devflow-cli 6.1.1__py3-none-any.whl → 6.1.2__py3-none-any.whl

devflow_cli/__init__.py

@@ -1,6 +1,6 @@
 """devflow CLI — workflow de développement adaptatif."""
 
-VERSION = "6.1.1"
+VERSION = "6.1.2"
 
 SUPPORTED_AGENTS = ["claude-code", "codex", "cursor"]
 

devflow_cli/core/verification.py

@@ -61,6 +61,21 @@ SAFE_TASK_RE = re.compile(
 )
 PYTHON_RE = re.compile(r"^(?:python(?:\d+(?:\.\d+)*)?|py)$", re.IGNORECASE)
 SAFE_PYTHON_MODULES = frozenset({"compileall", "pytest", "unittest"})
+UV_RUN_FLAG_OPTIONS = frozenset({
+    "--all-extras", "--all-groups", "--frozen", "--isolated", "--locked", "--no-dev",
+    "--no-project", "--no-sync", "--offline", "-q", "--quiet",
+})
+UV_QUIET_OPTIONS = frozenset({"-q", "--quiet"})
+UV_PYTHON_VERSION_RE = re.compile(r"^[0-9]+\.[0-9]+(\.[0-9]+)?$")
+UV_RUN_NAME_RE = re.compile(r"^[A-Za-z0-9][A-Za-z0-9._-]*$")
+# Seules options de uv run a valeur acceptees : aucune ne change le code execute, le
+# repertoire ni la source des paquets. La valeur est controlee pour ne jamais etre un chemin.
+UV_RUN_VALUE_OPTIONS: Mapping[str, tuple[re.Pattern[str], str]] = {
+    "--python": (UV_PYTHON_VERSION_RE, "numéro de version, ex. 3.12"),
+    "-p": (UV_PYTHON_VERSION_RE, "numéro de version, ex. 3.12"),
+    "--extra": (UV_RUN_NAME_RE, "nom d'extra"),
+    "--group": (UV_RUN_NAME_RE, "nom de groupe"),
+}
 SHELL_EXECUTABLES = frozenset({
     "bash", "cmd", "cmd.exe", "dash", "fish", "ksh", "powershell",
     "powershell.exe", "pwsh", "sh", "zsh",
@@ -73,6 +88,11 @@ def validation_policy_guidance() -> list[str]:
         "Executables de validation autorises par defaut : "
         + ", ".join(sorted(DEFAULT_ALLOWED_EXECUTABLES))
         + "; python est limite a -m compileall, pytest ou unittest.",
+        "uv run accepte avant l'outil uniquement les options "
+        + ", ".join(sorted(UV_RUN_FLAG_OPTIONS | UV_RUN_VALUE_OPTIONS.keys()))
+        + ", en forme separee (--python 3.12, pas --python=3.12); --python/-p "
+        "exige un numero de version, jamais un chemin d'interpreteur; toute autre "
+        "option de uv run est refusee.",
         "Maven et Gradle acceptent uniquement les taches test, check, lint, verify ou build; "
         "mvn clean verify est refuse (clean est hors politique).",
         "Aucun shell implicite ni operateur |, &&, ; ou redirection; "
@@ -352,9 +372,45 @@ def _validate_allowed_shape(
     if executable == "uv":
         if subcommand != "run" or len(args) < 3:
             raise ValueError(f"{validation.id}: seul 'uv run <outil>' est autorisé")
+        # Les options de uv run sont analysees ici et jamais comparees a ``explicit`` :
+        # un opt-in sur un nom d'option ne doit pas court-circuiter l'outil imbrique.
+        index = 2
+        quiet_seen = False
+        while index < len(args) and args[index].startswith("-"):
+            option = args[index]
+            if option in UV_RUN_VALUE_OPTIONS:
+                pattern, expected = UV_RUN_VALUE_OPTIONS[option]
+                if index + 1 >= len(args):
+                    raise ValueError(
+                        f"{validation.id}: option de 'uv run' '{option}' sans valeur; "
+                        f"attendu : {expected}"
+                    )
+                if not pattern.fullmatch(args[index + 1]):
+                    raise ValueError(
+                        f"{validation.id}: valeur invalide pour l'option de 'uv run' "
+                        f"'{option}'; attendu : {expected}"
+                    )
+                index += 2
+                continue
+            if option not in UV_RUN_FLAG_OPTIONS:
+                accepted = ", ".join(sorted(UV_RUN_FLAG_OPTIONS | UV_RUN_VALUE_OPTIONS.keys()))
+                raise ValueError(
+                    f"{validation.id}: option de 'uv run' refusée '{option.split('=', 1)[0]}'; "
+                    f"options acceptées : {accepted}"
+                )
+            if option in UV_QUIET_OPTIONS:
+                if quiet_seen:
+                    raise ValueError(
+                        f"{validation.id}: option de 'uv run' '-q'/'--quiet' "
+                        "ne peut apparaître qu'une fois"
+                    )
+                quiet_seen = True
+            index += 1
+        if index >= len(args):
+            raise ValueError(f"{validation.id}: seul 'uv run <outil>' est autorisé")
         nested = ValidationCommand(
             validation.id,
-            args[2:],
+            args[index:],
             validation.blocking,
             validation.timeout,
             validation.working_directory,

