jring-client 0.5.0__tar.gz

jring_client-0.5.0/.github/workflows/distro-smoke.yml

@@ -0,0 +1,98 @@
+name: Native container smoke
+
+on:
+  push:
+  pull_request:
+
+permissions:
+  contents: read
+
+jobs:
+  distro-smoke:
+    runs-on: ubuntu-24.04
+    timeout-minutes: 25
+    container:
+      image: ${{ matrix.image }}
+    strategy:
+      fail-fast: false
+      max-parallel: 2
+      matrix:
+        include:
+          - family: debian
+            image: debian:13-slim
+            python_command: python3
+          - family: fedora
+            image: fedora:44
+            python_command: python3
+          - family: enterprise-linux-9
+            # Follow Rocky's supported EL9 minor; retired minor repos are unsuitable CI inputs.
+            image: rockylinux/rockylinux:9
+            python_command: python3.11
+          # Arch is a rolling distribution and does not publish fixed release tags.
+          - family: arch
+            image: archlinux:base
+            python_command: python
+          - family: opensuse
+            image: opensuse/leap:15.6
+            python_command: python3.11
+    env:
+      JRING_HARDWARE_TEST: "0"
+      PIP_DISABLE_PIP_VERSION_CHECK: "1"
+    steps:
+      - name: Install ephemeral native prerequisites
+        shell: sh
+        run: |
+          case "${{ matrix.family }}" in
+            debian)
+              export DEBIAN_FRONTEND=noninteractive
+              apt-get update
+              apt-get install -y --no-install-recommends \
+                git ca-certificates python3 python3-venv python3-pip python3-dev \
+                build-essential linux-libc-dev bluez
+              ;;
+            fedora)
+              dnf install -y \
+                git ca-certificates python3 python3-pip python3-devel gcc \
+                kernel-headers bluez
+              ;;
+            enterprise-linux-9)
+              dnf install -y \
+                git ca-certificates python3.11 python3.11-pip python3.11-devel \
+                gcc kernel-headers bluez
+              ;;
+            arch)
+              pacman -Syu --noconfirm --needed \
+                git ca-certificates python python-pip base-devel linux-api-headers \
+                bluez bluez-utils
+              ;;
+            opensuse)
+              zypper --non-interactive install --no-recommends \
+                git ca-certificates python311 python311-pip python311-devel gcc make \
+                linux-glibc-devel bluez
+              ;;
+            *)
+              echo "unsupported smoke family" >&2
+              exit 2
+              ;;
+          esac
+
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
+
+      - name: Create isolated environment and install all extras
+        shell: sh
+        run: |
+          "${{ matrix.python_command }}" --version
+          "${{ matrix.python_command }}" -m venv /tmp/jring-smoke-venv
+          . /tmp/jring-smoke-venv/bin/activate
+          python -m pip install --upgrade pip
+          python -m pip install -e '.[ble,input,dev]'
+
+      - name: Run non-hardware tests and passive simulator smoke
+        shell: sh
+        run: |
+          . /tmp/jring-smoke-venv/bin/activate
+          python -m pytest -q
+          jring doctor --json
+          jring status --simulate --json
+          jring capabilities --simulate --json
+          jring input --simulate --map step=key:space

