baark 0.1.0__tar.gz

baark-0.1.0/.github/workflows/ci.yml

@@ -0,0 +1,121 @@
+name: CI
+
+on:
+  pull_request:
+  push:
+    branches: [main]
+  workflow_dispatch:
+  workflow_call:
+
+permissions:
+  contents: read
+
+concurrency:
+  group: ci-${{ github.event.pull_request.number || github.run_id }}
+  cancel-in-progress: ${{ github.event_name == 'pull_request' }}
+
+env:
+  UV_VERSION: "0.12.6"
+  JUST_VERSION: "1.58.0"
+
+defaults:
+  run:
+    shell: bash
+
+jobs:
+  quality:
+    name: Quality
+    runs-on: ubuntu-24.04
+    timeout-minutes: 5
+    steps:
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
+        with:
+          persist-credentials: false
+
+      - uses: astral-sh/setup-uv@bec219d24cd3e171d82865faccec33120bb574f4 # v10.1.0
+        with:
+          version: ${{ env.UV_VERSION }}
+          python-version: "3.13"
+          cache-dependency-glob: uv.lock
+
+      - uses: extractions/setup-just@53165ef7e734c5c07cb06b3c8e7b647c5aa16db3 # v4
+        with:
+          just-version: ${{ env.JUST_VERSION }}
+
+      - name: Install actionlint
+        run: |
+          set -euo pipefail
+          curl --fail --silent --show-error --location \
+            https://github.com/rhysd/actionlint/releases/download/v1.7.12/actionlint_1.7.12_linux_amd64.tar.gz \
+            --output "$RUNNER_TEMP/actionlint.tar.gz"
+          echo "8aca8db96f1b94770f1b0d72b6dddcb1ebb8123cb3712530b08cc387b349a3d8  $RUNNER_TEMP/actionlint.tar.gz" | sha256sum --check
+          tar -xzf "$RUNNER_TEMP/actionlint.tar.gz" -C "$RUNNER_TEMP" actionlint
+          echo "$RUNNER_TEMP" >> "$GITHUB_PATH"
+
+      - run: just lint lint-workflows
+
+  build:
+    name: Distributions
+    needs: quality
+    runs-on: ubuntu-24.04
+    timeout-minutes: 5
+    steps:
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
+        with:
+          persist-credentials: false
+
+      - uses: astral-sh/setup-uv@bec219d24cd3e171d82865faccec33120bb574f4 # v10.1.0
+        with:
+          version: ${{ env.UV_VERSION }}
+          python-version: "3.13"
+          cache-dependency-glob: uv.lock
+
+      - uses: extractions/setup-just@53165ef7e734c5c07cb06b3c8e7b647c5aa16db3 # v4
+        with:
+          just-version: ${{ env.JUST_VERSION }}
+
+      - name: Build and validate release artifacts
+        env:
+          RELEASE_TAG: ${{ github.event_name == 'release' && github.event.release.tag_name || '' }}
+        run: just build
+
+      - uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
+        with:
+          name: python-distributions
+          path: |
+            dist/*.whl
+            dist/*.tar.gz
+          if-no-files-found: error
+          retention-days: 14
+
+  test:
+    name: Wheel / ${{ matrix.os }} / Python ${{ matrix.python }}
+    needs: build
+    runs-on: ${{ matrix.os }}
+    timeout-minutes: 5
+    strategy:
+      fail-fast: false
+      matrix:
+        os: [ubuntu-24.04, macos-15, windows-2025]
+        python: ["3.13", "3.14"]
+    steps:
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
+        with:
+          persist-credentials: false
+
+      - uses: astral-sh/setup-uv@bec219d24cd3e171d82865faccec33120bb574f4 # v10.1.0
+        with:
+          version: ${{ env.UV_VERSION }}
+          python-version: ${{ matrix.python }}
+          cache-dependency-glob: uv.lock
+
+      - uses: extractions/setup-just@53165ef7e734c5c07cb06b3c8e7b647c5aa16db3 # v4
+        with:
+          just-version: ${{ env.JUST_VERSION }}
+
+      - uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
+        with:
+          name: python-distributions
+          path: dist
+
+      - run: just test-wheel

