lib-detect-testenv 3.0.4__tar.gz → 3.0.6__tar.gz

{lib_detect_testenv-3.0.4 → lib_detect_testenv-3.0.6}/.gitignore

@@ -47,7 +47,8 @@ tmp_*
 # *.py[cod]: catches .pyc, .pyo, .pyd
 __pycache__/
 *.py[cod]
-*$py.class     # other compiled artifacts
+# other compiled artifacts
+*$py.class
 
 # pytest, coverage, MyPy, Hypothesis
 .pytest_cache/
@@ -73,12 +74,15 @@ coverage.xml
 # source/package builds
 build/
 dist/
-*.egg-info/    # metadata for pip installs
+# metadata for pip installs
+*.egg-info/
 *.egg
 *.whl
 pip-wheel-metadata/
-*.manifest     # PyInstaller metadata
-*.spec         # PyInstaller spec files
+# PyInstaller metadata
+*.manifest
+# PyInstaller spec files
+*.spec
 
 # Eggs, parts, wheels, sdist, etc.
 develop-eggs/
@@ -178,7 +182,6 @@ result
 # Optional lockfiles (for alternative managers)
 poetry.lock
 pdm.lock
-uv.lock
 
 # Local, per-developer settings (Claude Code etc.) - never commit
 *.local.json

{lib_detect_testenv-3.0.4 → lib_detect_testenv-3.0.6}/CHANGELOG.md

@@ -7,6 +7,40 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## [Unreleased]
 
+## [3.0.6] 2026-10-15 16:35:25
+
+### Fixed
+
+- The source distribution ships only the package, its tests, its docs, `README.md`, `LICENSE`,
+  `CHANGELOG.md` and `pyproject.toml` (an include list). Earlier sdists also carried every other
+  root file and, in a local build, anything hidden only through `.git/info/exclude` or a nested
+  `.gitignore`. `tests/test_packaging.py` builds the sdist and wheel and checks both; `hatchling`
+  joins the dev extra for it.
+
+### Changed
+
+- Ruff selects `C90` (mccabe), so a function over cyclomatic complexity 10, the house hard limit,
+  now fails `make test`; before, nothing enforced it.
+
+### Tests
+
+- The `os_windows`, `os_macos`, `os_linux` and `os_posix` markers now skip a test off its platform
+  (`pytest_runtest_setup` in `tests/conftest.py`); registered in `pyproject.toml` alone they skipped
+  nothing, so a test trusting its marker ran everywhere. `tests/test_platform_markers.py` pins it.
+
+## [3.0.5] 2026-10-15 14:11:33
+
+### Added
+- Python 3.15 is a supported version: declared in the classifiers, so CI and `make test-all` run it.
+- `uv.lock` is committed, and `[tool.uv] exclude-newer` sets a cooldown that keeps releases younger
+  than it out of the lock. CI installs exactly the locked tree on push and pull request; the nightly
+  scheduled run still resolves afresh to catch upstream breakage early.
+
+### Changed
+- The install section explains why installing with uv protects against supply-chain attacks and why
+  a plain `pip install` from PyPI does not.
+- `rtoml` floor raised to 0.14.0, the first release with Python 3.15 wheels.
+
 ## [3.0.4] 2026-08-01 00:14:59
 ### Fixed
 - **Console output no longer crashes on a legacy codepage.** A Windows console at codepage 1252

