evo-cli 0.26.2__tar.gz → 0.28.0__tar.gz

{evo_cli-0.26.2 → evo_cli-0.28.0}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: evo_cli
-Version: 0.26.2
+Version: 0.28.0
 Summary: Evolution CLI - a developer toolbox for setting up dev machines
 Author: maycuatroi
 Project-URL: Homepage, https://github.com/maycuatroi/evo-cli
@@ -170,8 +170,14 @@ supported. Only trusted, self-contained TUN client profiles are accepted; script
 plugins and external certificate/key files are refused. Runtime data uses
 `~/.evo/openvpn` (override with `EVO_OPENVPN_HOME`).
 
-Only one evo-managed tunnel runs at a time. Disconnect any GUI VPN before connecting
-through evo; GUI profiles are never removed or modified. Server routes are applied,
+Several evo-managed tunnels can run at once, as long as at most one of them may take the
+default route. A profile is split-tunnel when it has `route-nopull` or
+`pull-filter ignore "redirect-gateway"` (add `route` lines for the networks it should
+carry); any other profile might receive a pushed `redirect-gateway`, so `connect` refuses
+to stack two of those. While a split-tunnel profile runs, its server is pinned to the
+physical gateway with a host route, so a full-tunnel VPN connected before or after it
+never carries its handshake. Disconnect any GUI VPN before connecting through evo; GUI
+profiles are never removed or modified. Server routes are applied,
 but this backend does not change system DNS. Internal IP access works through the
 tunnel; private DNS names may need your organization's DNS configuration. `CONNECTED`
 confirms the tunnel, not the availability of a particular internal application.
@@ -371,6 +377,29 @@ the command line, where any process listing would show it. `evo setup serp --wri
 `~/.config/serpapi/config.toml` (mode 600) if you also want the bare `serpapi` binary to
 authenticate on its own.
 
+#### Storage
+
+See what fills the disk and clear developer caches (macOS and Linux):
+
+```bash
+evo storage audit                  # free space, swap, size of every known cache
+evo storage audit --deep           # also rank the biggest folders in ~ (and ~/Library)
+evo storage clean --all -n         # dry run: what a full clean would remove
+evo storage clean uv npm gradle    # clear only these caches (asks first)
+evo storage clean --all -y         # clear everything without asking
+```
+
+Targets: `uv`, `npm` (+ npx), `pip`, `conda`, `pnpm`, `gradle` (caches + wrapper dists), `go`,
+`docker` (build cache + unused images), `brew`, `xcode` (DerivedData + unavailable simulators) and
+`updaters` (`*.ShipIt`, `*-updater`, editor VSIX caches). Only data the tools rebuild on demand is
+touched - never projects, VMs or app data.
+
+`clean` reports the space it actually freed, measured on the filesystem: on APFS uv clones cache
+files into venvs, so a 32 GB uv cache can give back only a few GB. Caches in use are left alone -
+uv/npx envs that a running process was started from are kept, and Gradle is skipped while a Gradle
+daemon runs. Files owned by another user (for example from a past `sudo uvx`) are reported, not
+removed with sudo.
+
 ## `evo harness` - read a repo cluster
 
 A harness is a repo that describes a *cluster* of repos: `harness.yaml` lists them, `contracts.yaml`

{evo_cli-0.26.2 → evo_cli-0.28.0}/README.md

@@ -137,8 +137,14 @@ supported. Only trusted, self-contained TUN client profiles are accepted; script
 plugins and external certificate/key files are refused. Runtime data uses
 `~/.evo/openvpn` (override with `EVO_OPENVPN_HOME`).
 
-Only one evo-managed tunnel runs at a time. Disconnect any GUI VPN before connecting
-through evo; GUI profiles are never removed or modified. Server routes are applied,
+Several evo-managed tunnels can run at once, as long as at most one of them may take the
+default route. A profile is split-tunnel when it has `route-nopull` or
+`pull-filter ignore "redirect-gateway"` (add `route` lines for the networks it should
+carry); any other profile might receive a pushed `redirect-gateway`, so `connect` refuses
+to stack two of those. While a split-tunnel profile runs, its server is pinned to the
+physical gateway with a host route, so a full-tunnel VPN connected before or after it
+never carries its handshake. Disconnect any GUI VPN before connecting through evo; GUI
+profiles are never removed or modified. Server routes are applied,
 but this backend does not change system DNS. Internal IP access works through the
 tunnel; private DNS names may need your organization's DNS configuration. `CONNECTED`
 confirms the tunnel, not the availability of a particular internal application.
@@ -338,6 +344,29 @@ the command line, where any process listing would show it. `evo setup serp --wri
 `~/.config/serpapi/config.toml` (mode 600) if you also want the bare `serpapi` binary to
 authenticate on its own.
 
