lib-cli-exit-tools 2.3.0__tar.gz → 2.3.1__tar.gz

{lib_cli_exit_tools-2.3.0 → lib_cli_exit_tools-2.3.1}/.github/workflows/default_cicd_public.yml

@@ -10,15 +10,56 @@ on:
     - cron: '17 3 * * *'
 
 jobs:
+  setup:
+    name: Extract Python versions and OS matrix from pyproject.toml
+    runs-on: ubuntu-latest
+    outputs:
+      python-versions: ${{ steps.metadata.outputs.python-versions }}
+      python-latest: ${{ steps.metadata.outputs.python-latest }}
+      os-matrix: ${{ steps.metadata.outputs.os-matrix }}
+    steps:
+      - uses: actions/checkout@v6
+      - uses: actions/setup-python@v6
+        with:
+          python-version: "3.x"
+      - name: Parse pyproject.toml for Python versions and OS matrix
+        id: metadata
+        shell: python
+        run: |
+          import json, os, tomllib
+
+          with open("pyproject.toml", "rb") as f:
+              data = tomllib.load(f)
+
+          # Python versions from classifiers
+          classifiers = data.get("project", {}).get("classifiers", [])
+          prefix = "Programming Language :: Python :: "
+          versions = [
+              c[len(prefix):]
+              for c in classifiers
+              if c.startswith(prefix) and "." in c[len(prefix):]
+          ]
+          if not versions:
+              raise SystemExit("No Python X.Y versions found in classifiers")
+
+          # OS matrix from [tool.ci]
+          ci_config = data.get("tool", {}).get("ci", {})
+          os_list = ci_config.get("os", ["ubuntu-latest"])
+
+          with open(os.environ["GITHUB_OUTPUT"], "a") as fh:
+              fh.write(f"python-versions={json.dumps(versions)}\n")
+              fh.write(f"python-latest={versions[-1]}\n")
+              fh.write(f"os-matrix={json.dumps(os_list)}\n")
+
   test:
     name: Tests (Python ${{ matrix.python }}, ${{ matrix.os }})
+    needs: setup
     runs-on: ${{ matrix.os }}
     strategy:
       fail-fast: false
       matrix:
-        os: [ubuntu-latest, macos-latest, windows-latest]
-        # Test against all supported Python versions (3.10+)
-        python: ["3.10", "3.11", "3.12", "3.13", "3.14"]
+        os: ${{ fromJSON(needs.setup.outputs.os-matrix) }}
+        python: ${{ fromJSON(needs.setup.outputs.python-versions) }}
     env:
       PYO3_USE_ABI3_FORWARD_COMPATIBILITY: "1"
       PYTHONIOENCODING: "utf-8"
@@ -45,25 +86,88 @@ jobs:
         id: metadata
         uses: ./.github/actions/extract-metadata
 
-      - name: Install journald prerequisites
+      - name: Install CI system dependencies (Ubuntu)
         if: runner.os == 'Linux'
-        shell: bash
+        shell: python
         run: |
-          sudo apt-get update
-          sudo apt-get install -y python3-systemd
+          import subprocess
+          try:
+              import tomllib
+          except ModuleNotFoundError:
+              import pip._vendor.tomli as tomllib
+          with open("pyproject.toml", "rb") as f:
+              data = tomllib.load(f)
+          deps = data.get("tool", {}).get("ci", {}).get("system-dependencies-ubuntu", [])
+          if deps:
+              print(f"Installing system packages: {' '.join(deps)}")
+              subprocess.check_call(["sudo", "apt-get", "update"])
+              subprocess.check_call(["sudo", "apt-get", "install", "-y", *deps])
+          else:
+              print("No CI system dependencies configured for Ubuntu.")
+
+      - name: Install CI system dependencies (macOS)
+        if: runner.os == 'macOS'
+        shell: python
+        run: |
+          import subprocess
+          try:
+              import tomllib
+          except ModuleNotFoundError:
+              import pip._vendor.tomli as tomllib
+          with open("pyproject.toml", "rb") as f:
+              data = tomllib.load(f)
+          deps = data.get("tool", {}).get("ci", {}).get("system-dependencies-macos", [])
+          if deps:
+              print(f"Installing system packages: {' '.join(deps)}")
+              subprocess.check_call(["brew", "install", *deps])
+          else:
+              print("No CI system dependencies configured for macOS.")
 
       - name: Install dev deps
         shell: bash
         run: |
           uv pip install -e .[dev] --system
 
-      - name: Install Windows Event Log prerequisites
+      - name: Install CI system dependencies (Windows/choco)
         if: runner.os == 'Windows'
-        shell: bash
+        shell: python
         run: |
-          uv pip install pywin32 --system
-
+          import subprocess
+          try:
+              import tomllib
+          except ModuleNotFoundError:
+              import pip._vendor.tomli as tomllib
+          with open("pyproject.toml", "rb") as f:
+              data = tomllib.load(f)
+          deps = data.get("tool", {}).get("ci", {}).get("system-dependencies-windows-choco", [])
+          if deps:
+              print(f"Installing choco packages: {' '.join(deps)}")
+              subprocess.check_call(["choco", "install", "-y", *deps])
+          else:
+              print("No CI choco dependencies configured for Windows.")
+
+      - name: Install CI pip dependencies (Windows)
+        if: runner.os == 'Windows'
+        shell: python
+        run: |
+          import subprocess
+          try:
+              import tomllib
+          except ModuleNotFoundError:
+              import pip._vendor.tomli as tomllib
+          with open("pyproject.toml", "rb") as f:
+              data = tomllib.load(f)
+          deps = data.get("tool", {}).get("ci", {}).get("system-dependencies-windows-pip", [])
+          if deps:
+              print(f"Installing pip packages: {' '.join(deps)}")
+              subprocess.check_call(["uv", "pip", "install", *deps, "--system"])
+          else:
+              print("No CI pip dependencies configured for Windows.")
+
+      # Self-hosted runners persist ruff cache via RUFF_CACHE_DIR volume mount,
+      # so actions/cache is only needed on GitHub-hosted runners.
       - name: Restore ruff cache
+        if: runner.environment == 'github-hosted'
         id: ruff-cache
         uses: actions/cache/restore@v5
         with:
@@ -109,8 +213,8 @@ jobs:
           always()
           && steps.pytest.outcome == 'success'
           && matrix.os == 'ubuntu-latest'
-          && matrix.python == '3.13'
-        uses: codecov/codecov-action@v5
+          && matrix.python == needs.setup.outputs.python-latest
+        uses: codecov/codecov-action@v6
         with:
           files: ${{ env.COV_REPORT_FILE }}
           fail_ci_if_error: false
@@ -125,7 +229,7 @@ jobs:
         id: bandit
         continue-on-error: true
         shell: bash
-        run: bandit -q -r ${{ env.SRC_PATH }}/${{ env.PACKAGE_MODULE }} ${{ env.BANDIT_SKIP_FLAG }}
+        run: bandit -q -c pyproject.toml -r ${{ env.SRC_PATH }}/${{ env.PACKAGE_MODULE }} ${{ env.BANDIT_SKIP_FLAG }}
 
