aws_lbd_art_builder_uv 0.1.1__tar.gz

aws_lbd_art_builder_uv-0.1.1/AUTHORS.rst

@@ -0,0 +1,15 @@
+.. _about_author:
+
+About the Author
+------------------------------------------------------------------------------
+::
+
+   (\ (\
+   ( -.-)o
+   o_(")(")
+
+**Sanhe Hu** is a seasoned software engineer with a deep passion for Python development since 2010. As an author and maintainer of `150+ open-source Python projects <https://pypi.org/user/machugwu/>`_, with over `15 million monthly downloads <https://github.com/MacHu-GWU>`_, I bring a wealth of experience to the table. As a Senior Solution Architect and Subject Matter Expert in AI, Data, Amazon Web Services, Cloud Engineering, DevOps, I thrive on helping clients with platform design, enterprise architecture, and strategic roadmaps.
+
+Talk is cheap, show me the code:
+
+- My Github: https://github.com/MacHu-GWU

aws_lbd_art_builder_uv-0.1.1/LICENSE.txt

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 Sanhe Hu <husanhe@email.com>
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

aws_lbd_art_builder_uv-0.1.1/PKG-INFO

@@ -0,0 +1,142 @@
+Metadata-Version: 2.4
+Name: aws_lbd_art_builder_uv
+Version: 0.1.1
+Summary: AWS Lambda Artifact UV Builder
+Author-email: Sanhe Hu <husanhe@email.com>
+Maintainer-email: Sanhe Hu <husanhe@email.com>
+License-Expression: MIT
+Project-URL: Homepage, https://github.com/MacHu-GWU/aws_lbd_art_builder_uv-project
+Project-URL: Documentation, https://aws-lbd-art-builder-uv.readthedocs.io/en/latest/
+Project-URL: Repository, https://github.com/MacHu-GWU/aws_lbd_art_builder_uv-project
+Project-URL: Issues, https://github.com/MacHu-GWU/aws_lbd_art_builder_uv-project/issues
+Project-URL: Changelog, https://github.com/MacHu-GWU/aws_lbd_art_builder_uv-project/blob/main/release-history.rst
+Project-URL: Download, https://pypi.org/pypi/aws-lbd-art-builder-uv#files
+Classifier: Development Status :: 4 - Beta
+Classifier: Intended Audience :: Developers
+Classifier: Natural Language :: English
+Classifier: Operating System :: Microsoft :: Windows
+Classifier: Operating System :: MacOS
+Classifier: Operating System :: Unix
+Classifier: Programming Language :: Python :: 3
+Classifier: Programming Language :: Python :: 3.11
+Classifier: Programming Language :: Python :: 3.12
+Classifier: Programming Language :: Python :: 3.13
+Classifier: Programming Language :: Python :: 3.14
+Requires-Python: <4.0,>=3.11
+Description-Content-Type: text/x-rst
+License-File: LICENSE.txt
+License-File: AUTHORS.rst
+Requires-Dist: aws-lbd-art-builder-core<1.0.0,>=0.1.4
+Provides-Extra: upload
+Requires-Dist: aws-lbd-art-builder-core[upload]; extra == "upload"
+Provides-Extra: publish
