deancochran-ftms 0.1.0a1__tar.gz

deancochran_ftms-0.1.0a1/.gitignore

@@ -0,0 +1,8 @@
+/build/
+/dist/
+/.venv/
+/.mypy_cache/
+/.pytest_cache/
+/.ruff_cache/
+__pycache__/
+*.py[cod]

deancochran_ftms-0.1.0a1/CHANGELOG.md

@@ -0,0 +1,24 @@
+# Changelog
+
+Python distribution versions are independent of FTMS specification, shared
+conformance corpus, and other language-package versions.
+
+## 0.1.0a1
+
+Initial partial alpha; APIs may change before a stable release.
+
+- Pure synchronous Python with no runtime dependencies, Python >=3.11,
+  immutable raw models, and inline typing.
+- Bidirectional raw Features, all five supported ranges, structural range
+  inspection, and normalized Feature/range views.
+- Bidirectional raw codecs for all 21 Control Point requests and responses.
+- Bidirectional measurements for treadmill, cross trainer, step climber,
+  stair climber, rower, and indoor bike, with normalized metric views.
+- Bidirectional Training Status and Machine Status, normalized views, and
+  preservation of malformed/unknown decoding evidence.
+- Explicit, independent range, command, and measurement wire-format options.
+- Canonical shared fixture, structural matrix, and isolated package checks.
+
+Not included: static capability evaluation, a public human-unit control encoder,
+Bluetooth transport, device lifecycle, retries, execution permission, or safety
+policy. Host tests are not device interoperability or Bluetooth qualification.

deancochran_ftms-0.1.0a1/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 Dean Cochran
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