       - name: Run pip-audit (vulnerability scan)
         id: pipaudit
@@ -166,8 +270,7 @@ jobs:
             exit 1
           fi
           if [[ "${{ steps.pipaudit.outcome }}" != "success" ]]; then
-            echo "::error::pip-audit vulnerability scan failed"
-            exit 1
+            echo "::warning::pip-audit vulnerability scan failed"
           fi
           echo "All checks passed!"
 
@@ -189,7 +292,7 @@ jobs:
         run: uv cache prune --ci
 
       - name: Save ruff cache
-        if: always() && steps.ruff-cache.outputs.cache-hit != 'true'
+        if: always() && runner.environment == 'github-hosted' && steps.ruff-cache.outputs.cache-hit != 'true'
         uses: actions/cache/save@v5
         with:
           path: .ruff_cache

{lib_cli_exit_tools-2.3.0 → lib_cli_exit_tools-2.3.1}/.github/workflows/default_release_public.yml

@@ -31,7 +31,7 @@ jobs:
         run: uv build
 
       - name: Upload artifacts
-        uses: actions/upload-artifact@v6
+        uses: actions/upload-artifact@v7
         with:
           name: dist
           path: dist/*
@@ -56,7 +56,7 @@ jobs:
           fi
 
       - name: Download artifacts
-        uses: actions/download-artifact@v7
+        uses: actions/download-artifact@v8
         with:
           name: dist
           path: dist/

{lib_cli_exit_tools-2.3.0 → lib_cli_exit_tools-2.3.1}/.gitignore

@@ -180,3 +180,5 @@ pdm.lock
 uv.lock
 /.github_bak/
 prompts.md
+CLAUDE.md
+.claude/

{lib_cli_exit_tools-2.3.0 → lib_cli_exit_tools-2.3.1}/CHANGELOG.md

@@ -4,6 +4,17 @@ All notable changes to this project are documented here. The format follows [Kee
 
 ## [Unreleased]
 
+## [2.3.1] - 2026-04-24
+
+### Fixed
+- Replaced `Iterator[...]` with `Generator[...]` in return annotations of `@contextmanager`-decorated functions (`config_overrides`, `cli_session`, `_apply_overrides_without_restore`, `_temporary_rich_click_configuration`) to satisfy pyright 1.1.409's new deprecation check that was breaking CI.
+
+### Security
+- Refreshed pip-audit `ignore-vulns`: dropped entries whose packages are now at fixed versions; added dev/env-only exclusions for authlib (GHSA-jj8c-mmj3-mmgv), cryptography (CVE-2026-39892), lxml (CVE-2026-41066), Pillow (CVE-2026-40192), python-multipart (CVE-2026-40347), and uv (GHSA-pjjw-68hj-v9mw). None of these packages are runtime dependencies of `lib_cli_exit_tools`.
+
+### Changed
+- Bumped dev dependency minimums in `pyproject.toml` and refreshed the BMK Makefile wrapper to 2.9.1 (persistent `uv tool install`).
+
 ## [2.3.0] - 2026-02-13
 
 ### Added

{lib_cli_exit_tools-2.3.0 → lib_cli_exit_tools-2.3.1}/Makefile

@@ -1,7 +1,7 @@
-# BMK MAKEFILE 2.3.2
+# BMK MAKEFILE 2.9.1
 # do not alter this file - it might be overwritten on new versions of BMK
 # if You want to alter it, remove the first line # BMK MAKEFILE 1.0 - then it is a custom makefile and will not be overwritten
-# bmk Makefile — thin wrapper calling bmk via uvx
+# bmk Makefile — thin wrapper using `uv tool install` for persistent bmk
 #
 # Usage:
 #   make test                        # run test suite
@@ -11,8 +11,10 @@
 #   make custom deploy                # run custom command
 #   make custom deploy --dry-run
 #
-# All targets invoke `uvx bmk@latest` so the latest published
-# version is always used, regardless of local install state.
+# On every invocation, bmk is (re-)installed as a persistent uv tool
+# together with the current project's dependencies (read from ./pyproject.toml).
+# This ensures pyright, pytest, pip-audit etc. can resolve the full
+# dependency tree without PYTHONPATH hacks or a local .venv.
 #
 # Arguments after the target name are forwarded automatically.
 # You can also use ARGS="..." explicitly if preferred.
@@ -20,9 +22,19 @@
 SHELL := /bin/bash
 .DEFAULT_GOAL := help
 
-BMK := uvx bmk@latest
+# Use absolute path to the uv tool binary so active virtualenvs cannot shadow it.
+BMK := $(HOME)/.local/bin/bmk
 ARGS ?=
 