jring_client-0.5.0/.github/workflows/publish-pypi.yml

@@ -0,0 +1,120 @@
+name: publish-pypi
+
+on:
+  workflow_dispatch:
+    inputs:
+      publish:
+        description: Publish the validated artifacts to PyPI after environment approval
+        required: true
+        type: boolean
+        default: false
+  push:
+    tags: ["v*"]
+
+permissions: {}
+
+concurrency:
+  group: publish-pypi-${{ github.ref }}
+  cancel-in-progress: false
+
+jobs:
+  build-and-validate:
+    runs-on: ubuntu-latest
+    permissions:
+      contents: read
+    outputs:
+      artifact-id: ${{ steps.upload.outputs.artifact-id }}
+    steps:
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
+        with:
+          persist-credentials: false
+      - uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97 # v7.0.0
+        with:
+          python-version: "3.13"
+          cache: pip
+      - name: Install pinned build tools
+        run: python -m pip install -r requirements/release.txt
+      - name: Validate source and publishing intent
+        shell: bash
+        env:
+          PUBLISH_REQUESTED: ${{ (github.event_name == 'push' && github.ref_type == 'tag') || inputs.publish }}
+        run: |
+          set -euo pipefail
+          git diff --exit-code
+          python scripts/evidence_tool.py scan .
+          if [[ "${GITHUB_REF_TYPE}" == "tag" ]]; then
+            python scripts/release_artifacts.py check-version "${GITHUB_REF_NAME}"
+          elif [[ "${PUBLISH_REQUESTED}" == "true" ]]; then
+            echo "Publishing requires selecting the matching protected version tag." >&2
+            exit 2
+          fi
+          python scripts/generate_cli_artifacts.py --check
+          if [[ "${PUBLISH_REQUESTED}" == "true" && "${GITHUB_REF_PROTECTED}" != "true" ]]; then
+            echo "Publishing requires a protected tag." >&2
+            exit 2
+          fi
+      - name: Build twice and validate reproducibility
+        shell: bash
+        run: |
+          set -euo pipefail
+          export SOURCE_DATE_EPOCH="$(git show -s --format=%ct HEAD)"
+          python -m build --no-isolation --outdir dist-a
+          python -m build --no-isolation --outdir dist-b
+          python scripts/release_artifacts.py normalize-sdist dist-a/*.tar.gz --epoch "${SOURCE_DATE_EPOCH}"
+          python scripts/release_artifacts.py normalize-sdist dist-b/*.tar.gz --epoch "${SOURCE_DATE_EPOCH}"
+          python scripts/release_artifacts.py compare dist-a dist-b
+          python scripts/release_artifacts.py inspect dist-a
+          mkdir dist
+          cp dist-a/*.whl dist-a/*.tar.gz dist/
+      - name: Install exact wheel and smoke offline paths
+        shell: bash
+        run: |
+          set -euo pipefail
+          python -m venv /tmp/jring-publish-smoke
+          /tmp/jring-publish-smoke/bin/python -m pip install --no-index --no-deps dist/*.whl
+          cd /tmp
+          /tmp/jring-publish-smoke/bin/jring doctor --json
+          /tmp/jring-publish-smoke/bin/jring status --simulate --json
+          /tmp/jring-publish-smoke/bin/jring capabilities --simulate --json
+      - name: Store the exact validated distributions
+        id: upload
+        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
+        with:
+          name: pypi-distributions-${{ github.sha }}
+          path: |
+            dist/*.whl
+            dist/*.tar.gz
+          if-no-files-found: error
+          retention-days: 2
+
+  publish-pypi:
+    needs: build-and-validate
+    if: >-
+      (
+        github.event_name == 'push' &&
+        github.ref_type == 'tag' &&
+        github.ref_protected == true &&
+        startsWith(github.ref_name, 'v')
+      ) || (
+        inputs.publish == true &&
+        github.ref_type == 'tag' &&
+        github.ref_protected == true &&
+        startsWith(github.ref_name, 'v')
+      )
+    runs-on: ubuntu-latest
+    environment:
+      name: pypi
+      url: https://pypi.org/project/jring-client/
+    permissions:
+      id-token: write
+    steps:
+      - uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
+        with:
+          artifact-ids: ${{ needs.build-and-validate.outputs.artifact-id }}
+          path: dist
+      - uses: pypa/gh-action-pypi-publish@dc37677b2e1c63e2034f94d8a5b11f265b73ba33 # v1.14.2
+        with:
+          packages-dir: dist
+          attestations: true
+          print-hash: true
+          verbose: false

