Merge pull request #25 from onetimesecret/feature/dns-commands

Add rots dns command for multi-provider DNS record management

Author: delano

.pre-commit-config.yaml

@@ -90,6 +90,8 @@ repos:
         files: ^src/
         additional_dependencies:
           - cyclopts>=3.9
+          - dns-lexicon>=3.17
+          - ots-shared>=0.1.0
           - pytest>=8.0
 
   # Ruff - fast linting and formatting
@@ -100,14 +102,20 @@ repos:
         args: [--fix]
       - id: ruff-format
 
-  # pytest - run before push with coverage and last-failed optimization
-  # Skipped on commit for speed; full suite gates push instead
+  # pytest - fast smoke test on commit, full suite on push (coverage in CI)
   - repo: local
     hooks:
-      - id: pytest-cov
-        name: pytest-cov
-        entry: .venv/bin/pytest tests/ -x -q --ff --cov=rots --cov-report=term-missing --cov-fail-under=70
+      - id: pytest-quick
+        name: pytest-quick
+        entry: .venv/bin/pytest tests/ -x -q --ff --no-cov
         language: system
-        pass_filenames: true
+        pass_filenames: false
+        files: ^(src/|tests/).*\.py$
+        stages: [pre-commit]
+      - id: pytest-push
+        name: pytest-push
+        entry: .venv/bin/pytest tests/ -x -q --ff --no-cov
+        language: system
+        pass_filenames: false
         files: ^(src/|tests/).*\.py$
         stages: [pre-push]

changelog.d/20260302_174712_delano_dns_commands.rst

@@ -0,0 +1,17 @@
+Added
+~~~~~
+
+- Add ``rots dns`` command group for multi-provider DNS record management
+  via dns-lexicon. Commands: ``add``, ``show``, ``update``, ``remove``,
+  ``list``. Supports Cloudflare, Route53, DigitalOcean, Gandi, GoDaddy,
+  Hetzner, Linode, Namecheap, Porkbun, Vultr, and DNSimple.
+- Auto-detect public IP and DNS provider from native env vars
+  (e.g. ``CLOUDFLARE_API_TOKEN``, ``AWS_ACCESS_KEY_ID``)
+- Track DNS mutations in SQLite audit trail (``dns_records`` and
+  ``dns_current`` tables)
+
+Changed
+~~~~~~~
+
+- Align pyright pre-commit hook with project dependencies by adding
+  ``dns-lexicon`` and ``ots-shared`` to ``additional_dependencies``

pyproject.toml

@@ -52,6 +52,7 @@ Repository = "https://github.com/onetimesecret/rots"
 rots = "rots.cli:main"
 
 [project.optional-dependencies]
+dns = ["dns-lexicon>=3.17"]
 dev = ["pre-commit>=3.0", "pyright>=1.1.390", "ruff>=0.9"]
 test = ["pytest>=8.0", "pytest-mock>=3.14", "pytest-cov>=6.0", "coverage>=7.10"]
 

src/rots/cli.py

@@ -25,7 +25,7 @@
 
 from . import __version__
 from .commands import assets as assets_cmd
-from .commands import cloudinit, env, host, image, init, instance, proxy, service
+from .commands import cloudinit, dns, env, host, image, init, instance, proxy, service
 from .commands import db as db_cmd
 
 logger = logging.getLogger(__name__)
@@ -44,6 +44,7 @@
 app.command(proxy.app)
 app.command(host.app)
 app.command(service.app)
+app.command(dns.app)
 app.command(cloudinit.app)
 app.command(env.app)
 app.command(db_cmd.app)

src/rots/commands/__init__.py

@@ -4,6 +4,7 @@
 from . import assets as assets
 from . import cloudinit as cloudinit
 from . import db as db
+from . import dns as dns
 from . import env as env
 from . import host as host
 from . import image as image

src/rots/commands/dns/__init__.py

@@ -0,0 +1,6 @@
+# src/rots/commands/dns/__init__.py
+"""DNS management commands."""
+
+from .app import app
+
+__all__ = ["app"]