repofail 0.2.2__tar.gz → 0.2.4__tar.gz

repofail-0.2.4/.github/actions/repofail/README.md

@@ -0,0 +1,45 @@
+# repofail GitHub Action
+
+Run repofail on every PR: get a Markdown report as a comment and fail CI when compatibility violations exceed the threshold.
+
+## Usage
+
+In your repo, create `.github/workflows/repofail.yml`:
+
+```yaml
+name: repofail
+on:
+  pull_request:
+    branches: [main, master]
+jobs:
+  check:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+      - uses: jayvenn21/repofail/.github/actions/repofail@main
+        with:
+          path: .
+          fail_on: HIGH
+          comment: 'true'
+          upload_artifact: 'true'
+          pr_number: ${{ github.event.pull_request.number }}
+```
+
+## Inputs
+
+| Input | Default | Description |
+|-------|---------|-------------|
+| `path` | `.` | Repository path to scan |
+| `fail_on` | `HIGH` | Fail CI when severity is HIGH, MEDIUM, or LOW |
+| `comment` | `true` | Comment on PR with Markdown report |
+| `upload_artifact` | `true` | Upload JSON report as workflow artifact |
+| `pr_number` | (empty) | Set to `${{ github.event.pull_request.number }}` for PR comments |
+
+## Behavior
+
+1. Installs repofail from PyPI
+2. Runs `repofail -m` and saves the report
+3. Runs `repofail -j` for machine-readable output
+4. Comments on the PR with the Markdown report (if `comment: true` and `pr_number` set)
+5. Uploads `repofail.json` as an artifact (if `upload_artifact: true`)
+6. Runs `repofail --ci` and fails the job if violations meet or exceed `fail_on`

repofail-0.2.4/.github/actions/repofail/action.yml

@@ -0,0 +1,73 @@
+name: repofail
+description: Deterministic runtime compatibility check — fail CI or comment on PR with report
+inputs:
+  path:
+    description: Repository path to scan (default .)
+    required: false
+    default: .
+  fail_on:
+    description: Severity threshold to fail CI (HIGH, MEDIUM, LOW)
+    required: false
+    default: HIGH
+  comment:
+    description: Comment on PR with Markdown report
+    required: false
+    default: 'true'
+  upload_artifact:
+    description: Upload JSON report as artifact
+    required: false
+    default: 'true'
+  pr_number:
+    description: Pull request number (for commenting). Set to ${{ github.event.pull_request.number }}
+    required: false
+    default: ''
+outputs:
+  markdown_file:
+    description: Path to Markdown report file (repofail-report.md)
+runs:
+  using: composite
+  steps:
+    - name: Install repofail
+      shell: bash
+      run: pip install repofail
+
+    - name: Run repofail (Markdown)
+      id: md
+      shell: bash
+      run: |
+        repofail -p "${{ inputs.path }}" -m > repofail-report.md || true
+        echo "markdown_file=repofail-report.md" >> $GITHUB_OUTPUT
+
+    - name: Run repofail (JSON)
+      if: inputs.upload_artifact == 'true'
+      shell: bash
+      run: repofail -p "${{ inputs.path }}" -j > repofail.json || true
+
+    - name: Comment on PR with report
+      if: inputs.comment == 'true' && inputs.pr_number != ''
+      uses: actions/github-script@v7
+      with:
+        github-token: ${{ secrets.GITHUB_TOKEN }}
+        script: |
+          const fs = require('fs');
+          const body = fs.existsSync('repofail-report.md')
+            ? fs.readFileSync('repofail-report.md', 'utf8')
+            : 'repofail report not available.';
+          const comment = `## repofail · compatibility report\n\n\`\`\`\n${body}\n\`\`\``;
+          await github.rest.issues.createComment({
+            issue_number: ${{ inputs.pr_number }},
+            owner: context.repo.owner,
+            repo: context.repo.repo,
+            body: comment,
+          });
+
+    - name: Upload repofail JSON artifact
+      if: inputs.upload_artifact == 'true' && always()
+      uses: actions/upload-artifact@v4
+      with:
+        name: repofail-report
+        path: repofail.json
+
+    - name: Run repofail (CI — fail if threshold exceeded)
+      shell: bash
+      run: repofail -p "${{ inputs.path }}" --ci --fail-on "${{ inputs.fail_on }}"

