adminsite 0.1.0__tar.gz

adminsite-0.1.0/.gitattributes

@@ -0,0 +1,4 @@
+* text=auto eol=lf
+*.png binary
+*.ico binary
+*.woff2 binary

adminsite-0.1.0/.github/ISSUE_TEMPLATE/bug_report.yml

@@ -0,0 +1,45 @@
+name: Bug report
+description: Something in adminsite does not work the way its docs say it does.
+labels: ["bug"]
+body:
+  - type: markdown
+    attributes:
+      value: |
+        A small example that shows the problem is the fastest way to a fix. The
+        [field gallery](https://github.com/nimaxin/adminsite/blob/main/examples/fields.py) and the
+        [shop](https://github.com/nimaxin/adminsite/blob/main/examples/shop.py) are good places to
+        start one from.
+  - type: input
+    id: version
+    attributes:
+      label: adminsite version
+      placeholder: 0.1.0
+    validations:
+      required: true
+  - type: textarea
+    id: happens
+    attributes:
+      label: What happens
+      description: What you did and what you saw. Paste any error with its traceback.
+    validations:
+      required: true
+  - type: textarea
+    id: expected
+    attributes:
+      label: What you expected
+    validations:
+      required: true
+  - type: textarea
+    id: reproduce
+    attributes:
+      label: How to reproduce it
+      description: The smallest models and view that show it.
+      render: python
+  - type: input
+    id: setup
+    attributes:
+      label: Where it runs
+      description: >-
+        Python, SQLAlchemy, the database and its driver, the framework, and the browser if the
+        problem is on a page.
+      placeholder: Python 3.13, SQLAlchemy 2.0.44, Postgres 17 with asyncpg, FastAPI, Chrome 153

adminsite-0.1.0/.github/ISSUE_TEMPLATE/config.yml

@@ -0,0 +1,11 @@
+blank_issues_enabled: true
+contact_links:
+  - name: Ask a question
+    url: https://github.com/nimaxin/adminsite/discussions/categories/q-a
+    about: How to do something with adminsite, or whether it can. Ask in Discussions.
+  - name: Documentation
+    url: https://nimaxin.github.io/adminsite/
+    about: How to install adminsite, and every option it has.
+  - name: Live demo
+    url: https://adminsite.duckdns.org
+    about: Try adminsite in the browser. Sign in as admin with the password admin.

adminsite-0.1.0/.github/ISSUE_TEMPLATE/feature_request.yml

@@ -0,0 +1,23 @@
+name: Feature request
+description: Something adminsite does not do yet.
+labels: ["enhancement"]
+body:
+  - type: textarea
+    id: missing
+    attributes:
+      label: What is missing
+      description: What you want to do and cannot, and how you work around it today.
+    validations:
+      required: true
+  - type: textarea
+    id: why
+    attributes:
+      label: Why it matters
+      description: Who needs it and how often, such as the kind of project and the people who use its pages.
+    validations:
+      required: true
+  - type: textarea
+    id: shape
+    attributes:
+      label: What it could look like
+      description: The code you would like to write, or what the page would do.

adminsite-0.1.0/.github/pull_request_template.md

@@ -0,0 +1,7 @@
+What this changes, and why. For anything bigger than a fix, link the issue where it was agreed.
+
+- [ ] `ruff check`, `ruff format --check`, `mypy src tests`, `python -m tests.doc_examples` and
+  `pytest` pass
+- [ ] A line in `CHANGELOG.md` under Unreleased, if a user would notice the change
+- [ ] The docs page the change belongs to says what it does now
+- [ ] Any new visible text is translated in `locales/fa.json`

