volcano-sdk-python 0.12.0__tar.gz → 0.13.1__tar.gz

volcano_sdk_python-0.13.1/.release-please-manifest.json

@@ -0,0 +1,3 @@
+{
+  ".": "0.13.1"
+}

{volcano_sdk_python-0.12.0 → volcano_sdk_python-0.13.1}/CHANGELOG.md

@@ -1,5 +1,19 @@
 # Changelog
 
+## [0.13.1](https://github.com/Kong/volcano-sdk-python/compare/v0.13.0...v0.13.1) (2026-09-24)
+
+
+### Bug Fixes
+
+* **realtime:** validate wire events and bound callback lifecycle ([#350](https://github.com/Kong/volcano-sdk-python/issues/350)) ([9a4deb1](https://github.com/Kong/volcano-sdk-python/commit/9a4deb13477150c6b26e7fed61fc56ce7c7aa1e6))
+
+## [0.13.0](https://github.com/Kong/volcano-sdk-python/compare/v0.12.0...v0.13.0) (2026-09-23)
+
+
+### Features
+
+* **quality:** type-check Python auth state tests without Any ([#345](https://github.com/Kong/volcano-sdk-python/issues/345)) ([acd2352](https://github.com/Kong/volcano-sdk-python/commit/acd235251b00c871297eff7ba1ab94e1ea9ee02c))
+
 ## [0.12.0](https://github.com/Kong/volcano-sdk-python/compare/v0.11.3...v0.12.0) (2026-09-23)
 
 

{volcano_sdk_python-0.12.0 → volcano_sdk_python-0.13.1}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.5
 Name: volcano-sdk-python
-Version: 0.12.0
+Version: 0.13.1
 Summary: Official Python SDK for Volcano
 Project-URL: Homepage, https://volcano.dev
 Project-URL: Repository, https://github.com/Kong/volcano-sdk-python
@@ -94,17 +94,22 @@ execution = client.durable.start(
 )
 print(execution.id, execution.status)
 
-execution = client.durable.get(
+owner_client = VolcanoClient(
+    api_url="https://api.volcano.dev",
+    anon_key="your-anon-key",
+    access_token="your-platform-user-token",
+)
+execution = owner_client.durable.get(
     "00000000-0000-4000-8000-000000000001", "order-pipeline", execution.id
 )
 print(execution.is_terminal, execution.result)
 
-executions = client.durable.list(
+executions = owner_client.durable.list(
     "00000000-0000-4000-8000-000000000001", "order-pipeline", status="running"
 )
 print(executions.total, executions.has_more)
 
-client.durable.stop(
+owner_client.durable.stop(
     "00000000-0000-4000-8000-000000000001", "order-pipeline", execution.id
 )
 
@@ -264,18 +269,18 @@ A function's own response, HTTP 403, or a network failure never triggers this re
 Anonymous and service keys do not refresh.
 
 `durable.start()` begins an execution of a deployed durable function and returns
-a handle rather than a result: an execution can run for hours, so its result is
-read back with `durable.get()`. It takes the credential `functions.invoke()`
+a handle rather than a result: an execution can run for up to 366 days, so its
+result is read back with `durable.get()`. It takes the credential `functions.invoke()`
 takes, and is the only durable operation an application credential may perform.
 An `execution_name` makes the start idempotent — starting again under the same
 name returns the execution that already exists rather than beginning a second
 one, and is charged once.
 
