code-constraints 0.1.0__tar.gz

code_constraints-0.1.0/.gitattributes

@@ -0,0 +1,19 @@
+# Normalize to LF in the repository regardless of a contributor's core.autocrlf.
+* text=auto eol=lf
+
+# Scripts must stay LF even in a Windows working tree, or they fail on Linux
+# and in git-bash/WSL with "bad interpreter".
+*.sh        text eol=lf
+Makefile    text eol=lf
+
+# Windows-native scripts keep CRLF.
+*.ps1       text eol=crlf
+*.bat       text eol=crlf
+*.cmd       text eol=crlf
+
+# Binary / generated — never touch, never diff.
+*.png       binary
+*.jpg       binary
+*.ico       binary
+*.svg       -text
+package-lock.json  -diff

code_constraints-0.1.0/.github/actions/build-dist/action.yml

@@ -0,0 +1,58 @@
+name: Build distributions
+description: >
+  Build the Svelte UI, embed it in the package, then build and validate the
+  wheel + sdist. CI and the PyPI release both use this, so the artifact that is
+  tested is the artifact that ships.
+
+inputs:
+  python-version:
+    description: Python version used to build the distributions.
+    required: false
+    default: "3.12"
+  node-version:
+    description: Node version used to build the frontend.
+    required: false
+    default: "20"
+
+runs:
+  using: composite
+  steps:
+    - uses: actions/setup-python@v5
+      with:
+        python-version: ${{ inputs.python-version }}
+
+    - uses: actions/setup-node@v4
+      with:
+        node-version: ${{ inputs.node-version }}
+        cache: npm
+        cache-dependency-path: frontend/package-lock.json
+
+    # The wheel serves the web UI from package data. Without these two steps
+    # `python -m build` still succeeds, but produces an API-only wheel whose
+    # `/` returns a JSON placeholder instead of the app.
+    - name: Install frontend dependencies
+      run: npm ci
+      shell: bash
+      working-directory: frontend
+
+    - name: Build the web UI
+      run: npm run build
+      shell: bash
+      working-directory: frontend
+
+    - name: Embed the web UI in the package
+      run: make frontend-embed
+      shell: bash
+
+    - name: Build wheel + sdist
+      run: |
+        python -m pip install --upgrade pip build twine
+        python -m build
+        python -m twine check dist/*
+      shell: bash
+
+    # A packaging regression here is silent and, once published, permanent:
+    # PyPI does not allow re-uploading a version. Fail the build instead.
+    - name: Verify the wheel ships the web UI
+      run: python .github/scripts/verify_dist.py
+      shell: bash

