python-devkit 0.1.1__tar.gz → 0.1.2__tar.gz

python_devkit-0.1.2/.gitattributes

@@ -0,0 +1 @@
+ruff.base.toml -text

{python_devkit-0.1.1 → python_devkit-0.1.2}/.github/workflows/ci.yml

@@ -28,3 +28,6 @@ jobs:
 
       - name: Type check
         run: uv run basedpyright
+
+      - name: Ruff config drift
+        run: uv run sync-ruff --check

{python_devkit-0.1.1 → python_devkit-0.1.2}/AGENTS.md

@@ -12,9 +12,12 @@ Entry point (`[project.scripts]`): `lock-python` → `lock_python.py:app`. The c
 
 `preflight_runner.py` is the labeled-check runner consumer preflights thin into: `run_checks(checks)` executes a declarative list of `CommandCheck` (label + shell command under a `ci_step` group) and `GeneratedCheck` (label + generate command + pathspec + fix command — runs the generator, then fails on any `git status --porcelain` dirt under the paths, showing the diff and the fix command). Fail-fast; each check's duration lands in the Actions step summary via `ci_step`.
 
+`sync_ruff.py` writes the org-canonical ruff config (`src/python_devkit/ruff.base.toml`, shipped as package data) into a consuming repo's root as `ruff.base.toml`; `--check` is the drift gate (byte compare against the packaged canonical). The verb also validates the consuming repo's `ruff.toml` layer: it must set `extend = "ruff.base.toml"` and use only extend keys — plain `exclude`/`lint.select`/`lint.ignore`/`lint.per-file-ignores` in the layer replace the canonical settings under `extend` and fail the check. This repo consumes its own canonical the same way: root `ruff.base.toml` is a verb-written copy of the packaged one, root `ruff.toml` is the (currently empty) local layer.
+
 ## Constraints
 
 - **The module surface is cross-repo Python API.** `python_devkit.lock_python.lock_python(check, root)` and `python_devkit.preflight_runner.run_checks(checks)` are contract: placeframe's preflight calls both in-process, the lock-python entry point is on CI's path, and the `[tool.python-devkit.lock-python]` table in consumer root pyprojects is its declarative config surface.
+- **The canonical ruff body is byte-stable contract.** Every consuming repo's `ruff.base.toml` is a verbatim copy compared byte-for-byte (after newline normalization); a cosmetic edit to the canonical ripples into every consumer's diff by design. Repo-local deltas never go here — they go in the consumer's `ruff.toml` extend layer.
 - **`group-export-dirs` is devkit-owned and `extra="forbid"`.** A typo'd key in that table fails validation loudly rather than silently dropping the redirect (the failure mode is per-group pylocks appearing in member directories).
 - **The redirect contract assumes identical group declarations.** Dedup is first-member-wins; members declaring the same redirected group differently get whichever member enumerates first, silently.
 - **Export commands are byte-stability load-bearing.** The exact `uv export` flag order must not churn — committed pylocks are compared byte-for-byte (after newline normalization), so a cosmetic flag change ripples into every consumer's diff.

{python_devkit-0.1.1 → python_devkit-0.1.2}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.5
 Name: python-devkit
-Version: 0.1.1
+Version: 0.1.2
 Summary: Python repo-lifecycle tooling: workspace locking, preflight checks, canonical ruff configuration
 License-File: LICENSE
 License-File: NOTICE

{python_devkit-0.1.1 → python_devkit-0.1.2}/README.md

@@ -38,6 +38,17 @@ run_checks([
 
 `CommandCheck` wraps a shell command in a labeled CI step group; `GeneratedCheck` additionally guards the checked-in generator output with a git-status staleness check (diff shown, fix command named). Checks run fail-fast with per-step durations in the Actions step summary.
 
