marsh-lib 0.3.0__tar.gz → 0.3.2__tar.gz

marsh_lib-0.3.2/.circleci/config.yml

@@ -0,0 +1,125 @@
+version: 2.1
+
+jobs:
+  test:
+    parameters:
+      python-version:
+        type: string
+    docker:
+      - image: cimg/python:<< parameters.python-version >>
+    resource_class: medium
+    steps:
+      - checkout
+      - run:
+          name: Install uv
+          command: |
+            python -m pip install --upgrade pip
+            python -m pip install uv
+      - run:
+          name: Install dependencies
+          command: uv sync --all-groups
+      - run:
+          name: Run baseline tests
+          command: |
+            mkdir -p test-results
+            uv run pytest -vv --disable-warnings --tb=short \
+              --junitxml=test-results/junit.xml \
+              --ignore=tests/ssh/test_ssh_connector.py \
+              --ignore=tests/ssh/test_ssh_factory.py \
+              --ignore=tests/docker/
+      - store_test_results:
+          path: test-results
+
+  lint:
+    docker:
+      - image: cimg/python:3.10
+    resource_class: small
+    steps:
+      - checkout
+      - run:
+          name: Install uv
+          command: |
+            python -m pip install --upgrade pip
+            python -m pip install uv
+      - run:
+          name: Install dependencies
+          command: uv sync --all-groups
+      - run:
+          name: Run pflake8
+          command: uv run pflake8 src/marsh --select=E9,F --ignore=F401,F403,F405,F541,F811,F841
+
+  build:
+    docker:
+      - image: cimg/python:3.10
+    resource_class: small
+    steps:
+      - checkout
+      - run:
+          name: Install uv
+          command: |
+            python -m pip install --upgrade pip
+            python -m pip install uv
+      - run:
+          name: Install dependencies
+          command: uv sync --all-groups
+      - run:
+          name: Build wheel
+          command: uv build --wheel --out-dir dist -v
+
+  integration:
+    machine:
+      image: ubuntu-2404:current
+      docker_layer_caching: false
+    resource_class: medium
+    steps:
+      - checkout
+      - run:
+          name: Install uv
+          command: |
+            set -euxo pipefail
+            python3 -m pip install --upgrade pip
+            python3 -m pip install --user uv==0.12.12
+            USER_BIN="$(python3 -m site --user-base)/bin"
+            echo "export PATH=\"$USER_BIN:\$PATH\"" >> "$BASH_ENV"
+            export PATH="$USER_BIN:$PATH"
+            "$USER_BIN/uv" --version
+            command -v uv
+      - run:
+          name: Install dependencies
+          command: uv sync --all-groups
+      - run:
+          name: Validate dependency and platform contract
+          command: |
+            uv run python - \<<'PY'
+            import sys
+            from pathlib import Path
+            import tomllib
+
+            assert sys.version_info[:2] == (3, 12), sys.version
+            project = tomllib.loads(Path("pyproject.toml").read_text())["project"]
+            assert "optional-dependencies" not in project, "Unexpected optional dependency surface"
+            assert project["requires-python"] == ">=3.10,<3.13"
+            print("Python 3.12 integration environment validated; optional dependency surface is N/A.")
+            PY
+      - run:
+          name: Pull Docker integration test images
+          command: |
+            docker pull bash:latest
+            docker pull ubuntu:24.04
+      - run:
+          name: Run Docker integration tests
+          command: uv run pytest -vv --disable-warnings --tb=short tests/docker
+      - run:
+          name: Run SSH integration tests
+          command: uv run pytest -vv --disable-warnings --tb=short tests/ssh
+
+workflows:
+  baseline:
+    jobs:
+      - test:
+          matrix:
+            parameters:
+              python-version: ["3.10", "3.11", "3.12"]
+      - lint
+      - build
+      - integration

marsh_lib-0.3.2/.github/workflows/docker-integration.yml

@@ -0,0 +1,39 @@
+name: Docker Integration Smoke
+
+on:
+  pull_request:
+    branches:
+      - develop
+    paths:
+      - "src/marsh/docker/**"
+      - "tests/docker/**"
+      - "pyproject.toml"
+      - "uv.lock"
+      - ".github/workflows/docker-integration.yml"
+
+permissions:
+  contents: read
+
+jobs:
+  docker-integration:
+    runs-on: ubuntu-latest
+    timeout-minutes: 10
+    steps:
+      - name: Checkout
+        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
+
+      - name: Install uv
+        uses: astral-sh/setup-uv@bec219d24cd3e171d82865faccec33120bb574f4 # v10.1.0
+        with:
+          version: "0.12.12"
+          enable-cache: false
+
+      - name: Install dependencies
+        run: uv sync --all-groups
+
+      - name: Pull integration image
+        run: docker pull bash:latest
+
+      - name: Run Docker smoke tests
+        run: |
+          uv run pytest -vv --disable-warnings --tb=short             tests/docker/test_docker_container.py::test_docker_container_resource_lifecycle             tests/docker/test_docker_command_executor.py::test_basic_command_without_piping

marsh_lib-0.3.2/.github/workflows/release-rehearsal.yml

@@ -0,0 +1,179 @@
+name: Release Rehearsal
+
+on:
+  push:
+    branches:
+      - chore/p7-release-rehearsal-and-matrix
+
+permissions:
+  contents: read
+
+jobs:
+  rehearsal:
+    name: Build, publish, verify, and exercise recovery against TestPyPI
+    runs-on: ubuntu-latest
+    environment:
+      name: testpypi
+    permissions:
+      contents: read
+      id-token: write
+    steps:
+      - name: Checkout exact rehearsal revision
+        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
+        with:
+          fetch-depth: 1
+          persist-credentials: false
+
+      - name: Install uv
+        uses: astral-sh/setup-uv@bec219d24cd3e171d82865faccec33120bb574f4 # v10.1.0
+        with:
+          version: "0.12.12"
+          enable-cache: false
+
+      - name: Build wheel and source distribution once
+        run: uv build --no-sources --out-dir dist
+
+      - name: Validate exact rehearsal artifact set
+        env:
+          RELEASE_VERSION: "0.3.0"
+        run: |
+          python - <<'PY'
+          import os
+          from pathlib import Path
+          import tomllib
+
+          version = os.environ["RELEASE_VERSION"]
+          project = tomllib.loads(Path("pyproject.toml").read_text())["project"]["version"]
+          if project != version:
+              raise SystemExit(f"Package version {project!r} does not match rehearsal version {version!r}")
+
+          files = sorted(
+              p.name for p in Path("dist").iterdir()
+              if p.is_file() and not p.name.startswith(".")
+          )
+          wheels = [name for name in files if name.endswith(".whl")]
+          sdists = [name for name in files if name.endswith(".tar.gz")]
+          if len(wheels) != 1 or len(sdists) != 1 or len(files) != 2:
+              raise SystemExit(f"Expected exactly one wheel and one sdist, found: {files}")
+
+          if not wheels[0].startswith(f"marsh_lib-{version}-"):
+              raise SystemExit(f"Unexpected wheel filename: {wheels[0]}")
+          if sdists[0] != f"marsh_lib-{version}.tar.gz":
+              raise SystemExit(f"Unexpected sdist filename: {sdists[0]}")
+          print("\n".join(files))
+          PY
+
+      - name: Smoke test wheel
+        run: uv run --isolated --no-project --with dist/*.whl python -c "import marsh; print(marsh.__file__)"
+
+      - name: Smoke test source distribution
+        run: uv run --isolated --no-project --with dist/*.tar.gz python -c "import marsh; print(marsh.__file__)"
+
+      - name: Record exact distribution hashes
+        run: |
+          sha256sum dist/*.whl dist/*.tar.gz | tee dist/SHA256SUMS
+
+      - name: Exercise verifier failure and recovery path
+        run: |
+          set -euo pipefail
+          mkdir -p recovery-test
+          cp dist/*.whl recovery-test/
+          python - <<'PY'
+          from pathlib import Path
+          wheel = next(Path("recovery-test").glob("*.whl"))
+          wheel.write_bytes(wheel.read_bytes() + b"intentional-recovery-test")
+          PY
+
+          set +e
+          python - <<'PY'
+          import hashlib
+          from pathlib import Path
+
+          expected = {
+              p.name: hashlib.sha256(p.read_bytes()).hexdigest()
+              for p in Path("dist").glob("*.whl")
+          }
+          tampered = next(Path("recovery-test").glob("*.whl"))
+          if hashlib.sha256(tampered.read_bytes()).hexdigest() != expected[tampered.name]:
+              raise SystemExit(1)
+          PY
+          verifier_status=$?
+          set -e
+
+          if [ "$verifier_status" -eq 0 ]; then
+            echo "ERROR: tampered artifact was not detected"
+            exit 1
+          fi
+          echo "Recovery drill: tampered artifact correctly rejected"
+
+          rm -rf recovery-test
+          python - <<'PY'
+          import hashlib
+          from pathlib import Path
+
+          for p in list(Path("dist").glob("*.whl")) + list(Path("dist").glob("*.tar.gz")):
+              recorded = next(
+                  line.split()[0]
+                  for line in Path("dist/SHA256SUMS").read_text().splitlines()
+                  if Path(line.split(maxsplit=1)[1]).name == p.name
+              )
+              actual = hashlib.sha256(p.read_bytes()).hexdigest()
+              assert recorded == actual, p.name
+          print("Recovery drill: original immutable artifacts revalidated successfully")
+          PY
+
+      - name: Publish exact artifacts to TestPyPI
+        run: uv publish --publish-url https://test.pypi.org/legacy/
+
+      - name: Verify TestPyPI hashes
+        env:
+          RELEASE_VERSION: "0.3.0"
+        run: |
+          python - <<'PY'
+          import hashlib
+          import json
+          import os
+          from pathlib import Path
+          import urllib.request
+
+          version = os.environ["RELEASE_VERSION"]
+          url = f"https://test.pypi.org/pypi/marsh-lib/{version}/json"
+          with urllib.request.urlopen(url, timeout=30) as response:
+              payload = json.load(response)
+
+          expected = {
+              p.name: hashlib.sha256(p.read_bytes()).hexdigest()
+              for pattern in ("*.whl", "*.tar.gz")
+              for p in Path("dist").glob(pattern)
+              if p.is_file()
+          }
+          published = {
+              item["filename"]: item["digests"]["sha256"]
+              for item in payload["urls"]
+          }
+          missing = sorted(set(expected) - set(published))
+          unexpected = sorted(set(published) - set(expected))
+          mismatched = sorted(
+              name for name, digest in expected.items()
+              if published.get(name) != digest
+          )
+          if missing or unexpected or mismatched:
+              raise SystemExit(
+                  "TestPyPI verification failed; "
+                  f"missing={missing}, unexpected={unexpected}, mismatched={mismatched}"
+              )
+          print(f"Verified {len(expected)} TestPyPI distribution hashes for marsh-lib {version}")
+          PY
+
+      - name: Install rehearsal package from TestPyPI
+        run: |
+          uv run --isolated --no-project --with "marsh-lib==0.3.0" \
+            --index-url https://test.pypi.org/simple/ \
+            --extra-index-url https://pypi.org/simple/ \
+            python -c "import marsh; print(marsh.__file__)"
+
+      - name: Rehearsal summary
+        run: |
+          echo "Non-production release rehearsal completed."
+          echo "Production PyPI was not contacted."
+          echo "The exact artifact set was built once, published to TestPyPI, hash-verified, installed, and recovery verification was exercised."

