trikon 0.3.0__tar.gz

trikon-0.3.0/.github/workflows/ci.yml

@@ -0,0 +1,105 @@
+# Trikon CI — see design.md §9.1 and .kiro/specs/change-intelligence/design.md §Testing Strategy.
+#
+# This workflow is expected to be RED until Phase 1 lands its full test suite
+# (see EXECUTION_PLAN.md Phase 1 tasks 5-10). Once task 14.1 closes, this
+# workflow is required-passing on every PR to main.
+#
+# Note: mypy is scoped to `trikon/change_intel/` in Phase 1. Widening to
+# `trikon/evidence/` is deferred until pre-existing `disallow_any_explicit`
+# violations in the evidence-report models are cleaned up.
+# The `perf` job is added in Task 12.2.
+
+name: ci
+on:
+  pull_request:
+  push:
+    branches: [main]
+  schedule:
+    # Nightly at 06:00 UTC — runs perf-nightly and integration-verify (see Task 14.3).
+    - cron: '0 6 * * *'
+
+jobs:
+  lint-type-test:
+    runs-on: ubuntu-latest
+    strategy:
+      matrix:
+        python-version: ["3.11", "3.12"]
+    steps:
+      - uses: actions/checkout@v4
+      - uses: actions/setup-python@v5
+        with:
+          python-version: ${{ matrix.python-version }}
+          cache: pip
+      - run: pip install -e ".[dev]"
+      - run: ruff check trikon/ tests/
+      - run: ruff format --check trikon/ tests/
+      - run: mypy --strict trikon/change_intel/
+      - run: pytest tests/unit/ --cov=trikon.change_intel --cov-branch --cov-report=xml
+      - run: coverage report --fail-under=90 --include='trikon/change_intel/*'
+
+  integration:
+    runs-on: ubuntu-latest
+    needs: lint-type-test
+    steps:
+      - uses: actions/checkout@v4
+      - uses: actions/setup-python@v5
+        with:
+          python-version: "3.12"
+      - run: pip install -e ".[dev]"
+      - run: pytest tests/integration/ -v
+
+  perf:
+    runs-on: ubuntu-latest
+    if: github.event_name == 'pull_request'
+    needs: lint-type-test
+    steps:
+      - uses: actions/checkout@v4
+      - uses: actions/setup-python@v5
+        with:
+          python-version: "3.12"
+      - run: pip install -e ".[dev]"
+      - name: Run always-on benchmarks
+        run: pytest tests/benchmarks/ --benchmark-only --benchmark-max-time=60 --no-cov -m "slow and not django"
+
+  # Nightly perf gate for the Verification Runner (Phase 2, Task 14.3).
+  # Distinct from the Phase-1 `perf` job above: that one runs on PRs against
+  # the change_intel benchmarks; this one runs on schedule against the verify
+  # benchmarks with the pinned sandbox image built fresh. Gates the wall-clock
+  # ceilings from Requirement 8.1 / 8.2 / 8.3.
+  perf-nightly:
+    runs-on: ubuntu-latest
+    if: github.event_name == 'schedule'
+    needs: lint-type-test
+    steps:
+      - uses: actions/checkout@v4
+      - uses: actions/setup-python@v5
+        with:
+          python-version: "3.11"
+          cache: pip
+      - uses: docker/setup-buildx-action@v3
+      - name: Build pinned sandbox image (trikon/sandbox:0.1.0)
+        run: ./scripts/build_sandbox_image.sh
+      - run: pip install -e ".[dev]"
+      - name: Run nightly verify perf benchmarks
+        run: pytest tests/benchmarks/ -m perf --benchmark-only --benchmark-max-time=60
+
+  # Nightly integration tests for `trikon/verify/**` (Task 14.3).
+  # Requires a live Docker daemon and the pinned sandbox image; runs the
+  # opt-in integration suite that the default `pytest` invocation excludes
+  # via the `-m 'not perf and not integration'` addopts in pyproject.toml.
+  integration-verify:
+    runs-on: ubuntu-latest
+    if: github.event_name == 'schedule'
+    needs: lint-type-test
+    steps:
+      - uses: actions/checkout@v4
+      - uses: actions/setup-python@v5
+        with:
+          python-version: "3.11"
+          cache: pip
+      - uses: docker/setup-buildx-action@v3
+      - name: Build pinned sandbox image (trikon/sandbox:0.1.0)
+        run: ./scripts/build_sandbox_image.sh
+      - run: pip install -e ".[dev]"
+      - name: Run verify integration tests
+        run: pytest tests/integration/verify/ -m integration

trikon-0.3.0/.github/workflows/publish.yml

@@ -0,0 +1,72 @@
+name: Publish to PyPI
+
+# Triggered by pushing a tag matching v* (e.g. v0.3.0, v0.3.1, v1.0.0).
+# Publishes both the wheel and the sdist to PyPI via the trusted-publisher
+# (OIDC) pattern: no long-lived API token needs to live in repo secrets.
+#
+# Trusted-publisher setup (do this ONCE in the PyPI project settings):
+#   1. Create the trikon project on PyPI (or claim the existing one).
+#   2. Under "Publishing" -> "Add a new pending publisher", register:
+#        Owner:            suryansh639
+#        Repository:       Trikon
+#        Workflow name:    publish.yml
+#        Environment name: pypi   (recommended; matches the environment: below)
+#   3. Push a tag: `git tag v0.3.0 && git push origin v0.3.0`.
+#
+# After the first successful publish, the "pending publisher" becomes a
+# permanent one and subsequent tags publish automatically.
+
+on:
+  push:
+    tags:
+      - "v*"
+
+# Every workflow that requests an OIDC token must set id-token: write at
+# the job level (or workflow level as here). Actions defaults to none.
+permissions:
+  contents: read
+  id-token: write
+
+jobs:
+  build:
+    name: Build wheel + sdist
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+
+      - name: Set up Python
+        uses: actions/setup-python@v5
+        with:
+          python-version: "3.12"
+
+      - name: Install build tooling
+        run: python -m pip install --upgrade build
+
+      - name: Build wheel + sdist
+        run: python -m build
+
+      - name: Upload dist artifacts
+        uses: actions/upload-artifact@v4
+        with:
+          name: dist
+          path: dist/
+
+  publish:
+    name: Publish to PyPI
+    needs: build
+    runs-on: ubuntu-latest
+    environment:
+      name: pypi
+      url: https://pypi.org/project/trikon/
+    steps:
+      - name: Download dist artifacts
+        uses: actions/download-artifact@v4
+        with:
+          name: dist
+          path: dist/
+
+      - name: Publish to PyPI
+        uses: pypa/gh-action-pypi-publish@release/v1
+        with:
+          # No password/api-token — the action uses OIDC via id-token: write.
+          skip-existing: true

trikon-0.3.0/.gitignore

@@ -0,0 +1,47 @@
+# Python
+__pycache__/
+*.py[cod]
+*$py.class
+*.so
+.Python
+build/
+dist/
+*.egg-info/
+.eggs/
+.pytest_cache/
+.mypy_cache/
+.ruff_cache/
+htmlcov/
+.coverage
+.coverage.*
+coverage.xml
+
+# venvs
+.venv/
+venv/
+env/
+
+# IDE
+.idea/
+.vscode/
+*.swp
+
+# Trikon local state
+.trikon/
+*.trikon.db
+
+# helper scripts (never commit)
+_*.sh
+_*.py
+# ...but __init__.py files are package markers, not helper scripts.
+# Without this exception, hatchling's VCS-aware file discovery excludes
+# every `__init__.py` from the wheel (because `_*.py` matches
+# `__init__.py`) and `pip install trikon` yields a broken import graph.
+!**/__init__.py
+
+# Subagent artifacts (semantic reviews, task-execution transcripts)
+semantic-review/
+
+# Test tooling caches
+.hypothesis/
+.benchmarks/

trikon-0.3.0/.kiro/specs/change-intelligence/.config.kiro

@@ -0,0 +1 @@
+{"specId": "99c87a2e-8ab1-4fd3-aeb4-6c818141d02c", "workflowType": "fast-task", "specType": "feature"}