launchline 0.2.1__tar.gz → 0.3.0__tar.gz

launchline-0.3.0/.github/dependabot.yml

@@ -0,0 +1,6 @@
+version: 2
+updates:
+  - package-ecosystem: github-actions
+    directory: /
+    schedule:
+      interval: weekly

launchline-0.3.0/.github/workflows/ci.yml

@@ -0,0 +1,64 @@
+name: CI
+'on':
+  workflow_call: null
+  workflow_dispatch: null
+  push:
+    branches:
+    - main
+  pull_request:
+    branches:
+    - main
+permissions:
+  contents: read
+concurrency:
+  group: ci-${{ github.workflow }}-${{ github.ref }}
+  cancel-in-progress: true
+jobs:
+  check:
+    name: Python (${{ matrix.os }}, ${{ matrix.python }})
+    runs-on: ${{ matrix.os }}
+    timeout-minutes: 15
+    strategy:
+      fail-fast: false
+      matrix:
+        os:
+        - ubuntu-latest
+        - windows-latest
+        - macos-latest
+        python:
+        - '3.12'
+        - '3.13'
+        - '3.14'
+    steps:
+    - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1
+      with:
+        persist-credentials: false
+        ref: ${{ github.event.pull_request.head.sha || github.sha }}
+    - uses: astral-sh/setup-uv@07a047e608db84b3d8c06cd9a7c7dcc9c355c18e
+      with:
+        python-version: ${{ matrix.python }}
+    - run: uv sync --locked --group dev
+    - run: uv run poe check
+    - run: uv build
+    - run: uv run python scripts/package_smoke.py
+    - run: uv run poe mutation
+      if: matrix.os == 'windows-latest'
+    - name: Test results
+      if: always()
+      uses: mikepenz/action-junit-report@6ef3fdcfcd5f0b5d14df3e659ef19b8c6820f93d
+      with:
+        report_paths: junit.xml
+        annotate_only: true
+        check_annotations: false
+        check_retries: false
+        require_tests: true
+    - uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9
+      if: always()
+      with:
+        name: evidence-${{ matrix.os }}-${{ matrix.python }}
+        path: 'junit.xml
+
+          docs/validation/*json
+
+          '
+        if-no-files-found: error

