devflow-cli 6.1.0__py3-none-any.whl → 6.1.2__py3-none-any.whl

devflow_cli/__init__.py

@@ -1,6 +1,6 @@
 """devflow CLI — workflow de développement adaptatif."""
 
-VERSION = "6.1.0"
+VERSION = "6.1.2"
 
 SUPPORTED_AGENTS = ["claude-code", "codex", "cursor"]
 

devflow_cli/commands/adaptive.py

@@ -377,7 +377,7 @@ def run_adaptive(
         attempt["contract"] = activity_contract
         attempt["startedAt"] = _utc_now()
         try:
-            before = snapshot_worktree(project_root)
+            before = snapshot_worktree(project_root, feature_dir)
             with tempfile.TemporaryDirectory(prefix="devflow-adaptive-") as temp_dir:
                 temp_path = Path(temp_dir)
                 schema_file = temp_path / "output-schema.json"
@@ -403,7 +403,7 @@ def run_adaptive(
                     if output_file.is_file()
                     else execution.stdout
                 )
-            after = snapshot_worktree(project_root)
+            after = snapshot_worktree(project_root, feature_dir)
             observed = tuple(changed_paths(before, after))
             attempt["changedFileCount"] = len(observed)
             audit_payload = {

devflow_cli/core/adaptive_runner.py

@@ -296,7 +296,7 @@ def reconcile_current_activity(
                 raise ValueError(
                     "la tentative ne correspond pas au contrat de l'activite courante"
                 )
-            snapshot = snapshot_worktree(project_root_for_feature(feature_dir))
+            snapshot = snapshot_worktree(project_root_for_feature(feature_dir), feature_dir)
             if snapshot.head != attempt.get("head") or snapshot.branch != attempt.get("branch"):
                 raise ValueError("HEAD ou la branche a change depuis la tentative")
             drifted = sorted(
@@ -784,7 +784,7 @@ def _record_failed_attempt(
 ) -> None:
     """Consigne les faits d'une tentative refusee pour une reprise controlee."""
     try:
-        snapshot = snapshot_worktree(project_root_for_feature(feature_dir))
+        snapshot = snapshot_worktree(project_root_for_feature(feature_dir), feature_dir)
     except (OSError, ValueError):
         return
     payload = {

devflow_cli/core/remediation.py

@@ -208,7 +208,7 @@ def _active_attempt_files(feature_dir: Path, activity: str) -> list[str]:
             or not all(isinstance(path, str) for path in carried)
         ):
             raise StaleAttemptError(f"fiche de tentative {activity} invalide")
-        snapshot = snapshot_worktree(project_root_for_feature(feature_dir))
+        snapshot = snapshot_worktree(project_root_for_feature(feature_dir), feature_dir)
         if snapshot.head != payload["head"] or snapshot.branch != payload["branch"]:
             raise StaleAttemptError(
                 f"HEAD ou la branche a change depuis la tentative {activity}"
@@ -243,7 +243,7 @@ def _still_modified(feature_dir: Path, files: list[str]) -> list[str]:
     if not files:
         return []
     try:
-        snapshot = snapshot_worktree(project_root_for_feature(feature_dir))
+        snapshot = snapshot_worktree(project_root_for_feature(feature_dir), feature_dir)
     except (OSError, ValueError):
         return files
     return [path for path in files if path in snapshot.files]