baark-0.1.0/.github/workflows/publish.yml

@@ -0,0 +1,36 @@
+name: Publish to PyPI
+
+on:
+  release:
+    types: [published]
+
+permissions:
+  contents: read
+
+concurrency:
+  group: pypi-${{ github.event.release.tag_name }}
+  cancel-in-progress: false
+
+jobs:
+  checks:
+    if: github.repository == 'ngc2000/baark'
+    uses: ./.github/workflows/ci.yml
+
+  publish:
+    name: Publish tested distributions
+    needs: checks
+    runs-on: ubuntu-24.04
+    timeout-minutes: 5
+    environment:
+      name: pypi
+      url: https://pypi.org/p/baark
+    permissions:
+      id-token: write
+    steps:
+      - uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
+        with:
+          name: python-distributions
+          path: dist
+
+      - name: Publish with Trusted Publishing
+        uses: pypa/gh-action-pypi-publish@dc37677b2e1c63e2034f94d8a5b11f265b73ba33 # v1.14.2

baark-0.1.0/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 doabell
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in
+all copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN
+THE SOFTWARE.

baark-0.1.0/PKG-INFO

@@ -0,0 +1,240 @@
+Metadata-Version: 2.4
+Name: baark
+Version: 0.1.0
+Summary: Typed sync and async Python SDK for Bark push notifications
+Keywords: bark,notifications,push,async,encryption
+Author: doabell
+Author-email: doabell <35297086+doabell@users.noreply.github.com>
+License-Expression: MIT
+License-File: LICENSE
+Classifier: Development Status :: 4 - Beta
+Classifier: Intended Audience :: Developers
+Classifier: Operating System :: OS Independent
+Classifier: Programming Language :: Python :: 3 :: Only
+Classifier: Programming Language :: Python :: 3.13
+Classifier: Programming Language :: Python :: 3.14
+Classifier: Typing :: Typed
+Requires-Dist: httpx2>=2.13.0
+Requires-Dist: pycryptodome>=3.23.0
+Requires-Python: >=3.13
+Project-URL: Homepage, https://github.com/ngc2000/baark
+Project-URL: Documentation, https://github.com/ngc2000/baark#readme
+Project-URL: Source, https://github.com/ngc2000/baark
+Project-URL: Issues, https://github.com/ngc2000/baark/issues
+Project-URL: Releases, https://github.com/ngc2000/baark/releases
+Description-Content-Type: text/markdown
+
+# baark
+
+A typed Python SDK for [Bark](https://bark.day.app/) push notifications. Matching
+sync and async clients, connection pooling, rich notifications, and optional AES
+encryption. Requires Python 3.13+; built on `httpx2` and PyCryptodome.
+
+## Install
+
+From PyPI:
+
+```sh
+uv add baark
+```
+
+## Quick start
+
+Copy your device key from Bark. A URL ending in the key also works.
+
+```python
+from baark import Baark
+
+with Baark("YOUR_DEVICE_KEY", group="backups") as client:
+    result = client.send(
+        "The backup finished.",
+        title="Backup",
+        logo="https://example.com/backup.png",
+        url="https://example.com/backups/latest",
+    )
+    print(result.ok)
+```
+
+Reuse the client for repeated sends; the context manager closes its connections.
+`result.ok` confirms server acceptance, not delivery to the phone. For a single
+send, use `baark.send("Hello", device_key="YOUR_DEVICE_KEY")`.
+
+### Async
+
+```python
+import asyncio
+
+from baark import AsyncBaark
+
+
+async def main() -> None:
+    async with AsyncBaark("YOUR_DEVICE_KEY") as client:
+        await client.send("Job finished", title="Build")
+
+
+asyncio.run(main())
+```
+
+Both clients have the same options and operations; await async network calls.
+The one-shot async helper is `baark.async_send()`.
+
+### Notification options
+
+Pass options to `send()`, store them in a `Message`, or set client defaults.
+Per-call options override message fields, which override client defaults.
+Pass `None` in a call to clear an inherited option.
+
+| Purpose | Options |
+| --- | --- |
+| Content | `body`, `title`, `subtitle`, `markdown` |
+| Media | `icon` / `logo` (aliases), `image`, `sound` |
+| Attention | `level`, `volume`, `badge`, `call` |
+| Interaction | `url`, `action`, `copy`, `auto_copy` |
+| History | `group`, `archive`, `ttl` |
+| Lifecycle | `id`, `delete` |
+
+Use Python booleans for flags. Media URLs must be reachable by the phone.
+See [message types](https://github.com/ngc2000/baark/blob/main/src/baark/models.py) for all options and
+[Bark's field reference](https://github.com/Finb/Bark/blob/master/docs/en-us/tutorial.md)
+for device behavior.
+
+### Update and delete
+
+```python
+with Baark("YOUR_DEVICE_KEY") as client:
+    client.send("Downloading…", id="download-42")
+    client.update("download-42", "Complete")
+    client.delete("download-42")
+```
+
+Updates replace the complete message using the same ID. They require Bark 1.5.2+
+and bark-server 2.2.5+. Deletion removes the notification and its history entry;
+it requires Background App Refresh and may be delayed by iOS.
+
+## Encryption
+
+**Use GCM for new configurations.** It encrypts the message and detects ciphertext
+tampering. CBC and ECB are available for compatibility with existing Bark settings.
+
+```python
+import os
+
+from baark import Baark, Encryption
+
+settings = Encryption(os.environ["BAARK_ENCRYPTION_KEY"])  # GCM by default
+with Baark("YOUR_DEVICE_KEY", encryption=settings) as client:
+    client.send("Private content", title="Private title")
+```
+
+Use the same key, algorithm, mode, and padding in Bark's **Push Encryption**
+settings. Keys are 16, 24, or 32 printable ASCII characters, selecting AES-128,
+AES-192, or AES-256. Key size and mode are separate choices: a longer key does
+not add tamper detection to CBC or ECB.
+