{lib_detect_testenv-3.0.4 → lib_detect_testenv-3.0.6}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: lib_detect_testenv
-Version: 3.0.4
+Version: 3.0.6
 Summary: Detect test environment - pytest, doctest, unittest, or regular execution
 Project-URL: Homepage, https://github.com/bitranox/lib_detect_testenv
 Project-URL: Repository, https://github.com/bitranox/lib_detect_testenv.git
@@ -18,24 +18,27 @@ Classifier: Programming Language :: Python :: 3.10
 Classifier: Programming Language :: Python :: 3.11
 Classifier: Programming Language :: Python :: 3.12
 Classifier: Programming Language :: Python :: 3.13
+Classifier: Programming Language :: Python :: 3.14
+Classifier: Programming Language :: Python :: 3.15
 Classifier: Typing :: Typed
 Requires-Python: >=3.10
-Requires-Dist: rich-click>=1.9.8
+Requires-Dist: rich-click>=1.9.9
 Provides-Extra: dev
 Requires-Dist: bandit<1.9,>=1.8.6; (python_version < '3.10') and extra == 'dev'
 Requires-Dist: bandit>=1.9.4; (python_version >= '3.10') and extra == 'dev'
-Requires-Dist: build>=1.5.0; extra == 'dev'
-Requires-Dist: click>=8.4.2; extra == 'dev'
+Requires-Dist: build>=1.6.1; extra == 'dev'
+Requires-Dist: click>=8.5.0; extra == 'dev'
+Requires-Dist: hatchling>=1.32.4; extra == 'dev'
 Requires-Dist: import-linter<2.6,>=2.5.2; (python_version < '3.10') and extra == 'dev'
-Requires-Dist: import-linter>=2.13; (python_version >= '3.10') and extra == 'dev'
+Requires-Dist: import-linter>=2.15; (python_version >= '3.10') and extra == 'dev'
 Requires-Dist: pip-audit>=2.10.1; extra == 'dev'
-Requires-Dist: pyright[nodejs]>=1.1.411; extra == 'dev'
+Requires-Dist: pyright[nodejs]>=1.1.414; extra == 'dev'
 Requires-Dist: pytest-cov>=7.1.0; extra == 'dev'
 Requires-Dist: pytest<9,>=8.4.2; (python_version < '3.10') and extra == 'dev'
 Requires-Dist: pytest>=9.1.1; (python_version >= '3.10') and extra == 'dev'
-Requires-Dist: rtoml>=0.13.0; extra == 'dev'
-Requires-Dist: ruff>=0.16.1; extra == 'dev'
-Requires-Dist: setuptools>=83.0.0; extra == 'dev'
+Requires-Dist: rtoml>=0.14.0; extra == 'dev'
+Requires-Dist: ruff>=0.17.0; extra == 'dev'
+Requires-Dist: setuptools>=84.0.0; extra == 'dev'
 Requires-Dist: textual>=8.2.8; extra == 'dev'
 Requires-Dist: twine>=7.0.0; extra == 'dev'
 Description-Content-Type: text/markdown
@@ -72,7 +75,7 @@ This library provides utility functions to detect whether your code is running i
 
 ### Recommended: Install via UV
 
-UV is an ultrafast Python package installer written in Rust (10–20× faster than pip/poetry):
+UV is an ultrafast Python package installer written in Rust (10-20× faster than pip/poetry):
 
 ```bash
 # Install uv
@@ -107,9 +110,39 @@ For more installation methods (pipx, source builds, etc.), see [INSTALL.md](INST
 
 ### Python Version Requirements
 
-- **Python 3.9+** is required
+- **Python 3.10+** is required
 - Tested on Linux, macOS, and Windows
-- CI runs on CPython 3.9+ and PyPy
+- CI runs on CPython 3.10 to 3.15
+
+### Why we recommend uv: supply-chain protection
+
+This repository commits a `uv.lock`. It pins every package the project needs, transitive
+dependencies included, to an exact version and to the hashes of that version's files. The
+`exclude-newer` setting under `[tool.uv]` in `pyproject.toml` adds a cooldown: uv leaves any
+release younger than that out of the lock. CI installs from the lock, so a hijacked release that
+gets pulled again within the cooldown never reaches our builds, and a file whose hash does not
+match is refused.
+
+That protection stays in this repository. The installable package declares only lower bounds
+(`>=`) for its dependencies, so a plain `pip install` takes the newest release of every transitive
+dependency at the moment you run it. If one of them was hijacked an hour earlier, you get the
+hijacked version. `pipx install` and `uv tool install` without options do the same.
+
+To install the command line tool with a cooldown of your own (uv then skips any release younger
+than 7 days, transitive ones included), or to run the exact tree our CI tests:
+
+```bash
+uv tool install --exclude-newer "7 days" lib_detect_testenv
+git clone https://github.com/bitranox/lib_detect_testenv.git && cd lib_detect_testenv && uv sync --locked && uv run lib_detect_testenv --help
+```
+
+If you depend on lib_detect_testenv in your own project, give that project the same cooldown (7 days here, as
+an example) and commit the `uv.lock` that `uv add lib_detect_testenv` writes:
+
+```toml
+[tool.uv]
+exclude-newer = "7 days"
+```
 
 ## Usage
 
@@ -121,11 +154,11 @@ The package provides a CLI for shell scripting and CI/CD integration. All comman
 
 All detection commands use a **3-level exit code system**:
 
-| Code | Meaning | Use Case |
-|------|---------|----------|
-| **0** | Test environment **detected** | Success - test env found |
-| **1** | Test environment **not detected** | Normal negative result (not an error) |
-| **2** | **Error occurred** | Command failed (bad arguments, exception) |
+| Code  | Meaning                           | Use Case                                  |
+|-------|-----------------------------------|-------------------------------------------|
+| **0** | Test environment **detected**     | Success - test env found                  |
+| **1** | Test environment **not detected** | Normal negative result (not an error)     |
+| **2** | **Error occurred**                | Command failed (bad arguments, exception) |
 
 This design follows Unix conventions and makes shell scripting intuitive:
 

{lib_detect_testenv-3.0.4 → lib_detect_testenv-3.0.6}/README.md

@@ -30,7 +30,7 @@ This library provides utility functions to detect whether your code is running i
 
 ### Recommended: Install via UV
 
-UV is an ultrafast Python package installer written in Rust (10–20× faster than pip/poetry):
+UV is an ultrafast Python package installer written in Rust (10-20× faster than pip/poetry):
 
