fabric-dw 0.1.dev77__tar.gz

fabric_dw-0.1.dev77/.devcontainer/devcontainer.json

@@ -0,0 +1,27 @@
+{
+  "name": "fabric-dw",
+  "image": "ghcr.io/astral-sh/uv:python3.13-bookworm",
+  "features": {
+    "ghcr.io/devcontainers/features/azure-cli:1": {},
+    "ghcr.io/devcontainers/features/github-cli:1": {},
+    "ghcr.io/devcontainers/features/common-utils:2": { "username": "vscode" }
+  },
+  "postCreateCommand": "uv sync",
+  "customizations": {
+    "vscode": {
+      "extensions": [
+        "charliermarsh.ruff",
+        "ms-python.python",
+        "ms-python.mypy-type-checker",
+        "tamasfe.even-better-toml",
+        "GitHub.copilot",
+        "GitHub.copilot-chat"
+      ],
+      "settings": {
+        "python.defaultInterpreterPath": "/usr/local/bin/python",
+        "[python]": { "editor.defaultFormatter": "charliermarsh.ruff" }
+      }
+    }
+  },
+  "remoteUser": "vscode"
+}

fabric_dw-0.1.dev77/.env.example

@@ -0,0 +1,8 @@
+FABRIC_TEST_WORKSPACE_ID=
+FABRIC_AUTH=default
+# AZURE_TENANT_ID=
+# AZURE_CLIENT_ID=
+# AZURE_CLIENT_SECRET=
+# Override the shared multi-tenant app used for interactive browser sign-in:
+# FABRIC_INTERACTIVE_CLIENT_ID=f666e5ee-2149-4c6a-87eb-13c9e1fdc70d
+# FABRIC_INTERACTIVE_TENANT_ID=

fabric_dw-0.1.dev77/.github/CODEOWNERS

@@ -0,0 +1 @@
+* @sdebruyn

fabric_dw-0.1.dev77/.github/ISSUE_TEMPLATE/bug_report.yml

@@ -0,0 +1,33 @@
+name: Bug report
+description: Report a bug or unexpected behavior
+title: "bug: "
+labels: [bug]
+body:
+  - type: markdown
+    attributes:
+      value: |
+        Thanks for taking the time to report a bug!
+  - type: textarea
+    id: description
+    attributes:
+      label: Description
+      description: What happened? What did you expect to happen?
+    validations:
+      required: true
+  - type: textarea
+    id: steps
+    attributes:
+      label: Steps to reproduce
+      description: How can we reproduce the issue?
+      placeholder: |
+        1. Run `fabric-dw ...`
+        2. See error
+    validations:
+      required: true
+  - type: textarea
+    id: environment
+    attributes:
+      label: Environment
+      description: "Python version, OS, package version"
+    validations:
+      required: false

fabric_dw-0.1.dev77/.github/ISSUE_TEMPLATE/feature_request.yml

@@ -0,0 +1,30 @@
+name: Feature request
+description: Suggest a new feature or enhancement
+title: "feat: "
+labels: [enhancement]
+body:
+  - type: markdown
+    attributes:
+      value: |
+        Thanks for suggesting a feature!
+  - type: textarea
+    id: problem
+    attributes:
+      label: Problem or motivation
+      description: What problem does this feature solve?
+    validations:
+      required: true
+  - type: textarea
+    id: solution
+    attributes:
+      label: Proposed solution
+      description: Describe the feature you'd like to see.
+    validations:
+      required: true
+  - type: textarea
+    id: alternatives
+    attributes:
+      label: Alternatives considered
+      description: Any alternative solutions or workarounds you've considered?
+    validations:
+      required: false

fabric_dw-0.1.dev77/.github/PULL_REQUEST_TEMPLATE.md

@@ -0,0 +1,14 @@
+## Summary
+
+<!-- Describe what this PR does and why. -->
+
+## Test plan
+
+- [ ] Pre-commit hooks pass (`uv run pre-commit run --all-files`)
+- [ ] Unit tests pass (`uv run pytest tests/unit`)
+- [ ] Integration tests pass where applicable (`uv run pytest tests/integration`)
+- [ ] Manual testing steps (if any):
+
+## Linked issue
+
+Closes #

