hermes-pubky 0.1.0__tar.gz

hermes_pubky-0.1.0/.github/workflows/ci.yml

@@ -0,0 +1,125 @@
+name: CI
+
+on:
+  push:
+    branches: [main]
+  pull_request:
+  workflow_dispatch:
+
+concurrency:
+  group: ci-${{ github.ref }}
+  cancel-in-progress: true
+
+env:
+  CARGO_TERM_COLOR: always
+  RUSTFLAGS: -D warnings
+
+jobs:
+  rust:
+    name: Rust (fmt, clippy, unit tests)
+    runs-on: ubuntu-latest
+    timeout-minutes: 45
+    steps:
+      - uses: actions/checkout@v5
+      - uses: dtolnay/rust-toolchain@stable
+        with:
+          components: rustfmt, clippy
+      - uses: Swatinem/rust-cache@v2
+      - uses: actions/setup-python@v6
+        with:
+          python-version: "3.11"
+      - name: Check formatting
+        run: cargo fmt --all -- --check
+      - name: Clippy
+        run: cargo clippy --all-targets -- -D warnings
+      - name: Unit tests
+        run: cargo test --lib
+
+  e2e:
+    name: Rust e2e (Pubky v0.11 testnet)
+    runs-on: ubuntu-latest
+    timeout-minutes: 45
+    services:
+      postgres:
+        image: postgres:18-alpine
+        env:
+          POSTGRES_USER: test_user
+          POSTGRES_PASSWORD: test_pass
+          POSTGRES_DB: postgres
+        ports: ["5432:5432"]
+        options: >-
+          --health-cmd pg_isready
+          --health-interval 10s
+          --health-timeout 5s
+          --health-retries 5
+    env:
+      # The homeserver under test needs a real Postgres; this mirrors the
+      # connection string pubky-core's own CI uses.
+      TEST_PUBKY_CONNECTION_STRING: postgres://test_user:test_pass@localhost:5432/postgres?pubky-test=true
+    steps:
+      - uses: actions/checkout@v5
+      - uses: dtolnay/rust-toolchain@stable
+      - uses: Swatinem/rust-cache@v2
+      - uses: actions/setup-python@v6
+        with:
+          python-version: "3.11"
+      - name: End-to-end tests
+        # Single-threaded: the static testnet binds fixed, well-known ports.
+        run: cargo test --test e2e -- --ignored --test-threads=1 --nocapture
+
+  python:
+    name: Python ${{ matrix.python-version }}
+    runs-on: ubuntu-latest
+    timeout-minutes: 45
+    strategy:
+      fail-fast: false
+      matrix:
+        python-version: ["3.11", "3.12", "3.13"]
+    steps:
+      - uses: actions/checkout@v5
+      - uses: dtolnay/rust-toolchain@stable
+      - uses: Swatinem/rust-cache@v2
+      - uses: astral-sh/setup-uv@v7
+      - uses: actions/setup-python@v6
+        with:
+          python-version: ${{ matrix.python-version }}
+      - name: Install build and test tooling
+        run: uv pip install --system maturin pytest pyyaml
+      - name: Build and install the wheel
+        # Installing the built wheel (rather than `maturin develop`, which
+        # needs a virtualenv) means the tests exercise the shipped artifact.
+        run: |
+          maturin build --release --out dist
+          uv pip install --system --no-index --find-links dist hermes-pubky
+      - name: Smoke-test the installed wheel
+        run: python scripts/smoke_test.py
+      - name: Run the test suite
+        run: pytest -q
+
+  hermes-integration:
+    name: Hermes integration
+    runs-on: ubuntu-latest
+    timeout-minutes: 45
+    steps:
+      - uses: actions/checkout@v5
+      - uses: dtolnay/rust-toolchain@stable
+      - uses: Swatinem/rust-cache@v2
+      - uses: astral-sh/setup-uv@v7
+      - uses: actions/setup-python@v6
+        with:
+          python-version: "3.11"
+      - name: Build a wheel
+        run: |
+          uv pip install --system maturin
+          maturin build --release --out dist
+      - name: Install into a clean Hermes environment
+        run: |
+          uv venv --python 3.11 /tmp/hermes-env
+          uv pip install --python /tmp/hermes-env/bin/python "hermes-agent==${HERMES_VERSION}"
+          uv pip install --python /tmp/hermes-env/bin/python dist/*.whl
+        env:
+          HERMES_VERSION: "0.19.0"
+      - name: Verify discovery, injection and CLI registration
+        run: /tmp/hermes-env/bin/python scripts/check_hermes_integration.py
+        env:
+          HERMES_HOME: /tmp/hermes-home

