feat!: migrate publish_provider to wheel-based provider-versions endpoint (PRA-376) (#40)

* feat!: migrate publish_provider to wheel-based provider-versions endpoint (PRA-376)

The pragma-os Phase 11 cleanup deleted the legacy multipart
``POST /providers/{org}/{name}/publish`` route along with the
in-API CloudBuildService/LocalBuildService stack. Publishing now
flows through ``POST /provider-versions``, which accepts a JSON
metadata payload pointing at a wheel hosted in GCP Artifact
Registry.

This rewires the SDK to the new contract:

- ``publish_provider`` now takes a provider directory, builds the
  wheel locally with ``uv build --wheel``, runs schema extraction
  via :func:`pragma_sdk.provider.extract_schemas`, uploads the
  wheel to Artifact Registry via ``twine`` (relies on
  ``keyrings.google-artifactregistry-auth`` for ADC), and POSTs
  the JSON body the new route expects.
- Drop ``get_publish_status`` and ``stream_publish_logs``: the
  new route persists synchronously, so the API never returns a
  ``build_id`` to poll. Callers should treat the response as
  PUBLISHED on success.
- ``ProviderVersion`` gains ``wheel_url``, ``runtime_image`` and
  ``entrypoint`` fields to match the response shape.
- Add ``pragma_sdk.provider.prepare_wheel_publish`` so consumers
  who need direct access to the build/extract/upload pipeline can
  reuse it without going through the HTTP client.
- Add async ``get_me`` to mirror the sync client; required by
  the new async publish path.

BREAKING CHANGE: ``PragmaClient.publish_provider`` /
``AsyncPragmaClient.publish_provider`` now take ``provider_dir``
instead of a ``tarball`` and namespaced ``provider_name``.
``get_publish_status`` and ``stream_publish_logs`` are removed.

* test: drop publish_provider tests for now

The wheel-publish unit tests will land in a follow-up alongside the
matching pragma-cli rewiring.

* chore: drop tests/ tree and forbid unit tests in CLAUDE.md

The SDK is verified through pragma-os e2e suites and downstream
consumers; carrying a parallel pytest tree just rots. Remove the
folder and document the rule so future work doesn't regrow it.

* chore: strip test target, deps, and ruff/ty test ignores

Now that tests/ is gone, drop the matching scaffolding:

- Remove the 'task test' target from Taskfile.yaml.
- Remove the [dependency-groups].test block (pytest, respx, etc.)
  and the orphan respx entry under dev from pyproject.toml.
- Remove [tool.pytest.ini_options] and the tests/-scoped overrides
  in [tool.ruff.lint.per-file-ignores] / [tool.ty.src].
- Drop the now-unused 'PT' (pytest) ruff lint selector.

* fix: address PR #40 review feedback

- Swap twine for `uv publish` so credential prompts can never block
  (uses --keyring-provider subprocess with the GAR keyring backend).
- Drop the `version=` override from `publish_provider` and
  `prepare_wheel_publish`; the wheel filename is derived from
  [project].version, so make pyproject the single source of truth and
  refuse to publish when it is missing.
- Drop the unused `config_schema`/`outputs_schema` fields from
  `WheelPublishPayload` — there is no code path that populates them.
- Clarify `_provider_on_sys_path` docstring: only sys.path is restored,
  sys.modules entries from the import are left in place.
- Tighten `prepare_wheel_publish` Raises block (add TypeError, drop the
  spurious RuntimeError on the helper that doesn't raise it).
- Document `DEFAULT_ARTIFACT_REPO` as the Pragmatiks-prod default that
  callers can override per-publish.

* docs: drop `uv pip install` reference from upload helper docstring

The wheel URL is the contract; how the runtime resolves it isn't
something to prescribe in the SDK docs — and `uv pip install` is the
pip-compatible escape hatch we don't want to encourage.

* refactor: dedupe pyproject helpers and resolve uv binary once

Findings from /simplify pass:

- Reuse: `provider/publish.py` was forking `_load_pyproject` and
  `_detect_provider_package` from `extract_schemas.py`. Generalised
  the originals to accept an optional path / pre-parsed dict and made
  `publish.py` delegate. Resolution rules now live in one place.
- Quality: `shutil.which("uv")` ran twice per publish (build + upload).
  Hoisted to a single `_resolve_uv()` call at the top of
  `prepare_wheel_publish` and threaded the path through the helpers,
  so missing-`uv` fails fast instead of after the build succeeds.
- Quality: `"oauth2accesstoken"` and `"subprocess"` are documented
  GAR / uv keyring contracts, not arbitrary values — promoted to
  module-level constants.
- Quality: collapsed the async `publish_provider` org-id branch into a
  one-liner matching the sync style.

