aicp-cli 0.3.0__tar.gz → 0.3.1__tar.gz

{aicp_cli-0.3.0 → aicp_cli-0.3.1}/CHANGELOG.md

@@ -1,3 +1,14 @@
+## [0.3.1] - 2026-09-14
+
+### 🐛 Bug Fixes
+
+- **menu:** Stop config panel resizing on row selection
+
+### 📚 Documentation
+
+- **readme:** Document releasing and the wheel version check
+- Remove CI section from README.md
+- Add uv requirement note to README.md
 ## [0.3.0] - 2026-09-14
 
 ### 🐛 Bug Fixes
@@ -16,8 +27,13 @@
 
 - **release:** Publish wheels to PyPI via trusted publishing
 - Assert the built wheel reports the right version
+- **release:** V0.3.0
 ## [0.2.1] - 2026-09-13
 
+### 📚 Documentation
+
+- **changelog:** Release v0.2.1
+
 ### ⚙️ Miscellaneous Tasks
 
 - Refresh uv lockfile for v0.2.0

{aicp_cli-0.3.0 → aicp_cli-0.3.1}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.5
 Name: aicp-cli
-Version: 0.3.0
+Version: 0.3.1
 Summary: AI commit + push, with a git-verified result summary
 Project-URL: Repository, https://github.com/weskao/aicp
 Project-URL: Issues, https://github.com/weskao/aicp/issues
@@ -36,6 +36,7 @@ push that never reached the remote.
 ## Requirements
 
 - Python 3.10 or newer
+- [`uv`](https://docs.astral.sh/uv/) — the install path below
 - `git`
 - At least one of the six AI CLIs above on `PATH`
 
@@ -178,27 +179,21 @@ that, and even then the original is moved aside to `<name>.bak` (numbered
 `.bak.1`, `.bak.2`, … so a second forced install never clobbers the first
 backup) before aicp writes its own copy.
 
-### This repo's own CI
+### Releasing
 
-`.github/workflows/ci.yml` runs the suite on **macOS, Linux, and Windows** in
-parallel (`fail-fast: false`, so one platform failing still tells you about the
-other two), then builds the wheel, installs it into a throwaway venv, and checks
-that the console script runs and the vendored skills survived packaging.
+`.github/workflows/release.yml` runs on a `v*` tag. It repeats the full
+lint/test/build pass, installs the wheel into a throwaway venv, and refuses to
+upload unless that wheel reports the version being tagged — so a tag that
+disagrees with `pyproject.toml` fails before anything reaches PyPI. It then
+publishes with Trusted Publishing (OIDC — there is no API token stored in this
+repo) and attaches the wheel, sdist and `SHA256SUMS` to the GitHub release.
 
-A failed run on a `push` also sends one Telegram message. Failure-only is
-deliberate: a notification on every green push is one nobody reads.
+Checksums are generated *after* publishing on purpose: `uv publish` uploads
+everything in `dist/`, and `SHA256SUMS` is not a distribution.
 
-The credentials are **repo secrets — never committed**. The workflow reads them
-through `${{ secrets.* }}` and skips quietly when they're unset, so a fork or a
-fresh clone gets no second red X on top of the real failure. To enable it:
-
-```sh
-gh secret set TELEGRAM_BOT_TOKEN -R <owner>/<repo>   # paste the bot token
-gh secret set TELEGRAM_CHAT_ID   -R <owner>/<repo>   # paste the chat id
-```
-
-Verify with `gh secret list -R <owner>/<repo>` — GitHub shows the names and
-timestamps only; secret values can never be read back, by you or by CI logs.
+A tag runs the workflow file **as it existed at that tag**, so a release that
+failed to publish can't be repaired by re-running the old tag — the fix isn't
+in that tree. Bump the version and tag again.
 
 ## Configuration
 

{aicp_cli-0.3.0 → aicp_cli-0.3.1}/README.md

@@ -24,6 +24,7 @@ push that never reached the remote.
 ## Requirements
 
 - Python 3.10 or newer
+- [`uv`](https://docs.astral.sh/uv/) — the install path below
 - `git`
 - At least one of the six AI CLIs above on `PATH`
 
@@ -166,27 +167,21 @@ that, and even then the original is moved aside to `<name>.bak` (numbered
 `.bak.1`, `.bak.2`, … so a second forced install never clobbers the first
 backup) before aicp writes its own copy.
 
-### This repo's own CI
+### Releasing
 
-`.github/workflows/ci.yml` runs the suite on **macOS, Linux, and Windows** in
-parallel (`fail-fast: false`, so one platform failing still tells you about the
-other two), then builds the wheel, installs it into a throwaway venv, and checks
-that the console script runs and the vendored skills survived packaging.
+`.github/workflows/release.yml` runs on a `v*` tag. It repeats the full
+lint/test/build pass, installs the wheel into a throwaway venv, and refuses to
+upload unless that wheel reports the version being tagged — so a tag that
+disagrees with `pyproject.toml` fails before anything reaches PyPI. It then
+publishes with Trusted Publishing (OIDC — there is no API token stored in this
+repo) and attaches the wheel, sdist and `SHA256SUMS` to the GitHub release.
 
-A failed run on a `push` also sends one Telegram message. Failure-only is
-deliberate: a notification on every green push is one nobody reads.
+Checksums are generated *after* publishing on purpose: `uv publish` uploads
+everything in `dist/`, and `SHA256SUMS` is not a distribution.
 
-The credentials are **repo secrets — never committed**. The workflow reads them
-through `${{ secrets.* }}` and skips quietly when they're unset, so a fork or a
-fresh clone gets no second red X on top of the real failure. To enable it:
-
-```sh
-gh secret set TELEGRAM_BOT_TOKEN -R <owner>/<repo>   # paste the bot token
-gh secret set TELEGRAM_CHAT_ID   -R <owner>/<repo>   # paste the chat id
-```
-
-Verify with `gh secret list -R <owner>/<repo>` — GitHub shows the names and
-timestamps only; secret values can never be read back, by you or by CI logs.
+A tag runs the workflow file **as it existed at that tag**, so a release that
+failed to publish can't be repaired by re-running the old tag — the fix isn't
+in that tree. Bump the version and tag again.
 
 ## Configuration
 

{aicp_cli-0.3.0 → aicp_cli-0.3.1}/pyproject.toml

@@ -2,7 +2,7 @@
 # PyPI distribution name only — the `aicp` name was taken in 2021 by an
 # unrelated project. The command, import path and repo stay `aicp`.
 name = "aicp-cli"
-version = "0.3.0"
+version = "0.3.1"
 description = "AI commit + push, with a git-verified result summary"
 readme = "README.md"
 requires-python = ">=3.10"

{aicp_cli-0.3.0 → aicp_cli-0.3.1}/src/aicp/menu.py

@@ -653,8 +653,17 @@ def _panel(
         )
     title = f"{_t(state.lang, 'config_title', 'aicp config')} (v{__version__})"
     if selected is not None:
+        # Reserve the widest help line ANY row can show, not just the selected
+        # one's — otherwise the frame narrows and widens as the cursor moves
+        # across rows with shorter and longer help text (render_panel sizes
+        # its own width off the notes it is handed).
+        help_budget = frame_columns - 4
+        fitted_help = [_fit(_t(state.lang, *row.help), help_budget) for row in ROWS]
+        reserve = max(width(h) for h in fitted_help)
+        help_line = fitted_help[selected - 1]
+        help_line += " " * (reserve - width(help_line))
         texts = [
-            _t(state.lang, *ROWS[selected - 1].help),
+            help_line,
             "",
             _t(state.lang, "config_keys_tui", "↑↓ select · ←→ change · ⏎ change/run · q/Ctrl-C quit · saves as you go"),
         ]

{aicp_cli-0.3.0 → aicp_cli-0.3.1}/tests/test_menu.py

@@ -146,6 +146,16 @@ def test_cli_order_motion_runs_the_other_way_too():
     assert _plain(frames[-1]) == " → ".join(after)
 
 
+def test_selecting_a_different_row_does_not_resize_the_panel():
+    """Rows carry help text of very different lengths — the box must be sized
+    for the longest one up front, not reflow as the cursor passes each row."""
+    state = MenuState(Path("menu.aicprc"), True, True, "en", list(ROSTER_NAMES))
+
+    widths = {width(_panel(state, selected=i)[0]) for i in range(1, len(ROWS) + 1)}
+
+    assert len(widths) == 1, "the frame width changed when a different row was selected"
+
+
 @pytest.mark.parametrize("columns, lines", [(80, 24), (100, 24), (60, 24), (100, 14)])
 def test_the_panel_fits_the_terminal_it_draws_on(columns, lines, monkeypatch):
     """Every line inside the terminal, in both languages.

{aicp_cli-0.3.0 → aicp_cli-0.3.1}/uv.lock

@@ -4,7 +4,7 @@ requires-python = ">=3.10"
 
 [[package]]
 name = "aicp-cli"
-version = "0.3.0"
+version = "0.3.1"
 source = { editable = "." }
 
 [package.dev-dependencies]