fabric_dw-0.1.dev77/.github/dependabot.yml

@@ -0,0 +1,25 @@
+version: 2
+updates:
+  - package-ecosystem: pip
+    directory: /
+    schedule:
+      interval: weekly
+    groups:
+      patch-and-minor:
+        patterns:
+          - "*"
+        update-types:
+          - minor
+          - patch
+
+  - package-ecosystem: github-actions
+    directory: /
+    schedule:
+      interval: weekly
+    groups:
+      patch-and-minor:
+        patterns:
+          - "*"
+        update-types:
+          - minor
+          - patch

fabric_dw-0.1.dev77/.github/release-drafter.yml

@@ -0,0 +1,28 @@
+name-template: 'v$RESOLVED_VERSION'
+tag-template: 'v$RESOLVED_VERSION'
+categories:
+  - title: 'Features'
+    labels: ['type:feature']
+    commitish:
+      - "feat"
+  - title: 'Fixes'
+    labels: ['type:fix', 'bug']
+    commitish:
+      - "fix"
+  - title: 'Documentation'
+    labels: ['area:docs', 'area:docs-site']
+    commitish:
+      - "docs"
+  - title: 'CI / Tooling'
+    labels: ['area:ci', 'area:bootstrap']
+    commitish:
+      - "ci"
+      - "chore"
+  - title: 'Other'
+change-template: '- $TITLE @$AUTHOR (#$NUMBER)'
+change-title-escapes: '\<*_&'
+version-resolver:
+  default: patch
+template: |
+  ## Changes
+  $CHANGES

fabric_dw-0.1.dev77/.github/workflows/ci.yml

@@ -0,0 +1,73 @@
+name: CI
+
+on:
+  pull_request:
+  push:
+    branches:
+      - main
+
+concurrency:
+  group: ${{ github.workflow }}-${{ github.ref }}
+  cancel-in-progress: true
+
+permissions:
+  contents: read
+
+jobs:
+  lint:
+    name: Lint
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v6
+        with:
+          fetch-depth: 0
+      - uses: astral-sh/setup-uv@v8.2.0
+        with:
+          enable-cache: true
+      - uses: actions/setup-python@v6
+        with:
+          python-version: "3.11"
+      - run: uv sync --frozen
+      - run: uv run ruff check .
+      - run: uv run ruff format --check .
+
+  type:
+    name: Type check
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v6
+        with:
+          fetch-depth: 0
+      - uses: astral-sh/setup-uv@v8.2.0
+        with:
+          enable-cache: true
+      - uses: actions/setup-python@v6
+        with:
+          python-version: "3.11"
+      - run: uv sync --frozen
+      - run: uv run mypy src tests
+
+  unit:
+    name: Unit tests
+    runs-on: ubuntu-latest
+    strategy:
+      matrix:
+        python-version: ["3.11", "3.12", "3.13"]
+    steps:
+      - uses: actions/checkout@v6
+        with:
+          fetch-depth: 0
+      - uses: astral-sh/setup-uv@v8.2.0
+        with:
+          enable-cache: true
+      - uses: actions/setup-python@v6
+        with:
+          python-version: ${{ matrix.python-version }}
+      - run: uv sync --frozen
+      - run: uv run pytest tests/unit --cov=fabric_dw --cov-report=xml
+      - name: Coverage report
+        run: uv run coverage report
+      - uses: actions/upload-artifact@v7
+        with:
+          name: coverage-${{ matrix.python-version }}
+          path: coverage.xml