code_constraints-0.1.0/.github/scripts/verify_dist.py

@@ -0,0 +1,115 @@
+"""Check that the built distributions are complete before they are published.
+
+A wheel that is missing the web UI still installs and still serves the API, so
+nothing fails until a user opens `/` and gets a JSON placeholder. PyPI does not
+allow re-uploading a version, so that mistake is permanent. This script turns it
+into a failed build.
+
+Run from the repository root, after `python -m build`:
+
+    python .github/scripts/verify_dist.py
+"""
+
+from __future__ import annotations
+
+import re
+import sys
+import tarfile
+import zipfile
+from pathlib import Path
+
+STATIC = "code_constraints/web/_static"
+SHIMS = "code_constraints/cli/_assets/shims"
+
+problems: list[str] = []
+notes: list[str] = []
+
+
+def fail(msg: str) -> None:
+    problems.append(msg)
+
+
+def ok(msg: str) -> None:
+    notes.append(msg)
+
+
+def find_one(pattern: str) -> Path | None:
+    matches = sorted(Path("dist").glob(pattern))
+    if not matches:
+        fail(f"no {pattern} in dist/")
+        return None
+    if len(matches) > 1:
+        fail(f"expected one {pattern} in dist/, found {len(matches)}: "
+             f"{[m.name for m in matches]} — stale artifacts would be published too")
+        return None
+    return matches[0]
+
+
+wheel = find_one("*.whl")
+sdist = find_one("*.tar.gz")
+
+if wheel is not None:
+    names = set(zipfile.ZipFile(wheel).namelist())
+    z = zipfile.ZipFile(wheel)
+
+    index = f"{STATIC}/index.html"
+    if index not in names:
+        fail(f"{wheel.name}: no {index} — the web UI was not built or not embedded. "
+             f"Run `npm run build` in frontend/, then `make frontend-embed`.")
+    else:
+        html = z.read(index).decode("utf-8")
+
+        # Every asset the page asks for must actually be in the wheel, or the
+        # app loads to a blank screen.
+        refs = [r for r in re.findall(r'(?:src|href)="([^"]+)"', html) if r.startswith("/")]
+        if not refs:
+            fail(f"{wheel.name}: index.html references no local assets — suspect build output")
+        for ref in refs:
+            member = STATIC + ref
+            if member not in names:
+                fail(f"{wheel.name}: index.html references {ref}, which is not in the wheel")
+        ok(f"web UI present, {len(refs)} referenced asset(s) all resolve")
+
+        # A dev-server entry point would 'work' locally and break for users.
+        for marker in ("/@vite/client", "/src/main", "__vite_ping"):
+            if marker in html:
+                fail(f"{wheel.name}: index.html contains {marker!r} — this is a dev build, "
+                     f"not a production bundle")
+
+        js = [n for n in names if n.startswith(f"{STATIC}/assets/") and n.endswith(".js")]
+        if not js:
+            fail(f"{wheel.name}: no JS bundle under {STATIC}/assets/")
+        else:
+            ok(f"JS bundle: {', '.join(Path(n).name for n in sorted(js))}")
+
+    shims = sorted(n for n in names if n.startswith(SHIMS))
+    if len(shims) != 5:
+        fail(f"{wheel.name}: expected 5 rule shims under {SHIMS}, found {len(shims)}: {shims}")
+    else:
+        ok("all 5 rule shims present")
+
+    # These were removed with the Graphviz dependency; catch an accidental revival.
+    for gone in ("code_constraints/core/dot.py", "code_constraints/core/render.py"):
+        if gone in names:
+            fail(f"{wheel.name}: {gone} is back — the project must not depend on Graphviz")
+
+if sdist is not None:
+    sdist_names = set(tarfile.open(sdist).getnames())
+    # `python -m build` builds the wheel FROM the sdist, so the embedded UI has
+    # to travel in the sdist or the wheel above was a lucky local build.
+    if not any(f"/src/{STATIC}/index.html" in n for n in sdist_names):
+        fail(f"{sdist.name}: the embedded web UI is missing from the sdist, so a wheel "
+             f"built from this sdist would have no UI")
+    else:
+        ok("sdist carries the embedded web UI")
+
+for line in notes:
+    print(f"  ok    {line}")
+for line in problems:
+    print(f"  FAIL  {line}", file=sys.stderr)
+
+if problems:
+    print(f"\n{len(problems)} packaging problem(s) — refusing to publish.", file=sys.stderr)
+    sys.exit(1)
+
+print("\nDistributions look complete.")