adminsite-0.1.0/.github/release_notes.py

@@ -0,0 +1,69 @@
+"""Write a release's notes from its section of CHANGELOG.md.
+
+    python .github/release_notes.py 0.1.0 > notes.md
+
+The changelog wraps its lines, and GitHub shows every line break in release
+notes, so each paragraph and each point is joined back onto one line; table
+rows stay one to a line.
+"""
+
+import sys
+from pathlib import Path
+
+CHANGELOG = Path(__file__).parent.parent / "CHANGELOG.md"
+
+
+def section(version: str) -> list[str]:
+    """The lines under the version's heading, up to the next heading."""
+    found: list[str] = []
+    inside = False
+    for line in CHANGELOG.read_text(encoding="utf-8").splitlines():
+        if line.startswith("## "):
+            if inside:
+                break
+            inside = line == f"## {version}"
+            continue
+        if inside:
+            found.append(line)
+    return found
+
+
+def unwrapped(lines: list[str]) -> list[str]:
+    """Each paragraph and each point on one line."""
+    joined: list[str] = []
+    fenced = False
+    for line in lines:
+        if line.startswith("```"):
+            fenced = not fenced
+            joined.append(line)
+            continue
+        starts_part = (
+            fenced
+            or not line.strip()
+            or line.lstrip().startswith(("- ", "#", "|"))
+            or not joined
+            or not joined[-1].strip()
+            or joined[-1].startswith("```")
+        )
+        if starts_part:
+            joined.append(line)
+        else:
+            joined[-1] = f"{joined[-1]} {line.strip()}"
+    return joined
+
+
+def main() -> int:
+    """Print the notes for the version, or say why there are none."""
+    version = sys.argv[1].removeprefix("v")
+    lines = unwrapped(section(version))
+    if not any(line.strip() for line in lines):
+        message = f"CHANGELOG.md has no section for {version}. Add one and tag again."
+        print(message, file=sys.stderr)
+        return 1
+    notes = ["```", f"pip install adminsite=={version}", "```", *lines]
+    sys.stdout.write("\n".join(notes).strip() + "\n")
+    return 0
+
+
+if __name__ == "__main__":
+    raise SystemExit(main())

adminsite-0.1.0/.github/workflows/ci.yml

@@ -0,0 +1,113 @@
+name: CI
+
+on:
+  push:
+    branches: [main]
+  pull_request:
+
+concurrency:
+  group: ${{ github.workflow }}-${{ github.ref }}
+  cancel-in-progress: true
+
+jobs:
+  check:
+    name: Lint and types
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+      - uses: astral-sh/setup-uv@v6
+        with:
+          enable-cache: true
+      - run: uv sync --all-groups
+      - run: uv run ruff check .
+      - run: uv run ruff format --check .
+      - run: uv run mypy src tests
+      - run: uv run python -m tests.doc_examples
+
+  test:
+    name: Tests on ${{ matrix.python }}
+    runs-on: ubuntu-latest
+    strategy:
+      fail-fast: false
+      matrix:
+        python: ["3.11", "3.12", "3.13", "3.14"]
+    steps:
+      - uses: actions/checkout@v4
+      - uses: astral-sh/setup-uv@v6
+        with:
+          enable-cache: true
+          python-version: ${{ matrix.python }}
+      - run: uv sync --all-groups
+      - run: uv run pytest -q
+
+  # The lock file pins the latest SQLAlchemy, so this job checks the oldest
+  # series adminsite supports: its types and its behaviour.
+  sqlalchemy-2-0:
+    name: Types and tests on SQLAlchemy 2.0
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+      - uses: astral-sh/setup-uv@v6
+        with:
+          enable-cache: true
+      - run: uv sync --all-groups
+      - run: uv pip install "sqlalchemy[asyncio]>=2.0.30,<2.1"
+      - run: uv run --no-sync python -c "import sqlalchemy; print(sqlalchemy.__version__)"
+      - run: uv run --no-sync mypy src tests
+      - run: uv run --no-sync python -m tests.doc_examples
+      - run: uv run --no-sync pytest -q
+
+  postgres:
+    name: Tests on Postgres
+    runs-on: ubuntu-latest
+    services:
+      postgres:
+        image: postgres:17-alpine
+        env:
+          POSTGRES_USER: adminsite
+          POSTGRES_PASSWORD: adminsite
+          POSTGRES_DB: adminsite
+        ports:
+          - 5432:5432
+        options: >-
+          --health-cmd "pg_isready -U adminsite"
+          --health-interval 5s
+          --health-timeout 5s
+          --health-retries 10
+    env:
+      ADMINSITE_POSTGRES_URL: postgresql://adminsite:adminsite@localhost:5432/adminsite
+    steps:
+      - uses: actions/checkout@v4
+      - uses: astral-sh/setup-uv@v6
+        with:
+          enable-cache: true
+      - run: uv sync --all-groups
+      - run: uv run pytest -q
+
+  mysql:
+    name: Tests on MySQL
+    runs-on: ubuntu-latest
+    services:
+      mysql:
+        image: mysql:8.4
+        env:
+          MYSQL_ROOT_PASSWORD: adminsite
+          MYSQL_DATABASE: adminsite
+          MYSQL_USER: adminsite
+          MYSQL_PASSWORD: adminsite
+        ports:
+          - 3306:3306
+        options: >-
+          --health-cmd "mysqladmin ping -uadminsite -padminsite"
+          --health-interval 5s
+          --health-timeout 5s
+          --health-retries 20
+    env:
+      ADMINSITE_MYSQL_URL: mysql://adminsite:adminsite@127.0.0.1:3306/adminsite
+    steps:
+      - uses: actions/checkout@v4
+      - uses: astral-sh/setup-uv@v6
+        with:
+          enable-cache: true
+      - run: uv sync --all-groups
+      - run: uv run pytest -q -k mysql

