datafog-core 0.5.0b2__tar.gz → 1.0.0__tar.gz

{datafog_core-0.5.0b2 → datafog_core-1.0.0}/Cargo.lock

@@ -122,7 +122,7 @@ checksum = "914a755b7c2d4af2bdcff7ce1739e2db9a1b81a9b07123d8015786ae03c0980d"
 
 [[package]]
 name = "datafog-core"
-version = "0.5.0-beta.2"
+version = "1.0.0"
 dependencies = [
  "base64",
  "futures",
@@ -137,29 +137,31 @@ dependencies = [
 
 [[package]]
 name = "datafog-core-python"
-version = "0.5.0-beta.2"
+version = "1.0.0"
 dependencies = [
  "datafog-core",
  "pyo3",
  "pyo3-async-runtimes",
  "serde",
  "serde_json",
+ "zeroize",
 ]
 
 [[package]]
 name = "datafog-node"
-version = "0.5.0-beta.2"
+version = "1.0.0"
 dependencies = [
  "datafog-core",
  "napi",
  "napi-build",
  "napi-derive",
+ "serde",
  "serde_json",
 ]
 
 [[package]]
 name = "datafog-wasm"
-version = "0.5.0-beta.2"
+version = "1.0.0"
 dependencies = [
  "datafog-core",
  "serde",
@@ -715,9 +717,9 @@ checksum = "adb6935a6f5c20170eeceb1a3835a49e12e19d792f6dd344ccc76a985ca5a6ca"
 
 [[package]]
 name = "tokio"
-version = "1.53.1"
+version = "1.53.3"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "202caea871b69668250d242070849eb495be178ed697a3e98aebce5bc81a0bed"
+checksum = "ce3335fa71841cda333a58d7615b03901380ecf09d59b3296d21f8bbac0dde4e"
 dependencies = [
  "pin-project-lite",
 ]

{datafog_core-0.5.0b2 → datafog_core-1.0.0}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: datafog-core
-Version: 0.5.0b2
+Version: 1.0.0
 Classifier: Development Status :: 3 - Alpha
 Classifier: License :: OSI Approved :: MIT License
 Classifier: Programming Language :: Python :: 3
@@ -32,19 +32,19 @@ Project-URL: Issues, https://github.com/DataFog/datafog-core/issues
 Project-URL: Repository, https://github.com/DataFog/datafog-core
 
 <p align="center">
-  <a href="https://datafog.ai"><img src="docs/favicon.svg" width="72" height="72" alt="DataFog"></a>
+  <a href="https://datafog.ai"><img src="docs/favicon.svg" width="72" height="72" alt="datafog"></a>
 </p>
 
-<h1 align="center">DataFog Core</h1>
+<h1 align="center">datafog core</h1>
 
 <p align="center"><strong>Find and transform sensitive data in your application.</strong></p>
 
 <p align="center">
-  <a href="https://pypi.org/project/datafog-core/"><img src="https://img.shields.io/pypi/v/datafog-core?style=flat-square&amp;color=E8A84C" alt="PyPI version"></a>
-  <a href="https://www.npmjs.com/package/@datafog/node"><img src="https://img.shields.io/npm/v/%40datafog%2Fnode?style=flat-square&amp;color=E8A84C" alt="npm version"></a>
-  <a href="https://crates.io/crates/datafog-core"><img src="https://img.shields.io/crates/v/datafog-core?style=flat-square&amp;color=E8A84C" alt="crates.io version"></a>
+  <a href="https://pypi.org/project/datafog-core/"><img src="https://img.shields.io/pypi/v/datafog-core?style=flat-square&amp;color=C0362C" alt="PyPI version"></a>
+  <a href="https://www.npmjs.com/package/@datafog/node"><img src="https://img.shields.io/npm/v/%40datafog%2Fnode?style=flat-square&amp;color=C0362C" alt="npm version"></a>
+  <a href="https://crates.io/crates/datafog-core"><img src="https://img.shields.io/crates/v/datafog-core?style=flat-square&amp;color=C0362C" alt="crates.io version"></a>
   <a href="https://github.com/DataFog/datafog-core/actions/workflows/rust-quality.yml"><img src="https://github.com/DataFog/datafog-core/actions/workflows/rust-quality.yml/badge.svg?branch=main" alt="Rust CI status"></a>
-  <a href="LICENSE"><img src="https://img.shields.io/badge/license-MIT-E8A84C?style=flat-square" alt="MIT license"></a>
+  <a href="LICENSE"><img src="https://img.shields.io/badge/license-MIT-C0362C?style=flat-square" alt="MIT license"></a>
 </p>
 
