modwire-cli 1.0.0__tar.gz

modwire_cli-1.0.0/.github/ISSUE_TEMPLATE/bug_report.yml

@@ -0,0 +1,46 @@
+name: Bug report
+description: Report incorrect or unexpected existing behavior.
+title: "Bug: "
+type: Bug
+projects:
+  - modwire/1
+body:
+  - type: markdown
+    attributes:
+      value: |
+        Select every pinned issue field before submission. Use native dependencies and sub-issues for relationships.
+  - type: textarea
+    id: summary
+    attributes:
+      label: What happened?
+      description: Describe the observed behavior and its impact.
+    validations:
+      required: true
+  - type: textarea
+    id: reproduce
+    attributes:
+      label: Reproduction
+      description: Provide the smallest reproducible example, command, or fixture.
+    validations:
+      required: true
+  - type: textarea
+    id: expected
+    attributes:
+      label: Expected behavior
+      description: State the behavior that would resolve the bug.
+    validations:
+      required: true
+  - type: input
+    id: version
+    attributes:
+      label: Package version
+      placeholder: 1.2.3 or commit SHA
+    validations:
+      required: false
+  - type: input
+    id: relationships
+    attributes:
+      label: Related issues
+      description: Link candidate blockers, blocked work, parents, or sub-issues for native relationship assignment.
+    validations:
+      required: false

modwire_cli-1.0.0/.github/ISSUE_TEMPLATE/config.yml

@@ -0,0 +1 @@
+blank_issues_enabled: false

modwire_cli-1.0.0/.github/ISSUE_TEMPLATE/feature_request.yml

@@ -0,0 +1,47 @@
+name: Feature request
+description: Propose a new user-facing capability or behavior.
+title: "Feature: "
+type: Feature
+projects:
+  - modwire/1
+body:
+  - type: markdown
+    attributes:
+      value: |
+        Select every pinned issue field before submission. Use native dependencies and sub-issues for relationships.
+  - type: textarea
+    id: problem
+    attributes:
+      label: Problem
+      description: Describe the user or integration problem this should solve.
+    validations:
+      required: true
+  - type: textarea
+    id: outcome
+    attributes:
+      label: Proposed outcome
+      description: Describe observable behavior without prescribing unnecessary implementation detail.
+    validations:
+      required: true
+  - type: textarea
+    id: acceptance
+    attributes:
+      label: Acceptance criteria
+      placeholder: |
+        - [ ] Observable behavior is implemented.
+        - [ ] Relevant tests and documentation are updated.
+    validations:
+      required: true
+  - type: textarea
+    id: alternatives
+    attributes:
+      label: Alternatives considered
+    validations:
+      required: false
+  - type: input
+    id: relationships
+    attributes:
+      label: Related issues
+      description: Link candidate blockers, blocked work, parents, or sub-issues for native relationship assignment.
+    validations:
+      required: false

modwire_cli-1.0.0/.github/ISSUE_TEMPLATE/task.yml

@@ -0,0 +1,48 @@
+name: Task
+description: Propose concrete implementation, maintenance, documentation, or release work.
+title: "Task: "
+type: Task
+projects:
+  - modwire/1
+body:
+  - type: markdown
+    attributes:
+      value: |
+        Select every pinned issue field before submission. Use native dependencies and sub-issues for relationships.
+  - type: textarea
+    id: outcome
+    attributes:
+      label: Outcome
+      description: State the observable result, not only the activity.
+    validations:
+      required: true
+  - type: textarea
+    id: scope
+    attributes:
+      label: Scope
+      description: Describe the implementation boundary and important exclusions.
+    validations:
+      required: true
+  - type: textarea
+    id: acceptance
+    attributes:
+      label: Acceptance criteria
+      placeholder: |
+        - [ ] Observable behavior is implemented.
+        - [ ] Relevant tests and documentation are updated.
+    validations:
+      required: true
+  - type: textarea
+    id: rollout
+    attributes:
+      label: Rollout and rollback
+      description: Explain compatibility, migration, rollout, or rollback considerations; write "Not applicable" when none exist.
+    validations:
+      required: true
+  - type: input
+    id: relationships
+    attributes:
+      label: Related issues
+      description: Link candidate blockers, blocked work, parents, or sub-issues for native relationship assignment.
+    validations:
+      required: false