fabric_dw-0.1.dev77/.github/workflows/docker.yml

@@ -0,0 +1,58 @@
+name: Docker
+
+on:
+  push:
+    branches: [main]
+    tags: ["v[0-9]+.[0-9]+.[0-9]+"]
+
+permissions:
+  contents: read
+  packages: write
+  id-token: write
+
+jobs:
+  build-and-push:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v6
+        with:
+          fetch-depth: 0
+
+      - uses: astral-sh/setup-uv@v8.2.0
+        with:
+          enable-cache: true
+
+      - uses: actions/setup-python@v6
+        with:
+          python-version: "3.13"
+
+      - run: uv sync --frozen --no-dev
+
+      - name: Compute Docker tags
+        id: docker_tags
+        run: |
+          VERSION=$(uv run python -c "import fabric_dw; print(fabric_dw.__version__)")
+          if [[ "${GITHUB_REF_TYPE}" == "tag" ]]; then
+            echo "tags=ghcr.io/sdebruyn/fabric-dw:$VERSION,ghcr.io/sdebruyn/fabric-dw:latest" >> $GITHUB_OUTPUT
+          else
+            echo "tags=ghcr.io/sdebruyn/fabric-dw:$VERSION,ghcr.io/sdebruyn/fabric-dw:main" >> $GITHUB_OUTPUT
+          fi
+
+      - uses: docker/setup-qemu-action@v3
+      - uses: docker/setup-buildx-action@v3
+
+      - uses: docker/login-action@v3
+        with:
+          registry: ghcr.io
+          username: ${{ github.actor }}
+          password: ${{ secrets.GITHUB_TOKEN }}
+
+      - name: Build & push
+        uses: docker/build-push-action@v6
+        with:
+          context: .
+          platforms: linux/amd64,linux/arm64
+          push: true
+          tags: ${{ steps.docker_tags.outputs.tags }}
+          cache-from: type=gha
+          cache-to: type=gha,mode=max

