continuo-python-runtime 0.5.0__tar.gz → 0.6.0__tar.gz

{continuo_python_runtime-0.5.0 → continuo_python_runtime-0.6.0}/.github/workflows/images.yml

@@ -83,7 +83,7 @@ jobs:
         run: |
           docker run --rm --network host \
             -v "$PWD/tests/smoke/node_smoke:/app" \
-            -e NODE_ID=python-model.smoke.analytics.smoke \
+            -e NODE_ID=python-node.smoke.analytics.smoke \
             -e TABLE_NAME=smoke \
             -e TARGET_SCHEMA=analytics \
             -e POSTGRES_HOST=localhost \
@@ -134,7 +134,7 @@ jobs:
         run: |
           docker run --rm \
             -v "$PWD/tests/smoke/node_smoke:/app" \
-            -e NODE_ID=python-model.smoke.analytics.smoke \
+            -e NODE_ID=python-node.smoke.analytics.smoke \
             -e TABLE_NAME=smoke \
             -e TARGET_SCHEMA=analytics \
             -e TRINO_HOST=host.docker.internal \

{continuo_python_runtime-0.5.0 → continuo_python_runtime-0.6.0}/CHANGELOG.md

@@ -5,6 +5,20 @@ follows [Keep a Changelog](https://keepachangelog.com/en/1.1.0/).
 
 ## [Unreleased]
 
+## [0.6.0] - 2026-09-28
+
+### Breaking
+
+- The script node kind is named `python-node` (the default when `kind` is
+  omitted). A contract declaring `kind: python-model` is rejected at load.
+  Re-running `continuo-runtime merge` changes every python node's
+  `config_hash`, so each node is re-validated once on its next release.
+
+### Changed
+
+- Contract rules, hash inputs and run producers are looked up per kind from
+  registries pinned to `KINDS`.
+
 ## [0.5.0] - 2026-09-09
 
 ### Added

{continuo_python_runtime-0.5.0 → continuo_python_runtime-0.6.0}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.5
 Name: continuo-python-runtime
-Version: 0.5.0
+Version: 0.6.0
 Summary: Runtime harness, contract tooling, and CI lint for Continuo python nodes.
 Author: Simone Carolini
 Maintainer: Simone Carolini
@@ -163,7 +163,7 @@ Every rule below (`extra_columns`, `output_columns`, "Conform rules") applies
 to both kinds identically — `kind` only changes how the pre-conform table is
 produced, never how it is checked or written.
 
-- **`python-model`** (the default; the field may be omitted) — a script node.
+- **`python-node`** (the default; the field may be omitted) — a script node.
   It requires `script:` and a `reads:` map of one or more named SQL queries,
   as described in "The script API" below.
 - **`python-csv`** — a contract-only node: it has no script and its `reads:`
@@ -275,9 +275,9 @@ A domain repo picks its warehouse engine by which base image it builds
 `FROM`:
 
 ```dockerfile
-FROM ghcr.io/carolsimone/continuo-python-runtime-postgres:v0.5.0
+FROM ghcr.io/carolsimone/continuo-python-runtime-postgres:v0.6.0
 # or
-FROM ghcr.io/carolsimone/continuo-python-runtime-trino:v0.5.0
+FROM ghcr.io/carolsimone/continuo-python-runtime-trino:v0.6.0
 ```
 
 The engine is part of the image **name**; the tag is the bare version, so

{continuo_python_runtime-0.5.0 → continuo_python_runtime-0.6.0}/README.md

@@ -143,7 +143,7 @@ Every rule below (`extra_columns`, `output_columns`, "Conform rules") applies
 to both kinds identically — `kind` only changes how the pre-conform table is
 produced, never how it is checked or written.
 
