causasv 0.8.2__tar.gz

causasv-0.8.2/.github/dependabot.yml

@@ -0,0 +1,26 @@
+version: 2
+
+updates:
+  - package-ecosystem: "cargo"
+    directory: "/"
+    schedule:
+      interval: "weekly"
+    labels: ["dependencies", "rust"]
+    commit-message:
+      prefix: "deps(rust)"
+
+  - package-ecosystem: "pip"
+    directory: "/py"
+    schedule:
+      interval: "weekly"
+    labels: ["dependencies", "python"]
+    commit-message:
+      prefix: "deps(python)"
+
+  - package-ecosystem: "github-actions"
+    directory: "/"
+    schedule:
+      interval: "weekly"
+    labels: ["dependencies", "github-actions"]
+    commit-message:
+      prefix: "ci"

causasv-0.8.2/.github/workflows/ci.yml

@@ -0,0 +1,51 @@
+name: CI
+
+on:
+  push:
+  pull_request:
+
+permissions:
+  contents: read
+
+jobs:
+  rust:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v7
+      - uses: dtolnay/rust-toolchain@stable
+      - uses: Swatinem/rust-cache@v2
+      - run: cargo fmt --check
+      - run: cargo clippy --all-targets --all-features -- -D warnings
+      - run: cargo test --all-features
+      - run: cargo test
+      - run: cargo package --no-verify
+
+  version-sync:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v7
+      - name: Check version consistency (Cargo.toml / py/pyproject.toml / CITATION.cff / README.md)
+        run: |
+          RUST=$(grep '^version' Cargo.toml | head -1 | grep -oP '"\K[^"]+')
+          PY=$(grep '^version' py/pyproject.toml | grep -oP '"\K[^"]+')
+          CIT=$(grep '^version:' CITATION.cff | awk '{print $2}')
+          README=$(grep -oP 'Experimental — v\K[0-9]+\.[0-9]+\.[0-9]+' README.md | head -1)
+          echo "Rust=$RUST  Python=$PY  Citation=$CIT  README=$README"
+          [ "$RUST" = "$PY" ] && [ "$RUST" = "$CIT" ] && [ "$RUST" = "$README" ] || \
+            { echo "ERROR: version mismatch — bump Cargo.toml, py/pyproject.toml, CITATION.cff, and README.md together"; exit 1; }
+
+  python:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v7
+      - uses: dtolnay/rust-toolchain@stable
+      - uses: Swatinem/rust-cache@v2
+      - uses: actions/setup-python@v6
+        with:
+          python-version: "3.11"
+      - name: Build and test Python bindings
+        run: |
+          python -m venv .venv
+          .venv/bin/pip install maturin pytest
+          cd py && ../.venv/bin/maturin develop --features python
+          ../.venv/bin/python -m pytest tests/

causasv-0.8.2/.github/workflows/release.yml

@@ -0,0 +1,109 @@
+name: Release
+
+on:
+  push:
+    tags: ['v*']
+
+permissions:
+  contents: write   # required for GitHub Release creation
+
+jobs:
+  release:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v7
+      - uses: dtolnay/rust-toolchain@stable
+      - uses: Swatinem/rust-cache@v2
+
+      - name: Test
+        run: cargo test
+
+      - name: Publish to crates.io
+        env:
+          CARGO_REGISTRY_TOKEN: ${{ secrets.CARGO_REGISTRY_TOKEN }}
+        run: |
+          set +e
+          out=$(cargo publish 2>&1)
+          ec=$?
+          echo "$out"
+          [ $ec -eq 0 ] || echo "$out" | grep -q "already exists"
+
+      - name: Create GitHub Release
+        uses: softprops/action-gh-release@v3
+        with:
+          generate_release_notes: true
+
+  # ── Python wheels ─────────────────────────────────────────────────────────────
+
+  linux-wheels:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v7
+      - uses: PyO3/maturin-action@v1
+        with:
+          working-directory: py
+          command: build
+          args: --release --out ../dist
+          manylinux: auto
+      - uses: actions/upload-artifact@v4
+        with:
+          name: linux-wheels
+          path: dist
+
+  macos-wheels:
+    runs-on: macos-latest
+    steps:
+      - uses: actions/checkout@v7
+      - uses: PyO3/maturin-action@v1
+        with:
+          working-directory: py
+          target: universal2-apple-darwin
+          command: build
+          args: --release --out ../dist
+      - uses: actions/upload-artifact@v4
+        with:
+          name: macos-wheels
+          path: dist
+
+  windows-wheels:
+    runs-on: windows-latest
+    steps:
+      - uses: actions/checkout@v7
+      - uses: PyO3/maturin-action@v1
+        with:
+          working-directory: py
+          command: build
+          args: --release --out ../dist
+      - uses: actions/upload-artifact@v4
+        with:
+          name: windows-wheels
+          path: dist
+
+  sdist:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v7
+      - uses: PyO3/maturin-action@v1
+        with:
+          working-directory: py
+          command: sdist
+          args: --out ../dist
+      - uses: actions/upload-artifact@v4
+        with:
+          name: sdist
+          path: dist
+
+  publish-pypi:
+    needs: [linux-wheels, macos-wheels, windows-wheels, sdist]
+    runs-on: ubuntu-latest
+    environment:
+      name: pypi
+      url: https://pypi.org/p/causasv
+    permissions:
+      id-token: write   # Trusted Publisher (OIDC) — no token secret needed
+    steps:
+      - uses: actions/download-artifact@v4
+        with:
+          merge-multiple: true
+          path: dist
+      - uses: pypa/gh-action-pypi-publish@release/v1

causasv-0.8.2/.github/workflows/security.yml

@@ -0,0 +1,35 @@
+name: Security
+
+on:
+  push:
+    branches: ["main"]
+  pull_request:
+    branches: ["main"]
+  schedule:
+    - cron: "17 4 * * 1"
+
+permissions:
+  contents: read
+
+jobs:
+  cargo-audit:
+    name: cargo audit
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v7
+      - uses: dtolnay/rust-toolchain@stable
+      - run: cargo install cargo-audit --locked
+      - run: cargo audit
+
+  pip-audit:
+    name: pip-audit
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v7
+      - uses: actions/setup-python@v6
+        with:
+          python-version: "3.11"
+      - run: pip install pip-audit
+      - name: Run pip-audit
+        working-directory: py
+        run: pip-audit

causasv-0.8.2/.gitignore

@@ -0,0 +1,13 @@
+/target
+/py/.venv
+/py/*.so
+/py/*.pyd
+/py/causasv/*.so
+/py/causasv/*.pyd
+__pycache__/
+*.pyc
+.pytest_cache/
+dist/
+*.egg-info/
+.claude/
+tasks/