devmap 0.3.4__py3-none-any.whl → 0.3.6__py3-none-any.whl

devmap/_devmap.mjs

@@ -2,7 +2,7 @@
 // @bun
 
 // src/version.ts
-var VERSION = "0.3.4";
+var VERSION = "0.3.6";
 
 // src/install.ts
 function isIsolated(i) {
@@ -662,6 +662,138 @@ function runScaAudit(cwd) {
   return checks;
 }
 
+// src/health/parse.ts
+function parsePipCheck(text) {
+  const lines = (text || "").split(/\r?\n/).map((l) => l.trim()).filter(Boolean);
+  const clean = lines.some((l) => /^no broken requirements found/i.test(l));
+  const conflicts = lines.filter((l) => !/^no broken requirements found/i.test(l));
+  if (clean || conflicts.length === 0) {
+    return { status: "ok", summary: "pip dependencies consistent" };
+  }
+  return {
+    status: "warn",
+    summary: `pip has ${conflicts.length} broken dependency requirement${conflicts.length === 1 ? "" : "s"}`,
+    detail: conflicts.join(`
+`)
+  };
+}
+function parseNpmDoctor(text) {
+  const t = (text || "").trim();
+  if (!t)
+    return { status: "skipped", summary: "npm doctor produced no output (timed out or silent)" };
+  const lines = t.split(/\r?\n/).map((l) => l.trim()).filter(Boolean);
+  const NET_RE = /ECONNREFUSED|ETIMEDOUT|ENOTFOUND|getaddrinfo|EAI_|network request|registry\.npmjs\.org|request to https?:/i;
+  const BOILER_RE = /complete log of this run|^\s+at\s|node:internal|file:\/\//i;
+  const netLines = lines.filter((l) => NET_RE.test(l));
+  const failLines = lines.filter((l) => /npm error|✗|✖/i.test(l) && !BOILER_RE.test(l));
+  const realFails = failLines.filter((l) => !NET_RE.test(l));
+  if (realFails.length) {
+    return {
+      status: "warn",
+      summary: `npm doctor reported ${realFails.length} issue${realFails.length === 1 ? "" : "s"}`,
+      detail: realFails.join(`
+`)
+    };
+  }
+  if (netLines.length) {
+    return { status: "skipped", summary: "npm doctor skipped (registry/network unreachable)" };
+  }
+  return { status: "ok", summary: "npm doctor passed" };
+}
+function parseRustupCheck(text) {
+  const t = (text || "").trim();
+  if (!t)
+    return { status: "skipped", summary: "rustup check produced no output (timed out or silent)" };
+  const lines = t.split(/\r?\n/).map((l) => l.trim()).filter(Boolean);
+  const updates = lines.filter((l) => /update available/i.test(l));
+  const upToDate = lines.filter((l) => /up to date/i.test(l));
+  if (updates.length) {
+    return {
+      status: "info",
+      summary: `rustup: ${updates.length} toolchain update${updates.length === 1 ? "" : "s"} available`,
+      detail: updates.join(`
+`)
+    };
+  }
+  if (upToDate.length)
+    return { status: "ok", summary: "rustup toolchains up to date" };
+  return { status: "ok", summary: "rustup check passed" };
+}
+
+// src/health/scan.ts
+var PROBES = [
+  {
+    id: "pip",
+    label: "pip",
+    kind: "conflict",
+    network: false,
+    candidates: [
+      ["pip", ["check"]],
+      ["pip3", ["check"]],
+      ["python", ["-m", "pip", "check"]],
+      ["python3", ["-m", "pip", "check"]]
+    ],
+    timeout: 15000,
+    parse: parsePipCheck
+  },
+  {
+    id: "npm",
+    label: "npm",
+    kind: "mismatch",
+    network: true,
+    candidates: [["npm", ["doctor"]]],
+    timeout: 20000,
+    parse: parseNpmDoctor
+  },
+  {
+    id: "rustup",
+    label: "rustup",
+    kind: "stale",
+    network: true,
+    candidates: [["rustup", ["check"]]],
+    timeout: 15000,
+    parse: parseRustupCheck
+  }
+];
+function pickCandidate(p) {
+  const dirs = pathDirs();
