glidepath 0.2.0__tar.gz → 0.3.0__tar.gz

{glidepath-0.2.0 → glidepath-0.3.0}/PKG-INFO

@@ -1,16 +1,35 @@
 Metadata-Version: 2.4
 Name: glidepath
-Version: 0.2.0
+Version: 0.3.0
 Summary: Desktop retirement and investment planner (UK-first, region-extensible).
+Keywords: retirement,pension,financial-planning,investment,uk,sipp,isa,monte-carlo
+Author: James Williams
 License-Expression: MIT AND CC-BY-NC-SA-4.0
 License-File: LICENSE
 License-File: LICENSE-DATA
-Requires-Dist: pyside6>=6.11.1
+Classifier: Development Status :: 4 - Beta
+Classifier: Environment :: Win32 (MS Windows)
+Classifier: Environment :: X11 Applications :: Qt
+Classifier: Intended Audience :: End Users/Desktop
+Classifier: Intended Audience :: Financial and Insurance Industry
+Classifier: Operating System :: Microsoft :: Windows
+Classifier: Operating System :: POSIX :: Linux
+Classifier: Programming Language :: Python :: 3 :: Only
+Classifier: Programming Language :: Python :: 3.14
+Classifier: Topic :: Office/Business :: Financial :: Investment
+Classifier: Typing :: Typed
+Requires-Dist: pyside6==6.11.1
 Requires-Python: >=3.14
+Project-URL: Homepage, https://williajm.github.io/glidepath/
+Project-URL: Repository, https://github.com/williajm/glidepath
+Project-URL: Changelog, https://github.com/williajm/glidepath/blob/main/CHANGELOG.md
+Project-URL: Issues, https://github.com/williajm/glidepath/issues
 Description-Content-Type: text/markdown
 
+<!-- Image and badge URLs are absolute so the README renders on PyPI,
+     which does not resolve repository-relative paths. -->
 <p align="center">
-  <img src="src/glidepath/gui/assets/wordmark.png" alt="glidepath" width="420">
+  <img src="https://raw.githubusercontent.com/williajm/glidepath/main/src/glidepath/gui/assets/wordmark.png" alt="glidepath" width="420">
 </p>
 
 [![CI](https://github.com/williajm/glidepath/actions/workflows/ci.yml/badge.svg?branch=main)](https://github.com/williajm/glidepath/actions/workflows/ci.yml)
@@ -20,7 +39,7 @@ Description-Content-Type: text/markdown
 [![uv](https://img.shields.io/endpoint?url=https://raw.githubusercontent.com/astral-sh/uv/main/assets/badge/v0.json)](https://github.com/astral-sh/uv)
 [![Ruff](https://img.shields.io/endpoint?url=https://raw.githubusercontent.com/astral-sh/ruff/main/assets/badge/v2.json)](https://github.com/astral-sh/ruff)
 [![Checked with mypy](https://www.mypy-lang.org/static/mypy_badge.svg)](https://mypy-lang.org/)
-[![License: MIT](https://img.shields.io/github/license/williajm/glidepath)](LICENSE)
+[![License: MIT + CC BY-NC-SA 4.0 data](https://img.shields.io/badge/license-MIT%20%2B%20CC%20BY--NC--SA%204.0%20data-blue)](https://github.com/williajm/glidepath/blob/main/LICENSE)
 
 <p align="center">
   <a href="https://williajm.github.io/glidepath/"><b>williajm.github.io/glidepath</b></a>
@@ -33,7 +52,7 @@ stated, a **decision** you made, or an **assumption** the app defaulted
 nothing is transmitted.
 
