CANConfigPython 0.1.0a1__tar.gz

canconfigpython-0.1.0a1/.github/workflows/linux-build.yml

@@ -0,0 +1,32 @@
+name: Linux build and package checks
+on:
+  workflow_dispatch:
+  push:
+  pull_request:
+permissions:
+  contents: read
+jobs:
+  linux:
+    runs-on: ubuntu-22.04
+    steps:
+      - uses: actions/checkout@v4
+      - uses: actions/setup-python@v5
+        with:
+          python-version: '3.12'
+      - name: Install Qt build dependencies
+        run: sudo apt-get update && sudo apt-get install -y qtbase5-dev libqt5serialport5-dev patchelf
+      - name: Install Python build tools
+        run: python -m pip install build setuptools wheel pytest twine auditwheel PyYAML
+      - name: Build and test Linux runtime
+        run: bash tools/build_linux.sh
+      - name: Install without system Qt
+        run: |
+          docker run --rm -v "$PWD:/io:ro" python:3.12-slim-bookworm sh -c \
+            'python -m pip install /io/dist/linux/*.whl && cd /tmp && python /io/tools/smoke_installed.py'
+      - uses: actions/upload-artifact@v4
+        with:
+          name: linux-wheel-and-validation
+          path: |
+            dist/linux/*.whl
+            build/native/*/test.log
+            licenses/linux-*

canconfigpython-0.1.0a1/AGENTS.md

@@ -0,0 +1,17 @@
+# CANConfigPython development
+
+- This repository is a Python subprocess wrapper and a pinned native source snapshot.
+  Do not introduce a second Python serial protocol implementation.
+- Do not modify sibling GUI/Console/driver repositories as a side effect of work here.
+- Read native/upstream.json for provenance and native/PORTING.md for the local delta.
+- Never test on physical hardware unless the user authorized the device and operation.
+  Use the isolated fake driver in build/native/fake for process integration tests.
+- Preserve result envelope schema_version=1 and backend exit codes 0–12.
+  Missing final results after hardware execution are unknown; never auto-retry/rollback.
+- Never log passwords or place them in arguments. Keep JSON stdout UTF-8.
+- Build dependencies with tools/build_native.py; do not ship fake drivers.
+  A platform wheel must contain its runtime and notices, never be tagged "any".
+- Run native unit tests, Python tests and installed-wheel smoke checks after changes.
+  Record simulated, platform and physical-device verification separately in VALIDATION.md.
+- Keep bundled guides and Skill synchronized with observable CLI behavior.
+  User authorization persists; do not add repetitive confirmation gates.

canconfigpython-0.1.0a1/DEVELOPING.md

@@ -0,0 +1,156 @@
+# Build and release
+
+Runtime protocol: Console 2.3, bridge API 1, JSON schema_version=1.
+Python dependencies at runtime: standard library only. Native build: Qt 5 Core,
+Network, SerialPort, Test, qmake, make and a C++11 compiler.
+
+## Windows
+
+The tested toolchain is Qt 5.7.1 MinGW 5.3 32-bit. It builds an x86 subprocess,
+usable by x86 and x64 Python. From a project-local Python development environment:
+
+~~~powershell
+python -m pip install build setuptools wheel pytest twine PyYAML
+python tools/build_native.py --qmake D:\Qt\Qt5.7.1\5.7\mingw53_32\bin\qmake.exe --compiler-bin D:\Qt\Qt5.7.1\Tools\mingw530_32\bin
+python tools/collect_windows_licenses.py
+python -m pytest -q
+python tools/bundle_source.py
+python -m build --wheel --sdist --no-isolation
+$env:CANCONFIG_WHEEL_PLATFORM = 'win_amd64'
+try { python -m build --wheel --no-isolation }
+finally { Remove-Item Env:CANCONFIG_WHEEL_PLATFORM -ErrorAction SilentlyContinue }
+~~~
+
+The default wheel is win32. Never merely rename a wheel; its internal tags must
+match. The source archive includes this platform's staged runtime for matching
+source installs; rebuild/stage the runtime on the other platform before building.
+Source distributions require a supported native toolchain to create a runtime
+when not already staged. Do not upload a generic "any" wheel.
+
+To run full native process acceptance, put Qt/compiler bin directories on PATH for
+that terminal, then:
+~~~console
+python native/console/test_console_cli.py src/canconfigpython/runtime/canconfigconsole.exe build/native/fake/WIICAN.dll
+~~~
+The test copies the executable and fake driver into an isolated directory. No
+physical device is selected. Never ship the fake driver.
+
+## Linux x86_64
+
+On Debian/Ubuntu, provision build dependencies in the dedicated build environment:
+~~~bash
+sudo apt-get update
+sudo apt-get install -y build-essential qtbase5-dev libqt5serialport5-dev patchelf python3-venv
+python3 -m venv .venv
+. .venv/bin/activate
+python -m pip install build setuptools wheel pytest twine auditwheel PyYAML
+bash tools/build_linux.sh
+~~~
+
+The build preserves qmake launcher symlinks (including Ubuntu/Debian qtchooser),
+selects Qt 5 and checks its version before compilation.
+The script compiles and tests native code, resolves the non-glibc dependency closure,
+collects distro license/source records, tests Python and native subprocess behavior,
+builds a Linux wheel, audits/repairs it and refreshes runtime hashes/RECORD.
+Auditwheel limitations around dlopen are handled by explicitly including WIICAN
+and traversing its dependency closure before repair. It does not justify unsupported
+glibc tags; an incompatible baseline fails the build.
+
+The GitHub Actions workflow provides a Linux build plus an installed-wheel check
+inside a fresh Python Debian container without Qt installed. It only builds/uploads
+CI artifacts, not PyPI. Configure it in the chosen repository and inspect the actual
+run before marking Linux verified. ARM64/musl are not first-release targets.
+
+## Build on an existing Linux SSH host
+
+The optional helper uses one SSH connection for upload, build, checks and download.
+Install its development-only dependency and provide an existing verified host-key file:
+
+~~~powershell
+python -m pip install "paramiko>=3.4"
+python tools/build_linux_remote.py --host HOST --user USER --known-hosts PATH_TO_KNOWN_HOSTS --identity PATH_TO_EXISTING_KEY --check-only
+python tools/build_linux_remote.py --host HOST --user USER --known-hosts PATH_TO_KNOWN_HOSTS --identity PATH_TO_EXISTING_KEY
+~~~
+
+For password authentication, run in your own terminal and replace the identity
+option with --password-prompt. Input is hidden; passwords are never arguments,
+logs or files. The helper rejects unknown/changed host keys and does not modify
+authorized_keys. Verify a host key separately before adding it to known_hosts.
+
+Auto mode uses Docker when the SSH user already has access: compilation runs in
+Ubuntu 22.04 and installation is checked in a fresh Python Debian container without
+system Qt. Otherwise it uses existing host build dependencies and an isolated venv;
+the default only reports missing packages. Add --install-build-deps to install the
+listed build packages on Ubuntu/Debian via apt and sudo. This option cannot be
+combined with --check-only. If sudo requires a password, a second hidden prompt
+appears in your local terminal; the password travels only through SSH stdin and
+is never saved. No Docker daemon or SSH key is installed. Use --backend to select
+docker or host explicitly. Host mode requires Python 3.10+ and the dependencies above.
+Its isolated-venv check does not replace the Qt-free installation acceptance criterion.
+When Docker is unavailable, tools/verify_linux_remote.py checks an existing wheel
+in a separate filesystem prepared by tools/prepare_qt_free_root.py. It copies the
+system Python runtime and its dependencies, installs only the exact wheel, adds
+only the native runtime's OS-provided glibc dependencies (including libresolv), and
+asserts that all Qt/WIICAN libraries are inside that installed wheel. It enters
+the filesystem via sudo/chroot, drops to the build user's numeric UID/GID before
+executing tests, mounts no host directories and exposes no device nodes. No host
+Qt package is changed. This verifies bundled dependencies on the host's glibc;
+it does not verify older distributions or constitute a security sandbox.
+The seven installed checks and the verified wheel SHA-256 are downloaded to
+validation/linux/clean-install.json, qt-free-smoke.json and qt-free-root.json.
+Before the CLI checks, the isolated ELF loader resolves every native file with
+--list. Its results are retained in qt-free-elf-check.json even on failure;
+the root inventory is downloaded before running tests. Non-glibc dependencies
+resolved outside the bundled runtime fail preparation instead of being silently
+copied from the host.
+
+Each run creates a separate canconfigpython-build-* directory in the remote home.
+Linux wheels are downloaded to dist/linux with transfer hashes checked. Logs and
+status are in build/linux-remote.log and build/linux-remote-state.json; native test
+logs/source notices are in validation/linux. No hardware commands or PyPI uploads
+are executed. On interruption, inspect the retained remote build/container before
+restarting. A failed build may leave only remote logs; its path remains in the state.
+
+## Validate a release
+
+~~~console
+python tools/check_wheel.py dist/WHEEL_FILENAME.whl
+python -m twine check dist/*
+~~~
+
+Install each platform wheel in a clean environment outside the source directory.
+Run version, doctor, schema, docs/skill export and offline firmware preflight.
+The installed interpreter can run `python tools/smoke_installed.py --report REPORT.json`
+to check those seven offline paths from a temporary working directory.
+Verify upgrade/uninstall behavior and rerun relevant fake-driver tests for changes.
+Physical configuration/password/firmware operations require explicit device scope
+and separate hardware records. Update VALIDATION.md with actual evidence.
+
+Do not bundle compiler tools, compiled fake drivers, real credentials, build logs, caches,
+test firmware, local SSH host-key state or downloaded source archives inside wheels.
+Native source/build scripts are in the sdist and the compact corresponding-source
+archive in every wheel. Run tools/bundle_source.py after source changes and before
+building: Console includes GPL-3.0-or-later Ymodem, while Python code remains MIT.
+
+## Publish
+
+PyPI account credentials are not stored in this repository.
+Once both required platforms and release criteria are verified, upload the exact
+checked artifacts using your existing account:
+
+~~~console
+python -m twine upload dist/canconfigpython-0.1.0a1-*.whl dist/canconfigpython-0.1.0a1.tar.gz
+~~~
+
+A Linux wheel may be in dist/linux; include its explicit path when uploading.
+The local release helper tools/publish_release.py checks build/release-manifest.json,
+all artifact hashes and metadata, and the exact Linux wheel's Qt-free acceptance
+record before calling Twine. --check-only verifies files/metadata without uploading.
+After uploading, it compares PyPI's reported filenames and SHA-256 values with the
+manifest and writes validation/pypi-release.json. It refuses a preexisting filename
+with a different digest; an interrupted partial upload can resume only matching files.
+Enter the token via Twine's hidden prompt or a locally configured credential store.
+Never paste tokens in chat or commit .pypirc. A configured PyPI Trusted Publisher
+is another option; it must match the chosen repository/workflow. Version uploads
+are immutable, so do not upload a partially validated replacement under the same
+version. No upload is performed by build_linux.sh or the CI build workflow.

