[espetro]

Closes #709

What changed

A --embed-python=bundle output now carries its license texts in name/share/licenses/, so the redistribution obligation of shipping a compiled CPython is met by the bundle step itself.

• src/pyscriptc/licenses.py (new): stage_bundle writes name/share/licenses/ with
  • LICENSE.cpython.txt, the bundled runtime's own text, copied from the pack (lib/pythonX.Y/LICENSE.txt of the pinned asset),
  • one LICENSE.<component>.txt per third-party component compiled into libpython (expat, libffi, mpdecimal, OpenSSL, SQLite, zlib, zstd, ncurses and the rest of the packaging/third-party.toml inventory),
  • NOTICE, the third-party notice rollup for the bundled stdlib and libraries, and
  • one directory per bundled third-party distribution, holding the licenses/ tree of its *.dist-info metadata (the site-packages the embed: bundle pure-Python dependencies into site-packages, refuse native wheels #660 slice stages).
• The third-party texts ship as pyscriptc.pbs_licenses package data, so an installed compiler stages them without a repository checkout. The pinned python-build-standalone install_only asset the pack is cut from carries no licenses/ directory, so the texts are vendored from the same release's pgo+lto-full archive (the macos-arm64 and linux-x86_64 archives carry byte-identical texts, checked) with their sha256 pinned in packaging/pbs_licenses.toml. scripts/sync_pbs_licenses.py refreshes them (--fetch) and verifies them by default (drift exits 1). packaging/build.sh includes the directory in the onefile binary.
• scripts/gen_third_party_notices.py writes NOTICE and the packaged copy together, and --check covers both.
• .github/workflows/embed.yml: the acceptance step asserts OUT-moved/prog/share/licenses/LICENSE.cpython.txt, LICENSE.expat.txt and NOTICE again (the check dropped in feat(embed): the pinned CPython runtime pack and the --embed-python seam (#657, #658) #707 is restored).
• Docs: docs/reference/runtime-pack.md, docs/getting-started/install.md, .agents/docs/release/embed-runtime.md.

Tests

uv run pytest -n 2 tests/test_licenses.py tests/test_sync_pbs_licenses.py tests/test_embed.py \
  tests/test_third_party_notices.py tests/test_sitedeps.py tests/test_runtime_bump_check.py \
  tests/test_stdlibzip.py -q
70 passed, 0 failed, 1 skipped

uv run ruff check          # Ruff: No issues found
uv run ruff format --check # 821 files already formatted
uv run python -m benchmarks.baseline.run --check
scripting geomean  time 9.8x CPython  rss inf x CPython
island geomean  time 1.6x CPython  rss inf x CPython
within reference

End to end on this host (macOS arm64, the pinned PBS 20261021 pack), the acceptance program compiled and relocated:

$ pyscriptc compile --island island_fractions.py --emit bin --embed-python=bundle -o OUT/prog
$ cp -R OUT OUT-moved && rm -rf OUT
$ env -i HOME=... OUT-moved/prog/bin/prog
11/12
$ ls OUT-moved/prog/share/licenses | wc -l
21

The 21 files are the 20 component texts plus NOTICE; LICENSE.cpython.txt is the pack's own lib/python3.14/LICENSE.txt (13.5 KB).

A wheel install was checked separately: the built wheel carries pyscriptc/pbs_licenses/ (21 entries) and a fresh venv with only that wheel stages the same set from package data (staged 20 notice True). scripts/wheel_smoke.sh passes (hello).

Not done

• The licenses/ texts of a bundled distribution are staged only when its *.dist-info carries a licenses/ directory. A distribution that ships no license directory contributes nothing, and the wheel's metadata license expression is not turned into a text.
• The python-build-standalone full archive is not part of the runtime pack; the texts are vendored into the wheel at build time instead. A runtime bump has to refresh the vendored texts, the inventory and NOTICE (documented in .agents/docs/release/embed-runtime.md).
• The docker-based acceptance run was not executed here; the embed CI job on the PR is the acceptance test.

[cloudflare-workers-and-pages]

Deploying pyscriptc with    Cloudflare Pages

Latest commit:	fb164e2
Status:	🚫  Build failed.

View logs