 <p align="center">
-  <img src="docs/screenshots/charts.png"
+  <img src="https://raw.githubusercontent.com/williajm/glidepath/main/docs/screenshots/charts.png"
        alt="The charts tab: the Monte Carlo fan chart — nested percentile bands deepening toward the median line — beside the success-rate readout and the retirement-age and backtest cards"
        width="800">
 </p>
@@ -79,7 +98,7 @@ a choice you make; anything estimated lives in the assumptions
 inspector instead:
 
 <p align="center">
-  <img src="docs/screenshots/facts.png"
+  <img src="https://raw.githubusercontent.com/williajm/glidepath/main/docs/screenshots/facts.png"
        alt="The facts tab: the About you, Household spending, and State pension cards of the entry form, with the example plan's values filled in"
        width="800">
 </p>
@@ -89,7 +108,7 @@ choices in effect, and every assumption the run used with its value,
 default/overridden status, source, and date:
 
 <p align="center">
-  <img src="docs/screenshots/stated_vs_assumed.png"
+  <img src="https://raw.githubusercontent.com/williajm/glidepath/main/docs/screenshots/stated_vs_assumed.png"
        alt="The stated-vs-assumed tab: tables of stated facts, choices in effect, assumptions used with sources, and the plan structure"
        width="800">
 </p>
@@ -154,7 +173,7 @@ fine.)
 ## Everyday commands
 
 ```sh
-make check   # all merge gates: ruff, format, mypy --strict, pytest (>=90% cov), dep age
+make check   # all merge gates: ruff, format, mypy --strict, pytest (>=96% cov), dep age
 make fix     # auto-fix lint issues and reformat
 make test    # tests with coverage
 make deps    # the ONLY way to add/upgrade dependencies (7-day cooldown lock)
@@ -169,9 +188,13 @@ clean `make check` locally does not quite guarantee a green pipeline. See
 
 ## Releases
 
-Releases are `vX.Y.Z` tags on `main`; each GitHub Release carries its
-notes from [`CHANGELOG.md`](CHANGELOG.md). There are no packaged builds
-yet — run from source as above.
+Releases are `vX.Y.Z` tags on `main`. Each one is published to
+[PyPI](https://pypi.org/project/glidepath/) as an sdist and wheel via
+trusted publishing with PEP 740 attestations, and as a GitHub Release
+carrying its notes from
+[`CHANGELOG.md`](https://github.com/williajm/glidepath/blob/main/CHANGELOG.md)
+with the same artifacts attached. There are no packaged binary builds
+(installer/exe) yet — install from PyPI as above.
 
 ## Data licences
 

{glidepath-0.2.0 → glidepath-0.3.0}/README.md

@@ -1,5 +1,7 @@
+<!-- Image and badge URLs are absolute so the README renders on PyPI,
+     which does not resolve repository-relative paths. -->
 <p align="center">
-  <img src="src/glidepath/gui/assets/wordmark.png" alt="glidepath" width="420">
+  <img src="https://raw.githubusercontent.com/williajm/glidepath/main/src/glidepath/gui/assets/wordmark.png" alt="glidepath" width="420">
 </p>
 
 [![CI](https://github.com/williajm/glidepath/actions/workflows/ci.yml/badge.svg?branch=main)](https://github.com/williajm/glidepath/actions/workflows/ci.yml)
@@ -9,7 +11,7 @@
 [![uv](https://img.shields.io/endpoint?url=https://raw.githubusercontent.com/astral-sh/uv/main/assets/badge/v0.json)](https://github.com/astral-sh/uv)
 [![Ruff](https://img.shields.io/endpoint?url=https://raw.githubusercontent.com/astral-sh/ruff/main/assets/badge/v2.json)](https://github.com/astral-sh/ruff)
 [![Checked with mypy](https://www.mypy-lang.org/static/mypy_badge.svg)](https://mypy-lang.org/)
-[![License: MIT](https://img.shields.io/github/license/williajm/glidepath)](LICENSE)
+[![License: MIT + CC BY-NC-SA 4.0 data](https://img.shields.io/badge/license-MIT%20%2B%20CC%20BY--NC--SA%204.0%20data-blue)](https://github.com/williajm/glidepath/blob/main/LICENSE)
 
 <p align="center">
   <a href="https://williajm.github.io/glidepath/"><b>williajm.github.io/glidepath</b></a>
@@ -22,7 +24,7 @@ stated, a **decision** you made, or an **assumption** the app defaulted
 nothing is transmitted.
 
 <p align="center">
-  <img src="docs/screenshots/charts.png"
+  <img src="https://raw.githubusercontent.com/williajm/glidepath/main/docs/screenshots/charts.png"
        alt="The charts tab: the Monte Carlo fan chart — nested percentile bands deepening toward the median line — beside the success-rate readout and the retirement-age and backtest cards"
        width="800">
 </p>
@@ -68,7 +70,7 @@ a choice you make; anything estimated lives in the assumptions
 inspector instead:
 
 <p align="center">
-  <img src="docs/screenshots/facts.png"
+  <img src="https://raw.githubusercontent.com/williajm/glidepath/main/docs/screenshots/facts.png"
        alt="The facts tab: the About you, Household spending, and State pension cards of the entry form, with the example plan's values filled in"
        width="800">
 </p>
@@ -78,7 +80,7 @@ choices in effect, and every assumption the run used with its value,
 default/overridden status, source, and date:
 
 <p align="center">
-  <img src="docs/screenshots/stated_vs_assumed.png"
+  <img src="https://raw.githubusercontent.com/williajm/glidepath/main/docs/screenshots/stated_vs_assumed.png"
        alt="The stated-vs-assumed tab: tables of stated facts, choices in effect, assumptions used with sources, and the plan structure"
        width="800">
 </p>
@@ -143,7 +145,7 @@ fine.)
 ## Everyday commands
 
 ```sh
-make check   # all merge gates: ruff, format, mypy --strict, pytest (>=90% cov), dep age
+make check   # all merge gates: ruff, format, mypy --strict, pytest (>=96% cov), dep age
 make fix     # auto-fix lint issues and reformat
 make test    # tests with coverage
 make deps    # the ONLY way to add/upgrade dependencies (7-day cooldown lock)
@@ -158,9 +160,13 @@ clean `make check` locally does not quite guarantee a green pipeline. See
 
 ## Releases
 
-Releases are `vX.Y.Z` tags on `main`; each GitHub Release carries its
-notes from [`CHANGELOG.md`](CHANGELOG.md). There are no packaged builds
-yet — run from source as above.
+Releases are `vX.Y.Z` tags on `main`. Each one is published to
+[PyPI](https://pypi.org/project/glidepath/) as an sdist and wheel via
+trusted publishing with PEP 740 attestations, and as a GitHub Release
+carrying its notes from
+[`CHANGELOG.md`](https://github.com/williajm/glidepath/blob/main/CHANGELOG.md)
+with the same artifacts attached. There are no packaged binary builds
+(installer/exe) yet — install from PyPI as above.
 
 ## Data licences
 

{glidepath-0.2.0 → glidepath-0.3.0}/pyproject.toml

@@ -1,17 +1,55 @@
 [project]
 name = "glidepath"
-version = "0.2.0"
+version = "0.3.0"
 description = "Desktop retirement and investment planner (UK-first, region-extensible)."
 readme = "README.md"
 # MIT code plus one CC BY-NC-SA 4.0 data file (returns_history.toml —
 # scope and attribution in LICENSE-DATA).
 license = "MIT AND CC-BY-NC-SA-4.0"
 license-files = ["LICENSE", "LICENSE-DATA"]
+authors = [{ name = "James Williams" }]
 requires-python = ">=3.14"
+keywords = [
+    "retirement",
+    "pension",
+    "financial-planning",
+    "investment",
+    "uk",
+    "sipp",
+    "isa",
+    "monte-carlo",
+]
+# No License :: classifier — PEP 639: the SPDX expression above is the
+# license metadata, and mixing it with license classifiers is deprecated.
+classifiers = [
+    "Development Status :: 4 - Beta",
+    "Environment :: Win32 (MS Windows)",
+    "Environment :: X11 Applications :: Qt",
+    "Intended Audience :: End Users/Desktop",
+    "Intended Audience :: Financial and Insurance Industry",
+    # The platforms the suite actually runs on (ci.yml); no macOS claim
+    # until it is tested there.
+    "Operating System :: Microsoft :: Windows",
+    "Operating System :: POSIX :: Linux",
+    "Programming Language :: Python :: 3 :: Only",
+    "Programming Language :: Python :: 3.14",
+    "Topic :: Office/Business :: Financial :: Investment",
+    "Typing :: Typed",
+]
+# glidepath is an application, not a library: the runtime dependency is
+# pinned exactly so `uv tool install glidepath` installs the same PySide6
+# the release was tested against (uv.lock does not apply to end users).
+# Bump the pin only via `make deps`.
 dependencies = [
-    "pyside6>=6.11.1",
+    "pyside6==6.11.1",
 ]
 