deancochran_ftms-0.1.0a1/PKG-INFO

@@ -0,0 +1,217 @@
+Metadata-Version: 2.5
+Name: deancochran-ftms
+Version: 0.1.0a1
+Summary: Pure Python FTMS feature, range, control, measurement, and status codecs (alpha)
+Project-URL: Source, https://github.com/deancochran/ftms
+Project-URL: Issues, https://github.com/deancochran/ftms/issues
+Project-URL: Documentation, https://github.com/deancochran/ftms/blob/python-v0.1.0a1/packages/python/README.md
+Author: Dean Cochran
+License-Expression: MIT
+License-File: LICENSE
+Classifier: Development Status :: 2 - Pre-Alpha
+Classifier: Programming Language :: Python :: 3
+Classifier: Programming Language :: Python :: 3 :: Only
+Classifier: Programming Language :: Python :: 3.11
+Classifier: Programming Language :: Python :: 3.14
+Classifier: Typing :: Typed
+Requires-Python: >=3.11
+Description-Content-Type: text/markdown
+
+# deancochran-ftms
+
+`deancochran-ftms` is a pure, synchronous Python protocol package.  This
+**0.1.0a1 is a partial alpha release with an evolving API**: it implements FTMS Features, all five supported ranges (raw and normalized), structural range inspection, raw Control Point requests/responses, all six raw measurement families, and bidirectional Machine/Training Status. It has no BLE, lifecycle, logging, or capability APIs. It is not a complete port of every API in the TypeScript/C packages.
+
+## Install and compatibility
+
+The distribution name is `deancochran-ftms`; import `deancochran_ftms`. It has
+no runtime dependencies and declares Python >=3.11. Python 3.11 and 3.14 are
+tested by the package verification commands in this milestone.
+
+Install this explicitly selected prerelease from PyPI:
+
+```sh
+python -m pip install 'deancochran-ftms==0.1.0a1'
+```
+
+```python
+from deancochran_ftms import decode_features, encode_features_raw, FeaturesRaw
+
+wire = encode_features_raw(FeaturesRaw(machine=0, target=1 << 3))
+result = decode_features(wire)
+assert result.ok and result.value is not None
+assert result.value.power_target_setting_supported
+```
+
+`decode_features_raw()` and `encode_features_raw()` are strict wire codecs and
+raise `RawCodecError` for wrong byte inputs, non-8-byte payloads, or invalid raw
+words. `decode_features()` instead returns an immutable `FeatureDecodeResult`:
+wrong lengths produce a `FeatureDiagnostic` with `code="length"`. Feature
+payloads are exactly eight bytes; trailing bytes are rejected, matching the
+canonical TypeScript Feature behavior. `bytes`, `bytearray`, and contiguous
+one-dimensional byte `memoryview` inputs are accepted and copied as immutable
+evidence. Raw words retain all unknown/reserved bits. Integer raw words must be
+plain `int` values from 0 through 2^32-1; `bool` is rejected.
+
+The normalized `Features` model exposes the canonical v1 feature names in
+snake_case. Its three convenience properties (`supports_erg`, `supports_sim`,
+and `supports_resistance`) correspond to the v1 compatibility names.
+
+## Ranges and inspection
+
+`decode_supported_range_raw(data, kind, options=None)` and
+`encode_supported_range_raw(value, options=None)` operate on `SupportedRangeRaw`.
+Kinds are `speed`, `inclination`, `resistance`, `heartRate`, and `power`.
+Values retain integer numerators, `scale_divisor`, and units; the normalized
+`decode_supported_range()` divides these values into physical units. All three
+raise `RawCodecError` for invalid arguments, lengths, or range values.
+
+Resistance ranges default to three unsigned whole-level bytes. Select the
+six-byte signed-tenths alternative explicitly with
+`RangeFormatOptions(resistance_format="signed16Tenths")`; this option is invalid
+for other range kinds. Range units do not imply resistance percentages.
+
+`inspect_supported_range_raw()` returns the shared inspection report shape:
+selected profile, actual/expected lengths, status, selected value, and ordered
+structural candidates. Malformed wire lengths/values appear as candidate statuses;
+invalid caller kinds/options still raise. Report values use the canonical numeric
+unit identifiers (0 speed, 1 inclination, 2 resistance, 3 heart rate, 4 power).
+The returned dictionary is caller-owned; selected and candidate values do not
+alias. A valid alternative candidate never selects a profile automatically or
+establishes physical units on a particular machine.
+
+## Control Point requests and responses
+
+```python
+from deancochran_ftms import (
+    ControlRequestRaw,
+    decode_control_request_raw,
+    encode_control_request_raw,
+    decode_control_response_raw,
+)
+
+# Set Target Power: opcode 0x05, raw operand in watts. This does not send anything.
+wire = encode_control_request_raw(ControlRequestRaw(0x05, (75,)))
+assert wire == bytes.fromhex("05 4b 00")
+assert decode_control_request_raw(wire).operands == (75,)
+response = decode_control_response_raw(bytes.fromhex("80 05 01"))
+assert response.request_opcode == 5 and response.result_code == 1
+```
+
+All 21 request opcodes support raw encode/decode. Operands must be tuples of plain
+integers in wire units, not arbitrary human-unit floats. For example simulation
+operands are wind speed in thousandths of m/s, grade in hundredths of percent,
+rolling coefficient in ten-thousandths, and wind coefficient in hundredths kg/m.
+There is no public normalized control encoder in this milestone; the legacy
+codec-v1 test adapter translates its normalized fixtures to raw operands.
+
+`ControlFormatOptions(resistance_format="uint8Tenths")` explicitly selects the
+alternative resistance command width; the default is `signed16Tenths`. Control
+options are independent of range options and do not change other opcodes.
+
+`ControlResponseRaw` preserves request/result codes plus integer diagnostic flags
+`unknown_request`, `unknown_result`, and `unexpected_parameters`. Its `parameter`
+is 0 for none or 1 for successful spin-down speeds (`low`/`high` in hundredths
+km/h). `encode_control_response_raw()` accepts only canonical response forms;
+decodable malformed/unknown evidence is not necessarily encodable. Invalid wire
+headers/lengths and invalid encoder arguments raise `RawCodecError`.
+
+No codec acquires control, sends bytes, retries commands, or authorizes execution.
+
+## Development verification
+
+From `packages/python/` in a full repository checkout (with `uv` installed):
+
+```sh
+uv run --locked --group dev python scripts/verify.py
+```
+
+That aggregate command runs both supported test interpreters, quality checks,
+all codec corpus runners, the structural matrix, and isolated installation.
+Individual checks are also available:
+
+```sh
+uv run --locked --group dev pytest
+uv run --locked --group dev ruff format --check .
+uv run --locked --group dev ruff check .
+uv run --locked --group dev mypy src tests scripts
+uv run --locked --group dev python scripts/run_features_conformance.py
+uv run --locked --group dev python scripts/run_measurement_status_conformance.py
+uv run --locked --group dev python scripts/run_measurement_matrix.py
+uv run --locked --group dev python scripts/verify_package.py
+```
+
+The conformance test reads `../../shared/conformance/v1` and
+`../../shared/conformance/values/v1` directly; it never copies fixtures.
+It executes all codec-v1 categories and the additive values, controls,
+inspection, compatibility, measurements and statuses contracts directly from
+shared fixtures. Capability interpretation is not implemented or claimed.
+`scripts/verify_package.py` builds both artifacts, rebuilds from
+an extracted sdist outside this checkout, installs the wheel non-editably into
+a fresh environment, and writes its distinct machine-readable artifact hashes,
+interpreter, and per-step install/rebuild evidence to ignored
+`build/package-verification-report.json`. Conformance identity and case evidence
+are separately recorded in `build/verification-report.json` and
+`build/measurement-status-verification-report.json`. The structural matrix
+records 181,760 layouts in both directions, 46 sentinel cases, 47 RFU cases,
+and 315 incomplete prefixes in `build/measurement-matrix-verification-report.json`.
+These generated cases are not separate pytest test registrations. The sdist
+intentionally contains no shared corpus dependency: installing or building the
+package needs no checkout, but running the conformance suite does. The package
+check asserts that rebuilding the extracted sdist produces an identical wheel;
+it does not assert byte-for-byte reproducibility of the sdist archive itself.
+
+This is host protocol regression evidence only, not live control execution, device
+interoperability or Bluetooth qualification. Public availability is separate
+from these host verification results.
+
+## Coverage and limits
+
+Version `0.1.0a1` is an **alpha with partial API coverage**. Features, ranges, controls,
+all six measurement families and both status characteristics have raw codecs.
+Normalized measurement/status projections and normalized range decoding are
+available. Capability evaluation remains outstanding. Range, control and
+measurement format choices are independent and explicit; no API infers them
+from packet length, feature declarations or BLE state. Host fixtures establish
+codec regression evidence, not live-device compatibility or qualification.
+
+## Measurements and statuses
+
+`MeasurementRaw` is immutable raw evidence: `flags`, 30 wire-unit `values`, and
+`present`/`unavailable` bit masks retain field-level availability. Use
+`decode_measurement_raw(data, kind, options=None)` and
+`encode_measurement_raw(value, options=None)`. Kinds are 0 Treadmill, 1 Cross
+Trainer, 2 Step Climber, 3 Stair Climber, 4 Rower, and 5 Indoor Bike. Decoders
+retain More Data, Cross Trainer backward direction, RFU, truncation, and trailing
+byte diagnostics. Encoders validate the wire flags, presence/unavailable masks
+and selected values; auxiliary decode diagnostics do not themselves authorize
+or prevent encoding, matching the shared raw contract. Compatibility formats
+are explicit only: `MeasurementFormatOptions(resistance_format="signed16Tenths")`
+and `treadmill_pace_format="uint8Legacy"`; they are independent selections and
+are never inferred from packet length, features, or machine identity.
+
+```python
+from deancochran_ftms import MeasurementRaw, decode_measurement_raw, encode_measurement_raw
+
+raw = MeasurementRaw(5, 0, 1, 0, (1234,) + (0,) * 29)  # speed: 12.34 km/h
+assert encode_measurement_raw(raw) == bytes.fromhex("00 00 d2 04")
+assert decode_measurement_raw(bytes.fromhex("00 00 d2 04"), 5).values[0] == 1234
+```
+
+Machine Status uses `MachineStatusRaw` with raw opcode/action and optional
+`(control_opcode, operands)` parameter tuple. Training Status uses
+`TrainingStatusRaw`; text is UTF-8 `bytes`, so malformed UTF-8 is retained and
+diagnosed by `invalid_utf8` rather than silently replaced. The corresponding
+`decode_*_status_raw` APIs preserve partial/trailing/reserved evidence; encoders
+accept only canonical values and raise `RawCodecError` on invalid widths, flags,
+UTF-8, sentinels, or diagnostics. Raw units/scales remain FTMS wire units.
+
+Host tests cover Python 3.11 and 3.14 plus shared literal measurement/status
+corpora. This finite evidence is not BLE, real-device, PTS, or Bluetooth
+qualification evidence.
+
+`normalize_measurement(raw, options=None)` provides the immutable-raw-to-codec-v1
+normalized metric projection (for example raw speed / 360 to m/s, cadence / 2,
+and unavailable or incomplete fields as `None`). `normalize_machine_status()` and
+`normalize_training_status()` provide the corresponding normalized status views;
+raw codecs remain the source of wire evidence.

