pheme-reviews 0.1.0__tar.gz

pheme_reviews-0.1.0/.env.example

@@ -0,0 +1,43 @@
+# ── Server ──────────────────────────────────────────────────────────────
+# Public URL of this server (used in all ActivityPub IDs)
+BASE_URL=http://localhost:8000
+
+# Bind address and port for uvicorn
+HOST=127.0.0.1
+PORT=8000
+
+# Enable uvicorn auto-reload (set to false in production)
+RELOAD=true
+
+# Trust X-Forwarded-* headers from a reverse proxy on this machine
+# (Caddy/nginx) so rate limiting sees real client IPs instead of 127.0.0.1.
+# Set to true in production behind a proxy; leave false when the app is
+# exposed directly.
+PROXY_HEADERS=false
+
+# Comma-separated IPs allowed to set X-Forwarded-For.
+# Default 127.0.0.1 is correct when the proxy runs on the same machine.
+# FORWARDED_ALLOW_IPS=127.0.0.1
+
+# ── Database ────────────────────────────────────────────────────────────
+# Path to the SQLite database file
+DATABASE_PATH=data/reviews.db
+
+# ── Security ────────────────────────────────────────────────────────────
+# Secret key for session signing — REQUIRED in production.
+# Generate one with: python -c "import secrets; print(secrets.token_hex(32))"
+SECRET_KEY=
+
+# Session cookie lifetime in seconds (default: 30 days = 2592000)
+SESSION_MAX_AGE=2592000
+
+# Minimum password length for new accounts (default: 8)
+PASSWORD_MIN_LENGTH=8
+
+# ── Registration ────────────────────────────────────────────────────────
+# Registration policy:
+#   open   — anyone can register at /register (default; fine for dev)
+#   invite — /register requires a one-time invite code; admins create codes
+#            via POST /api/admin/invites and share /register?code=... links
+#   closed — no self-registration; admins create accounts via POST /api/admin/users
+REGISTRATION_MODE=open

pheme_reviews-0.1.0/.forgejo/workflows/python.yml

@@ -0,0 +1,40 @@
+# Forgejo Actions — Python pipeline (lint, type check, unittest suite).
+#
+# Runs on the runner labelled `node-22`, which provides the node:22 image:
+# uv bootstraps a managed Python ≥ 3.13 there (the image's system Python is
+# 3.11, too old for requires-python >= 3.13).
+
+name: Python
+
+on: [push]
+
+jobs:
+  test:
+    runs-on: node-22
+    steps:
+      - uses: actions/checkout@v4
+        with:
+          fetch-depth: 1
+
+      - name: Install uv
+        uses: https://github.com/astral-sh/setup-uv@v7.1.4
+        with:
+          enable-cache: true
+          prune-cache: false
+          cache-dependency-glob: "uv.lock"
+          github-token: ${{ secrets.GITHUBAUTH }}
+
+      - name: Install Python dependencies
+        run: uv sync --group dev
+
+      - name: Ruff Check
+        run: uv run ruff check app/ tests/
+
+      - name: Ruff Format Check
+        run: uv run ruff format --check app/ tests/
+
+      - name: Type check (basedpyright)
+        run: uv run basedpyright app/ tests/
+
+      - name: Run tests (unittest)
+        run: uv run python -m unittest discover -s tests -v

pheme_reviews-0.1.0/.forgejo/workflows/react.yml

@@ -0,0 +1,25 @@
+# Forgejo Actions — React pipeline (production build of react-app/).
+#
+# Runs on the runner labelled `node-22`, which provides the node:22 image
+# and its npm.
+
+name: React
+
+on: [push]
+
+jobs:
+  build:
+    runs-on: node-22
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v7
+
+      - name: Install dependencies
+        run: |
+          cd react-app
+          npm ci
+
+      - name: Build React app
+        run: |
+          cd react-app
+          npm run build

pheme_reviews-0.1.0/.forgejo/workflows/release.yml

@@ -0,0 +1,94 @@
+# Forgejo Actions — release pipeline.
+#
+# Pushing a tag (`git tag v0.2.0 && git push origin v0.2.0`) runs this
+# workflow, which does two things:
+#
+#   1. Packages a source snapshot of the tagged tree (git archive → release/)
+#      and uploads it to a Forgejo release for the tag via the forgejo-release
+#      action.
+#   2. Builds the React frontend (`npm ci && npm run build`) and the sdist +
+#      wheel with hatchling (`uv build` — the wheel bundles react-app/dist,
+#      see the force-include in pyproject.toml), then publishes to PyPI
+#      (`uv publish`) using the PYPI_API_TOKEN repo secret. The publish step
+#      is skipped until that secret exists.
+#
+# The published version is the static `version` in pyproject.toml — bump it
+# before tagging. The PyPI project name is `[project] name` ("pheme-reviews";
+# plain "pheme" is already taken on PyPI by an unrelated project). To derive
+# the version from the tag instead, switch pyproject.toml to
+# dynamic = ["version"] + hatch-vcs later.
+#
+# Runs on the runner labelled `node-22` (provides git + node for the action).
+# The forgejo-release token defaults to the automatic forgejo token, which has
+# write access on push events.
+
+name: Release
+
+on:
+  push:
+    tags:
+      - "v*"
+
+jobs:
+  release:
+    runs-on: node-22
+    steps:
+      # Install git BEFORE checkout if the runner image lacks it: without git,
+      # actions/checkout falls back to downloading a tarball, which leaves no
+      # .git directory — and then `git archive` below fails. Use apt-get with
+      # update first (a fresh image has empty package lists, which is what made
+      # `apt install git` fail with "Unable to locate package git").
+      - name: Ensure git is installed
+        run: |
+          if ! command -v git >/dev/null 2>&1; then
+            apt-get update && apt-get install -y git
+          fi
+
+      - uses: actions/checkout@v4
+
+      - name: Package a source snapshot of the tagged tree
+        run: |
+          mkdir -p release
+          git archive --format=tar.gz --prefix="pheme-${{ forgejo.ref_name }}/" \
+            -o "release/pheme-${{ forgejo.ref_name }}.tar.gz" HEAD
+          git archive --format=zip --prefix="pheme-${{ forgejo.ref_name }}/" \
+            -o "release/pheme-${{ forgejo.ref_name }}.zip" HEAD
+          ls -la release
+
+      - uses: https://code.forgejo.org/actions/forgejo-release@v2.7.3
+        with:
+          url: "https://forge.mielle.dev"
+          repo: "${{ forgejo.repository }}"
+          direction: upload
+          tag: "${{ forgejo.ref_name }}"
+          sha: "${{ forgejo.sha }}"
+          release-dir: release
+          override: false
+          verbose: false
+          hide-archive-link: true
+          release-notes-assistant: false
+
+      - name: Install uv
+        uses: https://github.com/astral-sh/setup-uv@v7.1.4
+        with:
+          enable-cache: true
+          prune-cache: false
+          cache-dependency-glob: "uv.lock"
+          github-token: ${{ secrets.GITHUBAUTH }}
+
+      - name: Build the React frontend (bundled into the wheel)
+        run: |
+          cd react-app
+          npm ci
+          npm run build
+
+      - name: Build sdist + wheel (hatchling)
+        run: |
+          uv build --out-dir dist
+          ls -la dist
+
+      - name: Publish to PyPI
+        if: ${{ secrets.PYPI_API_TOKEN != '' }}
+        env:
+          UV_PUBLISH_TOKEN: ${{ secrets.PYPI_API_TOKEN }}
+        run: uv publish dist/*

pheme_reviews-0.1.0/.gitignore

@@ -0,0 +1,22 @@
+# Python-generated files
+__pycache__/
+*.py[oc]
+build/
+/dist/
+wheels/
+*.egg-info
+
+# Virtual environments
+.venv
+data/
+
+# Environment files
+.env
+
+# React app (react-app/) — JS toolchain artifacts
+react-app/node_modules/
+# Ignore the built frontend, but keep the directory itself tracked (via the
+# .gitkeep placeholder): hatchling prunes gitignored directories during file
+# selection, and the wheel must bundle react-app/dist when it is built.
+react-app/dist/*
+!react-app/dist/.gitkeep

pheme_reviews-0.1.0/.python-version

@@ -0,0 +1 @@
+3.13

pheme_reviews-0.1.0/.theia/settings.json

@@ -0,0 +1,5 @@
+{
+    "[markdown]": {
+        "editor.defaultFormatter": "davidanson.vscode-markdownlint"
+    }
+}