Misc updates

- Add `dm repo run` command
- Add env vars for django testing
- Update gitignore
- Use AWS if env vars set
- Local fallback
- Add `-n` to `dm repo log`
- Add shell dep map
- Add test examples
- Explain generated configs
- Add ref to drivers evergreen tools
- Add shell dep map for drivers evergreen tools
- Add evergreen config for pymongo
- Fix qe settings
- proj -> project
- Remove footguns

Author: aclark4life

.gitignore

@@ -7,3 +7,4 @@ mongocryptd.pid
 .python-version
 build/
 uv.lock
+secrets-export.sh

SHELL_DEPENDENCY_MAP.md

@@ -1,5 +1,6 @@
 import typer
 import os
+import shlex
 
 from .utils import Package, Repo, Test
 
@@ -106,9 +107,7 @@ def cd(
     ctx: typer.Context,
     repo_name: str = typer.Argument(None),
 ):
-    """
-    Change directory to the specified repository.
-    """
+    """Change directory to the specified repository."""
     repo = Repo()
     repo.ctx = ctx
 
@@ -122,6 +121,52 @@ def cd(
     )
 
 
+@repo.command()
+def run(
+    ctx: typer.Context,
+    repo_name: str = typer.Argument(..., help="Repository name"),
+    command: list[str] = typer.Argument(
+        ..., metavar="CMD...", help="Command (and args) to run in the repo directory"
+    ),
+):
+    """Run an arbitrary command inside the repository directory.
+
+    Examples:
+      dm repo run mongo-python-driver just setup tests encryption
+      dm repo run mongo-python-driver "just setup tests encryption"
+
+    Environment variables can be configured per-repo under
+    ``[tool.django-mongodb-cli.run.<repo_name>.env_vars]`` in ``pyproject.toml``.
+    """
+    repo = Repo()
+    repo.ctx = ctx
+
+    # Allow a single shell-style string (e.g. "just setup tests encryption").
+    if len(command) == 1:
+        command = shlex.split(command[0])
+
+    path, _ = repo.ensure_repo(repo_name)
+    if not path:
+        return
+
+    # Build environment from current process plus any configured env_vars.
+    env = os.environ.copy()
+    run_cfg = repo.run_cfg(repo_name)
+    env_vars_list = run_cfg.get("env_vars")
+    if env_vars_list:
+        repo.info("Setting environment variables from pyproject.toml:")
+        for item in env_vars_list:
+            name = item.get("name")
+            value = str(item.get("value"))
+            if name is None:
+                continue
+            env[name] = value
+            typer.echo(f"  {name}={value}")
+
+    repo.info(f"Running in {path}: {' '.join(command)}")
+    repo.run(command, cwd=path, env=env)
+
+
 @repo.command()
 def checkout(
     ctx: typer.Context,
@@ -344,18 +389,28 @@ def log(
     all_repos: bool = typer.Option(
         False, "--all-repos", "-a", help="Show logs of all repositories"
     ),
+    n: int = typer.Option(
+        10,
+        "-n",
+        "--lines",
+        min=1,
+        help="Number of log entries to show (per repository)",
+    ),
 ):
     """
     Show logs for the specified repository.
+
+    By default, shows the last 10 entries. Use ``-n/--lines`` to change the
+    number of entries displayed (per repository).
     If --all-repos is used, show logs for all repositories.
     """
     repo_command(
         all_repos,
         repo_name,
         all_msg="Showing logs for all repositories...",
         missing_msg="Please specify a repository name or use --all-repos to show logs of all repositories.",
-        single_func=lambda repo_name: Repo().get_repo_log(repo_name),
-        all_func=lambda repo_name: Repo().get_repo_log(repo_name),
+        single_func=lambda repo_name: Repo().get_repo_log(repo_name, n),
+        all_func=lambda repo_name: Repo().get_repo_log(repo_name, n),
     )
 
 
@@ -448,6 +503,18 @@ def reset_repo(name):
     )
 
 
+@repo.command()
+def show(
+    ctx: typer.Context,
+    repo_name: str = typer.Argument(..., help="Repository name"),
+    commit_hash: str = typer.Argument(..., help="Commit hash to show"),
+):
+    """Show the git diff for a specific commit hash in the given repository."""
+    repo = Repo()
+    repo.ctx = ctx
+    repo.show_commit(repo_name, commit_hash)
+
+
 @repo.command()
 def set_default(
     repo_name: str = typer.Argument(None),

django_mongodb_cli/repo.py

@@ -55,8 +55,16 @@ def run(
         args,
         cwd: Path | str | None = None,
         check: bool = True,
-        env: str | None = None,
+        env: dict[str, str] | None = None,
     ) -> bool:
+        """Run a subprocess with optional working directory and environment.
+
+        Args:
+            args: Command and arguments to run.
+            cwd: Optional working directory.
+            check: Whether to raise on non-zero exit code.
+            env: Optional environment mapping to pass to the subprocess.
+        """
         try:
             subprocess.run(args, cwd=str(cwd) if cwd else None, check=check, env=env)
             return True
@@ -82,6 +90,14 @@ def tool_cfg(self) -> dict:
     def test_cfg(self, repo_name: str) -> dict:
         return self.tool_cfg.get("test", {}).get(repo_name, {}) or {}
 
+    def run_cfg(self, repo_name: str) -> dict:
+        """Return configuration for arbitrary repo commands.
+
+        The config is read from [tool.django-mongodb-cli.run.<repo_name>] in
+        pyproject.toml and can contain keys like ``env_vars``.
+        """
+        return self.tool_cfg.get("run", {}).get(repo_name, {}) or {}
+
     def evergreen_cfg(self, repo_name: str) -> dict:
         return self.tool_cfg.get("evergreen", {}).get(repo_name, {}) or {}
 
@@ -262,9 +278,13 @@ def fetch_repo(self, repo_name: str) -> None:
         except GitCommandError as e:
             self.err(f"❌ Failed to fetch updates: {e}")
 
-    def get_repo_log(self, repo_name: str) -> None:
-        """
-        Get the commit log for the specified repository.
+    def get_repo_log(self, repo_name: str, max_lines: int | None = None) -> None:
+        """Print the commit log for the specified repository.
+
+        Args:
+            repo_name: Logical name of the repository.
+            max_lines: Maximum number of log entries to display. If ``None``,
+                a default of 10 entries is used.
         """
         self.info(f"Getting commit log for repository: {repo_name}")
         _, repo = self.ensure_repo(repo_name)
@@ -277,7 +297,7 @@ def get_repo_log(self, repo_name: str) -> None:
                 "--date=relative",
                 "--graph",
             ).splitlines()
-            log_max = 10
+            log_max = max_lines if max_lines is not None else 10
             for count, entry in enumerate(log_entries, start=1):
                 typer.echo(f"  - {entry}")
                 if count >= log_max:
@@ -466,6 +486,19 @@ def get_repo_diff(self, repo_name: str) -> None:
         except GitCommandError as e:
             self.err(f"❌ Failed to diff working tree: {e}")
 
+    def show_commit(self, repo_name: str, commit_hash: str) -> None:
+        """Show the diff for a specific commit hash in the given repository."""
+        self.info(f"Showing diff for {repo_name}@{commit_hash}")
+        path, repo = self.ensure_repo(repo_name)
+        if not repo or not path:
+            return
+
+        try:
+            output = repo.git.show(commit_hash)
+            typer.echo(output)
+        except GitCommandError as e:
+            self.err(f"❌ Failed to show commit {commit_hash}: {e}")
+
     def _list_repos(self) -> tuple[set, set]:
         map_repos = set(self.map.keys())
 

django_mongodb_cli/utils.py

@@ -76,12 +76,12 @@ alias s := django-runserver
 
 [group('django')]
 django-migrate:
-    dm proj migrate
+    dm project migrate
 alias m := django-migrate
 
 [group('django')]
 django-createsuperuser:
-    dm proj su
+    dm project su
 alias su := django-createsuperuser
 
 # ---------------------------------------- mongodb ----------------------------------------

justfile

@@ -122,7 +122,7 @@ value = "/Users/alex.clark/Developer/django-mongodb-cli/src/drivers-evergreen-to
 
 [[tool.django-mongodb-cli.test.mongo-python-driver.env_vars]]
 name = "AWS_PROFILE"
-value = "drivers-test-secrets-role-857654397073"
+value = "my-profile"
 
 [tool.django-mongodb-cli.test.django]
 test_command = "./runtests.py"
@@ -138,9 +138,25 @@ test_dir = "src/django/tests"
 clone_dir = "src/django"
 test_dirs = [ "src/django/tests", "src/django-mongodb-backend/tests" ]
 
