Release v1.3.0: macOS/Linux support and archive fixes

.bumpversion.cfg

@@ -1,5 +1,5 @@
 [bumpversion]
-current_version = 1.2.2
+current_version = 1.3.0
 commit = False
 tag = False
 

.gitattributes

@@ -0,0 +1,2 @@
+# Keep upstream license bytes and CRLF intact for manifest verification.
+7z/**/License.txt -text whitespace=cr-at-eol,-blank-at-eof

.github/workflows/ci.yml

@@ -0,0 +1,100 @@
+name: CI
+
+on:
+  push:
+    branches: [main, 'release/**']
+  pull_request:
+    branches: [main, 'release/**']
+  workflow_dispatch:
+  workflow_call:
+    inputs:
+      ref:
+        description: Exact commit to build for a release
+        required: true
+        type: string
+
+permissions:
+  contents: read
+
+# Keep PR/push checks independent. Reusable release builds use their exact SHA
+# and must not be cancelled: publication consumes artifacts from that same run.
+concurrency:
+  group: ci-${{ github.workflow }}-${{ github.event_name }}-${{ inputs.ref || github.ref }}
+  cancel-in-progress: ${{ !inputs.ref }}
+
+jobs:
+  build:
+    name: Build (${{ matrix.target }})
+    runs-on: ${{ matrix.runner }}
+    timeout-minutes: 30
+    strategy:
+      fail-fast: false
+      matrix:
+        include:
+          - target: windows-x64
+            runner: windows-2025
+            architecture: x64
+            executable: dist/complex-unzip-tool-v2.exe
+          - target: macos-x64
+            runner: macos-15-intel
+            architecture: x64
+            executable: dist/complex-unzip-tool-v2
+          - target: macos-arm64
+            runner: macos-15
+            architecture: arm64
+            executable: dist/complex-unzip-tool-v2
+          - target: linux-x64
+            runner: ubuntu-24.04
+            architecture: x64
+            executable: dist/complex-unzip-tool-v2
+          - target: linux-arm64
+            runner: ubuntu-24.04-arm
+            architecture: arm64
+            executable: dist/complex-unzip-tool-v2
+    env:
+      PYTHONUTF8: '1'
+      POETRY_NO_INTERACTION: '1'
+      POETRY_VIRTUALENVS_IN_PROJECT: 'true'
+    steps:
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
+        with:
+          ref: ${{ inputs.ref || github.sha }}
+          persist-credentials: false
+      - uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97 # v7.0.0
+        with:
+          python-version: '3.11'
+          architecture: ${{ matrix.architecture }}
+      - name: Install locked dependencies
+        run: |
+          python -m pip install poetry==2.5.1
+          poetry install --with dev
+      - name: Verify version and bundled engines
+        run: |
+          poetry run python -m scripts.release version
+          poetry run python -m scripts.release verify-engines
+      - name: Run tests
+        run: |
+          node --check scripts/publish_release.cjs
+          poetry run python -m compileall -q complex_unzip_tool_v2 scripts
+          poetry run pytest -q
+      - name: Smoke test source CLI
+        run: poetry run python -m scripts.smoke_test
+      - name: Build standalone executable
+        run: poetry run build
+      - name: Smoke test standalone executable
+        env:
+          EXECUTABLE: ${{ matrix.executable }}
+        shell: bash
+        run: poetry run python -m scripts.smoke_test --executable "$EXECUTABLE"
+      - name: Package executable and notices
+        env:
+          TARGET: ${{ matrix.target }}
+        shell: bash
+        run: poetry run python -m scripts.release package "$TARGET"
+      - uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
+        with:
+          name: package-${{ matrix.target }}
+          path: artifacts/*
+          if-no-files-found: error
+          retention-days: 14
+          compression-level: 0