{marsh_lib-0.3.0 → marsh_lib-0.3.2}/.github/workflows/release.yml

@@ -193,8 +193,9 @@ jobs:
 
           expected = {
               path.name: hashlib.sha256(path.read_bytes()).hexdigest()
-              for path in Path("dist").glob("*")
-              if path.is_file() and not path.name.endswith(".attestation")
+              for pattern in ("*.whl", "*.tar.gz")
+              for path in Path("dist").glob(pattern)
+              if path.is_file()
           }
           published = {
               item["filename"]: item["digests"]["sha256"]
@@ -202,13 +203,15 @@ jobs:
           }
 
           missing = sorted(set(expected) - set(published))
+          unexpected = sorted(set(published) - set(expected))
           mismatched = sorted(
               name for name, digest in expected.items()
               if published.get(name) != digest
           )
-          if missing or mismatched:
+          if missing or unexpected or mismatched:
               raise SystemExit(
-                  f"PyPI verification failed; missing={missing}, mismatched={mismatched}"
+                  "PyPI verification failed; "
+                  f"missing={missing}, unexpected={unexpected}, mismatched={mismatched}"
               )
-          print(f"Verified {len(expected)} published artifact hashes for marsh-lib {version}")
+          print(f"Verified {len(expected)} published distribution hashes for marsh-lib {version}")
           PY

