pwshpy 1.0.0__tar.gz

pwshpy-1.0.0/.claude-plugin/marketplace.json

@@ -0,0 +1,14 @@
+{
+  "name": "pwshpy",
+  "owner": { "name": "bitranox" },
+  "metadata": {
+    "description": "pwshpy delivered as a single Claude Code plugin: the using-pwsh skill for using pwshpy (a Pythonic PowerShell) instead of writing or debugging PowerShell / .ps1."
+  },
+  "plugins": [
+    {
+      "name": "pwshpy",
+      "source": ".",
+      "description": "Use pwshpy - a genuinely Pythonic PowerShell (typed records + a lazy pipeline, as a library and a CLI) - instead of writing, modifying, or debugging pwsh / .ps1; and translate cmdlets and .ps1 scripts to it."
+    }
+  ]
+}

pwshpy-1.0.0/.claude-plugin/plugin.json

@@ -0,0 +1,9 @@
+{
+  "name": "pwshpy",
+  "description": "A genuinely Pythonic PowerShell: typed records and a lazy pipeline over native OS bindings, never a pwsh.exe subprocess and never text parsing. Ships the using-pwsh skill: use pwshpy (the `from pwshpy import ps` library and the `pwshpy` CLI) instead of writing or debugging PowerShell / .ps1, and translate cmdlets and .ps1 scripts to it.",
+  "version": "1.0.0",
+  "author": { "name": "bitranox" },
+  "homepage": "https://github.com/bitranox/pwshpy",
+  "repository": "https://github.com/bitranox/pwshpy",
+  "license": "MIT"
+}

pwshpy-1.0.0/.devcontainer/devcontainer.json

@@ -0,0 +1,22 @@
+{
+  "image": "mcr.microsoft.com/devcontainers/python:3.13",
+
+  "postCreateCommand": "bash -lc '\nPY=/usr/local/bin/python;\n$PY -m pip install -U pip && \\\n$PY -m pip install ipykernel && \\\n$PY -m pip install -e . && \\\n# register kernel using this exact interpreter\n$PY -m ipykernel install --name=python3 --display-name=\"Python 3 (3.13)\" --user && \\\n# patch the notebook to point to the python3 kernelspec (VS Code will bind to /usr/local/bin/python)\n$PY - <<\"PY\"\nimport json, pathlib\np = pathlib.Path(\"notebooks/Quickstart.ipynb\")\nif p.exists():\n    nb = json.loads(p.read_text(encoding=\"utf-8\"))\n    md = nb.setdefault(\"metadata\", {})\n    md[\"kernelspec\"] = {\n        \"name\": \"python3\",\n        \"display_name\": \"Python 3 (3.13)\",\n        \"language\": \"python\"\n    }\n    md[\"language_info\"] = {\"name\": \"python\"}\n    p.write_text(json.dumps(nb, ensure_ascii=False, indent=1), encoding=\"utf-8\")\n    print(\"Pinned kernelspec to python3 in\", p)\nelse:\n    print(\"Notebook not found:\", p)\nPY'\n",
+
+  "customizations": {
+    "vscode": {
+      "extensions": ["ms-toolsai.jupyter", "ms-python.python"],
+      "settings": {
+        "workbench.startupEditor": "none",
+        "jupyter.alwaysTrustNotebooks": true,
+        "jupyter.kernelPickerType": "OnlyRecommended",
+        "python.defaultInterpreterPath": "/usr/local/bin/python"
+      }
+    },
+    "codespaces": {
+      "openFiles": ["README.md"]
+    }
+  },
+
+  "postAttachCommand": "bash -lc 'if [ -f notebooks/Quickstart.ipynb ]; then code -r notebooks/Quickstart.ipynb; fi'"
+}

pwshpy-1.0.0/.devcontainer/settings.json

@@ -0,0 +1,6 @@
+{
+  "python.defaultInterpreterPath": "/usr/local/bin/python3.13",
+  "jupyter.alwaysTrustNotebooks": true,
+  "jupyter.kernelPickerType": "OnlyRecommended",
+  "jupyter.askForKernelRestart": false
+}

