bashrun 0.5.0.dev37378802238__tar.gz → 0.6.0__tar.gz

bashrun-0.6.0/.github/workflows/integrate.yml

@@ -0,0 +1,24 @@
+name: Integrate
+
+on:
+  workflow_dispatch:
+  pull_request:
+    branches: [dev]
+
+concurrency:
+  group: integrate-${{ github.ref }}
+  cancel-in-progress: true
+
+permissions:
+  contents: read
+
+jobs:
+  preflight:
+    uses: outernet-foundation/github-actions-toolkit/.github/workflows/preflight.yml@decae45a7f5044695cabf9a2ad2913dfe6d239ce
+
+  update-pr-draft-release:
+    needs: [preflight]
+    permissions:
+      contents: write
+      packages: read
+    uses: outernet-foundation/github-actions-toolkit/.github/workflows/update-pr-draft-release.yml@decae45a7f5044695cabf9a2ad2913dfe6d239ce

bashrun-0.6.0/.github/workflows/merge-gate.yml

@@ -0,0 +1,18 @@
+name: Merge gate
+
+on:
+  pull_request:
+    branches: [dev]
+    types: [labeled]
+
+concurrency:
+  group: merge-gate-${{ github.event.pull_request.number }}
+
+permissions:
+  contents: read
+
+jobs:
+  merge-gate:
+    uses: outernet-foundation/github-actions-toolkit/.github/workflows/merge-gate.yml@decae45a7f5044695cabf9a2ad2913dfe6d239ce
+    secrets:
+      merge-bot-private-key: ${{ secrets.MERGE_BOT_APP_PRIVATE_KEY }}

bashrun-0.6.0/.github/workflows/release.yml

@@ -0,0 +1,32 @@
+name: Release
+
+on:
+  push:
+    branches: [main, dev]
+
+concurrency:
+  group: release-${{ github.ref }}
+
+permissions:
+  contents: read
+
+jobs:
+  prerelease:
+    if: github.ref == 'refs/heads/dev'
+    runs-on: ubuntu-latest
+    permissions:
+      contents: write
+      id-token: write
+    steps:
+      - uses: outernet-foundation/github-actions-toolkit/.github/actions/release@decae45a7f5044695cabf9a2ad2913dfe6d239ce
+
+  release:
+    if: github.ref == 'refs/heads/main'
+    runs-on: ubuntu-latest
+    permissions:
+      contents: write
+      id-token: write
+    steps:
+      - uses: outernet-foundation/github-actions-toolkit/.github/actions/release@decae45a7f5044695cabf9a2ad2913dfe6d239ce
+        with:
+          stable: true

{bashrun-0.5.0.dev37378802238 → bashrun-0.6.0}/AGENTS.md

@@ -29,12 +29,12 @@ The package is `bashrun` (src-layout under `src/bashrun/`); consumer repos decla
 
 **`KeyboardInterrupt` handling is load-bearing, not incidental.** Each helper's `except KeyboardInterrupt` waits up to five seconds for the child to exit cleanly, then kills, then re-raises. Naive `subprocess.run` doesn't propagate Ctrl+C to a long-running child in a way that lets the child clean up; the wait-then-kill dance is why callers can trust that Ctrl+C in the parent actually reaches (and eventually terminates) the child.
 
-**Wheel must ship `py.typed`.** The package is typed and consumers expect strict-mode-friendly imports. A real hatch-built wheel omits non-Python files unless `[tool.hatch.build.targets.wheel] include` names them; drop the `py.typed` entry from `pyproject.toml` and downstream basedpyright/mypy silently treat the package as untyped.
+**Wheel must ship `py.typed`.** The package is typed and consumers expect strict-mode-friendly imports; drop `py.typed` from the package and downstream basedpyright/mypy silently treat the package as untyped. Hatchling's `packages` selection ships every git-tracked file under the package directory, so `py.typed` rides along with no configuration — an explicit `include = ["src/bashrun/py.typed"]` entry is redundant, not a required allowlist.
 
 **The module-level `# ruff: noqa: S404, S603` in `bash.py` stays.** This package *is* the subprocess wrapper — importing and calling `subprocess` unsafely is its whole job. The suppression is the wrapper boundary (case 1 in the shared "fix warnings; suppress only under a wrapped or tracked exception" rule): every `subprocess` usage lives inside this one file, and the header declares it as the sanctioned suppression site so audits don't have to reason about each call individually.
 
 ## Release flow
 
-release-devkit's `AGENTS.md` owns the three-workflow contract; this repo follows it unchanged. Repo-specific facts: release-devkit is never a project dependency (bashrun sits inside its dependency graph; a project-level edge is a resolver cycle), and API-breaking changes ship with a manually bumped `major_minor` (patch-auto assumes additive changes).
+github-actions-toolkit's `AGENTS.md` owns the workflow contract (integrate/merge-gate/release, all reusables and the release composite); this repo follows it unchanged — the workflows here contain no local jobs. Repo-specific facts: the toolkit is never a project dependency (bashrun sits inside its dependency graph; a project-level edge is a resolver cycle — the Python package/distribution keeps the historical `release_devkit` name, and the root config file stays `release-devkit.yaml`), and API-breaking changes ship with a manually bumped `major_minor` (patch-auto assumes additive changes).
 
-This repo cannot take python-devkit as a dependency (python-devkit runtime-depends on bashrun; uv's resolver rejects the name-shadowing as a self-dependency), so its own preflight consumes python-devkit through the `tools/devkit/` sidecar: a `package = false` project named `bashrun-devkit` that exact-pins `python-devkit` — the different root name lets the dependency resolve to PyPI inside the sidecar's isolated env with no shadowing. `--project` uses the sidecar env but leaves cwd at the repo root, so preflight's child `uv run` calls (sync, ruff, pytest, …) re-discover bashrun's real project and run in bashrun's `.venv`. The committed `tools/devkit/uv.lock` is the single version surface, checked with `uv lock --check --project tools/devkit`.
+This repo cannot take python-devkit as a dependency (python-devkit runtime-depends on bashrun; uv's resolver rejects the name-shadowing as a self-dependency), so its own preflight consumes python-devkit through the `tools/devkit/` sidecar: a `package = false` project named `bashrun-devkit` flooring `python-devkit>=0.3.0.dev0` — the different root name lets the dependency resolve to PyPI inside the sidecar's isolated env with no shadowing. The toolkit's preflight reusable invokes `uv run --locked scripts/preflight.py`; that two-line script dogfoods bashrun to run `uv run --project tools/devkit --locked preflight-python`. `--project` uses the sidecar env but leaves cwd at the repo root, so preflight's child `uv run` calls (sync, ruff, pytest, …) re-discover bashrun's real project and run in bashrun's `.venv`. The committed `tools/devkit/uv.lock` is the single version surface, enforced by `--locked` on the sidecar invocation.

{bashrun-0.5.0.dev37378802238 → bashrun-0.6.0}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.5
 Name: bashrun
-Version: 0.5.0.dev37378802238
+Version: 0.6.0
 Summary: Guardrailed shell-exec helpers for Python
 License-File: LICENSE
 License-File: NOTICE

{bashrun-0.5.0.dev37378802238 → bashrun-0.6.0}/pyproject.toml

@@ -1,6 +1,6 @@
 [project]
 name = "bashrun"
-version = "0.5.0.dev37378802238"
+version = "0.6.0"
 description = "Guardrailed shell-exec helpers for Python"
 requires-python = ">=3.13"
 dependencies = []
@@ -14,7 +14,6 @@ build-backend = "hatchling.build"
 
 [tool.hatch.build.targets.wheel]
 packages = ["src/bashrun"]
-include = ["src/bashrun/py.typed"]
 
 [tool.basedpyright]
 venvPath = "."

bashrun-0.6.0/release-devkit.yaml

@@ -0,0 +1,6 @@
+packages:
+  bashrun:
+    path: .
+    major_minor: "0.6"
+    registry: pypi
+    identity: bashrun

bashrun-0.6.0/scripts/preflight.py

@@ -0,0 +1,3 @@
+from bashrun.bash import bash
+
+bash("uv run --project tools/devkit --locked preflight-python")

{bashrun-0.5.0.dev37378802238 → bashrun-0.6.0}/src/bashrun/bash.py

@@ -43,6 +43,15 @@ def _merge_env(env: dict[str, str] | None) -> dict[str, str] | None:
     return {**os.environ, **env} if env else None
 
 
+def _encode_stdin(stdin_text: str | None) -> bytes | None:
+    # Not text=True: that wraps stdin in a TextIOWrapper with newline=None, which rewrites every
+    # \n to os.linesep on write. On Windows the child then reads \r\n, and anything parsing
+    # line-oriented input sees a trailing \r on every record -- `git update-index --index-info`
+    # rejects all of them as invalid paths, for instance. Writing bytes sends exactly what the
+    # caller composed, on every platform.
+    return stdin_text.encode() if stdin_text is not None else None
+
+
 def bash_output(
     command: str, *, cwd: Path | None = None, stdin_text: str | None = None, env: dict[str, str] | None = None
 ) -> str:
@@ -56,10 +65,9 @@ def bash_output(
         stdout=subprocess.PIPE,
         stderr=subprocess.PIPE,
         stdin=subprocess.PIPE if stdin_text else None,
-        text=True,
     ) as process:
         try:
-            stdout, stderr = process.communicate(input=stdin_text)
+            raw_stdout, raw_stderr = process.communicate(input=_encode_stdin(stdin_text))
         except KeyboardInterrupt:
             try:
                 process.wait(timeout=5)
@@ -67,12 +75,15 @@ def bash_output(
                 process.kill()
             raise
 
+        stdout = raw_stdout.decode(errors="replace") if raw_stdout else ""
+        stderr = raw_stderr.decode(errors="replace") if raw_stderr else ""
+
         if process.returncode != 0:
             if stderr:
                 print(stderr, file=sys.stderr, end="")
             raise CalledProcessError(process.returncode, command, output=stdout, stderr=stderr)
 
-        return stdout or ""
+        return stdout
 
 
 def bash(
@@ -102,12 +113,11 @@ def bash(
                 stdout=stdout,
                 stderr=stderr,
                 stdin=subprocess.PIPE if stdin_text else None,
-                text=True,
             )
         )
 
         try:
-            process.communicate(input=stdin_text)
+            process.communicate(input=_encode_stdin(stdin_text))
         except KeyboardInterrupt:
             try:
                 process.wait(timeout=5)

{bashrun-0.5.0.dev37378802238 → bashrun-0.6.0}/tools/devkit/pyproject.toml

@@ -2,7 +2,7 @@
 name = "bashrun-devkit"
 version = "0"
 requires-python = ">=3.13"
-dependencies = ["python-devkit==0.1.15"]
+dependencies = ["python-devkit>=0.3.0.dev0"]
 
 [tool.uv]
 package = false

{bashrun-0.5.0.dev37378802238 → bashrun-0.6.0}/tools/devkit/uv.lock

@@ -38,21 +38,7 @@ dependencies = [
 ]
 
 [package.metadata]
-requires-dist = [{ name = "python-devkit", specifier = "==0.1.15" }]
-
-[[package]]
-name = "ci-devkit"
-version = "0.1.13"
-source = { registry = "https://pypi.org/simple" }
-dependencies = [
-    { name = "bashrun" },
-    { name = "pydantic" },
-    { name = "pydantic-settings" },
-]
-sdist = { url = "https://files.pythonhosted.org/packages/0c/c3/4fa23868b52713a8ed871334fb12f3473cc9f8778d8c09ef5b57aa7f5ff0/ci_devkit-0.1.13.tar.gz", hash = "sha256:8b750c1f0b953bc045e206a5a39093f3cde824b2f3dfdc5d3810d55372c3da4f", size = 40536, upload-time = "2026-09-28T07:48:31.116Z" }
-wheels = [
-    { url = "https://files.pythonhosted.org/packages/6a/9a/388cc8375cb2bab3c1cbb9d7d96eb5abb951a4b037aafbf3c88d4c02cae3/ci_devkit-0.1.13-py3-none-any.whl", hash = "sha256:7b08f1b21691e3855b7747e060e1bc6e441664386ba346093bd14bd5327cffdd", size = 25686, upload-time = "2026-09-28T07:48:30.104Z" },
-]
+requires-dist = [{ name = "python-devkit", specifier = ">=0.3.0.dev0" }]
 
 [[package]]
 name = "colorama"
@@ -155,20 +141,6 @@ wheels = [
     { url = "https://files.pythonhosted.org/packages/63/19/67830dda664e6bdf9285ee2e40f355d0d7d6b92aa0c42e8d217bb8d33d36/pydantic_core-2.46.5-cp314-cp314t-win_arm64.whl", hash = "sha256:acf8a67ba51f4ca9ddbd0e6b3000a65ac51ab734661778b3e7ba64d99a710f2f", size = 1989276, upload-time = "2026-08-28T10:00:16.984Z" },
 ]
 
-[[package]]
-name = "pydantic-settings"
-version = "2.15.0"
-source = { registry = "https://pypi.org/simple" }
-dependencies = [
-    { name = "pydantic" },
-    { name = "python-dotenv" },
-    { name = "typing-inspection" },
-]
-sdist = { url = "https://files.pythonhosted.org/packages/68/ca/31c57507b13119d7d3cfa1576dad2911a4861e3be07b579395f4e9d393f9/pydantic_settings-2.15.0.tar.gz", hash = "sha256:694b793e84f766ba76a90ebdefc01d0a9a045dab0382bee70393da93712ad117", size = 261253, upload-time = "2026-08-07T09:24:57.419Z" }
-wheels = [
-    { url = "https://files.pythonhosted.org/packages/30/a4/2bffa9f8e804325a09867f0e9d30795c80ea9f8d62560bd1b6ad6220eb2f/pydantic_settings-2.15.0-py3-none-any.whl", hash = "sha256:0ba092c291c94baceb5eff768aa0d56400a457585bc0175925a5a5510303da42", size = 69413, upload-time = "2026-08-07T09:24:55.839Z" },
-]
-
 [[package]]
 name = "pygments"
 version = "2.21.0"
@@ -180,26 +152,16 @@ wheels = [
 
 [[package]]
 name = "python-devkit"
-version = "0.1.15"
+version = "0.3.0.dev38096025533"
 source = { registry = "https://pypi.org/simple" }
 dependencies = [
     { name = "bashrun" },
-    { name = "ci-devkit" },
     { name = "pydantic" },
     { name = "typer" },
 ]
-sdist = { url = "https://files.pythonhosted.org/packages/82/53/c3b37f69c35475b09cdf1c18deb193238d7ab5143ee6bc97e5c22c48fe87/python_devkit-0.1.15.tar.gz", hash = "sha256:ac1ef0f2a4622e9c97763f4e353005c41164e2d6d4b130cdb709e811947f253d", size = 34651, upload-time = "2026-09-30T04:12:18.88Z" }
-wheels = [
-    { url = "https://files.pythonhosted.org/packages/b6/81/da4f76cbfccb5a4d5a58a9f51d3e2b7d40f6dc9edd931d7891b2789adeae/python_devkit-0.1.15-py3-none-any.whl", hash = "sha256:0c13684cc780e3ba9b3e25feed61065b355e8fc7436bee043e7c6adf71fa40e7", size = 14537, upload-time = "2026-09-30T04:12:17.918Z" },
-]
-
-[[package]]
-name = "python-dotenv"
-version = "1.2.3"
-source = { registry = "https://pypi.org/simple" }
-sdist = { url = "https://files.pythonhosted.org/packages/6a/53/ed9d74092561d4b01a2ef1349d52cdbc135e526c245f366b089cfca6de49/python_dotenv-1.2.3.tar.gz", hash = "sha256:a20a594dabeaa385725aa239d5244871c143ecb356add8a20fcf23773a6c3a35", size = 58945, upload-time = "2026-08-16T16:54:54.067Z" }
+sdist = { url = "https://files.pythonhosted.org/packages/85/07/160d8d87f184c1f9a32e2dd64a413695d10dad275d1684f89728d28c543c/python_devkit-0.3.0.dev38096025533.tar.gz", hash = "sha256:94b6f3d63b9192ede7d4bff2a3fabcc714a202807e2a7468c0047920837bb657", size = 33112, upload-time = "2026-10-10T23:47:13.476Z" }
 wheels = [
-    { url = "https://files.pythonhosted.org/packages/0d/17/c5c6b53ddc18f297992099b3d9ec16c855c0ccc83263a21fe4d1c625ec6c/python_dotenv-1.2.3-py3-none-any.whl", hash = "sha256:904552145e8bfed22162c09dab1c2b9b54fefa7b23ba780f4f26ca0316b0f0d9", size = 22780, upload-time = "2026-08-16T16:54:52.473Z" },
+    { url = "https://files.pythonhosted.org/packages/12/66/c87d7ab58ba1ded58dfb21fe0c9783231d7a67514fd335239bd95df58414/python_devkit-0.3.0.dev38096025533-py3-none-any.whl", hash = "sha256:605aeabb81770f6393e771518639512fd6a7c39b5a22554dfe747fd9de3a0205", size = 14633, upload-time = "2026-10-10T23:47:12.49Z" },
 ]
 
 [[package]]

bashrun-0.5.0.dev37378802238/.github/actions/setup-release-devkit/action.yml

@@ -1,11 +0,0 @@
-name: setup-release-devkit
-description: Install release-devkit at the pinned commit into RUNNER_TEMP
-runs:
-  using: composite
-  steps:
-    - shell: bash
-      env:
-        RELEASE_DEVKIT_COMMIT: 029a9a6e26baef30ae90d8ffdefc706530f18521
-      run: |
-        git clone https://github.com/outernet-foundation/release-devkit.git "$RUNNER_TEMP/release-devkit"
-        git -C "$RUNNER_TEMP/release-devkit" checkout "$RELEASE_DEVKIT_COMMIT"

bashrun-0.5.0.dev37378802238/.github/workflows/integrate.yml

@@ -1,57 +0,0 @@
-name: Integrate
-
-on:
-  workflow_dispatch:
-  pull_request:
-    branches: [dev]
-
-concurrency:
-  group: integrate-${{ github.ref }}
-  cancel-in-progress: true
-
-permissions:
-  contents: read
-
-jobs:
-  lint-workflows:
-    runs-on: ubuntu-latest
-    steps:
-      - &checkout
-        uses: actions/checkout@v5
-        with:
-          ref: ${{ github.event.pull_request.head.sha }}
-          persist-credentials: false
-      - &uv-restore
-        uses: astral-sh/setup-uv@v7
-        with:
-          enable-cache: true
-          save-cache: "false"
-      - &setup-release-devkit
-        uses: ./.github/actions/setup-release-devkit
-      - run: uv run --project "$RUNNER_TEMP/release-devkit" --locked --no-dev lint-workflows
-
-  preflight:
-    needs: [lint-workflows]
-    runs-on: ubuntu-latest
-    steps:
-      - *checkout
-      - uses: astral-sh/setup-uv@v7
-        with:
-          enable-cache: true
-          save-cache: "true"
-      - run: uv lock --check --project tools/devkit
-      - run: uv run --project tools/devkit preflight-python
-
-  validate-release-plan:
-    runs-on: ubuntu-latest
-    steps:
-      - uses: actions/checkout@v5
-        with:
-          ref: ${{ github.event.pull_request.head.sha }}
-          # Perform a full clone, required for tags
-          fetch-depth: 0
-          fetch-tags: true
-          persist-credentials: false
-      - *uv-restore
-      - *setup-release-devkit
-      - run: uv run --project "$RUNNER_TEMP/release-devkit" --locked --no-dev validate-release-plan