 ```bash
 # Install uv
@@ -65,9 +65,39 @@ For more installation methods (pipx, source builds, etc.), see [INSTALL.md](INST
 
 ### Python Version Requirements
 
-- **Python 3.9+** is required
+- **Python 3.10+** is required
 - Tested on Linux, macOS, and Windows
-- CI runs on CPython 3.9+ and PyPy
+- CI runs on CPython 3.10 to 3.15
+
+### Why we recommend uv: supply-chain protection
+
+This repository commits a `uv.lock`. It pins every package the project needs, transitive
+dependencies included, to an exact version and to the hashes of that version's files. The
+`exclude-newer` setting under `[tool.uv]` in `pyproject.toml` adds a cooldown: uv leaves any
+release younger than that out of the lock. CI installs from the lock, so a hijacked release that
+gets pulled again within the cooldown never reaches our builds, and a file whose hash does not
+match is refused.
+
+That protection stays in this repository. The installable package declares only lower bounds
+(`>=`) for its dependencies, so a plain `pip install` takes the newest release of every transitive
+dependency at the moment you run it. If one of them was hijacked an hour earlier, you get the
+hijacked version. `pipx install` and `uv tool install` without options do the same.
+
+To install the command line tool with a cooldown of your own (uv then skips any release younger
+than 7 days, transitive ones included), or to run the exact tree our CI tests:
+
+```bash
+uv tool install --exclude-newer "7 days" lib_detect_testenv
+git clone https://github.com/bitranox/lib_detect_testenv.git && cd lib_detect_testenv && uv sync --locked && uv run lib_detect_testenv --help
+```
+
+If you depend on lib_detect_testenv in your own project, give that project the same cooldown (7 days here, as
+an example) and commit the `uv.lock` that `uv add lib_detect_testenv` writes:
+
+```toml
+[tool.uv]
+exclude-newer = "7 days"
+```
 
 ## Usage
 
@@ -79,11 +109,11 @@ The package provides a CLI for shell scripting and CI/CD integration. All comman
 
 All detection commands use a **3-level exit code system**:
 
-| Code | Meaning | Use Case |
-|------|---------|----------|
-| **0** | Test environment **detected** | Success - test env found |
-| **1** | Test environment **not detected** | Normal negative result (not an error) |
-| **2** | **Error occurred** | Command failed (bad arguments, exception) |
+| Code  | Meaning                           | Use Case                                  |
+|-------|-----------------------------------|-------------------------------------------|
+| **0** | Test environment **detected**     | Success - test env found                  |
+| **1** | Test environment **not detected** | Normal negative result (not an error)     |
+| **2** | **Error occurred**                | Command failed (bad arguments, exception) |
 
