dploydb 0.1.0__tar.gz → 0.1.1__tar.gz

{dploydb-0.1.0 → dploydb-0.1.1}/CHANGELOG.md

@@ -6,6 +6,16 @@ All notable changes to DployDB are documented here. The project follows
 
 ## [Unreleased]
 
+## [0.1.1] - 2026-07-19
+
+### Fixed
+
+- Treat the standard uppercase Linux `PWD` environment variable as a working
+  directory rather than a password field, preventing exact-value redaction from
+  invalidating absolute release-manifest paths during deployment.
+- Exercise the installed clean-Linux deployment with `PWD` equal to the project
+  root and require the active release to retain an absolute operation-log path.
+
 ## [0.1.0] - 2026-07-19
 
 ### Added
@@ -32,5 +42,6 @@ All notable changes to DployDB are documented here. The project follows
 - During `0.x`, breaking public-contract changes may occur only in minor releases
   and will include explicit migration guidance.
 
-[Unreleased]: https://github.com/recursiveway/dployDB/compare/v0.1.0...HEAD
+[Unreleased]: https://github.com/recursiveway/dployDB/compare/v0.1.1...HEAD
+[0.1.1]: https://github.com/recursiveway/dployDB/releases/tag/v0.1.1
 [0.1.0]: https://github.com/recursiveway/dployDB/releases/tag/v0.1.0

{dploydb-0.1.0 → dploydb-0.1.1}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: dploydb
-Version: 0.1.0
+Version: 0.1.1
 Summary: Deployment safety for SQLite applications
 Project-URL: Homepage, https://github.com/recursiveway/dployDB
 Project-URL: Repository, https://github.com/recursiveway/dployDB
@@ -38,7 +38,7 @@ Description-Content-Type: text/markdown
 DployDB is being built as a deployment-safety tool for applications that use one SQLite database on one Linux server.
 
 > [!WARNING]
-> DployDB 0.1.0 is Alpha software. Its safety gates are real and extensively
+> DployDB 0.1.1 is Alpha software. Its safety gates are real and extensively
 > tested, but public interfaces may still change in documented `0.x` minor
 > releases. Read the [supported limits](docs/limitations.md), keep independent
 > backups, and prove the complete failure/restore flow on a non-production host
@@ -59,7 +59,7 @@ docker compose version
 
 git clone https://github.com/recursiveway/dployDB.git
 cd dployDB
-pipx install dploydb==0.1.0
+pipx install dploydb==0.1.1
 dploydb --no-color version
 ```
 
@@ -187,7 +187,7 @@ off-server backup, and protected retention are implemented.
 Install the published Alpha CLI:
 
 ```bash
-pipx install dploydb==0.1.0
+pipx install dploydb==0.1.1
 dploydb version
 ```
 

{dploydb-0.1.0 → dploydb-0.1.1}/README.md

@@ -8,7 +8,7 @@
 DployDB is being built as a deployment-safety tool for applications that use one SQLite database on one Linux server.
 
 > [!WARNING]
-> DployDB 0.1.0 is Alpha software. Its safety gates are real and extensively
+> DployDB 0.1.1 is Alpha software. Its safety gates are real and extensively
 > tested, but public interfaces may still change in documented `0.x` minor
 > releases. Read the [supported limits](docs/limitations.md), keep independent
 > backups, and prove the complete failure/restore flow on a non-production host
@@ -29,7 +29,7 @@ docker compose version
 
 git clone https://github.com/recursiveway/dployDB.git
 cd dployDB
-pipx install dploydb==0.1.0
+pipx install dploydb==0.1.1
 dploydb --no-color version
 ```
 
@@ -157,7 +157,7 @@ off-server backup, and protected retention are implemented.
 Install the published Alpha CLI:
 
 ```bash
-pipx install dploydb==0.1.0
+pipx install dploydb==0.1.1
 dploydb version
 ```
 

{dploydb-0.1.0 → dploydb-0.1.1}/RELEASING.md

@@ -66,6 +66,14 @@ different bytes. Keep the GitHub release as a draft, diagnose the failure, and
 rerun the immutable tag workflow when safe. PyPI files cannot be replaced or
 rolled back; a bad public release must be yanked and superseded by a new patch.
 
+If a tag-triggered run fails before artifacts are built because the runner did
+not materialize the annotated tag object, preserve the verified tag. Fix the
+workflow through a protected pull request, merge it to `main`, and manually
+dispatch `Publish release` from `main` with the existing canonical tag. The
+recovery path explicitly fetches that remote tag object and checks out the
+immutable tagged source; it must not be used to move or recreate a tag. The
+normal protected TestPyPI and PyPI approvals still apply.
+
 ## One-time repository setup
 
 - Make the repository public, enable Issues, private vulnerability reporting,

{dploydb-0.1.0 → dploydb-0.1.1}/docs/first-run.md

@@ -25,7 +25,7 @@ docker compose version
 Install the exact published Alpha version into an isolated environment:
 
 ```bash
-pipx install dploydb==0.1.0
+pipx install dploydb==0.1.1
 dploydb --no-color version
 ```
 

{dploydb-0.1.0 → dploydb-0.1.1}/dploydb/redaction.py

@@ -127,7 +127,10 @@ _URL_USERINFO = re.compile(
 
 def is_sensitive_key(key: str) -> bool:
     """Return whether a mapping key conventionally contains a secret value."""
-    candidate = key.strip().strip("\"'").removeprefix("--")
+    normalized = key.strip().strip("\"'")
+    if normalized == "PWD":
+        return False
+    candidate = normalized.removeprefix("--")
     return _SENSITIVE_KEY.fullmatch(candidate) is not None
 
 

{dploydb-0.1.0 → dploydb-0.1.1}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "hatchling.build"
 
 [project]
 name = "dploydb"
-version = "0.1.0"
+version = "0.1.1"
 description = "Deployment safety for SQLite applications"
 readme = "README.md"
 requires-python = ">=3.12"

{dploydb-0.1.0 → dploydb-0.1.1}/scripts/verify_clean_linux.py

@@ -198,6 +198,7 @@ def _demo_environment() -> dict[str, str]:
         "DPLOYDB_DEMO_UID": "0",
         "DPLOYDB_VERSION": "v1",
         "NO_COLOR": "1",
+        "PWD": "/workspace",
         "PYTHONPATH": "/workspace",
     }
 
@@ -288,6 +289,12 @@ def _run_readme_demo(container: str, executable: str) -> dict[str, Any]:
     release_payload = json.loads(releases.stdout)
     if release_payload.get("active_release_id") != deployment_payload.get("release_id"):
         _stop("clean Linux release history does not select the deployed release")
+    selected_releases = release_payload.get("releases")
+    if not isinstance(selected_releases, list) or len(selected_releases) != 1:
+        _stop(f"clean Linux release history was unexpected: {release_payload!r}")
+    operation_log = selected_releases[0].get("log_path")
+    if not isinstance(operation_log, str) or not operation_log.startswith("/workspace/"):
+        _stop(f"clean Linux release log path was not absolute: {operation_log!r}")
 
     database_check = _exec(
         container,

{dploydb-0.1.0 → dploydb-0.1.1}/tests/integration/test_deploy_end_to_end.py

@@ -23,6 +23,8 @@ import yaml
 
 from dploydb.config import STARTER_CONFIGURATION
 from dploydb.models import new_operation_id
+from dploydb.redaction import SecretRegistry
+from dploydb.releases import ReleaseStore
 from dploydb.storage.local import LocalBackupStorage
 
 ROOT = Path(__file__).resolve().parents[2]
@@ -390,6 +392,8 @@ def test_real_docker_deploy_flows_and_pre_activation_traffic_isolation(
             time.sleep(0.025)
         assert any(record["observed"] == "old" for record in monitor.records)
 