+## ruff canonical config
+
+`src/python_devkit/ruff.base.toml` is the org-canonical ruff configuration. Consuming repos carry it verbatim as `ruff.base.toml` at their root, with a hand-owned `ruff.toml` beside it layering repo-local deltas on top:
+
+```bash
+uvx --from python-devkit sync-ruff           # write/refresh ruff.base.toml
+uvx --from python-devkit sync-ruff --check   # drift gate: exit 1 on divergence
+```
+
+The consuming `ruff.toml` must set `extend = "ruff.base.toml"` and may only add via extend keys (`extend-exclude`, `lint.extend-ignore`, `lint.extend-per-file-ignores`) — plain `exclude`, `lint.select`, `lint.ignore`, and `lint.per-file-ignores` replace the canonical settings under `extend`, and `--check` fails on them. To change the canonical: edit it here, release, and run `sync-ruff` in every consuming repo.
+
 ## Development
 
 Requires Python 3.13+ and [uv](https://docs.astral.sh/uv/).

{python_devkit-0.1.1 → python_devkit-0.1.2}/pyproject.toml

@@ -1,6 +1,6 @@
 [project]
 name = "python-devkit"
-version = "0.1.1"
+version = "0.1.2"
 description = "Python repo-lifecycle tooling: workspace locking, preflight checks, canonical ruff configuration"
 requires-python = ">=3.13"
 dependencies = [
@@ -12,6 +12,7 @@ dependencies = [
 
 [project.scripts]
 lock-python = "python_devkit.lock_python:app"
+sync-ruff = "python_devkit.sync_ruff:app"
 
 [dependency-groups]
 dev = ["basedpyright>=1.39.10", "ruff>=0.14.11"]
@@ -22,7 +23,7 @@ build-backend = "hatchling.build"
 
 [tool.hatch.build.targets.wheel]
 packages = ["src/python_devkit"]
-include = ["src/python_devkit/py.typed"]
+include = ["src/python_devkit/py.typed", "src/python_devkit/ruff.base.toml"]
 
 [tool.uv.sources]
 

