atomadic-forge 0.3.2__tar.gz

atomadic_forge-0.3.2/.github/ISSUE_TEMPLATE/bug_report.yml

@@ -0,0 +1,51 @@
+name: Bug report
+description: Report a reproducible Forge problem.
+title: "[Bug]: "
+labels: ["bug", "needs-triage"]
+body:
+  - type: markdown
+    attributes:
+      value: |
+        Thanks for helping harden Forge. Please include the smallest repro you can.
+
+  - type: textarea
+    id: summary
+    attributes:
+      label: Summary
+      description: What happened, and what did you expect instead?
+    validations:
+      required: true
+
+  - type: textarea
+    id: reproduce
+    attributes:
+      label: Reproduction
+      description: Exact commands, sample files, or a minimal repo layout.
+      placeholder: |
+        python -m atomadic_forge.a4_sy_orchestration.cli ...
+    validations:
+      required: true
+
+  - type: textarea
+    id: output
+    attributes:
+      label: Output
+      description: Paste relevant terminal output. Redact secrets.
+      render: shell
+
+  - type: textarea
+    id: environment
+    attributes:
+      label: Environment
+      description: Output from `forge doctor --json`, Python version, OS, provider/model if relevant.
+      render: json
+
+  - type: checkboxes
+    id: checks
+    attributes:
+      label: Checks
+      options:
+        - label: I searched existing issues.
+          required: true
+        - label: I removed secrets, API keys, and local-only paths from the report.
+          required: true

atomadic_forge-0.3.2/.github/ISSUE_TEMPLATE/config.yml

@@ -0,0 +1,8 @@
+blank_issues_enabled: false
+contact_links:
+  - name: Security issue
+    url: https://github.com/atomadictech/atomadic-forge/security/advisories/new
+    about: Please report vulnerabilities privately through GitHub Security Advisories.
+  - name: Docs and command reference
+    url: https://github.com/atomadictech/atomadic-forge/tree/main/docs
+    about: Check the docs before opening a usage question.

atomadic_forge-0.3.2/.github/ISSUE_TEMPLATE/feature_request.yml

@@ -0,0 +1,42 @@
+name: Feature request
+description: Suggest a new Forge capability or workflow.
+title: "[Feature]: "
+labels: ["enhancement", "needs-triage"]
+body:
+  - type: textarea
+    id: problem
+    attributes:
+      label: Problem
+      description: What workflow is painful today?
+    validations:
+      required: true
+
+  - type: textarea
+    id: proposal
+    attributes:
+      label: Proposal
+      description: What would a good solution look like?
+    validations:
+      required: true
+
+  - type: dropdown
+    id: area
+    attributes:
+      label: Area
+      options:
+        - absorption pipeline
+        - LLM iterate/evolve
+        - chat/copilot
+        - docs/test generation
+        - JavaScript/TypeScript support
+        - CLI UX
+        - CI/GitHub integration
+        - other
+    validations:
+      required: true
+
+  - type: textarea
+    id: alternatives
+    attributes:
+      label: Alternatives
+      description: Any workaround or alternative design you considered?