+| Mode | Protection | IV / nonce in baark | Bark padding | Choose it for |
+| --- | --- | --- | --- | --- |
+| **GCM** (default) | Encrypts and detects tampering | Fresh 12-character nonce per message | `noPadding` | New setups |
+| **CBC** | Encrypts; no tamper detection | Fresh 16-character IV by default | `pkcs7` | Existing CBC setups |
+| **ECB** | Encrypts but reveals repeated blocks; no tamper detection | None | `pkcs7` | Legacy compatibility only |
+
+An IV or nonce is a public value used alongside the key. Leave `iv` unset so
+baark generates it for each GCM or CBC message; Bark reads it from the request.
+Fixed GCM nonces are rejected because reuse breaks its security. Fixed CBC IVs
+are supported for compatibility, but reuse leaks repeated message prefixes.
+See PyCryptodome's [GCM](https://pycryptodome.readthedocs.io/en/latest/src/cipher/modern.html#gcm-mode)
+and [CBC/ECB](https://pycryptodome.readthedocs.io/en/latest/src/cipher/classic.html)
+documentation for the underlying modes.
+
+To create settings, run `settings = Encryption.generate()` once, save the key, and enter
+`settings.key`, `settings.algorithm`, `settings.mode`, and `settings.padding` in
+Bark. It defaults to AES-256-GCM. To import an encoded key, use
+`Encryption.from_key(value, encoding="hex")` or `encoding="base64"`; enter the
+decoded key in Bark. Hex and base64 are encodings, not encryption methods.
+
+Encryption hides message fields, including titles and media URLs, from the Bark
+server. Device routing, IVs, and `id`/`delete` controls remain visible. The key is
+never sent. Without this option, HTTPS protects transport but the server can read
+notification content.
+
+## Configuration and errors
+
+Set `server_url=` for a custom server. `Baark.from_env()` and
+`AsyncBaark.from_env()` read these optional settings from the process environment:
+
+| Variable | Value |
+| --- | --- |
+| `BAARK_DEVICE_KEY` | Device key or URL ending in the key |
+| `BAARK_SERVER_URL` | Custom server URL |
+| `BAARK_ENCRYPTION_KEY` | Literal key matching Bark |
+| `BAARK_ENCRYPTION_MODE` | `GCM` (default), `CBC`, or `ECB` |
+| `BAARK_ENCRYPTION_IV` | Optional fixed CBC IV |
+
+Ordinary constructors do not load these variables or config files. HTTP requests
+default to a 10-second timeout, with redirects and retries disabled. Set
+`timeout=`, `auth=`, or inject an `httpx2.Client` / `AsyncClient` with `http_client=`
+for custom transport settings. Injected clients remain caller-owned; configure
+authentication on them.
+HTTP query defaults such as authentication tokens are preserved; notification and
+routing fields come from baark's arguments and messages.
+
+Send to multiple devices with `client.send("Hello", device_keys=["KEY_A", "KEY_B"])`.
+Encrypted batches require all recipients to share encryption settings.
+Partial failures raise `BatchError`; inspect `error.response.deliveries` for each
+result. All SDK errors inherit from `BaarkError`. `APIError` exposes
+`status_code`, `code`, and `apns_reason`; raw `server_message` is available
+explicitly and may contain sensitive data.
+
+For alternate endpoints, server utilities, registration, and URL building, see
+the [client API](https://github.com/ngc2000/baark/blob/main/src/baark/client.py). Also see
+[response and message types](https://github.com/ngc2000/baark/blob/main/src/baark/models.py),
+[errors](https://github.com/ngc2000/baark/blob/main/src/baark/errors.py), and
+[encryption helpers](https://github.com/ngc2000/baark/blob/main/src/baark/crypto.py).
+
+## Alternatives
+
+| Project | Useful when you want | Documented encryption support |
+| --- | --- | --- |
+| **baark** | Reusable, typed sync and async Bark clients in Python | GCM, CBC, ECB |
+| [iskoldtbark](https://pypi.org/project/iskoldtbark/) | A Bark CLI with saved devices, recipient groups, and per-device keys | AES-256-GCM; AES-128/192/256-CBC |
+| [bark-python](https://pypi.org/project/bark-python/) | A small client with replaceable encryption strategies | Built-in CBC and ECB; custom strategies |
+| [Apprise](https://appriseit.com/) | One library or CLI for Bark and other notification services | [Bark AES-GCM](https://appriseit.com/services/bark/#encryption) |
+
+For simple scripts, [Bark's HTTP API](https://github.com/Finb/Bark/blob/master/docs/en-us/tutorial.md)
+also works directly with curl or your existing HTTP client.
+
+## Development
+
+Install [uv](https://docs.astral.sh/uv/), [just](https://just.systems/), and
+[actionlint](https://github.com/rhysd/actionlint), then run `uv sync --locked`.
+Windows development also needs Bash, as provided by Git for Windows.
+
+### Test with your phone
+
+Copy `.env.example` with `cp -n .env.example .env`, then edit `.env` with your
+device key and optional encryption settings. Leave unused settings commented out.
+
+```sh
+uv run python scripts/e2e.py --list-cases
+uv run --env-file .env python scripts/e2e.py --client sync --case logo image markdown
+```
+
+These selected cases send three real notifications. Check the phone, then repeat
+with the same client and cases plus `--action update` or `--action delete`.
+`--case all` covers nine cases; the default client selection, `both`, doubles
+the count. Use `--help` for media URL overrides and other options.
+
+### Offline checks
+
+```sh
+just check
+just build
+just test-wheel
+```
+
+The test suite uses mock HTTP transports and encryption vectors. Coverage checks
+enforce the threshold in `pyproject.toml`. CI tests the built wheel on Python 3.13
+and 3.14 across Linux, macOS, and Windows.
+
+## License
+
+[MIT](https://github.com/ngc2000/baark/blob/main/LICENSE).

