lib-cli-exit-tools 2.2.3__tar.gz → 2.2.4__tar.gz

lib_cli_exit_tools-2.2.4/.github/workflows/default_cicd_public.yml

@@ -0,0 +1,303 @@
+name: CI
+
+on:
+  push:
+    branches: [ main, master ]
+  pull_request:
+    branches: [ main, master ]
+  schedule:
+    # Run daily at 3:17 AM UTC (off-peak hours, odd minute to avoid congestion)
+    - cron: '17 3 * * *'
+
+jobs:
+  test:
+    name: Tests (Python ${{ matrix.python }}, ${{ matrix.os }})
+    runs-on: ${{ matrix.os }}
+    strategy:
+      fail-fast: false
+      matrix:
+        os: [ubuntu-latest, macos-latest, windows-latest]
+        # Test against all supported Python versions (3.10+)
+        python: ["3.10", "3.11", "3.12", "3.13", "3.14"]
+    env:
+      PYO3_USE_ABI3_FORWARD_COMPATIBILITY: "1"
+      PYTHONIOENCODING: "utf-8"
+      UV_LINK_MODE: "copy"
+    steps:
+      - uses: actions/checkout@v6
+      - uses: actions/setup-python@v6
+        with:
+          python-version: ${{ matrix.python }}
+      - name: Install uv
+        uses: astral-sh/setup-uv@v7
+        with:
+          enable-cache: true
+          prune-cache: false
+
+      - name: Install tomli (Python < 3.11)
+        shell: bash
+        run: python -c "import tomllib" 2>/dev/null || uv pip install tomli --system
+
+      - name: Extract project metadata
+        shell: python
+        run: |
+          import os
+          try:
+              import tomllib
+          except ModuleNotFoundError:
+              import tomli as tomllib
+
+          with open('pyproject.toml', 'rb') as f:
+              data = tomllib.load(f)
+          project = data['project']['name']
+          module = project.replace('-', '_')
+          dash = project.replace('_', '-')
+          scripts = list(data['project'].get('scripts', {}).keys())
+          cli_bin = scripts[0] if scripts else dash
+
+          with open(os.environ['GITHUB_ENV'], 'a', encoding='utf-8') as env:
+              env.write(f"PROJECT_NAME={project}\n")
+              env.write(f"PACKAGE_MODULE={module}\n")
+              env.write(f"CLI_BIN={cli_bin}\n")
+
+      - name: Install journald prerequisites
+        if: runner.os == 'Linux'
+        shell: bash
+        run: |
+          sudo apt-get update
+          sudo apt-get install -y python3-systemd
+
+      - name: Install dev deps
+        shell: bash
+        run: |
+          uv pip install -e .[dev] --system
+
+      - name: Install Windows Event Log prerequisites
+        if: runner.os == 'Windows'
+        shell: bash
+        run: |
+          uv pip install pywin32 --system
+
+      - name: Restore ruff cache
+        id: ruff-cache
+        uses: actions/cache/restore@v5
+        with:
+          path: .ruff_cache
+          key: ruff-${{ runner.os }}-py${{ matrix.python }}-${{ github.sha }}
+          restore-keys: |
+            ruff-${{ runner.os }}-py${{ matrix.python }}-
+            ruff-${{ runner.os }}-
+
+      - name: Run ruff (lint + format)
+        id: ruff
+        continue-on-error: true
+        shell: bash
+        run: |
+          ruff check src tests notebooks
+          ruff format --check src tests notebooks
+
+      - name: Run pyright (type check)
+        id: pyright
+        continue-on-error: true
+        shell: bash
+        run: pyright
+
+      - name: Run pytest (tests + coverage)
+        id: pytest
+        continue-on-error: true
+        shell: bash
+        env:
+          TEST_VERBOSE: "1"
+        run: pytest --cov=src --cov-report=term-missing --cov-report=xml
+
+      - name: Run import-linter (architecture)
+        id: importlinter
+        continue-on-error: true
+        shell: bash
+        run: lint-imports
+
+      - name: Run bandit (security scan)
+        id: bandit
+        continue-on-error: true
+        shell: bash
+        run: bandit -q -r src/${{ env.PACKAGE_MODULE }}
+
+      - name: Run pip-audit (vulnerability scan)
+        id: pipaudit
+        continue-on-error: true
+        shell: python
+        run: |
+          import subprocess, sys
+          try:
+              import tomllib
+          except ModuleNotFoundError:
+              import tomli as tomllib
+          with open("pyproject.toml", "rb") as f:
+              data = tomllib.load(f)
+          vulns = data.get("tool", {}).get("pip-audit", {}).get("ignore-vulns", [])
+          cmd = ["pip-audit", "--skip-editable"]
+          for v in vulns:
+              cmd.extend(["--ignore-vuln", v])
+          sys.exit(subprocess.call(cmd))
+
+      - name: Check all steps passed
+        shell: bash
+        run: |
+          if [[ "${{ steps.ruff.outcome }}" != "success" ]]; then
+            echo "::error::Ruff check failed"
+            exit 1
+          fi
+          if [[ "${{ steps.pyright.outcome }}" != "success" ]]; then
+            echo "::error::Pyright check failed"
