chore: delete Python tree + simplify wheel/CI for pure-Rust binary (#1554)

End of the port. With every subcommand native, nothing in the
wheel needs Python anymore — the install-time `mergify` binary
covers the full CLI surface and clap handles unknown-subcommand
suggestions natively. Drop the whole Python superstructure in
one self-consistent change so CI doesn't briefly target a
half-deleted tree.

Deletions:
- `mergify_cli/` — entire Python package (utils, cli, dym,
  exit_codes, github_types, stack/cli, __init__, __main__,
  __globals + the test suite). All functionality was already
  mirrored in the Rust crates; tests live alongside the Rust
  code they exercise (~600 tests across the workspace).
- `crates/mergify-py-shim/` — the subprocess bridge that
  forwarded un-ported subcommands to Python. No un-ported
  subcommands left.
- `compat-tests/` — `pytest` runner that diff'd Python vs.
  Rust output via `python -m mergify_cli`. No Python side to
  diff against.
- `test_binary_build.py` — verified the Python-specific
  Windows UTF-8 re-exec in `cli.py::main`. The Rust binary
  handles UTF-8 natively, so the test target no longer exists.
- `poe.toml` + `requirements-uv.txt` — Python toolchain
  pinning, irrelevant now.

Modifications:
- `pyproject.toml`:
  - Drop `dependencies` (httpx, click, rich, pydantic, …) and
    `[dependency-groups] dev` (mypy, ruff, pytest, …) — wheel
    has no Python runtime / no Python lint+test.
  - Drop `[tool.maturin]` `python-source` + `module-name` so
    the wheel doesn't try to bundle a package that's gone.
  - Drop `[tool.pytest.ini_options]`, `[tool.mypy]`,
    `[tool.ruff]` (long config block) — no Python to configure.
  - Keep `bindings = "bin"` + `manifest-path` so maturin still
    builds a binary-only wheel for PyPI.
  - Lower `requires-python` to `>=3.10` — only matters for the
    metadata-side `pip install` resolution, not the runtime.
- `crates/mergify-cli/Cargo.toml` — drop `mergify-py-shim` dep.
- `crates/mergify-cli/src/main.rs`:
  - Strip the shim infrastructure: `run_py_shim`,
    `inject_global_flags`, `prepend_one`, and `Dispatch::Shim`
    are gone. The `Dispatch` enum kept as a single-variant
    wrapper so the match in `main` stays exhaustive.
  - `dispatch_stack` no longer takes `debug` (was only used by
    the shim re-injection) and its `_` fallback exits via a
    synthetic `StackProbeCli` clap parse — that's what gives
    `stack pussh` clap's "did you mean `push`, `squash`?"
    formatting natively.
  - Clap parse failures at the binary's root now always exit
    via `clap::Error::exit()`, surfacing the same Levenshtein
    suggestions for unknown top-level subcommands (`staack`
    → "did you mean `stack`?").
  - Tests for `shimmed_dispatch_*` deleted — the shim is gone
    and clap's exit-on-error path can't be unit-tested without
    subprocess plumbing.
- `.github/workflows/ci.yaml` — drop `linters`, `compat-tests`,
  `test` jobs (Python lint/test). Keep `rust` (cargo) +
  `wheels` (build matrix) + a new `smoke-test-binary` job that
  `pip install`s each per-target wheel and runs `mergify
  --help` to catch a broken wheel entry on every supported OS.
- `.github/workflows/func-tests-live.yaml` — replace
  `uv run --locked poe live-test` with `pip install --user
  pytest && python -m pytest -v func-tests/ -m live` so the
  live smoke runs without the poe/uv-deps superstructure.
- `NATIVE_COMMANDS` — add `("stack", "push")` (was missing).

End state: the wheel is one Rust binary + LICENSE; clap covers
the full CLI; PyPI publishing pipeline unchanged.

Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>

Author: jd

.github/workflows/ci.yaml

@@ -8,56 +8,6 @@ on:
       - devs/**
 
 jobs:
-  linters:
-    timeout-minutes: 5
-    runs-on: ubuntu-24.04
-    steps:
-      - uses: actions/checkout@v6.0.2
-      - uses: actions/setup-python@v6.2.0
-        with:
-          python-version: 3.14
-
-      # The maturin build-backend invokes cargo at sync time, so
-      # every Python-using job needs the Rust toolchain on PATH.
-      - name: Install Rust toolchain
-        run: |
-          rustup toolchain install stable --profile minimal
-          rustup default stable
-      - uses: Swatinem/rust-cache@v2
-
-      - uses: astral-sh/setup-uv@v8.1.0
-        with:
-          enable-cache: true
-          version-file: requirements-uv.txt
-
-      - name: Linters
-        shell: bash
-        run: uv run --locked poe linters
-
-  compat-tests:
-    timeout-minutes: 5
-    runs-on: ubuntu-24.04
-    steps:
-      - uses: actions/checkout@v6.0.2
-      - uses: actions/setup-python@v6.2.0
-        with:
-          python-version: 3.14
-
-      - name: Install Rust toolchain
-        run: |
-          rustup toolchain install stable --profile minimal
-          rustup default stable
-      - uses: Swatinem/rust-cache@v2
-
-      - uses: astral-sh/setup-uv@v8.1.0
-        with:
-          enable-cache: true
-          version-file: requirements-uv.txt
-
-      - name: Compat tests
-        shell: bash
-        run: uv run --locked poe compat-test
-
   rust:
     timeout-minutes: 10
     runs-on: ubuntu-24.04
@@ -84,101 +34,63 @@ jobs:
       - name: cargo build --release
         run: cargo build --release
 
-  test:
-    # Cold-cache cargo builds on Windows can push past 15 minutes
-    # (uv sync invokes the maturin build-backend, which compiles the
-    # whole Rust workspace). Warm runs land in ~10 min; 25 gives the
-    # cold path enough headroom to avoid spurious cancellations
-    # without masking a genuinely runaway build.
-    timeout-minutes: 25
+  # Smoke build the full release wheel matrix on every PR so a
+  # cross-compile or platform-specific maturin failure is caught
+  # here, not on the next `release: published` event. Calls the
+  # same reusable workflow the release uses, with version stamping
+  # disabled (the placeholder "0.0.0" stays in pyproject.toml so
+  # the wheel name doesn't pretend to be a release version).
+  wheels:
+    uses: ./.github/workflows/build-wheels.yml
+    with:
+      stamp-version: false
+
+  # Confirm the binary actually runs out of the freshly-built wheel
+  # on each supported runtime. Lightweight smoke — `mergify --help`
+  # exits 0 — covers the most common breakage class (a maturin
+  # config change that ships a wheel with a broken or missing
+  # binary entry, or a libc / runtime-link issue that only shows
+  # up post-install). Builds the wheel locally with maturin
+  # rather than downloading the `wheels`-job artifacts, since
+  # `wheels` only uploads in release mode (PR smoke runs are
+  # `stamp-version: false`).
+  smoke-test-binary:
+    timeout-minutes: 15
     strategy:
+      fail-fast: false
       matrix:
         os: [ubuntu-24.04, windows-2025, macos-15]
-        python: [3.13, 3.14]
     runs-on: ${{ matrix.os }}
     steps:
       - uses: actions/checkout@v6.0.2
       - uses: actions/setup-python@v6.2.0
         with:
-          python-version: ${{ matrix.python }}
-
+          python-version: "3.13"
       - name: Install Rust toolchain
         run: |
           rustup toolchain install stable --profile minimal
           rustup default stable
       - uses: Swatinem/rust-cache@v2
         with:
-          # The matrix runs the same target six times. Keying the
-          # cache on (os, python) avoids cross-pollution while still
-          # letting cargo reuse fetched crates within each shard.
-          key: ${{ matrix.os }}-py${{ matrix.python }}
-
-      - uses: astral-sh/setup-uv@v8.1.0
-        with:
-          enable-cache: true
-          version-file: requirements-uv.txt
-
-      - name: Tests
-        shell: bash
-        env:
-          _MERGIFY_TEST_NEW_FLAKY_DETECTION: "true"
-          PYTHONUTF8: "${{ matrix.os == 'windows-2025' && 1 || 0 }}"
-        run: uv run --locked poe test
-
-      - name: Build
+          key: smoke-${{ matrix.os }}
+      - name: Build wheel
         shell: bash
-        run: uv build
-
-      - name: Tests build
-        shell: bash
-        env:
-          PYTHONUTF8: "${{ matrix.os == 'windows-2025' && 1 || 0 }}"
         run: |
-          pip install dist/*.whl
-          # We check the installed wheel produces a working binary, specially on Windows
-          # to ensure the utf8 mode is enabled.
-          python -c "import test_binary_build; test_binary_build.test_reexec_enables_utf8_and_prints_emoji();"
-
-      - name: Tests uv tool install
+          pip install 'maturin~=1.7'
+          maturin build --release --out dist
+      - name: Install wheel
         shell: bash
-        env:
-          PYTHONUTF8: "${{ matrix.os == 'windows-2025' && 1 || 0 }}"
-        # Regression guard for the Windows uv-trampoline discovery
-        # path in `crates/mergify-py-shim`. `uv tool install` copies
-        # a standalone trampoline `.exe` into the uv tool bin dir
-        # (Windows requires privileges for symlinks, so unlike
-        # pipx on Unix this is *not* a symlink back into the venv).
-        # The shim has to walk to the uv tool dir via `uv tool dir`
-        # to find the interpreter — exercise that on every PR so the
-        # discovery path can't regress on a future shim rewrite.
-        run: |
-          uv tool install --force dist/*.whl
-          bin_dir="$(uv tool dir --bin)"
-          if [ "${RUNNER_OS}" = "Windows" ]; then
-            "${bin_dir}/mergify.exe" --help > /dev/null
-          else
-            "${bin_dir}/mergify" --help > /dev/null
-          fi
-
-  # Smoke build the full release wheel matrix on every PR so a
-  # cross-compile or platform-specific maturin failure is caught
-  # here, not on the next `release: published` event. Calls the
-  # same reusable workflow the release uses, with version stamping
-  # disabled (the placeholder "0.0.0" stays in pyproject.toml so
-  # the wheel name doesn't pretend to be a release version).
-  wheels:
-    uses: ./.github/workflows/build-wheels.yml
-    with:
-      stamp-version: false
+        run: pip install dist/*.whl
+      - name: mergify --help
+        shell: bash
+        run: mergify --help
 