baark-0.1.0/README.md

@@ -0,0 +1,214 @@
+# baark
+
+A typed Python SDK for [Bark](https://bark.day.app/) push notifications. Matching
+sync and async clients, connection pooling, rich notifications, and optional AES
+encryption. Requires Python 3.13+; built on `httpx2` and PyCryptodome.
+
+## Install
+
+From PyPI:
+
+```sh
+uv add baark
+```
+
+## Quick start
+
+Copy your device key from Bark. A URL ending in the key also works.
+
+```python
+from baark import Baark
+
+with Baark("YOUR_DEVICE_KEY", group="backups") as client:
+    result = client.send(
+        "The backup finished.",
+        title="Backup",
+        logo="https://example.com/backup.png",
+        url="https://example.com/backups/latest",
+    )
+    print(result.ok)
+```
+
+Reuse the client for repeated sends; the context manager closes its connections.
+`result.ok` confirms server acceptance, not delivery to the phone. For a single
+send, use `baark.send("Hello", device_key="YOUR_DEVICE_KEY")`.
+
+### Async
+
+```python
+import asyncio
+
+from baark import AsyncBaark
+
+
+async def main() -> None:
+    async with AsyncBaark("YOUR_DEVICE_KEY") as client:
+        await client.send("Job finished", title="Build")
+
+
+asyncio.run(main())
+```
+
+Both clients have the same options and operations; await async network calls.
+The one-shot async helper is `baark.async_send()`.
+
+### Notification options
+
+Pass options to `send()`, store them in a `Message`, or set client defaults.
+Per-call options override message fields, which override client defaults.
+Pass `None` in a call to clear an inherited option.
+
+| Purpose | Options |
+| --- | --- |
+| Content | `body`, `title`, `subtitle`, `markdown` |
+| Media | `icon` / `logo` (aliases), `image`, `sound` |
+| Attention | `level`, `volume`, `badge`, `call` |
+| Interaction | `url`, `action`, `copy`, `auto_copy` |
+| History | `group`, `archive`, `ttl` |
+| Lifecycle | `id`, `delete` |
+
+Use Python booleans for flags. Media URLs must be reachable by the phone.
+See [message types](https://github.com/ngc2000/baark/blob/main/src/baark/models.py) for all options and
+[Bark's field reference](https://github.com/Finb/Bark/blob/master/docs/en-us/tutorial.md)
+for device behavior.
+
+### Update and delete
+
+```python
+with Baark("YOUR_DEVICE_KEY") as client:
+    client.send("Downloading…", id="download-42")
+    client.update("download-42", "Complete")
+    client.delete("download-42")
+```
+
+Updates replace the complete message using the same ID. They require Bark 1.5.2+
+and bark-server 2.2.5+. Deletion removes the notification and its history entry;
+it requires Background App Refresh and may be delayed by iOS.
+
+## Encryption
+
+**Use GCM for new configurations.** It encrypts the message and detects ciphertext
+tampering. CBC and ECB are available for compatibility with existing Bark settings.
+
+```python
+import os
+
+from baark import Baark, Encryption
+
+settings = Encryption(os.environ["BAARK_ENCRYPTION_KEY"])  # GCM by default
+with Baark("YOUR_DEVICE_KEY", encryption=settings) as client:
+    client.send("Private content", title="Private title")
+```
+
+Use the same key, algorithm, mode, and padding in Bark's **Push Encryption**
+settings. Keys are 16, 24, or 32 printable ASCII characters, selecting AES-128,
+AES-192, or AES-256. Key size and mode are separate choices: a longer key does
+not add tamper detection to CBC or ECB.
+
+| Mode | Protection | IV / nonce in baark | Bark padding | Choose it for |
+| --- | --- | --- | --- | --- |
+| **GCM** (default) | Encrypts and detects tampering | Fresh 12-character nonce per message | `noPadding` | New setups |
+| **CBC** | Encrypts; no tamper detection | Fresh 16-character IV by default | `pkcs7` | Existing CBC setups |
+| **ECB** | Encrypts but reveals repeated blocks; no tamper detection | None | `pkcs7` | Legacy compatibility only |
+
+An IV or nonce is a public value used alongside the key. Leave `iv` unset so
+baark generates it for each GCM or CBC message; Bark reads it from the request.
+Fixed GCM nonces are rejected because reuse breaks its security. Fixed CBC IVs
+are supported for compatibility, but reuse leaks repeated message prefixes.
+See PyCryptodome's [GCM](https://pycryptodome.readthedocs.io/en/latest/src/cipher/modern.html#gcm-mode)
+and [CBC/ECB](https://pycryptodome.readthedocs.io/en/latest/src/cipher/classic.html)
+documentation for the underlying modes.
+
+To create settings, run `settings = Encryption.generate()` once, save the key, and enter
+`settings.key`, `settings.algorithm`, `settings.mode`, and `settings.padding` in
+Bark. It defaults to AES-256-GCM. To import an encoded key, use
+`Encryption.from_key(value, encoding="hex")` or `encoding="base64"`; enter the
+decoded key in Bark. Hex and base64 are encodings, not encryption methods.
+
+Encryption hides message fields, including titles and media URLs, from the Bark
+server. Device routing, IVs, and `id`/`delete` controls remain visible. The key is
+never sent. Without this option, HTTPS protects transport but the server can read
+notification content.
+
+## Configuration and errors
+
+Set `server_url=` for a custom server. `Baark.from_env()` and
+`AsyncBaark.from_env()` read these optional settings from the process environment:
+
+| Variable | Value |
+| --- | --- |
+| `BAARK_DEVICE_KEY` | Device key or URL ending in the key |
+| `BAARK_SERVER_URL` | Custom server URL |
+| `BAARK_ENCRYPTION_KEY` | Literal key matching Bark |
+| `BAARK_ENCRYPTION_MODE` | `GCM` (default), `CBC`, or `ECB` |
+| `BAARK_ENCRYPTION_IV` | Optional fixed CBC IV |
+
+Ordinary constructors do not load these variables or config files. HTTP requests
+default to a 10-second timeout, with redirects and retries disabled. Set
+`timeout=`, `auth=`, or inject an `httpx2.Client` / `AsyncClient` with `http_client=`
+for custom transport settings. Injected clients remain caller-owned; configure
+authentication on them.
+HTTP query defaults such as authentication tokens are preserved; notification and
+routing fields come from baark's arguments and messages.
+
+Send to multiple devices with `client.send("Hello", device_keys=["KEY_A", "KEY_B"])`.
+Encrypted batches require all recipients to share encryption settings.
+Partial failures raise `BatchError`; inspect `error.response.deliveries` for each
+result. All SDK errors inherit from `BaarkError`. `APIError` exposes
+`status_code`, `code`, and `apns_reason`; raw `server_message` is available
+explicitly and may contain sensitive data.
+
+For alternate endpoints, server utilities, registration, and URL building, see
+the [client API](https://github.com/ngc2000/baark/blob/main/src/baark/client.py). Also see
+[response and message types](https://github.com/ngc2000/baark/blob/main/src/baark/models.py),
+[errors](https://github.com/ngc2000/baark/blob/main/src/baark/errors.py), and
+[encryption helpers](https://github.com/ngc2000/baark/blob/main/src/baark/crypto.py).
+
+## Alternatives
+
+| Project | Useful when you want | Documented encryption support |
+| --- | --- | --- |
+| **baark** | Reusable, typed sync and async Bark clients in Python | GCM, CBC, ECB |
+| [iskoldtbark](https://pypi.org/project/iskoldtbark/) | A Bark CLI with saved devices, recipient groups, and per-device keys | AES-256-GCM; AES-128/192/256-CBC |
+| [bark-python](https://pypi.org/project/bark-python/) | A small client with replaceable encryption strategies | Built-in CBC and ECB; custom strategies |
+| [Apprise](https://appriseit.com/) | One library or CLI for Bark and other notification services | [Bark AES-GCM](https://appriseit.com/services/bark/#encryption) |
+
+For simple scripts, [Bark's HTTP API](https://github.com/Finb/Bark/blob/master/docs/en-us/tutorial.md)
+also works directly with curl or your existing HTTP client.
+
+## Development
+
+Install [uv](https://docs.astral.sh/uv/), [just](https://just.systems/), and
+[actionlint](https://github.com/rhysd/actionlint), then run `uv sync --locked`.
+Windows development also needs Bash, as provided by Git for Windows.
+
+### Test with your phone
+
+Copy `.env.example` with `cp -n .env.example .env`, then edit `.env` with your
+device key and optional encryption settings. Leave unused settings commented out.
+
+```sh
+uv run python scripts/e2e.py --list-cases
+uv run --env-file .env python scripts/e2e.py --client sync --case logo image markdown
+```
+
+These selected cases send three real notifications. Check the phone, then repeat
+with the same client and cases plus `--action update` or `--action delete`.
+`--case all` covers nine cases; the default client selection, `both`, doubles
+the count. Use `--help` for media URL overrides and other options.
+
+### Offline checks
+
+```sh
+just check
+just build
+just test-wheel
+```
+
+The test suite uses mock HTTP transports and encryption vectors. Coverage checks
+enforce the threshold in `pyproject.toml`. CI tests the built wheel on Python 3.13
+and 3.14 across Linux, macOS, and Windows.
+
+## License
+
+[MIT](https://github.com/ngc2000/baark/blob/main/LICENSE).

