lean-runtime 2.9.0__tar.gz → 2.9.1__tar.gz

{lean_runtime-2.9.0 → lean_runtime-2.9.1}/CHANGELOG.md

@@ -2,6 +2,13 @@
 
 ## Unreleased
 
+## 2.9.1 - 2026-08-15
+
+- Make GHCR credential discovery a single bounded GitHub CLI status read so a
+  transient identity lookup cannot silently downgrade an authenticated account
+  to anonymous; add a validated `lean-runtime.publication/v1` envelope behind
+  `publish environment --json`.
+
 ## 2.9.0 - 2026-08-15
 
 - Make environment publication fail closed: verify registry push access before

{lean_runtime-2.9.0/lean_runtime.egg-info → lean_runtime-2.9.1}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: lean-runtime
-Version: 2.9.0
+Version: 2.9.1
 Summary: Run Lean 4 proofs from Python or standalone files
 Author: Alejandro Radisic
 License-Expression: Apache-2.0

{lean_runtime-2.9.0 → lean_runtime-2.9.1}/docs/cli.md

@@ -78,6 +78,7 @@ lean-runtime copy save research-stack --output research-stack.lean-environment
 lean-runtime --home /tmp/fresh copy open research-stack.lean-environment --name research-stack
 lean-runtime publish environment environment.lock.json --publish-to ghcr.io/owner/lean-environments
 lean-runtime publish environment --publish-to ghcr.io/owner/lean-environments --check-access
+lean-runtime publish environment --publish-to ghcr.io/owner/lean-environments --check-access --json
 lean-runtime check research-stack Main.lean --json
 lean-runtime inspect research-stack --packages
 lean-runtime environments

