engineering-process 0.5.0__tar.gz → 0.5.1__tar.gz

{engineering_process-0.5.0/engineering_process.egg-info → engineering_process-0.5.1}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: engineering-process
-Version: 0.5.0
+Version: 0.5.1
 Summary: Agent-neutral end-to-end engineering lifecycle and deterministic process CLI
 License-Expression: MIT
 Project-URL: Homepage, https://github.com/phuongnse/engineering-process
@@ -92,9 +92,10 @@ distribution: the POSIX backend owns a new process session/group and the Windows
 backend owns a kill-on-close Job Object. Consumer manifests, evidence, and exit codes
 do not branch by operating system. If an outer Windows Job applies incompatible
 nesting or UI limits, target creation fails closed instead of running uncontained.
-After a command root exits, both backends allow at most 250 milliseconds for child
-accounting to drain naturally. A process still present after that bound is terminated
-and makes the command fail; commands with no remaining child return immediately.
+After a command root exits, the POSIX backend allows at most 250 milliseconds and the
+Windows Job Object backend allows at most 5 seconds for child accounting to drain
+naturally. A process still present after its platform bound is terminated and makes
+the command fail; commands with no remaining child return immediately.
 
 This task boundary intentionally separates finite commands from services and
 interactive protocols. `processctl exec`, requirement probes, setup command actions,

{engineering_process-0.5.0 → engineering_process-0.5.1}/README.md

@@ -57,9 +57,10 @@ distribution: the POSIX backend owns a new process session/group and the Windows
 backend owns a kill-on-close Job Object. Consumer manifests, evidence, and exit codes
 do not branch by operating system. If an outer Windows Job applies incompatible
 nesting or UI limits, target creation fails closed instead of running uncontained.
-After a command root exits, both backends allow at most 250 milliseconds for child
-accounting to drain naturally. A process still present after that bound is terminated
-and makes the command fail; commands with no remaining child return immediately.
+After a command root exits, the POSIX backend allows at most 250 milliseconds and the
+Windows Job Object backend allows at most 5 seconds for child accounting to drain
+naturally. A process still present after its platform bound is terminated and makes
+the command fail; commands with no remaining child return immediately.
 
 This task boundary intentionally separates finite commands from services and
 interactive protocols. `processctl exec`, requirement probes, setup command actions,

{engineering_process-0.5.0 → engineering_process-0.5.1}/engineering_process/__init__.py

@@ -1,3 +1,3 @@
 """Agent-neutral engineering process."""
 
-VERSION = "0.5.0"
+VERSION = "0.5.1"

{engineering_process-0.5.0 → engineering_process-0.5.1}/engineering_process/_windows_job.py

@@ -36,7 +36,7 @@ WAIT_FAILED = 0xFFFFFFFF
 WAIT_OBJECT_0 = 0x00000000
 WAIT_TIMEOUT = 0x00000102
 CLEANUP_GRACE_MILLISECONDS = 5_000
-NATURAL_DRAIN_GRACE_MILLISECONDS = 250
+NATURAL_DRAIN_GRACE_MILLISECONDS = 5_000
 MAX_STATUS_BYTES = 4096
 MAX_STATUS_ERROR_CHARACTERS = 1024
 

{engineering_process-0.5.0 → engineering_process-0.5.1}/engineering_process/supervision.py

@@ -15,6 +15,7 @@ from typing import Mapping, Protocol
 
 
 NATURAL_DRAIN_GRACE_MILLISECONDS = 250
+WINDOWS_NATURAL_DRAIN_GRACE_MILLISECONDS = 5_000
 
 
 @dataclass(frozen=True)

{engineering_process-0.5.0 → engineering_process-0.5.1/engineering_process.egg-info}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: engineering-process
-Version: 0.5.0
+Version: 0.5.1
 Summary: Agent-neutral end-to-end engineering lifecycle and deterministic process CLI
 License-Expression: MIT
 Project-URL: Homepage, https://github.com/phuongnse/engineering-process
@@ -92,9 +92,10 @@ distribution: the POSIX backend owns a new process session/group and the Windows
 backend owns a kill-on-close Job Object. Consumer manifests, evidence, and exit codes
 do not branch by operating system. If an outer Windows Job applies incompatible
 nesting or UI limits, target creation fails closed instead of running uncontained.
-After a command root exits, both backends allow at most 250 milliseconds for child
-accounting to drain naturally. A process still present after that bound is terminated
-and makes the command fail; commands with no remaining child return immediately.
+After a command root exits, the POSIX backend allows at most 250 milliseconds and the
+Windows Job Object backend allows at most 5 seconds for child accounting to drain
+naturally. A process still present after its platform bound is terminated and makes
+the command fail; commands with no remaining child return immediately.
 
 This task boundary intentionally separates finite commands from services and
 interactive protocols. `processctl exec`, requirement probes, setup command actions,

{engineering_process-0.5.0 → engineering_process-0.5.1}/improvement-catalog.json

@@ -4,8 +4,8 @@
       "activeChangeId": null,
       "id": "deterministic-cross-platform-test-environment",
       "lastResolution": {
-        "changeId": "fix-windows-verification-boundary",
-        "version": "0.5.0"
+        "changeId": "extend-windows-natural-drain",
+        "version": "0.5.1"
       },
       "publicSurfaces": [
         "cross-platform-tests",

{engineering_process-0.5.0 → engineering_process-0.5.1}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "setuptools.build_meta"
 
 [project]
 name = "engineering-process"
-version = "0.5.0"
+version = "0.5.1"
 description = "Agent-neutral end-to-end engineering lifecycle and deterministic process CLI"
 readme = "README.md"
 license = "MIT"

engineering_process-0.5.1/release.json

@@ -0,0 +1,46 @@
+{
+  "schemaVersion": 3,
+  "previousVersion": "0.5.0",
+  "version": "0.5.1",
+  "classification": "patch",
+  "compatibility": "backward-compatible",
+  "schemaImpact": "unchanged",
+  "migration": null,
+  "identity": {
+    "package": "engineering-process",
+    "distribution": "engineering_process",
+    "tag": "v0.5.1",
+    "releaseName": "v0.5.1",
+    "runtimeVersion": {
+      "path": "engineering_process/__init__.py",
+      "variable": "VERSION"
+    },
+    "artifacts": [
+      "engineering_process-0.5.1-py3-none-any.whl",
+      "engineering_process-0.5.1.tar.gz"
+    ],
+    "receiptAsset": "engineering-process-v0.5.1-evidence.json",
+    "authorizationAsset": null
+  },
+  "provenance": {
+    "mode": "governed",
+    "statement": "The public N-1 lifecycle receipt and reviewed Release PR authorize this release.",
+    "lifecycleReceipt": {
+      "asset": "engineering-process-v0.5.1-evidence.json",
+      "project": "engineering-process",
+      "changeId": "release-0-5-1",
+      "cycle": 1
+    }
+  },
+  "changes": [
+    {
+      "id": "extend-windows-natural-drain",
+      "type": "fix",
+      "surfaces": [
+        "command-execution",
+        "windows-supervision"
+      ],
+      "rationale": "Extend the Windows Job Object natural-drain bound from 250 milliseconds to 5 seconds so successful finite Cargo and Tauri commands can finish child accounting while commands that retain descendants beyond the bound remain terminated and fail closed."
+    }
+  ]
+}

{engineering_process-0.5.0 → engineering_process-0.5.1}/templates/adopt-process-windows-job.py

@@ -36,7 +36,7 @@ WAIT_FAILED = 0xFFFFFFFF
 WAIT_OBJECT_0 = 0x00000000
 WAIT_TIMEOUT = 0x00000102
 CLEANUP_GRACE_MILLISECONDS = 5_000
-NATURAL_DRAIN_GRACE_MILLISECONDS = 250
+NATURAL_DRAIN_GRACE_MILLISECONDS = 5_000
 MAX_STATUS_BYTES = 4096
 MAX_STATUS_ERROR_CHARACTERS = 1024
 

{engineering_process-0.5.0 → engineering_process-0.5.1}/tests/test_release_candidate.py

@@ -20,6 +20,22 @@ from engineering_process.release_candidate import (
     render_release_pull_request,
 )
 class ReleaseCandidateTests(unittest.TestCase):
+    def assert_federated_migration_contract(
+        self, aggregate: str, federated_migration: str | None
+    ) -> None:
+        self.assertLessEqual(len(aggregate), 1_000)
+        if federated_migration is None:
+            return
+        for required in (
+            "Must adopt cross-repo-change",
+            "classify governed failures/findings",
+            "consumers await disposition",
+            "immutable release",
+            "exact reproduction",
+            "Released lifecycle/evidence readers retain historical meaning",
+        ):
+            self.assertIn(required, federated_migration)
+
     def test_source_release_migration_aggregate_fits_public_contract(self):
         changes_dir = Path(__file__).resolve().parent.parent / "release-changes"
         if not changes_dir.is_dir():
@@ -45,20 +61,14 @@ class ReleaseCandidateTests(unittest.TestCase):
                 )
             )
             aggregate = release.migration or ""
-            self.assertIn("federated-process-improvement:", aggregate)
-            federated_migration = aggregate
+            if "federated-process-improvement:" in aggregate:
+                federated_migration = aggregate
         else:
             aggregate = "; ".join(migrations)
-        self.assertLessEqual(len(aggregate), 1_000)
-        for required in (
-            "Must adopt cross-repo-change",
-            "classify governed failures/findings",
-            "consumers await disposition",
-            "immutable release",
-            "exact reproduction",
-            "Released lifecycle/evidence readers retain historical meaning",
-        ):
-            self.assertIn(required, federated_migration)
+        self.assert_federated_migration_contract(aggregate, federated_migration)
+
+    def test_migration_free_patch_has_no_legacy_guidance_requirement(self):
+        self.assert_federated_migration_contract("", None)
 
