decpython 0.1.0__tar.gz → 1.0.1__tar.gz

decpython-1.0.1/PKG-INFO

@@ -0,0 +1,92 @@
+Metadata-Version: 2.2
+Name: decpython
+Version: 1.0.1
+Summary: 跨平台、支持 Web 通信的 Python 终端工具
+Home-page: https://github.com/your-username/decpython_maskter
+Author: decpython
+Author-email: decrule@outlook.com
+License: MIT
+Classifier: Development Status :: 3 - Alpha
+Classifier: Intended Audience :: Developers
+Classifier: License :: OSI Approved :: MIT License
+Classifier: Programming Language :: Python :: 3
+Classifier: Programming Language :: Python :: 3.9
+Classifier: Programming Language :: Python :: 3.10
+Classifier: Programming Language :: Python :: 3.11
+Classifier: Programming Language :: Python :: 3.12
+Requires-Python: >=3.9.0
+Description-Content-Type: text/markdown
+Provides-Extra: dev
+Requires-Dist: pytest>=7; extra == "dev"
+Requires-Dist: ruff>=0.1; extra == "dev"
+Dynamic: author-email
+Dynamic: home-page
+Dynamic: requires-python
+
+# DecPython
+
+Run Python in a subprocess from your code and get string results, or open a Jupyter-style web terminal. Optional HTTP API with host/port/secret for remote execution. Cross-platform, stdlib only.
+
+## Install
+
+```bash
+pip install -e .
+```
+
+## Quick start
+
+```python
+from decpython import DecPython
+
+dp = DecPython(gui=False, python='python')
+result = dp.send('a = 1\nb = 2\na + b')   # -> '3'
+dp.close()
+```
+
+With a web UI: `gui=True`. Code and results from `send()` appear in the browser (Shift+Enter or Run).
+
+## Host, port, secret (HTTP API)
+
+When you pass `port` (or use `gui=True`), a web server is started. **`DecPython(...)` blocks until the server is bound and ready**, so you can call `send()` or the standalone `send()` immediately after.
+
+- **host** — Bind address (default `'localhost'`). Use `'0.0.0.0'` to accept non-local requests.
+- **port** — Port number, or `None` / `0` for auto.
+- **secret** — If set, remote clients must send the same secret (timestamp + HMAC) to POST `/exec`. If `None`, no auth; client should use `send(..., secret=None)`.
+
+```python
+# Server with no auth
+dp = DecPython(gui=False, host='127.0.0.1', port=0, secret=None)
+port = dp.port   # ready after init
+dp.close()
+```
+
+## Standalone `send()` (remote)
+
+Send a command to a running DecPython server without holding the instance:
+
+```python
+from decpython import DecPython, send
+
+dp = DecPython(gui=False, host='127.0.0.1', port=0, secret='key')
+out = send('1 + 2', host='127.0.0.1', port=dp.port, secret='key')
+# out == {'code': 200, 'data': '3', 'msg': ''}
+dp.close()
+```
+
+- **Success:** `{'code': 200, 'data': '<result>', 'msg': ''}`  
+- **Error:** `{'code': -1, 'data': '', 'msg': '<error>'}`  
+Use `secret=None` when the server was started with `secret=None`.
+
+See `examples/example_remote.py` for more.
+
+## API
+
+- **`DecPython(gui=..., python='python', host='localhost', port=None, secret=None)`** — Blocks until the web server (if any) is bound. `port` / `gui` control whether the server starts.
+- **`dp.send(code)`** — Run code in the subprocess; returns the last expression as a string (or the error message).
+- **`dp.port`** — Bound port (None if no server).
+- **`dp.close()`** — Stop the subprocess and web server.
+- **`send(command, host='localhost', port=..., secret=None)`** — POST to a running server; returns the dict above.
+
+## License
+
+MIT

