python-devkit 0.1.0__py3-none-any.whl → 0.1.1__py3-none-any.whl

python_devkit/lock_python.py

@@ -0,0 +1,130 @@
+from __future__ import annotations
+
+from fnmatch import fnmatch
+from pathlib import Path
+from tomllib import load
+from typing import Annotated, Any
+
+import typer
+from bashrun import bash, bash_check, bash_output
+from pydantic import BaseModel, ConfigDict, Field
+
+app = typer.Typer(add_completion=False, pretty_exceptions_show_locals=False)
+
+
+class LockPythonConfig(BaseModel):
+    model_config = ConfigDict(extra="forbid")
+
+    group_export_dirs: dict[str, Path] = Field(default_factory=dict, alias="group-export-dirs")
+
+
+class WorkspaceConfig(BaseModel):
+    members: list[str] = Field(default_factory=list)
+
+
+class ProjectConfig(BaseModel):
+    name: str
+
+
+class PackageConfig(BaseModel):
+    project: ProjectConfig
+    dependency_groups: dict[str, Any] = Field(default_factory=dict, alias="dependency-groups")
+
+
+@app.command()
+def lock_python(
+    check: Annotated[
+        bool, typer.Option("--check", help="Validate lock files without writing; exit non-zero if stale.")
+    ] = False,
+    root: Annotated[Path, typer.Option(help="uv workspace root; defaults to the current directory.")] = Path(),
+) -> None:
+    root = root.resolve()
+    stale = False
+
+    if check:
+        print("Checking uv.lock...")
+        if not bash_check("uv lock --check", cwd=root):
+            print("  STALE: uv.lock is out of date. Run 'uv run lock-python' to update.")
+            stale = True
+        else:
+            print("  OK")
+    else:
+        bash("uv lock", cwd=root)
+
+    with (root / "pyproject.toml").open("rb") as file:
+        workspace_toml = load(file)
+
+    tool = workspace_toml.get("tool", {})
+    workspace = WorkspaceConfig.model_validate(tool.get("uv", {}).get("workspace", {}))
+    config = LockPythonConfig.model_validate(tool.get("python-devkit", {}).get("lock-python", {}))
+
+    seen_redirected: set[str] = set()
+
+    for member in workspace.members:
+        member_dir = root / member
+
+        if not (member_dir / "Dockerfile").exists():
+            continue
+
+        with (member_dir / "pyproject.toml").open("rb") as file:
+            package = PackageConfig.model_validate(load(file))
+
+        stale |= _export_pylock(check, root, member_dir, package.project.name, group=None)
+
+        for group in package.dependency_groups:
+            if group == "dev":
+                continue
+            redirect = _redirect_dir(group, config, root)
+            if redirect is None:
+                stale |= _export_pylock(check, root, member_dir, package.project.name, group=group)
+                continue
+            if group in seen_redirected:
+                continue
+            seen_redirected.add(group)
+            stale |= _export_pylock(check, root, redirect, package.project.name, group=group)
+
+    if check and stale:
+        raise SystemExit(1)
+
+    if check:
+        print("\nAll Python lock files are up to date.")
+
+
+def _export_pylock(check: bool, root: Path, export_dir: Path, package_name: str, group: str | None) -> bool:
+    if group:
+        pylock = export_dir / f"pylock.{group}.toml"
+        group_flags = f"--only-group {group} "
+    else:
+        pylock = export_dir / "pylock.toml"
+        group_flags = "--no-default-groups "
+
+    export_command = (
+        f"uv export --format pylock.toml --no-header --package {package_name} {group_flags}--no-emit-local --frozen "
+    )
+
+    if check:
+        print(f"Checking {pylock}...")
+        exported = _normalize_line_endings(bash_output(export_command, cwd=root))
+        committed = _normalize_line_endings(pylock.read_text(encoding="utf-8")) if pylock.exists() else ""
+        if exported != committed:
+            print(f"  STALE: {pylock} is out of date.")
+            return True
+        print("  OK")
+        return False
+
+    bash(export_command + f"--output-file {pylock} ", cwd=root)
+    text = pylock.read_text(encoding="utf-8")
+    with pylock.open("w", encoding="utf-8", newline="\n") as file:
+        file.write(text)
+    return False
+
+
+def _normalize_line_endings(text: str) -> str:
+    return text.replace("\r\n", "\n").replace("\r", "\n")
+
+
+def _redirect_dir(group: str, config: LockPythonConfig, root: Path) -> Path | None:
+    for pattern, directory in config.group_export_dirs.items():
+        if fnmatch(group, pattern):
+            return root / directory
+    return None