{lean_runtime-2.9.0 → lean_runtime-2.9.1}/docs/portable-copies.md

@@ -121,6 +121,9 @@ lean-runtime publish environment \
   --check-access
 ```
 
+Add `--json` for the versioned `lean-runtime.publication/v1` success or failure
+envelope. The process exit code retains the classification below.
+
 For GHCR, credentials are selected in this order: the
 `LEAN_RUNTIME_REGISTRY_USERNAME` / `LEAN_RUNTIME_REGISTRY_PASSWORD` pair, an
 authenticated GitHub CLI session, then anonymous access. The access report names

{lean_runtime-2.9.0 → lean_runtime-2.9.1}/lean_runtime/cli.py

@@ -55,6 +55,7 @@ def _schema_for(command: str) -> str:
         "matrix": "lean-runtime.matrix/v1",
         "clean": "lean-runtime.cleanup/v1",
         "inspect": "lean-runtime.inspect/v1",
+        "build-and-publish": "lean-runtime.publication/v1",
     }.get(command, "lean-runtime.execution/v1")
 
 
@@ -440,6 +441,9 @@ Run `lean-runtime COMMAND --help` for examples and options.""",
     publish_environment.add_argument("--accelerate", action="store_true")
     publish_environment.add_argument("--sign", action="store_true")
     publish_environment.add_argument("--attest", action="store_true")
+    publish_environment.add_argument(
+        "--json", action="store_true", help="emit a versioned JSON envelope"
+    )
     publish_environment.add_argument(
         "--check-access",
         action="store_true",
@@ -526,6 +530,7 @@ Run `lean-runtime COMMAND --help` for examples and options.""",
     push.add_argument(
         "--attest", action="store_true", help="publish a signed source/probe attestation"
     )
+    push.add_argument("--json", action="store_true", help="emit a versioned JSON envelope")
     push.add_argument(
         "--check-access",
         action="store_true",
@@ -1187,7 +1192,11 @@ def main(argv: list[str] | None = None) -> int:
         if args.command == "build-and-publish":
             access = runtime.check_publication_access(args.publish_to)
             if args.check_access:
-                _json(access.to_dict())
+                _json(
+                    envelope(_schema_for(args.command), ok=True, data=access.to_dict())
+                    if args.json
+                    else access.to_dict()
+                )
                 return 0
             if args.lock is None:
                 raise ValueError("publish environment requires LOCK unless --check-access is used")
@@ -1208,7 +1217,11 @@ def main(argv: list[str] | None = None) -> int:
             publication["consumer_command"] = (
                 f"lean-runtime --library {args.publish_to} download {args.lock}"
             )
-            _json(publication)
+            _json(
+                envelope(_schema_for(args.command), ok=True, data=publication)
+                if args.json
+                else publication
+            )
             return 0
         if args.command == "finalize-publication":
             descriptors = []
@@ -1686,7 +1699,7 @@ def main(argv: list[str] | None = None) -> int:
                 envelope(
                     _schema_for(args.command),
                     ok=False,
-                    data={"publication": exc.to_dict()},
+                    data=exc.to_dict(),
                     errors=[error("publication_failed", str(exc), details=exc.to_dict())],
                 )
             )

{lean_runtime-2.9.0 → lean_runtime-2.9.1}/lean_runtime/oci.py

@@ -88,32 +88,49 @@ class RegistryCredential:
             return cls(username, password, "environment")
         if repository.registry == "ghcr.io" and shutil.which("gh") is not None:
             try:
-                token = subprocess.run(
-                    ("gh", "auth", "token", "--hostname", "github.com"),
-                    text=True,
-                    capture_output=True,
-                    timeout=10,
-                    check=False,
-                )
-                identity = subprocess.run(
-                    ("gh", "api", "user", "--jq", ".login"),
+                status = subprocess.run(
+                    (
+                        "gh",
+                        "auth",
+                        "status",
+                        "--active",
+                        "--hostname",
+                        "github.com",
+                        "--json",
+                        "hosts",
+                        "--show-token",
+                    ),
                     text=True,
                     capture_output=True,
-                    timeout=10,
+                    timeout=5,
                     check=False,
                 )
             except (OSError, subprocess.TimeoutExpired):