devflow_cli/core/verification.py

@@ -61,6 +61,21 @@ SAFE_TASK_RE = re.compile(
 )
 PYTHON_RE = re.compile(r"^(?:python(?:\d+(?:\.\d+)*)?|py)$", re.IGNORECASE)
 SAFE_PYTHON_MODULES = frozenset({"compileall", "pytest", "unittest"})
+UV_RUN_FLAG_OPTIONS = frozenset({
+    "--all-extras", "--all-groups", "--frozen", "--isolated", "--locked", "--no-dev",
+    "--no-project", "--no-sync", "--offline", "-q", "--quiet",
+})
+UV_QUIET_OPTIONS = frozenset({"-q", "--quiet"})
+UV_PYTHON_VERSION_RE = re.compile(r"^[0-9]+\.[0-9]+(\.[0-9]+)?$")
+UV_RUN_NAME_RE = re.compile(r"^[A-Za-z0-9][A-Za-z0-9._-]*$")
+# Seules options de uv run a valeur acceptees : aucune ne change le code execute, le
+# repertoire ni la source des paquets. La valeur est controlee pour ne jamais etre un chemin.
+UV_RUN_VALUE_OPTIONS: Mapping[str, tuple[re.Pattern[str], str]] = {
+    "--python": (UV_PYTHON_VERSION_RE, "numéro de version, ex. 3.12"),
+    "-p": (UV_PYTHON_VERSION_RE, "numéro de version, ex. 3.12"),
+    "--extra": (UV_RUN_NAME_RE, "nom d'extra"),
+    "--group": (UV_RUN_NAME_RE, "nom de groupe"),
+}
 SHELL_EXECUTABLES = frozenset({
     "bash", "cmd", "cmd.exe", "dash", "fish", "ksh", "powershell",
     "powershell.exe", "pwsh", "sh", "zsh",
@@ -73,6 +88,11 @@ def validation_policy_guidance() -> list[str]:
         "Executables de validation autorises par defaut : "
         + ", ".join(sorted(DEFAULT_ALLOWED_EXECUTABLES))
         + "; python est limite a -m compileall, pytest ou unittest.",
+        "uv run accepte avant l'outil uniquement les options "
+        + ", ".join(sorted(UV_RUN_FLAG_OPTIONS | UV_RUN_VALUE_OPTIONS.keys()))
+        + ", en forme separee (--python 3.12, pas --python=3.12); --python/-p "
+        "exige un numero de version, jamais un chemin d'interpreteur; toute autre "
+        "option de uv run est refusee.",
         "Maven et Gradle acceptent uniquement les taches test, check, lint, verify ou build; "
         "mvn clean verify est refuse (clean est hors politique).",
         "Aucun shell implicite ni operateur |, &&, ; ou redirection; "
@@ -352,9 +372,45 @@ def _validate_allowed_shape(
     if executable == "uv":
         if subcommand != "run" or len(args) < 3:
             raise ValueError(f"{validation.id}: seul 'uv run <outil>' est autorisé")
+        # Les options de uv run sont analysees ici et jamais comparees a ``explicit`` :
+        # un opt-in sur un nom d'option ne doit pas court-circuiter l'outil imbrique.
+        index = 2
+        quiet_seen = False
+        while index < len(args) and args[index].startswith("-"):
+            option = args[index]
+            if option in UV_RUN_VALUE_OPTIONS:
+                pattern, expected = UV_RUN_VALUE_OPTIONS[option]
+                if index + 1 >= len(args):
+                    raise ValueError(
+                        f"{validation.id}: option de 'uv run' '{option}' sans valeur; "
+                        f"attendu : {expected}"
+                    )
+                if not pattern.fullmatch(args[index + 1]):
+                    raise ValueError(
+                        f"{validation.id}: valeur invalide pour l'option de 'uv run' "
+                        f"'{option}'; attendu : {expected}"
+                    )
+                index += 2
+                continue
+            if option not in UV_RUN_FLAG_OPTIONS:
+                accepted = ", ".join(sorted(UV_RUN_FLAG_OPTIONS | UV_RUN_VALUE_OPTIONS.keys()))
+                raise ValueError(
+                    f"{validation.id}: option de 'uv run' refusée '{option.split('=', 1)[0]}'; "
+                    f"options acceptées : {accepted}"
+                )
+            if option in UV_QUIET_OPTIONS:
+                if quiet_seen:
+                    raise ValueError(
+                        f"{validation.id}: option de 'uv run' '-q'/'--quiet' "
+                        "ne peut apparaître qu'une fois"
+                    )
+                quiet_seen = True
+            index += 1
+        if index >= len(args):
+            raise ValueError(f"{validation.id}: seul 'uv run <outil>' est autorisé")
         nested = ValidationCommand(
             validation.id,
-            args[2:],
+            args[index:],
             validation.blocking,
             validation.timeout,
             validation.working_directory,

devflow_cli/core/worktree_snapshot.py

@@ -17,8 +17,19 @@ class WorktreeSnapshot:
     files: dict[str, str]
 
