engineering-process 1.2.0__tar.gz → 1.2.2__tar.gz

{engineering_process-1.2.0/engineering_process.egg-info → engineering_process-1.2.2}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: engineering-process
-Version: 1.2.0
+Version: 1.2.2
 Summary: A small agent-neutral engineering lifecycle with managed adoption
 License-Expression: MIT
 Project-URL: Homepage, https://github.com/phuongnse/engineering-process
@@ -422,6 +422,10 @@ review identities.
 It rejects missing, repeated, misplaced, hidden, unordered, or unsupported visible
 structure. Completion checkboxes belong only to the Completion gate section. Ready
 pull requests must have every checkbox checked; drafts may retain unchecked work.
+One trailing `Refs ISSUE.` line remains optional. A ready, contract-identified final
+consumer adoption may instead use `Closes ISSUE, closes OWNER/REPOSITORY#NUMBER.` with
+the complete keyword/reference syntax repeated for every issue; drafts cannot close
+issues. Producer and intermediate pull requests do not close release-source issues.
 The managed template never solicits execution identity,
 and authors plus independent review keep it out of free-form values. The validator is
 a positive grammar for public fields; it deliberately does not guess identities from

{engineering_process-1.2.0 → engineering_process-1.2.2}/README.md

@@ -398,6 +398,10 @@ review identities.
 It rejects missing, repeated, misplaced, hidden, unordered, or unsupported visible
 structure. Completion checkboxes belong only to the Completion gate section. Ready
 pull requests must have every checkbox checked; drafts may retain unchecked work.
+One trailing `Refs ISSUE.` line remains optional. A ready, contract-identified final
+consumer adoption may instead use `Closes ISSUE, closes OWNER/REPOSITORY#NUMBER.` with
+the complete keyword/reference syntax repeated for every issue; drafts cannot close
+issues. Producer and intermediate pull requests do not close release-source issues.
 The managed template never solicits execution identity,
 and authors plus independent review keep it out of free-form values. The validator is
 a positive grammar for public fields; it deliberately does not guess identities from

{engineering_process-1.2.0 → engineering_process-1.2.2}/engineering_process/__init__.py

@@ -1,3 +1,3 @@
 """Agent-neutral engineering process."""
 
-VERSION = "1.2.0"
+VERSION = "1.2.2"

{engineering_process-1.2.0 → engineering_process-1.2.2}/engineering_process/distribution.py

@@ -65,12 +65,17 @@ def skill_names(root: Path) -> tuple[str, ...]:
     return names
 
 
+def _ordered_paths(root: Path, paths: Iterable[Path]) -> list[Path]:
+    return sorted(paths, key=lambda path: path.relative_to(root).as_posix())
+
+
 def _asset_paths(root: Path) -> Iterable[tuple[str, Path]]:
     skill_directory = skills_root(root)
-    for path in sorted(skill_directory.rglob("*")):
+    for path in _ordered_paths(skill_directory, skill_directory.rglob("*")):
         if path.is_file():
             yield f"skills/{path.relative_to(skill_directory).as_posix()}", path
-    for path in sorted(schemas_root(root).glob("*.json")):
+    schema_directory = schemas_root(root)
+    for path in _ordered_paths(schema_directory, schema_directory.glob("*.json")):
         yield f"schemas/{path.name}", path
     for name in (
         "AGENTS.process.md",
@@ -110,7 +115,7 @@ def distribution_digest(root: Path) -> str:
 
 def skill_digest(path: Path) -> str:
     digest = hashlib.sha256()
-    for file_path in sorted(path.rglob("*")):
+    for file_path in _ordered_paths(path, path.rglob("*")):
         if not file_path.is_file() or file_path.name == ".engineering-process.json":
             continue
         relative = file_path.relative_to(path).as_posix().encode("utf-8")

{engineering_process-1.2.0 → engineering_process-1.2.2}/engineering_process/publication_compat.py

@@ -53,8 +53,9 @@ PR_CHECKS = (
 )
 FENCE = re.compile(r"^ {0,3}(`{3,}|~{3,})(.*)$")
 NON_MARKDOWN_LINE_SEPARATOR = re.compile("[\v\f\x85\u2028\u2029]")
+ISSUE_TARGET = r"(?:[A-Za-z0-9_.-]+/[A-Za-z0-9_.-]+)?#[1-9][0-9]*"
 ISSUE_REFERENCE = re.compile(
-    r"^Refs (?:[A-Za-z0-9_.-]+/[A-Za-z0-9_.-]+)?#[1-9][0-9]*\.$"
+    rf"^(?:Refs {ISSUE_TARGET}|Closes {ISSUE_TARGET}(?:, closes {ISSUE_TARGET})*)\.$"
 )
 