decpython-1.0.1/README.md

@@ -0,0 +1,67 @@
+# DecPython
+
+Run Python in a subprocess from your code and get string results, or open a Jupyter-style web terminal. Optional HTTP API with host/port/secret for remote execution. Cross-platform, stdlib only.
+
+## Install
+
+```bash
+pip install -e .
+```
+
+## Quick start
+
+```python
+from decpython import DecPython
+
+dp = DecPython(gui=False, python='python')
+result = dp.send('a = 1\nb = 2\na + b')   # -> '3'
+dp.close()
+```
+
+With a web UI: `gui=True`. Code and results from `send()` appear in the browser (Shift+Enter or Run).
+
+## Host, port, secret (HTTP API)
+
+When you pass `port` (or use `gui=True`), a web server is started. **`DecPython(...)` blocks until the server is bound and ready**, so you can call `send()` or the standalone `send()` immediately after.
+
+- **host** — Bind address (default `'localhost'`). Use `'0.0.0.0'` to accept non-local requests.
+- **port** — Port number, or `None` / `0` for auto.
+- **secret** — If set, remote clients must send the same secret (timestamp + HMAC) to POST `/exec`. If `None`, no auth; client should use `send(..., secret=None)`.
+
+```python
+# Server with no auth
+dp = DecPython(gui=False, host='127.0.0.1', port=0, secret=None)
+port = dp.port   # ready after init
+dp.close()
+```
+
+## Standalone `send()` (remote)
+
+Send a command to a running DecPython server without holding the instance:
+
+```python
+from decpython import DecPython, send
+
+dp = DecPython(gui=False, host='127.0.0.1', port=0, secret='key')
+out = send('1 + 2', host='127.0.0.1', port=dp.port, secret='key')
+# out == {'code': 200, 'data': '3', 'msg': ''}
+dp.close()
+```
+
+- **Success:** `{'code': 200, 'data': '<result>', 'msg': ''}`  
+- **Error:** `{'code': -1, 'data': '', 'msg': '<error>'}`  
+Use `secret=None` when the server was started with `secret=None`.
+
+See `examples/example_remote.py` for more.
+
+## API
+
+- **`DecPython(gui=..., python='python', host='localhost', port=None, secret=None)`** — Blocks until the web server (if any) is bound. `port` / `gui` control whether the server starts.
+- **`dp.send(code)`** — Run code in the subprocess; returns the last expression as a string (or the error message).
+- **`dp.port`** — Bound port (None if no server).
+- **`dp.close()`** — Stop the subprocess and web server.
+- **`send(command, host='localhost', port=..., secret=None)`** — POST to a running server; returns the dict above.
+
+## License
+
+MIT

{decpython-0.1.0 → decpython-1.0.1}/decpython/__init__.py

@@ -2,7 +2,8 @@
 decpython - 跨平台、支持 Web 通信的 Python 终端工具
 """
 
+from decpython.client import send
 from decpython.core import DecPython
 
-__version__ = '1.0.0'
-__all__ = ["DecPython"]
+__version__ = "1.0.1"
+__all__ = ["DecPython", "send"]