repofail-0.2.4/.gitignore

@@ -0,0 +1,22 @@
+dist/
+__pycache__/
+*.pyc
+.pytest_cache/
+*.egg-info/
+.eggs/
+.venv/
+.venv-check/
+venv/
+testenv/
+VISION.md
+repofail-contract.json
+
+# Sensitive / local-only (never commit)
+.env
+.env.local
+.env.*.local
+.secrets
+secrets.yaml
+.credentials
+*.pem
+.DS_Store

repofail-0.2.4/Formula/repofail.rb

@@ -0,0 +1,66 @@
+# Homebrew formula for repofail
+# To use: copy to your tap repo (e.g. homebrew-tap/Formula/repofail.rb)
+# Then: brew tap jayvenn21/tap && brew install jayvenn21/tap/repofail
+#
+# Homebrew uses --no-deps when installing the main package, so all Python
+# dependencies must be declared as resources below.
+# If SHA256 fails after pushing a new tag, get the correct hash with:
+#   curl -sL https://github.com/jayvenn21/repofail/archive/refs/tags/vX.Y.Z.tar.gz | shasum -a 256
+
+class Repofail < Formula
+  include Language::Python::Virtualenv
+
+  desc "Deterministic runtime compatibility analyzer"
+  homepage "https://github.com/jayvenn21/repofail"
+  url "https://github.com/jayvenn21/repofail/archive/refs/tags/v0.2.4.tar.gz"
+  sha256 "d5558cd419c8d46bdc958064cb97f963d1ea793866414c025906ec15033512ed"
+  license "MIT"
+
+  # App supports Python 3.10+. We use 3.12 for current Homebrew; change to
+  # python@3.10 or python@3.11 if you need an older interpreter.
+  depends_on "libyaml"
+  depends_on "python@3.12"
+
+  resource "click" do
+    url "https://files.pythonhosted.org/packages/3d/fa/656b739db8587d7b5dfa22e22ed02566950fbfbcdc20311993483657a5c0/click-8.3.1.tar.gz"
+    sha256 "12ff4785d337a1bb490bb7e9c2b1ee5da3112e94a8622f26a6c77f5d2fc6842a"
+  end
+
+  resource "typer" do
+    url "https://files.pythonhosted.org/packages/ac/0a/d55af35db5f50f486e3eda0ada747eed773859e2699d3ce570b682a9b70a/typer-0.12.3.tar.gz"
+    sha256 "49e73131481d804288ef62598d97a1ceef3058905aa536a1134f90891ba35482"
+  end
+
+  resource "rich" do
+    url "https://files.pythonhosted.org/packages/ab/3a/0316b28d0761c6734d6bc14e770d85506c986c85ffb239e688eeaab2c2bc/rich-13.9.4.tar.gz"
+    sha256 "439594978a49a09530cff7ebc4b5c7103ef57baf48d5ea3184f21d9a2befa098"
+  end
+
+  resource "shellingham" do
+    url "https://files.pythonhosted.org/packages/58/15/8b3609fd3830ef7b27b655beb4b4e9c62313a4e8da8c676e142cc210d58e/shellingham-1.5.4.tar.gz"
+    sha256 "8dbca0739d487e5bd35ab3ca4b36e11c4078f3a234bfce294b0a0291363404de"
+  end
+
+  resource "typing-extensions" do
+    url "https://files.pythonhosted.org/packages/df/db/f35a00659bc03fec321ba8bce9420de607a1d37f8342eee1863174c69557/typing_extensions-4.12.2.tar.gz"
+    sha256 "1a7ead55c7e559dd4dee8856e3a88b41225abfe1ce8df57b7c13915fe121ffb8"
+  end
+
+  resource "tomli" do
+    url "https://files.pythonhosted.org/packages/35/b9/de2a5c0144d7d75a57ff355c0c24054f965b2dc3036456ae03a51ea6264b/tomli-2.0.2.tar.gz"
+    sha256 "d46d457a85337051c36524bc5349dd91b1877838e2979ac5ced3e710ed8a60ed"
+  end
+
+  resource "pyyaml" do
+    url "https://github.com/yaml/pyyaml/archive/refs/tags/6.0.1.tar.gz"
+    sha256 "57314c984aaa84318eed00cf5a8365afc49f87954969e295efe2ba99f3b21f7a"
+  end
+
+  def install
+    virtualenv_install_with_resources
+  end
+
+  test do
+    assert_match "repofail", shell_output("#{bin}/repofail --help", 0)
+  end
+end

{repofail-0.2.2 → repofail-0.2.4}/PKG-INFO

@@ -1,8 +1,13 @@
 Metadata-Version: 2.4
 Name: repofail
-Version: 0.2.2
+Version: 0.2.4
 Summary: Predict why a repository will fail on your machine before you run it.
 Author: Jayanth
+Classifier: Programming Language :: Python :: 3
+Classifier: Programming Language :: Python :: 3.10
+Classifier: Programming Language :: Python :: 3.11
+Classifier: Programming Language :: Python :: 3.12
+Classifier: Programming Language :: Python :: 3.13
 Requires-Python: >=3.10
 Requires-Dist: pyyaml>=6.0
 Requires-Dist: tomli>=2.0; python_version < '3.11'
@@ -12,7 +17,7 @@ Requires-Dist: pytest>=7.0; extra == 'dev'
 Description-Content-Type: text/markdown
 
 <p align="center">
-  <img src="https://raw.githubusercontent.com/jayvenn21/repofail/v0.2.1/docs/logo.png" width="180" alt="repofail logo">
+  <img src="https://raw.githubusercontent.com/jayvenn21/repofail/main/docs/logo.png" width="180" alt="repofail logo">
 </p>
 
 <h1 align="center">repofail</h1>
@@ -22,14 +27,16 @@ Description-Content-Type: text/markdown
 </p>
 
 <p align="center">
-  <a href="https://pypi.org/project/repofail/"><img src="https://img.shields.io/pypi/v/repofail?cacheSeconds=30"></a>
+  <a href="https://pypi.org/project/repofail/"><img src="https://img.shields.io/pypi/v/repofail?color=orange" alt="PyPI"></a>
+  <img src="https://img.shields.io/pypi/pyversions/repofail" alt="Python">
+  <img src="https://img.shields.io/pypi/dm/repofail" alt="Downloads">
   <img src="https://img.shields.io/badge/ci-passing-brightgreen">
-  <img src="https://img.shields.io/badge/python-3.10+-blue">
   <img src="https://img.shields.io/badge/runtime-validated-success">
   <img src="https://img.shields.io/badge/rules-20+-informational">
 </p>
 
 <p align="center">
+  <strong>The static analyzer for runtime compatibility.</strong><br>
   Predict why a repository will fail on your machine before you run it.
 </p>
 
@@ -46,11 +53,24 @@ Description-Content-Type: text/markdown
   <a href="#usage">Usage</a> ·
   <a href="#rules">Rules</a> ·
   <a href="#ci-integration">CI</a> ·
-  <a href="#contracts">Contracts</a>
+  <a href="#contracts">Contracts</a> ·
+  <a href="#faq">FAQ</a>
 </p>
 
 ---
 
+## Quickstart (30 seconds)
+
+```bash
+pip install repofail
+cd /path/to/any/repo
+repofail
+```
+
+You get a compatibility score and a list of deterministic blockers (Node version, Python range, CUDA, lock file, spec drift, etc.). No install of the repo’s dependencies. No cloud. No AI.
+
+---
+
 ## Why This Exists
 
 Most tools install dependencies.
@@ -90,6 +110,18 @@ Deterministic spec violation detected — engines.node requires 22.x, host is 20
 
 ---
 
+## Case studies
+
+| Scenario | Without repofail | With repofail |
+|----------|------------------|----------------|
+| **Node engine mismatch** | Clone → `npm install` → `EBADENGINE` → search, fix, retry | `repofail .` → "Node 22.x required, host is 20.x" + suggested fix in &lt;1s |
+| **CUDA on laptop** | Clone → `pip install` → run → `RuntimeError: CUDA unavailable` | `repofail .` → "Hard-coded CUDA path, host has no GPU" before you run |
+| **Spec drift (Python)** | CI passes, local fails; pyproject says 3.11, Docker uses 3.9 | `repofail .` → "Spec drift — 3 distinct Python targets" + where they differ |
+
+Try the demos: [node engine](https://github.com/jayvenn21/repofail-demo-node-engine), [spec drift](https://github.com/jayvenn21/repofail-demo-spec-drift), [CUDA hardcoded](https://github.com/jayvenn21/repofail-demo-cuda-hardcoded).
+
+---
+
 ## Install
 
 **From PyPI (recommended)**
@@ -98,12 +130,25 @@ Deterministic spec violation detected — engines.node requires 22.x, host is 20
 pip install repofail
 ```
 
-Or with pipx (isolated CLI install):
+**One-liner (curl)**
+
+```bash
+curl -sSL https://raw.githubusercontent.com/jayvenn21/repofail/main/install.sh | bash
+```
+
+**pipx (isolated CLI)**
 
 ```bash
 pipx install repofail
 ```
 
+**Homebrew** (formula: [jayvenn21/homebrew-tap](https://github.com/jayvenn21/homebrew-tap))
+
+```bash
+brew tap jayvenn21/tap
+brew install jayvenn21/tap/repofail
+```
+
 **From source (development)**
 
 ```bash
@@ -142,10 +187,41 @@ repofail s                  # Stats: local failure counts (from -r reports)
 repofail s -j               # Stats with JSON output
 ```
 
+## Exit codes
+
+- **0** — No deterministic violations (or scan completed successfully)
+- **1** — Violations detected (with `--ci`) or target host has issues (with `sim`)
+- **2** — Invalid usage / bad input (e.g. not a directory, contract violation)
+
 ---
 
 ## CI integration
 
+**Option A — Reusable action (comment on PR + fail CI)**
+
+```yaml
+name: repofail
+on:
+  pull_request:
+    branches: [main, master]
+jobs:
+  check:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+      - uses: jayvenn21/repofail/.github/actions/repofail@main
+        with:
+          path: .
+          fail_on: HIGH
+          comment: 'true'
+          upload_artifact: 'true'
+          pr_number: ${{ github.event.pull_request.number }}
+```
+
+The action installs repofail, runs a compatibility check, comments the Markdown report on the PR, uploads the JSON artifact, and fails the job if violations meet the threshold.
+
+**Option B — Inline (no comment)**
+
 ```yaml
 - uses: actions/checkout@v4
 - uses: actions/setup-python@v5
@@ -164,7 +240,7 @@ repofail gen . -o contract.json
 repofail check contract.json
 ```
 
-Versioned runtime expectations. Teams share contracts. CI checks drift.
+Versioned runtime expectations. Teams share contracts. CI checks drift. Generated contracts report the installed repofail version (from PyPI/Homebrew) so tooling stays traceable.
 
 ---
 
@@ -237,8 +313,39 @@ Extensible via `.repofail/rules.yaml`.
 
 ---
 
+## FAQ
+
+**Does repofail install or run my project?**  
+No. It only reads configs and (optionally) inspects Python/JS for patterns. No `pip install`, no `npm install`, no execution.
+
+**Does it need the internet?**  
+No. It runs fully offline. Host inspection uses local subprocesses (e.g. `node --version`).
+
+**Why “deterministic”?**  
+Same repo + same host → same result. No ML, no heuristics that change between runs. Rules are based on config and code.
+
+**Can I add my own rules?**  
+Yes. Put a `.repofail/rules.yaml` (or `repofail-rules.yaml`) in the repo and define conditions on `repo.*` and `host.*`. See `repofail -e list` for built-in rule IDs.
+
+**What if my repo is clean?**  
+You get a high score (e.g. 96–100%) and “No deterministic blockers detected.” repofail does not invent problems.
+
+---
+
+## When not to use it
+
+- **You need dependency resolution** — use pip, npm, poetry, etc. repofail does not install or resolve.
+- **You need security scanning** — use Dependabot, Snyk, or similar. repofail is compatibility-only.
+- **You want “AI suggested fixes”** — repofail gives deterministic, rule-based suggestions only.
+- **You run only in one environment** — if every dev and CI use the same OS/runtime, the value is smaller (still useful for drift and contracts).
+
+---
+
 ## Testing
 
