release: 0.1.0

Initial public release. Async Python client for the IAG 4.x REST API.

- Services layer: 23 thin async wrappers, one per API endpoint
- Resources layer: 22 declarative abstractions (ensure/absent/run/load/dump)
- Serialization: JSON, YAML (optional), TOML (optional)
- Typed exception hierarchy with HTTP and transport error classification
- Silent logging by default; enable with logger.set_level(logging.DEBUG)

Author: Peter Sprygada

CHANGELOG.md

@@ -0,0 +1,42 @@
+# Changelog
+
+All notable changes to this project will be documented in this file.
+
+The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
+and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
+
+## [Unreleased]
+
+## [0.1.0] - 2026-03-09
+
+### Added
+
+- TOML support in `serdes` module alongside existing JSON and YAML support (#16)
+- `heuristics` module for connection parameter validation and normalization (#9)
+- Structured logging module replacing the previous `logger` stub, with configurable log levels (#9)
+- 23 async service wrappers covering all IAG 4.x API tag groups (#6)
+- 22 declarative resource classes with `ensure`/`absent`/`run`/`dry_run`/`load`/`dump` patterns (#6)
+- Comprehensive unit test suite with 686 tests across services and resources (#6)
+- Filesystem-based bulk loader via `client.load(path, op)` dispatching to `service.load()` (#6)
+- `Operation` string class (`MERGE`, `REPLACE`, `OVERWRITE`) for bulk operations (#6)
+- Typed exception hierarchy rooted at `AsyncGatewayError` with HTTP status and transport error mapping (#6)
+- Pagination helper `ServiceBase._get_all()` shared across service layer (#6)
+- Version derived from git tags via `uv-dynamic-versioning` (#6)
+- SPDX license headers across all source files for GPL v3 compliance (#11)
+- GitHub Actions CI pipeline with lint, typecheck, security, and tox matrix (py310–py313) (#5, #7, #8)
+- GitHub issue and PR templates, CODEOWNERS, CODE_OF_CONDUCT, CONTRIBUTING, SECURITY policy (#11, initial)
+- Contributor License Agreement (#initial)
+
+### Fixed
+
+- Pagination infinite loop in services using `_get_all` helper (#13)
+- `delete_all` filter bug in `devices` service that incorrectly scoped deletions (#13)
+- Minor low-priority issues across services and resources (#14)
+
+### Changed
+
+- Simplified exceptions module from multiple classes to two core exception types (#10)
+- Module docstrings added across all source files; stale `Operation` example corrected (#12)
+
+[Unreleased]: https://github.com/itential/asyncgateway/compare/v0.1.0...HEAD
+[0.1.0]: https://github.com/itential/asyncgateway/releases/tag/v0.1.0

CLAUDE.md

@@ -9,7 +9,7 @@
 - `client.py` — `Client` class with two `_Namespace` containers (`services`, `resources`). On init, scans `services/` and `resources/` directories via `importlib`, instantiates each `Service`/`Resource` class, and attaches it to the appropriate namespace by its `.name` attribute. All `**kwargs` pass through to `ipsdk.gateway_factory(want_async=True, **kwargs)`. `client.load(path, op)` is a filesystem bulk loader that dispatches to `service.load(data, op)` for any service that exposes one.
 - `services/` — 23 files covering all IAG API tag groups. Each file has one `Service(ServiceBase)` class. Methods call `self.client.{verb}(path)` and return `res.json()` — no logic. Pagination handled by the shared `ServiceBase._get_all(path, **params)` helper.
 - `resources/` — 22 files. Each has one `Resource(ResourceBase)` class that receives the `services` namespace as `self.services`. Implements declarative patterns: `ensure`/`absent` for CRUD, `run`/`dry_run` for execution, `load`/`dump` for bulk operations.
-- `serdes.py` — JSON/YAML serialization. JSON is tried first; YAML requires optional `PyYAML`. The `YAML_AVAILABLE` bool controls runtime behavior.
+- `serdes.py` — JSON/YAML/TOML serialization. JSON is tried first; YAML requires optional `PyYAML`; TOML uses stdlib `tomllib` (Python 3.11+) or `tomli` on 3.10. The `YAML_AVAILABLE` and `TOML_AVAILABLE` bools control runtime behavior.
 - `exceptions.py` — Exception hierarchy rooted at `AsyncGatewayError`. `classify_httpx_error` and `classify_http_status` map transport errors to typed exceptions. Aliases (`HTTPError`, `TimeoutError`, etc.) exist for backward compatibility.
 - `logger.py` — stdlib `logging` wrapper. **Default level is 100 (silent).** Enable with `asyncgateway.logger.set_level(logging.DEBUG)`.
 - `metadata.py` — Reads version from installed package metadata via `importlib.metadata`.
@@ -43,7 +43,7 @@
 
 ```bash
 uv sync --group dev              # install all deps including tox
-uv run pytest                    # run tests (all 200, ~0.4s)
+uv run pytest                    # run tests (all 686, ~0.4s)
 uv run pytest -v --cov           # with coverage
 tox                              # test across py310–py313
 tox -e py312                     # single version
@@ -75,7 +75,7 @@ CI runs on GitHub Actions (`.github/workflows/ci.yaml`) on push/PR to `main`/`de
 3. **`devices.delete_all()` in `services/devices.py` only deletes devices starting with `"router"`** — leftover test code that is still in the public API.
 4. **`__main__.py` is a stub** — prints a message and exits. No CLI.
 5. **`pyproject.toml` still lists `requires-python = ">=3.10"`** but `docs/development.md` says 3.8+. The latter is stale.
-6. **No resource-level tests** for the 22 new resource files. Current tests cover services and infrastructure only. All resource logic (ensure, absent, run, load) is untested.
+6. ~~**No resource-level tests**~~ — resolved in #6. Resource tests covering ensure, absent, run, load, and passthrough patterns are now included in the 686-test suite.
 7. **YAML errors raise `JSONError`** — intentional for consistency but confusing.
 8. **`Operation` docstring still refers to `client.devices.import_devices()`** — a method that no longer exists.
 

NOTICE

@@ -30,3 +30,13 @@ PyYAML (optional dependency)
   Copyright (c) 2017-2021 Ingy döt Net
   Copyright (c) 2006-2016 Kirill Simonov
   https://github.com/yaml/pyyaml
+
+tomli (optional dependency, Python < 3.11 only)
+  License: MIT
+  Copyright (c) 2021 Taneli Hukkinen
+  https://github.com/hukkin/tomli
+
+tomli-w (optional dependency)
+  License: MIT
+  Copyright (c) 2021 Taneli Hukkinen
+  https://github.com/hukkin/tomli-w

SECURITY.md

@@ -7,8 +7,21 @@ receive backported security patches.
 
 | Version | Supported |
 |---------|-----------|
-| latest  | Yes       |
-| older   | No        |
+| 0.1.0   | Yes       |
+
+## Release Security Notes
+
+### 0.1.0 (2026-03-09)
+
+No security vulnerabilities were identified or patched in this initial release.
+`bandit` static analysis reports zero issues across all 3,305 lines of source
+code. The following security-relevant hardening was applied:
+
+- SPDX license headers added to all source files for supply chain transparency (#11)
+- Typed exception hierarchy prevents accidental leakage of raw HTTP details (#6)
+- Credentials and secrets are never logged — default log level is silent (100) (#6)
+- `certifi` updated to 2026-02-25 for current CA bundle
+- `ipsdk` updated from 0.3.0 to 0.8.0 (upstream dependency upgrade)
 
 ## Reporting a Vulnerability