launchline-0.3.0/.github/workflows/release.yml

@@ -0,0 +1,231 @@
+name: Release
+'on':
+  push:
+    branches:
+    - main
+  workflow_dispatch:
+    inputs:
+      force-patch:
+        description: Force patch bump when no releasable commits exist
+        type: boolean
+        default: false
+permissions:
+  contents: read
+concurrency:
+  group: release
+  cancel-in-progress: false
+jobs:
+  target:
+    if: github.ref == 'refs/heads/main' && github.actor == 'mikejhill' && github.triggering_actor == 'mikejhill'
+    runs-on: ubuntu-latest
+    timeout-minutes: 20
+    outputs:
+      version: ${{ steps.semrel.outputs.version }}
+    steps:
+    - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1
+      with:
+        persist-credentials: false
+        fetch-depth: 0
+        ref: ${{ github.sha }}
+    - name: Download checksum-pinned semantic-release CLI
+      shell: bash
+      run: "set -euo pipefail\ndest=\"$RUNNER_TEMP/semantic-release-v2.31.0\"\ncurl --fail --silent --show-error --location\
+        \ --proto '=https' --tlsv1.2 \\\n  https://github.com/go-semantic-release/semantic-release/releases/download/v2.31.0/semantic-release_v2.31.0_linux_amd64\
+        \ \\\n  --output \"$dest\"\nprintf '%s  %s\\n' 'b8f518b1aeb1d1742f4e6e91a179b707cea4309a64fe3854f465bf724f04f6d3'\
+        \ \"$dest\" | sha256sum --check --strict\nchmod 0755 \"$dest\"\n"
+    - name: Preload verified runtime plugins
+      run: python3 scripts/prepare_semrel.py
+    - name: Determine version without publishing
+      id: semrel
+      shell: bash
+      env:
+        GITHUB_TOKEN: ${{ github.token }}
+        FORCE_PATCH: ${{ inputs.force-patch || false }}
+      run: 'set -euo pipefail
+
+        args=(--dry --allow-initial-development-versions --changelog release-changelog.md --allow-no-changes --plugin-resolver-disable-batch-prefetch)
+
+        if [ "$FORCE_PATCH" = true ]; then args+=(--force-bump-patch-version); fi
+
+        "$RUNNER_TEMP/semantic-release-v2.31.0" "${args[@]}"
+
+        python3 scripts/release_version.py
+
+        '
+    name: Target
+  ci:
+    name: Python (${{ matrix.os }}, ${{ matrix.python }})
+    runs-on: ${{ matrix.os }}
+    timeout-minutes: 15
+    strategy:
+      fail-fast: false
+      matrix:
+        os:
+        - ubuntu-latest
+        - windows-latest
+        - macos-latest
+        python:
+        - '3.12'
+        - '3.13'
+        - '3.14'
+    steps:
+    - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1
+      with:
+        persist-credentials: false
+        ref: ${{ github.sha }}
+    - uses: astral-sh/setup-uv@07a047e608db84b3d8c06cd9a7c7dcc9c355c18e
+      with:
+        python-version: ${{ matrix.python }}
+    - run: uv sync --locked --group dev
+    - run: uv run poe check
+    - run: uv build
+    - run: uv run python scripts/package_smoke.py
+    - run: uv run poe mutation
+      if: matrix.os == 'windows-latest'
+    - name: Test results
+      if: always()
+      uses: mikepenz/action-junit-report@6ef3fdcfcd5f0b5d14df3e659ef19b8c6820f93d
+      with:
+        report_paths: junit.xml
+        annotate_only: true
+        check_annotations: false
+        check_retries: false
+        require_tests: true
+    - uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9
+      if: always()
+      with:
+        name: evidence-${{ matrix.os }}-${{ matrix.python }}
+        path: 'junit.xml
+
+          docs/validation/*json
+
+          '
+        if-no-files-found: error
+    needs: target
+    if: needs.target.outputs.version != ''
+  build:
+    needs:
+    - target
+    - ci
+    runs-on: ubuntu-latest
+    timeout-minutes: 20
+    outputs:
+      artifact-id: ${{ steps.dist.outputs.artifact-id }}
+    steps:
+    - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1
+      with:
+        persist-credentials: false
+        fetch-depth: 0
+        ref: ${{ github.sha }}
+    - uses: astral-sh/setup-uv@07a047e608db84b3d8c06cd9a7c7dcc9c355c18e
+    - name: Build tested version without publishing credentials
+      run: '[[ "$VERSION" =~ ^[0-9]+\.[0-9]+\.[0-9]+$ ]] || exit 1
+
+        uv sync --locked --group dev
+
+        uv run poe check
+
+        python3 - <<''PY''
+
+        import os,pathlib
+
+        p=pathlib.Path(''README.md'')
+
+        p.write_text(p.read_text().replace(''(docs/'', ''(https://raw.githubusercontent.com/''+os.environ[''GITHUB_REPOSITORY'']+''/v''+os.environ[''VERSION'']+''/docs/''))
+
+        PY
+
+        uv build
+