pwshpy-1.0.0/.env.example

@@ -0,0 +1,312 @@
+# Copy to .env and fill values as needed.
+
+# Codecov upload token (required for private repos; optional for public repos)
+CODECOV_TOKEN=
+
+# PyPI API token for release workflow (.github/workflows/release.yml)
+# Format: pypi-AgENdGVzdC5weXBpLm9yZwIk...
+PYPI_API_TOKEN=
+
+# Optional: GitHub token for API-limited tasks
+GITHUB_TOKEN=
+
+
+# ==============================================================================
+# Logging Configuration (lib_log_rich)
+# ==============================================================================
+#
+# Naming Convention
+# -----------------
+# Format: <SECTION>__<KEY>=value (double underscore separates section from key)
+# Strings need no quotes. Booleans: true/false. Floats: 1.0. Lists: comma-separated.
+#
+# Full environment variable (outside .env):
+#   PWSHPY___LIB_LOG_RICH__<KEY>=value
+#
+# For nested subsections (e.g. payload_limits):
+#   PWSHPY___LIB_LOG_RICH__PAYLOAD_LIMITS__<KEY>=value
+#   .env: LIB_LOG_RICH__PAYLOAD_LIMITS__<KEY>=value
+
+# --- Core Identity ---
+
+# Purpose: Logical service name recorded in each log event
+# Type: string (non-empty)
+# Default: "pwshpy"
+# Environment Variable: PWSHPY___LIB_LOG_RICH__SERVICE=my-application
+# .env: LIB_LOG_RICH__SERVICE=my-application
+# LIB_LOG_RICH__SERVICE=my-application
+
+# Purpose: Deployment environment label
+# Type: string (non-empty)
+# Default: "prod"
+# Environment Variable: PWSHPY___LIB_LOG_RICH__ENVIRONMENT=dev
+# .env: LIB_LOG_RICH__ENVIRONMENT=dev
+# LIB_LOG_RICH__ENVIRONMENT=dev
+
+# --- Console Output ---
+
+# Purpose: Minimum severity level emitted to Rich console
+# Type: string (case-insensitive): "DEBUG", "INFO", "WARNING", "ERROR", "CRITICAL"
+# Default: "INFO"
+# Environment Variable: PWSHPY___LIB_LOG_RICH__CONSOLE_LEVEL=DEBUG
+# .env: LIB_LOG_RICH__CONSOLE_LEVEL=DEBUG
+# LIB_LOG_RICH__CONSOLE_LEVEL=DEBUG
+
+# Purpose: Where to send console output
+# Type: string: "stdout", "stderr", "both", "custom", "none"
+# Default: "stderr"
+# Environment Variable: PWSHPY___LIB_LOG_RICH__CONSOLE_STREAM=stderr
+# .env: LIB_LOG_RICH__CONSOLE_STREAM=stderr
+# LIB_LOG_RICH__CONSOLE_STREAM=stderr
+
+# Purpose: Console line layout preset
+# Type: string (case-insensitive): "full", "short", "full_loc", "short_loc"
+# Default: "short_loc"
+# Environment Variable: PWSHPY___LIB_LOG_RICH__CONSOLE_FORMAT_PRESET=short_loc
+# .env: LIB_LOG_RICH__CONSOLE_FORMAT_PRESET=short_loc
+# LIB_LOG_RICH__CONSOLE_FORMAT_PRESET=short_loc
+
+# Purpose: Custom console output template (overrides preset)
+# Type: string (Python str.format template); empty = uses preset
+# Default: (empty, uses preset)
+# Environment Variable: PWSHPY___LIB_LOG_RICH__CONSOLE_FORMAT_TEMPLATE={timestamp_trimmed_naive_loc} {level_code} {message}
+# .env: LIB_LOG_RICH__CONSOLE_FORMAT_TEMPLATE={timestamp_trimmed_naive_loc} {level_code} {message}
+# LIB_LOG_RICH__CONSOLE_FORMAT_TEMPLATE={timestamp_trimmed_naive_loc} {level_code} {message}
+
+# Purpose: Rich color palette for console output
+# Type: string: "classic", "dark", "neon", "pastel"
+# Default: "dark"
+# Environment Variable: PWSHPY___LIB_LOG_RICH__CONSOLE_THEME=dark
