b3-prosaic-harness 0.7.1__tar.gz

b3_prosaic_harness-0.7.1/.github/ci/bwrap.apparmor

@@ -0,0 +1,8 @@
+# Disposable Ubuntu CI runner setup only. Allow this specific namespace broker
+# to create user namespaces; retain host-wide AppArmor restrictions.
+abi <abi/4.0>,
+include <tunables/global>
+
+profile prosaic-ci-bwrap /usr/bin/bwrap flags=(unconfined) {
+  userns,
+}

b3_prosaic_harness-0.7.1/.github/workflows/publish.yml

@@ -0,0 +1,418 @@
+name: Publish SDK
+
+on:
+  push:
+    tags: ['v*']
+  workflow_dispatch:
+    inputs:
+      candidate_run_id:
+        description: Successful build run at this exact commit; required for promotion
+        type: string
+        default: ''
+      core_run_id:
+        description: Successful exact-source Core qualified-release run
+        type: string
+        default: ''
+      core_commit:
+        description: Exact Core source commit
+        type: string
+        default: ''
+      runtime_run_id:
+        description: Successful final Runtime qualified-release run (required)
+        type: string
+        default: ''
+      runtime_commit:
+        description: Exact final Runtime source commit (required)
+        type: string
+        default: ''
+      publish:
+        description: Publish already qualified bytes (run on the version tag)
+        type: boolean
+        default: false
+
+permissions:
+  contents: read
+
+concurrency:
+  group: package-${{ github.ref }}
+  cancel-in-progress: false
+
+jobs:
+  artifacts:
+    runs-on: ubuntu-24.04
+    timeout-minutes: 10
+    permissions:
+      contents: read
+      actions: read
+    steps:
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
+        with:
+          fetch-depth: 0
+      - uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97 # v7.0.0
+        with:
+          python-version: '3.12'
+      - run: python -m pip install 'build>=1' 'setuptools>=77' wheel packaging
+      - name: Build or promote immutable candidate bytes
+        env:
+          GH_TOKEN: ${{ secrets.ECOSYSTEM_ARTIFACT_TOKEN || github.token }}
+          SOURCE_COMMIT: ${{ github.sha }}
+          SOURCE_REF: ${{ github.ref }}
+          SOURCE_TAG: ${{ github.ref_name }}
+          CANDIDATE_RUN: ${{ inputs.candidate_run_id }}
+          PUBLISH: ${{ inputs.publish }}
+        run: |
+          python - <<'PY'
+          import importlib.util, json, os, pathlib, subprocess, tempfile, tomllib
+          project = tomllib.loads(pathlib.Path('pyproject.toml').read_text())['project']
+          publishing = os.environ['PUBLISH'] == 'true'
+          candidate = os.environ['CANDIDATE_RUN']
+          if publishing:
+              assert os.environ['SOURCE_REF'].startswith('refs/tags/')
+              assert os.environ['SOURCE_TAG'] == 'v' + project['version']
+              assert candidate, 'Promotion requires a successful exact-source candidate run'
+          if candidate:
+              assert candidate.isdigit()
+              run = json.loads(subprocess.check_output([
+                  'gh', 'api', 'repos/${{ github.repository }}/actions/runs/' + candidate]))
+              assert run['head_sha'] == os.environ['SOURCE_COMMIT']
+              assert run['conclusion'] == 'success' and run['name'] == 'Publish SDK'
+              assert run['path'] == '.github/workflows/publish.yml'
+              assert run['event'] in ('push', 'workflow_dispatch')
+              subprocess.run(['gh', 'run', 'download', candidate, '--name', 'qualified-release',
+                              '--dir', 'release/artifacts'], check=True)
+              subprocess.run(['python', 'scripts/release_artifacts.py', 'verify', '--directory',
+                              'release/artifacts', '--commit', os.environ['SOURCE_COMMIT']], check=True)
+              spec = importlib.util.spec_from_file_location('release', 'scripts/release_artifacts.py')
+              release = importlib.util.module_from_spec(spec); spec.loader.exec_module(release)
+              committed = release.tar_contents(subprocess.check_output([
+                  'git', 'archive', '--format=tar', os.environ['SOURCE_COMMIT']]))
+              with tempfile.TemporaryDirectory() as temporary:
+                  source = pathlib.Path(temporary)