hermes_pubky-0.1.0/.github/workflows/release.yml

@@ -0,0 +1,151 @@
+name: Release
+
+on:
+  push:
+    tags: ["v*"]
+  workflow_dispatch:
+
+permissions:
+  contents: read
+
+env:
+  CARGO_TERM_COLOR: always
+
+jobs:
+  # macOS gets a single universal2 wheel rather than one per architecture.
+  # GitHub retired the last x86_64 macOS image (macos-13), so Intel wheels can
+  # only be produced by cross-compiling from an arm64 runner — and a universal2
+  # build is the version of that we can actually execute here, since the arm64
+  # runner loads its own slice during the smoke test.
+  wheels-macos:
+    name: Wheel (macos-universal2)
+    runs-on: macos-15
+    timeout-minutes: 45
+    steps:
+      - uses: actions/checkout@v5
+      - uses: actions/setup-python@v6
+        with:
+          python-version: "3.11"
+      - uses: dtolnay/rust-toolchain@stable
+        with:
+          targets: aarch64-apple-darwin,x86_64-apple-darwin
+      - uses: Swatinem/rust-cache@v2
+      - name: Build universal2 wheel
+        run: |
+          python -m pip install --upgrade pip maturin
+          maturin build --release --target universal2-apple-darwin --out dist
+      - name: Verify both architectures are present
+        run: |
+          python -m zipfile -e dist/*.whl /tmp/whl
+          lipo -archs /tmp/whl/hermes_pubky/_native.abi3.so | tee /tmp/archs
+          grep -q x86_64 /tmp/archs && grep -q arm64 /tmp/archs
+      - name: Smoke-test the wheel
+        run: |
+          python -m pip install --find-links dist --no-index hermes-pubky
+          python scripts/smoke_test.py
+      - uses: actions/upload-artifact@v4
+        with:
+          name: wheels-macos-universal2
+          path: dist/*.whl
+
+  wheels-linux:
+    name: Wheel (${{ matrix.name }})
+    runs-on: ${{ matrix.runner }}
+    timeout-minutes: 60
+    strategy:
+      fail-fast: false
+      matrix:
+        include:
+          - name: manylinux-x86_64
+            runner: ubuntu-latest
+            target: x86_64-unknown-linux-gnu
+          - name: manylinux-aarch64
+            runner: ubuntu-24.04-arm
+            target: aarch64-unknown-linux-gnu
+    steps:
+      - uses: actions/checkout@v5
+      - uses: actions/setup-python@v6
+        with:
+          python-version: "3.11"
+      - name: Build wheel
+        uses: PyO3/maturin-action@v1
+        with:
+          target: ${{ matrix.target }}
+          args: --release --out dist --compatibility manylinux2014
+          manylinux: auto
+          sccache: "true"
+      - name: Smoke-test the wheel
+        run: |
+          python -m pip install --upgrade pip
+          python -m pip install --find-links dist --no-index hermes-pubky
+          python scripts/smoke_test.py
+      - uses: actions/upload-artifact@v4
+        with:
+          name: wheels-${{ matrix.name }}
+          path: dist/*.whl
+
+  sdist:
+    name: Source distribution
+    runs-on: ubuntu-latest
+    timeout-minutes: 20
+    steps:
+      - uses: actions/checkout@v5
+      - uses: PyO3/maturin-action@v1
+        with:
+          command: sdist
+          args: --out dist
+      - uses: actions/upload-artifact@v4
+        with:
+          name: wheels-sdist
+          path: dist/*.tar.gz
+
+  publish:
+    name: Publish to PyPI
+    needs: [wheels-macos, wheels-linux, sdist]
+    runs-on: ubuntu-latest
+    timeout-minutes: 20
+    environment:
+      name: pypi
+      url: https://pypi.org/p/hermes-pubky
+    permissions:
+      # Trusted publishing — no API token is stored in this repository.
+      id-token: write
+    steps:
+      - uses: actions/download-artifact@v5
+        with:
+          pattern: wheels-*
+          merge-multiple: true
+          path: dist
+      - name: List artifacts
+        run: ls -la dist/
+      - name: Publish
+        uses: pypa/gh-action-pypi-publish@release/v1
+        with:
+          packages-dir: dist/
+
+  github-release:
+    name: GitHub release
+    needs: [publish]
+    runs-on: ubuntu-latest
+    timeout-minutes: 20
+    permissions:
+      contents: write
+    steps:
+      - uses: actions/download-artifact@v5
+        with:
+          pattern: wheels-*
+          merge-multiple: true
+          path: dist
+      - name: Generate checksums
+        run: |
+          cd dist
+          sha256sum * > SHA256SUMS
+          cat SHA256SUMS
+      - name: Attach artifacts to the release
+        uses: softprops/action-gh-release@v2
+        with:
+          files: |
+            dist/*.whl
+            dist/*.tar.gz
+            dist/SHA256SUMS
+          generate_release_notes: true

hermes_pubky-0.1.0/.gitignore

@@ -0,0 +1,9 @@
+/target
+/dist
+/.venv
+__pycache__/
+*.py[cod]
+*.so
+*.egg-info/
+.pytest_cache/
+.DS_Store