consiliency-contract 0.1.0__tar.gz

consiliency_contract-0.1.0/.github/workflows/publish.yml

@@ -0,0 +1,66 @@
+name: publish
+
+# Tokenless dual publish via OIDC trusted publishing.
+# - npm:  requires the package's Trusted Publisher to be configured on npmjs.com
+#         (only possible after the first publish exists — bootstrapped locally).
+# - PyPI: uses the pending/trusted publisher already registered, gated on the
+#         `pypi` GitHub environment.
+on:
+  release:
+    types: [published]
+  workflow_dispatch:
+
+jobs:
+  verify:
+    runs-on: ubuntu-latest
+    permissions:
+      contents: read
+    steps:
+      - uses: actions/checkout@v4
+      - uses: actions/setup-node@v4
+        with:
+          node-version: "22.14.0"
+          registry-url: "https://registry.npmjs.org"
+      - uses: actions/setup-python@v5
+        with:
+          python-version: "3.12"
+      - run: python -m pip install --upgrade build
+      - run: npm test
+      - run: python -m unittest discover -s tests -p 'test_*.py'
+
+  publish-npm:
+    needs: verify
+    runs-on: ubuntu-latest
+    permissions:
+      id-token: write   # npm OIDC trusted publishing (no NODE_AUTH_TOKEN)
+      contents: read
+    steps:
+      - uses: actions/checkout@v4
+      - uses: actions/setup-node@v4
+        with:
+          node-version: "22.14.0"
+          registry-url: "https://registry.npmjs.org"
+      - uses: actions/setup-python@v5
+        with:
+          python-version: "3.12"
+      - run: python -m pip install --upgrade build
+      - run: npm install -g npm@latest   # ensure an OIDC-capable npm (>= 11.5)
+      - run: npm test
+      - run: npm publish
+
+  publish-pypi:
+    needs: verify
+    runs-on: ubuntu-latest
+    environment: pypi
+    permissions:
+      id-token: write   # PyPI OIDC trusted publishing (no API token)
+      contents: read
+    steps:
+      - uses: actions/checkout@v4
+      - uses: actions/setup-python@v5
+        with:
+          python-version: "3.12"
+      - run: python -m pip install --upgrade build
+      - run: python -m unittest discover -s tests -p 'test_*.py'
+      - run: python -m build
+      - uses: pypa/gh-action-pypi-publish@release/v1

consiliency_contract-0.1.0/.gitignore

@@ -0,0 +1,147 @@
+# Logs
+logs
+*.log
+npm-debug.log*
+yarn-debug.log*
+yarn-error.log*
+lerna-debug.log*
+
+# Python
+__pycache__/
+*.py[cod]
+
+# Diagnostic reports (https://nodejs.org/api/report.html)
+report.[0-9]*.[0-9]*.[0-9]*.[0-9]*.json
+
+# Runtime data
+pids
+*.pid
+*.seed
+*.pid.lock
+
+# Directory for instrumented libs generated by jscoverage/JSCover
+lib-cov
+
+# Coverage directory used by tools like istanbul
+coverage
+*.lcov
+
+# nyc test coverage
+.nyc_output
+
+# Grunt intermediate storage (https://gruntjs.com/creating-plugins#storing-task-files)
+.grunt
+
+# Bower dependency directory (https://bower.io/)
+bower_components
+
+# node-waf configuration
+.lock-wscript
+
+# Compiled binary addons (https://nodejs.org/api/addons.html)
+build/Release
+
+# Dependency directories
+node_modules/
+jspm_packages/
+
+# Snowpack dependency directory (https://snowpack.dev/)
+web_modules/
+
+# TypeScript cache
+*.tsbuildinfo
+
+# Optional npm cache directory
+.npm
+
+# Optional eslint cache
+.eslintcache
+
+# Optional stylelint cache
+.stylelintcache
+
+# Optional REPL history
+.node_repl_history
+
+# Output of 'npm pack'
+*.tgz
+
+# Yarn Integrity file
+.yarn-integrity
+
+# dotenv environment variable files
+.env
+.env.*
+!.env.example
+
+# parcel-bundler cache (https://parceljs.org/)
+.cache
+.parcel-cache
+
+# Next.js build output
+.next
+out
+
+# Nuxt.js build / generate output
+.nuxt
+dist
+.output
+
+# Gatsby files
+.cache/
+# Comment in the public line in if your project uses Gatsby and not Next.js
+# https://nextjs.org/blog/next-9-1#public-directory-support
+# public
+
+# vuepress build output
+.vuepress/dist
+
+# vuepress v2.x temp directory
+.temp
+
+# Sveltekit cache directory
+.svelte-kit/
+
+# vitepress build output
+**/.vitepress/dist
+
+# vitepress cache directory
+**/.vitepress/cache
+
+# Docusaurus cache and generated files
+.docusaurus
+
+# Serverless directories
+.serverless/
+
+# FuseBox cache
+.fusebox/
+
+# DynamoDB Local files
+.dynamodb/
+
+# Firebase cache directory
+.firebase/
+
+# TernJS port file
+.tern-port
+
+# Stores VSCode versions used for testing VSCode extensions
+.vscode-test
+
+# pnpm
+.pnpm-store
+
+# yarn v3
+.pnp.*
+.yarn/*
+!.yarn/patches
+!.yarn/plugins
+!.yarn/releases
+!.yarn/sdks
+!.yarn/versions
+
+# Vite files
+vite.config.js.timestamp-*
+vite.config.ts.timestamp-*
+.vite/