atomadic_forge-0.3.2/.github/actions/forge-action/README.md

@@ -0,0 +1,130 @@
+# forge-action
+
+[![Atomadic Forge](https://img.shields.io/badge/atomadic-forge-purple)](https://github.com/atomadictech/atomadic-forge)
+
+A GitHub Action that runs **`forge wire` + `forge certify`** on a
+tier-organized package and posts a **sticky PR comment** with the
+rendered Receipt card. Composite action — no Docker, no extra runtime.
+
+This is the Lane C W1 deliverable from the Atomadic Forge Golden Path.
+Eventually moves to its own repo (`atomadictech/forge-action`); today
+it ships in-tree under `.github/actions/forge-action/` so the action's
+ref tracks the Forge release that emitted it.
+
+---
+
+## One-line install
+
+In a consuming repo, add `.github/workflows/forge.yml`:
+
+```yaml
+name: Atomadic Forge — architecture gate
+on:
+  pull_request:
+  push:
+    branches: [main]
+
+permissions:
+  contents: read
+  pull-requests: write   # required to post the sticky comment
+
+jobs:
+  forge:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+      - uses: atomadictech/atomadic-forge/.github/actions/forge-action@main
+        with:
+          package_root: src/your_package
+          package_name: your_package
+          fail_under: '75'
+```
+
+That's it. The action will:
+
+1. Install Forge from the same ref the action checked out at.
+2. Run `forge wire <package_root> --fail-on-violations --json` —
+   exits 1 on any upward-import violation.
+3. Run `forge certify . --fail-under <N> --emit-receipt
+   .atomadic-forge/receipt.json --print-card --json` — exits 1 below
+   the threshold.
+4. Upload `wire.json`, `certify.json`, `receipt.json`, and the
+   rendered card as a 14-day build artifact.
+5. Post (or update) a single sticky PR comment with the rendered card
+   and a one-line verdict summary.
+
+---
+
+## Inputs
+
+| Name | Required | Default | Notes |
+|---|---|---|---|
+| `package_root` | yes | – | Tier-organized package path (e.g. `src/your_package`) |
+| `project_root` | no | `.` | Project root passed to `forge certify` |
+| `package_name` | no | `''` | Forwarded to `forge certify --package` |
+| `fail_under` | no | `'75'` | Certify threshold; below this, the job fails |
+| `receipt_path` | no | `.atomadic-forge/receipt.json` | Receipt JSON emit path (relative to `project_root`) |
+| `python_version` | no | `'3.11'` | Python for the Forge install |
+| `forge_ref` | no | (action ref) | Override which `atomadic-forge` ref to install |
+| `comment_on_pr` | no | `'true'` | Set to `'false'` to skip the sticky comment |
+| `upload_artifacts` | no | `'true'` | Set to `'false'` to skip the artifact upload |
+
+## Outputs
+
+| Name | Type | Notes |
+|---|---|---|
+| `certify_score` | string | The certify score (0–100) as text |
+| `wire_verdict` | string | `PASS` or `FAIL` |
+| `receipt_path` | string | Echoes back the input `receipt_path` |
+
+---
+
+## Soft-fail discipline
+
+- **Wire and certify gates fail the job by themselves.** The
+  `--fail-on-violations` and `--fail-under` flags are native (shipped
+  in 0.2.x); no `python -c` workarounds.
+- **The PR comment is best-effort.** When the workflow runs from a
+  fork or without `pull-requests: write`, the comment step is skipped
+  and the job still reports its real verdict via exit code.
+- **The Receipt is signable.** When `AAAA_NEXUS_API_KEY` is available
+  in the environment and the consuming workflow re-invokes `forge
+  certify --sign`, the Receipt's `signatures.aaaa_nexus` field is
+  populated. `forge-action` does not call `--sign` by default — most
+  CI runs are unsigned dev attestations.
+
+---
+
+## What the sticky comment looks like
+
+```
+### Atomadic Forge — wire + certify
+
+**wire:** `PASS` · **certify:** `100.0/100`
+
+╔══════════════════════════════════════════════════════════╗
+│ Atomadic Forge Receipt         atomadic-forge.receipt/v1 │
+│ ✓ PASS                                       forge 0.2.2 │
+│ atomadic-forge                                           │
+│ CERTIFY                                      100.0 / 100 │
+│   docs ✓  tests ✓  layout ✓  wire ✓                      │
+│ WIRE                                PASS  (0 violations) │
+│ SCOUT  952 symbols  (python)             952 tier-placed │
+╚══════════════════════════════════════════════════════════╝
+
+Posted by forge-action. The card and JSON receipt are also uploaded
+as build artifacts on this run.
+```
+
+Updated in place on every push — never spams the PR.
+
+---
+
+## Status
+
+- **Today (Lane C W1):** in-tree under `.github/actions/forge-action/`,
+  ref-pinned to the consuming Forge release.
+- **Lane C W12 (planned):** dedicated repo `atomadictech/forge-action`
+  + Marketplace listing.
+- **Lane C W16+ (planned):** GitHub App variant that opens weekly
+  drift-PRs via `forge iterate --dry-run`.

atomadic_forge-0.3.2/.github/actions/forge-action/action.yml

@@ -0,0 +1,227 @@
+# Atomadic Forge — composite GitHub Action.
+#
+# Golden Path Lane C W1 deliverable. One-line install for any repo:
+#
+#   - uses: atomadictech/atomadic-forge/.github/actions/forge-action@main
+#     with:
+#       package_root: src/your_package
+#       fail_under: '75'
+#
+# What it does:
+#   1. Installs Forge from the same ref the action shipped from.
+#   2. Runs the full wire + certify chain with native fail flags.
+#   3. Writes a Forge Receipt v1 + a 60-wide rendered card.
+#   4. Uploads wire.json / certify.json / receipt.json as artifacts.
+#   5. Posts (or updates) a sticky PR comment with the rendered card +
+#      a one-line per-axis verdict.
+#
+# Soft-fail discipline:
+#   * The wire and certify gates fail the job non-zero by themselves
+#     when their thresholds are breached.
+#   * The PR-comment step is best-effort: when the action runs from a
+#     fork or without `pull-requests: write` permission, the comment
+#     is skipped and the job still reports its real verdict via exit
+#     code.
+
+name: 'Atomadic Forge — wire + certify gate'
+description: 'Run forge wire + certify on a tier-organized package and post a sticky PR comment with the Receipt card.'
+author: 'Atomadic Tech'
+branding:
+  icon: 'shield'
+  color: 'purple'
+
+inputs:
+  package_root:
+    description: 'Tier-organized package root (e.g. src/your_package).'
+    required: true
+  project_root:
+    description: 'Project root for forge certify (defaults to ".").'
+    required: false
+    default: '.'
+  package_name:
+    description: 'Python package name (forwarded to --package).'
+    required: false
+    default: ''
+  fail_under:
+    description: 'Certify threshold; the job fails when the score is below.'
+    required: false
+    default: '75'
+  receipt_path:
+    description: 'Where to write the emitted Receipt JSON (relative to project_root).'
+    required: false
+    default: '.atomadic-forge/receipt.json'
+  python_version:
+    description: 'Python version to install before running Forge.'
+    required: false
+    default: '3.11'
+  forge_ref:
+    description: 'Git ref (tag/branch/sha) of atomadic-forge to install. Defaults to the action ref.'
+    required: false
+    default: ''
+  comment_on_pr:
+    description: 'Post / update a sticky PR comment with the Receipt card. Set to "false" to skip.'
+    required: false
+    default: 'true'
+  upload_artifacts:
+    description: 'Upload wire/certify/receipt JSON as a build artifact.'
+    required: false
+    default: 'true'
+
+outputs:
+  certify_score:
+    description: 'Final certify score (0-100), as a string.'
+    value: ${{ steps.certify.outputs.score }}
+  wire_verdict:
+    description: 'Wire scan verdict (PASS / FAIL).'
+    value: ${{ steps.wire.outputs.verdict }}
+  receipt_path:
+    description: 'Path to the emitted Receipt JSON (relative to project_root).'
+    value: ${{ inputs.receipt_path }}
+
+runs:
+  using: 'composite'
+  steps:
+    - name: Set up Python
+      uses: actions/setup-python@v5
+      with:
+        python-version: ${{ inputs.python_version }}
+
+    - name: Install Atomadic Forge
+      shell: bash
+      run: |
+        set -euo pipefail
+        ref="${{ inputs.forge_ref }}"
+        if [ -z "$ref" ]; then
+          # Default: pin to the same ref the action repo is checked
+          # out at. GITHUB_ACTION_REF is set for actions invoked via
+          # `uses: owner/repo/.github/actions/...@ref`.
+          ref="${GITHUB_ACTION_REF:-main}"
+        fi
+        echo "Installing atomadic-forge from ref: $ref"
+        pip install --upgrade pip
+        pip install "atomadic-forge[dev] @ git+https://github.com/atomadictech/atomadic-forge@${ref}"
+        # Self-certify needs pytest/cryptography on PATH for the runtime + signing axes.
+        forge --version || python -m atomadic_forge --version || true
+
+    - name: Forge wire (upward-import discipline)
+      id: wire
+      shell: bash
+      working-directory: ${{ inputs.project_root }}
+      env:
+        PACKAGE_ROOT: ${{ inputs.package_root }}
+      run: |
+        set -euo pipefail
+        mkdir -p .atomadic-forge
+        # Native gate (Lane G1): exits 1 on any violation.
+        forge wire "$PACKAGE_ROOT" \
+          --fail-on-violations \
+          --json > .atomadic-forge/wire.json
+        verdict=$(python -c "import json; print(json.load(open('.atomadic-forge/wire.json'))['verdict'])")
+        echo "verdict=$verdict" >> "$GITHUB_OUTPUT"
+
+    - name: Forge certify (architecture conformance)
+      id: certify
+      shell: bash
+      working-directory: ${{ inputs.project_root }}
+      env:
+        PACKAGE_NAME: ${{ inputs.package_name }}
+        FAIL_UNDER: ${{ inputs.fail_under }}
+        RECEIPT_PATH: ${{ inputs.receipt_path }}
+      run: |
+        set -euo pipefail
+        package_arg=""
+        if [ -n "$PACKAGE_NAME" ]; then
+          package_arg="--package $PACKAGE_NAME"
+        fi
+        # Native gate + Receipt emission + card render.
+        forge certify . \
+          $package_arg \
+          --fail-under "$FAIL_UNDER" \
+          --emit-receipt "$RECEIPT_PATH" \
+          --print-card \
+          --json > .atomadic-forge/certify.json
+        score=$(python -c "import json; r=json.load(open('.atomadic-forge/certify.json')); print(r.get('score', r.get('total_score', 0)))")
+        echo "score=$score" >> "$GITHUB_OUTPUT"
+
+    - name: Render Receipt card (separate stdout for PR comment)
+      id: render
+      shell: bash
+      working-directory: ${{ inputs.project_root }}
+      env:
+        PACKAGE_NAME: ${{ inputs.package_name }}
+      run: |
+        set -euo pipefail
+        package_arg=""
+        if [ -n "$PACKAGE_NAME" ]; then
+          package_arg="--package $PACKAGE_NAME"
+        fi
+        # Re-render the card into a file we can read in the PR-comment step.
+        forge certify . $package_arg --print-card > .atomadic-forge/card.txt 2>&1 || true
+
+    - name: Post Receipt card as sticky PR comment
+      if: github.event_name == 'pull_request' && inputs.comment_on_pr == 'true'
+      uses: actions/github-script@v7
+      with:
+        github-token: ${{ github.token }}
+        script: |
+          const fs = require('fs');
+          const path = require('path');
+          const projectRoot = '${{ inputs.project_root }}';
+          const cardPath = path.join(projectRoot, '.atomadic-forge', 'card.txt');
+          let card = '(card unavailable)';
+          try {
+            card = fs.readFileSync(cardPath, 'utf8');
+          } catch (e) {
+            console.log(`Could not read ${cardPath}: ${e.message}`);
+          }
+          const score = '${{ steps.certify.outputs.score }}';
+          const verdict = '${{ steps.wire.outputs.verdict }}';
+          const marker = '<!-- atomadic-forge:receipt-card -->';
+          const body = [
+            marker,
+            '### Atomadic Forge — wire + certify',
+            '',
+            `**wire:** \`${verdict}\` &nbsp;·&nbsp; **certify:** \`${score}/100\``,
+            '',
+            '```',
+            card.trim(),
+            '```',
+            '',
+            '<sub>Posted by [forge-action](https://github.com/atomadictech/atomadic-forge/tree/main/.github/actions/forge-action). The card and JSON receipt are also uploaded as build artifacts on this run.</sub>'
+          ].join('\n');
+
+          const { owner, repo } = context.repo;
+          const issue_number = context.issue.number;
+          if (!issue_number) {
+            console.log('No PR number on this event; skipping comment.');
+            return;
+          }
+          // Find an existing sticky comment by marker.
+          const existing = await github.paginate(github.rest.issues.listComments, {
+            owner, repo, issue_number,
+          });
+          const prior = existing.find(c => c.body && c.body.includes(marker));
+          if (prior) {
+            await github.rest.issues.updateComment({
+              owner, repo, comment_id: prior.id, body,
+            });
+            console.log(`Updated sticky comment ${prior.id}.`);
+          } else {
+            await github.rest.issues.createComment({
+              owner, repo, issue_number, body,
+            });
+            console.log('Created sticky comment.');
+          }
+
+    - name: Upload Forge artifacts
+      if: always() && inputs.upload_artifacts == 'true'
+      uses: actions/upload-artifact@v4
+      with:
+        name: atomadic-forge-${{ github.run_id }}-${{ github.run_attempt }}
+        path: |
+          ${{ inputs.project_root }}/.atomadic-forge/wire.json
+          ${{ inputs.project_root }}/.atomadic-forge/certify.json
+          ${{ inputs.project_root }}/${{ inputs.receipt_path }}
+          ${{ inputs.project_root }}/.atomadic-forge/card.txt
+        if-no-files-found: warn
+        retention-days: 14

atomadic_forge-0.3.2/.github/dependabot.yml

@@ -0,0 +1,17 @@
+version: 2
+updates:
+  - package-ecosystem: github-actions
+    directory: /
+    schedule:
+      interval: weekly
+      day: monday
+      time: "10:00"
+    open-pull-requests-limit: 5
+
+  - package-ecosystem: pip
+    directory: /
+    schedule:
+      interval: weekly
+      day: monday
+      time: "10:30"
+    open-pull-requests-limit: 5

atomadic_forge-0.3.2/.github/pull_request_template.md

@@ -0,0 +1,21 @@
+## Summary
+
+- 
+
+## Verification
+
+- [ ] `python -m pytest --basetemp .pytest_tmp_run`
+- [ ] `ruff check .`
+- [ ] `lint-imports`
+- [ ] `python -m atomadic_forge.a4_sy_orchestration.cli wire src/atomadic_forge --json`
+- [ ] `python -m atomadic_forge.a4_sy_orchestration.cli commandsmith smoke --json`
+
+## Release Notes
+
+- [ ] Updated `CHANGELOG.md` for user-facing behavior.
+- [ ] Updated docs for new commands, flags, schemas, or generated artifacts.
+- [ ] No secrets, generated outputs, or local transcripts are committed.
+
+## Risk
+
+- 

atomadic_forge-0.3.2/.github/workflows/ci.yml

@@ -0,0 +1,96 @@
+name: CI
+
+on:
+  push:
+    branches: [main, master]
+  pull_request:
+  workflow_dispatch:
+
+permissions:
+  contents: read
+
+concurrency:
+  group: ci-${{ github.workflow }}-${{ github.ref }}
+  cancel-in-progress: true
+
+jobs:
+  test:
+    name: Python ${{ matrix.python-version }}
+    runs-on: ubuntu-latest
+    strategy:
+      fail-fast: false
+      matrix:
+        python-version: ["3.10", "3.11", "3.12"]
+
+    steps:
+      - name: Check out repository
+        uses: actions/checkout@v4
+
+      - name: Set up Python
+        uses: actions/setup-python@v5
+        with:
+          python-version: ${{ matrix.python-version }}
+          cache: pip
+
+      - name: Install package
+        run: |
+          python -m pip install --upgrade pip
+          python -m pip install -e ".[dev]"
+
+      - name: Run tests
+        run: python -m pytest --basetemp .pytest_tmp_run
+
+      - name: Remove pytest scratch output
+        if: always()
+        run: rm -rf .pytest_tmp_run
+
+      - name: Ruff
+        run: ruff check .
+
+      - name: Import-layer contract
+        run: lint-imports
+
+      - name: Forge wire
+        run: python -m atomadic_forge.a4_sy_orchestration.cli wire src/atomadic_forge --json
+
+      - name: Forge command smoke
+        run: python -m atomadic_forge.a4_sy_orchestration.cli commandsmith smoke --json
+
+      - name: Forge self-certify (BEP self-hosting proof — gate at 100/100)
+        run: |
+          python -m atomadic_forge.a4_sy_orchestration.cli certify . --json --fail-under 100 > certify_self.json
+          python -c "import json, sys; d = json.load(open('certify_self.json')); s = d['score']; print(f'forge self-certify: {s}/100 (components: {d[\"score_components\"]})'); sys.exit(0 if s >= 100 else 1)"
+
+      - name: Upload self-certify report
+        if: always()
+        uses: actions/upload-artifact@v4
+        with:
+          name: forge-certify-self-${{ matrix.python-version }}
+          path: certify_self.json
+          if-no-files-found: ignore
+
+  package:
+    name: Build package
+    runs-on: ubuntu-latest
+    steps:
+      - name: Check out repository
+        uses: actions/checkout@v4
+
+      - name: Set up Python
+        uses: actions/setup-python@v5
+        with:
+          python-version: "3.12"
+          cache: pip
+
+      - name: Build distributions
+        run: |
+          python -m pip install --upgrade pip
+          python -m pip install build twine
+          python -m build
+          python -m twine check dist/*
+
+      - name: Upload distributions
+        uses: actions/upload-artifact@v4
+        with:
+          name: atomadic-forge-dist
+          path: dist/*

atomadic_forge-0.3.2/.github/workflows/forge-self-certify.yml

@@ -0,0 +1,54 @@
+# Atomadic Forge — self-certify
+#
+# Runs the in-tree forge-action against the Forge repo itself on every
+# push and pull request. This is the dogfood gate: if Forge cannot pass
+# its own architecture conformance check, the offending change must be
+# fixed before merge.
+#
+# Golden Path Lane C W1 acceptance criterion: 'Marketplace-listed; one-
+# line install -> sticky PR comment with Receipt rendered'. The
+# Marketplace listing is W12 (separate repo); today's deliverable is
+# the action itself + the dogfood proof that it works on the Forge repo.
+
+name: forge self-certify
+
+on:
+  push:
+    branches: [main, master]
+  pull_request:
+    branches: [main, master]
+  workflow_dispatch:
+
+permissions:
+  contents: read
+  pull-requests: write    # for the sticky comment
+
+concurrency:
+  group: forge-self-certify-${{ github.ref }}
+  cancel-in-progress: true
+
+jobs:
+  forge:
+    name: forge wire + certify
+    runs-on: ubuntu-latest
+    timeout-minutes: 10
+    steps:
+      - uses: actions/checkout@v4
+
+      - name: Run Atomadic Forge
+        id: forge
+        uses: ./.github/actions/forge-action
+        with:
+          package_root: src/atomadic_forge
+          package_name: atomadic_forge
+          # Forge holds its own bar at 100; if it slips below this we
+          # have ate our own dogfood with a side of regression.
+          fail_under: '100'
+          forge_ref: ${{ github.sha }}
+
+      - name: Echo outputs
+        if: always()
+        run: |
+          echo "wire verdict:    ${{ steps.forge.outputs.wire_verdict }}"
+          echo "certify score:   ${{ steps.forge.outputs.certify_score }}"
+          echo "receipt path:    ${{ steps.forge.outputs.receipt_path }}"