python_devkit/preflight_runner.py

@@ -0,0 +1,43 @@
+from __future__ import annotations
+
+from collections.abc import Sequence
+from pathlib import Path
+
+from bashrun import bash, bash_output
+from ci_devkit.ci_step import ci_step
+from pydantic import BaseModel
+
+
+class CommandCheck(BaseModel):
+    label: str
+    command: str
+
+
+class GeneratedCheck(BaseModel):
+    label: str
+    generate_command: str
+    paths: list[Path]
+    fix_command: str
+
+
+def run_checks(checks: Sequence[CommandCheck | GeneratedCheck], *, cwd: Path | None = None) -> None:
+    for check in checks:
+        if isinstance(check, CommandCheck):
+            _run_command_check(check, cwd)
+        else:
+            _run_generated_check(check, cwd)
+
+
+def _run_command_check(check: CommandCheck, cwd: Path | None) -> None:
+    with ci_step(check.label):
+        bash(check.command, cwd=cwd)
+
+
+def _run_generated_check(check: GeneratedCheck, cwd: Path | None) -> None:
+    with ci_step(check.label):
+        bash(check.generate_command, cwd=cwd)
+        pathspec = " ".join(str(path) for path in check.paths)
+        staleness_output = bash_output(f"git status --porcelain -- {pathspec}", cwd=cwd)
+        if staleness_output.strip():
+            bash(f"git diff -- {pathspec}", cwd=cwd)
+            raise SystemExit(f"{check.label} output is stale. Run '{check.fix_command}' locally and commit the result.")

python_devkit-0.1.1.dist-info/METADATA

@@ -0,0 +1,11 @@
+Metadata-Version: 2.5
+Name: python-devkit
+Version: 0.1.1
+Summary: Python repo-lifecycle tooling: workspace locking, preflight checks, canonical ruff configuration
+License-File: LICENSE
+License-File: NOTICE
+Requires-Python: >=3.13
+Requires-Dist: bashrun>=0.1.0
+Requires-Dist: ci-devkit>=0.1.0
+Requires-Dist: pydantic>=2.11.7
+Requires-Dist: typer>=0.17.4

python_devkit-0.1.1.dist-info/RECORD

@@ -0,0 +1,10 @@
+python_devkit/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
+python_devkit/lock_python.py,sha256=szUEkmHjqRbyWb76nn45WBiGRT0kfd6A9ihTO1KQWqE,4277
+python_devkit/preflight_runner.py,sha256=e-UI_ukHjR6NDMhEqmv4jNMApv_lNSg6twIzUo-Qd1M,1322
+python_devkit/py.typed,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
+python_devkit-0.1.1.dist-info/METADATA,sha256=DIIJ8MbhovJnXwLOcTy85D2GxmyvqNf90NfrDDOHDLo,353
+python_devkit-0.1.1.dist-info/WHEEL,sha256=W3fkpkm7-wf9vBI5Z-7s0eWkeM-spu78I8Neb98DeEg,87
+python_devkit-0.1.1.dist-info/entry_points.txt,sha256=OSRLpsw_0BVXkayN9QWWYOFPUxZ4G29i8JtxKBO9gz8,62
+python_devkit-0.1.1.dist-info/licenses/LICENSE,sha256=RFhQPdSOiMTguUX7JSoIuTxA7HVzCbj_p8WU36HjUQQ,10947
+python_devkit-0.1.1.dist-info/licenses/NOTICE,sha256=jvglZza3GCdN7v4_TLuXUqX9C_uABlwAKUkcIeKwk_8,26
+python_devkit-0.1.1.dist-info/RECORD,,

python_devkit-0.1.1.dist-info/entry_points.txt

@@ -0,0 +1,2 @@
+[console_scripts]
+lock-python = python_devkit.lock_python:app

python_devkit/ci_step.py

@@ -1,52 +0,0 @@
-from __future__ import annotations
-
-import time
-from collections.abc import Generator
-from contextlib import contextmanager
-
-from pydantic_settings import BaseSettings
-
-
-class Settings(BaseSettings):
-    github_step_summary: str | None = None
-
-
-settings = Settings.model_validate({})
-_summary_initialized = False
-
-
-def _format_duration(seconds: float) -> str:
-    if seconds < 60:
-        return f"{seconds:.1f}s"
-    minutes = int(seconds // 60)
-    remaining = seconds % 60
-    return f"{minutes}m {remaining:.0f}s"
-
-
-def _write_summary(label: str, duration: float, *, failed: bool) -> None:
-    global _summary_initialized
-    summary_path = settings.github_step_summary
-    if not summary_path:
-        return
-    with open(summary_path, "a") as file:
-        if not _summary_initialized:
-            file.write("| Step | Duration |\n|---|---|\n")
-            _summary_initialized = True
-        status = " :x:" if failed else ""
-        file.write(f"| {label}{status} | {_format_duration(duration)} |\n")
-
-
-@contextmanager
-def ci_step(label: str) -> Generator[None]:
-    print(f"::group::{label}", flush=True)
-    start = time.monotonic()
-    failed = False
-    try:
-        yield
-    except BaseException:
-        failed = True
-        raise
-    finally:
-        duration = time.monotonic() - start
-        print("::endgroup::", flush=True)
-        _write_summary(label, duration, failed=failed)

python_devkit/setup.py

@@ -1,127 +0,0 @@
-from __future__ import annotations
-
-import os
-import platform
-import re
-import shlex
-import shutil
-from pathlib import Path
-
-from bashrun import bash, bash_no_raise, bash_output
-from pydantic import Field
-from pydantic_settings import BaseSettings
-
-
-class Settings(BaseSettings):
-    github_path: str | None = None
-    system_drive: str = Field("C:", validation_alias="SystemDrive")
-    agent_tools_directory: str | None = Field(None, validation_alias="AGENT_TOOLSDIRECTORY")
-
-
-settings = Settings.model_validate({})
-
-CONTAINER_PATHS = ["/to_clean/android", "/to_clean/dotnet", "/to_clean/ghcup", "/to_clean/swift"]
-
-BARE_LINUX_PATHS = ["/usr/local/lib/android", "/usr/share/dotnet", "/usr/local/.ghcup", "/usr/share/swift", "/opt/ghc"]
-
-LARGE_PACKAGE_PATTERNS = [
-    "^aspnetcore-.*",
-    "^dotnet-.*",
-    "^llvm-.*",
-    "php.*",
-    "^mongodb-.*",
-    "^mysql-.*",
-    "azure-cli",
-    "google-chrome-stable",
-    "firefox",
-    "powershell",
-    "mono-devel",
-    "libgl1-mesa-dri",
-    "google-cloud-sdk",
-    "google-cloud-cli",
-]
-
-
-def _remove_paths(paths: list[str], sudo: bool = False) -> None:
-    existing = [path for path in paths if Path(path).exists()]
-    if not existing:
-        return
-    if sudo:
-        bash_no_raise(f"sudo rm -rf {shlex.join(existing)}")
-    elif platform.system() == "Windows":
-        for path in existing:
-            shutil.rmtree(path, ignore_errors=True)
-    else:
-        bash_no_raise(f"rm -rf {shlex.join(existing)}")
-
-
-# actions/checkout sets safe.directory in a temporary HOME that's cleaned up
-# after the step finishes (actions/checkout#766). Container jobs that run
-# git later need it re-set in the real HOME.
-def configure_git(workspace: str) -> None:
-    bash(f"git config --global --add safe.directory {shlex.quote(workspace)}")
-
-
-def free_disk_space(*, large_packages: bool = False, docker_images: bool = False, swap_storage: bool = False) -> None:
-    system = platform.system()
-    in_container = Path("/to_clean").is_dir()
-
-    if system == "Windows":
-        paths = [os.path.join(settings.system_drive, "Program Files", "dotnet")]
-        if settings.agent_tools_directory:
-            paths.append(settings.agent_tools_directory)
-        print(f"Removing: {', '.join(paths)}")
-        _remove_paths(paths)
-    elif in_container:
-        print("Removing pre-installed toolchains (container)")
-        _remove_paths(CONTAINER_PATHS)
-    else:
-        print("Removing pre-installed toolchains")
-        _remove_paths(BARE_LINUX_PATHS, sudo=True)
-
-        if large_packages:
-            print("Removing large apt packages")
-            bash_no_raise(f"sudo apt-get remove -y --fix-missing {shlex.join(LARGE_PACKAGE_PATTERNS)}")
-            bash_no_raise("sudo apt-get autoremove -y")
-            bash_no_raise("sudo apt-get clean")
-
-        if docker_images:
-            print("Pruning Docker images")
-            bash_no_raise("sudo docker image prune --all --force")
-
-        if swap_storage:
-            print("Removing swap")
-            bash_no_raise("sudo swapoff -a")
-            bash_no_raise("sudo rm -f /mnt/swapfile")
-
-    bash("df -h")
-
-
-def install_dotnet(channel: str) -> None:
-    print(f"Installing .NET SDK {channel}")
-    script = Path(__file__).parent / "third-party" / "dotnet-install.sh"
-    bash(f"bash {script} --channel {channel}")
-    dotnet_path = str(Path.home() / ".dotnet")
-    os.environ["PATH"] = f"{dotnet_path}{os.pathsep}{os.environ['PATH']}"
-    if settings.github_path:
-        with open(settings.github_path, "a") as file:
-            file.write(f"{dotnet_path}\n")
-
-
-def install_node(version: str, registry_url: str | None = None) -> None:
-    system = platform.system()
-    sudo = system == "Linux" and os.geteuid() != 0
-
-    print(f"Installing Node.js {version}")
-    shasums = bash_output(f"curl -fsSL https://nodejs.org/dist/latest-v{version}.x/SHASUMS256.txt")
-    match = re.search(r"(node-v[\d.]+-linux-x64\.tar\.xz)", shasums)
-    if not match:
-        raise SystemExit(f"Could not find Node.js v{version} linux-x64 binary")
-    filename = match.group(1)
-    prefix = "sudo " if sudo else ""
-    bash(f"curl -fsSLO https://nodejs.org/dist/latest-v{version}.x/{filename}")
-    bash(f"{prefix}rm -rf /usr/local/lib/node_modules/npm")
-    bash(f"{prefix}tar -xJf {filename} -C /usr/local --strip-components=1")
-    Path(filename).unlink()
-    if registry_url:
-        (Path.home() / ".npmrc").write_text(f"registry={registry_url}\n")