 `durable.get()`, `durable.list()` and `durable.stop()` are owner-scoped and need
-the project's own platform token, because an execution is addressed by its id
-alone and an anonymous key is held by everyone who loads the page. Neither an
-auth-user session from `sign_in()` nor a service key is accepted -- the routes
-take a user token, and anything else is answered 401. Poll them from a backend.
+the project owner's platform user token, because an execution is addressed by
+its id alone and an anonymous key is held by everyone who loads the page.
+Auth-user sessions from `sign_in()`, anonymous keys, service keys, and project
+access tokens are not accepted. Poll them from a trusted backend.
 `get()` carries `result` once the execution has succeeded and `error` when it
 failed; `result_expired` separates a result the platform has discarded from a
 function that returned nothing. `is_terminal` reports whether the execution has
@@ -315,6 +320,31 @@ def handler(event, ctx):
     return {"charged": charge["id"], "packed": packed.results}
 ```
 
+Use the function name for its source directory and manifest entry:
+
+```text
+volcano/functions/order-pipeline/
+├── main.py
+└── requirements.txt
+```
+
+```text
+# volcano/functions/order-pipeline/requirements.txt
+volcano-sdk-python
+```
+
+```yaml
+# volcano-config.yaml
+version: 1
+project:
+  name: my-app
+functions:
+  - name: order-pipeline
+    kind: durable
+```
+
+The decorator defines handler behavior. The manifest declaration makes the function discoverable by `volcano durable deploy`.
+
 Every context operation is checkpointed: what finished is recorded, and a
 resumed execution replays that recorded outcome instead of doing the work again.
 That is the one rule the handler has to respect — the code between operations
@@ -356,6 +386,20 @@ nothing while it waits. Running the handler anywhere durable execution does not
 exist raises `DurableRuntimeMissingError` rather than an import error from an
 unfamiliar package.
 
+Run the same handler through the local durable engine:
+
+```bash
+volcano start
+volcano durable deploy --all
+volcano durable start order-pipeline --input '{"order_id":"order-9"}'
+```
+
+Local waits resolve immediately by default while preserving checkpoint and replay
+behavior. Set `LOCAL_DURABLE_REAL_TIME=true` before `volcano start` when wait
+timing must match the deployed function. Local executions persist across
+`volcano stop` and `volcano start`. Volcano does not expose externally completed
+callbacks; use `ctx.wait_until` to poll application state instead.
+
 `logs.search()` returns an immutable page of retained runtime or deployment log
 events. Pass `next_cursor` back as `cursor` to continue a search. `logs.activity()`
 returns immutable time buckets using the same resource selector and query syntax.

{volcano_sdk_python-0.12.0 → volcano_sdk_python-0.13.1}/README.md

@@ -69,17 +69,22 @@ execution = client.durable.start(
 )
 print(execution.id, execution.status)
 
-execution = client.durable.get(
+owner_client = VolcanoClient(
+    api_url="https://api.volcano.dev",
+    anon_key="your-anon-key",
+    access_token="your-platform-user-token",
+)
+execution = owner_client.durable.get(
     "00000000-0000-4000-8000-000000000001", "order-pipeline", execution.id
 )
 print(execution.is_terminal, execution.result)
 
-executions = client.durable.list(
+executions = owner_client.durable.list(
     "00000000-0000-4000-8000-000000000001", "order-pipeline", status="running"
 )
 print(executions.total, executions.has_more)
 
-client.durable.stop(
+owner_client.durable.stop(
     "00000000-0000-4000-8000-000000000001", "order-pipeline", execution.id
 )
 
@@ -239,18 +244,18 @@ A function's own response, HTTP 403, or a network failure never triggers this re
 Anonymous and service keys do not refresh.
 
 `durable.start()` begins an execution of a deployed durable function and returns
-a handle rather than a result: an execution can run for hours, so its result is
-read back with `durable.get()`. It takes the credential `functions.invoke()`
+a handle rather than a result: an execution can run for up to 366 days, so its
+result is read back with `durable.get()`. It takes the credential `functions.invoke()`
 takes, and is the only durable operation an application credential may perform.
 An `execution_name` makes the start idempotent — starting again under the same
 name returns the execution that already exists rather than beginning a second
 one, and is charged once.
 
 `durable.get()`, `durable.list()` and `durable.stop()` are owner-scoped and need
-the project's own platform token, because an execution is addressed by its id
-alone and an anonymous key is held by everyone who loads the page. Neither an
-auth-user session from `sign_in()` nor a service key is accepted -- the routes
-take a user token, and anything else is answered 401. Poll them from a backend.
+the project owner's platform user token, because an execution is addressed by
+its id alone and an anonymous key is held by everyone who loads the page.
+Auth-user sessions from `sign_in()`, anonymous keys, service keys, and project
+access tokens are not accepted. Poll them from a trusted backend.
 `get()` carries `result` once the execution has succeeded and `error` when it
 failed; `result_expired` separates a result the platform has discarded from a
 function that returned nothing. `is_terminal` reports whether the execution has
@@ -290,6 +295,31 @@ def handler(event, ctx):
     return {"charged": charge["id"], "packed": packed.results}
 ```
 