+        uv run python scripts/package_smoke.py
+
+        printf ''Built from reviewed main commit %s\n'' "$GITHUB_SHA" > release-notes.md
+
+        '
+      env:
+        VERSION: ${{ needs.target.outputs.version }}
+        SETUPTOOLS_SCM_PRETEND_VERSION: ${{ needs.target.outputs.version }}
+    - uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9
+      id: dist
+      with:
+        name: trusted-release
+        path: 'dist/*
+
+          release-notes.md'
+        if-no-files-found: error
+        retention-days: 7
+    name: Build
+  github-release:
+    if: github.ref == 'refs/heads/main' && github.actor == 'mikejhill' && github.triggering_actor == 'mikejhill' && needs.build.result
+      == 'success'
+    needs:
+    - target
+    - build
+    - attest
+    runs-on: ubuntu-latest
+    timeout-minutes: 20
+    permissions:
+      contents: write # Create immutable refs and upload tested release artifacts.
+    steps:
+    - uses: actions/download-artifact@9000827ccba6bdab643e8b6fd33ac0654aef8333
+      with:
+        artifact-ids: ${{ needs.build.outputs.artifact-id }}
+        path: release
+    - name: Publish same-run artifacts from trusted merge
+      run: "# The approved immutable-v* ruleset must already prohibit tag updates/deletion.\nancestor=$(gh api \"repos/$GITHUB_REPOSITORY/compare/$GITHUB_SHA...main\"\
+        \ --jq .merge_base_commit.sha)\ntest \"$ancestor\" = \"$GITHUB_SHA\" || { echo 'Release commit is no longer on main.'\
+        \ >&2; exit 1; }\npython3 - <<'PY'\nimport json,os,pathlib,re\nassert re.fullmatch(r'v[0-9]+\\.[0-9]+\\.[0-9]+',os.environ['TAG'])\n\
+        assert re.fullmatch(r'[0-9a-f]{40}',os.environ['GITHUB_SHA'])\npathlib.Path('release-ref.json').write_text(json.dumps({'ref':'refs/tags/'+os.environ['TAG'],'sha':os.environ['GITHUB_SHA']}))\n\
+        PY\n# Ref creation is atomic: if another process created it first, accept only the same commit.\nif ! gh api --method\
+        \ POST \"repos/$GITHUB_REPOSITORY/git/refs\" --input release-ref.json >/dev/null 2>tag-create-error.txt; then\n  actual=$(gh\
+        \ api \"repos/$GITHUB_REPOSITORY/commits/$TAG\" --jq .sha)\n  test \"$actual\" = \"$GITHUB_SHA\" || { echo 'Tag creation\
+        \ failed or a conflicting tag exists.' >&2; exit 1; }\nfi\nactual=$(gh api \"repos/$GITHUB_REPOSITORY/commits/$TAG\"\
+        \ --jq .sha)\ntest \"$actual\" = \"$GITHUB_SHA\" || { echo 'Tag does not match the trusted merge.' >&2; exit 1; }\n\
+        if gh release view \"$TAG\" --repo \"$GITHUB_REPOSITORY\" >/dev/null 2>&1; then\n  :\nelse\n  gh release create \"\
+        $TAG\" --repo \"$GITHUB_REPOSITORY\" --verify-tag --title \"$TAG\" --generate-notes --notes-file release/release-notes.md\n\
+        fi\ngh release upload \"$TAG\" release/dist/* --repo \"$GITHUB_REPOSITORY\" --clobber\n"
+      env:
+        GH_TOKEN: ${{ github.token }}
+        TAG: v${{ needs.target.outputs.version }}
+    name: Github Release
+  pypi:
+    if: github.ref == 'refs/heads/main' && github.actor == 'mikejhill' && github.triggering_actor == 'mikejhill' && needs.github-release.result
+      == 'success'
+    needs:
+    - target
+    - build
+    - github-release
+    runs-on: ubuntu-latest
+    timeout-minutes: 20
+    environment: pypi
+    permissions:
+      id-token: write # OIDC identity for attestation or trusted PyPI publishing.
+    steps:
+    - uses: actions/download-artifact@9000827ccba6bdab643e8b6fd33ac0654aef8333
+      with:
+        artifact-ids: ${{ needs.build.outputs.artifact-id }}
+        path: release
+    - uses: pypa/gh-action-pypi-publish@7245906fb61fa33a13554f9d5fb856fe61758086
+      with:
+        packages-dir: release/dist/
+        skip-existing: true
+    name: Pypi
+  attest:
+    name: Attest tested artifacts
+    needs: build
+    if: github.ref == 'refs/heads/main' && github.actor == 'mikejhill' && github.triggering_actor == 'mikejhill' && needs.build.result
+      == 'success'
+    runs-on: ubuntu-latest
+    timeout-minutes: 10
+    permissions:
+      contents: read
+      id-token: write # OIDC identity for attestation or trusted PyPI publishing.
+      attestations: write # Store provenance for these same-run build artifacts.
+    steps:
+    - uses: actions/download-artifact@9000827ccba6bdab643e8b6fd33ac0654aef8333
+      with:
+        path: release
+        artifact-ids: ${{ needs.build.outputs.artifact-id }}
+    - uses: actions/attest@1e69f48acb82d1966a394da916b4c1698aa569d6
+      with:
+        subject-path: release/dist/*

