bitranox-template-py-cli 1.5.0__tar.gz → 1.5.2__tar.gz

{bitranox_template_py_cli-1.5.0 → bitranox_template_py_cli-1.5.2}/.github/workflows/default_release_public.yml

@@ -56,7 +56,7 @@ jobs:
           fi
 
       - name: Download artifacts
-        uses: actions/download-artifact@v7
+        uses: actions/download-artifact@v8
         with:
           name: dist
           path: dist/

{bitranox_template_py_cli-1.5.0 → bitranox_template_py_cli-1.5.2}/CHANGELOG.md

@@ -6,6 +6,27 @@ the [Keep a Changelog](https://keepachangelog.com/) format.
 
 ## [Unreleased]
 
+## [1.5.2] - 2026-03-05
+
+### Fixed
+- Re-release as 1.5.2: PyPI rejected 1.5.1 due to filename reuse after prior upload deletion
+
+### Changed
+- `get_permission_defaults()` now returns a `PermissionDefaults` Pydantic model instead of a raw dict, with typed field access and `dir_mode_for()`/`file_mode_for()` methods
+- `EmailSpy` now stores captured calls as `CapturedEmail` and `CapturedNotification` frozen dataclasses instead of `list[dict[str, Any]]`
+
+### Added
+- Tests for `--env-file` CLI option (argument passing, validation, end-to-end integration)
+
+## [1.5.1] - 2026-03-05 [YANKED]
+
+### Changed
+- `get_permission_defaults()` now returns a `PermissionDefaults` Pydantic model instead of a raw dict, with typed field access and `dir_mode_for()`/`file_mode_for()` methods
+- `EmailSpy` now stores captured calls as `CapturedEmail` and `CapturedNotification` frozen dataclasses instead of `list[dict[str, Any]]`
+
+### Added
+- Tests for `--env-file` CLI option (argument passing, validation, end-to-end integration)
+
 ## [1.5.0] - 2026-03-02
 
 ### Added

{bitranox_template_py_cli-1.5.0 → bitranox_template_py_cli-1.5.2}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: bitranox_template_py_cli
-Version: 1.5.0
+Version: 1.5.2
 Summary: Template CLI application with configuration management and structured logging
 Project-URL: Homepage, https://github.com/bitranox/bitranox_template_py_cli
 Project-URL: Repository, https://github.com/bitranox/bitranox_template_py_cli.git
@@ -44,7 +44,7 @@ Requires-Dist: pytest>=9.0.2; extra == 'dev'
 Requires-Dist: python-multipart>=0.0.22; extra == 'dev'
 Requires-Dist: rtoml>=0.13.0; extra == 'dev'
 Requires-Dist: ruff>=0.15.4; extra == 'dev'
-Requires-Dist: textual>=8.0.1; extra == 'dev'
+Requires-Dist: textual>=8.0.2; extra == 'dev'
 Requires-Dist: twine>=6.2.0; extra == 'dev'
 Requires-Dist: urllib3>=2.6.3; extra == 'dev'
 Requires-Dist: virtualenv>=21.1.0; extra == 'dev'

{bitranox_template_py_cli-1.5.0 → bitranox_template_py_cli-1.5.2}/pyproject.toml

@@ -1,6 +1,6 @@
 [project]
 name = "bitranox_template_py_cli"
-version = "1.5.0"
+version = "1.5.2"
 description = "Template CLI application with configuration management and structured logging"
 readme = "README.md"
 requires-python = ">=3.10"
@@ -47,7 +47,7 @@ dev = [
   "twine>=6.2.0",
   "codecov-cli>=11.2.6",
   "pip-audit>=2.10.0",
-  "textual>=8.0.1",
+  "textual>=8.0.2",
   "import-linter>=2.10",
   "rtoml>=0.13.0",
   "httpx>=0.28.1",

{bitranox_template_py_cli-1.5.0 → bitranox_template_py_cli-1.5.2}/src/bitranox_template_py_cli/__init__conf__.py

@@ -40,7 +40,7 @@ name = "bitranox_template_py_cli"
 #: Human-readable summary shown in CLI help output.
 title = "Template CLI application with configuration management and structured logging"
 #: Current release version pulled from ``pyproject.toml`` by automation.
-version = "1.5.0"
+version = "1.5.2"
 #: Repository homepage presented to users.
 homepage = "https://github.com/bitranox/bitranox_template_py_cli"
 #: Author attribution surfaced in CLI output.