-                pass
-            else:
-                selected_token = token.stdout.strip()
-                selected_username = identity.stdout.strip()
-                if (
-                    token.returncode == 0
-                    and identity.returncode == 0
-                    and selected_token
-                    and selected_username
-                ):
-                    return cls(selected_username, selected_token, "GitHub CLI")
+                return cls(None, None, "GitHub CLI")
+            try:
+                payload = json.loads(status.stdout)
+                accounts = payload.get("hosts", {}).get("github.com", [])
+                active = next(
+                    (
+                        account
+                        for account in accounts
+                        if isinstance(account, dict) and account.get("active") is True
+                    ),
+                    None,
+                )
+            except (AttributeError, json.JSONDecodeError):
+                return cls(None, None, "GitHub CLI")
+            if isinstance(active, dict):
+                selected_username = active.get("login")
+                selected_token = active.get("token")
+                if isinstance(selected_username, str) and selected_username:
+                    return cls(
+                        selected_username,
+                        selected_token
+                        if isinstance(selected_token, str) and selected_token
+                        else None,
+                        "GitHub CLI",
+                    )
         return cls(None, None, "anonymous")
 
 

{lean_runtime-2.9.0 → lean_runtime-2.9.1}/lean_runtime/schema_resources.py

@@ -13,6 +13,7 @@ SCHEMA_NAMES = frozenset(
         "inspect-v1.schema.json",
         "matrix-v1.schema.json",
         "profile-v1.schema.json",
+        "publication-v1.schema.json",
         "verify-v1.schema.json",
     }
 )

{lean_runtime-2.9.0 → lean_runtime-2.9.1/lean_runtime.egg-info}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: lean-runtime
-Version: 2.9.0
+Version: 2.9.1
 Summary: Run Lean 4 proofs from Python or standalone files
 Author: Alejandro Radisic
 License-Expression: Apache-2.0

{lean_runtime-2.9.0 → lean_runtime-2.9.1}/lean_runtime.egg-info/SOURCES.txt

@@ -124,6 +124,7 @@ schemas/execution-v1.schema.json
 schemas/inspect-v1.schema.json
 schemas/matrix-v1.schema.json
 schemas/profile-v1.schema.json
+schemas/publication-v1.schema.json
 schemas/verify-v1.schema.json
 scripts/announcement_gate.py
 scripts/lake_cache_gate.py

{lean_runtime-2.9.0 → lean_runtime-2.9.1}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "setuptools.build_meta"
 
 [project]
 name = "lean-runtime"
-version = "2.9.0"
+version = "2.9.1"
 description = "Run Lean 4 proofs from Python or standalone files"
 readme = "README.md"
 requires-python = ">=3.10"

lean_runtime-2.9.1/schemas/publication-v1.schema.json

@@ -0,0 +1,70 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://lean-runtime.dev/schemas/publication-v1.schema.json",
+  "type": "object",
+  "required": ["schema", "ok", "data", "warnings", "errors"],
+  "additionalProperties": false,
+  "properties": {
+    "schema": {"const": "lean-runtime.publication/v1"},
+    "ok": {"type": "boolean"},
+    "data": {
+      "oneOf": [
+        {"$ref": "#/$defs/access"},
+        {"$ref": "#/$defs/publication"},
+        {"$ref": "#/$defs/failure"},
+        {"type": "object", "maxProperties": 0}
+      ]
+    },
+    "warnings": {"$ref": "https://lean-runtime.dev/schemas/execution-v1.schema.json#/$defs/issues"},
+    "errors": {"$ref": "https://lean-runtime.dev/schemas/execution-v1.schema.json#/$defs/issues"}
+  },
+  "$defs": {
+    "access": {
+      "type": "object",
+      "required": ["registry", "username", "credential_source", "push_verified"],
+      "additionalProperties": false,
+      "properties": {
+        "registry": {"type": "string"},
+        "username": {"type": ["string", "null"]},
+        "credential_source": {"type": "string"},
+        "push_verified": {"type": "boolean"}
+      }
+    },
+    "publication": {
+      "type": "object",
+      "required": ["library", "exact_environment_id", "environment_id", "computer_copy_id", "publication_id", "uploaded_files", "total_blob_bytes", "uploaded_bytes", "reused_bytes", "reuse_percent", "computer_record", "consumer_command"],
+      "additionalProperties": false,
+      "properties": {
+        "library": {"type": "string"},
+        "exact_environment_id": {"type": "string"},
+        "environment_id": {"type": "string"},
+        "computer_copy_id": {"type": "string"},