{launchline-0.2.1 → launchline-0.3.0}/.gitignore

@@ -257,3 +257,10 @@ __marimo__/
 
 # hatch-vcs generated version file
 src/launchline/_version.py
+
+junit.xml
+release/
+
+.semrel/
+.version
+release-changelog.md

launchline-0.3.0/.semrelrc

@@ -0,0 +1,21 @@
+{
+  "plugins": {
+    "provider": {
+      "name": "github@1.19.0"
+    },
+    "commit-analyzer": {
+      "name": "default@1.15.0"
+    },
+    "changelog-generator": {
+      "name": "default@1.15.0"
+    },
+    "ci-condition": {
+      "name": "default@1.11.0"
+    },
+    "files-updater": {
+      "names": [
+        "npm@1.11.0"
+      ]
+    }
+  }
+}

{launchline-0.2.1 → launchline-0.3.0}/PKG-INFO

@@ -1,6 +1,6 @@
-Metadata-Version: 2.4
+Metadata-Version: 2.5
 Name: launchline
-Version: 0.2.1
+Version: 0.3.0
 Summary: A lightweight terminal launcher for interactive CLI tools.
 Project-URL: Homepage, https://github.com/mikejhill/launchline
 Project-URL: Repository, https://github.com/mikejhill/launchline
@@ -31,7 +31,7 @@ A lightweight terminal launcher for interactive CLI tools. Define your frequentl
 used commands in a TOML config file, then pick them from a fuzzy-searchable menu
 instead of remembering flags and paths.
 
-![LaunchLine demo](https://raw.githubusercontent.com/mikejhill/launchline/v0.2.1/docs/images/demo.gif)
+![LaunchLine demo](https://raw.githubusercontent.com/mikejhill/launchline/v0.3.0/docs/images/demo.gif)
 
 ## Why
 
@@ -52,7 +52,7 @@ instead.
 
 |           Fuzzy search            |         Arrow-key navigation          |
 | :-------------------------------: | :-----------------------------------: |
-| ![Search](https://raw.githubusercontent.com/mikejhill/launchline/v0.2.1/docs/images/search.png) | ![Navigate](https://raw.githubusercontent.com/mikejhill/launchline/v0.2.1/docs/images/navigate.png) |
+| ![Search](https://raw.githubusercontent.com/mikejhill/launchline/v0.3.0/docs/images/search.png) | ![Navigate](https://raw.githubusercontent.com/mikejhill/launchline/v0.3.0/docs/images/navigate.png) |
 
 ## Installation
 
@@ -215,3 +215,16 @@ uv run mypy src
 ## License
 
 MIT
+
+## See Also
+
+- **[LaunchLine (Rust)](https://github.com/mikejhill/launchline-rust)** — a Rust
+  implementation with the shared configuration and keyboard contract,
+  ships as a single native binary.
+
+## Compatibility and validation
+
+Use `launchline --check-config` to validate configuration without opening the menu.
+Set `NO_COLOR` for a selection marker without ANSI color. See the
+[compatibility matrix](https://raw.githubusercontent.com/mikejhill/launchline/v0.3.0/docs/compatibility.md), [reproducible test and performance
+results](https://raw.githubusercontent.com/mikejhill/launchline/v0.3.0/docs/validation/report.md), and [release readiness](https://raw.githubusercontent.com/mikejhill/launchline/v0.3.0/docs/releasing.md).

{launchline-0.2.1 → launchline-0.3.0}/README.md

@@ -9,7 +9,7 @@ A lightweight terminal launcher for interactive CLI tools. Define your frequentl
 used commands in a TOML config file, then pick them from a fuzzy-searchable menu
 instead of remembering flags and paths.
 
-![LaunchLine demo](https://raw.githubusercontent.com/mikejhill/launchline/v0.2.1/docs/images/demo.gif)
+![LaunchLine demo](https://raw.githubusercontent.com/mikejhill/launchline/v0.3.0/docs/images/demo.gif)
 
 ## Why
 
@@ -30,7 +30,7 @@ instead.
 
 |           Fuzzy search            |         Arrow-key navigation          |
 | :-------------------------------: | :-----------------------------------: |
-| ![Search](https://raw.githubusercontent.com/mikejhill/launchline/v0.2.1/docs/images/search.png) | ![Navigate](https://raw.githubusercontent.com/mikejhill/launchline/v0.2.1/docs/images/navigate.png) |
+| ![Search](https://raw.githubusercontent.com/mikejhill/launchline/v0.3.0/docs/images/search.png) | ![Navigate](https://raw.githubusercontent.com/mikejhill/launchline/v0.3.0/docs/images/navigate.png) |
 
 ## Installation
 
@@ -193,3 +193,16 @@ uv run mypy src
 ## License
 
 MIT
+
+## See Also
+
+- **[LaunchLine (Rust)](https://github.com/mikejhill/launchline-rust)** — a Rust
+  implementation with the shared configuration and keyboard contract,
+  ships as a single native binary.
+
+## Compatibility and validation
+
+Use `launchline --check-config` to validate configuration without opening the menu.
+Set `NO_COLOR` for a selection marker without ANSI color. See the
+[compatibility matrix](https://raw.githubusercontent.com/mikejhill/launchline/v0.3.0/docs/compatibility.md), [reproducible test and performance
+results](https://raw.githubusercontent.com/mikejhill/launchline/v0.3.0/docs/validation/report.md), and [release readiness](https://raw.githubusercontent.com/mikejhill/launchline/v0.3.0/docs/releasing.md).

launchline-0.3.0/docs/compatibility.md

@@ -0,0 +1,31 @@
+# Shared compatibility contract
+
+Baseline: Python `904ace1`, Rust `109a68b`. Modernized together on MHILL-LAPTOP.
+This matrix records the supported contract and evidence, not universal parity.
+
+| Surface | Baseline gap | Implemented contract | Evidence |
+| --- | --- | --- | --- |
+| Configuration | Python coerced types; Rust discarded invalid args/env | Strict strings, booleans, string arrays/maps; reject controls/NUL and illegal environment keys | Both unit suites; 15 differential real CLI cases in validation/parity.json |
+| Resolution | Same CLI > LAUNCHLINE_CONFIG > default precedence | Explicit missing paths fail; exclusive default creation; missing/file cwd warns and inherits | Config tests; actual CLI and child processes |
+| Search | Equivalent greedy subsequence scoring | Identical score bonuses and stable ties; monotonic search avoids tail scans | Shared 405-case ASCII/Unicode score corpus; paired benchmarks |
+| Numeric selection | Python non-ASCII digit crash | ASCII digits only, existing prefix and shortcut semantics | Keyboard and mutation tests |
+| Editing | Rust UTF-8 byte cursor could panic | Character boundary editing; Emacs keys, arrows, Escape clear/quit | Rust unit UX; Python decoder/UI tests; real PTY flows |
+| CLI | Rust accepted arbitrary log levels; Python config-path tracebacks | Same five uppercase levels; friendly failures; --check-config validates without opening TUI; non-TTY guard | Actual subprocess and wheel smoke tests |
+| Launch | Rust cloned entire environment; POSIX status representation differed | Literal argv, inherited env plus overlay, cwd, child exit code; interrupted child 130; POSIX signal 128+signal | Actual child probe; Python Linux SIGTERM test; Rust Unix test added but not run locally |
+| Terminal | Windows inherited ignore flag; Unix queued input loss | Enable own Ctrl+C; restore terminal; preserve queued UTF-8 input; stop on EOF/read error | Windows PTY both; Linux PTY Python; faithful OS-boundary simulations |
+| Accessibility | Color-only emphasis | NO_COLOR suppresses SGR with visible selection marker; keyboard navigation and resize | PTY output/assertions both; no screen-reader certification |
+| Distribution | Rust archives lacked icons; wrapper used wrong version metadata | Bundle icons; wrapper uses launchline-rust version, verifies SHA256SUMS before atomic cache install | Built native archive and isolated installed wheel; tamper/interruption tests |
+| Release | Python #1 pending; Rust broad permissions | Preserve #1 pin/generated notes; owner + rerun owner gates, exact SHA, read-only build, isolated publishers, provenance | actionlint, zizmor auditor, mocked actual publisher body, no-remote semantic-release fixture |
+
+Unknown TOML keys remain ignored for compatibility. Shell expansion is not supported.
+Portable home expansion is `~`/`~/...`; Python also recognizes OS-supported named-user
+forms. Diagnostic wording, argparse/clap help formatting, platform process lookup,
+batch execution, Unicode database versions, terminal escape timing and font widths
+can differ. Cursor accounting uses code points rather than grapheme/display columns;
+wide/combining glyph layout is not claimed equivalent. Python needs CPython >=3.12;
+Rust is native, with a separate Python >=3.9 download wrapper. Binary and interpreter
+startup/memory costs therefore differ. No maximum-performance claim is made.
+
+Executed: Windows x64 both; Ubuntu/WSL Python. macOS, ARM targets, Rust Linux/macOS,
+physical terminal/screen-reader combinations and hosted CI have not been executed
+here. See [validation report](validation/report.md) and [release readiness](releasing.md).