+# ──────────────────────────────────────────────────────────────
+# Ensure bmk + project deps are installed as a persistent uv tool
+# ──────────────────────────────────────────────────────────────
+# --reinstall re-resolves deps on every call (fast when cached).
+# Fallback handles first-time install where --reinstall would fail.
+.PHONY: _ensure_bmk
+_ensure_bmk:
+	@uv tool install --reinstall bmk --with . 2>/dev/null || uv tool install bmk --with .
+
 # ──────────────────────────────────────────────────────────────
 # Argument forwarding via MAKECMDGOALS
 # ──────────────────────────────────────────────────────────────
@@ -30,7 +42,8 @@ ARGS ?=
 # instead of: make push ARGS="fix login bug"
 
 # All targets that accept trailing arguments
-_BMK_TARGETS := test t testintegration testi ti codecov coverage cov \
+_BMK_TARGETS := test t test-human th testintegration testi ti testintegration-human tih \
+	codecov coverage cov \
 	build bld clean cln cl run \
 	bump-major bump-minor bump-patch bump \
 	commit c push psh p release rel r \
@@ -51,21 +64,33 @@ endif
 # ──────────────────────────────────────────────────────────────
 
 .PHONY: test t
-test:  ## Run test suite [alias: t]
+test: _ensure_bmk  ## Run test suite [alias: t]
 	$(BMK) test $(ARGS)
-t:
+t: _ensure_bmk
 	$(BMK) test $(ARGS)
 
+.PHONY: test-human th
+test-human: _ensure_bmk  ## Run test suite with human-readable output [alias: th]
+	$(BMK) test --human $(ARGS)
+th: _ensure_bmk
+	$(BMK) test --human $(ARGS)
+
 .PHONY: testintegration testi ti
-testintegration:  ## Run integration tests only [aliases: testi, ti]
+testintegration: _ensure_bmk  ## Run integration tests only [aliases: testi, ti]
 	$(BMK) testintegration $(ARGS)
-testi ti:
+testi ti: _ensure_bmk
 	$(BMK) testintegration $(ARGS)
 
+.PHONY: testintegration-human tih
+testintegration-human: _ensure_bmk  ## Run integration tests with human-readable output [alias: tih]
+	$(BMK) testintegration --human $(ARGS)
+tih: _ensure_bmk
+	$(BMK) testintegration --human $(ARGS)
+
 .PHONY: codecov coverage cov
-codecov:  ## Upload coverage report to Codecov [aliases: coverage, cov]
+codecov: _ensure_bmk  ## Upload coverage report to Codecov [aliases: coverage, cov]
 	$(BMK) codecov $(ARGS)
-coverage cov:
+coverage cov: _ensure_bmk
 	$(BMK) codecov $(ARGS)
 
 # ──────────────────────────────────────────────────────────────
@@ -73,15 +98,15 @@ coverage cov:
 # ──────────────────────────────────────────────────────────────
 
 .PHONY: build bld
-build:  ## Build wheel and sdist artifacts [alias: bld]
+build: _ensure_bmk  ## Build wheel and sdist artifacts [alias: bld]
 	$(BMK) build $(ARGS)
-bld:
+bld: _ensure_bmk
 	$(BMK) build $(ARGS)
 
 .PHONY: clean cln cl
-clean:  ## Remove build artifacts and caches [aliases: cln, cl]
+clean: _ensure_bmk  ## Remove build artifacts and caches [aliases: cln, cl]
 	$(BMK) clean $(ARGS)
-cln cl:
+cln cl: _ensure_bmk
 	$(BMK) clean $(ARGS)
 
 # ──────────────────────────────────────────────────────────────
@@ -89,7 +114,7 @@ cln cl:
 # ──────────────────────────────────────────────────────────────
 
 .PHONY: run
-run:  ## Run the project CLI via uvx
+run: _ensure_bmk  ## Run the project CLI
 	$(BMK) run $(ARGS)
 
 # ──────────────────────────────────────────────────────────────
@@ -97,15 +122,15 @@ run:  ## Run the project CLI via uvx
 # ──────────────────────────────────────────────────────────────
 
 .PHONY: bump-major
-bump-major:  ## Bump major version (X+1).0.0
+bump-major: _ensure_bmk  ## Bump major version (X+1).0.0
 	$(BMK) bump major $(ARGS)
 
 .PHONY: bump-minor
-bump-minor:  ## Bump minor version X.(Y+1).0
+bump-minor: _ensure_bmk  ## Bump minor version X.(Y+1).0
 	$(BMK) bump minor $(ARGS)
 
 .PHONY: bump-patch
-bump-patch:  ## Bump patch version X.Y.(Z+1)
+bump-patch: _ensure_bmk  ## Bump patch version X.Y.(Z+1)
 	$(BMK) bump patch $(ARGS)
 
 .PHONY: bump
@@ -116,21 +141,21 @@ bump: bump-patch  ## Bump patch version (default for bump)
 # ──────────────────────────────────────────────────────────────
 
 .PHONY: commit c
-commit:  ## Create a git commit with timestamped message [alias: c]
+commit: _ensure_bmk  ## Create a git commit with timestamped message [alias: c]
 	$(BMK) commit $(ARGS)
-c:
+c: _ensure_bmk
 	$(BMK) commit $(ARGS)
 
 .PHONY: push psh p
-push:  ## Run tests, commit, and push to remote [aliases: psh, p]
+push: _ensure_bmk  ## Run tests, commit, and push to remote [aliases: psh, p]
 	$(BMK) push $(ARGS)
-psh p:
+psh p: _ensure_bmk
 	$(BMK) push $(ARGS)
 
 .PHONY: release rel r
-release:  ## Create a versioned release (tag + GitHub release) [aliases: rel, r]
+release: _ensure_bmk  ## Create a versioned release (tag + GitHub release) [aliases: rel, r]
 	$(BMK) release $(ARGS)
-rel r:
+rel r: _ensure_bmk
 	$(BMK) release $(ARGS)
 
 # ──────────────────────────────────────────────────────────────
@@ -138,13 +163,13 @@ rel r:
 # ──────────────────────────────────────────────────────────────
 
 .PHONY: dependencies deps d
-dependencies:  ## Check and list project dependencies [aliases: deps, d]
+dependencies: _ensure_bmk  ## Check and list project dependencies [aliases: deps, d]
 	$(BMK) dependencies $(ARGS)
-deps d:
+deps d: _ensure_bmk
 	$(BMK) dependencies $(ARGS)
 
