bernstein 2.2.0__tar.gz → 2.3.0__tar.gz

bernstein-2.3.0/.clusterfuzzlite/Dockerfile

@@ -0,0 +1,17 @@
+# ClusterFuzzLite builder image for bernstein.
+#
+# Digest-pinned base image so the build is reproducible and Scorecard's
+# Pinned-Dependencies check is satisfied. The base image ships Python
+# 3.11; the OSSF Scorecard Fuzzing check only requires a runnable
+# harness, not coverage of the full bernstein package (which targets
+# Python 3.12+). The harness here therefore targets YAML parsing
+# directly via PyYAML, which is the same parser primitive that
+# bernstein.core.config.seed_parser sits on top of. The Hypothesis
+# property-test suite in tests/ remains the primary fuzzing surface
+# for the rest of bernstein's input handling.
+# Ref: https://google.github.io/clusterfuzzlite/build-integration/python-lang/
+FROM gcr.io/oss-fuzz-base/base-builder-python@sha256:73f77212f2531a83edfe1ee195a940ceec4c77910f475c0efcc3090f452cba17
+
+COPY . /src/bernstein
+WORKDIR /src/bernstein
+COPY .clusterfuzzlite/build.sh /src/build.sh

bernstein-2.3.0/.clusterfuzzlite/build.sh

@@ -0,0 +1,19 @@
+#!/bin/bash -eu
+# Build script invoked inside the ClusterFuzzLite builder container.
+#
+# Compiles each fuzz_*.py harness with atheris and copies the resulting
+# binaries into $OUT. atheris and PyYAML are shipped pre-installed in the
+# gcr.io/oss-fuzz-base/base-builder-python image; we still re-install
+# PyYAML through a hash-pinned requirements file so the supply chain
+# stays auditable (Scorecard pinned-dependencies).
+#
+# Ref: https://google.github.io/clusterfuzzlite/build-integration/python-lang/
+
+pip3 install \
+  --no-cache-dir \
+  --require-hashes \
+  --requirement "$SRC/bernstein/.clusterfuzzlite/requirements.txt"
+
+for fuzzer in "$SRC/bernstein/.clusterfuzzlite"/fuzz_*.py; do
+  compile_python_fuzzer "$fuzzer"
+done

bernstein-2.3.0/.clusterfuzzlite/fuzz_seed_parser.py

@@ -0,0 +1,47 @@
+"""Atheris fuzz harness for seed-file YAML parsing.
+
+The OSSF Scorecard Fuzzing check is signal-only: it just looks for a
+ClusterFuzzLite/OSS-Fuzz integration with at least one harness. This
+harness exercises the same YAML parser primitive that
+bernstein.core.config.seed_parser sits on top of (PyYAML's safe_load),
+without importing the full bernstein package -- bernstein requires
+Python 3.12+ while the gcr.io/oss-fuzz-base/base-builder-python image
+ships Python 3.11. Switching the base image is possible but adds a
+maintenance burden that does not buy any extra Scorecard signal.
+
+The Hypothesis property-test suite in tests/ remains the primary
+fuzzing surface for the seed parser and the rest of bernstein's input
+handling.
+"""
+
+from __future__ import annotations
+
+import sys
+
+import atheris
+
+with atheris.instrument_imports():
+    import yaml
+
+
+def _test_one_input(data: bytes) -> None:
+    """Fuzz entrypoint: feed arbitrary bytes to PyYAML's safe_load."""
+    try:
+        yaml.safe_load(data)
+    except (yaml.YAMLError, UnicodeDecodeError, ValueError, TypeError, OverflowError):
+        # Documented failure modes for malformed input. Not a crash.
+        # OverflowError is raised by PyYAML's C scanner on Python 3.11 when
+        # parsing very long ``\\Uxxxxxxxx`` escapes (codepoints that exceed
+        # the C int range during conversion); it is parser-internal and not
+        # a bug in the seed-parser surface under test.
+        return
+
+
+def main() -> None:
+    """libFuzzer entry point."""
+    atheris.Setup(sys.argv, _test_one_input)
+    atheris.Fuzz()
+
+
+if __name__ == "__main__":
+    main()

bernstein-2.3.0/.clusterfuzzlite/project.yaml

@@ -0,0 +1,13 @@
+# ClusterFuzzLite project descriptor for bernstein.
+#
+# Recognized by OSSF Scorecard's Fuzzing check (in addition to Hypothesis
+# property tests that already cover real bug surface in tests/). The harness
+# below targets bernstein.core.config.seed_parser as a minimal entry point;
+# it exists for OSSF signal coverage, not as the primary fuzzing surface.
+#
+# Ref: https://google.github.io/clusterfuzzlite/build-integration/python-lang/
+language: python
+fuzzing_engines:
+  - libfuzzer
+sanitizers:
+  - address

bernstein-2.3.0/.clusterfuzzlite/requirements.txt

@@ -0,0 +1,22 @@
+# Hash-pinned dependency list for the ClusterFuzzLite builder image.
+# Consumed by build.sh via `pip3 install --require-hashes -r ...`.
+#
+# Why pinned: OSSF Scorecard's pinned-dependencies check (and zizmor's
+# pip-install audit) flag unpinned `pip install <pkg>` invocations as a
+# supply-chain risk. Routing through --require-hashes anchors the build
+# to bit-identical artefacts even if PyPI mutates.
+#
+# Refresh: when bumping the PyYAML pin, fetch the new hashes from PyPI
+# (`pip download --no-deps --dest /tmp/wheels pyyaml==<version>` then
+# `pip hash /tmp/wheels/*`). Keep at least the manylinux x86_64 wheel
+# matching the OSS-Fuzz base image's Python tag plus the sdist as a
+# fallback for ABI mismatches.
+
+pyyaml==6.0.3 \
+    --hash=sha256:d76623373421df22fb4cf8817020cbb7ef15c725b9d5e45f17e189bfc384190f \
+    --hash=sha256:10892704fc220243f5305762e276552a0395f7beb4dbf9b14ec8fd43b57f126c \
+    --hash=sha256:b8bb0864c5a28024fac8a632c443c87c5aa6f215c0b126c449ae1a150412f31d \
+    --hash=sha256:9149cad251584d5fb4981be1ecde53a1ca46c891a79788c0df828d2f166bda28 \
+    --hash=sha256:ba1cc08a7ccde2d2ec775841541641e4548226580ab850948cbfda66a1befcdc \
+    --hash=sha256:b30236e45cf30d2b8e7b3e85881719e98507abed1011bf463a8fa23e9c3e98a8 \
+    --hash=sha256:9c7708761fccb9397fe64bbc0395abcae8c4bf7b0eac081e12b809bf47700d0b

bernstein-2.3.0/.coderabbit.yaml

@@ -0,0 +1,420 @@
+# CodeRabbit AI code review config
+# Repo: sipyourdrink-ltd/bernstein
+# Public OSS repo - CodeRabbit Pro features apply at no cost.
+# Docs: https://docs.coderabbit.ai/reference/configuration
+#
+# Tuning goals:
+# - Domain-aware reviews via path_instructions for adapters, lineage,
+#   security, MCP, workflows, roles, tests, docs.
+# - Lean signal: disable tools that duplicate the canonical CI lane
+#   (ruff, gitleaks, markdownlint, languagetool, semgrep, trivy).
+# - Keep AI-grounded, low-noise tools on (ast-grep, actionlint, shellcheck,
+#   yamllint, hadolint, biome, prismaLint).
+# - Use Pro features that have no recurring cost: high-level summary,
+#   sequence diagrams, related issues/PRs, suggested labels/reviewers,
+#   knowledge-base learnings, early-access features.
+
+language: en-US
+early_access: true
+
+tone_instructions: |
+  Engineering tone only. No marketing language. Reference file paths and
+  line numbers in comments. Prefer concrete diffs to abstract suggestions.
+
+reviews:
+  profile: assertive
+  request_changes_workflow: false
+  high_level_summary: true
+  high_level_summary_in_walkthrough: false
+  review_status: true
+  review_details: false
+  commit_status: true
+  fail_commit_status: false
+  collapse_walkthrough: true
+  changed_files_summary: true
+  sequence_diagrams: true
+  estimate_code_review_effort: true
+  assess_linked_issues: true
+  related_issues: true
+  related_prs: true
+  suggested_labels: true
+  auto_apply_labels: false
+  suggested_reviewers: true
+  auto_assign_reviewers: false
+  poem: false
+  in_progress_fortune: false
+  enable_prompt_for_ai_agents: true
+  abort_on_close: true
+
+  auto_review:
+    enabled: true
+    auto_incremental_review: true
+    auto_pause_after_reviewed_commits: 5
+    drafts: false
+    base_branches:
+      - main
+    ignore_title_keywords:
+      - "[skip review]"
+      - "[skip-review]"
+      - "WIP"
+
+  finishing_touches:
+    docstrings:
+      enabled: true
+    unit_tests:
+      enabled: true
+
+  tools:
+    # Canonical CI already runs these; disable to avoid duplicate noise.
+    ruff:
+      enabled: false
+    pylint:
+      enabled: false
+    flake8:
+      enabled: false
+    markdownlint:
+      enabled: false
+    languagetool:
+      enabled: false
+    gitleaks:
+      enabled: false
+    trufflehog:
+      enabled: false
+    semgrep:
+      enabled: false
+    trivy:
+      enabled: false
+    osvScanner:
+      enabled: false
+    checkov:
+      enabled: false
+
+    # AI-grounded structural review; complements but does not duplicate CI.
+    ast-grep:
+      essential_rules: true
+
+    # Workflow + shell + YAML + Docker hygiene. Cheap signal, low noise.
+    actionlint:
+      enabled: true
+    shellcheck:
+      enabled: true
+    yamllint:
+      enabled: true
+    hadolint:
+      enabled: true
+
+    # web/ uses Vite + TS. Biome covers JS/TS lint without ESLint config.
+    biome:
+      enabled: true
+    eslint:
+      enabled: false
+    oxc:
+      enabled: false
+    htmlhint:
+      enabled: false
+    stylelint:
+      enabled: false
+
+    # Repo has no Prisma / PHP / Java / Go / Ruby / Lua / Swift /
+    # Terraform / Kotlin / Ember sources; turn off the matching linters
+    # so they cannot fire on unrelated paths.
+    prismaLint:
+      enabled: false
+    phpcs:
+      enabled: false
+    phpmd:
+      enabled: false
+    phpstan:
+      enabled: false
+    pmd:
+      enabled: false
+    golangci-lint:
+      enabled: false
+    rubocop:
+      enabled: false
+    brakeman:
+      enabled: false
+    luacheck:
+      enabled: false
+    swiftlint:
+      enabled: false
+    tflint:
+      enabled: false
+    detekt:
+      enabled: false
+    emberTemplateLint:
+      enabled: false
+    psscriptanalyzer:
+      enabled: false
+    smartyLint:
+      enabled: false
+    shopifyThemeCheck:
+      enabled: false
+    sqlfluff:
+      enabled: false
+    regal:
+      enabled: false
+    clippy:
+      enabled: false
+    clang:
+      enabled: false
+    cppcheck:
+      enabled: false
+    buf:
+      enabled: false
+    checkmake:
+      enabled: false
+    circleci:
+      enabled: false
+    blinter:
+      enabled: false
+    dotenvLint:
+      enabled: false
+    fortitudeLint:
+      enabled: false
+    opengrep:
+      enabled: false
+    presidio:
+      enabled: false
+
+    github-checks:
+      enabled: true
+      timeout_ms: 90000
+
+  path_filters:
+    - "!.sdd/**"
+    - "!.worktrees/**"
+    - "!**/_default_templates/**"
+    - "!docs/api/**"
+    - "!**/*.lock"
+    - "!**/*.snap"
+    - "!**/*.min.js"
+    - "!**/*.min.css"
+    - "!tests/fixtures/**"
+    - "!benchmarks/data/**"
+    - "!**/.bandit-baseline.json"
+    - "!CHANGELOG.md"
+
+  path_instructions:
+    - path: "src/bernstein/adapters/**"
+      instructions: |
+        Adapter conformance is enforced by tests/unit/adapters/conformance.py
+        and src/bernstein/adapters/conformance.py. Comment only on logic,
+        safety, and capability-checker invariants, not on adapter stub
+        coverage. Flag any adapter that bypasses base.py contract methods
+        or constructs subprocesses without env_isolation. Each CLI adapter
+        must declare its capabilities through _contract.py.
+
+    - path: "src/bernstein/core/lineage/**"
+      instructions: |
+        Lineage v1 is a Sigstore-style transparency log. Records must be
+        append-only and HMAC-signed. Flag any code that mutates an existing
+        entry, skips the signing step, weakens the hash algorithm, or
+        introduces a non-deterministic field ordering.
+
+    - path: "src/bernstein/core/security/**"
+      instructions: |
+        Security-critical module. Apply extra scrutiny: credential
+        handling, secret redaction, deserialization safety, subprocess
+        argument validation, path-traversal guards. Flag any new use of
+        eval/exec, pickle, shell=True, yaml.load (without SafeLoader), or
+        unbounded regex backtracking. Do not weaken existing assertions.
+
+    - path: "src/bernstein/core/credential_scoping.py"
+      instructions: |
+        Least-privilege credential scoping. Any change to allowed scopes
+        must preserve the deny-by-default invariant. Flag broadening of
+        an existing scope without a paired test that locks the new shape.
+
+    - path: "src/bernstein/mcp/**"
+      instructions: |
+        MCP protocol invariants. Tool-call inputs go through
+        input_validation.py with deny-by-default schemas. Flag any new MCP
+        tool that bypasses schema validation, registers without an entry
+        in tool_schemas/, or emits unsanitized user content back to the
+        caller. Remote transport must keep HTTP streaming semantics.
+
+    - path: "src/bernstein/github_app/**"
+      instructions: |
+        Webhook handling and signature verification. Flag any code path
+        that processes a webhook payload before HMAC-SHA256 verification,
+        or that logs raw signatures / installation tokens. JWT signing
+        must use the configured private key path, not env-embedded PEMs.
+
+    - path: "src/bernstein/evolution/**"
+      instructions: |
+        Self-evolution engine. Flag any change that lets a proposal bypass
+        InvariantsGuard (hash-locked files), the ApprovalGate / EvalGate
+        risk routing, or the CircuitBreaker. Predicted-delta and
+        oscillation guards exist to prevent regressions; do not weaken
+        their thresholds without explicit justification in the PR body.
+
+    - path: "src/bernstein/sandbox/**"
+      instructions: |
+        Sandbox isolation. Each backend must enforce filesystem and
+        network scoping. Flag any escape hatch (host-mounted directories,
+        unscoped network egress, dropped seccomp profile).
+
+    - path: "src/bernstein/plugins/**"
+      instructions: |
+        Plugin system runs untrusted code. plugin_trust.py risk scoring
+        must remain conservative. Flag any change that auto-trusts a
+        plugin without operator approval or that weakens
+        permission_explain disclosure.
+
+    - path: "src/bernstein/storage/**"
+      instructions: |
+        Artifact storage sinks. Flag any sink that writes outside the
+        configured root, or that logs artefact contents at INFO level.
+
+    - path: "src/bernstein/replay/**"
+      instructions: |
+        Deterministic replay. Replay logs must be reproducible byte-for-
+        byte. Flag any source of non-determinism (wall-clock time,
+        un-seeded random, dict iteration order, network calls outside a
+        VCR cassette).
+
+    - path: "src/bernstein/identity/**"
+      instructions: |
+        Install-rev identity must remain passive and operator-decodable.
+        Flag any change that adds outbound network calls, embeds the
+        identity in HTTP headers by default, or makes the fingerprint
+        un-decodable without project-private secrets.
+
+    - path: ".github/workflows/**"
+      instructions: |
+        SHA-pin every third-party action (40-char hex). Add `permissions:`
+        and `concurrency:` blocks where missing. Flag any `--no-verify`,
+        force-push, `-i` flag, or `pull_request_target` without an
+        `if: github.event.pull_request.head.repo.full_name == github.repository`
+        guard. Workflows must lint clean under actionlint + zizmor.
+
+    - path: ".github/actions/**"
+      instructions: |
+        Composite actions. Inputs documented with description + required +
+        default. Avoid `shell: bash` without `set -euo pipefail`. Flag
+        any unpinned `uses:`.
+
+    - path: "templates/roles/**"
+      instructions: |
+        Agent role prompt files. Edits change orchestrator behaviour.
+        Flag any prompt change that removes safety guardrails, weakens
+        instruction following, or introduces persona drift away from the
+        documented role contract.
+
+    - path: "templates/prompts/**"
+      instructions: |
+        Shared prompt templates (e.g. judge.md). Same scrutiny as roles -
+        these ship in the wheel via package-data and affect downstream
+        runs.
+
+    - path: "tests/unit/**"
+      instructions: |
+        Tests run randomly-ordered. Flag any cross-test state leakage,
+        unittest.mock.patch leaks, monkeypatch escapes, network calls
+        without responses/respx, or fixtures that mutate package-level
+        globals. Each test must be runnable in isolation.
+
+    - path: "tests/integration/**"
+      instructions: |
+        Integration tests require the running server. Flag any test that
+        hard-codes localhost ports without reading from the same fixture
+        as the server fixture, or that leaks subprocess state across
+        tests.
+
+    - path: "docs/operations/**"
+      instructions: |
+        Operator-readable. No marketing language. Concrete commands with
+        copy-pasteable shell blocks. Flag prose that hides a missing step
+        or that overstates safety properties.
+
+    - path: "docs/sdd/**"
+      instructions: |
+        Architecture decision records and design docs. Flag inconsistency
+        with code, missing rollback plan, or omitted threat model on
+        security-touching ADRs.
+
+    - path: "docs/api/**"
+      instructions: |
+        Auto-generated; PRs should not hand-edit. Flag any manual diff.
+
+    - path: "src/bernstein/cli/**"
+      instructions: |
+        User-facing CLI. Flag breaking changes to existing flags or
+        command names without a deprecation path. Click commands must
+        validate input before mutating state.
+
+    - path: "src/bernstein/tui/**"
+      instructions: |
+        Textual TUI. Flag any blocking call on the main reactor thread,
+        or widget mutations off the app loop.
+
+    - path: "src/bernstein/workflows/**"
+      instructions: |
+        Archon-inspired YAML workflow manifests. Flag schema drift between
+        the manifest loader and the documented manifest fields.
+
+    - path: "**/*.py"
+      instructions: |
+        Python 3.12 target. Prefer pathlib over os.path. Use f-strings.
+        Type-annotate new public functions. Flag bare `except:` and
+        broad `except Exception:` without re-raise or logging.
+
+    - path: "**/Dockerfile*"
+      instructions: |
+        Pin base images by digest where practical. Use multi-stage to
+        keep final image small. Run as non-root by default. Flag `ADD`
+        for things `COPY` can do.
+
+    - path: "web/**"
+      instructions: |
+        Vite + TypeScript front-end. Flag any change that introduces
+        new runtime deps without updating package.json lock, or that
+        bypasses the existing biome config.
+
+chat:
+  art: false
+  allow_non_org_members: true
+  auto_reply: true
+
+knowledge_base:
+  opt_out: false
+  web_search:
+    enabled: true
+  code_guidelines:
+    enabled: true
+    filePatterns:
+      - "AGENTS.md"
+      - "CLAUDE.md"
+      - "CONVENTIONS.md"
+      - "docs/sdd/**/*.md"
+      - "docs/operations/**/*.md"
+  learnings:
+    scope: auto
+  issues:
+    scope: auto
+  pull_requests:
+    scope: auto
+
+code_generation:
+  docstrings:
+    language: en-US
+    path_instructions:
+      - path: "src/bernstein/**/*.py"
+        instructions: |
+          Use Google-style docstrings. First line is an imperative
+          summary under 100 chars. Document Args, Returns, and Raises.
+          Reference related modules by dotted path, not relative import.
+      - path: "tests/**/*.py"
+        instructions: |
+          Test docstrings describe the behavior under test in one line.
+          Use "should ..." or "returns ... when ..." phrasing. No Args /
+          Returns sections.
+  unit_tests:
+    path_instructions:
+      - path: "src/bernstein/**/*.py"
+        instructions: |
+          Generate pytest tests in tests/unit/<mirrored path>. Use
+          parametrize for tabular cases. Mock subprocess.run and network
+          via respx / responses. Each test file must be importable in
+          isolation - no module-level side effects.