+Use the function name for its source directory and manifest entry:
+
+```text
+volcano/functions/order-pipeline/
+├── main.py
+└── requirements.txt
+```
+
+```text
+# volcano/functions/order-pipeline/requirements.txt
+volcano-sdk-python
+```
+
+```yaml
+# volcano-config.yaml
+version: 1
+project:
+  name: my-app
+functions:
+  - name: order-pipeline
+    kind: durable
+```
+
+The decorator defines handler behavior. The manifest declaration makes the function discoverable by `volcano durable deploy`.
+
 Every context operation is checkpointed: what finished is recorded, and a
 resumed execution replays that recorded outcome instead of doing the work again.
 That is the one rule the handler has to respect — the code between operations
@@ -331,6 +361,20 @@ nothing while it waits. Running the handler anywhere durable execution does not
 exist raises `DurableRuntimeMissingError` rather than an import error from an
 unfamiliar package.
 
+Run the same handler through the local durable engine:
+
+```bash
+volcano start
+volcano durable deploy --all
+volcano durable start order-pipeline --input '{"order_id":"order-9"}'
+```
+
+Local waits resolve immediately by default while preserving checkpoint and replay
+behavior. Set `LOCAL_DURABLE_REAL_TIME=true` before `volcano start` when wait
+timing must match the deployed function. Local executions persist across
+`volcano stop` and `volcano start`. Volcano does not expose externally completed
+callbacks; use `ctx.wait_until` to poll application state instead.
+
 `logs.search()` returns an immutable page of retained runtime or deployment log
 events. Pass `next_cursor` back as `cursor` to continue a search. `logs.activity()`
 returns immutable time buckets using the same resource selector and query syntax.

{volcano_sdk_python-0.12.0 → volcano_sdk_python-0.13.1}/docs/README.md

@@ -130,6 +130,6 @@ See [Realtime](./realtime.md) for broadcasts, presence, database changes, and sh
 
 See [Authentication](./authentication.md) for account, session, email, and OAuth workflows.
 
-See [Functions](./functions.md) for invocation identity, response values, and error handling.
+See [Functions](./functions.md) for standard invocation, durable execution, local durable development, and error handling.
 
 See [Versions and compatibility](./versions.md) for runtime support, upgrades, and restoring a tested dependency set.

{volcano_sdk_python-0.12.0 → volcano_sdk_python-0.13.1}/docs/functions.md

@@ -63,3 +63,83 @@ A function's own HTTP 404 does not trigger another invocation.
 Network failures do not establish whether a function ran; do not blindly retry operations with side effects.
 