+Requires-Dist: aws-lbd-art-builder-core[publish]; extra == "publish"
+Provides-Extra: dev
+Requires-Dist: rich<14.0.0,>=13.8.1; extra == "dev"
+Provides-Extra: test
+Requires-Dist: pytest<9.0.0,>=8.2.2; extra == "test"
+Requires-Dist: pytest-cov<7.0.0,>=6.0.0; extra == "test"
+Requires-Dist: moto<6.0.0,>=5.1.10; extra == "test"
+Requires-Dist: aws-lbd-art-builder-core[publish,upload]; extra == "test"
+Provides-Extra: doc
+Requires-Dist: Sphinx<8.0.0,>=7.4.7; extra == "doc"
+Requires-Dist: sphinx-copybutton<1.0.0,>=0.5.2; extra == "doc"
+Requires-Dist: sphinx-design<1.0.0,>=0.6.1; extra == "doc"
+Requires-Dist: sphinx-jinja<3.0.0,>=2.0.2; extra == "doc"
+Requires-Dist: furo==2024.8.6; extra == "doc"
+Requires-Dist: pygments<3.0.0,>=2.18.0; extra == "doc"
+Requires-Dist: ipython<8.19.0,>=8.18.1; extra == "doc"
+Requires-Dist: nbsphinx<1.0.0,>=0.8.12; extra == "doc"
+Requires-Dist: rstobj==2.0.0; extra == "doc"
+Requires-Dist: docfly==3.0.3; extra == "doc"
+Provides-Extra: mise
+Requires-Dist: PyGithub<3.0.0,>=2.8.0; extra == "mise"
+Requires-Dist: httpx<1.0.0,>=0.28.0; extra == "mise"
+Requires-Dist: tomli<3.0.0,>=2.0.0; python_version < "3.11" and extra == "mise"
+Dynamic: license-file
+
+
+.. image:: https://readthedocs.org/projects/aws-lbd-art-builder-uv/badge/?version=latest
+    :target: https://aws-lbd-art-builder-uv.readthedocs.io/en/latest/
+    :alt: Documentation Status
+
+.. image:: https://github.com/MacHu-GWU/aws_lbd_art_builder_uv-project/actions/workflows/main.yml/badge.svg
+    :target: https://github.com/MacHu-GWU/aws_lbd_art_builder_uv-project/actions?query=workflow:CI
+
+.. image:: https://codecov.io/gh/MacHu-GWU/aws_lbd_art_builder_uv-project/branch/main/graph/badge.svg
+    :target: https://codecov.io/gh/MacHu-GWU/aws_lbd_art_builder_uv-project
+
+.. image:: https://img.shields.io/pypi/v/aws-lbd-art-builder-uv.svg
+    :target: https://pypi.python.org/pypi/aws-lbd-art-builder-uv
+
+.. image:: https://img.shields.io/pypi/l/aws-lbd-art-builder-uv.svg
+    :target: https://pypi.python.org/pypi/aws-lbd-art-builder-uv
+
+.. image:: https://img.shields.io/pypi/pyversions/aws-lbd-art-builder-uv.svg
+    :target: https://pypi.python.org/pypi/aws-lbd-art-builder-uv
+
+.. image:: https://img.shields.io/badge/✍️_Release_History!--None.svg?style=social&logo=github
+    :target: https://github.com/MacHu-GWU/aws_lbd_art_builder_uv-project/blob/main/release-history.rst
+
+.. image:: https://img.shields.io/badge/⭐_Star_me_on_GitHub!--None.svg?style=social&logo=github
+    :target: https://github.com/MacHu-GWU/aws_lbd_art_builder_uv-project
+
+------
+
+.. image:: https://img.shields.io/badge/Link-API-blue.svg
+    :target: https://aws-lbd-art-builder-uv.readthedocs.io/en/latest/py-modindex.html
