lib-cli-exit-tools 2.0.0__tar.gz → 2.1.1__tar.gz

{lib_cli_exit_tools-2.0.0 → lib_cli_exit_tools-2.1.1}/.github/workflows/ci.yml

@@ -5,6 +5,9 @@ on:
     branches: [ main, master ]
   pull_request:
     branches: [ main, master ]
+  schedule:
+    # Run daily at 3:17 AM UTC (off-peak hours, odd minute to avoid congestion)
+    - cron: '17 3 * * *'
 
 jobs:
   test:
@@ -16,11 +19,20 @@ jobs:
         os: [ubuntu-latest, macos-latest, windows-latest]
         # Test against Python 3.13 and the latest 3.x available on Actions runners
         python: ["3.13", "3.x"]
+    env:
+      PYO3_USE_ABI3_FORWARD_COMPATIBILITY: "1"
+      PYTHONIOENCODING: "utf-8"
     steps:
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v6
       - uses: actions/setup-python@v6
         with:
           python-version: ${{ matrix.python }}
+          cache: 'pip'
+          cache-dependency-path: 'pyproject.toml'
+      - name: Install uv
+        uses: astral-sh/setup-uv@v7
+        with:
+          enable-cache: true
       - name: Extract project metadata
         shell: python
         run: |
@@ -45,6 +57,13 @@ jobs:
         run: |
           choco install -y make
           echo "C:\\ProgramData\\chocolatey\\bin" >> $env:GITHUB_PATH
+      - name: Install journald prerequisites
+        if: runner.os == 'Linux'
+        shell: bash
+        run: |
+          sudo apt-get update
+          sudo apt-get install -y python3-systemd
+
       - name: Upgrade pip
         shell: bash
         run: python -m pip install --upgrade pip
@@ -52,13 +71,28 @@ jobs:
       - name: Install dev deps
         shell: bash
         run: |
-          pip install -e .[dev]
+          uv pip install -e .[dev] --system
 
       - name: Install Windows Event Log prerequisites
         if: runner.os == 'Windows'
         shell: bash
         run: |
-          pip install pywin32
+          uv pip install pywin32 --system
+      - name: Cache ruff
+        uses: actions/cache@v4
+        with:
+          path: .ruff_cache
+          key: ruff-${{ runner.os }}-${{ github.sha }}
+          restore-keys: |
+            ruff-${{ runner.os }}-
+      - name: Cache pyright
+        uses: actions/cache@v4
+        with:
+          path: .pyright
+          key: pyright-${{ runner.os }}-py${{ matrix.python }}-${{ github.sha }}
+          restore-keys: |
+            pyright-${{ runner.os }}-py${{ matrix.python }}-
+            pyright-${{ runner.os }}-
       - name: Run full test suite (lint, types, tests, coverage, codecov)
         shell: bash
         env:
@@ -79,10 +113,12 @@ jobs:
     name: pipx/uv verification (ubuntu)
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v6
       - uses: actions/setup-python@v6
         with:
           python-version: "3.13"
+          cache: 'pip'
+          cache-dependency-path: 'pyproject.toml'
       - name: Extract project metadata
         shell: python
         run: |
@@ -123,10 +159,12 @@ jobs:
     name: Execute notebooks (ubuntu, Python 3.13)
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v6
       - uses: actions/setup-python@v6
         with:
           python-version: "3.13"
+          cache: 'pip'
+          cache-dependency-path: 'pyproject.toml'
       - name: Install notebook runner deps
         run: |
           python -m pip install --upgrade pip

{lib_cli_exit_tools-2.0.0 → lib_cli_exit_tools-2.1.1}/.github/workflows/codeql.yml

@@ -23,7 +23,7 @@ jobs:
 
     steps:
       - name: Checkout repository
-        uses: actions/checkout@v5
+        uses: actions/checkout@v6
 
       - name: Initialize CodeQL
         uses: github/codeql-action/init@v4

{lib_cli_exit_tools-2.0.0 → lib_cli_exit_tools-2.1.1}/.github/workflows/release.yml

@@ -14,29 +14,37 @@ jobs:
     permissions:
       contents: read
     steps:
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v6
       - name: Verify PyPI token is set
         run: |
           if [ -z "${{ secrets.PYPI_API_TOKEN }}" ]; then
-            echo "::error title=Missing PyPI token::Set the PYPI_API_TOKEN secret in GitHub repository settings to enable PyPI publishing on releases." 
-            echo "See: https://docs.github.com/en/actions/security-guides/using-secrets-in-github-actions" 
+            echo "::error title=Missing PyPI token::Set the PYPI_API_TOKEN secret in GitHub repository settings to enable PyPI publishing on releases."
+            echo "See: https://docs.github.com/en/actions/security-guides/using-secrets-in-github-actions"
             exit 1
           fi
       - uses: actions/setup-python@v6
         with:
           python-version: '3.13'
+          cache: 'pip'
+          cache-dependency-path: 'pyproject.toml'
+      - name: Install uv
+        uses: astral-sh/setup-uv@v7
+        with:
+          enable-cache: true
       - name: Build artifacts
         run: |
-          python -m pip install --upgrade pip build
+          python -m pip install --upgrade pip
+          uv pip install build --system
           python -m build
       - name: Publish to PyPI
         # Use the rolling major tag to get latest Twine/standards support (e.g., Core Metadata 2.4)
         uses: pypa/gh-action-pypi-publish@release/v1
         with:
           password: ${{ secrets.PYPI_API_TOKEN }}
+          attestations: false
           skip-existing: true
       - name: Upload artifacts
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@v5
         with:
           name: dist
           path: dist/*

{lib_cli_exit_tools-2.0.0 → lib_cli_exit_tools-2.1.1}/.gitignore

@@ -178,3 +178,4 @@ result
 poetry.lock
 pdm.lock
 uv.lock
+/.github_bak/

{lib_cli_exit_tools-2.0.0 → lib_cli_exit_tools-2.1.1}/AGENTS.md

@@ -50,8 +50,8 @@ when writing or refracturing Python scripts, apply those Rules :
 ### Versioning & Releases
 
 - Single source of truth for the package version is `pyproject.toml` (`[project].version`).
-- Runtime code reads metadata via `importlib.metadata`; do not duplicate the version in code files.
-- On a version bump, update only `pyproject.toml` and the `CHANGELOG.md` entry; runtime code should continue to read the version via `importlib.metadata` (no separate `__init__conf__` file).
+- Automation rewrites `src/lib_cli_exit_tools/__init__conf__.py` from `pyproject.toml`, so runtime code imports generated constants instead of querying `importlib.metadata`.
+- After updating project metadata (version, summary, URLs, authors) run `make test` (or `python -m scripts.test`) to regenerate the metadata module before committing.
 - Tag releases `vX.Y.Z` and push tags; CI will build artifacts and publish when configured.
 
 ### Common Make Targets (Alphabetical)

{lib_cli_exit_tools-2.0.0 → lib_cli_exit_tools-2.1.1}/CHANGELOG.md

@@ -3,6 +3,28 @@
 All notable changes to this project are documented here. The format follows [Keep a Changelog](https://keepachangelog.com/en/1.1.0/) and the project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
 
+## [2.1.1] - 2025-12-08
+
+### Changed
+- Enforced strict data architecture by introducing TypedDict classes (`RichClickSnapshot`, `CliContextState`, `ConfigSnapshot`, `SessionOverrides`) to eliminate raw dictionary access patterns.
+- Added `_is_posix_platform()` helper function to centralise platform detection and avoid string literal comparisons.
+- Replaced assert-based type guards with explicit conditional checks to satisfy Bandit security scanning.
+
+### Refactored
+- Comprehensive test suite refactoring following clean architecture principles:
+  - Each test now verifies exactly one behaviour with descriptive naming.
+  - Added OS-specific markers (`@pytest.mark.posix_only`, `@pytest.mark.windows_only`, `@pytest.mark.os_agnostic`) for platform-aware test execution.
+  - Centralised shared fixtures in `conftest.py` including `cli_runner`, `strip_ansi`, `reset_config`, and `sysexits_mode`.
+  - Prefer real behaviour tests over mocks where possible, particularly for signal handling.
+  - Organised tests into logical sections with clear header comments.
+
+## [2.1.0] - 2025-10-13
+
+### Changed
+- `scripts.build` now calls `sync_metadata_module()` before invoking `python -m build`, ensuring wheels and sdists ship freshly generated metadata.
+- Added an explicit CLI test covering the `--version` flag so console-script aliases stay aligned with generated constants.
+- Updated README, INSTALL instructions, and the Quickstart notebook to document `lib-cli-exit-tools` as the canonical console entry point alongside its aliases.
+
 ## [2.0.0] - 2025-10-12
 
 ### Changed

{lib_cli_exit_tools-2.0.0 → lib_cli_exit_tools-2.1.1}/DEVELOPMENT.md

@@ -118,10 +118,10 @@ keep the signal-handling guarantees honest.
 
 ## Versioning & Metadata
 
-- Single source of truth for package metadata is `pyproject.toml` (`[project]`).
-- The library reads its own installed metadata at runtime via `importlib.metadata` (see `src/lib_cli_exit_tools/__init__conf__.py`).
-- Do not duplicate the version in code; bump only `pyproject.toml` and update `CHANGELOG.md`.
-- Console script name is discovered from entry points; defaults to `lib_cli_exit_tools`.
+- `pyproject.toml` (`[project]`) remains the single source of truth for name, version, homepage, and authors.
+- `scripts._utils.sync_metadata_module()` rewrites `src/lib_cli_exit_tools/__init__conf__.py` so runtime code consumes generated constants instead of `importlib.metadata`.
+- After editing project metadata (name, version, description, URLs, authors), run `make test` or `python -m scripts.test` to regenerate the module before committing.
+- Console script name is still discovered from entry points; automation falls back to `lib_cli_exit_tools` when no explicit alias exists.
 
 ## CI & Publishing
 

{lib_cli_exit_tools-2.0.0 → lib_cli_exit_tools-2.1.1}/INSTALL.md

@@ -85,7 +85,7 @@ pipx install "git+https://github.com/bitranox/lib_cli_exit_tools@vX.Y.Z"
 ```bash
 uv pip install -e .[dev]
 uv tool install lib_cli_exit_tools
-uvx lib_cli_exit_tools --help
+uvx lib-cli-exit-tools --help  # aliases: cli-exit-tools, lib_cli_exit_tools
 ```
 
 ### Installing from local artifacts
@@ -153,7 +153,7 @@ error: externally-managed-environment
 
 ### Missing command on PATH
 
-If `lib_cli_exit_tools --help` returns “command not found”, confirm that the installation location is on PATH. The most common fix is adding `~/.local/bin` (POSIX) or `%APPDATA%\Python\PythonXY\Scripts` (Windows) to your PATH environment variable, then re-opening the shell.
+If `lib-cli-exit-tools --help` (or the aliases `cli-exit-tools` / `lib_cli_exit_tools`) returns “command not found”, confirm that the installation location is on PATH. The most common fix is adding `~/.local/bin` (POSIX) or `%APPDATA%\Python\PythonXY\Scripts` (Windows) to your PATH environment variable, then re-opening the shell.
 
 ### Colour output not appearing
 

{lib_cli_exit_tools-2.0.0 → lib_cli_exit_tools-2.1.1}/Makefile

@@ -3,7 +3,7 @@ SHELL := /bin/bash
 PYTHON ?= python3
 SCRIPTS ?= $(PYTHON) -m scripts
 
-.PHONY: help install dev test run clean build push release coverage version-current bump bump-patch bump-minor bump-major menu
+.PHONY: help install dev test run clean build push release coverage version-current bump bump-patch bump-minor bump-major dependencies dependencies-update menu
 
 help:
 	$(SCRIPTS) help
@@ -50,5 +50,11 @@ build:
 release:
 	$(SCRIPTS) release
 
+dependencies:
+	$(SCRIPTS) dependencies
+
+dependencies-update:
+	$(SCRIPTS) dependencies-update
+
 menu:
 	$(SCRIPTS) menu

{lib_cli_exit_tools-2.0.0 → lib_cli_exit_tools-2.1.1}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: lib_cli_exit_tools
-Version: 2.0.0
+Version: 2.1.1
 Summary: CLI exit handling helpers: clean signals, exit codes, and error printing
 Project-URL: Homepage, https://github.com/bitranox/lib_cli_exit_tools
 Project-URL: Repository, https://github.com/bitranox/lib_cli_exit_tools.git
@@ -16,21 +16,21 @@ Classifier: Programming Language :: Python :: 3
 Classifier: Programming Language :: Python :: 3 :: Only
 Classifier: Typing :: Typed
 Requires-Python: >=3.13
-Requires-Dist: rich-click>=1.9.3
+Requires-Dist: rich-click>=1.9.4
 Provides-Extra: dev
-Requires-Dist: bandit>=1.8.6; extra == 'dev'
+Requires-Dist: bandit>=1.9.2; extra == 'dev'
 Requires-Dist: build>=1.3.0; extra == 'dev'
-Requires-Dist: codecov-cli>=11.2.3; extra == 'dev'
-Requires-Dist: coverage[toml]>=7.10.7; extra == 'dev'
-Requires-Dist: hypothesis>=6.140.3; extra == 'dev'
-Requires-Dist: import-linter>=2.5.2; extra == 'dev'
-Requires-Dist: pip-audit>=2.9.0; extra == 'dev'
-Requires-Dist: pyright>=1.1.406; extra == 'dev'
-Requires-Dist: pytest-asyncio>=1.2.0; extra == 'dev'
+Requires-Dist: codecov-cli>=11.2.6; extra == 'dev'
+Requires-Dist: coverage[toml]>=7.13.0; extra == 'dev'
+Requires-Dist: hypothesis>=6.148.7; extra == 'dev'
+Requires-Dist: import-linter>=2.7; extra == 'dev'
+Requires-Dist: pip-audit>=2.10.0; extra == 'dev'
+Requires-Dist: pyright>=1.1.407; extra == 'dev'
+Requires-Dist: pytest-asyncio>=1.3.0; extra == 'dev'
 Requires-Dist: pytest-cov>=7.0.0; extra == 'dev'
-Requires-Dist: pytest>=8.4.2; extra == 'dev'
-Requires-Dist: ruff>=0.14.0; extra == 'dev'
-Requires-Dist: textual>=6.3.0; extra == 'dev'
+Requires-Dist: pytest>=9.0.2; extra == 'dev'
+Requires-Dist: ruff>=0.14.8; extra == 'dev'
+Requires-Dist: textual>=6.8.0; extra == 'dev'
 Requires-Dist: twine>=6.2.0; extra == 'dev'
 Description-Content-Type: text/markdown
 
@@ -47,6 +47,7 @@ Description-Content-Type: text/markdown
 [![codecov](https://codecov.io/gh/bitranox/lib_cli_exit_tools/graph/badge.svg?token=z1D8JSjWEH)](https://codecov.io/gh/bitranox/lib_cli_exit_tools)
 [![Maintainability](https://qlty.sh/gh/bitranox/projects/lib_cli_exit_tools/maintainability.svg)](https://qlty.sh/gh/bitranox/projects/lib_cli_exit_tools)
 [![Known Vulnerabilities](https://snyk.io/test/github/bitranox/lib_cli_exit_tools/badge.svg)](https://snyk.io/test/github/bitranox/lib_cli_exit_tools)
+[![security: bandit](https://img.shields.io/badge/security-bandit-yellow.svg)](https://github.com/PyCQA/bandit)
 
 Small helpers for robust CLI exit handling:
 - Portable signal handling (SIGINT, SIGTERM/SIGBREAK)
@@ -65,14 +66,14 @@ See [INSTALL.md](INSTALL.md) for editable installs, pipx/uv usage, and troublesh
 
