contractgate 0.1.0__tar.gz

contractgate-0.1.0/.gitignore

@@ -0,0 +1,25 @@
+# Rust
+target/
+
+# Environment
+.env
+.env.local
+
+# Node / Next.js
+dashboard/node_modules/
+dashboard/.next/
+dashboard/out/
+dashboard/.env.local
+dashboard/.env
+
+# OS
+.DS_Store
+*.swp
+*.swo
+
+# Editor
+.vscode/
+.idea/
+dashboard/tsconfig.tsbuildinfo
+# Added by code-review-graph
+.code-review-graph/

contractgate-0.1.0/CHANGELOG.md

@@ -0,0 +1,14 @@
+# Changelog
+
+All notable changes to the `contractgate` Python SDK.
+
+## 0.1.0 — 2026-04-26 (unreleased)
+
+Initial scaffold per RFC-005.
+
+- `Client` (sync) + `AsyncClient` (async) over httpx.
+- `ingest`, `audit`, `get_contract`, `get_version`, `playground`.
+- Local validator (`Contract.from_yaml`, `CompiledContract.validate`).
+- Strict parity with Rust validator: same `ViolationKind`, same field
+  paths, same message text. Locked via shared fixture corpus.
+- No PII transforms in the local validator (RFC-004 invariant).

contractgate-0.1.0/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 ContractGate
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

contractgate-0.1.0/PKG-INFO

@@ -0,0 +1,118 @@
+Metadata-Version: 2.4
+Name: contractgate
+Version: 0.1.0
+Summary: Python SDK for ContractGate — high-performance semantic contract enforcement gateway.
+Project-URL: Homepage, https://contractgate.dev
+Project-URL: Source, https://github.com/contractgate/contractgate
+Author: ContractGate
+License: MIT
+License-File: LICENSE
+Keywords: contract,data-quality,ingestion,schema,validation
+Classifier: Development Status :: 3 - Alpha
+Classifier: Intended Audience :: Developers
+Classifier: License :: OSI Approved :: MIT License
+Classifier: Programming Language :: Python :: 3
+Classifier: Programming Language :: Python :: 3.9
+Classifier: Programming Language :: Python :: 3.10
+Classifier: Programming Language :: Python :: 3.11
+Classifier: Programming Language :: Python :: 3.12
+Classifier: Topic :: Software Development :: Libraries
+Requires-Python: >=3.9
+Requires-Dist: httpx<1.0,>=0.25
+Requires-Dist: pyyaml>=6.0
+Provides-Extra: dev
+Requires-Dist: mypy>=1.8; extra == 'dev'
+Requires-Dist: pytest-asyncio>=0.23; extra == 'dev'
+Requires-Dist: pytest-httpx>=0.30; extra == 'dev'
+Requires-Dist: pytest>=8.0; extra == 'dev'
+Requires-Dist: ruff>=0.5; extra == 'dev'
+Description-Content-Type: text/markdown
+
+# contractgate (Python SDK)
+
+First-party Python SDK for [ContractGate][gw] — a high-performance
+semantic contract enforcement gateway (Patent Pending).
+
+[gw]: https://contractgate.dev
+
+## Install
+
+```bash
+pip install contractgate
+```
+
+Python 3.9+. Runtime deps: `httpx`, `PyYAML`.
+
+## Quickstart — HTTP client
+
+```python
+from contractgate import Client
+
+cg = Client(base_url="https://gw.example.com", api_key="cg_live_...")
+
+result = cg.ingest(
+    contract_id="11111111-1111-1111-1111-111111111111",
+    events=[
+        {"user_id": "alice_01", "event_type": "click", "timestamp": 1712000000},
+    ],
+)
+
+print(result.passed, "/", result.total, "events passed")
+for r in result.results:
+    if not r.passed:
+        for v in r.violations:
+            print(v.field, v.kind, v.message)
+```
+
+Async equivalent:
+
+```python
+import asyncio
+from contractgate import AsyncClient
+
+async def main():
+    async with AsyncClient(base_url="...", api_key="...") as cg:
+        result = await cg.ingest(contract_id="...", events=[...])
+
+asyncio.run(main())
+```
+
+## Quickstart — local validator
+
+Pure-Python port of the Rust validator. Useful in unit tests and
+pre-commit hooks:
+
+```python
+from contractgate import Contract
+
+contract = Contract.from_yaml(open("user_events.yaml").read())
+compiled = contract.compile()
+
+vr = compiled.validate({
+    "user_id": "alice_01",
+    "event_type": "click",
+    "timestamp": 1712000000,
+})
+assert vr.passed, vr.violations
+```
+
+## Caveats
+
+- **Local validator does not run RFC-004 PII transforms** (`mask`,
+  `hash`, `drop`, `redact`). The per-contract salt is server-side
+  only. The gateway is the single source of truth for the
+  post-transform payload — read it from each per-event result's
+  `transformed_event` field.
+- **Audit honesty**: every per-event result carries the
+  `contract_version` that *actually matched* the event (relevant
+  under `multi_stable_resolution: fallback`). Surface it as-is — do
+  not substitute the requested version.
+- **Retries are off by default.** Layer `httpx.HTTPTransport(retries=)`
+  or `tenacity` if you need them. Avoid client-side retry on ingest
+  to prevent double-write; use the gateway's quarantine replay
+  endpoint instead.
+- `httpx` is pinned `>=0.25,<1.0`; we'll widen once 1.x ships.
+
+## License
+
+MIT. See [`LICENSE`](LICENSE).

contractgate-0.1.0/README.md

@@ -0,0 +1,88 @@
+# contractgate (Python SDK)
+
+First-party Python SDK for [ContractGate][gw] — a high-performance
+semantic contract enforcement gateway (Patent Pending).
+
+[gw]: https://contractgate.dev
+
+## Install
+
+```bash
+pip install contractgate
+```
+
+Python 3.9+. Runtime deps: `httpx`, `PyYAML`.
+
+## Quickstart — HTTP client
+
+```python
+from contractgate import Client
+
+cg = Client(base_url="https://gw.example.com", api_key="cg_live_...")
+
+result = cg.ingest(
+    contract_id="11111111-1111-1111-1111-111111111111",
+    events=[
+        {"user_id": "alice_01", "event_type": "click", "timestamp": 1712000000},
+    ],
+)
+
+print(result.passed, "/", result.total, "events passed")
+for r in result.results:
+    if not r.passed:
+        for v in r.violations:
+            print(v.field, v.kind, v.message)
+```
+
+Async equivalent:
+
+```python
+import asyncio
+from contractgate import AsyncClient
+
+async def main():
+    async with AsyncClient(base_url="...", api_key="...") as cg:
+        result = await cg.ingest(contract_id="...", events=[...])
+
+asyncio.run(main())
+```
+
+## Quickstart — local validator
+
+Pure-Python port of the Rust validator. Useful in unit tests and
+pre-commit hooks:
+
+```python
+from contractgate import Contract
+
+contract = Contract.from_yaml(open("user_events.yaml").read())
+compiled = contract.compile()
+
+vr = compiled.validate({
+    "user_id": "alice_01",
+    "event_type": "click",
+    "timestamp": 1712000000,
+})
+assert vr.passed, vr.violations
+```
+
+## Caveats
+
+- **Local validator does not run RFC-004 PII transforms** (`mask`,
+  `hash`, `drop`, `redact`). The per-contract salt is server-side
+  only. The gateway is the single source of truth for the
+  post-transform payload — read it from each per-event result's
+  `transformed_event` field.
+- **Audit honesty**: every per-event result carries the
+  `contract_version` that *actually matched* the event (relevant
+  under `multi_stable_resolution: fallback`). Surface it as-is — do
+  not substitute the requested version.
+- **Retries are off by default.** Layer `httpx.HTTPTransport(retries=)`
+  or `tenacity` if you need them. Avoid client-side retry on ingest
+  to prevent double-write; use the gateway's quarantine replay
+  endpoint instead.
+- `httpx` is pinned `>=0.25,<1.0`; we'll widen once 1.x ships.
+
+## License
+
+MIT. See [`LICENSE`](LICENSE).

contractgate-0.1.0/pyproject.toml

@@ -0,0 +1,52 @@
+[build-system]
+requires = ["hatchling>=1.18"]
+build-backend = "hatchling.build"
+
+[project]
+name = "contractgate"
+version = "0.1.0"
+description = "Python SDK for ContractGate — high-performance semantic contract enforcement gateway."
+readme = "README.md"
+requires-python = ">=3.9"
+license = { text = "MIT" }
+authors = [{ name = "ContractGate" }]
+keywords = ["contract", "validation", "data-quality", "ingestion", "schema"]
+classifiers = [
+  "Development Status :: 3 - Alpha",
+  "Intended Audience :: Developers",
+  "License :: OSI Approved :: MIT License",
+  "Programming Language :: Python :: 3",
+  "Programming Language :: Python :: 3.9",
+  "Programming Language :: Python :: 3.10",
+  "Programming Language :: Python :: 3.11",
+  "Programming Language :: Python :: 3.12",
+  "Topic :: Software Development :: Libraries",
+]
+dependencies = [
+  "httpx>=0.25,<1.0",
+  "PyYAML>=6.0",
+]
+
+[project.optional-dependencies]
+dev = [
+  "pytest>=8.0",
+  "pytest-asyncio>=0.23",
+  "pytest-httpx>=0.30",
+  "mypy>=1.8",
+  "ruff>=0.5",
+]
+
+[project.urls]
+Homepage = "https://contractgate.dev"
+Source = "https://github.com/contractgate/contractgate"
+
+[tool.hatch.build.targets.wheel]
+packages = ["src/contractgate"]
+
+[tool.pytest.ini_options]
+asyncio_mode = "auto"
+testpaths = ["tests"]
+
+[tool.ruff]
+line-length = 100
+target-version = "py39"

contractgate-0.1.0/src/contractgate/__init__.py

@@ -0,0 +1,107 @@
+"""ContractGate Python SDK.
+
+First-party client and pure-Python validator for the ContractGate
+semantic contract enforcement gateway.
+
+Public surface:
+    Client, AsyncClient            -- HTTP clients (sync, async)
+    Contract, CompiledContract     -- local contract parse + compile
+    FieldDefinition, FieldType     -- ontology types
+    MetricDefinition, MetricType   -- metric types
+    Transform, TransformKind,      -- RFC-004 declarations (declared, not run)
+        MaskStyle
+    ValidationResult, Violation,   -- validator outputs
+        ViolationKind
+    BatchIngestResponse,           -- HTTP response shapes
+        IngestEventResult,
+        AuditEntry, ContractResponse,
+        VersionResponse, VersionSummary,
+        IngestionStats
+    ContractGateError, HTTPError,  -- error hierarchy
+        BadRequestError, AuthError,
+        NotFoundError, ConflictError,
+        ValidationFailedError,
+        ServerError, ConnectionError,
+        ContractCompileError
+
+See README.md for usage. See ../docs/rfcs/005-python-sdk.md for the
+design rationale.
+"""
+
+from contractgate._version import __version__
+from contractgate.async_client import AsyncClient
+from contractgate.client import Client
+from contractgate.contract import (
+    CompiledContract,
+    Contract,
+    FieldDefinition,
+    FieldType,
+    MaskStyle,
+    MetricDefinition,
+    MetricType,
+    Transform,
+    TransformKind,
+)
+from contractgate.exceptions import (
+    AuthError,
+    BadRequestError,
+    ConflictError,
+    ConnectionError,
+    ContractCompileError,
+    ContractGateError,
+    HTTPError,
+    NotFoundError,
+    ServerError,
+    ValidationFailedError,
+)
+from contractgate.models import (
+    AuditEntry,
+    BatchIngestResponse,
+    ContractResponse,
+    IngestEventResult,
+    IngestionStats,
+    ValidationResult,
+    VersionResponse,
+    VersionSummary,
+    Violation,
+    ViolationKind,
+)
+
+__all__ = [
+    "__version__",
+    # Clients
+    "Client",
+    "AsyncClient",
+    # Contract / validator
+    "Contract",
+    "CompiledContract",
+    "FieldDefinition",
+    "FieldType",
+    "MetricDefinition",
+    "MetricType",
+    "Transform",
+    "TransformKind",
+    "MaskStyle",
+    # Models
+    "ValidationResult",
+    "Violation",
+    "ViolationKind",
+    "BatchIngestResponse",
+    "IngestEventResult",
+    "AuditEntry",
+    "ContractResponse",
+    "VersionResponse",
+    "VersionSummary",
+    "IngestionStats",
+    # Errors
+    "ContractGateError",
+    "HTTPError",
+    "BadRequestError",
+    "AuthError",
+    "NotFoundError",
+    "ConflictError",
+    "ValidationFailedError",
+    "ServerError",
+    "ConnectionError",
+    "ContractCompileError",
+]