 
-def snapshot_worktree(project_root: Path) -> WorktreeSnapshot:
-    """Capture HEAD, branche et contenu des fichiers modifies/non suivis."""
+# Traces brutes d'agent ecrites par devflow ; ignorees par le .gitignore de la feature.
+TRACE_SUFFIX = ".raw.txt"
+
+
+def snapshot_worktree(
+    project_root: Path, feature_dir: Path | None = None
+) -> WorktreeSnapshot:
+    """Capture HEAD, branche et contenu des fichiers modifies/non suivis.
+
+    Avec ``feature_dir``, les fichiers ignores par git dans ce seul dossier
+    sont aussi captures, hors traces brutes : un projet qui ignore ``.specify``
+    doit tout de meme voir les artefacts de sa feature.
+    """
     head = _git_text(project_root, ["rev-parse", "--verify", "HEAD"], allow_failure=True)
     branch = _git_text(project_root, ["branch", "--show-current"], allow_failure=True)
     tracked = _git_paths(
@@ -30,7 +41,15 @@ def snapshot_worktree(project_root: Path) -> WorktreeSnapshot:
         project_root,
         ["ls-files", "--others", "--exclude-standard", "-z"],
     )
-    paths = sorted(set(tracked) | set(untracked))
+    paths = set(tracked) | set(untracked)
+    subtree = _subtree(project_root, feature_dir)
+    if subtree is not None:
+        ignored = _git_paths(
+            project_root,
+            ["ls-files", "--others", "--ignored", "--exclude-standard", "-z", "--", subtree],
+        )
+        paths |= {path for path in ignored if not path.endswith(TRACE_SUFFIX)}
+    paths = sorted(paths)
     return WorktreeSnapshot(
         head=head,
         branch=branch,
@@ -64,6 +83,15 @@ def changed_paths(before: WorktreeSnapshot, after: WorktreeSnapshot) -> list[str
     return sorted(path for path in paths if before.files.get(path) != after.files.get(path))
 
 
+def _subtree(project_root: Path, feature_dir: Path | None) -> str | None:
+    if feature_dir is None:
+        return None
+    try:
+        return feature_dir.resolve().relative_to(project_root.resolve()).as_posix()
+    except ValueError:
+        return None
+
+
 def _git_text(project_root: Path, args: list[str], *, allow_failure: bool = False) -> str:
     result = subprocess.run(
         ["git", *args],

{devflow_cli-6.1.0.dist-info → devflow_cli-6.1.2.dist-info}/METADATA

@@ -1,6 +1,6 @@
 Metadata-Version: 2.5
 Name: devflow-cli
-Version: 6.1.0
+Version: 6.1.2
 Summary: Spec-Driven Development workflow CLI
 Project-URL: Homepage, https://github.com/sopequenoteck/devflow
 Project-URL: Repository, https://github.com/sopequenoteck/devflow

