dancerudiments 0.2.0__tar.gz → 0.2.3__tar.gz

{dancerudiments-0.2.0 → dancerudiments-0.2.3}/.gitattributes

@@ -26,3 +26,7 @@ collections/dancefloor/** text eol=lf
 harness/index.html text eol=lf
 harness/index.json text eol=lf
 harness/beats.json text eol=lf
+
+# Keep original DanceFlow artwork byte-identical across platform packages.
+**/branding/*.svg text eol=lf
+**/branding/*.png binary

dancerudiments-0.2.3/.github/workflows/nuget-verify.yml

@@ -0,0 +1,40 @@
+name: Verify NuGet publication
+
+on:
+  workflow_dispatch:
+    inputs:
+      version:
+        description: Existing DanceRudiments version to verify on NuGet.org
+        required: true
+        type: string
+
+permissions:
+  contents: read
+
+jobs:
+  verify:
+    runs-on: ubuntu-22.04
+    steps:
+      - uses: actions/checkout@v6
+        with:
+          persist-credentials: false
+      - uses: actions/setup-python@v6
+        with:
+          python-version: '3.13'
+      - name: Download the package already attached to its GitHub Release
+        env:
+          GH_TOKEN: ${{ github.token }}
+          VERSION: ${{ inputs.version }}
+        shell: bash
+        run: |
+          set -euo pipefail
+          [[ "$VERSION" =~ ^[0-9]+\.[0-9]+\.[0-9]+$ ]]
+          mkdir -p artifacts/nuget
+          gh release download "v$VERSION" --repo "$GITHUB_REPOSITORY" \
+            --pattern "DanceRudiments.$VERSION.nupkg" --dir artifacts/nuget
+      - name: Wait for NuGet.org indexing and verify the published payload
+        env:
+          VERSION: ${{ inputs.version }}
+        run: |
+          python tools/csharp_package.py verify-published \
+            "artifacts/nuget/DanceRudiments.$VERSION.nupkg" --version "$VERSION"

{dancerudiments-0.2.0 → dancerudiments-0.2.3}/.github/workflows/release.yml

@@ -106,7 +106,12 @@ jobs:
           mkdir -p npm-package-check
           npm pack --ignore-scripts --pack-destination npm-package-check
           python3 tools/check_package_docs.py --archive npm-package-check/*.tgz
-      - run: npm publish --access public
+      - uses: actions/upload-artifact@v6
+        with:
+          name: npm-distribution
+          path: npm-package-check/*.tgz
+          if-no-files-found: error
+      - run: npm publish ./npm-package-check/*.tgz --ignore-scripts --access public
         env:
           NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}
 
@@ -159,19 +164,19 @@ jobs:
           if-no-files-found: error
 
   attach-github-release:
-    needs: [cpp-archives, python-wheels, python-sdist]
+    needs: [cpp-archives, python-wheels, python-sdist, publish-npm]
     runs-on: ubuntu-latest
     permissions:
       contents: write
     steps:
       - uses: actions/download-artifact@v7
         with:
-          pattern: "cpp-*"
+          pattern: "{cpp-*,wheels-*,python-sdist,npm-distribution}"
           path: release-assets
           merge-multiple: true
       - name: Write SHA-256 checksums
         working-directory: release-assets
-        run: sha256sum *.zip > SHA256SUMS.txt
+        run: sha256sum *.zip *.whl *.tar.gz *.tgz > SHA256SUMS.txt
       - name: Wait for the tag preflight to create the GitHub Release
         env:
           GH_TOKEN: ${{ github.token }}
@@ -186,7 +191,7 @@ jobs:
       - name: Attach verified packages
         env:
           GH_TOKEN: ${{ github.token }}
-        run: gh release upload "$GITHUB_REF_NAME" release-assets/*.zip release-assets/SHA256SUMS.txt --repo "$GITHUB_REPOSITORY" --clobber
+        run: gh release upload "$GITHUB_REF_NAME" release-assets/*.zip release-assets/*.whl release-assets/*.tar.gz release-assets/*.tgz release-assets/SHA256SUMS.txt --repo "$GITHUB_REPOSITORY"
 
   publish-conan:
     needs: validate

dancerudiments-0.2.3/CHANGELOG.md

@@ -0,0 +1,19 @@
+# Changelog
+
+## 0.2.3 - 2026-10-08
+
+- Preserve the canonical My Songs author link in the branding guide and validate it in source checks as well as real archives. Fixes the 0.2.2 Python/native packaging guard failure; already published 0.2.2 assets remain immutable.
+
+
+## 0.2.2 - 2026-10-08
+
+- Add an original tool-specific vector logo and PNG companion in the shared DanceFlow visual style.
+- Clarify package descriptions from reviewed documentation and KeywordMoves literal-source evidence, without claims of measured search demand.
+- Link package descriptions and READMEs to Kieran Simkin’s website and retain branding files in installable packages.
+
+
+## 0.2.1 - 2026-10-08
+
+- Verify delayed NuGet indexing with bounded, authenticated publication evidence rather than treating an immediate index miss as publication failure.
+- Preserve the existing motion catalogue and bindings unchanged.
+- Keep all package manifests aligned with the fresh release version.

{dancerudiments-0.2.0 → dancerudiments-0.2.3}/CMakeLists.txt

@@ -1,6 +1,6 @@
 cmake_minimum_required(VERSION 3.20)
-project(DanceRudiments VERSION 0.2.0
-  DESCRIPTION "Rhythmic motion for DanceFlow. Music: https://kieransimkin.co.uk/my-songs/"
+project(DanceRudiments VERSION 0.2.3
+  DESCRIPTION "Deterministic rhythmic position functions for DanceFlow. Music: https://kieransimkin.co.uk/my-songs/"
   HOMEPAGE_URL "https://kieransimkin.co.uk/my-songs/"
   LANGUAGES CXX)
 
@@ -114,7 +114,7 @@ install(FILES collections/initial/sources/d3-ease/LICENSE
 set(DANCERUDIMENTS_DOC_DIR "${CMAKE_INSTALL_DATADIR}/DanceRudiments")
 install(FILES README.md AUTHORS.md DESTINATION "${DANCERUDIMENTS_DOC_DIR}")
 install(DIRECTORY docs/ DESTINATION "${DANCERUDIMENTS_DOC_DIR}/docs"
-  FILES_MATCHING PATTERN "*.md" PATTERN "*.png" PATTERN "capture.json")
+  FILES_MATCHING PATTERN "*.md" PATTERN "*.png" PATTERN "*.svg" PATTERN "capture.json")
 install(DIRECTORY examples/bindings/ DESTINATION "${DANCERUDIMENTS_DOC_DIR}/examples/bindings"
   PATTERN "dist" EXCLUDE PATTERN "bin" EXCLUDE PATTERN "obj" EXCLUDE PATTERN "__pycache__" EXCLUDE)
 

{dancerudiments-0.2.0 → dancerudiments-0.2.3}/PKG-INFO

@@ -1,13 +1,14 @@
 Metadata-Version: 2.4
 Name: dancerudiments
-Version: 0.2.0
-Summary: C++ rhythmic motion with Python bindings for DanceFlow. Music: https://kieransimkin.co.uk/my-songs/
+Version: 0.2.3
+Summary: Deterministic rhythmic position functions with C++, Python, TypeScript/WASM and C# bindings. https://kieransimkin.co.uk/my-songs/
 Author: Kieran Simkin
 License-Expression: MIT AND BSD-3-Clause AND CC0-1.0 AND CC-BY-4.0
 Classifier: Programming Language :: C++
 Classifier: Programming Language :: Python :: 3
 Classifier: Topic :: Multimedia :: Sound/Audio
 Classifier: Topic :: Software Development :: Libraries
+Project-URL: DanceFlow ecosystem, https://kieransimkin.co.uk/danceflow/
 Project-URL: Music / My Songs, https://kieransimkin.co.uk/my-songs/
 Project-URL: Homepage, https://github.com/kieransimkin/DanceRudiments
 Project-URL: Repository, https://github.com/kieransimkin/DanceRudiments
@@ -17,6 +18,13 @@ Description-Content-Type: text/markdown
 
 # DanceRudiments
 
+[![DanceRudiments logo](https://raw.githubusercontent.com/kieransimkin/DanceRudiments/v0.2.3/docs/branding/logo.png)](https://kieransimkin.co.uk/danceflow/)
+
+By **[Kieran Simkin](https://kieransimkin.co.uk/)** · [DanceFlow ecosystem](https://kieransimkin.co.uk/danceflow/) · [Vector logo and usage guide](docs/branding/README.md).
+
+Deterministic rhythmic position functions with C++, Python, TypeScript/WASM and C# bindings. https://kieransimkin.co.uk/
+
+
 By **[Kieran Simkin — My Songs](https://kieransimkin.co.uk/my-songs/)** · Part of the **DanceFlow** motion workflow.
 
 [Visualizer](#visualizer) · [Language bindings](#language-bindings) · [C++](#c-binding) · [Python](#python-binding) · [C# / .NET](#csharp-binding) · [TypeScript / JavaScript](#typescriptwasm-binding)

{dancerudiments-0.2.0 → dancerudiments-0.2.3}/README.md

@@ -1,5 +1,12 @@
 # DanceRudiments
 
+[![DanceRudiments logo](https://raw.githubusercontent.com/kieransimkin/DanceRudiments/v0.2.3/docs/branding/logo.png)](https://kieransimkin.co.uk/danceflow/)
+
+By **[Kieran Simkin](https://kieransimkin.co.uk/)** · [DanceFlow ecosystem](https://kieransimkin.co.uk/danceflow/) · [Vector logo and usage guide](docs/branding/README.md).
+
+Deterministic rhythmic position functions with C++, Python, TypeScript/WASM and C# bindings. https://kieransimkin.co.uk/
+
+
 By **[Kieran Simkin — My Songs](https://kieransimkin.co.uk/my-songs/)** · Part of the **DanceFlow** motion workflow.
 
 [Visualizer](#visualizer) · [Language bindings](#language-bindings) · [C++](#c-binding) · [Python](#python-binding) · [C# / .NET](#csharp-binding) · [TypeScript / JavaScript](#typescriptwasm-binding)

{dancerudiments-0.2.0 → dancerudiments-0.2.3}/bindings/csharp/DanceRudiments/DanceRudiments.csproj

@@ -2,15 +2,16 @@
   <!-- Kieran Simkin / DanceFlow: https://kieransimkin.co.uk/my-songs/ -->
   <PropertyGroup>
     <TargetFramework>net8.0</TargetFramework>
-    <Version>0.2.0</Version>
+    <Version>0.2.3</Version>
     <PackageId>DanceRudiments</PackageId>
     <Authors>Kieran Simkin</Authors>
-    <Description>C# bindings to the DanceFlow C++ rhythmic motion library. Music: https://kieransimkin.co.uk/my-songs/</Description>
+    <Description>Deterministic rhythmic position functions with native C# bindings. Music: https://kieransimkin.co.uk/my-songs/</Description>
     <PackageProjectUrl>https://kieransimkin.co.uk/my-songs/</PackageProjectUrl>
     <RepositoryUrl>https://github.com/kieransimkin/DanceRudiments</RepositoryUrl>
     <RepositoryType>git</RepositoryType>
     <PackageLicenseExpression>MIT AND BSD-3-Clause AND CC0-1.0 AND CC-BY-4.0</PackageLicenseExpression>
     <PackageReadmeFile>README.md</PackageReadmeFile>
+    <PackageIcon>docs/branding/logo.png</PackageIcon>
     <PackageTags>DanceFlow;animation;music;rhythm;native;CSharp;Amen</PackageTags>
     <Nullable>enable</Nullable>
     <ImplicitUsings>enable</ImplicitUsings>
@@ -28,6 +29,7 @@
   </PropertyGroup>
   <ItemGroup>
     <None Include="../README.md" Pack="true" PackagePath="README.md" />
+    <None Include="../../../docs/branding/*" Pack="true" PackagePath="docs/branding/" />
     <None Include="../../../AUTHORS.md" Pack="true" PackagePath="AUTHORS.md" />
     <None Include="../../../LICENSE" Pack="true" PackagePath="licenses/" />
     <None Include="../../../collections/initial/THIRD_PARTY_NOTICES.md" Pack="true" PackagePath="licenses/" />

{dancerudiments-0.2.0 → dancerudiments-0.2.3}/bindings/csharp/README.md

@@ -1,5 +1,9 @@
 # DanceRudiments for C# / .NET
 
+[![DanceRudiments logo](https://raw.githubusercontent.com/kieransimkin/DanceRudiments/v0.2.2/docs/branding/logo.png)](https://kieransimkin.co.uk/danceflow/)
+
+[DanceFlow](https://kieransimkin.co.uk/danceflow/) · [Kieran Simkin](https://kieransimkin.co.uk/)
+
 By **[Kieran Simkin — My Songs](https://kieransimkin.co.uk/my-songs/)**, part of DanceFlow.
 
 A C# interface to the **original C++ rhythmic movement library**, not a managed

{dancerudiments-0.2.0 → dancerudiments-0.2.3}/conanfile.py

@@ -11,7 +11,7 @@ class DanceRudimentsConan(ConanFile):
     license = "MIT AND BSD-3-Clause AND CC0-1.0 AND CC-BY-4.0"
     author = "Kieran Simkin — https://kieransimkin.co.uk/my-songs/"
     homepage = "https://kieransimkin.co.uk/my-songs/"
-    description = "Rhythmic motion for DanceFlow. Music: https://kieransimkin.co.uk/my-songs/"
+    description = "Deterministic rhythmic position functions for DanceFlow. Music: https://kieransimkin.co.uk/my-songs/"
     settings = "os", "compiler", "build_type", "arch"
     exports_sources = "CMakeLists.txt", "cmake/**", "include/**", "src/**", "LICENSE", "collections/initial/THIRD_PARTY_NOTICES.md", "collections/initial/sources/d3-ease/LICENSE", "README.md", "AUTHORS.md", "docs/**", "examples/bindings/**"
 

dancerudiments-0.2.3/docs/branding/README.md

@@ -0,0 +1,13 @@
+# DanceRudiments visual identity
+
+![DanceRudiments logo](logo.svg)
+
+By [Kieran Simkin](https://kieransimkin.co.uk/), part of [DanceFlow](https://kieransimkin.co.uk/danceflow/).
+
+Music and author website: https://kieransimkin.co.uk/my-songs/
+
+Stepped path and beat nodes: discrete deterministic rhythmic positions.
+
+Original vector artwork, created 8 October 2026. Shared family: 128-unit square, rounded 30-unit frame, 5.5-unit rounded strokes, plum `#171124`, mint `#bff7df`, gold `#f5ce85`. The symbol remains unique without colour. `logo.svg` is the self-contained dark badge; `logo-monochrome.svg` is a transparent dark mark for light surfaces; `logo.png` is the 256px registry/export companion. Prefer SVG for scaling and label tiny marks with the tool name. No external fonts, scripts, remote references, animation or model-generated assets.
+
+Use the files unchanged at a square aspect ratio, with at least 8/128 of their width as clear space. The monochrome mark needs a light background. Do not imply an official association with model providers, React, WordPress or operating-system vendors. Source artwork follows this repository's licence; dependency and third-party notices retain their own terms.

dancerudiments-0.2.3/docs/branding/logo-monochrome.svg

@@ -0,0 +1,6 @@
+<svg xmlns="http://www.w3.org/2000/svg" width="128" height="128" viewBox="0 0 128 128" role="img" aria-labelledby="title desc">
+  <title id="title">DanceRudiments logo</title>
+  <desc id="desc">Stepped path and beat nodes: discrete deterministic rhythmic positions. Original DanceFlow family mark by Kieran Simkin.</desc>
+  
+  <g fill="none" stroke="#171124" stroke-width="5.5" stroke-linecap="round" stroke-linejoin="round"><path d="M30 88V68h22V46h22V30h20"/><circle cx="30" cy="88" r="6" fill="#171124" stroke="none"/><circle cx="52" cy="68" r="6" fill="#171124" stroke="none"/><circle cx="74" cy="46" r="6" fill="#171124" stroke="none"/><path d="M76 88h20M88 78v20" stroke="#171124"/></g>
+</svg>

dancerudiments-0.2.3/docs/branding/logo.svg

@@ -0,0 +1,6 @@
+<svg xmlns="http://www.w3.org/2000/svg" width="128" height="128" viewBox="0 0 128 128" role="img" aria-labelledby="title desc">
+  <title id="title">DanceRudiments logo</title>
+  <desc id="desc">Stepped path and beat nodes: discrete deterministic rhythmic positions. Original DanceFlow family mark by Kieran Simkin.</desc>
+  <rect x="3" y="3" width="122" height="122" rx="30" fill="#171124"/><rect x="8" y="8" width="112" height="112" rx="25" fill="none" stroke="#f5ce85" stroke-opacity=".35" stroke-width="1.5"/>
+  <g fill="none" stroke="#bff7df" stroke-width="5.5" stroke-linecap="round" stroke-linejoin="round"><path d="M30 88V68h22V46h22V30h20"/><circle cx="30" cy="88" r="6" fill="#f5ce85" stroke="none"/><circle cx="52" cy="68" r="6" fill="#f5ce85" stroke="none"/><circle cx="74" cy="46" r="6" fill="#f5ce85" stroke="none"/><path d="M76 88h20M88 78v20" stroke="#f5ce85"/></g>
+</svg>

{dancerudiments-0.2.0 → dancerudiments-0.2.3}/docs/csharp.md

@@ -224,7 +224,11 @@ After successful native, managed and installed-package tests:
 - **NuGet.org** receives `DanceRudiments.<version>.nupkg` plus managed symbols. The
   workflow downloads the indexed package and compares payload members, allowing
   NuGet.org's added repository signature rather than assuming ZIP bytes remain
-  identical. Indexing can take time; an upload is not called verified prematurely.
+  identical. Indexing can take several minutes; verification waits for up to about
+  15 minutes of transient CDN/indexing responses before failing. A payload mismatch
+  still fails immediately. If NuGet indexing outlives the release job, run the
+  manual **Verify NuGet publication** workflow for that already-published version;
+  it verifies the release asset without attempting another upload.
 - **GitHub Packages** receives the same nupkg under
   `https://nuget.pkg.github.com/kieransimkin/index.json`. `GITHUB_TOKEN` with
   `packages: write` authenticates; `RepositoryUrl` links the package to this repo.

{dancerudiments-0.2.0 → dancerudiments-0.2.3}/harness/index.html

@@ -1,4 +1,4 @@
 [diffend] Oversized file quarantined before diffing.
-name: dancerudiments-0.2.0/harness/index.html
+name: dancerudiments-0.2.3/harness/index.html
 size: 36837222 bytes
 sha256: 8b85f3862a4dd3b131eaf5a9225dc421959b1707f7e272c3a22bad10c104173f

{dancerudiments-0.2.0 → dancerudiments-0.2.3}/package-lock.json

@@ -1,12 +1,12 @@
 {
   "name": "@kieransimkin/dance-rudiments",
-  "version": "0.2.0",
+  "version": "0.2.3",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "@kieransimkin/dance-rudiments",
-      "version": "0.2.0",
+      "version": "0.2.3",
       "devDependencies": {
         "typescript": "^5.9.0"
       },

{dancerudiments-0.2.0 → dancerudiments-0.2.3}/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@kieransimkin/dance-rudiments",
-  "version": "0.2.0",
-  "description": "C++/WASM rhythmic motion for DanceFlow, with TypeScript bindings. Music: https://kieransimkin.co.uk/my-songs/",
+  "version": "0.2.3",
+  "description": "Deterministic rhythmic position functions with C++, Python, TypeScript/WASM and C# bindings. https://kieransimkin.co.uk/my-songs/",
   "license": "MIT AND BSD-3-Clause AND CC0-1.0 AND CC-BY-4.0",
   "type": "module",
   "main": "dist/typescript/index.js",
@@ -44,7 +44,8 @@
     "examples/bindings/",
     "docs/troubleshooting.md",
     "docs/csharp.md",
-    "bindings/csharp/README.md"
+    "bindings/csharp/README.md",
+    "docs/branding/"
   ],
   "repository": {
     "type": "git",

{dancerudiments-0.2.0 → dancerudiments-0.2.3}/packaging/CPP_BINARY_README.md

@@ -1,5 +1,9 @@
 # DanceRudiments C++ static library
 
+[![DanceRudiments logo](https://raw.githubusercontent.com/kieransimkin/DanceRudiments/v0.2.2/docs/branding/logo.png)](https://kieransimkin.co.uk/danceflow/)
+
+[DanceFlow](https://kieransimkin.co.uk/danceflow/) · [Kieran Simkin](https://kieransimkin.co.uk/)
+
 By **[Kieran Simkin — My Songs](https://kieransimkin.co.uk/my-songs/)**.
 
 The illustrated multi-language guide and runnable examples are installed under

{dancerudiments-0.2.0 → dancerudiments-0.2.3}/pyproject.toml

@@ -4,8 +4,8 @@ build-backend = "scikit_build_core.build"
 
 [project]
 name = "dancerudiments"
-version = "0.2.0"
-description = "C++ rhythmic motion with Python bindings for DanceFlow. Music: https://kieransimkin.co.uk/my-songs/"
+version = "0.2.3"
+description = "Deterministic rhythmic position functions with C++, Python, TypeScript/WASM and C# bindings. https://kieransimkin.co.uk/my-songs/"
 readme = "README.md"
 license = "MIT AND BSD-3-Clause AND CC0-1.0 AND CC-BY-4.0"
 requires-python = ">=3.9"
@@ -21,6 +21,7 @@ classifiers = [
 dancerudiments-compile = "dancerudiments_authoring.cli:main"
 
 [project.urls]
+"DanceFlow ecosystem" = "https://kieransimkin.co.uk/danceflow/"
 "Music / My Songs" = "https://kieransimkin.co.uk/my-songs/"
 Homepage = "https://github.com/kieransimkin/DanceRudiments"
 Repository = "https://github.com/kieransimkin/DanceRudiments"
@@ -29,7 +30,7 @@ Issues = "https://github.com/kieransimkin/DanceRudiments/issues"
 [tool.scikit-build]
 cmake.args = ["-DDANCERUDIMENTS_BUILD_PYTHON=ON", "-DDANCERUDIMENTS_BUILD_TESTS=OFF"]
 wheel.packages = ["python/dancerudiments_authoring"]
-sdist.include = ["CMakeLists.txt", "include/**", "src/**", "bindings/python/**", "python/**", "tools/**", "collections/**", "harness/initial/**", "harness/initial-collection.html", ".gitattributes", "examples/patterns/**", "docs/authoring.md", "docs/default-library.md", "docs/dancefloor.md", "docs/release-demo.md", "cmake/**", "tests/**", "README.md", "AUTHORS.md", "packaging/**", "docs/images/**", "docs/bindings.md", "docs/troubleshooting.md", "examples/bindings/**", "bindings/csharp/**", "docs/csharp.md"]
+sdist.include = ["CMakeLists.txt", "include/**", "src/**", "bindings/python/**", "python/**", "tools/**", "collections/**", "harness/initial/**", "harness/initial-collection.html", ".gitattributes", "examples/patterns/**", "docs/authoring.md", "docs/default-library.md", "docs/dancefloor.md", "docs/release-demo.md", "cmake/**", "tests/**", "README.md", "AUTHORS.md", "packaging/**", "docs/images/**", "docs/branding/**", "docs/bindings.md", "docs/troubleshooting.md", "examples/bindings/**", "bindings/csharp/**", "docs/csharp.md"]
 
 # Do not ship hand-off patches, credentials, or local example output in sdists.
 sdist.exclude = ["*.patch", "npm_recovery_codes.txt", "examples/bindings/typescript/dist/**", "bindings/csharp/**/bin/**", "bindings/csharp/**/obj/**", "tests/csharp/**/bin/**", "tests/csharp/**/obj/**", "examples/bindings/csharp/bin/**", "examples/bindings/csharp/obj/**"]

dancerudiments-0.2.3/tests/csharp/packaging/test_publish_verification.py

@@ -0,0 +1,33 @@
+"""Regression checks for delayed NuGet.org indexing."""
+import inspect
+import importlib.util
+from pathlib import Path
+import unittest
+
+ROOT = Path(__file__).resolve().parents[3]
+spec = importlib.util.spec_from_file_location("csharp_package", ROOT / "tools/csharp_package.py")
+package = importlib.util.module_from_spec(spec)
+spec.loader.exec_module(package)
+
+
+class PublishVerificationTests(unittest.TestCase):
+    def test_default_indexing_window_is_about_fifteen_minutes(self):
+        signature = inspect.signature(package.verify_published)
+        self.assertEqual(signature.parameters["attempts"].default, 60)
+        self.assertEqual(signature.parameters["delay_seconds"].default, 15)
+
+    def test_invalid_retry_configuration_is_rejected_before_package_access(self):
+        with self.assertRaises(ValueError):
+            package.verify_published(Path("missing.nupkg"), "nuget.org", attempts=0)
+        with self.assertRaises(ValueError):
+            package.verify_published(Path("missing.nupkg"), "nuget.org", delay_seconds=-1)
+
+    def test_manual_verification_accepts_an_explicit_release_version(self):
+        with self.assertRaises(FileNotFoundError):
+            package.verify_published(Path("missing.nupkg"), "nuget.org", "0.2.0", attempts=1, delay_seconds=0)
+        with self.assertRaises(ValueError):
+            package.verify_published(Path("missing.nupkg"), "nuget.org", "v0.2", attempts=1, delay_seconds=0)
+
+
+if __name__ == "__main__":
+    unittest.main()

{dancerudiments-0.2.0 → dancerudiments-0.2.3}/tests/python/test_package_docs.py

@@ -26,6 +26,7 @@ class PackageDocumentationTests(unittest.TestCase):
             'package/docs/bindings.md': link,
             'package/examples/bindings/python/quickstart.py': b'# test example',
             **{'package/docs/images/'+name: b'PNG fixture' for name in check.IMAGES},
+            **{'package/docs/branding/'+name: link for name in check.BRANDING},
             'package/package.json': json.dumps({'homepage':check.MUSIC_URL}).encode(),
         }
 
@@ -51,6 +52,14 @@ class PackageDocumentationTests(unittest.TestCase):
         files=self.fixture();del files['package/examples/bindings/python/quickstart.py']
         with self.assertRaisesRegex(ValueError,'runnable binding examples'): self.check_zip(files)
 
+    def test_missing_logo_rejected(self):
+        files=self.fixture();del files['package/docs/branding/logo.svg']
+        with self.assertRaisesRegex(ValueError,'missing docs/branding/logo.svg'): self.check_zip(files)
+
+    def test_branding_readme_requires_canonical_author_link(self):
+        files=self.fixture();files['package/docs/branding/README.md']=b'https://kieransimkin.co.uk/'
+        with self.assertRaisesRegex(ValueError,'missing author music link'): self.check_zip(files)
+
     def test_wheel_metadata_required(self):
         with self.assertRaisesRegex(ValueError,'distribution metadata'): self.check_zip(self.fixture(),'.whl')
 

{dancerudiments-0.2.0 → dancerudiments-0.2.3}/tools/check_package_docs.py

@@ -14,6 +14,7 @@ import zipfile
 MUSIC_URL = 'https://kieransimkin.co.uk/my-songs/'
 ROOT = Path(__file__).resolve().parents[1]
 IMAGES = ('visualizer-amen-desktop.png', 'visualizer-midi-score.png', 'visualizer-mobile.png')
+BRANDING = ('logo.svg', 'logo-monochrome.svg', 'logo.png', 'README.md')
 
 
 def require_link(text: str, label: str) -> None:
@@ -35,6 +36,10 @@ def check_source(root: Path = ROOT) -> None:
     for image in IMAGES:
         if not (root / 'docs/images' / image).is_file():
             raise ValueError(f'Missing README screenshot: {image}')
+    for filename in BRANDING:
+        if not (root / 'docs/branding' / filename).is_file():
+            raise ValueError(f'Missing branding file: {filename}')
+    require_link((root / 'docs/branding/README.md').read_text(encoding='utf-8'), 'docs/branding/README.md')
     for family in ('atlas', 'continuum', 'club', 'dancefloor'):
         require_link((root / f'tools/build_{family}_collection.py').read_text(encoding='utf-8'), family+' README generator')
     print('Source: author metadata, first-party READMEs and screenshots verified')
@@ -59,7 +64,8 @@ def check_archive(path: Path) -> None:
         raise ValueError(f'Unsupported archive: {path}')
     if not any(n.endswith('/README.md') or n == 'README.md' for n in names):
         raise ValueError(f'{path}: no packaged README')
-    for suffix in ('AUTHORS.md', 'docs/bindings.md', *('docs/images/'+n for n in IMAGES)):
+    for suffix in ('AUTHORS.md', 'docs/bindings.md', *('docs/images/'+n for n in IMAGES),
+                   *('docs/branding/'+n for n in BRANDING)):
         if not any(n == suffix or n.endswith('/'+suffix) for n in names):
             raise ValueError(f'{path}: missing {suffix}')
     if not any(n.endswith('examples/bindings/python/quickstart.py') for n in names):

{dancerudiments-0.2.0 → dancerudiments-0.2.3}/tools/csharp_package.py

@@ -211,12 +211,17 @@ def pack(folder: Path, output: Path, commit: str) -> None:
     (output/'SHA256SUMS-csharp.txt').write_text(''.join(sha256(p.read_bytes()).hexdigest()+'  '+p.name+'\n' for p in files),encoding='utf-8')
 
 
-def verify_published(path: Path, feed: str, attempts: int = 12) -> None:
+def verify_published(path: Path, feed: str, published_version: str | None = None, attempts: int = 60, delay_seconds: int = 15) -> None:
     """NuGet.org adds a repository signature: compare ZIP payloads, not raw ZIP bytes.
     GitHub feed verification uses an isolated dotnet restore in the workflow.
     """
     if feed!='nuget.org':raise ValueError('Only the public NuGet.org feed is supported here')
-    url=f'https://api.nuget.org/v3-flatcontainer/dancerudiments/{version()}/dancerudiments.{version()}.nupkg'
+    if attempts < 1 or delay_seconds < 0:
+        raise ValueError('Verification attempts must be positive and delay must be non-negative')
+    published_version = published_version or version()
+    if not re.fullmatch(r'\d+\.\d+\.\d+', published_version):
+        raise ValueError('Published version must be MAJOR.MINOR.PATCH')
+    url=f'https://api.nuget.org/v3-flatcontainer/dancerudiments/{published_version}/dancerudiments.{published_version}.nupkg'
     with zipfile.ZipFile(path) as local:
         expected={n:sha256(local.read(n)).digest() for n in local.namelist() if n!='.signature.p7s'}
     last=None
@@ -230,8 +235,9 @@ def verify_published(path: Path, feed: str, attempts: int = 12) -> None:
             print('NuGet.org download matches every non-signature package member');return
         except (urllib.error.URLError,zipfile.BadZipFile) as error:
             last=error
-            if attempt+1<attempts:time.sleep(15)
-    raise RuntimeError('Upload/download verification did not complete: '+str(last))
+            if attempt+1<attempts:time.sleep(delay_seconds)
+    waited=max(0, attempts-1)*delay_seconds
+    raise RuntimeError(f'NuGet.org accepted the upload but indexing did not complete after about {waited} seconds: {last}')
 
 
 def main() -> None: