@ahmed-g-gad/apothem 0.1.1

package/CHANGELOG.md

@@ -0,0 +1,60 @@
+<!-- SPDX-License-Identifier: MIT -->
+
+# Changelog — Apothem
+
+All notable changes to this project are documented in this file.
+
+This changelog follows [Keep a Changelog](https://keepachangelog.com/en/1.1.0/)
+and the project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
+
+## [0.1.1] - 2026-06-27
+
+The first release of Apothem — a host-agnostic configuration manager that
+authors one shared profile and materializes it into the native configuration of
+seventeen assistant harnesses behind a conformity governance gate and signed,
+reproducible releases.
+
+### Added
+
+- **Shared-profile model.** One governed profile at
+  `~/.config/apothem/profile.yaml` is the single source for the synced unit —
+  rules, slash-commands, skills, hooks, output-styles, settings, schemas, docs,
+  and MCP servers — plus the wrapped-workflow orchestrators that drive whole
+  missions end to end (`/plan`, `/research`, `/audit`, and the `/fortress`
+  closed-loop production-hardening pipeline).
+- **Seventeen harness adapters.** Antigravity, Claude Code, CodeBuddy, Codex,
+  Cursor, Gemini CLI, GitHub Copilot, Hermes, Kimi Code, Kiro, Open-Claw,
+  OpenCode, Qwen Code, Trae, Windsurf, Zed, and GLM (Z.ai) each install, verify,
+  update, and uninstall through a shared, reversible adapter contract that emits
+  the tool's native file layout. Installs back up existing targets to
+  `~/.apothem/backups/` before replacement; uninstalls reverse cleanly with zero
+  orphans.
+- **CLI.** `quickstart`, `install`, `uninstall`, `update`, `verify`, `status`,
+  `diff`, `rollback`, `harnesses`, `profile`, `doctor`, and `completion`
+  commands, with dry-run reporting, drift detection, structured JSON output
+  (`--format json`), and per-harness status. The engine is self-contained — the
+  source tree carries its vendored dependencies and runs from a checkout as
+  `python -m apothem` on system Python 3.10+.
+- **Conformity governance gate.** A pre-emission validator suite checks the
+  synced unit — authorship headers, frontmatter contracts, naming, determinism,
+  cross-references, and harness capability coverage — before any surface is
+  materialized.
+- **Multiple install paths.** The Claude Code plugin
+  (`/plugin marketplace add ahmed-g-gad/apothem`), a Gemini CLI extension, a
+  Qwen Code extension, a Codex plugin, a VS Code-family extension on the Visual
+  Studio Marketplace, the npm shim
+  (`npx @ahmed-g-gad/apothem <command>`), and the one-shot POSIX and PowerShell
+  installers (`install.sh` / `install.ps1`) with matching update and uninstall
+  scripts.
+
+### Security
+
+- Every release attaches an sdist, a wheel, SHA-256 checksums, Sigstore cosign
+  signatures, SLSA build provenance, and a CycloneDX SBOM as verification
+  evidence; the npm package is published with npm provenance via OIDC trusted
+  publishing.
+- The release pipeline gates every change on lint, tests, type checks, a
+  documentation build, CodeQL, OpenSSF Scorecard, dependency audit, and
+  supply-chain checks before publication.
+
+[0.1.1]: https://github.com/Ahmed-G-Gad/apothem/releases/tag/v0.1.1

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 Ahmed G. Gad
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OF OR OTHER DEALINGS IN
+THE SOFTWARE.

package/LICENSES/MIT.txt

@@ -0,0 +1,18 @@
+MIT License
+
+Copyright (c) <year> <copyright holders>
+
+Permission is hereby granted, free of charge, to any person obtaining a copy of this software and
+associated documentation files (the "Software"), to deal in the Software without restriction, including
+without limitation the rights to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is furnished to do so, subject to the
+following conditions:
+
+The above copyright notice and this permission notice shall be included in all copies or substantial
+portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT
+LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO
+EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER
+IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE
+USE OR OTHER DEALINGS IN THE SOFTWARE.

package/LICENSES/PSF-2.0.txt

@@ -0,0 +1,47 @@
+PYTHON SOFTWARE FOUNDATION LICENSE VERSION 2
+
+1. This LICENSE AGREEMENT is between the Python Software Foundation
+("PSF"), and the Individual or Organization ("Licensee") accessing and
+otherwise using this software ("Python") in source or binary form and
+its associated documentation.
+
+2. Subject to the terms and conditions of this License Agreement, PSF hereby
+grants Licensee a nonexclusive, royalty-free, world-wide license to reproduce,
+analyze, test, perform and/or display publicly, prepare derivative works,
+distribute, and otherwise use Python alone or in any derivative version,
+provided, however, that PSF's License Agreement and PSF's notice of copyright,
+i.e., "Copyright (c) 2001, 2002, 2003, 2004, 2005, 2006, 2007, 2008, 2009, 2010,
+2011, 2012, 2013, 2014, 2015, 2016, 2017, 2018, 2019 Python Software Foundation;
+All Rights Reserved" are retained in Python alone or in any derivative version
+prepared by Licensee.
+
+3. In the event Licensee prepares a derivative work that is based on
+or incorporates Python or any part thereof, and wants to make
+the derivative work available to others as provided herein, then
+Licensee hereby agrees to include in any such work a brief summary of
+the changes made to Python.
+
+4. PSF is making Python available to Licensee on an "AS IS"
+basis.  PSF MAKES NO REPRESENTATIONS OR WARRANTIES, EXPRESS OR
+IMPLIED.  BY WAY OF EXAMPLE, BUT NOT LIMITATION, PSF MAKES NO AND
+DISCLAIMS ANY REPRESENTATION OR WARRANTY OF MERCHANTABILITY OR FITNESS
+FOR ANY PARTICULAR PURPOSE OR THAT THE USE OF PYTHON WILL NOT
+INFRINGE ANY THIRD PARTY RIGHTS.
+
+5. PSF SHALL NOT BE LIABLE TO LICENSEE OR ANY OTHER USERS OF PYTHON
+FOR ANY INCIDENTAL, SPECIAL, OR CONSEQUENTIAL DAMAGES OR LOSS AS
+A RESULT OF MODIFYING, DISTRIBUTING, OR OTHERWISE USING PYTHON,
+OR ANY DERIVATIVE THEREOF, EVEN IF ADVISED OF THE POSSIBILITY THEREOF.
+
+6. This License Agreement will automatically terminate upon a material
+breach of its terms and conditions.
+
+7. Nothing in this License Agreement shall be deemed to create any
+relationship of agency, partnership, or joint venture between PSF and
+Licensee.  This License Agreement does not grant permission to use PSF
+trademarks or trade name in a trademark sense to endorse or promote
+products or services of Licensee, or any third party.
+
+8. By copying, installing or otherwise using Python, Licensee
+agrees to be bound by the terms and conditions of this License
+Agreement.