+            exit 1
+          fi
+          if [[ "${{ steps.pytest.outcome }}" != "success" ]]; then
+            echo "::error::Pytest failed"
+            exit 1
+          fi
+          if [[ "${{ steps.importlinter.outcome }}" != "success" ]]; then
+            echo "::error::Import-linter check failed"
+            exit 1
+          fi
+          if [[ "${{ steps.bandit.outcome }}" != "success" ]]; then
+            echo "::error::Bandit security scan failed"
+            exit 1
+          fi
+          if [[ "${{ steps.pipaudit.outcome }}" != "success" ]]; then
+            echo "::error::pip-audit vulnerability scan failed"
+            exit 1
+          fi
+          echo "All checks passed!"
+
+      - name: Build wheel/sdist
+        shell: bash
+        run: uv build
+
+      - name: Verify wheel install in clean env
+        shell: bash
+        run: |
+          uv venv .venv_wheel
+          . .venv_wheel/bin/activate 2>/dev/null || . .venv_wheel/Scripts/activate 2>/dev/null
+          uv pip install dist/*.whl
+          "$CLI_BIN" --version 2>/dev/null || python -m "$PACKAGE_MODULE" --version
+
+      - name: Prune uv cache
+        continue-on-error: true
+        shell: bash
+        run: uv cache prune --ci
+
+      - name: Save ruff cache
+        if: always() && steps.ruff-cache.outputs.cache-hit != 'true'
+        uses: actions/cache/save@v5
+        with:
+          path: .ruff_cache
+          key: ruff-${{ runner.os }}-py${{ matrix.python }}-${{ github.sha }}
+
+  pipx-uv:
+    name: pipx/uv verification (ubuntu)
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v6
+      - uses: actions/setup-python@v6
+        with:
+          python-version: "3.14"
+
+      - name: Install uv
+        uses: astral-sh/setup-uv@v7
+        with:
+          enable-cache: true
+          prune-cache: false
+
+      - name: Install tomli (Python < 3.11)
+        shell: bash
+        run: python -c "import tomllib" 2>/dev/null || uv pip install tomli --system
+
+      - name: Extract project metadata
+        shell: python
+        run: |
+          import os
+          try:
+              import tomllib
+          except ModuleNotFoundError:
+              import tomli as tomllib
+
+          with open('pyproject.toml', 'rb') as f:
+              data = tomllib.load(f)
+          project = data['project']['name']
+          module = project.replace('-', '_')
+          dash = project.replace('_', '-')
+          scripts = list(data['project'].get('scripts', {}).keys())
+          cli_bin = scripts[0] if scripts else dash
+
+          with open(os.environ['GITHUB_ENV'], 'a', encoding='utf-8') as env:
+              env.write(f"PROJECT_NAME={project}\n")
+              env.write(f"PACKAGE_MODULE={module}\n")
+              env.write(f"CLI_BIN={cli_bin}\n")
+
+      - name: Build wheel
+        run: uv build
+      - name: pipx install from wheel
+        run: |
+          uv pip install --system pipx
+          pipx ensurepath
+          export PATH="$HOME/.local/bin:$PATH"
+          pipx install dist/*.whl
+          "$CLI_BIN" --version
+
+      - name: uv tool install
+        run: |
+          export PATH="$HOME/.local/bin:$PATH"
+          uv tool install --force .
+          "$CLI_BIN" --version
+
+      - name: Prune uv cache
+        continue-on-error: true
+        run: uv cache prune --ci
+
+  notebooks:
+    name: Execute notebooks (ubuntu, Python 3.14)
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v6
+      - uses: actions/setup-python@v6
+        with:
+          python-version: "3.14"
+
+      - name: Install uv
+        uses: astral-sh/setup-uv@v7
+        with:
+          enable-cache: true
+          prune-cache: false
+
+      - name: Install notebook runner deps
+        run: |
+          uv pip install --system nbclient nbformat ipykernel jupyter_client
+          python -m ipykernel install --user --name python3 --display-name "Python 3"
+      - name: Execute Quickstart notebook
+        env:
+          PIP_DISABLE_PIP_VERSION_CHECK: "1"
+          PIP_NO_INPUT: "1"
+        run: |
+          python - << 'PY'
+          from pathlib import Path
+
+          import nbformat
+          from nbclient import NotebookClient
+
+          nb_path = Path('notebooks/Quickstart.ipynb')
+          if not nb_path.exists():
+              raise SystemExit(f"Notebook not found: {nb_path}")
+
+          notebook = nbformat.read(nb_path, as_version=4)
+          client = NotebookClient(
+              notebook,
+              timeout=900,
+              kernel_name='python3',
+              allow_errors=False,
+          )
+          client.execute()
+
+          out_path = Path('notebooks/Quickstart-executed.ipynb')
+          nbformat.write(notebook, out_path)
+          print(f"Executed notebook written to: {out_path}")
+          PY