{bitranox_template_py_cli-1.5.0 → bitranox_template_py_cli-1.5.2}/src/bitranox_template_py_cli/adapters/cli/commands/config.py

@@ -247,7 +247,7 @@ def _execute_deploy(
     perm_defaults = get_permission_defaults(cli_ctx.config)
 
     # CLI --permissions/--no-permissions overrides config enabled setting
-    effective_set_permissions = set_permissions if set_permissions is not None else bool(perm_defaults["enabled"])
+    effective_set_permissions = set_permissions if set_permissions is not None else perm_defaults.enabled
 
     try:
         deployed_paths = cli_ctx.services.deploy_configuration(

{bitranox_template_py_cli-1.5.0 → bitranox_template_py_cli-1.5.2}/src/bitranox_template_py_cli/adapters/config/permissions.py

@@ -14,6 +14,7 @@ from lib_layered_config import (
     DEFAULT_USER_DIR_MODE,
     DEFAULT_USER_FILE_MODE,
 )
+from pydantic import BaseModel, ConfigDict
 
 from bitranox_template_py_cli.domain.enums import DeployTarget
 
@@ -21,6 +22,37 @@ if TYPE_CHECKING:
     from lib_layered_config import Config
 
 
+class PermissionDefaults(BaseModel):
+    """Validated, immutable permission defaults for deployment layers.
+
+    Parsed at the boundary from ``[lib_layered_config.default_permissions]``
+    config section. All fields have library-level fallback defaults.
+
+    Example:
+        >>> defaults = PermissionDefaults()
+        >>> defaults.user_directory == 0o700
+        True
+    """
+
+    model_config = ConfigDict(frozen=True)
+
+    app_directory: int = DEFAULT_APP_DIR_MODE
+    app_file: int = DEFAULT_APP_FILE_MODE
+    host_directory: int = DEFAULT_APP_DIR_MODE
+    host_file: int = DEFAULT_APP_FILE_MODE
+    user_directory: int = DEFAULT_USER_DIR_MODE
+    user_file: int = DEFAULT_USER_FILE_MODE
+    enabled: bool = True
+
+    def dir_mode_for(self, layer: str) -> int:
+        """Return directory mode for the given layer name."""
+        return getattr(self, f"{layer}_directory")
+
+    def file_mode_for(self, layer: str) -> int:
+        """Return file mode for the given layer name."""
+        return getattr(self, f"{layer}_file")
+
+
 def parse_mode(value: int | str, default: int) -> int:
     """Parse a permission mode value from config.
 
@@ -53,15 +85,20 @@ def parse_mode(value: int | str, default: int) -> int:
         return default
 
 
-def _get_mode(section: dict[str, int | str | bool], key: str, default: int) -> int:
-    """Get a mode value from config section, parsing octal strings."""
+def _parse_mode_from_section(section: dict[str, int | str | bool], key: str, default: int) -> int:
+    """Extract and parse a mode value from a raw config section dict.
+
+    Used only at the boundary when parsing the raw config dict into
+    PermissionDefaults. The raw section comes from lib_layered_config's
+    Config.get() which returns untyped dicts.
+    """
     raw = section.get(key, default)
     if isinstance(raw, bool):
         return default
     return parse_mode(raw, default)
 
 
-def get_permission_defaults(config: Config) -> dict[str, int | bool]:
+def get_permission_defaults(config: Config) -> PermissionDefaults:
     """Load permission defaults from [lib_layered_config.default_permissions].
 
     Reads configurable permission defaults for each deployment layer.
@@ -71,35 +108,29 @@ def get_permission_defaults(config: Config) -> dict[str, int | bool]:
         config: Configuration object with merged settings.
 
     Returns:
-        Dictionary with keys:
-            - app_directory: Directory mode for app layer (default 0o755)
-            - app_file: File mode for app layer (default 0o644)
-            - host_directory: Directory mode for host layer (default 0o755)
-            - host_file: File mode for host layer (default 0o644)
-            - user_directory: Directory mode for user layer (default 0o700)
-            - user_file: File mode for user layer (default 0o600)
-            - enabled: Whether permission setting is enabled (default True)
+        PermissionDefaults model with typed fields for each layer's
+        directory and file modes, plus an enabled flag.
 