adminsite-0.1.0/.github/workflows/demo.yml

@@ -0,0 +1,55 @@
+name: Demo
+
+# Deploys the online demo once CI has passed on a push to main.
+on:
+  workflow_run:
+    workflows: [CI]
+    types: [completed]
+    branches: [main]
+  workflow_dispatch:
+
+permissions:
+  contents: read
+
+concurrency:
+  group: demo
+  cancel-in-progress: false
+
+jobs:
+  deploy:
+    name: Deploy the demo
+    # Only a green CI run of a push to this repository: a pull request from a
+    # fork's own main branch must never reach the server.
+    if: >-
+      github.event_name == 'workflow_dispatch' ||
+      (github.event.workflow_run.conclusion == 'success' &&
+      github.event.workflow_run.event == 'push' &&
+      github.event.workflow_run.head_repository.full_name == github.repository)
+    runs-on: ubuntu-latest
+    environment:
+      name: demo
+      url: https://${{ vars.DEMO_HOST }}
+    steps:
+      - name: Trust the server and hold the deploy key
+        env:
+          DEPLOY_KEY: ${{ secrets.DEMO_SSH_KEY }}
+          KNOWN_HOSTS: ${{ secrets.DEMO_KNOWN_HOSTS }}
+        run: |
+          install -m 700 -d ~/.ssh
+          printf '%s\n' "$DEPLOY_KEY" > ~/.ssh/demo
+          chmod 600 ~/.ssh/demo
+          printf '%s\n' "$KNOWN_HOSTS" > ~/.ssh/known_hosts
+
+      # The server runs its deploy script with the commit, and nothing else.
+      - name: Deploy the commit CI checked
+        env:
+          HOST: ${{ vars.DEMO_HOST }}
+          COMMIT: ${{ github.event.workflow_run.head_sha || github.sha }}
+        run: ssh -i ~/.ssh/demo -o IdentitiesOnly=yes -o BatchMode=yes "deploy@$HOST" "$COMMIT"
+
+      - name: Check the demo answers
+        env:
+          HOST: ${{ vars.DEMO_HOST }}
+        run: >-
+          curl --fail --silent --show-error --retry 10 --retry-delay 3
+          --retry-all-errors "https://$HOST/healthz"

adminsite-0.1.0/.github/workflows/docs.yml

@@ -0,0 +1,39 @@
+name: Docs
+
+on:
+  push:
+    branches: [main]
+  workflow_dispatch:
+
+permissions:
+  contents: read
+  pages: write
+  id-token: write
+
+concurrency:
+  group: pages
+  cancel-in-progress: true
+
+jobs:
+  build:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+      - uses: astral-sh/setup-uv@v6
+        with:
+          enable-cache: true
+      - run: uv sync --group docs
+      - run: uv run --group docs mkdocs build --strict
+      - uses: actions/upload-pages-artifact@v3
+        with:
+          path: site
+
+  deploy:
+    needs: build
+    runs-on: ubuntu-latest
+    environment:
+      name: github-pages
+      url: ${{ steps.deployment.outputs.page_url }}
+    steps:
+      - id: deployment
+        uses: actions/deploy-pages@v4