Author: tngotr

CLAUDE.md

@@ -8,12 +8,11 @@
 
 ```
 pragma-sdk/
-├── src/pragma_sdk/
-│   ├── client.py          # PragmaClient (sync) and AsyncPragmaClient
-│   ├── models/            # Pydantic models (shared with API)
-│   ├── resources/         # Resource-specific client methods
-│   └── provider/          # Provider authoring (Provider, Resource, Config, Outputs)
-└── tests/
+└── src/pragma_sdk/
+    ├── client.py          # PragmaClient (sync) and AsyncPragmaClient
+    ├── models/            # Pydantic models (shared with API)
+    ├── resources/         # Resource-specific client methods
+    └── provider/          # Provider authoring (Provider, Resource, Config, Outputs)
 ```
 
 ## Features
@@ -38,23 +37,23 @@ Always use `task` commands:
 
 | Command | Purpose |
 |---------|---------|
-| `task test` | Run pytest |
 | `task format` | Format with ruff |
 | `task check` | Lint + type check |
 
 ## Patterns
 
 - All API methods are async in `AsyncPragmaClient`, sync wrappers in `PragmaClient`
 - Pydantic models for request/response types
-- httpx for HTTP calls with respx for testing
+- httpx for HTTP calls
 - Type hints on all public interfaces
 
 ## Testing
 
-- Use respx to mock httpx calls
-- Fixtures in `conftest.py`
-- No real API calls in unit tests
-- Test both sync and async client methods
+**Do not write unit tests in this repository.** No `tests/` tree, no
+`pytest` files, no test-only fixtures. If a change feels like it
+needs a test, surface that to the user instead of adding one — they
+will decide where the coverage should live (often in pragma-os e2e
+suites or downstream consumers).
 
 ## Publishing to PyPI
 

Taskfile.yaml

@@ -14,7 +14,3 @@ tasks:
     cmds:
       - uv run ruff check --fix .
       - uvx ty check
-
-  test:
-    cmd: uv run pytest tests/ --cov=pragma_sdk --cov-report=term-missing {{.CLI_ARGS}}
-    desc: Run all tests with coverage

pyproject.toml

@@ -19,24 +19,11 @@ classifiers = [
 # all = ["pragmatiks-gcp-provider"]  # future
 
 [dependency-groups]
-test = [
-    "pytest>=8.4.1",
-    "pytest-asyncio>=1.0.0",
-    "pytest-cov>=7.0.0",
-    "pytest-mock>=3.14.0",
-    "respx>=0.21.1",
-    "httpx>=0.28.1",
-]
 dev = [
     "commitizen>=4.11.0",
     "pre-commit>=4.0.0",
-    "respx>=0.22.0",
 ]
 
-[tool.pytest.ini_options]
-asyncio_mode = "auto"
-pythonpath = ["tests"]
-
 [tool.ruff]
 target-version = "py313"
 line-length = 120
@@ -52,7 +39,6 @@ select = [
     "UP",      # Pyupgrade
     "D",       # pydocstyle - docstring conventions
     "DOC",     # Ruff's docstring checks (parameters match signature)
-    "PT",      # pytest rules
 ]
 
 [tool.ruff.lint.pydocstyle]
@@ -62,21 +48,6 @@ convention = "google"
 lines-after-imports = 2
 known-first-party = ["pragma_sdk"]
 
-[tool.ruff.lint.per-file-ignores]
-"**/tests/**/*.py" = [
-    "D100",     # Missing docstring in public module
-    "D101",     # Missing docstring in public class
-    "D102",     # Missing docstring in public method
-    "D103",     # Missing docstring in public function
-    "D104",     # Missing docstring in public package
-    "D107",     # Missing docstring in __init__
-    "DOC",      # Docstring content rules (Returns, Raises, Yields sections)
-    "PLC0415",  # Import outside top-level (common in tests for isolation)
-]
-"**/tests/test_forward_ref.py" = [
-    "F821",     # Undefined names are intentional (testing forward reference detection)
-]
-
 [tool.ruff.format]
 preview = true
 
@@ -85,7 +56,7 @@ python-version = "3.13"
 python-platform = "darwin"
 
 [tool.ty.src]
-exclude = ["**/tests/**", "**/__pycache__/**"]
+exclude = ["**/__pycache__/**"]
 
 [tool.commitizen]
 name = "cz_conventional_commits"