frostwork 0.1.0__tar.gz

frostwork-0.1.0/.github/dependabot.yml

@@ -0,0 +1,12 @@
+version: 2
+updates:
+  - package-ecosystem: github-actions
+    directory: "/"
+    schedule:
+      interval: monthly
+    groups:
+      github-actions:
+        patterns:
+          - "*"
+    cooldown:
+      default-days: 7

frostwork-0.1.0/.github/workflows/ci.yml

@@ -0,0 +1,149 @@
+name: ci
+
+on:
+  push:
+    branches: [main]
+  pull_request:
+
+permissions:
+  contents: read
+
+jobs:
+  version-sync:
+    name: Cargo/pyproject version match
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
+        with:
+          persist-credentials: false
+      # the version is double-sourced (Cargo.toml + pyproject.toml); assert they agree so a release
+      # tag can't ship a mismatch between the wheel metadata and the crate.
+      - name: assert versions match
+        run: |
+          cargo_v=$(grep -m1 '^version' Cargo.toml | sed -E 's/.*"(.*)".*/\1/')
+          py_v=$(grep -m1 '^version' pyproject.toml | sed -E 's/.*"(.*)".*/\1/')
+          echo "Cargo.toml=$cargo_v  pyproject.toml=$py_v"
+          test "$cargo_v" = "$py_v" || { echo "::error::version mismatch: $cargo_v != $py_v"; exit 1; }
+
+  rust:
+    name: cargo test + clippy
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
+        with:
+          persist-credentials: false
+      - uses: dtolnay/rust-toolchain@4360b52568e2003a75bf9bc1d59f33a8e3fc893c # stable
+        with:
+          components: clippy
+      - uses: Swatinem/rust-cache@6323deb102c322ba6fcbdcafc7e3dddab59af2b6 # v2.9.2
+      # `make test` = cargo test + clippy. The `python` feature is OFF here (it links libpython only
+      # under maturin); this builds the lib + differ/bench bins.
+      - run: make test
+
+  differential:
+    name: differential gate + python
+    runs-on: ubuntu-latest
+    # EVERY STEP IS A MAKE TARGET, and that is the point rather than a convenience: this job used to
+    # inline the same commands, and it drifted — `make ci` grew the sequence sweep and the generated-table
+    # drift check, and hosted CI ran neither, so the checks a contributor is told are mandatory were not
+    # the checks a pull request had to pass. Add a gate to the Makefile and it lands here for free.
+    steps:
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
+        with:
+          persist-credentials: false
+      - uses: dtolnay/rust-toolchain@4360b52568e2003a75bf9bc1d59f33a8e3fc893c # stable
+      - uses: Swatinem/rust-cache@6323deb102c322ba6fcbdcafc7e3dddab59af2b6 # v2.9.2
+      - uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97 # v7.0.0
+        with:
+          python-version: "3.12"
+      - run: python -m venv .venv
+      # pin the oracle exactly: an lxml/parsel upgrade silently moving the reference must be a
+      # deliberate bump, not an incidental one that quietly changes what "parity" means.
+      - run: .venv/bin/pip install -r requirements-test.txt
+      # The gates hosted CI runs are the gates `make ci` runs, by NAME rather than by a second copy of
+      # the command list. The copy had already drifted: three targets in the Makefile were missing here,
+      # which is the failure the meta-gates exist to catch, one level up.
+      #
+      # `make gate` — 0 non-whitespace DIVERGE + 0 CRASH vs lxml (flat AND grouped One/Many), then
+      # encoding parity. Builds the differ/bench bins the harness drives.
+      - run: make gate
+      # selector fuzz (no-fallback contract: empty OR equal to lxml, never non-empty-and-wrong) plus
+      # malformed-HTML fuzz (CRASH gated absolutely, NOVEL as a rate).
+      - run: make fuzz-smoke
+      # builds the extension, then: the Python surface, tests/test_gates.py (which seeds a regression
+      # into each gate's decision function and asserts it goes red), the support snapshot, the GENERATED
+      # rule tables against the oracle, every tree-construction rule cell against lxml, and mypy over the
+      # shipped package (its annotations are a promise to every user's type checker).
+      - run: make py
