agentbundle 0.53.2__tar.gz → 0.58.0__tar.gz

{agentbundle-0.53.2/agentbundle.egg-info → agentbundle-0.58.0}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: agentbundle
-Version: 0.53.2
+Version: 0.58.0
 Summary: npm for your coding agent. Install packs of skills, subagents, and hooks into any repo, for every major agent.
 Author-email: eugenelim <eugenelim@users.noreply.github.com>
 License-Expression: Apache-2.0 OR MIT
@@ -35,6 +35,43 @@ python -m pip install agentbundle
 
 Requires Python 3.11+. Runs on macOS, Linux, and Windows.
 
+## What's new in 0.58.0
+
+The shared file-safety helper gains `write_confined_regular_file`, which creates
+or updates a file inside a root without following links and restores the
+original bytes if a write fails.
+
+## What's new in 0.57.0
+
+`install` and `upgrade` now print the steps to move to a renamed pack when the
+catalogue renamed the one you asked for. The governance pack is now
+`repo-governance`. CLIs older than 0.57.0 print plain "not found", so the steps
+are also in the `repo-governance` pack README and the changelog.
+
+## What's new in 0.56.0
+
+`agentbundle --version` and `catalogue contracts list` now report the catalogue
+specification version. **Breaking:** `catalogue contracts list --format json`
+now prints an object, `{"catalogue_specification": "<version>", "contracts":
+[...]}`, instead of a bare array. Read the `contracts` key for the rows.
+
+## What's new in 0.55.0
+
+A new bundled contract, `catalogue-manifest.schema.json`, describes the shape
+of the release archive manifest, and `catalogue contracts list`, `show`, and
+`export` expose it. It checks shape only and is not evidence of integrity or
+origin. `catalogue verify` now rejects a boolean `schema` value in
+`catalogue-manifest.json` with `CAT-V-ARC-011`. The archive guide states what
+proves where an archive came from.
+
+## What's new in 0.54.0
+
+Every contract now loads from the copy bundled with `agentbundle`. A
+`contracts/` folder in or above a catalogue no longer overrides
+`target-vocab.toml` or `adapter.toml`, and a missing or unparsable bundled
+contract fails closed. `catalogue lint` now reports a missing pack schema as a
+`CAT-L006` error instead of a warning that skipped validation.
+
 ## What's new in 0.53.2
 
 Error messages from `install` and from `.adapt-discovery.toml` loading state

{agentbundle-0.53.2 → agentbundle-0.58.0}/README-pypi.md

@@ -14,6 +14,43 @@ python -m pip install agentbundle
 
 Requires Python 3.11+. Runs on macOS, Linux, and Windows.
 
+## What's new in 0.58.0
+
+The shared file-safety helper gains `write_confined_regular_file`, which creates
+or updates a file inside a root without following links and restores the
+original bytes if a write fails.
+
+## What's new in 0.57.0
+
+`install` and `upgrade` now print the steps to move to a renamed pack when the
+catalogue renamed the one you asked for. The governance pack is now
+`repo-governance`. CLIs older than 0.57.0 print plain "not found", so the steps
+are also in the `repo-governance` pack README and the changelog.
+
+## What's new in 0.56.0
+
+`agentbundle --version` and `catalogue contracts list` now report the catalogue
+specification version. **Breaking:** `catalogue contracts list --format json`
+now prints an object, `{"catalogue_specification": "<version>", "contracts":
+[...]}`, instead of a bare array. Read the `contracts` key for the rows.
+
+## What's new in 0.55.0
+
+A new bundled contract, `catalogue-manifest.schema.json`, describes the shape
+of the release archive manifest, and `catalogue contracts list`, `show`, and
+`export` expose it. It checks shape only and is not evidence of integrity or
+origin. `catalogue verify` now rejects a boolean `schema` value in
+`catalogue-manifest.json` with `CAT-V-ARC-011`. The archive guide states what
+proves where an archive came from.
+
+## What's new in 0.54.0
+
+Every contract now loads from the copy bundled with `agentbundle`. A
+`contracts/` folder in or above a catalogue no longer overrides
+`target-vocab.toml` or `adapter.toml`, and a missing or unparsable bundled
+contract fails closed. `catalogue lint` now reports a missing pack schema as a
+`CAT-L006` error instead of a warning that skipped validation.
+
 ## What's new in 0.53.2
 
 Error messages from `install` and from `.adapt-discovery.toml` loading state

{agentbundle-0.53.2 → agentbundle-0.58.0}/agentbundle/_data/adapter.schema.json

@@ -1,4 +1,6 @@
 {
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://eugenelim.github.io/agent-ready-repo/docs/spec/catalogue/0.1/adapter.schema.json",
   "x-spec": "docs/specs/distribution-route-contract",
   "type": "object",
   "required": ["contract", "primitive", "adapter"],

{agentbundle-0.53.2 → agentbundle-0.58.0}/agentbundle/_data/catalogue-index.schema.json

@@ -1,7 +1,7 @@
 {
   "x-spec": "docs/specs/catalogue-wave4-semantic-contracts-index",
   "$schema": "https://json-schema.org/draft/2020-12/schema",
-  "$id": "catalogue-index.schema.json",
+  "$id": "https://eugenelim.github.io/agent-ready-repo/docs/spec/catalogue/0.1/catalogue-index.schema.json",
   "title": "Neutral catalogue index",
   "type": "object",
   "additionalProperties": false,

agentbundle-0.58.0/agentbundle/_data/catalogue-manifest.schema.json

@@ -0,0 +1,62 @@
+{
+  "x-spec": "docs/specs/catalogue-manifest-schema",
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://eugenelim.github.io/agent-ready-repo/docs/spec/catalogue/0.1/catalogue-manifest.schema.json",
+  "title": "Catalogue archive manifest",
+  "description": "Shape of the catalogue-manifest.json that `agentbundle catalogue package` writes into a catalogue archive. This schema describes shape only. A manifest that is valid against it is neither archive verification (the archive's bytes, digests and members are checked by `agentbundle catalogue verify`) nor evidence of who published the archive. Origin is established only by `catalogue verify --sha256-file` with a sidecar, or by a signature, obtained through a separately authenticated channel. Objects stay open: extra keys are allowed. The writer also emits keys this schema does not type because the verifier does not check them: source_revision, minimum_agentbundle_version, catalogue_name, catalogue_display_name and marketplace_digest (each may be null or a string), adapter_contract_version and pack_schema_version.",
+  "type": "object",
+  "required": ["schema", "bundle", "release", "generated_at", "files", "packs"],
+  "properties": {
+    "schema": {
+      "description": "Manifest schema version, 1 or 2. The package's validator rejects an integer-valued number such as 1.0 that standard JSON Schema validators and `catalogue verify` accept.",
+      "type": "integer",
+      "enum": [1, 2]
+    },
+    "bundle": {"type": "string"},
+    "release": {"type": "string"},
+    "generated_at": {"type": "string"},
+    "files": {
+      "type": "array",
+      "items": {
+        "type": "object",
+        "required": ["path", "sha256"],
+        "properties": {
+          "path": {"type": "string"},
+          "sha256": {"type": "string"}
+        }
+      }
+    },
+    "packs": {
+      "type": "array",
+      "items": {
+        "type": "object",
+        "required": ["name", "version"],
+        "properties": {
+          "name": {"type": "string"},
+          "version": {"type": "string"},
+          "path": {"type": "string"},
+          "digest": {"type": "string"}
+        },
+        "if": {"required": ["digest"]},
+        "then": {"required": ["path"]}
+      }
+    },
+    "profiles": {
+      "type": "array",
+      "items": {
+        "if": {"type": "string"},
+        "else": {
+          "type": "object",
+          "required": ["name"],
+          "properties": {
+            "name": {"type": "string"},
+            "path": {"type": "string"},
+            "digest": {"type": "string"}
+          },
+          "if": {"required": ["digest"]},
+          "then": {"required": ["path"]}
+        }
+      }
+    }
+  }
+}

agentbundle-0.58.0/agentbundle/_data/catalogue-members.txt

@@ -0,0 +1,8 @@
+adapter.schema.json
+catalogue-index.schema.json
+catalogue-manifest.schema.json
+catalogue.schema.json
+pack.schema.json
+profile.schema.json
+skill-manifest.schema.json
+skill.schema.json

{agentbundle-0.53.2 → agentbundle-0.58.0}/agentbundle/_data/catalogue.schema.json

@@ -1,6 +1,6 @@
 {
   "$schema": "https://json-schema.org/draft/2020-12/schema",
-  "$id": "catalogue.schema.json",
+  "$id": "https://eugenelim.github.io/agent-ready-repo/docs/spec/catalogue/0.1/catalogue.schema.json",
   "title": "CatalogueConfig",
   "description": "JSON Schema for catalogue.toml — ini-005 Bucket 3 configuration layer.",
   "type": "object",

{agentbundle-0.53.2 → agentbundle-0.58.0}/agentbundle/_data/file_safety.py

@@ -3,6 +3,7 @@
 from __future__ import annotations
 
 import os
+import re
 import stat
 from contextlib import contextmanager
 from hashlib import sha256
@@ -482,3 +483,210 @@ def sha256_confined_regular_file(root: Path, path: Path) -> str:
         for chunk in iter(lambda: handle.read(1024 * 1024), b""):
             digest.update(chunk)
     return digest.hexdigest()
+
+
+_SHA256_HEX = re.compile(r"[0-9a-f]{64}")
+
+
+def _write_open_flags() -> int:
+    """Flags every write-path ``os.open`` adds, limited to what ``os`` has."""
+    flags = getattr(os, "O_BINARY", 0)
+    for name in ("O_NOFOLLOW", "O_CLOEXEC", "O_NONBLOCK"):
+        flags |= getattr(os, name, 0)
+    return flags
+
+
+def _write_all(descriptor: int, data: bytes) -> None:
+    """Write every byte of *data*, continuing after a short write."""
+    view = memoryview(data)
+    while len(view):
+        written = os.write(descriptor, view)
+        if written <= 0:
+            raise OSError("write made no progress")
+        view = view[written:]
+
+
+def _read_all(descriptor: int) -> bytes:
+    """Read a descriptor to end of file."""
+    chunks: list[bytes] = []
+    while True:
+        chunk = os.read(descriptor, 1024 * 1024)
+        if not chunk:
+            return b"".join(chunks)
+        chunks.append(chunk)
+
+
+def _create_confined_file(
+    root: Path,
+    path: Path,
+    data: bytes,
+    *,
+    relative: str,
+    parent_fd: int | None,
+    leaf: str,
+) -> None:
+    """Create *path* exclusively; remove only the file this call created."""
+    flags = os.O_WRONLY | os.O_CREAT | os.O_EXCL | _write_open_flags()
+    try:
+        if parent_fd is None:
+            descriptor = os.open(path, flags, 0o600)
+        else:
+            descriptor = os.open(leaf, flags, 0o600, dir_fd=parent_fd)
+    except OSError as exc:
+        raise UnsafeContentError(
+            f"target cannot be created safely: {relative}"
+        ) from exc
+    identity: tuple[int, int] | None = None
+    try:
+        try:
+            created = os.fstat(descriptor)
+            identity = (created.st_dev, created.st_ino)
+            _validate_regular_file_stat(created, relative)
+            if parent_fd is None:
+                # No byte is written until the created path is known to be
+                # inside the root and to be the file this call created.
+                path.resolve(strict=True).relative_to(root.resolve(strict=True))
+                named = path.lstat()
+                if (named.st_dev, named.st_ino) != identity:
+                    raise UnsafeContentError(
+                        f"target changed while creating: {relative}"
+                    )
+            _write_all(descriptor, data)
+            os.fsync(descriptor)
+        except (UnsafeContentError, OSError, RuntimeError, ValueError) as exc:
+            _remove_created(path, parent_fd, leaf, identity)
+            if isinstance(exc, UnsafeContentError):
+                raise
+            raise UnsafeContentError(
+                f"target cannot be written safely: {relative}"
+            ) from exc
+    finally:
+        os.close(descriptor)
+
+
+def _remove_created(
+    path: Path, parent_fd: int | None, leaf: str, identity: tuple[int, int] | None
+) -> None:
+    """Unlink the leaf only when it still has the created file's identity."""
+    if identity is None:
+        return
+    try:
+        if parent_fd is None:
+            named = path.lstat()
+            if (named.st_dev, named.st_ino) == identity:
+                path.unlink()
+        else:
+            named = os.stat(leaf, dir_fd=parent_fd, follow_symlinks=False)
+            if (named.st_dev, named.st_ino) == identity:
+                os.unlink(leaf, dir_fd=parent_fd)
+    except OSError:
+        pass
+
+
+def _update_confined_file(
+    root: Path,
+    path: Path,
+    data: bytes,
+    expect_sha256: str,
+    *,
+    relative: str,
+    parent_fd: int | None,
+    leaf: str,
+) -> None:
+    """Rewrite *path* in place when its bytes still hash to *expect_sha256*."""
+    flags = os.O_RDWR | _write_open_flags()
+    try:
+        if parent_fd is None:
+            before = path.lstat()
+            _validate_regular_file_stat(before, relative)
+            path.resolve(strict=True).relative_to(root.resolve(strict=True))
+            descriptor = os.open(path, flags)
+        else:
+            before = os.stat(leaf, dir_fd=parent_fd, follow_symlinks=False)
+            _validate_regular_file_stat(before, relative)
+            descriptor = os.open(leaf, flags, dir_fd=parent_fd)
+    except UnsafeContentError:
+        raise
+    except (OSError, RuntimeError, ValueError) as exc:
+        raise UnsafeContentError(
+            f"target cannot be opened safely: {relative}"
+        ) from exc
+    try:
+        try:
+            after = os.fstat(descriptor)
+            _validate_regular_file_stat(after, relative)
+            if (before.st_dev, before.st_ino) != (after.st_dev, after.st_ino):
+                raise UnsafeContentError(f"target changed while opening: {relative}")
+            original = _read_all(descriptor)
+        except OSError as exc:
+            raise UnsafeContentError(
+                f"target cannot be read safely: {relative}"
+            ) from exc
+        if sha256(original).hexdigest() != expect_sha256:
+            raise UnsafeContentError(f"target does not match its digest: {relative}")
+        try:
+            os.lseek(descriptor, 0, os.SEEK_SET)
+            _write_all(descriptor, data)
+            os.ftruncate(descriptor, len(data))
+            os.fsync(descriptor)
+        except OSError as exc:
+            try:
+                os.lseek(descriptor, 0, os.SEEK_SET)
+                _write_all(descriptor, original)
+                os.ftruncate(descriptor, len(original))
+                os.fsync(descriptor)
+            except OSError as restore_exc:
+                raise UnsafeContentError(
+                    f"target write failed and was not restored: {relative}"
+                ) from restore_exc
+            raise UnsafeContentError(
+                f"target cannot be written safely: {relative}"
+            ) from exc
+    finally:
+        os.close(descriptor)
+
+
+def write_confined_regular_file(
+    root: Path,
+    path: Path,
+    data: bytes,
+    *,
+    expect_sha256: str | None,
+) -> None:
+    """Write *data* to a confined, no-follow, single-link regular file.
+
+    ``expect_sha256=None`` creates the target exclusively, so anything already
+    present (a dangling link included) is refused.  Otherwise the target must
+    exist and its bytes, read from the same descriptor that is then written,
+    must hash to ``expect_sha256`` (lowercase hex); the file is rewritten in
+    place so its identity is kept, and restored from the bytes read if a write,
+    truncate or sync fails.  A failed create removes only the file it created.
+    Every refusal is an ``UnsafeContentError``; a non-``bytes`` *data* or a
+    malformed digest is a ``ValueError``.
+    """
+    if not isinstance(data, bytes):
+        raise ValueError("data must be bytes")
+    if expect_sha256 is not None and (
+        not isinstance(expect_sha256, str)
+        or _SHA256_HEX.fullmatch(expect_sha256) is None
+    ):
+        raise ValueError("expect_sha256 must be 64 lowercase hex characters or None")
+    try:
+        relative = path.relative_to(root).as_posix()
+    except ValueError as exc:
+        raise UnsafeContentError("target path is outside its declared root") from exc
+    with _open_confined_parent(root, path, relative=relative) as (parent_fd, leaf):
+        if expect_sha256 is None:
+            _create_confined_file(
+                root, path, data, relative=relative, parent_fd=parent_fd, leaf=leaf
+            )
+        else:
+            _update_confined_file(
+                root,
+                path,
+                data,
+                expect_sha256,
+                relative=relative,
+                parent_fd=parent_fd,
+                leaf=leaf,
+            )

{agentbundle-0.53.2 → agentbundle-0.58.0}/agentbundle/_data/pack.schema.json

@@ -1,6 +1,6 @@
 {
   "$schema": "https://json-schema.org/draft/2020-12/schema",
-  "$id": "pack.schema.json",
+  "$id": "https://eugenelim.github.io/agent-ready-repo/docs/spec/catalogue/0.1/pack.schema.json",
   "title": "PackConfig",
   "description": "JSON Schema for pack.toml — pack metadata and adapter-contract configuration.",
   "type": "object",

{agentbundle-0.53.2 → agentbundle-0.58.0}/agentbundle/_data/profile.schema.json

@@ -1,6 +1,6 @@
 {
   "$schema": "https://json-schema.org/draft/2020-12/schema",
-  "$id": "profile.schema.json",
+  "$id": "https://eugenelim.github.io/agent-ready-repo/docs/spec/catalogue/0.1/profile.schema.json",
   "title": "ProfileConfig",
   "description": "JSON Schema for profiles/*.toml — pack-profile install bundles.",
   "type": "object",

{agentbundle-0.53.2 → agentbundle-0.58.0}/agentbundle/_data/public-contracts.txt

@@ -3,6 +3,7 @@ adapter.toml
 agent-plugin-extension-namespaces.schema.json
 agent-plugin-extension-namespaces.toml
 catalogue-index.schema.json
+catalogue-manifest.schema.json
 catalogue.schema.json
 distribution-routes.schema.json
 distribution-routes.toml

{agentbundle-0.53.2 → agentbundle-0.58.0}/agentbundle/_data/skill-manifest.schema.json

@@ -1,6 +1,6 @@
 {
   "$schema": "https://json-schema.org/draft-07/schema#",
-  "$id": "skill-manifest.schema.json",
+  "$id": "https://eugenelim.github.io/agent-ready-repo/docs/spec/catalogue/0.1/skill-manifest.schema.json",
   "type": "object",
   "required": ["id", "name", "version", "description"],
   "additionalProperties": false,

{agentbundle-0.53.2 → agentbundle-0.58.0}/agentbundle/_data/skill.schema.json

@@ -1,6 +1,6 @@
 {
   "$schema": "https://json-schema.org/draft/2020-12/schema",
-  "$id": "skill.schema.json",
+  "$id": "https://eugenelim.github.io/agent-ready-repo/docs/spec/catalogue/0.1/skill.schema.json",
   "title": "SkillFrontmatter",
   "description": "JSON Schema for SKILL.md frontmatter — the closed key set enforced by agentbundle catalogue lint --deep.",
   "type": "object",