marsh_lib-0.3.2/.github/workflows/ssh-integration.yml

@@ -0,0 +1,59 @@
+name: SSH Integration Smoke
+
+on:
+  pull_request:
+    branches:
+      - develop
+    paths:
+      - "src/marsh/ssh/**"
+      - "tests/ssh/**"
+      - "pyproject.toml"
+      - "uv.lock"
+      - ".github/workflows/ssh-integration.yml"
+
+permissions:
+  contents: read
+
+jobs:
+  ssh-integration:
+    runs-on: ubuntu-latest
+    timeout-minutes: 10
+    steps:
+      - name: Checkout
+        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
+
+      - name: Install uv
+        uses: astral-sh/setup-uv@bec219d24cd3e171d82865faccec33120bb574f4 # v10.1.0
+        with:
+          version: "0.12.12"
+          enable-cache: false
+
+      - name: Install dependencies
+        run: uv sync --all-groups
+
+      - name: Configure local SSH server
+        run: |
+          sudo apt-get update -qq
+          sudo apt-get install -y openssh-server
+          sudo useradd --create-home --shell /bin/bash marsh-ci
+          sudo install -d -m 700 -o marsh-ci -g marsh-ci /home/marsh-ci/.ssh
+          echo "marsh-ci:marsh-password" | sudo chpasswd
+          sudo mkdir -p /run/sshd
+          cat > "$RUNNER_TEMP/sshd_config" <<EOF
+          Port 2222
+          ListenAddress 127.0.0.1
+          HostKey /etc/ssh/ssh_host_ed25519_key
+          PubkeyAuthentication yes
+          PasswordAuthentication yes
+          PermitRootLogin no
+          UsePAM no
+          PidFile $RUNNER_TEMP/sshd.pid
+          AllowUsers marsh-ci
+          EOF
+          sudo /usr/sbin/sshd -f "$RUNNER_TEMP/sshd_config"
+
+      - name: Run SSH smoke test
+        env:
+          MARSH_SSH_TARGET: marsh-ci@127.0.0.1:2222
+          MARSH_SSH_PASSWORD: marsh-password
+        run: uv run pytest -s -vv --disable-warnings --tb=short tests/ssh/test_local_sshd_smoke.py

{marsh_lib-0.3.0 → marsh_lib-0.3.2}/.github/workflows/test.yml

@@ -4,7 +4,7 @@ on:
   push:
     branches: ["*"]
   pull_request:
-    branches: ["main"]
+    branches: ["develop", "main"]
   workflow_dispatch:
 
 permissions:
@@ -16,7 +16,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout code
-        uses: actions/checkout@v2
+        uses: actions/checkout@v4
 
       - name: Install uv
         uses: astral-sh/setup-uv@v10.2.0
@@ -27,7 +27,6 @@ jobs:
         run: |
           uv sync --all-groups
 
-      # TODO: Setup Docker for testing docker components (and possible ssh components).
       - name: Run pytest
         run: |
           cd src
@@ -45,3 +44,26 @@ jobs:
         with:
             coverageFile: coverage.xml
             token: ${{ secrets.GITHUB_TOKEN }}
+
+  windows_portability:
+    name: Windows portability (Python 3.12)
+    runs-on: windows-latest
+    steps:
+      - name: Checkout code
+        uses: actions/checkout@v4
+
+      - name: Install uv
+        uses: astral-sh/setup-uv@v10.2.0
+        with:
+          python-version: '3.12'
+
+      - name: Install dependencies
+        run: uv sync --all-groups
+
+      - name: Run portable pytest suite
+        run: >
+          uv run pytest -vv --disable-warnings --tb=short
+          --ignore=tests/bash
+          --ignore=tests/docker
+          --ignore=tests/ssh
+          tests/

{marsh_lib-0.3.0 → marsh_lib-0.3.2}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.5
 Name: marsh-lib
-Version: 0.3.0
+Version: 0.3.2
 Summary: Lightweight, extensible Python library for building, managing, and executing command workflows.
 Project-URL: Repository, https://github.com/CedricAnover/marsh
 Author-email: Cedric Anover <cedric.anover@hotmail.com>
@@ -609,6 +609,8 @@ remain important compatibility surfaces.
 
 New functionality should prefer the canonical workflow contracts and adapt existing mechanisms into them rather than introducing a separate execution model.
 
+For migration examples and legacy/deprecation guidance, see [`docs/api-migration.md`](docs/api-migration.md).
+
 ## Contributing
 
 Before making architectural or public-interface changes:

{marsh_lib-0.3.0 → marsh_lib-0.3.2}/README.md

@@ -582,6 +582,8 @@ remain important compatibility surfaces.
 
 New functionality should prefer the canonical workflow contracts and adapt existing mechanisms into them rather than introducing a separate execution model.
 
+For migration examples and legacy/deprecation guidance, see [`docs/api-migration.md`](docs/api-migration.md).
+
 ## Contributing
 
 Before making architectural or public-interface changes: