lib.version.Dependency: Reject unsupported spec operators

The spec split pattern ([=><]+) tokenizes only the =, > and < characters,
so a PEP 440 operator like ~= or != leaves its ~ or ! glued to the package
name: Dependency('pkg~=1.0') parses to base name 'pkg~' with operator '='.
App.__get_project_refs() carries the same pattern inline, so the same specs
corrupt the module name used for the -devel subpackage check. The split
also tolerates operator strings the language does not support, most visibly
==, which parses and renders but raises NotImplementedError only when
expansion is requested.

The spec language supports exactly =, <, <=, > and >=, and boundary
expansion implements all of them. Extend the split pattern with ~ and ! so
that foreign operators tokenize as operator strings, and reject every
operator outside the supported set in Dependency.__parsed_spec() with
Dependency.Error, naming the supported operators. Route
App.__get_project_refs() through Dependency for the name and module parts
instead of the second inline split, so the validation lives in one place.
The catch all in Dependency.__version_boundaries() stays as a backstop
against drift between the allow list and the expansion cases.

The tests drop == from the accepted operator loop, drop the now-unreachable
not-expandable case, and assert that ~=, !=, ~, ==, ===, << and >> are
rejected at parse time with a message naming the operator.

Assisted-by: unsloth/Qwen3.8-27B-GGUF:Q4_K_M with pi.dev v0.85.1
Signed-off-by: Jan Lindemann <jan@janware.com>

test/unit/python/jw/pkg/lib/version/test.py

@@ -40,7 +40,7 @@ assert d.base_name == 'dev'
 assert d.full_name == 'dev'
 
 # Operators with and without whitespace
-for op in ['=', '==', '<', '<=', '>', '>=']:
+for op in ['=', '<', '<=', '>', '>=']:
     d = Dependency(f'foo {op} 1.0')
     assert d.base_name == 'foo'
     assert d.full_name == 'foo'
@@ -135,14 +135,6 @@ d = Dependency('foo = 1.2.3', app.get_version)
 assert d.constraint_str(as_range = True) == 'foo = 1.2.3'
 d = Dependency('foo = 1.0-rc1', app.get_version)
 assert d.constraint_str(as_range = True) == 'foo = 1.0-rc1'
-# unimplemented operators raise
-d = Dependency('foo == 1.2.3-45', app.get_version)
-try:
-    d.constraint_str(as_range = True)
-    assert False, 'Should have raised'
-except NotImplementedError:
-    pass
-
 # Default syntax is SEM_VER
 d = Dependency('foo < 2.0')
 assert d.constraint_str(untemplated = False) == 'foo < 2.0'
@@ -238,6 +230,26 @@ for bad in ['', 'foo =', ' = 1.0']:
     except Dependency.Error:
         pass
 
+# Operators outside the supported set are rejected when parsed,
+# not folded into the package name or deferred to expansion
+for bad in [
+    'foo ~= 1.0',
+    'foo~=1.0',
+    'foo ~ 1.0',
+    'foo != 1.0',
+    'foo!=1.0',
+    'foo == 1.0',
+    'foo==1.0',
+    'foo === 1.0',
+    'foo << 1.0',
+    'foo >> 1.0',
+]:
+    try:
+        Dependency(bad).full_name
+        assert False, f'Should have raised for {bad!r}'
+    except Dependency.Error as e:
+        assert 'unsupported operator' in str(e)
+
 # str
 assert str(Dependency('foo-devel >= 1.0')) == 'foo-devel >= 1.0'
 assert str(Dependency('foo')) == 'foo'