.github/workflows/release.yml

@@ -0,0 +1,92 @@
+name: Release
+
+on:
+  pull_request_target:
+    branches: [main]
+    types: [closed]
+
+permissions:
+  contents: read
+
+jobs:
+  prepare:
+    if: >-
+      github.event.pull_request.merged == true &&
+      github.event.pull_request.base.ref == 'main' &&
+      startsWith(github.event.pull_request.head.ref, 'release/') &&
+      contains(github.event.pull_request.labels.*.name, 'release')
+    runs-on: ubuntu-24.04
+    timeout-minutes: 5
+    outputs:
+      tag: ${{ steps.version.outputs.tag }}
+      sha: ${{ github.event.pull_request.merge_commit_sha }}
+    steps:
+      # Only merged code is checked out; never execute an unmerged PR head here.
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
+        with:
+          ref: ${{ github.event.pull_request.merge_commit_sha }}
+          fetch-depth: 0
+          persist-credentials: false
+      - uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97 # v7.0.0
+        with:
+          python-version: '3.11'
+      - name: Read consistent project version
+        id: version
+        env:
+          RELEASE_SHA: ${{ github.event.pull_request.merge_commit_sha }}
+        shell: bash
+        run: |
+          version="$(python -m scripts.release version)"
+          python -m scripts.release verify-notes
+          tag="v$version"
+          if git show-ref --verify --quiet "refs/tags/$tag"; then
+            existing="$(git rev-parse "$tag^{commit}")"
+            if [[ "$existing" != "$RELEASE_SHA" ]]; then
+              echo "::error::Tag $tag already exists at another commit. Bump the project version."
+              exit 1
+            fi
+          fi
+          echo "tag=$tag" >> "$GITHUB_OUTPUT"
+
+  build:
+    needs: prepare
+    uses: ./.github/workflows/ci.yml
+    with:
+      ref: ${{ needs.prepare.outputs.sha }}
+
+  publish:
+    needs: [prepare, build]
+    runs-on: ubuntu-24.04
+    timeout-minutes: 10
+    permissions:
+      contents: write
+    concurrency:
+      group: release-${{ needs.prepare.outputs.tag }}
+      cancel-in-progress: false
+    steps:
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
+        with:
+          ref: ${{ needs.prepare.outputs.sha }}
+          persist-credentials: false
+      - uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97 # v7.0.0
+        with:
+          python-version: '3.11'
+      - uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
+        with:
+          pattern: package-*
+          path: release-assets
+          merge-multiple: true
+      - name: Verify complete release and checksums
+        run: python -m scripts.release verify-assets release-assets
+      - name: Publish complete draft
+        uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9.0.0
+        env:
+          RELEASE_TAG: ${{ needs.prepare.outputs.tag }}
+          RELEASE_SHA: ${{ needs.prepare.outputs.sha }}
+        with:
+          script: |
+            const publish = require(process.env.GITHUB_WORKSPACE + '/scripts/publish_release.cjs');
+            await publish({github, context, core,
+              tag: process.env.RELEASE_TAG,
+              sha: process.env.RELEASE_SHA,
+              assetDir: 'release-assets'});

.gitignore

@@ -163,6 +163,8 @@ cython_debug/
 .vscode/
 
 # Project specific
+artifacts/
+release-assets/
 output.txt
 passwords.txt
 demo/

7z/README.md

@@ -0,0 +1,33 @@
+# Bundled 7-Zip
+
+Version **26.03**, released **2026-09-03**. Files are unmodified binaries from the
+[official download page](https://www.7-zip.org/download.html) and
+[upstream release](https://github.com/ip7z/7zip/releases/tag/26.03).
+
+| Platform | Engine | Required companion |
+| --- | --- | --- |
+| Windows x64 | `windows-x64/7z.exe` | `windows-x64/7z.dll` |
+| macOS Intel / Apple Silicon | `macos/7zz` (universal) | None |
+| Linux x64 | `linux-x64/7zzs` (static) | None |
+| Linux ARM64 | `linux-arm64/7zzs` (static) | None |
+
+All platform assets live in subdirectories; only this README and `manifest.json`
+are stored at the root of `7z/`. Each engine directory contains its upstream
+`License.txt`. These notices include
+the GNU LGPL, BSD licenses, and unRAR restriction; they must accompany redistributed
+engines. Corresponding source is available in `7z2603-src.tar.xz` on the linked
+upstream release. Keep executable permissions on the Unix engines.
+
+`manifest.json` records each original download URL, its SHA-256 digest from the
+GitHub release API, and SHA-256 digests of the bundled files. To update:
+
+1. Check the official release for all supported platforms.
+2. Download the Windows x64 installer and macOS/Linux console tarballs; verify
+   their digests against the official release metadata.
+3. Extract the Windows installer with 7-Zip (no installation is needed), retaining
+   `7z.exe`, `7z.dll`, and `License.txt` in `windows-x64/`. Do not substitute `7za`,
+   which supports fewer formats.
+4. Copy macOS `7zz` and Linux `7zzs`, each with its own `License.txt`, preserving
+   mode bits. Refresh the manifest and version references in the documentation.
+5. Run the test suite, native archive smoke checks, and standalone builds on the
+   supported platforms. The application never downloads an engine at runtime.