adminsite-0.1.0/.github/workflows/release.yml

@@ -0,0 +1,67 @@
+name: Release
+
+on:
+  push:
+    tags: ["v*"]
+
+jobs:
+  build:
+    name: Build the distributions
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+      - uses: astral-sh/setup-uv@v6
+        with:
+          enable-cache: true
+      - run: uv sync --all-groups
+      - run: uv run ruff check .
+      - run: uv run mypy src tests
+      - run: uv run pytest -q
+      - run: uv build
+      - uses: actions/upload-artifact@v4
+        with:
+          name: distributions
+          path: dist/
+
+  publish:
+    name: Publish to PyPI
+    needs: build
+    runs-on: ubuntu-latest
+    environment: pypi
+    # Trusted publishing: PyPI trusts this workflow, so there is no token
+    # to keep anywhere.
+    permissions:
+      id-token: write
+    steps:
+      - uses: actions/download-artifact@v4
+        with:
+          name: distributions
+          path: dist/
+      - uses: pypa/gh-action-pypi-publish@release/v1
+
+  github:
+    name: Create the GitHub release
+    needs: publish
+    runs-on: ubuntu-latest
+    # The release sits beside the tag, so the repository page names the same
+    # version PyPI has, and people who watch releases hear of it.
+    permissions:
+      contents: write
+    steps:
+      - uses: actions/checkout@v4
+      - uses: actions/setup-python@v5
+        with:
+          python-version: "3.13"
+      - name: Write the notes from the changelog
+        run: python .github/release_notes.py "$GITHUB_REF_NAME" > notes.md
+      - name: Create the release
+        env:
+          GH_TOKEN: ${{ github.token }}
+        run: |
+          version="${GITHUB_REF_NAME#v}"
+          kind=""
+          case "$version" in
+            *[0-9]a[0-9]* | *[0-9]b[0-9]* | *rc[0-9]*) kind="--prerelease" ;;
+          esac
+          gh release create "$GITHUB_REF_NAME" --verify-tag $kind \
+            --title "adminsite $version" --notes-file notes.md

adminsite-0.1.0/.gitignore

@@ -0,0 +1,34 @@
+# Python
+__pycache__/
+*.py[cod]
+*.egg-info/
+build/
+dist/
+
+# Environments
+.venv/
+
+# Tools
+.pytest_cache/
+.mypy_cache/
+.ruff_cache/
+.coverage
+htmlcov/
+
+# Frontend build
+node_modules/
+frontend/package-lock.json
+
+# Build output
+dist/
+
+# Example app databases
+shop.db
+adminsite_audit.db
+adminsite_views.db
+shop_uploads/
+fields_uploads/
+demo-data/
+
+# Built docs
+site/