+#### Storage
+
+See what fills the disk and clear developer caches (macOS and Linux):
+
+```bash
+evo storage audit                  # free space, swap, size of every known cache
+evo storage audit --deep           # also rank the biggest folders in ~ (and ~/Library)
+evo storage clean --all -n         # dry run: what a full clean would remove
+evo storage clean uv npm gradle    # clear only these caches (asks first)
+evo storage clean --all -y         # clear everything without asking
+```
+
+Targets: `uv`, `npm` (+ npx), `pip`, `conda`, `pnpm`, `gradle` (caches + wrapper dists), `go`,
+`docker` (build cache + unused images), `brew`, `xcode` (DerivedData + unavailable simulators) and
+`updaters` (`*.ShipIt`, `*-updater`, editor VSIX caches). Only data the tools rebuild on demand is
+touched - never projects, VMs or app data.
+
+`clean` reports the space it actually freed, measured on the filesystem: on APFS uv clones cache
+files into venvs, so a 32 GB uv cache can give back only a few GB. Caches in use are left alone -
+uv/npx envs that a running process was started from are kept, and Gradle is skipped while a Gradle
+daemon runs. Files owned by another user (for example from a past `sudo uvx`) are reported, not
+removed with sudo.
+
 ## `evo harness` - read a repo cluster
 
 A harness is a repo that describes a *cluster* of repos: `harness.yaml` lists them, `contracts.yaml`

evo_cli-0.28.0/evo_cli/VERSION

@@ -0,0 +1 @@
+0.28.0

{evo_cli-0.26.2 → evo_cli-0.28.0}/evo_cli/cli.py

@@ -25,6 +25,7 @@ from evo_cli.commands.route import route_group
 from evo_cli.commands.serp import serp_group, setup_serp
 from evo_cli.commands.site2s import site2s
 from evo_cli.commands.ssh import setupssh
+from evo_cli.commands.storage import storage
 from evo_cli.commands.sysmon import sysmon
 from evo_cli.commands.tts import tts_group
 from evo_cli.commands.update import update
@@ -84,6 +85,7 @@ cli.add_command(openvpn_group)
 cli.add_command(plantuml)
 cli.add_command(route_group)
 cli.add_command(serp_group)
+cli.add_command(storage)
 cli.add_command(sysmon)
 cli.add_command(tts_group)
 cli.add_command(update)

{evo_cli-0.26.2 → evo_cli-0.28.0}/evo_cli/commands/openvpn.py

@@ -324,15 +324,22 @@ def connect(name, timeout, sudo_password_stdin, watch):
         raise click.ClickException("Missing credentials; run evo openvpn credentials PROFILE.")
     if _guard(vpn.request, name)["state"] != "STOPPED":
         raise click.ClickException("This profile already has a worker; use status or disconnect first.")
-    # Avoid unintentionally stacking two route sets. The external GUI is never controlled here.
-    for other in _guard(vpn.profiles):
-        if other != name and _guard(vpn.request, other)["state"] != "STOPPED":
-            raise click.ClickException(f"Disconnect '{other}' first to avoid conflicting VPN routes.")
+    # Two tunnels that may both take the default route would fight over it; a split-tunnel profile stacks
+    # beside any other. The external GUI is never controlled here.
+    full = _guard(vpn.takes_default_route, profile["config"])
+    for other, data in _guard(vpn.profiles).items():
+        if other == name or _guard(vpn.request, other)["state"] == "STOPPED":
+            continue
+        if full and _guard(vpn.takes_default_route, data.get("config", "")):
+            raise click.ClickException(
+                f"Disconnect '{other}' first: both may take the default route. To run them together, add "
+                'pull-filter ignore "redirect-gateway" (plus the routes you need) to one of them.'
+            )
     password = ""
     if os.geteuid() != 0:
         if sudo_password_stdin:
             password = sys.stdin.readline().rstrip("\n")
-        elif subprocess.run(["sudo", "-n", "true"], capture_output=True).returncode:
+        elif subprocess.run(["sudo", "-n", "true"], capture_output=True, check=False).returncode:
             password = getpass.getpass("sudo password (not stored): ")
     state_path = Path(str(_guard(vpn.session_path, name)) + ".json")
     state_path.unlink(missing_ok=True)