core-cli 1.0.0__tar.gz

core_cli-1.0.0/.github/workflows/ci.yml

@@ -0,0 +1,105 @@
+name: CI
+
+on:
+  push:
+    branches: [main]
+    tags: ["v*"]
+  pull_request:
+    branches: [main]
+
+jobs:
+  lint:
+    name: Lint
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+
+      - uses: actions/setup-python@v5
+        with:
+          python-version: "3.12"
+
+      - name: Install ruff
+        run: pip install ruff
+
+      - name: ruff check
+        run: ruff check src/
+
+  typecheck:
+    name: Type check
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+
+      - uses: actions/setup-python@v5
+        with:
+          python-version: "3.12"
+
+      - name: Install mypy + stubs
+        run: pip install mypy types-PyYAML
+
+      - name: mypy
+        # core-runtime ships no type stubs; ignore-missing-imports preserves
+        # checking of core-cli's own code without requiring stub packages.
+        run: mypy src/ --ignore-missing-imports --no-error-summary
+
+  test:
+    name: Test
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+
+      - uses: actions/setup-python@v5
+        with:
+          python-version: "3.12"
+
+      - name: Install package + dev deps
+        # core-runtime is on PyPI (>=2.8.0); installs as a transitive dep.
+        run: pip install -e ".[dev]"
+
+      - name: Run tests
+        run: pytest tests/ -v
+
+  build:
+    name: Build distribution
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+
+      - uses: actions/setup-python@v5
+        with:
+          python-version: "3.12"
+
+      - name: Build sdist + wheel
+        run: |
+          pip install build
+          python -m build
+
+      - name: Upload distribution artifacts
+        uses: actions/upload-artifact@v4
+        with:
+          name: dist
+          path: dist/
+          if-no-files-found: error
+          retention-days: 7
+
+  publish:
+    name: Publish to PyPI
+    # Only publish on version tags; all checks must pass first.
+    if: startsWith(github.ref, 'refs/tags/v')
+    needs: [lint, typecheck, test, build]
+    runs-on: ubuntu-latest
+    # "pypi" environment must be configured in GitHub repo Settings → Environments.
+    # The matching Trusted Publisher must be registered at pypi.org/manage/account/publishing/
+    # with: project=core-cli, owner=DariuszNewecki, repo=core-cli, workflow=ci.yml, env=pypi.
+    environment: pypi
+    permissions:
+      id-token: write  # required for OIDC Trusted Publisher token exchange
+    steps:
+      - name: Download distribution artifacts
+        uses: actions/download-artifact@v4
+        with:
+          name: dist
+          path: dist/
+
+      - name: Publish to PyPI (Trusted Publisher OIDC)
+        uses: pypa/gh-action-pypi-publish@release/v1

core_cli-1.0.0/.gitignore

@@ -0,0 +1,8 @@
+__pycache__/
+*.py[cod]
+*.egg-info/
+dist/
+build/
+.venv/
+.env
+*.pth

core_cli-1.0.0/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2024 Dariusz Newecki
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