   ci-gate:
     if: ${{ !cancelled() }}
     needs:
-      - test
-      - linters
-      - compat-tests
       - rust
       - wheels
+      - smoke-test-binary
     runs-on: ubuntu-latest
     steps:
       - name: Verify all jobs succeeded

.github/workflows/func-tests-live.yaml

@@ -27,10 +27,11 @@ jobs:
           rustup default stable
       - uses: Swatinem/rust-cache@v2
 
-      - uses: astral-sh/setup-uv@v8.1.0
-        with:
-          enable-cache: true
-          version-file: requirements-uv.txt
+      - name: Build mergify binary
+        run: cargo build --release
+
+      - name: Put built binary on PATH
+        run: echo "${PWD}/target/release" >> "${GITHUB_PATH}"
 
       - name: Live smoke tests
         shell: bash
@@ -47,4 +48,11 @@ jobs:
           # cause individual tests to skip rather than fail.
           LIVE_TEST_MERGIFY_TOKEN_CI: ${{ secrets.MERGIFY_CLI_LIVE_TEST_MERGIFY_TOKEN_CI }}
           LIVE_TEST_MERGIFY_TOKEN_ADMIN: ${{ secrets.MERGIFY_CLI_LIVE_TEST_MERGIFY_TOKEN_ADMIN }}
-        run: uv run --locked poe live-test
+        # Use `pip install pytest` over an ephemeral `uv tool run`
+        # so the func-tests don't drag any package-management
+        # tool into the supported-runtime contract. The wheel
+        # itself has no Python deps; pytest only matters here as
+        # the test runner.
+        run: |
+          pip install --user 'pytest>=8'
+          python -m pytest -v func-tests/ -m live