core-runtime 2.14.2__tar.gz → 2.14.3__tar.gz

core_runtime-2.14.3/PKG-INFO

@@ -0,0 +1,120 @@
+Metadata-Version: 2.4
+Name: core-runtime
+Version: 2.14.3
+Summary: CORE: executable constitutional governance for AI-assisted software development.
+License-Expression: MIT
+License-File: LICENSE
+Keywords: governance,audit,ci,constitutional,software-factory,code-quality,intent-driven,ai-assisted,llm
+Author: Dariusz Newecki
+Author-email: d.newecki@gmail.com
+Requires-Python: >=3.12,<4.0
+Classifier: Development Status :: 4 - Beta
+Classifier: Intended Audience :: Developers
+Classifier: Intended Audience :: Information Technology
+Classifier: Operating System :: POSIX :: Linux
+Classifier: Operating System :: MacOS
+Classifier: Programming Language :: Python :: 3
+Classifier: Programming Language :: Python :: 3.12
+Classifier: Topic :: Software Development :: Quality Assurance
+Classifier: Topic :: Software Development :: Testing
+Classifier: Topic :: System :: Systems Administration
+Requires-Dist: PyJWT (>=2.15.1,<3.0)
+Requires-Dist: argon2-cffi (>=23.1,<24.0)
+Requires-Dist: asyncpg (>=0.31.0,<0.32.0)
+Requires-Dist: black (>=26.3.1,<27.0.0)
+Requires-Dist: click (>=8.5.0)
+Requires-Dist: cryptography (>=50.0.1,<51.0.0)
+Requires-Dist: dependency-injector (>=4.49.1,<5.0.0)
+Requires-Dist: email-validator (>=2.0,<3.0)
+Requires-Dist: fastapi (>=0.136.0,<0.137.0)
+Requires-Dist: filelock (>=3.32.7,<4.0.0)
+Requires-Dist: httpx (>=0.28.0,<0.29.0)
+Requires-Dist: jsonschema (>=4.26.0,<5)
+Requires-Dist: mcp (>=2.3.0,<2.4.0)
+Requires-Dist: msgpack (>=1.2.3,<2.0.0)
+Requires-Dist: numpy (>=2.5.3,<3.0.0)
+Requires-Dist: pathspec (>=1.1.0,<2.0.0)
+Requires-Dist: pydantic (>=2.13.5,<3.0)
+Requires-Dist: pydantic-settings (>=2.15.0,<3.0.0)
+Requires-Dist: python-dotenv (>=1.2.3,<2.0.0)
+Requires-Dist: pyyaml (>=6.0.3,<7.0)
+Requires-Dist: qdrant-client (>=1.19.1,<2.0.0)
+Requires-Dist: radon (>=6.0.1,<7.0.0)
+Requires-Dist: redis (>=5.0,<6.0)
+Requires-Dist: rich (>=13,<16)
+Requires-Dist: scikit-learn (>=1.9.1,<2.0.0)
+Requires-Dist: setuptools (>=84.0.0)
+Requires-Dist: sqlalchemy[asyncio] (>=2.1.2,<3.0.0)
+Requires-Dist: sqlparse (>=0.6.0,<0.7.0)
+Requires-Dist: typer (>=0.26.0,<0.28.0)
+Requires-Dist: uvicorn[standard] (>=0.38.0,<0.39.0)
+Project-URL: Documentation, https://dariusznewecki.github.io/CORE/
+Project-URL: Homepage, https://github.com/DariuszNewecki/CORE
+Project-URL: Repository, https://github.com/DariuszNewecki/CORE
+Description-Content-Type: text/markdown
+
+# CORE
+
+> **Executable constitutional governance for AI-assisted software development.**
+
+[![License: MIT](https://img.shields.io/badge/License-MIT-yellow.svg)](LICENSE)
+[![Release](https://img.shields.io/badge/Release-v2.14.3-blue)](https://github.com/DariuszNewecki/CORE/releases)
+[![Docs](https://img.shields.io/badge/Docs-online-green)](https://dariusznewecki.github.io/CORE/)
+
+**Current Release:** v2.14.3 — see [CHANGELOG.md](CHANGELOG.md).
+
+## What CORE is
+
+CORE audits a codebase against declared rules in `.intent/`, records every
+violation, proposes fixes, and logs the chain from finding to commit. AI
+assistants and CORE's own loop can propose changes; only the human governor
+approves them. What it is for, in plain words: [What CORE does](docs/what-core-does.md).
+
+## Install and first run
+
+```bash
+pip install core-runtime
+```
+
+This gives you the `core-admin` CLI. In a repository that already has a
+`.intent/` constitution, audit it with no services running:
+
+```bash
+core-admin code audit --offline
+```
+
+To bring CORE into an existing repository, no services are needed either:
+
+```bash
+cd your-repo
+core-admin project init . --write
+core-admin project adopt-pack core/starter-python --write
+core-admin code audit --offline
+```
+
+A new project:
+
+```bash
+core-admin project new myproject --write
+cd myproject
+core-admin project adopt-pack core/starter-python --write
+core-admin code audit --offline
+```
+
+To run the full local runtime (Postgres + Qdrant) from a clone:
+
+```bash
+git clone https://github.com/DariuszNewecki/CORE.git
+cd CORE
+./install-core.sh
+```
+
+## More
+
+- Decisions: [.specs/DECISIONS.md](.specs/DECISIONS.md)
+- Documentation: [docs/](docs/index.md), published at [dariusznewecki.github.io/CORE](https://dariusznewecki.github.io/CORE/)
+
+## License
+
+MIT — see [LICENSE](LICENSE).
+

core_runtime-2.14.3/README.md

@@ -0,0 +1,64 @@
+# CORE
+
+> **Executable constitutional governance for AI-assisted software development.**
+
+[![License: MIT](https://img.shields.io/badge/License-MIT-yellow.svg)](LICENSE)
+[![Release](https://img.shields.io/badge/Release-v2.14.3-blue)](https://github.com/DariuszNewecki/CORE/releases)
+[![Docs](https://img.shields.io/badge/Docs-online-green)](https://dariusznewecki.github.io/CORE/)
+
+**Current Release:** v2.14.3 — see [CHANGELOG.md](CHANGELOG.md).
+
+## What CORE is
+
+CORE audits a codebase against declared rules in `.intent/`, records every
+violation, proposes fixes, and logs the chain from finding to commit. AI
+assistants and CORE's own loop can propose changes; only the human governor
+approves them. What it is for, in plain words: [What CORE does](docs/what-core-does.md).
+
+## Install and first run
+
+```bash
+pip install core-runtime
+```
+
+This gives you the `core-admin` CLI. In a repository that already has a
+`.intent/` constitution, audit it with no services running:
+
+```bash
+core-admin code audit --offline
+```
+
+To bring CORE into an existing repository, no services are needed either:
+
+```bash
+cd your-repo
+core-admin project init . --write
+core-admin project adopt-pack core/starter-python --write
+core-admin code audit --offline
+```
+
+A new project:
+
+```bash
+core-admin project new myproject --write
+cd myproject
+core-admin project adopt-pack core/starter-python --write
+core-admin code audit --offline
+```
+
+To run the full local runtime (Postgres + Qdrant) from a clone:
+
+```bash
+git clone https://github.com/DariuszNewecki/CORE.git
+cd CORE
+./install-core.sh
+```
+
+## More
+
+- Decisions: [.specs/DECISIONS.md](.specs/DECISIONS.md)
+- Documentation: [docs/](docs/index.md), published at [dariusznewecki.github.io/CORE](https://dariusznewecki.github.io/CORE/)
+
+## License
+
+MIT — see [LICENSE](LICENSE).

core_runtime-2.14.3/pyproject.toml

@@ -0,0 +1,320 @@
+[build-system]
+requires = ["poetry-core>=2.0.0"]
+build-backend = "poetry.core.masonry.api"
+
+[project]
+name = "core-runtime"
+version = "2.14.3"
+description = "CORE: executable constitutional governance for AI-assisted software development."
+authors = [
+    { name = "Dariusz Newecki", email = "d.newecki@gmail.com" },
+]
+license = "MIT"
+license-files = ["LICENSE"]
+readme = "README.md"
+requires-python = ">=3.12,<4.0"
+keywords = [
+    "governance",
+    "audit",
+    "ci",
+    "constitutional",
+    "software-factory",
+    "code-quality",
+    "intent-driven",
+    "ai-assisted",
+    "llm",
+]
+classifiers = [
+    "Development Status :: 4 - Beta",
+    "Intended Audience :: Developers",
+    "Intended Audience :: Information Technology",
+    "Operating System :: POSIX :: Linux",
+    "Operating System :: MacOS",
+    "Programming Language :: Python :: 3",
+    "Programming Language :: Python :: 3.12",
+    "Topic :: Software Development :: Quality Assurance",
+    "Topic :: Software Development :: Testing",
+    "Topic :: System :: Systems Administration",
+]
+dependencies = [
+    # Web Framework
+    "fastapi>=0.136.0,<0.137.0",
+    "uvicorn[standard]>=0.38.0,<0.39.0",
+    # Database (Async)
+    "sqlalchemy[asyncio]>=2.1.2,<3.0.0",
+    "asyncpg>=0.31.0,<0.32.0",
+    # Configuration & Validation
+    "pydantic>=2.13.5,<3.0",
+    "pydantic-settings>=2.15.0,<3.0.0",
+    "python-dotenv>=1.2.3,<2.0.0",
+    # Security
+    "cryptography>=50.0.1,<51.0.0",
+    "PyJWT>=2.15.1,<3.0",
+    "argon2-cffi>=23.1,<24.0",
+    "email-validator>=2.0,<3.0",
+    # CLI & UI
+    "typer>=0.26.0,<0.28.0",
+    "rich>=13,<16",
+    # Data Processing
+    "pyyaml>=6.0.3,<7.0",
+    "jsonschema>=4.26.0,<5",
+    "httpx>=0.28.0,<0.29.0",
+    # Code Quality Tools
+    "black>=26.3.1,<27.0.0",
+    "radon>=6.0.1,<7.0.0",
+    "sqlparse>=0.6.0,<0.7.0",
+    # Vector Database
+    "qdrant-client>=1.19.1,<2.0.0",
+    # Scientific Computing
+    "numpy>=2.5.3,<3.0.0",
+    "scikit-learn>=1.9.1,<2.0.0",
+    # Utilities
+    "msgpack>=1.2.3,<2.0.0",
+    "filelock>=3.32.7,<4.0.0",
+    "pathspec>=1.1.0,<2.0.0",
+    # Dependency Injection
+    "dependency-injector>=4.49.1,<5.0.0",
+    # Assistant surface: the MCP server (ADR-168 D4.3)
+    "mcp>=2.3.0,<2.4.0",
+    # Rate limiting (optional Redis backend)
+    "redis>=5.0,<6.0",
+    # Security floors for transitive deps (pip-audit; not directly imported):
+    # click via typer/uvicorn/httpx — PYSEC-2026-2132 (click.edit command injection, fixed 8.3.3)
+    # setuptools via greenlet/uvloop — PYSEC-2026-3447 (MANIFEST NFD/NFC bypass, fixed 83.0.0)
+    "click>=8.5.0",
+    "setuptools>=84.0.0",
+]
+
+[project.urls]
+Homepage = "https://github.com/DariuszNewecki/CORE"
+Repository = "https://github.com/DariuszNewecki/CORE"
+Documentation = "https://dariusznewecki.github.io/CORE/"
+
+[project.scripts]
+core-admin = "cli.admin_cli:app"
+
+# Poetry-specific configuration that PEP 621 does not model.
+# Package discovery (src/ layout) and the dev dependency group stay here.
+[tool.poetry]
+packages = [
+    { include = "api", from = "src" },
+    { include = "body", from = "src" },
+    { include = "cli", from = "src" },
+    { include = "mind", from = "src" },
+    { include = "shared", from = "src" },
+    { include = "will", from = "src" },
+]
+
+[tool.poetry.group.dev.dependencies]
+# Testing
+pytest = "^9.0"
+pytest-asyncio = "^1.4"
+pytest-mock = "^3.16.0"
+pytest-cov = "^7.1"
+pytest-dotenv = "^0.5.2"
+pytest-xdist = "^3.8.0"
+aiosqlite = "^0.22.1"
+
+# Code Quality
+pre-commit = "^4.6.2"
+mypy = "^2.3"
+types-PyYAML = "^6.0"
+types-jsonschema = "^4.0"
+ruff = "^0.16.9"
+
+# Documentation
+sphinx = "^9.1"
+sphinx-rtd-theme = "^3.1"
+
+# Development Tools
+httpx = "^0.28.1"
+ipython = "^9.17"
+anyio = "^4.15.1"
+mkdocs = "^1.6.1"
+mkdocs-material = "^9.7.7"
+vulture = "^2.16"
+pip-audit = "^2.10.1"
+bandit = "^1.9.4"
+
+[tool.black]
+line-length = 88
+target-version = ["py312"]
+include = '\.pyi?$'
+extend-exclude = '''
+/(
+    \.git
+  | \.venv
+  | __pycache__
+  | logs
+  | sandbox
+  | pending_writes
+)/
+'''
+
+[tool.ruff]
+line-length = 88
+target-version = "py312"
+extend-exclude = [
+    ".git",
+    ".venv",
+    "__pycache__",
+    "logs",
+    "sandbox",
+    "pending_writes",
+    "scripts",
+    "dev-scripts",
+    "tests",
+    "examples",
+]
+
+[tool.ruff.lint]
+select = [
+    "E",
+    "W",
+    "F",
+    "I",
+    "UP",
+    "RUF",
+    "ASYNC",
+]
+ignore = [
+    "E402",
+    "E501",
+    "B008",
+    "B904",
+    "B007",
+    "SIM102",
+    "SIM117",
+    "C401",
+    "C408",
+    "C414",
+    "N806",
+    "F841",
+    # UP042: we use str+Enum intentionally (StrEnum has different Pydantic serialization)
+    "UP042",
+    # ASYNC240: fires on asyncio codebases; rule targets trio/anyio path wrappers we don't use
+    "ASYNC240",
+]
+
+[tool.ruff.lint.isort]
+force-single-line = false
+lines-after-imports = 2
+lines-between-types = 0
+known-first-party = ["api", "body", "mind", "shared", "will"]
+section-order = ["future", "standard-library", "third-party", "first-party", "local-folder"]
+
+[tool.ruff.lint.per-file-ignores]
+"__init__.py" = ["F401"]
+"tests/**/*.py" = ["B008", "F403"]
+
+# --- Migrated from pytest.ini ---
+[tool.pytest.ini_options]
+testpaths = ["tests"]
+pythonpath = ["src"]
+asyncio_mode = "auto"
+
+# pytest-dotenv
+env_files = [".env.test"]
+env_override_existing_values = true
+
+# logging
+log_cli = true
+log_cli_level = "INFO"
+
+# options
+addopts = [
+    "-v",
+    "--strict-markers",
+    "--strict-config",
+    "--import-mode=importlib",
+    "--cov=src",
+    "--cov-report=html:reports/htmlcov",
+    "--cov-report=term-missing:skip-covered",
+    "-m",
+    "not trio",
+]
+
+markers = [
+    "unit: Unit tests (fast, no external dependencies)",
+    "integration: Integration tests (database, external services)",
+    "e2e: End-to-end tests (full system)",
+    "slow: Slow running tests",
+    "trio: marks tests to run with trio backend (skipped by default)",
+]
+
+# --- Migrated from mypy.ini ---
+[tool.mypy]
+python_version = "3.12"
+ignore_missing_imports = false
+plugins = ["pydantic.mypy"]
+# Global: only catch catastrophic errors
+warn_return_any = false
+disallow_untyped_defs = false
+
+[[tool.mypy.overrides]]
+module = "src.will.tools.*"
+ignore_errors = true
+
+[[tool.mypy.overrides]]
+module = "src.mind.logic.engines.ast_gate.*"
+ignore_errors = false
+
+# Third-party packages with no published stubs.
+[[tool.mypy.overrides]]
+module = ["radon.*", "sklearn.*"]
+ignore_missing_imports = true
+
+# Internal modules referenced via optional/lazy imports that may be absent
+# (orphaned dead code or optional extensions not present in all installs)
+[[tool.mypy.overrides]]
+module = [
+    "mind.governance.enforcement.async_units",
+    "mind.governance.enforcement.base",
+    "mind.governance.enforcement.sync_units",
+    "mind.governance.checks.rule_enforcement_check",
+    "body.self_healing.cluster_inspector",
+    "body.self_healing.common_knowledge_inspector",
+    "body.quality.test_target_classifier",
+    "body.introspection.vectorization_service",
+    "will.agents.capability_tagger_agent",
+    "shared.infrastructure.paths",
+]
+ignore_missing_imports = true
+
+# --- Migrated from .coveragerc ---
+[tool.coverage.run]
+branch = true
+source = ["src"]
+relative_files = true
+omit = [
+    "tests/*",
+]
+
+[tool.coverage.paths]
+source = [
+    "src",
+    "*/src",
+]
+
+[tool.coverage.report]
+# Coverage gate is opt-in via `--cov-fail-under=38` on the command line
+# (Makefile `test` target + CI workflow). Moved out of pyproject so dev
+# subset runs don't trip the gate when their tests pass.
+show_missing = true
+skip_covered = false
+precision = 1
+exclude_lines = [
+    "pragma: no cover",
+    "raise NotImplementedError",
+    "raise AssertionError.*unreachable",
+]
+
+[tool.coverage.html]
+directory = "reports/htmlcov"
+
+[tool.coverage.xml]
+output = "reports/coverage.xml"
+
+[tool.coverage.json]
+output = "reports/coverage.json"
+pretty_print = true