baark-0.1.0/justfile

@@ -0,0 +1,40 @@
+set default-list := true
+set dotenv-load := false
+set shell := ["bash", "-euo", "pipefail", "-c"]
+set windows-shell := ["bash", "-euo", "pipefail", "-c"]
+
+# Format Python source.
+format:
+    uv run --locked python -m ruff format .
+
+# Check the lockfile, lint, formatting, and types without changing files.
+lint:
+    uv lock --check
+    uv run --locked python -m ruff check .
+    uv run --locked python -m ruff format --check .
+    uv run --locked python -m ty check
+
+# Validate GitHub Actions (requires actionlint).
+lint-workflows:
+    actionlint .github/workflows/*.yml
+
+# Run offline tests and enforce coverage.
+test:
+    uv run --locked python -m coverage run
+    uv run --locked python -m coverage report
+
+# Run all source and workflow checks.
+check: lint lint-workflows test
+
+# Build fresh distributions and check their metadata and contents.
+build:
+    uv build --clear --no-sources
+    uv run --locked python -m twine check --strict dist/*
+    uv run --locked python scripts/check_dist.py
+
+# Install the built wheel, then run the offline suite against that installation.
+test-wheel:
+    uv sync --locked --no-install-project
+    uv pip install --no-deps --reinstall dist/*.whl
+    uv run --no-sync python -I scripts/check_wheel.py
+    UV_NO_SYNC=true just test