launchline-0.3.0/docs/releasing.md

@@ -0,0 +1,40 @@
+# Release readiness
+
+Trusted owner merges to main trigger conventional-commit version calculation.
+Read-only jobs test/build the exact merge SHA before separate publishers consume
+same-run artifacts. Both actor and rerun initiator must be mikejhill. Publisher
+jobs do not check out repository code; write/OIDC permissions are job-scoped.
+Artifacts receive provenance. Conflicting tags fail; generated GitHub notes are
+retained. Release publication remains a production action and was not invoked.
+
+The go-semantic-release CLI is pinned to 2.31.0 with a verified checksum; exact
+runtime plugin versions and Linux/Windows checksums are in
+scripts/semantic-release-plugins.json. prepare_semrel.py verifies/preloads them.
+release_version.py validates the generated changelog header (the CLI dry-run does
+not produce its version-file output). The disposable fixture script removes token
+variables, has no remote and verifies no tags; its evidence is in validation/.
+It exercises the Git provider, not the production GitHub provider or PyPI upload.
+Publisher policy tests execute the real workflow shell body with an intercepting
+gh shell function; no requests reach GitHub.
+
+Current VerdiClip workflow was read as the reference; Python PR #1 at
+96d72c1e157e57e1b1aa9c5ad1dfbf51aaa606ab was inspected and its CLI pin,
+immutable tag conflict check, owner/rerun gates and generated notes preserved
+selectively. Neither PR nor production settings were merged or modified.
+
+## Remaining setup (owner action required)
+
+Read-only inspection found Python's existing pypi environment still has a required
+reviewer and no deployment branch policy. Rust's pypi environment returned 404
+(absent). PyPI trusted-publisher identities could not be verified. Thus production
+approval-free PyPI delivery is NOT ready. Before rollout, establish/verify main-only
+environment restrictions and the PyPI identity for the corresponding repository,
+release.yml and pypi environment. Any removal of the existing reviewer requires
+separate authorization; this task deliberately leaves the gate unchanged. Verify
+version-tag protection and GitHub attestation availability as well. No credentials
+were created and no repository security setting was changed.
+
+To reproduce a safe version fixture, explicitly set SEMREL_BIN to the verified CLI
+and run scripts/release_dryrun.py through the repository's uv environment. Do not
+substitute a production provider or run publication commands as a dry run. A failed
+production upload should be retried on its original run; never move an existing tag.

