cositos 0.1.0__tar.gz

cositos-0.1.0/.agents/skills/beads/SKILL.md

@@ -0,0 +1,80 @@
+---
+name: beads
+description: Use when working in a repository that uses bd or Beads for durable project task tracking, issue dependencies, blocker management, multi-session handoff, or shared work memory. Trigger when the user asks to find ready work, claim or close tasks, create follow-up work, inspect blockers, recover project context, or choose between local planning and persistent project tracking.
+---
+
+# Beads
+
+Use Beads as the shared project task system. Local plans, scratch files, and personal memories are useful, but they are not the durable source of truth for project work.
+
+## First Step
+
+Run:
+
+```bash
+bd prime
+```
+
+If that prints nothing, check whether the repository has an active Beads workspace:
+
+```bash
+bd where
+```
+
+## Preferred Route
+
+Use the `bd` CLI when shell access is available. It is the most compact and direct Beads interface.
+
+## Core CLI Workflow
+
+1. Find work:
+
+```bash
+bd ready
+bd list --status=open
+bd list --status=in_progress
+```
+
+2. Inspect before editing:
+
+```bash
+bd show <id>
+```
+
+3. Claim work atomically:
+
+```bash
+bd update <id> --claim
+```
+
+4. Create durable follow-up work when implementation reveals new tasks:
+
+```bash
+bd create "Short title" --description="Why this exists and what needs to be done" --type=task --priority=2
+```
+
+5. Close completed work:
+
+```bash
+bd close <id> --reason="Completed"
+```
+
+## What Belongs In Beads
+
+Use Beads for:
+
+- shared project tasks
+- blockers and dependencies
+- discovered follow-up work
+- work that must survive thread reset, compaction, or handoff
+- status that another person or agent should be able to resume
+
+Use agent-local planning tools only for the current turn's execution checklist. Do not treat them as shared project state.
+
+## Rules
+
+- Do not create markdown TODO files as the source of truth when Beads is available.
+- Do not use `bd edit`; it opens an interactive editor. Use `bd update` flags instead.
+- Prefer `--json` when parsing `bd` output programmatically.
+- If hooks are installed, `bd prime` may already be injected. Run it manually when context is missing.
+- Do not auto-close or mutate tasks unless the work is actually complete.

cositos-0.1.0/.agents/skills/beads/agents/openai.yaml

@@ -0,0 +1,4 @@
+interface:
+  display_name: "Beads"
+  short_description: "Project task tracking with bd"
+  default_prompt: "Use $beads to inspect ready work and manage durable project tasks."

cositos-0.1.0/.beads/issues.jsonl

@@ -0,0 +1,5 @@
+{"_type":"issue","id":"cositos-n1e","title":"Pre-requisite: add git remote + GitHub Pages + secrets before CI fires","description":"The CI/docs/release workflows are wired and ready, but won't fire until:\\n1. A GitHub remote is added (git remote add origin git@github.com:\u003corg\u003e/cositos.git)\\n2. GitHub Pages is enabled in the repo Settings (Source: GitHub Actions)\\n3. For releases: NPM_TOKEN and PYPI_API_TOKEN secrets are set in the repo\\n4. _quarto.yml site-url is uncommented with the real URL","status":"closed","priority":2,"issue_type":"task","owner":"45505583+sashakile@users.noreply.github.com","created_at":"2026-07-10T20:24:25Z","created_by":"Sasha","updated_at":"2026-07-10T20:38:10Z","closed_at":"2026-07-10T20:38:10Z","close_reason":"Remote added (git@github.com:sashakile/cositos.git), site-url set, workflows created","dependency_count":0,"dependent_count":0,"comment_count":0}
+{"_type":"issue","id":"cositos-bc3","title":"Create release workflow (PyPI + npm + GitHub Release)","description":"Create .github/workflows/release.yml triggered by git tag v*. Publishes cositos to PyPI, @cositos/front to npm, and creates a GitHub Release.","status":"closed","priority":2,"issue_type":"task","assignee":"Sasha","owner":"45505583+sashakile@users.noreply.github.com","created_at":"2026-07-10T20:20:44Z","created_by":"Sasha","updated_at":"2026-07-10T20:23:51Z","started_at":"2026-07-10T20:22:17Z","closed_at":"2026-07-10T20:23:51Z","close_reason":"Implemented: verify.yml docs-build job, docs.yml deploy workflow, release.yml (PyPI+npm+GitHub Release), _quarto.yml site-url placeholder, front/package.json publish config, mise release tasks","dependency_count":0,"dependent_count":0,"comment_count":0}
+{"_type":"issue","id":"cositos-qgf","title":"Create GitHub Pages docs-deploy workflow","description":"Create .github/workflows/docs.yml that builds the Quarto site and deploys to GitHub Pages on every push to main.","status":"closed","priority":2,"issue_type":"task","owner":"45505583+sashakile@users.noreply.github.com","created_at":"2026-07-10T20:20:35Z","created_by":"Sasha","updated_at":"2026-07-10T20:23:51Z","closed_at":"2026-07-10T20:23:51Z","close_reason":"Implemented: verify.yml docs-build job, docs.yml deploy workflow, release.yml (PyPI+npm+GitHub Release), _quarto.yml site-url placeholder, front/package.json publish config, mise release tasks","dependency_count":0,"dependent_count":0,"comment_count":0}
+{"_type":"issue","id":"cositos-t7n","title":"Add docs-build CI job to verify.yml","description":"The verify.yml runs lint/typecheck/coverage per-language tests but doesn't build docs. Add a parallel docs-build job that runs  (needs quarto on the runner).","status":"closed","priority":2,"issue_type":"task","assignee":"Sasha","owner":"45505583+sashakile@users.noreply.github.com","created_at":"2026-07-10T20:19:50Z","created_by":"Sasha","updated_at":"2026-07-10T20:23:51Z","started_at":"2026-07-10T20:21:39Z","closed_at":"2026-07-10T20:23:51Z","close_reason":"Implemented: verify.yml docs-build job, docs.yml deploy workflow, release.yml (PyPI+npm+GitHub Release), _quarto.yml site-url placeholder, front/package.json publish config, mise release tasks","dependency_count":0,"dependent_count":0,"comment_count":0}
+{"_type":"issue","id":"cositos-ual","title":"Update _quarto.yml for GitHub Pages site-url","description":"Add site-url to _quarto.yml so the Quarto site generates correct canonical links when deployed to GitHub Pages.","status":"closed","priority":3,"issue_type":"task","assignee":"Sasha","owner":"45505583+sashakile@users.noreply.github.com","created_at":"2026-07-10T20:20:53Z","created_by":"Sasha","updated_at":"2026-07-10T20:23:51Z","started_at":"2026-07-10T20:22:37Z","closed_at":"2026-07-10T20:23:51Z","close_reason":"Implemented: verify.yml docs-build job, docs.yml deploy workflow, release.yml (PyPI+npm+GitHub Release), _quarto.yml site-url placeholder, front/package.json publish config, mise release tasks","dependency_count":0,"dependent_count":0,"comment_count":0}

cositos-0.1.0/.claude/settings.json

@@ -0,0 +1,15 @@
+{
+  "hooks": {
+    "SessionStart": [
+      {
+        "hooks": [
+          {
+            "command": "bd prime --hook-json",
+            "type": "command"
+          }
+        ],
+        "matcher": ""
+      }
+    ]
+  }
+}

cositos-0.1.0/.codex/config.toml

@@ -0,0 +1,2 @@
+[features]
+hooks = true

cositos-0.1.0/.codex/hooks.json

@@ -0,0 +1,51 @@
+{
+  "hooks": {
+    "PostCompact": [
+      {
+        "hooks": [
+          {
+            "command": "bd codex-hook PostCompact",
+            "statusMessage": "Scheduling Beads context refresh",
+            "type": "command"
+          }
+        ],
+        "matcher": "manual|auto"
+      }
+    ],
+    "PreCompact": [
+      {
+        "hooks": [
+          {
+            "command": "bd codex-hook PreCompact",
+            "statusMessage": "Checking Beads context",
+            "type": "command"
+          }
+        ],
+        "matcher": "manual|auto"
+      }
+    ],
+    "SessionStart": [
+      {
+        "hooks": [
+          {
+            "command": "bd codex-hook SessionStart",
+            "statusMessage": "Loading Beads context",
+            "type": "command"
+          }
+        ],
+        "matcher": "startup|resume|clear"
+      }
+    ],
+    "UserPromptSubmit": [
+      {
+        "hooks": [
+          {
+            "command": "bd codex-hook UserPromptSubmit",
+            "statusMessage": "Refreshing Beads context",
+            "type": "command"
+          }
+        ]
+      }
+    ]
+  }
+}

cositos-0.1.0/.dont/AGENTS.md

@@ -0,0 +1,69 @@
+# dont managed instructions
+
+> This file is managed by `dont init` and `dont doctor --fix`. Do not edit manually.
+
+# dont
+
+This project uses `dont` for epistemic claim tracking.
+
+For full documentation see the [dont spec](https://github.com/charly-vibes/dont).
+
+## Quick start
+
+```
+dont ground "claim text" --file README.md --lines 10-18 # fast path: claim + repo evidence
+dont conclude "claim text"                            # introduce an unverified claim
+dont trust <id> --reason ...                          # register doubt
+dont dismiss <id> --evidence ...                      # verify with evidence
+dont show <id>                                        # inspect a claim
+dont trace <id>                                       # diagnose blocker paths
+dont list                                             # list all claims
+```
+
+`dont ground` is the preferred fast path when you already have the claim and evidence in hand. The underlying model is still conclude → trust → dismiss → forget: `ground` composes `conclude` and `dismiss` rather than bypassing the core lifecycle.
+
+## Grounding claims in repository evidence
+
+Prefer repository-relative file locators over opaque `file://` URIs when the evidence lives inside the current project:
+
+```
+# Preferred: repository-relative locator
+dont ground "documented project fact" --file README.md --lines 10-18
+dont dismiss <id> --file src/lib.rs --lines 42-55 --anchor "MyTrait"
+dont dismiss <id> --file docs/spec.md --excerpt "The system SHALL..."
+
+# Supported for compatibility: plain URI
+dont dismiss <id> --evidence https://external-source.example/ref
+```
+
+Repository-relative locators resolve against the project root regardless of the caller's working directory. Paths that escape the project root (via `..` traversal or symlink escape) are refused.
+
+When `show` or `why` reports stale, unresolved, or otherwise confusing blockers, run `dont trace <id>` to see the blocker path that explains what dependency or support fallout needs attention.
+
+## Modes
+
+`dont` operates in two modes:
+
+- **permissive** — allows claims to progress with weaker evidence; suitable for exploratory work.
+- **strict** — enforces full evidence and lifecycle requirements before dismissal.
+
+Run `dont prime --json` to see the current mode. To change mode, edit `mode = "permissive"` or `mode = "strict"` in `.dont/config.toml`.
+
+## Error recovery
+
+When a command returns `"ok": false`, read `data.remediation[0].command` from the JSON envelope and run it exactly as printed. Do not guess reformulations — the remediation field is authoritative.
+
+## Defining terms
+
+Before running `dont define`, run `dont suggest-term "<description>"` to check for an existing term that fits. When defining, always supply both `--label "<a noun phrase>"` and `--doc "<definition text>"` together.
+
+## Spawn
+
+When `dont` requests a sub-agent via a spawn envelope, the harness is responsible for fulfilling the spawn. Run the spawn command from the envelope's `data.command` field and feed its output back to the calling agent.
+
+## Help
+
+Run `dont help --tutorial` for the first-session walkthrough.
+Run `dont help --topics` to list all how-to guides.
+Run `dont help --howto <topic>` to read a specific guide.
+

cositos-0.1.0/.dont/config.toml

@@ -0,0 +1,14 @@
+[project]
+name = "dont-project"
+mode = "permissive"
+
+[output]
+default_format = "json"
+
+[storage]
+busy_retry_attempts = 5
+busy_retry_base_ms = 100
+
+[harness]
+managed_docs = ["AGENTS.md", "CLAUDE.md"]
+spawn_timeout_hours = 24

cositos-0.1.0/.dont/seed/dont-seed.yaml

@@ -0,0 +1,25 @@
+# dont seed vocabulary snapshot
+# Installed project-locally by `dont init`. Tool upgrades MUST NOT rewrite this
+# file except through an explicit seed-migration operation.
+prefix: "dont:"
+terms:
+  - id: "dont:Entity"
+    status: locked
+  - id: "dont:Claim"
+    status: locked
+  - id: "dont:Term"
+    status: locked
+  - id: "dont:Evidence"
+    status: locked
+  - id: "dont:kind_of"
+    status: locked
+  - id: "dont:related_to"
+    status: locked
+  - id: "dont:defined_as"
+    status: locked
+  - id: "dont:Hypothesis"
+    status: locked
+  - id: "dont:Retraction"
+    status: locked
+  - id: "dont:external_ref"
+    status: locked

cositos-0.1.0/.editorconfig

@@ -0,0 +1,14 @@
+root = true
+
+[*]
+charset = utf-8
+end_of_line = lf
+insert_final_newline = true
+trim_trailing_whitespace = true
+indent_style = space
+
+[*.py]
+indent_size = 4
+
+[*.{json,toml,md,yml,yaml}]
+indent_size = 2

cositos-0.1.0/.espectacular/AGENTS.md

@@ -0,0 +1 @@
+Before acting on any `ah check` finding, run its `playbook_command` to get the canonical remediation steps. Use `ah explain <topic>` to look up the playbook for any finding kind.

cositos-0.1.0/.espectacular/config.toml

@@ -0,0 +1,8 @@
+tool_version = "0.1.0"
+
+[paths]
+specs = "openspec/specs"
+changes = "openspec/changes"
+
+[runners]
+pytest = ["uv", "run", "--extra", "dev", "pytest"]

cositos-0.1.0/.espectacular/embed/a-closing-script-tag-in-state-is-neutralised.toml

@@ -0,0 +1,10 @@
+id = "a-closing-script-tag-in-state-is-neutralised"
+description = "A closing script tag in state is neutralised."
+archetype = "BP"
+status = "active"
+superseded_by = ""
+authored_with = "0.1.0"
+
+[[tests.pytest]]
+flags = "tests/test_embed.py::test_embedded_json_is_script_escaped"
+timeout_seconds = 60

cositos-0.1.0/.espectacular/embed/a-view-script-is-emitted-per-model.toml

@@ -0,0 +1,10 @@
+id = "a-view-script-is-emitted-per-model"
+description = "A view script is emitted per model."
+archetype = "BP"
+status = "active"
+superseded_by = ""
+authored_with = "0.1.0"
+
+[[tests.pytest]]
+flags = "tests/test_embed.py::test_emits_a_view_script_per_model"
+timeout_seconds = 60

cositos-0.1.0/.espectacular/embed/each-model-s-state-carries-anywidget-view-identity.toml

@@ -0,0 +1,10 @@
+id = "each-model-s-state-carries-anywidget-view-identity"
+description = "Each model's state carries anywidget view identity."
+archetype = "BP"
+status = "active"
+superseded_by = ""
+authored_with = "0.1.0"
+
+[[tests.pytest]]
+flags = "tests/test_embed.py::test_each_exported_model_state_carries_anywidget_view_identity"
+timeout_seconds = 60

cositos-0.1.0/.espectacular/embed/only-requested-views-are-emitted.toml

@@ -0,0 +1,10 @@
+id = "only-requested-views-are-emitted"
+description = "Only requested views are emitted."
+archetype = "BP"
+status = "active"
+superseded_by = ""
+authored_with = "0.1.0"
+
+[[tests.pytest]]
+flags = "tests/test_embed.py::test_views_argument_restricts_emitted_views"
+timeout_seconds = 60

cositos-0.1.0/.espectacular/embed/the-cdn-html-manager-loader-is-included.toml

@@ -0,0 +1,10 @@
+id = "the-cdn-html-manager-loader-is-included"
+description = "The CDN html-manager loader is included."
+archetype = "BP"
+status = "active"
+superseded_by = ""
+authored_with = "0.1.0"
+
+[[tests.pytest]]
+flags = "tests/test_embed.py::test_includes_cdn_html_manager_loader"
+timeout_seconds = 60

cositos-0.1.0/.espectacular/embed/the-document-state-is-embedded-as-widget-state-json.toml