 
@@ -232,6 +233,10 @@ def _pull_request_body_issues(body: str, state: str) -> list[str]:
         and reference_positions[0] <= checklist_positions[-1]
     ):
         issues.append("pull request body issue reference must follow the checklist")
+    if state == "draft" and any(
+        lines[position].startswith("Closes ") for position in reference_positions
+    ):
+        issues.append("draft pull request cannot close issues")
     field_patterns = tuple(
         re.compile(rf"^- {re.escape(field)}:\s*.*$")
         for fields in PR_FIELDS.values()

{engineering_process-1.2.0 → engineering_process-1.2.2/engineering_process.egg-info}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: engineering-process
-Version: 1.2.0
+Version: 1.2.2
 Summary: A small agent-neutral engineering lifecycle with managed adoption
 License-Expression: MIT
 Project-URL: Homepage, https://github.com/phuongnse/engineering-process
@@ -422,6 +422,10 @@ review identities.
 It rejects missing, repeated, misplaced, hidden, unordered, or unsupported visible
 structure. Completion checkboxes belong only to the Completion gate section. Ready
 pull requests must have every checkbox checked; drafts may retain unchecked work.
+One trailing `Refs ISSUE.` line remains optional. A ready, contract-identified final
+consumer adoption may instead use `Closes ISSUE, closes OWNER/REPOSITORY#NUMBER.` with
+the complete keyword/reference syntax repeated for every issue; drafts cannot close
+issues. Producer and intermediate pull requests do not close release-source issues.
 The managed template never solicits execution identity,
 and authors plus independent review keep it out of free-form values. The validator is
 a positive grammar for public fields; it deliberately does not guess identities from

{engineering_process-1.2.0 → engineering_process-1.2.2}/engineering_process.egg-info/SOURCES.txt

@@ -63,6 +63,7 @@ tests/test_automation.py
 tests/test_cli.py
 tests/test_commands.py
 tests/test_contracts.py
+tests/test_distribution.py
 tests/test_lifecycle.py
 tests/test_production_engineering.py
 tests/test_publication_compat.py

{engineering_process-1.2.0 → engineering_process-1.2.2}/process_assets/skills/finish-change/SKILL.md

@@ -15,6 +15,12 @@ The command writes one bounded completion receipt and marks the run completed.
 Completion does not itself grant merge, deployment, or release authority; those
 remain project-owned operations. Never report completion from prose alone.
 
+Use a normal trailing `Refs ISSUE.` line for producer and intermediate pull requests.
+Only a contract-identified final consumer adoption that has verified the released
+behavior may use `Closes ISSUE, closes ISSUE.` after the completed public checklist.
+Repeat the full keyword and local or `OWNER/REPOSITORY#NUMBER` reference for every
+issue; never close source issues merely because the producer release merged.
+
 Report the readiness capabilities protected or advanced and the remaining planned
 gaps after completion. Carry the owner and stable record URL for every accepted-risk
 or tracked-follow-up disposition into the durable handoff. Finish never edits

{engineering_process-1.2.0 → engineering_process-1.2.2}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "setuptools.build_meta"
 
 [project]
 name = "engineering-process"
-version = "1.2.0"
+version = "1.2.2"
 description = "A small agent-neutral engineering lifecycle with managed adoption"
 readme = "README.md"
 license = "MIT"

{engineering_process-1.2.0 → engineering_process-1.2.2}/templates/PULL_REQUEST_TEMPLATE.md

@@ -34,4 +34,6 @@ tracked-follow-up entries need an owner and durable HTTPS record. -->
 - [ ] Required profiles pass on the reviewed snapshot.
 - [ ] Independent review approved with no blocking finding.
 - [ ] Every non-blocking finding has a recorded disposition.
+<!-- Producer/intermediate PR: Refs ISSUE. Final verified consumer adoption only:
+Closes ISSUE, closes OWNER/REPOSITORY#NUMBER. Repeat the keyword for every issue. -->
 <!-- engineering-process:pr-description:end -->

{engineering_process-1.2.0 → engineering_process-1.2.2}/tests/test_automation.py

@@ -55,6 +55,8 @@ class AutomationTests(unittest.TestCase):
             template.index("## Completion gate"),
         )
         self.assertIn("Every non-blocking finding has a recorded disposition.", template)
+        self.assertIn("Final verified consumer adoption only", template)
+        self.assertIn("Closes ISSUE, closes OWNER/REPOSITORY#NUMBER", template)
 
     def test_renovate_process_rule_materializes_the_complete_adoption(self) -> None:
         config = json.loads((ROOT / ".github" / "renovate.json").read_text(encoding="utf-8"))
@@ -104,6 +106,15 @@ class AutomationTests(unittest.TestCase):
         )
         self.assertIn("needs: [metadata, publish]", workflow)
         self.assertIn("Verify PyPI exposes the exact built hashes", workflow)
+        visibility = workflow.split(
+            "      - name: Verify PyPI exposes the exact built hashes\n", maxsplit=1
+        )[1].split("      - name: Create short-lived release token\n", maxsplit=1)[0]
+        self.assertIn("for attempt in range(12)", visibility)
+        self.assertIn('"Accept": "application/vnd.pypi.simple.v1+json"', visibility)
+        self.assertIn(
+            "if actual == expected and simple_actual == expected:", visibility
+        )
+        self.assertIn("PyPI Simple API did not return PEP 691 JSON", visibility)
         self.assertIn("SOURCE_DATE_EPOCH", workflow)
         self.assertIn("verification/normalize_sdist.py", workflow)
         self.assertIn("points to a different commit", workflow)

engineering_process-1.2.2/tests/test_distribution.py

@@ -0,0 +1,54 @@
+from __future__ import annotations
+
+import hashlib
+from pathlib import Path
+import tempfile
+import unittest
+
+from engineering_process.distribution import distribution_digest, skill_digest
+
+
+def framed_digest(entries: list[tuple[str, bytes]]) -> str:
+    digest = hashlib.sha256()
+    for relative, data in entries:
+        encoded = relative.encode("utf-8")
+        digest.update(len(encoded).to_bytes(4, "big"))
+        digest.update(encoded)
+        digest.update(len(data).to_bytes(8, "big"))
+        digest.update(data)
+    return "sha256:" + digest.hexdigest()
+
+
+class DistributionTests(unittest.TestCase):
+    def test_digests_follow_canonical_relative_posix_order(self) -> None:
+        entries = [
+            ("skills/sample/SKILL.md", b"skill\n"),
+            ("skills/sample/invariants.json", b"{}\n"),
+            ("schemas/sample.json", b"{}\n"),
+            ("templates/AGENTS.process.md", b"agents\n"),
+            ("templates/PULL_REQUEST_TEMPLATE.md", b"pull request\n"),
+            ("templates/adopt-process.py", b"adopt\n"),
+            ("templates/adopt-process-windows-job.py", b"windows\n"),
+            ("process-graph.json", b"{}\n"),
+        ]
+        with tempfile.TemporaryDirectory() as directory:
+            root = Path(directory)
+            for relative, data in entries:
+                path = root / relative.replace("skills/", "process_assets/skills/", 1)
+                path.parent.mkdir(parents=True, exist_ok=True)
+                path.write_bytes(data)
+
+            self.assertEqual(framed_digest(entries), distribution_digest(root))
+            self.assertEqual(
+                framed_digest(
+                    [
+                        ("SKILL.md", b"skill\n"),
+                        ("invariants.json", b"{}\n"),
+                    ]
+                ),
+                skill_digest(root / "process_assets" / "skills" / "sample"),
+            )
+
+
+if __name__ == "__main__":
+    unittest.main()

{engineering_process-1.2.0 → engineering_process-1.2.2}/tests/test_publication_compat.py

@@ -290,6 +290,42 @@ class PublicationCompatibilityTests(unittest.TestCase):
             self.validate_body(repeated),
         )
 
+    def test_final_adoption_can_close_multiple_issues_only_when_ready(self) -> None:
+        closing = (
+            f"{CANONICAL_BODY}\n"
+            "Closes example/process#123, closes #456, closes other/repository#789.\n"
+        )
+        self.assertEqual([], self.validate_body(closing))
+        self.assertIn(
+            "draft pull request cannot close issues",
+            self.validate_body(closing, state="draft"),
+        )
+
+        unchecked = closing.replace(
+            "- [x] Required profiles", "- [ ] Required profiles", 1
+        )
+        self.assertIn(
+            "ready pull request has unchecked item: Required profiles pass on the reviewed snapshot.",
+            self.validate_body(unchecked),
+        )
+
+        for malformed in (
+            "Closes example/process#123, #456.",
+            "Closes example/process#123, Closes #456.",
+            "Fixes example/process#123.",
+            "Closes example/process#0.",
+        ):
+            with self.subTest(malformed=malformed):
+                issues = self.validate_body(f"{CANONICAL_BODY}\n{malformed}\n")
+                self.assertTrue(
+                    any(
+                        issue.startswith(
+                            "pull request body has unsupported visible content at line "
+                        )
+                        for issue in issues
+                    )
+                )
+
     def test_pull_request_ignores_template_comments(self) -> None:
         body = CANONICAL_BODY.replace(
             "- Outcome: Preserve the requested behavior.",

{engineering_process-1.2.0 → engineering_process-1.2.2}/tests/test_skills.py

@@ -78,6 +78,8 @@ class SkillTests(unittest.TestCase):
                 "Finish never edits\nreadiness",
                 "remaining planned\ngaps",
                 "owner and stable record URL",
+                "contract-identified final consumer adoption",
+                "Closes ISSUE, closes ISSUE",
             ),
             "improve-process": (
                 "new immutable pack version",