 ## Usage
 
-Console script:
+Console script (all commands map to ``lib_cli_exit_tools.cli:main``):
 
 ```bash
 # After install (pip/pipx/uv tool)
-lib_cli_exit_tools --help
-cli-exit-tools --help  # alias
-lib_cli_exit_tools info
-lib_cli_exit_tools fail  # intentionally trigger RuntimeError to test error paths
+lib-cli-exit-tools --help
+lib-cli-exit-tools info
+lib-cli-exit-tools fail  # intentionally trigger RuntimeError to test error paths
+# Aliases are also generated: `cli-exit-tools`, `lib_cli_exit_tools`
 ```
 
 ### Examples
@@ -280,9 +281,10 @@ except Exception as e:
     raise SystemExit(code)
 ```
 
-Command names registered on install
-- lib_cli_exit_tools (default)
+Command names registered on install (all invoke ``lib_cli_exit_tools.cli:main``)
+- lib-cli-exit-tools (default console script)
 - cli-exit-tools (alias)
+- lib_cli_exit_tools (alias)
 - python -m lib_cli_exit_tools (module entry)
 
 If you installed with --user or in a venv, make sure the corresponding bin directory is on PATH:
@@ -562,7 +564,7 @@ def main(argv: Sequence[str] | None = None) -> int:
     )
 ```
 
-When installed, the generated console scripts (`lib_cli_exit_tools`, `cli-exit-tools`, `lib-cli-exit-tools`) will import `your_package.cli:main`, and `python -m your_package` will follow the same code path via `__main__.py`.
+When installed, the generated console scripts (`lib-cli-exit-tools`, `cli-exit-tools`, `lib_cli_exit_tools`) will import `your_package.cli:main`, and `python -m your_package` will follow the same code path via `__main__.py`.
 
 ## Exit Codes
 

{lib_cli_exit_tools-2.0.0 → lib_cli_exit_tools-2.1.1}/README.md

@@ -11,6 +11,7 @@
 [![codecov](https://codecov.io/gh/bitranox/lib_cli_exit_tools/graph/badge.svg?token=z1D8JSjWEH)](https://codecov.io/gh/bitranox/lib_cli_exit_tools)
 [![Maintainability](https://qlty.sh/gh/bitranox/projects/lib_cli_exit_tools/maintainability.svg)](https://qlty.sh/gh/bitranox/projects/lib_cli_exit_tools)
 [![Known Vulnerabilities](https://snyk.io/test/github/bitranox/lib_cli_exit_tools/badge.svg)](https://snyk.io/test/github/bitranox/lib_cli_exit_tools)
+[![security: bandit](https://img.shields.io/badge/security-bandit-yellow.svg)](https://github.com/PyCQA/bandit)
 
 Small helpers for robust CLI exit handling:
 - Portable signal handling (SIGINT, SIGTERM/SIGBREAK)
@@ -29,14 +30,14 @@ See [INSTALL.md](INSTALL.md) for editable installs, pipx/uv usage, and troublesh
 
 ## Usage
 
-Console script:
+Console script (all commands map to ``lib_cli_exit_tools.cli:main``):
 
 ```bash
 # After install (pip/pipx/uv tool)
-lib_cli_exit_tools --help
-cli-exit-tools --help  # alias
-lib_cli_exit_tools info
-lib_cli_exit_tools fail  # intentionally trigger RuntimeError to test error paths
+lib-cli-exit-tools --help
+lib-cli-exit-tools info
+lib-cli-exit-tools fail  # intentionally trigger RuntimeError to test error paths
+# Aliases are also generated: `cli-exit-tools`, `lib_cli_exit_tools`
 ```
 
 ### Examples
@@ -244,9 +245,10 @@ except Exception as e:
     raise SystemExit(code)
 ```
 
-Command names registered on install
-- lib_cli_exit_tools (default)
+Command names registered on install (all invoke ``lib_cli_exit_tools.cli:main``)
+- lib-cli-exit-tools (default console script)
 - cli-exit-tools (alias)
+- lib_cli_exit_tools (alias)
 - python -m lib_cli_exit_tools (module entry)
 
 If you installed with --user or in a venv, make sure the corresponding bin directory is on PATH:
@@ -526,7 +528,7 @@ def main(argv: Sequence[str] | None = None) -> int:
     )
 ```
 
-When installed, the generated console scripts (`lib_cli_exit_tools`, `cli-exit-tools`, `lib-cli-exit-tools`) will import `your_package.cli:main`, and `python -m your_package` will follow the same code path via `__main__.py`.
+When installed, the generated console scripts (`lib-cli-exit-tools`, `cli-exit-tools`, `lib_cli_exit_tools`) will import `your_package.cli:main`, and `python -m your_package` will follow the same code path via `__main__.py`.
 
 ## Exit Codes
 

{lib_cli_exit_tools-2.0.0 → lib_cli_exit_tools-2.1.1}/docs/system-design/module_reference.md

@@ -38,7 +38,7 @@ Downstream CLIs and automation pipelines need deterministic exit codes, signal h
 * Split runtime responsibilities into well-documented modules (`core`, `application`, `adapters`, `cli`) that mirror clean-architecture prompts.
 * Provide a lightweight metadata façade (`__init__conf__.py`) so CLI commands expose provenance without heavy packaging dependencies.
 * Funnel all exit handling through `application.runner` and `core.exit_codes`, documenting each resolver path and configuration hook.
-* Publish behaviour-driven tests that read like specifications and explicitly cover CLI surfaces, metadata fallbacks, module entry balance, and automation scripts.
+* Publish behaviour-driven tests that read like specifications and explicitly cover CLI surfaces, metadata exports, module entry balance, and automation scripts.
 * Align system documentation with inline docstrings and testing strategy to create a single source of truth for maintainers.
 
 ---
@@ -56,7 +56,7 @@ Downstream CLIs and automation pipelines need deterministic exit codes, signal h
 5. `core.exit_codes` resolves exit codes via ordered strategies (subprocess return codes, signals, errno/winerror, sysexits, platform tables).
 6. `__init__conf__.py` supplies metadata for `info` commands and documentation output.
 
-**System Dependencies:** Standard library (`signal`, `sys`, `subprocess`, `importlib.metadata`, `contextlib`, `dataclasses`), `click`, `rich`, `rich-click`.
+**System Dependencies:** Standard library (`signal`, `sys`, `subprocess`, `contextlib`, `dataclasses`), `click`, `rich`, `rich-click`.
 
 ---
 
@@ -78,9 +78,9 @@ Downstream CLIs and automation pipelines need deterministic exit codes, signal h
 
 ### Module: lib_cli_exit_tools/__init__conf__.py
 
-* **Purpose:** Provide metadata helpers and `print_info()` for CLI provenance.
-* **Input:** Distribution metadata via `importlib.metadata`; fallback defaults.
-* **Output:** Constants (`name`, `title`, `version`, `homepage`, `author`, `shell_command`) and metadata helpers (`_meta`, `_version`, `_home_page`, `_author`, `_summary`).
+* **Purpose:** Publish static metadata constants and `print_info()` for CLI provenance.
+* **Input:** Generated from `pyproject.toml` by `scripts._utils.sync_metadata_module`; no runtime metadata lookups.
+* **Output:** Constants (`name`, `title`, `version`, `homepage`, `author`, `author_email`, `shell_command`) and the formatted `print_info()` helper.
 * **Location:** `src/lib_cli_exit_tools/__init__conf__.py`
 
 ### Module: lib_cli_exit_tools/core/configuration.py

{lib_cli_exit_tools-2.0.0 → lib_cli_exit_tools-2.1.1}/notebooks/Quickstart.ipynb

@@ -70,7 +70,7 @@
    "outputs": [],
    "source": [
     "!lib_cli_exit_tools --version\n",
-    "!lib_cli_exit_tools --help\n",
+    "!lib-cli-exit-tools --help\n",
     "!lib_cli_exit_tools info"
    ]
   },

{lib_cli_exit_tools-2.0.0 → lib_cli_exit_tools-2.1.1}/pyproject.toml

@@ -1,10 +1,10 @@
 [project]
 name = "lib_cli_exit_tools"
-version = "2.0.0"
+version = "2.1.1"
 description = "CLI exit handling helpers: clean signals, exit codes, and error printing"
 readme = "README.md"
 requires-python = ">=3.13"
-dependencies = ["rich-click>=1.9.3"]
+dependencies = ["rich-click>=1.9.4"]
 license = { text = "MIT" }
 authors = [{ name = "bitranox", email = "bitranox@gmail.com" }]
 keywords = ["cli", "exit", "signals", "errors", "click"]
@@ -25,18 +25,18 @@ Issues = "https://github.com/bitranox/lib_cli_exit_tools/issues"
 [project.optional-dependencies]
 dev = [
   "build>=1.3.0",
-  "codecov-cli>=11.2.3",
-  "coverage[toml]>=7.10.7",
-  "hypothesis>=6.140.3",
-  "import-linter>=2.5.2",
-  "bandit>=1.8.6",
-  "pip-audit>=2.9.0",
-  "pyright>=1.1.406",
-  "pytest>=8.4.2",
-  "pytest-asyncio>=1.2.0",
+  "codecov-cli>=11.2.6",
+  "coverage[toml]>=7.13.0",
+  "hypothesis>=6.148.7",
+  "import-linter>=2.7",
+  "bandit>=1.9.2",
+  "pip-audit>=2.10.0",
+  "pyright>=1.1.407",
+  "pytest>=9.0.2",
+  "pytest-asyncio>=1.3.0",
   "pytest-cov>=7.0.0",
-  "ruff>=0.14.0",
-  "textual>=6.3.0",
+  "ruff>=0.14.8",
+  "textual>=6.8.0",
   "twine>=6.2.0"
 ]
 
@@ -47,7 +47,7 @@ cli-exit-tools = "lib_cli_exit_tools.cli:main"
 lib-cli-exit-tools = "lib_cli_exit_tools.cli:main"
 
 [build-system]
-requires = ["hatchling>=1.27.0"]
+requires = ["hatchling>=1.28.0"]
 build-backend = "hatchling.build"
 
 [tool.hatch.build.targets.wheel]
@@ -70,6 +70,7 @@ exclude = [
 
 [tool.pytest.ini_options]
 addopts = ["--doctest-modules"]
+pythonpath = ["src"]
 doctest_optionflags = ["ELLIPSIS", "NORMALIZE_WHITESPACE"]
 markers = [
   "os_agnostic: test exercises behavior that is the same on every operating system",
@@ -91,6 +92,39 @@ omit = [
 fail_under = 85
 show_missing = true
 
+[tool.clean]
+# Patterns to remove when running `make clean` or `python -m scripts clean`
+patterns = [
+  ".hypothesis",
+  ".import_linter_cache",
+  ".pytest_cache",
+  ".ruff_cache",
+  ".pyright",
+  ".mypy_cache",
+  ".tox",
+  ".nox",
+  ".eggs",
+  "*.egg-info",
+  "build",
+  "dist",
+  "htmlcov",
+  ".coverage",
+  "coverage.xml",
+  "codecov.sh",
+  ".cache",
+  "result",
+]
+
+[tool.git]
+# Default git remote for push/release commands
+default-remote = "origin"
+
+
+[tool.scripts.test]
+# Configuration for scripts/test.py test runner
+pytest-verbosity = "-vv"
+coverage-report-file = "coverage.xml"
+src-path = "src"
 [tool.importlinter]
 root_package = "lib_cli_exit_tools"
 
@@ -116,3 +150,9 @@ source_modules = [
 forbidden_modules = [
   "lib_cli_exit_tools.cli",
 ]
+
+[tool.pip-audit]
+# Known vulnerabilities to ignore (unfixable or accepted risk)
+# GHSA-4xh5-x5gv-qwph: py library ReDoS (no fix available, low risk)
+# PYSEC-2022-42969: same as above (alias)
+ignore-vulns = ["GHSA-4xh5-x5gv-qwph", "PYSEC-2022-42969"]