half-orm-dev 1.0.0a18__tar.gz → 1.0.0a20__tar.gz

{half_orm_dev-1.0.0a18/half_orm_dev.egg-info → half_orm_dev-1.0.0a20}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: half_orm_dev
-Version: 1.0.0a18
+Version: 1.0.0a20
 Summary: half_orm development Framework.
 Author-email: Joël Maïzi <joel.maizi@collorg.org>
 License-Expression: GPL-3.0-or-later

{half_orm_dev-1.0.0a18 → half_orm_dev-1.0.0a20}/half_orm_dev/cli/main.py

@@ -4,6 +4,8 @@ Main CLI module - Creates and configures the CLI group
 
 import click
 import functools
+import os
+import subprocess
 import sys
 from half_orm_dev.repo import Repo, OutdatedHalfORMDevError
 from half_orm import utils
@@ -39,15 +41,16 @@ class Hop:
         but will be blocked by the decorator at execution time.
         """
         if self.needs_hop_upgrade:
-            # Version downgrade detected - return a minimal set of commands
-            # Commands will be blocked by decorator, but we need them in the list
-            # so Click doesn't show "No such command" error
-            return ['check', 'migrate']
+            return []  # handled at invocation time in the dev group callback
 
         if not self.repo_checked:
             # Outside hop repository - commands for project initialization
             return ['init', 'clone']
 
+        # PRODUCTION ENVIRONMENT — read-only, no migrations, no dev commands
+        if self.__repo.database.production:
+            return ['update', 'upgrade', 'bootstrap']
+
         if self.__repo.needs_migration():
             return ['migrate']
 
@@ -56,14 +59,9 @@ class Hop:
             # Sync-only mode (no metadata)
             return ['sync-package', 'check']
 
-        # Development mode (metadata present)
-        if self.__repo.database.production:
-            # PRODUCTION ENVIRONMENT - Release deployment only
-            return ['update', 'upgrade', 'bootstrap']
-        else:
-            # DEVELOPMENT ENVIRONMENT - Patch development
-            return ['patch', 'release', 'check', 'bootstrap', 'set-git-origin',
-                    'revert-migration']
+        # DEVELOPMENT ENVIRONMENT - Patch development
+        return ['patch', 'release', 'check', 'bootstrap', 'set-git-origin',
+                'revert-migration']
 
     @property
     def repo_checked(self):
@@ -137,9 +135,28 @@ def create_cli_group():
 
     @click.group(cls=VersionCheckGroup, invoke_without_command=True)
     @click.pass_context
-    @check_version_before_invoke
     def dev(ctx):
         """halfORM development tools - Git-centric patch management and database synchronization"""
+        if hop.needs_hop_upgrade:
+            error = hop.hop_upgrade_error
+            required = error.required_version
+            installed = error.installed_version
+            click.echo(f"\n  Ce repo requiers half-orm-dev {required} "
+                       f"(installed : {installed}).")
+            click.echo(f"  Installing the required version...")
+            try:
+                subprocess.run(
+                    [sys.executable, '-m', 'pip', 'install', f'half-orm-dev=={required}'],
+                    check=True,
+                )
+            except subprocess.CalledProcessError:
+                click.echo(f"\n  Installation failed.", err=True)
+                click.echo(f"  Run manually : pip install half-orm-dev=={required}", err=True)
+                sys.exit(1)
+            click.echo(f"  ✓ half-orm-dev {required} installed. Restarting...\n")
+            os.execv(sys.argv[0], sys.argv)
+            return
+
         if ctx.invoked_subcommand is None:
             # Show repo state when no subcommand is provided
             if hop.repo_checked:

{half_orm_dev-1.0.0a18 → half_orm_dev-1.0.0a20}/half_orm_dev/hgit.py

@@ -367,7 +367,12 @@ class HGit:
             # Local git now knows about all remote tags
         """
         origin = self.__git_repo.remote('origin')
-        origin.fetch(tags=True)
+        marker = Path(self.__git_repo.working_dir) / '.hop' / '.fetching'
+        try:
+            marker.touch()
+            origin.fetch(tags=True)
+        finally:
+            marker.unlink(missing_ok=True)
 
     def tag_exists(self, tag_name: str) -> bool:
         """
@@ -443,7 +448,12 @@ class HGit:
             # Stale remote refs (deleted branches on remote) are removed
         """
         origin = self.__git_repo.remote('origin')
-        origin.fetch(prune=True)
+        marker = Path(self.__git_repo.working_dir) / '.hop' / '.fetching'
+        try:
+            marker.touch()
+            origin.fetch(prune=True)
+        finally:
+            marker.unlink(missing_ok=True)
 
     def delete_local_branch(self, branch_name: str) -> None:
         """