{devflow_cli-6.1.0.dist-info → devflow_cli-6.1.2.dist-info}/RECORD

@@ -1,10 +1,10 @@
-devflow_cli/__init__.py,sha256=V6VdLY92DeDOFcFZuXg6acBYhESo1FOcJ9dHirgqF4Y,1002
+devflow_cli/__init__.py,sha256=q9RfnymaWq6NFLqPNIMBkIwCAG45_QDkzC9mZM-JxhA,1002
 devflow_cli/cli.py,sha256=nst8kP2QneJZJg6K5bBf9uO8Nj9lYmoHrEhcxA7nsIM,2129
 devflow_cli/adapters/__init__.py,sha256=RkjHPU2Lp4hSVIq2iOmyTrv2zYU9NuiIF9wEMWzLdMI,377
 devflow_cli/adapters/agents.py,sha256=8_y70AIhmtuR8kyPN3Wpj0-i76k9wd_uaycVKTqC96g,26503
 devflow_cli/adapters/linear.py,sha256=MyqI2tHx7NNHY1KRfeYZ_Zjc-6_xhZPWD4oS-j7wnNY,2659
 devflow_cli/commands/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
-devflow_cli/commands/adaptive.py,sha256=K44vv2Sr2G25AXoDafWIMF1lrgC8sZQCH-SOYO52IxY,45771
+devflow_cli/commands/adaptive.py,sha256=_CICxGw27XOSnXteudn75IriY12zz5jhcZoH__zNfns,45797
 devflow_cli/commands/assess.py,sha256=GrWGGZjvBAgHWzSlUdtS-IfYocacA6VYxWduDvBunzg,4395
 devflow_cli/commands/check.py,sha256=M_sbcH1L3FEa4DF9gm46LEADlJndRKlaEDoysIBHv8k,6668
 devflow_cli/commands/context.py,sha256=hwTitOHxIpJMx1X8R1jHHy9CpE4HVZpJKkyeOujxAio,6246
@@ -23,7 +23,7 @@ devflow_cli/commands/usage.py,sha256=ehH1AH5J-XfkebFx6qLBwpKN-MOoX2uUbq4LejBpNsk
 devflow_cli/commands/verify.py,sha256=sKmoHfA-PRWoDbgLC0nW2nvd89Zdktlkep0sxF7q3jQ,3968
 devflow_cli/core/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
 devflow_cli/core/activity_contracts.py,sha256=U9AknLNFIusjuh4MonY_8i3__uDeo_NF2z3zfGJynA8,42631
-devflow_cli/core/adaptive_runner.py,sha256=_JmnglYkqN3HhV7UZdfSkCiR_O141rHIoEl1XEuIOFw,33687
+devflow_cli/core/adaptive_runner.py,sha256=o9HHPNZJyA9u_zui9pNZrzMkH_jzszbI-GMweoRjqB8,33713
 devflow_cli/core/adaptive_workflow.py,sha256=qsjkahK9yklf6LjyQn69PVl9v0AoX2YPQiG2_umpb_U,13065
 devflow_cli/core/agent_failure.py,sha256=iX4q249lAHeVdD_ZF1aObmU-FX6sjfYP9dfLSnWGAD0,3771
 devflow_cli/core/assessment.py,sha256=l5QRntLJyBx3MdN-kepmMAsruHdJsG4TDgSdgOSHkqU,10062
@@ -38,17 +38,17 @@ devflow_cli/core/manifest.py,sha256=964iYthqhzf3qQgxN4hZ33BvS2r7BKDZoKdiOWRybag,
 devflow_cli/core/omissions.py,sha256=-9dqaQLRIy-1t6it7gecKn_0KpqbEjPIT0ec86KvXCk,7449
 devflow_cli/core/operational.py,sha256=ZEWh6DKJfHYLpV9r3vZwaDFREQwlJF0wTtgB1VleXog,1204
 devflow_cli/core/redaction.py,sha256=o_1MDtCyvRLrk_dWlV6_7E6_mPVB1B5a0cCfTBj9j0Q,1973
-devflow_cli/core/remediation.py,sha256=D7spH-xO1KezSY3YVuAl4ZdFCKhXKGSYVWgnLHC4Dp4,13549
+devflow_cli/core/remediation.py,sha256=FknpUBR9WGZkmeDf6F2HINKKm3rG4AB5C7NTgrPhPVc,13575
 devflow_cli/core/scanner.py,sha256=bcoC91Nc0Hw2P7aHpL-9ITxynLZhLTEKpOXo553a-18,4395