core_cli-1.0.0/PKG-INFO

@@ -0,0 +1,72 @@
+Metadata-Version: 2.4
+Name: core-cli
+Version: 1.0.0
+Summary: Consumer governance CLI for CORE — pure HTTP client for governing repositories against CORE constitutional rules.
+Project-URL: Homepage, https://github.com/DariuszNewecki/CORE
+Project-URL: Repository, https://github.com/DariuszNewecki/core-cli
+Project-URL: Bug Tracker, https://github.com/DariuszNewecki/core-cli/issues
+Author-email: Dariusz Newecki <d.newecki@gmail.com>
+License: MIT
+License-File: LICENSE
+Keywords: cli,code-quality,constitutional-ai,developer-tools,governance
+Classifier: Development Status :: 4 - Beta
+Classifier: Environment :: Console
+Classifier: Intended Audience :: Developers
+Classifier: License :: OSI Approved :: MIT License
+Classifier: Programming Language :: Python :: 3
+Classifier: Programming Language :: Python :: 3.12
+Classifier: Topic :: Software Development
+Classifier: Topic :: Software Development :: Quality Assurance
+Requires-Python: >=3.12
+Requires-Dist: core-runtime>=2.8.0
+Provides-Extra: dev
+Requires-Dist: pytest-asyncio>=0.23; extra == 'dev'
+Requires-Dist: pytest>=8.0; extra == 'dev'
+Description-Content-Type: text/markdown
+
+# core-cli
+
+Consumer governance CLI for [CORE](https://github.com/DariuszNewecki/CORE) — pure HTTP client for governing repositories against CORE constitutional rules.
+
+## Install
+
+```bash
+pip install core-cli
+```
+
+## Usage
+
+```bash
+core lane list
+core proposals list
+core code audit_duplicates --help
+core symbols audit --help
+core vectors query --help
+core project onboard --help
+```
+
+Requires a running CORE instance. Configure via environment:
+
+```bash
+export CORE_API_URL=http://localhost:8000
+```
+
+## Commands
+
+| Namespace | Commands |
+|-----------|----------|
+| `lane` | `list`, `next`, `claim`, `propose` |
+| `proposals` | `list`, `create`, `show`, `approve`, `reject`, `execute` |
+| `secrets` | manage encrypted secrets |
+| `code` | `actions`, `audit_duplicates`, `bridges`, `check_imports`, `check_ui`, `docstrings`, `fix_atomic`, `format`, `integrity`, `lint`, `logging`, `test` |
+| `symbols` | `audit`, `fix_ids`, `resolve_duplicates`, `sync` |
+| `vectors` | `query`, `rebuild`, `status`, `sync`, `sync_code` |
+| `project` | `docs`, `onboard`, `scout` |
+
+## Architecture
+
+All commands communicate exclusively over the CORE HTTP API — no in-process access required.
+`core-cli` depends on `core-runtime` for shared HTTP client infrastructure (`api.cli.*`)
+and CLI utilities (`cli.utils.*`).
+
+See [ADR-146](https://github.com/DariuszNewecki/CORE/blob/main/.specs/decisions/ADR-146-cli-consumer-operator-split.md) for the consumer/operator split rationale.

core_cli-1.0.0/README.md

@@ -0,0 +1,46 @@
+# core-cli
+
+Consumer governance CLI for [CORE](https://github.com/DariuszNewecki/CORE) — pure HTTP client for governing repositories against CORE constitutional rules.
+
+## Install
+
+```bash
+pip install core-cli
+```
+
+## Usage
+
+```bash
+core lane list
+core proposals list
+core code audit_duplicates --help
+core symbols audit --help
+core vectors query --help
+core project onboard --help
+```
+
+Requires a running CORE instance. Configure via environment:
+
+```bash
+export CORE_API_URL=http://localhost:8000
+```
+
+## Commands
+
+| Namespace | Commands |
+|-----------|----------|
+| `lane` | `list`, `next`, `claim`, `propose` |
+| `proposals` | `list`, `create`, `show`, `approve`, `reject`, `execute` |
+| `secrets` | manage encrypted secrets |
+| `code` | `actions`, `audit_duplicates`, `bridges`, `check_imports`, `check_ui`, `docstrings`, `fix_atomic`, `format`, `integrity`, `lint`, `logging`, `test` |
+| `symbols` | `audit`, `fix_ids`, `resolve_duplicates`, `sync` |
+| `vectors` | `query`, `rebuild`, `status`, `sync`, `sync_code` |
+| `project` | `docs`, `onboard`, `scout` |
+
+## Architecture
+
+All commands communicate exclusively over the CORE HTTP API — no in-process access required.
+`core-cli` depends on `core-runtime` for shared HTTP client infrastructure (`api.cli.*`)
+and CLI utilities (`cli.utils.*`).
+
+See [ADR-146](https://github.com/DariuszNewecki/CORE/blob/main/.specs/decisions/ADR-146-cli-consumer-operator-split.md) for the consumer/operator split rationale.

core_cli-1.0.0/pyproject.toml

@@ -0,0 +1,50 @@
+[build-system]
+requires = ["hatchling"]
+build-backend = "hatchling.build"
+
+[project]
+name = "core-cli"
+version = "1.0.0"
+description = "Consumer governance CLI for CORE — pure HTTP client for governing repositories against CORE constitutional rules."
+readme = "README.md"
+license = {text = "MIT"}
+requires-python = ">=3.12"
+authors = [
+    { name = "Dariusz Newecki", email = "d.newecki@gmail.com" },
+]
+keywords = ["governance", "cli", "code-quality", "constitutional-ai", "developer-tools"]
+classifiers = [
+    "License :: OSI Approved :: MIT License",
+    "Programming Language :: Python :: 3",
+    "Programming Language :: Python :: 3.12",
+    "Topic :: Software Development",
+    "Topic :: Software Development :: Quality Assurance",
+    "Environment :: Console",
+    "Intended Audience :: Developers",
+    "Development Status :: 4 - Beta",
+]
+dependencies = [
+    "core-runtime>=2.8.0",
+]
+
+[project.optional-dependencies]
+dev = [
+    "pytest>=8.0",
+    "pytest-asyncio>=0.23",
+]
+
+[project.scripts]
+core = "core_cli.main:app"
+
+[project.urls]
+Homepage = "https://github.com/DariuszNewecki/CORE"
+Repository = "https://github.com/DariuszNewecki/core-cli"
+"Bug Tracker" = "https://github.com/DariuszNewecki/core-cli/issues"
+
+[tool.hatch.build.targets.wheel]
+packages = ["src/core_cli"]
+
+[tool.pytest.ini_options]
+asyncio_mode = "auto"
+pythonpath = ["src"]
+testpaths = ["tests"]

core_cli-1.0.0/src/core_cli/__init__.py

@@ -0,0 +1,3 @@
+"""core-cli — consumer governance CLI for CORE."""
+
+from __future__ import annotations

core_cli-1.0.0/src/core_cli/main.py

@@ -0,0 +1,33 @@
+"""core-cli entry point — consumer governance CLI."""
+
+from __future__ import annotations
+
+import typer
+
+from core_cli.resources.code import app as code_app
+from core_cli.resources.lane import app as lane_app
+from core_cli.resources.project import app as project_app
+from core_cli.resources.proposals import app as proposals_app
+from core_cli.resources.secrets import app as secrets_app
+from core_cli.resources.symbols import app as symbols_app
+from core_cli.resources.vectors import app as vectors_app
+
+
+# ID: 92ffef66-e5d7-48ae-929e-a82f136a9719
+app = typer.Typer(
+    name="core",
+    help="CORE consumer governance CLI — govern your project against CORE constitutional rules.",
+    no_args_is_help=True,
+)
+
+app.add_typer(lane_app, name="lane")
+app.add_typer(proposals_app, name="proposals")
+app.add_typer(secrets_app, name="secrets")
+app.add_typer(code_app, name="code")
+app.add_typer(symbols_app, name="symbols")
+app.add_typer(vectors_app, name="vectors")
+app.add_typer(project_app, name="project")
+
+
+if __name__ == "__main__":
+    app()

core_cli-1.0.0/src/core_cli/resources/__init__.py

@@ -0,0 +1,3 @@
+"""Consumer resource command packages."""
+
+from __future__ import annotations

core_cli-1.0.0/src/core_cli/resources/code/__init__.py

@@ -0,0 +1,22 @@
+"""Consumer codebase commands — quality, style, and verification over HTTP."""
+
+from __future__ import annotations
+
+from . import (  # noqa: F401
+    actions,
+    audit_duplicates,
+    bridges,
+    check_imports,
+    check_ui,
+    docstrings,
+    fix_atomic,
+    format,
+    integrity,
+    lint,
+    logging,
+    test,
+)
+from .hub import app
+
+
+__all__ = ["app"]

core_cli-1.0.0/src/core_cli/resources/code/actions.py

@@ -0,0 +1,54 @@
+# src/cli/resources/code/actions.py
+import logging
+
+from rich.console import Console
+from rich.table import Table
+
+from api.cli import CoreApiClient
+from cli.utils import core_command
+from shared.cli.command_meta import (
+    CommandBehavior,
+    CommandExposure,
+    CommandLayer,
+    command_meta,
+)
+
+from .hub import app
+
+
+logger = logging.getLogger(__name__)
+console = Console()
+
+
+@app.command("actions")
+@command_meta(
+    canonical_name="code.actions",
+    behavior=CommandBehavior.READ,
+    layer=CommandLayer.BODY,
+    exposure=CommandExposure.GOVERNOR_ONLY,
+    summary="List all registered Atomic Actions showing their IDs, categories, impact levels, and descriptions.",
+    dangerous=False,
+)
+@core_command(dangerous=False, requires_context=False)
+# ID: 4f8e13a3-f017-4d0f-a6ef-340f81d05341
+async def list_actions_cmd() -> None:
+    """
+    List all registered Atomic Actions (Body Capabilities).
+    Shows IDs, categories, and impact levels for autonomous building blocks.
+    """
+    client = CoreApiClient()
+    payload = await client.list_actions()
+    actions = payload.get("actions", [])
+    table = Table(title="Registered Atomic Actions", header_style="bold green")
+    table.add_column("Action ID", style="cyan")
+    table.add_column("Category", style="blue")
+    table.add_column("Impact", style="magenta")
+    table.add_column("Description")
+    for action in sorted(actions, key=lambda a: a.get("action_id", "")):
+        table.add_row(
+            action.get("action_id", ""),
+            action.get("category", ""),
+            action.get("impact_level", ""),
+            action.get("description", ""),
+        )
+    console.print(table)

core_cli-1.0.0/src/core_cli/resources/code/audit_duplicates.py

@@ -0,0 +1,37 @@
+# src/core_cli/resources/code/audit_duplicates.py
+from __future__ import annotations
+
+import typer
+from rich.console import Console
+
+from api.cli import CoreApiClient
+from cli.utils import core_command
+
+from .hub import app
+
+
+console = Console()
+
+
+@app.command("audit-duplicates")
+@core_command(dangerous=False, requires_context=False)
+# ID: 2ad098e5-aa8a-4e12-89e4-be20d2e12e03
+async def audit_duplicates_cmd(
+    threshold: float = typer.Option(0.96, help="Similarity threshold (0.0-1.0)."),
+) -> None:
+    """
+    Perform a semantic scan to find duplicate logic across the codebase.
+    Helps enforce the 'dry_by_design' constitutional principle.
+    """
+    client = CoreApiClient()
+    result = await client.inspect.analysis_duplicates(threshold=threshold)
+    if result.get("ok"):
+        console.print(
+            f"[green]✓ Duplicates scan complete (threshold={threshold}).[/green]"
+        )
+        note = result.get("note", "")
+        if note:
+            console.print(f"[dim]{note}[/dim]")
+    else:
+        console.print(f"[red]✗ Duplicates scan failed: {result.get('error')}[/red]")
+        raise typer.Exit(1)

core_cli-1.0.0/src/core_cli/resources/code/bridges.py

@@ -0,0 +1,90 @@
+# src/core_cli/resources/code/bridges.py
+"""CLI command: list declared architecture bridge points (issue #617)."""
+
+from __future__ import annotations
+
+import typer
+from rich.console import Console
+from rich.table import Table
+
+from api.cli import CoreApiClient
+from cli.utils import core_command
+
+from .hub import app
+
+
+console = Console()
+
+
+@app.command("bridges")
+@core_command(dangerous=False, requires_context=False)
+# ID: 5b2e91f3-a4c8-4d7e-b6f0-8c1a9d2e3f04
+async def list_bridges_cmd(
+    consuming: str | None = typer.Option(
+        None,
+        "--consuming",
+        "-c",
+        help="Filter by consuming type (e.g. AuditFinding, Proposal).",
+    ),
+) -> None:
+    """
+    List declared architecture bridge points.
+
+    Each bridge is a constitutionally-declared data-flow crossing where
+    information moves between CORE layers. Use --consuming to find bridges
+    that consume a specific data type.
+
+    Example:
+      core code bridges --consuming AuditFinding
+    """
+    client = CoreApiClient()
+    result = await client.inspect.analysis_bridges(consuming=consuming)
+
+    if not result.get("available"):
+        console.print(f"[red]✗ Bridges unavailable: {result.get('error')}[/red]")
+        raise typer.Exit(1)
+
+    bridges = result.get("bridges", [])
+    if not bridges:
+        if consuming:
+            console.print(
+                f"[yellow]No bridges found consuming type '{consuming}'.[/yellow]"
+            )
+        else:
+            console.print("[yellow]No bridge declarations found.[/yellow]")
+        return
+
+    title = (
+        f"Architecture Bridges (consuming '{consuming}')"
+        if consuming
+        else "Architecture Bridges"
+    )
+    table = Table(title=title, header_style="bold cyan", show_lines=True)
+    table.add_column("ID", style="cyan", no_wrap=True)
+    table.add_column("Bridge Class", style="bold")
+    table.add_column("Layer", style="blue")
+    table.add_column("Source", style="dim")
+    table.add_column("Sink Target", style="green")
+    table.add_column("Attribution", style="magenta")
+    table.add_column("ADRs", style="dim")
+
+    for bridge in bridges:
+        source = bridge.get("source_layer") or (
+            bridge.get("source_context", "")[:40]
+        )
+        attr_mechanism = bridge.get("attribution_mechanism", "")
+        attr_field = bridge.get("attribution_field")
+        attribution = (
+            f"{attr_mechanism} → {attr_field}" if attr_field else attr_mechanism
+        )
+        table.add_row(
+            bridge.get("id", ""),
+            bridge.get("bridge_class", ""),
+            bridge.get("bridge_layer", ""),
+            source,
+            bridge.get("sink_target", ""),
+            attribution,
+            ", ".join(bridge.get("authority_adrs", [])),
+        )
+
+    console.print(table)

core_cli-1.0.0/src/core_cli/resources/code/check_imports.py

@@ -0,0 +1,75 @@
+# src/cli/resources/code/check_imports.py
+"""
+Import integrity check command.
+
+Routes through POST /v1/quality/imports for constitutional compliance.
+"""
+
+from __future__ import annotations
+
+import logging
+
+import typer
+from rich.console import Console
+from rich.table import Table
+
+from api.cli import CoreApiClient
+from cli.utils import core_command
+
+from .hub import app
+
+
+logger = logging.getLogger(__name__)
+console = Console()
+
+
+@app.command("check-imports")
+@core_command(dangerous=False, requires_context=False)
+# ID: 53db749b-a5cf-44e4-8e7f-47e6499aec0b
+async def check_imports_cmd(ctx: typer.Context) -> None:
+    """
+    Verify all import statements resolve to existing modules.
+
+    Checks for:
+    - F821: References to undefined names (moved/deleted modules)
+    - F401: Stale imports left after refactoring
+
+    Enforces:
+    - code.imports.must_resolve
+    - code.imports.no_stale_namespace
+    """
+    console.rule("[bold cyan]Import Integrity Check[/bold cyan]")
+    console.print("[dim]Scanning src/ for unresolvable imports (F821, F401)...[/dim]\n")
+    client = CoreApiClient()
+    result = await client.quality_imports()
+    if result.get("status") == "ok":
+        console.print("[bold green]✅ All imports resolve cleanly.[/bold green]")
+        return
+    violations = result.get("violations", [])
+    violation_count = len(violations)
+    console.print(
+        f"[bold red]❌ {violation_count} unresolvable import(s) found.[/bold red]\n"
+    )
+    if violations:
+        table = Table(
+            title="Import Violations", show_header=True, header_style="bold red"
+        )
+        table.add_column("File", style="cyan", overflow="fold")
+        table.add_column("Line", style="yellow", justify="right", width=6)
+        table.add_column("Rule", style="magenta", width=6)
+        table.add_column("Message", style="white", overflow="fold")
+        for v in violations:
+            table.add_row(
+                v.get("file", ""),
+                str(v.get("line", "")),
+                v.get("rule", ""),
+                v.get("message", ""),
+            )
+        console.print(table)
+    console.print(
+        "\n[dim]Fix: Update stale import paths or remove unused imports.[/dim]"
+    )
+    console.print(
+        "[dim]Rule: code.imports.must_resolve (.intent/rules/code/imports.json)[/dim]"
+    )
+    raise typer.Exit(code=1)