decpython-1.0.1/decpython/client.py

@@ -0,0 +1,56 @@
+"""
+Standalone client: send(command, host, port, secret) to a running DecPython server.
+"""
+
+import hmac
+import json
+import time
+import urllib.error
+import urllib.request
+from typing import Any, Dict
+
+
+def send(
+    command: str,
+    host: str = "localhost",
+    port: int | None = None,
+    secret: str | None = None,
+) -> Dict[str, Any]:
+    """
+    Send a command to a DecPython server via POST /exec.
+    When the server was started with secret=None, pass secret=None (no auth).
+    When the server was started with a secret, pass the same secret here.
+
+    Returns dict: {'code': 200, 'data': '<result>', 'msg': ''} on success,
+    or {'code': -1, 'data': '', 'msg': '<error>'} on failure.
+    """
+    if port is None:
+        return {"code": -1, "data": "", "msg": "port is required"}
+
+    if secret is None:
+        body = json.dumps({"command": command}).encode("utf-8")
+    else:
+        ts = time.time()
+        sign = hmac.new(secret.encode("utf-8"), str(ts).encode("utf-8"), "sha256").hexdigest()
+        body = json.dumps({"command": command, "timestamp": ts, "sign": sign}).encode("utf-8")
+
+    url = f"http://{host}:{port}/exec"
+    req = urllib.request.Request(url, data=body, method="POST")
+    req.add_header("Content-Type", "application/json")
+
+    try:
+        with urllib.request.urlopen(req, timeout=30) as resp:
+            data = json.loads(resp.read().decode("utf-8"))
+            return {
+                "code": data.get("code", -1),
+                "data": data.get("data", ""),
+                "msg": data.get("msg", ""),
+            }
+    except urllib.error.HTTPError as e:
+        try:
+            data = json.loads(e.read().decode("utf-8"))
+            return {"code": data.get("code", -1), "data": data.get("data", ""), "msg": data.get("msg", str(e))}
+        except Exception:
+            return {"code": -1, "data": "", "msg": str(e)}
+    except Exception as e:
+        return {"code": -1, "data": "", "msg": str(e)}

{decpython-0.1.0 → decpython-1.0.1}/decpython/core.py

@@ -203,26 +203,44 @@ class SubprocessExecutor:
 class DecPython:
     """
     跨平台、支持 Web 通信的 Python 终端。
-    - python: 终端中用于执行 Python 的命令，如 'python' 或 'python3.12'。
-    - gui=False：仅程序化调用 send(code) 获取 str 结果。
-    - gui=True：启动类 Jupyter 的 Web 界面，实时查看输入与输出（含通过 send 发送的内容与结果）。
+    - host: 绑定地址，默认 'localhost'；仅当 host='0.0.0.0' 时可接受非本机请求。
+    - port: 绑定端口，默认 None 表示自动分配。
+    - secret: 密钥，默认 None 表示不启用；启用后可通过 POST /exec 配合时间戳签名远程执行命令。
+    - python: 终端中用于执行 Python 的命令。
+    - gui: 是否启动 Web 界面；与 port 任一非默认时会启动服务。
     """
 
-    def __init__(self, gui: bool = False, python: str = "python") -> None:
+    def __init__(
+        self,
+        gui: bool = False,
+        python: str = "python",
+        host: str = "localhost",
+        port: Optional[int] = None,
+        secret: Optional[str] = None,
+    ) -> None:
         self._executor: SubprocessExecutor = SubprocessExecutor(python)
         self._gui = gui
         self._gui_server: Optional[object] = None
         self._closed = False
         self._last_result, self._last_error = "", ""
-        if gui:
-            from decpython.gui.server import start_gui_server
-            self._gui_server = start_gui_server(self)
-            threading.Timer(0.8, self._open_browser).start()
+        self._host = host
+        self._port = port
+        self._secret = secret
+        if gui or port is not None:
+            from decpython.gui.server import start_server
+            self._gui_server = start_server(self, host=host, port=port, secret=secret)
+            if gui:
+                threading.Timer(0.8, self._open_browser).start()
 
     def _open_browser(self) -> None:
         if self._gui_server and hasattr(self._gui_server, "url"):
             webbrowser.open(self._gui_server.url)
 
+    @property
+    def port(self) -> Optional[int]:
+        """Bound port (None if server not started)."""
+        return getattr(self._gui_server, "port", None)
+
     def send(self, code: str) -> str:
         """执行代码，返回 str(执行结果)；无表达式或仅语句时返回空字符串；出错时返回错误信息字符串。"""
         if self._closed:

{decpython-0.1.0 → decpython-1.0.1}/decpython/gui/server.py

@@ -1,13 +1,32 @@
 """
-本地 Web 服务：提供 Jupyter 风格的页面、/run 执行接口与 SSE 推送（使 send() 与页面同步）。
+本地 Web 服务：提供 Jupyter 风格的页面、/run 执行接口、/exec（带 secret）与 SSE 推送。
 仅使用标准库，跨平台。
 """
 
