outlook-cli-rs 0.2.2__tar.gz → 0.2.3__tar.gz

{outlook_cli_rs-0.2.2 → outlook_cli_rs-0.2.3}/.github/workflows/ci.yml

@@ -3,6 +3,7 @@ name: CI
 on:
   push:
   pull_request:
+  workflow_call:
 
 permissions:
   contents: read

outlook_cli_rs-0.2.3/.github/workflows/release.yml

@@ -0,0 +1,179 @@
+name: Release
+
+on:
+  push:
+    tags: ['v*']
+  workflow_dispatch:
+    inputs:
+      publish:
+        description: Publish the verified packages (requires a version tag and registry secrets)
+        type: boolean
+        default: false
+
+permissions:
+  contents: read
+
+concurrency:
+  group: release-${{ github.ref }}
+  cancel-in-progress: false
+
+jobs:
+  test:
+    uses: ./.github/workflows/ci.yml
+
+  wheels:
+    name: Wheel (${{ matrix.target }})
+    needs: test
+    strategy:
+      fail-fast: false
+      matrix:
+        include:
+          - os: ubuntu-24.04
+            target: x86_64-unknown-linux-gnu
+            compatibility: '2014'
+            container: quay.io/pypa/manylinux2014_x86_64:latest
+          - os: ubuntu-24.04-arm
+            target: aarch64-unknown-linux-gnu
+            compatibility: '2014'
+            container: quay.io/pypa/manylinux2014_aarch64:latest
+          - os: ubuntu-24.04
+            target: x86_64-unknown-linux-musl
+            compatibility: musllinux_1_2
+            container: quay.io/pypa/musllinux_1_2_x86_64:latest
+          - os: ubuntu-24.04-arm
+            target: aarch64-unknown-linux-musl
+            compatibility: musllinux_1_2
+            container: quay.io/pypa/musllinux_1_2_aarch64:latest
+          - os: windows-latest
+            target: x86_64-pc-windows-msvc
+            compatibility: auto
+            container: off
+          - os: macos-15-intel
+            target: x86_64-apple-darwin
+            compatibility: auto
+            container: off
+          - os: macos-latest
+            target: aarch64-apple-darwin
+            compatibility: auto
+            container: off
+    runs-on: ${{ matrix.os }}
+    steps:
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1
+      - uses: actions/setup-python@ece7cb06caefa5fff74198d8649806c4678c61a1 # v6
+        with:
+          python-version: '3.12'
+      - uses: astral-sh/setup-uv@d0cc045d04ccac9d8b7881df0226f9e82c39688e # v6
+      - uses: PyO3/maturin-action@e83996d129638aa358a18fbd1dfb82f0b0fb5d3b # v1
+        with:
+          command: build
+          args: --release --locked --out dist
+          target: ${{ matrix.target }}
+          manylinux: ${{ matrix.compatibility }}
+          container: ${{ matrix.container }}
+          rust-toolchain: '1.90.0'
+          before-script-linux: |
+            if command -v apk >/dev/null 2>&1; then
+              apk add --no-cache cmake make perl pkgconf
+              # Vendored D-Bus otherwise calls GCC atomic helpers that Rust's
+              # static ARM64 musl link does not provide. Use inline atomics.
+              if [ "$(uname -m)" = aarch64 ]; then
+                export CFLAGS_aarch64_unknown_linux_musl="-mno-outline-atomics"
+              fi
+            fi
+      - name: Verify uv installation without source builds
+        if: ${{ !contains(matrix.target, '-musl') }}
+        run: python scripts/release.py smoke dist
+      - name: Verify musl wheel in Alpine without Rust
+        if: contains(matrix.target, '-musl')
+        shell: bash
+        run: |
+          docker run --rm -v "$PWD:/io:ro" -w /io \
+            ghcr.io/astral-sh/uv:python3.12-alpine \
+            python scripts/release.py smoke dist
+      - name: Package standalone executable and checksum
+        run: python scripts/release.py archive dist --target ${{ matrix.target }}
+      - uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4
+        with:
+          name: wheel-${{ matrix.target }}
+          path: dist/*
+          if-no-files-found: error
+
+  source:
+    needs: test
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1
+      - uses: PyO3/maturin-action@e83996d129638aa358a18fbd1dfb82f0b0fb5d3b # v1
+        with:
+          command: sdist
+          args: --out dist
+      - uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4
+        with:
+          name: source
+          path: dist/*.tar.gz
+          if-no-files-found: error
+
+  verify:
+    needs: [wheels, source]
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1
+      - uses: actions/setup-python@ece7cb06caefa5fff74198d8649806c4678c61a1 # v6
+        with:
+          python-version: '3.12'
+      - uses: astral-sh/setup-uv@d0cc045d04ccac9d8b7881df0226f9e82c39688e # v6
+      - uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 # v4
+        with:
+          path: dist
+          merge-multiple: true
+      - run: python scripts/release.py verify dist
+      - run: uv tool run --from twine twine check dist/*.whl dist/outlook_cli_rs-*.tar.gz
+      - uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4
+        with:
+          name: release-packages
+          path: dist/*
+          if-no-files-found: error
+
+  # Building a tag never publishes a partial platform set. Publication is an
+  # explicit dispatch on that tag after all build and installation checks pass.
+  publish:
+    if: github.event_name == 'workflow_dispatch' && inputs.publish
+    needs: verify
+    runs-on: ubuntu-latest
+    permissions:
+      contents: write
+    steps:
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1
+      - uses: actions/setup-python@ece7cb06caefa5fff74198d8649806c4678c61a1 # v6
+        with:
+          python-version: '3.12'
+      - uses: astral-sh/setup-uv@d0cc045d04ccac9d8b7881df0226f9e82c39688e # v6
+      - uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 # v4
+        with:
+          name: release-packages
+          path: dist
+      - name: Check tag and credentials before publishing anything
+        env:
+          CARGO_REGISTRY_TOKEN: ${{ secrets.CARGO_REGISTRY_TOKEN }}
+          TWINE_PASSWORD: ${{ secrets.PYPI_API_TOKEN }}
+        run: |
+          python scripts/release.py verify dist --require-tag "$GITHUB_REF_NAME"
+          test "$GITHUB_REF_TYPE" = tag
+          test -n "$CARGO_REGISTRY_TOKEN"
+          test -n "$TWINE_PASSWORD"
+      - name: Publish crates.io package
+        env:
+          CARGO_REGISTRY_TOKEN: ${{ secrets.CARGO_REGISTRY_TOKEN }}
+        run: cargo publish --locked
+      - name: Publish all Python packages
+        env:
+          TWINE_USERNAME: __token__
+          TWINE_PASSWORD: ${{ secrets.PYPI_API_TOKEN }}
+        run: uv tool run --from twine twine upload --non-interactive dist/*.whl dist/outlook_cli_rs-*.tar.gz
+      - name: Publish executable archives
+        env:
+          GH_TOKEN: ${{ github.token }}
+        run: |
+          python scripts/release.py notes > release-notes.md
+          gh release create "$GITHUB_REF_NAME" --verify-tag --title "$GITHUB_REF_NAME" \
+            --notes-file release-notes.md dist/outlook-v* dist/SHA256SUMS

{outlook_cli_rs-0.2.2 → outlook_cli_rs-0.2.3}/CHANGELOG.md

@@ -1,6 +1,15 @@
 # Changelog
 
-## 0.2.2 - 2026-09-08
+## [0.2.3] - 2026-09-08
+
+### Fixed
+
+- Ship prebuilt Python wheels for Windows x64, Intel and Apple Silicon macOS, and x64/ARM64 Linux (glibc and musl), so supported `uv` installations do not need Rust.
+- Build and verify the full platform matrix before publishing, including `uv` installation with source builds disabled and standalone executable smoke tests.
+- Provide executable archives and SHA-256 checksums for every wheel target.
+- Clarify that source installations on other platforms require Rust and native build tools.
+
+## [0.2.2] - 2026-09-08
 
 ### Added
 
@@ -18,7 +27,7 @@
 - Attachments and calendar commands remain Graph-only.
 - Desktop bridge tests pass with mock Outlook objects; live Windows/WSL COM validation remains outstanding.
 
-## 0.2.1 - 2026-09-08
+## [0.2.1] - 2026-09-08
 
 ### Added
 

{outlook_cli_rs-0.2.2 → outlook_cli_rs-0.2.3}/Cargo.lock

@@ -1365,7 +1365,7 @@ checksum = "04744f49eae99ab78e0d5c0b603ab218f515ea8cfe5a456d7629ad883a3b6e7d"
 
 [[package]]
 name = "outlook-cli"
-version = "0.2.2"
+version = "0.2.3"
 dependencies = [
  "assert_cmd",
  "base64",

{outlook_cli_rs-0.2.2 → outlook_cli_rs-0.2.3}/Cargo.toml

@@ -1,6 +1,6 @@
 [package]
 name = "outlook-cli"
-version = "0.2.2"
+version = "0.2.3"
 edition = "2024"
 rust-version = "1.90"
 description = "Microsoft Outlook from your terminal, for humans and agents"

{outlook_cli_rs-0.2.2 → outlook_cli_rs-0.2.3}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: outlook-cli-rs
-Version: 0.2.2
+Version: 0.2.3
 Classifier: Development Status :: 3 - Alpha
 Classifier: Environment :: Console
 Classifier: Intended Audience :: Developers
@@ -13,14 +13,13 @@ Classifier: Topic :: Communications :: Email
 Classifier: Topic :: Office/Business :: Scheduling
 License-File: LICENSE
 Summary: Microsoft Outlook from your terminal, for humans and agents
-Keywords: outlook,microsoft-graph,email,calendar,cli
 Home-Page: https://github.com/rvben/outlook-cli
-License: MIT
+License-Expression: MIT
 Requires-Python: >=3.8
 Description-Content-Type: text/markdown; charset=UTF-8; variant=GFM
 Project-URL: Homepage, https://github.com/rvben/outlook-cli
-Project-URL: Repository, https://github.com/rvben/outlook-cli
 Project-URL: Issues, https://github.com/rvben/outlook-cli/issues
+Project-URL: Repository, https://github.com/rvben/outlook-cli
 
 # outlook-cli
 
@@ -60,12 +59,25 @@ OUTLOOK_TEST_POWERSHELL=/path/to/pwsh cargo test --test desktop_bridge -- --igno
 
 ```console
 cargo install outlook-cli --locked
-# or, without a Rust toolchain
+# or, using a prebuilt wheel (supported platforms below)
 uv tool install outlook-cli-rs
 ```
 
 Both packages install the `outlook` executable.
 
+Starting with 0.2.3, PyPI wheels cover Windows x64, macOS Intel/Apple Silicon,
+and Linux x64/ARM64 (glibc 2.17+ or musl 1.2+). WSL uses the Linux wheel.
+These wheels contain the compiled executable, so Rust is not needed to install
+or run them. Other platforms require Rust and native build tools to build the
+source distribution. To require a prebuilt package and fail instead of compiling:
+
+```sh
+uv tool install --no-build outlook-cli-rs
+```
+
+See [the release process](docs/releases.md) for the build matrix and publication checks.
+
+
 ## Configure
 
 `outlook-cli` includes a maintained multitenant Microsoft Entra public-client

{outlook_cli_rs-0.2.2 → outlook_cli_rs-0.2.3}/README.md

@@ -36,12 +36,25 @@ OUTLOOK_TEST_POWERSHELL=/path/to/pwsh cargo test --test desktop_bridge -- --igno
 
 ```console
 cargo install outlook-cli --locked
-# or, without a Rust toolchain
+# or, using a prebuilt wheel (supported platforms below)
 uv tool install outlook-cli-rs
 ```
 
 Both packages install the `outlook` executable.
 