lib_cli_exit_tools-2.2.4/.github/workflows/default_release_public.yml

@@ -0,0 +1,69 @@
+name: Release
+
+on:
+  release:
+    types: [published]
+  push:
+    tags:
+      - 'v*'
+  workflow_dispatch: {}
+
+jobs:
+  build:
+    runs-on: ubuntu-latest
+    permissions:
+      contents: read
+    env:
+      UV_LINK_MODE: "copy"
+    steps:
+      - uses: actions/checkout@v6
+      - uses: actions/setup-python@v6
+        with:
+          python-version: '3.14'
+
+      - name: Install uv
+        uses: astral-sh/setup-uv@v7
+        with:
+          enable-cache: true
+          prune-cache: false
+
+      - name: Build artifacts
+        run: uv build
+
+      - name: Upload artifacts
+        uses: actions/upload-artifact@v6
+        with:
+          name: dist
+          path: dist/*
+
+      - name: Prune uv cache
+        continue-on-error: true
+        run: uv cache prune --ci
+
+  publish:
+    needs: build
+    runs-on: ubuntu-latest
+    environment: pypi
+    permissions:
+      contents: read
+    steps:
+      - name: Verify PyPI token is set
+        run: |
+          if [ -z "${{ secrets.PYPI_API_TOKEN }}" ]; then
+            echo "::error title=Missing PyPI token::Set the PYPI_API_TOKEN secret in GitHub repository settings to enable PyPI publishing on releases."
+            echo "See: https://docs.github.com/en/actions/security-guides/using-secrets-in-github-actions"
+            exit 1
+          fi
+
+      - name: Download artifacts
+        uses: actions/download-artifact@v6
+        with:
+          name: dist
+          path: dist/
+
+      - name: Publish to PyPI
+        uses: pypa/gh-action-pypi-publish@release/v1
+        with:
+          password: ${{ secrets.PYPI_API_TOKEN }}
+          attestations: false
+          skip-existing: true

{lib_cli_exit_tools-2.2.3 → lib_cli_exit_tools-2.2.4}/CHANGELOG.md

@@ -3,6 +3,12 @@
 All notable changes to this project are documented here. The format follows [Keep a Changelog](https://keepachangelog.com/en/1.1.0/) and the project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
 
+## [2.2.4] - 2026-01-26
+
+### Changed
+- Updated dependencies.
+- Excluded `scripts/` from pyright, pytest, and CI/CD test collection.
+
 ## [2.2.3] - 2025-12-17
 