+import hmac
 import json
 import queue
 import socket
 import threading
-from http.server import HTTPServer, BaseHTTPRequestHandler, ThreadingHTTPServer
+import time
+from http.server import BaseHTTPRequestHandler, ThreadingHTTPServer
+
+# 时间戳有效期（秒），防止重放
+_EXEC_TIMESTAMP_TOLERANCE = 300
+# 等待 Web 绑定就绪的超时（秒）
+_SERVER_READY_TIMEOUT = 10
+
+
+class _ReadyHTTPServer(ThreadingHTTPServer):
+    """在 server_activate() 完成后设置 ready_event，便于调用方阻塞直到绑定成功。"""
+
+    def __init__(self, server_address, RequestHandlerClass, ready_event: threading.Event):
+        self._ready_event = ready_event
+        super().__init__(server_address, RequestHandlerClass)
+
+    def server_activate(self) -> None:
+        super().server_activate()
+        self._ready_event.set()
 
 # 内嵌的 HTML 页面（科技感界面：深色终端风、霓虹高亮、玻璃拟态、流畅动效）
 INDEX_HTML = """<!DOCTYPE html>
@@ -355,20 +374,74 @@ class _DecPythonHandler(BaseHTTPRequestHandler):
             self.end_headers()
             self.wfile.write(json.dumps({"result": result, "error": err}, ensure_ascii=False).encode("utf-8"))
             return
+        if self.path == "/exec":
+            secret = getattr(self.server, "secret", None)
+            length = int(self.headers.get("Content-Length", 0))
+            body = self.rfile.read(length).decode("utf-8") if length else "{}"
+            try:
+                data = json.loads(body)
+                command = data.get("command", "")
+            except Exception:
+                self._send_json(400, {"code": -1, "data": "", "msg": "Invalid JSON"})
+                return
+            if secret is None and ("timestamp" in data or "sign" in data):
+                self._send_json(400, {"code": -1, "data": "", "msg": "Server does not use secret; use send(..., secret=None)."})
+                return
+            if secret is not None:
+                ts = data.get("timestamp")
+                sign = data.get("sign", "")
+                try:
+                    ts_val = float(ts)
+                except (TypeError, ValueError):
+                    self._send_json(400, {"code": -1, "data": "", "msg": "Invalid timestamp"})
+                    return
+                if abs(time.time() - ts_val) > _EXEC_TIMESTAMP_TOLERANCE:
+                    self._send_json(400, {"code": -1, "data": "", "msg": "Timestamp expired"})
+                    return
+                expected = hmac.new(secret.encode("utf-8"), str(ts_val).encode("utf-8"), "sha256").hexdigest()
+                if not hmac.compare_digest(expected, sign):
+                    self._send_json(403, {"code": -1, "data": "", "msg": "Invalid signature"})
+                    return
+            dp = _DecPythonHandler.decpython_instance
+            if not dp or getattr(dp, "_closed", True):
+                self._send_json(500, {"code": -1, "data": "", "msg": "Terminal closed"})
+                return
+            try:
+                result, err = dp._executor.run(command)
+                if dp._gui_server is not None and hasattr(dp._gui_server, "append_cell"):
+                    dp._gui_server.append_cell(command, result, err)
+                if err:
+                    self._send_json(200, {"code": -1, "data": "", "msg": err})
+                else:
+                    self._send_json(200, {"code": 200, "data": result, "msg": ""})
+            except Exception as e:
+                self._send_json(200, {"code": -1, "data": "", "msg": str(e)})
+            return
         self.send_response(404)
         self.end_headers()
 
+    def _send_json(self, status: int, obj: dict) -> None:
+        self.send_response(status)
+        self.send_header("Content-Type", "application/json; charset=utf-8")
+        self.end_headers()
+        self.wfile.write(json.dumps(obj, ensure_ascii=False).encode("utf-8"))
+
 
 class _GUIServer:
-    def __init__(self, decpython_instance: object, port: int) -> None:
-        self._server = ThreadingHTTPServer(("127.0.0.1", port), _DecPythonHandler)
+    def __init__(self, decpython_instance: object, host: str, port: int, secret: object) -> None:
+        ready = threading.Event()
+        self._server = _ReadyHTTPServer((host, port), _DecPythonHandler, ready)
         self._server.state = {"cells": [], "queues": []}
+        self._server.secret = secret
         _DecPythonHandler.decpython_instance = decpython_instance
         self._decpython = decpython_instance
-        self.port = port
-        self.url = f"http://127.0.0.1:{port}/"
         self._thread = threading.Thread(target=self._server.serve_forever, daemon=True)
         self._thread.start()
+        if not ready.wait(timeout=_SERVER_READY_TIMEOUT):
+            raise RuntimeError("DecPython web server failed to bind within timeout")
+        self.port = self._server.server_address[1]
+        self.host = host if host else "localhost"
+        self.url = f"http://127.0.0.1:{self.port}/" if self.host in ("localhost", "127.0.0.1") else f"http://{self.host}:{self.port}/"
 
     def append_cell(self, code: str, result: str, error: str) -> None:
         cell = {"code": code, "result": result or "", "error": error or ""}
@@ -390,6 +463,12 @@ class _GUIServer:
             self._server = None
 
 
-def start_gui_server(decpython_instance: object) -> _GUIServer:
-    port = _find_free_port()
-    return _GUIServer(decpython_instance, port)
+def start_server(
+    decpython_instance: object,
+    host: str = "localhost",
+    port: object = None,
+    secret: object = None,
+) -> _GUIServer:
+    if port is None or port == 0:
+        port = _find_free_port()
+    return _GUIServer(decpython_instance, host, port, secret)

decpython-1.0.1/decpython.egg-info/PKG-INFO

@@ -0,0 +1,92 @@
+Metadata-Version: 2.2
+Name: decpython
+Version: 1.0.1
+Summary: 跨平台、支持 Web 通信的 Python 终端工具
+Home-page: https://github.com/your-username/decpython_maskter
+Author: decpython
+Author-email: decrule@outlook.com
+License: MIT
+Classifier: Development Status :: 3 - Alpha
+Classifier: Intended Audience :: Developers
+Classifier: License :: OSI Approved :: MIT License
+Classifier: Programming Language :: Python :: 3
+Classifier: Programming Language :: Python :: 3.9
+Classifier: Programming Language :: Python :: 3.10
+Classifier: Programming Language :: Python :: 3.11
+Classifier: Programming Language :: Python :: 3.12
+Requires-Python: >=3.9.0
+Description-Content-Type: text/markdown
+Provides-Extra: dev
+Requires-Dist: pytest>=7; extra == "dev"
+Requires-Dist: ruff>=0.1; extra == "dev"
+Dynamic: author-email
+Dynamic: home-page
+Dynamic: requires-python
+
+# DecPython
+
+Run Python in a subprocess from your code and get string results, or open a Jupyter-style web terminal. Optional HTTP API with host/port/secret for remote execution. Cross-platform, stdlib only.
+
+## Install
+
+```bash
+pip install -e .
+```
+
+## Quick start
+
+```python
+from decpython import DecPython
+
+dp = DecPython(gui=False, python='python')
+result = dp.send('a = 1\nb = 2\na + b')   # -> '3'
+dp.close()
+```
+
+With a web UI: `gui=True`. Code and results from `send()` appear in the browser (Shift+Enter or Run).
+
+## Host, port, secret (HTTP API)
+
+When you pass `port` (or use `gui=True`), a web server is started. **`DecPython(...)` blocks until the server is bound and ready**, so you can call `send()` or the standalone `send()` immediately after.
+
+- **host** — Bind address (default `'localhost'`). Use `'0.0.0.0'` to accept non-local requests.
+- **port** — Port number, or `None` / `0` for auto.
+- **secret** — If set, remote clients must send the same secret (timestamp + HMAC) to POST `/exec`. If `None`, no auth; client should use `send(..., secret=None)`.
+
+```python
+# Server with no auth
+dp = DecPython(gui=False, host='127.0.0.1', port=0, secret=None)
+port = dp.port   # ready after init
+dp.close()
+```
+
+## Standalone `send()` (remote)
+
+Send a command to a running DecPython server without holding the instance:
+
+```python
+from decpython import DecPython, send
+
+dp = DecPython(gui=False, host='127.0.0.1', port=0, secret='key')
+out = send('1 + 2', host='127.0.0.1', port=dp.port, secret='key')
+# out == {'code': 200, 'data': '3', 'msg': ''}
+dp.close()
+```
+
+- **Success:** `{'code': 200, 'data': '<result>', 'msg': ''}`  
+- **Error:** `{'code': -1, 'data': '', 'msg': '<error>'}`  
+Use `secret=None` when the server was started with `secret=None`.
+
+See `examples/example_remote.py` for more.
+
+## API
+
+- **`DecPython(gui=..., python='python', host='localhost', port=None, secret=None)`** — Blocks until the web server (if any) is bound. `port` / `gui` control whether the server starts.
+- **`dp.send(code)`** — Run code in the subprocess; returns the last expression as a string (or the error message).
+- **`dp.port`** — Bound port (None if no server).
+- **`dp.close()`** — Stop the subprocess and web server.
+- **`send(command, host='localhost', port=..., secret=None)`** — POST to a running server; returns the dict above.
+
+## License
+
+MIT