+Starting with 0.2.3, PyPI wheels cover Windows x64, macOS Intel/Apple Silicon,
+and Linux x64/ARM64 (glibc 2.17+ or musl 1.2+). WSL uses the Linux wheel.
+These wheels contain the compiled executable, so Rust is not needed to install
+or run them. Other platforms require Rust and native build tools to build the
+source distribution. To require a prebuilt package and fail instead of compiling:
+
+```sh
+uv tool install --no-build outlook-cli-rs
+```
+
+See [the release process](docs/releases.md) for the build matrix and publication checks.
+
+
 ## Configure
 
 `outlook-cli` includes a maintained multitenant Microsoft Entra public-client

outlook_cli_rs-0.2.3/docs/releases.md

@@ -0,0 +1,70 @@
+# Releases
+
+The release workflow follows rumdl's seven-target wheel matrix:
+
+| Platform | Architecture | Wheel baseline |
+| --- | --- | --- |
+| Windows | x64 | MSVC |
+| macOS | Intel x64 / Apple Silicon ARM64 | Maturin's deployment target |
+| Linux / WSL | x64 / ARM64 | manylinux2014 (glibc 2.17+) |
+| Alpine Linux | x64 / ARM64 | musllinux 1.2 |
+
+Linux wheels build in the corresponding PyPA containers on native architecture
+runners. Every wheel is installed using `uv tool install --no-build --no-index`
+and its CLI version and schema are checked. Musl wheels run in Alpine. The
+standalone executable is also tested outside the wheel installation tree.
+
+All seven wheels, the source package, all executable archives, and their checksums
+must pass validation before the `release-packages` artifact is produced. A partial
+matrix cannot enter the publish job. Existing CI tests, including the Windows
+PowerShell mock bridge tests, run before packaging.
+
+## Prepare and build
+
+Vership owns versioning, changelog generation, release commits, tags, and pushes.
+From a clean main branch, prepare the next patch with:
+
+```sh
+vership bump patch --prepare
+```
+
+For a version already set in the manifests, use `vership release --prepare`
+instead. Review the staged paths before committing any local working material;
+release commits must exclude design reports and screenshots.
+
+After reviewing the release commit, `vership release` runs its checks and pushes
+the branch and version tag. The tag starts the seven-platform build. Tags do not
+automatically publish to registries.
+
+```sh
+vership release
+gh run watch RUN_ID --exit-status
+gh run download RUN_ID --name release-packages --dir dist/VERSION
+python scripts/release.py verify dist/VERSION --require-tag vVERSION
+```
+
+A build-only preview is also available with
+`gh workflow run release.yml --ref main -f publish=false`.
+
+## Publish
+
+For automated publication, configure repository secrets `CARGO_REGISTRY_TOKEN`
+and `PYPI_API_TOKEN`, then explicitly dispatch `Release` on the version tag with
+`publish=true`. The workflow rebuilds and verifies the matrix, checks the tag and
+both credentials, publishes crates.io and PyPI packages, and creates a GitHub
+release with standalone archives. Credentials are not needed for build-only runs.
+
+When publishing locally with existing credentials, use the verified artifact from
+the **same release commit**, without rebuilding just the host wheel:
+
+```sh
+cargo publish --locked
+uv tool run --from twine twine check dist/VERSION/*.whl dist/VERSION/outlook_cli_rs-*.tar.gz
+uv tool run --from twine twine upload --non-interactive dist/VERSION/*.whl dist/VERSION/outlook_cli_rs-*.tar.gz
+```
+
+Run `vership verify VERSION` after publication to check the tag, GitHub release,
+crates.io, and PyPI. Also verify published asset SHA-256 digests. Never replace a
+published version or move its tag. If anything was published, prepare a new patch
+version for fixes; do not rerun the publish job against an already published
+version. If nothing was published, repair the build and retry the same version.