+# .env: LIB_LOG_RICH__CONSOLE_THEME=dark
+# LIB_LOG_RICH__CONSOLE_THEME=dark
+
+# Purpose: Override Rich styles per severity level (comma-separated LEVEL=style pairs)
+# Type: comma-separated LEVEL=style pairs
+# Default: (empty, uses theme defaults)
+# Environment Variable: PWSHPY___LIB_LOG_RICH__CONSOLE_STYLES=DEBUG=dim,ERROR=bold red
+# .env: LIB_LOG_RICH__CONSOLE_STYLES=DEBUG=dim,ERROR=bold red
+# LIB_LOG_RICH__CONSOLE_STYLES=DEBUG=dim,ERROR=bold red
+
+# Purpose: Force ANSI color output even when stderr is not a TTY
+# Type: boolean (true/false)
+# Default: false
+# Environment Variable: PWSHPY___LIB_LOG_RICH__FORCE_COLOR=true
+# .env: LIB_LOG_RICH__FORCE_COLOR=true
+# LIB_LOG_RICH__FORCE_COLOR=true
+
+# Purpose: Disable color output entirely (overrides force_color)
+# Type: boolean (true/false)
+# Default: false
+# Environment Variable: PWSHPY___LIB_LOG_RICH__NO_COLOR=false
+# .env: LIB_LOG_RICH__NO_COLOR=false
+# LIB_LOG_RICH__NO_COLOR=false
+
+# --- Backend Adapters ---
+
+# Purpose: Minimum severity threshold for journald and Windows Event Log
+# Type: string (case-insensitive): "DEBUG", "INFO", "WARNING", "ERROR", "CRITICAL"
+# Default: "WARNING"
+# Environment Variable: PWSHPY___LIB_LOG_RICH__BACKEND_LEVEL=WARNING
+# .env: LIB_LOG_RICH__BACKEND_LEVEL=WARNING
+# LIB_LOG_RICH__BACKEND_LEVEL=WARNING
+
+# Purpose: Enable systemd journald adapter (Linux only; requires python3-systemd)
+# Type: boolean (true/false)
+# Default: false
+# Environment Variable: PWSHPY___LIB_LOG_RICH__ENABLE_JOURNALD=true
+# .env: LIB_LOG_RICH__ENABLE_JOURNALD=true
+# LIB_LOG_RICH__ENABLE_JOURNALD=true
+
+# Purpose: Enable Windows Event Log adapter (Windows only)
+# Type: boolean (true/false)
+# Default: false
+# Environment Variable: PWSHPY___LIB_LOG_RICH__ENABLE_EVENTLOG=false
+# .env: LIB_LOG_RICH__ENABLE_EVENTLOG=false
+# LIB_LOG_RICH__ENABLE_EVENTLOG=false
+
+# --- Graylog / GELF ---
+
+# Purpose: Enable Graylog adapter for centralized logging
+# Type: boolean (true/false)
+# Default: false
+# Environment Variable: PWSHPY___LIB_LOG_RICH__ENABLE_GRAYLOG=true
+# .env: LIB_LOG_RICH__ENABLE_GRAYLOG=true
+# LIB_LOG_RICH__ENABLE_GRAYLOG=true
+
+# Purpose: Graylog server address (host:port)
+# Type: string "host:port"
+# Default: (none, must be configured to enable Graylog)
+# Environment Variable: PWSHPY___LIB_LOG_RICH__GRAYLOG_ENDPOINT=graylog.example.com:12201
+# .env: LIB_LOG_RICH__GRAYLOG_ENDPOINT=graylog.example.com:12201
+# LIB_LOG_RICH__GRAYLOG_ENDPOINT=graylog.example.com:12201
+
+# Purpose: Transport protocol for Graylog (tcp, udp); TLS only supported with tcp
+# Type: string: "tcp", "udp"
+# Default: "tcp"
+# Environment Variable: PWSHPY___LIB_LOG_RICH__GRAYLOG_PROTOCOL=tcp
+# .env: LIB_LOG_RICH__GRAYLOG_PROTOCOL=tcp
+# LIB_LOG_RICH__GRAYLOG_PROTOCOL=tcp
+
+# Purpose: Wrap Graylog TCP connection in TLS
+# Type: boolean (true/false)
+# Default: false
+# Environment Variable: PWSHPY___LIB_LOG_RICH__GRAYLOG_TLS=true
+# .env: LIB_LOG_RICH__GRAYLOG_TLS=true
+# LIB_LOG_RICH__GRAYLOG_TLS=true
+
+# Purpose: Minimum severity level sent to Graylog
+# Type: string (case-insensitive): "DEBUG", "INFO", "WARNING", "ERROR", "CRITICAL"