{half_orm_dev-1.0.0a18 → half_orm_dev-1.0.0a20}/half_orm_dev/patch_manager.py

@@ -18,6 +18,7 @@ from typing import List, Dict, Optional, Tuple, Any
 from dataclasses import dataclass
 import click
 from git.exc import GitCommandError
+from packaging.version import Version, InvalidVersion
 
 from half_orm import utils
 from half_orm_dev import modules
@@ -2146,9 +2147,6 @@ class PatchManager:
            - Commit the updated schema
         4. Return to original branch
         """
-        from packaging.version import Version
-        from half_orm_dev.release_file import ReleaseFile
-
         original_branch = self._repo.hgit.branch
         current_ver = Version(version)
 
@@ -2197,9 +2195,6 @@ class PatchManager:
         Args:
             version: Current release version that was just updated
         """
-        from packaging.version import Version
-        from half_orm_dev.release_file import ReleaseFile
-
         if not hasattr(self, '_pending_higher_releases') or not self._pending_higher_releases:
             return
 

{half_orm_dev-1.0.0a18 → half_orm_dev-1.0.0a20}/half_orm_dev/release_manager.py

@@ -13,16 +13,17 @@ import subprocess
 
 from pathlib import Path
 from typing import Optional, Tuple, List, Dict, Literal
-from dataclasses import dataclass
 from datetime import datetime, timezone
 
 import click
 
 from git.exc import GitCommandError
+from packaging.version import Version, InvalidVersion
 from half_orm_dev.decorators import with_dynamic_branch_lock
 from half_orm import utils
 from half_orm_dev.release_file import ReleaseFile
 
+
 class ReleaseManagerError(Exception):
     """Base exception for ReleaseManager operations."""
     pass
@@ -38,69 +39,6 @@ class ReleaseFileError(ReleaseManagerError):
     pass
 
 
-@dataclass
-class Version:
-    """Semantic version with stage information."""
-    major: int
-    minor: int
-    patch: int
-    stage: Optional[str] = None  # None, "stage", "rc1", "rc2", "hotfix1", etc.
-
-    def __str__(self) -> str:
-        """String representation of version."""
-        base = f"{self.major}.{self.minor}.{self.patch}"
-        if self.stage:
-            return f"{base}-{self.stage}"
-        return base
-
-    def __lt__(self, other: 'Version') -> bool:
-        """Compare versions for sorting."""
-        # Compare base version first
-        if (self.major, self.minor, self.patch) != (other.major, other.minor, other.patch):
-            return (self.major, self.minor, self.patch) < (other.major, other.minor, other.patch)
-
-        # If base versions equal, compare stages
-        # Priority: production (None) > rc > stage > hotfix
-        stage_priority = {
-            None: 4,           # Production (highest)
-            'rc': 3,           # Release candidate
-            'stage': 2,        # Development stage
-            'hotfix': 1        # Hotfix (lowest)
-        }
-
-        # Extract stage type (rc1 → rc, hotfix2 → hotfix)
-        self_stage_type = self._get_stage_type()
-        other_stage_type = other._get_stage_type()
-
-        self_priority = stage_priority.get(self_stage_type, 0)
-        other_priority = stage_priority.get(other_stage_type, 0)
-
-        # If different stage types, compare by priority
-        if self_priority != other_priority:
-            return self_priority < other_priority
-
-        # Same stage type - compare stage strings for RC/hotfix numbers
-        # rc2 > rc1, hotfix2 > hotfix1
-        if self.stage and other.stage:
-            return self.stage < other.stage
-
-        return False
-
-    def _get_stage_type(self) -> Optional[str]:
-        """Extract stage type from stage string."""
-        if not self.stage:
-            return None
-
-        if self.stage == 'stage':
-            return 'stage'
-        elif self.stage.startswith('rc'):
-            return 'rc'
-        elif self.stage.startswith('hotfix'):
-            return 'hotfix'
-
-        return None
-
-
 class ReleaseManager:
     """
     Manages release files and version lifecycle.
@@ -474,21 +412,16 @@ class ReleaseManager:
         if not release_files:
             return None
 
-        # Parse all valid versions
         versions = []
-        for release_file in release_files:
+        for f in release_files:
             try:
-                version = self.parse_version_from_filename(release_file.name)
-                versions.append(version)
-            except ReleaseVersionError:
-                # Ignore files with invalid format
+                versions.append(Version(f.stem))
+            except InvalidVersion:
                 continue
 
         if not versions:
             return None
 
-        # Sort versions and return latest
-        # Version.__lt__ handles sorting with stage priority
         return max(versions)
 