+                  for name, content in committed.items():
+                      path = source.joinpath(*release.safe_path(name).parts)
+                      path.parent.mkdir(parents=True, exist_ok=True); path.write_bytes(content)
+                  release.audit_artifacts(source, pathlib.Path('release/artifacts'),
+                                          {project['name']: project['version'], 'b3-prosaic-harness-postgres': '0.2.1'},
+                                          ('.', 'adapters/postgres'))
+          else:
+              subprocess.run(['python', 'scripts/release_artifacts.py', 'build', '--ref',
+                              os.environ['SOURCE_COMMIT'], '--output', 'release', '--expect',
+                              project['name'] + '=' + project['version'], '--expect',
+                              'b3-prosaic-harness-postgres=0.2.1', '--project', '.',
+                              '--project', 'adapters/postgres'], check=True)
+          PY
+      - name: Bind verified upstream candidates to the selected Harness bytes
+        env:
+          GH_TOKEN: ${{ secrets.ECOSYSTEM_ARTIFACT_TOKEN || github.token }}
+          CORE_RUN: ${{ inputs.core_run_id || vars.QUALIFIED_CORE_RUN_ID }}
+          CORE_COMMIT: ${{ inputs.core_commit || vars.QUALIFIED_CORE_COMMIT }}
+          RUNTIME_RUN: ${{ inputs.runtime_run_id || vars.QUALIFIED_RUNTIME_RUN_ID }}
+          RUNTIME_COMMIT: ${{ inputs.runtime_commit || vars.QUALIFIED_RUNTIME_COMMIT }}
+        run: |
+          python scripts/release_artifacts.py upstream --directory release/artifacts --wheelhouse release/upstream-wheels --core-run "$CORE_RUN" --core-commit "$CORE_COMMIT" --runtime-run "$RUNTIME_RUN" --runtime-commit "$RUNTIME_COMMIT"
+      - uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7.0.2
+        with:
+          name: release-bytes
+          path: release/artifacts/
+          if-no-files-found: error
+          retention-days: 90
+      - uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9
+        with:
+          name: curated-upstream
+          path: release/upstream-wheels/
+          if-no-files-found: error
+          retention-days: 90
+
+  linux:
+    needs: artifacts
+    runs-on: ${{ matrix.os }}
+    timeout-minutes: 20
+    strategy:
+      fail-fast: false
+      matrix:
+        os: [ubuntu-24.04, ubuntu-24.04-arm]
+        python: ['3.11', '3.12', '3.13']
+    steps:
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1
+        with:
+          fetch-depth: 0
+      - uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97
+        with:
+          python-version: ${{ matrix.python }}
+      - uses: actions/download-artifact@9000827ccba6bdab643e8b6fd33ac0654aef8333 # v8.0.2
+        with:
+          name: release-bytes
+          path: release/artifacts
+      - uses: actions/download-artifact@9000827ccba6bdab643e8b6fd33ac0654aef8333
+        with:
+          name: curated-upstream
+          path: release/upstream-wheels
+      - name: Verify the curated dependency payload
+        run: |
+          python -m pip install packaging
+          python - <<'PY'
+          import importlib.util
+          from pathlib import Path
+          spec = importlib.util.spec_from_file_location('release', 'scripts/release_artifacts.py')
+          release = importlib.util.module_from_spec(spec); spec.loader.exec_module(release)
+          release.verify_upstream(Path('release/artifacts'), Path('release/upstream-wheels'))
+          PY
+      - name: Install Linux CLI sandbox backend
+        run: |
+          sudo apt-get update
+          sudo apt-get install -y bubblewrap meson ninja-build pkg-config libcap-dev gcc
+          git clone https://github.com/containers/bubblewrap.git "$RUNNER_TEMP/bubblewrap"
+          git -C "$RUNNER_TEMP/bubblewrap" checkout --detach 2a76602a8c71f36c1527cf9fc3417d9149822e0c
+          meson setup "$RUNNER_TEMP/bubblewrap/_build" "$RUNNER_TEMP/bubblewrap" --prefix=/usr -Dman=disabled -Dtests=false
+          meson compile -C "$RUNNER_TEMP/bubblewrap/_build"
+          sudo meson install -C "$RUNNER_TEMP/bubblewrap/_build"
+          # Permit only the trusted namespace broker on this disposable runner.
