code-towel 1.772__tar.gz → 1.792__tar.gz

code_towel-1.792/.github/workflows/ci.yml

@@ -0,0 +1,52 @@
+name: CI
+
+on:
+  push:
+    branches: [main, 'release/**']
+  pull_request:
+
+permissions:
+  contents: read
+
+jobs:
+  quality:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262  # v4
+      - uses: actions/setup-python@a26af69be951a213d495a4c3e4e4022e16d87065  # v5
+        with:
+          python-version: '3.13'
+      - uses: astral-sh/setup-uv@d0cc045d04ccac9d8b7881df0226f9e82c39688e  # v6
+      - run: uv sync --frozen --extra dev
+      - run: uv run --frozen black --check src/towel tests scripts
+      - run: uv run --frozen flake8 src/towel scripts tests
+      - run: uv run --frozen mypy
+      - run: uv run --frozen bandit -r src/towel scripts -ll
+      # Inventory the frozen environment, excluding only the unpublished project.
+      # --no-deps avoids resolving a different set: the export includes transitive deps.
+      - run: |
+          uv run --frozen python scripts/audit_dependencies.py > "$RUNNER_TEMP/towel-dependencies.txt"
+          uv run --frozen python -m pip_audit --strict --no-deps --disable-pip --requirement "$RUNNER_TEMP/towel-dependencies.txt"
+      - run: uv run --frozen python -m build
+
+  tests:
+    runs-on: ubuntu-latest
+    strategy:
+      fail-fast: false
+      matrix:
+        python-version: ['3.11', '3.12', '3.13']
+    steps:
+      - uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262  # v4
+      - uses: actions/setup-python@a26af69be951a213d495a4c3e4e4022e16d87065  # v5
+        with:
+          python-version: ${{ matrix.python-version }}
+      - uses: astral-sh/setup-uv@d0cc045d04ccac9d8b7881df0226f9e82c39688e  # v6
+      - run: uv sync --frozen --extra dev
+      - run: uv run --frozen coverage run -m pytest -q
+      - run: uv run --frozen coverage combine
+      - run: uv run --frozen coverage report --fail-under=85
+      - run: uv run --frozen coverage xml
+      - uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02  # v4
+        with:
+          name: coverage-${{ matrix.python-version }}
+          path: coverage.xml

code_towel-1.792/.github/workflows/ecosystem.yml

@@ -0,0 +1,42 @@
+name: Ecosystem
+
+# Runs public projects' own test suites before and after Towel refactors them.
+# Manual and weekly, because it clones and tests dozens of repositories.
+on:
+  workflow_dispatch:
+  schedule:
+    - cron: "17 6 * * 1"
+
+permissions:
+  contents: read
+
+jobs:
+  ecosystem:
+    runs-on: ubuntu-latest
+    timeout-minutes: 180
+    steps:
+      - uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262  # v4
+        with:
+          persist-credentials: false  # third-party test suites run in this checkout
+      - uses: actions/setup-python@a26af69be951a213d495a4c3e4e4022e16d87065  # v5
+        with:
+          python-version: '3.13'
+      - uses: astral-sh/setup-uv@d0cc045d04ccac9d8b7881df0226f9e82c39688e  # v6
+      - run: uv sync --frozen --extra dev
+      # The check clones and executes third-party code (see the script's
+      # docstring); a hosted runner is discarded after the job, which is the
+      # only setting where that opt-in is appropriate.
+      # This manifest provides upstream runtime-test dependencies, not each
+      # project's complete typing environment. Exercise consumer behavior with
+      # explicit --no-types; default refusals and configured typed paths have
+      # separate tests in Towel's suite and installed-extras verification.
+      - run: uv run --frozen python scripts/ecosystem_check.py --no-types --work "$RUNNER_TEMP/ecosystem" --workers 2
+        env:
+          TOWEL_ECOSYSTEM_RUN_UNTRUSTED: "1"
+      - uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02  # v4
+        if: always()
+        with:
+          name: ecosystem-report
+          path: |
+            ${{ runner.temp }}/ecosystem/report
+            ${{ runner.temp }}/ecosystem/logs

code_towel-1.792/.pre-commit-config.yaml

@@ -0,0 +1,73 @@
+# Pre-commit hooks for Towel
+# Install: pip install pre-commit && pre-commit install
+# Run manually: pre-commit run --all-files
+
+repos:
+  - repo: local
+    hooks:
+      - id: black
+        name: Black
+        entry: python -m black --check --line-length=100
+        language: system
+        types: [python]
+        exclude: ^(test_examples|\.templates/)
+      - id: flake8
+        name: Flake8
+        entry: python -m flake8 --config=.flake8
+        language: system
+        types: [python]
+        files: ^(src/towel/|scripts/|tests/)
+        exclude: ^tests/(hostile_cases|hostile_crossfile)/
+      - id: mypy
+        name: Mypy
+        entry: python -m mypy
+        language: system
+        pass_filenames: false
+        always_run: true
+      - id: bandit
+        name: Bandit
+        entry: python -m bandit -ll
+        language: system
+        types: [python]
+        files: ^src/towel/
+
+  # General pre-commit hooks
+  - repo: https://github.com/pre-commit/pre-commit-hooks
+    rev: v4.5.0
+    hooks:
+      # Remove trailing whitespace
+      - id: trailing-whitespace
+        # Retained validation output is evidence: preserve its original bytes.
+        exclude: ^(test_examples.*_expected_output/|tests/(hostile_cases|hostile_crossfile)/|tests/release_evidence/[^/]+/[^/]+\.txt$|tests/ecosystem_context_sources/(?!index\.json$))
+
+      # Ensure files end with newline
+      - id: end-of-file-fixer
+        # Pinned upstream fixtures retain their exact public source bytes.
+        exclude: ^(test_examples.*_expected_output/|tests/(hostile_cases|hostile_crossfile)/|tests/ecosystem_context_sources/(?!index\.json$))
+
+      # Check YAML syntax
+      - id: check-yaml
+
+      # Prevent large files from being committed
+      - id: check-added-large-files
+        args: [--maxkb=500]
+
+      # Check for merge conflicts
+      - id: check-merge-conflict
+
+      # Check TOML syntax
+      - id: check-toml
+
+      # Check for Python syntax errors
+      - id: check-ast
+
+      # Check for debugger imports
+      - id: debug-statements
+
+  # Docstring checking with pydocstyle (disabled for pre-commit, run manually)
+  # - repo: https://github.com/pycqa/pydocstyle
+  #   rev: 6.3.0
+  #   hooks:
+  #     - id: pydocstyle
+  #       args: [--config=setup.cfg]
+  #       exclude: ^(tests/|test_examples|\.templates/|scripts/)