 Invalid invocation arguments and malformed successful resolution responses can raise `ValueError` or `TypeError`.
+
+## Start and follow a durable execution
+
+A durable execution can run for up to 366 days. Starting one returns a handle instead of waiting for its result:
+
+```python
+handle = client.durable.start(
+    "charge-order",
+    {"order_id": "order-9"},
+    execution_name="order-9",
+)
+
+owner_client = VolcanoClient(
+    anon_key=os.environ["VOLCANO_ANON_KEY"],
+    api_url=os.environ.get("VOLCANO_API_URL", "https://api.volcano.dev"),
+    access_token=os.environ["VOLCANO_PLATFORM_TOKEN"],
+)
+execution = owner_client.durable.get(project_id, "charge-order", handle.id)
+page = owner_client.durable.list(project_id, "charge-order", status="running")
+owner_client.durable.stop(project_id, "charge-order", handle.id)
+```
+
+`start()` accepts the same active session, service key, or anonymous key as `functions.invoke()`. It is the only durable operation available to application credentials. An execution name makes a start idempotent.
+
+`get()`, `list()`, and `stop()` are owner-scoped. Call them from a trusted backend with the project owner's platform user token. Auth-user sessions, anonymous keys, service keys, and project access tokens are not accepted. `stop()` returns after the stop request is accepted, so poll `get()` until `is_terminal` is true.
+
+## Write a durable function
+
+Use `volcano_sdk.durable_authoring` in a durable function running on `python3.13` or `python3.14`:
+
+```python
+from volcano_sdk.durable_authoring import durable
+
+
+@durable
+def handler(event, ctx):
+    charge = ctx.step("charge", lambda scope: charge_card(event["order_id"]))
+    ctx.wait("settle", "30s")
+    return {"charge_id": charge["id"]}
+```
+
+Place the handler and its dependency file under the function name:
+
+```text
+volcano/functions/charge-order/
+├── main.py
+└── requirements.txt
+```
+
+```text
+# volcano/functions/charge-order/requirements.txt
+volcano-sdk-python
+```
+
+Declare the same name as durable in `volcano-config.yaml`; the decorator does not register the function with the CLI:
+
+```yaml
+version: 1
+project:
+  name: my-app
+functions:
+  - name: charge-order
+    kind: durable
+```
+
+Volcano records each context operation. Resumed executions replay recorded results instead of repeating completed work. Keep changing decisions inside `ctx.step()`. Use `ctx.wait_until()` to poll application state. Volcano does not expose externally completed callbacks.
+
+## Run durable functions locally
+
+Deploy and start the same handler through the local durable engine:
+
+```bash
+volcano start
+volcano durable deploy --all
+volcano durable start charge-order --input '{"order_id":"order-9"}'
+```
+
+Local waits resolve immediately by default while preserving checkpoint and replay behavior. Set `LOCAL_DURABLE_REAL_TIME=true` before `volcano start` when wait timing must match the deployed function. Local executions persist across `volcano stop` and `volcano start`.
+
+Running a decorated handler directly in a Python process still needs the optional test runtime: `python -m pip install 'volcano-sdk-python[durable]'`.

volcano_sdk_python-0.13.1/maintainers/mutation-testing.md

@@ -0,0 +1,45 @@
+# Mutation testing
+
+`uv run --locked poe quality` runs all native checks and mutates every changed
+handwritten runtime module plus the lock acquisition, guard, renewal, and worker
+modules. CI uses the same `checks` and `mutation` tasks in separate jobs, then
+requires both through `Quality Gate`. The weekly `poe mutation-full` task audits
+every handwritten runtime module without a debt baseline.
+
+Mutmut's [native configuration](https://mutmut.readthedocs.io/en/latest/) lives
+in `pyproject.toml`; it excludes only the generated OpenAPI client. Mutmut can
+select modules by name but has no Git-changed-module option and returns success
+when mutants survive. `scripts/mutation.sh` selects module names from Git and
+`scripts/mutation_results.py` reads only those modules' native metadata. The
+report at `reports/mutation.json` distinguishes killed, statically invalid,
+surviving, uncovered, timed-out, crashed, interrupted, and missing results.
+A pytest internal error is a harness crash, not a killed mutant.
+The pinned Pyrefly check rejects type-invalid realtime mutants before pytest;
+the report counts these as `type_checked`, separately from test-killed mutants.
+Surviving, uncovered, timed-out, crashed, and incomplete mutants still fail.
+Mutmut passes pytest `-x` so a selected test's first assertion failure kills the
+mutant before a later selected test can hang on the same defect. Mutants that
+hang before any failure remain timeouts and fail separately.
+The runner rebuilds mutmut's native test-selection cache for each gate so newly
+added tests are included. Direct mutmut runs also watch Python test files for
+cache invalidation.
+The runner uses one mutmut child at a time because competing async mutant
+processes can time out tests that kill the same mutant when run alone.
+Mutmut uses its native forkserver isolation because forking from a process that
+has already run asyncio tests can crash a worker before its tests report a result.
+The mutation runner sets `NO_PROXY=*` for its hermetic transport tests because
+macOS system-proxy discovery can abort after a fork with active threads.
+The pinned pytest-order plugin runs bounded callback and presence assertions
+first when mutmut's unordered test selection could otherwise reach a blocked test.
+
+The full audit runs mutmut once across the entire source tree. It reports any
+surviving mutants without treating them as an approved baseline. Equivalent
+mutants require a reviewed, exact exception before a gate can accept them.
+
+Ruff, Mypy, Basedpyright, pytest, and Tox tasks pass `pyproject.toml`
+explicitly. Their documented config-file precedence can otherwise select a
+new local config before the checked-in policy:
+[Ruff](https://docs.astral.sh/ruff/configuration/),
+[Mypy](https://mypy.readthedocs.io/en/stable/command_line.html),
+[pytest](https://docs.pytest.org/en/stable/reference/customize.html),
+[Tox](https://tox.wiki/en/latest/man/tox.1.html).