     Example:
         >>> from lib_layered_config import Config
         >>> config = Config({}, {})  # Empty config
         >>> defaults = get_permission_defaults(config)
-        >>> defaults["user_directory"] == 0o700
+        >>> defaults.user_directory == 0o700
         True
     """
     section = config.get("lib_layered_config", {}).get("default_permissions", {})
     # NOTE: lib_layered_config does not define separate HOST_* constants.
     # Host layer shares defaults with app layer (both world-readable: 755/644).
     # This is intentional per CLAUDE.md "Deployment Permissions" documentation.
-    return {
-        "app_directory": _get_mode(section, "app_directory", DEFAULT_APP_DIR_MODE),
-        "app_file": _get_mode(section, "app_file", DEFAULT_APP_FILE_MODE),
-        "host_directory": _get_mode(section, "host_directory", DEFAULT_APP_DIR_MODE),
-        "host_file": _get_mode(section, "host_file", DEFAULT_APP_FILE_MODE),
-        "user_directory": _get_mode(section, "user_directory", DEFAULT_USER_DIR_MODE),
-        "user_file": _get_mode(section, "user_file", DEFAULT_USER_FILE_MODE),
-        "enabled": section.get("enabled", True),
-    }
+    return PermissionDefaults(
+        app_directory=_parse_mode_from_section(section, "app_directory", DEFAULT_APP_DIR_MODE),
+        app_file=_parse_mode_from_section(section, "app_file", DEFAULT_APP_FILE_MODE),
+        host_directory=_parse_mode_from_section(section, "host_directory", DEFAULT_APP_DIR_MODE),
+        host_file=_parse_mode_from_section(section, "host_file", DEFAULT_APP_FILE_MODE),
+        user_directory=_parse_mode_from_section(section, "user_directory", DEFAULT_USER_DIR_MODE),
+        user_file=_parse_mode_from_section(section, "user_file", DEFAULT_USER_FILE_MODE),
+        enabled=section.get("enabled", True),
+    )
 
 
 def get_modes_for_target(
@@ -140,15 +171,14 @@ def get_modes_for_target(
     defaults = get_permission_defaults(config)
     layer = target.value  # "app", "host", or "user"
 
-    # defaults always contains int values for all layer keys (get_permission_defaults
-    # uses lib_layered_config defaults as fallbacks), so cast is safe here.
-    dir_mode: int = dir_mode_override if dir_mode_override is not None else int(defaults[f"{layer}_directory"])
-    file_mode: int = file_mode_override if file_mode_override is not None else int(defaults[f"{layer}_file"])
+    dir_mode: int = dir_mode_override if dir_mode_override is not None else defaults.dir_mode_for(layer)
+    file_mode: int = file_mode_override if file_mode_override is not None else defaults.file_mode_for(layer)
 
     return dir_mode, file_mode
 
 
 __all__ = [
+    "PermissionDefaults",
     "get_modes_for_target",
     "get_permission_defaults",
     "parse_mode",

{bitranox_template_py_cli-1.5.0 → bitranox_template_py_cli-1.5.2}/src/bitranox_template_py_cli/adapters/memory/email.py

@@ -4,6 +4,8 @@ Provides email functions that satisfy the same Protocols as production
 adapters but perform no SMTP operations.
 
 Contents:
+    * :class:`CapturedEmail` - Typed record for captured send_email calls.
+    * :class:`CapturedNotification` - Typed record for captured send_notification calls.
     * :class:`EmailSpy` - Captures email calls for test assertions.
     * :func:`load_email_config_from_dict_in_memory` - In-memory config loader.
 """
@@ -19,9 +21,28 @@ from ..email.sender import EmailConfig
 from ..email.validation import validate_recipients
 
 
-def _empty_email_list() -> list[dict[str, Any]]:
-    """Create an empty typed list for email records."""
-    return []
+@dataclass(frozen=True, slots=True)
+class CapturedEmail:
+    """Typed record of a captured send_email call."""
+
+    config: EmailConfig
+    recipients: str | Sequence[str] | None
+    subject: str
+    body: str
+    body_html: str
+    from_address: str | None
+    attachments: list[Path] | None
+
+
+@dataclass(frozen=True, slots=True)
+class CapturedNotification:
+    """Typed record of a captured send_notification call."""
+
+    config: EmailConfig
+    recipients: str | Sequence[str] | None
+    subject: str
+    message: str
+    from_address: str | None
 
