patchshuttle 0.1.0a2__tar.gz

patchshuttle-0.1.0a2/.github/workflows/ci.yml

@@ -0,0 +1,83 @@
+name: CI
+
+"on":
+  push:
+  pull_request:
+  workflow_dispatch:
+
+permissions:
+  contents: read
+
+concurrency:
+  group: ci-${{ github.workflow }}-${{ github.ref }}
+  cancel-in-progress: true
+
+jobs:
+  test:
+    name: ${{ matrix.os }} / Python ${{ matrix.python-version }}
+    runs-on: ${{ matrix.os }}
+    timeout-minutes: 20
+    strategy:
+      fail-fast: false
+      matrix:
+        include:
+          - os: ubuntu-24.04
+            python-version: "3.10"
+          - os: ubuntu-24.04
+            python-version: "3.12"
+          - os: ubuntu-24.04
+            python-version: "3.14"
+          - os: windows-2025
+            python-version: "3.12"
+          - os: windows-2025
+            python-version: "3.14"
+    steps:
+      - uses: actions/checkout@v7.0.1
+      - uses: actions/setup-python@v7.0.0
+        with:
+          python-version: ${{ matrix.python-version }}
+          cache: pip
+          cache-dependency-path: pyproject.toml
+      - name: Install development environment
+        run: |
+          python -m pip install --upgrade pip
+          python -m pip install -e ".[dev]"
+      - name: Check import ordering
+        run: python -m isort --check-only src tests tools
+      - name: Check formatting
+        run: python -m black --check src tests tools
+      - name: Run tests with branch coverage
+        run: |
+          python -m coverage erase
+          python -m coverage run -m pytest -q
+          python -m coverage report --fail-under=100
+
+  package:
+    name: Build and smoke-test distributions
+    needs: test
+    runs-on: ubuntu-24.04
+    timeout-minutes: 20
+    steps:
+      - uses: actions/checkout@v7.0.1
+      - uses: actions/setup-python@v7.0.0
+        with:
+          python-version: "3.12"
+          cache: pip
+          cache-dependency-path: pyproject.toml
+      - name: Build distributions
+        run: |
+          python -m pip install --upgrade pip
+          python -m pip install build twine
+          python -m build
+          python -m twine check dist/*
+          python tools/release_checks.py dist
+      - name: Smoke-test wheel
+        run: >-
+          python tools/wheel_smoke.py dist/*.whl
+          --version "$(python -c 'from pathlib import Path; from tools.check_tag import source_version; print(source_version(Path.cwd()))')"
+      - uses: actions/upload-artifact@v7.0.1
+        with:
+          name: patchshuttle-distributions
+          path: dist/*
+          if-no-files-found: error
+          retention-days: 14

patchshuttle-0.1.0a2/.github/workflows/release.yml

@@ -0,0 +1,83 @@
+name: Release to PyPI
+
+"on":
+  release:
+    types: [published]
+
+permissions:
+  contents: read
+
+jobs:
+  build:
+    runs-on: ubuntu-24.04
+    timeout-minutes: 25
+    steps:
+      - uses: actions/checkout@v7.0.1
+        with:
+          ref: ${{ github.event.release.tag_name }}
+      - uses: actions/setup-python@v7.0.0
+        with:
+          python-version: "3.12"
+          cache: pip
+          cache-dependency-path: pyproject.toml
+      - name: Require tag and source version to match
+        env:
+          RELEASE_TAG: ${{ github.event.release.tag_name }}
+        run: python tools/check_tag.py "$RELEASE_TAG"
+      - name: Test, build, and validate distributions
+        run: |
+          python -m pip install --upgrade pip
+          python -m pip install -e ".[dev]"
+          python -m isort --check-only src tests tools
+          python -m black --check src tests tools
+          python -m coverage erase
+          python -m coverage run -m pytest -q
+          python -m coverage report --fail-under=100
+          python -m build
+          python -m twine check dist/*
+          python tools/release_checks.py dist
+      - name: Smoke-test wheel
+        env:
+          RELEASE_VERSION: ${{ github.event.release.tag_name }}
+        run: >-
+          python tools/wheel_smoke.py dist/*.whl
+          --version "${RELEASE_VERSION#v}"
+      - uses: actions/upload-artifact@v7.0.1
+        with:
+          name: patchshuttle-release-distributions
+          path: |
+            dist/*.whl
+            dist/*.tar.gz
+          if-no-files-found: error
+          retention-days: 30
+
+  publish:
+    needs: build
+    runs-on: ubuntu-24.04
+    timeout-minutes: 10
+    environment: pypi
+    permissions:
+      contents: read
+      id-token: write
+    steps:
+      - uses: actions/download-artifact@v8.0.1
+        with:
+          name: patchshuttle-release-distributions
+          path: dist
+      - uses: pypa/gh-action-pypi-publish@release/v1
+
+  verify:
+    needs: publish
+    runs-on: ubuntu-24.04
+    timeout-minutes: 10
+    steps:
+      - uses: actions/checkout@v7.0.1
+        with:
+          ref: ${{ github.event.release.tag_name }}
+      - uses: actions/setup-python@v7.0.0
+        with:
+          python-version: "3.12"
+      - name: Install exact PyPI release and run smoke test
+        env:
+          RELEASE_VERSION: ${{ github.event.release.tag_name }}
+        run: python tools/index_smoke.py pypi --version "${RELEASE_VERSION#v}"