+      # value parity over PAGES rather than rules: the fixtures are shaped like the doc-generator and
+      # table markup that broke the engine while the generated gate read 100%.
+      - run: make gate-corpus
+      # TAG SEQUENCES, exhaustively, compared on the whole tree — the surface where the state at token N
+      # depends on tokens 1..N-1, which no (open x incoming) rule sweep can reach.
+      - run: make gate-seq
+      # The layer ABOVE the engine: does a page OBJECT return parsel's item? Five defects lived in that
+      # gap, three of them silent. Includes the derived upstream-surface snapshot.
+      - run: make gate-webpoet
+      # And the inverse: break one load-bearing line in webpoet.py, does any gate notice?
+      - run: make gate-webpoet-mutate
+
+  bindings:
+    name: bindings (py${{ matrix.python }} / ${{ matrix.os }})
+    # The heavy differential runs once (above) on 3.12/linux. This matrix only builds the extension and
+    # runs the Python suite, cheaply covering the newest CPython, the next prerelease one, and macOS. The
+    # abi3 FLOOR is a separate job below, and since the floor moved to 3.10 it runs this same suite rather
+    # than a stand-in.
+    strategy:
+      fail-fast: false
+      matrix:
+        include:
+          - { os: ubuntu-latest, python: "3.14" }
+          - { os: ubuntu-latest, python: "3.15", prerelease: true }
+          - { os: macos-latest, python: "3.12" }
+    runs-on: ${{ matrix.os }}
+    steps:
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
+        with:
+          persist-credentials: false
+      - uses: dtolnay/rust-toolchain@4360b52568e2003a75bf9bc1d59f33a8e3fc893c # stable
+      - uses: Swatinem/rust-cache@6323deb102c322ba6fcbdcafc7e3dddab59af2b6 # v2.9.2
+      - uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97 # v7.0.0
+        with:
+          python-version: ${{ matrix.python }}
+          allow-prereleases: ${{ matrix.prerelease || false }}
+      - run: python -m venv .venv
+      # lxml has no prebuilt wheel yet for a prerelease CPython either, so pip falls back to a source
+      # build, which needs these headers.
+      - if: matrix.prerelease
+        run: sudo apt-get update && sudo apt-get install -y libxml2-dev libxslt1-dev
+      - run: .venv/bin/pip install -r requirements-test.txt
+      # web-poet pulls two mypyc/C test deps whose published wheels don't load on a prerelease CPython
+      - if: matrix.prerelease
+        run: .venv/bin/pip install --force-reinstall --no-binary charset-normalizer,time-machine charset-normalizer time-machine
+      - run: .venv/bin/maturin develop --release
+      - run: .venv/bin/python -m pytest tests/test_python.py -q
+      - run: .venv/bin/python examples/basic.py  # keep the documented example runnable
+
+  abi3-floor:
+    name: abi3 floor (py3.10 / ubuntu-latest)
+    # The wheel is abi3-py310, so 3.10 must keep working. At the old 3.9 floor this job could not run the
+    # suite at all — `parsel`, `web-poet` and `pytest` each require >= 3.10, so it built the extension and
+    # ran tools/abi3_smoke.py (stdlib + frostwork only) as a stand-in. 3.10 is the first version where the
+    # pinned toolchain installs, so the floor now gets the SAME suite as every other interpreter, which is
+    # strictly more coverage than the smoke test it replaces.
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
+        with:
+          persist-credentials: false
+      - uses: dtolnay/rust-toolchain@4360b52568e2003a75bf9bc1d59f33a8e3fc893c # stable
+      - uses: Swatinem/rust-cache@6323deb102c322ba6fcbdcafc7e3dddab59af2b6 # v2.9.2
+      - uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97 # v7.0.0
+        with:
+          python-version: "3.10"
+      - run: python -m venv .venv
+      - run: .venv/bin/pip install -r requirements-test.txt
+      - run: .venv/bin/maturin develop --release
+      - run: .venv/bin/python -m pytest tests/ -q
+      - run: .venv/bin/python tools/abi3_smoke.py   # the wheel must also work with NO dependencies present
+      - run: .venv/bin/python examples/basic.py  # keep the documented example runnable

frostwork-0.1.0/.github/workflows/publish.yml

@@ -0,0 +1,164 @@
+name: publish
+
+on:
+  push:
+    tags:
+      - "[0-9]+.[0-9]+.[0-9]+"
+  workflow_dispatch:
+
+permissions:
+  contents: read
+
+jobs:
+  linux:
+    name: wheel (linux ${{ matrix.platform.target }} ${{ matrix.platform.libc }})
+    runs-on: ${{ matrix.platform.runner }}
+    strategy:
+      fail-fast: false
+      matrix:
+        platform:
+          - { runner: ubuntu-latest, target: x86_64, libc: manylinux, manylinux: auto }
+          - { runner: ubuntu-latest, target: x86, libc: manylinux, manylinux: auto }
+          - { runner: ubuntu-24.04-arm, target: aarch64, libc: manylinux, manylinux: auto }
+          - { runner: ubuntu-latest, target: armv7, libc: manylinux, manylinux: auto }
+          - { runner: ubuntu-latest, target: ppc64le, libc: manylinux, manylinux: auto }
+          - { runner: ubuntu-latest, target: riscv64, libc: manylinux, manylinux: auto }
+          - { runner: ubuntu-latest, target: x86_64, libc: musllinux, manylinux: musllinux_1_2 }
+          - { runner: ubuntu-24.04-arm, target: aarch64, libc: musllinux, manylinux: musllinux_1_2 }
+          - { runner: ubuntu-latest, target: armv7, libc: musllinux, manylinux: musllinux_1_2 }
+          - { runner: ubuntu-latest, target: ppc64le, libc: musllinux, manylinux: musllinux_1_2 }
+          - { runner: ubuntu-latest, target: riscv64, libc: musllinux, manylinux: musllinux_1_2 }
+    steps:
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
+        with:
+          persist-credentials: false
+      - uses: PyO3/maturin-action@e83996d129638aa358a18fbd1dfb82f0b0fb5d3b # v1.51.0
+        with:
+          target: ${{ matrix.platform.target }}
+          args: --release --out dist
+          manylinux: ${{ matrix.platform.manylinux }}
+      - uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
+        with:
+          name: wheels-${{ matrix.platform.libc }}-${{ matrix.platform.target }}
+          path: dist
+
+  macos:
+    name: wheel (macos ${{ matrix.target }})
+    runs-on: macos-latest
+    strategy:
+      fail-fast: false
+      matrix:
+        target: [x86_64, aarch64]
+    steps:
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
+        with:
+          persist-credentials: false
+      - uses: PyO3/maturin-action@e83996d129638aa358a18fbd1dfb82f0b0fb5d3b # v1.51.0
+        with:
+          target: ${{ matrix.target }}
+          args: --release --out dist
+      - uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
+        with:
+          name: wheels-macos-${{ matrix.target }}
+          path: dist
+
+  windows:
+    name: wheel (windows ${{ matrix.platform.target }})
+    runs-on: ${{ matrix.platform.runner }}
+    strategy:
+      fail-fast: false
+      matrix:
+        platform:
+          - { runner: windows-latest, target: x64, arch: x64 }
+          - { runner: windows-latest, target: x86, arch: x86 }
+          - { runner: windows-11-arm, target: aarch64, arch: arm64 }
+    steps:
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
+        with:
+          persist-credentials: false
+      - uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97 # v7.0.0
+        with:
+          python-version: "3.12"
+          architecture: ${{ matrix.platform.arch }}
+      - uses: PyO3/maturin-action@e83996d129638aa358a18fbd1dfb82f0b0fb5d3b # v1.51.0
+        with:
+          target: ${{ matrix.platform.target }}
+          args: --release --out dist
+      - uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
+        with:
+          name: wheels-windows-${{ matrix.platform.target }}
+          path: dist
+
+  sdist:
+    name: sdist
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
+        with:
+          persist-credentials: false
+      - uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97 # v7.0.0
+        with:
+          python-version: "3.12"
+      - uses: PyO3/maturin-action@e83996d129638aa358a18fbd1dfb82f0b0fb5d3b # v1.51.0
+        with:
+          command: sdist
+          args: --out dist
+      - name: build/install the actual sdist and run the Python suite
+        run: |
+          python -m pip install -r requirements-test.txt
+          python -m pip install --no-build-isolation dist/*.tar.gz
+          python -m pytest tests/test_python.py -q
+      - uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
+        with:
+          name: wheels-sdist
+          path: dist
+
+  smoke:
+    name: smoke-test built wheel (${{ matrix.artifact }})
+    needs: [linux, macos, windows, sdist]
+    strategy:
+      fail-fast: false
+      matrix:
+        include:
+          - { os: ubuntu-latest, artifact: wheels-manylinux-x86_64 }
+          - { os: ubuntu-24.04-arm, artifact: wheels-manylinux-aarch64 }
+          - { os: macos-latest, artifact: wheels-macos-aarch64 }
+          - { os: windows-latest, artifact: wheels-windows-x64 }
+          - { os: windows-11-arm, artifact: wheels-windows-aarch64 }
+    runs-on: ${{ matrix.os }}
+    steps:
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
+        with:
+          persist-credentials: false
+      - uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97 # v7.0.0
+        with:
+          python-version: "3.12"
+      - uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
+        with:
+          name: ${{ matrix.artifact }}
+          path: dist
+      - name: install the built wheel + test deps, then run the suite
+        shell: bash
+        run: |
+          python -m pip install --upgrade pip
+          python -m pip install -r requirements-test.txt
+          python -m pip install --no-index --find-links dist frostwork
+          python -m pytest tests/test_python.py -q
+
+  publish:
+    name: Publish to PyPI
+    runs-on: ubuntu-latest
+    needs: [linux, macos, windows, sdist, smoke]
+    if: startsWith(github.ref, 'refs/tags/')
+    environment:
+      name: pypi
+      url: https://pypi.org/p/frostwork
+    permissions:
+      id-token: write
+    steps:
+      - uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
+        with:
+          pattern: wheels-*
+          merge-multiple: true
+          path: dist
+      - uses: pypa/gh-action-pypi-publish@dc37677b2e1c63e2034f94d8a5b11f265b73ba33 # v1.14.2

frostwork-0.1.0/.gitignore

@@ -0,0 +1,15 @@
+/target
+__pycache__/
+*.pyc
+.venv/
+/fixtures/
+# Python / maturin build artifacts
+*.so
+/dist
+/build
+*.egg-info/
+.pytest_cache/
+# Generated benchmark results (machine-specific paths; docs/BENCHMARKS.md is canonical)
+/tools/results/
+# Fuzzer run logs (fuzz.sh output, one per worker)
+/fuzz-*.log

frostwork-0.1.0/.pre-commit-config.yaml

@@ -0,0 +1,10 @@
+repos:
+- repo: https://github.com/rhysd/actionlint
+  rev: v1.7.12
+  hooks:
+    - id: actionlint
+- repo: https://github.com/zizmorcore/zizmor-pre-commit
+  rev: v1.29.0
+  hooks:
+    - id: zizmor
+      args: [--no-progress, --fix]