python_devkit-0.1.2/ruff.base.toml

@@ -0,0 +1,198 @@
+# Org-canonical ruff configuration, hosted in python-devkit.
+# Consuming repos carry this file verbatim as ruff.base.toml, written by the
+# sync-ruff verb (uvx --from python-devkit sync-ruff) and drift-gated in CI.
+# Never edit a synced copy: change this canonical, release python-devkit, and
+# re-run sync-ruff in each consuming repo.
+target-version = "py313"
+line-length = 120
+preview = true
+required-version = ">=0.14.11"
+
+[lint]
+select = ["ALL"]
+ignore = [
+    # ── Temporarily ignored (inline noqas exist for these rules but are redundant
+    # while the rules are globally ignored — RUF100 suppresses the "unused noqa" warning
+    # until we un-ignore each ticket's rules)
+    "RUF100",
+
+    # ── Permanently ignored ──────────────────────────────────────────────
+    # Type annotations — basedpyright strict mode handles this
+    "ANN",
+    # EM101 (string literal in exception) — the msg = ... indirection adds verbosity without benefit
+    "EM101",
+    # TRY003 (raise vanilla args) — requires custom exception class for every raise site;
+    # the real problem (interpolation) is caught by EM102/EM103
+    "TRY003",
+    # A003 (class attribute shadowing) — class attributes via self.x never conflict with builtins
+    "A003",
+    # Function complexity counting — C901 already covers structural complexity;
+    # these counting rules are largely redundant
+    "PLR0911",
+    "PLR0912",
+    "PLR0913",
+    "PLR0914",
+    "PLR0915",
+    "PLR0917",
+
+    # ── Temporarily ignored (will enable when conventions are established) ─
+    # Docstrings — project policy is "no docstrings" for now
+    "D",
+    # Copyright notices — not yet established
+    "CPY",
+    # Docstring formatting — blocked on D
+    "DOC",
+    # TODO/FIXME comment formatting
+    "TD",
+    "FIX",
+
+    # The "Ticket N" blocks below are the transitional cleanup slices tracked
+    # by PLE-248 (Enforce the deferred ruff rules):
+    #   https://linear.app/plerionplatforms/issue/PLE-248
+    # Ticket 3 (T201, print → logging) is tracked by PLE-336:
+    #   https://linear.app/plerionplatforms/issue/PLE-336
+    # Lifting a rule = remove it here in python-devkit's canonical config,
+    # release, and run sync-ruff in every consuming repo.
+
+    # ── Ticket 1: Auto-fix formatting & type modernization ───────────────
+    # Zero risk. Purely mechanical, all auto-fixable via ruff --fix.
+    "COM812",   # missing trailing commas
+    "I001",     # import sorting
+    "ISC003",   # explicit string concatenation
+    "RUF031",   # parenthesized tuple in subscript
+    "TC001",    # move import into TYPE_CHECKING block
+    "TC002",    # move third-party import into TYPE_CHECKING block
+    "TC003",    # move stdlib import into TYPE_CHECKING block
+    "TC006",    # move typing import into TYPE_CHECKING block (PEP 695)
+    "TC008",    # move import into TYPE_CHECKING block (quoted annotation)
+    "UP006",    # use X instead of typing.X
+    "UP007",    # use X | Y instead of Union
+    "UP011",    # unnecessary parentheses to functools.lru_cache
+    "UP015",    # unnecessary open mode parameters
+    "UP017",    # use datetime.UTC alias
+    "UP034",    # extraneous parentheses
+    "UP035",    # deprecated import (use collections.abc, etc.)
+    "UP040",    # use PEP 695 type alias
+    "UP042",    # use PEP 695 type parameters
+    "UP045",    # use X | None instead of Optional
+
+    # ── Ticket 2: Auto-fix code simplifications ──────────────────────────
+    # Very low risk. Auto-fixable with trivial semantic changes.
+    "C401",     # unnecessary generator — use set/dict comprehension
+    "C416",     # unnecessary comprehension — use list/dict
+    "ERA001",   # commented-out code
+    "FURB101",  # read-text can replace open+read
+    "FURB103",  # write-text can replace open+write
+    "FURB110",  # use ternary instead of try/except for default
+    "FURB113",  # use list.extend instead of repeated append
+    "FURB118",  # use operator module instead of lambda
+    "LOG004",   # use __name__ as logger name
+    "PERF401",  # use list comprehension instead of manual append
+    "PIE810",   # unnecessary spread of single-element starred
+    "PLC0207",  # use a single __all__ definition
+    "PLC1901",  # compare to empty string using falsy check
+    "PLR1711",  # useless return at end of function
+    "PLR6104",  # use augmented assignment
+    "PLR6201",  # use a set literal for membership test
+    "PLW1510",  # subprocess.run without explicit check= argument
+    "PLW1514",  # open without explicit encoding
+    "PT001",    # use @pytest.fixture over @pytest.fixture()
+    "PT018",    # composite assertion — split into multiple asserts
+    "PTH101",   # os.chmod → Path.chmod