adminsite-0.1.0/.python-version

@@ -0,0 +1 @@
+3.13

adminsite-0.1.0/AGENTS.md

@@ -0,0 +1,159 @@
+# Working on adminsite
+
+adminsite is an admin panel for SQLAlchemy 2.0 models, served as an ASGI app that people mount
+into Starlette, FastAPI or Litestar. Python 3.11+, managed with uv.
+
+This file is for agents changing adminsite itself. Agents using adminsite in another project should
+read https://nimaxin.github.io/adminsite/llms.txt instead.
+
+## Layout
+
+- `src/adminsite/` is the package. `admin.py` builds the app and its routes, `views/` holds
+  `ModelView` and the parts it is built from (below), `_http/` holds one module per page,
+  `_orm/` builds the statements a view runs, `database.py` hands out sessions, `inspector.py`
+  reads the models, `timezones.py` moves times between the database and each reader's clock, and
+  `fields/` and `filters/` are what they say. A name starting with an underscore is machinery no
+  project imports.
+- `src/adminsite/templates/adminsite/` holds the Jinja templates; `widgets/` has one file per form
+  control.
+- `src/adminsite/static/adminsite.css` is built from `frontend/` and committed. HTMX and Alpine are
+  vendored next to it.
+- `src/adminsite/locales/` holds the translation catalogs, one JSON file per language.
+- `docs/` is the MkDocs site, and `overrides/main.html` gives its pages their link previews;
+  `examples/shop.py` is the demo shop, and `examples/fields.py` a gallery with every kind of
+  field, each labelled by its class. Add a new field type to it.
+- `demo/` serves both at https://adminsite.duckdns.org, signed in as admin / admin and reset
+  every hour. `.github/workflows/demo.yml` deploys it after CI passes on main; `demo/README.md`
+  describes the server.
+- `tests/` runs every database test on SQLite async and sync, and on Postgres and MySQL when their
+  URLs are set.
+
+## Inside views/
+
+`ModelView` keeps what users write: the settings, the `get_` methods, `allows`, `scope_query`,
+`get_actions` and the hooks. The work is done by parts it builds in `__init__`, from the bottom row
+up, each handed the parts it uses. Templates and `_http/` reach a part through the view, such as
+`view._pages.form_fields(request, record)`. A part's module is named for the attribute the view
+holds it as, so `view._reader` lives in `_reader.py`, and the modules a project imports carry no
+underscore. A module imports only modules of the rows below its own; `tests/test_view_layers.py`
+fails otherwise.
+
+| Row | Module | What it does |
+| --- | --- | --- |
+| 1 | `_checks.py` | The startup checks, and the messages they stop the admin with |
+| 1 | `_linked_names.py` | How a linked record is named |
+| 1 | `layout.py` | `PanelWidget`, `FieldsetWidget`, `RowWidget`, `TabsWidget`, and arranging them for one page |
+| 1 | `inlines.py` | `Inline`, the setting |
+| 1 | `contexts.py` | `SaveContext`, `DeleteContext` and `SaveValues`, which the hooks get |
+| 2 | `_settings.py` | The settings read into paths and checked, once, at startup |
+| 3 | `_fields.py` | The field for each path, and what a record holds and shows there |
+| 3 | `_inline_views.py` | The child view of each inline |
+| 4 | `_pages.py` | The fields each page shows this user, and which of them are editable |
+| 5 | `_reader.py` | Pages of records, one record, filter choices and computed values |
+| 5 | `_forms.py` | A submitted form, its inline rows and an action's inputs, as values |
+| 5 | `_audit.py` | The entries a change writes to the audit log |
+| 6 | `_links.py` | The records a submitted link names, read through the linked view |
+| 7 | `_saver.py` | A save or a delete in one transaction, with its hooks and files |
+| 7 | `_actions.py` | The actions offered to a request, run and written down |
+| 8 | `model_view.py` | `ModelView` itself |
+| 9 | `registry.py`, `_picker.py` | The admin's views; the records a link may offer |
+
+Where a change goes:
+
+- **A setting that names columns:** an attribute on `ModelView`, with a docstring under it, read
+  into paths in `SettingsReader.__init__`, which checks every name. When the answer can depend on
+  the request, add a `get_` method beside it; `PageFields` calls it and checks an answer other
+  than the setting itself through `SettingsReader`.
+- **A startup check:** a function in `_checks.py`, called where the setting is read.
+- **A hook:** a method on `ModelView` that does nothing by default, called by the part that does
+  the work, such as `Saver` for a save.
+- **A rule about which fields a page shows:** `PageFields`, which the pages, the export, the
+  import and the API all ask.
+- **Where a page puts its fields:** `form_layout`, read in `SettingsReader` and arranged for each
+  page by `PageFields.arranged`; the form and the record page draw what it returns.
+- **A new module:** a row in `LAYERS` in `tests/test_view_layers.py`, and in the table above.
