embroider 0.1.0__tar.gz

embroider-0.1.0/.github/workflows/ci.yml

@@ -0,0 +1,30 @@
+name: ci
+
+on:
+  push:
+    branches: [main, dev]
+  pull_request:
+
+jobs:
+  rust:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v5
+      - uses: dtolnay/rust-toolchain@stable
+      # Pure unit tests — no ORT dylib, no network, no Python linking.
+      - run: cargo test --locked
+      # Default build stays Python-free (bobine-pattern enforcement).
+      - run: cargo check --locked
+      # The wheel path (pyo3 bindings) must still compile.
+      - run: cargo check --locked --features extension-module
+
+  packaging:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v5
+      - uses: actions/setup-python@v6
+        with:
+          python-version: "3.13"
+      # Versions lock-step + readme/license metadata — fails CI before any
+      # tag can (the OKFgraph test_packaging.py lesson).
+      - run: python scripts/check_packaging.py

embroider-0.1.0/.github/workflows/release.yml

@@ -0,0 +1,131 @@
+# Release workflow — dual publish on version tags.
+#
+# Tag `vX.Y.Z` on **main** triggers:
+#   1. crates.io  — pure-Rust crate `embroider` (default features, no pyo3)
+#   2. PyPI       — Python wheel package `embroider` via maturin
+#                   (extension-module)
+#
+# Required secrets / configuration:
+#   - secrets.CARGO_REGISTRY_TOKEN   → crates.io API token
+#   - PyPI trusted publisher configured for this workflow + environment `pypi`
+#     (Project: embroider · Workflow: release.yml · Environment: pypi)
+
+name: Release
+
+on:
+  push:
+    tags: ["v*"]
+  workflow_dispatch:
+
+permissions:
+  contents: read
+
+jobs:
+  # ------------------------------------------------------------------
+  # 1. crates.io — Rust library (no Python bindings)
+  # ------------------------------------------------------------------
+  crates-io:
+    runs-on: ubuntu-22.04
+    steps:
+      - uses: actions/checkout@v6
+      - uses: dtolnay/rust-toolchain@stable
+      - name: Tag matches Cargo.toml version
+        run: |
+          tag="${GITHUB_REF_NAME#v}"
+          ver=$(grep -m1 '^version' Cargo.toml | sed 's/.*"\(.*\)"/\1/')
+          test "$tag" = "$ver" || { echo "tag v$tag != Cargo.toml $ver"; exit 1; }
+      - name: Python and Cargo versions in lock-step
+        run: |
+          cver=$(grep -m1 '^version' Cargo.toml | sed 's/.*"\(.*\)"/\1/')
+          pver=$(grep -m1 '^version' pyproject.toml | sed 's/.*"\(.*\)"/\1/')
+          test "$cver" = "$pver" || { echo "Cargo.toml $cver != pyproject.toml $pver"; exit 1; }
+      - name: Verify default build is Python-free
+        run: cargo check --locked
+      - name: Run unit tests (pure — no ORT dylib, no network)
+        run: cargo test --locked --lib
+      - name: Publish to crates.io
+        # Tags publish; manual dispatch is a dry-run (check + test only).
+        if: startsWith(github.ref, 'refs/tags/v')
+        run: cargo publish --locked
+        env:
+          CARGO_REGISTRY_TOKEN: ${{ secrets.CARGO_REGISTRY_TOKEN }}
+
+  # ------------------------------------------------------------------
+  # 2. PyPI — Python wheel matrix via maturin (trusted publishing)
+  # ------------------------------------------------------------------
+  pypi:
+    # ubuntu + windows x86_64, macOS arm64 (native runners — no cross builds).
+    # No Intel mac (deprecated runners), no other exotic targets.
+    strategy:
+      fail-fast: false
+      matrix:
+        platform:
+          - runner: ubuntu-22.04
+            target: x86_64
+          - runner: windows-latest
+            target: x64
+          - runner: macos-latest
+            target: aarch64
+    runs-on: ${{ matrix.platform.runner }}
+    permissions:
+      id-token: write # PyPI trusted publishing
+    steps:
+      - uses: actions/checkout@v6
+
+      - name: Build wheel (sdist on linux x86_64 too)
+        uses: PyO3/maturin-action@v1
+        with:
+          target: ${{ matrix.platform.target }}
+          args: --release --out dist --locked --features extension-module
+          # 2_28, not auto: auto resolves to CentOS 7-based manylinux2014
+          # (OpenSSL 1.0.2 < openssl-sys minimum 1.1.0). Ignored on win/mac.
+          manylinux: ${{ matrix.platform.manylinux || '2_28' }}
+          sccache: true
+          # Linux wheels build in a manylinux container: ort-sys build-deps
+          # on ureq/native-tls → openssl-sys needs headers there (no-op on
+          # windows/macos runners).
+          before-script-linux: yum install -y openssl-devel
+
+      - name: Upload wheels
+        uses: actions/upload-artifact@v6
+        with:
+          name: wheels-${{ matrix.platform.runner }}-${{ matrix.platform.target }}
+          path: dist
+
+  # ------------------------------------------------------------------
+  # 3. sdist + PyPI upload (single verified copy — no merge-multiple)
+  # ------------------------------------------------------------------
+  pypi-publish:
+    needs: [pypi]
+    runs-on: ubuntu-22.04
+    environment: pypi
+    permissions:
+      id-token: write
+    steps:
+      - uses: actions/checkout@v6
+
+      - name: Build sdist
+        uses: PyO3/maturin-action@v1
+        with:
+          command: sdist
+          args: --out dist
+
+      - name: Download wheels (per-artifact dirs — never merge-multiple,
+        # see bobine release postmortem: identical paths across artifacts
+        # corrupt the merged zip)
+        uses: actions/download-artifact@v6
+        with:
+          pattern: wheels-*
+          path: dist
+
+      - name: Flatten wheel directories (drop emptied artifact dirs —
+        # the publisher rejects any non-distribution entry in dist/)
+        run: |
+          find dist -name '*.whl' -exec mv {} dist/ \;
+          find dist -mindepth 1 -type d -empty -delete
+          ls -la dist/
+
+      - name: Publish to PyPI
+        # Tags publish; manual dispatch stops after building wheels.
+        if: startsWith(github.ref, 'refs/tags/v')
+        uses: pypa/gh-action-pypi-publish@release/v1

embroider-0.1.0/.gitignore

@@ -0,0 +1,6 @@
+/target
+/dist
+__pycache__/
+*.pyd
+*.pdb
+.pytest_cache/