 
 @dataclass
@@ -46,8 +67,8 @@ class EmailSpy:
         1
     """
 
-    sent_emails: list[dict[str, Any]] = field(default_factory=_empty_email_list)
-    sent_notifications: list[dict[str, Any]] = field(default_factory=_empty_email_list)
+    sent_emails: list[CapturedEmail] = field(default_factory=lambda: [])
+    sent_notifications: list[CapturedNotification] = field(default_factory=lambda: [])
     should_fail: bool = False
     raise_exception: Exception | None = None
 
@@ -88,15 +109,15 @@ class EmailSpy:
         """
         validate_recipients(recipients)
         self.sent_emails.append(
-            {
-                "config": config,
-                "recipients": recipients,
-                "subject": subject,
-                "body": body,
-                "body_html": body_html,
-                "from_address": from_address,
-                "attachments": list(attachments) if attachments else None,
-            }
+            CapturedEmail(
+                config=config,
+                recipients=recipients,
+                subject=subject,
+                body=body,
+                body_html=body_html,
+                from_address=from_address,
+                attachments=list(attachments) if attachments else None,
+            )
         )
         if self.raise_exception is not None:
             raise self.raise_exception
@@ -129,13 +150,13 @@ class EmailSpy:
         """
         validate_recipients(recipients)
         self.sent_notifications.append(
-            {
-                "config": config,
-                "recipients": recipients,
-                "subject": subject,
-                "message": message,
-                "from_address": from_address,
-            }
+            CapturedNotification(
+                config=config,
+                recipients=recipients,
+                subject=subject,
+                message=message,
+                from_address=from_address,
+            )
         )
         if self.raise_exception is not None:
             raise self.raise_exception
@@ -151,6 +172,8 @@ def load_email_config_from_dict_in_memory(
 
 
 __all__ = [
+    "CapturedEmail",
+    "CapturedNotification",
     "EmailSpy",
     "load_email_config_from_dict_in_memory",
 ]

{bitranox_template_py_cli-1.5.0 → bitranox_template_py_cli-1.5.2}/tests/conftest.py

@@ -566,7 +566,7 @@ def email_cli_context(
                 obj=ctx.factory,
             )
             assert result.exit_code == 0
-            assert ctx.spy.sent_notifications[0]["subject"] == "Hi"
+            assert ctx.spy.sent_notifications[0].subject == "Hi"
     """
     from bitranox_template_py_cli.adapters.memory import load_email_config_from_dict_in_memory
     from bitranox_template_py_cli.adapters.memory.email import EmailSpy as EmailSpyImpl

{bitranox_template_py_cli-1.5.0 → bitranox_template_py_cli-1.5.2}/tests/test_cli_email.py

@@ -72,8 +72,8 @@ def test_when_send_email_is_invoked_with_valid_config_it_sends(
     assert result.exit_code == 0
     assert "Email sent successfully" in result.output
     assert len(ctx.spy.sent_emails) == 1
-    assert ctx.spy.sent_emails[0]["subject"] == "Test Subject"
-    assert ctx.spy.sent_emails[0]["recipients"] == ["recipient@test.com"]
+    assert ctx.spy.sent_emails[0].subject == "Test Subject"
+    assert ctx.spy.sent_emails[0].recipients == ["recipient@test.com"]
 
 
 @pytest.mark.os_agnostic
@@ -106,7 +106,7 @@ def test_when_send_email_receives_multiple_recipients_it_accepts_them(
     )
 
     assert result.exit_code == 0
-    assert ctx.spy.sent_emails[0]["recipients"] == ["user1@test.com", "user2@test.com"]
+    assert ctx.spy.sent_emails[0].recipients == ["user1@test.com", "user2@test.com"]
 
 
 @pytest.mark.os_agnostic
@@ -139,7 +139,7 @@ def test_when_send_email_includes_html_body_it_sends(
     )
 
     assert result.exit_code == 0
-    assert ctx.spy.sent_emails[0]["body_html"] == "<h1>HTML</h1>"
+    assert ctx.spy.sent_emails[0].body_html == "<h1>HTML</h1>"
 
