aevum-cli 0.3.0__tar.gz → 0.4.0__tar.gz

aevum_cli-0.4.0/.gitignore

@@ -0,0 +1,49 @@
+# Python
+__pycache__/
+*.pyc
+*.pyo
+*.pyd
+.venv/
+*.egg-info/
+
+# Build
+dist/
+build/
+site/
+
+# Tools
+.mypy_cache/
+.ruff_cache/
+.pytest_cache/
+.hypothesis/
+.cache/
+
+# IDE
+.vscode/
+.idea/
+*.swp
+*.swo
+
+# OS
+.DS_Store
+Thumbs.db
+
+# Verify scripts (run locally, never commit)
+verify_*.py
+scripts/verify_*.py
+
+# Aevum development — never commit (Phase 0+)
+aevum_principles.key
+signed_principles_draft.yaml
+tools/sign_principles.py
+
+# Private keys — never commit
+*.key
+*.pem
+
+# OpenSSF Scorecard output (Phase 0+)
+results.sarif
+verify_phase3.py
+verify_phase7.py
+verify_phase8.py
+verify_phase*.py

{aevum_cli-0.3.0 → aevum_cli-0.4.0}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: aevum-cli
-Version: 0.3.0
+Version: 0.4.0
 Summary: Aevum -- command-line interface for operating Aevum nodes.
 Project-URL: Homepage, https://aevum.build
 Project-URL: Repository, https://github.com/aevum-labs/aevum
@@ -15,6 +15,8 @@ Requires-Dist: aevum-core
 Requires-Dist: aevum-server
 Requires-Dist: typer[all]>=0.12
 Requires-Dist: uvicorn[standard]>=0.30
+Provides-Extra: conform
+Requires-Dist: aevum-conformance; extra == 'conform'
 Provides-Extra: dev
 Requires-Dist: mypy>=1.10; extra == 'dev'
 Requires-Dist: pytest-asyncio>=0.23; extra == 'dev'

{aevum_cli-0.3.0 → aevum_cli-0.4.0}/README.md

@@ -1,12 +1,12 @@
-# aevum-cli
-
-Command-line interface for Aevum — start the server, manage store migrations, and inspect complication state.
-
-```bash
-pip install aevum-cli
-aevum server start --graph memory
-aevum store migrate postgres:<dsn>
-aevum version
-```
-
-See the [main repository README](https://github.com/aevum-labs/aevum) for full usage.
+# aevum-cli
+
+Command-line interface for Aevum — start the server, manage store migrations, and inspect complication state.
+
+```bash
+pip install aevum-cli
+aevum server start --graph memory
+aevum store migrate postgres:<dsn>
+aevum version
+```
+
+See the [main repository README](https://github.com/aevum-labs/aevum) for full usage.