+    "PTH111",   # os.path.expanduser → Path.expanduser
+    "PTH112",   # os.path.isdir → Path.is_dir
+    "PTH118",   # os.path.join → Path /
+    "PTH123",   # open() → Path.open()
+    "PTH201",   # pathlib.Path(".")
+    "RET501",   # unnecessary explicit return None
+    "RET504",   # unnecessary assignment before return
+    "RET505",   # unnecessary else after return
+    "RET506",   # unnecessary else after raise
+    "RET507",   # unnecessary else after continue
+    "RSE102",   # unnecessary parentheses on raised exception
+    "RUF005",   # consider spread operator instead of concatenation
+    "RUF010",   # use explicit conversion flag in f-string
+    "RUF015",   # prefer next() over single-element slice
+    "RUF029",   # function is declared async but has no await
+    "RUF052",   # local variable is assigned but never used (underscore prefix)
+    "RUF056",   # unnecessary default value for keyword argument
+    "SIM102",   # collapsible if statements
+    "SIM105",   # use contextlib.suppress instead of try/except/pass
+    "SIM115",   # use context manager for opening files
+    "SIM117",   # use single with statement for multiple context managers
+    "SIM118",   # use key in dict instead of key in dict.keys()
+    "TID252",   # prefer absolute imports over relative
+
+    # ── Ticket 3: print → logging ────────────────────────────────────────
+    # All code should use logging, including CLI scripts.
+    "T201",     # print found
+
+    # ── Ticket 4: Exception message interpolation ────────────────────────
+    # Remove f-strings from exception messages — use string literals.
+    "EM102",    # f-string in exception message
+
+    # ── Ticket 5: Missing __init__.py + shebangs ─────────────────────────
+    # Add __init__.py to installable packages; remove vestigial shebangs.
+    "INP001",   # implicit namespace package — add __init__.py
+    "EXE001",   # shebang present but file not executable
+
+    # ── Ticket 6: Type ignore specificity ────────────────────────────────
+    # Replace blanket type: ignore with specific error codes.
+    "PGH003",   # blanket type: ignore
+
+    # ── Ticket 7: Boolean trap refactoring ───────────────────────────────
+    # Change function signatures — callers must update too.
+    "FBT001",   # boolean positional argument
+    "FBT002",   # boolean default value in function definition
+    "FBT003",   # boolean positional value in call
+
+    # ── Ticket 8: Exception handling patterns ────────────────────────────
+    # Behavioral changes to error handling.
+    "B020",     # loop variable overwritten by except
+    "B903",     # generator should use yield from
+    "B904",     # raise without from inside except
+    "B905",     # zip() without strict= parameter
+    "BLE001",   # blind except Exception
+    "S101",     # assert outside tests
+    "TRY002",   # create custom exception class
+    "TRY300",   # try/except/return — move return into else
+
+    # ── Ticket 9: Complexity, naming & refactoring ───────────────────────
+    # Structural changes requiring judgment.
+    "A001",     # builtin shadowing (dir, bytes)
+    "ARG001",   # unused function argument
+    "ARG002",   # unused method argument
+    "C901",     # function too complex
+    "E501",     # line too long
+    "N802",     # function name should be lowercase
+    "N806",     # variable in function should be lowercase
+    "N815",     # mixed-case variable in class scope
+    "N818",     # exception name should end in Error
+    "PLC0415",  # import not at top level
+    "PLE0704",  # bare raise not inside except handler
+    "PLR1702",  # too many nested blocks
+    "PLR2004",  # magic value used in comparison
+    "PLR6301",  # method could be function or static method
+    "PLW0603",  # global statement
+    "PLW2901",  # loop variable overwritten
+    "RUF001",   # ambiguous unicode — replace with ASCII
+    "RUF003",   # ambiguous unicode in comment
+    "S106",     # possible hardcoded password
+    "S108",     # probable insecure temp file/dir usage
+    "S110",     # try/except/pass on broad exception
+    "S202",     # use of tarfile.extractall
+    # S404/S603: prerequisite — bash.py needs env, stderr=STDOUT merge, and no-raise-with-capture
+    # before context_sha.py, deptry_check.py, test_context_sha.py, list_debug_targets.py can migrate
+    "S404",     # suspicious subprocess import
+    "S603",     # subprocess call with non-literal
+    "S606",     # starting process without shell
+    "S607",     # starting process with partial path
+]
+
+[lint.per-file-ignores]
+# Tests use assert as the standard pytest mechanism; fixtures take arguments
+# that pytest consumes implicitly; pytest-style test classes need no self use
+"**/tests/**" = ["S101", "ARG001", "ARG002", "PLR6301"]
+
+[lint.flake8-builtins]
+ignorelist = ["id", "map"]

