wintrace 0.1.0__tar.gz

wintrace-0.1.0/.gitattributes

@@ -0,0 +1,25 @@
+# Normalize text files to LF in the repository while allowing Git to detect
+# the working-tree convention on each platform.
+*               text=auto
+
+# Source and configuration files.
+*.py            text diff=python
+*.pyi           text diff=python
+*.rs            text diff=rust
+*.toml          text diff=toml
+*.md            text
+*.ps1           text
+*.yml           text
+*.yaml          text
+*.xml           text
+Cargo.lock      text
+uv.lock         text
+
+# Common generated or binary artifacts.
+*.dll           binary
+*.pdb           binary
+*.whl           binary
+*.png           binary
+*.jpg           binary
+*.jpeg          binary
+*.gif           binary

wintrace-0.1.0/.github/dependabot.yml

@@ -0,0 +1,44 @@
+version: 2
+updates:
+  - package-ecosystem: "github-actions"
+    directory: "/"
+    schedule:
+      interval: "weekly"
+      day: "monday"
+      time: "06:00"
+      timezone: "America/Santiago"
+    groups:
+      github-actions:
+        patterns:
+          - "*"
+    open-pull-requests-limit: 5
+
+  - package-ecosystem: "cargo"
+    directory: "/"
+    schedule:
+      interval: "weekly"
+      day: "monday"
+      time: "06:00"
+      timezone: "America/Santiago"
+    groups:
+      rust-dependencies:
+        patterns:
+          - "*"
+    open-pull-requests-limit: 5
+    commit-message:
+      prefix: "deps"
+
+  - package-ecosystem: "pip"
+    directory: "/"
+    schedule:
+      interval: "weekly"
+      day: "monday"
+      time: "06:00"
+      timezone: "America/Santiago"
+    groups:
+      python-dependencies:
+        patterns:
+          - "*"
+    open-pull-requests-limit: 5
+    commit-message:
+      prefix: "deps"