{decpython-0.1.0 → decpython-1.0.1}/decpython.egg-info/SOURCES.txt

@@ -2,6 +2,7 @@ README.md
 pyproject.toml
 setup.py
 decpython/__init__.py
+decpython/client.py
 decpython/core.py
 decpython.egg-info/PKG-INFO
 decpython.egg-info/SOURCES.txt
@@ -9,4 +10,5 @@ decpython.egg-info/dependency_links.txt
 decpython.egg-info/requires.txt
 decpython.egg-info/top_level.txt
 decpython/gui/__init__.py
-decpython/gui/server.py
+decpython/gui/server.py
+tests/test_decpython.py

{decpython-0.1.0 → decpython-1.0.1}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "setuptools.build_meta"
 
 [project]
 name = "decpython"
-version = "0.1.0"
+version = "1.0.1"
 description = "跨平台、支持 Web 通信的 Python 终端工具"
 readme = "README.md"
 requires-python = ">=3.9"

{decpython-0.1.0 → decpython-1.0.1}/setup.py

@@ -15,7 +15,7 @@ URL = 'https://github.com/your-username/decpython_maskter'
 EMAIL = 'decrule@outlook.com'
 AUTHOR = 'DecRule'
 REQUIRES_PYTHON = '>=3.9.0'
-VERSION = '1.0.0'
+VERSION = '1.0.1'
 
 REQUIRED = []
 EXTRAS = {'dev': ['pytest>=7', 'ruff>=0.1']}

decpython-1.0.1/tests/test_decpython.py

@@ -0,0 +1,109 @@
+"""
+Stability tests for DecPython: instance send(), standalone send(), host/port/secret, /exec.
+"""
+import unittest
+from decpython import DecPython, send
+
+
+class TestDecPythonProgrammatic(unittest.TestCase):
+    """No server: gui=False, port=None."""
+
+    def test_no_server_when_gui_false_port_none(self):
+        dp = DecPython(gui=False, python="python")
+        self.assertIsNone(dp.port)
+        dp.close()
+
+    def test_send_returns_string(self):
+        dp = DecPython(gui=False, python="python")
+        try:
+            r = dp.send("a = 1\nb = 2\na + b")
+            self.assertEqual(r, "3")
+        finally:
+            dp.close()
+
+    def test_send_statement_returns_empty(self):
+        dp = DecPython(gui=False, python="python")
+        try:
+            r = dp.send("x = 10")
+            self.assertEqual(r, "")
+        finally:
+            dp.close()
+
+    def test_send_error_returns_msg(self):
+        dp = DecPython(gui=False, python="python")
+        try:
+            r = dp.send("1/0")
+            self.assertIn("ZeroDivisionError", r)
+        finally:
+            dp.close()
+
+
+class TestDecPythonServerWithSecret(unittest.TestCase):
+    """Server with port and secret; standalone send() to /exec."""
+
+    def test_exec_success(self):
+        dp = DecPython(gui=False, python="python", host="127.0.0.1", port=0, secret="test-secret")
+        try:
+            port = dp.port
+            self.assertIsNotNone(port)
+            out = send("1 + 2", host="127.0.0.1", port=port, secret="test-secret")
+            self.assertEqual(out["code"], 200)
+            self.assertEqual(out["data"], "3")
+            self.assertEqual(out["msg"], "")
+        finally:
+            dp.close()
+
+    def test_exec_error_returns_code_minus_one(self):
+        dp = DecPython(gui=False, python="python", host="127.0.0.1", port=0, secret="test-secret")
+        try:
+            port = dp.port
+            out = send("1/0", host="127.0.0.1", port=port, secret="test-secret")
+            self.assertEqual(out["code"], -1)
+            self.assertEqual(out["data"], "")
+            self.assertIn("ZeroDivisionError", out["msg"])
+        finally:
+            dp.close()
+
+    def test_exec_wrong_secret_rejected(self):
+        dp = DecPython(gui=False, python="python", host="127.0.0.1", port=0, secret="right-secret")
+        try:
+            port = dp.port
+            out = send("1+1", host="127.0.0.1", port=port, secret="wrong-secret")
+            self.assertEqual(out["code"], -1)
+            self.assertIn("Invalid signature", out["msg"])
+        finally:
+            dp.close()
+
+    def test_send_no_port_returns_error(self):
+        out = send("1+1", host="localhost", port=None, secret="x")
+        self.assertEqual(out["code"], -1)
+        self.assertIn("port", out["msg"])
+
+
+class TestDecPythonServerNoSecret(unittest.TestCase):
+    """Server with secret=None: send(..., secret=None) works; send(..., secret='x') returns error."""
+
+    def test_exec_no_secret_client_send_none(self):
+        dp = DecPython(gui=False, python="python", host="127.0.0.1", port=0, secret=None)
+        try:
+            port = dp.port
+            out = send("2 + 3", host="127.0.0.1", port=port, secret=None)
+            self.assertEqual(out["code"], 200)
+            self.assertEqual(out["data"], "5")
+            self.assertEqual(out["msg"], "")
+        finally:
+            dp.close()
+
+    def test_exec_no_secret_client_sends_secret_returns_error(self):
+        dp = DecPython(gui=False, python="python", host="127.0.0.1", port=0, secret=None)
+        try:
+            port = dp.port
+            out = send("1+1", host="127.0.0.1", port=port, secret="any")
+            self.assertEqual(out["code"], -1)
+            self.assertIn("does not use secret", out["msg"])
+        finally:
+            dp.close()
+
+
+if __name__ == "__main__":
+    unittest.main()

decpython-0.1.0/PKG-INFO

@@ -1,55 +0,0 @@
-Metadata-Version: 2.2
-Name: decpython
-Version: 0.1.0
-Summary: 跨平台、支持 Web 通信的 Python 终端工具
-Home-page: https://github.com/your-username/decpython_maskter
-Author: decpython
-Author-email: decrule@outlook.com
-License: MIT
-Classifier: Development Status :: 3 - Alpha
-Classifier: Intended Audience :: Developers
-Classifier: License :: OSI Approved :: MIT License
-Classifier: Programming Language :: Python :: 3
-Classifier: Programming Language :: Python :: 3.9
-Classifier: Programming Language :: Python :: 3.10
-Classifier: Programming Language :: Python :: 3.11
-Classifier: Programming Language :: Python :: 3.12
-Requires-Python: >=3.9.0
-Description-Content-Type: text/markdown
-Provides-Extra: dev
-Requires-Dist: pytest>=7; extra == "dev"
-Requires-Dist: ruff>=0.1; extra == "dev"
-Dynamic: author-email
-Dynamic: home-page
-Dynamic: requires-python
-
-# DecPython
-
-Run Python in a subprocess from your code and get string results, or open a Jupyter-style web terminal. Cross-platform, stdlib only.
-
-## Install
-
-```bash
-pip install -e .
-```
-
-## Quick start
-
-```python
-from decpython import DecPython
-
-dp = DecPython(gui=False, python='python')
-result = dp.send('a = 1\nb = 2\na + b')   # -> '3'
-dp.close()
-```
-
-With a web UI: use `gui=True` and optionally `python='python3.12'`. Code and results from `send()` appear in the browser. Press Shift+Enter or click Run in the page.
-
-## API
-
-- **`send(code)`** — Run code; returns the last expression as a string (or the error message).
-- **`close()`** — Stop the subprocess and, if used, the web server.
-
-## License
-
-MIT

decpython-0.1.0/README.md

@@ -1,30 +0,0 @@
-# DecPython
-
-Run Python in a subprocess from your code and get string results, or open a Jupyter-style web terminal. Cross-platform, stdlib only.
-
-## Install
-
-```bash
-pip install -e .
-```
-
-## Quick start
-
-```python
-from decpython import DecPython
-
-dp = DecPython(gui=False, python='python')
-result = dp.send('a = 1\nb = 2\na + b')   # -> '3'
-dp.close()
-```
-
-With a web UI: use `gui=True` and optionally `python='python3.12'`. Code and results from `send()` appear in the browser. Press Shift+Enter or click Run in the page.
-
-## API
-
-- **`send(code)`** — Run code; returns the last expression as a string (or the error message).
-- **`close()`** — Stop the subprocess and, if used, the web server.
-
-## License
-
-MIT

decpython-0.1.0/decpython.egg-info/PKG-INFO

@@ -1,55 +0,0 @@
-Metadata-Version: 2.2
-Name: decpython
-Version: 0.1.0
-Summary: 跨平台、支持 Web 通信的 Python 终端工具
-Home-page: https://github.com/your-username/decpython_maskter
-Author: decpython
-Author-email: decrule@outlook.com
-License: MIT
-Classifier: Development Status :: 3 - Alpha
-Classifier: Intended Audience :: Developers
-Classifier: License :: OSI Approved :: MIT License
-Classifier: Programming Language :: Python :: 3
-Classifier: Programming Language :: Python :: 3.9
-Classifier: Programming Language :: Python :: 3.10
-Classifier: Programming Language :: Python :: 3.11
-Classifier: Programming Language :: Python :: 3.12
-Requires-Python: >=3.9.0
-Description-Content-Type: text/markdown
-Provides-Extra: dev
-Requires-Dist: pytest>=7; extra == "dev"
-Requires-Dist: ruff>=0.1; extra == "dev"
-Dynamic: author-email
-Dynamic: home-page
-Dynamic: requires-python
-
-# DecPython
-
-Run Python in a subprocess from your code and get string results, or open a Jupyter-style web terminal. Cross-platform, stdlib only.
-
-## Install
-
-```bash
-pip install -e .
-```
-
-## Quick start
-
-```python
-from decpython import DecPython
-
-dp = DecPython(gui=False, python='python')
-result = dp.send('a = 1\nb = 2\na + b')   # -> '3'
-dp.close()
-```
-
-With a web UI: use `gui=True` and optionally `python='python3.12'`. Code and results from `send()` appear in the browser. Press Shift+Enter or click Run in the page.
-
-## API
-
-- **`send(code)`** — Run code; returns the last expression as a string (or the error message).
-- **`close()`** — Stop the subprocess and, if used, the web server.
-
-## License
-
-MIT