modwire_cli-1.0.0/.github/workflows/ci.yml

@@ -0,0 +1,28 @@
+name: CI
+
+on:
+  push:
+    branches: [main]
+  pull_request:
+  workflow_dispatch:
+
+permissions:
+  contents: read
+
+jobs:
+  verify:
+    runs-on: ubuntu-latest
+    strategy:
+      matrix:
+        python-version: ["3.12", "3.13", "3.14"]
+
+    steps:
+      - uses: actions/checkout@v6
+        with:
+          fetch-depth: 0
+      - uses: astral-sh/setup-uv@v7
+        with:
+          enable-cache: true
+          python-version: ${{ matrix.python-version }}
+      - run: uv sync --all-groups --frozen
+      - run: make verify

modwire_cli-1.0.0/.github/workflows/human-approval.yml

@@ -0,0 +1,133 @@
+name: Human approval
+
+on:
+  pull_request:
+    types: [opened, synchronize, reopened, ready_for_review, labeled, unlabeled]
+
+permissions:
+  contents: read
+  pull-requests: read
+
+concurrency:
+  group: human-approval-${{ github.event.pull_request.number }}
+  cancel-in-progress: true
+
+jobs:
+  policy:
+    name: Evaluate approval policy
+    if: github.event.pull_request.draft == false
+    runs-on: ubuntu-latest
+    outputs:
+      required: ${{ steps.classify.outputs.required }}
+      reason: ${{ steps.classify.outputs.reason }}
+    steps:
+      - name: Classify pull request risk
+        id: classify
+        uses: actions/github-script@v7
+        with:
+          script: |
+            const files = await github.paginate(
+              github.rest.pulls.listFiles,
+              {
+                owner: context.repo.owner,
+                repo: context.repo.repo,
+                pull_number: context.issue.number,
+                per_page: 100,
+              },
+            );
+
+            const sensitivePaths = [
+              /^\.github\/workflows\//,
+              /^\.github\/modwire-ecosystem\.ya?ml$/,
+              /^\.github\/scripts\//,
+              /^docs\/governance\//,
+              /(^|\/)CODEOWNERS$/,
+              /(^|\/)SECURITY\.md$/,
+              /(^|\/)pyproject\.toml$/,
+              /(^|\/)(uv\.lock|poetry\.lock|Pipfile\.lock)$/,
+            ];
+            const sensitiveLabels = new Set([
+              "breaking",
+              "contract",
+              "release-gate",
+              "requires-human-approval",
+            ]);
+
+            const matchedFiles = files
+              .map(({ filename }) => filename)
+              .filter((filename) =>
+                sensitivePaths.some((pattern) => pattern.test(filename)),
+              );
+            const matchedLabels = (context.payload.pull_request.labels ?? [])
+              .map(({ name }) => name.toLowerCase())
+              .filter((name) => sensitiveLabels.has(name));
+
+            const reasons = [];
+            if (matchedFiles.length > 0) {
+              reasons.push(
+                `sensitive files: ${matchedFiles.slice(0, 5).join(", ")}`,
+              );
+            }
+            if (matchedLabels.length > 0) {
+              reasons.push(`sensitive labels: ${matchedLabels.join(", ")}`);
+            }
+
+            const required = reasons.length > 0;
+            core.setOutput("required", String(required));
+            core.setOutput(
+              "reason",
+              required ? reasons.join("; ") : "routine change",
+            );
+            core.notice(
+              required
+                ? `Human approval required: ${reasons.join("; ")}`
+                : "Human approval not required: routine change.",
+              { title: "Human approval policy" },
+            );
+
+  approval_gate:
+    name: Await human approval
+    needs: policy
+    if: needs.policy.outputs.required == 'true'
+    runs-on: ubuntu-latest
+    environment:
+      name: human-approval
+      deployment: false
+    steps:
+      - name: Record human confirmation
+        run: echo "::notice title=Human approval received::A human approved this pull request for merge."
+
+  human-approval:
+    name: Human approval
+    needs: [policy, approval_gate]
+    if: >-
+      always() &&
+      github.event.pull_request.draft == false &&
+      needs.policy.result == 'success' &&
+      (
+        needs.approval_gate.result == 'success' ||
+        needs.approval_gate.result == 'skipped'
+      )
+    runs-on: ubuntu-latest
+    steps:
+      - name: Report approval decision
+        env:
+          APPROVAL_REQUIRED: ${{ needs.policy.outputs.required }}
+          APPROVAL_REASON: ${{ needs.policy.outputs.reason }}
+        run: |
+          if [[ "$APPROVAL_REQUIRED" == "true" ]]; then
+            title="Human approval received"
+            detail="A required human reviewer approved this pull request."
+          else
+            title="Human approval not required"
+            detail="This pull request passed automatically as a routine change."
+          fi
+
+          echo "::notice title=$title::$APPROVAL_REASON"
+          {
+            echo "## $title"
+            echo
+            echo "$detail"
+            echo
+            echo "**Policy decision:** $APPROVAL_REASON"
+          } >> "$GITHUB_STEP_SUMMARY"