consiliency_contract-0.1.0/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 The Consiliency
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

consiliency_contract-0.1.0/PKG-INFO

@@ -0,0 +1,68 @@
+Metadata-Version: 2.4
+Name: consiliency-contract
+Version: 0.1.0
+Summary: Consiliency cross-repo contract package: shared JSON contract data, conformance vectors, and thin npm/PyPI readers.
+Project-URL: Homepage, https://github.com/Consiliency/consiliency-contract
+Project-URL: Issues, https://github.com/Consiliency/consiliency-contract/issues
+License: MIT
+License-File: LICENSE
+Keywords: canonical-html,consiliency,contract,standardization
+Requires-Python: >=3.10
+Description-Content-Type: text/markdown
+
+# @consiliency/contract
+
+The Consiliency cross-repo **contract package** — the single, neutral rulebook that
+`agent-harness` and `governed-pipeline` vendor (owned by neither). It defines:
+
+- the `.consiliency/` layout + manifest schema
+- the **archetype registry** — `product` / `service` / `library` / `infra` / `tooling-meta` / `experiment` / `document`, plus modifiers (`data-bearing` / `public` / `regulated` / `user-facing`), with `baseline-only` as a legal declaration
+- the required-document sets per archetype (the 7 document classes)
+- the interface-declaration schema (realized + promised cross-repo edges)
+- the loop-gate protocol (presence / freshness / integrity / version-skew)
+- the `canonical_html.v1` display schema
+- the version-skew protocol
+
+Dual-published: **npm** [`@consiliency/contract`](https://www.npmjs.com/package/@consiliency/contract) + **PyPI** [`consiliency-contract`](https://pypi.org/project/consiliency-contract/), from shared JSON data + conformance vectors so the two language readers stay byte-identical.
+
+> **Status — `0.1.0` carries the first normative Phase-0 L0 contract content.**
+> The shared JSON data lives under `core/` and `conformance/`; npm and PyPI
+> readers are intentionally thin loaders over those same bytes.
+
+## Reader API
+
+JavaScript:
+
+```js
+import {
+  CONTRACT,
+  CONTRACT_VERSION,
+  listVectors,
+  loadContract,
+  loadRegistry,
+  loadSchema,
+  loadVector,
+} from "@consiliency/contract";
+```
+
+Python:
+
+```python
+from consiliency_contract import (
+    CONTRACT,
+    CONTRACT_VERSION,
+    list_vectors,
+    load_contract,
+    load_registry,
+    load_schema,
+    load_vector,
+)
+```
+
+## Verification
+
+```sh
+npm test
+python -m unittest discover -s tests -p 'test_*.py'
+python -m build
+```

consiliency_contract-0.1.0/README.md

@@ -0,0 +1,56 @@
+# @consiliency/contract
+
+The Consiliency cross-repo **contract package** — the single, neutral rulebook that
+`agent-harness` and `governed-pipeline` vendor (owned by neither). It defines:
+
+- the `.consiliency/` layout + manifest schema
+- the **archetype registry** — `product` / `service` / `library` / `infra` / `tooling-meta` / `experiment` / `document`, plus modifiers (`data-bearing` / `public` / `regulated` / `user-facing`), with `baseline-only` as a legal declaration
+- the required-document sets per archetype (the 7 document classes)
+- the interface-declaration schema (realized + promised cross-repo edges)
+- the loop-gate protocol (presence / freshness / integrity / version-skew)
+- the `canonical_html.v1` display schema
+- the version-skew protocol
+
+Dual-published: **npm** [`@consiliency/contract`](https://www.npmjs.com/package/@consiliency/contract) + **PyPI** [`consiliency-contract`](https://pypi.org/project/consiliency-contract/), from shared JSON data + conformance vectors so the two language readers stay byte-identical.
+
+> **Status — `0.1.0` carries the first normative Phase-0 L0 contract content.**
+> The shared JSON data lives under `core/` and `conformance/`; npm and PyPI
+> readers are intentionally thin loaders over those same bytes.
+
+## Reader API
+
+JavaScript:
+
+```js
+import {
+  CONTRACT,
+  CONTRACT_VERSION,
+  listVectors,
+  loadContract,
+  loadRegistry,
+  loadSchema,
+  loadVector,
+} from "@consiliency/contract";
+```
+
+Python:
+
+```python
+from consiliency_contract import (
+    CONTRACT,
+    CONTRACT_VERSION,
+    list_vectors,
+    load_contract,
+    load_registry,
+    load_schema,
+    load_vector,
+)
+```
+
+## Verification
+
+```sh
+npm test
+python -m unittest discover -s tests -p 'test_*.py'
+python -m build
+```

consiliency_contract-0.1.0/conformance/vectors/canonical-html-contract-loaded.json

@@ -0,0 +1,15 @@
+{
+  "id": "canonical-html-contract-loaded",
+  "description": "The relocated canonical_html.v1 contract is present with recorded provenance.",
+  "input": {
+    "contract_path": "core/canonical-html/contract-v1.json",
+    "provenance_path": "core/canonical-html/provenance.json",
+    "expected_sha256": "3c0c11b7be8b2301409c47416269dd5579fac90f6e7a4e9ca9c3caef50bd2e28"
+  },
+  "decision": {
+    "schema": "consiliency.conformance_decision.v1",
+    "status": "accepted",
+    "maturity": "hash-checked",
+    "findings": []
+  }
+}

consiliency_contract-0.1.0/conformance/vectors/interface-invalid-host-path.json

@@ -0,0 +1,26 @@
+{
+  "id": "interface-invalid-host-path",
+  "description": "Local sibling checkout paths are rejected from public interface data.",
+  "input": {
+    "schema": "consiliency.interface_declaration.v1",
+    "repo_id": "governed-pipeline",
+    "realized_edges": [
+      {
+        "id": "bad-path",
+        "provider_repo": "spec",
+        "consumer_repo": "governed-pipeline",
+        "interface_id": "spec-certificate",
+        "ref": {"kind": "repo-relative-path", "value": "/absolute/private/spec-certificate-canon.mjs"},
+        "maturity": "realized-edge-observed",
+        "evidence": []
+      }
+    ],
+    "promised_edges": []
+  },
+  "decision": {
+    "schema": "consiliency.conformance_decision.v1",
+    "status": "rejected",
+    "maturity": "presence-only",
+    "findings": [{"code": "interface.ref.host_path", "severity": "block", "message": "Interface refs must not contain host absolute paths."}]
+  }
+}

consiliency_contract-0.1.0/conformance/vectors/interface-valid-realized-and-promised.json

@@ -0,0 +1,36 @@
+{
+  "id": "interface-valid-realized-and-promised",
+  "description": "Interface declarations can carry realized and promised edges with safe refs.",
+  "input": {
+    "schema": "consiliency.interface_declaration.v1",
+    "repo_id": "governed-pipeline",
+    "realized_edges": [
+      {
+        "id": "harness-pin",
+        "provider_repo": "agent-harness",
+        "consumer_repo": "governed-pipeline",
+        "interface_id": "phase-loop-cli-entrypoint",
+        "ref": {"kind": "git-ref", "value": "v0.1.12"},
+        "maturity": "realized-edge-observed",
+        "evidence": [{"ref": "tools/agent-harness.pin.json", "digest": "sha256:0000000000000000000000000000000000000000000000000000000000000000"}]
+      }
+    ],
+    "promised_edges": [
+      {
+        "id": "contract-package",
+        "provider_repo": "consiliency-contract",
+        "consumer_repo": "governed-pipeline",
+        "interface_id": "consiliency-contract-v1",
+        "ref": {"kind": "package-coordinate", "value": "@consiliency/contract@^0.1.0"},
+        "maturity": "presence-only",
+        "evidence": []
+      }
+    ]
+  },
+  "decision": {
+    "schema": "consiliency.conformance_decision.v1",
+    "status": "accepted",
+    "maturity": "realized-edge-observed",
+    "findings": []
+  }
+}

consiliency_contract-0.1.0/conformance/vectors/loop-gate-invalid-blocking-default.json

@@ -0,0 +1,15 @@
+{
+  "id": "loop-gate-invalid-blocking-default",
+  "description": "Phase 0 contract data must not make blocking the default.",
+  "input": {
+    "schema": "consiliency.loop_gate_scenario.v1",
+    "gate": "presence",
+    "severity_default": "block"
+  },
+  "decision": {
+    "schema": "consiliency.conformance_decision.v1",
+    "status": "rejected",
+    "maturity": "presence-only",
+    "findings": [{"code": "gate.default.blocking", "severity": "block", "message": "Blocking must be opt-in during Phase 0."}]
+  }
+}

consiliency_contract-0.1.0/conformance/vectors/loop-gate-missing-doc-warns.json

@@ -0,0 +1,16 @@
+{
+  "id": "loop-gate-missing-doc-warns",
+  "description": "Phase 0 missing document checks warn by default.",
+  "input": {
+    "schema": "consiliency.loop_gate_scenario.v1",
+    "gate": "presence",
+    "missing": ["runbook"],
+    "consumer_policy": {"blocking_opt_in": false}
+  },
+  "decision": {
+    "schema": "consiliency.conformance_decision.v1",
+    "status": "warn",
+    "maturity": "presence-only",
+    "findings": [{"code": "presence.missing_doc", "severity": "warn", "message": "Required document is missing at L0."}]
+  }
+}

consiliency_contract-0.1.0/conformance/vectors/manifest-invalid-absolute-path.json

@@ -0,0 +1,20 @@
+{
+  "id": "manifest-invalid-absolute-path",
+  "description": "Host absolute paths are rejected from public package data.",
+  "input": {
+    "schema": "consiliency.manifest.v1",
+    "contract_version": "0.1.0",
+    "repo": {"id": "bad", "display_name": "Bad", "default_branch": "main"},
+    "declaration": {"mode": "baseline-only"},
+    "documents": [
+      {"id": "readme", "class": "index", "path": "/absolute/private/README.md", "maturity": "presence-only", "target_level": "L0", "required": true}
+    ],
+    "interfaces": ".consiliency/interfaces.json"
+  },
+  "decision": {
+    "schema": "consiliency.conformance_decision.v1",
+    "status": "rejected",
+    "maturity": "presence-only",
+    "findings": [{"code": "path.absolute", "severity": "block", "message": "Paths must be repo-relative."}]
+  }
+}

consiliency_contract-0.1.0/conformance/vectors/manifest-invalid-certified-maturity.json

@@ -0,0 +1,20 @@
+{
+  "id": "manifest-invalid-certified-maturity",
+  "description": "Phase 0 vectors must not claim certified maturity.",
+  "input": {
+    "schema": "consiliency.manifest.v1",
+    "contract_version": "0.1.0",
+    "repo": {"id": "bad", "display_name": "Bad", "default_branch": "main"},
+    "declaration": {"mode": "baseline-only"},
+    "documents": [
+      {"id": "glossary", "class": "proj-S", "path": "docs/glossary.html", "maturity": "certified", "target_level": "L1", "required": true}
+    ],
+    "interfaces": ".consiliency/interfaces.json"
+  },
+  "decision": {
+    "schema": "consiliency.conformance_decision.v1",
+    "status": "rejected",
+    "maturity": "presence-only",
+    "findings": [{"code": "maturity.certified.phase0", "severity": "block", "message": "Certified maturity is reserved for post-XG-1 evidence."}]
+  }
+}

consiliency_contract-0.1.0/conformance/vectors/manifest-invalid-path-and-ref.json

@@ -0,0 +1,20 @@
+{
+  "id": "manifest-invalid-path-and-ref",
+  "description": "A document declaration must use exactly one of path or ref.",
+  "input": {
+    "schema": "consiliency.manifest.v1",
+    "contract_version": "0.1.0",
+    "repo": {"id": "bad", "display_name": "Bad", "default_branch": "main"},
+    "declaration": {"mode": "baseline-only"},
+    "documents": [
+      {"id": "readme", "class": "index", "path": "README.md", "ref": {"kind": "url", "value": "https://example.invalid"}, "maturity": "presence-only", "target_level": "L0", "required": true}
+    ],
+    "interfaces": ".consiliency/interfaces.json"
+  },
+  "decision": {
+    "schema": "consiliency.conformance_decision.v1",
+    "status": "rejected",
+    "maturity": "presence-only",
+    "findings": [{"code": "document.path_ref.exclusive", "severity": "block", "message": "Document declarations must use exactly one of path or ref."}]
+  }
+}

consiliency_contract-0.1.0/conformance/vectors/manifest-invalid-unknown-archetype.json

@@ -0,0 +1,18 @@
+{
+  "id": "manifest-invalid-unknown-archetype",
+  "description": "Unknown archetypes are rejected.",
+  "input": {
+    "schema": "consiliency.manifest.v1",
+    "contract_version": "0.1.0",
+    "repo": {"id": "bad", "display_name": "Bad", "default_branch": "main"},
+    "declaration": {"mode": "archetyped", "archetypes": ["website"], "modifiers": []},
+    "documents": [],
+    "interfaces": ".consiliency/interfaces.json"
+  },
+  "decision": {
+    "schema": "consiliency.conformance_decision.v1",
+    "status": "rejected",
+    "maturity": "presence-only",
+    "findings": [{"code": "archetype.unknown", "severity": "block", "message": "Archetype is not in the contract registry."}]
+  }
+}

consiliency_contract-0.1.0/conformance/vectors/manifest-valid-baseline-only.json

@@ -0,0 +1,20 @@
+{
+  "id": "manifest-valid-baseline-only",
+  "description": "A baseline-only declaration is legal and carries no archetype list.",
+  "input": {
+    "schema": "consiliency.manifest.v1",
+    "contract_version": "0.1.0",
+    "repo": {"id": "notes", "display_name": "Notes", "default_branch": "main"},
+    "declaration": {"mode": "baseline-only"},
+    "documents": [
+      {"id": "readme", "class": "index", "path": "README.md", "maturity": "presence-only", "target_level": "L0", "required": true}
+    ],
+    "interfaces": ".consiliency/interfaces.json"
+  },
+  "decision": {
+    "schema": "consiliency.conformance_decision.v1",
+    "status": "accepted",
+    "maturity": "presence-only",
+    "findings": []
+  }
+}

consiliency_contract-0.1.0/conformance/vectors/manifest-valid-product.json

@@ -0,0 +1,21 @@
+{
+  "id": "manifest-valid-product",
+  "description": "An archetyped product manifest with repo-relative documents is accepted at L0.",
+  "input": {
+    "schema": "consiliency.manifest.v1",
+    "contract_version": "0.1.0",
+    "repo": {"id": "portal", "display_name": "Consiliency Portal", "default_branch": "main"},
+    "declaration": {"mode": "archetyped", "archetypes": ["product"], "modifiers": ["user-facing"]},
+    "documents": [
+      {"id": "readme", "class": "index", "path": "README.md", "maturity": "presence-only", "target_level": "L0", "required": true},
+      {"id": "contract-version-status", "class": "index", "path": ".consiliency/status.json", "maturity": "presence-only", "target_level": "L0", "required": true}
+    ],
+    "interfaces": ".consiliency/interfaces.json"
+  },
+  "decision": {
+    "schema": "consiliency.conformance_decision.v1",
+    "status": "accepted",
+    "maturity": "presence-only",
+    "findings": []
+  }
+}

consiliency_contract-0.1.0/conformance/vectors/version-skew-compatible.json

@@ -0,0 +1,15 @@
+{
+  "id": "version-skew-compatible",
+  "description": "Contract and package versions in the 0.1 range are compatible.",
+  "input": {
+    "schema": "consiliency.version_skew_scenario.v1",
+    "contract_version": "0.1.0",
+    "package_version": "0.1.0"
+  },
+  "decision": {
+    "schema": "consiliency.conformance_decision.v1",
+    "status": "accepted",
+    "maturity": "presence-only",
+    "findings": []
+  }
+}

consiliency_contract-0.1.0/conformance/vectors/version-skew-incompatible-warns.json

@@ -0,0 +1,15 @@
+{
+  "id": "version-skew-incompatible-warns",
+  "description": "Version skew emits a warning by default during Phase 0.",
+  "input": {
+    "schema": "consiliency.version_skew_scenario.v1",
+    "contract_version": "0.2.0",
+    "package_version": "0.1.0"
+  },
+  "decision": {
+    "schema": "consiliency.conformance_decision.v1",
+    "status": "warn",
+    "maturity": "presence-only",
+    "findings": [{"code": "version_skew.incompatible", "severity": "warn", "message": "Contract and package versions are outside the compatible range."}]
+  }
+}