fabric_dw-0.1.dev77/.github/workflows/integration.yml

@@ -0,0 +1,189 @@
+name: Integration tests
+
+on:
+  pull_request:
+    types: [labeled, synchronize]
+  push:
+    branches: [main]
+
+permissions:
+  id-token: write
+  contents: read
+
+concurrency:
+  group: integration-tests
+  cancel-in-progress: false
+
+jobs:
+  integration:
+    if: ${{ github.event_name == 'push' || contains(github.event.pull_request.labels.*.name, 'integration') }}
+    runs-on: ubuntu-latest
+    environment: integration
+    timeout-minutes: 45
+    steps:
+      - uses: actions/checkout@v6
+        with:
+          fetch-depth: 0
+
+      - uses: azure/login@v2
+        with:
+          client-id: ${{ secrets.AZURE_CLIENT_ID }}
+          tenant-id: ${{ secrets.AZURE_TENANT_ID }}
+          subscription-id: ${{ vars.AZURE_SUBSCRIPTION_ID }}
+
+      - name: Resume Fabric capacity
+        run: |
+          set -e
+          CAPACITY_ID="${{ vars.FABRIC_TEST_CAPACITY_ID }}"
+
+          # Wait for the capacity to leave any transitional state, up to 5 min
+          for i in {1..30}; do
+            STATE=$(az resource show --ids "$CAPACITY_ID" --query 'properties.state' -o tsv 2>/dev/null || echo "Unknown")
+            echo "Pre-resume state: $STATE"
+            case "$STATE" in
+              Active)  echo "Already Active, skipping resume"; exit 0 ;;
+              Paused)  break ;;
+              *)       sleep 10 ;;
+            esac
+          done
+
+          # Issue resume, but tolerate transient BadRequest
+          for attempt in {1..6}; do
+            if az resource invoke-action --ids "$CAPACITY_ID" --action resume; then
+              break
+            fi
+            echo "Resume attempt $attempt failed (likely transient), waiting 15s..."
+            sleep 15
+          done
+
+          # Poll until Active, max 5 min
+          for i in {1..30}; do
+            STATE=$(az resource show --ids "$CAPACITY_ID" --query 'properties.state' -o tsv)
+            echo "Post-resume state: $STATE"
+            [[ "$STATE" == "Active" ]] && exit 0
+            sleep 10
+          done
+
+          echo "Capacity did not reach Active state within 5 minutes" >&2
+          exit 1
+
+      - uses: astral-sh/setup-uv@v8.2.0
+        with:
+          enable-cache: true
+
+      - uses: actions/setup-python@v6
+        with:
+          python-version: "3.13"
+
+      - run: uv sync --frozen
+
+      - name: Pre-test sweep of stale pytest-* items
+        env:
+          FABRIC_TEST_WORKSPACE_ID: ${{ secrets.FABRIC_TEST_WORKSPACE_ID }}
+          FABRIC_AUTH: default
+        run: |
+          uv run python -c "
+          import anyio, os
+          from datetime import datetime, timedelta, UTC
+          from fabric_dw.auth import get_credential
+          from fabric_dw.http_client import FabricHttpClient
+          from fabric_dw.services import warehouses, snapshots
+
+          async def main() -> None:
+              ws = os.environ['FABRIC_TEST_WORKSPACE_ID']
+              cutoff = datetime.now(UTC) - timedelta(hours=1)
+              cred = get_credential()
+              async with FabricHttpClient(cred) as http:
+                  items = await warehouses.list_warehouses(http, ws)
+                  for w in items:
+                      if w.name.startswith('pytest-') and (w.created_date is None or w.created_date < cutoff):
+                          print(f'Sweeping {w.kind} {w.name} ({w.id})')
+                          try:
+                              if w.kind == 'WarehouseSnapshot':
+                                  await snapshots.delete(http, ws, w.id)
+                              else:
+                                  await warehouses.delete(http, ws, w.id)
+                          except Exception as exc:
+                              print(f'  skip: {exc}')
+
+          anyio.run(main)
+          "
+
+      - name: Run integration tests
+        env:
+          FABRIC_TEST_WORKSPACE_ID: ${{ secrets.FABRIC_TEST_WORKSPACE_ID }}
+          FABRIC_AUTH: default
+        run: uv run pytest tests/integration -m integration -v
+
+      - name: Post-test sweep of pytest-* items
+        if: always()
+        env:
+          FABRIC_TEST_WORKSPACE_ID: ${{ secrets.FABRIC_TEST_WORKSPACE_ID }}
+          FABRIC_AUTH: default
+        run: |
+          uv run python -c "
+          import anyio, os
+          from fabric_dw.auth import get_credential
+          from fabric_dw.http_client import FabricHttpClient
+          from fabric_dw.services import warehouses, snapshots
+
+          async def main() -> None:
+              ws = os.environ['FABRIC_TEST_WORKSPACE_ID']
+              cred = get_credential()
+              failures = []
+              async with FabricHttpClient(cred) as http:
+                  items = await warehouses.list_warehouses(http, ws)
+                  for w in items:
+                      if w.name.startswith('pytest-'):
+                          print(f'Deleting {w.kind} {w.name} ({w.id})')
+                          try:
+                              if w.kind == 'WarehouseSnapshot':
+                                  await snapshots.delete(http, ws, w.id)
+                              else:
+                                  await warehouses.delete(http, ws, w.id)
+                          except Exception as exc:
+                              failures.append((w.name, str(exc)))
+                  if failures:
+                      for name, err in failures:
+                          print(f'FAIL: {name}: {err}')
+                      raise SystemExit(1)
+
+          anyio.run(main)
+          "
+
+      - name: Suspend Fabric capacity
+        if: always()
+        run: |
+          set -e
+          CAPACITY_ID="${{ vars.FABRIC_TEST_CAPACITY_ID }}"
+
+          # Wait for the capacity to leave any transitional state, up to 5 min
+          for i in {1..30}; do
+            STATE=$(az resource show --ids "$CAPACITY_ID" --query 'properties.state' -o tsv 2>/dev/null || echo "Unknown")
+            echo "Pre-suspend state: $STATE"
+            case "$STATE" in
+              Paused)  echo "Already Paused, skipping suspend"; exit 0 ;;
+              Active)  break ;;
+              *)       sleep 10 ;;
+            esac
+          done
+
+          # Issue suspend, but tolerate transient BadRequest
+          for attempt in {1..6}; do
+            if az resource invoke-action --ids "$CAPACITY_ID" --action suspend; then
+              break
+            fi
+            echo "Suspend attempt $attempt failed (likely transient), waiting 15s..."
+            sleep 15
+          done
+
+          # Poll until Paused, max 5 min
+          for i in {1..30}; do
+            STATE=$(az resource show --ids "$CAPACITY_ID" --query 'properties.state' -o tsv)
+            echo "Post-suspend state: $STATE"
+            [[ "$STATE" == "Paused" ]] && exit 0
+            sleep 10
+          done
+
+          echo "Capacity did not reach Paused state within 5 minutes" >&2
+          exit 1

fabric_dw-0.1.dev77/.github/workflows/publish.yml

@@ -0,0 +1,44 @@
+name: Publish
+
+on:
+  push:
+    branches: [main]
+    tags: ["v[0-9]+.[0-9]+.[0-9]+"]
+
+permissions:
+  contents: write
+  id-token: write
+
+jobs:
+  publish:
+    runs-on: ubuntu-latest
+    environment: pypi
+    steps:
+      - uses: actions/checkout@v6
+        with:
+          fetch-depth: 0
+
+      - uses: astral-sh/setup-uv@v8.2.0
+        with:
+          enable-cache: true
+
+      - uses: actions/setup-python@v6
+        with:
+          python-version: "3.13"
+
+      - run: uv sync --frozen --no-dev
+
+      - run: uv build
+
+      - name: Publish to PyPI (OIDC)
+        run: uv publish --trusted-publishing always
+
+      - name: Create GitHub Release (tag only)
+        if: github.ref_type == 'tag'
+        uses: softprops/action-gh-release@v3
+        with:
+          files: |
+            dist/*.whl
+            dist/*.tar.gz
+          generate_release_notes: true
+          name: ${{ github.ref_name }}

fabric_dw-0.1.dev77/.github/workflows/release-drafter.yml

@@ -0,0 +1,16 @@
+name: Release Drafter
+on:
+  push:
+    branches: [main]
+  pull_request:
+    types: [opened, reopened, synchronize]
+permissions:
+  contents: write
+  pull-requests: read
+jobs:
+  update_release_draft:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: release-drafter/release-drafter@v7
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}

fabric_dw-0.1.dev77/.github/workflows/security.yml

@@ -0,0 +1,38 @@
+name: Security
+on:
+  pull_request:
+  push:
+    branches: [main]
+permissions:
+  contents: read
+  pull-requests: read
+jobs:
+  bandit:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v6
+        with:
+          fetch-depth: 0
+      - uses: astral-sh/setup-uv@v8.2.0
+        with: { enable-cache: true }
+      - run: uvx --quiet bandit -r src/ -ll
+  dependency-review:
+    if: github.event_name == 'pull_request'
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v6
+        with:
+          fetch-depth: 0
+      - uses: actions/dependency-review-action@v5
+        with:
+          fail-on-severity: high
+  pip-audit:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v6
+        with:
+          fetch-depth: 0
+      - uses: astral-sh/setup-uv@v8.2.0
+        with: { enable-cache: true }
+      - run: uv sync --frozen
+      - run: uvx --quiet pip-audit

fabric_dw-0.1.dev77/.gitignore

@@ -0,0 +1,50 @@
+# Python
+__pycache__/
+src/fabric_dw/_version.py
+*.py[cod]
+*$py.class
+*.so
+.Python
+build/
+dist/
+*.egg-info/
+.eggs/
+.installed.cfg
+*.egg
+
+# uv / pip
+.venv/
+venv/
+env/
+
+# Test / coverage
+.pytest_cache/
+.coverage
+.coverage.*
+htmlcov/
+coverage.xml
+.tox/
+.nox/
+.cache/
+
+# Type checkers
+.mypy_cache/
+.pyright/
+.ruff_cache/
+
+# IDE
+.idea/
+.vscode/
+*.swp
+
+# OS
+.DS_Store
+Thumbs.db
+
+# Env / secrets
+.env
+.env.*
+!.env.example
+
+# Docs build output
+docs_build/site/

fabric_dw-0.1.dev77/.python-version

@@ -0,0 +1 @@
+3.13