python_devkit-0.1.2/ruff.toml

@@ -0,0 +1 @@
+extend = "ruff.base.toml"

python_devkit-0.1.2/src/python_devkit/ruff.base.toml

@@ -0,0 +1,198 @@
+# Org-canonical ruff configuration, hosted in python-devkit.
+# Consuming repos carry this file verbatim as ruff.base.toml, written by the
+# sync-ruff verb (uvx --from python-devkit sync-ruff) and drift-gated in CI.
+# Never edit a synced copy: change this canonical, release python-devkit, and
+# re-run sync-ruff in each consuming repo.
+target-version = "py313"
+line-length = 120
+preview = true
+required-version = ">=0.14.11"
+
+[lint]
+select = ["ALL"]
+ignore = [
+    # ── Temporarily ignored (inline noqas exist for these rules but are redundant
+    # while the rules are globally ignored — RUF100 suppresses the "unused noqa" warning
+    # until we un-ignore each ticket's rules)
+    "RUF100",
+
+    # ── Permanently ignored ──────────────────────────────────────────────
+    # Type annotations — basedpyright strict mode handles this
+    "ANN",
+    # EM101 (string literal in exception) — the msg = ... indirection adds verbosity without benefit
+    "EM101",
+    # TRY003 (raise vanilla args) — requires custom exception class for every raise site;
+    # the real problem (interpolation) is caught by EM102/EM103
+    "TRY003",
+    # A003 (class attribute shadowing) — class attributes via self.x never conflict with builtins
+    "A003",
+    # Function complexity counting — C901 already covers structural complexity;
+    # these counting rules are largely redundant
+    "PLR0911",
+    "PLR0912",
+    "PLR0913",
+    "PLR0914",
+    "PLR0915",
+    "PLR0917",
+
+    # ── Temporarily ignored (will enable when conventions are established) ─
+    # Docstrings — project policy is "no docstrings" for now
+    "D",
+    # Copyright notices — not yet established
+    "CPY",
+    # Docstring formatting — blocked on D
+    "DOC",
+    # TODO/FIXME comment formatting
+    "TD",
+    "FIX",
+
+    # The "Ticket N" blocks below are the transitional cleanup slices tracked
+    # by PLE-248 (Enforce the deferred ruff rules):
+    #   https://linear.app/plerionplatforms/issue/PLE-248
+    # Ticket 3 (T201, print → logging) is tracked by PLE-336:
+    #   https://linear.app/plerionplatforms/issue/PLE-336
+    # Lifting a rule = remove it here in python-devkit's canonical config,
+    # release, and run sync-ruff in every consuming repo.
+
+    # ── Ticket 1: Auto-fix formatting & type modernization ───────────────
+    # Zero risk. Purely mechanical, all auto-fixable via ruff --fix.
+    "COM812",   # missing trailing commas
+    "I001",     # import sorting
+    "ISC003",   # explicit string concatenation
+    "RUF031",   # parenthesized tuple in subscript
+    "TC001",    # move import into TYPE_CHECKING block
+    "TC002",    # move third-party import into TYPE_CHECKING block
+    "TC003",    # move stdlib import into TYPE_CHECKING block
+    "TC006",    # move typing import into TYPE_CHECKING block (PEP 695)
+    "TC008",    # move import into TYPE_CHECKING block (quoted annotation)
+    "UP006",    # use X instead of typing.X
+    "UP007",    # use X | Y instead of Union
+    "UP011",    # unnecessary parentheses to functools.lru_cache
+    "UP015",    # unnecessary open mode parameters
+    "UP017",    # use datetime.UTC alias
+    "UP034",    # extraneous parentheses
+    "UP035",    # deprecated import (use collections.abc, etc.)
+    "UP040",    # use PEP 695 type alias
+    "UP042",    # use PEP 695 type parameters
+    "UP045",    # use X | None instead of Optional
+
+    # ── Ticket 2: Auto-fix code simplifications ──────────────────────────
+    # Very low risk. Auto-fixable with trivial semantic changes.
+    "C401",     # unnecessary generator — use set/dict comprehension
+    "C416",     # unnecessary comprehension — use list/dict
+    "ERA001",   # commented-out code
+    "FURB101",  # read-text can replace open+read
+    "FURB103",  # write-text can replace open+write
+    "FURB110",  # use ternary instead of try/except for default
+    "FURB113",  # use list.extend instead of repeated append
+    "FURB118",  # use operator module instead of lambda
+    "LOG004",   # use __name__ as logger name
+    "PERF401",  # use list comprehension instead of manual append
+    "PIE810",   # unnecessary spread of single-element starred
+    "PLC0207",  # use a single __all__ definition
+    "PLC1901",  # compare to empty string using falsy check
+    "PLR1711",  # useless return at end of function
+    "PLR6104",  # use augmented assignment
+    "PLR6201",  # use a set literal for membership test
+    "PLW1510",  # subprocess.run without explicit check= argument
+    "PLW1514",  # open without explicit encoding
+    "PT001",    # use @pytest.fixture over @pytest.fixture()
+    "PT018",    # composite assertion — split into multiple asserts
+    "PTH101",   # os.chmod → Path.chmod
+    "PTH111",   # os.path.expanduser → Path.expanduser
+    "PTH112",   # os.path.isdir → Path.is_dir
+    "PTH118",   # os.path.join → Path /
+    "PTH123",   # open() → Path.open()
+    "PTH201",   # pathlib.Path(".")
+    "RET501",   # unnecessary explicit return None
+    "RET504",   # unnecessary assignment before return
+    "RET505",   # unnecessary else after return
+    "RET506",   # unnecessary else after raise
+    "RET507",   # unnecessary else after continue
+    "RSE102",   # unnecessary parentheses on raised exception
+    "RUF005",   # consider spread operator instead of concatenation
+    "RUF010",   # use explicit conversion flag in f-string
+    "RUF015",   # prefer next() over single-element slice
+    "RUF029",   # function is declared async but has no await
+    "RUF052",   # local variable is assigned but never used (underscore prefix)
+    "RUF056",   # unnecessary default value for keyword argument
+    "SIM102",   # collapsible if statements
+    "SIM105",   # use contextlib.suppress instead of try/except/pass
+    "SIM115",   # use context manager for opening files
+    "SIM117",   # use single with statement for multiple context managers
+    "SIM118",   # use key in dict instead of key in dict.keys()
+    "TID252",   # prefer absolute imports over relative
+
+    # ── Ticket 3: print → logging ────────────────────────────────────────
+    # All code should use logging, including CLI scripts.
+    "T201",     # print found
+
+    # ── Ticket 4: Exception message interpolation ────────────────────────
+    # Remove f-strings from exception messages — use string literals.
+    "EM102",    # f-string in exception message
+
+    # ── Ticket 5: Missing __init__.py + shebangs ─────────────────────────
+    # Add __init__.py to installable packages; remove vestigial shebangs.
+    "INP001",   # implicit namespace package — add __init__.py
+    "EXE001",   # shebang present but file not executable
+
+    # ── Ticket 6: Type ignore specificity ────────────────────────────────
+    # Replace blanket type: ignore with specific error codes.
+    "PGH003",   # blanket type: ignore
+
+    # ── Ticket 7: Boolean trap refactoring ───────────────────────────────
+    # Change function signatures — callers must update too.
+    "FBT001",   # boolean positional argument
+    "FBT002",   # boolean default value in function definition
+    "FBT003",   # boolean positional value in call
+
+    # ── Ticket 8: Exception handling patterns ────────────────────────────
+    # Behavioral changes to error handling.
+    "B020",     # loop variable overwritten by except
+    "B903",     # generator should use yield from
+    "B904",     # raise without from inside except
+    "B905",     # zip() without strict= parameter
+    "BLE001",   # blind except Exception
+    "S101",     # assert outside tests
+    "TRY002",   # create custom exception class
+    "TRY300",   # try/except/return — move return into else
+
+    # ── Ticket 9: Complexity, naming & refactoring ───────────────────────
+    # Structural changes requiring judgment.
+    "A001",     # builtin shadowing (dir, bytes)
+    "ARG001",   # unused function argument
+    "ARG002",   # unused method argument
+    "C901",     # function too complex
+    "E501",     # line too long
+    "N802",     # function name should be lowercase
+    "N806",     # variable in function should be lowercase
+    "N815",     # mixed-case variable in class scope
+    "N818",     # exception name should end in Error
+    "PLC0415",  # import not at top level
+    "PLE0704",  # bare raise not inside except handler
+    "PLR1702",  # too many nested blocks
+    "PLR2004",  # magic value used in comparison
+    "PLR6301",  # method could be function or static method
+    "PLW0603",  # global statement
+    "PLW2901",  # loop variable overwritten
+    "RUF001",   # ambiguous unicode — replace with ASCII
+    "RUF003",   # ambiguous unicode in comment
+    "S106",     # possible hardcoded password
+    "S108",     # probable insecure temp file/dir usage
+    "S110",     # try/except/pass on broad exception
+    "S202",     # use of tarfile.extractall
+    # S404/S603: prerequisite — bash.py needs env, stderr=STDOUT merge, and no-raise-with-capture
+    # before context_sha.py, deptry_check.py, test_context_sha.py, list_debug_targets.py can migrate
+    "S404",     # suspicious subprocess import
+    "S603",     # subprocess call with non-literal
+    "S606",     # starting process without shell
+    "S607",     # starting process with partial path
+]
+
+[lint.per-file-ignores]
+# Tests use assert as the standard pytest mechanism; fixtures take arguments
+# that pytest consumes implicitly; pytest-style test classes need no self use
+"**/tests/**" = ["S101", "ARG001", "ARG002", "PLR6301"]
+
+[lint.flake8-builtins]
+ignorelist = ["id", "map"]