+  for (const [cmd, args] of p.candidates) {
+    if (whichInDirs(cmd, dirs).length > 0)
+      return [cmd, args];
+  }
+  return null;
+}
+var SEV_OF = {
+  ok: "ok",
+  warn: "warn",
+  info: "info",
+  skipped: "info"
+};
+function toCheck(p, r) {
+  const sev = SEV_OF[r.status];
+  const id = `health.${p.id}.check`;
+  const realId = r.status === "skipped" ? `health.${p.id}.skipped` : id;
+  return makeCheck(realId, p.kind, sev, r.summary, r.detail || "", [], r.status === "ok" ? undefined : undefined);
+}
+async function computeHealth(opts = {}) {
+  const checks = [];
+  const network = opts.healthNetwork === true;
+  for (const p of PROBES) {
+    const picked = pickCandidate(p);
+    if (!picked)
+      continue;
+    if (p.network && !network) {
+      checks.push(makeCheck(`health.${p.id}.skipped`, p.kind, "info", `${p.label} doctor skipped (offline by default)`, `Run with --health-network to invoke ${p.label} self-checks (they require network).`));
+      continue;
+    }
+    const [cmd, args] = picked;
+    const out = await runAsync(cmd, args, p.timeout);
+    const result = p.parse(out);
+    checks.push(toCheck(p, result));
+  }
+  return checks;
+}
+
 // src/output/json.ts
 function buildManifest(byName, conflicts, checks, environments, shells) {
   const sys = byName.system || {};
@@ -841,7 +973,8 @@ async function runScan(shells, disabled, opts = {}) {
     progress,
     checkOutdated: opts.checkOutdated,
     wslDeep: opts.wslDeep,
-    auditDeps: opts.auditDeps
+    auditDeps: opts.auditDeps,
+    healthNetwork: opts.healthNetwork
   };
   const { byName, allChecks } = await runDetectors(ctx, progress);
   const groups = [
@@ -850,12 +983,13 @@ async function runScan(shells, disabled, opts = {}) {
     ...byName.ides || []
   ];
   const conflicts = computeConflicts(groups, shells, disabled);
+  const healthChecks = await computeHealth({ healthNetwork: opts.healthNetwork });
   const securityChecks = [
     ...computeSecurity(byName),
     ...computeScaInventory(),
     ...opts.auditDeps ? runScaAudit(process.cwd()) : []
   ];
-  const collected = [...allChecks, ...conflicts.checks, ...securityChecks].filter((c) => !isCheckDisabled(c.ID, disabled));
+  const collected = [...allChecks, ...conflicts.checks, ...securityChecks, ...healthChecks].filter((c) => !isCheckDisabled(c.ID, disabled));
   const environments = {
     vcpkg: byName.vcpkg,
     pip: byName.pip,
@@ -1906,7 +2040,8 @@ async function cmdScan(opts, pos) {
     silent: opts.quiet === true,
     checkOutdated: opts.outdated === true,
     wslDeep: opts["wsl-deep"] === true,
-    auditDeps: opts["audit-deps"] === true
+    auditDeps: opts["audit-deps"] === true,
+    healthNetwork: opts["health-network"] === true
   });
   if (opts.json) {
     emitText(JSON.stringify(manifest, null, 2), opts.bom === true);
@@ -2193,6 +2328,7 @@ scan options:
   --wsl-deep        probe inside stopped WSL distros (default probes only running ones to avoid waking distros)
   --ci              CI gate: clean → exit 0; any warn → exit 2; any error → exit 1
   --audit-deps      dependency CVE audit via OSV-Scanner/pip-audit/govulncheck/Trivy (opt-in, uses network)
+  --health-network  run network health probes too (npm doctor / rustup check; off by default to stay offline-fast)
   --quiet           suppress scan progress feedback (for scripts/CI)
   --bom             prepend UTF-8 BOM for viewing in Notepad etc. (only on redirect/pipe)
   --version / --help

devmap-0.3.6.dist-info/METADATA

@@ -0,0 +1,111 @@
+Metadata-Version: 2.4
+Name: devmap
+Version: 0.3.6
+Summary: Map your machine's dev environment and surface issues (PATH conflicts, ghost binaries, multi-version collisions). fastfetch-for-dev-tools. This PyPI package ships the real devmap CLI (a bundled JavaScript app launched via Node.js or Bun), so `pip install devmap && devmap` works standalone.
+Author: devmap contributors
+License: MIT
+Project-URL: Homepage, https://github.com/StevenLOL/devmap
+Project-URL: Repository, https://github.com/StevenLOL/devmap
+Keywords: devmap,devtools,environment,scanner,fastfetch,diagnostics,dev-environment,path-conflict,ghost-binary
+Classifier: Development Status :: 4 - Beta
+Classifier: Intended Audience :: Developers
+Classifier: License :: OSI Approved :: MIT License
+Classifier: Operating System :: OS Independent
+Classifier: Programming Language :: Python :: 3
+Classifier: Topic :: Software Development :: Quality Assurance
+Requires-Python: >=3.8
+Description-Content-Type: text/markdown
+
+# devmap
+
+> A source-of-truth scanner and governance layer for your machine's development environment. One command maps the whole dev setup, draws the PATH-conflict graph, and surfaces ghost binaries and multi-version collisions.
+
+`devmap` is the developer-focused spiritual successor to `fastfetch`: instead of only printing system specs, it scans the *development* surface of your machine — runtimes, package managers, IDEs, per-interpreter pip packages, conda/WSL/Docker environments, Visual Studio dev shells, and project-local virtual environments — and produces a single machine-readable manifest plus an actionable issue list.
+
+## Install
+
+This PyPI package ships the **real devmap CLI**. It bundles the compiled devmap app and launches it via **Node.js** (or **Bun**, if present), so it works standalone — no need to install from npm or build from source:
+
+```bash
+pip install devmap
+devmap scan
+```
+
+Requirements at runtime: a Node.js (or Bun) runtime available on `PATH`. Python itself is only used as the installer/launcher wrapper.
+
+## Features
+
+- **One-command full scan** of the dev environment (runtimes, package managers, IDEs, and the environment layers below).
+- **PATH conflict graph**: detects multi-version tools, shadowed binaries, and ghost/broken symlinks (e.g. Windows App Execution Aliases that look broken but aren't).
+- **Off-PATH awareness**: reports installed-but-not-on-PATH tools, while correctly treating version-manager environments (conda envs, nvm versions) as by-design off-PATH.
+- **Environment layers**: vcpkg packages, per-python pip packages (incl. upgradable), apt packages (Linux), conda environments, Docker (binary + daemon + images/containers), WSL distros, Visual Studio dev shells, and project-local environments (`.venv`, `node_modules`).
+- **Dependency auditing (optional)**: with `--audit-deps`, devmap detects and invokes installed SCA tools (osv-scanner, govulncheck, pip-audit, Trivy), parses their JSON, and merges results into a unified view. devmap is a *scanner/orchestrator*, not a CVE database — for authoritative vulnerability data, use those tools directly.
+- **Health layer**: converges official self-checks into one view — `pip check` (broken dependency requirements, **offline by default**) and, with `--health-network`, `npm doctor` / `rustup check`. Unavailable or offline probes degrade gracefully to `info`.
+- **Three sub-commands**: `scan` (the fact source), `query` (ask the manifest), `devdiff` (compare two manifests — environment drift / cross-machine consistency).
+- **Zero Python dependencies.** The bundled app is pure TypeScript compiled to JavaScript.
+
+## Usage
+
+```bash
+devmap scan                        # pretty-print to terminal, write ~/.devmap/devmap.json
+devmap scan --json                # machine-readable JSON (devmap.json schema) to stdout
+devmap scan --report              # full markdown report
+devmap scan --scan-root C:\src     # also scan project-local envs under a root (comma-separated for many)
+devmap scan --wsl-deep            # also wake stopped WSL distros and probe their tools (slower)
+devmap scan --outdated            # hit PyPI to list upgradable pip/conda packages (slower, needs network)
+devmap scan --ci                  # exit code 1 if any error-severity issue is found
+devmap scan --audit-deps          # invoke installed SCA tools and merge CVE findings
+```
+
+Key `scan` flags:
+
+| Flag | Description |
+|------|-------------|
+| `--json` | Emit machine-readable JSON (the `devmap.json` schema) to stdout. |
+| `--report` | Emit a full markdown report. |
+| `--no-manifest` | Do not persist the manifest to disk. |
+| `--manifest <path>` | Read/write the manifest at a custom path (default `~/.devmap/devmap.json`). |
+| `--disable <r1,r2>` | Disable check rules by ID prefix (e.g. `path.duplicate`, `pip.outdated`). |
+| `--scan-root <dir>` | Root(s) to scan for project-local environments (comma-separated). Default: cwd. |
+| `--outdated` | Network check for upgradable pip/conda packages (off by default). |
+| `--wsl-deep` | Probe inside stopped WSL distros (off by default to avoid waking them). |
+| `--audit-deps` | Invoke installed SCA tools and merge CVE findings into the report. |
+| `--ci` | Exit non-zero on any error-severity issue. |
+| `--quiet` | Suppress the live scan progress feedback (for scripts/CI). |
+| `--bom` | Prefix output with a UTF-8 BOM so Notepad-like viewers render it correctly (stdout redirect/pipe only). |
+
+### `query` — ask the manifest
+
+```bash
+devmap query                       # everything
+devmap query node                 # tools whose id contains "node"
+devmap query runtime.node         # dot-form category.tool selector (runtime / pkg / ide)
+devmap query --issues             # only issues
+devmap query --conflicts          # only conflicts (multiVersion / path / ghost)
+devmap query --off-path           # only off-PATH installs
+devmap query --kind runtime       # filter by category
+devmap query --where conda        # filter by install path substring
+```
+
+### `devdiff` — compare two manifests
+
+```bash
+devmap devdiff                    # stored manifest  vs  current live scan
+devmap devdiff <file>             # stored/before    vs  <file>
+devmap devdiff <a> <b>            # compare two manifest files
+```
+
+Reports added/removed installs, version changes, and issues added/resolved.
+
+## Output
+
+- The default `scan` writes the manifest to **`~/.devmap/devmap.json`** (pure UTF-8, no BOM — directly parseable by Bun/Node/Python/jq).
+- Use `query` / `devdiff` against a stored manifest without re-scanning.
+
+## Repository
+
+https://github.com/StevenLOL/devmap
+
+## License
+
+[MIT](https://github.com/StevenLOL/devmap/blob/main/LICENSE)