+[project.urls]
+Homepage = "https://williajm.github.io/glidepath/"
+Repository = "https://github.com/williajm/glidepath"
+Changelog = "https://github.com/williajm/glidepath/blob/main/CHANGELOG.md"
+Issues = "https://github.com/williajm/glidepath/issues"
+
 [project.gui-scripts]
 glidepath = "glidepath.gui.main:main"
 
@@ -35,7 +73,7 @@ build-backend = "uv_build"
 [tool.uv]
 # Supply-chain cooldown: resolution ignores anything published to PyPI after
 # this timestamp (now minus 7 days). Updated ONLY by `make deps`.
-exclude-newer = "2026-07-30T09:40:45Z"
+exclude-newer = "2026-08-01T17:09:10Z"
 
 # PyPI is the ONLY permitted index (supply-chain policy; see CLAUDE.md).
 [[tool.uv.index]]
@@ -61,34 +99,16 @@ convention = "google"
 [tool.ruff.lint.mccabe]
 max-complexity = 10
 
+# BLE001 (app/ slow-run transitions) and PLR0913 (§5.2 runner signatures)
+# are granted inline at the specific lines that earned them, not file-wide,
+# so new violations elsewhere in those modules still fail lint.
 [tool.ruff.lint.per-file-ignores]
 "src/glidepath/core/randomness.py" = [
     "S311", # Seeded Monte Carlo simulation draws, never security material (planning §4.6).
 ]
-"src/glidepath/core/montecarlo.py" = [
-    "PLR0913", # run_paths/sustainable_income take the §5.2 engine quartet plus keyword-only run knobs; bundling would obscure the run(plan, assumptions, region, config) shape.
-]
-"src/glidepath/core/backtest.py" = [
-    "PLR0913", # run_windows and its chunk worker mirror the §5.2 runner signature (see core/montecarlo.py).
-]
 "scripts/build_returns_history.py" = [
     "S314", # xml.etree parses the JST workbook the developer supplies locally, never untrusted input.
 ]
-"src/glidepath/core/retirement.py" = [
-    "PLR0913", # earliest_retirement_age mirrors the §5.2 runner signature (see core/montecarlo.py).
-]
-"src/glidepath/app/montecarlo.py" = [
-    "BLE001", # The slow-run transition must fold ANY failure into state (§4.7): an exception escaping past the shell's worker thread holds the in-flight guard forever.
-]
-"src/glidepath/app/retirement.py" = [
-    "BLE001", # Same in-flight-guard rationale as app/montecarlo.py.
-]
-"src/glidepath/app/drawdown.py" = [
-    "BLE001", # Same in-flight-guard rationale as app/montecarlo.py.
-]
-"src/glidepath/app/backtest.py" = [
-    "BLE001", # Same in-flight-guard rationale as app/montecarlo.py.
-]
 "tests/**" = [
     "S101",    # pytest tests use bare assert by design.
     "PLR2004", # Literal expected values in assertions are idiomatic in tests.
@@ -103,12 +123,15 @@ max-complexity = 10
 # --- mypy -------------------------------------------------------------------
 [tool.mypy]
 strict = true
-warn_unused_ignores = true
+# Not implied by strict: flags code mypy can prove unreachable — high-yield
+# in Decimal/None-narrowing-heavy code.
+warn_unreachable = true
 python_version = "3.14"
 files = ["src", "tests", "scripts"]
 # Lets the tests' top-level script imports (e.g. `import check_dep_age`)
-# resolve to scripts/ — mirrors pytest's pythonpath below.
-mypy_path = ["scripts"]
+# and the shared test factories (`import factories`) resolve — mirrors
+# pytest's pythonpath below.
+mypy_path = ["scripts", "tests"]
 
 # --- pytest / coverage ------------------------------------------------------
 [tool.pytest.ini_options]
@@ -122,9 +145,10 @@ addopts = [
     "--cov-report=xml",
 ]
 testpaths = ["tests"]
-# scripts/ is not a package; tests import the operational scripts (the
-# gates behind `make deps`/`make bump`/releases) as top-level modules.
-pythonpath = ["scripts"]
+# Neither scripts/ nor tests/ is a package; tests import the operational
+# scripts (the gates behind `make deps`/`make bump`/releases) and the
+# shared test-data factories (tests/factories.py) as top-level modules.
+pythonpath = ["scripts", "tests"]
 # Fail a stuck test fast instead of hanging CI for the runner limit: the
 # GUI suite waits on worker pools for up to 60s, so the ceiling sits
 # safely above that while still cutting a wedged run short.

{glidepath-0.2.0 → glidepath-0.3.0}/src/glidepath/app/backtest.py

@@ -132,7 +132,7 @@ def state_with_backtest(state: PlanState, *, today: date) -> PlanState:
             config,
             series=series,
         )
-    except Exception as exc:
+    except Exception as exc:  # noqa: BLE001
         # Broad by design, mirroring the Monte Carlo transition: an
         # escape past the shell's worker thread would leave the
         # in-flight guard held (buttons disabled, spinner running)

{glidepath-0.2.0 → glidepath-0.3.0}/src/glidepath/app/drawdown.py

@@ -254,7 +254,7 @@ def state_with_drawdown(
                 search=search,
                 parallelism=parallelism,
             )
-    except Exception as exc:
+    except Exception as exc:  # noqa: BLE001
         # Broad by design, exactly as in state_with_monte_carlo: a
         # process-pool failure escaping here would hold the shell's
         # in-flight guard forever, so every failure folds into the

{glidepath-0.2.0 → glidepath-0.3.0}/src/glidepath/app/montecarlo.py

@@ -316,7 +316,7 @@ def state_with_monte_carlo(
                 paths=paths,
                 parallelism=parallelism,
             )
-    except Exception as exc:
+    except Exception as exc:  # noqa: BLE001
         # Broad by design: beyond the engine's ValueErrors, the process
         # pool can raise OSError at spawn, pickling TypeErrors, or a
         # BrokenExecutor — an escape here would leave the shell's

{glidepath-0.2.0 → glidepath-0.3.0}/src/glidepath/app/retirement.py

@@ -234,7 +234,7 @@ def state_with_retirement(
                 search,
                 parallelism=parallelism,
             )
-    except Exception as exc:
+    except Exception as exc:  # noqa: BLE001
         # Broad by design, exactly as in state_with_monte_carlo: a
         # process-pool failure escaping here would hold the shell's
         # in-flight guard forever, so every failure folds into the

{glidepath-0.2.0 → glidepath-0.3.0}/src/glidepath/core/backtest.py

@@ -392,7 +392,9 @@ class BacktestResult:
         )
 
 
-def run_windows(
+# The §5.2 engine quartet plus keyword-only run knobs; bundling would
+# obscure the run(plan, assumptions, region, config) shape.
+def run_windows(  # noqa: PLR0913
     plan: Household,
     assumptions: AssumptionSet,
     region: Region,
@@ -477,7 +479,8 @@ def run_windows(
     )
 
 
-def _run_window_range(
+# Mirrors the run_windows signature above.
+def _run_window_range(  # noqa: PLR0913
     plan: Household,
     assumptions: AssumptionSet,
     region: Region,

{glidepath-0.2.0 → glidepath-0.3.0}/src/glidepath/core/money.py

@@ -15,7 +15,9 @@ _PENNY = Decimal("0.01")
 def _require_finite_decimal(value: Decimal, field_name: str) -> None:
     """Reject non-Decimal and non-finite amounts at construction time."""
     if not isinstance(value, Decimal):
-        msg = f"{field_name} must be Decimal, got {type(value).__name__}"
+        # Reachable from untyped callers (decoded plan JSON, region TOML)
+        # even though the annotation lets mypy prove the branch dead.
+        msg = f"{field_name} must be Decimal, got {type(value).__name__}"  # type: ignore[unreachable]
         raise TypeError(msg)
     if not value.is_finite():
         msg = f"{field_name} must be finite"

{glidepath-0.2.0 → glidepath-0.3.0}/src/glidepath/core/montecarlo.py

@@ -242,7 +242,9 @@ class PathParallelism:
             raise ValueError(msg)
 
 
-def run_paths(
+# The §5.2 engine quartet plus keyword-only run knobs; bundling would
+# obscure the run(plan, assumptions, region, config) shape.
+def run_paths(  # noqa: PLR0913
     plan: Household,
     assumptions: AssumptionSet,
     region: Region,
@@ -392,7 +394,8 @@ class SustainableIncomeSearch:
             raise ValueError(msg)
 
 
-def sustainable_income(
+# Mirrors the run_paths signature above.
+def sustainable_income(  # noqa: PLR0913
     plan: Household,
     assumptions: AssumptionSet,
     region: Region,

{glidepath-0.2.0 → glidepath-0.3.0}/src/glidepath/core/retirement.py

@@ -113,7 +113,9 @@ class RetirementAgeSearch:
             raise ValueError(msg)
 
 
-def earliest_retirement_age(
+# The §5.2 engine quartet plus keyword-only run knobs; bundling would
+# obscure the run(plan, assumptions, region, config) shape.
+def earliest_retirement_age(  # noqa: PLR0913
     plan: Household,
     assumptions: AssumptionSet,
     region: Region,
@@ -180,7 +182,8 @@ def earliest_retirement_age(
     return None
 
 
-def sustainable_income_at_age(
+# Mirrors the earliest_retirement_age signature above.
+def sustainable_income_at_age(  # noqa: PLR0913
     plan: Household,
     assumptions: AssumptionSet,
     region: Region,

{glidepath-0.2.0 → glidepath-0.3.0}/src/glidepath/gui/main.py

@@ -4,7 +4,7 @@ The disclaimer must be accepted before the shell opens; declining
 exits without recording anything, so the next launch asks again.
 """
 
-import contextlib
+import logging
 import sys
 from datetime import UTC, datetime
 
@@ -20,6 +20,8 @@ from glidepath.app import (
 from glidepath.gui import widgets
 from glidepath.gui.style import apply_theme
 
+_logger = logging.getLogger(__name__)
+
 
 def run(argv: list[str] | None = None) -> int:
     """Run the desktop shell; returns the process exit code."""
@@ -34,9 +36,17 @@ def run(argv: list[str] | None = None) -> int:
             return 0
         # The acknowledgement file only skips future prompts; an unwritable
         # config directory must not kill the session the user just accepted
-        # (worst case the next launch asks again).
-        with contextlib.suppress(OSError):
+        # (worst case the next launch asks again) — but it must leave a
+        # diagnostic trail for "it keeps asking me" reports.
+        try:
             record_disclaimer_acknowledged(state_path, datetime.now(tz=UTC).date())
+        except OSError:
+            _logger.warning(
+                "Could not record the disclaimer acknowledgement at %s; "
+                "the next launch will ask again.",
+                state_path,
+                exc_info=True,
+            )
     window = widgets.MainWindow(view_model, settings_path=state_path)
     # Reopen the last saved or opened plan; if it fails to load, the
     # launch example stays on screen and the status bar explains.

{glidepath-0.2.0 → glidepath-0.3.0}/src/glidepath/gui/widgets.py

@@ -6,6 +6,7 @@ render view models and forward raw user input back.
 """
 
 import contextlib
+import logging
 from datetime import UTC, date, datetime
 from pathlib import Path
 from typing import TYPE_CHECKING
@@ -105,6 +106,8 @@ from glidepath.gui.style import wordmark_pixmap
 if TYPE_CHECKING:
     from collections.abc import Callable
 
+_logger = logging.getLogger(__name__)
+
 _REPORT_DPI = 96
 """The PDF paint device's resolution.
 
@@ -582,8 +585,16 @@ class MainWindow(QMainWindow):
         """
         if self._settings_path is None:
             return
-        with contextlib.suppress(OSError):
+        try:
             record_last_plan_path(self._settings_path, path)
+        except OSError:
+            _logger.warning(
+                "Could not remember the plan path %s in %s; the next "
+                "launch will start on the example plan.",
+                path,
+                self._settings_path,
+                exc_info=True,
+            )
 
     def _load_example(self) -> None:
         """Open with the example plan on screen and projected (§4.9).

{glidepath-0.2.0 → glidepath-0.3.0}/src/glidepath/persistence/encode.py

@@ -18,6 +18,7 @@ ids) is rejected here too.
 
 import contextlib
 import json
+import os
 from typing import TYPE_CHECKING
 
 from glidepath.core import (
@@ -87,23 +88,42 @@ def save_plan(document: PlanDocument, path: Path) -> None:
 
     Serialization completes before any file is opened, so a document
     that cannot be encoded never touches the disk; the text is then
-    written to a sibling temporary file and moved over ``path`` only
-    once the write has closed cleanly, so a mid-write failure (disk
-    full, power loss) can never truncate the last saved plan.
-    ``newline=""`` disables platform newline translation so the file
-    carries LF endings on every platform (planning §4.5).
+    written to a sibling temporary file, flushed to stable storage
+    with ``fsync``, and only then moved over ``path`` — so a mid-write
+    failure (disk full, power loss) can never truncate the last saved
+    plan, and the rename never publishes data still sitting in the OS
+    write cache. ``newline=""`` disables platform newline translation
+    so the file carries LF endings on every platform (planning §4.5).
     """
     text = dumps_plan(document)
     temp = path.with_name(path.name + ".tmp")
     try:
         with temp.open("w", encoding="utf-8", newline="") as handle:
             handle.write(text)
+            handle.flush()
+            os.fsync(handle.fileno())
         temp.replace(path)
+        _fsync_directory(path.parent)
     finally:
         with contextlib.suppress(OSError):
             temp.unlink(missing_ok=True)
 
 
+def _fsync_directory(directory: Path) -> None:
+    """Flush the directory entry so the rename itself survives power loss.
+
+    POSIX only: directories cannot be opened for fsync on Windows,
+    where the ``replace`` above is journalled by NTFS instead.
+    """
+    if os.name != "posix":
+        return
+    descriptor = os.open(directory, os.O_RDONLY)
+    try:
+        os.fsync(descriptor)
+    finally:
+        os.close(descriptor)
+
+
 def _document_payload(document: PlanDocument) -> dict[str, object]:
     """The whole document as a JSON-ready payload."""
     return {

{glidepath-0.2.0 → glidepath-0.3.0}/src/glidepath/regions/uk/extension.py

@@ -189,7 +189,9 @@ class FutureYearsPolicy:
         Scottish band uppers (module docstring).
         """
         if not isinstance(self.mode, FutureYearsMode):
-            type_name = type(self.mode).__name__
+            # Reachable from raw TOML data even though the annotation
+            # lets mypy prove the branch dead.
+            type_name = type(self.mode).__name__  # type: ignore[unreachable]
             _fail(_CONTEXT, f"mode must be a FutureYearsMode member, got {type_name}")
         needs_until = self.mode is FutureYearsMode.FROZEN_THEN_CPI_INDEXED
         if needs_until and self.frozen_until_start_year is None: