django-dev-helpers 0.1.4

Dev-time conveniences for Django projects: autologin endpoint, dotfiles for LLM agents, gitignore self-check

django-dev-helpers

Dev-time conveniences for Django projects: autologin endpoint, dotfiles for LLM coding agents, agent help prompt, and gitignore self-check.

Features

• Autologin endpoint — one URL logs in a user via token, no interactive login needed
• Dotfiles — .dev_helpers_token, .dev_helpers_port, .dev_helpers_pg_*, .dev_helpers_redis_* written to project root for easy cat by LLM agents
• Agent help prompt — copy-pasteable curl/psql/redis-cli commands printed at startup
• Gitignore self-check — warns if dotfiles are not in .gitignore
• Browser auto-open — opens autologin URL in browser after server starts
• Production-safe — default-off, requires explicit enabled=True, raises on DEBUG=False

Installation

pip install django-dev-helpers
# or
uv add django-dev-helpers --group dev

Quick Start

1. Add to INSTALLED_APPS:

INSTALLED_APPS = [
    # ...
    "django_dev_helpers",
]

2. Enable in settings:

DJANGO_DEV_HELPERS = {"enabled": True}

Or via environment variable:

DJANGO_DEV_HELPERS_ENABLED=1 python manage.py runserver

3. Add URL patterns in your urls.py:

from django_dev_helpers.urls import autologin_urlpatterns

urlpatterns = [
    *autologin_urlpatterns(),
    # ... your other URLs
]

That's it. On startup, the package will:

• Generate an autologin token
• Write dotfiles to your project root
• Check .gitignore
• Print agent help after first request
• Open browser with autologin URL

Usage

Autologin

T=$(cat .dev_helpers_token)
curl -L "http://localhost:8000/__autologin__/?token=$T"

Management Commands

python manage.py dev_helpers_doctor          # Full diagnostic
python manage.py dev_helpers_print_help      # Print agent prompt
python manage.py dev_helpers_check_gitignore # Check .gitignore entries (read-only)
python manage.py dev_helpers_fix_gitignore   # Add missing .gitignore entries (idempotent)

dev_helpers_fix_gitignore is the one you want when you see the "missing entries from .gitignore" warning on startup — it appends the missing dotfile names (and only those) without reordering existing rules. Pass --dry-run to preview. See docs/configuration.md#gitignore for the full contract.

Documentation

• Quickstart
• Configuration reference
• Autologin endpoint
• Dotfiles + lookup chain
• Agent help / prompt
• Standalone usage
• Using with django-run-site
• Security
• Original design spec (frozen) — for design rationale

Configuration

All configuration via settings.DJANGO_DEV_HELPERS dict. See configuration docs for full reference.

DJANGO_DEV_HELPERS = {
    "enabled": True,
    "autologin": {
        "user_lookup_field": "username",
        "user_lookup_value": "admin",
        "url_path": "__autologin__/",
        "redirect_to": "/",
    },
    "dotfiles": {
        "enabled": True,
    },
    "agent_help": {
        "auto_print": True,
    },
    "browser_open": {
        "enabled": True,
    },
    "gitignore": {
        "mode": "warn",  # warn | auto-add | error | off
    },
}

Security

This package exposes an autologin backdoor for development. It is always off by default:

• enabled must be explicitly set to True (via settings or env var)
• Raises ImproperlyConfigured if DEBUG=False and serving HTTP
• Autologin view verifies token via hmac.compare_digest (timing-safe)
• Only accepts requests from localhost/127.0.0.1 by default
• Returns 404 (not 403/401) on any failure — endpoint appears non-existent

Never install this package in production. Add it only to dev dependencies.

Requirements

• Python >= 3.11
• Django >= 4.2

Supported versions

Combinations exercised on every push by the CI matrix (.github/workflows/ci.yml):

	Python 3.11	Python 3.12	Python 3.13
Django 4.2	✓	✓	✓
Django 5.0	✓	✓	✓
Django 5.1	✓	✓	✓
Django 5.2	✓	✓	✓
Django 6.0	—	✓	✓

Django 6.0 requires Python ≥ 3.12, so the (3.11, 6.0) cell is excluded from CI.

License

MIT