 .PHONY: dependencies-update
-dependencies-update:  ## Update dependencies to latest versions
+dependencies-update: _ensure_bmk  ## Update dependencies to latest versions
 	$(BMK) dependencies update $(ARGS)
 
 # ──────────────────────────────────────────────────────────────
@@ -152,15 +177,15 @@ dependencies-update:  ## Update dependencies to latest versions
 # ──────────────────────────────────────────────────────────────
 
 .PHONY: config
-config:  ## Show current merged configuration
+config: _ensure_bmk  ## Show current merged configuration
 	$(BMK) config $(ARGS)
 
 .PHONY: config-deploy
-config-deploy:  ## Deploy configuration to system/user directories
+config-deploy: _ensure_bmk  ## Deploy configuration to system/user directories
 	$(BMK) config-deploy $(ARGS)
 
 .PHONY: config-generate-examples
-config-generate-examples:  ## Generate example configuration files
+config-generate-examples: _ensure_bmk  ## Generate example configuration files
 	$(BMK) config-generate-examples $(ARGS)
 
 # ──────────────────────────────────────────────────────────────
@@ -168,11 +193,11 @@ config-generate-examples:  ## Generate example configuration files
 # ──────────────────────────────────────────────────────────────
 
 .PHONY: send-email
-send-email:  ## Send an email via configured SMTP
+send-email: _ensure_bmk  ## Send an email via configured SMTP
 	$(BMK) send-email $(ARGS)
 
 .PHONY: send-notification
-send-notification:  ## Send a plain-text notification email
+send-notification: _ensure_bmk  ## Send a plain-text notification email
 	$(BMK) send-notification $(ARGS)
 
 # ──────────────────────────────────────────────────────────────
@@ -180,7 +205,7 @@ send-notification:  ## Send a plain-text notification email
 # ──────────────────────────────────────────────────────────────
 
 .PHONY: custom
-custom:  ## Run a custom command (make custom <name> [args...])
+custom: _ensure_bmk  ## Run a custom command (make custom <name> [args...])
 	$(BMK) custom $(ARGS)
 
 # ──────────────────────────────────────────────────────────────
@@ -188,15 +213,15 @@ custom:  ## Run a custom command (make custom <name> [args...])
 # ──────────────────────────────────────────────────────────────
 
 .PHONY: info
-info:  ## Print resolved package metadata
+info: _ensure_bmk  ## Print resolved package metadata
 	$(BMK) info $(ARGS)
 
 .PHONY: logdemo
-logdemo:  ## Run logging demonstration
+logdemo: _ensure_bmk  ## Run logging demonstration
 	$(BMK) logdemo $(ARGS)
 
 .PHONY: version-current
-version-current:  ## Print current version
+version-current: _ensure_bmk  ## Print current version
 	$(BMK) --version
 
 # ──────────────────────────────────────────────────────────────

{lib_cli_exit_tools-2.3.0 → lib_cli_exit_tools-2.3.1}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: lib_cli_exit_tools
-Version: 2.3.0
+Version: 2.3.1
 Summary: CLI exit handling helpers: clean signals, exit codes, and error printing
 Project-URL: Homepage, https://github.com/bitranox/lib_cli_exit_tools
 Project-URL: Repository, https://github.com/bitranox/lib_cli_exit_tools.git
@@ -14,24 +14,29 @@ Classifier: License :: OSI Approved :: MIT License
 Classifier: Operating System :: OS Independent
 Classifier: Programming Language :: Python :: 3
 Classifier: Programming Language :: Python :: 3 :: Only
+Classifier: Programming Language :: Python :: 3.10
+Classifier: Programming Language :: Python :: 3.11
+Classifier: Programming Language :: Python :: 3.12
+Classifier: Programming Language :: Python :: 3.13
+Classifier: Programming Language :: Python :: 3.14
 Classifier: Typing :: Typed
 Requires-Python: >=3.10
 Requires-Dist: rich-click>=1.9.7
 Provides-Extra: dev
-Requires-Dist: bandit>=1.9.3; extra == 'dev'
-Requires-Dist: build>=1.4.0; extra == 'dev'
-Requires-Dist: codecov-cli>=11.2.6; extra == 'dev'
-Requires-Dist: coverage[toml]>=7.13.4; extra == 'dev'
-Requires-Dist: hypothesis>=6.151.6; extra == 'dev'
-Requires-Dist: import-linter>=2.10; extra == 'dev'
+Requires-Dist: bandit>=1.9.4; extra == 'dev'
+Requires-Dist: build>=1.4.4; extra == 'dev'
+Requires-Dist: codecov-cli>=11.2.8; extra == 'dev'
+Requires-Dist: coverage[toml]>=7.13.5; extra == 'dev'
+Requires-Dist: hypothesis>=6.152.2; extra == 'dev'
+Requires-Dist: import-linter>=2.11; extra == 'dev'
 Requires-Dist: pip-audit>=2.10.0; extra == 'dev'
-Requires-Dist: pyright[nodejs]>=1.1.408; extra == 'dev'
+Requires-Dist: pyright[nodejs]>=1.1.409; extra == 'dev'
 Requires-Dist: pytest-asyncio>=1.3.0; extra == 'dev'
-Requires-Dist: pytest-cov>=7.0.0; extra == 'dev'
-Requires-Dist: pytest>=9.0.2; extra == 'dev'
+Requires-Dist: pytest-cov>=7.1.0; extra == 'dev'
+Requires-Dist: pytest>=9.0.3; extra == 'dev'
 Requires-Dist: rtoml>=0.13.0; extra == 'dev'
-Requires-Dist: ruff>=0.15.1; extra == 'dev'
-Requires-Dist: textual>=7.5.0; extra == 'dev'
+Requires-Dist: ruff>=0.15.11; extra == 'dev'
+Requires-Dist: textual>=8.2.4; extra == 'dev'
 Requires-Dist: twine>=6.2.0; extra == 'dev'
 Description-Content-Type: text/markdown
 
@@ -47,7 +52,6 @@ Description-Content-Type: text/markdown
 [![Code Style: Ruff](https://img.shields.io/badge/Code%20Style-Ruff-46A3FF?logo=ruff&labelColor=000)](https://docs.astral.sh/ruff/)
 [![codecov](https://codecov.io/gh/bitranox/lib_cli_exit_tools/graph/badge.svg?token=z1D8JSjWEH)](https://codecov.io/gh/bitranox/lib_cli_exit_tools)
 [![Maintainability](https://qlty.sh/gh/bitranox/projects/lib_cli_exit_tools/maintainability.svg)](https://qlty.sh/gh/bitranox/projects/lib_cli_exit_tools)
-[![Known Vulnerabilities](https://snyk.io/test/github/bitranox/lib_cli_exit_tools/badge.svg)](https://snyk.io/test/github/bitranox/lib_cli_exit_tools)
 [![security: bandit](https://img.shields.io/badge/security-bandit-yellow.svg)](https://github.com/PyCQA/bandit)
 
 Small helpers for robust CLI exit handling:

{lib_cli_exit_tools-2.3.0 → lib_cli_exit_tools-2.3.1}/README.md

@@ -10,7 +10,6 @@
 [![Code Style: Ruff](https://img.shields.io/badge/Code%20Style-Ruff-46A3FF?logo=ruff&labelColor=000)](https://docs.astral.sh/ruff/)
 [![codecov](https://codecov.io/gh/bitranox/lib_cli_exit_tools/graph/badge.svg?token=z1D8JSjWEH)](https://codecov.io/gh/bitranox/lib_cli_exit_tools)
 [![Maintainability](https://qlty.sh/gh/bitranox/projects/lib_cli_exit_tools/maintainability.svg)](https://qlty.sh/gh/bitranox/projects/lib_cli_exit_tools)
-[![Known Vulnerabilities](https://snyk.io/test/github/bitranox/lib_cli_exit_tools/badge.svg)](https://snyk.io/test/github/bitranox/lib_cli_exit_tools)
 [![security: bandit](https://img.shields.io/badge/security-bandit-yellow.svg)](https://github.com/PyCQA/bandit)
 
 Small helpers for robust CLI exit handling:

{lib_cli_exit_tools-2.3.0 → lib_cli_exit_tools-2.3.1}/pyproject.toml

@@ -1,6 +1,6 @@
 [project]
 name = "lib_cli_exit_tools"
-version = "2.3.0"
+version = "2.3.1"
 description = "CLI exit handling helpers: clean signals, exit codes, and error printing"
 readme = "README.md"
 requires-python = ">=3.10"
@@ -9,14 +9,28 @@ license = { text = "MIT" }
 authors = [{ name = "bitranox", email = "bitranox@gmail.com" }]
 keywords = ["cli", "exit", "signals", "errors", "click"]
 classifiers = [
-  "Programming Language :: Python :: 3",
-  "Programming Language :: Python :: 3 :: Only",
   "License :: OSI Approved :: MIT License",
   "Environment :: Console",
   "Operating System :: OS Independent",
   "Typing :: Typed",
+  "Programming Language :: Python :: 3",
+  "Programming Language :: Python :: 3 :: Only",
+  "Programming Language :: Python :: 3.10",
+  "Programming Language :: Python :: 3.11",
+  "Programming Language :: Python :: 3.12",
+  "Programming Language :: Python :: 3.13",
+  "Programming Language :: Python :: 3.14",
 ]
 
+# System packages required for CI runners (read by GitHub Actions workflow template)
+# Format: "apt_package_name" for Ubuntu, future: {"apt": "...", "brew": "...", "choco": "..."}
+[tool.ci]
+system-dependencies-ubuntu = []
+system-dependencies-macos = []
+system-dependencies-windows-pip = []
+system-dependencies-windows-choco = []
+os = ["ubuntu-latest", "windows-latest", "macos-latest"]
+
 [project.urls]
 Homepage = "https://github.com/bitranox/lib_cli_exit_tools"
 Repository = "https://github.com/bitranox/lib_cli_exit_tools.git"
@@ -24,19 +38,19 @@ Issues = "https://github.com/bitranox/lib_cli_exit_tools/issues"
 
 [project.optional-dependencies]
 dev = [
-  "build>=1.4.0",
-  "codecov-cli>=11.2.6",
-  "coverage[toml]>=7.13.4",
-  "hypothesis>=6.151.6",
-  "import-linter>=2.10",
-  "bandit>=1.9.3",
+  "build>=1.4.4",
+  "codecov-cli>=11.2.8",
+  "coverage[toml]>=7.13.5",
+  "hypothesis>=6.152.2",
+  "import-linter>=2.11",
+  "bandit>=1.9.4",
   "pip-audit>=2.10.0",
-  "pyright[nodejs]>=1.1.408",
-  "pytest>=9.0.2",
+  "pyright[nodejs]>=1.1.409",
+  "pytest>=9.0.3",
   "pytest-asyncio>=1.3.0",
-  "pytest-cov>=7.0.0",
-  "ruff>=0.15.1",
-  "textual>=7.5.0",
+  "pytest-cov>=7.1.0",
+  "ruff>=0.15.11",
+  "textual>=8.2.4",
   "rtoml>=0.13.0",
   "twine>=6.2.0"
 ]
@@ -48,7 +62,7 @@ cli-exit-tools = "lib_cli_exit_tools.cli:main"
 lib-cli-exit-tools = "lib_cli_exit_tools.cli:main"
 
 [build-system]
-requires = ["hatchling>=1.28.0"]
+requires = ["hatchling>=1.29.0"]
 build-backend = "hatchling.build"
 
 [tool.hatch.build.targets.wheel]
@@ -95,8 +109,9 @@ fail_under = 85
 show_missing = true
 