     def test_generated_release_closes_only_catalog_entries_in_its_change_set(self):
         with tempfile.TemporaryDirectory() as directory:

{engineering_process-0.5.0 → engineering_process-0.5.1}/tests/test_self_hosting.py

@@ -35,6 +35,16 @@ class SelfHostingTests(unittest.TestCase):
         self.assertIn("process-action-smoke/Scripts/python.exe", ci)
         self.assertIn("process-action-smoke/bin/python", ci)
         self.assertIn("Verify shared install action authority", ci)
+        windows_job = ci.index("Verify real Windows Job Object boundary")
+        install_wheel = ci.index("Install built wheel")
+        windows_job_block = ci[windows_job:install_wheel]
+        self.assertIn("if: runner.os == 'Windows'", windows_job_block)
+        self.assertIn(
+            "run: python -m unittest tests.test_windows_job",
+            windows_job_block,
+        )
+        self.assertLess(ci.index("Build distributions"), windows_job)
+        self.assertLess(windows_job, install_wheel)
         create = ci.index("Create exact public N-1 release qualification environment")
         install = ci.index("Install exact public N-1 release qualification authority")
         dependencies = ci.index("Install release qualification dependencies")
@@ -208,12 +218,12 @@ class SelfHostingTests(unittest.TestCase):
         self.assertIn("lifecycle comparison base", readme)
         self.assertNotIn("No workflow invokes merge", readme)
 
-    def test_renovate_cannot_publish_before_a_completed_lifecycle(self):
+    def test_renovate_consumer_intent_keeps_authority_adoption_disabled(self):
         renovate = json.loads(
             (PROCESS_ROOT / ".github" / "renovate.json").read_text(encoding="utf-8")
         )
 
-        self.assertFalse(renovate["enabled"])
+        self.assertTrue(renovate["enabled"])
         self.assertFalse(renovate["automerge"])
         self.assertFalse(renovate["dependencyDashboard"])
         self.assertNotIn("draftPR", renovate)
@@ -578,11 +588,15 @@ class SelfHostingTests(unittest.TestCase):
         marker = "# Managed by engineering-process; do not edit.\n"
         self.assertTrue(template.read_text(encoding="utf-8").startswith(marker))
         self.assertTrue(managed.read_text(encoding="utf-8").startswith(marker))
-        self.assertNotIn('"--status-handle"', managed.read_text(encoding="utf-8"))
+        self.assertEqual(managed.read_bytes(), template.read_bytes())
         self.assertIn('"--status-handle"', template.read_text(encoding="utf-8"))
         self.assertTrue(
             managed_windows_helper.read_text(encoding="utf-8").startswith(marker)
         )
+        self.assertIn(
+            "JOB_OBJECT_LIMIT_KILL_ON_JOB_CLOSE",
+            managed_windows_helper.read_text(encoding="utf-8"),
+        )
         self.assertEqual(
             windows_helper.read_bytes(), template_windows_helper.read_bytes()
         )

{engineering_process-0.5.0 → engineering_process-0.5.1}/tests/test_windows_job.py

@@ -12,7 +12,9 @@ import unittest
 from unittest.mock import patch
 
 from engineering_process import _windows_job
-from engineering_process.supervision import NATURAL_DRAIN_GRACE_MILLISECONDS
+from engineering_process.supervision import (
+    WINDOWS_NATURAL_DRAIN_GRACE_MILLISECONDS,
+)
 
 
 class NativeCall:
@@ -240,9 +242,9 @@ class WindowsJobTests(unittest.TestCase):
         self.assertEqual(7, exit_code)
         self.assertTrue(json.loads(status)["descendantsFound"])
 
-    def test_natural_drain_uses_the_portable_supervision_bound(self):
+    def test_natural_drain_uses_the_windows_supervision_bound(self):
         self.assertEqual(
-            NATURAL_DRAIN_GRACE_MILLISECONDS,
+            WINDOWS_NATURAL_DRAIN_GRACE_MILLISECONDS,
             _windows_job.NATURAL_DRAIN_GRACE_MILLISECONDS,
         )
 
@@ -350,6 +352,49 @@ class WindowsJobTests(unittest.TestCase):
 
         self.assertEqual([202, 201, 101], kernel32.closed_handles)
 
+    @unittest.skipUnless(os.name == "nt", "Windows Job Object integration")
+    def test_real_job_allows_a_short_lived_descendant_to_drain(self):
+        with tempfile.TemporaryDirectory() as directory:
+            root = Path(directory)
+            started = root / "started"
+            completed = root / "completed"
+            child = (
+                "from pathlib import Path; import sys, time; "
+                "Path(sys.argv[1]).write_text('started'); "
+                "time.sleep(1); Path(sys.argv[2]).write_text('completed')"
+            )
+            parent = (
+                "from pathlib import Path; import subprocess, sys, time; "
+                "subprocess.Popen([sys.executable, '-c', sys.argv[1], "
+                "sys.argv[2], sys.argv[3]]); "
+                "deadline=time.monotonic()+5; marker=Path(sys.argv[2]); "
+                "\nwhile not marker.exists() and time.monotonic() < deadline: "
+                "time.sleep(0.01)\n"
+                "raise SystemExit(0 if marker.exists() else 2)"
+            )
+
+            started_at = time.monotonic()
+            exit_code = _windows_job._run(
+                sys.executable,
+                [
+                    sys.executable,
+                    "-c",
+                    parent,
+                    child,
+                    str(started),
+                    str(completed),
+                ],
+            )
+            elapsed = time.monotonic() - started_at
+
+            self.assertEqual(0, exit_code)
+            self.assertTrue(completed.exists())
+            self.assertGreaterEqual(elapsed, 0.75)
+            self.assertLess(
+                elapsed,
+                WINDOWS_NATURAL_DRAIN_GRACE_MILLISECONDS / 1000 + 5,
+            )
+
     @unittest.skipUnless(os.name == "nt", "Windows Job Object integration")
     def test_real_job_terminates_a_descendant_left_by_the_target(self):
         with tempfile.TemporaryDirectory() as directory:
@@ -359,7 +404,7 @@ class WindowsJobTests(unittest.TestCase):
             child = (
                 "from pathlib import Path; import sys, time; "
                 "Path(sys.argv[1]).write_text('started'); "
-                "time.sleep(1); Path(sys.argv[2]).write_text('survived')"
+                "time.sleep(30); Path(sys.argv[2]).write_text('survived')"
             )
             parent = (
                 "from pathlib import Path; import subprocess, sys, time; "
@@ -387,7 +432,7 @@ class WindowsJobTests(unittest.TestCase):
                     ]
                 )
 
-            time.sleep(1.25)
+            time.sleep(0.25)
             self.assertFalse(survived.exists())
 
 

engineering_process-0.5.0/release.json

@@ -1,138 +0,0 @@
-{
-  "schemaVersion": 3,
-  "previousVersion": "0.4.0",
-  "version": "0.5.0",
-  "classification": "minor",
-  "compatibility": "incompatible",
-  "schemaImpact": "breaking",
-  "migration": "fail-on-verification-diagnostics: Fix canonical-command warnings/errors. Emit verification schema 3 and supplemental schema 2; retain verification 1/2 and supplemental 1 only as history. Never suppress or down-convert.; federated-process-improvement: Must adopt cross-repo-change; classify governed failures/findings; consumers await disposition, immutable release, exact reproduction. Released lifecycle/evidence readers retain historical meaning.; restore-pre-pr-review-invariant: Adopt publish-change and process-graph validation. Require host semantic review before completion, validated evidence before PR publication, and old-authority introduction before trust-root cutover.; standing-gated-automation: Install .process/automation.json. Keep provider automerge off before completion; emit proposal policy/evidence schema 2 for standing merge. Schema 1 remains human-only. Enable auto-merge/exact checks; escalate unavailable capability.",
-  "identity": {
-    "package": "engineering-process",
-    "distribution": "engineering_process",
-    "tag": "v0.5.0",
-    "releaseName": "v0.5.0",
-    "runtimeVersion": {
-      "path": "engineering_process/__init__.py",
-      "variable": "VERSION"
-    },
-    "artifacts": [
-      "engineering_process-0.5.0-py3-none-any.whl",
-      "engineering_process-0.5.0.tar.gz"
-    ],
-    "receiptAsset": "engineering-process-v0.5.0-evidence.json",
-    "authorizationAsset": null
-  },
-  "provenance": {
-    "mode": "governed",
-    "statement": "The public N-1 lifecycle receipt and reviewed Release PR authorize this release.",
-    "lifecycleReceipt": {
-      "asset": "engineering-process-v0.5.0-evidence.json",
-      "project": "engineering-process",
-      "changeId": "release-0-5-0",
-      "cycle": 1
-    }
-  },
-  "changes": [
-    {
-      "id": "configure-release-push-credentials",
-      "type": "fix",
-      "surfaces": [
-        "publication",
-        "workflow"
-      ],
-      "rationale": "Configure GitHub CLI as Git's credential helper only in the final publication step so the short-lived App token can push the exact reviewed candidate without persistent checkout credentials or token-bearing URLs, headers, arguments, or config values."
-    },
-    {
-      "id": "controlled-automation-proposals",
-      "type": "capability",
-      "surfaces": [
-        "cli",
-        "publication",
-        "schema",
-        "skills"
-      ],
-      "rationale": "Add an explicit strict-default policy contract for untrusted dependency proposals and an exact-head lifecycle-completion merge gate without granting proposal creation semantic or merge authority. Before enabling it, consumers must adopt the immutable capability release in a completed lifecycle, add the protected-base opt-in policy in a separate completed change, pin an immutable verifier, and require the canonical completion check."
-    },
-    {
-      "id": "fail-on-verification-diagnostics",
-      "type": "breaking",
-      "surfaces": [
-        "command-execution",
-        "supplemental-verification",
-        "verification-evidence"
-      ],
-      "rationale": "Process-owned commands now fail on classified warning or error diagnostics even when the child exits zero, and current verification and supplemental evidence require redacted diagnostic summaries."
-    },
-    {
-      "id": "federated-process-improvement",
-      "type": "breaking",
-      "surfaces": [
-        "cli",
-        "governance",
-        "lifecycle",
-        "schema",
-        "skills"
-      ],
-      "rationale": "Make evolve-process the mandatory owner of improvement-required, route shared consumer cases through improvement-pending, add a transport-neutral signal/disposition/resolution/reproduction chain and producer recurrence catalog, and block verification, completion, and publication until the applicable local or federated proof is explicit."
-    },
-    {
-      "id": "fix-windows-verification-boundary",
-      "type": "fix",
-      "surfaces": [
-        "command-execution",
-        "verification"
-      ],
-      "rationale": "Propagate typed Windows descendant-cleanup results through a private bounded helper channel, route the public-action installer and N+1 standalone adoption runner through the current protocol, and make every managed producer test fixture independent of inherited Git line-ending conversion policy."
-    },
-    {
-      "id": "preserve-release-generator-outputs",
-      "type": "fix",
-      "surfaces": [
-        "publication",
-        "workflow"
-      ],
-      "rationale": "Commit every deterministic prepare-release output, declare the complete generated path set in the release lifecycle plan, and fail before bundling when tracked, staged, or untracked candidate residue remains."
-    },
-    {
-      "id": "recover-published-release-evidence",
-      "type": "fix",
-      "surfaces": [
-        "publication",
-        "workflow"
-      ],
-      "rationale": "Keep the exact pre-publication completion artifact as the primary release evidence source, but let recovery of an already published immutable release restore the same declared evidence asset when that ephemeral artifact is absent; draft, mutable, incomplete, or invalid releases still fail closed."
-    },
-    {
-      "id": "restore-pre-pr-review-invariant",
-      "type": "breaking",
-      "surfaces": [
-        "cli",
-        "distribution",
-        "skills",
-        "workflow"
-      ],
-      "rationale": "Restore semantic checkpoint review before PR publication, prevent static checks from fabricating approval, make publication a mandatory core skill, add a runtime-bound process graph, and define safe self-hosted authority rotation."
-    },
-    {
-      "id": "separate-release-comparison-bases",
-      "type": "fix",
-      "surfaces": [
-        "publication",
-        "workflow"
-      ],
-      "rationale": "Validate the candidate's immediate protected-main parent against source publication while independently validating completion evidence against the previous-release comparison base owned by the generated lifecycle contract."
-    },
-    {
-      "id": "standing-gated-automation",
-      "type": "breaking",
-      "surfaces": [
-        "governance",
-        "publication",
-        "schema",
-        "skills",
-        "workflow"
-      ],
-      "rationale": "Replace the hard-coded human-only merge terminal with project-owned standing authorization for every routine post-gate operation, including exact-head merge, release, deployment, adoption, and ephemeral cleanup; escalation is limited to unavailable capability, exhausted bounded recovery, or a missing material decision."
-    }
-  ]
-}