 
 @pytest.mark.os_agnostic
@@ -178,7 +178,7 @@ def test_when_send_email_has_attachments_it_sends(
     )
 
     assert result.exit_code == 0
-    assert ctx.spy.sent_emails[0]["attachments"] == [Path(attachment)]
+    assert ctx.spy.sent_emails[0].attachments == [Path(attachment)]
 
 
 @pytest.mark.os_agnostic
@@ -269,8 +269,8 @@ def test_when_send_notification_is_invoked_with_valid_config_it_sends(
     assert result.exit_code == 0
     assert "Notification sent successfully" in result.output
     assert len(ctx.spy.sent_notifications) == 1
-    assert ctx.spy.sent_notifications[0]["subject"] == "Alert"
-    assert ctx.spy.sent_notifications[0]["message"] == "System notification"
+    assert ctx.spy.sent_notifications[0].subject == "Alert"
+    assert ctx.spy.sent_notifications[0].message == "System notification"
 
 
 @pytest.mark.os_agnostic
@@ -303,7 +303,7 @@ def test_when_send_notification_receives_multiple_recipients_it_accepts_them(
     )
 
     assert result.exit_code == 0
-    assert ctx.spy.sent_notifications[0]["recipients"] == ["admin1@test.com", "admin2@test.com"]
+    assert ctx.spy.sent_notifications[0].recipients == ["admin1@test.com", "admin2@test.com"]
 
 
 @pytest.mark.os_agnostic
@@ -371,7 +371,7 @@ def test_when_send_email_receives_smtp_host_override_it_uses_it(
     )
 
     assert result.exit_code == 0
-    assert ctx.spy.sent_emails[0]["config"].smtp_hosts == ["smtp.override.com:465"]
+    assert ctx.spy.sent_emails[0].config.smtp_hosts == ["smtp.override.com:465"]
 
 
 @pytest.mark.os_agnostic
@@ -404,7 +404,7 @@ def test_when_send_email_receives_timeout_override_it_uses_it(
     )
 
     assert result.exit_code == 0
-    assert ctx.spy.sent_emails[0]["config"].timeout == 60.0
+    assert ctx.spy.sent_emails[0].config.timeout == 60.0
 
 
 @pytest.mark.os_agnostic
@@ -436,7 +436,7 @@ def test_when_send_email_receives_no_use_starttls_override_it_applies_it(
     )
 
     assert result.exit_code == 0
-    assert ctx.spy.sent_emails[0]["config"].use_starttls is False
+    assert ctx.spy.sent_emails[0].config.use_starttls is False
 
 
 @pytest.mark.os_agnostic
@@ -471,8 +471,8 @@ def test_when_send_email_receives_credential_overrides_it_uses_them(
     )
 
     assert result.exit_code == 0
-    assert ctx.spy.sent_emails[0]["config"].smtp_username == "myuser"
-    assert ctx.spy.sent_emails[0]["config"].smtp_password == "mypass"
+    assert ctx.spy.sent_emails[0].config.smtp_username == "myuser"
+    assert ctx.spy.sent_emails[0].config.smtp_password == "mypass"
 
 
 @pytest.mark.os_agnostic
@@ -505,7 +505,7 @@ def test_when_send_notification_receives_from_override_it_uses_it(
     )
 
     assert result.exit_code == 0
-    assert ctx.spy.sent_notifications[0]["from_address"] == "override@test.com"
+    assert ctx.spy.sent_notifications[0].from_address == "override@test.com"
 
 
 @pytest.mark.os_agnostic
@@ -538,7 +538,7 @@ def test_when_send_notification_receives_smtp_host_override_it_uses_it(
     )
 
     assert result.exit_code == 0
-    assert ctx.spy.sent_notifications[0]["config"].smtp_hosts == ["smtp.override.com:465"]
+    assert ctx.spy.sent_notifications[0].config.smtp_hosts == ["smtp.override.com:465"]
 
 
 # ======================== Attachment path validation ========================

bitranox_template_py_cli-1.5.2/tests/test_cli_env_file.py

@@ -0,0 +1,177 @@
+"""CLI --env-file option: path passing, validation, and value override."""
+
+from __future__ import annotations
+
+from collections.abc import Callable
+from dataclasses import dataclass
+from pathlib import Path
+from typing import Any
+
+import pytest
+from click.testing import CliRunner, Result
+from lib_layered_config import Config
+
+from bitranox_template_py_cli.adapters import cli as cli_mod
+from bitranox_template_py_cli.composition import AppServices, build_production
+
+
+@dataclass
+class CapturedGetConfigArgs:
+    """Container for captured get_config keyword arguments."""
+
+    profile: str | None
+    dotenv_path: str | None
+
+
+@pytest.fixture
+def inject_config_with_dotenv_capture(
+    clear_config_cache: None,
+) -> Callable[[Config, list[CapturedGetConfigArgs]], Callable[[], AppServices]]:
+    """Return a factory that captures dotenv_path passed to get_config."""
+
+    def _inject(config: Config, captured: list[CapturedGetConfigArgs]) -> Callable[[], AppServices]:
+        def _capturing_get_config(
+            *,
+            profile: str | None = None,
+            start_dir: str | None = None,
+            dotenv_path: str | None = None,
+        ) -> Config:
+            captured.append(CapturedGetConfigArgs(profile=profile, dotenv_path=dotenv_path))
+            return config
+
+        prod = build_production()
+        test_services = AppServices(
+            get_config=_capturing_get_config,
+            get_default_config_path=prod.get_default_config_path,
+            deploy_configuration=prod.deploy_configuration,
+            display_config=prod.display_config,
+            send_email=prod.send_email,
+            send_notification=prod.send_notification,
+            load_email_config_from_dict=prod.load_email_config_from_dict,
+            init_logging=prod.init_logging,
+        )
+        return lambda: test_services
+
+    return _inject
+
+
+# ======================== --env-file argument passing ========================
+
+
+@pytest.mark.os_agnostic
+def test_env_file_passes_dotenv_path_to_get_config(
+    cli_runner: CliRunner,
+    tmp_path: Path,
+    config_factory: Callable[[dict[str, Any]], Config],
+    inject_config_with_dotenv_capture: Callable[[Config, list[CapturedGetConfigArgs]], Callable[[], AppServices]],
+) -> None:
+    """--env-file passes the file path as dotenv_path to get_config."""
+    env_file = tmp_path / ".env"
+    env_file.write_text("# empty\n")
+    config = config_factory({})
+    captured: list[CapturedGetConfigArgs] = []
+
+    factory = inject_config_with_dotenv_capture(config, captured)
+
+    result: Result = cli_runner.invoke(cli_mod.cli, ["--env-file", str(env_file), "hello"], obj=factory)
+
+    assert result.exit_code == 0
+    assert len(captured) == 1
+    assert captured[0].dotenv_path == str(env_file)
+
+
+@pytest.mark.os_agnostic
+def test_env_file_not_specified_passes_none_dotenv_path(
+    cli_runner: CliRunner,
+    config_factory: Callable[[dict[str, Any]], Config],
+    inject_config_with_dotenv_capture: Callable[[Config, list[CapturedGetConfigArgs]], Callable[[], AppServices]],
+) -> None:
+    """Without --env-file, dotenv_path is None (upward search used)."""
+    config = config_factory({})
+    captured: list[CapturedGetConfigArgs] = []
+
+    factory = inject_config_with_dotenv_capture(config, captured)
+
+    result: Result = cli_runner.invoke(cli_mod.cli, ["hello"], obj=factory)
+
+    assert result.exit_code == 0
+    assert len(captured) == 1
+    assert captured[0].dotenv_path is None
+
+
+@pytest.mark.os_agnostic
+def test_env_file_combined_with_profile(
+    cli_runner: CliRunner,
+    tmp_path: Path,
+    config_factory: Callable[[dict[str, Any]], Config],
+    inject_config_with_dotenv_capture: Callable[[Config, list[CapturedGetConfigArgs]], Callable[[], AppServices]],
+) -> None:
+    """--env-file and --profile can be used together."""
+    env_file = tmp_path / ".env"
+    env_file.write_text("# empty\n")
+    config = config_factory({})
+    captured: list[CapturedGetConfigArgs] = []
+
+    factory = inject_config_with_dotenv_capture(config, captured)
+
+    result: Result = cli_runner.invoke(
+        cli_mod.cli, ["--env-file", str(env_file), "--profile", "staging", "hello"], obj=factory
+    )
+
+    assert result.exit_code == 0
+    assert len(captured) == 1
+    assert captured[0].dotenv_path == str(env_file)
+    assert captured[0].profile == "staging"
+
+
+# ======================== --env-file validation ========================
+
+
+@pytest.mark.os_agnostic
+def test_env_file_nonexistent_path_rejected(
+    cli_runner: CliRunner,
+    production_factory: Callable[[], AppServices],
+) -> None:
+    """--env-file with nonexistent path is rejected by Click."""
+    result: Result = cli_runner.invoke(
+        cli_mod.cli, ["--env-file", "/tmp/nonexistent_env_file_xyz.env", "hello"], obj=production_factory
+    )
+
+    assert result.exit_code != 0
+    assert "does not exist" in result.output
+
+
+@pytest.mark.os_agnostic
+def test_env_file_directory_rejected(
+    cli_runner: CliRunner,
+    tmp_path: Path,
+    production_factory: Callable[[], AppServices],
+) -> None:
+    """--env-file with a directory path is rejected by Click."""
+    result: Result = cli_runner.invoke(cli_mod.cli, ["--env-file", str(tmp_path), "hello"], obj=production_factory)
+
+    assert result.exit_code != 0
+
+
+# ======================== --env-file end-to-end integration ========================
+
+
+@pytest.mark.os_agnostic
+def test_env_file_values_appear_in_config(
+    cli_runner: CliRunner,
+    tmp_path: Path,
+    clear_config_cache: None,
+    production_factory: Callable[[], AppServices],
+) -> None:
+    """Values from an --env-file are visible in the merged config output."""
+    env_file = tmp_path / ".env"
+    env_file.write_text("LIB_LOG_RICH__ENVIRONMENT=from-env-file\n")
+
+    result: Result = cli_runner.invoke(
+        cli_mod.cli,
+        ["--env-file", str(env_file), "config", "--format", "json", "--section", "lib_log_rich"],
+        obj=production_factory,
+    )
+
+    assert result.exit_code == 0
+    assert "from-env-file" in result.stdout

