rigplane 2.2.0__tar.gz → 2.3.1__tar.gz

rigplane-2.3.1/.github/scripts/check-rebrand-allowlist.sh

@@ -0,0 +1,121 @@
+#!/usr/bin/env bash
+# Wave 2 final grep gate: fail CI if any new icom-lan / icom_lan / IcomLanError
+# reference appears outside the allow-list of preserved-by-design files.
+#
+# Why this exists: the v2.0.0 rebrand from icom-lan -> rigplane (epic
+# docs/roadmap/2026-05-04-rigplane-rebrand-epic.md) intentionally PRESERVES a
+# small set of brand references — backwards-compat shims, wire contracts (v1
+# diagnostic-bundle, LAN discovery magic, local-extensions deprecation
+# alias), platformdirs / localStorage migration logic, and a vendor-protocol
+# diagram label parallel to IcomSerial / YaesuCAT. Everything else must be
+# rebranded. This gate codifies that distinction.
+#
+# To add a new exception: append the path to ALLOWLIST below with a comment
+# explaining WHY the reference is intentional. Anything NOT on the list that
+# matches the pattern fails CI.
+#
+# Usage: run from the repository root with no arguments.
+
+set -euo pipefail
+
+ALLOWLIST=(
+    # Shim package (PR-2B) — re-exports rigplane with DeprecationWarning.
+    'src/icom_lan/'
+    # PR-2C: persistent-state migration logic.
+    'src/rigplane/_platformdirs_migration.py'
+    'frontend/src/lib/migrate-legacy-storage.ts'
+    'frontend/src/lib/__tests__/migrate-legacy-storage.test.ts'
+    # Wire contracts (handled per spec — schema v2 in PR-2G; LAN discovery
+    # magic stays for backwards-compat with v1 clients until Wave 4).
+    'src/rigplane/diagnostics/_manifest.py'
+    'src/rigplane/diagnostics/bundle.py'
+    'src/rigplane/web/discovery.py'
+    'docs/contracts/diagnostic-bundle-v1.md'
+    'docs/contracts/diagnostic-bundle-v2.md'
+    # Local-extensions deprecation alias (cross-repo Pro contract).
+    'frontend/src/lib/local-extensions/host-api.ts'
+    'frontend/src/lib/local-extensions/__tests__/host-api.test.ts'
+    'frontend/src/lib/api/diagnostics.ts'
+    'frontend/src/lib/api/__tests__/diagnostics.test.ts'
+    # Vendor-protocol diagram label (parallel to IcomSerial / YaesuCAT —
+    # NOT a product brand reference; describes the transport family).
+    'src/rigplane/core/radio_protocol.py'
+    'docs/radio-protocol.md'
+    # Intentional historical / migration references.
+    'README.md'
+    'docs/CHANGELOG.md'
+    # User-facing migration guide for v1.x icom-lan -> v2.x rigplane;
+    # the legacy names are the literal subject of the page.
+    'docs/migrate.md'
+    # mkdocs nav label for the migration guide reads
+    # "Migration from icom-lan" -- legacy name is intentional.
+    'mkdocs.yml'
+    'tests/golden/wsjtx_dual_rx_session.txt'
+    # pyproject.toml — preserved console-script alias `icom-lan` (line 43),
+    # hatch packages list keeping `src/icom_lan` shim, ruff per-file-ignores
+    # for the shim, and mypy override for the shim module.
+    'pyproject.toml'
+    # Pre-rebrand and historical plans.
+    'docs/plans/discovery-artifacts/'
+    'docs/plans/archive/'
+    'docs/plans/2026-03-'
+    'docs/plans/2026-04-'
+    'docs/plans/2026-05-01-'
+    'docs/plans/2026-05-02-'
+    'docs/plans/2026-05-03-'
+    # Tests of preserved / migration code.
+    'tests/test_icom_lan_shim.py'
+    'tests/test_platformdirs_migration.py'
+    'tests/test_diagnostics_bundle.py'                # asserts SCHEMA_VERSION_V1 backwards-compat
+    'tests/test_diagnostics_contributors_batch1.py'   # asserts v1 system.json key absence
+    'tests/test_discovery_responder.py'               # tests wire magic
+    'tests/test_backend_factory.py'                   # cosmetic test fn name (PR-2A)
+    'tests/test_diagnostics_logging.py'               # cosmetic test fn name
+    # This script itself: contains literal pattern in its grep regex and
+    # docstring.
+    '.github/scripts/check-rebrand-allowlist.sh'
+    # Workflow definition for the gate: references the pattern in its
+    # job description.
+    '.github/workflows/rebrand-gate.yml'
+    # Release skill documents src/icom_lan/__init__.py shim as DO-NOT-TOUCH
+    # (deprecation shim — must not be modified during version bumps).
+    '.claude/skills/release/SKILL.md'
+)
+
+# Collect all files matching brand pattern.
+MATCHES=$(git grep -lEi 'icom[-_]?lan|IcomLanError' || true)
+
+LEAKS=""
+while IFS= read -r file; do
+    [ -z "$file" ] && continue
+    SKIP=false
+    for allowed in "${ALLOWLIST[@]}"; do
+        case "$file" in
+            "$allowed"*)
+                SKIP=true
+                break
+                ;;
+        esac
+    done
+    if [ "$SKIP" = false ]; then
+        LEAKS="${LEAKS}${file}"$'\n'
+    fi
+done <<EOF
+$MATCHES
+EOF
+
+if [ -n "$(printf '%s' "$LEAKS" | tr -d '[:space:]')" ]; then
+    {
+        echo "::error::Wave 2 rebrand leak — files contain icom-lan / icom_lan / IcomLanError but are not in the allow-list:"
+        printf '%s' "$LEAKS"
+        echo ""
+        echo "Either:"
+        echo "  1. Rename the brand reference (preferred)."
+        echo "  2. If the reference is intentional (wire contract / migration / historical), add the"
+        echo "     path to the ALLOWLIST in .github/scripts/check-rebrand-allowlist.sh with a comment"
+        echo "     explaining why."
+    } >&2
+    exit 1
+fi
+
+echo "Wave 2 rebrand grep gate: clean."

rigplane-2.3.1/.github/workflows/agent-review-gate.yml

@@ -0,0 +1,88 @@
+name: Agent Review Gate
+
+on:
+  pull_request:
+    types: [opened, reopened, synchronize, ready_for_review]
+  issue_comment:
+    types: [created, edited, deleted]
+
+permissions:
+  contents: read
+  issues: read
+  pull-requests: read
+  statuses: write
+
+concurrency:
+  group: agent-review-gate-${{ github.event.issue.pull_request && github.event.issue.number || github.event.pull_request.number }}
+  cancel-in-progress: true
+
+jobs:
+  agent-review:
+    name: Update Agent Review Gate status
+    if: github.event_name == 'pull_request' || github.event.issue.pull_request
+    # API-only workflow via actions/github-script -- no compile/test toolchain
+    # needed. Keep this on GitHub-hosted runners so PR merges are not blocked
+    # when self-hosted build runners are offline or occupied.
+    runs-on: ubuntu-latest
+    timeout-minutes: 2
+
+    steps:
+      - name: Resolve pull request number
+        id: pr
+        uses: actions/github-script@v7
+        with:
+          script: |
+            const number = context.payload.pull_request?.number ?? context.payload.issue?.number;
+            const {owner, repo} = context.repo;
+            const {data: pull} = await github.rest.pulls.get({
+              owner,
+              repo,
+              pull_number: number,
+            });
+            const {data: commit} = await github.rest.repos.getCommit({
+              owner,
+              repo,
+              ref: pull.head.sha,
+            });
+            const committedAt =
+              commit.commit.committer?.date ??
+              commit.commit.author?.date ??
+              pull.updated_at;
+            core.setOutput('number', String(number));
+            core.setOutput('head_sha', pull.head.sha);
+            core.setOutput('committed_at', committedAt);
+
+      - name: Update required Agent Review Gate status
+        uses: actions/github-script@v7
+        with:
+          script: |
+            const pull_number = Number('${{ steps.pr.outputs.number }}');
+            const head_sha = '${{ steps.pr.outputs.head_sha }}';
+            const committed_at = new Date('${{ steps.pr.outputs.committed_at }}');
+            const {owner, repo} = context.repo;
+            const comments = await github.paginate(github.rest.issues.listComments, {
+              owner,
+              repo,
+              issue_number: pull_number,
+              per_page: 100,
+            });
+            const pass = comments.some((comment) =>
+              !comment.minimized &&
+              typeof comment.body === 'string' &&
+              comment.body.includes('Agent Review: PASS') &&
+              new Date(comment.updated_at ?? comment.created_at) >= committed_at
+            );
+            await github.rest.repos.createCommitStatus({
+              owner,
+              repo,
+              sha: head_sha,
+              state: pass ? 'success' : 'failure',
+              context: 'Agent Review Gate',
+              description: pass
+                ? 'Agent Review PASS comment found for the current PR head.'
+                : 'Missing Agent Review PASS comment for the current PR head.',
+              target_url: `${context.serverUrl}/${owner}/${repo}/actions/runs/${context.runId}`,
+            });
+            if (!pass) {
+              core.notice('Missing required PR comment containing "Agent Review: PASS" posted or edited after the current PR head commit.');
+            }

rigplane-2.3.1/.github/workflows/docs.yml

@@ -0,0 +1,115 @@
+name: Docs
+
+on:
+  push:
+    branches: [main]
+    paths:
+      - 'docs/**'
+      - 'mkdocs.yml'
+      - 'src/rigplane/**'
+      - '.github/workflows/docs.yml'
+  workflow_dispatch:
+
+permissions:
+  contents: read
+  pages: write
+  id-token: write
+
+concurrency:
+  group: pages
+  cancel-in-progress: false
+
+jobs:
+  build:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v6
+
+      - name: Install uv
+        uses: astral-sh/setup-uv@v8.1.0
+        with:
+          enable-cache: true
+          cache-dependency-glob: |
+            pyproject.toml
+            uv.lock
+
+      - name: Set up Python
+        run: uv python install 3.13
+
+      - name: Install dependencies
+        run: uv sync --extra dev
+
+      - name: Build docs
+        run: uv run mkdocs build --strict
+
+      - name: Upload artifact
+        uses: actions/upload-pages-artifact@v5
+        with:
+          path: site/
+
+  deploy:
+    needs: build
+    runs-on: ubuntu-latest
+    environment:
+      name: github-pages
+      url: ${{ steps.deployment.outputs.page_url }}
+    steps:
+      - name: Deploy to GitHub Pages
+        id: deployment
+        uses: actions/deploy-pages@v5
+
+  indexnow:
+    needs: deploy
+    runs-on: ubuntu-latest
+    steps:
+      - name: Wait for Pages CDN to settle
+        run: sleep 30
+
+      - name: Fetch published sitemap
+        run: curl -fsSL --retry 5 --retry-delay 10 https://rigplane.dev/sitemap.xml -o sitemap.xml
+
+      - name: Ping IndexNow with all sitemap URLs
+        # IndexNow key file is published at docs/4f4bcd28cb8d426ca58ec08b5035541e.txt
+        # and served at https://rigplane.dev/4f4bcd28cb8d426ca58ec08b5035541e.txt.
+        # Bing, Yandex and other IndexNow consumers honor pings for any URL on a
+        # host whose key file resolves to the declared keyLocation value.
+        run: |
+          python3 << 'PYEOF'
+          import json
+          import re
+          import sys
+          import urllib.error
+          import urllib.request
+
+          KEY = "4f4bcd28cb8d426ca58ec08b5035541e"
+          HOST = "rigplane.dev"
+
+          with open("sitemap.xml") as f:
+              urls = re.findall(r"<loc>(.*?)</loc>", f.read())
+          urls = [u for u in urls if u.startswith(f"https://{HOST}/")]
+          if not urls:
+              print("::warning::IndexNow: no rigplane.dev URLs in sitemap; skipping")
+              sys.exit(0)
+
+          payload = json.dumps({
+              "host": HOST,
+              "key": KEY,
+              "keyLocation": f"https://{HOST}/{KEY}.txt",
+              "urlList": urls,
+          }).encode()
+          req = urllib.request.Request(
+              "https://api.indexnow.org/IndexNow",
+              data=payload,
+              headers={"Content-Type": "application/json; charset=utf-8"},
+              method="POST",
+          )
+          try:
+              with urllib.request.urlopen(req, timeout=30) as resp:
+                  print(f"IndexNow: {resp.status} {resp.reason} for {len(urls)} URLs")
+          except urllib.error.HTTPError as exc:
+              # 200 OK / 202 Accepted are success. 4xx is a config error we want
+              # loud-but-non-fatal so a bad key file does not block deploy.
+              print(f"::warning::IndexNow returned {exc.code}: {exc.reason}")
+              if exc.code >= 500:
+                  raise
+          PYEOF

rigplane-2.3.1/.github/workflows/full.yml

@@ -0,0 +1,140 @@
+name: Tests (full matrix)
+
+on:
+  schedule:
+    # Mon/Wed/Fri 03:00 UTC (06:00 MSK)
+    - cron: "0 3 * * 1,3,5"
+  workflow_dispatch:
+  push:
+    branches: [main]
+
+concurrency:
+  group: tests-full-${{ github.workflow }}-${{ github.ref }}
+  cancel-in-progress: true
+
+jobs:
+  test:
+    # On push: only when commit message contains [full-ci].
+    # On schedule / manual dispatch: always run.
+    if: >-
+      github.event_name != 'push' ||
+      contains(github.event.head_commit.message, '[full-ci]')
+    # Self-hosted Mac mini build-tier runner. Python 3.11/3.12/3.13, uv,
+    # Node 24, Rust, and the Tauri/audio system libs are pre-baked in the
+    # image, so the matrix avoids ubuntu-latest pickup + apt install passes.
+    # Operator doc: rigplane-tower/docs/development/mac-mini-self-hosted-runners.md.
+    runs-on: [self-hosted, linux, build]
+    timeout-minutes: 25
+    strategy:
+      matrix:
+        python-version: ["3.11", "3.12", "3.13"]
+
+    steps:
+      - uses: actions/checkout@v6
+
+      - name: Install uv
+        uses: astral-sh/setup-uv@v8.1.0
+        with:
+          enable-cache: true
+          cache-dependency-glob: |
+            pyproject.toml
+            uv.lock
+
+      - name: Set up Python ${{ matrix.python-version }}
+        run: uv python install ${{ matrix.python-version }}
+
+      - name: Install dependencies
+        run: uv sync --extra dev --extra bridge
+
+      - name: Set up Node.js
+        uses: actions/setup-node@v6
+        with:
+          node-version: '20'
+          cache: 'npm'
+          cache-dependency-path: frontend/package-lock.json
+
+      - name: Install frontend dependencies
+        run: |
+          cd frontend
+          npm ci
+
+      - name: i18n catalog lint
+        run: |
+          cd frontend
+          npm run i18n:check
+
+      - name: Frontend type-check
+        run: |
+          cd frontend
+          npm run check
+
+      - name: Frontend tests
+        run: |
+          cd frontend
+          npx vitest run
+
+      - name: Build frontend
+        run: |
+          cd frontend
+          npm run build
+          rm -f ../src/rigplane/web/static
+          mkdir -p ../src/rigplane/web/static
+          cp -r dist/* ../src/rigplane/web/static/
+
+      - name: Lint web boundary
+        run: uv run ruff check src/rigplane/web
+
+      - name: Type-check web boundary
+        run: uv run mypy --strict src/rigplane/web
+
+      - name: Lint architecture (import-linter)
+        run: uv run lint-imports
+
+      - name: Run tests
+        id: tests
+        run: |
+          uv run pytest tests/ --ignore=tests/integration -n auto --tb=short --timeout=300 --timeout-method=thread \
+            | tee pytest-output.txt
+          SUMMARY=$(tail -1 pytest-output.txt)
+          PASSED=$(echo "$SUMMARY" | grep -oP '\d+ passed' | grep -oP '\d+' || echo "0")
+          echo "passed=$PASSED" >> "$GITHUB_OUTPUT"
+
+      - name: Extract version
+        if: matrix.python-version == '3.11' && github.ref == 'refs/heads/main'
+        id: version
+        run: |
+          VERSION=$(uv run python -c "from importlib.metadata import version; print(version('rigplane'))")
+          echo "version=$VERSION" >> "$GITHUB_OUTPUT"
+
+      - name: Update tests badge
+        if: matrix.python-version == '3.11' && github.ref == 'refs/heads/main' && always()
+        uses: schneegans/dynamic-badges-action@v1.8.0
+        with:
+          auth: ${{ secrets.GIST_TOKEN }}
+          gistID: bce917f4007ac491e527e142564fbbae
+          filename: rigplane-tests.json
+          label: tests
+          message: "${{ steps.tests.outputs.passed }} passed"
+          color: ${{ steps.tests.outcome == 'success' && 'brightgreen' || 'red' }}
+
+      - name: Update version badge
+        if: matrix.python-version == '3.11' && github.ref == 'refs/heads/main' && always()
+        uses: schneegans/dynamic-badges-action@v1.8.0
+        with:
+          auth: ${{ secrets.GIST_TOKEN }}
+          gistID: bce917f4007ac491e527e142564fbbae
+          filename: rigplane-version.json
+          label: version
+          message: "v${{ steps.version.outputs.version }}"
+          color: blue
+
+      - name: Update mypy badge
+        if: matrix.python-version == '3.11' && github.ref == 'refs/heads/main' && always()
+        uses: schneegans/dynamic-badges-action@v1.8.0
+        with:
+          auth: ${{ secrets.GIST_TOKEN }}
+          gistID: bce917f4007ac491e527e142564fbbae
+          filename: rigplane-mypy.json
+          label: mypy
+          message: "0 errors"
+          color: blue

rigplane-2.3.1/.github/workflows/quick.yml

@@ -0,0 +1,159 @@
+name: Tests (quick)
+
+on:
+  push:
+    branches: [main]
+    paths:
+      - "src/**"
+      - "tests/**"
+      - "frontend/**"
+      - "pyproject.toml"
+      - "uv.lock"
+      - ".importlinter"
+      - ".github/workflows/**"
+  pull_request:
+    branches: [main]
+    paths:
+      - "src/**"
+      - "tests/**"
+      - "frontend/**"
+      - "pyproject.toml"
+      - "uv.lock"
+      - ".importlinter"
+      - ".github/workflows/**"
+
+concurrency:
+  group: tests-quick-${{ github.workflow }}-${{ github.ref }}
+  cancel-in-progress: true
+
+jobs:
+  quick:
+    # Self-hosted Mac mini build-tier runner. Python 3.11+/uv/Node 24/Rust
+    # and the Tauri/audio system libs are pre-baked in the image, so this
+    # job avoids the ubuntu-latest pickup + apt install passes. Operator
+    # doc: rigplane-tower/docs/development/mac-mini-self-hosted-runners.md.
+    runs-on: [self-hosted, linux, build]
+    timeout-minutes: 10
+
+    steps:
+      - uses: actions/checkout@v6
+
+      - name: Detect frontend changes
+        id: filter
+        uses: dorny/paths-filter@v4
+        with:
+          filters: |
+            frontend:
+              - 'frontend/**'
+              - 'src/rigplane/web/**'
+
+      - name: Install uv
+        uses: astral-sh/setup-uv@v8.1.0
+        with:
+          enable-cache: true
+          cache-dependency-glob: |
+            pyproject.toml
+            uv.lock
+
+      - name: Set up Python 3.11
+        run: uv python install 3.11
+
+      - name: Install dependencies
+        run: uv sync --extra dev --extra bridge
+
+      - name: Ruff (lint + format check)
+        run: |
+          uv run ruff check src/ tests/
+          uv run ruff format --check src/ tests/
+
+      - name: Lint architecture (import-linter)
+        run: uv run lint-imports
+
+      - name: Set up Node.js
+        if: steps.filter.outputs.frontend == 'true'
+        uses: actions/setup-node@v6
+        with:
+          node-version: '20'
+          cache: 'npm'
+          cache-dependency-path: frontend/package-lock.json
+
+      - name: Frontend install + check + tests + build
+        if: steps.filter.outputs.frontend == 'true'
+        run: |
+          cd frontend
+          npm ci
+          npm run i18n:check
+          npm run check
+          npx vitest run
+          npm run build
+          rm -f ../src/rigplane/web/static
+          mkdir -p ../src/rigplane/web/static
+          cp -r dist/* ../src/rigplane/web/static/
+
+      - name: Frontend i18n visual smoke (RP-ML-006)
+        if: steps.filter.outputs.frontend == 'true'
+        # Runs the localization screenshot pack against the freshly built
+        # `frontend/dist/`. The self-hosted Mac mini Linux runner needs the
+        # Playwright system deps (libnss3, libnspr4, etc.) installed at the
+        # OS level via `npx playwright install --with-deps chromium` (one
+        # time, by the runner operator) before this step can pass. Marked
+        # continue-on-error until provisioning lands; the baseline tests
+        # still run + the screenshots upload as artifacts for review.
+        continue-on-error: true
+        run: |
+          cd frontend
+          npx playwright install chromium >/dev/null 2>&1 || true