 ```bash
+pip install -e ".[dev]"
 pytest tests/ -v
 ```
+
+**Quick checks:** `bash -n install.sh` (syntax). The GitHub Action runs on every PR in this repo (see [.github/workflows/repofail.yml](.github/workflows/repofail.yml)); to test the reusable action, use it in another repo’s workflow on a PR.

{repofail-0.2.2 → repofail-0.2.4}/README.md

@@ -1,5 +1,5 @@
 <p align="center">
-  <img src="https://raw.githubusercontent.com/jayvenn21/repofail/v0.2.1/docs/logo.png" width="180" alt="repofail logo">
+  <img src="https://raw.githubusercontent.com/jayvenn21/repofail/main/docs/logo.png" width="180" alt="repofail logo">
 </p>
 
 <h1 align="center">repofail</h1>
@@ -9,14 +9,16 @@
 </p>
 
 <p align="center">
-  <a href="https://pypi.org/project/repofail/"><img src="https://img.shields.io/pypi/v/repofail?cacheSeconds=30"></a>
+  <a href="https://pypi.org/project/repofail/"><img src="https://img.shields.io/pypi/v/repofail?color=orange" alt="PyPI"></a>
+  <img src="https://img.shields.io/pypi/pyversions/repofail" alt="Python">
+  <img src="https://img.shields.io/pypi/dm/repofail" alt="Downloads">
   <img src="https://img.shields.io/badge/ci-passing-brightgreen">
-  <img src="https://img.shields.io/badge/python-3.10+-blue">
   <img src="https://img.shields.io/badge/runtime-validated-success">
   <img src="https://img.shields.io/badge/rules-20+-informational">
 </p>
 
 <p align="center">
+  <strong>The static analyzer for runtime compatibility.</strong><br>
   Predict why a repository will fail on your machine before you run it.
 </p>
 
@@ -33,11 +35,24 @@
   <a href="#usage">Usage</a> ·
   <a href="#rules">Rules</a> ·
   <a href="#ci-integration">CI</a> ·
-  <a href="#contracts">Contracts</a>
+  <a href="#contracts">Contracts</a> ·
+  <a href="#faq">FAQ</a>
 </p>
 
 ---
 
+## Quickstart (30 seconds)
+
+```bash
+pip install repofail
+cd /path/to/any/repo
+repofail
+```
+
+You get a compatibility score and a list of deterministic blockers (Node version, Python range, CUDA, lock file, spec drift, etc.). No install of the repo’s dependencies. No cloud. No AI.
+
+---
+
 ## Why This Exists
 
 Most tools install dependencies.
@@ -77,6 +92,18 @@ Deterministic spec violation detected — engines.node requires 22.x, host is 20
 
 ---
 
+## Case studies
+
+| Scenario | Without repofail | With repofail |
+|----------|------------------|----------------|
+| **Node engine mismatch** | Clone → `npm install` → `EBADENGINE` → search, fix, retry | `repofail .` → "Node 22.x required, host is 20.x" + suggested fix in &lt;1s |
+| **CUDA on laptop** | Clone → `pip install` → run → `RuntimeError: CUDA unavailable` | `repofail .` → "Hard-coded CUDA path, host has no GPU" before you run |
+| **Spec drift (Python)** | CI passes, local fails; pyproject says 3.11, Docker uses 3.9 | `repofail .` → "Spec drift — 3 distinct Python targets" + where they differ |
+
+Try the demos: [node engine](https://github.com/jayvenn21/repofail-demo-node-engine), [spec drift](https://github.com/jayvenn21/repofail-demo-spec-drift), [CUDA hardcoded](https://github.com/jayvenn21/repofail-demo-cuda-hardcoded).
+
+---
+
 ## Install
 
 **From PyPI (recommended)**
@@ -85,12 +112,25 @@ Deterministic spec violation detected — engines.node requires 22.x, host is 20
 pip install repofail
 ```
 
-Or with pipx (isolated CLI install):
+**One-liner (curl)**
+
+```bash
+curl -sSL https://raw.githubusercontent.com/jayvenn21/repofail/main/install.sh | bash
+```
+
+**pipx (isolated CLI)**
 
 ```bash
 pipx install repofail
 ```
 
+**Homebrew** (formula: [jayvenn21/homebrew-tap](https://github.com/jayvenn21/homebrew-tap))
+
+```bash
+brew tap jayvenn21/tap
+brew install jayvenn21/tap/repofail
+```
+
 **From source (development)**
 
 ```bash
@@ -129,10 +169,41 @@ repofail s                  # Stats: local failure counts (from -r reports)
 repofail s -j               # Stats with JSON output
 ```
 
+## Exit codes
+
+- **0** — No deterministic violations (or scan completed successfully)
+- **1** — Violations detected (with `--ci`) or target host has issues (with `sim`)
+- **2** — Invalid usage / bad input (e.g. not a directory, contract violation)
+
 ---
 
 ## CI integration
 
+**Option A — Reusable action (comment on PR + fail CI)**
+
+```yaml
+name: repofail
+on:
+  pull_request:
+    branches: [main, master]
+jobs:
+  check:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+      - uses: jayvenn21/repofail/.github/actions/repofail@main
+        with:
+          path: .
+          fail_on: HIGH
+          comment: 'true'
+          upload_artifact: 'true'
+          pr_number: ${{ github.event.pull_request.number }}
+```
+
+The action installs repofail, runs a compatibility check, comments the Markdown report on the PR, uploads the JSON artifact, and fails the job if violations meet the threshold.
+
+**Option B — Inline (no comment)**
+
 ```yaml
 - uses: actions/checkout@v4
 - uses: actions/setup-python@v5
@@ -151,7 +222,7 @@ repofail gen . -o contract.json
 repofail check contract.json
 ```
 
-Versioned runtime expectations. Teams share contracts. CI checks drift.
+Versioned runtime expectations. Teams share contracts. CI checks drift. Generated contracts report the installed repofail version (from PyPI/Homebrew) so tooling stays traceable.
 
 ---
 
@@ -224,8 +295,39 @@ Extensible via `.repofail/rules.yaml`.
 
 ---
 
+## FAQ
+
+**Does repofail install or run my project?**  
+No. It only reads configs and (optionally) inspects Python/JS for patterns. No `pip install`, no `npm install`, no execution.
+
+**Does it need the internet?**  
+No. It runs fully offline. Host inspection uses local subprocesses (e.g. `node --version`).
+
+**Why “deterministic”?**  
+Same repo + same host → same result. No ML, no heuristics that change between runs. Rules are based on config and code.
+
+**Can I add my own rules?**  
+Yes. Put a `.repofail/rules.yaml` (or `repofail-rules.yaml`) in the repo and define conditions on `repo.*` and `host.*`. See `repofail -e list` for built-in rule IDs.
+
+**What if my repo is clean?**  
+You get a high score (e.g. 96–100%) and “No deterministic blockers detected.” repofail does not invent problems.
+
+---
+
+## When not to use it
+
+- **You need dependency resolution** — use pip, npm, poetry, etc. repofail does not install or resolve.
+- **You need security scanning** — use Dependabot, Snyk, or similar. repofail is compatibility-only.
+- **You want “AI suggested fixes”** — repofail gives deterministic, rule-based suggestions only.
+- **You run only in one environment** — if every dev and CI use the same OS/runtime, the value is smaller (still useful for drift and contracts).
+
+---
+
 ## Testing
 
 ```bash
+pip install -e ".[dev]"
 pytest tests/ -v
 ```
+
+**Quick checks:** `bash -n install.sh` (syntax). The GitHub Action runs on every PR in this repo (see [.github/workflows/repofail.yml](.github/workflows/repofail.yml)); to test the reusable action, use it in another repo’s workflow on a PR.

repofail-0.2.4/docs/QUICKSTART.md

@@ -0,0 +1,42 @@
+# repofail — 30-second quickstart
+
+## What it does
+
+Answers one question: **Will this repository run on this machine?**
+
+It does **not** install your project. It reads configs and your environment, then reports compatibility issues (Node version, Python range, CUDA, lock file, spec drift, etc.) with a single score and clear evidence.
+
+## Install
+
+```bash
+pip install repofail
+```
+
+Or: `pipx install repofail` | [install.sh](https://raw.githubusercontent.com/jayvenn21/repofail/main/install.sh) | Homebrew (see README).
+
+## Run
+
+```bash
+cd /path/to/any/repo
+repofail
+```
+
+You get:
+
+- A **compatibility score** (0–100%)
+- **HARD FAILURES** (deterministic blockers) with evidence and suggested fixes
+- Optional: **RUNTIME RISKS**, **STRUCTURAL PROFILE**
+
+## CI
+
+```bash
+repofail --ci
+```
+
+Exits 1 if HIGH (or configured) severity violations are found. Use in GitHub Actions or any CI.
+
+## Next
+
+- `repofail -e list` — list all rules  
+- `repofail -e spec_drift` — explain a rule  
+- [README](https://github.com/jayvenn21/repofail#readme) — full docs, FAQ, when not to use

repofail-0.2.4/homebrew-tap/Formula/repofail.rb

@@ -0,0 +1,66 @@
+# Homebrew formula for repofail
+# To use: copy to your tap repo (e.g. homebrew-tap/Formula/repofail.rb)
+# Then: brew tap jayvenn21/tap && brew install jayvenn21/tap/repofail
+#
+# Homebrew uses --no-deps when installing the main package, so all Python
+# dependencies must be declared as resources below.
+# If SHA256 fails after pushing a new tag, get the correct hash with:
+#   curl -sL https://github.com/jayvenn21/repofail/archive/refs/tags/vX.Y.Z.tar.gz | shasum -a 256
+
+class Repofail < Formula
+  include Language::Python::Virtualenv
+
+  desc "Deterministic runtime compatibility analyzer"
+  homepage "https://github.com/jayvenn21/repofail"
+  url "https://github.com/jayvenn21/repofail/archive/refs/tags/v0.2.4.tar.gz"
+  sha256 "d5558cd419c8d46bdc958064cb97f963d1ea793866414c025906ec15033512ed"
+  license "MIT"
+
+  # App supports Python 3.10+. We use 3.12 for current Homebrew; change to
+  # python@3.10 or python@3.11 if you need an older interpreter.
+  depends_on "libyaml"
+  depends_on "python@3.12"
+
+  resource "click" do
+    url "https://files.pythonhosted.org/packages/3d/fa/656b739db8587d7b5dfa22e22ed02566950fbfbcdc20311993483657a5c0/click-8.3.1.tar.gz"
+    sha256 "12ff4785d337a1bb490bb7e9c2b1ee5da3112e94a8622f26a6c77f5d2fc6842a"
+  end
+
+  resource "typer" do
+    url "https://files.pythonhosted.org/packages/ac/0a/d55af35db5f50f486e3eda0ada747eed773859e2699d3ce570b682a9b70a/typer-0.12.3.tar.gz"
+    sha256 "49e73131481d804288ef62598d97a1ceef3058905aa536a1134f90891ba35482"
+  end
+
+  resource "rich" do
+    url "https://files.pythonhosted.org/packages/ab/3a/0316b28d0761c6734d6bc14e770d85506c986c85ffb239e688eeaab2c2bc/rich-13.9.4.tar.gz"
+    sha256 "439594978a49a09530cff7ebc4b5c7103ef57baf48d5ea3184f21d9a2befa098"
+  end
+
+  resource "shellingham" do
+    url "https://files.pythonhosted.org/packages/58/15/8b3609fd3830ef7b27b655beb4b4e9c62313a4e8da8c676e142cc210d58e/shellingham-1.5.4.tar.gz"
+    sha256 "8dbca0739d487e5bd35ab3ca4b36e11c4078f3a234bfce294b0a0291363404de"
+  end
+
+  resource "typing-extensions" do
+    url "https://files.pythonhosted.org/packages/df/db/f35a00659bc03fec321ba8bce9420de607a1d37f8342eee1863174c69557/typing_extensions-4.12.2.tar.gz"
+    sha256 "1a7ead55c7e559dd4dee8856e3a88b41225abfe1ce8df57b7c13915fe121ffb8"
+  end
+
+  resource "tomli" do
+    url "https://files.pythonhosted.org/packages/35/b9/de2a5c0144d7d75a57ff355c0c24054f965b2dc3036456ae03a51ea6264b/tomli-2.0.2.tar.gz"
+    sha256 "d46d457a85337051c36524bc5349dd91b1877838e2979ac5ced3e710ed8a60ed"
+  end
+
+  resource "pyyaml" do
+    url "https://github.com/yaml/pyyaml/archive/refs/tags/6.0.1.tar.gz"
+    sha256 "57314c984aaa84318eed00cf5a8365afc49f87954969e295efe2ba99f3b21f7a"
+  end
+
+  def install
+    virtualenv_install_with_resources
+  end
+
+  test do
+    assert_match "repofail", shell_output("#{bin}/repofail --help", 0)
+  end
+end

repofail-0.2.4/install.sh

@@ -0,0 +1,21 @@
+#!/usr/bin/env bash
+# Install repofail — deterministic runtime compatibility analyzer
+# Usage: curl -sSL https://raw.githubusercontent.com/jayvenn21/repofail/main/install.sh | bash
+
+set -e
+
+if command -v pipx &>/dev/null; then
+  echo "Installing repofail via pipx (isolated)..."
+  pipx install repofail
+elif command -v pip3 &>/dev/null; then
+  echo "Installing repofail via pip..."
+  pip3 install repofail
+elif command -v pip &>/dev/null; then
+  echo "Installing repofail via pip..."
+  pip install repofail
+else
+  echo "Error: need pip or pipx. Install Python 3.10+ and run: pip install repofail"
+  exit 1
+fi
+
+echo "Done. Run: repofail --help"

{repofail-0.2.2 → repofail-0.2.4}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "hatchling.build"
 
 [project]
 name = "repofail"
-version = "0.2.2"
+version = "0.2.4"
 description = "Predict why a repository will fail on your machine before you run it."
 readme = "README.md"
 requires-python = ">=3.10"
@@ -14,6 +14,13 @@ dependencies = [
     "tomli>=2.0; python_version < '3.11'",
     "pyyaml>=6.0",
 ]
+classifiers = [
+    "Programming Language :: Python :: 3",
+    "Programming Language :: Python :: 3.10",
+    "Programming Language :: Python :: 3.11",
+    "Programming Language :: Python :: 3.12",
+    "Programming Language :: Python :: 3.13",
+]
 
 [project.scripts]
 repofail = "repofail.cli:_main"
@@ -23,3 +30,6 @@ dev = [
     "pytest>=7.0",
 ]
 
+[tool.hatch.build.targets.sdist]
+exclude = [".venv-check", ".venv-check/**", "testenv", "testenv/**", ".venv", ".venv/**", "venv", "venv/**"]
+

repofail-0.2.4/repofail/__init__.py

@@ -0,0 +1,8 @@
+"""repofail — Failure-oriented repo introspection."""
+
+from importlib.metadata import PackageNotFoundError, version
+
+try:
+    __version__ = version("repofail")
+except PackageNotFoundError:
+    __version__ = "0.0.0.dev0"

{repofail-0.2.2 → repofail-0.2.4}/repofail/cli.py

@@ -2,6 +2,7 @@
 
 import sys
 from pathlib import Path
+from typing import Optional
 
 import click
 import typer
@@ -46,7 +47,7 @@ from .engine import run_rules
 from .contract import generate_contract, validate_contract, EnvironmentContract
 from .telemetry import save_report, get_stats
 from .rules.base import Severity
-from .rules.registry import RULE_INFO, RULE_SUGGESTIONS
+from .rules.registry import RULE_INFO
 from .risk import estimate_success_probability
 from .format import format_human
 
@@ -263,7 +264,7 @@ def _print_json(repo_profile, host_profile, results, verbose: bool = False) -> N
 @app.command("gen")
 def gen_cmd(
     path: Path = typer.Argument(Path("."), exists=True, file_okay=False, dir_okay=True, resolve_path=True, help="Repo path"),
-    output: Path | None = typer.Option(None, "-o", help="Output file"),
+    output: Optional[Path] = typer.Option(None, "-o", help="Output file"),
 ) -> None:
     """Generate an environment contract from the repository."""
     try:

repofail-0.2.2/.gitignore

@@ -1,8 +0,0 @@
-dist/
-__pycache__/
-*.pyc
-.pytest_cache/
-*.egg-info/
-.eggs/
-VISION.md
-repofail-contract.json

repofail-0.2.2/repofail/__init__.py

@@ -1,3 +0,0 @@
-"""repofail — Failure-oriented repo introspection."""
-
-__version__ = "0.1.0"