 <p align="center">
@@ -55,22 +55,24 @@ Project-URL: Repository, https://github.com/DataFog/datafog-core
   <a href="#documentation-and-development">Documentation</a>
 </p>
 
-DataFog Core is a Rust library with Python, Node.js, and browser WebAssembly bindings. Scan text or JSON for personal data and credentials, then redact, mask, remove, pseudonymize, or tokenize matched values. Findings use a consistent format across the bindings.
+datafog core is a Rust library with Python, Node.js, and browser WebAssembly bindings. Scan text or JSON for personal data and credentials, then redact, mask, remove, pseudonymize, or tokenize matched values. Findings use a consistent format across the bindings.
 
-Rule-based scanning runs locally without model weights or downloads. Optional local model sessions add DataFog and GLiNER2 support in Rust, Python, and Node.js.
+Rule-based scanning runs locally without model weights or downloads. Optional local model sessions add datafog and GLiNER2 support in Rust, Python, and Node.js.
 
-**Stable:** [0.4.4](https://github.com/DataFog/datafog-core/releases/tag/v0.4.4) · **Prerelease:** [0.5.0-beta.1](https://github.com/DataFog/datafog-core/releases/tag/v0.5.0-beta.1)
+**1.0.0 release:** [release notes](docs/releases/1-0-0.mdx) · Publication underway; the coordinated release is complete only after public-registry installation checks pass.
+
+Core 1.0 freezes Workspace contract 1 across Rust, Python, Node and browser WASM, with optional native/browser [FogVault integrations](docs/integrations/fogvault.md). Snapshot v3 writes and v1/v2/v3 reads keep their existing semantics. Exact published [0.5.0-beta.3](docs/releases/0-5-0-beta-3.mdx) interchange remains tested; FogVault is independently versioned 0.1.0.
 
 ## Quickstart
 
-Choose the package for your application:
+Once publication completes, choose the exact 1.0.0 package for your application:
 
-| SDK | Install stable | Requirements |
+| SDK | Install 1.0.0 | Requirements |
 | --- | --- | --- |
-| [Python](https://pypi.org/project/datafog-core/) | `python -m pip install datafog-core` | Python 3.10+ |
-| [Node.js](https://www.npmjs.com/package/@datafog/node) | `npm install @datafog/node` | Node.js 24.x |
-| [Rust](https://crates.io/crates/datafog-core) | `cargo add datafog-core` | Rust 1.88+ |
-| [Browser / WASM](https://www.npmjs.com/package/@datafog/wasm) | `npm install @datafog/wasm` | Browser with WebAssembly support |
+| [Python](https://pypi.org/project/datafog-core/) | `python -m pip install datafog-core==1.0.0` | Python 3.10+ |
+| [Node.js](https://www.npmjs.com/package/@datafog/node) | `npm install --save-exact @datafog/node@1.0.0` | Node.js 24+ |
+| [Rust](https://crates.io/crates/datafog-core) | `cargo add datafog-core@=1.0.0` | Rust 1.88+ |
+| [Browser / WASM](https://www.npmjs.com/package/@datafog/wasm) | `npm install --save-exact @datafog/wasm@1.0.0` | Browser with WebAssembly support |
 
 ### Python
 
@@ -169,7 +171,7 @@ Use [structured scans](docs/guides/person-discovery.mdx) to find names by JSON f
 
 Each finding includes its entity type, matched text, byte and code-point ranges, optional confidence, and detector name/version. Ranges are zero-based and end-exclusive. Node.js and WASM also provide UTF-16 ranges for JavaScript `slice`. Rule-based findings have no confidence score. [Findings and ranges →](docs/concepts/findings-and-ranges.mdx)
 
-For scanning files from AI agents, use [DataFog MCP](https://github.com/DataFog/datafog-mcp).
+For scanning files from AI agents, use [datafog MCP](https://github.com/DataFog/datafog-mcp).
 
 <details>
 <summary><strong>Detection settings</strong></summary>
@@ -198,42 +200,46 @@ Use `transform` with existing findings, or `scan_and_transform` / `scanAndTransf
 
 Keep scan settings under `scan` and transformation policy under `transform`. A default strategy is required; entity selection, per-type overrides, and allowlists are optional. [Configuration guide →](docs/guides/configuration.mdx) · [Strategy details →](docs/concepts/privacy-transformations.mdx)
 
-## Chrome extension integration in 0.5.0-beta.1
+## Browser workspace and FogVault integration
+
+Core 1.0 provides persistent `Workspace` pseudonyms, explicit approved saves,
+strict/progressive restoration, operation history and conversation-scoped recall.
+The optional browser adapter uses the maintained FogVault Worker/WASM owner and
+IndexedDB storage. Native Rust, Node and Python owners use the same portable
+vault core through the registered native adapter.
 
