pubship 0.24.0__tar.gz

pubship-0.24.0/.dockerignore

@@ -0,0 +1,13 @@
+# An allowlist avoids sending credentials and local exports to the Docker daemon.
+**
+!pyproject.toml
+!uv.lock
+!README.md
+!LICENSE
+!src/
+!src/pubship/
+!src/pubship/*.py
+!src/pubship/methods.json
+!src/pubship/contracts.json
+!THIRD_PARTY_NOTICES.md
+!TRADEMARKS.md

pubship-0.24.0/.gitignore

@@ -0,0 +1,27 @@
+.venv/
+__pycache__/
+*.py[cod]
+.pytest_cache/
+.ruff_cache/
+.coverage
+coverage.xml
+htmlcov/
+dist/
+*.egg-info/
+.env
+.env.*
+!.env.example
+*credentials*.json
+*service-account*.json
+reports/
+.DS_Store
+*.pem
+*.key
+*.p12
+*.pfx
+client_secret*.json
+application_default_credentials.json
+secrets/
+private/
+*.sqlite*
+*.db

pubship-0.24.0/AGENTS.md

@@ -0,0 +1,26 @@
+# PubShip project instructions
+
+Owner: Denys Vorobyov. AGPL-3.0-only is fixed. No outside code contributions. Accept bug reports, ideas and questions as issues, not submitted code. Preserve third-party notices. No Google marks in product names or logos.
+
+## Product boundaries
+
+Local-first, with the developer's own credentials. No project-run Google service. Self-hosting is only for the operator's own Google accounts. PUBSHIP_SERVER_ALLOWED_EMAILS is mandatory and must match Google's cryptographically verified email before credentials are stored. Enrollment is closed by default. Never add ADC fallback to HTTP mode or bypass the allowlist. Voided-purchase data must never reach an MCP client.
+
+Keep GOOGLE_PLAY_* environment names stable. HTTP configuration uses PUBSHIP_SERVER_*. Never commit credentials, account exports or operator configuration. Tests use fakes, with GOOGLE_APPLICATION_CREDENTIALS unset at invocation. Keep dependencies, CI actions and generated discovery metadata reproducible. Do not describe synthetic tests as live Google verification.
+
+## Four-hat delivery
+
+1. Architecture: review contracts, authorization, identity, storage and failure paths.
+2. Engineering: implement focused changes and perform adversarial code review.
+3. QA: test success, rejection, isolation, packaging and client behavior. Never weaken a failing check.
+4. Delivery/TPM: keep scope, issue/PR links, README, release notes and validation evidence synchronized.
+
+Keep issue -> branch -> PR -> checks -> owner review -> merge -> bundled release traceable. Never approve a review or GitHub deployment yourself. Do not rewrite published tags or assets. Never add unsolicited commit attribution.
+
+## Documentation and website
+
+Review https://github.com/pubship/website in the same delivery cycle for every feature, authentication, release or data-handling change. Record exact claims checked when no website change is needed. Distinguish available source, published packages and deployments. Keep README, Claude Code, Codex and generic MCP client instructions aligned. No em-dashes in shipped files.
+
+## Commands
+
+Use uv with the src layout. Run full pytest, ruff check, ruff format --check, generator checks, uv build, artifact inspection and redacted secret scanning. Use the pinned API discovery files without fetching credentials or changing provider contracts.

pubship-0.24.0/CHANGELOG.md

@@ -0,0 +1,14 @@
+# Changelog
+
+## 0.24.0
+
+- Distribution, import package and MCP name are `pubship`. Commands are `pubship` and `pubship-server`.
+- Local use with your own Google credentials is the primary experience. The project does not operate a Google-connected service.
+- Self-host configuration uses `PUBSHIP_SERVER_*`; local `GOOGLE_PLAY_*` names remain unchanged.
+- Self-host startup requires an exact operator email allowlist. Signed Google identity, verified email and nonce are checked before storing credentials. Old or removed-account grants cannot be reused.
+- Voided-purchases access is disabled in all execution paths. The inventory preserves its official definition as policy disabled.
+- Legal notices, client setup, website and distribution workflows use the new identity. Outside code contributions are not accepted.
+
+## Validation
+
+This candidate must pass the full synthetic suite, lint/format, generator checks, packaging, artifact inspection, secret scanning and website checks before publication. No real Google credentials or production mutations are used for migration acceptance. Publication and deployment require separate owner gates.

