city-cli 0.9.1__tar.gz

city_cli-0.9.1/.gitignore

@@ -0,0 +1,73 @@
+# Terraform
+**/.terraform/
+*.tfstate
+*.tfstate.backup
+*.tfstate.lock.info
+crash.log
+crash.*.log
+override.tf
+override.tf.json
+*_override.tf
+*_override.tf.json
+*.tfplan
+*.tfplan.json
+*.pyc
+__pycache__/
+
+# Local city CLI keystore and team token
+.city/
+
+# Terraform variable files with secrets — keep *.tfvars.example, ignore actual values
+*.tfvars
+*.tfvars.json
+
+# Terragrunt cache
+**/.terragrunt-cache/
+
+# Provider lock files (optional: remove if you want to pin providers in VCS)
+# **/.terraform.lock.hcl
+
+# GCP service account key files
+*.json
+!**/cloudbuild*.json
+# Firebase web app configs are public client identifiers (not secrets)
+!**/firebase-config*.json
+# Contract schemas and examples are source, not credentials
+!specs/**/*.json
+
+# macOS
+.DS_Store
+.AppleDouble
+.LSOverride
+
+# Editor
+.idea/
+.vscode/
+*.swp
+*.swo
+*~
+
+# Node.js / Next.js config files
+!package-lock.json
+!package.json
+!tsconfig.json
+!next.config.mjs
+!next.config.js
+node_modules/
+services/ui/dist/
+services/ui/.env
+services/ui/.env.local
+services/ui/.env.*.local
+.venv/
+.mypy_cache/
+.ruff_cache/
+.pytest_cache/
+
+# Elementor kit workdir / local backups (keep the published zip + README tracked)
+landing/elementor-export/.kit-work/
+landing/elementor-export/*.bak.zip
+landing/elementor-export/migrate_to_native.py
+landing/elementor-export/pni-elementor-kit.zip
+landing/elementor-export/README.md
+.publish/
+dist-pypi/

city_cli-0.9.1/PKG-INFO

@@ -0,0 +1,111 @@
+Metadata-Version: 2.5
+Name: city-cli
+Version: 0.9.1
+Summary: Milano Agentic City CLI (city): init, dev, conform, and deploy.
+Project-URL: Homepage, https://github.com/projectnandaitaly/agentic-city
+Project-URL: Repository, https://github.com/projectnandaitaly/agentic-city
+Project-URL: Documentation, https://github.com/projectnandaitaly/agentic-city/blob/main/services/deploy/README.md
+Project-URL: Issues, https://github.com/projectnandaitaly/agentic-city/issues
+Author: Project NANDA Italy
+License: Proprietary
+Keywords: agentic-city,cli,deploy,nanda
+Classifier: Development Status :: 4 - Beta
+Classifier: Environment :: Console
+Classifier: Intended Audience :: Developers
+Classifier: Programming Language :: Python :: 3
+Classifier: Programming Language :: Python :: 3.12
+Classifier: Topic :: Software Development :: Libraries
+Classifier: Typing :: Typed
+Requires-Python: >=3.12
+Requires-Dist: city-sdk>=0.9.1
+Requires-Dist: cryptography>=43
+Requires-Dist: fastapi>=0.115
+Requires-Dist: httpx>=0.27
+Requires-Dist: pydantic>=2
+Requires-Dist: rfc8785>=0.1.4
+Requires-Dist: typer>=0.12
+Requires-Dist: uvicorn>=0.32
+Description-Content-Type: text/markdown
+
+# city-cli
+
+Command-line tool for **Milano Agentic City** teams.
+
+Install once, then scaffold an agent, run it locally, and publish it through the City Deploy API — **without GCP credentials** (ADR-010).
+
+## Requirements
+
+- Python **3.12+**
+- For live deploy: Deploy API URL (see below)
+
+## Install
+
+```bash
+pipx install city-cli
+# or
+uv tool install city-cli
+# or
+pip install city-cli
+```
+
+This provides the `city` command. It depends on [`city-sdk`](https://pypi.org/project/city-sdk/) for the Market facade and harness types.
+
+## Live city (remote Deploy API)
+
+```bash
+export CITY_DEPLOY_URL=https://deploy.projectnandaitaly.ai
+
+city login --team t07
+city keys init
+city init --role cup --name demo
+city card validate
+city deploy --promote
+city status agent:t07/demo
+```
+
+Per-command override:
+
+```bash
+city --api-url https://deploy.projectnandaitaly.ai status agent:t07/demo
+```
+
+JSON for scripting:
+
+```bash
+city --json --api-url "$CITY_DEPLOY_URL" status agent:t07/demo
+```
+
+## Local kit (no API URL)
+
+If `CITY_DEPLOY_URL` / `--api-url` is unset, `city` uses an **in-process** Deploy service (useful for `init`, `dev`, and offline checks).
+
+```bash
+city init --role cup --name demo
+city dev
+city conform --profile fast
+```
+
+## Commands (overview)
+
+| Command | Purpose |
+|---|---|
+| `city login` | Device-flow team session; stores token under `.city/` |
+| `city keys init` | Local controller key + register public key |
+| `city init` | Scaffold `cup` / `facility` / `mmg` / `b2b` template |
+| `city card validate` | Basic card.yaml checks |
+| `city dev` | One local need through the harness |
+| `city conform` | Conformance suite (`--profile full\|fast`, or `--url`) |
+| `city deploy` | Upload + pipeline (`--promote`, `--runtime`) |
+| `city promote` / `rollback` / `status` / `retire` | Lifecycle |
+| `city secrets set` / `city scale` / `city llm key rotate` | Ops |
+| `city compliance` / `city verify` | Receipts and offline verify |
+
+## Links
+
+- Source: [projectnandaitaly/agentic-city](https://github.com/projectnandaitaly/agentic-city)
+- SDK: [city-sdk on PyPI](https://pypi.org/project/city-sdk/)
+- Spec: City Deploy CLI §10.2 in the repo docs
+
+## License
+
+Proprietary — Project NANDA Italy / Milano Agentic City event kit.