 ### Fixed

{lib_cli_exit_tools-2.2.3 → lib_cli_exit_tools-2.2.4}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: lib_cli_exit_tools
-Version: 2.2.3
+Version: 2.2.4
 Summary: CLI exit handling helpers: clean signals, exit codes, and error printing
 Project-URL: Homepage, https://github.com/bitranox/lib_cli_exit_tools
 Project-URL: Repository, https://github.com/bitranox/lib_cli_exit_tools.git
@@ -16,29 +16,29 @@ Classifier: Programming Language :: Python :: 3
 Classifier: Programming Language :: Python :: 3 :: Only
 Classifier: Typing :: Typed
 Requires-Python: >=3.10
-Requires-Dist: rich-click>=1.9.4
+Requires-Dist: rich-click>=1.9.6
 Provides-Extra: dev
-Requires-Dist: bandit>=1.9.2; extra == 'dev'
-Requires-Dist: build>=1.3.0; extra == 'dev'
+Requires-Dist: bandit>=1.9.3; extra == 'dev'
+Requires-Dist: build>=1.4.0; extra == 'dev'
 Requires-Dist: codecov-cli>=11.2.6; extra == 'dev'
-Requires-Dist: coverage[toml]>=7.13.0; extra == 'dev'
-Requires-Dist: hypothesis>=6.148.7; extra == 'dev'
+Requires-Dist: coverage[toml]>=7.13.2; extra == 'dev'
+Requires-Dist: hypothesis>=6.151.2; extra == 'dev'
 Requires-Dist: import-linter>=2.9; extra == 'dev'
 Requires-Dist: pip-audit>=2.10.0; extra == 'dev'
-Requires-Dist: pyright>=1.1.407; extra == 'dev'
+Requires-Dist: pyright[nodejs]>=1.1.408; extra == 'dev'
 Requires-Dist: pytest-asyncio>=1.3.0; extra == 'dev'
 Requires-Dist: pytest-cov>=7.0.0; extra == 'dev'
 Requires-Dist: pytest>=9.0.2; extra == 'dev'
 Requires-Dist: rtoml>=0.13.0; extra == 'dev'
-Requires-Dist: ruff>=0.14.9; extra == 'dev'
-Requires-Dist: textual>=6.10.0; extra == 'dev'
+Requires-Dist: ruff>=0.14.14; extra == 'dev'
+Requires-Dist: textual>=7.4.0; extra == 'dev'
 Requires-Dist: twine>=6.2.0; extra == 'dev'
 Description-Content-Type: text/markdown
 
 # lib_cli_exit_tools
 
 <!-- Badges -->
-[![CI](https://github.com/bitranox/lib_cli_exit_tools/actions/workflows/ci.yml/badge.svg)](https://github.com/bitranox/lib_cli_exit_tools/actions/workflows/ci.yml)
+[![CI](https://github.com/bitranox/lib_cli_exit_tools/actions/workflows/default_cicd_public.yml/badge.svg)](https://github.com/bitranox/lib_cli_exit_tools/actions/workflows/default_cicd_public.yml)
 [![CodeQL](https://github.com/bitranox/lib_cli_exit_tools/actions/workflows/codeql.yml/badge.svg)](https://github.com/bitranox/lib_cli_exit_tools/actions/workflows/codeql.yml)
 [![License: MIT](https://img.shields.io/badge/License-MIT-yellow.svg)](LICENSE)
 [![Open in Codespaces](https://img.shields.io/badge/Codespaces-Open-blue?logo=github&logoColor=white&style=flat-square)](https://codespaces.new/bitranox/lib_cli_exit_tools?quickstart=1)

{lib_cli_exit_tools-2.2.3 → lib_cli_exit_tools-2.2.4}/README.md

@@ -1,7 +1,7 @@
 # lib_cli_exit_tools
 
 <!-- Badges -->
-[![CI](https://github.com/bitranox/lib_cli_exit_tools/actions/workflows/ci.yml/badge.svg)](https://github.com/bitranox/lib_cli_exit_tools/actions/workflows/ci.yml)
+[![CI](https://github.com/bitranox/lib_cli_exit_tools/actions/workflows/default_cicd_public.yml/badge.svg)](https://github.com/bitranox/lib_cli_exit_tools/actions/workflows/default_cicd_public.yml)
 [![CodeQL](https://github.com/bitranox/lib_cli_exit_tools/actions/workflows/codeql.yml/badge.svg)](https://github.com/bitranox/lib_cli_exit_tools/actions/workflows/codeql.yml)
 [![License: MIT](https://img.shields.io/badge/License-MIT-yellow.svg)](LICENSE)
 [![Open in Codespaces](https://img.shields.io/badge/Codespaces-Open-blue?logo=github&logoColor=white&style=flat-square)](https://codespaces.new/bitranox/lib_cli_exit_tools?quickstart=1)

{lib_cli_exit_tools-2.2.3 → lib_cli_exit_tools-2.2.4}/pyproject.toml

@@ -1,10 +1,10 @@
 [project]
 name = "lib_cli_exit_tools"
-version = "2.2.3"
+version = "2.2.4"
 description = "CLI exit handling helpers: clean signals, exit codes, and error printing"
 readme = "README.md"
 requires-python = ">=3.10"
-dependencies = ["rich-click>=1.9.4"]
+dependencies = ["rich-click>=1.9.6"]
 license = { text = "MIT" }
 authors = [{ name = "bitranox", email = "bitranox@gmail.com" }]
 keywords = ["cli", "exit", "signals", "errors", "click"]
@@ -24,19 +24,19 @@ Issues = "https://github.com/bitranox/lib_cli_exit_tools/issues"
 
 [project.optional-dependencies]
 dev = [
-  "build>=1.3.0",
+  "build>=1.4.0",
   "codecov-cli>=11.2.6",
-  "coverage[toml]>=7.13.0",
-  "hypothesis>=6.148.7",
+  "coverage[toml]>=7.13.2",
+  "hypothesis>=6.151.2",
   "import-linter>=2.9",
-  "bandit>=1.9.2",
+  "bandit>=1.9.3",
   "pip-audit>=2.10.0",
-  "pyright>=1.1.407",
+  "pyright[nodejs]>=1.1.408",
   "pytest>=9.0.2",
   "pytest-asyncio>=1.3.0",
   "pytest-cov>=7.0.0",
-  "ruff>=0.14.9",
-  "textual>=6.10.0",
+  "ruff>=0.14.14",
+  "textual>=7.4.0",
   "rtoml>=0.13.0",
   "twine>=6.2.0"
 ]
@@ -66,12 +66,13 @@ target-version = "py310"
 [tool.pyright]
 typeCheckingMode = "strict"
 exclude = [
-  "scripts/menu.py",
+  "scripts/",
 ]
 
 [tool.pytest.ini_options]
 addopts = ["--doctest-modules"]
 pythonpath = ["src"]
+testpaths = ["src", "tests"]
 doctest_optionflags = ["ELLIPSIS", "NORMALIZE_WHITESPACE"]
 markers = [
   "os_agnostic: test exercises behavior that is the same on every operating system",
@@ -161,6 +162,11 @@ forbidden_modules = [
 #   setuptools version is managed by the CI environment/pip itself.
 # CVE-2025-68146: filelock <3.20.1 vulnerability, transitive dev dependency
 #   Will be resolved when upstream packages update their dependencies.
+# CVE-2026-23949: jaraco-context <6.1.0, transitive dev dependency
+# CVE-2025-69277: pynacl <1.6.2, transitive dev dependency
+# CVE-2026-21441: urllib3 <2.6.3, transitive dev dependency
+# CVE-2026-22702: virtualenv <20.36.1, transitive dev dependency
+# CVE-2026-24049: wheel <0.46.2, build-time dependency
 ignore-vulns = [
   "GHSA-4xh5-x5gv-qwph",
   "PYSEC-2022-42969",
@@ -168,4 +174,9 @@ ignore-vulns = [
   "CVE-2024-6345",
   "PYSEC-2025-49",
   "CVE-2025-68146",
+  "CVE-2026-23949",
+  "CVE-2025-69277",
+  "CVE-2026-21441",
+  "CVE-2026-22702",
+  "CVE-2026-24049",
 ]

{lib_cli_exit_tools-2.2.3 → lib_cli_exit_tools-2.2.4}/src/lib_cli_exit_tools/__init__conf__.py

@@ -24,7 +24,7 @@ name = "lib_cli_exit_tools"
 #: Human-readable summary shown in CLI help output.
 title = "CLI exit handling helpers: clean signals, exit codes, and error printing"
 #: Current release version pulled from ``pyproject.toml`` by automation.
-version = "2.2.3"
+version = "2.2.4"
 #: Repository homepage presented to users.
 homepage = "https://github.com/bitranox/lib_cli_exit_tools"
 #: Author attribution surfaced in CLI output.

lib_cli_exit_tools-2.2.3/tests/test_scripts.py

@@ -1,233 +0,0 @@
-from __future__ import annotations
-
-from click.testing import CliRunner
-from collections.abc import Mapping, Sequence
-from pathlib import Path
-import sys
-from types import ModuleType, SimpleNamespace
-from typing import Protocol, TypedDict
-
-from pytest import MonkeyPatch
-
-import scripts.build as build
-import scripts.cli as cli
-import scripts.dev as dev
-import scripts.install as install
-import scripts.run_cli as run_cli
-import scripts.test as test_script
-from scripts._utils import RunResult
-from scripts import _utils
-from scripts import target_metadata
-
-
-RunCommand = Sequence[str] | str
-ModuleLike = ModuleType | SimpleNamespace
-
-
-class RecordedOptions(TypedDict):
-    check: bool
-    capture: bool
-    cwd: str | None
-    env: Mapping[str, str] | None
-    dry_run: bool
-
-
-RunRecord = tuple[RunCommand, RecordedOptions]
-
-
-class RunStub(Protocol):
-    def __call__(
-        self,
-        cmd: RunCommand,
-        *,
-        check: bool = True,
-        capture: bool = True,
-        cwd: str | None = None,
-        env: Mapping[str, str] | None = None,
-        dry_run: bool = False,
-    ) -> RunResult: ...
-
-
-def _make_run_recorder(record: list[RunRecord]) -> RunStub:
-    def _run(
-        cmd: RunCommand,
-        *,
-        check: bool = True,
-        capture: bool = True,
-        cwd: str | None = None,
-        env: Mapping[str, str] | None = None,
-        dry_run: bool = False,
-    ) -> RunResult:
-        record.append(
-            (
-                cmd,
-                {
-                    "check": check,
-                    "capture": capture,
-                    "cwd": cwd,
-                    "env": env,
-                    "dry_run": dry_run,
-                },
-            ),
-        )
-        return RunResult(0, "", "")
-
-    return _run
-
-
-def test_get_project_metadata_fields():
-    meta = _utils.get_project_metadata()
-    assert meta.name == "lib_cli_exit_tools"
-    assert meta.slug == "lib-cli-exit-tools"
-    assert meta.import_package == "lib_cli_exit_tools"
-    assert meta.coverage_source == "src/lib_cli_exit_tools"
-    assert meta.github_tarball_url("1.2.3").endswith("/bitranox/lib_cli_exit_tools/archive/refs/tags/v1.2.3.tar.gz")
-
-
-def test_build_script_uses_metadata(monkeypatch: MonkeyPatch) -> None:
-    recorded: list[RunRecord] = []
-    monkeypatch.setattr(build, "run", _make_run_recorder(recorded))
-    runner = CliRunner()
-    result = runner.invoke(cli.main, ["build"])
-    assert result.exit_code == 0
-    commands = [" ".join(cmd) if not isinstance(cmd, str) else cmd for cmd, _ in recorded]
-    assert any("python -m build" in cmd for cmd in commands)
-
-
-def test_dev_script_installs_dev_extras(monkeypatch: MonkeyPatch) -> None:
-    recorded: list[RunRecord] = []
-    monkeypatch.setattr(dev, "run", _make_run_recorder(recorded))
-    runner = CliRunner()
-    result = runner.invoke(cli.main, ["dev"])
-    assert result.exit_code == 0
-    first_command, _options = recorded[0]
-    assert isinstance(first_command, list)
-    assert first_command == [sys.executable, "-m", "pip", "install", "-e", ".[dev]"]
-
-
-def test_install_script_installs_package(monkeypatch: MonkeyPatch) -> None:
-    recorded: list[RunRecord] = []
-    monkeypatch.setattr(install, "run", _make_run_recorder(recorded))
-    runner = CliRunner()
-    result = runner.invoke(cli.main, ["install"])
-    assert result.exit_code == 0
-    first_command, _options = recorded[0]
-    assert isinstance(first_command, list)
-    assert first_command == [sys.executable, "-m", "pip", "install", "-e", "."]
-
-
-def test_run_cli_imports_dynamic_package(monkeypatch: MonkeyPatch) -> None:
-    seen: list[str] = []
-
-    def _run_cli_main(_args: Sequence[str] | None = None) -> int:
-        return 0
-
-    def fake_import(name: str) -> ModuleLike:
-        seen.append(name)
-        if name.endswith(".__main__"):
-            return SimpleNamespace()