+
+## Commands
+
+```bash
+uv sync --all-groups
+uv run ruff check . && uv run ruff format --check .
+uv run mypy src tests
+uv run python -m tests.doc_examples
+uv run pytest -q
+uv run --group docs mkdocs build --strict
+```
+
+Postgres and MySQL:
+
+```bash
+docker run -d --name adminsite-postgres -p 55432:5432 -e POSTGRES_USER=adminsite -e POSTGRES_PASSWORD=adminsite -e POSTGRES_DB=adminsite postgres:17-alpine
+docker run -d --name adminsite-mysql -p 53306:3306 -e MYSQL_ROOT_PASSWORD=adminsite -e MYSQL_DATABASE=adminsite -e MYSQL_USER=adminsite -e MYSQL_PASSWORD=adminsite mysql:8.4
+ADMINSITE_POSTGRES_URL=postgresql://adminsite:adminsite@localhost:55432/adminsite \
+ADMINSITE_MYSQL_URL=mysql://adminsite:adminsite@127.0.0.1:53306/adminsite \
+uv run pytest -q
+```
+
+After changing classes in a template, rebuild the stylesheet, or the new classes will not exist:
+
+```bash
+cd frontend && npx @tailwindcss/cli -i ./input.css -o ../src/adminsite/static/adminsite.css --minify
+```
+
+Run the demo with `uv run uvicorn examples.shop:app --reload`, then open
+http://127.0.0.1:8000/admin and sign in as nima / letmein. To see every field after changing one,
+run `uv run uvicorn examples.fields:app --reload` instead; it needs no sign in.
+
+## Rules that are easy to break
+
+- **Every visible text is translated.** Templates use `{{ _('Save') }}`, Python uses
+  `from adminsite.i18n import gettext as _` and `_("{thing} saved.", thing=...)` with named
+  placeholders, never f-strings. Add each new text to `locales/fa.json`;
+  `uv run python -m tests.messages fa` lists what is missing, and a test fails until it is done.
+- **Layouts mirror for right to left languages.** Use `ms-`, `me-`, `ps-`, `pe-`, `start-`, `end-`,
+  `text-start`, `text-end`, `border-s`, `border-e`, never left or right.
+- **Every control has an accessible name**: a `<label for>`, `aria-label` or `aria-labelledby`.
+  `tests/test_accessibility.py` checks the main pages.
+- **Reads go through the view**, so `scope_query` and `allows` always apply. Never query a model
+  directly from an endpoint. Nothing under `_http/` imports SQLAlchemy or the ORM layer
+  (`adminsite._orm`, `adminsite.database`, `adminsite.inspector`, the SQL filters) when it runs,
+  only `SessionAdapter` under `TYPE_CHECKING` for annotations; `tests/test_web_layer.py` fails
+  otherwise. Catch `adminsite.exceptions.IntegrityError`, which the session raises for a change
+  the database refuses, never SQLAlchemy's.
+- **No N+1 queries.** Load what a page shows with the page; the tests count statements.
+- **Code must work on SQLite, Postgres and MySQL.** Convert keys read from URLs with
+  `to_column_type`. MySQL refuses a `LIMIT` straight inside `IN (...)`.
+- **The session is only saved when a key is set.** Assign a new value; never change a list or
+  dict inside it in place.
+- **Examples type-check.** `python -m tests.doc_examples` runs mypy strict over every python block
+  in `docs/`, the README and the docstrings, and refuses a view setting `ModelView` does not have.
+  A name an example takes as given, such as a model, goes in `tests/doc_examples/context.py`.
+- **Text files use LF endings.** `.gitattributes` enforces it; keep it that way when writing files
+  from scripts.
+
+## Style
+
+- Write like a person: plain, specific, short. No marketing tone, no filler, no "seamless" or
+  "robust". Avoid em dashes; use a full stop, a comma or a colon.
+- Names read as words: `fetch_page`, `can_import`, `saved_for`. No abbreviations.
+- Docstrings say what a thing is or does in one line. Comments explain why, and only where the code
+  cannot.
+- What `docs/reference.md` shows is documented in full, in Google style, because the Reference
+  page and editors read it from there: `Args:` for each parameter, the constructor's in the class
+  docstring; `Returns:` for what it answers; `Raises:` for an error the caller is meant to handle;
+  and a docstring under each attribute people set or read, such as a setting of `ModelView`.
+  Options a class inherits are described once, on the class they come from.
+  `tests/test_reference_docs.py` fails on a gap. Everything else keeps its one line, plus a
+  sentence for a parameter whose name and type do not say enough.
+- Messages tell people what happened and what to do: "Keep the file under 5 MB.", not
+  "Error: file size exceeded".
+- ruff at 88 columns and mypy strict are the rules; do not silence them without a reason in a
+  comment.
+
+## Workflow
+
+- Plan first when asked to plan, and wait for approval before building.
+- Commit after each finished step, with a message such as `feat: ...`, `fix: ...` or `docs: ...`.
+- Add a line to `CHANGELOG.md` under Unreleased for anything a user would notice, and update the
+  docs page the change belongs to.
+- Never push, tag or publish unless asked. A tag `v*` publishes to PyPI.