city_cli-0.9.1/README.md

@@ -0,0 +1,82 @@
+# city-cli
+
+Command-line tool for **Milano Agentic City** teams.
+
+Install once, then scaffold an agent, run it locally, and publish it through the City Deploy API — **without GCP credentials** (ADR-010).
+
+## Requirements
+
+- Python **3.12+**
+- For live deploy: Deploy API URL (see below)
+
+## Install
+
+```bash
+pipx install city-cli
+# or
+uv tool install city-cli
+# or
+pip install city-cli
+```
+
+This provides the `city` command. It depends on [`city-sdk`](https://pypi.org/project/city-sdk/) for the Market facade and harness types.
+
+## Live city (remote Deploy API)
+
+```bash
+export CITY_DEPLOY_URL=https://deploy.projectnandaitaly.ai
+
+city login --team t07
+city keys init
+city init --role cup --name demo
+city card validate
+city deploy --promote
+city status agent:t07/demo
+```
+
+Per-command override:
+
+```bash
+city --api-url https://deploy.projectnandaitaly.ai status agent:t07/demo
+```
+
+JSON for scripting:
+
+```bash
+city --json --api-url "$CITY_DEPLOY_URL" status agent:t07/demo
+```
+
+## Local kit (no API URL)
+
+If `CITY_DEPLOY_URL` / `--api-url` is unset, `city` uses an **in-process** Deploy service (useful for `init`, `dev`, and offline checks).
+
+```bash
+city init --role cup --name demo
+city dev
+city conform --profile fast
+```
+
+## Commands (overview)
+
+| Command | Purpose |
+|---|---|
+| `city login` | Device-flow team session; stores token under `.city/` |
+| `city keys init` | Local controller key + register public key |
+| `city init` | Scaffold `cup` / `facility` / `mmg` / `b2b` template |
+| `city card validate` | Basic card.yaml checks |
+| `city dev` | One local need through the harness |
+| `city conform` | Conformance suite (`--profile full\|fast`, or `--url`) |
+| `city deploy` | Upload + pipeline (`--promote`, `--runtime`) |
+| `city promote` / `rollback` / `status` / `retire` | Lifecycle |
+| `city secrets set` / `city scale` / `city llm key rotate` | Ops |
+| `city compliance` / `city verify` | Receipts and offline verify |
+
+## Links
+
+- Source: [projectnandaitaly/agentic-city](https://github.com/projectnandaitaly/agentic-city)
+- SDK: [city-sdk on PyPI](https://pypi.org/project/city-sdk/)
+- Spec: City Deploy CLI §10.2 in the repo docs
+
+## License
+
+Proprietary — Project NANDA Italy / Milano Agentic City event kit.

city_cli-0.9.1/VERSION

@@ -0,0 +1 @@
+0.9.1

city_cli-0.9.1/pyproject.toml

@@ -0,0 +1,44 @@
+[project]
+name = "city-cli"
+version = "0.9.1"
+description = "Milano Agentic City CLI (city): init, dev, conform, and deploy."
+readme = "README.md"
+requires-python = ">=3.12"
+license = { text = "Proprietary" }
+authors = [{ name = "Project NANDA Italy" }]
+keywords = ["agentic-city", "cli", "deploy", "nanda"]
+classifiers = [
+    "Development Status :: 4 - Beta",
+    "Environment :: Console",
+    "Intended Audience :: Developers",
+    "Programming Language :: Python :: 3",
+    "Programming Language :: Python :: 3.12",
+    "Topic :: Software Development :: Libraries",
+    "Typing :: Typed",
+]
+dependencies = [
+    "city-sdk>=0.9.1",
+    "cryptography>=43",
+    "fastapi>=0.115",
+    "httpx>=0.27",
+    "pydantic>=2",
+    "rfc8785>=0.1.4",
+    "typer>=0.12",
+    "uvicorn>=0.32",
+]
+
+[project.urls]
+Homepage = "https://github.com/projectnandaitaly/agentic-city"
+Repository = "https://github.com/projectnandaitaly/agentic-city"
+Documentation = "https://github.com/projectnandaitaly/agentic-city/blob/main/services/deploy/README.md"
+Issues = "https://github.com/projectnandaitaly/agentic-city/issues"
+
+[project.scripts]
+city = "city_deploy.cli:main"
+
+[build-system]
+requires = ["hatchling"]
+build-backend = "hatchling.build"
+
+[tool.hatch.build.targets.wheel]
+packages = ["src/city_deploy", "src/city_conform", "src/city_index", "src/city"]

city_cli-0.9.1/src/city/__init__.py

@@ -0,0 +1 @@
+"""City libraries (``city.testkit``, later reputation and others)."""

city_cli-0.9.1/src/city/testkit/__init__.py

@@ -0,0 +1,5 @@
+"""Test helpers. Ephemeral keys only; nothing here is a credential store."""
+
+from city.testkit.keys import ephemeral
+
+__all__ = ["ephemeral"]

city_cli-0.9.1/src/city/testkit/keys.py

@@ -0,0 +1,9 @@
+"""Generate an Ed25519 key pair in memory. The private key is not serialized."""
+
+from __future__ import annotations
+
+from cap.core.keys import KeyPair, generate
+
+
+def ephemeral() -> KeyPair:
+    return generate()

city_cli-0.9.1/src/city_conform/__init__.py

@@ -0,0 +1,3 @@
+"""Conformance runner. Outcomes follow specification 09."""
+
+__version__ = "0.9.0"

city_cli-0.9.1/src/city_conform/__main__.py

@@ -0,0 +1,21 @@
+"""`city-conform` runs the in-process full profile and prints the report."""
+
+from __future__ import annotations
+
+import asyncio
+
+from city_conform.report import render
+from city_conform.runner import run_profile
+from city_conform.stages import CATALOG
+from city_conform.world import good_agent
+
+
+def main() -> None:
+    async def _run() -> bool:
+        agent = await good_agent()
+        report = await run_profile(agent, CATALOG)
+        print(render(report), end="")
+        return report.passed
+
+    if not asyncio.run(_run()):
+        raise SystemExit(1)

city_cli-0.9.1/src/city_conform/agent.py

@@ -0,0 +1,283 @@
+"""Agent under test. The live agent is the harness behind ASGI."""
+
+from __future__ import annotations
+
+import uuid
+from dataclasses import dataclass
+from datetime import datetime, timedelta
+from typing import Any, Protocol, cast
+
+from cap.core.envelope import build, sign
+from cap.core.keys import PrivateKey, PublicKey
+from cap.core.timeutil import format_time
+from city_sdk.app import create_app
+from city_sdk.harness import Harness
+from httpx import ASGITransport, AsyncClient
+
+Sender = tuple[str, PrivateKey]
+
+
+@dataclass(frozen=True)
+class SuiteSigners:
+    """City and peer keys the agent already trusts. The runner does not invent them."""
+
+    sender: Sender
+    prober: Sender
+    city: Sender
+    stranger: Sender
+
+
+@dataclass(frozen=True)
+class HttpResult:
+    status: int
+    body: dict[str, Any]
+
+
+class Agent(Protocol):
+    def now(self) -> datetime: ...
+
+    def public_key(self) -> PublicKey: ...
+
+    def effect_count(self) -> int: ...
+
+    def ack_log(self) -> list[tuple[str, int, str]]: ...
+
+    def renew_log(self) -> list[tuple[str, int]]: ...
+
+    def sent_log(self) -> list[tuple[str, dict[str, object], str | None]]: ...
+
+    def hold_log(self) -> list[tuple[str, str]]: ...
+
+    def memory_view(self) -> dict[str, str]: ...
+
+    def escalation(self) -> str | None: ...
+
+    async def stop(self) -> None: ...
+
+    async def request(
+        self, method: str, path: str, payload: dict[str, Any] | None = None
+    ) -> HttpResult: ...
+
+    def need(
+        self,
+        *,
+        body: dict[str, Any],
+        msg_id: str | None = None,
+        fence: int = 1,
+        expires_at: datetime | None = None,
+    ) -> dict[str, Any]: ...
+
+    def unsigned_need(self) -> dict[str, Any]: ...
+
+    def bad_signature_need(self) -> dict[str, Any]: ...
+
+    def unknown_key_need(self) -> dict[str, Any]: ...
+
+    def expired_need(self) -> dict[str, Any]: ...
+
+    def probe(self, nonce: str) -> dict[str, Any]: ...
+
+    def order(self, *, epoch: int, kind: str, sender: Sender | None = None) -> dict[str, Any]: ...
+
+    def foreign_order(self) -> dict[str, Any]: ...
+
+
+def _tamper(token: str) -> str:
+    first = token[0]
+    replacement = "A" if first != "A" else "B"
+    return replacement + token[1:]
+
+
+class LiveAgent:
+    def __init__(
+        self,
+        harness: Harness,
+        *,
+        sender: Sender,
+        prober: Sender,
+        city: Sender,
+        stranger: Sender,
+    ) -> None:
+        self.harness = harness
+        self._sender = sender
+        self._prober = prober
+        self._city = city
+        self._stranger = stranger
+        self._app = create_app(harness)
+
+    def now(self) -> datetime:
+        return self.harness.clock.now()
+
+    def public_key(self) -> PublicKey:
+        return self.harness.public
+
+    def effect_count(self) -> int:
+        return self.harness.brain_calls
+
+    def ack_log(self) -> list[tuple[str, int, str]]:
+        return list(self.harness.relay.acks)
+
+    def renew_log(self) -> list[tuple[str, int]]:
+        return list(self.harness.relay.renewed)
+
+    def sent_log(self) -> list[tuple[str, dict[str, object], str | None]]:
+        return list(self.harness.relay.sent)
+
+    def hold_log(self) -> list[tuple[str, str]]:
+        return list(self.harness.ledger.calls)
+
+    def memory_view(self) -> dict[str, str]:
+        return dict(self.harness.memory)
+
+    def escalation(self) -> str | None:
+        market = self.harness.last_market
+        if market is None:
+            return None
+        return market.escalated
+
+    async def stop(self) -> None:
+        await self.harness.shutdown()
+
+    async def request(
+        self, method: str, path: str, payload: dict[str, Any] | None = None
+    ) -> HttpResult:
+        async with AsyncClient(
+            transport=ASGITransport(app=self._app),
+            base_url="http://agent",
+        ) as client:
+            if method == "GET":
+                response = await client.get(path)
+            else:
+                response = await client.post(path, json=payload)
+        body: dict[str, Any] = {}
+        try:
+            parsed = response.json()
+        except ValueError:
+            parsed = None
+        if isinstance(parsed, dict):
+            body = parsed
+        return HttpResult(response.status_code, body)
+
+    def need(
+        self,
+        *,
+        body: dict[str, Any],
+        msg_id: str | None = None,
+        fence: int = 1,
+        expires_at: datetime | None = None,
+    ) -> dict[str, Any]:
+        return self._delivery(
+            self._sender,
+            "need.request",
+            body,
+            msg_id=msg_id,
+            fence=fence,
+            expires_at=expires_at,
+        )
+
+    def unsigned_need(self) -> dict[str, Any]:
+        msg_id = str(uuid.uuid4())
+        envelope = build(
+            msg_id=msg_id,
+            message_type="need.request",
+            sender=self._sender[0],
+            recipient=self.harness.agent_id,
+            sent_at=self.now(),
+            body={"service": "lab", "summary": "visit"},
+        )
+        return self._wrap(msg_id, envelope, fence=1)
+
+    def bad_signature_need(self) -> dict[str, Any]:
+        payload = self.need(body={"service": "lab", "summary": "visit"})
+        envelope = payload["envelope"]
+        sig = dict(envelope["sig"])
+        sig["jws"] = _tamper(str(sig["jws"]))
+        envelope["sig"] = sig
+        return payload
+
+    def unknown_key_need(self) -> dict[str, Any]:
+        return self._delivery(
+            self._stranger,
+            "need.request",
+            {"service": "lab", "summary": "visit"},
+        )
+
+    def expired_need(self) -> dict[str, Any]:
+        return self.need(
+            body={"service": "lab", "summary": "visit"},
+            expires_at=self.now() - timedelta(seconds=5),
+        )
+
+    def probe(self, nonce: str) -> dict[str, Any]:
+        return self._delivery(self._prober, "cap.probe", {"nonce": nonce})
+
+    def order(self, *, epoch: int, kind: str, sender: Sender | None = None) -> dict[str, Any]:
+        who = self._city if sender is None else sender
+        msg_id = str(uuid.uuid4())
+        envelope = sign(
+            build(
+                msg_id=msg_id,
+                message_type="city.order",
+                sender=who[0],
+                recipient=self.harness.agent_id,
+                sent_at=self.now(),
+                body={
+                    "order_id": f"ord:{epoch}:001",
+                    "epoch": epoch,
+                    "kind": kind,
+                    "requires_ack": True,
+                },
+            ),
+            who[1],
+            kid=who[0] + "#k1",
+        )
+        return cast(dict[str, Any], envelope)
+
+    def foreign_order(self) -> dict[str, Any]:
+        return self.order(epoch=1, kind="ping", sender=self._sender)
+
+    def suite_signers(self) -> SuiteSigners:
+        return SuiteSigners(
+            sender=self._sender,
+            prober=self._prober,
+            city=self._city,
+            stranger=self._stranger,
+        )
+
+    def _delivery(
+        self,
+        sender: Sender,
+        message_type: str,
+        body: dict[str, Any],
+        *,
+        msg_id: str | None = None,
+        fence: int = 1,
+        expires_at: datetime | None = None,
+    ) -> dict[str, Any]:
+        chosen = msg_id if msg_id is not None else str(uuid.uuid4())
+        envelope = sign(
+            build(
+                msg_id=chosen,
+                message_type=message_type,
+                sender=sender[0],
+                recipient=self.harness.agent_id,
+                sent_at=self.now(),
+                body=body,
+                expires_at=expires_at,
+            ),
+            sender[1],
+            kid=sender[0] + "#k1",
+        )
+        return self._wrap(chosen, envelope, fence=fence)
+
+    def _wrap(self, msg_id: str, envelope: dict[str, Any], *, fence: int) -> dict[str, Any]:
+        return {
+            "delivery": {
+                "msg_id": msg_id,
+                "mailbox": "m-1",
+                "fence": fence,
+                "attempt": 1,
+                "lease_until": format_time(self.now()),
+            },
+            "envelope": envelope,
+        }