devmap-0.3.6.dist-info/RECORD

@@ -0,0 +1,7 @@
+devmap/__init__.py,sha256=4Ek7Di0FYYl76FKnHJ8VYiJPHlUTfoqyBB_hul_pFbk,1728
+devmap/_devmap.mjs,sha256=kYiHodxsTRu90Anb1QtKk_llF1-Q21S4N9KrLuHgQsw,84108
+devmap-0.3.6.dist-info/METADATA,sha256=J89bwvXkn1xoRuyarTu7e1LQgQyCohhgIVylFrS21nI,6796
+devmap-0.3.6.dist-info/WHEEL,sha256=K260EYznzXsJYBQGqmI8VTxEdiZYNvDZwW9cBh9-_MA,91
+devmap-0.3.6.dist-info/entry_points.txt,sha256=FOQKZCLz0WGWemrTw0suYRqKWrUB4_XJ2Gkrw60ZEcg,39
+devmap-0.3.6.dist-info/top_level.txt,sha256=QeomiD_JKcjSd_jTZv0WJF3darUb2sUsxmocjgYJ6Qc,7
+devmap-0.3.6.dist-info/RECORD,,

devmap-0.3.4.dist-info/METADATA

@@ -1,38 +0,0 @@
-Metadata-Version: 2.4
-Name: devmap
-Version: 0.3.4
-Summary: Map your machine's dev environment and surface issues (PATH conflicts, ghost binaries, multi-version collisions). fastfetch-for-dev-tools. This PyPI package ships the real devmap CLI (a bundled JavaScript app launched via Node.js or Bun), so `pip install devmap && devmap` works standalone.
-Author: devmap contributors
-License: MIT
-Project-URL: Homepage, https://github.com/StevenLOL/devmap
-Project-URL: Repository, https://github.com/StevenLOL/devmap
-Keywords: devmap,devtools,environment,scanner,fastfetch,diagnostics,dev-environment,path-conflict,ghost-binary
-Classifier: Development Status :: 4 - Beta
-Classifier: Intended Audience :: Developers
-Classifier: License :: OSI Approved :: MIT License
-Classifier: Operating System :: OS Independent
-Classifier: Programming Language :: Python :: 3
-Classifier: Topic :: Software Development :: Quality Assurance
-Requires-Python: >=3.8
-Description-Content-Type: text/markdown
-
-# devmap (PyPI placeholder — name reserved)
-
-> **This is a placeholder package published only to reserve the `devmap`
-> name on PyPI.** The real implementation will replace it.
-
-## What devmap will be
-
-A **fastfetch-for-dev-tools**: a single command that maps your machine's
-development environment — runtimes, package managers, version managers,
-containers, IDEs — and detects issues like PATH conflicts, ghost/zombie
-binaries, version mismatches, and stale configs.
-
-## Status
-
-- Package name `devmap` reserved on PyPI ✅
-- Implementation: in progress
-
-## Repository
-
-https://github.com/StevenLOL/devmap

devmap-0.3.4.dist-info/RECORD

@@ -1,7 +0,0 @@
-devmap/__init__.py,sha256=4Ek7Di0FYYl76FKnHJ8VYiJPHlUTfoqyBB_hul_pFbk,1728
-devmap/_devmap.mjs,sha256=CiAlcYxdruTFDH2BqFIulpEq1DQ0-HRZGKMg9zP4UQU,79539
-devmap-0.3.4.dist-info/METADATA,sha256=0VC6E7S2d6h97lFCi2_vc3mT6d20BqQXi0PJ1JJNwZA,1633
-devmap-0.3.4.dist-info/WHEEL,sha256=K260EYznzXsJYBQGqmI8VTxEdiZYNvDZwW9cBh9-_MA,91
-devmap-0.3.4.dist-info/entry_points.txt,sha256=FOQKZCLz0WGWemrTw0suYRqKWrUB4_XJ2Gkrw60ZEcg,39
-devmap-0.3.4.dist-info/top_level.txt,sha256=QeomiD_JKcjSd_jTZv0WJF3darUb2sUsxmocjgYJ6Qc,7
-devmap-0.3.4.dist-info/RECORD,,