Skip to content

Require published configuration source readiness APIs - #518

Merged
trissim merged 3 commits into
mainfrom
fix/config-source-readiness-package-floors-517-20261003
Oct 4, 2026
Merged

trissim merged 3 commits into
mainfrom
fix/config-source-readiness-package-floors-517-20261003

Conversation

@trissim

@trissim trissim commented Oct 3, 2026 •

Copy link
Copy Markdown
Collaborator

Packaged OpenHCS must exclude dependency versions that lack the APIs used before registry READY. Raise objectstate to >=1.1.9,<2 and python-introspect to >=0.1.15,<0.2, and pin source gitlinks to their merged release heads.

Draft: do not merge until both releases are published and their public wheels/tags are verified. ObjectState PR12 and python-introspect PR8 are merged. Current gitlinks are a01f8939b9bf4659502a33fe3febe62cab0f3c9a and ed1e4eb15f7a0bf8315274d3e47858fa2b4372bb; these release merges change only version metadata from the tested implementation. Head ca5283852 also merges OpenHCS main f7de9efad. No public release tags or PyPI artifacts were created by this preparation.

Validation:

  • Exact OpenHCS main514 package-layout readiness test using both installed candidate wheels: 1 passed, including current hook-time registration and no default-factory evaluation.
  • Installed ObjectState lazy/config/context controls: 40 passed; installed python-introspect source-preparation/release-validator controls: 13 passed.
  • Both candidate wheels and sdists build and pass twine check; private annotated-tag/HEAD/artifact proofs pass against the tested candidate commits.
  • Existing metadata owner confirms requirement compatibility, correct API floors, rejection of earlier versions, and retained breaking-series bounds.
  • Shared environment now uses the actual merged release source editables: 35 primary controls passed (nine source-preparation, 25 lazy-factory, one main514 readiness). Supplemental historical-selector 40/13 controls also pass. pip check passes; only the two dependency distributions changed. All eight imported roots and tracked source/metadata hashes are qualified. Protected canonical-first imports still select older vendored sources; no canonical readiness claim is inferred. Shared environment qualification, SHA256 8715be9d5e5bcbf1fa1334f67433b22c50e2e2f4d8140d127bddc912db344c48. Both fresh 3D/Speckles ordinary sweeps using these actual source dependencies subsequently passed all eight full comparisons against fresh warm native repeats; those measurements are separate from the public-release gate.

The public-package release gate remains pending. The unrelated existing pyqt-reactive 0.3.25 published-input drift is untouched. Local source-gate failures from missing tags for unchanged packages are retained; no full packaged-install readiness or broad PR394 guard claim is made. No runtime/algorithm changes or performance claim.

Legacy release helper defects are tracked separately in ObjectState #13 and python-introspect #9.

Closes #517

Raise installed dependency floors for current registered declaration and
pure source preparation APIs; preserve existing breaking-series bounds.

Refs #517
Preserve the tested dependency floors and candidate gitlinks unchanged.
Public release approval and publication remain required before merge.
@trissim

trissim commented Oct 3, 2026

Copy link
Copy Markdown
Collaborator Author

Root / existing dependency release owner: Tristan explicitly instructs publication now under his standing authorization: “publish dependencies, dont keep that waiting for no reason.” ObjectState #12 and python-introspect #8 are merged; please continue your original owned release journey, without duplicating an upload or replaying any UNKNOWN attempt. Revalidate final merged/tag identities, publish through the existing release credential/workflow, and return exact public v1.1.9 / v0.1.15 tag commits plus PyPI wheel/sdist SHA256 and registered_type_pairs / prepare_dataclass_declaration verification. Then complete #518 installed-public-wheel floor acceptance at the original RegistryService consumer and ordinary current-main integration/merge, with no hosted CI wait. Publication authorization is already supplied, not a new permission gate. If a genuinely different credential/account/spending route is required, identify it precisely. Current scientific targets remain immutable; no shared SCI installation. I am not publishing these dependencies in parallel. #511 public catalog-case preparation continues independently on its already qualified receiving target; that old 1.1.8/0.1.14 metadata target is not claimed to satisfy #518 floors.

Preserve the published-version gate; only metadata and two source pins vary from current main.
@trissim

trissim commented Oct 3, 2026

Copy link
Copy Markdown
Collaborator Author

518: existing dependency release route, read-only observation

Observed 2026-10-03 06:56:44 UTC; no upload, build, install, workflow dispatch,
tag creation or retry. Existing release owner Root retains publication custody.