pubship-0.24.0/CLAUDE.md

@@ -0,0 +1,26 @@
+# Claude Code instructions
+
+Read and follow [AGENTS.md](AGENTS.md).
+
+# PubShip project instructions
+
+Owner: Denys Vorobyov. AGPL-3.0-only is fixed. No outside code contributions. Accept bug reports, ideas and questions as issues, not submitted code. Preserve third-party notices. No Google marks in product names or logos.
+
+## Product boundaries
+
+Local-first, with the developer's own credentials. No project-run Google service. Self-hosting is only for the operator's own Google accounts. PUBSHIP_SERVER_ALLOWED_EMAILS is mandatory and must match Google's cryptographically verified email before credentials are stored. Enrollment is closed by default. Never add ADC fallback to HTTP mode or bypass the allowlist. Voided-purchase data must never reach an MCP client.
+
+Keep GOOGLE_PLAY_* environment names stable. HTTP configuration uses PUBSHIP_SERVER_*. Never commit credentials, account exports or operator configuration. Tests use fakes, with GOOGLE_APPLICATION_CREDENTIALS unset at invocation. Keep dependencies, CI actions and generated discovery metadata reproducible. Do not describe synthetic tests as live Google verification.
+
+## Four-hat delivery
+
+1. Architecture: review contracts, authorization, identity, storage and failure paths.
+2. Engineering: implement focused changes and perform adversarial code review.
+3. QA: test success, rejection, isolation, packaging and client behavior. Never weaken a failing check.
+4. Delivery/TPM: keep scope, issue/PR links, README, release notes and validation evidence synchronized.
+
+Keep issue -> branch -> PR -> checks -> owner review -> merge -> bundled release traceable. Never approve a review or GitHub deployment yourself. Do not rewrite published tags or assets. Never add unsolicited commit attribution.
+
+## Documentation and website
+
+Review https://github.com/pubship/website in the same delivery cycle for every feature, authentication, release or data-handling change. Record exact claims checked when no website change is needed. Distinguish available source, published packages and deployments. Keep README, Claude Code, Codex and generic MCP client instructions aligned. No em-dashes in shipped files.

pubship-0.24.0/CONTRIBUTING.md

@@ -0,0 +1,3 @@
+# Contributing
+
+PubShip is open source but does not accept code contributions. Bug reports, ideas and questions are welcome as issues; please describe them in words, as code posted in issues or pull requests will not be merged. This keeps one copyright holder, so PubShip can also be offered under other license terms. Send security reports to security@pubship.dev, never to public issues.

pubship-0.24.0/Dockerfile

@@ -0,0 +1,21 @@
+FROM ghcr.io/astral-sh/uv:0.11.14@sha256:1025398289b62de8269e70c45b91ffa37c373f38118d7da036fb8bb8efc85d97 AS uv
+FROM python:3.14-slim-trixie@sha256:c3e521df8b2b498a7a682e7e18676771cb80c6b75b8699af886b2d554ce40151 AS build
+COPY --from=uv /uv /usr/local/bin/uv
+WORKDIR /opt/app
+COPY pyproject.toml uv.lock README.md LICENSE THIRD_PARTY_NOTICES.md TRADEMARKS.md ./
+COPY src ./src
+ENV UV_LINK_MODE=copy UV_PYTHON_DOWNLOADS=never
+RUN uv sync --frozen --extra hosted --no-dev --no-editable --python /usr/local/bin/python
+
+FROM python:3.14-slim-trixie@sha256:c3e521df8b2b498a7a682e7e18676771cb80c6b75b8699af886b2d554ce40151
+LABEL org.opencontainers.image.source="https://github.com/pubship/pubship" \
+      org.opencontainers.image.licenses="AGPL-3.0-only"
+RUN useradd --uid 10001 --create-home --shell /usr/sbin/nologin mcp \
+    && install -d -m 0700 -o 10001 -g 10001 /var/lib/pubship-transfers
+COPY --from=build /opt/app/.venv /opt/app/.venv
+ENV PATH="/opt/app/.venv/bin:$PATH" PYTHONDONTWRITEBYTECODE=1 PYTHONUNBUFFERED=1
+USER 10001:10001
+WORKDIR /home/mcp
+EXPOSE 8080
+ENTRYPOINT ["pubship-server"]
+CMD ["--host", "0.0.0.0", "--port", "8080"]

pubship-0.24.0/LEGAL.md

@@ -0,0 +1,13 @@
+# Intended use and legal notices
+
+PubShip helps developers automate their own Google Play distribution work. It runs on your computer or on infrastructure you control, with your own Google credentials and Play Console permissions. The PubShip project does not run a hosted service and never receives your credentials. Use it only for apps and developer accounts that you or your organization own, and follow Google's Play Developer API Terms. Hosted PubShip instances run by others are not provided or endorsed by the PubShip project.
+
+PubShip is an independent open-source project and is not affiliated with, endorsed by, or sponsored by Google. Google, Google Play and Android are trademarks of Google LLC.
+
+PubShip is free software under the GNU Affero General Public License v3.0 only (AGPL-3.0-only). Copyright (C) 2026 Denys Vorobyov. For other license terms, contact legal@pubship.dev.
+
+See [LICENSE](LICENSE), [TRADEMARKS.md](TRADEMARKS.md) and third-party notices for the applicable terms. Third-party dependencies and provider definitions retain their own licenses and notices.
+
+## Provider definitions
+
+Pinned discovery descriptions and schemas originate from Google, not Denys Vorobyov. Their provenance is recorded in api/README.md and THIRD_PARTY_NOTICES.md. Preserve applicable upstream rights and notices; the project license does not relicense Google-origin material. Confirm the redistribution basis for those inputs with counsel before making broader ownership claims.