todo2code

Ticket 019: Publish the Python SDK as the root todo2code package

• ID: ticket-019
• Owner: unresolved:human
• Status: DONE
• Workflow state: DONE
• Created: 2026-08-01

Goal and scope

Publish the dependency-free Python SDK from the repository root as the PyPI distribution todo2code. The root pyproject.toml becomes the single Python package manifest, while sdk/python/pyproject.toml is removed. The distribution contains only the existing todo2code package and todo2code_sdk compatibility module; it does not embed the TypeScript runtime or the rest of the repository.

The user selected the root distribution name todo2code, removal of the nested manifest and an SDK-only package. Python artifacts will coexist with the TypeScript build under dist/: python -m build does not clean that directory, and the Goal publish command remains restricted to dist/todo2code-{version}*.

goal.yaml must declare the Python project type and version the root manifest. The existing make python-wheel target must build from the root after removal of the nested manifest. Tickets 018 and 035 are now DONE. Ticket-035 declared all five publication paths as integration-owned shared contracts, so this ticket can perform the atomic change under the integration workstream.

Planned changed paths

• pyproject.toml: root PEP 517/PEP 621 package metadata and setuptools mapping to sdk/python.
• goal.yaml: add the Python strategy to the project and move versioning from the nested manifest to pyproject.toml.
• sdk/python/pyproject.toml: remove the superseded nested manifest.
• sdk/python/README.md: update root installation/build examples and artifact names.
• Makefile: make python-wheel build the root distribution.
• TODO.md, project/TICKETS.md and project/ticket-019/**: governance and acceptance evidence only.

Acceptance criteria

• AC-01: A human owner approves this exact scope before build metadata is changed.
• AC-02: python -m build at the repository root produces todo2code-<version>.tar.gz and todo2code-<version>-py3-none-any.whl without deleting the TypeScript contents already present in dist/.
• AC-03: The wheel contains only the todo2code package, the todo2code_sdk compatibility module and required distribution metadata; it does not contain repository application sources or generated TS files.
• AC-04: sdk/python/pyproject.toml is removed and root/local installation instructions use the root pyproject.toml without breaking make python-wheel.
• AC-05: goal info detects both Node.js and Python, version synchronization targets the root manifest, and goal --dry-run -a selects the bounded twine upload dist/todo2code-{version}* publication command.
• AC-06: twine check passes for both artifacts and a clean virtual environment can import todo2code and todo2code_sdk with the expected version and no third-party runtime dependencies.
• AC-07: Existing application verification and SDK examples remain green; no unrelated ticket-018 or local worktree changes are modified or attributed to this ticket.

Participants

• Human participant: unresolved; no user-* file was created by this script.
• Agent participant: ai-codex.md

Completion boundary

• Current state: DONE.
• Required response from: none.
• Validator App approved exact head 16c2276960abf3bd521f335c7c7f7d36b2e2f5c1 using the configured openrouter/z-ai/glm-5.2 advisory review.
• Tickets 018 and 035 are DONE, so there is no active dependency or ownership conflict. The scope update was committed separately as 19b164f; the implementation and evidence were merged through PR #28 as main@e333acefb24ee878754510416efb9e5a4aedda7b.

Validation result

The root wheel and sdist pass Twine checks and clean-environment imports with zero declared runtime dependencies. The wheel contains only the Python SDK, compatibility module and distribution metadata. npm run verify, npm run examples:check, make e2e-core and the local governance gate pass.

Goal 2.1.284 exposed a release-safety defect during AC-05: the command goal --dry-run publish --no-make --version 0.5.1 printed the bounded Twine command but still executed it. Consequently Python 0.5.1 was published to PyPI before merge. The following npm publication attempt failed with ENEEDAUTH; an independent registry lookup confirms that todo2code@0.5.1 is absent from npm. No release was removed or yanked.

This site is open source. Improve this page.