launchline-0.3.0/docs/validation/baseline.json

@@ -0,0 +1,31 @@
+{
+  "search_ns": [
+    101495.7,
+    100916.65,
+    99897.25,
+    100382.7,
+    100143.6,
+    100576.2,
+    101188.25
+  ],
+  "search_median_ns": 100576.2,
+  "help_ms": [
+    200.2209,
+    193.2263,
+    193.9891,
+    185.2878,
+    182.4954,
+    193.7004,
+    188.1265,
+    193.9806,
+    188.3141,
+    213.0736,
+    196.606,
+    187.4159,
+    194.0006,
+    184.4261,
+    189.1814
+  ],
+  "help_median_ms": 193.2263,
+  "python": "3.12.13 (main, Mar 20 2026, 00:36:00) [MSC v.1944 64 bit (AMD64)]"
+}

launchline-0.3.0/docs/validation/benchmark.py

@@ -0,0 +1,45 @@
+"""Reproduce search microbenchmarks and CLI process startup samples."""
+
+from __future__ import annotations
+import json
+import statistics
+import subprocess
+import sys
+import time
+from pathlib import Path
+from launchline.fuzzy import FuzzyMatcher
+
+
+class Benchmark:
+    """Record medians without pass/fail timing thresholds."""
+
+    @staticmethod
+    def main() -> None:
+        """Write raw samples for a short match followed by a long tail."""
+        samples = []
+        for _ in range(7):
+            start = time.perf_counter_ns()
+            for _ in range(2000):
+                assert FuzzyMatcher.score("abc", "abc" + "x" * 4096) == 10
+            samples.append((time.perf_counter_ns() - start) / 2000)
+        startup = []
+        for _ in range(15):
+            start = time.perf_counter_ns()
+            subprocess.run(
+                [sys.executable, "-m", "launchline", "--help"],
+                check=True,
+                capture_output=True,
+            )
+            startup.append((time.perf_counter_ns() - start) / 1e6)
+        result = {
+            "search_ns": samples,
+            "search_median_ns": statistics.median(samples),
+            "help_ms": startup,
+            "help_median_ms": statistics.median(startup),
+            "python": sys.version,
+        }
+        Path(sys.argv[1]).write_text(json.dumps(result, indent=2), encoding="utf-8")
+
+
+if __name__ == "__main__":
+    Benchmark.main()

launchline-0.3.0/docs/validation/current.json

@@ -0,0 +1,31 @@
+{
+  "search_ns": [
+    1389.75,
+    1386.6,
+    1255.0,
+    1225.6,
+    1257.05,
+    1271.6,
+    1237.85
+  ],
+  "search_median_ns": 1257.05,
+  "help_ms": [
+    198.415,
+    184.8518,
+    187.7005,
+    186.6807,
+    193.6874,
+    186.1085,
+    188.476,
+    185.1123,
+    192.4172,
+    189.8451,
+    183.0751,
+    181.1014,
+    184.7011,
+    194.8148,
+    183.4375
+  ],
+  "help_median_ms": 186.6807,
+  "python": "3.12.13 (main, Mar 20 2026, 00:36:00) [MSC v.1944 64 bit (AMD64)]"
+}

launchline-0.3.0/docs/validation/hosted-ci.md

@@ -0,0 +1,22 @@
+# Hosted CI follow-up
+
+Draft PR: https://github.com/mikejhill/launchline/pull/2
+
+Mike authorized non-force pushes and draft PRs after the local validation snapshot.
+Python's initial hosted run 39871242844 passed all nine Windows/Linux/macOS and
+Python 3.12/3.13/3.14 combinations. That run checked GitHub's generated merge SHA;
+CI now explicitly checks out pull_request.head.sha so subsequent PR runs execute
+the exact proposed source commit. Main/release checkout semantics are unchanged.
+
+Rust's initial run 39871247740 exposed two portable-test issues: macOS temp-directory
+aliases (/var versus /private/var), and a Windows test that mocked global os.name
+on Unix, thereby changing pathlib behavior. The child cwd assertion now compares
+canonical directory identities while still asserting literal argv/environment.
+Wrapper platform mocks affect only the wrapper's os reference, and LOCALAPPDATA
+no longer eagerly evaluates an unused home fallback. No test was disabled.
+
+The PR checks provide final run status and commit identities; the accompanying
+report.md and summary.json retain the earlier local validation snapshot. Native
+Linux x64, Windows x64 and macOS ARM64 are in Rust PR CI. Release-only Linux ARM64,
+Windows ARM64 and macOS x64 targets are not exercised by this PR matrix. Production
+publishing, repository security settings and credentials remain untouched.