outlook_cli_rs-0.2.3/scripts/release.py

@@ -0,0 +1,167 @@
+#!/usr/bin/env python3
+"""Package and verify the complete, installable release matrix using stdlib only."""
+import argparse
+import hashlib
+import io
+import json
+import os
+import re
+from pathlib import Path
+import subprocess
+import sys
+import tarfile
+import tempfile
+import tomllib
+import zipfile
+
+ROOT = Path(__file__).resolve().parent.parent
+VERSION = tomllib.loads((ROOT / 'Cargo.toml').read_text())['package']['version']
+TARGETS = {
+    'x86_64-unknown-linux-gnu': ('manylinux', 'x86_64'),
+    'aarch64-unknown-linux-gnu': ('manylinux', 'aarch64'),
+    'x86_64-unknown-linux-musl': ('musllinux_1_2', 'x86_64'),
+    'aarch64-unknown-linux-musl': ('musllinux_1_2', 'aarch64'),
+    'x86_64-pc-windows-msvc': ('win_amd64', ''),
+    'x86_64-apple-darwin': ('macosx', 'x86_64'),
+    'aarch64-apple-darwin': ('macosx', 'arm64'),
+}
+
+
+def wheels(directory):
+    return sorted(directory.glob(f'outlook_cli_rs-{VERSION}-*.whl'))
+
+
+def wheel_target(path):
+    platform = path.stem.split('-')[-1]
+    matches = [target for target, (prefix, arch) in TARGETS.items()
+               if platform.startswith(prefix) and platform.endswith(arch)]
+    if len(matches) != 1:
+        raise ValueError(f'Unexpected wheel platform: {path.name}')
+    return matches[0]
+
+
+def executable(wheel):
+    with zipfile.ZipFile(wheel) as archive:
+        entries = [n for n in archive.namelist()
+                   if n.endswith(('.data/scripts/outlook', '.data/scripts/outlook.exe'))]
+        if len(entries) != 1:
+            raise ValueError(f'Expected one outlook executable in {wheel}')
+        return Path(entries[0]).name, archive.read(entries[0])
+
+
+def smoke(directory):
+    candidates = wheels(directory)
+    if len(candidates) != 1:
+        raise ValueError('Smoke test requires exactly one wheel')
+    with tempfile.TemporaryDirectory(prefix='outlook-wheel-') as temporary:
+        root = Path(temporary)
+        env = dict(os.environ, UV_TOOL_DIR=str(root / 'tools'),
+                   UV_TOOL_BIN_DIR=str(root / 'bin'), UV_CACHE_DIR=str(root / 'cache'),
+                   UV_PYTHON_DOWNLOADS='never')
+        subprocess.run(['uv', 'tool', 'install', '--no-build', '--no-index',
+                        '--python', sys.executable, '--find-links', str(directory.resolve()),
+                        f'outlook-cli-rs=={VERSION}'], env=env, check=True)
+        binary = root / 'bin' / ('outlook.exe' if os.name == 'nt' else 'outlook')
+        assert subprocess.check_output([binary, '--version'], text=True).strip() == f'outlook {VERSION}'
+        schema = json.loads(subprocess.check_output([binary, 'schema'], text=True))
+        assert 'mail draft send' in json.dumps(schema)
+        # Also execute the standalone bytes from the wheel, without its install
+        # tree. This catches accidental runtime dependence on bundled libraries.
+        name, data = executable(candidates[0])
+        standalone = root / name
+        standalone.write_bytes(data)
+        standalone.chmod(0o755)
+        assert subprocess.check_output([standalone, '--version'], text=True).strip() == f'outlook {VERSION}'
+    print(f'Installed and executed {candidates[0].name} with source builds disabled')
+
+
+def package(directory, target):
+    candidates = wheels(directory)
+    if len(candidates) != 1 or wheel_target(candidates[0]) != target:
+        raise ValueError('Expected one wheel matching the requested target')
+    name, data = executable(candidates[0])
+    stem = f'outlook-v{VERSION}-{target}'
+    files = {name: data, 'LICENSE': (ROOT / 'LICENSE').read_bytes(),
+             'README.md': (ROOT / 'README.md').read_bytes()}
+    if target.endswith('windows-msvc'):
+        path = directory / f'{stem}.zip'
+        with zipfile.ZipFile(path, 'w', compression=zipfile.ZIP_DEFLATED) as archive:
+            for filename, content in files.items():
+                archive.writestr(filename, content)
+    else:
+        path = directory / f'{stem}.tar.gz'
+        with tarfile.open(path, 'w:gz') as archive:
+            for filename, content in files.items():
+                info = tarfile.TarInfo(filename)
+                info.size = len(content)
+                info.mode = 0o755 if filename == name else 0o644
+                archive.addfile(info, io.BytesIO(content))
+    digest = hashlib.sha256(path.read_bytes()).hexdigest()
+    path.with_name(path.name + '.sha256').write_text(f'{digest}  {path.name}\n')
+    print(f'Packaged {path.name}')
+
+
+def verify(directory, tag=None):
+    if tag is not None and tag != f'v{VERSION}':
+        raise ValueError(f'Tag must match Cargo.toml: v{VERSION}')
+    candidates = wheels(directory)
+    actual = [wheel_target(path) for path in candidates]
+    if len(actual) != len(TARGETS) or set(actual) != set(TARGETS):
+        raise ValueError(f'Incomplete or duplicate wheel matrix: {actual}')
+    expected = set(candidates)
+    for target in TARGETS:
+        suffix = '.zip' if target.endswith('windows-msvc') else '.tar.gz'
+        path = directory / f'outlook-v{VERSION}-{target}{suffix}'
+        digest = hashlib.sha256(path.read_bytes()).hexdigest()
+        checksum = path.with_name(path.name + '.sha256')
+        if checksum.read_text().strip() != f'{digest}  {path.name}':
+            raise ValueError(f'Checksum mismatch: {path.name}')
+        expected.update((path, checksum))
+    source = directory / f'outlook_cli_rs-{VERSION}.tar.gz'
+    with tarfile.open(source) as archive:
+        manifest = archive.extractfile(f'outlook_cli_rs-{VERSION}/Cargo.toml')
+        if manifest is None or tomllib.loads(manifest.read().decode())['package']['version'] != VERSION:
+            raise ValueError('Source package version mismatch')
+    expected.add(source)
+    unexpected = set(directory.iterdir()) - expected - {directory / 'SHA256SUMS'}
+    if unexpected:
+        raise ValueError(f'Unexpected release files: {unexpected}')
+    lines = [f'{hashlib.sha256(p.read_bytes()).hexdigest()}  {p.name}\n'
+             for p in sorted(expected) if not p.name.endswith('.sha256')]
+    (directory / 'SHA256SUMS').write_text(''.join(lines))
+    print(f'Verified {len(candidates)} wheels, source package, and {len(TARGETS)} archives')
+
+
+def notes():
+    text = (ROOT / 'CHANGELOG.md').read_text()
+    heading = re.search(rf'^## \[{re.escape(VERSION)}\](?:\([^\n]*\))?[^\n]*$', text, re.M)
+    if heading is None:
+        raise ValueError(f'No changelog section for {VERSION}')
+    end = text.find('\n## ', heading.end())
+    print(text[heading.start():end if end != -1 else None].strip())
+
+
+def main():
+    parser = argparse.ArgumentParser(description=__doc__)
+    sub = parser.add_subparsers(dest='command', required=True)
+    for name in ('smoke', 'archive', 'verify'):
+        command = sub.add_parser(name)
+        command.add_argument('directory', type=Path)
+        if name == 'archive':
+            command.add_argument('--target', choices=TARGETS, required=True)
+        if name == 'verify':
+            command.add_argument('--require-tag')
+    sub.add_parser('notes')
+    args = parser.parse_args()
+    if args.command == 'smoke':
+        smoke(args.directory)
+    elif args.command == 'archive':
+        package(args.directory, args.target)
+    elif args.command == 'verify':
+        verify(args.directory, args.require_tag)
+    else:
+        notes()
+
+
+if __name__ == '__main__':
+    main()

outlook_cli_rs-0.2.3/vership.toml

@@ -0,0 +1,11 @@
+[project]
+branch = "main"
+
+[changelog]
+unconventional = "exclude"
+
+[checks]
+lint = true
+tests = true
+lint_command = "cargo fmt -- --check && cargo clippy --locked --all-targets -- -D warnings"
+test_command = "cargo test --locked --all-targets"