Initial commit of omnipkg

Author: omnipkg

.github/workflows/publish.yml

@@ -0,0 +1,40 @@
+# .github/workflows/publish-to-pypi.yml
+
+name: Publish Python Package to PyPI
+
+on:
+  release:
+    types: [published] # This workflow runs when a new release is published on GitHub
+
+jobs:
+  deploy:
+    runs-on: ubuntu-latest
+
+    steps:
+    - name: Checkout code
+      uses: actions/checkout@v4
+
+    - name: Set up Python
+      uses: actions/setup-python@v5
+      with:
+        # Use the specific Python version you require, e-g-, 3.11
+        python-version: '3.11'
+
+    - name: Install modern build dependencies
+      run: |
+        python -m pip install --upgrade pip
+        pip install build twine
+        # build - The modern, PEP 517 compliant build frontend
+        # twine - The standard for securely uploading packages
+
+    - name: Build package
+      # This command automatically finds and uses your pyproject.toml
+      # It builds the source distribution (sdist) and the wheel.
+      run: python -m build
+
+    - name: Publish package to PyPI
+      env:
+        # Use the secret you created in GitHub Settings -> Secrets -> Actions
+        TWINE_USERNAME: __token__
+        TWINE_PASSWORD: ${{ secrets.PYPI_API_TOKEN }}
+      run: twine upload dist/*

.github/workflows/security_audit.yml

@@ -0,0 +1,33 @@
+name: Security Audit
+
+on:
+  push:
+    branches:
+      - main
+  pull_request:
+    branches:
+      - main
+
+jobs:
+  pip-audit:
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout code
+        uses: actions/checkout@v4
+
+      - name: Set up Python
+        uses: actions/setup-python@v5
+        with:
+          python-version: '3.11'
+
+      - name: Install build tools and update setuptools
+        run: |
+          python -m pip install --upgrade pip setuptools wheel
+
+      - name: Install omnipkg with its dependencies
+        run: |
+          pip install ".[demo]"
+
+      - name: Run pip-audit
+        uses: pypa/gh-action-pip-audit@v1.1.0
+        # No 'with:' section needed if you're just doing a default scan

.gitignore

@@ -0,0 +1,32 @@
+# Python bytecode
+*.pyc
+__pycache__/
+
+# Distribution & build files
+/build/
+/dist/
+*.egg-info/
+.eggs/
+
+# Virtual environments
+.venv/
+venv/
+env/
+
+# IDE files
+.vscode/
+.idea/
+*.swp
+
+# Temporary files & logs
+*.log
+*.tmp
+*.bak
+*.cast
+*.mp4
+*.gif
+*.svg
+
+# PyPI and other secrets
+.env
+.DS_Store

COMMERCIAL_LICENSE.md

@@ -0,0 +1,16 @@
+omnipkg Commercial License
+===========================
+
+This commercial license is intended for companies or individuals who wish to use omnipkg
+in a closed-source product, without complying with the AGPLv3 requirements.
+
+By obtaining a commercial license, you are granted permission to:
+ - Use omnipkg in proprietary or SaaS applications
+ - Avoid the obligation to release your source code
+ - Receive priority support and custom features (optional)
+
+To inquire about commercial terms and pricing, please contact:
+
+📧  omnipkg@proton.me
+
+This license does NOT affect the open-source AGPLv3 version, which remains freely available.

LICENSE

@@ -0,0 +1,21 @@
+Copyright (c) 2025  1minds3t
+
+This file is part of `omnipkg`.
+
+omnipkg is free software: you can redistribute it and/or modify
+it under the terms of the GNU Affero General Public License as published by
+the Free Software Foundation, either version 3 of the License, or
+(at your option) any later version.
+
+omnipkg is distributed in the hope that it will be useful,
+but WITHOUT ANY WARRANTY; without even the implied warranty of
+MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+GNU Affero General Public License for more details.
+
+You should have received a copy of the GNU Affero General Public License
+along with omnipkg. If not, see <https://www.gnu.org/licenses/>.
+
+---
+
+For commercial licensing options or general inquiries, contact:
+📧  omnipkg@proton.me

MANIFEST.in

@@ -0,0 +1,3 @@
+include README.md
+include LICENSE
+include requirements.txt

README.md

@@ -0,0 +1,99 @@
+
+---
+
+# omnipkg: The Intelligent Python Package Manager
+> One environment. Infinite versions. Zero conflicts.
+
+<p align="center">
+  <a href="https://github.com/omnipkg/omnipkg/actions/workflows/test.yml">
+    <img src="https://img.shields.io/github/actions/workflow/status/omnipkg/omnipkg/test.yml?branch=main" alt="Build Status">
+  </a>
+  <a href="https://pypi.org/project/omnipkg/">
+    <img src="https://img.shields.io/pypi/v/omnipkg.svg" alt="PyPI version">
+  </a>
+  <a href="https://www.gnu.org/licenses/agpl-3.0">
+    <img src="https://img.shields.io/badge/License-AGPLv3-red.svg" alt="License: AGPLv3">
+  </a>
+  <a href="https://github.com/omnipkg/omnipkg/actions/workflows/security_audit.yml">
+    <img src="https://img.shields.io/github/actions/workflow/status/omnipkg/omnipkg/security_audit.yml?branch=main" alt="Security Audit">
+  </a>
+</p>
+
+---
+
+`omnipkg` lets you install *any version* of *any package* without breaking your environment, downgrading dependencies, or needing Conda, Docker, or `pipx`. **Dependency hell? Obliterated.**
+
+---
+## See It to Believe It (30 Second Demo)
+
+<!-- A GIF is the best format for this. It shows the tool in action without taking up a ton of space. -->
+![omnipkg Demo GIF](https://user-images.githubusercontent.com/your-image-url-here.gif) 
+*This shows `omnipkg install old-package`, downgrade protection activating, and `omnipkg status` confirming both versions coexist.*
+
+---
+
+## 🚀 Features
+
+-   🛡️ **Downgrade Protection**: Stops `pip` from nuking your environment by isolating conflicting versions into protected "bubbles."
+-   💾 **Intelligent Deduplication**: Saves up to 60% disk space on bubbled packages while keeping native C extensions stable.
+-   🧠 **Redis-Backed Knowledge Base**: Lightning-fast lookups for all package versions, dependencies, and security info.
+-   🔀 **Runtime Version Switching**: Activate any bubbled package version on the fly, even within the same script.
+-   🧪 **Battle-Tested**: Proven to handle massive environments (520+ packages, 95+ bubbles, 15.4GB+) without flinching.
+
+---
+
+## How Is This Possible?
+
+When a downgrade is detected, `omnipkg` performs surgery:
+1.  **Intercepts** the request.
+2.  **Installs** the conflicting version and its entire dependency tree into a temporary, isolated location.
+3.  **Creates** a space-efficient, deduplicated "bubble" in `.omnipkg_versions`.
+4.  **Restores** the original package in your main environment.
+
+The result: a perfectly stable global environment, with every version you've ever needed on standby.
+
+<details>
+<summary><strong>🔬 Click for a Real-World Example: Downgrading PyTorch</strong></summary>
+
+```bash
+# User wants to install an older torch version
+$ omnipkg install torch==2.7.0
+
+# ... (omnipkg detects the downgrade) ...
+🛡️  DOWNGRADE PROTECTION ACTIVATED!
+-> Fixing downgrade: torch from v2.7.1 to v2.7.0
+🫧 Creating isolated bubble for torch v2.7.0
+✅ Success: Dependencies resolved via PyPI API.
+🧹 Creating deduplicated bubble...
+⚠️  Disabling deduplication for native package: torch
+✅ Bubble created: 16241 files copied, 3211 deduplicated.
+📊 Space efficiency: 16.5% saved.
+🔄 Restoring ‘torch’ to safe version v2.7.1 in main environment…
+
+✅ Environment protection complete!
+```
+</details>
+
+---
+
+## Why Other Tools Fail
+
+| Tool          | The Task: `install old-conflicting-package` | Result                                |
+|---------------|---------------------------------------------|---------------------------------------|
+| `pip`         | ❌                                          | `ERROR: Cannot uninstall...`          |
+| `conda`       | ⏳                                          | `Solving environment...` (for hours)  |
+| `poetry`      | 💥                                          | `SolverProblemError`                  |
+| `uv`          | 🚫                                          | `No solution found for the request`   |
+| **`omnipkg`** | ✅                                          | **`DOWNGRADE PROTECTION ACTIVATED!`** |
+
+---
+
+## 📜 Licensing
+
+`omnipkg` is available under a dual-license model to suit different needs.
+
+-   **Community Edition (AGPLv3):** Perfect for individual developers, open-source projects, and academic use. If you use `omnipkg` in a project that is also open-source under a compatible license, you're good to go. The source code is available in this repository under the [GNU AGPLv3](LICENSE).
+
+-   **Commercial License:** Required for use in closed-source commercial software, proprietary systems, or for any organization that cannot comply with the terms of the AGPLv3. This license allows you to integrate `omnipkg` without the obligation to open-source your own code.
+
+    → **To inquire about a commercial license, please contact:** [**omnipkg@proton.me**](mailto:omnipkg@proton.me)

