pytest-selective 0.4.1__tar.gz → 0.4.2__tar.gz

pytest_selective-0.4.2/.dry-lint/baseline.json

@@ -0,0 +1,80 @@
+{
+  "schema": 1,
+  "contract": "fbf56a4a852e47539b956057d11e9f3ee56a986bbb3b26ac209dc491d4b45f6e",
+  "started_at": "fee809549a83ddfb432cb6599ea57ae73efbe66a",
+  "checked_at": "031cafd1748babfecff2ef2629a0320715d8fe9c",
+  "entries": [
+    {
+      "hashes": {
+        "src/pytest_selective/hygiene.py::discover_test_modules": "49e17f87bfe24aeb",
+        "src/pytest_selective/test_inventory.py::discover_test_files": "567e0cacf263d340"
+      },
+      "context_hash": "",
+      "state": "cleaned"
+    },
+    {
+      "hashes": {
+        "src/pytest_selective/impact_graph.py::within": "5417d89a2cedc5ea",
+        "src/pytest_selective/typecheck_scope.py::_under": "221f42a33c38887c"
+      },
+      "context_hash": "",
+      "state": "cleaned"
+    },
+    {
+      "hashes": {
+        "src/pytest_selective/impact_audit_plugin.py::_git": "be715e103f83b281",
+        "src/pytest_selective/impact_graph.py::git": "a53bf9a83105b354"
+      },
+      "context_hash": "",
+      "state": "cleaned"
+    },
+    {
+      "hashes": {
+        "src/pytest_selective/impact_audit_plugin.py::_git": "be715e103f83b281",
+        "src/pytest_selective/pytest_expansion.py::git": "42cac77499ad42b1"
+      },
+      "context_hash": "",
+      "state": "cleaned"
+    },
+    {
+      "hashes": {
+        "src/pytest_selective/impact_first_party.py::_module_name": "c214530cc8698c18",
+        "src/pytest_selective/pytest_expansion.py::SourceTree.module_name": "633b2e80dfaac9e6"
+      },
+      "context_hash": "",
+      "state": "cleaned"
+    },
+    {
+      "hashes": {
+        "src/pytest_selective/impact_graph.py::git": "a53bf9a83105b354",
+        "src/pytest_selective/pytest_expansion.py::git": "42cac77499ad42b1"
+      },
+      "context_hash": "",
+      "state": "cleaned"
+    },
+    {
+      "hashes": {
+        "src/pytest_selective/impact_graph.py::git_environment": "1b32a738ac740022",
+        "src/pytest_selective/pytest_expansion.py::git_environment": "df7139fadaa213a9"
+      },
+      "context_hash": "",
+      "state": "cleaned"
+    },
+    {
+      "hashes": {
+        "src/pytest_selective/impact_name_scope.py::_casefold": "9ecabff1de943de2",
+        "src/pytest_selective/impact_graph.py::ModuleIndex.resolve": "a1089dfe99f751cd"
+      },
+      "context_hash": "",
+      "state": "cleaned"
+    },
+    {
+      "hashes": {
+        "src/pytest_selective/impact_name_scope.py::_casefold": "9ecabff1de943de2",
+        "src/pytest_selective/impact_graph.py::ModuleIndex.__init__": "84c3976fe798fb7e"
+      },
+      "context_hash": "",
+      "state": "cleaned"
+    }
+  ]
+}

pytest_selective-0.4.2/.dry-lint/progress.json

@@ -0,0 +1,7 @@
+{
+  "schemaVersion": 1,
+  "label": "dry-lint",
+  "color": "7E4FC9",
+  "labelColor": "24292F",
+  "message": "9 cleaned \u00b7 0 remaining"
+}

pytest_selective-0.4.2/.dry-lint.toml

@@ -0,0 +1,6 @@
+# Uses dry-lint's default tracked-file scope; review include/exclude before changing it.
+# Strict CI refuses incomplete judging; sweep can use a larger one-off budget.
+preset = "sonnet"
+
+[budget]
+usd = 0.25

{pytest_selective-0.4.1 → pytest_selective-0.4.2}/.github/workflows/ci.yml

@@ -20,7 +20,7 @@ jobs:
       mode: ${{ steps.files.outputs.mode }}
       files: ${{ steps.files.outputs.test_roots_json }}
     steps:
-      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
+      - uses: actions/checkout@v7
         with:
           fetch-depth: 0
       - id: plan
@@ -41,11 +41,14 @@ jobs:
   quality:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
+      - uses: actions/checkout@v7
       - uses: gigaverse-app/ci-esta/actions/setup-cached-uv@v1
         with:
           python-version: '3.14'
+      # Semantic judging owns its credentials and fork boundary in the required dry-lint job.
       - run: uv run --locked pre-commit run --all-files
+        env:
+          SKIP: dry-lint
       - name: Check aggregate gate against the execution lanes
         run: >-
           uv run --no-project --python 3.14
@@ -65,7 +68,7 @@ jobs:
         os: [ubuntu-latest, windows-latest, macos-latest]
     runs-on: ${{ matrix.os }}
     steps:
-      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
+      - uses: actions/checkout@v7
       - uses: gigaverse-app/ci-esta/actions/setup-cached-uv@v1
         with:
           python-version: ${{ matrix.python }}
@@ -90,7 +93,7 @@ jobs:
           junit-pattern: test-timings.xml
           artifact-name: test-timings-${{ matrix.python }}-${{ matrix.os }}
       - run: uv run --locked python scripts/tutorial.py --output tutorial-report.json
-      - uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7.0.2
+      - uses: actions/upload-artifact@v7
         with:
           name: evidence-${{ matrix.os }}-${{ matrix.python }}
           path: |
@@ -103,7 +106,7 @@ jobs:
           fromJSON(needs.select-tests.outputs.lanes).tests) }}
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
+      - uses: actions/checkout@v7
       - uses: gigaverse-app/ci-esta/actions/setup-cached-uv@v1
         with:
           python-version: '3.11'
@@ -120,7 +123,7 @@ jobs:
     if: ${{ !cancelled() }}
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
+      - uses: actions/checkout@v7
       - uses: gigaverse-app/ci-esta/actions/setup-cached-uv@v1
         with:
           python-version: '3.14'
@@ -132,7 +135,7 @@ jobs:
           ${{ needs.select-tests.result != 'success' ||
               fromJSON(needs.select-tests.outputs.lanes).tests }}
         run: uv run --locked python scripts/smoke_distribution.py
-      - uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7.0.2
+      - uses: actions/upload-artifact@v7
         with:
           name: distributions
           path: dist/*

{pytest_selective-0.4.1 → pytest_selective-0.4.2}/.github/workflows/docs.yml

@@ -13,8 +13,8 @@ jobs:
   docs:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
-      - uses: actions/setup-python@v6
+      - uses: actions/checkout@v7
+      - uses: actions/setup-python@v7
         with:
           python-version: '3.13'
           cache: pip
@@ -23,7 +23,7 @@ jobs:
       - run: python scripts/render_brand.py --check
       - run: python -m mkdocs build --strict
       - run: python documentation/check_site.py
-      - uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7.0.2
+      - uses: actions/upload-artifact@v7
         with:
           name: documentation-site
           path: site/

pytest_selective-0.4.2/.github/workflows/dry-lint-audit.yml

@@ -0,0 +1,91 @@
+name: dry-lint audit
+# Audits the whole repository against the accepted backlog, then ratchets it: pairs that were refactored away or
+# judged separate are recorded as cleaned in .dry-lint/baseline.json, progress.json and the README block, through a
+# pull request that runs the ordinary checks. The baseline only ever shrinks; a new blocking pair fails the audit
+# and no ratchet pull request is opened. Run it by hand after merging a cleanup to record the progress at once.
+on:
+  schedule:
+    - cron: '23 6 * * 1'
+  workflow_dispatch:
+  workflow_call:
+permissions:
+  contents: read
+concurrency:
+  group: dry-lint-audit
+  cancel-in-progress: false
+jobs:
+  audit:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v7
+        with:
+          persist-credentials: false
+      - uses: gigaverse-app/dry-lint@v1
+        with:
+          mode: sweep
+          base: HEAD
+          python-version: '3.13'
+          anthropic-api-key: ${{ secrets.ANTHROPIC_API_KEY }}
+          plugins: anthropic==2.4.0
+          baseline: .dry-lint/baseline.json
+          require-complete: 'true'
+          budget-usd: '5'
+      - name: Retain the audit for human or agent review
+        if: always()
+        uses: actions/upload-artifact@v7
+        with:
+          name: dry-lint-audit
+          path: |
+            ${{ runner.temp }}/dry-lint/report.json
+            ${{ runner.temp }}/dry-lint/comment.md
+          retention-days: 30
+          if-no-files-found: warn
+      - name: Require ratchet PR authentication
+        env:
+          HAS_RATCHET_TOKEN: ${{ secrets.GV_CI_CROSS_REPO_TOKEN != '' }}
+        run: |
+          if [[ "$HAS_RATCHET_TOKEN" != "true" ]]; then
+            echo "::error::Configure the adopter-owned GV_CI_CROSS_REPO_TOKEN with contents and pull-request write access."
+            exit 1
+          fi
+      # The Action's sweep mode only audits. The CLI records the ratchet, reusing the verdicts the audit just stored,
+      # and the exact CLI environment installed by the Action. No second install or judge-version drift.
+      - name: Record cleaned pairs
+        env:
+          ANTHROPIC_API_KEY: ${{ secrets.ANTHROPIC_API_KEY }}
+        run: |
+          dry-lint sweep --update --store "$RUNNER_TEMP/dry-lint/verdicts" --budget-usd 5 \
+            --readme README.md --repository "$GITHUB_REPOSITORY" --branch main
+      # One standing branch: a later run updates the open ratchet PR instead of stacking another. The adopter-owned
+      # credential makes the PR run ordinary CI, including the required dry-lint check that refuses any widening.
+      - uses: peter-evans/create-pull-request@v8
+        with:
+          token: ${{ secrets.GV_CI_CROSS_REPO_TOKEN }}
+          branch: dry-lint/ratchet
+          delete-branch: true
+          add-paths: |
+            .dry-lint/baseline.json
+            .dry-lint/progress.json
+            README.md
+          commit-message: 'chore(dry-lint): record cleaned duplicate pairs in the baseline'
+          title: 'chore(dry-lint): record cleaned duplicate pairs in the baseline'
+          body: |
+            ## TLDR
+
+            The weekly dry-lint audit found accepted duplicate pairs that no longer exist or were judged separate,
+            and shrinks `.dry-lint/baseline.json`, the progress badge and the README block to match.
+
+            The baseline can only shrink: the required `dry-lint` check rejects any pull request that widens it.
+            The full audit is in the [workflow run](${{ github.server_url }}/${{ github.repository }}/actions/runs/${{ github.run_id }}).
+
+            ```text
+            BEFORE: merged cleanup -> accepted baseline and README still show old debt
+            AFTER:  complete audit -> reviewed metadata PR -> baseline and README record cleanup
+            ```
+
+            | Policy | Before | After |
+            | --- | --- | --- |
+            | Accepted pairs | Previously recorded states | Removed/separate pairs marked cleaned; explicit exclusions dismissed |
+            | New debt | Rejected | Still rejected; no added allowances |
+
+            Pair-count changes appear in the baseline/progress diff and the linked audit. No application code changes.

pytest_selective-0.4.2/.github/workflows/dry-lint-judge.yml

@@ -0,0 +1,30 @@
+name: dry-lint judge
+on:
+  workflow_run:
+    workflows: [dry-lint]
+    types: [completed]
+permissions:
+  actions: read
+  checks: write
+  contents: read
+  pull-requests: write
+concurrency:
+  group: dry-lint-judge-${{ github.event.workflow_run.head_branch }}
+  cancel-in-progress: true
+jobs:
+  judge:
+    if: github.event.workflow_run.event == 'pull_request' && github.event.workflow_run.head_repository.full_name != github.repository
+    runs-on: ubuntu-latest
+    steps:
+      # Only trusted default-branch settings and baseline; fork code is artifact data.
+      - uses: actions/checkout@v7
+        with:
+          persist-credentials: false
+      - uses: gigaverse-app/dry-lint@v1
+        with:
+          anthropic-api-key: ${{ secrets.ANTHROPIC_API_KEY }}
+          plugins: anthropic==2.4.0
+          baseline: .dry-lint/baseline.json
+          require-complete: 'true'
+          comment: 'true'
+          comment-on-clean: 'true'

pytest_selective-0.4.2/.github/workflows/dry-lint.yml

@@ -0,0 +1,41 @@
+name: dry-lint
+on:
+  pull_request:
+    types: [opened, synchronize, reopened]
+  push:
+    branches: [main]
+  workflow_dispatch:
+
+permissions:
+  contents: read
+  pull-requests: write
+
+concurrency:
+  group: dry-lint-${{ github.event_name == 'pull_request' && github.event.pull_request.number || github.run_id }}
+  cancel-in-progress: ${{ github.event_name == 'pull_request' }}
+
+jobs:
+  check:
+    # A detection-only fork job must never satisfy the required judged check.
+    name: ${{ github.event_name == 'pull_request' && github.event.pull_request.head.repo.full_name != github.repository && 'dry-lint detect' || 'dry-lint' }}
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v7
+        with:
+          ref: ${{ github.event.pull_request.head.sha || github.sha }}
+          fetch-depth: 1
+          persist-credentials: false
+      - uses: gigaverse-app/dry-lint@v1
+        with:
+          anthropic-api-key: ${{ secrets.ANTHROPIC_API_KEY }}
+          plugins: anthropic==2.4.0
+          baseline: .dry-lint/baseline.json
+          require-complete: 'true'
+          comment: 'true'
+          comment-on-clean: 'true'
+
+  audit:
+    # Manual full validation also exercises the scheduled ratchet before its first merge.
+    if: github.event_name == 'workflow_dispatch'
+    uses: ./.github/workflows/dry-lint-audit.yml
+    secrets: inherit

{pytest_selective-0.4.1 → pytest_selective-0.4.2}/.github/workflows/pr-title.yml

@@ -14,7 +14,7 @@ jobs:
     timeout-minutes: 5
     steps:
       # Only reads PR metadata. Never check out or execute PR code in this workflow.
-      - uses: amannn/action-semantic-pull-request@48f256284bd46cdaab1048c3721360e808335d50 # v6.1.1
+      - uses: amannn/action-semantic-pull-request@v6
         with:
           types: |
             feat

{pytest_selective-0.4.1 → pytest_selective-0.4.2}/.github/workflows/public-actions.yml

@@ -27,7 +27,7 @@ jobs:
           fromJSON(needs.select-tests.outputs.lanes).tests) }}
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7
+      - uses: actions/checkout@v7
         with:
           fetch-depth: 0
       - name: Use the reviewed repository graph

{pytest_selective-0.4.1 → pytest_selective-0.4.2}/.github/workflows/release-please.yml

@@ -28,7 +28,7 @@ jobs:
     steps:
       - name: Only process the tested main head
         id: current
-        uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8
+        uses: actions/github-script@v9
         with:
           script: |
             const {data: branch} = await github.rest.repos.getBranch({...context.repo, branch: 'main'});
@@ -44,7 +44,7 @@ jobs:
           fi
       - name: Prepare release PR or publish its GitHub release
         if: steps.current.outputs.matches == 'true'
-        uses: googleapis/release-please-action@45996ed1f6d02564a971a2fa1b5860e934307cf7 # v5.0.0
+        uses: googleapis/release-please-action@v5
         with:
           # This credential triggers CI on release PRs and Publish on releases.
           # GITHUB_TOKEN would suppress those follow-up workflow events.

{pytest_selective-0.4.1 → pytest_selective-0.4.2}/.github/workflows/release.yml

@@ -10,8 +10,8 @@ jobs:
   validate-tag:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
-      - uses: astral-sh/setup-uv@07a047e608db84b3d8c06cd9a7c7dcc9c355c18e # v10.3.2
+      - uses: actions/checkout@v7
+      - uses: astral-sh/setup-uv@v10.3.3
         with:
           python-version: '3.14'
       - name: Require a version-matching tag
@@ -31,12 +31,12 @@ jobs:
     permissions:
       id-token: write
     steps:
-      - uses: actions/download-artifact@9000827ccba6bdab643e8b6fd33ac0654aef8333 # v8.0.2
+      - uses: actions/download-artifact@v8
         with:
           name: distributions
           path: dist
       - name: Publish tested distributions with attestations
-        uses: pypa/gh-action-pypi-publish@7245906fb61fa33a13554f9d5fb856fe61758086 # release/v1
+        uses: pypa/gh-action-pypi-publish@release/v1
 
   action-version:
     needs: publish

{pytest_selective-0.4.1 → pytest_selective-0.4.2}/.github/workflows/windows-performance.yml

@@ -21,34 +21,38 @@ jobs:
       matrix:
         python: ['3.11', '3.14']
     steps:
-      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1
+      - uses: actions/checkout@v7
         with:
           ref: ${{ inputs.baseline || github.event.pull_request.base.sha }}
           path: baseline
-      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1
+      - uses: actions/checkout@v7
         with:
           ref: ${{ github.event.pull_request.head.sha || github.sha }}
           path: candidate
-      - uses: astral-sh/setup-uv@07a047e608db84b3d8c06cd9a7c7dcc9c355c18e
+      - uses: astral-sh/setup-uv@v10.3.3
         with:
           python-version: ${{ matrix.python }}
           cache-suffix: matched-windows-${{ matrix.python }}
       - run: uv sync --directory baseline --locked
       - run: uv sync --directory candidate --locked
+      - name: Preserve the baseline Git search path
+        shell: pwsh
+        run: '"BASELINE_GIT_PATH=$env:PATH" | Out-File -FilePath $env:GITHUB_ENV -Encoding utf8 -Append'
+      - uses: gigaverse-app/ci-esta/actions/native-windows-git@v1
       - name: Run complete suites in both orders on the same worker
         shell: pwsh
         run: |
           $results = Join-Path $env:GITHUB_WORKSPACE 'measurements'
           New-Item -ItemType Directory -Path $results | Out-Null
           $measurements = @()
-          $originalPath = $env:PATH
+          $originalPath = $env:BASELINE_GIT_PATH
+          $nativeGitPath = $env:PATH
           foreach ($sample in @('baseline-1', 'candidate-1', 'candidate-2', 'baseline-2')) {
             $arm = $sample.Split('-')[0]
             Push-Location (Join-Path $env:GITHUB_WORKSPACE $arm)
             try {
               # Start every arm with the same PATH; only the candidate opts in.
-              $env:PATH = $originalPath
-              if ($arm -eq 'candidate') { ./scripts/use_native_windows_git.ps1 }
+              $env:PATH = if ($arm -eq 'candidate') { $nativeGitPath } else { $originalPath }
               $sha = git rev-parse HEAD
               # Keep repeated arms from timing cleanup of an earlier arm's Git fixtures.
               $temp = Join-Path $env:RUNNER_TEMP "matched-pytest-$sample"
@@ -63,7 +67,7 @@ jobs:
               if ($result -ne 0) { throw "${sample} failed: $result" }
             } finally { Pop-Location }
           }
-      - uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9
+      - uses: actions/upload-artifact@v7
         if: always()
         with:
           name: matched-windows-${{ matrix.python }}

{pytest_selective-0.4.1 → pytest_selective-0.4.2}/.gitignore

@@ -15,3 +15,6 @@ tutorial-report.json
 # Built documentation
 /site/
 /.venv-docs/
+
+# Local judge credentials
+.env

{pytest_selective-0.4.1 → pytest_selective-0.4.2}/.pre-commit-config.yaml

@@ -1,3 +1,6 @@
+minimum_pre_commit_version: '4.3.0'
+default_install_hook_types: [pre-commit, prepare-commit-msg]
+default_stages: [pre-commit]
 repos:
   - repo: local
     hooks:
@@ -17,3 +20,12 @@ repos:
         language: system
         pass_filenames: false
         types: [markdown]
+
+  - repo: https://github.com/gigaverse-app/dry-lint
+    rev: v1
+    hooks:
+      - id: dry-lint
+        args: [--preset, sonnet, --baseline, .dry-lint/baseline.json]
+        language_version: python3.13
+      - id: dry-lint-trailers
+        language_version: python3.13

pytest_selective-0.4.2/.release-please-manifest.json

@@ -0,0 +1,3 @@
+{
+  ".": "0.4.2"
+}

{pytest_selective-0.4.1 → pytest_selective-0.4.2}/AGENTS.md

@@ -67,3 +67,8 @@ workflows, selector configuration, helpers, locks and non-import inputs; missing
 history or failed planning must execute the full affected lanes and fail the
 required planning gate. Ordinary PRs and pushes use selection; manual/release/scheduled/full overrides
 remain complete checkpoints.
+
+## GitHub Actions versions
+
+- ALWAYS use published major-version tags for established GitHub Actions, for example `actions/checkout@v7` and `actions/upload-artifact@v7`, so compatible fixes arrive without per-commit maintenance. NEVER replace those tags with commit hashes unless the user explicitly requests that exact exception. If a publisher has no major-version tag, use its published release tag rather than inventing a ref or substituting a hash.
+- ALWAYS use `gigaverse-app/dry-lint@main` until its v1 launch, then use `@v1`. Apply the same ref in workflow examples and adoption instructions.

{pytest_selective-0.4.1 → pytest_selective-0.4.2}/CHANGELOG.md

@@ -1,5 +1,12 @@
 # Changelog
 
+## [0.4.2](https://github.com/gigaverse-app/pytest-selective/compare/v0.4.1...v0.4.2) (2026-11-07)
+
+
+### Bug fixes
+
+* consolidate duplicated selection helpers and retire baseline debt ([#77](https://github.com/gigaverse-app/pytest-selective/issues/77)) ([a7427bf](https://github.com/gigaverse-app/pytest-selective/commit/a7427bf6f550789a835a38f3326b8a971bef114f))
+
 ## [0.4.1](https://github.com/gigaverse-app/pytest-selective/compare/v0.4.0...v0.4.1) (2026-10-24)
 
 

{pytest_selective-0.4.1 → pytest_selective-0.4.2}/CONTRIBUTING.md

@@ -32,6 +32,23 @@ Changes to collection policy, runtime auditing, or the composite action need tes
 at that boundary. Update the tutorial when the public command contract changes.
 Keep performance claims tied to reproducible measurements and their limitations.
 
+### Shared implementation owners
+
+| Contract | Owner |
+| --- | --- |
+| Repository-scoped Git, hook environment isolation, binary and UTF-8 output | `git_operations.py` |
+| Private working-tree snapshots, staged inputs and index timestamp preservation | `working_tree.py` |
+| Python module names, Unicode matching and dotted import relationships | `ast_imports.py` |
+| Test-file discovery and cache exclusions | `test_inventory.py` |
+| Repository-relative path containment, including the dot root | `impact_graph.within` |
+
+The expansion guard imports the first three owners directly when run as a script;
+keep them stdlib-only. Its snapshot updates Python paths and preserves the stat
+cache; the planner rebuilds the staged entries to see edits hidden by index flags
+and updates all inputs. Preserve the copied index timestamp: Git uses it to detect
+same-size edits made within its stat-cache window. The snapshot tests cover ordinary indexes,
+split indexes and linked worktrees without modifying the user's index or HEAD.
+
 ## CI and dependency maintenance
 
 CI tests Python 3.11 and 3.14 on Linux, Windows, and macOS. A separate job checks
@@ -41,7 +58,8 @@ environment on both Python versions. Evidence artifacts carry coverage and tutor
 
 Use `uv lock --upgrade-package NAME` for a targeted dependency update and run the
 affected checks. Dependabot proposes weekly uv and GitHub Actions updates.
-Actions are pinned to commits. Review their release notes before updating pins.
+Established Actions use published major-version tags; use a published release tag when no major tag exists.
+Review release notes when upgrading a major version.
 
 ## Pull requests
 
@@ -152,3 +170,53 @@ workflows, selector configuration, helpers, locks and non-import inputs; missing
 history or failed planning must execute the full affected lanes and fail the
 required planning gate. Ordinary PRs and pushes use selection; manual/release/scheduled/full overrides
 remain complete checkpoints.
+
+## Duplication
+
+`uv run pre-commit install` installs both the staged dry-lint check and the
+`prepare-commit-msg` trailer hook, alongside Ruff and documentation checks.
+Put your own `ANTHROPIC_API_KEY` in the shell or the ignored `.env`. The hook uses
+Sonnet, Python 3.13 and the same accepted baseline as CI. Missing judge credentials
+fail strict checking. The trailer records duplicates fixed before the first push,
+so the PR sticky includes that local prevention credit.
+
+The required judged `dry-lint` check rejects new blocking duplicates, incomplete
+judgments and baseline widening. Forks detect candidates without secrets; the
+trusted judge workflow assesses their artifacts. CI's general quality job skips
+only the semantic hook, because the dedicated required job owns judging and its
+credentials. Other pre-commit hooks still run there.
+
+When a finding appears, inspect both functions. Reuse the existing owner when they
+implement one concept, preserve selection/fallback behavior and run the affected
+tests. For genuinely distinct concepts, add a narrow `distinct-from` comment and
+its reason. Do not weaken thresholds or use blanket ignores to make CI pass.
+
+The PR sticky tracks findings and fixes across pushes. Every default-branch push
+can finish folding merged PRs into the repository ledger. The README sign shows
+new duplicates prevented separately from old debt cleaned and remaining. Counts
+are pairs, not lines or estimated time savings; dismissals never count as cleanup.
+The cache-backed ledger starts a new accounting period if evicted.
+
+The weekly/manual **dry-lint audit** retains its reports, then opens or updates one
+`dry-lint/ratchet` PR with only the baseline, progress JSON and README metadata.
+The inherited `GV_CI_CROSS_REPO_TOKEN` lets that PR run ordinary CI. New debt,
+incomplete judging or missing authentication fails visibly. Humans and agents
+choose refactors; the audit never edits application code or merges its own PR.
+
+```bash
+uv tool install --no-config --python 3.13 'dry-lint[anthropic] @ git+https://github.com/gigaverse-app/dry-lint@v1'
+dry-lint sweep --budget-usd 5 --report audit.json --output audit.md
+# Review both sides, refactor and test before recording progress.
+dry-lint sweep --update --budget-usd 5 --readme README.md --repository gigaverse-app/pytest-selective --repository-id 1430133155
+```
+
+Commit the generated metadata with a cleanup, or dispatch the audit after the
+cleanup merges. A manual run of the **dry-lint** workflow also calls the same
+reusable audit, allowing validation on an adoption branch before the new scheduled
+workflow exists on `main`. Ratchet PRs target the selected branch. Preserve the nine-pair adoption history; never delete and
+reinitialize the baseline. No-change audits produce no metadata diff. Keep raw
+reports and verdict caches outside Git. The scope uses dry-lint's default
+exclusions; changes to detection policy require an explicitly reviewed migration.
+
+See the [full adoption playbook](https://github.com/gigaverse-app/dry-lint/blob/main/docs/adoption-playbook.md)
+and [sweep semantics](https://github.com/gigaverse-app/dry-lint/blob/main/docs/sweeps.md).

{pytest_selective-0.4.1 → pytest_selective-0.4.2}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.5
 Name: pytest-selective
-Version: 0.4.1
+Version: 0.4.2
 Summary: Explainable Python test impact analysis: select affected pytest files from Git changes
 Project-URL: Homepage, https://github.com/gigaverse-app/pytest-selective
 Project-URL: Documentation, https://pytest-selective.readthedocs.io/en/latest/
@@ -316,3 +316,13 @@ show provenance, runner cost and the actual dependency paths. This repository
 also uses CI-esta's shared native Windows Git action while retaining full
 coverage on all six Python/platform lanes.
 
+### Duplicates kept out
+
+Local hooks and the required PR check prevent new copies. The weekly audit
+records progress against the accepted backlog. [Setup and cleanup workflow](CONTRIBUTING.md#duplication).
+
+<!-- dry-lint-progress:start -->
+<a href="https://github.com/gigaverse-app/dry-lint"><picture><source media="(prefers-color-scheme: dark)" srcset="https://dry-lint-counter.gigaverse-oss.workers.dev/v1/sign.svg?theme=dark&amp;key=f8e41d50ca4018845c305f2f0dbd1cfd6d9b281e53b352490af53154a54e6265&amp;name=gigaverse-app%2Fpytest-selective&amp;cleaned=9&amp;remaining=0&amp;dismissed=0"><img alt="dry-lint in gigaverse-app/pytest-selective: new duplicates kept out of its pull requests, 9 old duplicates cleaned up, 0 remaining" src="https://dry-lint-counter.gigaverse-oss.workers.dev/v1/sign.svg?key=f8e41d50ca4018845c305f2f0dbd1cfd6d9b281e53b352490af53154a54e6265&amp;name=gigaverse-app%2Fpytest-selective&amp;cleaned=9&amp;remaining=0&amp;dismissed=0" width="100%"></picture></a>
+
+[Accepted backlog](.dry-lint/baseline.json) · [Weekly audit](https://github.com/gigaverse-app/pytest-selective/actions/workflows/dry-lint-audit.yml)
+<!-- dry-lint-progress:end -->

{pytest_selective-0.4.1 → pytest_selective-0.4.2}/README.md

@@ -285,3 +285,13 @@ show provenance, runner cost and the actual dependency paths. This repository
 also uses CI-esta's shared native Windows Git action while retaining full
 coverage on all six Python/platform lanes.
 
+### Duplicates kept out
+
+Local hooks and the required PR check prevent new copies. The weekly audit
+records progress against the accepted backlog. [Setup and cleanup workflow](CONTRIBUTING.md#duplication).
+
+<!-- dry-lint-progress:start -->
+<a href="https://github.com/gigaverse-app/dry-lint"><picture><source media="(prefers-color-scheme: dark)" srcset="https://dry-lint-counter.gigaverse-oss.workers.dev/v1/sign.svg?theme=dark&amp;key=f8e41d50ca4018845c305f2f0dbd1cfd6d9b281e53b352490af53154a54e6265&amp;name=gigaverse-app%2Fpytest-selective&amp;cleaned=9&amp;remaining=0&amp;dismissed=0"><img alt="dry-lint in gigaverse-app/pytest-selective: new duplicates kept out of its pull requests, 9 old duplicates cleaned up, 0 remaining" src="https://dry-lint-counter.gigaverse-oss.workers.dev/v1/sign.svg?key=f8e41d50ca4018845c305f2f0dbd1cfd6d9b281e53b352490af53154a54e6265&amp;name=gigaverse-app%2Fpytest-selective&amp;cleaned=9&amp;remaining=0&amp;dismissed=0" width="100%"></picture></a>
+
+[Accepted backlog](.dry-lint/baseline.json) · [Weekly audit](https://github.com/gigaverse-app/pytest-selective/actions/workflows/dry-lint-audit.yml)
+<!-- dry-lint-progress:end -->