_workspace(workspace_path, output_json_path, include_binary)`**
+- Scans and packs a directory into JSON.
+- If `output_json_path` is given, writes to disk and returns summary stats; otherwise returns the JSON string directly.
+
+**`import_workspace(json_input, destination_path, overwrite)`**
+- Accepts a JSON file path or raw JSON string.
+- Reconstructs directory hierarchy at `destination_path`.
+
+---
+
+## Output JSON Schema (version 1.0)
+
+```json
+{
+  "version": "1.0",
+  "metadata": {
+    "created_at": "<ISO8601>",
+    "root_directory_name": "my-app",
+    "detected_stack": ["Node.js", "React"],
+    "total_files": 38,
+    "total_bytes": 128450
+  },
+  "files": [
+    { "path": "src/App.tsx", "encoding": "utf-8", "content": "..." },
+    { "path": "public/favicon.ico", "encoding": "base64", "content": "..." }
+  ]
+}
+```
+
+---
+
+## Ignore Engine (utils.py / packer.py)
+
+Precedence order:
+1. Root `.gitignore` + any nested `.gitignore` files (monorepo support).
+2. Universal stack-agnostic defaults when no `.gitignore` exists:
+   - **VCS/Meta:** `.git/`, `.svn/`, `.hg/`, `.DS_Store`, `Thumbs.db`
+   - **JS/TS (Node, React, Angular, Vue, Next, Nuxt):** `node_modules/`, `dist/`, `build/`, `.next/`, `.nuxt/`, `.angular/`, `.cache/`, `coverage/`, `.astro/`, `.turbo/`, `out/`
+   - **Python:** `__pycache__/`, `*.pyc`, `.venv/`, `venv/`, `.pytest_cache/`, `.mypy_cache/`, `.eggs/`, `*.egg-info/`, `sdist/`
+   - **Rust/Go/Java/C#/C++:** `target/`, `bin/`, `obj/`, `*.exe`, `*.so`, `*.dylib`, `*.dll`, `*.class`, `*.jar`, `*.o`, `*.a`
+   - **Secrets:** `.env`, `.env.local`, `.env.*.local` (warn/skip)
+
+---
+
+## Encoding Rules
+
+- Text files (`.js`, `.jsx`, `.ts`, `.tsx`, `.py`, `.json`, `.html`, `.css`, `.scss`, `.md`, `.yaml`, etc.) → UTF-8 string.
+- Binary files (`.png`, `.ico`, `.woff2`, etc.) → skipped by default; Base64 when `--include-binary` is set.
+- Files larger than **5 MB** are skipped unless forced.
+
+---
+
+## Security Constraints (unpacker.py)
+
+- Validate every path in incoming JSON against `os.path.commonpath` to block directory traversal (`../`, absolute paths, `/etc/passwd`-style injections).
+- All output must be anchored under the specified target directory.
+
+---
+
+## Implementation Notes
+
+- Use `pathspec` for `.gitignore` wildmatch; do not roll a custom glob engine.
+- `packer.py` reads files in streaming fashion to handle large repos.
+- `unpacker.py` must reject any path that escapes the destination root before touching the filesystem.
+- Stack detection logic (for `detected_stack` metadata) lives in `utils.py`; infer from files present (e.g., `package.json` → Node.js, `requirements.txt` / `pyproject.toml` → Python, `Cargo.toml` → Rust, `go.mod` → Go, `*.csproj` → C#).
+
+---
+
+## Testing Requirements
+
+- Unit tests must cover mock workspaces for: Node/React/Angular projects, Python virtual environments, Rust crates, monorepos with nested `.gitignore` files.
+- Path traversal attack vectors must have explicit negative tests in `unpacker` tests.

repopackpy-0.1.1/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 Shan Konduru
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

repopackpy-0.1.1/PKG-INFO

@@ -0,0 +1,126 @@
+Metadata-Version: 2.4
+Name: RepoPackPy
+Version: 0.1.1
+Summary: Pack/unpack any source workspace into portable JSON, with MCP server support.
+License: MIT
+License-File: LICENSE
+Requires-Python: >=3.10
+Requires-Dist: mcp[cli]>=1.0
+Requires-Dist: pathspec>=0.12
+Requires-Dist: typer>=0.12
+Provides-Extra: dev
+Requires-Dist: pytest>=8; extra == 'dev'
+Description-Content-Type: text/markdown
+
+# RepoPack
+
+Pack/unpack **any source workspace regardless of technology stack** (Python, Node.js, React, Angular, Vue, Rust, Go, Java, C#, and more) into a portable, structured JSON payload — and restore it faithfully from that payload.
+
+## Features
+
+- **Universal ignore engine** — respects root and nested `.gitignore` files plus stack-agnostic defaults (node_modules, __pycache__, .venv, target/, dist/, secrets, lock files, …)
+- **Polyglot stack detection** — auto-detects Node.js, React, TypeScript, Angular, Next.js, Vue, Python, Rust, Go, Java, C# from project sentinel files
+- **Binary safety** — text files encoded as UTF-8; binaries skipped by default or included as Base64 with `--include-binary`
+- **5 MB guard** — files larger than 5 MB are skipped with a warning
+- **Path traversal shield** — `unpack` validates every path against the destination root before writing anything
+- **MCP server** — expose pack/unpack as tools to any MCP-compatible AI client (Claude Desktop, etc.)
+
+## Installation
+
+```bash
+pip install RepoPackPy
+```
+
+For development:
+
+```bash
+pip install -e ".[dev]"
+```
+
+Requires Python 3.10+.
+
+## CLI Usage
+
+```bash
+# Pack a directory into JSON
+repopack pack [DIRECTORY] [-o output.json] [--include-binary] [--custom-ignore ".next,dist"]
+
+# Unpack JSON back into a directory
+repopack unpack <input.json> [-t TARGET_DIR] [--force]
+
+# Start the MCP server (stdio transport)
+repopack serve
+```
+
+### Examples
+
+```bash
+# Pack current directory, write to file
+repopack pack . -o workspace.json
+
+# Pack a specific project, include binaries
+repopack pack ~/projects/my-app -o my-app.json --include-binary
+
+# Unpack into a new directory
+repopack unpack workspace.json -t ./restored
+
+# Unpack and overwrite existing files
+repopack unpack workspace.json -t ./restored --force
+```
+
+## JSON Payload Schema
+
+```json
+{
+  "version": "1.0",
+  "metadata": {
+    "created_at": "2026-07-26T12:00:00Z",
+    "root_directory_name": "my-app",
+    "detected_stack": ["Node.js", "React", "TypeScript"],
+    "total_files": 38,
+    "total_bytes": 128450
+  },
+  "files": [
+    { "path": "src/App.tsx", "encoding": "utf-8", "content": "..." },
+    { "path": "public/favicon.ico", "encoding": "base64", "content": "..." }
+  ]
+}
+```
+
+## MCP Server Tools
+
+When running `repopack serve`, two tools are registered via FastMCP:
+
+| Tool | Description |
+|---|---|
+| `export_workspace(workspace_path, output_json_path, include_binary)` | Pack a directory into JSON |
+| `import_workspace(json_input, destination_path, overwrite)` | Unpack JSON into a directory |
+
+## Project Structure
+
+```
+repopack/
+├── pyproject.toml
+├── README.md
+└── repopack/
+    ├── __init__.py
+    ├── cli.py          # Typer CLI (pack / unpack / serve)
+    ├── mcp_server.py   # FastMCP server
+    ├── packer.py       # Directory walker & JSON builder
+    ├── unpacker.py     # JSON extractor & path-safe reconstructor
+    └── utils.py        # Ignore engine, binary detector, stack detection
+tests/
+└── test_repopack.py    # 26-test pytest suite
+```
+
+## Running Tests
+
+```bash
+pytest tests/ -v
+```
+
+## Dependencies
+
+- [typer](https://typer.tiangolo.com/) — CLI framework
+- [mcp](https://github.com/modelcontextprotocol/python-sdk) — MCP SDK (FastMCP)
+- [pathspec](https://github.com/cpburnz/python-pathspec) — gitignore wildmatch pattern matching