patchshuttle-0.1.0a2/.github/workflows/testpypi.yml

@@ -0,0 +1,74 @@
+name: Publish to TestPyPI
+
+"on":
+  workflow_dispatch:
+
+permissions:
+  contents: read
+
+jobs:
+  build:
+    runs-on: ubuntu-24.04
+    timeout-minutes: 20
+    steps:
+      - uses: actions/checkout@v7.0.1
+      - uses: actions/setup-python@v7.0.0
+        with:
+          python-version: "3.12"
+          cache: pip
+          cache-dependency-path: pyproject.toml
+      - name: Build and validate distributions
+        run: |
+          python -m pip install --upgrade pip
+          python -m pip install -e ".[dev]"
+          python -m isort --check-only src tests tools
+          python -m black --check src tests tools
+          python -m coverage erase
+          python -m coverage run -m pytest -q
+          python -m coverage report --fail-under=100
+          python -m build
+          python -m twine check dist/*
+          python tools/release_checks.py dist
+      - name: Smoke-test wheel
+        run: >-
+          python tools/wheel_smoke.py dist/*.whl
+          --version "$(python -c 'from pathlib import Path; from tools.check_tag import source_version; print(source_version(Path.cwd()))')"
+      - uses: actions/upload-artifact@v7.0.1
+        with:
+          name: patchshuttle-testpypi-distributions
+          path: |
+            dist/*.whl
+            dist/*.tar.gz
+          if-no-files-found: error
+          retention-days: 14
+
+  publish:
+    needs: build
+    runs-on: ubuntu-24.04
+    timeout-minutes: 10
+    environment: testpypi
+    permissions:
+      contents: read
+      id-token: write
+    steps:
+      - uses: actions/download-artifact@v8.0.1
+        with:
+          name: patchshuttle-testpypi-distributions
+          path: dist
+      - uses: pypa/gh-action-pypi-publish@release/v1
+        with:
+          repository-url: https://test.pypi.org/legacy/
+
+  verify:
+    needs: publish
+    runs-on: ubuntu-24.04
+    timeout-minutes: 10
+    steps:
+      - uses: actions/checkout@v7.0.1
+      - uses: actions/setup-python@v7.0.0
+        with:
+          python-version: "3.12"
+      - name: Install exact TestPyPI release and run smoke test
+        run: >-
+          python tools/index_smoke.py testpypi
+          --version "$(python -c 'from pathlib import Path; from tools.check_tag import source_version; print(source_version(Path.cwd()))')"

patchshuttle-0.1.0a2/.gitignore

@@ -0,0 +1,30 @@
+# Python bytecode and caches
+__pycache__/
+*.py[cod]
+.pytest_cache/
+.mypy_cache/
+.ruff_cache/
+.coverage
+htmlcov/
+
+# Virtual environments
+.venv/
+venv/
+
+# Build output
+build/
+dist/
+*.egg-info/
+
+# Editors and operating systems
+.idea/
+.vscode/
+.DS_Store
+Thumbs.db
+
+# PatchShuttle runtime data generated while developing PatchShuttle itself
+patches/applied/
+patches/backups/
+patches/failed/
+patches/logs/
+patches/state/

patchshuttle-0.1.0a2/CHANGELOG.md

@@ -0,0 +1,55 @@
+# Changelog
+
+All notable changes to PatchShuttle are recorded in this file. The project
+uses semantic versioning, including Python-compatible pre-release versions.
+
+## 0.1.0a2 - 2026-08-13
+
+First release candidate prepared for external CI and TestPyPI qualification.
+
+### Added
+
+- Existing-project and empty-directory initialization with stable project IDs.
+- Protocol 1 YAML jobs and equivalent immutable Python constructors.
+- Bounded `audit`, transactional `patch`, and one-pass `verify` workflows.
+- All v0.1 text actions, controlled Python, pytest, unittest, Django, import,
+  and locally configured checks.
+- Per-job backups, automatic rollback, guarded manual rollback, and explicit
+  `--keep-changes` failure handling.
+- Changed-Python-only isort followed by Black, with final check reruns.
+- Workspace inventory comparison and unexpected side-effect reporting.
+- Fixed-section timestamped logs, exact job archives, registry idempotency,
+  project snapshots, and compact AI handoffs.
+- Integration, end-to-end, wheel smoke, release validation, and index smoke
+  tests.
+- GitHub Actions workflows for the required Ubuntu and Windows matrix and for
+  Trusted Publishing to TestPyPI and PyPI.
+
+### Security
+
+- Deny-by-default confirmation for patch and verify execution.
+- Protected and ignored path policy, symbolic-link and special-file rejection,
+  bounded inputs and outputs, non-shell subprocess execution, and best-effort
+  log redaction.
+
+### Fixed
+
+- Python 3.10 TOML compatibility in package and index-smoke checks.
+- Windows inventory capture when path metadata does not expose stable inode
+  identifiers.
+- Persistent cross-platform workspace locking with `filelock` native locks.
+- Platform-neutral subprocess newlines and portable filesystem test fixtures.
+
+### Qualification status
+
+- Local Linux/Python 3.10 and 3.12 verification is complete with 100% statement
+  and branch coverage.
+- The required GitHub-hosted Ubuntu/Python 3.10, 3.12, and 3.14 plus
+  Windows/Python 3.12 and 3.14 matrix passed on 2026-08-16.
+- TestPyPI installation remains the next external release gate.
+
+## 0.1.0a1 - 2026-08-06
+
+Internal development checkpoint containing the initial package scaffold,
+typed job model, validation, workspace, path policy, planner, and early
+transaction engine. It was not published as a supported release.

patchshuttle-0.1.0a2/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 PatchShuttle contributors
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.