{devflow_cli-6.1.1.dist-info → devflow_cli-6.1.2.dist-info}/METADATA

@@ -1,6 +1,6 @@
 Metadata-Version: 2.5
 Name: devflow-cli
-Version: 6.1.1
+Version: 6.1.2
 Summary: Spec-Driven Development workflow CLI
 Project-URL: Homepage, https://github.com/sopequenoteck/devflow
 Project-URL: Repository, https://github.com/sopequenoteck/devflow

{devflow_cli-6.1.1.dist-info → devflow_cli-6.1.2.dist-info}/RECORD

@@ -1,4 +1,4 @@
-devflow_cli/__init__.py,sha256=VmCwbQc6bNPKKQvcsirS32ZlbjHbOt8DbCAfd3EcBfA,1002
+devflow_cli/__init__.py,sha256=q9RfnymaWq6NFLqPNIMBkIwCAG45_QDkzC9mZM-JxhA,1002
 devflow_cli/cli.py,sha256=nst8kP2QneJZJg6K5bBf9uO8Nj9lYmoHrEhcxA7nsIM,2129
 devflow_cli/adapters/__init__.py,sha256=RkjHPU2Lp4hSVIq2iOmyTrv2zYU9NuiIF9wEMWzLdMI,377
 devflow_cli/adapters/agents.py,sha256=8_y70AIhmtuR8kyPN3Wpj0-i76k9wd_uaycVKTqC96g,26503
@@ -45,7 +45,7 @@ devflow_cli/core/telemetry.py,sha256=emcYo6Qikc86TYKT5Mc_9-3Thkt3nztkPZrpTy9VlvA
 devflow_cli/core/traceability.py,sha256=jfNE9MZzGkmaPer9Wa6Y18yA9Y3sqdeR-nzH9h_TB-8,2968
 devflow_cli/core/validation_approvals.py,sha256=BMjwDbkkY9K-uqk19duKWIbh7-Dk5ceprNPgQHx3lrg,8421
 devflow_cli/core/validators.py,sha256=c2T6NAe80sPh2uS8gCQfyiCkLT3eBPLizCbDsE0PgNo,9934
-devflow_cli/core/verification.py,sha256=a2-pAnMQqBhGnV87LwhMc03zFRjDECB7sWYGxQu21lo,16879
+devflow_cli/core/verification.py,sha256=YotT8eZFGQRdRrNFwiPGnFNmA2XQ-IjGIyaVi7shA0g,19858
 devflow_cli/core/waivers.py,sha256=w3bza1OicSxAViYU2hvbrylQTNVgmN7Rd9y2L6Wm2OE,11302
 devflow_cli/core/worklog.py,sha256=w_R_K-xI7gx9lYQhcjJbI_nBQqztMHsOPWj1tQCXjjA,12668
 devflow_cli/core/worktree_snapshot.py,sha256=5ycGW5sYSeoht-ofUqoNhrscZuhTJlynfObzisJal90,4669
@@ -85,8 +85,8 @@ devflow_cli/resources/templates/contracts/api-template.md,sha256=rC5v7JBz71PznCn
 devflow_cli/resources/templates/contracts/components-template.md,sha256=XIWfEXfC72sNmL5OA3V-7xIywkNDU2DBPLfyiagOWcs,484
 devflow_cli/resources/templates/contracts/interfaces-template.md,sha256=kf8B7b6HsmN7jyRlLNU7RnZl0rTMlI5s97yVRyI-6yc,336
 devflow_cli/resources/templates/contracts/services-template.md,sha256=cFafKCyLmq_a7aR7G0LXAaMO2z4Fuflq6iKdxfVg0vg,477
-devflow_cli-6.1.1.dist-info/METADATA,sha256=KHMl28FYPV7eUHT9Hn6GH4VwneeUhK_H8Zb9NaD5Kqs,4061
-devflow_cli-6.1.1.dist-info/WHEEL,sha256=W3fkpkm7-wf9vBI5Z-7s0eWkeM-spu78I8Neb98DeEg,87
-devflow_cli-6.1.1.dist-info/entry_points.txt,sha256=GVJ6bMvFpqyO5589iC4nFKeGTpGIW8aKn_QPPpSZ6kU,48
-devflow_cli-6.1.1.dist-info/licenses/LICENSE,sha256=v79PvnmqOdKhQiOa_QcWxng4q8GuGscLOwi7ygUpwpo,1070
-devflow_cli-6.1.1.dist-info/RECORD,,
+devflow_cli-6.1.2.dist-info/METADATA,sha256=RRQAPdlUN-T0ir2Cd62_ccfWchBkcn4exwQ88iyCOXg,4061
+devflow_cli-6.1.2.dist-info/WHEEL,sha256=W3fkpkm7-wf9vBI5Z-7s0eWkeM-spu78I8Neb98DeEg,87
+devflow_cli-6.1.2.dist-info/entry_points.txt,sha256=GVJ6bMvFpqyO5589iC4nFKeGTpGIW8aKn_QPPpSZ6kU,48
+devflow_cli-6.1.2.dist-info/licenses/LICENSE,sha256=v79PvnmqOdKhQiOa_QcWxng4q8GuGscLOwi7ygUpwpo,1070
+devflow_cli-6.1.2.dist-info/RECORD,,