-The developer prerelease adds persistent `Workspace` pseudonyms, approved
-save-before-handoff, strict restoration, follow-ups and host-owned encrypted
-backup/recovery, plus optional English GLiNER2.5 Small browser sessions. Use
-synthetic data while the snapshot format and vault integration remain provisional.
+After the coordinated publication completes:
 
 ```bash
-npm install --save-exact @datafog/wasm@0.5.0-beta.1
+npm install --save-exact @datafog/wasm@1.0.0 @datafog/fogvault-browser@0.1.0 @datafog/core-fogvault-browser@1.0.0
 ```
 
-[Integration lifecycle, all browser calls and errors →](docs/extension-integration-0.5.0-beta.1.md)
+[Integration guide and supported profiles →](docs/integrations/fogvault.md)
+· [Stable Workspace contract →](docs/contracts/core-v1.md)
 · [Model assets and runtime setup →](docs/browser-model.md)
-· [Release scope and verification →](https://github.com/DataFog/datafog-core/issues/132)
+· [SDK release scope and separate extension acceptance →](docs/core-v1-release-scope.md)
 
 ## Local models (beta)
 
-[0.4.5-beta.4](https://github.com/DataFog/datafog-core/releases/tag/v0.4.5-beta.4) adds local sessions for the DataFog PII model and GLiNER2 in Rust, Python, and Node.js on all five native platforms.
+Core 1.0 includes optional local sessions for the datafog PII model and GLiNER2 in Rust, Python and Node.js. Model files are provisioned separately; model quality measurements remain separate from SDK correctness.
 
-Install `0.5.0-beta.1` (Python `0.5.0b1`) for the current native prerelease:
+After publication completes, install the exact 1.0.0 SDK:
 
 ```bash
-python -m pip install 'datafog-core==0.5.0b1'
-npm install --save-exact @datafog/node@0.5.0-beta.1
-cargo add datafog-core@0.5.0-beta.1 --features models
+python -m pip install 'datafog-core==1.0.0'
+npm install --save-exact @datafog/node@1.0.0
+cargo add datafog-core@=1.0.0 --features models
 ```
 
 For GLiNER2, install its optional dependencies in the Python environment used by the runner:
 
 ```bash
-python -m pip install 'datafog-core[gliner2]==0.5.0b1'
+python -m pip install 'datafog-core[gliner2]==1.0.0'
 ```
 
 GLiNER2 supports the PII checkpoint and compatible general-purpose span models with caller-defined labels. The GLiNER2 runner ships in the Python package and also serves Node.js and Rust callers. Download and verify model files separately, then use `ModelSession.open`, text `scan`, and `close`. Reuse sessions across calls. Both backends return consistent results and errors, with cancellation and cleanup support.
 
-[DataFog setup and session API →](docs/model-sessions.md) · [GLiNER2 setup →](docs/gliner2-model.md)
+[datafog setup and session API →](docs/model-sessions.md) · [GLiNER2 setup →](docs/gliner2-model.md)
 
 ## Documentation and development
 
@@ -261,5 +267,5 @@ See the [development guide](docs/development.mdx) for the repository layout and
 
 ## License
 
-[MIT](LICENSE). Built by [DataFog](https://datafog.ai).
+[MIT](LICENSE). Built by [datafog](https://datafog.ai).
 

{datafog_core-0.5.0b2/crates/core → datafog_core-1.0.0}/README.md

@@ -1,17 +1,17 @@
 <p align="center">
-  <a href="https://datafog.ai"><img src="docs/favicon.svg" width="72" height="72" alt="DataFog"></a>
+  <a href="https://datafog.ai"><img src="docs/favicon.svg" width="72" height="72" alt="datafog"></a>
 </p>
 
-<h1 align="center">DataFog Core</h1>
+<h1 align="center">datafog core</h1>
 
 <p align="center"><strong>Find and transform sensitive data in your application.</strong></p>
 
