petfishframework 0.2.4__tar.gz → 0.2.5__tar.gz

{petfishframework-0.2.4 → petfishframework-0.2.5}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: petfishframework
-Version: 0.2.4
+Version: 0.2.5
 Summary: A lightweight runtime framework for reliable, auditable, budget-aware, and permission-aware AI agents.
 Project-URL: Homepage, https://github.com/kylecui/petfishFramework
 Project-URL: Documentation, https://github.com/kylecui/petfishFramework/tree/master/docs
@@ -216,7 +216,7 @@ Run: `python examples/05_enterprise_expense.py`
 
 ## Roadmap
 
-- **v0.1.x** (current): Core runtime, permission semantics, quickstart verified ✅
+- **v0.2.x** (current): Core runtime, permission semantics, enterprise PoC, Trusted Publishing ✅
 - **v0.2.x**: Enterprise agent examples, structured audit reports
 - **v0.3.x**: Policy engine (YAML), credential broker
 - **v0.4.x**: Production hardening, deployment guides

{petfishframework-0.2.4 → petfishframework-0.2.5}/README.md

@@ -187,7 +187,7 @@ Run: `python examples/05_enterprise_expense.py`
 
 ## Roadmap
 
-- **v0.1.x** (current): Core runtime, permission semantics, quickstart verified ✅
+- **v0.2.x** (current): Core runtime, permission semantics, enterprise PoC, Trusted Publishing ✅
 - **v0.2.x**: Enterprise agent examples, structured audit reports
 - **v0.3.x**: Policy engine (YAML), credential broker
 - **v0.4.x**: Production hardening, deployment guides

{petfishframework-0.2.4 → petfishframework-0.2.5}/docs/api.md

@@ -1,6 +1,6 @@
 # petfishFramework API Reference
 
-This document is the authoritative reference for the public API of `petfishFramework` v0.2.2. Every signature, field, and example below is derived from the source code and from the tests that exercise it.
+This document is the authoritative reference for the public API of `petfishFramework` v0.2.5. Every signature, field, and example below is derived from the source code and from the tests that exercise it.
 
 ## 1. Overview
 
@@ -327,7 +327,7 @@ class Session:
 
 `run` builds the `RuntimeEnvironment` and `RunContext`, emits `session.start`, executes the strategy, attaches accumulated `Usage` and `session_id`, and emits `session.end`.
 