wintrace-0.1.0/.github/workflows/ci.yml

@@ -0,0 +1,185 @@
+# This file is autogenerated by maturin v1.15.0
+# To update, run
+#
+#    maturin generate-ci github
+#
+name: ci
+
+on:
+  push:
+    branches:
+      - main
+      - master
+    tags:
+      - '*'
+  pull_request:
+  workflow_dispatch:
+
+permissions:
+  contents: read
+
+jobs:
+  linux:
+    runs-on: ${{ matrix.platform.runner }}
+    strategy:
+      matrix:
+        platform:
+          - runner: ubuntu-22.04
+            target: x86_64
+          - runner: ubuntu-22.04
+            target: aarch64
+          - runner: ubuntu-22.04
+            target: armv7
+          - runner: ubuntu-22.04
+            target: ppc64le
+    steps:
+      - uses: actions/checkout@v6
+      - uses: actions/setup-python@v6
+        with:
+          python-version: "3.x"
+      - name: Build wheels
+        uses: PyO3/maturin-action@v1
+        with:
+          target: ${{ matrix.platform.target }}
+          args: --release --out dist --find-interpreter
+          sccache: ${{ !startsWith(github.ref, 'refs/tags/') }}
+          manylinux: auto
+      - name: Upload wheels
+        uses: actions/upload-artifact@v6
+        with:
+          name: wheels-linux-${{ matrix.platform.target }}
+          path: dist
+
+  musllinux:
+    runs-on: ${{ matrix.platform.runner }}
+    strategy:
+      matrix:
+        platform:
+          - runner: ubuntu-22.04
+            target: x86_64
+          - runner: ubuntu-22.04
+            target: aarch64
+          - runner: ubuntu-22.04
+            target: armv7
+    steps:
+      - uses: actions/checkout@v6
+      - uses: actions/setup-python@v6
+        with:
+          python-version: "3.x"
+      - name: Build wheels
+        uses: PyO3/maturin-action@v1
+        with:
+          target: ${{ matrix.platform.target }}
+          args: --release --out dist --find-interpreter
+          sccache: ${{ !startsWith(github.ref, 'refs/tags/') }}
+          manylinux: musllinux_1_2
+      - name: Upload wheels
+        uses: actions/upload-artifact@v6
+        with:
+          name: wheels-musllinux-${{ matrix.platform.target }}
+          path: dist
+
+  windows:
+    runs-on: ${{ matrix.platform.runner }}
+    strategy:
+      matrix:
+        platform:
+          - runner: windows-latest
+            target: x64
+            python_arch: x64
+          - runner: windows-11-arm
+            target: aarch64
+            python_arch: arm64
+    steps:
+      - uses: actions/checkout@v6
+      - uses: actions/setup-python@v6
+        with:
+          python-version: "3.13"
+          architecture: ${{ matrix.platform.python_arch }}
+      - name: Build wheels
+        uses: PyO3/maturin-action@v1
+        with:
+          target: ${{ matrix.platform.target }}
+          args: --release --out dist --find-interpreter
+          sccache: ${{ !startsWith(github.ref, 'refs/tags/') }}
+      - name: Upload wheels
+        uses: actions/upload-artifact@v6
+        with:
+          name: wheels-windows-${{ matrix.platform.target }}
+          path: dist
+
+  macos:
+    runs-on: ${{ matrix.platform.runner }}
+    strategy:
+      matrix:
+        platform:
+          - runner: macos-15-intel
+            target: x86_64
+          - runner: macos-latest
+            target: aarch64
+    steps:
+      - uses: actions/checkout@v6
+      - uses: actions/setup-python@v6
+        with:
+          python-version: "3.x"
+      - name: Build wheels
+        uses: PyO3/maturin-action@v1
+        with:
+          target: ${{ matrix.platform.target }}
+          args: --release --out dist --find-interpreter
+          sccache: ${{ !startsWith(github.ref, 'refs/tags/') }}
+      - name: Upload wheels
+        uses: actions/upload-artifact@v6
+        with:
+          name: wheels-macos-${{ matrix.platform.target }}
+          path: dist
+
+  sdist:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v6
+      - name: Build sdist
+        uses: PyO3/maturin-action@v1
+        with:
+          command: sdist
+          args: --out dist
+      - name: Upload sdist
+        uses: actions/upload-artifact@v6
+        with:
+          name: wheels-sdist
+          path: dist
+
+  tests:
+    runs-on: windows-latest
+    steps:
+      - uses: actions/checkout@v6
+      - uses: actions/setup-python@v6
+        with:
+          python-version: "3.13"
+      - uses: actions-rust-lang/setup-rust-toolchain@v1
+      - name: Set up virtual environment
+        run: |
+          $venv = Join-Path $env:GITHUB_WORKSPACE ".venv"
+          python -m venv $venv
+          "$venv\Scripts" | Out-File -FilePath $env:GITHUB_PATH -Encoding utf8 -Append
+          "VIRTUAL_ENV=$venv" | Out-File -FilePath $env:GITHUB_ENV -Encoding utf8 -Append
+      - name: Install Maturin
+        run: python -m pip install maturin
+      - name: Build and install extension
+        run: maturin develop --locked
+      - name: Run Python API tests
+        run: python -m unittest discover -s tests -v
+      - name: Run Rust unit tests
+        run: cargo test --no-default-features
+
+  docs:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v6
+      - uses: actions/setup-python@v6
+        with:
+          python-version: "3.13"
+      - name: Install documentation dependencies
+        run: python -m pip install -r docs/requirements.txt
+      - name: Build documentation
+        run: mkdocs build --strict

wintrace-0.1.0/.github/workflows/publish.yml

@@ -0,0 +1,245 @@
+name: Publish
+
+on:
+  push:
+    tags:
+      - "v*"
+  workflow_dispatch:
+    inputs:
+      tag:
+        description: "Release tag to build and publish, for example v0.1.0"
+        required: true
+        type: string
+      publish:
+        description: "Publish to PyPI after validation (disable for a rehearsal)"
+        required: true
+        type: boolean
+        default: true
+
+concurrency:
+  group: release-${{ inputs.tag || github.ref_name }}
+  cancel-in-progress: false
+
+permissions:
+  contents: read
+
+jobs:
+  validate:
+    runs-on: windows-latest
+    outputs:
+      sha: ${{ steps.source.outputs.sha }}
+    steps:
+      - uses: actions/checkout@v6
+        with:
+          ref: ${{ inputs.tag || github.ref }}
+      - uses: actions/setup-python@v6
+        with:
+          python-version: "3.13"
+      - uses: actions-rust-lang/setup-rust-toolchain@v1
+      - name: Set up virtual environment
+        run: |
+          $venv = Join-Path $env:GITHUB_WORKSPACE ".venv"
+          python -m venv $venv
+          "$venv\Scripts" | Out-File -FilePath $env:GITHUB_PATH -Encoding utf8 -Append
+          "VIRTUAL_ENV=$venv" | Out-File -FilePath $env:GITHUB_ENV -Encoding utf8 -Append
+      - name: Validate release tag and package version
+        env:
+          RELEASE_TAG: ${{ inputs.tag || github.ref_name }}
+        shell: bash
+        run: |
+          python - <<'PY'
+          import os
+          import pathlib
+          import tomllib
+
+          tag = os.environ["RELEASE_TAG"]
+          if not tag.startswith("v"):
+              raise SystemExit(f"Release tag must start with 'v': {tag}")
+
+          cargo = tomllib.loads(pathlib.Path("Cargo.toml").read_text(encoding="utf-8"))
+          version = cargo["package"]["version"]
+          if tag[1:] != version:
+              raise SystemExit(
+                  f"Release tag {tag} does not match Cargo.toml version {version}"
+              )
+          PY
+      - name: Install Maturin
+        run: python -m pip install maturin
+      - name: Build and install extension
+        run: maturin develop --locked
+      - name: Run Python API tests
+        run: python -m unittest discover -s tests -v
+      - name: Run Rust unit tests
+        run: cargo test --locked --no-default-features
+      - name: Build documentation
+        run: |
+          python -m pip install -r docs/requirements.txt
+          mkdocs build --strict
+      - name: Resolve immutable build commit
+        id: source
+        shell: bash
+        run: echo "sha=$(git rev-parse HEAD)" >> "$GITHUB_OUTPUT"
+
+  linux:
+    needs: validate
+    runs-on: ${{ matrix.platform.runner }}
+    strategy:
+      matrix:
+        platform:
+          - runner: ubuntu-22.04
+            target: x86_64
+          - runner: ubuntu-22.04
+            target: aarch64
+          - runner: ubuntu-22.04
+            target: armv7
+          - runner: ubuntu-22.04
+            target: ppc64le
+    steps:
+      - uses: actions/checkout@v6
+        with:
+          ref: ${{ needs.validate.outputs.sha }}
+      - uses: actions/setup-python@v6
+        with:
+          python-version: "3.13"
+      - uses: PyO3/maturin-action@v1
+        with:
+          target: ${{ matrix.platform.target }}
+          args: --release --locked --out dist --find-interpreter
+          manylinux: auto
+      - uses: actions/upload-artifact@v6
+        with:
+          name: wheels-linux-${{ matrix.platform.target }}
+          path: dist
+
+  musllinux:
+    needs: validate
+    runs-on: ${{ matrix.platform.runner }}
+    strategy:
+      matrix:
+        platform:
+          - runner: ubuntu-22.04
+            target: x86_64
+          - runner: ubuntu-22.04
+            target: aarch64
+          - runner: ubuntu-22.04
+            target: armv7
+    steps:
+      - uses: actions/checkout@v6
+        with:
+          ref: ${{ needs.validate.outputs.sha }}