 <p align="center">
-  <a href="https://pypi.org/project/datafog-core/"><img src="https://img.shields.io/pypi/v/datafog-core?style=flat-square&amp;color=E8A84C" alt="PyPI version"></a>
-  <a href="https://www.npmjs.com/package/@datafog/node"><img src="https://img.shields.io/npm/v/%40datafog%2Fnode?style=flat-square&amp;color=E8A84C" alt="npm version"></a>
-  <a href="https://crates.io/crates/datafog-core"><img src="https://img.shields.io/crates/v/datafog-core?style=flat-square&amp;color=E8A84C" alt="crates.io version"></a>
+  <a href="https://pypi.org/project/datafog-core/"><img src="https://img.shields.io/pypi/v/datafog-core?style=flat-square&amp;color=C0362C" alt="PyPI version"></a>
+  <a href="https://www.npmjs.com/package/@datafog/node"><img src="https://img.shields.io/npm/v/%40datafog%2Fnode?style=flat-square&amp;color=C0362C" alt="npm version"></a>
+  <a href="https://crates.io/crates/datafog-core"><img src="https://img.shields.io/crates/v/datafog-core?style=flat-square&amp;color=C0362C" alt="crates.io version"></a>
   <a href="https://github.com/DataFog/datafog-core/actions/workflows/rust-quality.yml"><img src="https://github.com/DataFog/datafog-core/actions/workflows/rust-quality.yml/badge.svg?branch=main" alt="Rust CI status"></a>
-  <a href="LICENSE"><img src="https://img.shields.io/badge/license-MIT-E8A84C?style=flat-square" alt="MIT license"></a>
+  <a href="LICENSE"><img src="https://img.shields.io/badge/license-MIT-C0362C?style=flat-square" alt="MIT license"></a>
 </p>
 
 <p align="center">
@@ -22,22 +22,24 @@
   <a href="#documentation-and-development">Documentation</a>
 </p>
 
-DataFog Core is a Rust library with Python, Node.js, and browser WebAssembly bindings. Scan text or JSON for personal data and credentials, then redact, mask, remove, pseudonymize, or tokenize matched values. Findings use a consistent format across the bindings.
+datafog core is a Rust library with Python, Node.js, and browser WebAssembly bindings. Scan text or JSON for personal data and credentials, then redact, mask, remove, pseudonymize, or tokenize matched values. Findings use a consistent format across the bindings.
 
-Rule-based scanning runs locally without model weights or downloads. Optional local model sessions add DataFog and GLiNER2 support in Rust, Python, and Node.js.
+Rule-based scanning runs locally without model weights or downloads. Optional local model sessions add datafog and GLiNER2 support in Rust, Python, and Node.js.
 
-**Stable:** [0.4.4](https://github.com/DataFog/datafog-core/releases/tag/v0.4.4) · **Prerelease:** [0.5.0-beta.1](https://github.com/DataFog/datafog-core/releases/tag/v0.5.0-beta.1)
+**1.0.0 release:** [release notes](docs/releases/1-0-0.mdx) · Publication underway; the coordinated release is complete only after public-registry installation checks pass.
+
+Core 1.0 freezes Workspace contract 1 across Rust, Python, Node and browser WASM, with optional native/browser [FogVault integrations](docs/integrations/fogvault.md). Snapshot v3 writes and v1/v2/v3 reads keep their existing semantics. Exact published [0.5.0-beta.3](docs/releases/0-5-0-beta-3.mdx) interchange remains tested; FogVault is independently versioned 0.1.0.
 
 ## Quickstart
 
-Choose the package for your application:
+Once publication completes, choose the exact 1.0.0 package for your application:
 
-| SDK | Install stable | Requirements |
+| SDK | Install 1.0.0 | Requirements |
 | --- | --- | --- |
-| [Python](https://pypi.org/project/datafog-core/) | `python -m pip install datafog-core` | Python 3.10+ |
-| [Node.js](https://www.npmjs.com/package/@datafog/node) | `npm install @datafog/node` | Node.js 24.x |
-| [Rust](https://crates.io/crates/datafog-core) | `cargo add datafog-core` | Rust 1.88+ |
-| [Browser / WASM](https://www.npmjs.com/package/@datafog/wasm) | `npm install @datafog/wasm` | Browser with WebAssembly support |
+| [Python](https://pypi.org/project/datafog-core/) | `python -m pip install datafog-core==1.0.0` | Python 3.10+ |
+| [Node.js](https://www.npmjs.com/package/@datafog/node) | `npm install --save-exact @datafog/node@1.0.0` | Node.js 24+ |
+| [Rust](https://crates.io/crates/datafog-core) | `cargo add datafog-core@=1.0.0` | Rust 1.88+ |
+| [Browser / WASM](https://www.npmjs.com/package/@datafog/wasm) | `npm install --save-exact @datafog/wasm@1.0.0` | Browser with WebAssembly support |
 
 ### Python
 
@@ -136,7 +138,7 @@ Use [structured scans](docs/guides/person-discovery.mdx) to find names by JSON f
 
 Each finding includes its entity type, matched text, byte and code-point ranges, optional confidence, and detector name/version. Ranges are zero-based and end-exclusive. Node.js and WASM also provide UTF-16 ranges for JavaScript `slice`. Rule-based findings have no confidence score. [Findings and ranges →](docs/concepts/findings-and-ranges.mdx)
 
-For scanning files from AI agents, use [DataFog MCP](https://github.com/DataFog/datafog-mcp).
+For scanning files from AI agents, use [datafog MCP](https://github.com/DataFog/datafog-mcp).
 
 <details>
 <summary><strong>Detection settings</strong></summary>
@@ -165,42 +167,46 @@ Use `transform` with existing findings, or `scan_and_transform` / `scanAndTransf
 
 Keep scan settings under `scan` and transformation policy under `transform`. A default strategy is required; entity selection, per-type overrides, and allowlists are optional. [Configuration guide →](docs/guides/configuration.mdx) · [Strategy details →](docs/concepts/privacy-transformations.mdx)
 
-## Chrome extension integration in 0.5.0-beta.1
+## Browser workspace and FogVault integration
+
+Core 1.0 provides persistent `Workspace` pseudonyms, explicit approved saves,
+strict/progressive restoration, operation history and conversation-scoped recall.
+The optional browser adapter uses the maintained FogVault Worker/WASM owner and
+IndexedDB storage. Native Rust, Node and Python owners use the same portable
+vault core through the registered native adapter.
 
-The developer prerelease adds persistent `Workspace` pseudonyms, approved
-save-before-handoff, strict restoration, follow-ups and host-owned encrypted
-backup/recovery, plus optional English GLiNER2.5 Small browser sessions. Use
-synthetic data while the snapshot format and vault integration remain provisional.
+After the coordinated publication completes:
 
 ```bash
-npm install --save-exact @datafog/wasm@0.5.0-beta.1
+npm install --save-exact @datafog/wasm@1.0.0 @datafog/fogvault-browser@0.1.0 @datafog/core-fogvault-browser@1.0.0
 ```
 
-[Integration lifecycle, all browser calls and errors →](docs/extension-integration-0.5.0-beta.1.md)
+[Integration guide and supported profiles →](docs/integrations/fogvault.md)
+· [Stable Workspace contract →](docs/contracts/core-v1.md)
 · [Model assets and runtime setup →](docs/browser-model.md)
-· [Release scope and verification →](https://github.com/DataFog/datafog-core/issues/132)
+· [SDK release scope and separate extension acceptance →](docs/core-v1-release-scope.md)
 
 ## Local models (beta)
 
-[0.4.5-beta.4](https://github.com/DataFog/datafog-core/releases/tag/v0.4.5-beta.4) adds local sessions for the DataFog PII model and GLiNER2 in Rust, Python, and Node.js on all five native platforms.
+Core 1.0 includes optional local sessions for the datafog PII model and GLiNER2 in Rust, Python and Node.js. Model files are provisioned separately; model quality measurements remain separate from SDK correctness.
 
-Install `0.5.0-beta.1` (Python `0.5.0b1`) for the current native prerelease:
+After publication completes, install the exact 1.0.0 SDK:
 
 ```bash
-python -m pip install 'datafog-core==0.5.0b1'
-npm install --save-exact @datafog/node@0.5.0-beta.1
-cargo add datafog-core@0.5.0-beta.1 --features models
+python -m pip install 'datafog-core==1.0.0'
+npm install --save-exact @datafog/node@1.0.0
+cargo add datafog-core@=1.0.0 --features models
 ```
 
 For GLiNER2, install its optional dependencies in the Python environment used by the runner:
 
 ```bash
-python -m pip install 'datafog-core[gliner2]==0.5.0b1'
+python -m pip install 'datafog-core[gliner2]==1.0.0'
 ```
 
 GLiNER2 supports the PII checkpoint and compatible general-purpose span models with caller-defined labels. The GLiNER2 runner ships in the Python package and also serves Node.js and Rust callers. Download and verify model files separately, then use `ModelSession.open`, text `scan`, and `close`. Reuse sessions across calls. Both backends return consistent results and errors, with cancellation and cleanup support.
 
