codex-reset-watch 0.20.0__tar.gz

codex_reset_watch-0.20.0/.github/workflows/ci.yml

@@ -0,0 +1,109 @@
+name: CI
+
+on:
+  push:
+  pull_request:
+
+permissions:
+  contents: read
+
+concurrency:
+  group: ci-${{ github.workflow }}-${{ github.ref }}
+  cancel-in-progress: true
+
+env:
+  PYTHONUTF8: "1"
+
+jobs:
+  test:
+    name: Python 3.13 / ${{ matrix.os }}
+    timeout-minutes: 15
+    strategy:
+      fail-fast: false
+      matrix:
+        os: [macos-latest, ubuntu-latest, windows-latest]
+    runs-on: ${{ matrix.os }}
+    steps:
+      - uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6
+        with:
+          persist-credentials: false
+      - uses: astral-sh/setup-uv@c18668ad3cf93ea998bef934396af7bb5c839dc7 # v10.2.0
+        with:
+          python-version: "3.13"
+          enable-cache: true
+          cache-dependency-glob: uv.lock
+      - name: Install locked dependencies
+        run: uv sync --locked
+      - name: Lint
+        run: >
+          uv run python -m py_compile
+          src/codex_reset_watch/__init__.py src/codex_reset_watch/paths.py
+          src/codex_reset_watch/filelock.py scripts/render_launchd.py
+          scripts/render_systemd.py scripts/schtasks.py scripts/install.py
+          scripts/uninstall.py
+      - name: Test
+        run: uv run python -m unittest discover -s tests -v
+      - name: Build distributions
+        run: uv build
+      - name: Validate wheel and console script
+        shell: python
+        run: |
+          import os
+          import pathlib
+          import subprocess
+          import tempfile
+
+          wheel, = pathlib.Path("dist").glob("*.whl")
+          with tempfile.TemporaryDirectory() as directory:
+              environment = pathlib.Path(directory)
+              subprocess.run(["uv", "venv", environment], check=True)
+              scripts = environment / ("Scripts" if os.name == "nt" else "bin")
+              python = scripts / ("python.exe" if os.name == "nt" else "python")
+              subprocess.run(
+                  ["uv", "pip", "install", "--python", python, wheel],
+                  check=True,
+              )
+              suffix = ".exe" if os.name == "nt" else ""
+              subprocess.run([scripts / f"codex-reset-watch{suffix}", "--help"], check=True)
+              subprocess.run([scripts / f"crw{suffix}", "--help"], check=True)
+              print("console scripts OK")
+
+  # Failure-only pager. A green run sends nothing on purpose: a notification
+  # that arrives on every push is one nobody reads. Credentials live in repo
+  # secrets, never in this file — see README "CI notifications" for the two
+  # `gh secret set` commands that configure them.
+  notify-telegram:
+    needs: test
+    if: ${{ failure() && github.event_name == 'push' }}
+    runs-on: ubuntu-latest
+    timeout-minutes: 5
+    steps:
+      - name: Notify Telegram
+        env:
+          TOKEN: ${{ secrets.TELEGRAM_BOT_TOKEN }}
+          CHAT_ID: ${{ secrets.TELEGRAM_CHAT_ID }}
+        run: |
+          # Unconfigured secrets are a valid state (a fork, or a clone whose
+          # owner never set them up). Skip quietly instead of failing the job
+          # and reporting a second, misleading red X on top of the real one.
+          if [ -z "$TOKEN" ] || [ -z "$CHAT_ID" ]; then
+            echo "::notice::TELEGRAM_BOT_TOKEN / TELEGRAM_CHAT_ID not set — skipping notification"
+            exit 0
+          fi
+          # parse_mode=HTML: a branch or commit subject containing < & > would
+          # otherwise produce unparseable markup and Telegram would 400.
+          esc() { printf '%s' "$1" | sed -e 's/&/\&amp;/g' -e 's/</\&lt;/g' -e 's/>/\&gt;/g'; }
+          ci_url="$GITHUB_SERVER_URL/$GITHUB_REPOSITORY/actions/runs/$GITHUB_RUN_ID"
+          message="🚨 <b>CI failed</b>
+
+          <b>Repository:</b> <code>$(esc "$GITHUB_REPOSITORY")</code>
+          <b>Branch:</b> <code>$(esc "$GITHUB_REF_NAME")</code>
+          <b>Commit:</b> <code>$(esc "${GITHUB_SHA::7}")</code>
+
+          <a href=\"$ci_url\">Open failed CI run</a>"
+          curl --fail --silent --show-error --max-time 30 \
+            --data-urlencode "chat_id=$CHAT_ID" \
+            --data-urlencode "parse_mode=HTML" \
+            --data-urlencode "disable_web_page_preview=true" \
+            --data-urlencode "text=$message" \
+            "https://api.telegram.org/bot$TOKEN/sendMessage"

