pinky-core 0.1.0.dev1__tar.gz

pinky_core-0.1.0.dev1/.github/workflows/ci.yml

@@ -0,0 +1,39 @@
+name: CI
+
+on:
+  push:
+    branches: [main, develop]
+  pull_request:
+    branches: [main, develop]
+
+jobs:
+  ci:
+    runs-on: ubuntu-latest
+    env:
+      FORCE_JAVASCRIPT_ACTIONS_TO_NODE24: true
+
+    steps:
+      - uses: actions/checkout@v4
+
+      - name: Set up Python 3.11
+        uses: actions/setup-python@v5
+        with:
+          python-version: "3.11"
+
+      - name: Install dependencies
+        run: pip install -e ".[validate,address,dev]"
+
+      - name: Lint
+        run: ruff check src/ tests/
+
+      - name: Format check
+        run: ruff format --check src/ tests/
+
+      - name: Type check
+        run: mypy src/pinky_core/
+
+      - name: Security scan
+        run: bandit -r src/pinky_core/ -ll
+
+      - name: Tests
+        run: pytest

pinky_core-0.1.0.dev1/.github/workflows/publish.yml

@@ -0,0 +1,32 @@
+name: Publish to PyPI
+
+on:
+  push:
+    tags:
+      - "v*.dev*"
+
+jobs:
+  publish:
+    runs-on: ubuntu-latest
+    env:
+      FORCE_JAVASCRIPT_ACTIONS_TO_NODE24: true
+    permissions:
+      contents: read
+      id-token: write  # required for trusted publishing (OIDC)
+
+    steps:
+      - uses: actions/checkout@v4
+
+      - name: Set up Python 3.11
+        uses: actions/setup-python@v5
+        with:
+          python-version: "3.11"
+
+      - name: Install build
+        run: pip install build
+
+      - name: Build wheel and sdist
+        run: python -m build
+
+      - name: Publish to PyPI
+        uses: pypa/gh-action-pypi-publish@release/v1

pinky_core-0.1.0.dev1/.github/workflows/release.yml

@@ -0,0 +1,47 @@
+name: Release
+
+on:
+  push:
+    branches: [main]
+
+jobs:
+  release:
+    runs-on: ubuntu-latest
+    env:
+      FORCE_JAVASCRIPT_ACTIONS_TO_NODE24: true
+    permissions:
+      contents: write
+      id-token: write
+
+    steps:
+      - uses: actions/checkout@v4
+
+      - name: Read version
+        id: version
+        run: echo "version=$(grep '^version' pyproject.toml | cut -d'"' -f2)" >> $GITHUB_OUTPUT
+
+      - name: Guard — no .dev version on main
+        run: |
+          if [[ "${{ steps.version.outputs.version }}" == *".dev"* ]]; then
+            echo "❌ version .dev sur main — bumper la version avant de merger"
+            exit 1
+          fi
+
+      - name: Create tag
+        run: |
+          git tag "v${{ steps.version.outputs.version }}"
+          git push origin "v${{ steps.version.outputs.version }}"
+
+      - name: Set up Python 3.11
+        uses: actions/setup-python@v5
+        with:
+          python-version: "3.11"
+
+      - name: Install build
+        run: pip install build
+
+      - name: Build
+        run: python -m build
+
+      - name: Publish to PyPI
+        uses: pypa/gh-action-pypi-publish@release/v1