jring_client-0.5.0/.github/workflows/release-artifacts.yml

@@ -0,0 +1,104 @@
+name: release-artifacts
+
+on:
+  workflow_dispatch:
+  push:
+    tags: ["v*"]
+
+permissions:
+  contents: read
+
+jobs:
+  build-and-verify:
+    runs-on: ubuntu-latest
+    permissions:
+      contents: read
+      id-token: write
+      attestations: write
+    steps:
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
+      - uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97 # v7.0.0
+        with:
+          python-version: "3.13"
+          cache: pip
+      - name: Install pinned build tools
+        shell: bash
+        run: |
+          python -m pip download --only-binary=:all: \
+            --dest /tmp/jring-build-wheelhouse -r requirements/release.txt
+          python -m pip install -r requirements/release.txt
+      - name: Require a clean source and matching tag
+        shell: bash
+        run: |
+          git diff --exit-code
+          python scripts/evidence_tool.py scan .
+          if [[ "${GITHUB_REF_TYPE}" == "tag" ]]; then
+            python scripts/release_artifacts.py check-version "${GITHUB_REF_NAME}"
+          fi
+          python scripts/generate_cli_artifacts.py --check
+      - name: Prove isolated no-index build from pinned inputs
+        shell: bash
+        run: |
+          mkdir /tmp/jring-offline-source /tmp/jring-offline-dist
+          git archive HEAD -o /tmp/jring-offline-source.tar
+          tar -xf /tmp/jring-offline-source.tar -C /tmp/jring-offline-source
+          python -m venv /tmp/jring-offline-build
+          /tmp/jring-offline-build/bin/python -m pip install --no-index --find-links \
+            /tmp/jring-build-wheelhouse -r requirements/release.txt
+          cd /tmp/jring-offline-source
+          PIP_NO_INDEX=1 PIP_FIND_LINKS=/tmp/jring-build-wheelhouse \
+            /tmp/jring-offline-build/bin/python -m build \
+              --outdir /tmp/jring-offline-dist
+          /tmp/jring-offline-build/bin/python scripts/release_artifacts.py \
+            inspect /tmp/jring-offline-dist
+      - name: Build twice and compare bytes
+        shell: bash
+        run: |
+          export SOURCE_DATE_EPOCH="$(git show -s --format=%ct HEAD)"
+          python -m build --no-isolation --outdir dist-a
+          python -m build --no-isolation --outdir dist-b
+          python scripts/release_artifacts.py normalize-sdist dist-a/*.tar.gz --epoch "${SOURCE_DATE_EPOCH}"
+          python scripts/release_artifacts.py normalize-sdist dist-b/*.tar.gz --epoch "${SOURCE_DATE_EPOCH}"
+          python scripts/release_artifacts.py compare dist-a dist-b
+          python scripts/release_artifacts.py inspect dist-a
+          mkdir dist
+          cp dist-a/* dist/
+          python scripts/release_artifacts.py checksums dist
+      - name: Attest artifact provenance
+        uses: actions/attest-build-provenance@4d101475d8b20a2381f78447822ac1eab6504dd8 # v4.2.2
+        with:
+          subject-path: |
+            dist/*.whl
+            dist/*.tar.gz
+            dist/SHA256SUMS
+      - name: Upload reviewed artifacts without publishing a release
+        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
+        with:
+          name: jring-client-${{ github.sha }}
+          path: dist/
+          if-no-files-found: error
+          retention-days: 14
+
+  clean-install-smoke:
+    needs: build-and-verify
+    runs-on: ubuntu-latest
+    strategy:
+      matrix:
+        python-version: ["3.10", "3.13"]
+    steps:
+      - uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97 # v7.0.0
+        with:
+          python-version: ${{ matrix.python-version }}
+      - uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
+        with:
+          name: jring-client-${{ github.sha }}
+          path: dist
+      - name: Install outside the checkout and smoke safe paths
+        shell: bash
+        run: |
+          python -m venv /tmp/jring-release-smoke
+          /tmp/jring-release-smoke/bin/python -m pip install dist/*.whl
+          cd /tmp
+          /tmp/jring-release-smoke/bin/jring doctor --json
+          /tmp/jring-release-smoke/bin/jring status --simulate --json
+          /tmp/jring-release-smoke/bin/jring capabilities --simulate --json

jring_client-0.5.0/.github/workflows/test.yml

@@ -0,0 +1,24 @@
+name: test
+
+on:
+  push:
+  pull_request:
+
+permissions:
+  contents: read
+
+jobs:
+  test:
+    runs-on: ubuntu-latest
+    strategy:
+      matrix:
+        python-version: ["3.10", "3.13"]
+    steps:
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
+      - uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97 # v7.0.0
+        with:
+          python-version: ${{ matrix.python-version }}
+          cache: pip
+      - run: python -m pip install -e '.[ble,dev]'
+      - run: python scripts/generate_cli_artifacts.py --check
+      - run: python -m pytest -q