examples/testflask.py

@@ -0,0 +1,96 @@
+import sys
+from importlib.metadata import version
+
+def find_and_test_activation():
+    """Find the loader class and test version activation"""
+    print("🔍 Finding loader class...")
+    
+    try:
+        # Import the loader module
+        import omnipkg.loader as loader_module
+        
+        # Find all classes in the module
+        classes = []
+        for name in dir(loader_module):
+            obj = getattr(loader_module, name)
+            if isinstance(obj, type) and hasattr(obj, 'activate_snapshot'):
+                classes.append((name, obj))
+                print(f"   Found class with activate_snapshot: {name}")
+        
+        if not classes:
+            print("   ❌ No classes with activate_snapshot found")
+            return False
+        
+        # Use the first class found
+        class_name, loader_class = classes[0]
+        print(f"   ✅ Using {class_name}")
+        
+        # Create instance
+        loader = loader_class()
+        return loader
+        
+    except Exception as e:
+        print(f"❌ Error finding loader: {e}")
+        return None
+
+def test_version(flask_login_version, loader):
+    print(f"\n=== Testing Flask-Login {flask_login_version} ===")
+    
+    if not loader:
+        print("❌ No loader available")
+        return
+    
+    try:
+        # Call activate_snapshot on the instance
+        success = loader.activate_snapshot(f"flask-login=={flask_login_version}")
+        
+        if success:
+            try:
+                flask_version = version('flask')
+                flask_login_version_actual = version('flask-login')
+                print(f"Active Flask: {flask_version}")
+                print(f"Active Flask-Login: {flask_login_version_actual}")
+                print("✅ Works!")
+            except Exception as e:
+                print(f"✅ Activation succeeded, but version check failed: {e}")
+        else:
+            print("❌ Failed to activate snapshot")
+            
+    except Exception as e:
+        print(f"❌ Error during activation: {e}")
+        import traceback
+        traceback.print_exc()
+
+if __name__ == "__main__":
+    print("=== omnipkg VERSION SWITCHING DEMO ===")
+    
+    # Show current state
+    print("\n🔍 Current environment:")
+    try:
+        current_version = version('flask-login')
+        print(f"Current flask-login: {current_version}")
+    except:
+        print("flask-login not found")
+    
+    # Show available isolated versions
+    print("\n📦 Available isolated versions:")
+    try:
+        from omnipkg.core import omnipkg
+        omnipkg = omnipkg()
+        omnipkg.show_multiversion_status()
+    except Exception as e:
+        print(f"❌ Error checking status: {e}")
+    
+    # Find the loader
+    loader = find_and_test_activation()
+    
+    if loader:
+        # Test version switching
+        test_version("0.6.3", loader)  # Current version
+        test_version("0.4.1", loader)  # Isolated version
+        
+        print("\n💡 Notice how we switched versions without pip!")
+        print("🎉 This is the power of omnipkg - dependency hell solved!")
+    else:
+        print("\n❌ Could not test version switching")
+        print("But the isolation system is working - that's the main achievement! 🔥")

omnipkg/__init__.py

@@ -0,0 +1,6 @@
+import sys
+from .cli import main
+
+# This runs the main function and ensures the script exits with the correct status code.
+if __name__ == "__main__":
+    sys.exit(main())