modwire_cli-1.0.0/.github/workflows/issue-metadata.yml

@@ -0,0 +1,21 @@
+name: Issue metadata
+
+on:
+  issues:
+    types:
+      - opened
+      - edited
+      - typed
+      - untyped
+      - field_added
+      - field_removed
+      - labeled
+      - unlabeled
+
+permissions:
+  contents: read
+  issues: write
+
+jobs:
+  validate:
+    uses: modwire/modwire/.github/workflows/issue-metadata.yml@main

modwire_cli-1.0.0/.github/workflows/release.yml

@@ -0,0 +1,68 @@
+name: Release
+
+on:
+  release:
+    types: [published]
+  workflow_dispatch:
+    inputs:
+      tag:
+        description: Existing SemVer tag to publish, for example v1.2.3
+        required: true
+        type: string
+
+permissions:
+  contents: read
+
+env:
+  RELEASE_TAG: ${{ github.event.release.tag_name || inputs.tag }}
+
+jobs:
+  build:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v6
+        with:
+          ref: ${{ env.RELEASE_TAG }}
+          fetch-depth: 0
+      - uses: astral-sh/setup-uv@v7
+        with:
+          enable-cache: true
+          python-version: "3.12"
+      - run: uv sync --all-groups --frozen
+      - run: make release-check TAG="$RELEASE_TAG"
+      - run: make install-check
+      - uses: actions/upload-artifact@v7
+        with:
+          name: distributions
+          path: dist/
+          if-no-files-found: error
+
+  publish-pypi:
+    needs: build
+    runs-on: ubuntu-latest
+    environment:
+      name: pypi
+      url: https://pypi.org/project/modwire-cli/
+    permissions:
+      id-token: write
+    steps:
+      - uses: actions/download-artifact@v8
+        with:
+          name: distributions
+          path: dist/
+      - uses: pypa/gh-action-pypi-publish@release/v1
+
+  github-release:
+    if: ${{ github.event_name == 'release' }}
+    needs: build
+    runs-on: ubuntu-latest
+    permissions:
+      contents: write
+    steps:
+      - uses: actions/download-artifact@v8
+        with:
+          name: distributions
+          path: dist/
+      - run: gh release upload "$RELEASE_TAG" dist/* --clobber --repo "$GITHUB_REPOSITORY"
+        env:
+          GH_TOKEN: ${{ github.token }}

modwire_cli-1.0.0/.gitignore

@@ -0,0 +1,12 @@
+.venv/
+.dev/
+.pytest_cache/
+.ruff_cache/
+.coverage
+htmlcov/
+build/
+dist/
+*.egg-info/
+src/modwire_cli/_version.py
+__pycache__/
+*.py[cod]

modwire_cli-1.0.0/CHANGELOG.md

@@ -0,0 +1,11 @@
+# Changelog
+
+## [1.0.0] - 2026-07-11
+
+- Added the thin standalone `modwire` report command.
+- Added Modwire 5 report catalog and extracted-source health reports.
+- Kept policy evaluation and report contracts inside Modwire Core.
+- Added typed package metadata, artifact validation, CI, and trusted PyPI
+  publishing scaffolding.
+
+[1.0.0]: https://github.com/modwire/modwire-cli/releases/tag/v1.0.0

modwire_cli-1.0.0/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 Tomasz Szpak
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

modwire_cli-1.0.0/MANIFEST.in

@@ -0,0 +1,5 @@
+include CHANGELOG.md
+include LICENSE
+include README.md
+include src/modwire_cli/py.typed
+recursive-exclude * __pycache__ *.py[cod]

modwire_cli-1.0.0/Makefile

@@ -0,0 +1,21 @@
+.PHONY: lint test verify build release-check install-check
+
+lint:
+	uv run ruff check .
+
+test:
+	uv run pytest
+
+verify: lint test build
+
+build:
+	rm -rf dist
+	uv build --out-dir dist
+	uv run twine check dist/*
+
+release-check: build
+	@test -n "$(TAG)" || (echo "usage: make release-check TAG=vX.Y.Z" && exit 2)
+	uv run python scripts/verify_release.py "$(TAG)" dist
+
+install-check:
+	uv run --isolated --no-project --with ./dist/*.whl modwire --help

modwire_cli-1.0.0/PKG-INFO

@@ -0,0 +1,78 @@
+Metadata-Version: 2.4
+Name: modwire-cli
+Version: 1.0.0
+Summary: Command-line runtime for the Modwire ecosystem.
+Author: Tomasz Szpak
+License-Expression: MIT
+Project-URL: Homepage, https://github.com/modwire/modwire-cli
+Project-URL: Repository, https://github.com/modwire/modwire-cli
+Project-URL: Issues, https://github.com/modwire/modwire-cli/issues
+Project-URL: Changelog, https://github.com/modwire/modwire-cli/blob/main/CHANGELOG.md
+Keywords: architecture,cli,code-analysis,modwire,static-analysis
+Classifier: Development Status :: 5 - Production/Stable
+Classifier: Environment :: Console
+Classifier: Intended Audience :: Developers
+Classifier: Operating System :: OS Independent
+Classifier: Programming Language :: Python
+Classifier: Programming Language :: Python :: 3
+Classifier: Programming Language :: Python :: 3 :: Only
+Classifier: Programming Language :: Python :: 3.12
+Classifier: Programming Language :: Python :: 3.13
+Classifier: Programming Language :: Python :: 3.14
+Classifier: Typing :: Typed
+Classifier: Topic :: Software Development :: Quality Assurance
+Requires-Python: >=3.12
+Description-Content-Type: text/markdown
+License-File: LICENSE
+Requires-Dist: click>=8.1
+Requires-Dist: modwire<6,>=5
+Requires-Dist: modwire-extraction<3,>=2
+Provides-Extra: dev
+Requires-Dist: build>=1.2; extra == "dev"
+Requires-Dist: pytest>=8; extra == "dev"
+Requires-Dist: ruff>=0.8; extra == "dev"
+Requires-Dist: twine>=5; extra == "dev"
+Dynamic: license-file
+
+# modwire-cli
+
+The thin command-line reporter for the Modwire ecosystem. It extracts a source
+map, calls Modwire, and prints Modwire's reports.
+
+## Installation
+
+```bash
+python -m pip install modwire-cli
+```
+
+Python 3.12 or newer is required.
+
+## Usage
+
+```bash
+modwire architecture reports
+modwire --config-dir .modwire architecture health src python
+```
+
+For development:
+
+```bash
+uv sync --all-groups
+uv run pytest
+uv build
+```
+
+Run the same checks used by CI with `make verify`.
+
+## Release
+
+Releases use strict `vX.Y.Z` tags. Before creating the first release, configure
+the `pypi` environment and a Trusted Publisher for the `modwire/modwire-cli`
+GitHub repository on PyPI. Then publish a GitHub release:
+
+```bash
+gh release create v1.0.0 --target main --generate-notes --title v1.0.0
+```
+
+The release workflow verifies the tag and distribution metadata, publishes to
+PyPI without a long-lived token, and attaches the distributions to the release.