codex_reset_watch-0.20.0/.github/workflows/release.yml

@@ -0,0 +1,74 @@
+name: Release
+
+on:
+  push:
+    tags:
+      - "v*"
+
+permissions:
+  contents: read
+
+concurrency:
+  group: release-${{ github.ref }}
+
+env:
+  PYTHONUTF8: "1"
+
+jobs:
+  release:
+    runs-on: ubuntu-latest
+    timeout-minutes: 15
+    # Trusted Publishing (OIDC): the PyPI publisher is bound to this
+    # environment, whose required reviewer gates every upload.
+    environment: pypi
+    permissions:
+      contents: write
+      id-token: write
+    steps:
+      - uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6
+        with:
+          persist-credentials: false
+      - uses: astral-sh/setup-uv@c18668ad3cf93ea998bef934396af7bb5c839dc7 # v10.2.0
+        with:
+          python-version: "3.13"
+          enable-cache: true
+          cache-dependency-glob: uv.lock
+      - name: Install locked dependencies
+        run: uv sync --locked
+      - name: Check, test, and build
+        run: |
+          uv run python -m compileall -q src scripts
+          uv run python -m unittest discover -s tests -v
+          uv build
+      - name: Validate release wheel
+        run: |
+          uv venv .release-venv
+          uv pip install --python .release-venv/bin/python dist/*.whl
+          .release-venv/bin/codex-reset-watch --help
+          .release-venv/bin/crw --help
+          # The wheel must report the version being tagged, so a tag that
+          # disagrees with pyproject.toml fails before anything reaches PyPI.
+          reported="$(.release-venv/bin/crw --version)"
+          expected="codex-reset-watch ${GITHUB_REF_NAME#v}"
+          if [ "$reported" != "$expected" ]; then
+            echo "::error::wheel reports '$reported', expected '$expected'"
+            exit 1
+          fi
+      - name: Publish to PyPI
+        run: uv publish --trusted-publishing always
+
+      # After publish: uv publish uploads dist/*, and SHA256SUMS is not a distribution.
+      # The GitHub release comes last on purpose: the in-app update check reads
+      # releases/latest, so a release must never exist before its PyPI upload.
+      - name: Create checksums
+        run: sha256sum dist/* > dist/SHA256SUMS
+      - name: Create GitHub release
+        env:
+          GH_TOKEN: ${{ github.token }}
+        run: |
+          gh api "repos/${GITHUB_REPOSITORY}/git/refs/tags/$GITHUB_REF_NAME" >/dev/null
+          if gh release view "$GITHUB_REF_NAME" >/dev/null 2>&1; then
+            gh release upload "$GITHUB_REF_NAME" dist/* --clobber
+          else
+            gh release create "$GITHUB_REF_NAME" dist/* --generate-notes --title "$GITHUB_REF_NAME" --verify-tag
+          fi

codex_reset_watch-0.20.0/.gitignore

@@ -0,0 +1,297 @@
+# ============================================================
+# codex-reset-watch
+# Python + uv
+# macOS / Windows / Linux
+# ============================================================
+
+
+# ------------------------------------------------------------
+# Python
+# ------------------------------------------------------------
+
+__pycache__/
+*.py[cod]
+*$py.class
+*.so
+
+# Python virtual environments
+.venv/
+venv/
+env/
+ENV/
+env.bak/
+venv.bak/
+
+# Python packaging / build
+build/
+dist/
+downloads/
+eggs/
+.eggs/
+lib/
+lib64/
+parts/
+sdist/
+var/
+wheels/
+share/python-wheels/
+
+*.egg-info/
+.installed.cfg
+*.egg
+MANIFEST
+
+# PyInstaller
+*.manifest
+*.spec
+
+# pip
+pip-log.txt
+pip-delete-this-directory.txt
+
+
+# ------------------------------------------------------------
+# uv
+# ------------------------------------------------------------
+
+# uv local cache
+.uv/
+
+# Keep these tracked:
+# uv.lock
+# .python-version
+
+
+# ------------------------------------------------------------
+# Tests / Coverage
+# ------------------------------------------------------------
+
+.pytest_cache/
+.coverage
+.coverage.*
+htmlcov/
+coverage.xml
+coverage.json
+
+.tox/
+.nox/
+
+*.cover
+*.py,cover
+.hypothesis/
+
+
+# ------------------------------------------------------------
+# Type checkers / linters
+# ------------------------------------------------------------
+
+.mypy_cache/
+.dmypy.json
+dmypy.json
+
+.pyre/
+.pytype/
+
+.ruff_cache/
+
+.pyright/
+
+
+# ------------------------------------------------------------
+# Runtime / Logs / Temporary files
+# ------------------------------------------------------------
+
+*.log
+*.log.*
+logs/
+log/
+
+*.tmp
+*.temp
+*.swp
+*.swo
+*.bak
+
+tmp/
+temp/
+
+*.pid
+*.pid.lock
+
+
+# ------------------------------------------------------------
+# Secrets / Environment variables
+# ------------------------------------------------------------
+
+.env
+.env.*
+!.env.example
+
+*.pem
+*.key
+*.crt
+*.p12
+*.pfx
+
+secrets/
+credentials/
+
+
+# ------------------------------------------------------------
+# Local application state
+# ------------------------------------------------------------
+
+state.json
+config.local.json
+*.state.json
+
+runtime/
+data/
+
+
+# ------------------------------------------------------------
+# macOS
+# ------------------------------------------------------------
+
+.DS_Store
+.AppleDouble
+.LSOverride
+
+# Icon must end with two \r
+Icon
+
+._*
+
+# Files that might appear in the root of a volume
+.DocumentRevisions-V100
+.fseventsd
+.Spotlight-V100
+.TemporaryItems
+.Trashes
+.VolumeIcon.icns
+.com.apple.timemachine.donotpresent
+
+# AFP share files
+.AppleDB
+.AppleDesktop
+Network Trash Folder
+Temporary Items
+.apdisk
+
+
+# ------------------------------------------------------------
+# Windows
+# ------------------------------------------------------------
+
+Thumbs.db
+Thumbs.db:encryptable
+ehthumbs.db
+ehthumbs_vista.db
+
+Desktop.ini
+
+$RECYCLE.BIN/
+
+*.cab
+*.msi
+*.msix
+*.msm
+*.msp
+
+# Windows shortcuts
+*.lnk
+
+# Windows dump files
+*.dmp
+
+
+# ------------------------------------------------------------
+# Linux
+# ------------------------------------------------------------
+
+*~
+.fuse_hidden*
+.directory
+.Trash-*
+.nfs*
+
+
+# ------------------------------------------------------------
+# Visual Studio Code
+# ------------------------------------------------------------
+
+.vscode/
+
+# If you later want to share selected VS Code settings:
+# .vscode/*
+# !.vscode/settings.json
+# !.vscode/extensions.json
+# !.vscode/tasks.json
+# !.vscode/launch.json
+
+
+# ------------------------------------------------------------
+# JetBrains IDEs
+# PyCharm / IntelliJ / WebStorm
+# ------------------------------------------------------------
+
+.idea/
+*.iml
+*.iws
+*.ipr
+
+
+# ------------------------------------------------------------
+# Vim / Neovim
+# ------------------------------------------------------------
+
+*.swp
+*.swo
+*.swn
+Session.vim
+.netrwhist
+
+
+# ------------------------------------------------------------
+# Emacs
+# ------------------------------------------------------------
+
+*~
+\#*\#
+.\#*
+.dir-locals.el
+
+
+# ------------------------------------------------------------
+# Archives generated locally
+# ------------------------------------------------------------
+
+*.zip
+*.tar
+*.tar.gz
+*.tgz
+*.7z
+*.rar
+
+
+# ------------------------------------------------------------
+# Project-specific local artifacts
+# ------------------------------------------------------------
+
+# launchd-generated local plist copies, if generated inside repo
+generated/
+generated-plists/
+
+# Local API response/debug dumps
+api-dumps/
+debug/
+*.debug.json
+*.stackdump
+
+# Local test output
+test-results/
+.playwright-mcp/
+
+# CodeGraph index directory
+.codegraph/
+

codex_reset_watch-0.20.0/.python-version

@@ -0,0 +1 @@
+3.13