mcli-framework 8.0.49__tar.gz → 8.0.51__tar.gz

{mcli_framework-8.0.49/src/mcli_framework.egg-info → mcli_framework-8.0.51}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: mcli-framework
-Version: 8.0.49
+Version: 8.0.51
 Summary: Portable workflow framework - transform any script into a versioned, schedulable command. Store in ~/.mcli/workflows/, version with lockfile, run as daemon or cron job.
 Author-email: Luis Fernandez de la Vara <luis@lefv.io>
 Maintainer-email: Luis Fernandez de la Vara <luis@lefv.io>

{mcli_framework-8.0.49 → mcli_framework-8.0.51}/pyproject.toml

@@ -1,6 +1,6 @@
 [project]
 name = "mcli-framework"
-version = "8.0.49"
+version = "8.0.51"
 description = "Portable workflow framework - transform any script into a versioned, schedulable command. Store in ~/.mcli/workflows/, version with lockfile, run as daemon or cron job."
 readme = "README.md"
  requires-python = ">=3.10"

{mcli_framework-8.0.49 → mcli_framework-8.0.51}/src/mcli/lib/ipfs_sync.py

@@ -28,7 +28,7 @@ import hashlib
 import json
 import time
 from datetime import datetime
-from pathlib import Path
+from pathlib import Path, PurePosixPath
 from typing import Optional
 
 import requests
@@ -535,7 +535,19 @@ class IPFSSync:
                         f"hash mismatch for '{name}': expected {expected_value}, got {actual}"
                     )
 
-            target = workflows_dir / script_filename
+            # SECURITY: `script_filename` comes from a remote, untrusted manifest.
+            # Contain it inside workflows_dir so a crafted manifest cannot write
+            # outside the directory via '..' segments or an absolute path.
+            rel = PurePosixPath(script_filename)
+            if rel.is_absolute() or any(part == ".." for part in rel.parts):
+                raise ValueError(f"unsafe script path in manifest: {script_filename}")
+            base = Path(workflows_dir).resolve()
+            target = (base / Path(*rel.parts)).resolve()
+            if base != target and base not in target.parents:
+                raise ValueError(f"script path escapes workflows dir: {script_filename}")
+
+            # Recreate group subdirectories (e.g. "demo/hello.py") on pull.
+            target.parent.mkdir(parents=True, exist_ok=True)
             target.write_bytes(payload)
             written.append(target)
 

mcli_framework-8.0.51/src/mcli/workflow/ci/act_runner.py

@@ -0,0 +1,121 @@
+"""Run `act` locally and classify the outcome for the PR gate."""
+
+from __future__ import annotations
+
+import shutil
+import subprocess
+import sys
+import time
+from enum import Enum
+from pathlib import Path
+
+# Docker Hub returns these when the unauthenticated image-pull rate limit is hit.
+# act surfaces them while pulling the runner image — this is an environment
+# problem, NOT a test failure, so it must not hard-block a push.
+_RATE_LIMIT_MARKERS = (
+    "toomanyrequests",
+    "you have reached your unauthenticated pull rate limit",
+    "pull rate limit",
+)
+
+# Backoff (seconds) between docker rate-limit retries; the last value repeats.
+_RETRY_BACKOFF = (15, 45)
+_MAX_RETRIES = 2
+
+
+class PreflightResult(Enum):
+    PASS = "pass"
+    FAIL = "fail"
+    UNREACHABLE = "unreachable"
+
+
+def _is_docker_rate_limited(output: str) -> bool:
+    low = (output or "").lower()
+    return any(marker in low for marker in _RATE_LIMIT_MARKERS)
+
+
+def act_available() -> bool:
+    return shutil.which("act") is not None
+
+
+def docker_running() -> bool:
+    try:
+        proc = subprocess.run(["docker", "info"], capture_output=True, timeout=30)
+        return proc.returncode == 0
+    except (FileNotFoundError, subprocess.TimeoutExpired):
+        return False
+
+
+def probe() -> bool:
+    """Can act actually run here? Needs the binary, a live docker daemon, and `act -l`."""
+    if not act_available() or not docker_running():
+        return False
+    try:
+        proc = subprocess.run(["act", "-l"], capture_output=True, text=True, timeout=60)
+    except (FileNotFoundError, subprocess.TimeoutExpired):
+        return False
+    return proc.returncode == 0
+
+
+def build_act_command(event: str) -> list[str]:
+    cmd = ["act", event]
+    if Path(".secrets").exists():
+        cmd += ["--secret-file", ".secrets"]
+    return cmd
+
+
+def run_act(
+    event: str = "pull_request",
+    retries: int = _MAX_RETRIES,
+    backoff: tuple[int, ...] = _RETRY_BACKOFF,
+) -> PreflightResult:
+    """Run act for `event` and classify the outcome.
+
+    - exit 0 -> PASS.
+    - non-zero whose output shows a Docker Hub pull rate limit
+      (``toomanyrequests``) -> retry up to ``retries`` times with backoff;
+      if still rate-limited, return UNREACHABLE (cannot validate — an
+      environment problem, not a test failure, so the gate must not block).
+    - any other non-zero exit -> FAIL.
+
+    Output is captured (to detect the rate limit) and echoed so the user still
+    sees act's progress.
+    """
+    attempt = 0
+    while True:
+        proc = subprocess.run(build_act_command(event), capture_output=True, text=True)
+        output = (proc.stdout or "") + (proc.stderr or "")
+        if output:
+            sys.stdout.write(output if output.endswith("\n") else output + "\n")
+
+        if proc.returncode == 0:
+            return PreflightResult.PASS
+
+        if _is_docker_rate_limited(output):
+            if attempt < retries:
+                delay = backoff[min(attempt, len(backoff) - 1)]
+                sys.stdout.write(
+                    f"⚠️  Docker Hub rate limit (toomanyrequests); retrying in {delay}s "
+                    f"(attempt {attempt + 1}/{retries})…\n"
+                )
+                time.sleep(delay)
+                attempt += 1
+                continue
+            sys.stdout.write(
+                "⚠️  Docker Hub still rate-limited after retries — cannot validate "
+                "locally; allowing push (run `mcli ci preflight` again later).\n"
+            )
+            return PreflightResult.UNREACHABLE
+
+        return PreflightResult.FAIL
+
+
+def preflight(repo_slug: str, event: str = "pull_request") -> PreflightResult:
+    """Primary gate. PASS/FAIL if act can run; UNREACHABLE if act can't start here.
+
+    `repo_slug` is accepted for symmetry and future use; the runner fallback is
+    orchestrated by the CLI layer based on runner_status.has_online_runner.
+    """
+    if not probe():
+        return PreflightResult.UNREACHABLE
+    return run_act(event)

{mcli_framework-8.0.49 → mcli_framework-8.0.51}/src/mcli/workflow/ci/ci.py

@@ -143,7 +143,18 @@ def pr():
 
 PRE_PUSH_HOOK = """#!/usr/bin/env bash
 # mcli-ci pre-push gate: validate with act before pushing.
-exec mcli ci preflight
+# Blocks ONLY on a real act failure (exit 1). When act cannot validate locally
+# — e.g. Docker Hub rate-limit (toomanyrequests, retried first), no docker, or
+# an online runner will validate instead (exit 2/3) — the push is allowed so an
+# environment hiccup never wedges your workflow. Override a real failure with:
+#   git push --no-verify
+mcli ci preflight
+code=$?
+if [ "$code" -eq 1 ]; then
+  echo "mcli-ci: act reported failures — push blocked. Override: git push --no-verify" >&2
+  exit 1
+fi
+exit 0
 """
 
 

{mcli_framework-8.0.49 → mcli_framework-8.0.51/src/mcli_framework.egg-info}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: mcli-framework
-Version: 8.0.49
+Version: 8.0.51
 Summary: Portable workflow framework - transform any script into a versioned, schedulable command. Store in ~/.mcli/workflows/, version with lockfile, run as daemon or cron job.
 Author-email: Luis Fernandez de la Vara <luis@lefv.io>
 Maintainer-email: Luis Fernandez de la Vara <luis@lefv.io>

mcli_framework-8.0.49/src/mcli/workflow/ci/act_runner.py

@@ -1,61 +0,0 @@
-"""Run `act` locally and classify the outcome for the PR gate."""
-
-from __future__ import annotations
-
-import shutil
-import subprocess
-from enum import Enum
-from pathlib import Path
-
-
-class PreflightResult(Enum):
-    PASS = "pass"
-    FAIL = "fail"
-    UNREACHABLE = "unreachable"
-
-
-def act_available() -> bool:
-    return shutil.which("act") is not None
-
-
-def docker_running() -> bool:
-    try:
-        proc = subprocess.run(["docker", "info"], capture_output=True, timeout=30)
-        return proc.returncode == 0
-    except (FileNotFoundError, subprocess.TimeoutExpired):
-        return False
-
-
-def probe() -> bool:
-    """Can act actually run here? Needs the binary, a live docker daemon, and `act -l`."""
-    if not act_available() or not docker_running():
-        return False
-    try:
-        proc = subprocess.run(["act", "-l"], capture_output=True, text=True, timeout=60)
-    except (FileNotFoundError, subprocess.TimeoutExpired):
-        return False
-    return proc.returncode == 0
-
-
-def build_act_command(event: str) -> list[str]:
-    cmd = ["act", event]
-    if Path(".secrets").exists():
-        cmd += ["--secret-file", ".secrets"]
-    return cmd
-
-
-def run_act(event: str = "pull_request") -> PreflightResult:
-    """Run act for `event`. PASS on exit 0, else FAIL. (Probe gates UNREACHABLE upstream.)"""
-    proc = subprocess.run(build_act_command(event))
-    return PreflightResult.PASS if proc.returncode == 0 else PreflightResult.FAIL
-
-
-def preflight(repo_slug: str, event: str = "pull_request") -> PreflightResult:
-    """Primary gate. PASS/FAIL if act can run; UNREACHABLE if act can't start here.
-
-    `repo_slug` is accepted for symmetry and future use; the runner fallback is
-    orchestrated by the CLI layer based on runner_status.has_online_runner.
-    """
-    if not probe():
-        return PreflightResult.UNREACHABLE
-    return run_act(event)