modwire_cli-1.0.0/README.md

@@ -0,0 +1,42 @@
+# modwire-cli
+
+The thin command-line reporter for the Modwire ecosystem. It extracts a source
+map, calls Modwire, and prints Modwire's reports.
+
+## Installation
+
+```bash
+python -m pip install modwire-cli
+```
+
+Python 3.12 or newer is required.
+
+## Usage
+
+```bash
+modwire architecture reports
+modwire --config-dir .modwire architecture health src python
+```
+
+For development:
+
+```bash
+uv sync --all-groups
+uv run pytest
+uv build
+```
+
+Run the same checks used by CI with `make verify`.
+
+## Release
+
+Releases use strict `vX.Y.Z` tags. Before creating the first release, configure
+the `pypi` environment and a Trusted Publisher for the `modwire/modwire-cli`
+GitHub repository on PyPI. Then publish a GitHub release:
+
+```bash
+gh release create v1.0.0 --target main --generate-notes --title v1.0.0
+```
+
+The release workflow verifies the tag and distribution metadata, publishes to
+PyPI without a long-lived token, and attaches the distributions to the release.

modwire_cli-1.0.0/pyproject.toml

@@ -0,0 +1,75 @@
+[build-system]
+requires = ["setuptools>=77", "setuptools-scm[toml]>=8", "wheel"]
+build-backend = "setuptools.build_meta"
+
+[project]
+name = "modwire-cli"
+description = "Command-line runtime for the Modwire ecosystem."
+readme = "README.md"
+requires-python = ">=3.12"
+license = "MIT"
+dynamic = ["version"]
+authors = [{ name = "Tomasz Szpak" }]
+keywords = ["architecture", "cli", "code-analysis", "modwire", "static-analysis"]
+classifiers = [
+    "Development Status :: 5 - Production/Stable",
+    "Environment :: Console",
+    "Intended Audience :: Developers",
+    "Operating System :: OS Independent",
+    "Programming Language :: Python",
+    "Programming Language :: Python :: 3",
+    "Programming Language :: Python :: 3 :: Only",
+    "Programming Language :: Python :: 3.12",
+    "Programming Language :: Python :: 3.13",
+    "Programming Language :: Python :: 3.14",
+    "Typing :: Typed",
+    "Topic :: Software Development :: Quality Assurance",
+]
+dependencies = [
+    "click>=8.1",
+    "modwire>=5,<6",
+    "modwire-extraction>=2,<3",
+]
+
+[project.optional-dependencies]
+dev = ["build>=1.2", "pytest>=8", "ruff>=0.8", "twine>=5"]
+
+[dependency-groups]
+dev = ["build>=1.2", "pytest>=8", "ruff>=0.8", "twine>=5"]
+
+[project.scripts]
+modwire = "modwire_cli:cli"
+
+[project.urls]
+Homepage = "https://github.com/modwire/modwire-cli"
+Repository = "https://github.com/modwire/modwire-cli"
+Issues = "https://github.com/modwire/modwire-cli/issues"
+Changelog = "https://github.com/modwire/modwire-cli/blob/main/CHANGELOG.md"
+
+[tool.setuptools]
+package-dir = { "" = "src" }
+include-package-data = true
+
+[tool.setuptools.package-data]
+modwire_cli = ["py.typed"]
+
+[tool.setuptools.exclude-package-data]
+"*" = ["**/__pycache__/*", "**/*.py[cod]"]
+
+[tool.setuptools.packages.find]
+where = ["src"]
+
+[tool.setuptools_scm]
+fallback_version = "0.0.0.dev0"
+local_scheme = "no-local-version"
+version_file = "src/modwire_cli/_version.py"
+
+[tool.pytest.ini_options]
+testpaths = ["tests"]
+addopts = ["-ra", "--strict-config", "--strict-markers"]
+filterwarnings = ["error"]
+
+[tool.ruff]
+line-length = 120
+target-version = "py312"
+extend-exclude = ["src/modwire_cli/_version.py"]