 This design follows Unix conventions and makes shell scripting intuitive:
 

{lib_detect_testenv-3.0.4 → lib_detect_testenv-3.0.6}/pyproject.toml

@@ -1,11 +1,11 @@
 [project]
 name = "lib_detect_testenv"
-version = "3.0.4"
+version = "3.0.6"
 description = "Detect test environment - pytest, doctest, unittest, or regular execution"
 readme = "README.md"
 requires-python = ">=3.10"
 dependencies = [
-  "rich-click>=1.9.8",
+  "rich-click>=1.9.9",
 ]
 license = { text = "MIT" }
 authors = [{ name = "bitranox", email = "bitranox@gmail.com" }]
@@ -17,6 +17,8 @@ classifiers = [
   "Programming Language :: Python :: 3.11",
   "Programming Language :: Python :: 3.12",
   "Programming Language :: Python :: 3.13",
+  "Programming Language :: Python :: 3.14",
+  "Programming Language :: Python :: 3.15",
   "License :: OSI Approved :: MIT License",
   "Environment :: Console",
   "Operating System :: OS Independent",
@@ -33,13 +35,12 @@ dev = [
   "pytest>=8.4.2,<9; python_version<'3.10'",
   "pytest>=9.1.1; python_version>='3.10'",
   "pytest-cov>=7.1.0",
-  "ruff>=0.16.1",
-  "pyright[nodejs]>=1.1.411",
+  "ruff>=0.17.0",
+  "pyright[nodejs]>=1.1.414",
   "bandit>=1.8.6,<1.9; python_version<'3.10'",
   "bandit>=1.9.4; python_version>='3.10'",
-  # 1.5.1 was yanked upstream (unintended breaking changes), so 1.5.0 is the newest usable
-  # release; a >=1.5.1 floor has ZERO candidates and makes this extra unresolvable.
-  "build>=1.5.0",
+  "build>=1.6.1",
+  "hatchling>=1.32.4",
   "twine>=7.0.0",
   # codecov-cli is disabled, not dropped: it requires click<8.3.0, which drags click back to
   # 8.2.1 - the version with CVE-2026-7246 (command injection in click.edit(), fixed in 8.3.3).
@@ -49,13 +50,13 @@ dev = [
   # Re-enable once codecov-cli relaxes its click<8.3.0 pin.
   # "codecov-cli>=11.2.8",
   # Transitive CVE pins
-  "click>=8.4.2",                # CVE-2026-7246
+  "click>=8.5.0",                # CVE-2026-7246
   "pip-audit>=2.10.1",
   "textual>=8.2.8",
   "import-linter>=2.5.2,<2.6; python_version<'3.10'",
-  "import-linter>=2.13; python_version>='3.10'",
-  "setuptools>=83.0.0",
-  "rtoml>=0.13.0",
+  "import-linter>=2.15; python_version>='3.10'",
+  "setuptools>=84.0.0",
+  "rtoml>=0.14.0",
 ]
 
 [project.scripts]
@@ -71,6 +72,21 @@ build-backend = "hatchling.build"
 packages = ["src/lib_detect_testenv"]
 include = ["src/lib_detect_testenv/py.typed"]
 
+# An allowlist, never a denylist: hatchling reads only the root .gitignore, so tracked working
+# files and files hidden through .git/info/exclude or a nested .gitignore (session records,
+# review notes, helper scripts) would ship. tests/test_packaging.py builds the sdist and
+# refuses any other top-level entry.
+[tool.hatch.build.targets.sdist]
+include = [
+    "/src/lib_detect_testenv",
+    "/tests/*.py",
+    "/docs",
+    "/README.md",
+    "/LICENSE",
+    "/CHANGELOG.md",
+    "/pyproject.toml",
+]
+
 [tool.ruff]
 line-length = 160
 target-version = "py39"
@@ -85,6 +101,7 @@ select = [
   "B",           # bugbear
   "A",           # builtins shadowing
   "C4",          # comprehension simplification
+  "C90",         # mccabe: cyclomatic complexity <= 10 (the house hard limit)
   "SIM",         # simplification
   "TCH",         # type-checking imports
   "RUF",         # ruff-specific
@@ -200,3 +217,6 @@ ignore-vulns = ["GHSA-4xh5-x5gv-qwph", "PYSEC-2022-42969", "CVE-2026-25990", "CV
 [tool.bashate]
 max-line-length = 120
 ignores = ["E003"]
+
+[tool.uv]
+exclude-newer = "1 day"

{lib_detect_testenv-3.0.4 → lib_detect_testenv-3.0.6}/src/lib_detect_testenv/__init__conf__.py

@@ -26,7 +26,7 @@ name = "lib_detect_testenv"
 #: Human-readable summary shown in CLI help output.
 title = "Detect test environment - pytest, doctest, unittest, or regular execution"
 #: Current release version pulled from ``pyproject.toml`` by automation.
-version = "3.0.4"
+version = "3.0.6"
 #: Repository homepage presented to users.
 homepage = "https://github.com/bitranox/lib_detect_testenv"
 #: Author attribution surfaced in CLI output.

{lib_detect_testenv-3.0.4 → lib_detect_testenv-3.0.6}/src/lib_detect_testenv/safe_console.py

@@ -64,13 +64,19 @@ ASCII_FALLBACKS: Final[dict[str, str]] = {
 _UNIVERSAL_ENCODINGS: Final[frozenset[str]] = frozenset({"utf-8", "utf8", "utf-16", "utf16", "utf-32", "utf32"})
 
 
-def _stream_encoding(file: IO[Any] | None) -> str | None:
+def _stream_encoding(file: IO[Any] | None, *, err: bool = False) -> str | None:
     """Return the target stream's encoding, or None when it cannot be determined.
 
     An unknown encoding means the caller gets the original text: guessing would
     degrade output that may well have been fine.
+
+    With no explicit `file` the answer comes from ``sys.stdout``/``sys.stderr``,
+    which is what :func:`click.echo` resolves its own default target from. click
+    exposes no supported way to ask for that stream: ``get_text_stream`` was
+    deprecated in click 8.5.0 and is removed in 9.0, its documented replacement
+    being to let ``echo`` resolve the stream itself.
     """
-    stream = file if file is not None else click.get_text_stream("stdout")
+    stream = file if file is not None else (sys.stderr if err else sys.stdout)
     encoding = getattr(stream, "encoding", None)
     return encoding if isinstance(encoding, str) else None
 
@@ -135,8 +141,7 @@ def echo(message: object = "", *, file: IO[Any] | None = None, err: bool = False
     Writes to the given stream.
     """
     text = message if isinstance(message, str) else str(message)
-    target = file if file is not None else click.get_text_stream("stderr" if err else "stdout")
-    click.echo(encode_safe(text, _stream_encoding(target)), file=target, nl=nl)
+    click.echo(encode_safe(text, _stream_encoding(file, err=err)), file=file, err=err, nl=nl)
 
 
 class _SafeWriter:

{lib_detect_testenv-3.0.4 → lib_detect_testenv-3.0.6}/tests/conftest.py

@@ -3,6 +3,7 @@
 from __future__ import annotations
 
 import re
+import sys
 from typing import TYPE_CHECKING
 
 import pytest
@@ -48,3 +49,20 @@ def strip_ansi() -> Callable[[str], str]:
         return _remove_ansi_codes(value)
 
     return _strip
+
+
+#: Which platforms each ``os_*`` marker lets a test run on. Registering a marker in pyproject only
+#: silences pytest's unknown-marker warning; without this table a marked test runs everywhere.
+_PLATFORM_MARKERS: dict[str, Callable[[str], bool]] = {
+    "os_windows": lambda platform: platform == "win32",
+    "os_macos": lambda platform: platform == "darwin",
+    "os_linux": lambda platform: platform.startswith("linux"),
+    "os_posix": lambda platform: platform != "win32",
+}
+
+
+def pytest_runtest_setup(item: pytest.Item) -> None:
+    """Skip a test whose ``os_*`` marker names a platform other than the running one."""
+    for name, runs_on in _PLATFORM_MARKERS.items():
+        if item.get_closest_marker(name) is not None and not runs_on(sys.platform):
+            pytest.skip(f"marked {name}; this is {sys.platform}")

lib_detect_testenv-3.0.6/tests/test_packaging.py

@@ -0,0 +1,127 @@
+"""The source distribution carries the package, its tests and its docs, and nothing else.
+
+A working tree holds files that must never be published: session records, backlogs, scratch
+review notes and helper scripts. Some are tracked, some are hidden only through
+``.git/info/exclude`` or a nested ``.gitignore``, which hatchling does not read. The sdist is
+therefore built from an allowlist, and this test builds one from a copy of the tree that also
+holds such decoys. The wheel must still carry the package data the runtime loads.
+"""
+
+from __future__ import annotations
+
+import shutil
+import tarfile
+import zipfile
+from pathlib import Path
+
+import pytest
+from hatchling.builders.sdist import SdistBuilder
+from hatchling.builders.wheel import WheelBuilder
+
+PROJECT_ROOT = Path(__file__).resolve().parent.parent
+PACKAGE = "lib_detect_testenv"
+
+# hatchling force-includes the root .gitignore into every sdist (so a build from the unpacked
+# sdist applies the same exclusions); no include/exclude setting removes it.
+ALLOWED_TOP_LEVEL = frozenset(
+    {
+        "PKG-INFO",
+        "pyproject.toml",
+        "README.md",
+        "LICENSE",
+        "CHANGELOG.md",
+        ".gitignore",
+        "src",
+        "tests",
+        "docs",
+    }
+)
+REQUIRED_TOP_LEVEL = frozenset({"PKG-INFO", "pyproject.toml", "src", "tests"})
+
+# Files and directories that exist in working trees and must never ship. Tracked ones are
+# named in the repository; the others are hidden locally through .git/info/exclude.
+DECOY_FILES = ("handover.md", "OPEN-WORK.md", "EXECUTION-USER-REVIEW.md", "reset_git_history.sh", ".private/notes.txt")
+
+REQUIRED_WHEEL_DATA = ("lib_detect_testenv/py.typed",)
+
+
+def _copy_tree_with_decoys(destination: Path) -> Path:
+    """Copy the buildable tree and plant the files a working tree carries but must not ship."""
+    root = destination / "tree"
+    root.mkdir()
+    for name in ("pyproject.toml", "README.md", "LICENSE", "CHANGELOG.md", ".gitignore"):
+        shutil.copy2(PROJECT_ROOT / name, root / name)
+    for name in ("src", "docs", "tests"):
+        shutil.copytree(PROJECT_ROOT / name, root / name, ignore=shutil.ignore_patterns("__pycache__", "*.pyc"))
+    for decoy in DECOY_FILES:
+        path = root / decoy
+        path.parent.mkdir(parents=True, exist_ok=True)
+        path.write_text("decoy\n", encoding="utf-8")
+    return root
+
+
+def _build_sdist(root: Path, directory: Path) -> Path:
+    built = list(SdistBuilder(str(root)).build(directory=str(directory), versions=["standard"]))
+    assert len(built) == 1, f"expected one sdist, got {built}"
+    return Path(built[0])
+
+
+def _strip_root(names: list[str]) -> list[str]:
+    """Drop the ``<name>-<version>/`` prefix every member carries."""
+    return [name.split("/", 1)[1] for name in names if "/" in name]
+
+
+@pytest.fixture(scope="module")
+def built_tree(tmp_path_factory: pytest.TempPathFactory) -> Path:
+    return _copy_tree_with_decoys(tmp_path_factory.mktemp("packaging"))
+
+
+@pytest.fixture(scope="module")
+def sdist_members(built_tree: Path, tmp_path_factory: pytest.TempPathFactory) -> list[str]:
+    sdist = _build_sdist(built_tree, tmp_path_factory.mktemp("sdist"))
+    with tarfile.open(sdist, "r:gz") as archive:
+        members = _strip_root(archive.getnames())
+    assert members, "the sdist is empty, so nothing below would be judged"
+    return members
+
+
+@pytest.fixture(scope="module")
+def wheel_members(built_tree: Path, tmp_path_factory: pytest.TempPathFactory) -> list[str]:
+    built = list(WheelBuilder(str(built_tree)).build(directory=str(tmp_path_factory.mktemp("wheel")), versions=["standard"]))
+    assert len(built) == 1, f"expected one wheel, got {built}"
+    with zipfile.ZipFile(built[0]) as archive:
+        members = archive.namelist()
+    assert members, "the wheel is empty, so nothing below would be judged"
+    return members
+
+
+@pytest.mark.os_agnostic
+def test_the_sdist_holds_only_allowlisted_top_level_entries(sdist_members: list[str]) -> None:
+    top_level = {member.split("/", 1)[0] for member in sdist_members}
+
+    unexpected = sorted(top_level - ALLOWED_TOP_LEVEL)
+    missing = sorted(REQUIRED_TOP_LEVEL - top_level)
+
+    assert not unexpected, f"the sdist ships files outside the allowlist: {unexpected}"
+    assert not missing, f"the sdist lacks required entries: {missing}"
+
+
+@pytest.mark.os_agnostic
+def test_the_sdist_ships_only_the_package_under_src(sdist_members: list[str]) -> None:
+    under_src = {member.split("/")[1] for member in sdist_members if member.startswith("src/") and member.count("/") >= 1}
+
+    assert under_src == {PACKAGE}
+
+
+@pytest.mark.os_agnostic
+def test_the_sdist_carries_no_compiled_bytecode(sdist_members: list[str]) -> None:
+    compiled = [member for member in sdist_members if "__pycache__" in member or member.endswith(".pyc")]
+
+    assert not compiled, f"the sdist ships bytecode: {compiled[:5]}"
+
+
+@pytest.mark.os_agnostic
+def test_the_wheel_carries_the_package_data_the_runtime_loads(wheel_members: list[str]) -> None:
+    missing = [name for name in REQUIRED_WHEEL_DATA if name not in wheel_members]
+
+    assert not missing, f"the wheel lacks package data: {missing}"

lib_detect_testenv-3.0.6/tests/test_platform_markers.py

@@ -0,0 +1,31 @@
+"""The ``os_*`` markers skip a test off its platform; registering them alone would skip nothing.
+
+Each test asserts the platform its own marker names, so it fails wherever conftest lets it run by
+mistake, and passes where the marker lets it run.
+"""
+
+from __future__ import annotations
+
+import sys
+
+import pytest
+
+
+@pytest.mark.os_windows
+def test_an_os_windows_test_runs_only_on_windows() -> None:
+    assert sys.platform == "win32"
+
+
+@pytest.mark.os_macos
+def test_an_os_macos_test_runs_only_on_macos() -> None:
+    assert sys.platform == "darwin"
+
+
+@pytest.mark.os_linux
+def test_an_os_linux_test_runs_only_on_linux() -> None:
+    assert sys.platform.startswith("linux")
+
+
+@pytest.mark.os_posix
+def test_an_os_posix_test_never_runs_on_windows() -> None:
+    assert sys.platform != "win32"

{lib_detect_testenv-3.0.4 → lib_detect_testenv-3.0.6}/tests/test_safe_console.py

@@ -8,6 +8,7 @@ keeps the next output line someone adds covered by construction.
 from __future__ import annotations
 
 import io
+import sys
 from pathlib import Path
 
 import pytest
@@ -78,6 +79,30 @@ class TestEchoOnAUtf8Console:
         assert "\u2713" in buffer.getvalue().decode("utf-8")
 
 
+class TestTheDefaultTargetFollowsTheStreamEchoWritesTo:
+    """With no `file`, the encoding must come from the stream `echo` lands on.
+
+    click resolves that target itself from ``sys.stdout``/``sys.stderr``. Judge
+    the wrong stream and a legacy-codepage console gets exactly the crash this
+    module exists to prevent, while every test passing an explicit `file` stays
+    green and says nothing about it.
+    """
+
+    def test_a_cp1252_stdout_degrades_the_glyph(self, monkeypatch: pytest.MonkeyPatch) -> None:
+        stream = _cp1252_stream()
+        monkeypatch.setattr(sys, "stdout", stream)
+        safe_console.echo("✓ deployed")
+        assert "[OK]" in _read_back(stream)
+
+    def test_err_is_judged_against_stderr_not_stdout(self, monkeypatch: pytest.MonkeyPatch) -> None:
+        """A stdout that could take the glyph must not excuse a cp1252 stderr."""
+        stream = _cp1252_stream()
+        monkeypatch.setattr(sys, "stdout", io.TextIOWrapper(io.BytesIO(), encoding="utf-8", newline=""))
+        monkeypatch.setattr(sys, "stderr", stream)
+        safe_console.echo("✓ deployed", err=True)
+        assert "[OK]" in _read_back(stream)
+
+
 class TestSafeStreamProtectsRich:
     """Rich raises on a legacy codepage too; it renders through its own writer."""
 

lib_detect_testenv-3.0.4/.devcontainer/devcontainer.json

@@ -1,22 +0,0 @@
-{
-  "image": "mcr.microsoft.com/devcontainers/python:3.13",
-
-  "postCreateCommand": "bash -lc '\nPY=/usr/local/bin/python;\n$PY -m pip install -U pip && \\\n$PY -m pip install ipykernel && \\\n$PY -m pip install -e . && \\\n# register kernel using this exact interpreter\n$PY -m ipykernel install --name=python3 --display-name=\"Python 3 (3.13)\" --user && \\\n# patch the notebook to point to the python3 kernelspec (VS Code will bind to /usr/local/bin/python)\n$PY - <<\"PY\"\nimport json, pathlib\np = pathlib.Path(\"notebooks/Quickstart.ipynb\")\nif p.exists():\n    nb = json.loads(p.read_text(encoding=\"utf-8\"))\n    md = nb.setdefault(\"metadata\", {})\n    md[\"kernelspec\"] = {\n        \"name\": \"python3\",\n        \"display_name\": \"Python 3 (3.13)\",\n        \"language\": \"python\"\n    }\n    md[\"language_info\"] = {\"name\": \"python\"}\n    p.write_text(json.dumps(nb, ensure_ascii=False, indent=1), encoding=\"utf-8\")\n    print(\"Pinned kernelspec to python3 in\", p)\nelse:\n    print(\"Notebook not found:\", p)\nPY'\n",
-
-  "customizations": {
-    "vscode": {
-      "extensions": ["ms-toolsai.jupyter", "ms-python.python"],
-      "settings": {
-        "workbench.startupEditor": "none",
-        "jupyter.alwaysTrustNotebooks": true,
-        "jupyter.kernelPickerType": "OnlyRecommended",
-        "python.defaultInterpreterPath": "/usr/local/bin/python"
-      }
-    },
-    "codespaces": {
-      "openFiles": ["README.md"]
-    }
-  },
-
-  "postAttachCommand": "bash -lc 'if [ -f notebooks/Quickstart.ipynb ]; then code -r notebooks/Quickstart.ipynb; fi'"
-}

lib_detect_testenv-3.0.4/.devcontainer/settings.json

@@ -1,6 +0,0 @@
-{
-  "python.defaultInterpreterPath": "/usr/local/bin/python3.13",
-  "jupyter.alwaysTrustNotebooks": true,
-  "jupyter.kernelPickerType": "OnlyRecommended",
-  "jupyter.askForKernelRestart": false
-}

lib_detect_testenv-3.0.4/.env.example

@@ -1,11 +0,0 @@
-# Copy to .env and fill values as needed.
-
-# Codecov upload token (required for private repos; optional for public repos)
-CODECOV_TOKEN=
-
-# PyPI API token for release workflow (.github/workflows/release.yml)
-# Format: pypi-AgENdGVzdC5weXBpLm9yZwIk...
-PYPI_API_TOKEN=
-
-# Optional: GitHub token for API-limited tasks
-GITHUB_TOKEN=