deancochran_ftms-0.1.0a1/README.md

@@ -0,0 +1,198 @@
+# deancochran-ftms
+
+`deancochran-ftms` is a pure, synchronous Python protocol package.  This
+**0.1.0a1 is a partial alpha release with an evolving API**: it implements FTMS Features, all five supported ranges (raw and normalized), structural range inspection, raw Control Point requests/responses, all six raw measurement families, and bidirectional Machine/Training Status. It has no BLE, lifecycle, logging, or capability APIs. It is not a complete port of every API in the TypeScript/C packages.
+
+## Install and compatibility
+
+The distribution name is `deancochran-ftms`; import `deancochran_ftms`. It has
+no runtime dependencies and declares Python >=3.11. Python 3.11 and 3.14 are
+tested by the package verification commands in this milestone.
+
+Install this explicitly selected prerelease from PyPI:
+
+```sh
+python -m pip install 'deancochran-ftms==0.1.0a1'
+```
+
+```python
+from deancochran_ftms import decode_features, encode_features_raw, FeaturesRaw
+
+wire = encode_features_raw(FeaturesRaw(machine=0, target=1 << 3))
+result = decode_features(wire)
+assert result.ok and result.value is not None
+assert result.value.power_target_setting_supported
+```
+
+`decode_features_raw()` and `encode_features_raw()` are strict wire codecs and
+raise `RawCodecError` for wrong byte inputs, non-8-byte payloads, or invalid raw
+words. `decode_features()` instead returns an immutable `FeatureDecodeResult`:
+wrong lengths produce a `FeatureDiagnostic` with `code="length"`. Feature
+payloads are exactly eight bytes; trailing bytes are rejected, matching the
+canonical TypeScript Feature behavior. `bytes`, `bytearray`, and contiguous
+one-dimensional byte `memoryview` inputs are accepted and copied as immutable
+evidence. Raw words retain all unknown/reserved bits. Integer raw words must be
+plain `int` values from 0 through 2^32-1; `bool` is rejected.
+
+The normalized `Features` model exposes the canonical v1 feature names in
+snake_case. Its three convenience properties (`supports_erg`, `supports_sim`,
+and `supports_resistance`) correspond to the v1 compatibility names.
+
+## Ranges and inspection
+
+`decode_supported_range_raw(data, kind, options=None)` and
+`encode_supported_range_raw(value, options=None)` operate on `SupportedRangeRaw`.
+Kinds are `speed`, `inclination`, `resistance`, `heartRate`, and `power`.
+Values retain integer numerators, `scale_divisor`, and units; the normalized
+`decode_supported_range()` divides these values into physical units. All three
+raise `RawCodecError` for invalid arguments, lengths, or range values.
+
+Resistance ranges default to three unsigned whole-level bytes. Select the
+six-byte signed-tenths alternative explicitly with
+`RangeFormatOptions(resistance_format="signed16Tenths")`; this option is invalid
+for other range kinds. Range units do not imply resistance percentages.
+
+`inspect_supported_range_raw()` returns the shared inspection report shape:
+selected profile, actual/expected lengths, status, selected value, and ordered
+structural candidates. Malformed wire lengths/values appear as candidate statuses;
+invalid caller kinds/options still raise. Report values use the canonical numeric
+unit identifiers (0 speed, 1 inclination, 2 resistance, 3 heart rate, 4 power).
+The returned dictionary is caller-owned; selected and candidate values do not
+alias. A valid alternative candidate never selects a profile automatically or
+establishes physical units on a particular machine.
+
+## Control Point requests and responses
+
+```python
+from deancochran_ftms import (
+    ControlRequestRaw,
+    decode_control_request_raw,
+    encode_control_request_raw,
+    decode_control_response_raw,
+)
+
+# Set Target Power: opcode 0x05, raw operand in watts. This does not send anything.
+wire = encode_control_request_raw(ControlRequestRaw(0x05, (75,)))
+assert wire == bytes.fromhex("05 4b 00")
+assert decode_control_request_raw(wire).operands == (75,)
+response = decode_control_response_raw(bytes.fromhex("80 05 01"))
+assert response.request_opcode == 5 and response.result_code == 1
+```
+
+All 21 request opcodes support raw encode/decode. Operands must be tuples of plain
+integers in wire units, not arbitrary human-unit floats. For example simulation
+operands are wind speed in thousandths of m/s, grade in hundredths of percent,
+rolling coefficient in ten-thousandths, and wind coefficient in hundredths kg/m.
+There is no public normalized control encoder in this milestone; the legacy
+codec-v1 test adapter translates its normalized fixtures to raw operands.
+
+`ControlFormatOptions(resistance_format="uint8Tenths")` explicitly selects the
+alternative resistance command width; the default is `signed16Tenths`. Control
+options are independent of range options and do not change other opcodes.
+
+`ControlResponseRaw` preserves request/result codes plus integer diagnostic flags
+`unknown_request`, `unknown_result`, and `unexpected_parameters`. Its `parameter`
+is 0 for none or 1 for successful spin-down speeds (`low`/`high` in hundredths
+km/h). `encode_control_response_raw()` accepts only canonical response forms;
+decodable malformed/unknown evidence is not necessarily encodable. Invalid wire
+headers/lengths and invalid encoder arguments raise `RawCodecError`.
+
+No codec acquires control, sends bytes, retries commands, or authorizes execution.
+
+## Development verification
+
+From `packages/python/` in a full repository checkout (with `uv` installed):
+
+```sh
+uv run --locked --group dev python scripts/verify.py
+```
+
+That aggregate command runs both supported test interpreters, quality checks,
+all codec corpus runners, the structural matrix, and isolated installation.
+Individual checks are also available:
+
+```sh
+uv run --locked --group dev pytest
+uv run --locked --group dev ruff format --check .
+uv run --locked --group dev ruff check .
+uv run --locked --group dev mypy src tests scripts
+uv run --locked --group dev python scripts/run_features_conformance.py
+uv run --locked --group dev python scripts/run_measurement_status_conformance.py
+uv run --locked --group dev python scripts/run_measurement_matrix.py
+uv run --locked --group dev python scripts/verify_package.py
+```
+
+The conformance test reads `../../shared/conformance/v1` and
+`../../shared/conformance/values/v1` directly; it never copies fixtures.
+It executes all codec-v1 categories and the additive values, controls,
+inspection, compatibility, measurements and statuses contracts directly from
+shared fixtures. Capability interpretation is not implemented or claimed.
+`scripts/verify_package.py` builds both artifacts, rebuilds from
+an extracted sdist outside this checkout, installs the wheel non-editably into
+a fresh environment, and writes its distinct machine-readable artifact hashes,
+interpreter, and per-step install/rebuild evidence to ignored
+`build/package-verification-report.json`. Conformance identity and case evidence
+are separately recorded in `build/verification-report.json` and
+`build/measurement-status-verification-report.json`. The structural matrix
+records 181,760 layouts in both directions, 46 sentinel cases, 47 RFU cases,
+and 315 incomplete prefixes in `build/measurement-matrix-verification-report.json`.
+These generated cases are not separate pytest test registrations. The sdist
+intentionally contains no shared corpus dependency: installing or building the
+package needs no checkout, but running the conformance suite does. The package
+check asserts that rebuilding the extracted sdist produces an identical wheel;
+it does not assert byte-for-byte reproducibility of the sdist archive itself.
+
+This is host protocol regression evidence only, not live control execution, device
+interoperability or Bluetooth qualification. Public availability is separate
+from these host verification results.
+
+## Coverage and limits
+
+Version `0.1.0a1` is an **alpha with partial API coverage**. Features, ranges, controls,
+all six measurement families and both status characteristics have raw codecs.
+Normalized measurement/status projections and normalized range decoding are
+available. Capability evaluation remains outstanding. Range, control and
+measurement format choices are independent and explicit; no API infers them
+from packet length, feature declarations or BLE state. Host fixtures establish
+codec regression evidence, not live-device compatibility or qualification.
+
+## Measurements and statuses
+
+`MeasurementRaw` is immutable raw evidence: `flags`, 30 wire-unit `values`, and
+`present`/`unavailable` bit masks retain field-level availability. Use
+`decode_measurement_raw(data, kind, options=None)` and
+`encode_measurement_raw(value, options=None)`. Kinds are 0 Treadmill, 1 Cross
+Trainer, 2 Step Climber, 3 Stair Climber, 4 Rower, and 5 Indoor Bike. Decoders
+retain More Data, Cross Trainer backward direction, RFU, truncation, and trailing
+byte diagnostics. Encoders validate the wire flags, presence/unavailable masks
+and selected values; auxiliary decode diagnostics do not themselves authorize
+or prevent encoding, matching the shared raw contract. Compatibility formats
+are explicit only: `MeasurementFormatOptions(resistance_format="signed16Tenths")`
+and `treadmill_pace_format="uint8Legacy"`; they are independent selections and
+are never inferred from packet length, features, or machine identity.
+
+```python
+from deancochran_ftms import MeasurementRaw, decode_measurement_raw, encode_measurement_raw
+
+raw = MeasurementRaw(5, 0, 1, 0, (1234,) + (0,) * 29)  # speed: 12.34 km/h
+assert encode_measurement_raw(raw) == bytes.fromhex("00 00 d2 04")
+assert decode_measurement_raw(bytes.fromhex("00 00 d2 04"), 5).values[0] == 1234
+```
+
+Machine Status uses `MachineStatusRaw` with raw opcode/action and optional
+`(control_opcode, operands)` parameter tuple. Training Status uses
+`TrainingStatusRaw`; text is UTF-8 `bytes`, so malformed UTF-8 is retained and
+diagnosed by `invalid_utf8` rather than silently replaced. The corresponding
+`decode_*_status_raw` APIs preserve partial/trailing/reserved evidence; encoders
+accept only canonical values and raise `RawCodecError` on invalid widths, flags,
+UTF-8, sentinels, or diagnostics. Raw units/scales remain FTMS wire units.
+
+Host tests cover Python 3.11 and 3.14 plus shared literal measurement/status
+corpora. This finite evidence is not BLE, real-device, PTS, or Bluetooth
+qualification evidence.
+
+`normalize_measurement(raw, options=None)` provides the immutable-raw-to-codec-v1
+normalized metric projection (for example raw speed / 360 to m/s, cadence / 2,
+and unavailable or incomplete fields as `None`). `normalize_machine_status()` and
+`normalize_training_status()` provide the corresponding normalized status views;
+raw codecs remain the source of wire evidence.

