fmind 2.0.2__tar.gz → 2.0.4__tar.gz

fmind-2.0.4/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 Médéric Hurier (Fmind)
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT, OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

{fmind-2.0.2 → fmind-2.0.4}/PKG-INFO

@@ -1,11 +1,12 @@
 Metadata-Version: 2.4
 Name: fmind
-Version: 2.0.2
+Version: 2.0.4
 Summary: Read Médéric Hurier's (Fmind) portfolio from the terminal.
 Keywords: portfolio,cli,fmind,resume,articles
 Author: Médéric Hurier
 Author-email: Médéric Hurier <contact@fmind.dev>
 License-Expression: MIT
+License-File: LICENSE
 Classifier: Environment :: Console
 Classifier: Intended Audience :: Developers
 Classifier: Programming Language :: Python :: 3 :: Only
@@ -30,14 +31,6 @@ Read [Médéric Hurier's (Fmind)](https://www.fmind.dev/) portfolio from the ter
 uvx fmind whoami
 ```
 
-## Why it stays small
-
-Every command renders a document the website already publishes — the portfolio at [`/api/profile`](https://www.fmind.dev/api/profile) and, for `fmind read`, the Markdown source of an article at `/articles/<slug>.md`. Those are the same sources behind the site, the Atom feed, `llms.txt` and the MCP server.
-
-This package carries no copy of the portfolio and needs **no release for content updates**: new articles, a renewed certification or a new engagement appear on the next run. Removing or changing fields that the CLI renders can require a client update; the live compatibility workflow detects those breaks.
-
-Every command fetches from the website and asks HTTP caches to revalidate. There is no local cache and no `--refresh` option. Each portfolio download has a 15-second total deadline, including connection setup and response reading, and an 8 MiB response limit. An internet connection is required: if the website cannot be read, the command reports an error instead of showing stale information.
-
 ## Commands
 
 | Command                                     | Shows                                             |
@@ -154,26 +147,10 @@ mise run smoke     # exercise every command against the live site
 mise run all       # format, check, test, build — the gate CI runs
 ```
 
-The pre-commit hook runs checks without changing or staging files; run `mise run format` before committing. The pre-push hook runs the offline tests. CI runs the full gate on the pinned Python, tests Python 3.11–3.13 for compatibility, and tests the declared dependency floors with `--resolution lowest-direct` on Python 3.11.
+The pre-commit hook runs checks without changing or staging files; run `mise run format` before committing. The pre-push hook runs the offline tests. CI runs the full gate on the pinned Python, tests Python 3.11–3.14 for compatibility, and tests the declared dependency floors with `--resolution lowest-direct` on Python 3.11.
 
 A release tag must match the version in `pyproject.toml` (for example, `v0.1.0`). CD runs the same full gate for that tag and checks the live commands before publishing through PyPI Trusted Publishing. The live smoke check is a release check, not a pull-request gate.
 
-### Website compatibility
-
-The **Website compatibility** GitHub Actions workflow runs `mise run smoke` daily at 06:23 UTC, on pushes to `main`, and on manual dispatch. Failed runs use normal GitHub Actions notifications; no issue bot or extra service is needed. The offline CI gate stays independent of website availability.
-
-The same check exercises every portfolio command in text and both JSON option positions, reads the newest article as Markdown, and launches the real MCP stdio bridge. It discovers the remote tools, resources, templates, and prompts; calls every advertised read-only tool, including article reading with a live slug and the hosting calculator with its defaults; reads resources; and retrieves prompts. The SDK validates tool results against the website's current schemas, and the profile resource is checked against the CLI's rendering contract. API and MCP failures are reported independently. Checks use live data, not snapshots of portfolio facts.
-
-After a website deployment, run `mise run smoke` locally or dispatch the workflow:
-
-```bash
-gh workflow run compatibility.yml --repo fmind/cli
-```
-
-A failure indicates either an outage or a contract change; inspect the failing operation in the run log. Keep `PROFILE_SHAPE` limited to consumed fields and update synthetic fixtures alongside rendering changes. New MCP tools with required inputs may need a sample argument in the smoke check. No release is needed merely to add content or an unused API field.
-
-Commands exit with 0 on success, 1 for website or article-resolution failures, and 2 for invalid CLI usage.
-
 ## License
 
 [MIT](LICENSE) — © 2026 Médéric Hurier (Fmind).

