Use publishable SPSS engine dependency

Author: TonisOrmisson

.github/workflows/ci.yml

@@ -22,10 +22,17 @@ jobs:
           repository: OpenStatSpec/specification
           ref: b2c9283eb3bf7103bff324731922358672974aee
           path: openstatspec-specification
+      - name: Checkout required SPSS engine
+        uses: actions/checkout@v7
+        with:
+          repository: TonisOrmisson/pyspssio
+          ref: baf8958a162aa35e11b4fdc73b807a9e81070eb4
+          path: openstatspec-pyspssio
       - uses: actions/setup-python@v7
         with:
           python-version: ${{ matrix.python-version }}
       - run: python -m pip install --upgrade pip
+      - run: python -m pip install ./openstatspec-pyspssio
       - run: python -m pip install -e ".[dev]"
       - run: python -m pytest -m "not services"
 
@@ -40,12 +47,19 @@ jobs:
           repository: OpenStatSpec/specification
           ref: b2c9283eb3bf7103bff324731922358672974aee
           path: openstatspec-specification
+      - name: Checkout required SPSS engine
+        uses: actions/checkout@v7
+        with:
+          repository: TonisOrmisson/pyspssio
+          ref: baf8958a162aa35e11b4fdc73b807a9e81070eb4
+          path: openstatspec-pyspssio
       - uses: actions/setup-python@v7
         with:
           python-version: "3.12"
       - run: python -m pip install --upgrade pip build
       - run: python -m build
       - run: python -m venv /tmp/openstatspec-wheel-smoke
+      - run: /tmp/openstatspec-wheel-smoke/bin/python -m pip install ./openstatspec-pyspssio
       - run: /tmp/openstatspec-wheel-smoke/bin/python -m pip install dist/*.whl
       - run: /tmp/openstatspec-wheel-smoke/bin/openstatspec capabilities
 
@@ -99,9 +113,16 @@ jobs:
           repository: OpenStatSpec/specification
           ref: b2c9283eb3bf7103bff324731922358672974aee
           path: openstatspec-specification
+      - name: Checkout required SPSS engine
+        uses: actions/checkout@v7
+        with:
+          repository: TonisOrmisson/pyspssio
+          ref: baf8958a162aa35e11b4fdc73b807a9e81070eb4
+          path: openstatspec-pyspssio
       - uses: actions/setup-python@v7
         with:
           python-version: "3.12"
       - run: python -m pip install --upgrade pip
+      - run: python -m pip install ./openstatspec-pyspssio
       - run: python -m pip install -e ".[dev,sql]"
       - run: python -m pytest -m services

README.md

@@ -39,9 +39,9 @@ openstatspec export --database-url postgresql+psycopg://... --dataset-id respons
 
 ## 0.1.0 support status
 
-The adapter requires the pinned TonisOrmisson/pyspssio fork declared in
-pyproject.toml as its sole SPSS engine. There is no
-fallback reader or writer. It supports unencrypted SAV and ZSAV import and
+The adapter requires `openstatspec-pyspssio==0.5.1.post1` as its sole SPSS
+engine. Its import module remains `pyspssio`; the exact source commit is recorded
+in operation metadata. There is no fallback reader or writer. It supports unencrypted SAV and ZSAV import and
 SAV/ZSAV export for the semantics exposed by that engine. SQLite is the local
 reference path.
 PostgreSQL, MySQL, and MariaDB are each covered by separate service-backed CI
@@ -60,7 +60,7 @@ intentional lossy export auditable.
 The matrix is also available to Python callers as
 `openstatspec.capability_matrix()`. It distinguishes supported semantics from
 unobservable and fail-closed paths; see the SAV profile for the exact
-the pinned pyspssio fork boundary.
+the openstatspec-pyspssio boundary.
 
 See [the SAV profile](docs/sav-profile.md) for feature boundaries and
 [release readiness](docs/release-readiness.md) for the pre-tag checklist.

THIRD_PARTY_NOTICES.md

@@ -5,8 +5,8 @@ SPSS engine is a separate third-party distribution:
 
 | Component | Version | Applicable terms |
 | --- | --- | --- |
-| pyspssio | TonisOrmisson/pyspssio pinned commit 9c07a02 | MIT for the Python wrapper, except for its IBM I/O Module files |
-| IBM I/O Modules for IBM SPSS Statistics Data Files | bundled by the pinned pyspssio fork | IBM International License Agreement for Non-Warranted Programs and the accompanying License Information / REDIST files |
+| openstatspec-pyspssio (import module `pyspssio`) | 0.5.1.post1, source commit baf8958 | MIT for the Python wrapper, except for its IBM I/O Module files |
+| IBM I/O Modules for IBM SPSS Statistics Data Files | bundled by openstatspec-pyspssio | IBM International License Agreement for Non-Warranted Programs and the accompanying License Information / REDIST files |
 
 pyspssio ships the IBM licence, redistribution list, and third-party notices
 inside its installed distribution, normally under pyspssio/spssio/license/.
@@ -15,8 +15,8 @@ Apache-2.0 licence.
 
 ## Distribution responsibility
 
-OpenStatSpec requires the pinned pyspssio fork declared in pyproject.toml; it has no alternate SPSS engine. This
-repository does not vendor, alter, or publish the IBM binaries. Anyone who
+OpenStatSpec requires the exact openstatspec-pyspssio release declared in pyproject.toml; it has no alternate SPSS engine. This
+repository does not vendor or alter the IBM binaries. Anyone who
 distributes an application bundle containing the installed engine must review
 and comply with the IBM materials supplied with that engine. In particular, the
 IBM redistribution conditions require object-code-only distribution as part of

docs/pyspssio-spike.md

@@ -2,8 +2,9 @@
 
 **Status:** selected as the required, sole Python SPSS engine.
 
-OpenStatSpec Python uses the pinned TonisOrmisson/pyspssio fork, based on
-[pyspssio](https://pypi.org/project/pyspssio/), for both SAV and ZSAV import and export. There is no alternate SPSS engine.
+OpenStatSpec Python requires `openstatspec-pyspssio==0.5.1.post1`, built from
+TonisOrmisson/pyspssio commit `baf8958`, for both SAV and ZSAV import and
+export. There is no alternate SPSS engine.
 
 ## Probe result
 

docs/sav-profile.md

@@ -7,9 +7,9 @@ chunks, or creates a cell/EAV representation.
 
 ## SPSS engine
 
-OpenStatSpec Python requires the pinned TonisOrmisson/pyspssio fork declared in
-pyproject.toml as its sole SPSS engine. There is no fallback reader or writer. The engine reads unencrypted .sav and .zsav
-files, and writes both formats through the same implementation.
+OpenStatSpec Python requires `openstatspec-pyspssio==0.5.1.post1` as its sole
+SPSS engine. There is no fallback reader or writer. The engine reads
+unencrypted .sav and .zsav files, and writes both formats through the same implementation.
 
 ## Verified SQL profiles
 
@@ -36,7 +36,7 @@ of this boundary. It records the pinned source commit and installed engine versi
 
 | SPSS semantic | Pinned pyspssio status | Behaviour |
 | --- | --- | --- |
-| File label | Supported through the pinned fork | The adapter persists it in the dataset catalog and writes it through the IBM I/O identifier-string API. |
+| File label | Supported through openstatspec-pyspssio | The adapter persists it in the dataset catalog and writes it through the IBM I/O identifier-string API. |
 | Very-long UTF-8 strings | Supported | The SAV and ZSAV fixture preserves a 340-byte, multi-byte UTF-8 string through the SQL catalog and back. |
 | Ordered document text | Supported through a strict type-6 dictionary bridge plus the pinned fork | Import stores normalized document rows; export creates a temporary UTF-8 SAV source and has IBM I/O copy the records into SAV or ZSAV without invalidating ZSAV dictionary offsets. |
 | Print and write formats independently | Supported as raw IBM I/O tuples | The adapter stores both tuples separately and writes them without collapsing either value. |

pyproject.toml

@@ -10,7 +10,7 @@ readme = "README.md"
 requires-python = ">=3.11"
 license = {text = "Apache-2.0"}
 authors = [{name = "OpenStatSpec"}]
-dependencies = ["SQLAlchemy>=2.0", "pandas>=2.2", "pyspssio @ git+https://github.com/TonisOrmisson/pyspssio.git@9c07a02"]
+dependencies = ["SQLAlchemy>=2.0", "pandas>=2.2", "openstatspec-pyspssio==0.5.1.post1"]
 
 [project.optional-dependencies]
 dev = ["pytest>=8"]
@@ -24,8 +24,5 @@ testpaths = ["tests"]
 addopts = "-q"
 markers = ["services: requires a configured PostgreSQL or MySQL/MariaDB service"]
 
-[tool.hatch.metadata]
-allow-direct-references = true
-
 [tool.hatch.build.targets.wheel]
 packages = ["src/openstatspec"]

src/openstatspec/spss/sav.py

@@ -50,9 +50,10 @@
 def engine_identity() -> dict[str, str]:
     """Return the exact pinned SPSS engine identity for audit records."""
     return {
-        "package": "pyspssio",
-        "distribution": "TonisOrmisson/pyspssio",
-        "pinned_commit": "9c07a02",
+        "package": "openstatspec-pyspssio",
+        "module": "pyspssio",
+        "repository": "TonisOrmisson/pyspssio",
+        "pinned_commit": "baf8958",
         "installed_version": str(pyspssio.__version__),
     }
 

tests/test_cli.py

@@ -17,7 +17,8 @@ def test_cli_import_inspect_validate_and_export_emit_json(tmp_path, capsys) -> N
     assert openstatspec.cli.main(["inspect", str(source)]) == 0
     inspected = json.loads(capsys.readouterr().out)
     assert inspected["source_format"] == "SAV"
-    assert inspected["engine"]["pinned_commit"] == "9c07a02"
+    assert inspected["engine"]["package"] == "openstatspec-pyspssio"
+    assert inspected["engine"]["pinned_commit"] == "baf8958"
     assert inspected["source_sha256"]
     assert inspected["loss_report"] == []
     assert imported["case_count"] == 1
@@ -37,7 +38,8 @@ def test_cli_import_inspect_validate_and_export_emit_json(tmp_path, capsys) -> N
 
 def test_capability_matrix_is_public_and_cli_matches_engine_boundary(capsys) -> None:
     matrix = openstatspec.capability_matrix()
-    assert matrix["engine"]["pinned_commit"] == "9c07a02"
+    assert matrix["engine"]["package"] == "openstatspec-pyspssio"
+    assert matrix["engine"]["pinned_commit"] == "baf8958"
 
     assert matrix["spss"] == {
         "values": "supported",

tests/test_loss_reports.py

@@ -28,7 +28,8 @@ def test_persisted_import_fidelity_events_require_consent_after_reopen(tmp_path)
     connection = sqlite3.connect(database_path)
     assert {row[0] for row in connection.execute("select code from fidelity_event_catalog")} == set(_REQUIRED_ENGINE_LOSS)
     import_details = json.loads(connection.execute("select details from operation_catalog order by created_at limit 1").fetchone()[0])
-    assert import_details["engine"]["pinned_commit"] == "9c07a02"
+    assert import_details["engine"]["package"] == "openstatspec-pyspssio"
+    assert import_details["engine"]["pinned_commit"] == "baf8958"
 
     openstatspec.export_sav(database_url=database, dataset_id="persisted", destination=blocked)
     assert blocked.exists()