deancochran_ftms-0.1.0a1/RELEASING.md

@@ -0,0 +1,60 @@
+# Python alpha release
+
+Publishing requires explicit authorization. The distribution is `deancochran-ftms`;
+`pyproject.toml` defines its independently versioned Python release. The current
+`0.1.0a1` is a partial alpha, not full cross-language API parity or device evidence.
+
+## One-time Trusted Publishing setup
+
+At <https://pypi.org/manage/account/publishing/>, add a **pending publisher**
+(the first successful upload creates the project):
+
+| Field | Value |
+| --- | --- |
+| PyPI project name | `deancochran-ftms` |
+| GitHub owner | `deancochran` |
+| Repository | `ftms` |
+| Workflow filename | `release-python.yml` |
+| Environment | `pypi` |
+
+The GitHub repository's `pypi` environment must permit only `python-v*` **tags**
+and require approval by `deancochran` before publishing. Repository administrators
+must not bypass that approval. Tag restrictions alone are not an approval gate.
+No long-lived PyPI token or GitHub secret is needed. Registering a pending
+publisher does not reserve the package name or publish anything.
+
+## Authorized release procedure
+
+1. Verify the scope, changelog, version and documentation. Keep capability
+   interpretation and other unimplemented APIs explicitly outside this alpha.
+2. Commit the reviewed source. From a clean checkout at that exact commit,
+   run `uv run --locked --group dev python scripts/verify.py` in `packages/python/`.
+   Inspect reports, source identity, clean state and archive contents. Then run:
+   `uv tool run --from twine==7.0.0 twine check --strict build/isolated/*.whl build/isolated/*.tar.gz`.
+3. Push the source branch and require the Python workflow's verification job to
+   pass. A branch push or pull request cannot execute the publishing job.
+4. Confirm the PyPI publisher setup and explicit release authorization before
+   creating and pushing the immutable `python-vVERSION` tag at that reviewed
+   commit. Python tags are independent of `v*` (npm) and `c-v*` tags.
+   The initial alpha can be tagged on the reviewed Python branch; this does not
+   merge that branch to `main` or authorize merging other ports.
+5. The tag workflow verifies the version/tag match, both test interpreters,
+   all scoped codec corpora, the structural matrix, and the isolated rebuilt-wheel
+   consumer. It checks metadata and saves distributions plus identity/hash reports.
+6. Approve the publishing deployment only after reviewing that exact tag/commit
+   and its verification job. A separate job, restricted to the `pypi` environment, checks the distribution
+   hashes and publishes those exact artifacts using OIDC and attestations. Only
+   this job receives `id-token: write`; it does not check out or build source.
+7. Confirm successful workflow completion, query the exact PyPI version, compare
+   both public SHA-256 digests to the workflow artifacts, and perform a fresh
+   non-editable registry installation. Only then describe the version as published.
+
+The workflow deliberately fails on duplicate uploads; do not overwrite or move a
+release tag. On a partial upload or network failure, inspect PyPI and compare
+existing artifact digests before deciding how to recover. Never bypass a failed
+verification gate or claim publication from a pushed tag alone.
+
+The source archive is installable without shared fixtures. Full repository
+verification requires a checkout containing the canonical `shared/conformance/`
+assets. The package verifier asserts identical wheel bytes after an extracted-sdist
+rebuild; it does not claim byte-identical source archives after that rebuild.