canconfigpython-0.1.0a1/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 CANConfigPython contributors
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

canconfigpython-0.1.0a1/MANIFEST.in

@@ -0,0 +1,10 @@
+include LICENSE THIRD_PARTY_NOTICES.md README.md
+include AGENTS.md DEVELOPING.md VALIDATION.md
+recursive-include licenses *
+recursive-include native *.cpp *.h *.pro *.pri *.json *.md *.py
+recursive-include tools *.py *.sh
+recursive-include tests *.py
+recursive-include src/canconfigpython/resources *
+recursive-include src/canconfigpython/runtime *
+recursive-include .github *.yml
+global-exclude __pycache__ *.pyc

canconfigpython-0.1.0a1/PKG-INFO

@@ -0,0 +1,197 @@
+Metadata-Version: 2.1
+Name: CANConfigPython
+Version: 0.1.0a1
+Summary: CAN device configuration CLI using a bundled Qt/WIICAN console backend
+Author: CANConfigPython contributors
+License: Python wrapper: MIT; bundled Console: GPL-3.0-or-later; other components: see THIRD_PARTY_NOTICES.md
+Keywords: can,canconfig,canhub,serial
+Classifier: Development Status :: 3 - Alpha
+Classifier: Environment :: Console
+Classifier: Programming Language :: Python :: 3
+Classifier: Operating System :: Microsoft :: Windows
+Classifier: Operating System :: POSIX :: Linux
+Classifier: Topic :: System :: Hardware
+Requires-Python: >=3.8
+Description-Content-Type: text/markdown
+License-File: LICENSE
+License-File: THIRD_PARTY_NOTICES.md
+License-File: licenses\GPL-3.0.txt
+License-File: licenses\Qt-5.7.1-LICENSE.txt
+License-File: licenses\Qt-5.7.1-qtbase-LICENSE.FDL.txt
+License-File: licenses\Qt-5.7.1-qtbase-LICENSE.GPL2.txt
+License-File: licenses\Qt-5.7.1-qtbase-LICENSE.GPL3-EXCEPT.txt
+License-File: licenses\Qt-5.7.1-qtbase-LICENSE.GPL3.txt
+License-File: licenses\Qt-5.7.1-qtbase-LICENSE.GPLv3.txt
+License-File: licenses\Qt-5.7.1-qtbase-LICENSE.LGPL3.txt
+License-File: licenses\Qt-5.7.1-qtbase-LICENSE.LGPLv21.txt
+License-File: licenses\Qt-5.7.1-qtbase-LICENSE.LGPLv3.txt
+License-File: licenses\Qt-5.7.1-qtbase-LICENSE.PREVIEW.COMMERCIAL.txt
+License-File: licenses\Qt-5.7.1-qtbase-src__3rdparty__angle__LICENSE.txt
+License-File: licenses\Qt-5.7.1-qtbase-src__3rdparty__angle__src__libANGLE__renderer__d3d__d3d11__dxgi_support_data.json.txt
+License-File: licenses\Qt-5.7.1-qtbase-src__3rdparty__angle__src__libANGLE__renderer__d3d__d3d11__load_functions_data.json.txt
+License-File: licenses\Qt-5.7.1-qtbase-src__3rdparty__angle__src__libANGLE__renderer__d3d__d3d11__swizzle_format_data.json.txt
+License-File: licenses\Qt-5.7.1-qtbase-src__3rdparty__angle__src__libANGLE__renderer__d3d__d3d11__texture_format_data.json.txt
+License-File: licenses\Qt-5.7.1-qtbase-src__3rdparty__angle__src__third_party__compiler__LICENSE.txt
+License-File: licenses\Qt-5.7.1-qtbase-src__3rdparty__angle__src__third_party__murmurhash__LICENSE.txt
+License-File: licenses\Qt-5.7.1-qtbase-src__3rdparty__double-conversion__LICENSE.txt
+License-File: licenses\Qt-5.7.1-qtbase-src__3rdparty__easing__easing.cpp.txt
+License-File: licenses\Qt-5.7.1-qtbase-src__3rdparty__easing__legal.qdoc.txt
+License-File: licenses\Qt-5.7.1-qtbase-src__3rdparty__forkfd__forkfd.c.txt
+License-File: licenses\Qt-5.7.1-qtbase-src__3rdparty__forkfd__forkfd.h.txt
+License-File: licenses\Qt-5.7.1-qtbase-src__3rdparty__forkfd__forkfd_gcc.h.txt
+License-File: licenses\Qt-5.7.1-qtbase-src__3rdparty__freebsd__0001-Patch-the-FreeBSD-strto-u-ll-functions-to-work-insid.patch.txt
+License-File: licenses\Qt-5.7.1-qtbase-src__3rdparty__freebsd__strtoll.c.txt
+License-File: licenses\Qt-5.7.1-qtbase-src__3rdparty__freebsd__strtoull.c.txt
+License-File: licenses\Qt-5.7.1-qtbase-src__3rdparty__freetype__docs__LICENSE.TXT.txt
+License-File: licenses\Qt-5.7.1-qtbase-src__3rdparty__freetype__src__tools__no-copyright.txt
+License-File: licenses\Qt-5.7.1-qtbase-src__3rdparty__freetype__src__tools__update-copyright-year.txt
+License-File: licenses\Qt-5.7.1-qtbase-src__3rdparty__freetype__src__tools__update-copyright.txt
+License-File: licenses\Qt-5.7.1-qtbase-src__3rdparty__harfbuzz-ng__COPYING.txt
+License-File: licenses\Qt-5.7.1-qtbase-src__3rdparty__harfbuzz__COPYING.txt
+License-File: licenses\Qt-5.7.1-qtbase-src__3rdparty__libpng__LICENSE.txt
+License-File: licenses\Qt-5.7.1-qtbase-src__3rdparty__md4__md4.cpp.txt
+License-File: licenses\Qt-5.7.1-qtbase-src__3rdparty__md4__md4.h.txt
+License-File: licenses\Qt-5.7.1-qtbase-src__3rdparty__md5__md5.cpp.txt
+License-File: licenses\Qt-5.7.1-qtbase-src__3rdparty__md5__md5.h.txt
+License-File: licenses\Qt-5.7.1-qtbase-src__3rdparty__pcre__COPYING.txt
+License-File: licenses\Qt-5.7.1-qtbase-src__3rdparty__pcre__LICENCE.txt
+License-File: licenses\Qt-5.7.1-qtbase-src__3rdparty__rfc6234__patches__0001-Fix-compilation-MSVC-warning-in-3rdparty-rfc6234.patch.txt
+License-File: licenses\Qt-5.7.1-qtbase-src__3rdparty__rfc6234__sha-private.h.txt
+License-File: licenses\Qt-5.7.1-qtbase-src__3rdparty__rfc6234__sha.h.txt
+License-File: licenses\Qt-5.7.1-qtbase-src__3rdparty__rfc6234__sha224-256.c.txt
+License-File: licenses\Qt-5.7.1-qtbase-src__3rdparty__rfc6234__sha384-512.c.txt
+License-File: licenses\Qt-5.7.1-qtbase-src__3rdparty__sha1__sha1.cpp.txt
+License-File: licenses\Qt-5.7.1-qtbase-src__3rdparty__sha3__KeccakF-1600-32-rvk.macros.txt
+License-File: licenses\Qt-5.7.1-qtbase-src__3rdparty__sha3__KeccakF-1600-32.macros.txt
+License-File: licenses\Qt-5.7.1-qtbase-src__3rdparty__sha3__KeccakF-1600-64.macros.txt
+License-File: licenses\Qt-5.7.1-qtbase-src__3rdparty__sha3__KeccakF-1600-int-set.h.txt
+License-File: licenses\Qt-5.7.1-qtbase-src__3rdparty__sha3__KeccakF-1600-interface.h.txt
+License-File: licenses\Qt-5.7.1-qtbase-src__3rdparty__sha3__KeccakF-1600-opt32-settings.h.txt
+License-File: licenses\Qt-5.7.1-qtbase-src__3rdparty__sha3__KeccakF-1600-opt32.c.txt
+License-File: licenses\Qt-5.7.1-qtbase-src__3rdparty__sha3__KeccakF-1600-opt64-settings.h.txt
+License-File: licenses\Qt-5.7.1-qtbase-src__3rdparty__sha3__KeccakF-1600-opt64.c.txt
+License-File: licenses\Qt-5.7.1-qtbase-src__3rdparty__sha3__KeccakF-1600-unrolling.macros.txt
+License-File: licenses\Qt-5.7.1-qtbase-src__3rdparty__sha3__KeccakNISTInterface.c.txt
+License-File: licenses\Qt-5.7.1-qtbase-src__3rdparty__sha3__KeccakNISTInterface.h.txt
+License-File: licenses\Qt-5.7.1-qtbase-src__3rdparty__sha3__KeccakSponge.c.txt
+License-File: licenses\Qt-5.7.1-qtbase-src__3rdparty__sha3__KeccakSponge.h.txt
+License-File: licenses\Qt-5.7.1-qtbase-src__3rdparty__sha3__brg_endian.h.txt
+License-File: licenses\Qt-5.7.1-qtbase-src__3rdparty__xkbcommon__COPYING.txt
+License-File: licenses\Qt-5.7.1-qtserialport-LICENSE.FDL.txt
+License-File: licenses\Qt-5.7.1-qtserialport-LICENSE.GPL2.txt
+License-File: licenses\Qt-5.7.1-qtserialport-LICENSE.GPL3-EXCEPT.txt
+License-File: licenses\Qt-5.7.1-qtserialport-LICENSE.GPL3.txt
+License-File: licenses\Qt-5.7.1-qtserialport-LICENSE.GPLv2.txt
+License-File: licenses\Qt-5.7.1-qtserialport-LICENSE.GPLv3.txt
+License-File: licenses\Qt-5.7.1-qtserialport-LICENSE.LGPL3.txt
+License-File: licenses\Qt-5.7.1-qtserialport-LICENSE.LGPLv21.txt
+License-File: licenses\Qt-5.7.1-qtserialport-LICENSE.LGPLv3.txt
+License-File: licenses\gcc-COPYING.RUNTIME.txt
+License-File: licenses\gcc-COPYING3.LIB.txt
+License-File: licenses\gcc-COPYING3.txt
+License-File: licenses\linux-libc6-copyright.txt
+License-File: licenses\linux-libcap2-copyright.txt
+License-File: licenses\linux-libcom-err2-copyright.txt
+License-File: licenses\linux-libdouble-conversion3-copyright.txt
+License-File: licenses\linux-libgcc-s1-copyright.txt
+License-File: licenses\linux-libglib2.0-0t64-copyright.txt
+License-File: licenses\linux-libgssapi-krb5-2-copyright.txt
+License-File: licenses\linux-libicu74-copyright.txt
+License-File: licenses\linux-libk5crypto3-copyright.txt
+License-File: licenses\linux-libkeyutils1-copyright.txt
+License-File: licenses\linux-libkrb5-3-copyright.txt
+License-File: licenses\linux-libkrb5support0-copyright.txt
+License-File: licenses\linux-libpcre2-16-0-copyright.txt
+License-File: licenses\linux-libpcre2-8-0-copyright.txt
+License-File: licenses\linux-libqt5core5t64-copyright.txt
+License-File: licenses\linux-libqt5network5t64-copyright.txt
+License-File: licenses\linux-libqt5serialport5-copyright.txt
+License-File: licenses\linux-libstdc++6-copyright.txt
+License-File: licenses\linux-libudev1-copyright.txt
+License-File: licenses\linux-libzstd1-copyright.txt
+License-File: licenses\linux-packages.json
+License-File: licenses\linux-zlib1g-copyright.txt
+License-File: licenses\mingw-w64-COPYING.MinGW-w64-runtime.txt.txt
+License-File: licenses\mingw-w64-COPYING.MinGW-w64.txt.txt
+License-File: licenses\mingw-w64-COPYING.txt
+License-File: licenses\qt-source-notices.json
+License-File: licenses\winpthreads-COPYING.txt
+Provides-Extra: dev
+Requires-Dist: pytest>=7; extra == "dev"
+Requires-Dist: build>=1; extra == "dev"
+Requires-Dist: twine>=5; extra == "dev"
+Requires-Dist: PyYAML>=6; extra == "dev"
+
+# CANConfigPython
+
+Python CLI and API for CANHub, CANFB, CANBridge, CANRPT and CANCOM configuration.
+The package runs a bundled Qt console subprocess, which uses WIICAN. It does not
+require a GUI installation or a separately installed Qt runtime.
+
+**0.1.0a1 is a prerelease.** Windows wheels are tested with Python 3.8 x86 and
+Python 3.12 x64; both run the bundled x86 runtime as a separate process.
+The Linux x86_64 wheel requires glibc 2.38 or later and was built/tested on
+Ubuntu 24.04 with Python 3.12 and Qt 5.15.13. The bundled runtime contains Console,
+WIICAN and the required Qt/shared libraries. Consult VALIDATION.md and the release
+evidence for installation checks. ARM64, macOS and musl are not supported.
+
+~~~text
+canconfig / Python Client
+    -> CANConfigConsole.exe + WIICAN.dll           (Windows)
+    -> CANConfigConsole + libWIICAN.so.1           (Linux)
+~~~
+
+## First use
+
+Until the project is uploaded, install the supplied local wheel:
+~~~console
+python -m pip install path/to/canconfigpython-0.1.0a1-py3-none-win_amd64.whl
+canconfig --version --json
+canconfig doctor --json
+canconfig docs export --output ./canconfig-docs
+canconfig skill export --output ./canconfig-skill
+~~~
+
+After publication, use `python -m pip install --pre CANConfigPython`.
+`doctor`, `schema`, `validate` and firmware `--dry-run` do not open hardware.
+Configuration `info` and `--dry-run` do connect and may change the device run mode.
+
+- [中文使用说明](src/canconfigpython/resources/docs/user-guide.zh-CN.md)
+- [English user guide](src/canconfigpython/resources/docs/user-guide.en.md)
+- [Agent Skill](src/canconfigpython/resources/skill/canconfig-python/SKILL.md)
+- [Build and release](DEVELOPING.md)
+- [Validation record](VALIDATION.md)
+- [Third-party notices](THIRD_PARTY_NOTICES.md)
+
+## Python API
+
+~~~python
+from canconfigpython import Client, ConfigError
+
+client = Client()
+try:
+    result = client.execute("info", port="COM3")  # Linux: /dev/serial/by-id/...
+except ConfigError as error:
+    print(error.code, error.message)
+else:
+    print(result["exit_code"], result["effects"], result["verification"])
+~~~
+
+`execute(command, password=..., new_password=..., **options)` uses snake_case options
+such as `expect_uid`, `dry_run`, and `timeout_ms`; its command names match the CLI.
+Provide passwords from a secret store or prompt, not source code. Backend failures
+return the full result; callers must check `ok` and `exit_code`.
+Local validation/runtime errors raise `ConfigError`. The wrapper does not retry.
+
+The Python layer uses only the standard library. Python 3.8+ is supported by syntax;
+see the validation record for interpreter versions actually tested.
+
+## License
+
+The Python wrapper and project additions are MIT. The bundled Console incorporates
+XinLi's GPL-3.0-or-later Ymodem implementation and is distributed under that license.
+Its corresponding project source is included in every wheel as
+`canconfigpython/resources/docs/native-source.tar.gz` (also exported by `canconfig docs export`).
+Qt and compiler runtime components retain their own licenses. Materials and rebuild instructions are in
+[THIRD_PARTY_NOTICES.md](THIRD_PARTY_NOTICES.md). A runtime manifest checks bundle
+consistency; it is not a publisher signature.

canconfigpython-0.1.0a1/README.md

@@ -0,0 +1,73 @@
+# CANConfigPython
+
+Python CLI and API for CANHub, CANFB, CANBridge, CANRPT and CANCOM configuration.
+The package runs a bundled Qt console subprocess, which uses WIICAN. It does not
+require a GUI installation or a separately installed Qt runtime.
+
+**0.1.0a1 is a prerelease.** Windows wheels are tested with Python 3.8 x86 and
+Python 3.12 x64; both run the bundled x86 runtime as a separate process.
+The Linux x86_64 wheel requires glibc 2.38 or later and was built/tested on
+Ubuntu 24.04 with Python 3.12 and Qt 5.15.13. The bundled runtime contains Console,
+WIICAN and the required Qt/shared libraries. Consult VALIDATION.md and the release
+evidence for installation checks. ARM64, macOS and musl are not supported.
+
+~~~text
+canconfig / Python Client
+    -> CANConfigConsole.exe + WIICAN.dll           (Windows)
+    -> CANConfigConsole + libWIICAN.so.1           (Linux)
+~~~
+
+## First use
+
+Until the project is uploaded, install the supplied local wheel:
+~~~console
+python -m pip install path/to/canconfigpython-0.1.0a1-py3-none-win_amd64.whl
+canconfig --version --json
+canconfig doctor --json
+canconfig docs export --output ./canconfig-docs
+canconfig skill export --output ./canconfig-skill
+~~~
+
+After publication, use `python -m pip install --pre CANConfigPython`.
+`doctor`, `schema`, `validate` and firmware `--dry-run` do not open hardware.
+Configuration `info` and `--dry-run` do connect and may change the device run mode.
+
+- [中文使用说明](src/canconfigpython/resources/docs/user-guide.zh-CN.md)
+- [English user guide](src/canconfigpython/resources/docs/user-guide.en.md)
+- [Agent Skill](src/canconfigpython/resources/skill/canconfig-python/SKILL.md)
+- [Build and release](DEVELOPING.md)
+- [Validation record](VALIDATION.md)
+- [Third-party notices](THIRD_PARTY_NOTICES.md)
+
+## Python API
+
+~~~python
+from canconfigpython import Client, ConfigError
+
+client = Client()
+try:
+    result = client.execute("info", port="COM3")  # Linux: /dev/serial/by-id/...
+except ConfigError as error:
+    print(error.code, error.message)
+else:
+    print(result["exit_code"], result["effects"], result["verification"])
+~~~
+
+`execute(command, password=..., new_password=..., **options)` uses snake_case options
+such as `expect_uid`, `dry_run`, and `timeout_ms`; its command names match the CLI.
+Provide passwords from a secret store or prompt, not source code. Backend failures
+return the full result; callers must check `ok` and `exit_code`.
+Local validation/runtime errors raise `ConfigError`. The wrapper does not retry.
+
+The Python layer uses only the standard library. Python 3.8+ is supported by syntax;
+see the validation record for interpreter versions actually tested.
+
+## License
+
+The Python wrapper and project additions are MIT. The bundled Console incorporates
+XinLi's GPL-3.0-or-later Ymodem implementation and is distributed under that license.
+Its corresponding project source is included in every wheel as
+`canconfigpython/resources/docs/native-source.tar.gz` (also exported by `canconfig docs export`).
+Qt and compiler runtime components retain their own licenses. Materials and rebuild instructions are in
+[THIRD_PARTY_NOTICES.md](THIRD_PARTY_NOTICES.md). A runtime manifest checks bundle
+consistency; it is not a publisher signature.

canconfigpython-0.1.0a1/THIRD_PARTY_NOTICES.md

@@ -0,0 +1,69 @@
+# Third-party notices
+
+The Python wrapper and original project additions are MIT. This does **not**
+relicense upstream code or libraries shipped with it.
+
+## Console and Ymodem
+
+native/shared/Ymodem.cpp and Ymodem.h are Copyright (c) 2018 XinLi and licensed
+under GPL-3.0-or-later, as their original headers state. The Console links that
+implementation and is distributed under GPL-3.0-or-later; it is not an MIT-only
+executable. The license text is in licenses/GPL-3.0.txt. MIT notices remain on
+project-owned contributions; upstream copyright and license headers are retained.
+
+Every wheel includes the corresponding project source and build scripts at
+canconfigpython/resources/docs/native-source.tar.gz. Export it with `canconfig docs export`,
+extract it and follow DEVELOPING.md to rebuild. The PyPI source distribution
+also contains these sources. Qt/compiler dependency source locations are recorded
+below and in the collected license/source records. Keep these materials together
+when distributing binaries. The Python wrapper communicates with the separate
+Console process using its CLI and retains its MIT license.
+
+## Windows runtime
+
+| Files | Component | License materials |
+|---|---|---|
+| Qt5Core.dll, Qt5Network.dll, Qt5SerialPort.dll | Qt 5.7.1, The Qt Company and contributors | Qt LGPLv3/GPLv3 texts and source-component notices in licenses |
+| libgcc_s_dw2-1.dll, libstdc++-6.dll | GCC 5.3 runtime | GPLv3 with GCC Runtime Library Exception; gcc-* texts |
+| libwinpthread-1.dll | MinGW-w64 winpthreads | winpthreads-COPYING.txt and mingw-w64-* texts |
+| WIICAN.dll | Project driver source snapshot | LICENSE and native/upstream.json |
+| Console executable | Project source plus XinLi Ymodem | GPL-3.0-or-later; licenses/GPL-3.0.txt and bundled source |
+
+The Qt source license collection can include notices for source components not
+linked into these libraries. It is preserved to retain third-party attributions.
+Only the runtime dependency closure is bundled.
+
+Exact Qt source packages:
+- [QtBase 5.7.1](https://download.qt.io/archive/qt/5.7/5.7.1/submodules/qtbase-opensource-src-5.7.1.tar.xz)
+- [QtSerialPort 5.7.1](https://download.qt.io/archive/qt/5.7/5.7.1/submodules/qtserialport-opensource-src-5.7.1.tar.xz)
+- [GCC 5.3 source](https://ftp.gnu.org/gnu/gcc/gcc-5.3.0/)
+- [MinGW-w64 source project](https://www.mingw-w64.org/)
+
+Windows uses dynamically linked Qt 5.7.1 from the MinGW 5.3 32-bit distribution.
+No modifications to those Qt binaries are made. Preserve matching source
+access and notices when redistributing.
+
+## Linux runtime
+
+Linux uses separately compiled Console/WIICAN and Qt 5 shared objects.
+Exact packages/versions are recorded by tools/collect_linux_licenses.py in
+licenses/linux-packages.json when a Linux build is performed. Adjacent copyright
+files identify licenses and sources. On Debian/Ubuntu obtain matching sources
+with apt-get source and the recorded source package/version (enable source
+repositories first). Preserve equivalent source access for other toolchains.
+
+The Linux wheel contains its non-glibc runtime closure. glibc and the ELF loader
+are system dependencies governed by the audited manylinux baseline.
+
+## Replacing or rebuilding libraries
+
+Users may modify/replace LGPL-covered libraries and debug those modifications.
+There is no publisher signature or DRM lock. Runtime SHA-256 checks bundle
+consistency only. Build with compatible Qt, then run tools/build_native.py to
+restage and regenerate the manifest. Build/install your resulting wheel.
+For intentionally modified prebuilt libraries, tools/rehash_runtime.py accepts
+local replacements without claiming publisher authenticity. Maintain architecture/
+ABI and rerun tests.
+
+The source distribution contains native source/build instructions so the executable
+can be rebuilt/relinked. Retain license texts and source access for modified builds.