-        if name.endswith(".cli"):
-            return SimpleNamespace(main=_run_cli_main)
-        raise AssertionError(f"unexpected import {name}")
-
-    monkeypatch.setattr(run_cli, "import_module", fake_import)
-    runner = CliRunner()
-    result = runner.invoke(cli.main, ["run"])
-    assert result.exit_code == 0
-    package = run_cli.PROJECT.import_package
-    assert f"{package}.cli" in seen
-    if len(seen) == 2:
-        assert seen == [f"{package}.__main__", f"{package}.cli"]
-
-
-def test_test_script_uses_pyproject_configuration(monkeypatch: MonkeyPatch) -> None:
-    recorded: list[RunRecord] = []
-
-    def _noop() -> None:
-        return None
-
-    def _always_false(_name: str) -> bool:
-        return False
-
-    monkeypatch.setattr(test_script, "bootstrap_dev", _noop)
-    monkeypatch.setattr(_utils, "cmd_exists", _always_false)
-    monkeypatch.setattr(test_script, "run", _make_run_recorder(recorded))
-    runner = CliRunner()
-    result = runner.invoke(cli.main, ["test"])
-    assert result.exit_code == 0
-    pytest_commands: list[list[str]] = []
-    for cmd, _ in recorded:
-        if isinstance(cmd, str):
-            continue
-        command_list = list(cmd)
-        if command_list[:3] == ["python", "-m", "pytest"]:
-            pytest_commands.append(command_list)
-    assert pytest_commands, "pytest not invoked"
-    assert any(f"--cov={test_script.COVERAGE_TARGET}" in " ".join(sequence) for sequence in pytest_commands)
-
-
-def test_run_coverage_invokes_python_module(monkeypatch: MonkeyPatch) -> None:
-    recorded: list[RunRecord] = []
-    bootstrap_calls: list[str] = []
-
-    def _bootstrap() -> None:
-        bootstrap_calls.append("bootstrap")
-
-    monkeypatch.setattr(test_script, "bootstrap_dev", _bootstrap)
-    monkeypatch.setattr(test_script, "run", _make_run_recorder(recorded))
-
-    # create stale coverage artefacts to ensure cleanup happens first
-    Path(".coverage.stale").write_text("stale", encoding="utf-8")
-    Path("coverage.xml").write_text("old", encoding="utf-8")
-    Path("codecov.xml").write_text("old", encoding="utf-8")
-
-    test_script.run_coverage()
-
-    assert bootstrap_calls == ["bootstrap"]
-    assert len(recorded) == 2
-
-    first_cmd, first_opts = recorded[0]
-    assert isinstance(first_cmd, list)
-    assert first_cmd[:4] == [sys.executable, "-m", "coverage", "run"]
-    assert first_cmd[4:7] == ["-m", "pytest", "-vv"]
-    assert first_opts["capture"] is True
-    assert first_opts["env"] is not None
-    assert first_opts["env"].get("COVERAGE_NO_SQL") == "1"
-    coverage_file = first_opts["env"].get("COVERAGE_FILE", "")
-    assert coverage_file.endswith(".coverage")
-    assert coverage_file != ".coverage"
-    assert Path(coverage_file).is_absolute()
-
-    second_cmd, second_opts = recorded[1]
-    assert isinstance(second_cmd, list)
-    assert second_cmd[:5] == [sys.executable, "-m", "coverage", "report", "-m"]
-    assert second_opts["capture"] is True
-    assert second_opts["env"] is not None
-    assert second_opts["env"].get("COVERAGE_NO_SQL") == "1"
-    assert second_opts["env"].get("COVERAGE_FILE") == coverage_file
-
-    assert not Path(".coverage.stale").exists()
-    assert not Path("coverage.xml").exists()
-    assert not Path("codecov.xml").exists()
-
-
-def test_cli_coverage_command_toggles_verbose(monkeypatch: MonkeyPatch) -> None:
-    invoked: dict[str, bool] = {}
-
-    def _cover(*, verbose: bool) -> None:
-        invoked["verbose"] = verbose
-
-    monkeypatch.setattr(test_script, "run_coverage", _cover)
-    runner = CliRunner()
-    result = runner.invoke(cli.main, ["coverage", "--verbose"])
-
-    assert result.exit_code == 0
-    assert invoked == {"verbose": True}
-
-
-def test_target_metadata_includes_coverage_entry() -> None:
-    targets = target_metadata.get_targets()
-    coverage_entries = [t for t in targets if t.name == "coverage"]
-    assert coverage_entries
-    (entry,) = coverage_entries
-    assert entry.description.startswith("Run python -m coverage")