+
+.. image:: https://img.shields.io/badge/Link-Install-blue.svg
+    :target: `install`_
+
+.. image:: https://img.shields.io/badge/Link-GitHub-blue.svg
+    :target: https://github.com/MacHu-GWU/aws_lbd_art_builder_uv-project
+
+.. image:: https://img.shields.io/badge/Link-Submit_Issue-blue.svg
+    :target: https://github.com/MacHu-GWU/aws_lbd_art_builder_uv-project/issues
+
+.. image:: https://img.shields.io/badge/Link-Request_Feature-blue.svg
+    :target: https://github.com/MacHu-GWU/aws_lbd_art_builder_uv-project/issues
+
+.. image:: https://img.shields.io/badge/Link-Download-blue.svg
+    :target: https://pypi.org/pypi/aws-lbd-art-builder-uv#files
+
+
+Welcome to ``aws_lbd_art_builder_uv`` Documentation
+==============================================================================
+.. image:: https://aws-lbd-art-builder-uv.readthedocs.io/en/latest/_static/aws_lbd_art_builder_uv-logo.png
+    :target: https://aws-lbd-art-builder-uv.readthedocs.io/en/latest/
+
+``aws_lbd_art_builder_uv`` is the **uv** backend for `aws_lbd_art_builder_core <https://github.com/MacHu-GWU/aws_lbd_art_builder_core-project>`_, providing automated AWS Lambda layer builds using `uv <https://docs.astral.sh/uv/>`_ as the package manager.
+
+It offers two builders:
+
+- **UvLambdaLayerLocalBuilder** — runs ``uv sync`` directly on the host machine. Fast, no Docker required. Best for pure-Python dependencies.
+- **UvLambdaLayerContainerBuilder** — runs ``uv sync`` inside an `AWS SAM Docker image <https://gallery.ecr.aws/sam>`_ to produce Linux-compatible binaries. Required when your layer includes packages with C extensions (e.g. ``numpy``, ``pandas``).
+
+Both builders follow a 4-step workflow: **Preflight Check → Prepare Environment → Execute Build → Finalize Artifacts**. The output is a ``artifacts/python/`` directory ready to be zipped and published as a Lambda layer. Combine with ``aws_lbd_art_builder_core``'s package, upload, and publish steps for a complete deployment pipeline.
+
+Features:
+
+- Reproducible builds via ``uv sync --frozen`` with lock files
+- Private PyPI index support (e.g. AWS CodeArtifact) via credential injection
+- Artifact validation — verify installed packages match ``pyproject.toml`` dependencies
+- Pure-stdlib container script — no pip install needed inside the container
+
+
+.. _install:
+
+Install
+------------------------------------------------------------------------------
+
+``aws_lbd_art_builder_uv`` is released on PyPI, so all you need is to:
+
+.. code-block:: console
+
+    $ pip install aws-lbd-art-builder-uv
+
+To upgrade to latest version:
+
+.. code-block:: console
+
+    $ pip install --upgrade aws-lbd-art-builder-uv

aws_lbd_art_builder_uv-0.1.1/README.rst

@@ -0,0 +1,85 @@
+
+.. image:: https://readthedocs.org/projects/aws-lbd-art-builder-uv/badge/?version=latest
+    :target: https://aws-lbd-art-builder-uv.readthedocs.io/en/latest/
+    :alt: Documentation Status
+
+.. image:: https://github.com/MacHu-GWU/aws_lbd_art_builder_uv-project/actions/workflows/main.yml/badge.svg
+    :target: https://github.com/MacHu-GWU/aws_lbd_art_builder_uv-project/actions?query=workflow:CI
+
+.. image:: https://codecov.io/gh/MacHu-GWU/aws_lbd_art_builder_uv-project/branch/main/graph/badge.svg
+    :target: https://codecov.io/gh/MacHu-GWU/aws_lbd_art_builder_uv-project
+
+.. image:: https://img.shields.io/pypi/v/aws-lbd-art-builder-uv.svg
+    :target: https://pypi.python.org/pypi/aws-lbd-art-builder-uv
+
+.. image:: https://img.shields.io/pypi/l/aws-lbd-art-builder-uv.svg
+    :target: https://pypi.python.org/pypi/aws-lbd-art-builder-uv
+
+.. image:: https://img.shields.io/pypi/pyversions/aws-lbd-art-builder-uv.svg
+    :target: https://pypi.python.org/pypi/aws-lbd-art-builder-uv
+
+.. image:: https://img.shields.io/badge/✍️_Release_History!--None.svg?style=social&logo=github
+    :target: https://github.com/MacHu-GWU/aws_lbd_art_builder_uv-project/blob/main/release-history.rst
+
+.. image:: https://img.shields.io/badge/⭐_Star_me_on_GitHub!--None.svg?style=social&logo=github
+    :target: https://github.com/MacHu-GWU/aws_lbd_art_builder_uv-project
+
+------
+
+.. image:: https://img.shields.io/badge/Link-API-blue.svg
+    :target: https://aws-lbd-art-builder-uv.readthedocs.io/en/latest/py-modindex.html
+
+.. image:: https://img.shields.io/badge/Link-Install-blue.svg
+    :target: `install`_
+
+.. image:: https://img.shields.io/badge/Link-GitHub-blue.svg
+    :target: https://github.com/MacHu-GWU/aws_lbd_art_builder_uv-project
+
+.. image:: https://img.shields.io/badge/Link-Submit_Issue-blue.svg
+    :target: https://github.com/MacHu-GWU/aws_lbd_art_builder_uv-project/issues
+
+.. image:: https://img.shields.io/badge/Link-Request_Feature-blue.svg
+    :target: https://github.com/MacHu-GWU/aws_lbd_art_builder_uv-project/issues
+
+.. image:: https://img.shields.io/badge/Link-Download-blue.svg
+    :target: https://pypi.org/pypi/aws-lbd-art-builder-uv#files
+
+
+Welcome to ``aws_lbd_art_builder_uv`` Documentation
+==============================================================================
+.. image:: https://aws-lbd-art-builder-uv.readthedocs.io/en/latest/_static/aws_lbd_art_builder_uv-logo.png
+    :target: https://aws-lbd-art-builder-uv.readthedocs.io/en/latest/
+
+``aws_lbd_art_builder_uv`` is the **uv** backend for `aws_lbd_art_builder_core <https://github.com/MacHu-GWU/aws_lbd_art_builder_core-project>`_, providing automated AWS Lambda layer builds using `uv <https://docs.astral.sh/uv/>`_ as the package manager.
+
+It offers two builders:
+
+- **UvLambdaLayerLocalBuilder** — runs ``uv sync`` directly on the host machine. Fast, no Docker required. Best for pure-Python dependencies.
+- **UvLambdaLayerContainerBuilder** — runs ``uv sync`` inside an `AWS SAM Docker image <https://gallery.ecr.aws/sam>`_ to produce Linux-compatible binaries. Required when your layer includes packages with C extensions (e.g. ``numpy``, ``pandas``).
+
+Both builders follow a 4-step workflow: **Preflight Check → Prepare Environment → Execute Build → Finalize Artifacts**. The output is a ``artifacts/python/`` directory ready to be zipped and published as a Lambda layer. Combine with ``aws_lbd_art_builder_core``'s package, upload, and publish steps for a complete deployment pipeline.
+
+Features:
+
+- Reproducible builds via ``uv sync --frozen`` with lock files
+- Private PyPI index support (e.g. AWS CodeArtifact) via credential injection
+- Artifact validation — verify installed packages match ``pyproject.toml`` dependencies
+- Pure-stdlib container script — no pip install needed inside the container
+
+
+.. _install:
+
+Install
+------------------------------------------------------------------------------
+
+``aws_lbd_art_builder_uv`` is released on PyPI, so all you need is to:
+
+.. code-block:: console
+
+    $ pip install aws-lbd-art-builder-uv
+
+To upgrade to latest version:
+
+.. code-block:: console
+
+    $ pip install --upgrade aws-lbd-art-builder-uv

aws_lbd_art_builder_uv-0.1.1/aws_lbd_art_builder_uv/__init__.py

@@ -0,0 +1 @@
+# -*- coding: utf-8 -*-

aws_lbd_art_builder_uv-0.1.1/aws_lbd_art_builder_uv/api.py

@@ -0,0 +1,3 @@
+# -*- coding: utf-8 -*-
+
+from .layer import api as layer_api

aws_lbd_art_builder_uv-0.1.1/aws_lbd_art_builder_uv/layer/__init__.py

@@ -0,0 +1,2 @@
+# -*- coding: utf-8 -*-
+

aws_lbd_art_builder_uv-0.1.1/aws_lbd_art_builder_uv/layer/_build_in_container.py

@@ -0,0 +1,183 @@
+# -*- coding: utf-8 -*-
+
+"""
+Container-side Lambda layer build script (pure stdlib, Python 3.11+).
+
+This script runs **inside** the Docker container launched by
+:class:`~aws_lbd_art_builder_uv.layer.container_builder.UvLambdaLayerContainerBuilder`.
+No third-party packages are needed — only ``uv`` (installed at runtime).
+
+**Why pure stdlib?** This script is copied into a bare AWS SAM Docker image
+that has nothing pre-installed except Python itself.  If we imported any
+third-party library here, we would have to install it inside the container
+first, adding complexity and build time.  Keeping this script stdlib-only
+means the only external tool we need to fetch is ``uv``.
+
+The host mounts ``{project_root}/build/lambda/layer/`` → ``/var/task/``.
+Layout inside the container::
+
+    /var/task/                                    ← mount point
+    ├── build_lambda_layer_in_container.py        ← this script (renamed copy)
+    ├── private-repository-credentials.json       ← optional credentials
+    └── repo/
+        ├── pyproject.toml
+        ├── uv.lock
+        └── .venv/                                ← created by uv sync
+
+The host-side step 4 moves ``repo/.venv/lib/pythonX.Y/site-packages/``
+into ``artifacts/python/`` after the container exits.
+
+See ``docs/source/99-Maintainer-Guide/03-Build-Lambda-Layer-using-UV-in-Container``
+for the full architecture guide.
+"""
+
+import os
+import sys
+import json
+import argparse
+import subprocess
+from pathlib import Path
+from datetime import datetime
+
+
+# --- Logging helpers (match the host-side BaseLogger format) ------------------
+def _log_sub_header(title: str):  # pragma: no cover
+    print("")
+    print("+----- " + title)
+    print("|")
+
+
+def _log(msg: str):  # pragma: no cover
+    print("|  " + msg)
+
+
+def parse_args():  # pragma: no cover
+    parser = argparse.ArgumentParser(
+        description="Build Lambda layer using uv inside a Docker container.",
+    )
+    parser.add_argument(
+        "--dir-task",
+        default="/var/task",
+        help="The mount point inside the container. Default: /var/task",
+    )
+    return parser.parse_args()
+
+
+def main():  # pragma: no cover
+    args = parse_args()
+    dir_task = Path(args.dir_task)
+
+    # --- Derived paths ---------------------------------------------------------
+    dir_repo = dir_task / "repo"
+    path_credentials = dir_task / "private-repository-credentials.json"
+
+    # --------------------------------------------------------------------------
+    # Step 1 — Verify container execution environment
+    # --------------------------------------------------------------------------
+    _log_sub_header("Container Step 1 - Verify Environment")
+    _log(f"dir_task = {dir_task}")
+    _log(f"dir_repo = {dir_repo}")
+    if not dir_repo.exists():
+        raise EnvironmentError(
+            f"{dir_repo} does not exist. "
+            f"This script expects the host to mount build/lambda/layer/ to {dir_task}."
+        )
+    _log("Verification OK.")
+
+    # --------------------------------------------------------------------------
+    # Step 2 — Install uv
+    #
+    # Why install uv at runtime via curl instead of pre-baking it into the
+    # Docker image?  Because we use the official AWS SAM base image directly
+    # (e.g. public.ecr.aws/sam/build-python3.12) to guarantee binary
+    # compatibility with the real Lambda runtime.  Building a custom image
+    # that bundles uv would add a maintenance burden (rebuild on every SAM
+    # image update) and defeat the purpose of using the official image.
+    # The curl install takes only a few seconds and always gets the latest uv.
+    # --------------------------------------------------------------------------
+    _log_sub_header("Container Step 2 - Install uv")
+    st = datetime.now()
+    subprocess.run(
+        "curl -LsSf https://astral.sh/uv/install.sh | sh",
+        shell=True,
+        check=True,
+    )
+    elapsed = (datetime.now() - st).total_seconds()
+    _log(f"install uv elapsed: {elapsed:.2f} seconds")
+
+    path_bin_uv = Path("/root/.local/bin/uv")
+
+    # --------------------------------------------------------------------------
+    # Step 3 — Setup private repository credentials (optional)
+    #
+    # Credentials are set up inside the container (not passed via docker env
+    # vars) because sensitive tokens should not appear in ``docker run``
+    # command lines, which are visible in process listings.  Instead, the
+    # host dumps a JSON file into the bind-mounted directory, and this
+    # script reads it.
+    # --------------------------------------------------------------------------
+    _log_sub_header("Container Step 3 - Setup Credentials")
+    if path_credentials.exists():
+        with open(path_credentials, "r") as f:
+            cred = json.load(f)
+        index_name = cred["index_name"]
+        username = cred["username"]
+        password = cred["password"]
+        # uv expects env vars in the form UV_INDEX_{NAME}_USERNAME where
+        # {NAME} is the index name uppercased with hyphens replaced by
+        # underscores.  This is the uv convention for per-index auth.
+        # See: https://docs.astral.sh/uv/configuration/indexes/
+        upper_name = index_name.upper().replace("-", "_")
+        key_user = f"UV_INDEX_{upper_name}_USERNAME"
+        key_pass = f"UV_INDEX_{upper_name}_PASSWORD"
+        os.environ[key_user] = username
+        os.environ[key_pass] = password
+        _log(f"Loaded credentials for private repository: {index_name}")
+        _log(f"Set environment variable {key_user}")
+        _log(f"Set environment variable {key_pass}")
+    else:
+        _log("No private repository credentials found, using public PyPI only.")
+
+    # --------------------------------------------------------------------------
+    # Step 4 — Run uv sync
+    # --------------------------------------------------------------------------
+    _log_sub_header("Container Step 4 - Run 'uv sync'")
+    st = datetime.now()
+    # Flag rationale:
+    #   --frozen        : use the exact versions from uv.lock without
+    #                     re-resolving, ensuring reproducible builds.
+    #   --no-dev        : exclude dev dependencies (pytest, sphinx, etc.)
+    #                     that have no place in a Lambda layer.
+    #   --no-install-project : skip installing the project package itself;
+    #                     the Lambda layer only needs the *dependencies*.
+    #                     The project code is deployed separately as the
+    #                     Lambda function handler.
+    #   --link-mode=copy : copy files instead of symlinking. Lambda layers
+    #                     are zipped and uploaded — symlinks would break
+    #                     because the link targets don't exist in the
+    #                     Lambda execution environment.
+    subprocess.run(
+        [
+            str(path_bin_uv),
+            "sync",
+            "--frozen",
+            "--no-dev",
+            "--no-install-project",
+            "--link-mode=copy",
+        ],
+        cwd=str(dir_repo),
+        check=True,
+    )
+    elapsed = (datetime.now() - st).total_seconds()
+    _log(f"uv sync elapsed: {elapsed:.2f} seconds")
+
+    major, minor = sys.version_info[:2]
+    dir_site_packages = (
+        dir_repo / ".venv" / "lib" / f"python{major}.{minor}" / "site-packages"
+    )
+    _log(f"Dependencies installed at: {dir_site_packages}")
+    _log("Container-side build completed successfully!")
+
+
+if __name__ == "__main__":  # pragma: no cover
+    main()

aws_lbd_art_builder_uv-0.1.1/aws_lbd_art_builder_uv/layer/api.py

@@ -0,0 +1,19 @@
+# -*- coding: utf-8 -*-
+
+# From this package
+# from .builder import UvLambdaLayerLocalBuilder
+# from .builder import UvLambdaLayerContainerBuilder
+from .local_builder import UvLambdaLayerLocalBuilder
+from .container_builder import UvLambdaLayerContainerBuilder
+from .validate import validate_artifacts
+
+# Re-export from core for end-user convenience
+from aws_lbd_art_builder_core.layer.api import Credentials
+from aws_lbd_art_builder_core.layer.api import LayerPathLayout
+from aws_lbd_art_builder_core.layer.api import LayerS3Layout
+from aws_lbd_art_builder_core.layer.api import move_to_dir_python
+from aws_lbd_art_builder_core.layer.api import default_ignore_package_list
+from aws_lbd_art_builder_core.layer.api import create_layer_zip_file
+from aws_lbd_art_builder_core.layer.api import upload_layer_zip_to_s3
+from aws_lbd_art_builder_core.layer.api import LambdaLayerVersionPublisher
+from aws_lbd_art_builder_core.layer.api import LayerDeployment

aws_lbd_art_builder_uv-0.1.1/aws_lbd_art_builder_uv/layer/container_builder.py

@@ -0,0 +1,177 @@
+# -*- coding: utf-8 -*-
+
+"""
+UV-based containerized Lambda layer builder.
+
+:class:`UvLambdaLayerContainerBuilder` orchestrates a Docker-based build
+that runs ``uv sync`` inside an official AWS SAM image.
+
+See ``docs/source/99-Maintainer-Guide/03-Build-Lambda-Layer-using-UV-in-Container``
+for the full architecture guide.
+"""
+
+import subprocess
+import dataclasses
+from pathlib import Path
+
+import aws_lbd_art_builder_core.api as aws_lbd_art_builder_core
+
+from ..paths import path_enum
+
+
+@dataclasses.dataclass(frozen=True)
+class UvLambdaLayerContainerBuilder(
+    aws_lbd_art_builder_core.layer_api.BaseLambdaLayerContainerBuilder,
+):  # pragma: no cover
+    """
+    Build a Lambda layer using uv inside a Docker container.
+
+    **Mount scheme**: ``{project_root}/build/lambda/layer/`` → ``/var/task/``
+
+    The container script (``_build_in_container.py``) is pure stdlib — no
+    third-party packages are installed inside the container except ``uv``.
+    """
+
+    # fmt: off
+    path_script: Path = dataclasses.field(default=path_enum.path_build_in_container_script)
+    # credentials is optional because most projects only need public PyPI.
+    # When private repositories are needed, the caller passes a Credentials
+    # object that gets serialized to JSON and read inside the container.
+    credentials: aws_lbd_art_builder_core.layer_api.Credentials | None = dataclasses.field(default=None)
+    skip_prompt: bool = dataclasses.field(default=False)
+    # fmt: on
+
+    def run(self):
+        self.step_1_preflight_check()
+        self.step_2_prepare_environment()
+        self.step_3_execute_build()
+        self.step_4_finalize_artifacts()
+
+    # --- Step 1 ---------------------------------------------------------------
+    def step_1_preflight_check(self):
+        self.log_header("Step 1 - Preflight Check")
+        self.step_1_1_print_info()
+        self.step_1_2_check()
+
+    def step_1_1_print_info(self):
+        # fmt: off
+        self.log_sub_header("Step 1.1 - Print Build Info")
+        self.log_detail(f"path_pyproject_toml = {self.path_pyproject_toml}")
+        self.log_detail(f"py_ver_major        = {self.py_ver_major}")
+        self.log_detail(f"py_ver_minor        = {self.py_ver_minor}")
+        self.log_detail(f"is_arm              = {self.is_arm}")
+        self.log_detail(f"path_script         = {self.path_script}")
+        self.log_detail(f"dir_repo            = {self.path_layout.dir_repo}")
+        self.log_detail(f"dir_build_layer     = {self.path_layout.dir_build_lambda_layer}")
+        # fmt: on
+
+    def step_1_2_check(self):
+        """
+        Check that ``uv.lock`` exists before starting the build.
+
+        Container builds are slow and resource-heavy (pulling Docker images,
+        spinning up a container).  Failing early on a missing lock file
+        saves minutes of wasted time.  The local builder skips this check
+        because local builds are fast enough that discovering the missing
+        lock file at ``uv sync`` time is acceptable.
+        """
+        self.log_sub_header("Step 1.2 - Check")
+        path_uv_lock = self.path_layout.dir_project_root / "uv.lock"
+        self.log_detail(f"Check if '{path_uv_lock}' exists ...")
+        if path_uv_lock.exists():
+            self.log_detail("Exists!")
+        else:
+            raise FileNotFoundError(
+                f"UV lock file not found: {path_uv_lock}, "
+                f"cannot proceed with uv-based build. "
+                f"Please run 'uv lock' to generate the lock file."
+            )
+
+    # --- Step 2 ---------------------------------------------------------------
+    def step_2_prepare_environment(self):
+        self.log_header("Step 2 - Prepare Environment")
+        self.step_2_1_setup_build_dir()
+        self.step_2_2_copy_build_script()
+        self.step_2_3_setup_private_repository_credential()
+        self.step_2_4_prepare_uv_stuff()
+
+    def step_2_1_setup_build_dir(self):
+        """
+        Delete ``build/lambda/layer/`` and recreate the directory structure.
+        """
+        self.log_sub_header("Step 2.1 - Setup Build Directory")
+        dir = self.path_layout.dir_build_lambda_layer
+        self.log_detail(f"Clean existing build directory: {dir}")
+        self.path_layout.clean(skip_prompt=self.skip_prompt)
+        self.path_layout.mkdirs()
+
+    def step_2_2_copy_build_script(self):
+        """
+        Copy ``_build_in_container.py`` →
+        ``build/lambda/layer/build_lambda_layer_in_container.py``.
+        """
+        self.log_sub_header("Step 2.2 - Copy Build Script")
+        p_dst = self.path_layout.path_build_lambda_layer_in_container_script_in_local
+        self.path_layout.copy_file(
+            p_src=self.path_script,
+            p_dst=p_dst,
+            printer=self.log_detail,
+        )
+
+    def step_2_3_setup_private_repository_credential(self):
+        """
+        Dump credentials JSON to ``build/lambda/layer/private-repository-credentials.json``
+        for the container script to read.
+        """
+        self.log_sub_header("Step 2.3 - Setup Private Repository Credential")
+        if not isinstance(
+            self.credentials, aws_lbd_art_builder_core.layer_api.Credentials
+        ):
+            self.log_detail("No private repository credentials provided, skip.")
+            return
+        p = (
+            self.path_layout.dir_build_lambda_layer
+            / "private-repository-credentials.json"
+        )
+        self.log_detail(f"Dump private repository credentials to {p}")
+        self.credentials.dump(path=p)
+
+    def step_2_4_prepare_uv_stuff(self):
+        """
+        Copy ``pyproject.toml`` and ``uv.lock`` to ``build/lambda/layer/repo/``.
+        """
+        self.log_sub_header("Step 2.4 - Prepare UV stuff")
+        self.path_layout.copy_pyproject_toml(printer=self.log_detail)
+        self.path_layout.copy_file(
+            p_src=self.path_layout.dir_project_root / "uv.lock",
+            p_dst=self.path_layout.dir_repo / "uv.lock",
+            printer=self.log_detail,
+        )
+
+    # --- Step 3 ---------------------------------------------------------------
+    def step_3_execute_build(self):
+        self.log_header("Step 3 - Execute Build")
+        self.step_3_1_docker_run()
+
+    def step_3_1_docker_run(self):
+        self.log_sub_header("Step 3.1 - Docker Run")
+        subprocess.run(self.docker_run_args, check=True)
+
+    # --- Step 4 ---------------------------------------------------------------
+    def step_4_finalize_artifacts(self):
+        """
+        Move ``repo/.venv/lib/pythonX.Y/site-packages/`` →
+        ``artifacts/python/`` on the host.
+        """
+        self.log_header("Step 4 - Finalize Artifacts")
+        self.step_4_1_move_site_packages_to_python()
+
+    def step_4_1_move_site_packages_to_python(self):
+        self.log_sub_header("Step 4.1 - Move site-packages to python/")
+        dir_source = self.path_layout.dir_build_lambda_layer_repo_venv_site_packages
+        dir_target = self.path_layout.dir_python
+        self.log_detail(f"Move '{dir_source}' to '{dir_target}'")
+        aws_lbd_art_builder_core.layer_api.move_to_dir_python(
+            dir_site_packages=dir_source,
+            dir_python=dir_target,
+        )