engineering-process 1.2.0__tar.gz → 1.2.1__tar.gz

{engineering_process-1.2.0/engineering_process.egg-info → engineering_process-1.2.1}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: engineering-process
-Version: 1.2.0
+Version: 1.2.1
 Summary: A small agent-neutral engineering lifecycle with managed adoption
 License-Expression: MIT
 Project-URL: Homepage, https://github.com/phuongnse/engineering-process

{engineering_process-1.2.0 → engineering_process-1.2.1}/engineering_process/__init__.py

@@ -1,3 +1,3 @@
 """Agent-neutral engineering process."""
 
-VERSION = "1.2.0"
+VERSION = "1.2.1"

{engineering_process-1.2.0 → engineering_process-1.2.1}/engineering_process/distribution.py

@@ -65,12 +65,17 @@ def skill_names(root: Path) -> tuple[str, ...]:
     return names
 
 
+def _ordered_paths(root: Path, paths: Iterable[Path]) -> list[Path]:
+    return sorted(paths, key=lambda path: path.relative_to(root).as_posix())
+
+
 def _asset_paths(root: Path) -> Iterable[tuple[str, Path]]:
     skill_directory = skills_root(root)
-    for path in sorted(skill_directory.rglob("*")):
+    for path in _ordered_paths(skill_directory, skill_directory.rglob("*")):
         if path.is_file():
             yield f"skills/{path.relative_to(skill_directory).as_posix()}", path
-    for path in sorted(schemas_root(root).glob("*.json")):
+    schema_directory = schemas_root(root)
+    for path in _ordered_paths(schema_directory, schema_directory.glob("*.json")):
         yield f"schemas/{path.name}", path
     for name in (
         "AGENTS.process.md",
@@ -110,7 +115,7 @@ def distribution_digest(root: Path) -> str:
 
 def skill_digest(path: Path) -> str:
     digest = hashlib.sha256()
-    for file_path in sorted(path.rglob("*")):
+    for file_path in _ordered_paths(path, path.rglob("*")):
         if not file_path.is_file() or file_path.name == ".engineering-process.json":
             continue
         relative = file_path.relative_to(path).as_posix().encode("utf-8")

{engineering_process-1.2.0 → engineering_process-1.2.1/engineering_process.egg-info}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: engineering-process
-Version: 1.2.0
+Version: 1.2.1
 Summary: A small agent-neutral engineering lifecycle with managed adoption
 License-Expression: MIT
 Project-URL: Homepage, https://github.com/phuongnse/engineering-process

{engineering_process-1.2.0 → engineering_process-1.2.1}/engineering_process.egg-info/SOURCES.txt

@@ -63,6 +63,7 @@ tests/test_automation.py
 tests/test_cli.py
 tests/test_commands.py
 tests/test_contracts.py
+tests/test_distribution.py
 tests/test_lifecycle.py
 tests/test_production_engineering.py
 tests/test_publication_compat.py

{engineering_process-1.2.0 → engineering_process-1.2.1}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "setuptools.build_meta"
 
 [project]
 name = "engineering-process"
-version = "1.2.0"
+version = "1.2.1"
 description = "A small agent-neutral engineering lifecycle with managed adoption"
 readme = "README.md"
 license = "MIT"

{engineering_process-1.2.0 → engineering_process-1.2.1}/tests/test_automation.py

@@ -104,6 +104,15 @@ class AutomationTests(unittest.TestCase):
         )
         self.assertIn("needs: [metadata, publish]", workflow)
         self.assertIn("Verify PyPI exposes the exact built hashes", workflow)
+        visibility = workflow.split(
+            "      - name: Verify PyPI exposes the exact built hashes\n", maxsplit=1
+        )[1].split("      - name: Create short-lived release token\n", maxsplit=1)[0]
+        self.assertIn("for attempt in range(12)", visibility)
+        self.assertIn('"Accept": "application/vnd.pypi.simple.v1+json"', visibility)
+        self.assertIn(
+            "if actual == expected and simple_actual == expected:", visibility
+        )
+        self.assertIn("PyPI Simple API did not return PEP 691 JSON", visibility)
         self.assertIn("SOURCE_DATE_EPOCH", workflow)
         self.assertIn("verification/normalize_sdist.py", workflow)
         self.assertIn("points to a different commit", workflow)

engineering_process-1.2.1/tests/test_distribution.py

@@ -0,0 +1,54 @@
+from __future__ import annotations
+
+import hashlib
+from pathlib import Path
+import tempfile
+import unittest
+
+from engineering_process.distribution import distribution_digest, skill_digest
+
+
+def framed_digest(entries: list[tuple[str, bytes]]) -> str:
+    digest = hashlib.sha256()
+    for relative, data in entries:
+        encoded = relative.encode("utf-8")
+        digest.update(len(encoded).to_bytes(4, "big"))
+        digest.update(encoded)
+        digest.update(len(data).to_bytes(8, "big"))
+        digest.update(data)
+    return "sha256:" + digest.hexdigest()
+
+
+class DistributionTests(unittest.TestCase):
+    def test_digests_follow_canonical_relative_posix_order(self) -> None:
+        entries = [
+            ("skills/sample/SKILL.md", b"skill\n"),
+            ("skills/sample/invariants.json", b"{}\n"),
+            ("schemas/sample.json", b"{}\n"),
+            ("templates/AGENTS.process.md", b"agents\n"),
+            ("templates/PULL_REQUEST_TEMPLATE.md", b"pull request\n"),
+            ("templates/adopt-process.py", b"adopt\n"),
+            ("templates/adopt-process-windows-job.py", b"windows\n"),
+            ("process-graph.json", b"{}\n"),
+        ]
+        with tempfile.TemporaryDirectory() as directory:
+            root = Path(directory)
+            for relative, data in entries:
+                path = root / relative.replace("skills/", "process_assets/skills/", 1)
+                path.parent.mkdir(parents=True, exist_ok=True)
+                path.write_bytes(data)
+
+            self.assertEqual(framed_digest(entries), distribution_digest(root))
+            self.assertEqual(
+                framed_digest(
+                    [
+                        ("SKILL.md", b"skill\n"),
+                        ("invariants.json", b"{}\n"),
+                    ]
+                ),
+                skill_digest(root / "process_assets" / "skills" / "sample"),
+            )
+
+
+if __name__ == "__main__":
+    unittest.main()