python_devkit-0.1.2/src/python_devkit/sync_ruff.py

@@ -0,0 +1,90 @@
+from __future__ import annotations
+
+from pathlib import Path
+from tomllib import load
+from typing import Annotated
+
+import typer
+from pydantic import BaseModel, ConfigDict, Field
+
+app = typer.Typer(add_completion=False, pretty_exceptions_show_locals=False)
+
+CANONICAL_PATH = Path(__file__).parent / "ruff.base.toml"
+
+
+class LayerLintConfig(BaseModel):
+    model_config = ConfigDict(extra="allow")
+
+    select: list[str] | None = None
+    ignore: list[str] | None = None
+    per_file_ignores: dict[str, list[str]] | None = Field(default=None, alias="per-file-ignores")
+
+
+class LayerConfig(BaseModel):
+    model_config = ConfigDict(extra="allow")
+
+    extend: str | None = None
+    exclude: list[str] | None = None
+    lint: LayerLintConfig | None = None
+
+
+@app.command()
+def sync_ruff(
+    check: Annotated[
+        bool, typer.Option("--check", help="Validate ruff.base.toml without writing; exit non-zero if stale.")
+    ] = False,
+    root: Annotated[Path, typer.Option(help="Repository root; defaults to the current directory.")] = Path(),
+) -> None:
+    root = root.resolve()
+    base_path = root / "ruff.base.toml"
+    canonical = CANONICAL_PATH.read_text(encoding="utf-8")
+
+    if check:
+        print("Checking ruff.base.toml...")
+        committed = base_path.read_text(encoding="utf-8") if base_path.exists() else ""
+        if _normalize_line_endings(committed) != _normalize_line_endings(canonical):
+            print("  STALE: ruff.base.toml diverges from python-devkit's canonical config.")
+            print("  Run 'uvx --from python-devkit sync-ruff' to update.")
+            raise SystemExit(1)
+        print("  OK")
+    else:
+        with base_path.open("w", encoding="utf-8", newline="\n") as file:
+            file.write(canonical)
+        print(f"Wrote {base_path}")
+
+    _check_layer(root)
+
+
+def _check_layer(root: Path) -> None:
+    layer_path = root / "ruff.toml"
+    if not layer_path.exists():
+        print(f"BROKEN: {layer_path} is missing; the synced base needs an extending ruff.toml beside it.")
+        raise SystemExit(1)
+
+    with layer_path.open("rb") as file:
+        layer = LayerConfig.model_validate(load(file))
+
+    if layer.extend != "ruff.base.toml":
+        print('BROKEN: ruff.toml must set extend = "ruff.base.toml".')
+        raise SystemExit(1)
+
+    offenders: list[str] = []
+    if layer.exclude is not None:
+        offenders.append("exclude -> extend-exclude")
+    if layer.lint is not None:
+        if layer.lint.select is not None:
+            offenders.append("lint.select -> lint.extend-select")
+        if layer.lint.ignore is not None:
+            offenders.append("lint.ignore -> lint.extend-ignore")
+        if layer.lint.per_file_ignores is not None:
+            offenders.append("lint.per-file-ignores -> lint.extend-per-file-ignores")
+
+    if offenders:
+        print("BROKEN: plain keys replace the canonical settings under extend; use their extend-* forms:")
+        for offender in offenders:
+            print(f"  {offender}")
+        raise SystemExit(1)
+
+
+def _normalize_line_endings(text: str) -> str:
+    return text.replace("\r\n", "\n").replace("\r", "\n")