+        deployment_environment = _environment(data, production_port, release)
+        deployment_environment["PWD"] = str(tmp_path)
         result = subprocess.run(
             [
                 str(ROOT / ".venv" / "bin" / "dploydb"),
@@ -401,8 +405,8 @@ def test_real_docker_deploy_flows_and_pre_activation_traffic_isolation(
                 "--json",
                 "--non-interactive",
             ],
-            cwd=ROOT,
-            env=_environment(data, production_port, release),
+            cwd=tmp_path,
+            env=deployment_environment,
             capture_output=True,
             text=True,
             timeout=300,
@@ -413,6 +417,10 @@ def test_real_docker_deploy_flows_and_pre_activation_traffic_isolation(
         assert payload["outcome"] == expected_outcome
         assert payload["traffic_activated"] is (scenario == "success")
         assert payload["recovery_required"] is False
+        release_store = ReleaseStore(tmp_path / "state", secrets=SecretRegistry())
+        persisted_release, _pointers = release_store.lookup_history_release(payload["release_id"])
+        assert persisted_release.operation_log_path.is_absolute()
+        assert persisted_release.operation_log_path.is_relative_to(tmp_path)
 
         if scenario == "success":
             _wait_for_release(production_port, "v2")

{dploydb-0.1.0 → dploydb-0.1.1}/tests/test_redaction.py

@@ -46,6 +46,9 @@ def test_empty_secret_values_are_ignored_without_corrupting_output() -> None:
     "key",
     (
         "password",
+        "pwd",
+        "DATABASE_PWD",
+        "--pwd",
         "DATABASE_PASSWORD",
         "api-key",
         "S3_SECRET_ACCESS_KEY",
@@ -61,7 +64,10 @@ def test_sensitive_keys_are_recognized(key: str) -> None:
     assert is_sensitive_key(key)
 
 
-@pytest.mark.parametrize("key", ("project", "candidate_port", "secretary", "tokenizer"))
+@pytest.mark.parametrize(
+    "key",
+    ("PWD", "project", "candidate_port", "secretary", "tokenizer"),
+)
 def test_non_sensitive_keys_are_not_over_redacted(key: str) -> None:
     assert not is_sensitive_key(key)
 

{dploydb-0.1.0 → dploydb-0.1.1}/tests/unit/test_deploy.py

@@ -72,6 +72,7 @@ from dploydb.subprocesses import (
     CapturedOutput,
     CommandOutcome,
     CommandResult,
+    SubprocessRunner,
     TerminationReason,
 )
 from dploydb.traffic import TrafficAction, TrafficHookResult
@@ -868,6 +869,36 @@ def test_successful_coordinator_activates_checked_release_in_exact_order(
     assert "traffic_activation_started" in {event.stage for event in events}
 
 
+def test_standard_pwd_environment_preserves_absolute_release_paths(tmp_path: Path) -> None:
+    config_path, loaded = loaded_project(tmp_path)
+    command = SubprocessRunner(secrets=loaded.secrets).run(
+        [sys.executable, "-c", "pass"],
+        timeout_seconds=5,
+        environment={"PWD": str(tmp_path)},
+        working_directory=tmp_path,
+    )
+    assert command.succeeded
+    assert command.working_directory == str(tmp_path)
+
+    selected = harness(loaded, config_path)
+    result = run_deploy(loaded, config_path, selected)
+
+    persisted = ReleaseStore(
+        loaded.config.state_directory,
+        secrets=loaded.secrets,
+    ).read_manifest(result.release.release_id)
+    assert result.active is True
+    assert persisted.status is DeploymentState.ACTIVE
+    assert persisted.operation_log_path.is_absolute()
+    assert persisted.operation_log_path.is_relative_to(tmp_path)
+    assert persisted.previous_application is not None
+    assert persisted.previous_application.database_directory.is_absolute()
+    assert persisted.previous_application.database_directory.is_relative_to(tmp_path)
+    assert persisted.new_application is not None
+    assert persisted.new_application.database_directory.is_absolute()
+    assert persisted.new_application.database_directory.is_relative_to(tmp_path)
+
+
 def test_required_remote_final_backup_is_verified_before_production_migration(
     tmp_path: Path,
 ) -> None:

{dploydb-0.1.0 → dploydb-0.1.1}/tests/unit/test_milestone8_docs.py

@@ -38,7 +38,7 @@ def test_readme_quick_start_uses_the_installed_cli_and_parses_real_json() -> Non
     readme = (ROOT / "README.md").read_text(encoding="utf-8")
 
     for required in (
-        "pipx install dploydb==0.1.0",
+        "pipx install dploydb==0.1.1",
         "git clone https://github.com/recursiveway/dployDB.git",
         "python3 -m demo.prepare",
         "dploydb --no-color doctor --deep",

{dploydb-0.1.0 → dploydb-0.1.1}/tests/unit/test_release_readiness.py

@@ -1,4 +1,4 @@
-"""Release-readiness contracts for DployDB 0.1.0 Alpha."""
+"""Release-readiness contracts for DployDB 0.1.1 Alpha."""
 
 from __future__ import annotations
 
@@ -29,7 +29,7 @@ def test_public_package_metadata_declares_alpha_license_owner_and_urls() -> None
 
     assert metadata["build-system"]["requires"] == ["hatchling>=1.27"]
     assert project["name"] == "dploydb"
-    assert project["version"] == "0.1.0"
+    assert project["version"] == "0.1.1"
     assert project["license"] == "Apache-2.0"
     assert project["license-files"] == ["LICENSE", "NOTICE"]
     assert project["authors"] == [{"name": "RecursiveWay"}]
@@ -80,8 +80,8 @@ def test_license_notice_and_public_policies_are_present() -> None:
 def test_readme_is_explicitly_alpha_and_publicly_installable() -> None:
     readme = (ROOT / "README.md").read_text(encoding="utf-8")
 
-    assert "DployDB 0.1.0 is Alpha software" in readme
-    assert "pipx install dploydb==0.1.0" in readme
+    assert "DployDB 0.1.1 is Alpha software" in readme
+    assert "pipx install dploydb==0.1.1" in readme
     assert "Apache License 2.0" in readme
     assert "1.0.0" in readme
     assert "SECURITY.md" in readme
@@ -110,6 +110,21 @@ def test_workflows_pin_actions_and_limit_publish_permissions() -> None:
     assert "--draft=false --prerelease=true" in release
 
 
+def test_release_workflow_recovers_an_existing_immutable_tag_from_main() -> None:
+    release = WORKFLOWS[1].read_text(encoding="utf-8")
+
+    assert "workflow_dispatch:" in release
+    assert "Existing verified release tag to recover" in release
+    assert "release tag is not canonical" in release
+    assert 'test "$GITHUB_REF" = "refs/heads/main"' in release
+    assert '"refs/tags/${TAG}:refs/tags/${TAG}"' in release
+    assert 'test "$object_type" = "tag"' in release
+    assert 'test "$remote_target" = "$(git rev-parse "${TAG}^{}")"' in release
+    assert ".verification.verified" in release
+    assert release.count("ref: refs/tags/${{ env.RELEASE_TAG }}") == 4
+    assert "${{ github.ref_name }}" not in release
+
+
 def _write_wheel(path: Path, version: str) -> None:
     with zipfile.ZipFile(path, "w") as archive:
         archive.writestr(

{dploydb-0.1.0 → dploydb-0.1.1}/uv.lock

@@ -298,7 +298,7 @@ wheels = [
 
 [[package]]
 name = "dploydb"
-version = "0.1.0"
+version = "0.1.1"
 source = { editable = "." }
 dependencies = [
     { name = "boto3" },