jring_client-0.5.0/.github/workflows/uv-tool-smoke.yml

@@ -0,0 +1,42 @@
+name: uv tool smoke
+
+on:
+  push:
+  pull_request:
+  workflow_dispatch:
+
+permissions:
+  contents: read
+
+jobs:
+  uv-tool-smoke:
+    runs-on: ubuntu-latest
+    timeout-minutes: 15
+    steps:
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
+        with:
+          persist-credentials: false
+      - uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97 # v7.0.0
+        with:
+          python-version: "3.13"
+          cache: pip
+      - uses: astral-sh/setup-uv@d08d816a1ea176d61a318eff45abd3dffef415b1 # main, resolved 2026-08-26
+        with:
+          enable-cache: false
+      - name: Build the reviewed wheel
+        shell: bash
+        run: |
+          set -euo pipefail
+          python -m pip install -r requirements/release.txt
+          python scripts/evidence_tool.py scan .
+          python scripts/generate_cli_artifacts.py --check
+          python -m build --wheel --outdir dist
+      - name: Install the exact wheel as an isolated uv tool
+        shell: bash
+        run: |
+          set -euo pipefail
+          uv tool install dist/*.whl
+          jring --version
+          jring status --simulate --json
+          jring capabilities --simulate --json
+          jring-tui </dev/null

jring_client-0.5.0/CONTRIBUTING.md

@@ -0,0 +1,55 @@
+# Contributing to JRing client
+
+Start with a public issue describing the user job, intended behavior, executable tests,
+artifacts, and blockers. Keep each change independently reviewable. Update JTBD and UX
+specification text before implementation, add a failing test, then make it pass.
+
+## Evidence safety
+
+Never attach or commit raw Bluetooth captures, Android application archives, addresses,
+BlueZ object paths, device or account identifiers, precise personal timestamps, health
+measurements, report maps, or vendor payload dumps. Do not paste them into an issue,
+pull request, CI log, commit message, or chat transcript.
+
+Work with synthetic evidence unless the owner separately authorizes a local hardware
+observation. Keep originals outside the repository. Create a minimal manifest from the
+synthetic example, then validate and derive locally:
+
+```sh
+python3 scripts/evidence_tool.py validate path/to/manifest.json
+python3 scripts/evidence_tool.py derive path/to/manifest.json > /tmp/jring-fixture.json
+```
+
+The validator refuses unsafe content; it does not promise to anonymize it. Review the
+derived fixture yourself before adding it. Run `python3 scripts/evidence_tool.py scan .`
+and the full tests before committing. If a finding or reproduction needs sensitive
+material, stop and follow [SECURITY.md](SECURITY.md) instead of opening a public issue.
+
+Schema-2 `*-claim.json` files are public review candidates and must have an exact
+`*-fixture.json` derivation. The current allowlist contains only the sealed vendor-main
+device-info canary shape. Do not turn a private owner manifest into a tracked claim:
+construct and review the minimal public candidate separately. Schema validation grants no
+permission to connect, activate notifications, write, publish private evidence, or
+claim hardware support.
+
+A schema-2 private device-info observation is a self-declared record of one historical
+attempt only. It withholds identifiers and model/firmware context. Keep it
+outside the repository, owned by the current user, and mode 0600 (or read-only 0400),
+then run only `python3 scripts/evidence_tool.py validate path/to/observation.json`.
+Validation performs no Bluetooth operation and authenticates neither the owner nor the
+observation. `derive` deliberately refuses this artifact; do not commit, attach, paste,
+or publish it. A future pre-run plan, its one attempt, this post-run observation, and
+any separately consented public candidate are four different artifacts and decisions.
+
+The `-manifest.json`, `-claim.json`, and `-fixture.json` suffixes are reserved across
+the repository; moving an unpaired artifact outside `tests/fixtures/evidence` does not
+bypass validation.
+
+Vendor writes remain disabled. Evidence contribution never authorizes scanning,
+connecting, subscribing, input injection, or packet emission.
+
+## License
+
+Project source, including accepted contributions, is distributed under the
+[MIT License](LICENSE). This repository does not add a separate contributor license
+agreement.

jring_client-0.5.0/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 JRing Client contributors
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

jring_client-0.5.0/MANIFEST.in

@@ -0,0 +1,10 @@
+include CONTRIBUTING.md
+include LICENSE
+include SECURITY.md
+recursive-include .github/workflows *.yml
+recursive-include docs *.md
+recursive-include requirements *.txt
+recursive-include scripts *.py
+include src/jring/resources/completions/jring.bash
+include src/jring/resources/man/jring.1
+recursive-include tests/fixtures *.json