python_devkit-0.1.1/ruff.toml

@@ -1,95 +0,0 @@
-target-version = "py313"
-line-length = 120
-preview = true
-
-[lint]
-select = ["ALL"]
-ignore = [
-    # ── Permanent ─────────────────────────────────────────────────────────
-    # Type annotations — basedpyright strict mode handles this
-    "ANN",
-    # No docstrings, no copyright headers
-    "D",
-    "DOC",
-    "CPY",
-    # TODO/FIXME comment formatting
-    "TD",
-    "FIX",
-    # Exception message ergonomics — literal-indirection and custom-class churn without benefit
-    "raw-string-in-exception",
-    "f-string-in-exception",
-    "raise-vanilla-args",
-    # Class attribute names never conflict with builtins via self.x
-    "builtin-attribute-shadowing",
-    # Function-size counters — C901 already covers structural complexity
-    "too-many-return-statements",
-    "too-many-branches",
-    "too-many-arguments",
-    "too-many-locals",
-    "too-many-statements",
-    "too-many-positional-arguments",
-    # Typer's Option/Argument in argument defaults is typer's standard API pattern
-    "function-call-in-default-argument",
-    # Boolean parameters read fine as keyword-only flags here
-    "boolean-type-hint-positional-argument",
-    "boolean-default-value-positional-argument",
-    "boolean-positional-value-in-call",
-    # Relative imports are the intra-package convention
-    "relative-imports",
-    # Formatter-owned; enforced by `ruff format`
-    "missing-trailing-comma",
-    "unsorted-imports",
-    # Magic values in comparisons are readable in this CLI
-    "magic-value-comparison",
-    # The formatter owns wrapping; long string literals and URLs stay on one line
-    "line-too-long",
-    # src-layout tests need no __init__.py
-    "implicit-namespace-package",
-    # Runtime-used typing imports stay at module level
-    "typing-only-first-party-import",
-    "typing-only-third-party-import",
-    "typing-only-standard-library-import",
-    # Small literal tuples read fine in membership tests
-    "literal-membership",
-
-    # ── Deferred to PLE-248 — Enforce the deferred ruff rules
-    # https://linear.app/plerionplatforms/issue/PLE-248
-    # Mirrors placeframe's root ruff.toml transitional Ticket-N blocks; lifting
-    # a rule here should happen alongside lifting it from placeframe's ruff.toml.
-    "runtime-cast-value",    # move import into TYPE_CHECKING block (quoted annotation) — Ticket 1
-    "redundant-open-modes",    # unnecessary open mode parameters — Ticket 1
-    "read-whole-file",  # read-text can replace open+read — Ticket 2
-    "write-whole-file",  # write-text can replace open+write — Ticket 2
-    "repeated-append",  # use list.extend instead of repeated append — Ticket 2
-    "unspecified-encoding",  # open/read_text without explicit encoding — Ticket 2
-    "os-chmod",   # os.chmod → Path.chmod — Ticket 2
-    "os-path-isdir",   # os.path.isdir → Path.is_dir — Ticket 2
-    "os-path-join",   # os.path.join → Path / — Ticket 2
-    "builtin-open",   # open() → Path.open() — Ticket 2
-    "unnecessary-assign",   # unnecessary assignment before return — Ticket 2
-    "superfluous-else-return",   # unnecessary else after return — Ticket 2
-    "collection-literal-concatenation",   # consider spread operator instead of concatenation — Ticket 2
-    "collapsible-if",   # collapsible if statements — Ticket 2
-    "open-file-with-context-handler",   # use context manager for opening files — Ticket 2
-    "multiple-with-statements",   # use single with statement for multiple context managers — Ticket 2
-    "raise-without-from-inside-except",     # raise ... from inside except — Ticket 8
-    "blind-except",   # blind except Exception — Ticket 8
-    "try-consider-else",   # try/except/return — move return into else — Ticket 8
-    "complex-structure",     # function too complex — Ticket 9
-    "import-outside-top-level",  # import not at top level — Ticket 9
-    "global-statement",  # global statement — Ticket 9
-    "redefined-loop-name",  # loop variable overwritten — Ticket 9
-    "path-constructor-current-directory",   # do not pass "." explicitly to Path — Ticket 2
-    "bad-file-permissions",     # bad-file-permissions (0o755 on executable) — Ticket 9
-    "hardcoded-temp-file",     # hardcoded temp file / directory — Ticket 9
-    "suspicious-subprocess-import",     # suspicious subprocess import — Ticket 9
-    "subprocess-without-shell-equals-true",     # subprocess call with non-literal — Ticket 9
-    "start-process-with-partial-path",     # start-process-with-partial-path — Ticket 9
-
-    # ── Deferred to PLE-336 — Replace print() with structured logging
-    # https://linear.app/plerionplatforms/issue/PLE-336
-    "print",     # print found
-]
-
-[lint.flake8-builtins]
-ignorelist = ["id", "map"]