+# Default: "WARNING"
+# Environment Variable: PWSHPY___LIB_LOG_RICH__GRAYLOG_LEVEL=WARNING
+# .env: LIB_LOG_RICH__GRAYLOG_LEVEL=WARNING
+# LIB_LOG_RICH__GRAYLOG_LEVEL=WARNING
+
+# --- Queue Settings ---
+
+# Purpose: Route log events through background queue worker (false = synchronous, blocks on I/O)
+# Type: boolean (true/false)
+# Default: true
+# Environment Variable: PWSHPY___LIB_LOG_RICH__QUEUE_ENABLED=true
+# .env: LIB_LOG_RICH__QUEUE_ENABLED=true
+# LIB_LOG_RICH__QUEUE_ENABLED=true
+
+# Purpose: Maximum pending events before queue full policy applies
+# Type: integer (> 0)
+# Default: 2048
+# Environment Variable: PWSHPY___LIB_LOG_RICH__QUEUE_MAXSIZE=2048
+# .env: LIB_LOG_RICH__QUEUE_MAXSIZE=2048
+# LIB_LOG_RICH__QUEUE_MAXSIZE=2048
+
+# Purpose: Behavior when queue is full
+# Type: string: "block" (wait for space), "drop" (discard events)
+# Default: "block"
+# Environment Variable: PWSHPY___LIB_LOG_RICH__QUEUE_FULL_POLICY=block
+# .env: LIB_LOG_RICH__QUEUE_FULL_POLICY=block
+# LIB_LOG_RICH__QUEUE_FULL_POLICY=block
+
+# Purpose: Timeout in seconds for blocking queue puts (0 = infinite wait)
+# Type: float (>= 0)
+# Default: 1.0
+# Environment Variable: PWSHPY___LIB_LOG_RICH__QUEUE_PUT_TIMEOUT=1.0
+# .env: LIB_LOG_RICH__QUEUE_PUT_TIMEOUT=1.0
+# LIB_LOG_RICH__QUEUE_PUT_TIMEOUT=1.0
+
+# Purpose: Maximum wait in seconds for queue drain during shutdown
+# Type: float (> 0)
+# Default: 5.0
+# Environment Variable: PWSHPY___LIB_LOG_RICH__QUEUE_STOP_TIMEOUT=5.0
+# .env: LIB_LOG_RICH__QUEUE_STOP_TIMEOUT=5.0
+# LIB_LOG_RICH__QUEUE_STOP_TIMEOUT=5.0
+
+# --- Ring Buffer ---
+
+# Purpose: Enable in-memory circular buffer for log history (enables log.dump())
+# Type: boolean (true/false)
+# Default: true
+# Environment Variable: PWSHPY___LIB_LOG_RICH__ENABLE_RING_BUFFER=true
+# .env: LIB_LOG_RICH__ENABLE_RING_BUFFER=true
+# LIB_LOG_RICH__ENABLE_RING_BUFFER=true
+
+# Purpose: Maximum events retained in ring buffer
+# Type: integer (> 0)
+# Default: 25000
+# Environment Variable: PWSHPY___LIB_LOG_RICH__RING_BUFFER_SIZE=25000
+# .env: LIB_LOG_RICH__RING_BUFFER_SIZE=25000
+# LIB_LOG_RICH__RING_BUFFER_SIZE=25000
+
+# --- Dump Format ---
+
+# Purpose: Default layout for text dumps
+# Type: string (case-insensitive): "full", "short", "full_loc", "short_loc"
+# Default: "full"
+# Environment Variable: PWSHPY___LIB_LOG_RICH__DUMP_FORMAT_PRESET=full
+# .env: LIB_LOG_RICH__DUMP_FORMAT_PRESET=full
+# LIB_LOG_RICH__DUMP_FORMAT_PRESET=full
+
+# Purpose: Custom template for text dumps (overrides preset)
+# Type: string (Python str.format template); empty = uses preset
+# Default: (empty, uses preset)
+# Environment Variable: PWSHPY___LIB_LOG_RICH__DUMP_FORMAT_TEMPLATE={timestamp_trimmed_naive_loc} {level_code} {message}
+# .env: LIB_LOG_RICH__DUMP_FORMAT_TEMPLATE={timestamp_trimmed_naive_loc} {level_code} {message}
+# LIB_LOG_RICH__DUMP_FORMAT_TEMPLATE={timestamp_trimmed_naive_loc} {level_code} {message}
+
+# --- Security & Payload ---
+
+# Purpose: Regex patterns to redact sensitive data (comma-separated field=regex pairs)
+# Type: comma-separated field=regex pairs
+# Default: password=.+,secret=.+,token=.+
+# Environment Variable: PWSHPY___LIB_LOG_RICH__SCRUB_PATTERNS=password=.+,secret=.+,token=.+,api_key=.+
+# .env: LIB_LOG_RICH__SCRUB_PATTERNS=password=.+,secret=.+,token=.+,api_key=.+
+# LIB_LOG_RICH__SCRUB_PATTERNS=password=.+,secret=.+,token=.+,api_key=.+
+
+# Purpose: Throttle log emissions (MAX_EVENTS:WINDOW_SECONDS)
+# Type: string "max_events:window_seconds"
+# Default: (none, no rate limiting)
+# Environment Variable: PWSHPY___LIB_LOG_RICH__RATE_LIMIT=100:60
+# .env: LIB_LOG_RICH__RATE_LIMIT=100:60
+# LIB_LOG_RICH__RATE_LIMIT=100:60
+
+# --- Payload Limits ---
+
+# Purpose: Truncate vs reject oversized messages
+# Type: boolean (true/false)
+# Default: true
+# Environment Variable: PWSHPY___LIB_LOG_RICH__PAYLOAD_LIMITS__TRUNCATE_MESSAGE=true
+# .env: LIB_LOG_RICH__PAYLOAD_LIMITS__TRUNCATE_MESSAGE=true
+# LIB_LOG_RICH__PAYLOAD_LIMITS__TRUNCATE_MESSAGE=true
+
+# Purpose: Maximum characters in primary log message
+# Type: integer
+# Default: 4096
+# Environment Variable: PWSHPY___LIB_LOG_RICH__PAYLOAD_LIMITS__MESSAGE_MAX_CHARS=4096
+# .env: LIB_LOG_RICH__PAYLOAD_LIMITS__MESSAGE_MAX_CHARS=4096
+# LIB_LOG_RICH__PAYLOAD_LIMITS__MESSAGE_MAX_CHARS=4096
+
+# Purpose: Maximum keys in extra metadata dict
+# Type: integer
+# Default: 25
+# Environment Variable: PWSHPY___LIB_LOG_RICH__PAYLOAD_LIMITS__EXTRA_MAX_KEYS=25
+# .env: LIB_LOG_RICH__PAYLOAD_LIMITS__EXTRA_MAX_KEYS=25
+# LIB_LOG_RICH__PAYLOAD_LIMITS__EXTRA_MAX_KEYS=25
+
+# Purpose: Maximum characters per extra value (after stringify)
+# Type: integer
+# Default: 512
+# Environment Variable: PWSHPY___LIB_LOG_RICH__PAYLOAD_LIMITS__EXTRA_MAX_VALUE_CHARS=512
+# .env: LIB_LOG_RICH__PAYLOAD_LIMITS__EXTRA_MAX_VALUE_CHARS=512
+# LIB_LOG_RICH__PAYLOAD_LIMITS__EXTRA_MAX_VALUE_CHARS=512
+
+# Purpose: Maximum nesting depth for extra structures
+# Type: integer
+# Default: 3
+# Environment Variable: PWSHPY___LIB_LOG_RICH__PAYLOAD_LIMITS__EXTRA_MAX_DEPTH=3
+# .env: LIB_LOG_RICH__PAYLOAD_LIMITS__EXTRA_MAX_DEPTH=3
+# LIB_LOG_RICH__PAYLOAD_LIMITS__EXTRA_MAX_DEPTH=3
+
+# Purpose: Total UTF-8 byte limit for sanitized extra payload
+# Type: integer
+# Default: 8192
+# Environment Variable: PWSHPY___LIB_LOG_RICH__PAYLOAD_LIMITS__EXTRA_MAX_TOTAL_BYTES=8192
+# .env: LIB_LOG_RICH__PAYLOAD_LIMITS__EXTRA_MAX_TOTAL_BYTES=8192
+# LIB_LOG_RICH__PAYLOAD_LIMITS__EXTRA_MAX_TOTAL_BYTES=8192
+
+# Purpose: Maximum keys in LogContext.extra
+# Type: integer
+# Default: 20
+# Environment Variable: PWSHPY___LIB_LOG_RICH__PAYLOAD_LIMITS__CONTEXT_MAX_KEYS=20
+# .env: LIB_LOG_RICH__PAYLOAD_LIMITS__CONTEXT_MAX_KEYS=20
+# LIB_LOG_RICH__PAYLOAD_LIMITS__CONTEXT_MAX_KEYS=20
+
+# Purpose: Maximum characters per context value
+# Type: integer
+# Default: 256
+# Environment Variable: PWSHPY___LIB_LOG_RICH__PAYLOAD_LIMITS__CONTEXT_MAX_VALUE_CHARS=256
+# .env: LIB_LOG_RICH__PAYLOAD_LIMITS__CONTEXT_MAX_VALUE_CHARS=256
+# LIB_LOG_RICH__PAYLOAD_LIMITS__CONTEXT_MAX_VALUE_CHARS=256
+
+# Purpose: Number of frames preserved in exception tracebacks
+# Type: integer
+# Default: 10
+# Environment Variable: PWSHPY___LIB_LOG_RICH__PAYLOAD_LIMITS__STACKTRACE_MAX_FRAMES=10
+# .env: LIB_LOG_RICH__PAYLOAD_LIMITS__STACKTRACE_MAX_FRAMES=10
+# LIB_LOG_RICH__PAYLOAD_LIMITS__STACKTRACE_MAX_FRAMES=10

pwshpy-1.0.0/.gitattributes

@@ -0,0 +1,15 @@
+# Normalize every text file to LF in the repo AND the working tree, on every OS.
+# `text=auto` auto-detects binary and leaves it untouched; `eol=lf` forces LF checkout
+# so a Windows edit/save cannot reintroduce CRLF churn.
+* text=auto eol=lf
+
+# Runtime-critical: CRLF here breaks execution on Linux (^M in shebang / make recipes).
+Makefile     text eol=lf
+*.sh         text eol=lf
+*.py         text eol=lf
+*.ps1        text eol=lf
+*.toml       text eol=lf
+*.md         text eol=lf
+*.json       text eol=lf
+*.yml        text eol=lf
+*.yaml       text eol=lf

pwshpy-1.0.0/.github/actions/extract-metadata/action.yml

@@ -0,0 +1,92 @@
+name: Extract project metadata
+description: >-
+  Parse pyproject.toml and expose project metadata as step outputs.
+  Requires Python to be available in the runner environment.
+  Auto-installs rtoml if not already present.
+
+outputs:
+  PACKAGE_MODULE:
+    description: Python-importable module name (underscored)
+    value: ${{ steps.meta.outputs.PACKAGE_MODULE }}
+  PROJECT_NAME:
+    description: Project name from pyproject.toml
+    value: ${{ steps.meta.outputs.PROJECT_NAME }}
+  CLI_BIN:
+    description: CLI entry-point binary name
+    value: ${{ steps.meta.outputs.CLI_BIN }}
+  SRC_PATH:
+    description: Source directory path (e.g. "src")
+    value: ${{ steps.meta.outputs.SRC_PATH }}
+  COV_FAIL_UNDER:
+    description: Minimum coverage percentage from tool.coverage.report.fail_under
+    value: ${{ steps.meta.outputs.COV_FAIL_UNDER }}
+  COV_REPORT_FILE:
+    description: Coverage report filename (e.g. "coverage.xml")
+    value: ${{ steps.meta.outputs.COV_REPORT_FILE }}
+  PYTEST_VERBOSITY:
+    description: Pytest verbosity flag (e.g. "-vv")
+    value: ${{ steps.meta.outputs.PYTEST_VERBOSITY }}
+  BANDIT_SKIP_FLAG:
+    description: Bandit skip flag string (e.g. "-s B101,B601") or empty
+    value: ${{ steps.meta.outputs.BANDIT_SKIP_FLAG }}
+
+runs:
+  using: composite
+  steps:
+    - name: Extract project metadata from pyproject.toml
+      id: meta
+      shell: python
+      run: |
+        import os, subprocess, sys
+        try:
+            import rtoml
+        except ModuleNotFoundError:
+            subprocess.check_call([sys.executable, "-m", "pip", "install", "rtoml", "-q"])
+            import rtoml
+
+        from pathlib import Path
+        data = rtoml.load(Path('pyproject.toml'))
+
+        # --- [project] section ---
+        project = data['project']['name']
+        module = project.replace('-', '_')
+        dash = project.replace('_', '-')
+        scripts = list(data['project'].get('scripts', {}).keys())
+        cli_bin = scripts[0] if scripts else dash
+
+        # --- [tool.scripts.test] section ---
+        scripts_test = data.get('tool', {}).get('scripts', {}).get('test', {})
+        src_path = scripts_test.get('src-path', 'src')
+        pytest_verbosity = scripts_test.get('pytest-verbosity', '-vv')
+        cov_report_file = scripts_test.get('coverage-report-file', 'coverage.xml')