canconfigpython-0.1.0a1/VALIDATION.md

@@ -0,0 +1,65 @@
+# Validation record — 2026-10-16
+
+Version: CANConfigPython 0.1.0a1 / Console 2.3 / bridge API 1.
+Stage: local prerelease candidate; not published to PyPI.
+
+| Check | Evidence/status |
+|---|---|
+| Windows native configuration core | PASS: 167 Qt tests |
+| Windows firmware transport simulation | PASS: 29 Qt tests |
+| Windows Console subprocess + fake driver | PASS: 83 tests including documented examples |
+| Python wrapper | PASS: 55 tests on Windows Python 3.8 x86; original 42 on Linux Python 3.12; 13 Qt-free checker/loader regressions |
+| Agent Skill structure | PASS: skill-creator quick_validate.py in UTF-8 mode |
+| Windows wheel structure/install | PASS: win32 and win_amd64; Python 3.8.0 x86 and 3.12.10 x64; seven offline smoke checks per interpreter |
+| Windows installation lifecycle | PASS: force-reinstall on both; uninstall/removal/reinstall on x86; pip check on both |
+| Package metadata/integrity | PASS: twine check, wheel RECORD, runtime hashes; GPL Console source bundled and checked |
+| Qt toolchain selection | PASS: Windows Qt 5.7.1 and Linux Qt 5.15.13; preserves qtchooser launcher symlinks |
+| Remote Linux build helper | PASS: SSH authentication, dependency provisioning, build, tests, artifact transfer and SHA-256 |
+| Linux native configuration/firmware | PASS: 167 + 29 Qt tests on Ubuntu 24.04.5 x86_64 |
+| Linux Console subprocess + fake driver | PASS: 82; SKIP: one Windows console-event test (83 cases total) |
+| Linux packaging | PASS: auditwheel, RECORD/runtime hashes, licenses and source; manylinux_2_38_x86_64 / manylinux_2_39_x86_64 |
+| Linux installed wheel on build host | PASS: seven offline checks with Python 3.12.3 |
+| Linux without system Qt | PENDING: license-text classification fixed; native glibc closure added after isolated WIICAN load failure; exact-wheel check required before upload |
+| Physical hardware config/password/firmware | NOT_CHECKED; no device operations performed |
+| PyPI publication | NOT_UPLOADED; credentials not configured in this session |
+
+The Linux build completed on Ubuntu 24.04.5, Python 3.12.3, Qt 5.15.13 and
+glibc 2.39. Auditwheel established a minimum glibc of 2.38 for the produced wheel.
+The source/runtime packages are recorded in licenses/linux-packages.json. Build
+and test evidence is in validation/linux. The host-venv installation passed;
+the final Qt-free filesystem check remains separate and is required by the
+upload helper. An initial Qt-free preparation attempt incorrectly classified
+Qt license text as an external library. The checker now inspects ELF file headers,
+validates both installed paths and symlink targets, and reports offending paths.
+Regression cases cover notices, external libraries, pre-install contamination and
+disguised ELF files; the real Linux wheel is checked locally as well.
+The subsequent isolated run started Python successfully but failed WIICAN loading.
+ELF inspection identifies four external system libraries: the loader, libc, libm
+and libresolv. Preparation previously copied only Python's dependencies; it now
+also copies the native runtime's strictly allowed glibc dependencies and rejects
+any missing non-glibc runtime library. A loader check precedes CLI execution and
+keeps concrete missing-library diagnostics. Full isolated execution remains
+pending until the corrected helper runs on the Linux host.
+Passwords are local terminal input, never files or chat.
+
+Python code is MIT. Console incorporates existing GPL-3.0-or-later Ymodem source;
+its license and corresponding project source are preserved in each wheel.
+
+## Documentation coverage versus validation
+
+| Function | Chinese/English coverage | Validation |
+|---|---|---|
+| Install, version, doctor, help, schema | COMPLETE | PASS_CLI / PASS_INSTALLED_WHEEL_WINDOWS_AND_LINUX_HOST |
+| Export docs and Skill | COMPLETE | PASS_CLI |
+| Device identity/capabilities | COMPLETE | PASS_FAKE_DRIVER |
+| INI export/validate/restore and sections | COMPLETE | PASS_FAKE_DRIVER |
+| JSON syntax/snapshot/parameter apply | COMPLETE | PASS_FAKE_DRIVER |
+| Adaptive mode boundaries | COMPLETE | PASS_NATIVE_SIMULATION |
+| Password change and result handling | COMPLETE | PASS_FAKE_DRIVER |
+| Firmware preflight and Ymodem outcomes | COMPLETE | PASS_NATIVE_SIMULATION |
+| Timeout, interruption and unknown effects | COMPLETE | PASS_CLI / PASS_NATIVE_SIMULATION |
+| Linux permissions/device aliases | COMPLETE | PASS_LINUX_BUILD / PENDING_HARDWARE |
+| Actual device/flash/power-cycle behavior | COMPLETE limitations | PENDING_HARDWARE |
+
+COMPLETE describes written coverage, not hardware acceptance. Fake-driver success
+does not prove actual electrical communication, device timing or persistence.