coreason-manifest 0.9.0__tar.gz

coreason_manifest-0.9.0/LICENSE

@@ -0,0 +1,57 @@
+# The Prosperity Public License 3.0.0
+
+Contributor: CoReason, Inc.
+
+Source Code: https://github.com/CoReason-AI/coreason_manifest
+
+## Purpose
+
+This license allows you to use and share this software for noncommercial purposes for free and to try this software for commercial purposes for thirty days.
+
+## Agreement
+
+In order to receive this license, you have to agree to its rules.  Those rules are both obligations under that agreement and conditions to your license.  Don't do anything with this software that triggers a rule you can't or won't follow.
+
+## Notices
+
+Make sure everyone who gets a copy of any part of this software from you, with or without changes, also gets the text of this license and the contributor and source code lines above.
+
+## Commercial Trial
+
+Limit your use of this software for commercial purposes to a thirty-day trial period.  If you use this software for work, your company gets one trial period for all personnel, not one trial per person.
+
+## Contributions Back
+
+Developing feedback, changes, or additions that you contribute back to the contributor on the terms of a standardized public software license such as [the Blue Oak Model License 1.0.0](https://blueoakcouncil.org/license/1.0.0), [the Apache License 2.0](https://www.apache.org/licenses/LICENSE-2.0.html), [the MIT license](https://spdx.org/licenses/MIT.html), or [the two-clause BSD license](https://spdx.org/licenses/BSD-2-Clause.html) doesn't count as use for a commercial purpose.
+
+## Personal Uses
+
+Personal use for research, experiment, and testing for the benefit of public knowledge, personal study, private entertainment, hobby projects, amateur pursuits, or religious observance, without any anticipated commercial application, doesn't count as use for a commercial purpose.
+
+## Noncommercial Organizations
+
+Use by any charitable organization, educational institution, public research organization, public safety or health organization, environmental protection organization, or government institution doesn't count as use for a commercial purpose regardless of the source of funding or obligations resulting from the funding.
+
+## Defense
+
+Don't make any legal claim against anyone accusing this software, with or without changes, alone or with other technology, of infringing any patent.
+
+## Copyright
+
+The contributor licenses you to do everything with this software that would otherwise infringe their copyright in it.
+
+## Patent
+
+The contributor licenses you to do everything with this software that would otherwise infringe any patents they can license or become able to license.
+
+## Reliability
+
+The contributor can't revoke this license.
+
+## Excuse
+
+You're excused for unknowingly breaking [Notices](#notices) if you take all practical steps to comply within thirty days of learning you broke the rule.
+
+## No Liability
+
+***As far as the law allows, this software comes as is, without any warranty or condition, and the contributor won't be liable to anyone for any damages related to this software or this license, under any kind of legal claim.***

coreason_manifest-0.9.0/NOTICE

@@ -0,0 +1,8 @@
+Copyright (c) 2025 CoReason, Inc.. All Rights Reserved
+
+This software is licensed under the Prosperity Public License 3.0.0.
+The issuer of the Prosperity Public License for this software is CoReason, Inc..
+
+For a commercial version of this software, please contact us at gowtham.rao@coreason.ai.
+
+GENESIS COMMIT: Initializing repository coreason_manifest per CoReason Clean Room Protocol PIP-001. This repository is established as an independently created De Novo development environment, commencing on 2026-01-01. I, Gowtham A Rao certify that this date is subsequent to my individual Temporal Firewall Date.