+        "publication_id": {"type": ["string", "null"]},
+        "uploaded_files": {"type": "integer", "minimum": 0},
+        "total_blob_bytes": {"type": "integer", "minimum": 0},
+        "uploaded_bytes": {"type": "integer", "minimum": 0},
+        "reused_bytes": {"type": "integer", "minimum": 0},
+        "reuse_percent": {"type": "number", "minimum": 0, "maximum": 100},
+        "computer_record": {"type": "object"},
+        "consumer_command": {"type": "string"}
+      }
+    },
+    "failure": {
+      "type": "object",
+      "required": ["phase", "registry", "status_code", "retryable", "published", "partial", "credential_source", "username", "hint", "message"],
+      "additionalProperties": false,
+      "properties": {
+        "phase": {"type": "string"},
+        "registry": {"type": "string"},
+        "status_code": {"type": ["integer", "null"]},
+        "retryable": {"type": "boolean"},
+        "published": {"type": "boolean"},
+        "partial": {"type": "boolean"},
+        "credential_source": {"type": "string"},
+        "username": {"type": ["string", "null"]},
+        "hint": {"type": ["string", "null"]},
+        "message": {"type": "string"}
+      }
+    }
+  }
+}

{lean_runtime-2.9.0 → lean_runtime-2.9.1}/tests/test_bundles.py

@@ -901,6 +901,58 @@ def test_oci_publisher_denies_access_before_exporting(tmp_path: Path, monkeypatc
     assert "secret" not in json.dumps(events[-1].to_dict())
 
 
+def test_ghcr_credential_discovery_reads_identity_and_token_once(monkeypatch) -> None:
+    monkeypatch.delenv("LEAN_RUNTIME_REGISTRY_USERNAME", raising=False)
+    monkeypatch.delenv("LEAN_RUNTIME_REGISTRY_PASSWORD", raising=False)
+    monkeypatch.setattr(shutil, "which", lambda _name: "/usr/bin/gh")
+    calls: list[tuple[str, ...]] = []
+
+    def status(command: tuple[str, ...], **_kwargs: object) -> subprocess.CompletedProcess[str]:
+        calls.append(command)
+        payload = {
+            "hosts": {
+                "github.com": [
+                    {
+                        "active": True,
+                        "state": "success",
+                        "login": "owner",
+                        "token": "secret",
+                    }
+                ]
+            }
+        }
+        return subprocess.CompletedProcess(command, 0, json.dumps(payload), "")
+
+    monkeypatch.setattr(subprocess, "run", status)
+    credential = RegistryCredential.discover(OCIRepository.parse("oci://ghcr.io/owner/cache"))
+
+    assert credential == RegistryCredential("owner", "secret", "GitHub CLI")
+    assert len(calls) == 1
+    assert calls[0][:3] == ("gh", "auth", "status")
+    assert "api" not in calls[0]
+
+
+def test_ghcr_credential_discovery_keeps_known_identity_when_token_is_unavailable(
+    monkeypatch,
+) -> None:
+    monkeypatch.delenv("LEAN_RUNTIME_REGISTRY_USERNAME", raising=False)
+    monkeypatch.delenv("LEAN_RUNTIME_REGISTRY_PASSWORD", raising=False)
+    monkeypatch.setattr(shutil, "which", lambda _name: "/usr/bin/gh")
+    payload = {
+        "hosts": {
+            "github.com": [{"active": True, "state": "failed", "login": "owner", "token": ""}]
+        }
+    }
+    monkeypatch.setattr(
+        subprocess,
+        "run",
+        lambda command, **_kwargs: subprocess.CompletedProcess(command, 0, json.dumps(payload), ""),
+    )
+
+    credential = RegistryCredential.discover(OCIRepository.parse("oci://ghcr.io/owner/cache"))
+    assert credential == RegistryCredential("owner", None, "GitHub CLI")
+
+
 def test_oci_publisher_classifies_retryable_preflight_failure(tmp_path: Path) -> None:
     producer, _environment_id, _lock = _published_runtime(tmp_path / "producer")
     publisher = OCIEnvironmentPublisher(

{lean_runtime-2.9.0 → lean_runtime-2.9.1}/tests/test_cli.py

@@ -318,6 +318,64 @@ def test_publish_check_access_needs_no_lock(monkeypatch, capsys) -> None:
     assert output["credential_source"] == "GitHub CLI"
 
 
+def test_publish_failure_json_is_a_versioned_envelope(monkeypatch, capsys) -> None:
+    def denied(_self, _library: str) -> PublicationAccess:
+        raise PublicationError(
+            "registry denied push access",
+            phase="access_preflight",
+            registry="ghcr.io/owner/cache",
+            status_code=403,
+            credential_source="GitHub CLI",
+            username="owner",
+            hint="refresh scopes",
+        )
+
+    monkeypatch.setattr("lean_runtime.cli.Runtime.check_publication_access", denied)
+    result = main(
+        [
+            "publish",
+            "environment",
+            "--publish-to",
+            "oci://ghcr.io/owner/cache",