code_constraints-0.1.0/.github/workflows/ci.yml

@@ -0,0 +1,95 @@
+name: CI
+
+on:
+  push:
+    branches: [main]
+  pull_request:
+  workflow_dispatch:
+
+concurrency:
+  group: ci-${{ github.ref }}
+  cancel-in-progress: true
+
+jobs:
+  verify:
+    name: lint + typecheck + tests (py${{ matrix.python-version }})
+    runs-on: ubuntu-latest
+    strategy:
+      fail-fast: false
+      matrix:
+        python-version: ["3.11", "3.12", "3.13", "3.14"]
+    steps:
+      - uses: actions/checkout@v4
+        with:
+          # The suite exercises real git history (git-info, diff against
+          # HEAD~1). The default fetch-depth of 1 leaves HEAD's parent object
+          # missing, which makes those tests fail or vacuously skip.
+          fetch-depth: 0
+
+      - uses: actions/setup-python@v5
+        with:
+          python-version: ${{ matrix.python-version }}
+          cache: pip
+          cache-dependency-path: pyproject.toml
+
+      - name: Install
+        run: |
+          python -m pip install --upgrade pip
+          python -m pip install -e ".[dev,mcp]"
+
+      - name: Tests (pytest)
+        run: python -m pytest -q
+
+      # Advisory, not blocking. Both gates were already failing before this
+      # repo was split out: mypy reports 112 errors, and ruff reports ~366
+      # (mostly UP045 Optional[X] -> X | None, plus B008 against typer's
+      # `= typer.Option(...)` idiom, which is a false positive for a CLI).
+      # `dev` pins ruff>=0.6 / mypy>=1.10 unbounded, so a fresh install also
+      # picks up newer default rules. Clear the backlog, then drop
+      # continue-on-error to make these real gates again.
+      - name: Lint (ruff) [advisory]
+        continue-on-error: true
+        run: python -m ruff check src tests
+
+      - name: Type-check (mypy) [advisory]
+        continue-on-error: true
+        run: python -m mypy src
+
+  frontend:
+    name: frontend build + svelte-check
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+
+      - uses: actions/setup-node@v4
+        with:
+          node-version: "20"
+          cache: npm
+          cache-dependency-path: frontend/package-lock.json
+
+      - name: Install
+        run: npm ci
+        working-directory: frontend
+
+      - name: Type-check
+        run: npm run check
+        working-directory: frontend
+
+      - name: Build
+        run: npm run build
+        working-directory: frontend
+
+  # Builds exactly the way the release does, so a packaging break shows up on
+  # the pull request instead of on a tag that cannot be re-published.
+  build-dist:
+    name: build wheel + sdist (with web UI)
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+
+      - uses: ./.github/actions/build-dist
+
+      - uses: actions/upload-artifact@v4
+        with:
+          name: dist
+          path: dist/

code_constraints-0.1.0/.github/workflows/publish.yml

@@ -0,0 +1,94 @@
+name: Publish to PyPI
+
+# Publishes on a version tag (v0.1.0), or manually. Uses PyPI Trusted
+# Publishing (OIDC) — no API token is stored in the repository. Configure the
+# publisher once at https://pypi.org/manage/project/code-constraints/settings/publishing/
+#   owner: fleskovar   repo: code-constraints
+#   workflow: publish.yml   environment: pypi
+#
+# `ci.yml` runs on branches and pull requests, not on tags, so this workflow
+# runs the test suite itself. A PyPI version cannot be re-uploaded, so every
+# gate has to pass before the upload step, not after.
+on:
+  push:
+    tags: ["v*"]
+  workflow_dispatch:
+
+concurrency:
+  group: publish-${{ github.ref }}
+  cancel-in-progress: false
+
+permissions:
+  contents: read
+
+jobs:
+  test:
+    name: tests (py${{ matrix.python-version }})
+    runs-on: ubuntu-latest
+    strategy:
+      fail-fast: true
+      matrix:
+        python-version: ["3.11", "3.12", "3.13", "3.14"]
+    steps:
+      - uses: actions/checkout@v4
+        with:
+          # The suite exercises real git history (git-info, diff against
+          # HEAD~1). The default fetch-depth of 1 leaves HEAD's parent object
+          # missing, which makes those tests fail or vacuously skip.
+          fetch-depth: 0
+
+      - uses: actions/setup-python@v5
+        with:
+          python-version: ${{ matrix.python-version }}
+          cache: pip
+          cache-dependency-path: pyproject.toml
+
+      - name: Install
+        run: |
+          python -m pip install --upgrade pip
+          python -m pip install -e ".[dev,mcp]"
+
+      - name: Tests
+        run: python -m pytest -q
+
+  build:
+    name: build distributions
+    needs: test
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+
+      # A tag that disagrees with pyproject.toml publishes the wrong version
+      # under the right name, and it cannot be taken back.
+      - name: Check the tag matches the package version
+        if: startsWith(github.ref, 'refs/tags/v')
+        run: |
+          tag="${GITHUB_REF_NAME#v}"
+          pkg=$(python3 -c "import tomllib,pathlib; print(tomllib.loads(pathlib.Path('pyproject.toml').read_text())['project']['version'])")
+          echo "tag=$tag  pyproject=$pkg"
+          if [ "$tag" != "$pkg" ]; then
+            echo "::error::tag v$tag does not match pyproject version $pkg"
+            exit 1
+          fi
+
+      - uses: ./.github/actions/build-dist
+
+      - uses: actions/upload-artifact@v4
+        with:
+          name: dist
+          path: dist/
+
+  publish:
+    name: upload to PyPI
+    needs: build
+    runs-on: ubuntu-latest
+    environment: pypi
+    permissions:
+      id-token: write        # required for Trusted Publishing
+    steps:
+      - uses: actions/download-artifact@v4
+        with:
+          name: dist
+          path: dist/
+
+      - uses: pypa/gh-action-pypi-publish@release/v1

code_constraints-0.1.0/.gitignore

@@ -0,0 +1,37 @@
+# Python
+__pycache__/
+*.py[cod]
+*.egg-info/
+.venv/
+venv/
+.pytest_cache/
+.mypy_cache/
+.ruff_cache/
+dist/
+build/
+
+# code-constraints cache & default script output
+.cdec_cache/
+out/
+
+# Node / Svelte
+node_modules/
+frontend/dist/
+frontend/.svelte-kit/
+
+# IDE
+.vscode/
+.idea/
+
+# OS
+.DS_Store
+Thumbs.db
+
+# Claude Code: local config and session state are private. The agents/skills
+# that ship with the package live in src/code_constraints/cli/_assets/.
+.claude/
+.mcp.json
+.hcm
+CLAUDE.md
+# Built SPA copied into the package by `make frontend-embed` for packaging.
+src/code_constraints/web/_static/

code_constraints-0.1.0/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 fleskovar
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

code_constraints-0.1.0/Makefile

@@ -0,0 +1,237 @@
+# code-constraints (cdec) — development, build, and packaging entry points.
+#
+# Recipes run through `sh`. On Windows use Git Bash (or any shell that provides
+# `sh` on PATH) so the venv-layout detection and the recipe bodies behave.
+#
+#   make setup     one-time development environment (venv + deps + frontend)
+#   make test      run the test suite
+#   make dist      build the wheel + sdist into dist/
+#   make help      list every target
+#
+# Override the interpreter or venv location on the command line:
+#   make setup BASE_PYTHON=python3.12 VENV=/tmp/cdec-venv
+
+SHELL := /bin/sh
+.DEFAULT_GOAL := help
+
+# ---------------------------------------------------------------------------
+# Layout / tool discovery
+# ---------------------------------------------------------------------------
+
+VENV ?= .venv
+
+# Windows venvs put executables in Scripts/ and keep the .exe suffix.
+ifeq ($(OS),Windows_NT)
+  VENV_BIN    := $(VENV)/Scripts
+  PY          := $(VENV_BIN)/python.exe
+  BASE_PYTHON ?= python
+else
+  VENV_BIN    := $(VENV)/bin
+  PY          := $(VENV_BIN)/python
+  BASE_PYTHON ?= python3
+endif
+
+PIP  := $(PY) -m pip
+CDEC := $(PY) -m code_constraints.cli
+
+FRONTEND := frontend
+NPM      ?= npm
+
+# `serve` defaults. Port 8000 is administratively reserved by http.sys on some
+# Windows machines, so the project default is 8765 (see CLAUDE.md).
+HOST ?= 127.0.0.1
+PORT ?= 8765
+
+.PHONY: help venv setup dev install-dev install install-pipx uninstall \
+        frontend-deps frontend-build frontend-check frontend clean-frontend \
+        frontend-embed build dist package check-dist test test-cov lint format typecheck \
+        verify test-cases test-case debug-case update-cases demo serve clean clean-venv distclean
+
+# ---------------------------------------------------------------------------
+# Help
+# ---------------------------------------------------------------------------
+
+help: ## Show this help
+	@echo "code-constraints (cdec) - make targets"
+	@echo
+	@grep -hE '^[a-zA-Z_-]+:.*?## ' $(MAKEFILE_LIST) \
+	  | sort \
+	  | awk 'BEGIN {FS = ":.*?## "}; {printf "  \033[36m%-18s\033[0m %s\n", $$1, $$2}'
+	@echo
+	@echo "Variables: VENV=$(VENV) BASE_PYTHON=$(BASE_PYTHON) HOST=$(HOST) PORT=$(PORT)"
+
+# ---------------------------------------------------------------------------
+# Environment setup
+# ---------------------------------------------------------------------------
+
+venv: ## Create the virtualenv if it does not exist
