girder-jsonforms 2.1.2__tar.gz → 2.1.3__tar.gz

{girder_jsonforms-2.1.2/girder_jsonforms.egg-info → girder_jsonforms-2.1.3}/PKG-INFO

@@ -1,11 +1,10 @@
 Metadata-Version: 2.4
 Name: girder-jsonforms
-Version: 2.1.2
+Version: 2.1.3
 Summary: Girder plugin adding forms based on JSON-editor
-License: BSD-3-Clause
+License-Expression: BSD-3-Clause
 Classifier: Development Status :: 4 - Beta
 Classifier: Environment :: Web Environment
-Classifier: License :: OSI Approved :: BSD License
 Classifier: Operating System :: POSIX :: Linux
 Classifier: Programming Language :: Python
 Classifier: Programming Language :: Python :: 3
@@ -23,14 +22,7 @@ Requires-Dist: google-auth-oauthlib
 Requires-Dist: jsondiff
 Requires-Dist: pandas
 Requires-Dist: openpyxl
-Dynamic: classifier
-Dynamic: description
-Dynamic: description-content-type
-Dynamic: license
 Dynamic: license-file
-Dynamic: requires-dist
-Dynamic: requires-python
-Dynamic: summary
 
 ### Girder JSONForms Plugin
 

{girder_jsonforms-2.1.2 → girder_jsonforms-2.1.3}/girder_jsonforms/lib/igsn_client.py

@@ -19,6 +19,7 @@ Two rules matter here:
 import logging
 
 import requests
+from girder.exceptions import RestException
 from girder.models.setting import Setting
 from requests.adapters import HTTPAdapter
 from urllib3.util.retry import Retry
@@ -29,16 +30,40 @@ logger = logging.getLogger(__name__)
 
 DEFAULT_TIMEOUT = 30
 
+# Upstream statuses that mean "the caller asked for something the registry will
+# not do": a prefix outside the tenant's vocabulary, an identifier that already
+# exists, a published record that cannot be withdrawn. The service's own
+# explanation is the useful part and the person filling in the form can act on
+# it, so these become a 400 carrying that message.
+#
+# Everything else -- our service token rejected, a 5xx, an unreachable host --
+# is this deployment's problem rather than the caller's, so it becomes a 502
+# and the detail is left to the log.
+CLIENT_ERROR_STATUSES = frozenset({400, 404, 409, 422})
 
-class IGSNServiceError(Exception):
+
+def _rest_code(status_code):
+    return 400 if status_code in CLIENT_ERROR_STATUSES else 502
+
+
+class IGSNServiceError(RestException):
     """The IGSN registry service could not satisfy a request.
 
     Deliberately fatal to whatever operation raised it: a Girder deposition must
     never exist without a matching record in the registry.
+
+    It is a ``RestException`` so that the fatality is a *useful* one. Identifier
+    allocation happens several levels below the endpoint -- in
+    ``PrefixCounter.get_next``, and off the ``model.entry.save`` event for the
+    form path -- and most of those call sites have no business knowing about
+    HTTP. Left as a plain exception it reached the REST layer as an unhandled
+    error, so "Institution JH is not permitted for this tenant" showed up in the
+    UI as a bare 500. Subclassing means every path reports the registry's reason
+    without each one having to catch and translate.
     """
 
     def __init__(self, message, status_code=None, detail=None):
-        super().__init__(message)
+        super().__init__(message, code=_rest_code(status_code))
         self.status_code = status_code
         self.detail = detail
 
@@ -82,9 +107,25 @@ class IGSNClient:
                 detail = response.json().get("detail")
             except ValueError:
                 detail = response.text[:500]
+            # The verb and path are what an operator needs, so they go to the
+            # log; the message itself is shown to the user verbatim for a 4xx,
+            # where they would only be noise.
+            logger.warning(
+                "IGSN service returned %s for %s %s: %s",
+                response.status_code,
+                method,
+                path,
+                detail,
+            )
+            if response.status_code in CLIENT_ERROR_STATUSES:
+                message = f"IGSN registry rejected the request: {detail}"
+            else:
+                message = (
+                    f"IGSN service returned {response.status_code} for "
+                    f"{method} {path}: {detail}"
+                )
             raise IGSNServiceError(
-                f"IGSN service returned {response.status_code} for "
-                f"{method} {path}: {detail}",
+                message,
                 status_code=response.status_code,
                 detail=detail,
             )

