python-hwpx 6.2.1__tar.gz → 6.3.0__tar.gz

{python_hwpx-6.2.1/src/python_hwpx.egg-info → python_hwpx-6.3.0}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: python-hwpx
-Version: 6.2.1
+Version: 6.3.0
 Summary: 한글 없이 HWPX 문서를 열고, 편집하고, 생성하고, 검증하는 Python 문서 라이브러리
 Author: python-hwpx Maintainers
 License-Expression: Apache-2.0

{python_hwpx-6.2.1 → python_hwpx-6.3.0}/pyproject.toml

@@ -1,10 +1,10 @@
 [build-system]
-requires = ["setuptools==83.0.0", "wheel==0.47.0"]
+requires = ["setuptools==84.0.0", "wheel==0.48.0"]
 build-backend = "setuptools.build_meta"
 
 [project]
 name = "python-hwpx"
-version = "6.2.1"
+version = "6.3.0"
 description = "한글 없이 HWPX 문서를 열고, 편집하고, 생성하고, 검증하는 Python 문서 라이브러리"
 readme = { file = "README.md", content-type = "text/markdown" }
 license = "Apache-2.0"

{python_hwpx-6.2.1 → python_hwpx-6.3.0}/src/hwpx/oxml/_document_primitives.py

@@ -200,8 +200,12 @@ def _refresh_copied_paragraph_subtree_ids(paragraph: ET.Element) -> None:
         }:
             node.set("id", _object_id())
 
-        if "instId" in node.attrib:
-            node.set("instId", _object_id())
+        # 스키마·실한컴 산출물의 속성명은 소문자 "instid"다. 과거 이 코드가
+        # 방출한 "instId"(카멜케이스)를 실은 파일도 재발급 대상에 남긴다 —
+        # 속성명 자체는 보존(바이트 보수), 값만 재발급.
+        for inst_attr in ("instid", "instId"):
+            if inst_attr in node.attrib:
+                node.set(inst_attr, _object_id())
 
 
 def _clone_paragraph_element(paragraph: ET.Element) -> ET.Element:

{python_hwpx-6.2.1 → python_hwpx-6.3.0}/src/hwpx/oxml/body.py

@@ -32,7 +32,10 @@ INLINE_OBJECT_NAMES = {
     "ole",
     "chart",
     "video",
-    "audio",
+    # "audio"는 제외 — 실한컴(Windows 한글 2024 실측)은 소리 삽입을
+    # hp:ole(EMBEDDED/ICON)로 방출하고 hp:audio를 생성하지 않으며, 보유
+    # 실코퍼스 표본도 0건이다. 실물 미검증 요소를 인라인 읽기 지원으로
+    # 분류하지 않는다(빈도 0 = 읽기측 불투명 보존만). python-hwpx#89.
     "textart",
 }
 

{python_hwpx-6.2.1 → python_hwpx-6.3.0}/src/hwpx/oxml/memo.py

@@ -277,7 +277,9 @@ class HwpxOxmlNote:
 
     @property
     def inst_id(self) -> str | None:
-        return self.element.get("instId")
+        # 정본 속성명은 "instid"(스키마·실한컴). "instId"는 과거 우리 저작이
+        # 방출한 카멜케이스 산출물 호환용 폴백.
+        return self.element.get("instid") or self.element.get("instId")
 
     @property
     def text(self) -> str:

{python_hwpx-6.2.1 → python_hwpx-6.3.0}/src/hwpx/oxml/note_authoring.py

@@ -128,7 +128,7 @@ def _paragraph_add_note(
         {
             "number": str(number),
             "suffixChar": str(ord(suffix[0])) if suffix else "41",
-            "instId": _object_id(),
+            "instid": _object_id(),
         },
     )
     sublist_attrs = _default_sublist_attributes()

{python_hwpx-6.2.1 → python_hwpx-6.3.0}/src/hwpx/table_patch.py

@@ -1053,6 +1053,34 @@ def _delete_rows(table: str, del_rows: Iterable[int]) -> str:
     return _rebuild(prefix, rows, suffix, rowcnt=len(rows))
 
 
+def _reorder_rows(table: str, order: Sequence[int]) -> str:
+    """물리 행 재배열 — 편집기 [표>정렬…] 대응의 엔진 프리미티브.
+
+    *order*는 현재 물리 행 인덱스의 완전 순열: 새 ``i``번째 행 = 기존
+    ``order[i]``. 행 문자열을 통째로 옮기고 각 셀의 ``rowAddr``만 목적지
+    인덱스로 재기입한다(행 높이·서식·문단은 행과 함께 이동). 수직 병합
+    (rowSpan>1)이 하나라도 있으면 refuse — 병합 블록을 가로지르는 재배열은
+    의미가 정의되지 않는다. 정렬 키 비교(어떤 순서로 놓을지)는 호출자 몫이다.
+    """
+    _guard_flat(table)
+    prefix, rows, suffix = _parse_table(table)
+    if sorted(order) != list(range(len(rows))):
+        raise TableStructureError(
+            f"reorder_rows: order must be a permutation of 0..{len(rows) - 1}, got {list(order)}"
+        )
+    for row in rows:
+        for tc in _S_TC.findall(row):
+            if (_si(tc, "cellSpan", "rowSpan") or 1) > 1:
+                raise TableStructureError(
+                    "reorder_rows: vertical merge (rowSpan>1) present — refuse"
+                )
+    new_rows = [
+        _map_cells(rows[src], lambda tc, dest=dest: _ss(tc, "cellAddr", "rowAddr", dest))
+        for dest, src in enumerate(order)
+    ]
+    return _rebuild(prefix, new_rows, suffix)
+
+
 _PARA_ID_RE = re.compile(r'(<hp:p\b[^>]*\bid=")(\d+)(")')
 
 
@@ -1389,6 +1417,7 @@ def _widths_arg(o: Mapping[str, Any]) -> dict[int, int]:
 _STRUCT_OPS = {
     "delete_column": lambda t, o: _collapse_empty_rows(_delete_columns(t, o["cols"] if "cols" in o else [o["col"]])),
     "delete_row": lambda t, o: _delete_rows(t, o["rows"] if "rows" in o else [o["row"]]),
+    "reorder_rows": lambda t, o: _reorder_rows(t, [int(x) for x in o["order"]]),
     "insert_row_by_clone": lambda t, o: _insert_row_by_clone(t, o["ref_row"], int(o.get("count", 1))),
     "insert_block_by_clone": lambda t, o: _insert_block_by_clone(t, int(o["ref_rows"][0]), int(o["ref_rows"][1]), int(o.get("count", 1))),
     "set_column_widths": lambda t, o: _set_column_widths(t, _widths_arg(o)),

{python_hwpx-6.2.1 → python_hwpx-6.3.0}/src/hwpx/tools/markdown_export.py

@@ -261,7 +261,7 @@ def _md_handle_ctrl_child(child, state: _MdParagraphState, base_cp, chars, doc=N
 def _md_handle_note_child(
     child, tag: str, state: _MdParagraphState, base_cp, chars, doc, notes_out: list | None
 ) -> None:
-    inst_id = child.get("instId", "")
+    inst_id = child.get("instid") or child.get("instId", "")
     kind = "fn" if tag == "footNote" else "en"
     marker = f"[^{kind}{inst_id}]"
     if state.link_url is not None:

{python_hwpx-6.2.1 → python_hwpx-6.3.0}/src/hwpx/tools/object_finder.py

@@ -317,7 +317,7 @@ class ObjectFinder:
     ) -> AnnotationMatch:
         path = describe_element_path(element, parent_map)
         found = FoundElement(section=section, path=path, element=element)
-        inst_id = element.get("instId") or ""
+        inst_id = element.get("instid") or element.get("instId") or ""
         behavior = options.footnote if kind == "footnote" else options.endnote
         if behavior == "inline":
             text = _resolve_note_text(

{python_hwpx-6.2.1 → python_hwpx-6.3.0}/src/hwpx/tools/package_validator.py

@@ -331,14 +331,17 @@ def _first_child_by_local(element: ET.Element, name: str) -> ET.Element | None:
     return None
 
 
-def _simple_paragraph_text_length(paragraph: ET.Element) -> int | None:
-    """Return visible text length for plain text-only paragraphs.
+def _simple_paragraph_text(paragraph: ET.Element) -> str | None:
+    """Return visible text for plain text-only paragraphs (``None`` = 판정 불가).
 
     Paragraphs containing fields, shapes, tables, or other embedded controls are
     skipped to avoid guessing how a specific editor counts their layout units.
+    Single-position control characters (tab/linebreak/hyphen/nbspace) are
+    represented as one space — a deliberate width underestimate so downstream
+    width judgments stay conservative.
     """
 
-    total = 0
+    pieces: list[str] = []
     for child in paragraph:
         child_name = _local_name(child).lower()
         if child_name == "linesegarray":
@@ -348,12 +351,73 @@ def _simple_paragraph_text_length(paragraph: ET.Element) -> int | None:
         for run_child in child:
             run_child_name = _local_name(run_child).lower()
             if run_child_name == "t":
-                total += len("".join(run_child.itertext()))
+                pieces.append("".join(run_child.itertext()))
             elif run_child_name in {"tab", "linebreak", "hyphen", "nbspace"}:
-                total += 1
+                pieces.append(" ")
             else:
                 return None
-    return total
+    return "".join(pieces)
+
+
+def _simple_paragraph_text_length(paragraph: ET.Element) -> int | None:
+    text = _simple_paragraph_text(paragraph)
+    return None if text is None else len(text)
+
+
+#: 꼬리 폭 판정 마진 — 추정 폭이 줄 폭의 이 배수를 넘을 때만 증명으로 취급.
+_STALE_TAIL_WIDTH_FACTOR = 2.0
+_STALE_TAIL_MIN_CHARS = 8
+
+
+def _check_line_seg_tail_coverage(
+    issues: list[PackageValidationIssue],
+    part_name: str,
+    paragraph_index: int,
+    text: str,
+    line_segs: list[ET.Element],
+) -> None:
+    """Catch caches that lack lines for text grown past the last cached line.
+
+    The stale-cache direction the textpos range check cannot see: an edit made
+    the paragraph *longer* but an old ``<hp:linesegarray>`` survived, so every
+    cached ``textpos`` is still in range — yet the cache has too few lines and
+    Hancom renders the tail overlapped (the tracked-change overlap defect).
+    Provable-with-margin: the tail after the last cached line start must not
+    measure wider than that line's extent × ``_STALE_TAIL_WIDTH_FACTOR``,
+    with width estimated by the same conservative metrics the overflow lint
+    uses.
+    """
+
+    last: tuple[int, int, int] | None = None
+    for seg in line_segs:
+        try:
+            textpos = int(seg.get("textpos") or "")
+            horzsize = int(seg.get("horzsize") or "")
+            textheight = int(seg.get("textheight") or "")
+        except ValueError:
+            return
+        if last is None or textpos > last[0]:
+            last = (textpos, horzsize, textheight)
+    if last is None:
+        return
+    last_pos, horzsize, textheight = last
+    if horzsize <= 0 or textheight <= 0 or not 0 <= last_pos <= len(text):
+        return
+    tail = text[last_pos:]
+    if len(tail) < _STALE_TAIL_MIN_CHARS:
+        return
+    from hwpx.form_fit.measure import estimate_text_width
+
+    tail_width = estimate_text_width(tail, textheight / 100.0)
+    if tail_width > horzsize * _STALE_TAIL_WIDTH_FACTOR:
+        _error(
+            issues,
+            part_name,
+            f"paragraph {paragraph_index} lineseg cache lacks lines for its tail: "
+            f"{len(tail)} chars after the last cached line start (textpos={last_pos}) "
+            f"measure ~{tail_width / horzsize:.1f}x the cached line extent {horzsize} "
+            "— stale layout cache; Hancom reuses it and renders the tail overlapped",
+        )
 
 
 def _check_line_seg_text_positions(
@@ -367,15 +431,18 @@ def _check_line_seg_text_positions(
     for paragraph_index, paragraph in enumerate(
         element for element in root.iter() if _local_name(element) == "p"
     ):
-        text_length = _simple_paragraph_text_length(paragraph)
-        if text_length is None:
+        text = _simple_paragraph_text(paragraph)
+        if text is None:
             continue
+        text_length = len(text)
         for child in paragraph:
             if _local_name(child).lower() != "linesegarray":
                 continue
+            line_segs: list[ET.Element] = []
             for line_seg in child:
                 if _local_name(line_seg).lower() != "lineseg":
                     continue
+                line_segs.append(line_seg)
                 textpos_raw = line_seg.get("textpos")
                 if textpos_raw is None:
                     continue
@@ -396,6 +463,9 @@ def _check_line_seg_text_positions(
                         f"{paragraph_index} has stale lineseg textpos={textpos} "
                         f"beyond text length {text_length}",
                     )
+            _check_line_seg_tail_coverage(
+                issues, part_name, paragraph_index, text, line_segs
+            )
 
 
 def _check_table_editor_acceptance(

{python_hwpx-6.2.1 → python_hwpx-6.3.0}/src/hwpx/tools/text_extractor.py

@@ -483,7 +483,7 @@ class TextExtractor:
             return
 
         kind_name = "footnote" if kind == "footNote" else "endnote"
-        inst_id = element.get("instId") or ""
+        inst_id = element.get("instid") or element.get("instId") or ""
 
         if option == "placeholder":
             fragments.append(

{python_hwpx-6.2.1 → python_hwpx-6.3.0/src/python_hwpx.egg-info}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: python-hwpx
-Version: 6.2.1
+Version: 6.3.0
 Summary: 한글 없이 HWPX 문서를 열고, 편집하고, 생성하고, 검증하는 Python 문서 라이브러리
 Author: python-hwpx Maintainers
 License-Expression: Apache-2.0

{python_hwpx-6.2.1 → python_hwpx-6.3.0}/src/python_hwpx.egg-info/SOURCES.txt

@@ -230,6 +230,7 @@ tests/test_image_object_workflow.py
 tests/test_index_mark.py
 tests/test_ingest.py
 tests/test_inline_models.py
+tests/test_instid_attribute_case.py
 tests/test_integration_hwpx_compatibility.py
 tests/test_integration_roundtrip.py
 tests/test_layout_cache_scope.py
@@ -283,6 +284,7 @@ tests/test_report_utils.py
 tests/test_repr_snapshots.py
 tests/test_return_contract.py
 tests/test_roundtrip_fidelity.py
+tests/test_roundtrip_fidelity_corpus.py
 tests/test_row_heights.py
 tests/test_run_choice_atom_authoring.py
 tests/test_save_pipeline.py
@@ -312,6 +314,7 @@ tests/test_text_extractor_run_choice_atoms.py
 tests/test_title_mark.py
 tests/test_toc_author.py
 tests/test_toc_fidelity.py
+tests/test_tracked_overlap_render_smoke.py
 tests/test_validation_severity.py
 tests/test_validator_comment_nodes.py
 tests/test_version_metadata.py

python_hwpx-6.3.0/tests/test_instid_attribute_case.py

@@ -0,0 +1,100 @@
+# SPDX-License-Identifier: Apache-2.0
+"""instid 속성명 대소문자 회귀 (#88).
+
+OWPML 스키마·실한컴 산출물의 인스턴스 ID 속성명은 소문자 ``instid``다
+(픽스처 전수 재집계 instid 744 / instId 0). 과거 코드가 4곳에서 카멜케이스
+``instId``를 읽거나 써서: ① 문단 복제 재발급 분기가 사문화(중복 instid 복제),
+② 각주/미주 저작이 스키마에 없는 속성명을 방출, ③ 리더가 실한컴 파일에서
+항상 None을 봤다. 수리 계약: 쓰기는 ``instid``, 읽기는 ``instid`` 우선 +
+과거 자사 산출물(``instId``) 폴백, 복제 재발급은 양쪽 속성명 모두 값 재발급
+(속성명 자체는 보존 — 바이트 보수).
+"""
+from __future__ import annotations
+
+import re
+
+from hwpx import HwpxDocument
+from hwpx.oxml._document_primitives import _clone_paragraph_element
+from hwpx.oxml.memo import HwpxOxmlNote
+from hwpx.tools.markdown_export import export_markdown
+
+HP = "{http://www.hancom.co.kr/hwpml/2011/paragraph}"
+
+
+def _footnote_elements(document: HwpxDocument):
+    for paragraph in document.paragraphs:
+        for element in paragraph.element.iter():
+            if element.tag == f"{HP}footNote":
+                yield element
+
+
+def test_footnote_authoring_emits_schema_case_instid() -> None:
+    document = HwpxDocument.new()
+    paragraph = document.add_paragraph("본문")
+    paragraph.add_footnote("각주 본문")
+
+    notes = list(_footnote_elements(document))
+    assert notes, "각주가 저작되지 않았다"
+    for note in notes:
+        assert note.get("instid"), "스키마 정본 속성명 instid가 없다"
+        assert note.get("instId") is None, "카멜케이스 instId를 다시 방출했다"
+
+    data = document.to_bytes()
+    assert b'instId="' not in data
+
+
+def test_clone_reissues_schema_case_instid() -> None:
+    document = HwpxDocument.new()
+    paragraph = document.add_paragraph("본문")
+    paragraph.add_footnote("각주 본문")
+    source = paragraph.element
+    original = next(iter(_footnote_elements(document))).get("instid")
+    assert original
+
+    cloned = _clone_paragraph_element(source)
+    cloned_note = next(
+        el for el in cloned.iter() if el.tag == f"{HP}footNote"
+    )
+    assert cloned_note.get("instid"), "복제본에서 instid가 사라졌다"
+    assert cloned_note.get("instid") != original, "복제본 instid가 재발급되지 않았다 (중복 인스턴스 ID)"
+
+
+def test_clone_reissues_legacy_camelcase_value_but_keeps_name() -> None:
+    document = HwpxDocument.new()
+    paragraph = document.add_paragraph("본문")
+    run = paragraph.element.makeelement(f"{HP}run", {"charPrIDRef": "0"})
+    paragraph.element.append(run)
+    legacy = run.makeelement(f"{HP}footNote", {"instId": "9999"})
+    run.append(legacy)
+
+    cloned = _clone_paragraph_element(paragraph.element)
+    cloned_note = next(el for el in cloned.iter() if el.tag == f"{HP}footNote")
+    assert cloned_note.get("instId") not in (None, "9999"), "과거 자사 산출물의 instId도 값 재발급 대상"
+    assert cloned_note.get("instid") is None, "속성명은 보존한다 (바이트 보수)"
+
+
+def test_note_reader_prefers_schema_case_with_legacy_fallback() -> None:
+    document = HwpxDocument.new()
+    paragraph = document.add_paragraph("본문")
+    element = paragraph.element.makeelement(f"{HP}footNote", {"instid": "11"})
+    assert HwpxOxmlNote(element, paragraph).inst_id == "11"
+
+    legacy = paragraph.element.makeelement(f"{HP}footNote", {"instId": "22"})
+    assert HwpxOxmlNote(legacy, paragraph).inst_id == "22"
+
+    both = paragraph.element.makeelement(
+        f"{HP}footNote", {"instid": "11", "instId": "22"}
+    )
+    assert HwpxOxmlNote(both, paragraph).inst_id == "11"
+
+
+def test_markdown_note_marker_carries_authored_instid() -> None:
+    """저작(쓰기)과 export(읽기)가 같은 속성명으로 만나야 마커에 ID가 실린다."""
+
+    document = HwpxDocument.new()
+    paragraph = document.add_paragraph("본문")
+    paragraph.add_footnote("각주 본문")
+
+    markdown = export_markdown(HwpxDocument.open(document.to_bytes()))
+    match = re.search(r"\[\^fn(\d+)\]", markdown)
+    assert match, f"각주 마커에 instid가 비었다: {markdown!r}"

{python_hwpx-6.2.1 → python_hwpx-6.3.0}/tests/test_layout_lint.py

@@ -125,6 +125,88 @@ def test_seeded_stale_lineseg_is_caught():
     assert any(f.code == STALE_LINESEG_DETECTED for f in report.errors)
 
 
+def _add_measured_lineseg(root, text: str, seg_attrs: list[dict[str, str]]) -> None:
+    """Attach a full-attribute cache (textpos/horzsize/textheight) to *text*'s paragraph."""
+
+    para = _text_paragraph(root, text)
+    ns = para.tag.rsplit("}", 1)[0].lstrip("{")
+    lsa = etree.SubElement(para, f"{{{ns}}}lineSegArray")
+    for attrs in seg_attrs:
+        etree.SubElement(lsa, f"{{{ns}}}lineSeg", attrs)
+
+
+_A4_LINE = {"horzsize": "42520", "textheight": "1000"}  # 10pt · 표준 본문 줄 폭
+
+
+def test_grown_text_with_stale_single_line_cache_is_caught():
+    """#85 방향: 텍스트가 캐시 줄 수 너머로 자랐는데 textpos는 전부 유효한 경우.
+
+    범위 검사(textpos > len)는 이 방향을 못 본다 — 꼬리 폭 판정이 잡아야 한다.
+    120 한글자 문단에 1줄짜리 캐시: 꼬리 폭 ~120em ≫ 줄 폭 42520×2.
+    """
+
+    text = "가" * 120
+    doc = HwpxDocument.new()
+    doc.add_paragraph(text)
+    data = _inject_section0(
+        _bytes(doc),
+        lambda root: _add_measured_lineseg(root, text, [{"textpos": "0", **_A4_LINE}]),
+    )
+    report = lint_layout(data)
+    assert not report.ok
+    assert any(
+        f.code == STALE_LINESEG_DETECTED and "lacks lines" in f.message
+        for f in report.errors
+    )
+
+
+def test_valid_multiline_cache_tail_passes():
+    """정상 다줄 캐시(한컴 저장 형태): 마지막 줄 이후 꼬리가 한 줄 안 → 침묵."""
+
+    text = "가" * 120
+    doc = HwpxDocument.new()
+    doc.add_paragraph(text)
+    segs = [
+        {"textpos": "0", **_A4_LINE},
+        {"textpos": "42", **_A4_LINE},
+        {"textpos": "84", **_A4_LINE},
+    ]
+    data = _inject_section0(
+        _bytes(doc), lambda root: _add_measured_lineseg(root, text, segs)
+    )
+    assert lint_layout(data).ok
+
+
+def test_tracked_insert_prefix_artifact_replay():
+    """#85 실물 재현 쌍: 수리 전 산출물은 FAIL, 현행(수리 후) 산출물은 PASS.
+
+    현행 코드로 변경추적 삽입을 하면 편집 문단의 캐시가 제거된다(a22342c) —
+    그 산출물이 PASS 쪽. FAIL 쪽은 같은 편집에 수리 전처럼 옛 1줄 캐시를
+    바이트에 되붙여 재구성한다.
+    """
+
+    base = "시행문 본문 첫 문단"
+    doc = HwpxDocument.new()
+    paragraph = doc.add_paragraph(base, char_pr_id_ref="0")
+    doc.tracking.insert(paragraph, " 추가로 붙는 안내 문구가 길게 이어진다 " + "안내" * 50, date="2026-08-19")
+
+    fixed = doc.to_bytes()  # 수리 후: 캐시 없음
+    assert lint_layout(fixed).ok
+
+    edited_text = paragraph.text
+
+    def reattach(root):  # 수리 전 재구성: 옛 1줄 캐시가 그대로 남았던 상태
+        _add_measured_lineseg(root, edited_text, [{"textpos": "0", **_A4_LINE}])
+
+    broken = _inject_section0(fixed, reattach)
+    report = lint_layout(broken)
+    assert not report.ok
+    assert any(
+        f.code == STALE_LINESEG_DETECTED and "lacks lines" in f.message
+        for f in report.errors
+    )
+
+
 # --------------------------------------------------------------------------- #
 # 2: dirty ↔ lineseg leak (ledger-gated).
 # --------------------------------------------------------------------------- #

{python_hwpx-6.2.1 → python_hwpx-6.3.0}/tests/test_release_workflow_safety.py

@@ -33,7 +33,7 @@ SBOM_STEP = "Generate release SBOM"
 PYPI_ACTION = "pypa/gh-action-pypi-publish@"
 GITHUB_ACTION = "softprops/action-gh-release@"
 CHECKOUT_ACTION = (
-    "actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0"
+    "actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1"
 )
 EXPECTED_TRIGGER = {
     "push": {
@@ -97,7 +97,7 @@ mkdir -p release-artifacts
 EXPECTED_RELEASE_STEPS = (
     (
         "Checkout repository",
-        "actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0",
+        "actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1",
         False,
         None,
         None,
@@ -106,7 +106,7 @@ EXPECTED_RELEASE_STEPS = (
     ),
     (
         "Set up Python",
-        "actions/setup-python@ece7cb06caefa5fff74198d8649806c4678c61a1",
+        "actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97",
         False,
         {"python-version": "3.12"},
         None,
@@ -135,7 +135,7 @@ EXPECTED_RELEASE_STEPS = (
     (SBOM_STEP, None, True, None, None, None, None),
     (
         "Publish package to PyPI",
-        "pypa/gh-action-pypi-publish@ba38be9e461d3875417946c167d0b5f3d385a247",
+        "pypa/gh-action-pypi-publish@dc37677b2e1c63e2034f94d8a5b11f265b73ba33",
         False,
         None,
         None,
@@ -644,12 +644,12 @@ def test_public_legacy_cap_is_a_required_fail_closed_job() -> None:
                 "    needs: legacy-cap\n"
                 "    runs-on: ubuntu-latest\n"
                 "    steps:\n"
-                f"      - uses: {CHECKOUT_ACTION} # v7.0.0\n",
+                f"      - uses: {CHECKOUT_ACTION} # v7.0.1\n",
                 "  prepublish:\n"
                 "    needs: legacy-cap\n"
                 "    runs-on: ubuntu-latest\n"
                 "    steps:\n"
-                f"      - uses: {CHECKOUT_ACTION} # v7.0.0\n"
+                f"      - uses: {CHECKOUT_ACTION} # v7.0.1\n"
                 "        with:\n"
                 "          ref: main\n",
                 1,
@@ -857,8 +857,8 @@ def test_core_release_build_inputs_and_remote_provenance_are_frozen() -> None:
         (ROOT / "pyproject.toml").read_text(encoding="utf-8")
     )
     assert pyproject["build-system"]["requires"] == [
-        "setuptools==83.0.0",
-        "wheel==0.47.0",
+        "setuptools==84.0.0",
+        "wheel==0.48.0",
     ]
     assert _workflow_safety_failures(RELEASE.read_text(encoding="utf-8")) == []
 

python_hwpx-6.3.0/tests/test_roundtrip_fidelity_corpus.py

@@ -0,0 +1,47 @@
+# SPDX-License-Identifier: Apache-2.0
+"""왕복 충실도 로컬 절반의 상주 회귀 — 실질 구조 변화 0을 매 스위트가 재검한다.
+
+`scripts/roundtrip_fidelity.py`의 분모(실한컴 provenance 증명 파일 전수)를
+무편집 재직렬화(open→to_bytes)하고, 분류가 무해 범주(byte-identical /
+zip-container-only / cosmetic)에만 속하는지 단언한다. substantive-structural-
+change가 하나라도 나오면 이 테스트가 릴리스 전에 막는다 — 공개 지표
+(docs/corpus-metrics.md 왕복 충실도 절)의 "실질 변화 0"이 주장이 아니라
+게이트가 되게 하는 장치다. 실한컴 재개봉 판정(외부 관찰자 절반)은 별도
+배치(automation `scripts/roundtrip_reopen_mac.py`) 소관이다.
+"""
+from __future__ import annotations
+
+import importlib.util
+import sys
+from pathlib import Path
+
+ROOT = Path(__file__).resolve().parents[1]
+
+_spec = importlib.util.spec_from_file_location(
+    "roundtrip_fidelity", ROOT / "scripts" / "roundtrip_fidelity.py"
+)
+assert _spec and _spec.loader
+rf = importlib.util.module_from_spec(_spec)
+sys.modules[_spec.name] = rf  # dataclass가 자기 모듈을 sys.modules에서 찾는다
+_spec.loader.exec_module(rf)
+
+
+def test_corpus_roundtrip_has_no_substantive_change(tmp_path, monkeypatch):
+    monkeypatch.setattr(rf, "OUTPUT_DIR", tmp_path / "roundtrip")
+
+    included, excluded = rf.discover_corpus()
+    assert included, "왕복 분모가 비었다 — 코퍼스 루트/자격 심사 확인"
+    # 자격 심사 정직성: 알려진 제외 3건(비실한컴 1 + 실한컴 거부 픽스처 2)은
+    # 반드시 사유와 함께 제외 목록에 있어야 한다.
+    excluded_paths = {e.rel_path for e in excluded}
+    assert set(rf.KNOWN_NON_ORACLE_EXCLUSIONS) <= excluded_paths
+
+    offenders: list[str] = []
+    for entry in included:
+        result = rf.measure_file(entry)
+        if result.overall_category.startswith("substantive"):
+            offenders.append(f"{entry.rel_path}: {result.overall_category}")
+    assert not offenders, (
+        "무편집 왕복에서 실질 구조 변화 발생 — 수리 전 릴리스 금지:\n"
+        + "\n".join(offenders)
+    )