{aevum_cli-0.3.0 → aevum_cli-0.4.0}/pyproject.toml

@@ -1,66 +1,70 @@
-[project]
-name = "aevum-cli"
-version = "0.3.0"
-description = "Aevum -- command-line interface for operating Aevum nodes."
-readme = "README.md"
-requires-python = ">=3.11"
-license = { text = "Apache-2.0" }
-classifiers = [
-    "Development Status :: 3 - Alpha",
-    "Intended Audience :: Developers",
-    "License :: OSI Approved :: Apache Software License",
-    "Programming Language :: Python :: 3.11",
-    "Typing :: Typed",
-]
-dependencies = [
-    "aevum-core",
-    "aevum-server",
-    "typer[all]>=0.12",
-    "uvicorn[standard]>=0.30",
-]
-
-[project.scripts]
-aevum = "aevum.cli.__main__:app"
-
-[project.urls]
-Homepage = "https://aevum.build"
-Repository = "https://github.com/aevum-labs/aevum"
-
-[build-system]
-requires = ["hatchling"]
-build-backend = "hatchling.build"
-
-[tool.hatch.build.targets.wheel]
-packages = ["src/aevum"]
-
-[tool.uv.sources]
-aevum-core   = { workspace = true }
-aevum-server = { workspace = true }
-
-[tool.pytest.ini_options]
-testpaths = ["tests"]
-asyncio_mode = "auto"
-addopts = "--tb=short"
-pythonpath = ["src", "tests"]
-
-[tool.mypy]
-strict = true
-python_version = "3.11"
-mypy_path = "src"
-explicit_package_bases = true
-ignore_missing_imports = true
-
-[tool.ruff]
-line-length = 130
-
-[tool.ruff.lint]
-select = ["E", "F", "UP", "B", "SIM", "I", "ANN"]
-ignore = ["ANN401"]
-
-[project.optional-dependencies]
-dev = [
-    "pytest>=8.0",
-    "pytest-asyncio>=0.23",
-    "mypy>=1.10",
-    "ruff>=0.9",
-]
+[project]
+name = "aevum-cli"
+version = "0.4.0"
+description = "Aevum -- command-line interface for operating Aevum nodes."
+readme = "README.md"
+requires-python = ">=3.11"
+license = { text = "Apache-2.0" }
+classifiers = [
+    "Development Status :: 3 - Alpha",
+    "Intended Audience :: Developers",
+    "License :: OSI Approved :: Apache Software License",
+    "Programming Language :: Python :: 3.11",
+    "Typing :: Typed",
+]
+dependencies = [
+    "aevum-core",
+    "aevum-server",
+    "typer[all]>=0.12",
+    "uvicorn[standard]>=0.30",
+]
+
+[project.scripts]
+aevum = "aevum.cli.__main__:app"
+
+[project.urls]
+Homepage = "https://aevum.build"
+Repository = "https://github.com/aevum-labs/aevum"
+
+[build-system]
+requires = ["hatchling"]
+build-backend = "hatchling.build"
+
+[tool.hatch.build.targets.wheel]
+packages = ["src/aevum"]
+
+[tool.uv.sources]
+aevum-core         = { workspace = true }
+aevum-server       = { workspace = true }
+aevum-conformance  = { workspace = true }
+
+[tool.pytest.ini_options]
+testpaths = ["tests"]
+asyncio_mode = "auto"
+addopts = "--tb=short"
+pythonpath = ["src", "tests"]
+
+[tool.mypy]
+strict = true
+python_version = "3.11"
+mypy_path = "src"
+explicit_package_bases = true
+ignore_missing_imports = true
+
+[tool.ruff]
+line-length = 130
+
+[tool.ruff.lint]
+select = ["E", "F", "UP", "B", "SIM", "I", "ANN"]
+ignore = ["ANN401"]
+
+[project.optional-dependencies]
+conform = [
+    "aevum-conformance",
+]
+dev = [
+    "pytest>=8.0",
+    "pytest-asyncio>=0.23",
+    "mypy>=1.10",
+    "ruff>=0.9",
+]

{aevum_cli-0.3.0 → aevum_cli-0.4.0}/src/aevum/cli/__init__.py

@@ -1,14 +1,14 @@
-"""
-aevum.cli -- Command-line interface for operating Aevum nodes.
-
-Usage: aevum <command> [options]
-
-Commands:
-    version          Print installed package versions
-    server start     Start the HTTP API server
-    store migrate    Migrate between graph backends
-    complication     Manage installed complications
-    conformance run  Run the conformance suite
-"""
-
-__version__ = "0.1.0"
+"""
+aevum.cli -- Command-line interface for operating Aevum nodes.
+
+Usage: aevum <command> [options]
+
+Commands:
+    version          Print installed package versions
+    server start     Start the HTTP API server
+    store migrate    Migrate between graph backends
+    complication     Manage installed complications
+    conformance run  Run the conformance suite
+"""
+
+__version__ = "0.4.0"

{aevum_cli-0.3.0 → aevum_cli-0.4.0}/src/aevum/cli/__main__.py

@@ -1,9 +1,9 @@
-"""
-Entry point: aevum <command>
-Invoked via [project.scripts] aevum = "aevum.cli.__main__:app"
-"""
-
-from aevum.cli.app import app
-
-if __name__ == "__main__":
-    app()
+"""
+Entry point: aevum <command>
+Invoked via [project.scripts] aevum = "aevum.cli.__main__:app"
+"""
+
+from aevum.cli.app import app
+
+if __name__ == "__main__":
+    app()