{girder_jsonforms-2.1.2 → girder_jsonforms-2.1.3}/girder_jsonforms/lib/igsn_vocab.py

@@ -10,6 +10,13 @@ answer briefly. The local settings remain the fallback for local mode and for
 when the service is momentarily unreachable: rejecting a prefix that was valid
 five minutes ago is worse than using a slightly stale vocabulary, since the
 service validates every allocation again anyway.
+
+The registry's vocabulary is global but allocation is tenant-scoped, so the two
+are not the same list. ``GET /vocabularies`` returns every institution the
+registry knows; ``GET /whoami`` says which of them this instance's tenant may
+allocate under. Without the intersection the form happily offers JH to a tenant
+that only holds AB, and the refusal arrives after the metadata has been filled
+in -- readable now, but still a dead end.
 """
 
 import logging
@@ -43,6 +50,41 @@ def invalidate():
         _cache["value"] = None
 
 
+def _permitted(institutions, client):
+    """Narrow the registry's institutions to the ones this tenant may use.
+
+    An empty ``allowed_institutions`` means unrestricted -- the service reads it
+    that way too (``validate_prefix`` only checks when the list is non-empty),
+    and the two must agree or the form offers less than the registry accepts.
+
+    A ``whoami`` that fails is not worth discarding a good vocabulary over: the
+    unfiltered list is what was shown before, and the allocation is validated
+    again at the service anyway.
+    """
+    try:
+        allowed = set((client.whoami() or {}).get("allowed_institutions") or ())
+    except IGSNServiceError:
+        logger.exception("Could not read the tenant from the IGSN service")
+        return institutions
+
+    if not allowed:
+        return institutions
+
+    permitted = {
+        code: value for code, value in institutions.items() if code in allowed
+    }
+    if not permitted:
+        # Nothing the tenant is allowed to use exists in the vocabulary, so the
+        # dropdown will be empty. That is the honest answer -- every prefix
+        # would be refused -- but it is a misconfiguration, not a normal state.
+        logger.warning(
+            "Tenant is allowed institutions %s, none of which the IGSN "
+            "vocabulary defines",
+            sorted(allowed),
+        )
+    return permitted
+
+
 def get_vocabularies():
     """Return ``{"institutions": ..., "materials": ...}``."""
     client = None
@@ -62,7 +104,7 @@ def get_vocabularies():
     try:
         remote = client.vocabularies()
         value = {
-            "institutions": remote["institutions"],
+            "institutions": _permitted(remote["institutions"], client),
             "materials": remote["materials"],
         }
     except (IGSNServiceError, KeyError):

{girder_jsonforms-2.1.2 → girder_jsonforms-2.1.3}/girder_jsonforms/rest/deposition.py

@@ -350,7 +350,11 @@ class Deposition(Resource):
         except pymongo.errors.BulkWriteError as e:
             raise RestException(f"Error creating child depositions: {e.details}")
         except IGSNServiceError as e:
-            raise RestException(f"IGSN registry rejected the batch: {e}")
+            # Re-raised only to name the operation; ``e`` already carries the
+            # registry's reason and the status it should surface as.
+            raise RestException(
+                f"IGSN registry rejected the batch: {e.detail or e}", code=e.code
+            )
         return DepositionModel().load(
             result.inserted_ids[0], user=self.getCurrentUser()
         )

girder_jsonforms-2.1.3/girder_jsonforms/scripts/reconcile_igsn.py

@@ -0,0 +1,118 @@
+"""Pull IGSN registry state onto local depositions.
+
+Publication is asynchronous the whole way down: Girder queues it with the
+registry, the registry queues it with DataCite, and nothing pushes the outcome
+back. ``publish_deposition`` polls for a while after queuing one, which covers
+the ordinary case, but not a record published straight against the registry's
+API, not one that settled while Girder was down, and not one that took longer
+than that poll chain was willing to wait. This is the backstop for those, and
+is meant to run on a timer::
+
+    */15 * * * *  girder-jsonforms-reconcile-igsn --quiet
+
+It runs the ``reconcile`` task in-process -- no broker, no worker -- against
+whatever database the local Girder configuration points at, so it is also the
+quickest way to repair one record by hand.
+
+By default it only looks at depositions that have not settled locally, which is
+what a timer is for and what keeps ``--limit`` meaningful: the scan has no
+ordering, so a flat limit over every deposition would re-check the same first
+thousand for ever. ``--all`` does the full pass, which is the one that also
+reports depositions the registry has never heard of.
+
+Usage::
+
+    girder-jsonforms-reconcile-igsn                       # unsettled records
+    girder-jsonforms-reconcile-igsn --all                 # full audit, to --limit
+    girder-jsonforms-reconcile-igsn --prefix JHAMAL
+    girder-jsonforms-reconcile-igsn --igsn JHAMAL00001 --igsn JHAMAL00002
+    girder-jsonforms-reconcile-igsn --quiet               # summary only on trouble
+
+Exits non-zero when a record could not be read from the registry, so a cron
+run that hit a broken service says so. A deposition the registry has never
+heard of is logged and counted, but is not a failure: it is a finding for a
+human, and reconcile deliberately does not invent the missing record.
+"""
+
+import argparse
+import logging
+import sys
+
+logger = logging.getLogger("girder_jsonforms.reconcile_igsn")
+
+
+def main(argv=None):
+    parser = argparse.ArgumentParser(description=__doc__.splitlines()[0])
+    parser.add_argument(
+        "--prefix",
+        help="Only reconcile depositions whose IGSN starts with this prefix.",
+    )
+    parser.add_argument(
+        "--igsn",
+        action="append",
+        dest="igsns",
+        metavar="IGSN",
+        help="Reconcile one IGSN. Repeatable; overrides --prefix.",
+    )
+    parser.add_argument(
+        "--all",
+        action="store_true",
+        dest="check_all",
+        help=(
+            "Also re-check records that have already settled locally, and "
+            "report any the registry does not have."
+        ),
+    )
+    parser.add_argument(
+        "--limit",
+        type=int,
+        default=1000,
+        help="Maximum number of depositions to check (default: 1000).",
+    )
+    parser.add_argument(
+        "-q",
+        "--quiet",
+        action="store_true",
+        help="Log warnings and errors only -- a quiet cron run stays quiet.",
+    )
+    parser.add_argument("-v", "--verbose", action="store_true", help="Debug logging.")
+    args = parser.parse_args(argv)
+
+    level = logging.INFO
+    if args.quiet:
+        level = logging.WARNING
+    if args.verbose:
+        level = logging.DEBUG
+    logging.basicConfig(level=level, format="%(levelname)s %(message)s")
+
+    # Imported here so ``--help`` works without a configured Girder/DB.
+    from girder_jsonforms.worker_plugin.igsn_registry import reconcile
+
+    summary = reconcile(
+        prefix=args.prefix,
+        igsns=args.igsns,
+        limit=args.limit,
+        pending_only=not args.check_all,
+    )
+    if summary is None:
+        # Local mode. Not an error: an instance that allocates its own IGSNs has
+        # no registry to reconcile against, and a cron entry left behind after
+        # switching modes should not start failing.
+        logger.warning("No IGSN registry is configured; nothing to reconcile.")
+        return 0
+
+    logger.info(
+        "Reconciled: %(updated)s updated, %(unchanged)s unchanged, "
+        "%(missing)s missing, %(errors)s error(s).",
+        summary,
+    )
+    if summary["missing"]:
+        logger.warning(
+            "%s deposition(s) are not in the registry; see the lines above.",
+            summary["missing"],
+        )
+    return 1 if summary["errors"] else 0
+
+
+if __name__ == "__main__":
+    sys.exit(main())

{girder_jsonforms-2.1.2 → girder_jsonforms-2.1.3}/girder_jsonforms/worker_plugin/igsn_registry.py

@@ -6,7 +6,16 @@ metadata with raw ``collection.update_*`` -- ``Deposition.updateRelations``,
 so never reach ``Model.save()``. Each of those has to push explicitly, and doing
 it inline would put an HTTP round-trip in the middle of a form submission.
 