{volcano_sdk_python-0.12.0 → volcano_sdk_python-0.13.1}/maintainers/quality-policy.lock.json

@@ -25,6 +25,51 @@
           "reportUnannotatedClassAttribute": "error",
           "root": "src/volcano_sdk/_transport.py"
         },
+        {
+          "reportAny": "error",
+          "reportExplicitAny": "error",
+          "reportImplicitStringConcatenation": "error",
+          "reportInvalidCast": "error",
+          "reportUnannotatedClassAttribute": "error",
+          "reportUnusedCallResult": "error",
+          "root": "tests/unit/test_state.py"
+        },
+        {
+          "reportAny": "error",
+          "reportExplicitAny": "error",
+          "reportImplicitStringConcatenation": "error",
+          "reportInvalidCast": "error",
+          "reportUnannotatedClassAttribute": "error",
+          "reportUnusedCallResult": "error",
+          "root": "tests/unit/test_realtime.py"
+        },
+        {
+          "reportAny": "error",
+          "reportExplicitAny": "error",
+          "reportImplicitStringConcatenation": "error",
+          "reportInvalidCast": "error",
+          "reportUnannotatedClassAttribute": "error",
+          "reportUnusedCallResult": "error",
+          "root": "tests/unit/test_auth_facade_recovery.py"
+        },
+        {
+          "reportAny": "error",
+          "reportExplicitAny": "error",
+          "reportImplicitStringConcatenation": "error",
+          "reportInvalidCast": "error",
+          "reportUnannotatedClassAttribute": "error",
+          "reportUnusedCallResult": "error",
+          "root": "tests/unit/test_session_continuity.py"
+        },
+        {
+          "reportAny": "error",
+          "reportExplicitAny": "error",
+          "reportImplicitStringConcatenation": "error",
+          "reportInvalidCast": "error",
+          "reportUnannotatedClassAttribute": "error",
+          "reportUnusedCallResult": "error",
+          "root": "tests/unit/test_token_bootstrap.py"
+        },
         {
           "reportAny": "error",
           "reportExplicitAny": "error",
@@ -152,19 +197,30 @@
         "openapi-python-client.yaml",
         "README.md"
       ],
+      "cache_invalidation_files": [
+        "tests/**/*.py"
+      ],
       "do_not_mutate": [
         "src/volcano_sdk/_generated/*"
       ],
       "on_dependency_change": "rerun",
+      "process_isolation": "forkserver",
       "pytest_add_cli_args": [
         "-c",
-        "pyproject.toml"
+        "pyproject.toml",
+        "-x"
       ],
       "pytest_add_cli_args_test_selection": [
         "tests/unit"
       ],
       "source_paths": [
         "src/volcano_sdk"
+      ],
+      "type_check_command": [
+        "pyrefly",
+        "check",
+        "--output-format=json",
+        "src/volcano_sdk/realtime.py"
       ]
     },
     "mypy": {

