sourcecode 5.9.15__tar.gz → 5.9.17__tar.gz

sourcecode-5.9.17/.github/workflows/build-windows.yml

@@ -0,0 +1,78 @@
+name: Build Windows EXE
+
+on:
+  workflow_dispatch:
+
+jobs:
+  build-windows:
+    runs-on: windows-latest
+
+    steps:
+      - name: Checkout repository
+        uses: actions/checkout@v4
+
+      - name: Setup Python
+        uses: actions/setup-python@v5
+        with:
+          python-version: "3.11"
+
+      - name: Install dependencies
+        run: |
+          python -m pip install --upgrade pip
+          pip install build
+          pip install nuitka
+
+      - name: Build wheel artifact
+        run: python -m build --wheel --outdir build/wheel
+
+      - name: Install wheel artifact
+        run: pip install build/wheel/*.whl
+
+      - name: Build EXE
+        run: |
+          python -m nuitka ^
+            --onefile ^
+            --standalone ^
+            --follow-imports ^
+            --assume-yes-for-downloads ^
+            --output-dir=build ^
+            run_cli.py
+        shell: cmd
+
+      - name: Verify detached worker from installed artifact
+        shell: pwsh
+        run: |
+          $root = Join-Path $env:RUNNER_TEMP "ask-detached-repo"
+          $output = Join-Path $env:RUNNER_TEMP "ask-detached.json"
+          New-Item -ItemType Directory -Force (Join-Path $root "src/main/java/com/acme") | Out-Null
+          Set-Content -Path (Join-Path $root "pom.xml") -Value '<project><modelVersion>4.0.0</modelVersion><groupId>com.acme</groupId><artifactId>app</artifactId><version>1</version></project>'
+          Set-Content -Path (Join-Path $root "src/main/java/com/acme/App.java") -Value 'package com.acme; public class App {}'
+          python -m sourcecode spring-audit $root --output $output --detach
+          for ($i = 0; $i -lt 60 -and -not (Test-Path $output); $i++) { Start-Sleep -Seconds 1 }
+          if (-not (Test-Path $output)) { throw "Detached worker did not write its artifact" }
+          $payload = Get-Content $output -Raw | ConvertFrom-Json
+          if (-not $payload) { throw "Detached artifact is not valid JSON" }
+
+      - name: Verify pack fixes from installed artifact
+        shell: pwsh
+        run: |
+          $root = Join-Path $env:RUNNER_TEMP "ask-pack-repo"
+          New-Item -ItemType Directory -Force (Join-Path $root "src/main/java/com/acme") | Out-Null
+          New-Item -ItemType Directory -Force (Join-Path $root "src/test/java/com/acme") | Out-Null
+          Set-Content -Path (Join-Path $root "pom.xml") -Value '<project><modelVersion>4.0.0</modelVersion><groupId>com.acme</groupId><artifactId>app</artifactId><version>1</version></project>'
+          Set-Content -Path (Join-Path $root "src/main/java/com/acme/App.java") -Value 'package com.acme; public class App {}'
+          Set-Content -Path (Join-Path $root "src/test/java/com/acme/AppTest.java") -Value 'package com.acme; public class AppTest {}'
+          git -C $root init --quiet
+          git -C $root config user.email ci@example.invalid
+          git -C $root config user.name ASK-CI
+          git -C $root add .
+          git -C $root commit --quiet -m baseline
+          Add-Content -Path (Join-Path $root "src/test/java/com/acme/AppTest.java") -Value '// test-only change'
+          python -m sourcecode pack gate $root --since HEAD --format json --output-dir (Join-Path $env:RUNNER_TEMP "ask-gate")
+          python -m sourcecode pack assessment $root --only posture,risk --compact --progress stderr
+
+      - name: Upload artifact
+        uses: actions/upload-artifact@v4
+        with:
+          name: sourcecode-windows
+          path: build/**/*.exe

sourcecode-5.9.17/.github/workflows/windows-battery.yml

@@ -0,0 +1,67 @@
+name: Windows battery
+
+# AUD-601-X01 / S-10. Windows remains a release-evidence battery, but a full
+# 20+ minute suite on every worktree commit exhausted the Actions allowance
+# without providing a usable signal. Run it deliberately before a release or
+# while investigating a Windows-specific regression.
+
+on:
+  workflow_dispatch:
+
+concurrency:
+  group: windows-battery-${{ github.ref }}
+  cancel-in-progress: true
+
+jobs:
+  battery:
+    runs-on: windows-latest
+    timeout-minutes: 35
+    env:
+      # CLI payloads and diagnostics are UTF-8 contracts. Without this Windows
+      # decodes child-process output with the active code page, turning a valid
+      # JSON answer containing source text into an empty/failed test response.
+      PYTHONUTF8: "1"
+      PYTHONIOENCODING: "utf-8"
+    steps:
+      - uses: actions/checkout@v4
+        with:
+          fetch-depth: 0
+
+      - uses: actions/setup-python@v5
+        with:
+          python-version: "3.11"
+
+      - name: Install
+        run: |
+          python -m pip install --upgrade pip
+          pip install -e .
+          pip install pytest pytest-xdist
+
+      - name: Suite
+        run: pytest
+        # `runner.*` is valid at step scope. Both stores stay outside the
+        # checkout so their files never become untracked input to an analysis.
+        env:
+          SOURCECODE_CACHE_DIR: ${{ runner.temp }}/ask-cache
+          SOURCECODE_CONTEXT_CACHE_DIR: ${{ runner.temp }}/ask-context-cache
+
+      - name: Record critical command reliability matrix
+        shell: pwsh
+        run: |
+          $root = Join-Path $env:RUNNER_TEMP "ask-reliability-repo"
+          $evidence = Join-Path $env:RUNNER_TEMP "ask-windows-reliability.json"
+          New-Item -ItemType Directory -Force (Join-Path $root "src/main/java/com/acme") | Out-Null
+          Set-Content -Path (Join-Path $root "pom.xml") -Value '<project><modelVersion>4.0.0</modelVersion><groupId>com.acme</groupId><artifactId>app</artifactId><version>1</version></project>'
+          Set-Content -Path (Join-Path $root "src/main/java/com/acme/App.java") -Value 'package com.acme; public class App {}'
+          git -C $root init --quiet
+          git -C $root config user.email ci@example.invalid
+          git -C $root config user.name ASK-CI
+          git -C $root add .
+          git -C $root commit --quiet -m baseline
+          python scripts/windows_reliability_matrix.py $root --output $evidence
+
+      - name: Upload Windows reliability evidence
+        uses: actions/upload-artifact@v4
+        with:
+          name: ask-windows-reliability-matrix
+          path: ${{ runner.temp }}/ask-windows-reliability.json