@@ -0,0 +1,10 @@
+id = "the-document-state-is-embedded-as-widget-state-json"
+description = "The document state is embedded as widget-state+json."
+archetype = "BP"
+status = "active"
+superseded_by = ""
+authored_with = "0.1.0"
+
+[[tests.pytest]]
+flags = "tests/test_embed.py::test_embeds_document_state_block"
+timeout_seconds = 60

cositos-0.1.0/.espectacular/embed/write-html-persists-the-page.toml

@@ -0,0 +1,10 @@
+id = "write-html-persists-the-page"
+description = "write_html persists the page."
+archetype = "BP"
+status = "active"
+superseded_by = ""
+authored_with = "0.1.0"
+
+[[tests.pytest]]
+flags = "tests/test_embed.py::test_write_html_matches_embed_html"
+timeout_seconds = 60

cositos-0.1.0/.espectacular/protocol/comm-open-includes-anymodel-and-anyview-identity.toml

@@ -0,0 +1,10 @@
+id = "comm-open-includes-anymodel-and-anyview-identity"
+description = "comm_open carries immutable anywidget fields + version."
+archetype = "PF"
+status = "active"
+superseded_by = ""
+authored_with = "0.1.0"
+
+[[tests.pytest]]
+flags = "tests/test_protocol.py::test_comm_open_includes_immutable_anywidget_fields"
+timeout_seconds = 60

cositos-0.1.0/.espectacular/protocol/nested-binary-values-are-split-and-merged-losslessly.toml

@@ -0,0 +1,10 @@
+id = "nested-binary-values-are-split-and-merged-losslessly"
+description = "Buffer split/merge round-trips losslessly."
+archetype = "PF"
+status = "active"
+superseded_by = ""
+authored_with = "0.1.0"
+
+[[tests.pytest]]
+flags = "tests/test_buffers.py::test_round_trip_merge_is_inverse_of_split"
+timeout_seconds = 60

cositos-0.1.0/.espectacular/protocol/unknown-method-is-ignored.toml

@@ -0,0 +1,10 @@
+id = "unknown-method-is-ignored"
+description = "Unknown inbound method is ignored."
+archetype = "PF"
+status = "active"
+superseded_by = ""
+authored_with = "0.1.0"
+
+[[tests.pytest]]
+flags = "tests/test_protocol.py::test_parse_unknown_method_is_ignored"
+timeout_seconds = 60

cositos-0.1.0/.espectacular/serialization/a-single-model-round-trips-losslessly.toml

@@ -0,0 +1,10 @@
+id = "a-single-model-round-trips-losslessly"
+description = "A single model round-trips losslessly."
+archetype = "PF"
+status = "active"
+superseded_by = ""
+authored_with = "0.1.0"
+
+[[tests.pytest]]
+flags = "tests/test_serialize.py::test_round_trip_binary_by_raw_bytes"
+timeout_seconds = 60

cositos-0.1.0/.espectacular/serialization/binary-buffers-are-base64-encoded-per-the-v2-schema.toml

@@ -0,0 +1,10 @@
+id = "binary-buffers-are-base64-encoded-per-the-v2-schema"
+description = "Binary buffers are base64-encoded per the v2 schema."
+archetype = "PF"
+status = "active"
+superseded_by = ""
+authored_with = "0.1.0"
+
+[[tests.pytest]]
+flags = "tests/test_serialize.py::test_dump_model_includes_buffers_when_present"
+timeout_seconds = 60

cositos-0.1.0/.espectacular/serialization/child-references-survive-a-round-trip.toml

@@ -0,0 +1,10 @@
+id = "child-references-survive-a-round-trip"
+description = "Child references survive a round-trip."
+archetype = "PF"
+status = "active"
+superseded_by = ""
+authored_with = "0.1.0"
+
+[[tests.pytest]]
+flags = "tests/test_serialize.py::test_composition_child_refs_preserved_verbatim"
+timeout_seconds = 60

cositos-0.1.0/.espectacular/serialization/duplicate-model-ids-are-rejected.toml

@@ -0,0 +1,10 @@
+id = "duplicate-model-ids-are-rejected"
+description = "Duplicate model ids are rejected."
+archetype = "PF"
+status = "active"
+superseded_by = ""
+authored_with = "0.1.0"
+
+[[tests.pytest]]
+flags = "tests/test_serialize.py::test_dump_document_rejects_duplicate_model_ids"
+timeout_seconds = 60

cositos-0.1.0/.espectacular/serialization/empty-model-id-is-rejected.toml

@@ -0,0 +1,10 @@
+id = "empty-model-id-is-rejected"
+description = "Empty model id is rejected."
+archetype = "PF"
+status = "active"
+superseded_by = ""
+authored_with = "0.1.0"
+
+[[tests.pytest]]
+flags = "tests/test_serialize.py::test_dump_document_rejects_empty_model_id"
+timeout_seconds = 60

cositos-0.1.0/.espectacular/serialization/front-end-code-is-preserved.toml

@@ -0,0 +1,10 @@
+id = "front-end-code-is-preserved"
+description = "Front-end code is preserved."
+archetype = "PF"
+status = "active"
+superseded_by = ""
+authored_with = "0.1.0"
+
+[[tests.pytest]]
+flags = "tests/test_serialize.py::test_round_trip_plain_state_is_identity"
+timeout_seconds = 60

cositos-0.1.0/.espectacular/serialization/reference-cycles-do-not-break-loading.toml

@@ -0,0 +1,10 @@
+id = "reference-cycles-do-not-break-loading"
+description = "Reference cycles do not break loading."
+archetype = "PF"
+status = "active"
+superseded_by = ""
+authored_with = "0.1.0"
+
+[[tests.pytest]]
+flags = "tests/test_serialize.py::test_reference_cycle_loads_without_recursion"
+timeout_seconds = 60

cositos-0.1.0/.espectacular/serialization/the-document-envelope-declares-the-state-format-version.toml

@@ -0,0 +1,10 @@
+id = "the-document-envelope-declares-the-state-format-version"
+description = "The document envelope declares the state-format version."
+archetype = "PF"
+status = "active"
+superseded_by = ""
+authored_with = "0.1.0"
+
+[[tests.pytest]]
+flags = "tests/test_serialize.py::test_document_envelope_shape"
+timeout_seconds = 60

cositos-0.1.0/.github/release.yml

@@ -0,0 +1,37 @@
+# Configuration for softprops/action-gh-release auto-generated release notes.
+# Categories group related PRs together in the release body.
+
+changelog:
+  categories:
+    - title: 🎉 New Features
+      labels:
+        - enhancement
+        - feature
+    - title: 🐛 Bug Fixes
+      labels:
+        - bug
+        - fix
+    - title: 📚 Documentation
+      labels:
+        - documentation
+        - docs
+    - title: 🔧 Maintenance
+      labels:
+        - chore
+        - maintenance
+        - refactor
+    - title: 🧪 Testing
+      labels:
+        - testing
+        - test
+    - title: 🌐 New Language Backend
+      labels:
+        - language-backend
+        - port
+    - title: ⬆️ Dependencies
+      labels:
+        - dependencies
+        - deps
+    - title: Other Changes
+      labels:
+        - "*"

cositos-0.1.0/.github/workflows/docs.yml

@@ -0,0 +1,59 @@
+name: docs
+
+# Builds and deploys the Quarto documentation site to GitHub Pages
+# on every push to main.
+
+on:
+  push:
+    branches: [main]
+
+permissions:
+  contents: read
+  pages: write
+  id-token: write
+
+concurrency:
+  group: pages-${{ github.ref }}
+  cancel-in-progress: true
+
+jobs:
+  build-and-deploy:
+    runs-on: ubuntu-latest
+    environment:
+      name: github-pages
+      url: ${{ steps.deployment.outputs.page_url }}
+    steps:
+      - uses: actions/checkout@v4
+
+      - uses: astral-sh/setup-uv@v5
+        with:
+          python-version-file: ".python-version"
+      - uses: jdx/mise-action@v2
+        with:
+          install: true
+          cache: true
+
+      - uses: quarto-dev/quarto-actions/setup@v2
+
+      # Docs build includes a Julia parity check (examples/parity/dump.jl)
+      - uses: julia-actions/setup-julia@v2
+        with:
+          version: "1.11"
+
+      - name: Install project dependencies (Python + JS)
+        run: mise run setup
+
+      - name: Precompile Julia parity project deps
+        run: julia --project=examples/parity -e 'using Pkg; Pkg.instantiate()'
+
+      - name: Build Quarto documentation site
+        run: mise run docs
+
+      - name: Upload built site as Pages artifact
+        uses: actions/upload-pages-artifact@v3
+        with:
+          path: docs/_site
+
+      - name: Deploy to GitHub Pages
+        id: deployment
+        uses: actions/deploy-pages@v4