+	@if [ ! -x "$(PY)" ]; then \
+	  echo ">> creating virtualenv at $(VENV)"; \
+	  $(BASE_PYTHON) -m venv "$(VENV)"; \
+	else \
+	  echo ">> virtualenv already present at $(VENV)"; \
+	fi
+
+setup: venv install-dev frontend ## One-time dev environment: venv + editable install + frontend build
+	@echo
+	@echo "Ready. Next:"
+	@echo "  make serve      # http://$(HOST):$(PORT)"
+	@echo "  make test"
+	@echo "  make demo"
+
+dev: setup ## Alias for `setup`
+
+install-dev: venv ## Editable install with dev extras (the development version)
+	@echo ">> installing code-constraints (editable, dev + mcp extras)"
+	$(PIP) install --upgrade pip
+	$(PIP) install -e ".[dev,mcp]"
+	@echo ">> cdec available as: $(VENV_BIN)/cdec"
+	@echo ">> MCP server available as: $(VENV_BIN)/cdec-mcp"
+
+install: venv frontend-embed ## Install from source into the venv (non-editable)
+	@echo ">> installing code-constraints from source (non-editable)"
+	$(PIP) install --upgrade pip
+	$(PIP) install .
+	@echo ">> cdec available as: $(VENV_BIN)/cdec"
+
+install-pipx: frontend-embed ## Install the cdec CLI + MCP server globally from this checkout via pipx
+	@command -v pipx >/dev/null 2>&1 || { echo "pipx not found — see https://pipx.pypa.io"; exit 1; }
+	pipx install --force ".[mcp]"
+	@echo ">> cdec installed globally; run: cdec --help"
+	@echo ">> cdec-mcp on PATH too, so a harness .mcp.json can just say \"command\": \"cdec-mcp\""
+
+uninstall: ## Remove code-constraints from the venv
+	-$(PIP) uninstall -y code-constraints
+
+# ---------------------------------------------------------------------------
+# Frontend (Svelte 5 + Vite)
+# ---------------------------------------------------------------------------
+
+frontend-deps: ## npm install for the frontend
+	@echo ">> installing frontend deps"
+	cd $(FRONTEND) && $(NPM) install
+
+frontend-build: ## Build the Svelte SPA into frontend/dist
+	@echo ">> building frontend"
+	cd $(FRONTEND) && $(NPM) run build
+
+frontend-check: ## Run svelte-check
+	cd $(FRONTEND) && $(NPM) run check
+
+frontend: frontend-deps frontend-build ## Install frontend deps and build the SPA
+
+# The wheel serves the SPA from package data, so the built bundle has to sit
+# inside the package before hatchling collects it. Skipped (with a warning)
+# when the bundle is not built, so `pip install .` on a bare clone still works.
+EMBED := src/code_constraints/web/_static
+
+frontend-embed: ## Copy frontend/dist into the package as web/_static
+	@rm -rf $(EMBED)
+	@if [ -d "$(FRONTEND)/dist" ]; then \
+	  echo ">> embedding $(FRONTEND)/dist -> $(EMBED)"; \
+	  mkdir -p $(EMBED) && cp -r $(FRONTEND)/dist/. $(EMBED)/; \
+	else \
+	  echo "warning: $(FRONTEND)/dist not built - the wheel serves the API only"; \
+	fi
+
+clean-frontend: ## Remove frontend build output
+	rm -rf $(FRONTEND)/dist $(EMBED)
+
+# ---------------------------------------------------------------------------
+# Build / package
+# ---------------------------------------------------------------------------
+
+build: dist ## Alias for `dist`
+
+dist: clean-dist frontend-build frontend-embed ## Build the wheel + sdist into dist/
+	@echo ">> building distributable"
+	$(PY) -m build
+	@echo
+	@ls -l dist
+	@echo
+	@echo "NOTE: the wheel ships the Python packages, the rule shims, the Claude"
+	@echo "      assets, and the built SPA (as package data at web/_static), so"