-[DataFog setup and session API →](docs/model-sessions.md) · [GLiNER2 setup →](docs/gliner2-model.md)
+[datafog setup and session API →](docs/model-sessions.md) · [GLiNER2 setup →](docs/gliner2-model.md)
 
 ## Documentation and development
 
@@ -228,4 +234,4 @@ See the [development guide](docs/development.mdx) for the repository layout and
 
 ## License
 
-[MIT](LICENSE). Built by [DataFog](https://datafog.ai).
+[MIT](LICENSE). Built by [datafog](https://datafog.ai).

{datafog_core-0.5.0b2 → datafog_core-1.0.0}/bindings/python/Cargo.toml

@@ -1,6 +1,6 @@
 [package]
 name = "datafog-core-python"
-version = "0.5.0-beta.2"
+version = "1.0.0"
 edition = "2024"
 rust-version = "1.88"
 description = "Python bindings for datafog-core"
@@ -12,8 +12,10 @@ name = "datafog_core"
 crate-type = ["cdylib"]
 
 [dependencies]
-datafog-core = { version = "0.5.0-beta.2", path = "../../crates/core", features = ["models"] }
+datafog-core = { version = "1.0.0", path = "../../crates/core", features = ["models"] }
 pyo3 = { version = "0.29", features = ["abi3-py310"] }
 pyo3-async-runtimes = { version = "0.29", features = ["tokio-runtime"] }
 serde_json = "1"
 serde = "1"
+# Reuse Core's wipe primitive for transient copied UTF-16 transport buffers.
+zeroize = "1"

{datafog_core-0.5.0b2 → datafog_core-1.0.0}/bindings/python/src/lib.rs

@@ -1,5 +1,6 @@
 use ::datafog_core as core;
 mod models;
+mod workspace;
 use pyo3::create_exception;
 use pyo3::exceptions::{PyRuntimeError, PyTypeError, PyValueError};
 use pyo3::prelude::*;
@@ -1271,9 +1272,17 @@ fn scan_and_transform_structured(
     structured_transform_result(py, result)
 }
 
+/// Workspace API contract implemented by this compiled Core.
+#[pyfunction]
+fn workspace_contract_version() -> u32 {
+    core::workspace::WORKSPACE_CONTRACT_VERSION
+}
+
 #[pymodule]
 fn datafog_core(module: &Bound<'_, PyModule>) -> PyResult<()> {
     models::register(module)?;
+    workspace::register(module)?;
+    module.add_function(wrap_pyfunction!(workspace_contract_version, module)?)?;
     module.add(
         "DataFogConfigurationError",
         module.py().get_type::<DataFogConfigurationError>(),