{volcano_sdk_python-0.12.0 → volcano_sdk_python-0.13.1}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "hatchling.build"
 
 [project]
 name = "volcano-sdk-python"
-version = "0.12.0"
+version = "0.13.1"
 description = "Official Python SDK for Volcano"
 readme = "README.md"
 requires-python = ">=3.11"
@@ -52,6 +52,7 @@ dev = [
   "aws-durable-execution-sdk-python-testing>=1.2.1,<2.0.0",
   "behave>=1.3.3,<2.0.0",
   "mypy>=1.18.0",
+  "pyrefly==1.3.1",
   "openapi-python-client==0.29.0",
   "basedpyright==1.40.1",
   "pytest==9.1.1",
@@ -60,6 +61,7 @@ dev = [
   "hypothesis==6.168.0",
   "poethepoet==0.46.0",
   "pytest-asyncio==1.4.0",
+  "pytest-order==1.5.0",
   "coverage==7.16.1",
   "pytest-cov==7.1.0",
   "types-behave==1.3.0.20260408",
@@ -182,6 +184,51 @@ root = "src/volcano_sdk/_transport.py"
 reportUnannotatedClassAttribute = "error"
 reportAny = "error"
 
+[[tool.basedpyright.executionEnvironments]]
+root = "tests/unit/test_state.py"
+reportAny = "error"
+reportExplicitAny = "error"
+reportInvalidCast = "error"
+reportImplicitStringConcatenation = "error"
+reportUnannotatedClassAttribute = "error"
+reportUnusedCallResult = "error"
+
+[[tool.basedpyright.executionEnvironments]]
+root = "tests/unit/test_realtime.py"
+reportAny = "error"
+reportExplicitAny = "error"
+reportInvalidCast = "error"
+reportImplicitStringConcatenation = "error"
+reportUnannotatedClassAttribute = "error"
+reportUnusedCallResult = "error"
+
+[[tool.basedpyright.executionEnvironments]]
+root = "tests/unit/test_auth_facade_recovery.py"
+reportAny = "error"
+reportExplicitAny = "error"
+reportInvalidCast = "error"
+reportImplicitStringConcatenation = "error"
+reportUnannotatedClassAttribute = "error"
+reportUnusedCallResult = "error"
+
+[[tool.basedpyright.executionEnvironments]]
+root = "tests/unit/test_session_continuity.py"
+reportAny = "error"
+reportExplicitAny = "error"
+reportInvalidCast = "error"
+reportImplicitStringConcatenation = "error"
+reportUnannotatedClassAttribute = "error"
+reportUnusedCallResult = "error"
+
+[[tool.basedpyright.executionEnvironments]]
+root = "tests/unit/test_token_bootstrap.py"
+reportAny = "error"
+reportExplicitAny = "error"
+reportInvalidCast = "error"
+reportImplicitStringConcatenation = "error"
+reportUnannotatedClassAttribute = "error"
+reportUnusedCallResult = "error"
+
 [[tool.basedpyright.executionEnvironments]]
 root = "features"
 reportAny = "error"
@@ -329,10 +376,13 @@ partial_branches = []
 
 [tool.mutmut]
 source_paths = ["src/volcano_sdk"]
+type_check_command = ["pyrefly", "check", "--output-format=json", "src/volcano_sdk/realtime.py"]
+cache_invalidation_files = ["tests/**/*.py"]
 pytest_add_cli_args_test_selection = ["tests/unit"]
-pytest_add_cli_args = ["-c", "pyproject.toml"]
+pytest_add_cli_args = ["-c", "pyproject.toml", "-x"]
 do_not_mutate = ["src/volcano_sdk/_generated/*"]
 on_dependency_change = "rerun"
+process_isolation = "forkserver"
 also_copy = [
   "features",
   "maintainers",

{volcano_sdk_python-0.12.0 → volcano_sdk_python-0.13.1}/scripts/check_quality_policy.py

@@ -18,7 +18,7 @@ if TYPE_CHECKING:
     from collections.abc import Iterable
 
 GENERATED = "src/volcano_sdk/_generated"
-LOCK_SHA256 = "00e065b217d4a56575f14c38dfef8628e3f3439794743e17504532c32fdcdb14"
+LOCK_SHA256 = "b59fb5e30f45b129d625d758bb1fae2447c0b015d233a9a67b9fbbb0d1b7b450"
 TYPE_FIXTURES = {
     "tests/typing/contract_steps.py",
     "tests/typing/durable_callbacks.py",
@@ -62,6 +62,7 @@ FORBIDDEN = re.compile(
     re.IGNORECASE | re.VERBOSE,
 )
 TYPE_IGNORE = re.compile(r"\btype:\s*ignore(?:\[[^]]+\])?(?=$|[\s#])", re.IGNORECASE)
+PYRIGHT_IGNORE = re.compile(r"\bpyright:\s*ignore\[[A-Za-z0-9, ]+\]", re.IGNORECASE)
 RUFF_IGNORE = re.compile(r"\bruff:\s*ignore\[([A-Z0-9, ]+)\]", re.IGNORECASE)
 
 
@@ -218,11 +219,14 @@ def check_comment(
 
     """
     location = f"{name}:{token.start[0]}"
+    pyright_ignores = PYRIGHT_IGNORE.findall(token.string)
     errors = (
         [f"{location}: forbidden suppression"] if FORBIDDEN.search(token.string) else []
     )
     if TYPE_IGNORE.search(token.string) and name not in TYPE_FIXTURES:
         errors.append(f"{location}: type ignore outside diagnostic fixture")
+    if pyright_ignores and name not in TYPE_FIXTURES:
+        errors.append(f"{location}: pyright ignore outside diagnostic fixture")
     errors.extend(check_ruff_comment(name, source, token, approved, used))
     return errors
 

{volcano_sdk_python-0.12.0 → volcano_sdk_python-0.13.1}/scripts/mutation.sh

@@ -1,6 +1,12 @@
 #!/usr/bin/env bash
 set -euo pipefail
 
+# Forked macOS workers must not query SystemConfiguration through urllib/httpx.
+export NO_PROXY='*' no_proxy='*'
+
+# Refresh mutmut's test-to-mutant map so newly added tests are selected.
+rm -rf -- mutants
+
 mkdir -p reports
 targets=reports/mutation-targets.bin
 failed=reports/mutation-failed.bin
@@ -50,7 +56,7 @@ for path in "${modules[@]}"; do
 done
 
 if [[ ${MUTATION_FULL:-0} == 1 ]]; then
-  if ! mutmut run; then
+  if ! mutmut run --max-children 1; then
     printf '%s\0' "full mutation run" >> "$failed"
   fi
 else
@@ -60,7 +66,7 @@ else
     module=${module%.py}
     patterns+=("${module//\//.}*")
   done
-  if ! mutmut run "${patterns[@]}"; then
+  if ! mutmut run --max-children 1 "${patterns[@]}"; then
     printf '%s\0' "scoped mutation run" >> "$failed"
   fi
 fi

{volcano_sdk_python-0.12.0 → volcano_sdk_python-0.13.1}/scripts/mutation_results.py

@@ -1,4 +1,4 @@
-"""Fail scoped mutmut runs unless every generated mutant was killed by tests."""
+"""Fail scoped mutmut runs on surviving, uncovered, or incomplete mutants."""
 
 from __future__ import annotations
 
@@ -118,7 +118,7 @@ def main(targets_path: Path, failed_path: Path) -> int:
     """Write a machine-readable report and enforce the mutation gate.
 
     Returns:
-        Zero only when every selected mutant is killed.
+        Zero when each selected mutant is killed or statically invalid.
 
     """
     targets = sorted(set(nul_paths(targets_path)))
@@ -139,7 +139,7 @@ def main(targets_path: Path, failed_path: Path) -> int:
     failures.extend(
         f"{name}: {count} mutant(s)"
         for name, count in sorted(counts.items())
-        if name != "killed"
+        if name not in {"killed", "type_checked"}
     )
     report = {
         "modules": targets,