 [tool.clean]
-# Patterns to remove when running `make clean` or `python -m scripts clean`
+# Patterns to remove when running `make clean`
 patterns = [
+  "**/__pycache__",
   ".hypothesis",
   ".import_linter_cache",
   ".pytest_cache",
@@ -155,33 +170,23 @@ forbidden_modules = [
 
 [tool.pip-audit]
 # Known vulnerabilities to ignore (unfixable or accepted risk)
-# GHSA-4xh5-x5gv-qwph: py library ReDoS (no fix available, low risk)
-# PYSEC-2022-42969: same as above (alias)
-# PYSEC-2022-43012, CVE-2024-6345, PYSEC-2025-49: setuptools vulnerabilities
-#   These are build-time dependencies only, not runtime. The virtual environment
-#   setuptools version is managed by the CI environment/pip itself.
-# CVE-2025-68146: filelock <3.20.1 vulnerability, transitive dev dependency
-#   Will be resolved when upstream packages update their dependencies.
-# CVE-2026-23949: jaraco-context <6.1.0, transitive dev dependency
-# CVE-2025-69277: pynacl <1.6.2, transitive dev dependency
-# CVE-2026-21441: urllib3 <2.6.3, transitive dev dependency
-# CVE-2026-22702: virtualenv <20.36.1, transitive dev dependency
-# CVE-2026-24049: wheel <0.46.2, build-time dependency
-# CVE-2026-24486: python-multipart <0.0.22, transitive dev dependency
+# Runtime deps of lib_cli_exit_tools are limited to rich-click; entries below
+# are dev/env-only transitive vulnerabilities that do not affect library users.
 ignore-vulns = [
-  "GHSA-4xh5-x5gv-qwph",
-  "PYSEC-2022-42969",
-  "PYSEC-2022-43012",
-  "CVE-2024-6345",
-  "PYSEC-2025-49",
-  "CVE-2025-68146",
-  "CVE-2026-23949",
-  "CVE-2025-69277",
-  "CVE-2026-21441",
-  "CVE-2026-22702",
-  "CVE-2026-24049",
-  "CVE-2026-24486",
-  "CVE-2026-1703",
-  "CVE-2026-25990",
-  "CVE-2026-26007"
+  "GHSA-4xh5-x5gv-qwph",          # py library ReDoS, no fix available, dev-only
+  "PYSEC-2022-42969",             # alias of GHSA-4xh5-x5gv-qwph
+  "CVE-2026-1703",                # transitive dev dependency, upstream tracking
+  "CVE-2026-25990",               # transitive dev dependency, upstream tracking
+  "CVE-2026-26007",               # transitive dev dependency, upstream tracking
+  "CVE-2026-25645",               # transitive dev dependency, upstream tracking
+  "GHSA-jj8c-mmj3-mmgv",          # authlib <1.6.11 CSRF in cache feature, dev-only (bmk tooling chain)
+  "CVE-2026-39892",               # cryptography <46.0.7 Hash.update buffer overflow, dev-only
+  "GHSA-p423-j2cm-9vmq",          # alias of CVE-2026-39892
+  "CVE-2026-41066",               # lxml <6.1.0 XXE via default resolve_entities, dev-only
+  "GHSA-vfmq-68hx-4jfw",          # alias of CVE-2026-41066
+  "CVE-2026-40192",               # Pillow <12.2.0 FITS decompression bomb, dev-only
+  "GHSA-whj4-6x5x-4v2j",          # alias of CVE-2026-40192
+  "CVE-2026-40347",               # python-multipart <0.0.26 DoS via crafted preamble/epilogue, dev-only
+  "GHSA-mj87-hwqh-73pj",          # alias of CVE-2026-40347
+  "GHSA-pjjw-68hj-v9mw",          # uv <0.11.6 wheel RECORD path traversal on uninstall, dev tooling
 ]

{lib_cli_exit_tools-2.3.0 → lib_cli_exit_tools-2.3.1}/src/lib_cli_exit_tools/__init__conf__.py

@@ -24,7 +24,7 @@ name = "lib_cli_exit_tools"
 #: Human-readable summary shown in CLI help output.
 title = "CLI exit handling helpers: clean signals, exit codes, and error printing"
 #: Current release version pulled from ``pyproject.toml`` by automation.
-version = "2.3.0"
+version = "2.3.1"
 #: Repository homepage presented to users.
 homepage = "https://github.com/bitranox/lib_cli_exit_tools"
 #: Author attribution surfaced in CLI output.

{lib_cli_exit_tools-2.3.0 → lib_cli_exit_tools-2.3.1}/src/lib_cli_exit_tools/application/runner.py

@@ -20,7 +20,7 @@ from __future__ import annotations
 
 import sys
 from contextlib import contextmanager, nullcontext, suppress
-from typing import Callable, ContextManager, Iterable, Iterator, Literal, Protocol, Sequence, TextIO, TypedDict, cast
+from typing import Callable, ContextManager, Generator, Iterable, Literal, Protocol, Sequence, TextIO, TypedDict, cast
 
 import rich_click as click
 from rich_click import rich_click as rich_config
@@ -461,7 +461,7 @@ def cli_session(
     verbose_limit: int = 10_000,
     overrides: SessionOverrides | None = None,
     restore: bool = True,
-) -> Iterator[
+) -> Generator[
     Callable[
         [
             ClickCommand,
@@ -571,7 +571,7 @@ def _session_config_manager(applied: SessionOverrides, restore: bool) -> Context
 
 
 @contextmanager
-def _apply_overrides_without_restore(applied: SessionOverrides) -> Iterator[None]:
+def _apply_overrides_without_restore(applied: SessionOverrides) -> Generator[None]:
     """Apply overrides without restoring prior state on exit.
 
     Parameters:

{lib_cli_exit_tools-2.3.0 → lib_cli_exit_tools-2.3.1}/src/lib_cli_exit_tools/cli/styling.py

@@ -16,7 +16,7 @@ System Integration:
 from __future__ import annotations
 
 from contextlib import contextmanager
-from typing import Any, Iterator, TypedDict
+from typing import Any, Generator, TypedDict
 
 import rich_click as click
 from rich_click import rich_click as rich_config
@@ -97,7 +97,7 @@ def _restore_rich_click_options(snapshot: RichClickSnapshot) -> None:
 
 
 @contextmanager
-def _temporary_rich_click_configuration() -> Iterator[None]:  # pyright: ignore[reportUnusedFunction]
+def _temporary_rich_click_configuration() -> Generator[None]:  # pyright: ignore[reportUnusedFunction]
     """Apply plain-output safeguards and restore rich-click globals afterwards."""
 
     snapshot = _snapshot_rich_click_options()

{lib_cli_exit_tools-2.3.0 → lib_cli_exit_tools-2.3.1}/src/lib_cli_exit_tools/core/configuration.py

@@ -20,7 +20,7 @@ System Integration:
 
 from __future__ import annotations
 
-from collections.abc import Iterator, Mapping
+from collections.abc import Generator, Mapping
 from contextlib import contextmanager
 from dataclasses import dataclass, fields
 from enum import Enum
@@ -156,7 +156,7 @@ def reset_config() -> None:
 
 
 @contextmanager
-def config_overrides(**overrides: object) -> Iterator[_Config]:
+def config_overrides(**overrides: object) -> Generator[_Config]:
     """Snapshot configuration state and optionally apply temporary overrides."""
 
     _reject_unknown_fields(overrides)

lib_cli_exit_tools-2.3.0/.claude/commands/tfbp.md

@@ -1,84 +0,0 @@
-Test, Fix, Bump, Push — full release pipeline.
-
-Execute the following steps sequentially. Do NOT skip steps. Stop and ask the user if any decision requires human judgement.
-
----
-
-## Step 1 — Run Tests
-
-Run `make test` and capture the full output.
-
-## Step 2 — Fix All Errors
-
-If `make test` failed:
-- Analyze every error in the output (lint, type-check, unit tests, shellcheck, etc.).
-- Fix all errors in the source code.
-- Re-run `make test` to confirm all errors are resolved.
-- Repeat until `make test` passes with zero failures.
-
-If `make test` passed, proceed to the next step.
-
-## Step 3 — Determine Semver Bump Level
-
-Analyze all changes since the last released version:
-- Run `git log $(git describe --tags --abbrev=0)..HEAD --oneline` to list commits since the last tag.
-- Run `git diff $(git describe --tags --abbrev=0)..HEAD --stat` to see which files changed.
-- Apply semver rules:
-  - **major** — breaking API changes, removed public functions/classes, changed signatures
-  - **minor** — new features, new public API, new modules, backward-compatible additions
-  - **patch** — bug fixes, documentation, internal refactors, dependency updates, CI/CD changes
-- Present your reasoning and recommended bump level to the user for confirmation before proceeding.
-
-## Step 4 — Bump Version
-
-Run the appropriate command based on the confirmed semver level:
-- `make bump-patch` for patch
-- `make bump-minor` for minor
-- `make bump-major` for major
-
-## Step 5 — Update Changelog
-
-Update `CHANGELOG.md` with the important changes since the last version:
-- Group changes under the new version heading with the current date.
-- Categorize entries (Added, Changed, Fixed, Removed, etc.) following Keep a Changelog format.
-- Be concise but cover all user-visible and developer-visible changes.
-
-## Step 6 — Create Commit Message
-
-Compose a meaningful commit message that:
-- Summarizes the version bump and key changes.
-- References the new version number.
-- Follows conventional commit style if the project uses it.
-
-Present the commit message to the user for approval.
-
-## Step 7 — Push
-
-Run `make push <approved commit message>` to run tests, commit, and push to the remote.
-
-## Step 8 — Monitor GitHub CI
-
-After pushing:
-- Run `gh run list --limit 1` to find the latest workflow run.
-- Run `gh run watch <run-id>` to monitor it until completion.
-- If the run **succeeds**, proceed to Step 9.
-- If the run **fails**:
-  - Run `gh run view <run-id> --log-failed` to get failure details.
-  - Fix all errors in the source code.
-  - Go back to **Step 5** (update changelog if the fix is meaningful, re-commit, re-push).
-
-## Step 9 — Release
-
-Once GitHub CI is green:
-- Run `make release` to create the version tag and GitHub release.
-
-## Step 10 — Monitor Release CI
-
-After releasing:
-- Run `gh run list --limit 1` to find the release workflow run.
-- Run `gh run watch <run-id>` to monitor it until completion.
-- If the run **succeeds**, report the release URL and confirm completion.
-- If the run **fails**:
-  - Run `gh run view <run-id> --log-failed` to get failure details.
-  - Fix all errors in the source code.
-  - Go back to **Step 5** (update changelog, re-commit, re-push, re-release).

lib_cli_exit_tools-2.3.0/CLAUDE.md

@@ -1,164 +0,0 @@
-# Claude Code Guidelines for lib_cli_exit_tools
-
-## Session Initialization
-
-When starting a new session, read and apply the following system prompt files from `/media/srv-main-softdev/projects/softwarestack/systemprompts`:
-
-### Core Guidelines (Always Apply)
-- `core_programming_solid.md`
-
-### Bash-Specific Guidelines
-When working with Bash scripts:
-- `core_programming_solid.md`
-- `bash_clean_architecture.md`
-- `bash_clean_code.md`
-- `bash_small_functions.md`
-
-### Python-Specific Guidelines
-When working with Python code:
-- `core_programming_solid.md`
-- `python_solid_architecture_enforcer.md`
-- use skill `bx-python-clean-architecture`
-- `python_clean_code.md`
-- `python_small_functions_style.md`
-- use skill `bx-python-libraries-to-use`
-- `python_data_architecture_enforcement.md`
-
-### Additional Guidelines
-- `self_documenting.md`
-- `self_documenting_template.md`
-- `python_jupyter_notebooks.md`
-- `python_testing.md`
-
-## Project Structure
-
-```
-lib_cli_exit_tools/
-├── .github/
-│   └── workflows/              # GitHub Actions CI/CD workflows
-├── .devcontainer/              # Dev container configuration
-├── docs/                       # Project documentation
-│   └── system-design/          # System design documents
-├── notebooks/                  # Jupyter notebooks for experiments
-├── scripts/                    # Build and automation scripts
-│   ├── __init__.py            # Package marker
-│   ├── __main__.py            # Module entry point
-│   ├── _utils.py              # Shared utilities
-│   ├── build.py               # Build wheel/sdist
-│   ├── bump.py                # Version bump (generic)
-│   ├── bump_major.py          # Bump major version
-│   ├── bump_minor.py          # Bump minor version
-│   ├── bump_patch.py          # Bump patch version
-│   ├── bump_version.py        # Version bump utilities
-│   ├── clean.py               # Clean build artifacts
-│   ├── cli.py                 # CLI for scripts
-│   ├── dependencies.py        # Dependency management
-│   ├── dev.py                 # Development install
-│   ├── help.py                # Show help
-│   ├── install.py             # Install package
-│   ├── menu.py                # Interactive TUI menu
-│   ├── push.py                # Git push
-│   ├── release.py             # Create releases
-│   ├── run_cli.py             # Run CLI
-│   ├── target_metadata.py     # Metadata generation
-│   ├── test.py                # Run tests with coverage
-│   ├── toml_config.py         # TOML configuration utilities
-│   └── version_current.py     # Print current version
-├── src/
-│   └── lib_cli_exit_tools/    # Main Python package
-│       ├── __init__.py        # Package initialization
-│       ├── __init__conf__.py  # Configuration constants
-│       ├── __main__.py        # CLI entry point
-│       ├── cli.py             # CLI implementation
-│       ├── lib_cli_exit_tools.py  # Core library functions
-│       ├── py.typed           # PEP 561 marker
-│       ├── adapters/          # Adapter layer
-│       │   └── signals.py     # Signal handling adapters
-│       ├── application/       # Application layer
-│       │   └── runner.py      # Application runner
-│       └── core/              # Core domain layer
-│           ├── configuration.py  # Configuration management
-│           └── exit_codes.py     # Exit code definitions
-├── tests/                     # Test suite
-├── .env.example               # Example environment variables
-├── CLAUDE.md                  # Claude Code guidelines (this file)
-├── CHANGELOG.md               # Version history
-├── CONTRIBUTING.md            # Contribution guidelines
-├── DEVELOPMENT.md             # Development setup guide
-├── INSTALL.md                 # Installation instructions
-├── LICENSE                    # MIT License
-├── Makefile                   # Make targets for common tasks
-├── pyproject.toml             # Project metadata & dependencies
-├── codecov.yml                # Codecov configuration
-└── README.md                  # Project overview
-```
-
-## Versioning & Releases
-
-- **Single Source of Truth**: Package version is in `pyproject.toml` (`[project].version`)
-- **Version Bumps**: update `pyproject.toml`, `CHANGELOG.md` and update the constants in `src/lib_cli_exit_tools/__init__conf__.py` according to `pyproject.toml`
-    - Automation rewrites `src/lib_cli_exit_tools/__init__conf__.py` from `pyproject.toml`, so runtime code imports generated constants instead of querying `importlib.metadata`.
-    - After updating project metadata (version, summary, URLs, authors) run `make test` (or `python -m scripts.test`) to regenerate the metadata module before committing.
-- **Release Tags**: Format is `vX.Y.Z` (push tags for CI to build and publish)
-
-## Common Make Targets
-
-| Target            | Description                                                                     |
-|-------------------|---------------------------------------------------------------------------------|
-| `build`           | Build wheel/sdist artifacts                                                     |
-| `bump`            | Bump version (VERSION=X.Y.Z or PART=major\|minor\|patch) and update changelog  |
-| `bump-major`      | Increment major version ((X+1).0.0)                                            |
-| `bump-minor`      | Increment minor version (X.Y.Z → X.(Y+1).0)                                    |
-| `bump-patch`      | Increment patch version (X.Y.Z → X.Y.(Z+1))                                    |
-| `clean`           | Remove caches, coverage, and build artifacts (includes `dist/` and `build/`)   |
-| `dev`             | Install package with dev extras                                                |
-| `help`            | Show make targets                                                              |
-| `install`         | Editable install                                                               |
-| `menu`            | Interactive TUI menu                                                           |
-| `push`            | Commit changes and push to GitHub (no CI monitoring)                           |
-| `release`         | Tag vX.Y.Z, push, sync packaging, run gh release if available                  |
-| `run`             | Run module entry (`python -m ... --help`)                                      |
-| `test`            | Lint, format, type-check, run tests with coverage, upload to Codecov           |
-| `version-current` | Print current version from `pyproject.toml`                                    |
-
-## Coding Style & Naming Conventions
-
-Follow the guidelines in `python_clean_code.md` for all Python code.
-
-## Architecture Overview
-
-This library follows Clean Architecture with three layers:
-- **core/**: Domain layer with exit codes and configuration (no external dependencies)
-- **application/**: Application services and runners
-- **adapters/**: External interfaces (signal handling)
-
-Import rules (enforced by import-linter):
-- `core` cannot import from `application`, `adapters`, or `cli`
-- `application` cannot import from `cli`
-
-Apply principles using skill `bx-python-clean-architecture` when designing and implementing features.
-
-## Security & Configuration
-
-- `.env` files are for local tooling only (CodeCov tokens, etc.)
-- **NEVER** commit secrets to version control
-- Rich logging should sanitize payloads before rendering
-
-## Commit & Push Policy
-
-### Pre-Push Requirements
-- **Always run `make test` before pushing** to avoid lint/test breakage
-- Ensure all tests pass and code is properly formatted
-
-### Post-Push Monitoring
-- Monitor GitHub Actions for errors after pushing
-- Attempt to correct any CI/CD errors that appear
-
-## Claude Code Workflow
-
-When working on this project:
-1. Read relevant system prompts at session start
-2. Apply appropriate coding guidelines based on file type
-3. Run `make test` before commits
-4. Follow versioning guidelines for releases
-5. Monitor CI after pushing changes