pinky_core-0.1.0.dev1/.gitignore

@@ -0,0 +1,60 @@
+# ── Python ───────────────────────────────────────────────────────────────────
+__pycache__/
+*.py[cod]
+*.pyo
+*.pyd
+.Python
+*.egg-info/
+dist/
+build/
+*.egg
+.eggs/
+
+# ── Environments ─────────────────────────────────────────────────────────────
+.env
+.venv/
+venv/
+.conda/
+
+# ── Tools cache ──────────────────────────────────────────────────────────────
+.ruff_cache/
+.mypy_cache/
+.pytest_cache/
+.pre-commit-cache/
+htmlcov/
+.coverage
+.coverage.*
+coverage.xml
+
+# ── Generated docs ───────────────────────────────────────────────────────────
+# docs/api/ is versioned — regenerate with: pdoc snowflake_kit -o docs/api/ or wget
+# Heavy wget mirrors are excluded (1 GB+)
+docs/api/*/*.com/
+# Local MkDocs assets — symlinked from pinky-studio for local dev, not committed
+docs/assets/
+site/
+
+# ── Provider cache ───────────────────────────────────────────────────────────
+.snowflake-provider/
+
+# ── Local dev ────────────────────────────────────────────────────────────────
+.local/
+*.local.json
+
+# ── Snowflake credentials ────────────────────────────────────────────────────
+*.p8
+connection.json
+connections.toml
+.snowflake/
+
+# ── macOS ────────────────────────────────────────────────────────────────────
+.DS_Store
+.AppleDouble
+.LSOverride
+
+# ── VSCode ───────────────────────────────────────────────────────────────────
+# (keep .vscode/extensions.json and .vscode/settings.json — versioned)
+.vscode/*.log
+
+# ── Plan output ──────────────────────────────────────────────────────────────
+out/

pinky_core-0.1.0.dev1/.pre-commit-config.yaml

@@ -0,0 +1,125 @@
+---
+# =============================================================================
+# .pre-commit-config.yaml — snowflake-kit
+# =============================================================================
+# Install:
+#   pip install pre-commit
+#   pre-commit install
+#   pre-commit install --hook-type commit-msg
+#
+# Update standard hooks:
+#   pre-commit autoupdate
+# =============================================================================
+default_install_hook_types: [pre-commit, commit-msg]
+
+repos:
+  # ── Formatting: trailing spaces + newline ─────────────────────────────────
+  - repo: https://github.com/pre-commit/pre-commit-hooks
+    rev: v6.0.0
+    hooks:
+      - id: trailing-whitespace
+      - id: end-of-file-fixer
+      - id: check-yaml
+      - id: check-toml
+      - id: check-merge-conflict
+      - id: debug-statements
+
+  # ── Formatting: Markdown ──────────────────────────────────────────────────
+  - repo: local
+    hooks:
+      - id: mdformat
+        name: mdformat
+        entry: mdformat
+        language: system
+        files: ^README\.md$
+
+  # ── Security: secrets & forbidden files ──────────────────────────────────
+  - repo: https://github.com/gitleaks/gitleaks
+    rev: v8.30.0
+    hooks:
+      - id: gitleaks
+
+  # ── Security: alternative secret detection ────────────────────────────────
+  - repo: https://github.com/Yelp/detect-secrets
+    rev: v1.5.0
+    hooks:
+      - id: detect-secrets
+        args: ["--baseline", ".secrets.baseline"]
+        exclude: ^docs/
+
+  # ── Python: ruff lint + format ────────────────────────────────────────────
+  - repo: https://github.com/astral-sh/ruff-pre-commit
+    rev: v0.15.9
+    hooks:
+      - id: ruff-check
+        args: [--no-fix]
+      - id: ruff-format
+        args: [--check]
+
+  # ── Python: type checking ─────────────────────────────────────────────────
+  - repo: local
+    hooks:
+      - id: mypy
+        name: mypy
+        entry: mypy
+        language: system
+        types: [python]
+        args: [--ignore-missing-imports]
+        files: ^src/
+
+  # ── Python: security ─────────────────────────────────────────────────────
+  - repo: local
+    hooks:
+      - id: bandit
+        name: bandit
+        entry: bandit
+        language: system
+        pass_filenames: false
+        args: [-r, src/, -ll]
+
+  # ── Zero-width spaces (copy-paste from Outlook/Teams) ────────────────────
+  - repo: local
+    hooks:
+      - id: check-zws
+        name: "[ZWS] Invisible characters (zero-width)"
+        entry: python scripts/hooks/check_zws.py
+        language: system
+        pass_filenames: true
+
+  # ── Typed API guard ──────────────────────────────────────────────────────
+  - repo: local
+    hooks:
+      - id: check-typed-api
+        name: "[TYPED-API] No raw dict/tuple/set in public annotations"
+        entry: python scripts/hooks/check_typed_api.py
+        language: system
+        types: [python]
+        files: ^src/
+
+  # ── Employer reference guard ──────────────────────────────────────────────
+  - repo: local
+    hooks:
+      - id: check-forbidden-keywords
+        name: "[FORBIDDEN] Employer references"
+        entry: python scripts/hooks/check_forbidden_keywords.py
+        language: system
+        pass_filenames: true
+
+  # ── Docs up-to-date check ─────────────────────────────────────────────────
+  - repo: local
+    hooks:
+      - id: check-docs-up-to-date
+        name: Docs up-to-date (README + pdoc)
+        entry: scripts/hooks/check-docs-up-to-date
+        language: script
+        stages: [pre-commit]
+        pass_filenames: false
+
+  # ── Commit message format ─────────────────────────────────────────────────
+  - repo: local
+    hooks:
+      - id: commit-msg-format
+        name: Commit message format
+        entry: scripts/hooks/commit-msg
+        language: script
+        stages: [commit-msg]

pinky_core-0.1.0.dev1/.secrets.baseline

@@ -0,0 +1,127 @@
+{
+  "version": "1.5.0",
+  "plugins_used": [
+    {
+      "name": "ArtifactoryDetector"
+    },
+    {
+      "name": "AWSKeyDetector"
+    },
+    {
+      "name": "AzureStorageKeyDetector"
+    },
+    {
+      "name": "Base64HighEntropyString",
+      "limit": 4.5
+    },
+    {
+      "name": "BasicAuthDetector"
+    },
+    {
+      "name": "CloudantDetector"
+    },
+    {
+      "name": "DiscordBotTokenDetector"
+    },
+    {
+      "name": "GitHubTokenDetector"
+    },
+    {
+      "name": "GitLabTokenDetector"
+    },
+    {
+      "name": "HexHighEntropyString",
+      "limit": 3.0
+    },
+    {
+      "name": "IbmCloudIamDetector"
+    },
+    {
+      "name": "IbmCosHmacDetector"
+    },
+    {
+      "name": "IPPublicDetector"
+    },
+    {
+      "name": "JwtTokenDetector"
+    },
+    {
+      "name": "KeywordDetector",
+      "keyword_exclude": ""
+    },
+    {
+      "name": "MailchimpDetector"
+    },
+    {
+      "name": "NpmDetector"
+    },
+    {
+      "name": "OpenAIDetector"
+    },
+    {
+      "name": "PrivateKeyDetector"
+    },
+    {
+      "name": "PypiTokenDetector"
+    },
+    {
+      "name": "SendGridDetector"
+    },
+    {
+      "name": "SlackDetector"
+    },
+    {
+      "name": "SoftlayerDetector"
+    },
+    {
+      "name": "SquareOAuthDetector"
+    },
+    {
+      "name": "StripeDetector"
+    },
+    {
+      "name": "TelegramBotTokenDetector"
+    },
+    {
+      "name": "TwilioKeyDetector"
+    }
+  ],
+  "filters_used": [
+    {
+      "path": "detect_secrets.filters.allowlist.is_line_allowlisted"
+    },
+    {
+      "path": "detect_secrets.filters.common.is_ignored_due_to_verification_policies",
+      "min_level": 2
+    },
+    {
+      "path": "detect_secrets.filters.heuristic.is_indirect_reference"
+    },
+    {
+      "path": "detect_secrets.filters.heuristic.is_likely_id_string"
+    },
+    {
+      "path": "detect_secrets.filters.heuristic.is_lock_file"
+    },
+    {
+      "path": "detect_secrets.filters.heuristic.is_not_alphanumeric_string"
+    },
+    {
+      "path": "detect_secrets.filters.heuristic.is_potential_uuid"
+    },
+    {
+      "path": "detect_secrets.filters.heuristic.is_prefixed_with_dollar_sign"
+    },
+    {
+      "path": "detect_secrets.filters.heuristic.is_sequential_string"
+    },
+    {
+      "path": "detect_secrets.filters.heuristic.is_swagger_file"
+    },
+    {
+      "path": "detect_secrets.filters.heuristic.is_templated_secret"
+    }
+  ],
+  "results": {},
+  "generated_at": "2026-05-10T19:21:47Z"
+}

pinky_core-0.1.0.dev1/.vscode/extensions.json

@@ -0,0 +1,35 @@
+{
+  "recommendations": [
+    // ── AI ────────────────────────────────────────────────────────────────────
+    "anthropic.claude-code",
+
+    // ── Git / GitHub ──────────────────────────────────────────────────────────
+    "eamodio.gitlens",
+    "github.vscode-pull-request-github",
+    "github.vscode-github-actions",
+
+    // ── Python ────────────────────────────────────────────────────────────────
+    "ms-python.python",
+    "ms-python.pylance",
+    "charliermarsh.ruff",
+
+    // ── Snowflake ─────────────────────────────────────────────────────────────
+    "snowflake.snowflake-vsc",
+
+    // ── YAML ──────────────────────────────────────────────────────────────────
+    "redhat.vscode-yaml",
+
+    // ── Markdown ──────────────────────────────────────────────────────────────
+    "yzhang.markdown-all-in-one",
+    "bierner.markdown-mermaid",
+
+    // ── Data files ────────────────────────────────────────────────────────────
+    "mechatroner.rainbow-csv",
+    "AykutSarac.jsoncrack-vscode",
+    "redhat.vscode-xml",
+
+    // ── DX ────────────────────────────────────────────────────────────────────
+    "oderwat.indent-rainbow",
+    "ryu1kn.partial-diff"
+  ]
+}

pinky_core-0.1.0.dev1/.vscode/settings.json

@@ -0,0 +1,46 @@
+{
+  // ── Python ──────────────────────────────────────────────────────────────────
+  "python.defaultInterpreterPath": "~/miniforge3/envs/snowflake-kit/bin/python",
+  "python.analysis.typeCheckingMode": "basic",
+
+  // ── Ruff ────────────────────────────────────────────────────────────────────
+  "[python]": {
+    "editor.defaultFormatter": "charliermarsh.ruff",
+    "editor.formatOnSave": true,
+    "editor.codeActionsOnSave": {
+      "source.fixAll.ruff": "explicit",
+      "source.organizeImports.ruff": "explicit"
+    }
+  },
+
+  // ── YAML ────────────────────────────────────────────────────────────────────
+  "[yaml]": {
+    "editor.defaultFormatter": "redhat.vscode-yaml",
+    "editor.formatOnSave": true
+  },
+  "yaml.schemas": {
+    "./schemas/*.schema.json": "resources/**/*.yml"
+  },
+
+  // ── Editor ──────────────────────────────────────────────────────────────────
+  "editor.rulers": [88],
+  "editor.tabSize": 4,
+  "editor.insertSpaces": true,
+  "editor.trimAutoWhitespace": true,
+  "files.trimTrailingWhitespace": true,
+  "files.insertFinalNewline": true,
+
+  // ── Git ─────────────────────────────────────────────────────────────────────
+  "git.autofetch": true,
+  "git.confirmSync": false,
+  "gitlens.currentLine.enabled": true,
+
+  // ── Explorer ────────────────────────────────────────────────────────────────
+  "files.exclude": {
+    "**/__pycache__": true,
+    "**/.ruff_cache": true,
+    "**/.mypy_cache": true,
+    "**/*.egg-info": true,
+    "**/.snowflake-provider": true
+  }
+}