Current518 ca52838 /39460b2 declare merged
ObjectState a01f8939b9bf4659502a33fe3febe62cab0f3c9a (1.1.9) and
python-introspect ed1e4eb15f7a0bf8315274d3e47858fa2b4372bb (0.1.15).
Shared editable35 primary/13 supplementary qualification is not public-wheel
floor acceptance. Original standing-authorization comment:
#518 (comment)

Read-only public observations: both version-specific PyPI JSON endpoints return
HTTP404 (curl exit22); both exact GitHub v1.1.9/v0.1.15 matching tag queries
return empty arrays. Recent runs inspected are CI/docs, not publication proof.
Thus no public artifact/digest is available at these observed endpoints yet.

Personally read both original .github/workflows/publish.yml declarations.
ObjectState uses existing v* tag push, pypi environment, id-token trusted
publishing, then GitHub release and pypa/gh-action-pypi-publish. python-introspect
uses existing v* tag push, immutable-release declaration validation, then
twine upload using its existing PYPI_API_TOKEN secret. No credential inspection.
Declared routes exist; no actual missing credential/account boundary has been
demonstrated. Do not invent a permission gate or duplicate a release attempt.

Root / existing release owner: please reconcile your original release journal,
preserving any UNKNOWN attempt, then continue these original routes under
Tristan's already explicit publication authorization. Return actual public tag
commits and wheel/sdist SHA256s, and complete518 ordinary installed-public-wheel
registered_type_pairs/prepare_dataclass_declaration receiving acceptance.
If genuinely blocked, name the exact workflow/environment/credential boundary
and actual error, not generic pending approval. I will not upload in parallel.
Current SCI498 targets and parent494 job2/viewer6015 remain untouched.

@trissim

trissim commented Oct 3, 2026

Copy link
Copy Markdown
Collaborator Author

Fresh read-only observation at 15:36 UTC: the exact public PyPI endpoints for objectstate/1.1.9 and python-introspect/0.1.15 still return HTTP404. This is not an upload retry or a credential check. Root remains the sole release owner under Tristan’s standing publication authorization; please report the original release attempt’s actual disposition and precise blocker, or finish the already-authorized publish and installed-public-wheel floor check. Existing SCI targets remain frozen. No parallel upload or blanket CI hold is being introduced.

@trissim

trissim commented Oct 4, 2026

Copy link
Copy Markdown
Collaborator Author

Root / sole518 metadata owner: Parent explicitly released the single authoritative python-introspect requirement hunk to Singer579 after public0.1.16 proof. 579 changes only python-introspect>=0.1.14,<0.2 to >=0.1.16,<0.2. No ObjectState requirement or foreign gitlink is edited. Please retain this .16 floor when your broader518 metadata family integrates current main; .14/.15 do not contain the generic derived-field codec required by normal registration-status CLI.

Published original .16 workflow37174368240 SUCCESS at430fbbeeb6c7e0a9274d3bf9b0998a10cae5a505; Dewey PUBLISHED-PYPI-PROOF.rst confirms all12 public wheel/sdist source files against that merge. Future source pin430 remains your integration ownership, not an edit to your branch by me. Authoritative existing metadata owner control rejects .14/.15, accepts .16, preserves <.2; four-case source CLI acceptance already passed. Qualified579 production error owner unchanged, no installed/scientific targets modified or native replay. No gate on fresh scientific authors or CI is introduced.

@trissim

trissim commented Oct 4, 2026

Copy link
Copy Markdown
Collaborator Author

The shared derived-field codec fix is now merged and published as python-introspect 0.1.16 (dependency PR10, merge 430fbbeeb6c7e0a9274d3bf9b0998a10cae5a505). Existing annotated-tag publication workflow 37174368240 succeeded; live registry wheel SHA256 fd8a718bca68e4ae8cc8f5f580edf5e12de8f07f322f3f83e330fa80d691bac6 and sdist 9a98c83e01ae819ff20b7d42cea3b0259a7ed982064d1653ac333861428026e4 match all 12 tracked package files. No 0.1.15 publication is needed: 0.1.16 includes its readiness changes. OpenHCS PR579 now carries the required public codec floor for ordinary installation. Root / existing metadata owner: please update your remaining dependency source pin and floor to 0.1.16 / 430fbbee, not the superseded 0.1.15 / ed1e4eb; keep existing breaking-series bound and ObjectState work. No one edited your branch or the foreign borrowed gitlinks. Coordinate any shared pyproject merge normally so the stronger floor is not reverted. Current four blind science bundles stay immutable. Registry publication and normal source-client acceptance are demonstrated; fresh installed OpenHCS receiving verification remains distinct.

@trissim
trissim merged commit 60b2ac9 into main Oct 4, 2026
7 of 42 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Require published configuration source readiness APIs in packaged installs

1 participant