Initial draft

.github/workflows/python-test.yml

@@ -0,0 +1,69 @@
+name: Python Test
+permissions: {}
+on:
+  workflow_dispatch:
+  push:
+    branches: ["main"]
+    paths-ignore:
+      - "doc/**"
+      - "**/*.md"
+      - ".github/workflows/static-checks.yml"
+      - ".pre-commit-config.yaml"
+  pull_request:
+    paths-ignore:
+      - "doc/**"
+      - "**/*.md"
+      - ".github/workflows/static-checks.yml"
+      - ".pre-commit-config.yaml"
+  schedule:
+    - cron: "20 14 * * *"
+concurrency:
+  group: ${{ github.workflow }}-${{ github.ref }}
+  cancel-in-progress: true
+jobs:
+  tests:
+    name: ${{ format('Test Python {0} {1}', matrix.python_version, ((matrix.dependencies == 'min' || matrix.dependencies == 'max') && format('{0} dependencies', matrix.dependencies)) || (matrix.os || 'ubuntu-latest')) }}
+    runs-on: ${{ matrix.os || 'ubuntu-latest' }}
+    env:
+      PYTHONIOENCODING: utf-8
+    steps:
+      - name: Checkout code
+        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+        with:
+          persist-credentials: false
+
+      - name: Set up uv
+        uses: astral-sh/setup-uv@08807647e7069bb48b6ef5acd8ec9567f424441b # v8.1.0
+        with:
+          version: ${{ matrix.uv_version || 'latest' }}
+          enable-cache: true
+          python-version: ${{ matrix.python_version }}
+
+      - name: Setup dependencies
+        run: |
+          uv sync $CI_UV_UPGRADE_ARG
+        env:
+          CI_UV_UPGRADE_ARG: ${{ matrix.dependencies == 'max' && '--upgrade' || '' }}
+          UV_RESOLUTION: ${{ matrix.dependencies == 'min' && 'lowest-direct' || 'highest' }}
+
+      - name: Run pytest
+        run: uv run --frozen pytest -v
+
+    strategy:
+      matrix:
+        python_version: ["3.10", "3.14"]
+        os: ["ubuntu-latest", "macos-latest", "windows-latest"]
+        dependencies: ["lockfile"]
+
+        include:
+          - python_version: "3.11"
+            os: "ubuntu-latest"
+          - python_version: "3.12"
+            os: "ubuntu-latest"
+          - python_version: "3.13"
+            os: "ubuntu-latest"
+          - dependencies: "min"
+            python_version: "3.10"
+            uv_version: "0.9.9"
+          - dependencies: "max"
+            python_version: "3.14"

.github/workflows/release.yml

@@ -0,0 +1,58 @@
+name: Release to PyPI
+permissions: {}
+on:
+  push:
+    tags:
+      - "v*"
+jobs:
+  build:
+    name: Build Distributions
+    runs-on: ubuntu-latest
+
+    steps:
+      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+        with:
+          persist-credentials: false
+
+      - name: Set up uv
+        uses: astral-sh/setup-uv@08807647e7069bb48b6ef5acd8ec9567f424441b # v8.1.0
+        with:
+          version: "latest"
+          enable-cache: false
+
+      - name: Build distributions
+        run: uv build
+
+      - name: Upload distributions
+        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
+        with:
+          name: dists
+          path: dist/
+          if-no-files-found: error
+
+  publish:
+    name: Publish
+    runs-on: ubuntu-latest
+    permissions:
+      id-token: write # for Trusted Publishing
+    needs: build
+
+    environment: release
+
+    steps:
+      - name: Set up uv
+        uses: astral-sh/setup-uv@08807647e7069bb48b6ef5acd8ec9567f424441b # v8.1.0
+        with:
+          version: "latest"
+          enable-cache: false
+          ignore-empty-workdir: true
+
+      - name: Download distributions
+        uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
+        with:
+          name: dists
+          path: dist/
+
+      - name: Publish
+        run: |
+          uv publish --trusted-publishing always dist/*

.github/workflows/rust-test.yml

@@ -0,0 +1,48 @@
+name: Rust Test
+permissions: {}
+on:
+  workflow_dispatch:
+  push:
+    branches: ["main"]
+    paths-ignore:
+      - "doc/**"
+      - "**/*.md"
+      - ".github/workflows/static-checks.yml"
+      - ".pre-commit-config.yaml"
+  pull_request:
+    paths-ignore:
+      - "doc/**"
+      - "**/*.md"
+      - ".github/workflows/static-checks.yml"
+      - ".pre-commit-config.yaml"
+  schedule:
+    - cron: "20 14 * * *"
+concurrency:
+  group: ${{ github.workflow }}-${{ github.ref }}
+  cancel-in-progress: true
+jobs:
+  cargo-test:
+    name: Cargo Test (${{ matrix.rust }})
+    runs-on: ubuntu-latest
+    continue-on-error: ${{ matrix.rust == 'beta' }}
+    strategy:
+      matrix:
+        rust: [stable, beta]
+    steps:
+      - name: Checkout code
+        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+        with:
+          persist-credentials: false
+
+      - name: Set up Python
+        uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6.2.0
+        with:
+          python-version: "3.10"
+
+      - name: Install Rust toolchain
+        uses: dtolnay/rust-toolchain@3c5f7ea28cd621ae0bf5283f0e981fb97b8a7af9 # master
+        with:
+          toolchain: ${{ matrix.rust }}
+
+      - name: Run cargo test
+        run: cargo test --no-default-features

.github/workflows/static-checks.yml

@@ -0,0 +1,57 @@
+name: Static Checks
+permissions: {}
+on:
+    workflow_dispatch:
+    push:
+        branches: ["main"]
+    pull_request:
+concurrency:
+    group: ${{ github.workflow }}-${{ github.ref }}
+    cancel-in-progress: true
+jobs:
+    analyze-python:
+        name: Analyze Python
+        runs-on: "ubuntu-latest"
+        steps:
+            - name: Checkout code
+              uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+              with:
+                  persist-credentials: false
+
+            - name: Set up uv
+              uses: astral-sh/setup-uv@08807647e7069bb48b6ef5acd8ec9567f424441b # v8.1.0
+              with:
+                  version: "latest"
+                  enable-cache: true
+
+            - name: Run checks
+              run: |
+                  uv run --frozen prek -a
+              env:
+                  PREK_UV_SOURCE: github
+
+    analyze-rust:
+        name: Analyze Rust
+        runs-on: "ubuntu-latest"
+        steps:
+            - name: Checkout code
+              uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+              with:
+                  persist-credentials: false
+
+            - name: Set up Python
+              uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6.2.0
+              with:
+                  python-version: "3.10"
+
+            - name: Install Rust toolchain
+              uses: dtolnay/rust-toolchain@3c5f7ea28cd621ae0bf5283f0e981fb97b8a7af9 # master
+              with:
+                  toolchain: stable
+                  components: clippy, rustfmt
+
+            - name: Check formatting
+              run: cargo fmt --check
+
+            - name: Run clippy
+              run: cargo clippy --no-default-features -- -D warnings

.github/workflows/zizmor.yml

@@ -0,0 +1,29 @@
+name: zizmor
+on:
+  push:
+    branches: ["main"]
+    paths-ignore:
+      - "docs/**"
+      - "**/*.md"
+      - ".pre-commit-config.yaml"
+  pull_request:
+    branches: ["**"]
+    paths-ignore:
+      - "docs/**"
+      - "**/*.md"
+      - ".pre-commit-config.yaml"
+permissions: {}
+jobs:
+  zizmor:
+    name: Analyze
+    runs-on: ubuntu-latest
+    permissions:
+      security-events: write # needed to upload results
+    steps:
+      - name: Checkout code
+        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+        with:
+          persist-credentials: false
+
+      - name: Run zizmor
+        uses: zizmorcore/zizmor-action@b1d7e1fb5de872772f31590499237e7cce841e8e # v0.5.3

.gitignore

@@ -205,3 +205,32 @@ cython_debug/
 marimo/_static/
 marimo/_lsp/
 __marimo__/
+
+# Generated by Cargo
+# will have compiled files and executables
+debug
+target
+
+# These are backup files generated by rustfmt
+**/*.rs.bk
+
+# MSVC Windows builds of rustc generate these, which store debugging information
+*.pdb
+
+# Generated by cargo mutants
+# Contains mutation testing data
+**/mutants.out*/
+
+# rustc will dump stack traces when hitting an internal compiler error to PWD
+rustc-ice-*.txt
+
+# RustRover
+#  JetBrains specific template is maintained in a separate JetBrains.gitignore that can
+#  be found at https://github.com/github/gitignore/blob/main/Global/JetBrains.gitignore
+#  and can be added to the global gitignore or merged into this file.  For a more nuclear
+#  option (not recommended) you can uncomment the following to ignore the entire idea folder.
+#.idea/
+
+# Agent Skills
+.agents/skills/
+skills-lock.json

.importlinter

@@ -0,0 +1,18 @@
+[importlinter]
+root_packages =
+    yamltrip
+
+[importlinter:contract:0]
+name = yamltrip
+type = layers
+layers =
+    editor
+    document
+    errors
+containers =
+    yamltrip
+exhaustive = True
+exhaustive_ignores =
+    _core
+ignore_imports =
+    yamltrip.document -> yamltrip

.pre-commit-config.yaml

@@ -0,0 +1,47 @@
+repos:
+  - repo: https://github.com/tsvikas/sync-with-uv
+    rev: v0.5.0
+    hooks:
+      - id: sync-with-uv
+  - repo: https://github.com/tox-dev/pyproject-fmt
+    rev: v2.21.2
+    hooks:
+      - id: pyproject-fmt
+  - repo: https://github.com/astral-sh/ruff-pre-commit
+    rev: v0.15.12
+    hooks:
+      - id: ruff-check
+  - repo: https://github.com/astral-sh/ruff-pre-commit
+    rev: v0.15.12
+    hooks:
+      - id: ruff-format
+  - repo: local
+    hooks:
+      - id: ty
+        name: ty
+        always_run: true
+        entry: uv run --frozen --offline ty check
+        language: system
+        pass_filenames: false
+  - repo: local
+    hooks:
+      - id: deptry
+        name: deptry
+        always_run: true
+        entry: uv run --frozen --offline deptry src
+        language: system
+        pass_filenames: false
+  - repo: local
+    hooks:
+      - id: import-linter
+        name: import-linter
+        always_run: true
+        entry: uv run --frozen --offline lint-imports
+        language: system
+        pass_filenames: false
+  - repo: https://github.com/codespell-project/codespell
+    rev: v2.4.2
+    hooks:
+      - id: codespell
+        additional_dependencies:
+          - tomli