generated from coulomb/repo-seed
Deliverables: - src/local_identity/gecos.py: /etc/passwd GECOS parsing, current_username() - src/local_identity/user.py: UserRecord dataclass, ProductionIdentity, make_test_user() - Pure test-user derivation: <user>N / +testN email alias / source_user tracking - src/local_identity/store.py: file store CRUD backed by LOCAL_IDENTITY_HOME - ~/.local-identity/ mode 700, user files mode 600 - All path lookups dynamic (env-var override enables clean test isolation) - src/local_identity/cli.py: init/list/show commands; email from flag > config > prompt - pyproject.toml + uv.lock: pyyaml dep, local-identity script entry point Tests (41 passing): - test_gecos.py: 9 tests — simple/comma/empty/non-ASCII/whitespace GECOS, fallback - test_user.py: 14 tests — test-user derivation, YAML roundtrip, non-ASCII, idempotency - test_store.py: 18 tests — dir creation, permissions (700/600), CRUD, list, config, idempotency (reinit with --force produces identical users) Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
128 lines
4.0 KiB
Python
128 lines
4.0 KiB
Python
"""
|
|
UserRecord dataclass — in-memory representation of a local-identity user.
|
|
|
|
Schema fields (all stored in YAML):
|
|
schema_version str — format version, currently "1"
|
|
username str — Linux username (primary) or derived username (test)
|
|
fullname str — display name
|
|
email str — contact email
|
|
environment str — always "local"; production connectors reject this value
|
|
generated bool — True for auto-generated test users
|
|
source_user str? — for generated users: the source username
|
|
production_identity — optional mapping to a production account
|
|
.username str
|
|
.realm str
|
|
"""
|
|
|
|
from __future__ import annotations
|
|
|
|
from dataclasses import dataclass, field
|
|
from typing import Optional
|
|
|
|
import yaml
|
|
|
|
|
|
@dataclass
|
|
class ProductionIdentity:
|
|
username: str
|
|
realm: str
|
|
|
|
|
|
@dataclass
|
|
class UserRecord:
|
|
username: str
|
|
fullname: str
|
|
email: str
|
|
schema_version: str = "1"
|
|
environment: str = "local"
|
|
generated: bool = False
|
|
source_user: Optional[str] = None
|
|
production_identity: Optional[ProductionIdentity] = None
|
|
|
|
# ------------------------------------------------------------------ #
|
|
# Serialisation #
|
|
# ------------------------------------------------------------------ #
|
|
|
|
def to_dict(self) -> dict:
|
|
d: dict = {
|
|
"schema_version": self.schema_version,
|
|
"username": self.username,
|
|
"fullname": self.fullname,
|
|
"email": self.email,
|
|
"environment": self.environment,
|
|
"generated": self.generated,
|
|
}
|
|
if self.source_user is not None:
|
|
d["source_user"] = self.source_user
|
|
if self.production_identity is not None:
|
|
d["production_identity"] = {
|
|
"username": self.production_identity.username,
|
|
"realm": self.production_identity.realm,
|
|
}
|
|
return d
|
|
|
|
def to_yaml(self) -> str:
|
|
return yaml.dump(
|
|
self.to_dict(),
|
|
default_flow_style=False,
|
|
allow_unicode=True,
|
|
sort_keys=False,
|
|
)
|
|
|
|
@classmethod
|
|
def from_dict(cls, data: dict) -> UserRecord:
|
|
pi: Optional[ProductionIdentity] = None
|
|
if data.get("production_identity"):
|
|
pi = ProductionIdentity(**data["production_identity"])
|
|
return cls(
|
|
schema_version=data.get("schema_version", "1"),
|
|
username=data["username"],
|
|
fullname=data["fullname"],
|
|
email=data["email"],
|
|
environment=data.get("environment", "local"),
|
|
generated=data.get("generated", False),
|
|
source_user=data.get("source_user"),
|
|
production_identity=pi,
|
|
)
|
|
|
|
@classmethod
|
|
def from_yaml(cls, text: str) -> UserRecord:
|
|
return cls.from_dict(yaml.safe_load(text))
|
|
|
|
|
|
# ------------------------------------------------------------------ #
|
|
# Test-user derivation (pure function) #
|
|
# ------------------------------------------------------------------ #
|
|
|
|
def make_test_user(primary: UserRecord, n: int) -> UserRecord:
|
|
"""
|
|
Derive test user N from the primary user.
|
|
|
|
Derivation rules:
|
|
username → <username><n>
|
|
fullname → <fullname>+test<n>
|
|
email → <local>+test<n>@<domain> (or <email>+test<n> if no @)
|
|
"""
|
|
if n < 1:
|
|
raise ValueError(f"n must be >= 1, got {n}")
|
|
|
|
suffix = str(n)
|
|
|
|
test_username = primary.username + suffix
|
|
test_fullname = f"{primary.fullname}+test{suffix}"
|
|
|
|
if "@" in primary.email:
|
|
local, domain = primary.email.rsplit("@", 1)
|
|
test_email = f"{local}+test{suffix}@{domain}"
|
|
else:
|
|
test_email = f"{primary.email}+test{suffix}"
|
|
|
|
return UserRecord(
|
|
username=test_username,
|
|
fullname=test_fullname,
|
|
email=test_email,
|
|
environment="local",
|
|
generated=True,
|
|
source_user=primary.username,
|
|
)
|