+	@echo "      an installed wheel serves the web UI at / as well as the API."
+
+package: dist ## Alias for `dist`
+
+check-dist: dist ## Build, then validate the artifacts with twine
+	@$(PIP) install --quiet twine
+	$(PY) -m twine check dist/*
+
+clean-dist:
+	rm -rf dist build *.egg-info src/*.egg-info
+
+# ---------------------------------------------------------------------------
+# Quality gates
+# ---------------------------------------------------------------------------
+
+test: ## Run the test suite
+	$(PY) -m pytest
+
+test-cov: ## Run the test suite with a coverage report
+	$(PY) -m pytest --cov=code_constraints --cov-report=term-missing
+
+lint: ## Lint with ruff
+	$(PY) -m ruff check src tests
+
+format: ## Auto-fix lint findings with ruff
+	$(PY) -m ruff check --fix src tests
+
+typecheck: ## Type-check with mypy
+	$(PY) -m mypy src
+
+verify: lint typecheck test ## Run lint + typecheck + tests
+
+test-cases: ## Run every human-readable case folder under tests/cases/
+	$(PY) -m pytest tests/test_case_folders.py
+
+test-case: ## Run one case folder: make test-case CASE=check/subclass-naming/python
+	$(PY) -m pytest "tests/test_case_folders.py::test_case[$(CASE)]"
+
+debug-case: ## Debug one case folder under pdb: make debug-case CASE=...
+	$(PY) -m pytest "tests/test_case_folders.py::test_case[$(CASE)]" --pdb -s
+
+update-cases: ## Regenerate every case baseline from current behaviour (REVIEW THE DIFF)
+	UPDATE_BASELINES=1 $(PY) -m pytest tests/test_case_folders.py
+
+# ---------------------------------------------------------------------------
+# Running
+# ---------------------------------------------------------------------------
+
+serve: ## Start the web server (HOST/PORT overridable)
+	@if [ ! -f "$(FRONTEND)/dist/index.html" ]; then \
+	  echo "warning: $(FRONTEND)/dist not built — run 'make frontend-build'"; \
+	fi
+	$(CDEC) serve --host $(HOST) --port $(PORT)
+
+# Every language with rule-tag support ships a demo with the same shape: a
+# tagged billing slice, a committed lock, and one seeded conformance violation.
+# See docs/languages/ for a guide per language.
+DEMO_LANGS := python csharp odin lua julia
+
+demo: ## Run `cdec check` against the bundled example projects
+	@echo "Every rule in .cdec/rules.yaml runs in one command, so this is the"
+	@echo "whole gate: architectural rules, tag conformance, locks and the"
+	@echo "reference check together."
+	@echo "(each demo carries one seeded violation - non-zero exit is expected)"
+	@echo
+	@for lang in $(DEMO_LANGS); do \
+	  echo "--- $$lang"; \
+	  $(CDEC) check --config examples/$${lang}_demo/.cdec --source examples/$${lang}_demo || true; \
+	  echo; \
+	done
+
+# ---------------------------------------------------------------------------
+# Cleaning
+# ---------------------------------------------------------------------------
+
+clean: clean-dist ## Remove build artifacts and caches (keeps the venv)
+	rm -rf .pytest_cache .ruff_cache .mypy_cache .cdec_cache htmlcov .coverage
+	find . -type d -name __pycache__ -not -path "./$(VENV)/*" -not -path "./$(FRONTEND)/node_modules/*" -exec rm -rf {} + 2>/dev/null || true
+
+clean-venv: ## Delete the virtualenv
+	rm -rf $(VENV)
+
+distclean: clean clean-frontend clean-venv ## Remove everything generated, including node_modules
+	rm -rf $(FRONTEND)/node_modules