datafog_core-1.0.0/bindings/python/src/workspace/conversation.rs

@@ -0,0 +1,166 @@
+//! Exact Python transport values; conversation/admission decisions stay in Core.
+use super::*;
+use pyo3::types::{PyInt, PyString};
+
+fn object<'py>(
+    py: Python<'py>,
+    value: &Bound<'py, PyAny>,
+    names: &[&str],
+    code: w::ErrorCode,
+) -> PyResult<Bound<'py, PyDict>> {
+    let invalid = || failure(py, code);
+    let object = value.cast_exact::<PyDict>().map_err(|_| invalid())?;
+    if object.len() != names.len()
+        || object
+            .keys()
+            .iter()
+            .any(|key| !key.is_exact_instance_of::<PyString>())
+    {
+        return Err(invalid());
+    }
+    for name in names {
+        if !object.contains(*name)? {
+            return Err(invalid());
+        }
+    }
+    Ok(object.clone())
+}
+fn required<'py>(
+    py: Python<'py>,
+    object: &Bound<'py, PyDict>,
+    name: &str,
+    code: w::ErrorCode,
+) -> PyResult<Bound<'py, PyAny>> {
+    object.get_item(name)?.ok_or_else(|| failure(py, code))
+}
+fn public_id(
+    py: Python<'_>,
+    value: &Bound<'_, PyAny>,
+    code: w::ErrorCode,
+) -> PyResult<w::PublicId> {
+    let invalid = || failure(py, code);
+    if let Ok(bytes) = value.cast_exact::<PyBytes>() {
+        return bytes.as_bytes().try_into().map_err(|_| invalid());
+    }
+    let values = value.cast_exact::<PyList>().map_err(|_| invalid())?;
+    if values.len() != 16 {
+        return Err(invalid());
+    }
+    let mut result = [0; 16];
+    for (index, item) in values.iter().enumerate() {
+        if !item.is_exact_instance_of::<PyInt>() {
+            return Err(invalid());
+        }
+        result[index] = item.extract::<u8>().map_err(|_| invalid())?;
+    }
+    Ok(result)
+}
+// Direct restoration borrows the caller string; saved context fields clone explicitly.
+pub(super) fn text<'a>(
+    py: Python<'_>,
+    value: &'a Bound<'_, PyAny>,
+    code: w::ErrorCode,
+) -> PyResult<&'a str> {
+    let value = value
+        .cast_exact::<PyString>()
+        .map_err(|_| failure(py, code))?;
+    let text = value.to_str().map_err(|_| failure(py, code))?;
+    material_limit(py, text.len())?;
+    Ok(text)
+}
+pub(super) fn selector(py: Python<'_>, value: &Bound<'_, PyAny>) -> PyResult<w::PublicId> {
+    let bytes = value
+        .cast_exact::<PyBytes>()
+        .map_err(|_| failure(py, w::ErrorCode::InvalidId))?;
+    id(py, bytes.as_bytes())
+}
+pub(super) fn intent(py: Python<'_>, value: &Bound<'_, PyAny>) -> PyResult<w::SendIntentId> {
+    let code = w::ErrorCode::InvalidSendIntent;
+    let object = object(py, value, &["preparationId", "inputIndex"], code)?;
+    let preparation_id = public_id(py, &required(py, &object, "preparationId", code)?, code)?;
+    let index = required(py, &object, "inputIndex", code)?;
+    if !index.is_exact_instance_of::<PyInt>() {
+        return Err(failure(py, code));
+    }
+    let input_index = index.extract::<usize>().map_err(|_| failure(py, code))?;
+    if input_index >= w::MAX_INPUTS {
+        return Err(failure(py, code));
+    }
+    Ok(w::SendIntentId {
+        preparation_id,
+        input_index,
+    })
+}
+pub(super) fn inputs(
+    py: Python<'_>,
+    value: &Bound<'_, PyAny>,
+) -> PyResult<Vec<(ReviewOwned, w::Conversation)>> {
+    let code = w::ErrorCode::InvalidConversation;
+    let values = value
+        .cast_exact::<PyList>()
+        .map_err(|_| failure(py, w::ErrorCode::InvalidBatch))?;
+    if values.len() > w::MAX_INPUTS {
+        return Err(failure(py, w::ErrorCode::ResourceLimit));
+    }
+    let mut result = Vec::with_capacity(values.len());
+    let mut bytes = 0usize;
+    for (index, value) in values.iter().enumerate() {
+        let row = (|| -> PyResult<(ReviewOwned, w::Conversation)> {
+            let item = object(py, &value, &["input", "conversation"], code)?;
+            let input = required(py, &item, "input", code)?;
+            let input = input
+                .extract::<PyRef<'_, WorkspaceReviewInput>>()
+                .map_err(|_| failure(py, code))?;
+            bytes = bytes.saturating_add(input.text.len());
+            for finding in input.scanner.iter().chain(&input.user) {
+                bytes = bytes.saturating_add(finding_bytes(finding));
+            }
+            for correction in &input.corrections {
+                bytes = bytes
+                    .saturating_add(finding_bytes(&correction.replacement))
+                    .saturating_add(correction.candidate_key.len());
+            }
+            material_limit(py, bytes)?;
+            let context = object(
+                py,
+                &required(py, &item, "conversation", code)?,
+                &["id", "surface", "siteId", "siteIdByteBudget"],
+                code,
+            )?;
+            let id = public_id(py, &required(py, &context, "id", code)?, code)?;
+            let surface = text(py, &required(py, &context, "surface", code)?, code)?.to_owned();
+            let site = required(py, &context, "siteId", code)?;
+            let site_id = if site.is_none() {
+                None
+            } else {
+                Some(text(py, &site, code)?.to_owned())
+            };
+            bytes = bytes
+                .saturating_add(surface.len())
+                .saturating_add(site_id.as_ref().map_or(0, String::len));
+            material_limit(py, bytes)?;
+            let budget = required(py, &context, "siteIdByteBudget", code)?;
+            if !budget.is_exact_instance_of::<PyInt>() {
+                return Err(failure(py, code));
+            }
+            let site_id_byte_budget = budget.extract::<usize>().map_err(|_| failure(py, code))?;
+            Ok((
+                input.owned(),
+                w::Conversation {
+                    id,
+                    surface,
+                    site_id,
+                    site_id_byte_budget,
+                },
+            ))
+        })();
+        match row {
+            Ok(row) => result.push(row),
+            Err(error) => {
+                error.value(py).setattr("input_index", index)?;
+                return Err(error);
+            }
+        }
+    }
+    Ok(result)
+}