bashrun-0.5.0.dev37378802238/.github/workflows/merge-gate.yml

@@ -1,41 +0,0 @@
-name: Merge gate
-
-on:
-  pull_request:
-    branches: [dev]
-    types: [labeled]
-  workflow_run:
-    workflows: [Integrate]
-    types: [completed]
-
-concurrency:
-  group: merge-gate-${{ github.event.pull_request.number || github.event.workflow_run.head_branch }}
-
-permissions:
-  contents: read
-
-jobs:
-  merge-gate:
-    if: github.event.label.name == 'ready-to-merge' || (github.event_name == 'workflow_run' && github.event.workflow_run.conclusion == 'success')
-    runs-on: ubuntu-latest
-    steps:
-      - uses: actions/checkout@v5
-        with:
-          ref: ${{ github.event.pull_request.head.sha || github.event.workflow_run.head_sha }}
-          # Perform a full clone, required so merge-gate can validate that this PR is a fast forward from dev
-          fetch-depth: 0
-          persist-credentials: false
-      - uses: astral-sh/setup-uv@v7
-        with:
-          enable-cache: true
-          save-cache: "false"
-      - uses: ./.github/actions/setup-release-devkit
-      - uses: actions/create-github-app-token@v3
-        id: mint
-        with:
-          app-id: ${{ vars.MERGE_BOT_APP_ID }}
-          private-key: ${{ secrets.MERGE_BOT_APP_PRIVATE_KEY }}
-      - run: uv run --project "$RUNNER_TEMP/release-devkit" --locked --no-dev merge-gate
-        env:
-          GITHUB_TOKEN: ${{ steps.mint.outputs.token }}
-          HEAD_SHA: ${{ github.event.pull_request.head.sha || github.event.workflow_run.head_sha }}

bashrun-0.5.0.dev37378802238/.github/workflows/release.yml

@@ -1,56 +0,0 @@
-name: Release
-
-on:
-  push:
-    branches: [main, dev]
-
-concurrency:
-  group: release-${{ github.ref }}
-
-permissions:
-  contents: read
-
-jobs:
-  prerelease:
-    if: github.ref == 'refs/heads/dev'
-    runs-on: ubuntu-latest
-    permissions:
-      contents: read
-      id-token: write
-    steps:
-      - uses: actions/checkout@v5
-        with:
-          # Perform a full clone, required for tags
-          fetch-depth: 0
-          fetch-tags: true
-          persist-credentials: false
-      - &uv-restore
-        uses: astral-sh/setup-uv@v7
-        with:
-          enable-cache: true
-          save-cache: "false"
-      - &setup-release-devkit
-        uses: ./.github/actions/setup-release-devkit
-      - run: uv run --project "$RUNNER_TEMP/release-devkit" --locked --no-dev prerelease
-        env:
-          GITHUB_TOKEN: ${{ github.token }}
-
-  release:
-    if: github.ref == 'refs/heads/main'
-    runs-on: ubuntu-latest
-    permissions:
-      contents: write
-      id-token: write
-    steps:
-      - uses: actions/checkout@v5
-        with:
-          # Perform a full clone, required for tags
-          fetch-depth: 0
-          fetch-tags: true
-          # Persist credentials so that the release command can push release tags
-          persist-credentials: true
-      - *uv-restore
-      - *setup-release-devkit
-      - run: uv run --project "$RUNNER_TEMP/release-devkit" --locked --no-dev release
-        env:
-          GITHUB_TOKEN: ${{ github.token }}

bashrun-0.5.0.dev37378802238/release-devkit.yaml

@@ -1,7 +0,0 @@
-ci_workflow: release.yml
-packages:
-  bashrun:
-    path: .
-    major_minor: "0.5"
-    registries:
-      pypi: bashrun