+            "--check-access",
+            "--json",
+        ]
+    )
+
+    assert result == 3
+    output = json.loads(capsys.readouterr().out)
+    assert output["schema"] == "lean-runtime.publication/v1"
+    assert output["ok"] is False
+    assert output["data"]["published"] is False
+    assert output["data"]["status_code"] == 403
+    assert output["errors"][0]["code"] == "publication_failed"
+
+
+def test_publish_access_json_is_a_versioned_envelope(monkeypatch, capsys) -> None:
+    monkeypatch.setattr(
+        "lean_runtime.cli.Runtime.check_publication_access",
+        lambda _self, _library: PublicationAccess(
+            "ghcr.io/owner/cache", "owner", "GitHub CLI", True
+        ),
+    )
+    result = main(
+        [
+            "publish",
+            "environment",
+            "--publish-to",
+            "oci://ghcr.io/owner/cache",
+            "--check-access",
+            "--json",
+        ]
+    )
+
+    assert result == 0
+    output = json.loads(capsys.readouterr().out)
+    assert output["schema"] == "lean-runtime.publication/v1"
+    assert output["ok"] is True
+    assert output["data"]["push_verified"] is True
+
+
 def test_verbose_materialization_failure_includes_tool_output(capsys) -> None:
     failure = MaterializationError(
         "environment build failed",

{lean_runtime-2.9.0 → lean_runtime-2.9.1}/tests/test_schema_resources.py

@@ -15,6 +15,7 @@ def test_schema_resource_names_are_closed() -> None:
         "inspect-v1.schema.json",
         "matrix-v1.schema.json",
         "profile-v1.schema.json",
+        "publication-v1.schema.json",
         "verify-v1.schema.json",
     } == lean.SCHEMA_NAMES
     with pytest.raises(ValueError, match="unknown Lean Runtime schema"):

{lean_runtime-2.9.0 → lean_runtime-2.9.1}/tests/test_schemas.py

@@ -42,6 +42,7 @@ def test_every_v1_schema_compiles_eagerly() -> None:
         "inspect-v1.schema",
         "matrix-v1.schema",
         "profile-v1.schema",
+        "publication-v1.schema",
         "verify-v1.schema",
     }
     for path in paths:
@@ -78,6 +79,7 @@ def test_every_v1_schema_accepts_its_closed_error_envelope() -> None:
         "inspect": "lean-runtime.inspect/v1",
         "matrix": "lean-runtime.matrix/v1",
         "profile": "lean-runtime.profile/v1",
+        "publication": "lean-runtime.publication/v1",
         "verify": "lean-runtime.verify/v1",
     }
     for name, identifier in schemas.items():
@@ -121,6 +123,62 @@ def test_inspect_and_gc_success_fixtures_are_closed() -> None:
     _validator("cleanup-v1.schema.json").validate(gc)
 
 
+def test_publication_access_and_failure_fixtures_match_v1_schema() -> None:
+    validator = _validator("publication-v1.schema.json")
+    validator.validate(
+        envelope(
+            "lean-runtime.publication/v1",
+            ok=True,
+            data={
+                "registry": "oci://ghcr.io/owner/cache",
+                "username": "owner",
+                "credential_source": "GitHub CLI",
+                "push_verified": True,
+            },
+        )
+    )
+    validator.validate(
+        envelope(
+            "lean-runtime.publication/v1",
+            ok=True,
+            data={
+                "library": "oci://ghcr.io/owner/cache",
+                "exact_environment_id": "lock_abc",
+                "environment_id": "env_abc",
+                "computer_copy_id": "sha256:" + "a" * 64,
+                "publication_id": "sha256:" + "b" * 64,
+                "uploaded_files": 1,
+                "total_blob_bytes": 10,
+                "uploaded_bytes": 4,
+                "reused_bytes": 6,
+                "reuse_percent": 60.0,
+                "computer_record": {},
+                "consumer_command": "lean-runtime download environment.lock.json",
+            },
+        )
+    )
+    failure = {
+        "phase": "access_preflight",
+        "registry": "oci://ghcr.io/owner/cache",
+        "status_code": 403,
+        "retryable": False,
+        "published": False,
+        "partial": False,
+        "credential_source": "GitHub CLI",
+        "username": "owner",
+        "hint": "refresh scopes",
+        "message": "registry denied push access",
+    }
+    validator.validate(
+        envelope(
+            "lean-runtime.publication/v1",
+            ok=False,
+            data=failure,
+            errors=[error("publication_failed", failure["message"], details=failure)],
+        )
+    )
+
+
 def test_timing_phase_vocabulary_and_duration_are_bounded() -> None:
     with pytest.raises(ValueError, match="unsupported timing phase"):
         PhaseTiming("other", 1)  # type: ignore[arg-type]