-All three tasks are no-ops when ``jsonforms.igsn_service_url`` is unset, so
+Publication state comes back the same way, by polling. ``POST /records/<igsn>/
+publish`` only queues an attempt on the service, which talks to DataCite later
+and updates its own record; there is no callback. So ``publish_deposition``
+hands the deposition to ``refresh_publication_state``, which checks until the
+record settles. ``reconcile`` is the backstop for everything that never went
+through here -- a record published against the registry's API directly, or one
+that settled while Girder was down -- and is meant to be run on a timer
+(``girder-jsonforms-reconcile-igsn``).
+
+All of these tasks are no-ops when ``jsonforms.igsn_service_url`` is unset, so
 enqueueing them is harmless on an instance still in local mode.
 """
 
@@ -20,6 +29,19 @@ from ..models.deposition import Deposition
 
 logger = logging.getLogger(__name__)
 
+# Statuses the registry will not leave on its own. Anything else means the
+# publication is still in flight, or being retried against DataCite.
+TERMINAL_STATUSES = frozenset({"registered", "findable", "failed", "revoked"})
+
+# Seconds to wait before each successive check after a publication is queued.
+# DataCite usually answers within seconds; the tail covers the service backing
+# off through an outage. The chain gives up after ~18 minutes rather than
+# polling forever -- past that it is reconcile's problem, and a record that has
+# not settled in eighteen minutes needs a human looking at its attempts. Each
+# delay stays well under Redis's default one-hour visibility timeout, beyond
+# which a countdown'd task gets redelivered to a second worker.
+REFRESH_DELAYS = (5, 15, 45, 120, 300, 600)
+
 
 @app.task(queue="local")
 def sync_deposition_metadata(depositionId):
@@ -75,13 +97,99 @@ def publish_deposition(depositionId, target="findable", recurse=False, metadata_
         target,
         result.get("queued"),
     )
-    # Publication is asynchronous on the service side too, so the local mirror
-    # is refreshed by `reconcile` once DataCite has actually accepted it.
+    # Publication is asynchronous on the service side too, and nothing pushes
+    # the outcome back, so the mirror is worthless unless something asks. The
+    # children go in as well: a recursive publish settles each of them
+    # separately.
+    ids = [deposition["_id"]]
+    if recurse:
+        ids += [
+            child["_id"]
+            for child in Deposition().collection.find(
+                {"parentId": deposition["_id"]}, {"_id": 1}
+            )
+        ]
+    schedule_refresh(ids)
     return result
 
 
+def schedule_refresh(deposition_ids, attempt=0):
+    """Queue a status check for depositions whose publication is in flight.
+
+    Separate from the task so the delay schedule lives in one place and the
+    chain has a defined end: past the last delay this logs and stops rather
+    than retrying forever.
+    """
+    ids = [str(_id) for _id in deposition_ids if _id]
+    if not ids:
+        return None
+    if attempt >= len(REFRESH_DELAYS):
+        logger.warning(
+            "%s still not settled after %s checks; leaving it to reconcile",
+            ", ".join(ids),
+            attempt,
+        )
+        return None
+    return refresh_publication_state.apply_async(
+        (ids, attempt),
+        countdown=REFRESH_DELAYS[attempt],
+        # No girder job per check: six of them per publish would bury the job
+        # that actually did something.
+        girder_job_disable=True,
+    )
+
+
+@app.task(queue="local")
+def refresh_publication_state(depositionIds, attempt=0):
+    """Mirror the registry's status onto depositions mid-publication.
+
+    Re-queues itself for whatever is still pending, so a record that takes a
+    DataCite retry or two to settle still lands locally. A record the registry
+    does not have is dropped from the chain, not retried: that is a reconcile
+    finding, and polling will not conjure it.
+    """
+    client = get_client()
+    if client is None:
+        return None
+
+    pending = []
+    summary = {"settled": 0, "pending": 0, "missing": 0, "errors": 0}
+    for depositionId in depositionIds:
+        deposition = Deposition().load(depositionId, force=True)
+        if deposition is None:
+            logger.warning("Deposition %s no longer exists", depositionId)
+            continue
+        try:
+            record = client.get_record(deposition["igsn"])
+        except IGSNServiceError:
+            logger.exception(
+                "Could not read %s from the registry", deposition["igsn"]
+            )
+            summary["errors"] += 1
+            pending.append(depositionId)
+            continue
+
+        if record is None:
+            logger.warning(
+                "%s exists in Girder but not in the IGSN registry",
+                deposition["igsn"],
+            )
+            summary["missing"] += 1
+            continue
+
+        Deposition().apply_registry_state(deposition["_id"], record)
+        if record.get("status") in TERMINAL_STATUSES:
+            summary["settled"] += 1
+        else:
+            summary["pending"] += 1
+            pending.append(depositionId)
+
+    schedule_refresh(pending, attempt + 1)
+    return summary
+
+
 @app.task(queue="local")
-def reconcile(prefix=None, igsns=None, limit=1000):
+def reconcile(prefix=None, igsns=None, limit=1000, pending_only=False):
     """Pull registry state onto local depositions and report divergence.
 
     Two kinds of drift are possible and only one is fixable here:
@@ -91,6 +199,13 @@ def reconcile(prefix=None, igsns=None, limit=1000):
     * missing records -- a deposition exists locally with no registry record at
       all. Reported, not invented: creating one would mean guessing which tenant
       and prefix it belongs to, and a duplicate IGSN is worse than a warning.
+
+    ``pending_only`` skips depositions already sitting on a status the registry
+    will not move off by itself. That is one request per deposition saved on a
+    run that is only chasing publications, and it is what makes ``limit``
+    honest on a large instance: the scan has no ordering, so a flat limit over
+    every deposition would check the same first N for ever. It gives up the
+    missing-record audit in exchange, which wants the full pass.
     """
     client = get_client()
     if client is None:
@@ -102,6 +217,10 @@ def reconcile(prefix=None, igsns=None, limit=1000):
         query["igsn"] = {"$in": list(igsns)}
     elif prefix:
         query["igsn"] = {"$regex": f"^{prefix}"}
+    if pending_only:
+        # Matches a missing serviceStatus too, which is what every deposition
+        # minted before the mirror existed has.
+        query["serviceStatus"] = {"$nin": list(TERMINAL_STATUSES)}
 
     updated = missing = unchanged = errors = 0
     cursor = Deposition().collection.find(

{girder_jsonforms-2.1.2 → girder_jsonforms-2.1.3/girder_jsonforms.egg-info}/PKG-INFO

@@ -1,11 +1,10 @@
 Metadata-Version: 2.4
 Name: girder-jsonforms
-Version: 2.1.2
+Version: 2.1.3
 Summary: Girder plugin adding forms based on JSON-editor
-License: BSD-3-Clause
+License-Expression: BSD-3-Clause
 Classifier: Development Status :: 4 - Beta
 Classifier: Environment :: Web Environment
-Classifier: License :: OSI Approved :: BSD License
 Classifier: Operating System :: POSIX :: Linux
 Classifier: Programming Language :: Python
 Classifier: Programming Language :: Python :: 3
@@ -23,14 +22,7 @@ Requires-Dist: google-auth-oauthlib
 Requires-Dist: jsondiff
 Requires-Dist: pandas
 Requires-Dist: openpyxl
-Dynamic: classifier
-Dynamic: description
-Dynamic: description-content-type
-Dynamic: license
 Dynamic: license-file
-Dynamic: requires-dist
-Dynamic: requires-python
-Dynamic: summary
 
 ### Girder JSONForms Plugin
 

{girder_jsonforms-2.1.2 → girder_jsonforms-2.1.3}/girder_jsonforms.egg-info/SOURCES.txt

@@ -1,8 +1,6 @@
-.gitignore
 LICENSE
 README.md
-setup.py
-.github/workflows/release.yml
+pyproject.toml
 doc/file-uploads.md
 doc/preload.md
 girder_jsonforms/__init__.py
@@ -12,7 +10,6 @@ girder_jsonforms.egg-info/PKG-INFO
 girder_jsonforms.egg-info/SOURCES.txt
 girder_jsonforms.egg-info/dependency_links.txt
 girder_jsonforms.egg-info/entry_points.txt
-girder_jsonforms.egg-info/not-zip-safe
 girder_jsonforms.egg-info/requires.txt
 girder_jsonforms.egg-info/top_level.txt
 girder_jsonforms/lib/__init__.py
@@ -54,6 +51,7 @@ girder_jsonforms/schemas/datacite-v4.5.json
 girder_jsonforms/scripts/__init__.py
 girder_jsonforms/scripts/migrate_metadata_dates.py
 girder_jsonforms/scripts/preview_mail.py
+girder_jsonforms/scripts/reconcile_igsn.py
 girder_jsonforms/web_client/dist/girder-plugin-jsonforms.umd.cjs
 girder_jsonforms/web_client/dist/style.css
 girder_jsonforms/worker_plugin/__init__.py

{girder_jsonforms-2.1.2 → girder_jsonforms-2.1.3}/girder_jsonforms.egg-info/entry_points.txt

@@ -1,6 +1,7 @@
 [console_scripts]
 girder-jsonforms-migrate-metadata-dates = girder_jsonforms.scripts.migrate_metadata_dates:main
 girder-jsonforms-preview-mail = girder_jsonforms.scripts.preview_mail:main
+girder-jsonforms-reconcile-igsn = girder_jsonforms.scripts.reconcile_igsn:main
 
 [girder.plugin]
 jsonforms = girder_jsonforms:JSONFormsPlugin

girder_jsonforms-2.1.3/pyproject.toml

@@ -0,0 +1,75 @@
+[build-system]
+requires = ["setuptools>=77"]
+build-backend = "setuptools.build_meta"
+
+[project]
+name = "girder-jsonforms"
+version = "2.1.3"
+description = "Girder plugin adding forms based on JSON-editor"
+readme = "README.md"
+license = "BSD-3-Clause"
+license-files = ["LICENSE"]
+requires-python = ">=3.10"
+classifiers = [
+    "Development Status :: 4 - Beta",
+    "Environment :: Web Environment",
+    "Operating System :: POSIX :: Linux",
+    "Programming Language :: Python",
+    "Programming Language :: Python :: 3",
+]
+dependencies = [
+    "girder>=5.0.18",
+    "girder-worker>=5.0.18",
+    "girder-wholetale>=2.0.13",
+    "girder-jobs>=5.0.18",
+    "girder-sample-tracker>=2.0.0",  # Required for the sample tracker to test JSONForms
+    "girder-oauth>=5.0.18",
+    "google-api-python-client",
+    "google-auth-oauthlib",
+    "jsondiff",
+    "pandas",
+    "openpyxl",
+]
+
+[project.scripts]
+girder-jsonforms-migrate-metadata-dates = "girder_jsonforms.scripts.migrate_metadata_dates:main"
+girder-jsonforms-preview-mail = "girder_jsonforms.scripts.preview_mail:main"
+girder-jsonforms-reconcile-igsn = "girder_jsonforms.scripts.reconcile_igsn:main"
+
+[project.entry-points."girder.plugin"]
+jsonforms = "girder_jsonforms:JSONFormsPlugin"
+
+[project.entry-points."girder_worker_plugins"]
+jsonforms = "girder_jsonforms.worker_plugin:JSONFormsWorkerPlugin"
+
+[dependency-groups]
+dev = [
+    "pytest",
+    "pytest-cov",
+    "pytest-mock",
+    "pytest-girder>=5.0.0a5.dev0",
+    "pytest-xdist",
+    "responses",
+]
+
+# Pinned to the package itself: a bare find_packages() also walks build/ and
+# .eggs/ when they are lying around.
+[tool.setuptools.packages.find]
+include = ["girder_jsonforms*"]
+
+# MANIFEST.in alone covers the sdist; package-data is what puts these in
+# the wheel, which is how the plugin actually gets installed.
+[tool.setuptools.package-data]
+girder_jsonforms = [
+    "mail_templates/*.mako",
+    "mail_assets/*.png",
+    "schemas/*.json",
+]
+
+[tool.setuptools.data-files]
+schemas = ["girder_jsonforms/schemas/datacite-v4.5.json"]
+
+[tool.pytest.ini_options]
+cache_dir = "build/test/pytest_cache"
+junit_family = "xunit2"
+testpaths = ["girder_jsonforms/tests"]

girder_jsonforms-2.1.2/.github/workflows/release.yml

@@ -1,102 +0,0 @@
-name: Publish Python 🐍 distribution 📦 to PyPI and TestPyPI
-
-on: push
-
-jobs:
-  build:
-    name: Build distribution 📦
-    runs-on: ubuntu-latest
-
-    steps:
-    - uses: actions/checkout@v7
-    - name: Set up Python
-      uses: actions/setup-python@v7
-      with:
-        python-version: "3.x"
-    - name: Set up Node.js
-      uses: actions/setup-node@v7
-      with:
-        node-version: 24
-    - name: Install pypa/build
-      run: >-
-        python3 -m
-        pip install
-        build
-        --user
-    - name: Build js component in package/web_client
-      run: >-
-        cd $(find . -maxdepth 2 -mindepth 2 -type d -name web_client)
-        && npm ci
-        && npm run build
-    - name: Build a binary wheel and a source tarball
-      run: python3 -m build
-    - name: install check-manifest
-      run: >-
-        python3 -m
-        pip install
-        check-manifest
-        --user
-    - name: Check the package manifest
-      run: check-manifest -vvv
-    - name: Store the distribution packages
-      uses: actions/upload-artifact@v7
-      with:
-        name: python-package-distributions
-        path: dist/
-
-  publish-to-pypi:
-    name: >-
-      Publish Python 🐍 distribution 📦 to PyPI
-    if: startsWith(github.ref, 'refs/tags/')  # only publish to PyPI on tag pushes
-    needs:
-    - build
-    runs-on: ubuntu-latest
-    environment:
-      name: pypi
-      url: https://pypi.org/p/girder-jsonforms
-    permissions:
-      id-token: write  # IMPORTANT: mandatory for trusted publishing
-
-    steps:
-    - name: Download all the dists
-      uses: actions/download-artifact@v7
-      with:
-        name: python-package-distributions
-        path: dist/
-    - name: Publish distribution 📦 to PyPI
-      uses: pypa/gh-action-pypi-publish@release/v1
-
-  github-release:
-    name: >-
-      Sign the Python 🐍 distribution 📦 with Sigstore
-      and upload them to GitHub Release
-    needs:
-    - publish-to-pypi
-    runs-on: ubuntu-latest
-
-    permissions:
-      contents: write  # IMPORTANT: mandatory for making GitHub Releases
-      id-token: write  # IMPORTANT: mandatory for sigstore
-
-    steps:
-    - name: Download all the dists
-      uses: actions/download-artifact@v7
-      with:
-        name: python-package-distributions
-        path: dist/
-    - name: Sign the dists with Sigstore
-      uses: sigstore/gh-action-sigstore-python@v3.5.0
-      with:
-        inputs: >-
-          ./dist/*.tar.gz
-          ./dist/*.whl
-    - name: Upload artifact signatures to GitHub Release
-      env:
-        GITHUB_TOKEN: ${{ github.token }}
-      # Upload to GitHub Release using the `gh` CLI.
-      # `dist/` contains the built packages, and the
-      # sigstore-produced signatures and certificates.
-      run: >-
-        gh release upload
-        '${{ github.ref_name }}' dist/**
-        --repo '${{ github.repository }}'

girder_jsonforms-2.1.2/.gitignore

@@ -1,136 +0,0 @@
-Testing
-
-*ala*
-
-# Byte-compiled / optimized / DLL files
-__pycache__/
-*.py[cod]
-*$py.class
-
-# C extensions
-*.so
-
-# Distribution / packaging
-.Python
-build/
-develop-eggs/
-dist/
-downloads/
-eggs/
-.eggs/
-parts/
-sdist/
-var/
-wheels/
-pip-wheel-metadata/
-share/python-wheels/
-*.egg-info/
-.installed.cfg
-*.egg
-MANIFEST
-
-# PyInstaller
-#  Usually these files are written by a python script from a template
-#  before PyInstaller builds the exe, so as to inject date/other infos into it.
-*.manifest
-*.spec
-
-# Installer logs
-pip-log.txt
-pip-delete-this-directory.txt
-
-# Unit test / coverage reports
-htmlcov/
-.tox/
-.nox/
-.coverage
-.coverage.*
-.cache
-nosetests.xml
-coverage.xml
-*.cover
-*.py,cover
-.hypothesis/
-.pytest_cache/
-
-# Translations
-*.mo
-*.pot
-
-# Django stuff:
-*.log
-local_settings.py
-db.sqlite3
-db.sqlite3-journal
-
-# Flask stuff:
-instance/
-.webassets-cache
-
-# Scrapy stuff:
-.scrapy
-
-# Sphinx documentation
-docs/_build/
-
-# PyBuilder
-target/
-
-# Jupyter Notebook
-.ipynb_checkpoints
-
-# IPython
-profile_default/
-ipython_config.py
-
-# pyenv
-.python-version
-
-# pipenv
-#   According to pypa/pipenv#598, it is recommended to include Pipfile.lock in version control.
-#   However, in case of collaboration, if having platform-specific dependencies or dependencies
-#   having no cross-platform support, pipenv may install dependencies that don't work, or not
-#   install all needed dependencies.
-#Pipfile.lock
-
-# PEP 582; used by e.g. github.com/David-OConnor/pyflow
-__pypackages__/
-
-# Celery stuff
-celerybeat-schedule
-celerybeat.pid
-
-# SageMath parsed files
-*.sage.py
-
-# Environments
-.env
-.venv
-env/
-venv/
-ENV/
-env.bak/
-venv.bak/
-
-# Spyder project settings
-.spyderproject
-.spyproject
-
-# Rope project settings
-.ropeproject
-
-# mkdocs documentation
-/site
-
-# mypy
-.mypy_cache/
-.dmypy.json
-dmypy.json
-
-# Pyre type checker
-.pyre/
-
-node_modules/
-
-# Local email template previews
-mail-preview/

girder_jsonforms-2.1.2/girder_jsonforms.egg-info/not-zip-safe

@@ -1 +0,0 @@
-

girder_jsonforms-2.1.2/setup.py

@@ -1,67 +0,0 @@
-from pathlib import Path
-
-from setuptools import find_packages, setup
-
-this_directory = Path(__file__).parent
-long_description = (this_directory / "README.md").read_text()
-
-girder_version = "5.0.18"
-
-setup(
-    name="girder-jsonforms",
-    long_description=long_description,
-    long_description_content_type="text/markdown",
-    version="2.1.2",
-    description="Girder plugin adding forms based on JSON-editor",
-    packages=find_packages(),
-    data_files=[
-        ("schemas", ["girder_jsonforms/schemas/datacite-v4.5.json"]),
-    ],
-    # MANIFEST.in alone covers the sdist; package_data is what puts these in
-    # the wheel, which is how the plugin actually gets installed.
-    package_data={
-        "girder_jsonforms": [
-            "mail_templates/*.mako",
-            "mail_assets/*.png",
-            "schemas/*.json",
-        ],
-    },
-    include_package_data=True,
-    license="BSD-3-Clause",
-    classifiers=[
-        "Development Status :: 4 - Beta",
-        "Environment :: Web Environment",
-        "License :: OSI Approved :: BSD License",
-        "Operating System :: POSIX :: Linux",
-        "Programming Language :: Python",
-        "Programming Language :: Python :: 3",
-    ],
-    python_requires=">=3.10",
-    setup_requires=["setuptools-git"],
-    install_requires=[
-        f"girder>={girder_version}",
-        f"girder-worker>={girder_version}",
-        "girder-wholetale>=2.0.13",
-        f"girder-jobs>={girder_version}",
-        "girder-sample-tracker>=2.0.0",  # Required for the sample tracker to test JSONForms
-        f"girder-oauth>={girder_version}",
-        "google-api-python-client",
-        "google-auth-oauthlib",
-        "jsondiff",
-        "pandas",
-        "openpyxl",
-    ],
-    entry_points={
-        "console_scripts": [
-            "girder-jsonforms-migrate-metadata-dates = "
-            "girder_jsonforms.scripts.migrate_metadata_dates:main",
-            "girder-jsonforms-preview-mail = "
-            "girder_jsonforms.scripts.preview_mail:main",
-        ],
-        "girder.plugin": ["jsonforms = girder_jsonforms:JSONFormsPlugin"],
-        "girder_worker_plugins": [
-            "jsonforms = girder_jsonforms.worker_plugin:JSONFormsWorkerPlugin"
-        ],
-    },
-    zip_safe=False,
-)