+          npm run test:e2e:i18n
+
+      - name: Type-check web boundary
+        if: steps.filter.outputs.frontend == 'true'
+        run: uv run mypy --strict src/rigplane/web
+
+      - name: Run tests
+        id: tests
+        run: |
+          uv run pytest tests/ --ignore=tests/integration -n auto --tb=short --timeout=300 --timeout-method=thread \
+            | tee pytest-output.txt
+          SUMMARY=$(tail -1 pytest-output.txt)
+          PASSED=$(echo "$SUMMARY" | grep -oP '\d+ passed' | grep -oP '\d+' || echo "0")
+          echo "passed=$PASSED" >> "$GITHUB_OUTPUT"
+
+      - name: Extract version
+        if: github.ref == 'refs/heads/main'
+        id: version
+        run: |
+          VERSION=$(uv run python -c "from importlib.metadata import version; print(version('rigplane'))")
+          echo "version=$VERSION" >> "$GITHUB_OUTPUT"
+
+      - name: Update tests badge
+        if: github.ref == 'refs/heads/main' && always()
+        uses: schneegans/dynamic-badges-action@v1.8.0
+        with:
+          auth: ${{ secrets.GIST_TOKEN }}
+          gistID: bce917f4007ac491e527e142564fbbae
+          filename: rigplane-tests.json
+          label: tests
+          message: "${{ steps.tests.outputs.passed }} passed"
+          color: ${{ steps.tests.outcome == 'success' && 'brightgreen' || 'red' }}
+
+      - name: Update version badge
+        if: github.ref == 'refs/heads/main' && always()
+        uses: schneegans/dynamic-badges-action@v1.8.0
+        with:
+          auth: ${{ secrets.GIST_TOKEN }}
+          gistID: bce917f4007ac491e527e142564fbbae
+          filename: rigplane-version.json
+          label: version
+          message: "v${{ steps.version.outputs.version }}"
+          color: blue
+
+      - name: Update mypy badge
+        if: github.ref == 'refs/heads/main' && always()
+        uses: schneegans/dynamic-badges-action@v1.8.0
+        with:
+          auth: ${{ secrets.GIST_TOKEN }}
+          gistID: bce917f4007ac491e527e142564fbbae
+          filename: rigplane-mypy.json
+          label: mypy
+          message: "0 errors"
+          color: blue

rigplane-2.3.1/.github/workflows/rebrand-gate.yml

@@ -0,0 +1,34 @@
+name: Rebrand grep gate
+
+# Wave 2 final gate: fail any push or PR that introduces an `icom-lan` /
+# `icom_lan` / `IcomLanError` reference outside the preserved-by-design
+# allow-list. See .github/scripts/check-rebrand-allowlist.sh for the
+# rationale and the allow-list.
+#
+# Runs on EVERY push and PR (no path filter) so doc-only / rig-only / script-
+# only changes still trigger it. The job is sub-second (single git grep +
+# bash filter), so this is cheap.
+
+on:
+  push:
+    branches: [main]
+  pull_request:
+    branches: [main]
+
+concurrency:
+  group: rebrand-gate-${{ github.workflow }}-${{ github.ref }}
+  cancel-in-progress: true
+
+jobs:
+  grep-gate:
+    # Sub-second git-grep + bash filter, no toolchain needed. Keep this on a
+    # GitHub-hosted runner so protected-branch merges are not blocked when
+    # self-hosted runners are offline or occupied.
+    runs-on: ubuntu-latest
+    timeout-minutes: 2
+
+    steps:
+      - uses: actions/checkout@v6
+
+      - name: Wave 2 rebrand grep gate
+        run: .github/scripts/check-rebrand-allowlist.sh