python_devkit/setup_oras.py

@@ -1,51 +0,0 @@
-from __future__ import annotations
-
-import os
-import platform
-import shlex
-import shutil
-from pathlib import Path
-
-from bashrun import bash
-from pydantic_settings import BaseSettings
-
-
-class Settings(BaseSettings):
-    github_token: str
-    github_actor: str = ""
-    github_path: str | None = None
-    runner_temp: str = "."
-
-
-def install_oras(version: str = "1.2.2") -> None:
-    settings = Settings.model_validate({})
-    system = platform.system()
-    sudo = system == "Linux" and os.geteuid() != 0
-    prefix = "sudo " if sudo else ""
-
-    if system == "Linux":
-        bash(f"{prefix}apt-get update -qq")
-        bash(f"{prefix}apt-get install -y -qq zstd")
-    elif system == "Windows":
-        bash("choco install zstandard -y --no-progress")
-
-    if system == "Linux":
-        archive = f"oras_{version}_linux_amd64.tar.gz"
-        bash(f"curl -fsSLO https://github.com/oras-project/oras/releases/download/v{version}/{archive}")
-        bash(f"{prefix}tar -xzf {archive} -C /usr/local/bin/ oras")
-        Path(archive).unlink()
-    elif system == "Windows":
-        archive = f"oras_{version}_windows_amd64.zip"
-        oras_directory = Path(settings.runner_temp) / "oras"
-        bash(f"curl -fsSLO https://github.com/oras-project/oras/releases/download/v{version}/{archive}")
-        shutil.unpack_archive(archive, oras_directory)
-        Path(archive).unlink()
-        os.environ["PATH"] = f"{oras_directory}{os.pathsep}{os.environ['PATH']}"
-        if settings.github_path:
-            with open(settings.github_path, "a") as file:
-                file.write(f"{oras_directory}\n")
-
-    bash(
-        f"oras login ghcr.io --username {shlex.quote(settings.github_actor)} --password-stdin",
-        stdin_text=settings.github_token,
-    )

python_devkit/third-party/README.md

@@ -1,9 +0,0 @@
-# Third-party vendored files
-
-## dotnet-install.sh
-
-- **Source**: https://dot.net/v1/dotnet-install.sh
-- **Upstream repo**: https://github.com/dotnet/install-scripts
-- **License**: MIT (see header in script)
-- **Vendored**: 2026-03-16
-- **Why**: The `actions/setup-dotnet` GitHub Action bundles this script locally to avoid downloading it at runtime. We vendor it for the same reason — downloading it via curl inside CI containers is unreliable (timeouts).