 devflow_cli/core/staleness.py,sha256=Bn4jN8r601Ifn0AU8BHZy-Z-5NLPjj_JTK-V0KU9TUM,5256
 devflow_cli/core/telemetry.py,sha256=emcYo6Qikc86TYKT5Mc_9-3Thkt3nztkPZrpTy9VlvA,6952
 devflow_cli/core/traceability.py,sha256=jfNE9MZzGkmaPer9Wa6Y18yA9Y3sqdeR-nzH9h_TB-8,2968
 devflow_cli/core/validation_approvals.py,sha256=BMjwDbkkY9K-uqk19duKWIbh7-Dk5ceprNPgQHx3lrg,8421
 devflow_cli/core/validators.py,sha256=c2T6NAe80sPh2uS8gCQfyiCkLT3eBPLizCbDsE0PgNo,9934
-devflow_cli/core/verification.py,sha256=a2-pAnMQqBhGnV87LwhMc03zFRjDECB7sWYGxQu21lo,16879
+devflow_cli/core/verification.py,sha256=YotT8eZFGQRdRrNFwiPGnFNmA2XQ-IjGIyaVi7shA0g,19858
 devflow_cli/core/waivers.py,sha256=w3bza1OicSxAViYU2hvbrylQTNVgmN7Rd9y2L6Wm2OE,11302
 devflow_cli/core/worklog.py,sha256=w_R_K-xI7gx9lYQhcjJbI_nBQqztMHsOPWj1tQCXjjA,12668
-devflow_cli/core/worktree_snapshot.py,sha256=8YDAQwJ1lBbChck2IQUM2iEAAMv27tHedtfELS10nnU,3701
+devflow_cli/core/worktree_snapshot.py,sha256=5ycGW5sYSeoht-ofUqoNhrscZuhTJlynfObzisJal90,4669
 devflow_cli/schemas/activity-contract-v3.schema.json,sha256=_R6oKY2K3LxNCIATQunDM7e41J6w4Dg15TrN3B-NL0c,1977
 devflow_cli/schemas/activity-result-v1.schema.json,sha256=UybTDGJcPZ_CJoD0oAlgBWJOEsQTp06KRnogoa1pFFY,3140
 devflow_cli/schemas/assessment-v3.schema.json,sha256=aCybk-TaE5aJDKA2dhadSq58a-t2hFy6A-hCDlIl2Yo,1798
@@ -85,8 +85,8 @@ devflow_cli/resources/templates/contracts/api-template.md,sha256=rC5v7JBz71PznCn
 devflow_cli/resources/templates/contracts/components-template.md,sha256=XIWfEXfC72sNmL5OA3V-7xIywkNDU2DBPLfyiagOWcs,484
 devflow_cli/resources/templates/contracts/interfaces-template.md,sha256=kf8B7b6HsmN7jyRlLNU7RnZl0rTMlI5s97yVRyI-6yc,336
 devflow_cli/resources/templates/contracts/services-template.md,sha256=cFafKCyLmq_a7aR7G0LXAaMO2z4Fuflq6iKdxfVg0vg,477
-devflow_cli-6.1.0.dist-info/METADATA,sha256=pyKyYa6gEGIGPOV9ubk6oEFDCisB1iDACGsJF9odu1Q,4061
-devflow_cli-6.1.0.dist-info/WHEEL,sha256=W3fkpkm7-wf9vBI5Z-7s0eWkeM-spu78I8Neb98DeEg,87
-devflow_cli-6.1.0.dist-info/entry_points.txt,sha256=GVJ6bMvFpqyO5589iC4nFKeGTpGIW8aKn_QPPpSZ6kU,48
-devflow_cli-6.1.0.dist-info/licenses/LICENSE,sha256=v79PvnmqOdKhQiOa_QcWxng4q8GuGscLOwi7ygUpwpo,1070
-devflow_cli-6.1.0.dist-info/RECORD,,
+devflow_cli-6.1.2.dist-info/METADATA,sha256=RRQAPdlUN-T0ir2Cd62_ccfWchBkcn4exwQ88iyCOXg,4061
+devflow_cli-6.1.2.dist-info/WHEEL,sha256=W3fkpkm7-wf9vBI5Z-7s0eWkeM-spu78I8Neb98DeEg,87
+devflow_cli-6.1.2.dist-info/entry_points.txt,sha256=GVJ6bMvFpqyO5589iC4nFKeGTpGIW8aKn_QPPpSZ6kU,48
+devflow_cli-6.1.2.dist-info/licenses/LICENSE,sha256=v79PvnmqOdKhQiOa_QcWxng4q8GuGscLOwi7ygUpwpo,1070
+devflow_cli-6.1.2.dist-info/RECORD,,