coreason_manifest-0.9.0/PKG-INFO

@@ -0,0 +1,136 @@
+Metadata-Version: 2.4
+Name: coreason_manifest
+Version: 0.9.0
+Summary: This package is the definitive source of truth. If it isn't in the manifest, it doesn't exist. If it violates the manifest, it doesn't run.
+License: # The Prosperity Public License 3.0.0
+         
+         Contributor: CoReason, Inc.
+         
+         Source Code: https://github.com/CoReason-AI/coreason_manifest
+         
+         ## Purpose
+         
+         This license allows you to use and share this software for noncommercial purposes for free and to try this software for commercial purposes for thirty days.
+         
+         ## Agreement
+         
+         In order to receive this license, you have to agree to its rules.  Those rules are both obligations under that agreement and conditions to your license.  Don't do anything with this software that triggers a rule you can't or won't follow.
+         
+         ## Notices
+         
+         Make sure everyone who gets a copy of any part of this software from you, with or without changes, also gets the text of this license and the contributor and source code lines above.
+         
+         ## Commercial Trial
+         
+         Limit your use of this software for commercial purposes to a thirty-day trial period.  If you use this software for work, your company gets one trial period for all personnel, not one trial per person.
+         
+         ## Contributions Back
+         
+         Developing feedback, changes, or additions that you contribute back to the contributor on the terms of a standardized public software license such as [the Blue Oak Model License 1.0.0](https://blueoakcouncil.org/license/1.0.0), [the Apache License 2.0](https://www.apache.org/licenses/LICENSE-2.0.html), [the MIT license](https://spdx.org/licenses/MIT.html), or [the two-clause BSD license](https://spdx.org/licenses/BSD-2-Clause.html) doesn't count as use for a commercial purpose.
+         
+         ## Personal Uses
+         
+         Personal use for research, experiment, and testing for the benefit of public knowledge, personal study, private entertainment, hobby projects, amateur pursuits, or religious observance, without any anticipated commercial application, doesn't count as use for a commercial purpose.
+         
+         ## Noncommercial Organizations
+         
+         Use by any charitable organization, educational institution, public research organization, public safety or health organization, environmental protection organization, or government institution doesn't count as use for a commercial purpose regardless of the source of funding or obligations resulting from the funding.
+         
+         ## Defense
+         
+         Don't make any legal claim against anyone accusing this software, with or without changes, alone or with other technology, of infringing any patent.
+         
+         ## Copyright
+         
+         The contributor licenses you to do everything with this software that would otherwise infringe their copyright in it.
+         
+         ## Patent
+         
+         The contributor licenses you to do everything with this software that would otherwise infringe any patents they can license or become able to license.
+         
+         ## Reliability
+         
+         The contributor can't revoke this license.
+         
+         ## Excuse
+         
+         You're excused for unknowingly breaking [Notices](#notices) if you take all practical steps to comply within thirty days of learning you broke the rule.
+         
+         ## No Liability
+         
+         ***As far as the law allows, this software comes as is, without any warranty or condition, and the contributor won't be liable to anyone for any damages related to this software or this license, under any kind of legal claim.***
+License-File: LICENSE
+License-File: NOTICE
+Author: Gowtham A Rao
+Author-email: gowtham.rao@coreason.ai
+Requires-Python: >=3.12
+Classifier: License :: Other/Proprietary License
+Classifier: Programming Language :: Python :: 3.12
+Classifier: Operating System :: OS Independent
+Requires-Dist: coreason-identity (>=0.4.1,<0.5.0)
+Requires-Dist: loguru (>=0.7.2,<0.8.0)
+Requires-Dist: pydantic (>=2.12.5,<3.0.0)
+Requires-Dist: pyyaml (>=6.0.3,<7.0.0)
+Project-URL: Documentation, https://github.com/CoReason-AI/coreason_manifest
+Project-URL: Homepage, https://github.com/CoReason-AI/coreason_manifest
+Project-URL: Repository, https://github.com/CoReason-AI/coreason_manifest
+Description-Content-Type: text/markdown
+
+# Coreason Manifest
+
+The definitive source of truth for CoReason-AI Asset definitions. "The Blueprint."
+
+[![License: Prosperity 3.0](https://img.shields.io/badge/license-Prosperity%203.0-blue)](https://github.com/CoReason-AI/coreason-manifest)
+[![Build Status](https://github.com/CoReason-AI/coreason-manifest/actions/workflows/ci.yml/badge.svg)](https://github.com/CoReason-AI/coreason-manifest/actions)
+[![Ruff](https://img.shields.io/endpoint?url=https://raw.githubusercontent.com/astral-sh/ruff/main/assets/badge/v2.json)](https://github.com/astral-sh/ruff)
+[![Documentation](https://img.shields.io/badge/docs-product_requirements-informational)](docs/product_requirements.md)
+
+## Overview
+
+`coreason-manifest` acts as the validator for the "Agent Development Lifecycle" (ADLC). It ensures that every Agent produced meets strict GxP and security standards. If it isn't in the manifest, it doesn't exist. If it violates the manifest, it doesn't run.
+
+## Features
+
+*   **Open Agent Specification (OAS) Validation:** Parses and validates agent definitions against a strict schema.
+*   **Compliance Enforcement:** Uses Open Policy Agent (OPA) / Rego to enforce complex business rules and allowlists.
+*   **Integrity Verification:** Calculates and verifies SHA256 hashes of the agent's source code to prevent tampering.
+*   **Automatic Schema Generation:** Inspects Python functions to generate Agent Interfaces, automatically handling `UserContext` injection.
+*   **Dependency Pinning:** Enforces strict version pinning for all library dependencies.
+*   **Trusted Bill of Materials (TBOM):** Validates libraries against an approved list.
+*   **Compliance Microservice:** Can be run as a standalone API server (Service C) for centralized validation.
+
+## Installation
+
+```bash
+pip install coreason-manifest
+```
+
+## Usage
+
+`coreason-manifest` supports two modes: **Library (CLI)** and **Server (Microservice)**.
+
+### 1. Library Usage
+
+Use the python library to validate local agent files and verify source integrity.
+
+```python
+from coreason_manifest import ManifestEngine, ManifestConfig
+
+# Initialize and Validate
+config = ManifestConfig(policy_path="./policies/compliance.rego")
+engine = ManifestEngine(config)
+agent_def = engine.load_and_validate("agent.yaml", "./src")
+```
+
+### 2. Server Mode
+
+Run the package as a FastAPI server to provide a centralized compliance API.
+
+```bash
+uvicorn coreason_manifest.server:app --host 0.0.0.0 --port 8000
+```
+
+For full details, see the [Usage Documentation](docs/usage.md).
+
+For detailed requirements and architecture, please refer to the [Product Requirements](docs/product_requirements.md) or [Requirements](docs/requirements.md).
+

coreason_manifest-0.9.0/README.md

@@ -0,0 +1,57 @@
+# Coreason Manifest
+
+The definitive source of truth for CoReason-AI Asset definitions. "The Blueprint."
+
+[![License: Prosperity 3.0](https://img.shields.io/badge/license-Prosperity%203.0-blue)](https://github.com/CoReason-AI/coreason-manifest)
+[![Build Status](https://github.com/CoReason-AI/coreason-manifest/actions/workflows/ci.yml/badge.svg)](https://github.com/CoReason-AI/coreason-manifest/actions)
+[![Ruff](https://img.shields.io/endpoint?url=https://raw.githubusercontent.com/astral-sh/ruff/main/assets/badge/v2.json)](https://github.com/astral-sh/ruff)
+[![Documentation](https://img.shields.io/badge/docs-product_requirements-informational)](docs/product_requirements.md)
+
+## Overview
+
+`coreason-manifest` acts as the validator for the "Agent Development Lifecycle" (ADLC). It ensures that every Agent produced meets strict GxP and security standards. If it isn't in the manifest, it doesn't exist. If it violates the manifest, it doesn't run.
+
+## Features
+
+*   **Open Agent Specification (OAS) Validation:** Parses and validates agent definitions against a strict schema.
+*   **Compliance Enforcement:** Uses Open Policy Agent (OPA) / Rego to enforce complex business rules and allowlists.
+*   **Integrity Verification:** Calculates and verifies SHA256 hashes of the agent's source code to prevent tampering.
+*   **Automatic Schema Generation:** Inspects Python functions to generate Agent Interfaces, automatically handling `UserContext` injection.
+*   **Dependency Pinning:** Enforces strict version pinning for all library dependencies.
+*   **Trusted Bill of Materials (TBOM):** Validates libraries against an approved list.
+*   **Compliance Microservice:** Can be run as a standalone API server (Service C) for centralized validation.
+
+## Installation
+
+```bash
+pip install coreason-manifest
+```
+
+## Usage
+
+`coreason-manifest` supports two modes: **Library (CLI)** and **Server (Microservice)**.
+
+### 1. Library Usage
+
+Use the python library to validate local agent files and verify source integrity.
+
+```python
+from coreason_manifest import ManifestEngine, ManifestConfig
+
+# Initialize and Validate
+config = ManifestConfig(policy_path="./policies/compliance.rego")
+engine = ManifestEngine(config)
+agent_def = engine.load_and_validate("agent.yaml", "./src")
+```
+
+### 2. Server Mode
+
+Run the package as a FastAPI server to provide a centralized compliance API.
+
+```bash
+uvicorn coreason_manifest.server:app --host 0.0.0.0 --port 8000
+```
+
+For full details, see the [Usage Documentation](docs/usage.md).
+
+For detailed requirements and architecture, please refer to the [Product Requirements](docs/product_requirements.md) or [Requirements](docs/requirements.md).

coreason_manifest-0.9.0/pyproject.toml

@@ -0,0 +1,74 @@
+[tool.poetry]
+name = "coreason_manifest"
+version = "0.9.0"
+description = "This package is the definitive source of truth. If it isn't in the manifest, it doesn't exist. If it violates the manifest, it doesn't run."
+authors = ["Gowtham A Rao <gowtham.rao@coreason.ai>"]
+license = "Prosperity-3.0"
+readme = "README.md"
+packages = [{include = "coreason_manifest", from = "src"}]
+
+[tool.poetry.dependencies]
+python = ">=3.12, <3.15"
+loguru = "^0.7.2"
+pydantic = "^2.12.5"
+pyyaml = "^6.0.3"
+coreason-identity = "^0.4.1"
+
+[tool.poetry.group.dev.dependencies]
+pytest = "^9.0.2"
+ruff = "^0.14.14"
+pre-commit = "^4.5.1"
+pytest-cov = "^7.0.0"
+mkdocs = "^1.6.1"
+mkdocs-material = "^9.7.1"
+pydantic = "^2.12.5"
+mypy = "^1.19.1"
+pytest-asyncio = "^1.3.0"
+types-pyyaml = "^6.0.12.20250915"
+
+[build-system]
+requires = ["poetry-core"]
+build-backend = "poetry.core.masonry.api"
+
+[project]
+name = "coreason_manifest"
+version = "0.9.0"
+description = "This package is the definitive source of truth. If it isn't in the manifest, it doesn't exist. If it violates the manifest, it doesn't run."
+readme = "README.md"
+requires-python = ">=3.12"
+authors = [
+    { name = "Gowtham A Rao", email = "gowtham.rao@coreason.ai" },
+]
+license = { file = "LICENSE" }
+classifiers = [
+    "License :: Other/Proprietary License",
+    "Programming Language :: Python :: 3.12",
+    "Operating System :: OS Independent",
+]
+
+[project.urls]
+Homepage = "https://github.com/CoReason-AI/coreason_manifest"
+Repository = "https://github.com/CoReason-AI/coreason_manifest"
+Documentation = "https://github.com/CoReason-AI/coreason_manifest"
+
+[tool.ruff]
+line-length = 120
+target-version = "py312"
+
+[tool.ruff.lint]
+select = ["E", "F", "B", "I"]
+ignore = []
+
+[tool.mypy]
+python_version = "3.12"
+strict = true
+ignore_missing_imports = true
+plugins = ["pydantic.mypy"]
+
+[tool.pytest.ini_options]
+addopts = "--cov=src --cov-report=term-missing --cov-fail-under=100"
+testpaths = ["tests"]
+asyncio_mode = "auto"
+
+[tool.coverage.run]
+omit = ["tests/*", "/tmp/*"]

coreason_manifest-0.9.0/src/coreason_manifest/__init__.py

@@ -0,0 +1,17 @@
+from .definitions.agent import AgentDefinition
+from .definitions.audit import AuditLog
+from .definitions.simulation import SimulationScenario, SimulationStep, SimulationTrace
+from .definitions.topology import Edge, Node, Topology
+from .recipes import RecipeManifest
+
+__all__ = [
+    "AgentDefinition",
+    "Topology",
+    "Node",
+    "Edge",
+    "SimulationScenario",
+    "SimulationTrace",
+    "SimulationStep",
+    "AuditLog",
+    "RecipeManifest",
+]

coreason_manifest-0.9.0/src/coreason_manifest/definitions/__init__.py

@@ -0,0 +1,49 @@
+from .agent import AgentDefinition, AgentRuntimeConfig
+from .events import (
+    ArtifactGenerated,
+    ArtifactGeneratedPayload,
+    CouncilVote,
+    CouncilVotePayload,
+    EdgeTraversed,
+    EdgeTraversedPayload,
+    GraphEvent,
+    NodeCompleted,
+    NodeCompletedPayload,
+    NodeInit,
+    # Export Aliases too
+    NodeInitPayload,
+    NodeRestored,
+    NodeSkipped,
+    NodeSkippedPayload,
+    NodeStarted,
+    NodeStartedPayload,
+    NodeStream,
+    NodeStreamPayload,
+    WorkflowError,
+    WorkflowErrorPayload,
+)
+
+__all__ = [
+    "AgentRuntimeConfig",
+    "AgentDefinition",
+    "GraphEvent",
+    "NodeInit",
+    "NodeStarted",
+    "NodeCompleted",
+    "NodeRestored",
+    "NodeSkipped",
+    "NodeStream",
+    "ArtifactGenerated",
+    "EdgeTraversed",
+    "CouncilVote",
+    "WorkflowError",
+    "NodeInitPayload",
+    "NodeStartedPayload",
+    "NodeCompletedPayload",
+    "NodeSkippedPayload",
+    "NodeStreamPayload",
+    "EdgeTraversedPayload",
+    "ArtifactGeneratedPayload",
+    "CouncilVotePayload",
+    "WorkflowErrorPayload",
+]