-`replay` accepts an optional `ReplayMode` argument. In v0.2.2 all modes return the stored event log; full deterministic replay via `RecordingEnvironment` and `ReplayEnvironment` is available in `petfishframework.reliability.replay`.
+`replay` accepts an optional `ReplayMode` argument. In v0.2.5 all modes return the stored event log; full deterministic replay via `RecordingEnvironment` and `ReplayEnvironment` is available in `petfishframework.reliability.replay`.
 
 ```python
 agent = Agent(model=FakeModel(responses=(ModelResponse(content="ok"),)))

petfishframework-0.2.5/docs/release-checklist.md

@@ -0,0 +1,73 @@
+# Release Checklist
+
+> Run before every release tag. Prevents document drift and version inconsistencies.
+
+## Pre-release checks
+
+```bash
+# 1. No stale version references
+grep -R "v0\.1\b" README.md docs/ pyproject.toml src/
+# Expected: only CHANGELOG historical entries
+
+# 2. No "coming in" placeholders
+grep -R "coming in" README.md docs/ examples/
+# Expected: no output
+
+# 3. Badge URL matches test count
+grep "badge/tests" README.md
+# Expected: current test count in both text and URL
+
+# 4. api.md version matches release version
+grep "authoritative reference" docs/api.md
+# Expected: current version number
+
+# 5. All tests pass
+uv run pytest tests/ -q
+# Expected: all passed
+
+# 6. Ruff clean
+uv run ruff check src/ tests/ examples/
+# Expected: All checks passed
+```
+
+## Release process (Trusted Publishing — NO API TOKEN)
+
+```bash
+# 1. Bump version in pyproject.toml + src/petfishframework/__init__.py
+# 2. Update CHANGELOG.md
+# 3. Commit
+git add -A && git commit -m "release: vX.Y.Z"
+
+# 4. Push master
+git push origin master
+
+# 5. Tag (MUST start with 'v')
+git tag vX.Y.Z
+git push origin vX.Y.Z
+
+# → GitHub Actions CI runs tests
+# → GitHub Actions publish.yml builds + publishes via OIDC
+# → PyPI receives the package with NO API TOKEN
+# → Verify at https://pypi.org/project/petfishframework/
+```
+
+## Post-release checks
+
+```bash
+# 1. PyPI shows new version
+curl -s https://pypi.org/pypi/petfishframework/json | python -c "import sys,json; print(json.load(sys.stdin)['info']['version'])"
+
+# 2. pip install works
+pip install petfishframework==X.Y.Z
+
+# 3. GitHub Actions both green
+gh run list --repo kylecui/petfishFramework --limit 2
+# Expected: CI success + Publish success
+```
+
+## NEVER
+
+- ❌ Do NOT use twine (Trusted Publishing replaces it)
+- ❌ Do NOT use API tokens (revoked; OIDC only)
+- ❌ Do NOT tag without `v` prefix (workflow only triggers on `v*`)
+- ❌ Do NOT skip the pre-release grep checks

{petfishframework-0.2.4 → petfishframework-0.2.5}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "hatchling.build"
 
 [project]
 name = "petfishframework"
-version = "0.2.4"
+version = "0.2.5"
 description = "A lightweight runtime framework for reliable, auditable, budget-aware, and permission-aware AI agents."
 readme = "README.md"
 license = "MIT"

{petfishframework-0.2.4 → petfishframework-0.2.5}/src/petfishframework/__init__.py

@@ -14,7 +14,7 @@ from .reasoning import LATS, LLMPlusP, ReAct
 from .reliability.replay import ReplayMode
 from .tools.base import BaseTool
 
-__version__ = "0.2.4"
+__version__ = "0.2.5"
 
 __all__ = [
     "Agent",

{petfishframework-0.2.4 → petfishframework-0.2.5}/uv.lock

@@ -427,7 +427,7 @@ name = "exceptiongroup"
 version = "1.3.1"
 source = { registry = "https://pypi.org/simple" }
 dependencies = [
-    { name = "typing-extensions" },
+    { name = "typing-extensions", marker = "python_full_version < '3.11'" },
 ]
 sdist = { url = "https://files.pythonhosted.org/packages/50/79/66800aadf48771f6b62f7eb014e352e5d06856655206165d775e675a02c9/exceptiongroup-1.3.1.tar.gz", hash = "sha256:8b412432c6055b0b7d14c310000ae93352ed6754f70fa8f7c34141f91c4e3219", size = 30371, upload-time = "2025-11-21T23:01:54.787Z" }
 wheels = [
@@ -506,7 +506,7 @@ name = "importlib-metadata"
 version = "9.0.0"
 source = { registry = "https://pypi.org/simple" }
 dependencies = [
-    { name = "zipp" },
+    { name = "zipp", marker = "python_full_version < '3.14'" },
 ]
 sdist = { url = "https://files.pythonhosted.org/packages/a9/01/15bb152d77b21318514a96f43af312635eb2500c96b55398d020c93d86ea/importlib_metadata-9.0.0.tar.gz", hash = "sha256:a4f57ab599e6a2e3016d7595cfd72eb4661a5106e787a95bcc90c7105b831efc", size = 56405, upload-time = "2026-03-20T06:42:56.999Z" }
 wheels = [
@@ -995,7 +995,7 @@ wheels = [
 
 [[package]]
 name = "petfishframework"
-version = "0.2.4"
+version = "0.2.5"
 source = { editable = "." }
 
 [package.optional-dependencies]
@@ -1674,8 +1674,8 @@ name = "secretstorage"
 version = "3.5.0"
 source = { registry = "https://pypi.org/simple" }
 dependencies = [
-    { name = "cryptography" },
-    { name = "jeepney" },
+    { name = "cryptography", marker = "python_full_version >= '3.15' or sys_platform != 'win32'" },
+    { name = "jeepney", marker = "python_full_version >= '3.15' or sys_platform != 'win32'" },
 ]
 sdist = { url = "https://files.pythonhosted.org/packages/1c/03/e834bcd866f2f8a49a85eaff47340affa3bfa391ee9912a952a1faa68c7b/secretstorage-3.5.0.tar.gz", hash = "sha256:f04b8e4689cbce351744d5537bf6b1329c6fc68f91fa666f60a380edddcd11be", size = 19884, upload-time = "2025-11-23T19:02:53.191Z" }
 wheels = [