deancochran_ftms-0.1.0a1/pyproject.toml

@@ -0,0 +1,83 @@
+[build-system]
+requires = ["hatchling>=1.27"]
+build-backend = "hatchling.build"
+
+[project]
+name = "deancochran-ftms"
+version = "0.1.0a1"
+description = "Pure Python FTMS feature, range, control, measurement, and status codecs (alpha)"
+readme = "README.md"
+requires-python = ">=3.11"
+license = "MIT"
+license-files = ["LICENSE"]
+authors = [{ name = "Dean Cochran" }]
+classifiers = [
+  "Development Status :: 2 - Pre-Alpha",
+  "Programming Language :: Python :: 3",
+  "Programming Language :: Python :: 3 :: Only",
+  "Programming Language :: Python :: 3.11",
+  "Programming Language :: Python :: 3.14",
+  "Typing :: Typed",
+]
+dependencies = []
+
+[project.urls]
+Source = "https://github.com/deancochran/ftms"
+Issues = "https://github.com/deancochran/ftms/issues"
+Documentation = "https://github.com/deancochran/ftms/blob/python-v0.1.0a1/packages/python/README.md"
+
+[dependency-groups]
+dev = ["jsonschema>=4.23", "mypy>=1.13", "pytest>=8.3", "ruff>=0.8", "types-jsonschema>=4.23"]
+
+[tool.hatch.build.targets.wheel]
+packages = ["src/deancochran_ftms"]
+
+[tool.hatch.build.targets.sdist]
+only-include = [
+  ".gitignore",
+  "CHANGELOG.md",
+  "LICENSE",
+  "README.md",
+  "RELEASING.md",
+  "pyproject.toml",
+  "uv.lock",
+  "src/deancochran_ftms/__init__.py",
+  "src/deancochran_ftms/_binary.py",
+  "src/deancochran_ftms/_errors.py",
+  "src/deancochran_ftms/control.py",
+  "src/deancochran_ftms/features.py",
+  "src/deancochran_ftms/measurements.py",
+  "src/deancochran_ftms/py.typed",
+  "src/deancochran_ftms/ranges.py",
+  "src/deancochran_ftms/statuses.py",
+  "scripts/run_features_conformance.py",
+  "scripts/run_measurement_matrix.py",
+  "scripts/run_measurement_status_conformance.py",
+  "scripts/verify.py",
+  "scripts/verify_package.py",
+  "tests/test_binary.py",
+  "tests/test_conformance.py",
+  "tests/test_features.py",
+  "tests/test_measurement_validation.py",
+  "tests/test_measurements_statuses.py",
+  "tests/test_ranges_control.py",
+  "tests/test_report_integrity.py",
+  "tests/test_status_validation.py",
+]
+
+[tool.pytest.ini_options]
+testpaths = ["tests"]
+addopts = ["--import-mode=importlib"]
+
+[tool.ruff]
+target-version = "py311"
+line-length = 100
+
+[tool.ruff.lint]
+select = ["E", "F", "I", "UP"]
+ignore = ["E501", "E702"]
+
+[tool.mypy]
+python_version = "3.11"
+strict = true
+files = ["src", "tests", "scripts"]