+      - uses: actions/setup-python@v6
+        with:
+          python-version: "3.13"
+      - uses: PyO3/maturin-action@v1
+        with:
+          target: ${{ matrix.platform.target }}
+          args: --release --locked --out dist --find-interpreter
+          manylinux: musllinux_1_2
+      - uses: actions/upload-artifact@v6
+        with:
+          name: wheels-musllinux-${{ matrix.platform.target }}
+          path: dist
+
+  windows:
+    needs: validate
+    runs-on: ${{ matrix.platform.runner }}
+    strategy:
+      matrix:
+        platform:
+          - runner: windows-latest
+            target: x64
+            python_arch: x64
+          - runner: windows-11-arm
+            target: aarch64
+            python_arch: arm64
+    steps:
+      - uses: actions/checkout@v6
+        with:
+          ref: ${{ needs.validate.outputs.sha }}
+      - uses: actions/setup-python@v6
+        with:
+          python-version: "3.13"
+          architecture: ${{ matrix.platform.python_arch }}
+      - uses: PyO3/maturin-action@v1
+        with:
+          target: ${{ matrix.platform.target }}
+          args: --release --locked --out dist --find-interpreter
+      - name: Test built Windows wheel
+        run: |
+          python -m pip install --force-reinstall --no-deps --no-index --find-links dist wintrace
+          if ($LASTEXITCODE -ne 0) { exit $LASTEXITCODE }
+          python -m unittest discover -s tests -v
+          if ($LASTEXITCODE -ne 0) { exit $LASTEXITCODE }
+      - uses: actions/upload-artifact@v6
+        with:
+          name: wheels-windows-${{ matrix.platform.target }}
+          path: dist
+
+  macos:
+    needs: validate
+    runs-on: ${{ matrix.platform.runner }}
+    strategy:
+      matrix:
+        platform:
+          - runner: macos-15-intel
+            target: x86_64
+          - runner: macos-latest
+            target: aarch64
+    steps:
+      - uses: actions/checkout@v6
+        with:
+          ref: ${{ needs.validate.outputs.sha }}
+      - uses: actions/setup-python@v6
+        with:
+          python-version: "3.13"
+      - uses: PyO3/maturin-action@v1
+        with:
+          target: ${{ matrix.platform.target }}
+          args: --release --locked --out dist --find-interpreter
+      - uses: actions/upload-artifact@v6
+        with:
+          name: wheels-macos-${{ matrix.platform.target }}
+          path: dist
+
+  sdist:
+    needs: validate
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v6
+        with:
+          ref: ${{ needs.validate.outputs.sha }}
+      - uses: actions/setup-python@v6
+        with:
+          python-version: "3.13"
+      - name: Install Maturin and Twine
+        run: python -m pip install "maturin>=1.15,<2.0" "twine>=6.1,<7.0"
+      - name: Build source distribution
+        run: maturin sdist --out dist
+      - name: Validate source distribution metadata
+        run: python -m twine check --strict dist/*
+      - uses: actions/upload-artifact@v6
+        with:
+          name: wheels-sdist
+          path: dist
+
+  publish:
+    if: (github.event_name == 'push' && startsWith(github.ref, 'refs/tags/v')) || (github.event_name == 'workflow_dispatch' && inputs.publish)
+    runs-on: ubuntu-latest
+    needs: [linux, musllinux, windows, macos, sdist]
+    environment:
+      name: pypi
+      url: https://pypi.org/p/wintrace
+    permissions:
+      id-token: write
+      contents: write
+    steps:
+      - uses: actions/download-artifact@v6
+      - uses: astral-sh/setup-uv@v7
+      - name: Publish distributions to PyPI
+        run: uv publish --trusted-publishing always --check-url https://pypi.org/simple/ "wheels-*/*"
+      - name: Create or update GitHub Release
+        uses: softprops/action-gh-release@v3
+        if: startsWith(github.ref, 'refs/tags/') || (github.event_name == 'workflow_dispatch' && inputs.tag != '')
+        with:
+          tag_name: ${{ inputs.tag || github.ref_name }}
+          prerelease: ${{ contains(inputs.tag || github.ref_name, '-') }}

wintrace-0.1.0/.gitignore

@@ -0,0 +1,76 @@
+/target
+
+# Byte-compiled / optimized / DLL files
+__pycache__/
+.pytest_cache/
+*.py[cod]
+*.pdb
+
+# C extensions
+*.so
+
+# Distribution / packaging
+.Python
+.venv/
+env/
+bin/
+build/
+develop-eggs/
+dist/
+eggs/
+lib/
+lib64/
+parts/
+sdist/
+var/
+include/
+man/
+venv/
+*.egg-info/
+.installed.cfg
+*.egg
+
+# Installer logs
+pip-log.txt
+pip-delete-this-directory.txt
+pip-selfcheck.json
+
+# Unit test / coverage reports
+htmlcov/
+.tox/
+.coverage
+.cache
+nosetests.xml
+coverage.xml
+
+# Translations
+*.mo
+
+# Mr Developer
+.mr.developer.cfg
+.project
+.pydevproject
+
+# Rope
+.ropeproject
+
+# Django stuff:
+*.log
+*.pot
+
+.DS_Store
+
+# Sphinx documentation
+docs/_build/
+
+# PyCharm
+.idea/
+
+# VSCode
+.vscode/
+
+# Pyenv
+.python-version
+
+# Temp files
+temp/

wintrace-0.1.0/.readthedocs.yaml

@@ -0,0 +1,13 @@
+version: 2
+
+build:
+  os: ubuntu-24.04
+  tools:
+    python: "3.13"
+
+mkdocs:
+  configuration: mkdocs.yml
+
+python:
+  install:
+    - requirements: docs/requirements.txt

wintrace-0.1.0/AGENTS.md

@@ -0,0 +1,36 @@
+# Project Guidelines
+
+## Architecture
+
+- Rust/PyO3 implements the extension in `src/`; the Python package facade is
+  under `python/wintrace/`.
+- Keep the public Python wrappers and `_wintrace.pyi` stub aligned with the
+  extension API.
+- Live Windows Event Log queries are platform-specific; EVTX and XML parsing
+  should remain portable.
+- The minimum supported Python version is 3.10. See
+  [docs/architecture.md](docs/architecture.md) for component details.
+
+## Build and Test
+
+Use the commands and setup in [CONTRIBUTING.md](CONTRIBUTING.md). At minimum,
+run formatting, Rust tests, and the Python unittest suite for relevant changes.
+Live-query integration tests require Windows.
+
+## Changes
+
+- Add or update tests for behavior changes.
+- Update API documentation and `CHANGELOG.md` when user-visible behavior
+  changes.
+- Do not commit generated binaries, private event logs, or credentials.
+
+## Release Tag
+
+- The local annotated `v0.1.0` tag should identify the final release commit.
+- Before publishing, compare it with `origin` using
+  `git show --no-patch --format="%H" v0.1.0` and
+  `git ls-remote --tags origin "refs/tags/v0.1.0*"`. Local and remote tags may
+  differ.
+- Updating the remote tag triggers the Publish workflow. Do not force-update or
+  push a release tag without explicit user approval; verify the PyPI version
+  state first.

wintrace-0.1.0/CHANGELOG.md

@@ -0,0 +1,21 @@
+# Changelog
+
+Notable changes to `wintrace` are documented here.
+
+## [Unreleased]
+
+### Planned
+
+- Compatible fixes and maintenance updates.
+
+## [0.1.0]
+
+### Added
+
+- Live Windows Event Log channel queries with XPath filtering and forward or
+  reverse record order.
+- Offline EVTX file parsing with iterator and context-manager APIs.
+- Record, dictionary, XML, and JSON result formats.
+- Event metadata accessors and XML-to-dictionary/JSON helpers.
+- Typed Python package surface, API documentation, and tests.
+- Python 3.10 or newer is required.

wintrace-0.1.0/CLAUDE.md

@@ -0,0 +1,8 @@
+# Claude Code Guidance
+
+Follow the repository-wide guidance in [AGENTS.md](AGENTS.md) and contribution
+requirements in [CONTRIBUTING.md](CONTRIBUTING.md).
+
+Keep Rust/PyO3 behavior, Python wrappers, type stubs, tests, and documentation
+consistent when changing the public API. Run the relevant validation commands
+before reporting a change as complete.

wintrace-0.1.0/CODE_OF_CONDUCT.md

@@ -0,0 +1,19 @@
+# Code of Conduct
+
+We want participation in the `wintrace` project to be respectful, constructive,
+and welcoming to people with different backgrounds and experience levels.
+
+Examples of expected behavior:
+
+- Be considerate and respectful in discussions and reviews.
+- Give actionable, technically focused feedback.
+- Accept that people may disagree; discuss ideas without personal attacks.
+- Respect privacy and do not publish another person's private information.
+
+Harassment, discrimination, intimidation, personal attacks, and disruptive
+behavior are not acceptable. Maintainers may edit or remove contributions and
+may restrict participation when necessary to protect the community.
+
+To report a conduct concern, contact the maintainers privately through the
+[project maintainer profile](https://github.com/ezer-mackenzie). Do not post
+sensitive details in a public issue.