+
+        # --- [tool.coverage.report] section ---
+        cov_fail_under = (
+            data.get('tool', {}).get('coverage', {}).get('report', {}).get('fail_under', 90)
+        )
+
+        # --- [tool.bandit] section ---
+        bandit_skips = data.get('tool', {}).get('bandit', {}).get('skips', [])
+        bandit_skip_flag = f"-s {','.join(bandit_skips)}" if bandit_skips else ""
+
+        # Write to GITHUB_OUTPUT for composite action outputs
+        with open(os.environ['GITHUB_OUTPUT'], 'a', encoding='utf-8') as out:
+            out.write(f"PROJECT_NAME={project}\n")
+            out.write(f"PACKAGE_MODULE={module}\n")
+            out.write(f"CLI_BIN={cli_bin}\n")
+            out.write(f"SRC_PATH={src_path}\n")
+            out.write(f"PYTEST_VERBOSITY={pytest_verbosity}\n")
+            out.write(f"COV_REPORT_FILE={cov_report_file}\n")
+            out.write(f"COV_FAIL_UNDER={cov_fail_under}\n")
+            out.write(f"BANDIT_SKIP_FLAG={bandit_skip_flag}\n")
+
+        # Also write to GITHUB_ENV so subsequent steps can use ${{ env.VAR }}
+        with open(os.environ['GITHUB_ENV'], 'a', encoding='utf-8') as env:
+            env.write(f"PROJECT_NAME={project}\n")
+            env.write(f"PACKAGE_MODULE={module}\n")
+            env.write(f"CLI_BIN={cli_bin}\n")
+            env.write(f"SRC_PATH={src_path}\n")
+            env.write(f"PYTEST_VERBOSITY={pytest_verbosity}\n")
+            env.write(f"COV_REPORT_FILE={cov_report_file}\n")
+            env.write(f"COV_FAIL_UNDER={cov_fail_under}\n")
+            env.write(f"BANDIT_SKIP_FLAG={bandit_skip_flag}\n")

pwshpy-1.0.0/.github/dependabot.yml

@@ -0,0 +1,22 @@
+version: 2
+updates:
+  - package-ecosystem: "pip"
+    directory: "/"
+    schedule:
+      interval: "weekly"
+    allow:
+      - dependency-type: "direct"
+    labels:
+      - "dependencies"
+    commit-message:
+      prefix: "deps"
+      include: "scope"
+  - package-ecosystem: "github-actions"
+    directory: "/"
+    schedule:
+      interval: "weekly"
+    labels:
+      - "dependencies"
+    commit-message:
+      prefix: "deps"
+      include: "scope"

pwshpy-1.0.0/.github/workflows/codeql.yml

@@ -0,0 +1,39 @@
+name: CodeQL
+
+on:
+  push:
+    branches: [ main, master ]
+  pull_request:
+    branches: [ main, master ]
+  schedule:
+    - cron: '0 8 * * 1'
+
+jobs:
+  analyze:
+    name: CodeQL Analyze
+    runs-on: ubuntu-latest
+    permissions:
+      actions: read
+      contents: read
+      security-events: write
+    strategy:
+      fail-fast: false
+      matrix:
+        language: [ 'python' ]
+
+    steps:
+      - name: Checkout repository
+        uses: actions/checkout@v7
+
+      - name: Initialize CodeQL
+        uses: github/codeql-action/init@v4
+        with:
+          languages: ${{ matrix.language }}
+
+      - name: Autobuild
+        uses: github/codeql-action/autobuild@v4
+
+      - name: Perform CodeQL Analysis
+        uses: github/codeql-action/analyze@v4
+        with:
+          category: "/language:${{ matrix.language }}"