+          # Retain host-wide AppArmor restrictions and kernel sandbox controls.
+          sudo install -m 0644 .github/ci/bwrap.apparmor /etc/apparmor.d/prosaic-ci-bwrap
+          sudo apparmor_parser -r /etc/apparmor.d/prosaic-ci-bwrap
+      - name: Require an operational Linux sandbox
+        run: |
+          python -m pip install release/upstream-wheels/b3_prosaic-0.4.1-py3-none-any.whl release/upstream-wheels/b3_prosaic_runtime-0.8.1-py3-none-any.whl
+          python - <<'PY'
+          import platform, subprocess, sys, tempfile
+          from pathlib import Path
+          from types import SimpleNamespace
+          from prosaic_runtime import CliSandboxConfig
+          from prosaic_runtime.sandbox import require_backend, _linux_command
+          print('Sandbox platform:', sys.platform, platform.machine())
+          try:
+              require_backend(CliSandboxConfig(mode='required'))
+          except Exception:
+              subprocess.run(['/usr/bin/bwrap', '--version'], check=False)
+              with tempfile.TemporaryDirectory() as temporary:
+                  root = Path(temporary).resolve()
+                  args = _linux_command([sys.executable, '-c', 'pass'], '/',
+                      SimpleNamespace(read_roots=(), forbidden_roots=()),
+                      SimpleNamespace(runtime_roots=()), root, root)
+                  result = subprocess.run(args, capture_output=True, text=True,
+                      env={'PATH': '/usr/bin:/bin', 'PYTHONDONTWRITEBYTECODE': '1', 'PYTHONNOUSERSITE': '1'})
+                  print('Sandbox probe exit:', result.returncode)
+                  print(result.stderr)
+              raise
+          PY
+      - name: Qualify source and the transported wheel
+        env:
+          SOURCE_COMMIT: ${{ github.sha }}
+          LANE: linux-${{ matrix.os }}-${{ matrix.python }}
+          PIP_FIND_LINKS: ${{ github.workspace }}/release/upstream-wheels
+        run: |
+          python -m venv .venv
+          .venv/bin/python -m pip install release/upstream-wheels/b3_prosaic-0.4.1-py3-none-any.whl release/upstream-wheels/b3_prosaic_runtime-0.8.1-py3-none-any.whl -e '.[test]'
+          .venv/bin/python scripts/release_artifacts.py qualify --directory release/artifacts --commit "$SOURCE_COMMIT" --label "${LANE}-source" --junit "$RUNNER_TEMP/harness-source.xml" -- .venv/bin/python -m pytest -q --junitxml="$RUNNER_TEMP/harness-source.xml"
+          python -m venv .wheel-test
+          .wheel-test/bin/python -m pip install release/upstream-wheels/b3_prosaic-0.4.1-py3-none-any.whl release/upstream-wheels/b3_prosaic_runtime-0.8.1-py3-none-any.whl release/artifacts/b3_prosaic_harness-0.7.1-py3-none-any.whl
+          .venv/bin/python scripts/release_artifacts.py qualify --directory release/artifacts --commit "$SOURCE_COMMIT" --label "${LANE}-wheel" -- .wheel-test/bin/python -I scripts/workflow_factory_smoke.py
+      - name: Reject skipped or incomplete Harness sandbox coverage
+        id: sandbox_report
+        run: |
+          python - <<'PY'
+          import os
+          from pathlib import Path
+          import xml.etree.ElementTree as ET
+          expected = {
+              'test_documented_sandboxed_blueprint_runs_tool_then_requires_human',
+              'test_default_off_sandbox_preserves_legacy_runtime_identity',
+              'test_changing_sandbox_policy_invalidates_pending_approval',
+              'test_harness_cli_sandbox_denies_outside_secret_and_preserves_pause',
+              'test_injected_adapter_cannot_downgrade_required_sandbox[off]',
+              'test_injected_adapter_cannot_downgrade_required_sandbox[missing_capability]',
+              'test_injected_adapter_cannot_downgrade_required_sandbox[after_construction]',
+          }
+          report = ET.parse(Path(os.environ['RUNNER_TEMP']) / 'harness-source.xml').getroot()
+          suites = list(report.iter('testsuite'))
+          cases = list(report.iter('testcase'))
+          if (not suites or {case.get('name') for case in cases if case.get('name') in expected} != expected
+                  or len([case for case in cases if case.get('name') in expected]) != 7
+                  or any(int(suite.get(key, '0')) for suite in suites for key in ('skipped', 'failures', 'errors'))
+                  or any(case.find(tag) is not None for case in cases if case.get('name') in expected for tag in ('skipped', 'failure', 'error'))):
+              raise SystemExit('All seven Harness sandbox cases must pass with no skips, failures or errors')
+          print('All seven required Harness sandbox cases passed without skips')
+          PY
+      - name: Verify minimum supported dependencies on Python 3.11
+        if: matrix.python == '3.11'
+        env:
+          PIP_FIND_LINKS: ${{ github.workspace }}/release/upstream-wheels
+        run: |
+          python -m venv .floor-test
+          .floor-test/bin/python -m pip install 'PyYAML==6.0' 'pyuca==1.2' 'markdown-it-py==3.0.0' 'jsonschema==4.23.0' 'referencing==0.28.4' 'psycopg[binary]==3.2.3' 'psycopg-pool==3.2.0' release/upstream-wheels/b3_prosaic-0.4.1-py3-none-any.whl release/upstream-wheels/b3_prosaic_runtime-0.8.1-py3-none-any.whl release/upstream-wheels/b3_prosaic_runtime_postgres-0.2.1-py3-none-any.whl release/artifacts/b3_prosaic_harness-0.7.1-py3-none-any.whl release/artifacts/b3_prosaic_harness_postgres-0.2.1-py3-none-any.whl
+          python scripts/release_artifacts.py qualify --directory release/artifacts --commit "$GITHUB_SHA" --label floor-${{ matrix.os }} -- .floor-test/bin/python -I -c "from prosaic_harness_postgres import PostgresRunStore; store = PostgresRunStore('postgresql://invalid.invalid/unused', namespace='floor'); store.close(); import runpy; runpy.run_path('scripts/workflow_factory_smoke.py', run_name='__main__')"
+      - uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9
+        with:
+          name: qualified-linux-${{ matrix.os }}-${{ matrix.python }}
+          path: release/artifacts/qualification-*.json
+          if-no-files-found: error
+          retention-days: 90
+
+  postgres:
+    needs: artifacts
+    runs-on: ${{ matrix.os }}
+    timeout-minutes: 25
+    strategy:
+      fail-fast: false
+      matrix:
+        os: [ubuntu-24.04, ubuntu-24.04-arm]
+        postgres: ['16', '18']
+    steps:
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1
+      - uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97
+        with:
+          python-version: '3.12'
+      - uses: actions/download-artifact@9000827ccba6bdab643e8b6fd33ac0654aef8333
+        with:
+          name: release-bytes
+          path: release/artifacts
+      - uses: actions/download-artifact@9000827ccba6bdab643e8b6fd33ac0654aef8333
+        with:
+          name: curated-upstream
+          path: release/upstream-wheels
+      - name: Install transported exact bytes and verify dependency evidence
+        env:
+          PIP_FIND_LINKS: ${{ github.workspace }}/release/upstream-wheels
+        run: |
+          python -m pip install packaging pytest PyYAML
+          python - <<'PY'
+          import importlib.util
+          from pathlib import Path
+          spec = importlib.util.spec_from_file_location('release', 'scripts/release_artifacts.py')
+          release = importlib.util.module_from_spec(spec); spec.loader.exec_module(release)
+          release.verify_receipt(Path('release/artifacts'), '${{ github.sha }}')
+          release.verify_upstream(Path('release/artifacts'), Path('release/upstream-wheels'))
+          PY
+          mkdir -p dist adapters/postgres/dist
+          cp release/artifacts/b3_prosaic_harness-0.7.1-py3-none-any.whl dist/
+          cp release/artifacts/b3_prosaic_harness_postgres-0.2.1-py3-none-any.whl adapters/postgres/dist/
+          python -m pip install release/upstream-wheels/b3_prosaic-0.4.1-py3-none-any.whl release/upstream-wheels/b3_prosaic_runtime-0.8.1-py3-none-any.whl dist/b3_prosaic_harness-0.7.1-py3-none-any.whl adapters/postgres/dist/b3_prosaic_harness_postgres-0.2.1-py3-none-any.whl
+          prosaic --version
+      - name: Required real database source, installed wheel, crash and standby gates
+        env:
+          POSTGRES_VERSION: ${{ matrix.postgres }}
+          PIP_FIND_LINKS: ${{ github.workspace }}/release/upstream-wheels
+          HARNESS_TEST_WHEELHOUSE: ${{ github.workspace }}/release/upstream-wheels
+          HARNESS_TEST_RELEASE_DIRECTORY: ${{ github.workspace }}/release/artifacts
+          HARNESS_TEST_JUNIT_XML: ${{ runner.temp }}/harness-postgres.xml
+        run: |
+          fixture_manifest="$(python adapters/postgres/tests/support/local_cluster.py start --engine docker --version "$POSTGRES_VERSION")"
+          trap 'python adapters/postgres/tests/support/local_cluster.py stop --manifest "$fixture_manifest"' EXIT
+          python scripts/release_artifacts.py qualify --directory release/artifacts --commit "$GITHUB_SHA" --label postgres-${{ matrix.os }}-${{ matrix.postgres }} --junit "$HARNESS_TEST_JUNIT_XML" -- python adapters/postgres/tests/support/local_cluster.py test --manifest "$fixture_manifest"
+      - uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9
+        with:
+          name: qualified-postgres-${{ matrix.os }}-${{ matrix.postgres }}
+          path: release/artifacts/qualification-*.json
+          if-no-files-found: error
+          retention-days: 90
+
+  gate:
+    needs: [linux, postgres]
+    runs-on: ubuntu-24.04
+    timeout-minutes: 5
+    steps:
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1
+      - uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97
+        with:
+          python-version: '3.12'
+      - run: python -m pip install packaging
+      - uses: actions/download-artifact@9000827ccba6bdab643e8b6fd33ac0654aef8333
+        with:
+          name: release-bytes
+          path: release/artifacts
+      - uses: actions/download-artifact@9000827ccba6bdab643e8b6fd33ac0654aef8333
+        with:
+          pattern: qualified-*
+          merge-multiple: true
+          path: release/artifacts
+      - name: Require every exact-byte qualification record
+        run: |
+          python - <<'PY'
+          import importlib.util, json, os
+          spec = importlib.util.spec_from_file_location('release', 'scripts/release_artifacts.py')
+          release = importlib.util.module_from_spec(spec); spec.loader.exec_module(release)
+          from pathlib import Path
+          labels = [f'linux-{os_name}-{version}-{kind}'
+                    for os_name in ('ubuntu-24.04', 'ubuntu-24.04-arm')
+                    for version in ('3.11', '3.12', '3.13') for kind in ('source', 'wheel')]
+          labels += [f'postgres-{os_name}-{version}' for os_name in ('ubuntu-24.04', 'ubuntu-24.04-arm') for version in ('16', '18')]
+          labels += [f'floor-{os_name}' for os_name in ('ubuntu-24.04', 'ubuntu-24.04-arm')]
+          assert Path('release/artifacts/upstream-receipt.json').is_file()
+          release.require_qualification(Path('release/artifacts'), os.environ['GITHUB_SHA'], labels)
+          for label in labels:
+              record = json.loads(Path('release/artifacts', 'qualification-' + label + '.json').read_text())
+              expected_machine = 'aarch64' if 'ubuntu-24.04-arm' in label else 'x86_64'
+              assert record['platform'] == 'linux' and record['machine'] == expected_machine
+              if label.endswith('-source') or label.startswith('postgres-'):
+                  counts = record['result_counts']
+                  assert counts['tests'] > 0 and all(counts[key] == 0 for key in ('failures', 'errors', 'skipped'))
+          PY
+      - uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9
+        with:
+          name: qualified-release
+          path: release/artifacts/
+          if-no-files-found: error
+          retention-days: 90
+
+  pypi:
+    if: github.event_name == 'workflow_dispatch' && inputs.publish && startsWith(github.ref, 'refs/tags/')
+    needs: gate
+    runs-on: ubuntu-24.04
+    timeout-minutes: 10
+    environment: pypi
+    permissions:
+      contents: read
+      id-token: write
+    steps:
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1
+      - uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97
+        with:
+          python-version: '3.12'
+      - run: python -m pip install packaging
+      - uses: actions/download-artifact@9000827ccba6bdab643e8b6fd33ac0654aef8333
+        with:
+          name: qualified-release
+          path: release/artifacts
+      - name: Refuse conflicting existing index bytes
+        run: python scripts/release_artifacts.py index-check --directory release/artifacts --commit ${{ github.sha }} --allow-missing
+      - name: Prepare only distribution files for upload
+        run: |
+          mkdir upload
+          cp release/artifacts/*.whl release/artifacts/*.tar.gz upload/
+      - uses: pypa/gh-action-pypi-publish@dc37677b2e1c63e2034f94d8a5b11f265b73ba33 # v1.14.2
+        with:
+          packages-dir: upload/
+          skip-existing: true # Safe only with the mandatory pre/post digest checks.
+      - name: Verify actual downloaded public bytes
+        run: python scripts/release_artifacts.py index-check --directory release/artifacts --commit ${{ github.sha }}
+
+  github-release:
+    needs: [gate, pypi]
+    runs-on: ubuntu-24.04
+    timeout-minutes: 10
+    permissions:
+      contents: write
+    steps:
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1
+      - uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97
+        with:
+          python-version: '3.12'
+      - run: python -m pip install packaging
+      - uses: actions/download-artifact@9000827ccba6bdab643e8b6fd33ac0654aef8333
+        with:
+          name: qualified-release
+          path: release/artifacts
+      - name: Publish the same bytes and evidence without replacing assets
+        env:
+          GH_TOKEN: ${{ github.token }}
+          RELEASE_TAG: ${{ github.ref_name }}
+        run: |
+          python scripts/release_artifacts.py verify --directory release/artifacts --commit "$GITHUB_SHA"
+          if gh release view "$RELEASE_TAG" >/dev/null 2>&1; then
+            gh release download "$RELEASE_TAG" --dir existing
+            python scripts/release_artifacts.py verify --directory existing --commit "$GITHUB_SHA"
+            cmp existing/release-receipt.json release/artifacts/release-receipt.json
+            cmp existing/upstream-receipt.json release/artifacts/upstream-receipt.json
+          else
+            gh release create "$RELEASE_TAG" --verify-tag --title "$RELEASE_TAG" --notes "Qualified package-index release. Exact byte hashes and platform receipts are attached." release/artifacts/*
+          fi

b3_prosaic_harness-0.7.1/LICENSE

@@ -0,0 +1,202 @@
+
+                                 Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "[]"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright [yyyy] [name of copyright owner]
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.

b3_prosaic_harness-0.7.1/MANIFEST.in

@@ -0,0 +1,8 @@
+recursive-include examples *.md *.yml *.json *.py
+recursive-include docs *.md
+include scripts/workflow_factory_smoke.py
+include scripts/release_artifacts.py
+include .github/workflows/publish.yml .github/ci/bwrap.apparmor
+include LICENSE NOTICE
+recursive-include adapters/postgres *.toml *.md *.py LICENSE NOTICE MANIFEST.in
+global-exclude *.local.yml *.local.yaml

b3_prosaic_harness-0.7.1/NOTICE

@@ -0,0 +1,5 @@
+Prosaic Harness
+
+This project is distributed under the Apache License, Version 2.0; see LICENSE.
+Third-party dependencies retain their own licenses and attribution notices.
+Previously published versions and tags retain the license notices shipped with them.