{bitranox_template_py_cli-1.5.0 → bitranox_template_py_cli-1.5.2}/tests/test_deploy_permissions.py

@@ -36,13 +36,13 @@ def test_get_permission_defaults_returns_library_defaults_when_not_configured(
 
     defaults = get_permission_defaults(config)
 
-    assert defaults["app_directory"] == 0o755
-    assert defaults["app_file"] == 0o644
-    assert defaults["host_directory"] == 0o755
-    assert defaults["host_file"] == 0o644
-    assert defaults["user_directory"] == 0o700
-    assert defaults["user_file"] == 0o600
-    assert defaults["enabled"] is True
+    assert defaults.app_directory == 0o755
+    assert defaults.app_file == 0o644
+    assert defaults.host_directory == 0o755
+    assert defaults.host_file == 0o644
+    assert defaults.user_directory == 0o700
+    assert defaults.user_file == 0o600
+    assert defaults.enabled is True
 
 
 @pytest.mark.os_agnostic
@@ -64,11 +64,11 @@ def test_get_permission_defaults_reads_from_config(
 
     defaults = get_permission_defaults(config)
 
-    assert defaults["user_directory"] == 0o750
-    assert defaults["user_file"] == 0o640
-    assert defaults["enabled"] is False
+    assert defaults.user_directory == 0o750
+    assert defaults.user_file == 0o640
+    assert defaults.enabled is False
     # Non-overridden values use library defaults
-    assert defaults["app_directory"] == 0o755
+    assert defaults.app_directory == 0o755
 
 
 @pytest.mark.os_agnostic
@@ -185,8 +185,8 @@ def test_get_permission_defaults_accepts_octal_strings(
 
     defaults = get_permission_defaults(config)
 
-    assert defaults["user_directory"] == 0o750
-    assert defaults["user_file"] == 0o640
+    assert defaults.user_directory == 0o750
+    assert defaults.user_file == 0o640
 
 
 # ======================== CLI Option Parsing Tests ========================