aevum_cli-0.4.0/src/aevum/cli/app.py

@@ -0,0 +1,252 @@
+# SPDX-License-Identifier: Apache-2.0
+# Copyright 2024-2026 Aevum Labs contributors
+"""
+Top-level typer app — CLI v2. Sub-commands and direct commands registered here.
+"""
+from __future__ import annotations
+
+import json
+from pathlib import Path
+from typing import Annotated
+
+import typer
+
+from aevum.cli.commands import complication, conformance, server, store, version
+
+# Module-level import for mock.patch patchability (Rule 57).
+# Soft import: aevum-conformance is a workspace package not on PyPI, so
+# callers without it installed still get a usable CLI (conform command
+# shows a helpful error instead of crashing at startup).
+try:
+    from aevum.conformance.suite import ConformanceSuite
+except ImportError:  # pragma: no cover
+    ConformanceSuite = None  # type: ignore[assignment,misc]
+
+app = typer.Typer(
+    name="aevum",
+    help="Aevum governed context kernel — CLI v2",
+    no_args_is_help=True,
+    pretty_exceptions_enable=False,
+    rich_markup_mode="markdown",
+)
+
+app.add_typer(server.app, name="server")
+app.add_typer(store.app, name="store")
+app.add_typer(complication.app, name="complication")
+app.add_typer(conformance.app, name="conformance")
+app.command(name="version")(version.version_command)
+
+_DEFAULT_STATE = Path.home() / ".aevum"
+
+
+@app.command()
+def init(
+    state_dir: Annotated[
+        Path,
+        typer.Option("--state-dir", "-s", help="State directory path"),
+    ] = _DEFAULT_STATE,
+    principles: Annotated[
+        Path,
+        typer.Option("--principles", "-p", help="Path to signed_principles.yaml"),
+    ] = Path("signed_principles.yaml"),
+) -> None:
+    """
+    Initialize Aevum state directory and verify principles.
+
+    Creates the state directory, generates dual signing keys (Ed25519 +
+    ML-DSA-65), and verifies the signed_principles.yaml file.
+    """
+    typer.echo(f"Initializing Aevum state at {state_dir}...")
+
+    try:
+        from aevum.core.principles import PrinciplesVerifier
+        verifier = PrinciplesVerifier(principles)
+        p = verifier.verify()
+        typer.echo(f"  Principles: OK (sequence={p.sequence}, signed_by={p.signed_by[:30]}...)")
+    except Exception as exc:  # noqa: BLE001
+        typer.echo(f"  Principles: FAILED — {exc}", err=True)
+        raise typer.Exit(code=1) from None
+
+    try:
+        from aevum.core.kernel import Kernel
+        kernel = Kernel.local(
+            state_dir=state_dir,
+            principles_path=principles,
+            tsa_enabled=False,
+        )
+        ed25519_pub = kernel.signer.ed25519_public_key.hex()[:16]
+        typer.echo(f"  Keys: OK (ed25519={ed25519_pub}...)")
+        typer.echo(f"  Canaries: PASS ({len(kernel.principles.immutable_ids())} immutable principles)")
+    except Exception as exc:  # noqa: BLE001
+        typer.echo(f"  Kernel init: FAILED — {exc}", err=True)
+        raise typer.Exit(code=1) from None
+
+    typer.echo(typer.style("Aevum initialized successfully.", fg=typer.colors.GREEN))
+
+
+@app.command()
+def verify(
+    session_id: Annotated[str, typer.Argument(help="Session ID to verify")],
+    state_dir: Annotated[
+        Path,
+        typer.Option("--state-dir", "-s"),
+    ] = _DEFAULT_STATE,
+) -> None:
+    """
+    Verify a session's Merkle root and signatures.
+
+    Re-reads the stored session events from SQLite, recomputes the
+    Merkle root, and compares it to the signed root in the sigchain.
+    """
+    db_path = state_dir / "aevum.db"
+    if not db_path.exists():
+        typer.echo(f"Database not found: {db_path}", err=True)
+        raise typer.Exit(code=1)
+
+    try:
+        from aevum.core.replay import ReplayEngine
+        engine = ReplayEngine(db_path)
+        result = engine.replay(session_id)
+
+        if result.all_matched:
+            typer.echo(typer.style(
+                f"Session {session_id[:8]}... VERIFIED",
+                fg=typer.colors.GREEN,
+            ))
+            typer.echo(f"  Merkle root: {result.original_merkle_root[:16]}...")
+            typer.echo(f"  Events: {len(result.event_results)}")
+        else:
+            typer.echo(typer.style(
+                f"Session {session_id[:8]}... TAMPERED",
+                fg=typer.colors.RED,
+            ), err=True)
+            typer.echo(
+                f"  First divergence: event #{result.first_divergence}", err=True
+            )
+            raise typer.Exit(code=1)
+
+    except ValueError as exc:
+        typer.echo(f"Session not found: {exc}", err=True)
+        raise typer.Exit(code=1) from None
+
+
+@app.command(name="audit-pack")
+def audit_pack(
+    session_id: Annotated[str, typer.Argument(help="Session ID")],
+    output: Annotated[
+        Path | None,
+        typer.Option("--output", "-o", help="Output file path (default: stdout)"),
+    ] = None,
+    state_dir: Annotated[
+        Path,
+        typer.Option("--state-dir", "-s"),
+    ] = _DEFAULT_STATE,
+) -> None:
+    """
+    Export EU AI Act Article 12 audit pack for a session.
+
+    Produces a JSON-LD document using the PROV-O vocabulary.
+    """
+    db_path = state_dir / "aevum.db"
+    if not db_path.exists():
+        typer.echo(f"Database not found: {db_path}", err=True)
+        raise typer.Exit(code=1)
+
+    try:
+        from aevum.core.audit.audit_pack import AuditPackExporter
+        exporter = AuditPackExporter(db_path)
+        json_text = exporter.export_json(session_id)
+
+        if output:
+            output.write_text(json_text, encoding="utf-8")
+            typer.echo(f"Audit pack written to {output}")
+        else:
+            typer.echo(json_text)
+
+    except Exception as exc:  # noqa: BLE001
+        typer.echo(f"Audit pack error: {exc}", err=True)
+        raise typer.Exit(code=1) from None
+
+
+@app.command()
+def conform(
+    output: Annotated[
+        str,
+        typer.Option("--output", "-o", help="Output format: text or json"),
+    ] = "text",
+) -> None:
+    """
+    Run the 9-invariant conformance suite.
+
+    Tests all required Aevum behavioral invariants and prints a report.
+    Exit code 0 = all pass, 1 = one or more fail.
+    """
+    if ConformanceSuite is None:
+        typer.echo(
+            "aevum-conformance is not installed. Install it with: pip install aevum-conformance",
+            err=True,
+        )
+        raise typer.Exit(code=1)
+    suite = ConformanceSuite()
+    result = suite.run_all()
+
+    if output == "json":
+        typer.echo(json.dumps(result.to_dict(), indent=2))
+    else:
+        typer.echo(result.render())
+
+    if not result.all_passed:
+        raise typer.Exit(code=1)
+
+
+@app.command()
+def replay(
+    session_id: Annotated[str, typer.Argument(help="Session ID to replay")],
+    verbose: Annotated[
+        bool,
+        typer.Option("--verbose", "-v", help="Show per-event results"),
+    ] = False,
+    state_dir: Annotated[
+        Path,
+        typer.Option("--state-dir", "-s"),
+    ] = _DEFAULT_STATE,
+) -> None:
+    """
+    Replay a session and verify Merkle chain integrity.
+
+    Re-reads all events and recomputes the Merkle root. Reports any
+    divergence from the stored root (indicating tampering).
+    """
+    db_path = state_dir / "aevum.db"
+    if not db_path.exists():
+        typer.echo(f"Database not found: {db_path}", err=True)
+        raise typer.Exit(code=1)
+
+    try:
+        from aevum.core.replay import ReplayEngine
+        engine = ReplayEngine(db_path)
+        result = engine.replay(session_id)
+
+        status = (
+            typer.style("PASS", fg=typer.colors.GREEN)
+            if result.all_matched
+            else typer.style("FAIL", fg=typer.colors.RED)
+        )
+        typer.echo(f"Replay {session_id[:8]}...: {status}")
+        typer.echo(f"  Events: {len(result.event_results)}")
+        typer.echo(f"  Merkle root: {result.original_merkle_root[:16]}...")
+
+        if verbose:
+            for ev in result.event_results:
+                ev_status = "OK" if ev.matched else "DIVERGED"
+                typer.echo(f"  [{ev.sequence:3d}] {ev.event_type:<12} {ev_status}")
+
+        if not result.all_matched:
+            typer.echo(
+                f"  First divergence: event #{result.first_divergence}", err=True
+            )
+            raise typer.Exit(code=1)
+
+    except ValueError as exc:
+        typer.echo(f"Session not found: {exc}", err=True)
+        raise typer.Exit(code=1) from None

{aevum_cli-0.3.0 → aevum_cli-0.4.0}/src/aevum/cli/commands/__init__.py

@@ -1 +1 @@
-"""aevum.cli.commands -- sub-command modules."""
+"""aevum.cli.commands -- sub-command modules."""

{aevum_cli-0.3.0 → aevum_cli-0.4.0}/src/aevum/cli/commands/complication.py

@@ -1,60 +1,60 @@
-"""
-aevum complication list/suspend/resume -- manage complications.
-"""
-
-from __future__ import annotations
-
-from typing import Annotated
-
-import typer
-
-app = typer.Typer(help="Manage installed complications.")
-
-
-@app.command("list")
-def list_complications(
-    graph: Annotated[str, typer.Option(help="Graph backend")] = "memory",
-) -> None:
-    """List all installed complications with state and health."""
-    from aevum.core.engine import Engine
-    engine = Engine()
-    complications = engine.list_complications()
-    if not complications:
-        typer.echo("No complications installed.")
-        return
-    typer.echo(f"Installed complications ({len(complications)}):")
-    for name, entry in complications.items():
-        state = entry["state"]
-        typer.echo(f"  {name}: {state}")
-
-
-@app.command("suspend")
-def suspend(
-    name: Annotated[str, typer.Argument(help="Complication name to suspend")],
-) -> None:
-    """Suspend an ACTIVE complication."""
-    from aevum.core.engine import Engine
-    from aevum.core.exceptions import ComplicationError
-    engine = Engine()
-    try:
-        engine.suspend_complication(name)
-        typer.echo(f"Suspended: {name}")
-    except ComplicationError as e:
-        typer.echo(f"Error: {e}", err=True)
-        raise typer.Exit(code=1) from e
-
-
-@app.command("resume")
-def resume(
-    name: Annotated[str, typer.Argument(help="Complication name to resume")],
-) -> None:
-    """Resume a SUSPENDED complication."""
-    from aevum.core.engine import Engine
-    from aevum.core.exceptions import ComplicationError
-    engine = Engine()
-    try:
-        engine.resume_complication(name)
-        typer.echo(f"Resumed: {name}")
-    except ComplicationError as e:
-        typer.echo(f"Error: {e}", err=True)
-        raise typer.Exit(code=1) from e
+"""
+aevum complication list/suspend/resume -- manage complications.
+"""
+
+from __future__ import annotations
+
+from typing import Annotated
+
+import typer
+
+app = typer.Typer(help="Manage installed complications.")
+
+
+@app.command("list")
+def list_complications(
+    graph: Annotated[str, typer.Option(help="Graph backend")] = "memory",
+) -> None:
+    """List all installed complications with state and health."""
+    from aevum.core.engine import Engine
+    engine = Engine()
+    complications = engine.list_complications()
+    if not complications:
+        typer.echo("No complications installed.")
+        return
+    typer.echo(f"Installed complications ({len(complications)}):")
+    for name, entry in complications.items():
+        state = entry["state"]
+        typer.echo(f"  {name}: {state}")
+
+
+@app.command("suspend")
+def suspend(
+    name: Annotated[str, typer.Argument(help="Complication name to suspend")],
+) -> None:
+    """Suspend an ACTIVE complication."""
+    from aevum.core.engine import Engine
+    from aevum.core.exceptions import ComplicationError
+    engine = Engine()
+    try:
+        engine.suspend_complication(name)
+        typer.echo(f"Suspended: {name}")
+    except ComplicationError as e:
+        typer.echo(f"Error: {e}", err=True)
+        raise typer.Exit(code=1) from e
+
+
+@app.command("resume")
+def resume(
+    name: Annotated[str, typer.Argument(help="Complication name to resume")],
+) -> None:
+    """Resume a SUSPENDED complication."""
+    from aevum.core.engine import Engine
+    from aevum.core.exceptions import ComplicationError
+    engine = Engine()
+    try:
+        engine.resume_complication(name)
+        typer.echo(f"Resumed: {name}")
+    except ComplicationError as e:
+        typer.echo(f"Error: {e}", err=True)
+        raise typer.Exit(code=1) from e