-- **`python-model`** (the default; the field may be omitted) — a script node.
+- **`python-node`** (the default; the field may be omitted) — a script node.
   It requires `script:` and a `reads:` map of one or more named SQL queries,
   as described in "The script API" below.
 - **`python-csv`** — a contract-only node: it has no script and its `reads:`
@@ -255,9 +255,9 @@ A domain repo picks its warehouse engine by which base image it builds
 `FROM`:
 
 ```dockerfile
-FROM ghcr.io/carolsimone/continuo-python-runtime-postgres:v0.5.0
+FROM ghcr.io/carolsimone/continuo-python-runtime-postgres:v0.6.0
 # or
-FROM ghcr.io/carolsimone/continuo-python-runtime-trino:v0.5.0
+FROM ghcr.io/carolsimone/continuo-python-runtime-trino:v0.6.0
 ```
 
 The engine is part of the image **name**; the tag is the bare version, so

{continuo_python_runtime-0.5.0 → continuo_python_runtime-0.6.0}/adapters/postgres/pyproject.toml

@@ -1,5 +1,5 @@
 [project]
-version = "0.2.1"
+version = "0.2.2"
 name = "continuo-postgres-adapter"
 description = "Postgres warehouse adapter for Continuo: validation and python-node runtime."
 authors = [{ name = "Simone Carolini" }]

{continuo_python_runtime-0.5.0 → continuo_python_runtime-0.6.0}/adapters/postgres/tests/conftest.py

@@ -43,8 +43,18 @@ def minio_container():
                 "-p", "0:9000",
                 "-e", "MINIO_ROOT_USER=minioadmin",
                 "-e", "MINIO_ROOT_PASSWORD=minioadmin",
-                "minio/minio:latest",
-                "server", "/data", "--address", ":9000",
+                # ghcr mirror of Bitnami's minio image (Docker Hub's minio/minio
+                # is no longer anonymously pullable). Its ENTRYPOINT is
+                # Bitnami's own setup script, not the `minio` binary, so it
+                # must be overridden for these args to reach `minio` directly;
+                # its data dir also has to be Bitnami's own
+                # /bitnami/minio/data (world-root-group-writable for the
+                # image's non-root user) since plain /data doesn't exist in
+                # this image and the binary can't create it at the
+                # filesystem root.
+                "--entrypoint", "minio",
+                "ghcr.io/carolsimone/continuo-minio:2025.7.23",
+                "server", "/bitnami/minio/data", "--address", ":9000",
             ],
             check=True, capture_output=True, text=True, timeout=60,
         )

{continuo_python_runtime-0.5.0 → continuo_python_runtime-0.6.0}/adapters/postgres/tests/test_integration_runtime_postgres.py

@@ -354,7 +354,7 @@ def test_run_node_csv_kind_loads_minio_csv_into_postgres(clean_schema, csv_minio
     doubles here -- the S3CsvSourceReader from csv_readers.reader_for talks
     to the real minio container, and PostgresAdapter writes to the real
     postgres stack), then conform()/ensure_table()/load() proceed exactly as
-    for a python-model node.
+    for a python-node node.
     """
     monkeypatch.setenv("S3_ENDPOINT_URL", csv_minio)
     repo = _csv_contract_dir(tmp_path, clean_schema)

continuo_python_runtime-0.6.0/continuo_python_runtime/contract/kinds.py

@@ -0,0 +1,109 @@
+"""Per-kind contract rules: which fields a node of each kind must carry.
+
+Each kind is one ``KindRules`` entry composed of a script policy and a reads
+rule. Adding a kind means adding one entry to ``RULES``; nothing that parses a
+contract branches on the kind's name.
+"""
+
+from __future__ import annotations
+
+from abc import ABC, abstractmethod
+from dataclasses import dataclass
+from typing import Any
+
+from continuo_engine_contract.sql import ensure_single_read  # type: ignore[import-untyped]
+from sqlglot.errors import TokenError
+
+from continuo_python_runtime.contract.model import KINDS
+from continuo_python_runtime.csv_source import parse_csv_uri
+from continuo_python_runtime.errors import ContractError
+
+
+class ReadsRule(ABC):
+    """Validates a node's ``reads`` mapping and returns it unchanged."""
+
+    @abstractmethod
+    def validate(
+        self, reads: Any, label: str, *, dialect: str | None, check_reads: bool
+    ) -> dict[str, str]: ...
+
+
+class SqlReads(ReadsRule):
+    """A non-empty mapping of read name -> single SELECT."""
+
+    def validate(
+        self, reads: Any, label: str, *, dialect: str | None, check_reads: bool
+    ) -> dict[str, str]:
+        if not isinstance(reads, dict) or not reads:
+            raise ContractError(
+                f"{label}: 'reads' must be a non-empty mapping of name -> SQL"
+            )
+        for name, sql in reads.items():
+            if not isinstance(name, str) or not name.strip():
+                raise ContractError(
+                    f"{label}: 'reads' name {name!r} must be a non-empty string"
+                )
+            if not isinstance(sql, str) or not sql.strip():
+                raise ContractError(
+                    f"{label}: 'reads.{name}' must be a non-empty SQL string"
+                )
+            if not check_reads:
+                continue
+            try:
+                ensure_single_read(sql, dialect)
+            except (ValueError, TokenError) as exc:
+                # ensure_single_read's own message is phrased for check_binds
+                # (its only other caller today), so it's wrapped rather than
+                # surfaced bare here. TokenError is also caught: an unterminated
+                # string literal or comment fails sqlglot's tokenizer with a
+                # TokenError, a SqlglotError sibling of ParseError and not a
+                # subclass of ValueError -- despite ensure_single_read's
+                # docstring promising every rejection is a ValueError. Only
+                # TokenError, not the broader SqlglotError, is caught here: by
+                # the time control reaches this point `dialect` has already
+                # been validated once in load_contract_dir, so any other
+                # SqlglotError a future sqlglot version might raise from this
+                # call should surface as itself, not get relabeled as a
+                # rejected read.
+                raise ContractError(
+                    f"{label}: 'reads.{name}' must be a single read query ({exc})"
+                ) from exc
+        return dict(reads)
+
+
+class CsvRead(ReadsRule):
+    """Exactly ``{csv: <uri>}``, the uri in the grammar ``parse_csv_uri`` accepts."""
+
+    def validate(
+        self, reads: Any, label: str, *, dialect: str | None, check_reads: bool
+    ) -> dict[str, str]:
+        if not isinstance(reads, dict) or set(reads) != {"csv"}:
+            raise ContractError(
+                f"{label}: a python-csv node's 'reads' must be exactly {{csv: <uri>}}"
+            )
+        try:
+            parse_csv_uri(reads["csv"])
+        except (ValueError, TypeError) as exc:
+            raise ContractError(f"{label}: invalid csv uri: {exc}") from exc
+        return dict(reads)
+
+
+@dataclass(frozen=True)
+class KindRules:
+    """What a node of one kind must declare."""
+
+    script_required: bool
+    reads: ReadsRule
+
+
+RULES: dict[str, KindRules] = {
+    "python-node": KindRules(script_required=True, reads=SqlReads()),
+    "python-csv": KindRules(script_required=False, reads=CsvRead()),
+}
+
+
+def rules_for(kind: object, label: str) -> KindRules:
+    """Return the rules for ``kind``; raise ``ContractError`` for any other value."""
+    if isinstance(kind, str) and kind in RULES:
+        return RULES[kind]
+    raise ContractError(f"{label}: 'kind' must be one of {sorted(KINDS)}, got {kind!r}")

{continuo_python_runtime-0.5.0 → continuo_python_runtime-0.6.0}/continuo_python_runtime/contract/loader.py

@@ -11,18 +11,16 @@ from pathlib import Path
 from typing import Any
 
 import yaml
-from continuo_engine_contract.sql import ensure_single_read  # type: ignore[import-untyped]
 from sqlglot import Dialect
-from sqlglot.errors import TokenError
 
+from continuo_python_runtime.contract.kinds import rules_for
 from continuo_python_runtime.contract.model import (
     CRITICALITIES,
+    DEFAULT_KIND,
     EXTRA_COLUMNS_POLICIES,
-    KINDS,
     Column,
     Node,
 )
-from continuo_python_runtime.csv_source import parse_csv_uri
 from continuo_python_runtime.errors import ContractError
 from continuo_python_runtime.types import parse_sql_type
 
@@ -173,11 +171,8 @@ def parse_node(
     if unknown:
         raise ContractError(f"{label}: unknown key(s) {sorted(unknown)}")
 
-    kind = raw.get("kind", "python-model")
-    if not isinstance(kind, str) or kind not in KINDS:
-        raise ContractError(
-            f"{label}: 'kind' must be one of {sorted(KINDS)}, got {kind!r}"
-        )
+    kind = raw.get("kind", DEFAULT_KIND)
+    rules = rules_for(kind, label)
 
     for field in _REQUIRED_STRING_FIELDS:
         value = raw.get(field)
@@ -191,20 +186,20 @@ def parse_node(
     owner = raw["owner"]
     schedule = raw["schedule"]
 
-    if kind == "python-csv":
-        if "script" in raw:
-            raise ContractError(
-                f"{label}: 'script' is forbidden for kind python-csv "
-                "(csv nodes are contract-only)"
-            )
-        script = ""
-    else:
+    if rules.script_required:
         raw_script = raw.get("script")
         if not isinstance(raw_script, str) or not raw_script.strip():
             raise ContractError(
                 f"{label}: required field 'script' must be a non-empty string"
             )
         script = raw_script
+    else:
+        if "script" in raw:
+            raise ContractError(
+                f"{label}: 'script' is forbidden for kind {kind} "
+                "(it is a contract-only kind)"
+            )
+        script = ""
 
     criticality = raw.get("criticality")
     if not isinstance(criticality, str) or criticality not in CRITICALITIES:
@@ -222,51 +217,9 @@ def parse_node(
             f"got {extra_columns!r}"
         )
 
-    reads = raw.get("reads")
-    if kind == "python-csv":
-        if not isinstance(reads, dict) or set(reads) != {"csv"}:
-            raise ContractError(
-                f"{label}: a python-csv node's 'reads' must be exactly {{csv: <uri>}}"
-            )
-        try:
-            parse_csv_uri(reads["csv"])
-        except (ValueError, TypeError) as exc:
-            raise ContractError(f"{label}: invalid csv uri: {exc}") from exc
-    else:
-        if not isinstance(reads, dict) or not reads:
-            raise ContractError(
-                f"{label}: 'reads' must be a non-empty mapping of name -> SQL"
-            )
-        for name, sql in reads.items():
-            if not isinstance(name, str) or not name.strip():
-                raise ContractError(
-                    f"{label}: 'reads' name {name!r} must be a non-empty string"
-                )
-            if not isinstance(sql, str) or not sql.strip():
-                raise ContractError(
-                    f"{label}: 'reads.{name}' must be a non-empty SQL string"
-                )
-            if not check_reads:
-                continue
-            try:
-                ensure_single_read(sql, dialect)
-            except (ValueError, TokenError) as exc:
-                # ensure_single_read's own message is phrased for check_binds
-                # (its only other caller today), so it's wrapped rather than
-                # surfaced bare here. TokenError is also caught: an unterminated
-                # string literal or comment fails sqlglot's tokenizer with a
-                # TokenError, a SqlglotError sibling of ParseError and not a
-                # subclass of ValueError -- despite ensure_single_read's
-                # docstring promising every rejection is a ValueError. Only
-                # TokenError, not the broader SqlglotError, is caught here: by
-                # the time control reaches this point `dialect` has already
-                # been validated once in load_contract_dir, so any other
-                # SqlglotError a future sqlglot version might raise from this
-                # call should surface as itself, not get relabeled as a
-                # rejected read.
-                raise ContractError(
-                    f"{label}: 'reads.{name}' must be a single read query ({exc})"
-                ) from exc
+    reads = rules.reads.validate(
+        raw.get("reads"), label, dialect=dialect, check_reads=check_reads
+    )
 
     raw_columns = raw.get("output_columns")
     if not isinstance(raw_columns, list) or not raw_columns:
@@ -325,7 +278,7 @@ def parse_node(
         schedule=schedule,
         criticality=criticality,
         script=script,
-        reads=dict(reads),
+        reads=reads,
         output_columns=tuple(columns),
         description=description,
         extra_columns=extra_columns,

{continuo_python_runtime-0.5.0 → continuo_python_runtime-0.6.0}/continuo_python_runtime/contract/merge.py

@@ -1,5 +1,6 @@
 """Contract v1 merger: wire contract builder."""
 
+from collections.abc import Callable
 from pathlib import Path
 
 import yaml
@@ -110,6 +111,29 @@ def _lint_node_closure(
         )
 
 
+def _script_hash_inputs(node: Node, repo_root: Path) -> tuple[bytes, list[bytes]]:
+    """A script node's source is its script plus its in-repo import closure,
+    every file of which is held to the closure lint."""
+    script_path = resolve_script_path(node.script, repo_root, context=node.relation)
+    script_bytes = script_path.read_bytes()
+    closure = resolve_closure(script_path, repo_root)
+    member_bytes = [member.read_bytes() for member in closure]
+    _lint_node_closure(node, repo_root, script_path, script_bytes, closure, member_bytes)
+    return script_bytes, member_bytes
+
+
+def _csv_hash_inputs(node: Node, repo_root: Path) -> tuple[bytes, list[bytes]]:
+    """A csv node has no script and no import closure: its source is the uri.
+    New file content at the same uri is new data, not a new node version."""
+    return node.reads["csv"].encode(), []
+
+
+_HASH_INPUTS: dict[str, Callable[[Node, Path], tuple[bytes, list[bytes]]]] = {
+    "python-node": _script_hash_inputs,
+    "python-csv": _csv_hash_inputs,
+}
+
+
 def build_wire_contract(
     contract_dir: Path, repo_root: Path, service: str, *, dialect: str | None = None
 ) -> dict:
@@ -129,19 +153,8 @@ def build_wire_contract(
     for node in nodes:
         entry = node_entry(node)
 
-        if node.kind == "python-csv":
-            # A csv node has no script and no import closure: its source IS
-            # the uri -- new file content at the same uri is new data, not a
-            # new node version.
-            uri_bytes = node.reads["csv"].encode()
-            entry.update(hash_parts(entry, uri_bytes, []))
-        else:
-            script_path = resolve_script_path(node.script, repo_root, context=node.relation)
-            script_bytes = script_path.read_bytes()
-            closure = resolve_closure(script_path, repo_root)
-            member_bytes = [member.read_bytes() for member in closure]
-            _lint_node_closure(node, repo_root, script_path, script_bytes, closure, member_bytes)
-            entry.update(hash_parts(entry, script_bytes, member_bytes))
+        primary_bytes, member_bytes = _HASH_INPUTS[node.kind](node, repo_root)
+        entry.update(hash_parts(entry, primary_bytes, member_bytes))
 
         wire_nodes.append(entry)
 

{continuo_python_runtime-0.5.0 → continuo_python_runtime-0.6.0}/continuo_python_runtime/contract/model.py

@@ -6,7 +6,8 @@ from typing import Any
 # Module-level constants
 CRITICALITIES = frozenset({"REGULATORY", "CORE", "SECONDARY"})
 EXTRA_COLUMNS_POLICIES = frozenset({"raise", "warn"})
-KINDS = frozenset({"python-model", "python-csv"})
+KINDS = frozenset({"python-node", "python-csv"})
+DEFAULT_KIND = "python-node"
 CONTRACT_VERSION = 1
 
 
@@ -35,7 +36,7 @@ class Node:
     extra_columns: str = "raise"
     config: dict[str, Any] = field(default_factory=dict)
     content_hash: str | None = None
-    kind: str = "python-model"
+    kind: str = DEFAULT_KIND
 
     @property
     def relation(self) -> str:

{continuo_python_runtime-0.5.0 → continuo_python_runtime-0.6.0}/continuo_python_runtime/harness.py

@@ -1,6 +1,6 @@
 """Container entrypoint: dispatches a single node's script and writes its output.
 
-``run_node`` is the sole write sink for a python-model node. It resolves the
+``run_node`` is the sole write sink for a python-node node. It resolves the
 node from the contract, loads and executes its script inside a
 :class:`~continuo_python_runtime.context.RunContext`, conforms the result to
 the declared schema, and writes it through the runtime adapter. Exactly one
@@ -16,7 +16,7 @@ import logging
 import os
 import sys
 import uuid
-from collections.abc import Mapping
+from collections.abc import Callable, Mapping
 from pathlib import Path
 from types import ModuleType
 from typing import Any
@@ -208,15 +208,36 @@ def _validate_config_early(adapter: Any, node: Node) -> None:
         ) from exc
 
 
+def _produce_from_script(
+    node: Node, adapter: Any, app_root: Path, reader: CsvSourceReader | None
+) -> Any:
+    """Import the node's script and return its ``run(ctx)`` result as Arrow."""
+    with contextlib.redirect_stdout(sys.stderr):
+        module = load_script(node, app_root)
+    ctx = RunContext(node, adapter)
+    return to_arrow(_execute_script(module, ctx))
+
+
+def _produce_from_csv(
+    node: Node, adapter: Any, app_root: Path, reader: CsvSourceReader | None
+) -> Any:
+    """Load the node's declared csv source."""
+    return produce_csv(node, reader=reader)
+
+
+_PRODUCERS: dict[str, Callable[[Node, Any, Path, CsvSourceReader | None], Any]] = {
+    "python-node": _produce_from_script,
+    "python-csv": _produce_from_csv,
+}
+
+
 def run_node(
     env: Mapping[str, str], adapter: Any = None, reader: CsvSourceReader | None = None
 ) -> int:
     """Run a single node end-to-end and print exactly one sentinel result block.
 
-    ``reader`` mirrors the ``adapter`` injection seam: when given, it is
-    threaded into :func:`produce_csv` for a python-csv node instead of
-    letting that function pick a reader via ``reader_for``. Ignored for a
-    python-model node.
+    ``reader`` is threaded into the python-csv producer instead of letting
+    it pick a reader via ``reader_for``; the script producer ignores it.
 
     Returns 0 on success, 1 on any :class:`HarnessError`.
     """
@@ -255,14 +276,7 @@ def run_node(
 
         _validate_config_early(active_adapter, node)
 
-        if node.kind == "python-csv":
-            table = produce_csv(node, reader=reader)
-        else:
-            with contextlib.redirect_stdout(sys.stderr):
-                module = load_script(node, app_root)
-            ctx = RunContext(node, active_adapter)
-            raw_result = _execute_script(module, ctx)
-            table = to_arrow(raw_result)
+        table = _PRODUCERS[node.kind](node, active_adapter, app_root, reader)
 
         conformed = conform(table, node.output_columns, node.extra_columns)
 

{continuo_python_runtime-0.5.0 → continuo_python_runtime-0.6.0}/docs/boundary-contract.md

@@ -29,7 +29,7 @@ s3://<bucket>/<service>/<release_id>/contract.yaml
   the author's contract file didn't declare one. "Optional" describes the
   contract *file* an author writes, not the merged wire artifact, where
   every field above is always present.
-- **`kind`** is additive: it defaults to `python-model` (a script-backed
+- **`kind`** is additive: it defaults to `python-node` (a script-backed
   node, everything described above and in §13.4). `python-csv` is the one
   other value — a **contract-only** node with no script: it declares no
   Python to run, and its `reads` must be exactly `{csv: <uri>}` (one key,
@@ -51,7 +51,7 @@ s3://<bucket>/<service>/<release_id>/contract.yaml
   instead of bind-checking a SELECT, so a `python-csv` node still fails the
   release gate on a missing declared column exactly as a script node fails
   it on a missing bind. §13.4 below still applies unchanged to
-  `kind: python-model` nodes.
+  `kind: python-node` nodes.
 - **Reads must be single-statement SELECTs with every table reference
   schema-qualified** (`analytics.table_a`, never `table_a`) — the resolver
   raises `UnqualifiedTableReference` and rejects the whole release otherwise
@@ -361,7 +361,7 @@ inject the names below instead:
 
 | Variable | Required? | Meaning |
 | --- | --- | --- |
-| `NODE_ID` | **required** | Any identifier whose trailing two dot-separated segments MUST be `<schema>.<table>` of the declared node (e.g. `python-model.<service>.<schema>.<table>`); the harness splits on `.` and matches the last two segments against the merged contract's nodes. |
+| `NODE_ID` | **required** | Any identifier whose trailing two dot-separated segments MUST be `<schema>.<table>` of the declared node (e.g. `python-node.<service>.<schema>.<table>`); the harness splits on `.` and matches the last two segments against the merged contract's nodes. |
 | `TABLE_NAME` | **required** | The target table name; must match the `table` of the node selected via `NODE_ID`. |
 | `TARGET_SCHEMA` | **required** | The target schema name; must match the `schema` of the node selected via `NODE_ID`. There is no fallback — `SCHEMA` and `DBT_TARGET_SCHEMA` are **not** recognized. |
 | `CONTRACT_DIR` | optional | Path to the directory of merged contract YAML files baked into the image. Defaults to `/app/contracts`. |

continuo_python_runtime-0.6.0/image-requirements-postgres.txt

@@ -0,0 +1,2 @@
+continuo-python-runtime==0.6.0
+continuo-postgres-adapter==0.2.2

continuo_python_runtime-0.6.0/image-requirements-trino.txt

@@ -0,0 +1,2 @@
+continuo-python-runtime==0.6.0
+continuo-trino-adapter==0.2.1

{continuo_python_runtime-0.5.0 → continuo_python_runtime-0.6.0}/pyproject.toml

@@ -1,6 +1,6 @@
 [project]
 name = "continuo-python-runtime"
-version = "0.5.0"
+version = "0.6.0"
 description = "Runtime harness, contract tooling, and CI lint for Continuo python nodes."
 authors = [{ name = "Simone Carolini" }]
 maintainers = [{ name = "Simone Carolini" }]

{continuo_python_runtime-0.5.0 → continuo_python_runtime-0.6.0}/template/Dockerfile

@@ -1,5 +1,5 @@
 # Tags are v<version>; one image per engine (continuo-python-runtime-postgres / -trino).
-FROM ghcr.io/carolsimone/continuo-python-runtime-postgres:v0.5.0
+FROM ghcr.io/carolsimone/continuo-python-runtime-postgres:v0.6.0
 COPY contracts/ /app/contracts/
 COPY scripts/ /app/scripts/
 # COPY every OTHER directory your scripts import from, too. CI folds a script's

{continuo_python_runtime-0.5.0 → continuo_python_runtime-0.6.0}/tests/conftest.py

@@ -169,8 +169,18 @@ def minio_container():
                 "-p", "0:9000",
                 "-e", "MINIO_ROOT_USER=minioadmin",
                 "-e", "MINIO_ROOT_PASSWORD=minioadmin",
-                "minio/minio:latest",
-                "server", "/data", "--address", ":9000",
+                # ghcr mirror of Bitnami's minio image (Docker Hub's minio/minio
+                # is no longer anonymously pullable). Its ENTRYPOINT is
+                # Bitnami's own setup script, not the `minio` binary, so it
+                # must be overridden for these args to reach `minio` directly;
+                # its data dir also has to be Bitnami's own
+                # /bitnami/minio/data (world-root-group-writable for the
+                # image's non-root user) since plain /data doesn't exist in
+                # this image and the binary can't create it at the
+                # filesystem root.
+                "--entrypoint", "minio",
+                "ghcr.io/carolsimone/continuo-minio:2025.7.23",
+                "server", "/bitnami/minio/data", "--address", ":9000",
             ],
             check=True, capture_output=True, text=True, timeout=60,
         )

continuo_python_runtime-0.6.0/tests/contract/test_kinds.py

@@ -0,0 +1,47 @@
+import pytest
+
+from continuo_python_runtime.contract.kinds import RULES, CsvRead, SqlReads, rules_for
+from continuo_python_runtime.contract.model import KINDS
+from continuo_python_runtime.errors import ContractError
+
+
+def test_every_kind_has_rules():
+    assert set(RULES) == KINDS
+
+
+def test_python_node_requires_a_script_and_sql_reads():
+    rules = RULES["python-node"]
+    assert rules.script_required is True
+    assert isinstance(rules.reads, SqlReads)
+
+
+def test_python_csv_forbids_a_script_and_reads_one_csv_uri():
+    rules = RULES["python-csv"]
+    assert rules.script_required is False
+    assert isinstance(rules.reads, CsvRead)
+
+
+@pytest.mark.parametrize("kind", ["PYTHON-NODE", " python-node", "python-model", "", None, 3])
+def test_kind_is_case_and_whitespace_sensitive(kind):
+    with pytest.raises(ContractError, match="'kind' must be one of"):
+        rules_for(kind, "t.yml (a.b)")
+
+
+def test_sql_reads_rejects_an_empty_mapping():
+    with pytest.raises(ContractError, match="'reads' must be a non-empty mapping of name -> SQL"):
+        SqlReads().validate({}, "L", dialect=None, check_reads=True)
+
+
+def test_sql_reads_skips_the_shape_gate_when_asked():
+    reads = {"a": "this is not sql at all"}
+    assert SqlReads().validate(reads, "L", dialect=None, check_reads=False) == reads
+
+
+def test_csv_read_requires_exactly_a_csv_key():
+    with pytest.raises(ContractError, match=r"a python-csv node's 'reads' must be exactly \{csv: <uri>\}"):
+        CsvRead().validate({"csv": "s3://b/k", "x": "y"}, "L", dialect=None, check_reads=True)
+
+
+def test_csv_read_validates_the_uri():
+    with pytest.raises(ContractError, match="invalid csv uri"):
+        CsvRead().validate({"csv": "http://insecure/x.csv"}, "L", dialect=None, check_reads=True)