-[[tool.django-mongodb-cli.test.django.env_vars]]
-name = "PYMONGOCRYPT_LIB"
-value = "/opt/homebrew/lib/libmongocrypt.dylib"
+#[[tool.django-mongodb-cli.test.django.env_vars]]
+#name = "PYMONGOCRYPT_LIB"
+#value = "/opt/homebrew/lib/libmongocrypt.dylib"
+
+#[[tool.django-mongodb-cli.test.django.env_vars]]
+#name = "MONGODB_URI"
+#value = "mongodb://localhost:64437/?directConnection=true"
+
+[[tool.django-mongodb-cli.run.mongo-python-driver.env_vars]]
+name = "DRIVERS_TOOLS"
+value = "/Users/alex.clark/Developer/django-mongodb-cli/src/drivers-evergreen-tools"
+
+#[[tool.django-mongodb-cli.run.mongo-python-driver.env_vars]]
+#name = "MONGODB_URI"
+#value = "mongodb://localhost:64437/?directConnection=true"
+
+[[tool.django-mongodb-cli.run.mongo-python-driver.env_vars]]
+name = "AWS_PROFILE"
+value = "my-profile"
 
 [tool.django-mongodb-cli.test.django.migrations_dir]
 source = "mongo_migrations"
@@ -347,6 +363,10 @@ repo = "git+ssh://git@github.com/mongodb/django-mongodb-backend"
 project_name = "django-mongodb"
 tasks = ["run-tests"]
 
+[tool.django-mongodb-cli.evergreen.mongo-python-driver]
+project_name = "mongo-python-driver"
+tasks = ["run-tests"]
+
 [tool.django-mongodb-cli.project.settings]
 # path = "settings.base"
 path = "settings.qe"

pyproject.toml

@@ -6,6 +6,34 @@
 
 MONGODB_URI = os.environ.get("MONGODB_URI", "mongodb://localhost:27017")
 
+# Configure KMS providers.
+#
+# We prefer AWS when FLE_AWS_KEY/FLE_AWS_SECRET are set, mirroring
+# src/mongo-python-driver/test/helpers_shared.py. Otherwise we fall back
+# to a local KMS for convenience in local development.
+AWS_CREDS = {
+    "accessKeyId": os.environ.get("FLE_AWS_KEY", ""),
+    "secretAccessKey": os.environ.get("FLE_AWS_SECRET", ""),
+}
+_USE_AWS_KMS = any(AWS_CREDS.values())
+
+if _USE_AWS_KMS:
+    # Use the same demo key ARN and region as the PyMongo QE tests.
+    _AWS_REGION = os.environ.get("FLE_AWS_KMS_REGION", "us-east-1")
+    _AWS_KEY_ARN = os.environ.get(
+        "FLE_AWS_KMS_KEY_ARN",
+        "arn:aws:kms:us-east-1:579766882180:key/89fcc2c4-08b0-4bd9-9f25-e30687b580d0",
+    )
+    KMS_PROVIDERS = {"aws": AWS_CREDS}
+    KMS_CREDENTIALS = {"aws": {"key": _AWS_KEY_ARN, "region": _AWS_REGION}}
+    DEFAULT_KMS_PROVIDER = "aws"
+else:
+    # Local-only fallback
+    KMS_PROVIDERS = {"local": {"key": os.urandom(96)}}
+    KMS_CREDENTIALS = {"local": {}}
+    DEFAULT_KMS_PROVIDER = "local"
+
+
 DATABASES = {
     "default": {
         "ENGINE": "django_mongodb_backend",
@@ -24,16 +52,10 @@
         "OPTIONS": {
             "auto_encryption_opts": AutoEncryptionOpts(
                 key_vault_namespace="djangotests_encrypted.__keyVault",
-                kms_providers={
-                    "local": {
-                        "key": os.urandom(96),
-                    },
-                },
+                kms_providers=KMS_PROVIDERS,
             ),
         },
-        "KMS_CREDENTIALS": {
-            "aws": {},
-        },
+        "KMS_CREDENTIALS": KMS_CREDENTIALS,
     },
 }
 
@@ -57,7 +79,7 @@ def allow_migrate(self, db, app_label, model_name=None, **hints):
         return None
 
     def kms_provider(self, model):
-        return "local"
+        return DEFAULT_KMS_PROVIDER
 
 
 DATABASE_ROUTERS = ["django_mongodb_backend.routers.MongoRouter", EncryptedRouter()]