datafog_core-1.0.0/bindings/python/src/workspace/operations.rs

@@ -0,0 +1,84 @@
+//! Transport-only adapters for the shared content-free operation contract.
+use super::*;
+use pyo3::types::{PyInt, PyString};
+
+pub(super) fn context(py: Python<'_>, value: &Bound<'_, PyAny>) -> PyResult<w::OperationContext> {
+    let invalid = || failure(py, w::ErrorCode::InvalidOperation);
+    let object = value.cast_exact::<PyDict>().map_err(|_| invalid())?;
+    if object.len() != 2
+        || object
+            .keys()
+            .iter()
+            .any(|key| !key.is_exact_instance_of::<PyString>())
+    {
+        return Err(invalid());
+    }
+    let bytes = object.get_item("id")?.ok_or_else(invalid)?;
+    let bytes = bytes
+        .cast_exact::<PyBytes>()
+        .map_err(|_| failure(py, w::ErrorCode::InvalidId))?;
+    let operation_id = id(py, bytes.as_bytes())?;
+    let time = object.get_item("occurredAtMs")?.ok_or_else(invalid)?;
+    if !time.is_exact_instance_of::<PyInt>() {
+        return Err(invalid());
+    }
+    let occurred_at_ms = time.extract::<u64>().map_err(|_| invalid())?;
+    if occurred_at_ms > w::MAX_OPERATION_TIME_MS {
+        return Err(invalid());
+    }
+    Ok(w::OperationContext {
+        id: operation_id,
+        occurred_at_ms,
+    })
+}
+
+pub(super) fn outcome(py: Python<'_>, value: &Bound<'_, PyAny>) -> PyResult<w::OperationOutcome> {
+    let invalid = || failure(py, w::ErrorCode::InvalidOperation);
+    let object = value.cast_exact::<PyDict>().map_err(|_| invalid())?;
+    if object.len() != 2
+        || object
+            .keys()
+            .iter()
+            .any(|key| !key.is_exact_instance_of::<PyString>())
+    {
+        return Err(invalid());
+    }
+    let kind = object.get_item("kind")?.ok_or_else(invalid)?;
+    let kind = kind.cast_exact::<PyString>().map_err(|_| invalid())?;
+    let kind = match kind.to_str().map_err(|_| invalid())? {
+        "copy_confirmed" => w::OutcomeKind::CopyConfirmed,
+        "user_cancelled" => w::OutcomeKind::UserCancelled,
+        "blocked_input" => w::OutcomeKind::BlockedInput,
+        "restore_blocked" => w::OutcomeKind::RestoreBlocked,
+        _ => return Err(invalid()),
+    };
+    let count = object.get_item("issueCount")?.ok_or_else(invalid)?;
+    if !count.is_exact_instance_of::<PyInt>() {
+        return Err(invalid());
+    }
+    let issue_count = count.extract::<usize>().map_err(|_| invalid())?;
+    if issue_count > w::MAX_FINDINGS {
+        return Err(invalid());
+    }
+    Ok(w::OperationOutcome { kind, issue_count })
+}
+
+pub(super) fn record(value: &w::OperationRecord) -> Value {
+    json!({"id":value.id,"kind":value.kind.as_str(),"occurredAtMs":value.occurred_at_ms,
+        "preparedInputs":value.prepared_inputs,"transformedSpans":value.transformed_spans})
+}
+
+pub(super) fn counts(value: w::OperationCounts) -> Value {
+    json!({"operations":value.operations,"preparedInputs":value.prepared_inputs,
+        "transformedSpans":value.transformed_spans,"confirmedHandoffs":value.confirmed_handoffs,
+        "reportedBlockedAttempts":value.reported_blocked_attempts})
+}
+
+// Bounds stay Core-owned; reject Python coercion before entering the native call.
+pub(super) fn page_index(py: Python<'_>, value: &Bound<'_, PyAny>) -> PyResult<usize> {
+    let invalid = || failure(py, w::ErrorCode::ResourceLimit);
+    if !value.is_exact_instance_of::<PyInt>() {
+        return Err(invalid());
+    }
+    value.extract::<usize>().map_err(|_| invalid())
+}