7z/linux-arm64/License.txt

@@ -0,0 +1,144 @@
+  7-Zip for Linux and macOS
+  ~~~~~~~~~~~~~~~~~~~~~~~~~
+  License for use and distribution
+  ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
+
+  7-Zip Copyright (C) 1999-2026 Igor Pavlov.
+
+  The licenses for 7zz and 7zzs files are:
+
+         - The "GNU LGPL" as main license for most of the code
+         - The "GNU LGPL" with "unRAR license restriction" for some code
+         - The "BSD 3-clause License" for some code
+         - The "BSD 2-clause License" for some code
+
+  Redistributions in binary form must reproduce related license information from this file.
+
+  Note:
+    You can use 7-Zip on any computer, including a computer in a commercial
+    organization. You don't need to register or pay for 7-Zip.
+
+
+GNU LGPL information
+--------------------
+
+    This library is free software; you can redistribute it and/or
+    modify it under the terms of the GNU Lesser General Public
+    License as published by the Free Software Foundation; either
+    version 2.1 of the License, or (at your option) any later version.
+
+    This library is distributed in the hope that it will be useful,
+    but WITHOUT ANY WARRANTY; without even the implied warranty of
+    MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
+    Lesser General Public License for more details.
+
+    You can receive a copy of the GNU Lesser General Public License from
+    http://www.gnu.org/
+
+
+
+
+BSD 3-clause License in 7-Zip code
+----------------------------------
+
+  The "BSD 3-clause License" is used for the following code in 7z.dll
+    1) LZFSE data decompression.
+       That code was derived from the code in the "LZFSE compression library" developed by Apple Inc,
+       that also uses the "BSD 3-clause License".
+    2) ZSTD data decompression.
+       that code was developed using original zstd decoder code as reference code.
+       The original zstd decoder code was developed by Facebook Inc,
+       that also uses the "BSD 3-clause License".
+
+  Copyright (c) 2015-2016, Apple Inc. All rights reserved.
+  Copyright (c) Facebook, Inc. All rights reserved.
+  Copyright (c) 2023-2026 Igor Pavlov.
+
+Text of the "BSD 3-clause License"
+----------------------------------
+
+Redistribution and use in source and binary forms, with or without modification,
+are permitted provided that the following conditions are met:
+
+1. Redistributions of source code must retain the above copyright notice, this
+   list of conditions and the following disclaimer.
+
+2. Redistributions in binary form must reproduce the above copyright notice,
+   this list of conditions and the following disclaimer in the documentation
+   and/or other materials provided with the distribution.
+
+3. Neither the name of the copyright holder nor the names of its contributors may
+   be used to endorse or promote products derived from this software without
+   specific prior written permission.
+
+THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS IS" AND
+ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED
+WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE
+DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT HOLDER OR CONTRIBUTORS BE LIABLE FOR
+ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES
+(INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES;
+LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON
+ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT
+(INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS
+SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
+
+---
+
+
+
+
+BSD 2-clause License in 7-Zip code
+----------------------------------
+
+  The "BSD 2-clause License" is used for the XXH64 code in 7-Zip.
+
+  XXH64 code in 7-Zip was derived from the original XXH64 code developed by Yann Collet.
+
+  Copyright (c) 2012-2021 Yann Collet.
+  Copyright (c) 2023-2026 Igor Pavlov.
+
+Text of the "BSD 2-clause License"
+----------------------------------
+
+Redistribution and use in source and binary forms, with or without modification,
+are permitted provided that the following conditions are met:
+
+1. Redistributions of source code must retain the above copyright notice, this
+   list of conditions and the following disclaimer.
+
+2. Redistributions in binary form must reproduce the above copyright notice,
+   this list of conditions and the following disclaimer in the documentation
+   and/or other materials provided with the distribution.
+
+THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS IS" AND
+ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED
+WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE
+DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT HOLDER OR CONTRIBUTORS BE LIABLE FOR
+ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES
+(INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES;
+LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON
+ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT
+(INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS
+SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
+
+---
+
+
+
+
+unRAR license restriction
+-------------------------
+
+The decompression engine for RAR archives was developed using source
+code of unRAR program.
+All copyrights to original unRAR code are owned by Alexander Roshal.
+
+The license for original unRAR code has the following restriction:
+
+  The unRAR sources cannot be used to re-create the RAR compression algorithm,
+  which is proprietary. Distribution of modified unRAR sources in separate form
+  or as a part of other software is permitted, provided that it is clearly
+  stated in the documentation and source comments that the code may
+  not be used to develop a RAR (WinRAR) compatible archiver.
+
+--