 
@@ -559,83 +492,11 @@ class ReleaseManager:
         elif increment_type == 'minor':
             return f"{current_version.major}.{current_version.minor + 1}.0"
         elif increment_type == 'patch':
-            return f"{current_version.major}.{current_version.minor}.{current_version.patch + 1}"
+            return f"{current_version.major}.{current_version.minor}.{current_version.micro + 1}"
 
         # Should never reach here due to validation above
         raise ReleaseVersionError(f"Unexpected increment type: {increment_type}")
 
-    @classmethod
-    def parse_version_from_filename(cls, filename: str) -> Version:
-        """
-        Parse version from release filename.
-
-        Extracts semantic version and stage from release filename.
-
-        Supported formats:
-        - X.Y.Z.txt → Version(X, Y, Z, stage=None)
-        - X.Y.Z-stage.txt → Version(X, Y, Z, stage="stage")
-        - X.Y.Z-rc1.txt → Version(X, Y, Z, stage="rc1")
-        - X.Y.Z-hotfix1.txt → Version(X, Y, Z, stage="hotfix1")
-
-        Args:
-            filename: Release filename (e.g., "1.3.5-rc2.txt")
-
-        Returns:
-            Version: Parsed version object
-
-        Raises:
-            ReleaseVersionError: If filename format invalid
-
-        Examples:
-            ver = release_mgr.parse_version_from_filename("1.3.5.txt")
-            # Version(1, 3, 5, stage=None)
-
-            ver = release_mgr.parse_version_from_filename("1.4.0-stage.txt")
-            # Version(1, 4, 0, stage="stage")
-
-            ver = release_mgr.parse_version_from_filename("1.3.5-rc2.txt")
-            # Version(1, 3, 5, stage="rc2")
-        """
-        # Extract just filename if path provided
-        filename = Path(filename).name
-
-        # Validate not empty
-        if not filename:
-            raise ReleaseVersionError("Invalid format: empty filename")
-
-        # Must end with .txt
-        if not filename.endswith('.txt'):
-            raise ReleaseVersionError(f"Invalid format: missing .txt extension in '{filename}'")
-
-        # Remove .txt extension
-        version_str = filename[:-4]
-
-        # Pattern: X.Y.Z or X.Y.Z-stage or X.Y.Z-rc1 or X.Y.Z-hotfix1
-        pattern = r'^(\d+)\.(\d+)\.(\d+)(?:-(stage|rc\d+|hotfix\d+))?$'
-
-        match = re.match(pattern, version_str)
-
-        if not match:
-            raise ReleaseVersionError(
-                f"Invalid format: '{filename}' does not match X.Y.Z[-stage].txt pattern"
-            )
-
-        major, minor, patch, stage = match.groups()
-
-        # Convert to integers
-        try:
-            major = int(major)
-            minor = int(minor)
-            patch = int(patch)
-        except ValueError:
-            raise ReleaseVersionError(f"Invalid format: non-numeric version components in '{filename}'")
-
-        # Validate non-negative
-        if major < 0 or minor < 0 or patch < 0:
-            raise ReleaseVersionError(f"Invalid format: negative version numbers in '{filename}'")
-
-        return Version(major, minor, patch, stage)
-
     def get_next_release_version(self) -> Optional[str]:
         """
         Détermine LA prochaine release à déployer.
@@ -646,8 +507,7 @@ class ReleaseManager:
         production_str = self._get_production_version()
 
         for level in ['patch', 'minor', 'major']:
-            next_version = self.calculate_next_version(
-                self.parse_version_from_filename(f"{production_str}.txt"), level)
+            next_version = self.calculate_next_version(Version(production_str), level)
 
             # Cherche RC ou patches TOML pour cette version
             rc_pattern = f"{next_version}-rc*.txt"
@@ -662,12 +522,12 @@ class ReleaseManager:
         """
         Liste tous les fichiers <label> pour une version, triés par numéro.
 
-        Returns:
-            Liste triée (ex: ["1.3.6-rc1.txt", "1.3.6-rc2.txt"])
+        RC uses hyphen separator (1.3.6-rc1.txt).
+        Post-releases use dot separator (1.3.6.post1.txt).
         """
-        pattern = f"{version}-{label}*.txt"
-        reg_ex = rf'-{label}(\d+)\.txt$'
-        label_pattern = re.compile(reg_ex)
+        sep = '.' if label == 'post' else '-'
+        pattern = f"{version}{sep}{label}*.txt"
+        label_pattern = re.compile(rf'[.-]{label}(\d+)\.txt$')
         files = list(self._releases_dir.glob(pattern))
 
         return sorted(files, key=lambda f: int(re.search(label_pattern, f.name).group(1)))
@@ -806,7 +666,7 @@ class ReleaseManager:
         else:
             # Production: read from hotfix snapshot if it exists
             # This handles the case where we're applying a hotfix release
-            hotfix_files = sorted(self._releases_dir.glob(f"{version}-hotfix*.txt"))
+            hotfix_files = sorted(self._releases_dir.glob(f"{version}.post*.txt"))
             if hotfix_files:
                 # Apply the latest hotfix
                 stage_patches = self.read_release_patches(hotfix_files[-1].name)
@@ -892,7 +752,7 @@ class ReleaseManager:
         all_patches.extend(self.read_release_patches(base_file))
 
         # 2. Hotfix patches in order
-        hotfix_files = sorted(self._releases_dir.glob(f"{version}-hotfix*.txt"))
+        hotfix_files = sorted(self._releases_dir.glob(f"{version}.post*.txt"))
         for hotfix_file in hotfix_files:
             all_patches.extend(self.read_release_patches(hotfix_file.name))
 
@@ -1372,6 +1232,52 @@ class ReleaseManager:
                 # Best effort - don't fail if checkout back fails
                 pass
 
+    def ensure_ho_current(self) -> bool:
+        """
+        Set up ho-current branch for production servers if not already done.
+
+        Creates ho-current from the current production version's immutable tag
+        and checks it out. Local-only, never pushed to origin.
+
+        Returns:
+            True if ho-current was created and checked out, False otherwise.
+
+        Raises:
+            ReleaseManagerError: If the required version tag is not found locally.
+        """
+        if not (
+            self._repo.production
+            and self._repo.hgit.branch == 'ho-prod'
+            and not self._repo.hgit.branch_exists('ho-current')
+        ):
+            return False
+
+        try:
+            current_version = self._repo.database.last_release_s
+        except Exception as e:
+            raise ReleaseManagerError(
+                f"Cannot read current production version from database: {e}"
+            )
+
+        current_tag = f'v{current_version}'
+        tag_exists = any(
+            t.name == current_tag
+            for t in self._repo.hgit._HGit__git_repo.tags
+        )
+        if not tag_exists:
+            raise ReleaseManagerError(
+                f"Cannot set up ho-current: tag {current_tag} not found locally.\n"
+                f"Run 'hop update' to fetch tags first."
+            )
+
+        self._repo.hgit.create_branch_from_tag('ho-current', current_tag)
+        self._repo.hgit._HGit__git_repo.heads['ho-current'].checkout()
+        click.echo(
+            f"  ℹ ho-current branch created from {current_tag} (local only).\n"
+            f"    Production servers use ho-current instead of ho-prod."
+        )
+        return True
+
     def update_production(self) -> dict:
         """
         Fetch tags and list available releases for production upgrade (read-only).
@@ -1430,30 +1336,8 @@ class ReleaseManager:
                 f"Cannot read current production version from database: {e}"
             )
 
-        # Migration: production servers that still track ho-prod instead of
-        # ho-current. Create ho-current from the current version's immutable tag
-        # and switch to it — local-only, no push to origin.
-        if (
-            self._repo.production
-            and self._repo.hgit.branch == 'ho-prod'
-            and not self._repo.hgit.branch_exists('ho-current')
-        ):
-            current_tag = f'v{current_version}'
-            tag_exists = any(
-                t.name == current_tag
-                for t in self._repo.hgit._HGit__git_repo.tags
-            )
-            if not tag_exists:
-                raise ReleaseManagerError(
-                    f"Cannot migrate to ho-current: tag {current_tag} not found locally.\n"
-                    f"Run 'hop update' again after ensuring tags are fetched."
-                )
-            self._repo.hgit.create_branch_from_tag('ho-current', current_tag)
-            self._repo.hgit._HGit__git_repo.heads['ho-current'].checkout()
-            click.echo(
-                f"  ℹ Migrated to ho-current (created from {current_tag}, local only).\n"
-                f"    Production servers should now use ho-current instead of ho-prod."
-            )
+        # Migration: production servers that still track ho-prod instead of ho-current.
+        self.ensure_ho_current()
 
         # 3. Build list of available releases with details
         available_releases = []
@@ -1483,7 +1367,7 @@ class ReleaseManager:
                     patches = [line.strip() for line in content.split('\n') if line.strip()]
 
             # Only include releases newer than current version
-            if self._version_is_newer(version, current_version):
+            if Version(version) > Version(current_version):
                 available_releases.append({
                     'tag': tag,
                     'version': version,
@@ -1550,43 +1434,19 @@ class ReleaseManager:
         except Exception as e:
             raise ReleaseManagerError(f"Failed to read tags from repository: {e}")
 
-        # Filter for release tags (v*.*.*) with optional -rc or -hotfix suffix
-        release_pattern = re.compile(r'^v\d+\.\d+\.\d+(-rc\d+|-hotfix\d+)?$')
+        # Filter for release tags: v1.3.5, v1.3.5-rc1, v1.3.5.post1
+        release_pattern = re.compile(r'^v\d+\.\d+\.\d+(-rc\d+|\.post\d+)?$')
         release_tags = []
 
         for tag in all_tags:
             tag_name = tag.name
             if release_pattern.match(tag_name):
-                # Filter RC tags unless explicitly allowed
                 if '-rc' in tag_name and not allow_rc:
                     continue
                 release_tags.append(tag_name)
 
-        # Sort tags by version (semantic versioning)
-        def version_key(tag_name):
-            """Extract sortable version tuple from tag name."""
-            # Remove 'v' prefix
-            version_str = tag_name[1:]
-
-            # Split version and suffix
-            if '-rc' in version_str:
-                base_ver, rc_suffix = version_str.split('-rc')
-                rc_num = int(rc_suffix)
-                suffix_weight = (1, rc_num)  # RC comes before production
-            elif '-hotfix' in version_str:
-                base_ver, hotfix_suffix = version_str.split('-hotfix')
-                hotfix_num = int(hotfix_suffix)
-                suffix_weight = (2, hotfix_num)  # Hotfix comes after production
-            else:
-                base_ver = version_str
-                suffix_weight = (1.5, 0)  # Production between RC and hotfix
-
-            # Parse base version
-            major, minor, patch = map(int, base_ver.split('.'))
-
-            return (major, minor, patch, suffix_weight)
-
-        release_tags.sort(key=version_key)
+        # Sort using packaging.version (PEP 440 ordering)
+        release_tags.sort(key=lambda t: Version(t[1:]))
 
         return release_tags
 
@@ -1621,77 +1481,31 @@ class ReleaseManager:
             path = mgr._calculate_upgrade_path("1.4.0", "1.4.0")
             # → []
         """
-        # Parse versions
-        current_version = self.parse_version_from_filename(f"{current}.txt")
-        target_version = self.parse_version_from_filename(f"{target}.txt")
+        current_version = Version(current)
+        target_version = Version(target)
 
-        # If same version, no upgrade needed
         if current == target:
             return []
 
-        # Get all available release tags (production only)
         available_tags = self._get_available_release_tags(allow_rc=False)
 
-        # Extract versions from tags and parse them
         available_versions = []
         for tag in available_tags:
-            # Remove 'v' prefix: v1.3.6 → 1.3.6
             version_str = tag[1:] if tag.startswith('v') else tag
-
-            # Skip if not a valid production version format
-            if not re.match(r'^\d+\.\d+\.\d+$', version_str):
-                continue
-
             try:
-                version = self.parse_version_from_filename(f"{version_str}.txt")
-                available_versions.append((version_str, version))
-            except (ReleaseManagerError, ValueError):
+                available_versions.append((version_str, Version(version_str)))
+            except InvalidVersion:
                 continue
 
-        # Sort versions
-        available_versions.sort(key=lambda x: (x[1].major, x[1].minor, x[1].patch))
+        available_versions.sort(key=lambda x: x[1])
 
-        # Build sequential path from current to target
         path = []
         for version_str, version in available_versions:
-            # Skip versions <= current
-            if (version.major, version.minor, version.patch) <= \
-               (current_version.major, current_version.minor, current_version.patch):
-                continue
-
-            # Add versions <= target
-            if (version.major, version.minor, version.patch) <= \
-               (target_version.major, target_version.minor, target_version.patch):
+            if current_version < version <= target_version:
                 path.append(version_str)
 
         return path
 
-    def _version_is_newer(self, version1: str, version2: str) -> bool:
-        """
-        Compare two version strings to check if version1 is newer than version2.
-
-        Args:
-            version1: First version (e.g., "1.3.6", "1.3.6-rc1")
-            version2: Second version (e.g., "1.3.5")
-
-        Returns:
-            bool: True if version1 > version2
-
-        Examples:
-            _version_is_newer("1.3.6", "1.3.5")  # → True
-            _version_is_newer("1.3.5", "1.3.6")  # → False
-            _version_is_newer("1.3.6-rc1", "1.3.5")  # → True
-        """
-        # Extract base versions (remove suffix)
-        base1 = version1.split('-')[0]
-        base2 = version2.split('-')[0]
-
-        # Parse versions
-        parts1 = tuple(map(int, base1.split('.')))
-        parts2 = tuple(map(int, base2.split('.')))
-
-        return parts1 > parts2
-
     def upgrade_production(
         self,
         to_version: Optional[str] = None,
@@ -2431,8 +2245,6 @@ class ReleaseManager:
         Returns:
             Version string of base release, or None if should use prod schema
         """
-        from packaging.version import Version
-
         new_ver = Version(new_version)
         model_dir = Path(self._repo.model_dir)
 
@@ -3114,7 +2926,7 @@ class ReleaseManager:
             return 1
 
         last_file = files[-1].name
-        reg_ex = rf'-{label}(\d+)\.txt'
+        reg_ex = rf'[.-]{label}(\d+)\.txt'
         match = re.search(reg_ex, last_file)
         if match:
             last_num = int(match.group(1))
@@ -3303,26 +3115,26 @@ class ReleaseManager:
                         f"  3. OR move to another release (edit patches file manually)"
                     )
 
-            # 3. Determine next hotfix number
-            hotfix_num = self._get_latest_label_number(version, 'hotfix')
-            hotfix_tag = f"v{version}-hotfix{hotfix_num}"
+            # 3. Determine next post-release number
+            post_num = self._get_latest_label_number(version, 'post')
+            hotfix_tag = f"v{version}.post{post_num}"
 
             # 4. Switch to ho-prod and merge
             self._repo.hgit.checkout("ho-prod")
 
             # Merge ho-release/X.Y.Z into ho-prod
-            merge_msg = f"[release] Merge hotfix %{version}-hotfix{hotfix_num}"
+            merge_msg = f"[release] Merge hotfix %{version}.post{post_num}"
             self._repo.hgit.merge(current_branch, message=merge_msg)
 
-            # 5. Create hotfix snapshot file from staged patches
+            # 5. Create post-release snapshot file from staged patches
             toml_file = self._releases_dir / f"{version}-patches.toml"
-            hotfix_file = self._releases_dir / f"{version}-hotfix{hotfix_num}.txt"
+            hotfix_file = self._releases_dir / f"{version}.post{post_num}.txt"
 
             if release_file.exists():
                 # Get staged patches from TOML file
                 staged_patches = release_file.get_patches(status="staged")
 
-                # Write snapshot to hotfix TXT file (production format)
+                # Write snapshot to post-release TXT file (production format)
                 hotfix_file.write_text("\n".join(staged_patches) + "\n" if staged_patches else "", encoding='utf-8')
                 # Delete TOML patches file (no longer needed)
                 if toml_file.exists():
@@ -3333,12 +3145,12 @@ class ReleaseManager:
 
             # 7. Commit release file changes and sync to active branches
             sync_result = self._repo.commit_and_sync_to_active_branches(
-                message=f"[HOP] Finalize hotfix %{version}-hotfix{hotfix_num} release files",
-                reason=f"hotfix {version}-hotfix{hotfix_num}"
+                message=f"[HOP] Finalize hotfix %{version}.post{post_num} release files",
+                reason=f"hotfix {version}.post{post_num}"
             )
 
-            # 8. Create hotfix tag on ho-prod
-            self._repo.hgit.create_tag(hotfix_tag, f"Hotfix release %{version}-hotfix{hotfix_num}")
+            # 8. Create post-release tag on ho-prod
+            self._repo.hgit.create_tag(hotfix_tag, f"Hotfix release %{version}.post{post_num}")
             self._repo.hgit.push_tag(hotfix_tag)
 
             deleted_branches = []

{half_orm_dev-1.0.0a18 → half_orm_dev-1.0.0a20}/half_orm_dev/repo.py

@@ -484,6 +484,14 @@ class Repo:
             'errors': []
         }
 
+        if self.production:
+            raise RepoError(
+                "Repository migration is not available on a production server.\n\n"
+                "  Production servers are read-only: no commits or pushes to origin.\n"
+                "  Run 'hop migrate' on a development machine first, then deploy."
+            )
+
+        self._migration_running = True
         try:
             # Create migration manager
             migration_mgr = MigrationManager(self)
@@ -584,18 +592,17 @@ class Repo:
                             print(f"  You are now on ho-prod", file=sys.stderr)
 
         except RepoError:
-            # Re-raise RepoError (for branch check)
             raise
         except MigrationManagerError as e:
-            # Log migration errors
             error_msg = f"Migration failed: {e}"
             result['errors'].append(error_msg)
             raise RepoError(error_msg) from e
         except Exception as e:
-            # Catch any unexpected errors
             error_msg = f"Unexpected migration error: {e}"
             result['errors'].append(error_msg)
             raise RepoError(error_msg) from e
+        finally:
+            self._migration_running = False
 
         return result
 
@@ -918,9 +925,11 @@ class Repo:
             installed_version = hop_version()
             required_version = self.__config.hop_version
 
-            # Validate version compatibility
-            if not _is_version_compatible(installed_version, required_version):
-                raise OutdatedHalfORMDevError(required_version, installed_version)
+            # Validate version compatibility — strict: installed must equal required.
+            # Skip during migration: the config is being updated, versions are transiently mismatched.
+            if not getattr(self, '_migration_running', False):
+                if self.compare_versions(installed_version, required_version) != 0:
+                    raise OutdatedHalfORMDevError(required_version, installed_version)
 
         except RepoError:
             # Re-raise RepoError (dirty working directory)
@@ -928,16 +937,14 @@ class Repo:
         except OutdatedHalfORMDevError:
             # Re-raise version error (repository was updated to newer version)
             raise
-        except Exception as e:
-            # If we're in detached HEAD or any error, try to return to original state
-            # and continue (offline mode, no remote, etc.)
+        except (GitCommandError, IndexError, KeyError, ValueError) as e:
+            # Git/network errors (offline mode, missing branch, no remote, etc.)
+            # Restore branch if needed and continue — these are non-fatal.
             try:
                 if current_branch and git_repo:
                     git_repo.heads[current_branch].checkout()
             except (GitCommandError, IndexError, TypeError):
                 pass
-            # Log but don't fail (offline mode, no remote, etc.)
-            # Only critical errors (dirty repo, version mismatch) should block
 
     def commit_and_sync_to_active_branches(
         self,
@@ -1450,6 +1457,17 @@ class Repo:
                 if action == 'installed' or overall_action == 'skipped':
                     overall_action = action
 
+        # Ensure production-specific entries are in .gitignore (idempotent).
+        gitignore_path = Path(self.__base_dir) / '.gitignore'
+        if gitignore_path.exists():
+            content = gitignore_path.read_text()
+            lines = content.splitlines()
+            missing = [e for e in ('.hop/production', '.hop/.fetching')
+                       if e not in lines]
+            if missing:
+                with gitignore_path.open('a') as f:
+                    f.write('\n' + '\n'.join(missing) + '\n')
+
         return {
             'installed': any_installed,
             'action': overall_action
@@ -2934,9 +2952,14 @@ Each script is executed only once unless `--force` is used.
             )
 
         # Step 3: Clone repository
+        # Production clones fetch ho-prod only — dev branches are irrelevant on production.
+        clone_cmd = ["git", "clone"]
+        if connection_options.get('production'):
+            clone_cmd += ["--single-branch", "--branch", "ho-prod"]
+        clone_cmd += [git_origin, str(dest_path)]
         try:
             result = subprocess.run(
-                ["git", "clone", git_origin, str(dest_path)],
+                clone_cmd,
                 capture_output=True,
                 text=True,
                 check=True,
@@ -3009,5 +3032,16 @@ Each script is executed only once unless `--force` is used.
                 f"Failed to restore database from schema: {e}"
             ) from e
 
-        # Step 9: Install Git hooks
+        # Step 9: Set up ho-current for production servers
+        if connection_options.get('production'):
+            # Mark this clone as production (read-only): blocks git commit/push via hooks.
+            production_marker = Path(dest_path) / '.hop' / 'production'
+            production_marker.parent.mkdir(parents=True, exist_ok=True)
+            production_marker.touch()
+            try:
+                repo.release_manager.ensure_ho_current()
+            except Exception as e:
+                print(f"  ⚠️  Warning: Could not set up ho-current: {e}", file=sys.stderr)
+
+        # Step 10: Install Git hooks
         repo.install_git_hooks()

{half_orm_dev-1.0.0a18 → half_orm_dev-1.0.0a20}/half_orm_dev/templates/.gitignore

@@ -14,4 +14,6 @@ Backups
 __pycache__
 .hop/alt_config
 .hop/local_config
-.hop/backups/
+.hop/backups/
+.hop/production
+.hop/.fetching

{half_orm_dev-1.0.0a18 → half_orm_dev-1.0.0a20}/half_orm_dev/templates/git-hooks/pre-commit

@@ -1,11 +1,23 @@
 #!/usr/bin/env bash
 
 # Half-ORM pre-commit hook
+# 0. Blocks commits on production servers (read-only)
 # 1. Checks if current ho-* branch exists on remote origin
 # 2. Protects ho-prod branch from direct commits
 # 3. Optionally calls pre-commit-custom if it exists
 # Generated by half_orm_dev
 
+# =============================================================================
+# PRODUCTION SERVER GUARD
+# =============================================================================
+REPO_ROOT="$(git rev-parse --show-toplevel 2>/dev/null)"
+if [ -f "${REPO_ROOT}/.hop/production" ]; then
+    echo "ERROR: git commit is not allowed on a production server." >&2
+    echo "       This repository is read-only (production mode)." >&2
+    echo "       Changes are deployed via 'hop upgrade', never committed directly." >&2
+    exit 1
+fi
+
 # Get current branch
 CURRENT_BRANCH=$(git symbolic-ref --short HEAD 2>/dev/null)
 

half_orm_dev-1.0.0a20/half_orm_dev/templates/git-hooks/pre-push

@@ -0,0 +1,18 @@
+#!/bin/sh
+
+# Half-ORM pre-push hook
+# Blocks git push on production servers (read-only mode).
+# Generated by half_orm_dev
+
+# =============================================================================
+# PRODUCTION SERVER GUARD
+# =============================================================================
+REPO_ROOT="$(git rev-parse --show-toplevel 2>/dev/null)"
+if [ -f "${REPO_ROOT}/.hop/production" ]; then
+    echo "ERROR: git push is not allowed on a production server." >&2
+    echo "       This repository is read-only (production mode)." >&2
+    echo "       Changes are deployed via 'hop upgrade', never pushed directly." >&2
+    exit 1
+fi
+
+exit 0

half_orm_dev-1.0.0a20/half_orm_dev/templates/git-hooks/reference-transaction

@@ -0,0 +1,34 @@
+#!/bin/sh
+
+# Half-ORM reference-transaction hook
+# Blocks tag creation on production servers (read-only mode).
+# Generated by half_orm_dev
+
+# Only act on the "prepared" phase (before the transaction is committed).
+if [ "$1" != "prepared" ]; then
+    exit 0
+fi
+
+REPO_ROOT="$(git rev-parse --show-toplevel 2>/dev/null)"
+if [ ! -f "${REPO_ROOT}/.hop/production" ]; then
+    exit 0
+fi
+
+# Allow tag updates that originate from an internal hop fetch operation.
+# hop sets .hop/.fetching before calling git fetch and removes it after.
+if [ -f "${REPO_ROOT}/.hop/.fetching" ]; then
+    exit 0
+fi
+
+# Block any local tag creation.
+while read -r _ _ ref_name; do
+    case "$ref_name" in
+        refs/tags/*)
+            echo "ERROR: git tag is not allowed on a production server." >&2
+            echo "       This repository is read-only (production mode)." >&2
+            exit 1
+            ;;
+    esac
+done
+
+exit 0

half_orm_dev-1.0.0a20/half_orm_dev/version.txt

@@ -0,0 +1 @@
+1.0.0-a20

{half_orm_dev-1.0.0a18 → half_orm_dev-1.0.0a20/half_orm_dev.egg-info}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: half_orm_dev
-Version: 1.0.0a18
+Version: 1.0.0a20
 Summary: half_orm development Framework.
 Author-email: Joël Maïzi <joel.maizi@collorg.org>
 License-Expression: GPL-3.0-or-later

{half_orm_dev-1.0.0a18 → half_orm_dev-1.0.0a20}/half_orm_dev.egg-info/SOURCES.txt

@@ -72,4 +72,6 @@ half_orm_dev/templates/relation_test
 half_orm_dev/templates/sql_adapter
 half_orm_dev/templates/warning
 half_orm_dev/templates/git-hooks/pre-commit
-half_orm_dev/templates/git-hooks/prepare-commit-msg
+half_orm_dev/templates/git-hooks/pre-push
+half_orm_dev/templates/git-hooks/prepare-commit-msg
+half_orm_dev/templates/git-hooks/reference-transaction

half_orm_dev-1.0.0a18/half_orm_dev/version.txt

@@ -1 +0,0 @@
-1.0.0-a18