{fmind-2.0.2 → fmind-2.0.4}/README.md

@@ -6,14 +6,6 @@ Read [Médéric Hurier's (Fmind)](https://www.fmind.dev/) portfolio from the ter
 uvx fmind whoami
 ```
 
-## Why it stays small
-
-Every command renders a document the website already publishes — the portfolio at [`/api/profile`](https://www.fmind.dev/api/profile) and, for `fmind read`, the Markdown source of an article at `/articles/<slug>.md`. Those are the same sources behind the site, the Atom feed, `llms.txt` and the MCP server.
-
-This package carries no copy of the portfolio and needs **no release for content updates**: new articles, a renewed certification or a new engagement appear on the next run. Removing or changing fields that the CLI renders can require a client update; the live compatibility workflow detects those breaks.
-
-Every command fetches from the website and asks HTTP caches to revalidate. There is no local cache and no `--refresh` option. Each portfolio download has a 15-second total deadline, including connection setup and response reading, and an 8 MiB response limit. An internet connection is required: if the website cannot be read, the command reports an error instead of showing stale information.
-
 ## Commands
 
 | Command                                     | Shows                                             |
@@ -130,26 +122,10 @@ mise run smoke     # exercise every command against the live site
 mise run all       # format, check, test, build — the gate CI runs
 ```
 
-The pre-commit hook runs checks without changing or staging files; run `mise run format` before committing. The pre-push hook runs the offline tests. CI runs the full gate on the pinned Python, tests Python 3.11–3.13 for compatibility, and tests the declared dependency floors with `--resolution lowest-direct` on Python 3.11.
+The pre-commit hook runs checks without changing or staging files; run `mise run format` before committing. The pre-push hook runs the offline tests. CI runs the full gate on the pinned Python, tests Python 3.11–3.14 for compatibility, and tests the declared dependency floors with `--resolution lowest-direct` on Python 3.11.
 
 A release tag must match the version in `pyproject.toml` (for example, `v0.1.0`). CD runs the same full gate for that tag and checks the live commands before publishing through PyPI Trusted Publishing. The live smoke check is a release check, not a pull-request gate.
 
-### Website compatibility
-
-The **Website compatibility** GitHub Actions workflow runs `mise run smoke` daily at 06:23 UTC, on pushes to `main`, and on manual dispatch. Failed runs use normal GitHub Actions notifications; no issue bot or extra service is needed. The offline CI gate stays independent of website availability.
-
-The same check exercises every portfolio command in text and both JSON option positions, reads the newest article as Markdown, and launches the real MCP stdio bridge. It discovers the remote tools, resources, templates, and prompts; calls every advertised read-only tool, including article reading with a live slug and the hosting calculator with its defaults; reads resources; and retrieves prompts. The SDK validates tool results against the website's current schemas, and the profile resource is checked against the CLI's rendering contract. API and MCP failures are reported independently. Checks use live data, not snapshots of portfolio facts.
-
-After a website deployment, run `mise run smoke` locally or dispatch the workflow:
-
-```bash
-gh workflow run compatibility.yml --repo fmind/cli
-```
-
-A failure indicates either an outage or a contract change; inspect the failing operation in the run log. Keep `PROFILE_SHAPE` limited to consumed fields and update synthetic fixtures alongside rendering changes. New MCP tools with required inputs may need a sample argument in the smoke check. No release is needed merely to add content or an unused API field.
-
-Commands exit with 0 on success, 1 for website or article-resolution failures, and 2 for invalid CLI usage.
-
 ## License
 
 [MIT](LICENSE) — © 2026 Médéric Hurier (Fmind).

{fmind-2.0.2 → fmind-2.0.4}/pyproject.toml

@@ -1,9 +1,10 @@
 [project]
 name = "fmind"
-version = "2.0.2"
+version = "2.0.4"
 description = "Read Médéric Hurier's (Fmind) portfolio from the terminal."
 readme = "README.md"
 license = "MIT"
+license-files = ["LICENSE"]
 requires-python = ">=3.11"
 keywords = [
     "portfolio",
@@ -51,7 +52,7 @@ dev = [
 ]
 
 [build-system]
-requires = ["uv_build>=0.12.17,<0.13"]
+requires = ["uv_build>=0.13.0,<0.14"]
 build-backend = "uv_build"
 
 [tool.uv.build-backend]

{fmind-2.0.2 → fmind-2.0.4}/pyproject.toml.orig

@@ -1,10 +1,11 @@
 # https://packaging.python.org/en/latest/specifications/pyproject-toml/
 [project]
 name = "fmind"
-version = "2.0.2"
+version = "2.0.4"
 description = "Read Médéric Hurier's (Fmind) portfolio from the terminal."
 readme = "README.md"
 license = "MIT"
+license-files = ["LICENSE"]
 authors = [{ name = "Médéric Hurier", email = "contact@fmind.dev" }]
 requires-python = ">=3.11"
 keywords = ["portfolio", "cli", "fmind", "resume", "articles"]
@@ -40,7 +41,7 @@ dev = [
 ]
 
 [build-system]
-requires = ["uv_build>=0.12.17,<0.13"]
+requires = ["uv_build>=0.13.0,<0.14"]
 build-backend = "uv_build"
 
 [tool.uv.build-backend]

{fmind-2.0.2 → fmind-2.0.4}/src/fmind/api.py

@@ -4,6 +4,7 @@ from __future__ import annotations
 
 import http.client
 import json
+import math
 import os
 import queue
 import re
@@ -76,9 +77,14 @@ def article_url(slug: str, *, profile_url: str | None = None) -> str:
     return origin_url(f"/articles/{slug}.md", profile_url=profile_url)
 
 
+def _profile_url() -> str:
+    """Return the configured profile endpoint, read at call time."""
+    return os.environ.get("FMIND_PROFILE_URL", PROFILE_URL)
+
+
 def origin_url(path: str, *, profile_url: str | None = None) -> str:
     """Resolve a website endpoint on the configured profile origin."""
-    parts = _http_url(profile_url if profile_url is not None else os.environ.get("FMIND_PROFILE_URL", PROFILE_URL))
+    parts = _http_url(profile_url if profile_url is not None else _profile_url())
     return urllib.parse.urlunsplit((parts.scheme, parts.netloc, path, "", ""))
 
 
@@ -158,17 +164,25 @@ def _validate(value: object, shape: object, path: str) -> None:
         raise FmindError(f"the profile endpoint returned an invalid portfolio document at {path}")
 
 
+def _reject_constant(name: str) -> None:
+    """Refuse NaN and Infinity: they are not JSON, so `--json` could not forward them."""
+    raise ValueError(name)
+
+
 def _parse_profile(payload: bytes) -> dict[str, Any]:
     """Decode the portfolio document, rejecting anything that is not one."""
     try:
-        document = json.loads(payload)
+        document = json.loads(payload, parse_constant=_reject_constant)
     except (ValueError, RecursionError) as error:
         raise FmindError("the profile endpoint did not return JSON") from error
-    # Python's JSON decoder accepts lone surrogates. Check keys and future fields
-    # too: JSON output forwards them even when the renderer does not consume them.
+    # Check keys and future fields too: JSON output forwards them even when the
+    # renderer does not consume them. The decoder accepts surrogates and can turn
+    # finite JSON literals such as 1e999 into infinity.
     pending = [document]
     while pending:
         value = pending.pop()
+        if isinstance(value, float) and not math.isfinite(value):
+            raise FmindError("the profile endpoint returned a non-finite number")
         if isinstance(value, str):
             try:
                 value.encode("utf-8")
@@ -201,8 +215,7 @@ def _parse_markdown(payload: bytes) -> str:
 
 def load_profile(*, url: str | None = None) -> dict[str, Any]:
     """Return the portfolio document behind every section command."""
-    endpoint = url if url is not None else os.environ.get("FMIND_PROFILE_URL", PROFILE_URL)
-    return _parse_profile(_download(endpoint))
+    return _parse_profile(_download(url if url is not None else _profile_url()))
 
 
 def load_article(slug: str, *, profile_url: str | None = None) -> str:

{fmind-2.0.2 → fmind-2.0.4}/src/fmind/cli.py

@@ -116,7 +116,10 @@ def _write(text: str) -> None:
 def _emit(ctx: typer.Context, body: RenderableType, payload: Any, *, as_json: bool, page: bool = False) -> None:
     """Print either the rendered section or its JSON data."""
     if as_json or ctx.find_root().params["as_json"]:
-        _write(json.dumps(payload, ensure_ascii=False, indent=2) + "\n")
+        # json.dumps escapes C0 controls but not DEL or C1 (such as CSI); fields the
+        # renderer does not validate still reach the terminal, so escape those too.
+        text = json.dumps(payload, ensure_ascii=False, indent=2)
+        _write(CONTROL_PATTERN.sub(lambda match: f"\\u{ord(match.group()):04x}", text) + "\n")
         return
     out = _console(ctx)
     if not out.is_terminal:

{fmind-2.0.2 → fmind-2.0.4}/src/fmind/mcp.py

@@ -21,16 +21,21 @@ from fmind.api import MAX_BYTES, TIMEOUT_SECONDS, USER_AGENT, FmindError, origin
 
 
 class _BoundedStream(httpx2.AsyncByteStream):
-    def __init__(self, stream: httpx2.AsyncByteStream) -> None:
+    def __init__(self, stream: httpx2.AsyncByteStream, deadline: float) -> None:
         self.stream = stream
+        self.deadline = deadline
 
     async def __aiter__(self) -> AsyncIterator[bytes]:
         size = 0
-        async for chunk in self.stream:
-            size += len(chunk)
-            if size > MAX_BYTES:
-                raise FmindError("the remote MCP response exceeded the size limit")
-            yield chunk
+        try:
+            async with asyncio.timeout_at(self.deadline):
+                async for chunk in self.stream:
+                    size += len(chunk)
+                    if size > MAX_BYTES:
+                        raise FmindError("the remote MCP response exceeded the size limit")
+                    yield chunk
+        except TimeoutError as error:
+            raise httpx2.ReadTimeout("the remote MCP response exceeded its deadline") from error
 
     async def aclose(self) -> None:
         await self.stream.aclose()
@@ -38,13 +43,20 @@ class _BoundedStream(httpx2.AsyncByteStream):
 
 class _BoundedTransport(httpx2.AsyncHTTPTransport):
     async def handle_async_request(self, request: httpx2.Request) -> httpx2.Response:
-        response = await super().handle_async_request(request)
+        # HTTPX read timeouts restart for every chunk. A legacy MCP server may
+        # ignore cancellation, so bound the entire HTTP exchange independently.
+        deadline = asyncio.get_running_loop().time() + TIMEOUT_SECONDS
+        try:
+            async with asyncio.timeout_at(deadline):
+                response = await super().handle_async_request(request)
+        except TimeoutError as error:
+            raise httpx2.ReadTimeout("the remote MCP response exceeded its deadline", request=request) from error
         if response.headers.get("content-encoding", "identity") != "identity":
             await response.aclose()
             raise FmindError("the remote MCP server ignored the uncompressed response requirement")
         if not isinstance(response.stream, httpx2.AsyncByteStream):
             raise FmindError("the remote MCP transport returned an invalid stream")
-        response.stream = _BoundedStream(response.stream)
+        response.stream = _BoundedStream(response.stream, deadline)
         return response
 
 

{fmind-2.0.2 → fmind-2.0.4}/src/fmind/render.py

@@ -87,16 +87,22 @@ def whoami(doc: dict[str, Any]) -> RenderableType:
             status.append("\n")
         status.append(service["title"], style="bold")
         status.append(f" — {service['badge']}")
-    return _rows(
-        [
-            ("Name", Text(f"{meta['name']} ({meta['alternate_name']})", style="bold")),
-            ("Role", Text(meta["job_title"])),
-            ("Headline", Text(meta["headline_primary"])),
-            ("Experience", mission),
-            ("Status", status),
-            ("Contact", _link(meta["email"])),
-            ("Website", _link(meta["site_url"])),
-        ]
+    return Group(
+        _rows(
+            [
+                ("Name", Text(f"{meta['name']} ({meta['alternate_name']})", style="bold")),
+                ("Role", Text(meta["job_title"])),
+                ("Headline", Text(meta["headline_primary"])),
+                ("Experience", mission),
+                ("Status", status),
+            ]
+        ),
+        # Table cells crop even no-wrap links. Keep these outside the grid,
+        # with the same 11-character label and two-space gap.
+        *(
+            Text.assemble((f"{label:<13}", ACCENT), _link(value), no_wrap=True, overflow="ignore")
+            for label, value in (("Contact", meta["email"]), ("Website", meta["site_url"]))
+        ),
     )