codescalpel 1.0.0__tar.gz

codescalpel-1.0.0/.gitignore

@@ -0,0 +1,265 @@
+# Python
+__pycache__/
+*.py[cod]
+*$py.class
+*.so
+.Python
+build/
+develop-eggs/
+dist/
+downloads/
+eggs/
+.eggs/
+lib/
+lib64/
+parts/
+sdist/
+var/
+wheels/
+share/python-wheels/
+*.egg-info/
+.installed.cfg
+*.egg
+MANIFEST
+
+# Python Distribution / packaging
+.Python
+env/
+venv/
+ENV/
+env.bak/
+venv.bak/
+.env
+.venv
+.venv-*/
+pip-log.txt
+pip-delete-this-directory.txt
+
+# Code Scalpel specific
+.code-scalpel.code-workspace
+pdg_visualizations/
+analysis_results/
+.scalpel_cache/
+.code_scalpel_cache/
+.scalpel_ast_cache/
+.ruff_cache/
+compliance_reports/
+.code-scalpel/autonomy_audit/  # Autonomy audit trail runtime files
+.code-scalpel/audit.log  # Policy engine audit log
+.code-scalpel/limits.local.toml  # [20251225_CONFIG] Local tier limit overrides
+certs/  # Certificate and private key files for signing/encryption
+code_scalpel_community/
+local_pipeline/
+
+# [20260117_CLEANUP] Temporary/ephemeral directories for v1.0 fork
+.bench_tmp/
+.test_simple/
+.tmp_tier_comm/
+
+# [20251228_TEST] Local remote-verifier integration artifacts (never commit)
+.code-scalpel/license.jwt
+.code-scalpel/license*.jwt
+.code-scalpel/**/*.jwt
+.code-scalpel/license_cache.json
+.code-scalpel/*.jwk.json
+.code-scalpel/test_write.json
+
+# [20250101_TEST] Test license files - valid JWT licenses for tier testing
+# [20260120_SECURITY] ALL license files blocked - injected via GitHub Secrets in CI
+tests/licenses/*.jwt
+tests/licenses/**/*.jwt
+
+# License management (separate repo, ignore if checked out locally)
+.code-scalpel/license/  # License directory contains JWT license files
+.code-scalpel/archive/  # Archived license files (potentially sensitive)
+keys/  # Private keys should never be in this repo
+*.pem  # Private key files
+*.key  # Key files
+
+# Internal development archives
+.archive/
+
+# Internal project management, status docs, and checklists (not for public repo)
+.internal/
+
+# Development summaries (internal archives - not for version control)
+docs/summaries/
+docs/project-management/
+docs/internal/
+docs/status/
+docs/analysis/  # Internal tool validation and verification documents
+
+# Internal GitHub workflow prompts (not for public consumption)
+.github/prompts/
+
+# Internal documentation (development-only, not for public repo)
+docs/adr/
+docs/architecture/
+docs/ci_cd/
+docs/compliance/
+docs/configuration/
+docs/deployment/
+docs/features/
+docs/modules/
+docs/parsers/
+docs/performance/
+docs/reference/
+# docs/release_notes/  [20260119] REMOVED - release notes are now tracked in git
+docs/research/
+docs/roadmap/
+docs/security/
+docs/testing/
+docs/todo_reports/
+docs/tools/
+docs/DEVELOPMENT_ROADMAP.md
+docs/guides/migration/
+docs/guides/pre_fork_analysis_findings.md
+docs/guides/production_release_v1.0.md
+docs/guides/enhancement_roadmap.md
+docs/guides/tool_architecture_analysis.md
+
+# Benchmark fixtures (generated/cloned data)
+tests/fixtures/data/
+
+# Polyglot stubs (exclude compiled tree-sitter)
+*.so
+*.dylib
+*.dll
+
+# tree-sitter build artifacts
+# Build and distribution artifacts (regenerate as needed)
+dist/
+dist_protected/
+build/
+build_protected/
+*.whl
+*.tar.gz
+htmlcov/
+.tox/
+.nox/
+.coverage
+.coverage.*
+.cache
+nosetests.xml
+coverage.xml
+*.cover
+*.py,cover
+.hypothesis/
+.pytest_cache/
+cover/
+coverage.json
+
+# Release evidence and artifacts (internal test/validation artifacts - keep local, exclude from fork)
+evidence/
+release_artifacts/
+release_artifacts/**/*.key
+release_artifacts/**/*.pem
+release_artifacts/**/cosign.key
+
+# Jupyter Notebook
+.ipynb_checkpoints
+# Allow notebooks in examples directory
+!examples/*.ipynb
+
+# IDEs and editors
+# PyCharm
+.idea/
+*.iml
+*.iws
+.idea_modules/
+
+# VSCode
+.vscode/
+*.code-workspace
+.history
+
+# Sublime Text
+*.tmlanguage.cache
+*.tmPreferences.cache
+*.stTheme.cache
+*.sublime-workspace
+*.sublime-project
+
+# Vim
+*.swp
+*.swo
+*~
+
+# macOS
+.DS_Store
+.AppleDouble
+.LSOverride
+._*
+
+# Windows
+Thumbs.db
+Thumbs.db:encryptable
+ehthumbs.db
+ehthumbs_vista.db
+*.lnk
+[Dd]esktop.ini
+
+# Logs and databases
+*.log
+*.sqlite
+*.db
+
+# Documentation
+docs/_build/
+docs/_static/
+docs/_templates/
+
+# Pre-release marketing drafts (generated content; keep local)
+docs/marketing-pack/
+
+# Environment configurations
+.env.*
+!.env.example
+
+# mypy
+.mypy_cache/
+.dmypy.json
+dmypy.json
+
+# Pytype static type analyzer
+.pytype/
+
+# Cython debug symbols
+cython_debug/
+
+# Build tools
+.gradle/
+target/
+
+# Poetry
+poetry.lock
+
+# Project specific temporary files
+temp/
+tmp/
+*.tmp
+*.bak
+
+# Generated files
+generated/
+*.generated.*
+
+# Misc
+.*.sw[po]
+
+# Ruff cache
+.ruff_cache/
+
+# Ad-hoc debug files (should not be committed)
+debug_*.py
+smoke_test*.py
+/test_mcp_*.py
+verify_*.py
+stress_test*.sh
+src/code_scalpel/mcp/archive/server.py
+
+# Internal examples (not for public distribution)
+examples/.internal/
+.internal/
+.pypirc
+*.archive

codescalpel-1.0.0/LICENSE

@@ -0,0 +1,151 @@
+SPDX-License-Identifier: MIT AND Commercial
+
+CODE SCALPEL LICENSE AGREEMENT
+
+================================================================================
+PART 1: COMMUNITY EDITION (MIT LICENSE)
+================================================================================
+
+The Community Edition of Code Scalpel is licensed under the MIT License:
+
+MIT License
+
+Copyright (c) 2025 3D Tech Solutions LLC
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.
+
+================================================================================
+PART 2: PRO & ENTERPRISE EDITIONS (COMMERCIAL LICENSE)
+================================================================================
+
+The Pro and Enterprise Editions of Code Scalpel are proprietary commercial
+software developed and maintained by 3D Tech Solutions LLC.
+
+COMMERCIAL LICENSE TERMS:
+
+1. LICENSE GRANT
+   Pro and Enterprise editions are currently available exclusively through
+   Beta Testing programs. Licensees are granted a limited, non-exclusive,
+   non-transferable license to use the software in accordance with the
+   terms of their individual Beta Testing Agreement or Commercial License
+   Agreement.
+
+2. RESTRICTIONS
+   Licensees MAY NOT:
+   - Sublicense, resell, or redistribute the software
+   - Modify, reverse engineer, or create derivative works
+   - Remove or obscure any proprietary notices or labels
+   - Use the software in any unlicensed tier beyond their license grant
+
+3. LICENSE AUTHENTICATION & VALIDATION
+   
+   a) REQUIRED AUTHENTICATION
+      Pro and Enterprise editions require valid license authentication to
+      unlock tier-specific features and capabilities. License validation
+      is performed by cryptographic verification of signed license tokens.
+   
+   b) LICENSE VALIDITY
+      A valid license must:
+      - Contain an authentic signature from 3D Tech Solutions LLC
+      - Not be expired, revoked, or suspended
+      - Match the licensed tier and authorized use case
+      - Not have been tampered with or modified in any way
+   
+   c) VOIDING THE LICENSE
+      The license is immediately void and unenforceable if:
+      - The licensee attempts to circumvent, bypass, or disable the license
+        authentication and validation mechanisms
+      - The licensee attempts to forge, duplicate, or create unauthorized
+        copies of the license token
+      - The licensee attempts to modify the license file, its contents, or
+        cryptographic signatures
+      - The licensee uses the software with an invalid, expired, or revoked
+        license
+      - The licensee attempts to reverse engineer or analyze the license
+        validation code for the purpose of circumvention
+      - Any other breach of the license terms occurs
+   
+   d) CONSEQUENCES OF VOIDING
+      Upon license voiding:
+      - All rights to use Pro and Enterprise features are immediately
+        terminated
+      - The licensee must cease all use of the software within 30 days
+      - No refunds or credits will be issued
+      - 3D Tech Solutions LLC may pursue legal remedies and damages
+      - The licensee may be excluded from future beta testing programs
+        and commercial licensing
+
+4. BETA TESTING TERMS
+   During Beta Testing periods, Code Scalpel Pro and Enterprise are provided
+   under the condition that:
+   - Licensees provide feedback and bug reports
+   - Licensees understand the software may change significantly
+   - Licensees do not rely on the software for mission-critical production
+     use without explicit written permission
+   - Licensees agree to maintain the confidentiality of unreleased features
+   - Beta testing may be terminated at the sole discretion of 3D Tech
+     Solutions LLC
+
+5. NO WARRANTY
+   Pro and Enterprise editions are provided "AS IS" without warranty of any
+   kind. 3D Tech Solutions LLC disclaims all implied warranties of
+   merchantability, fitness for a particular purpose, and non-infringement.
+
+6. LIMITATION OF LIABILITY
+   In no event shall 3D Tech Solutions LLC be liable for any indirect,
+   incidental, special, consequential, or punitive damages arising out of or
+   related to the software, even if advised of the possibility of such damages.
+
+================================================================================
+PART 3: DETERMINING YOUR EDITION
+================================================================================
+
+Your Code Scalpel edition is determined by:
+- The presence and validity of a signed license file
+- The "tier" field in a valid license token
+- The absence of a license file indicates Community Edition
+
+Community Edition Features:
+- Limited to basic functionality as defined in the documentation
+- Available under the MIT License (Part 1)
+- No license authentication required
+
+Pro Edition Features:
+- Enhanced analysis capabilities (expanded depth limits, file limits, etc.)
+- Priority support during beta period
+- Requires valid signed license token with tier="pro"
+
+Enterprise Edition Features:
+- Unlimited analysis capabilities
+- Advanced security analysis and cross-file taint tracking
+- Custom metrics and compliance reporting
+- Requires valid signed license token with tier="enterprise"
+
+================================================================================
+PART 4: CONTACT & DISPUTES
+================================================================================
+
+For license-related inquiries, violations, or disputes, contact:
+3D Tech Solutions LLC
+https://github.com/3d-tech-solutions/code-scalpel
+
+Any violation of this license agreement may result in legal action to protect
+our intellectual property rights and commercial interests.
+
+================================================================================