depfix 0.1.0__tar.gz

depfix-0.1.0/CHANGELOG.md

@@ -0,0 +1,22 @@
+# Changelog
+
+All notable changes use this file. The project follows semantic versioning after its first public release.
+
+## 0.1.0 - Unreleased
+
+- Established the permanent `depfix` distribution, import, CLI, environment, cache, bundle, generated-package, and
+  synthetic-namespace identities.
+- Added zero-configuration ranged imports and lazy `PackageHandle` loading.
+- Added unified PyPI, Git, URL, file, Python-module, and PEP 508 direct-reference sources.
+- Added Core Metadata/artifact module discovery and four-state native classification with mixed-wheel Python fallback.
+- Added mandatory uv resolution/build backend, executable discovery, and private repair bootstrap.
+- Added deterministic manifests, AST export, frozen/offline install, air-gap bundles, IDE stubs/source maps, and uv pip
+  passthrough.
+- Preserved parent-specific multiversion realms, namespace provider sets, canonical identity, resource/metadata facades,
+  concurrency, and spawn-worker behavior.
+- Added release validation, cross-platform CI, and manual trusted-publishing workflow templates.
+- Added a project-wide DOX hierarchy, concept-owned documentation folders, a GitHub/PyPI README, and canonical
+  `agent0ai` project metadata.
+
+Release blockers: the owner must choose a license, add a private security contact, confirm PyPI name acceptance, and
+configure protected trusted-publisher environments.

depfix-0.1.0/CONTRIBUTING.md

@@ -0,0 +1,28 @@
+# Contributing
+
+Use CPython 3.11+ and install development dependencies:
+
+```bash
+python -m venv .venv
+.venv/bin/python -m pip install -e '.[test,release]'
+```
+
+On Windows, use `.venv\Scripts\python.exe`. Run before submitting changes:
+
+```bash
+ruff format --check .
+ruff check .
+mypy src/depfix
+pytest
+python scripts/release_check.py --quick
+```
+
+Changes to source parsing, manifests, import identity, cache layout, native policy, or uv commands require focused tests and
+documentation. Tests must not depend on ambient third-party imports. Never commit credentials, private package artifacts,
+global cache content, `.depfix/runtime`, or generated build output.
+
+Preserve the stable `import_module -> ModuleType` and `load_package -> PackageHandle` contracts. New native support must be
+opt-in and evidence-based; do not weaken the unknown-native gate to make one package pass.
+
+No contributor identity or certificate-of-origin policy has been selected. The owner should establish those governance
+terms together with the license before accepting external contributions.

depfix-0.1.0/MANIFEST.in

@@ -0,0 +1,15 @@
+include README.md
+include CHANGELOG.md
+include SECURITY.md
+include CONTRIBUTING.md
+include RELEASING.md
+recursive-include docs *.md
+recursive-include schemas *.json
+recursive-include examples *.py *.md Dockerfile
+recursive-include scripts *.py
+prune .depfix
+prune .github
+prune build
+prune dist
+prune tests
+global-exclude .env .env.* *.py[cod] __pycache__/*

depfix-0.1.0/PKG-INFO

@@ -0,0 +1,223 @@
+Metadata-Version: 2.4
+Name: depfix
+Version: 0.1.0
+Summary: Import multiple Python package versions side by side with isolated dependency realms
+Author: agent0ai
+Project-URL: Homepage, https://github.com/agent0ai/depfix
+Project-URL: Documentation, https://github.com/agent0ai/depfix/tree/main/docs
+Project-URL: Repository, https://github.com/agent0ai/depfix
+Project-URL: Issues, https://github.com/agent0ai/depfix/issues
+Project-URL: Changelog, https://github.com/agent0ai/depfix/blob/main/CHANGELOG.md
+Keywords: dependencies,dependency-isolation,imports,multiversion,packaging,uv
+Classifier: Development Status :: 3 - Alpha
+Classifier: Operating System :: OS Independent
+Classifier: Programming Language :: Python :: 3
+Classifier: Programming Language :: Python :: 3.11
+Classifier: Programming Language :: Python :: 3.12
+Classifier: Programming Language :: Python :: 3.13
+Classifier: Programming Language :: Python :: Implementation :: CPython
+Classifier: Topic :: Software Development :: Libraries :: Python Modules
+Classifier: Typing :: Typed
+Requires-Python: >=3.11
+Description-Content-Type: text/markdown
+Requires-Dist: packaging>=24
+Requires-Dist: pathspec>=0.12
+Requires-Dist: platformdirs>=4
+Requires-Dist: uv>=0.11.0
+Provides-Extra: test
+Requires-Dist: pytest>=8; extra == "test"
+Requires-Dist: mypy>=1.10; extra == "test"
+Requires-Dist: pyright>=1.1.400; extra == "test"
+Requires-Dist: jsonschema>=4.23; extra == "test"
+Provides-Extra: release
+Requires-Dist: build>=1.2; extra == "release"
+Requires-Dist: ruff>=0.12; extra == "release"
+Requires-Dist: twine>=6; extra == "release"
+
+<p align="center">
+  <img src="https://raw.githubusercontent.com/agent0ai/depfix/main/.github/readme-banner.svg" alt="Depfix — isolated Python dependency realms" width="100%" />
+</p>
+
+<h3 align="center">Import the version you need. Keep its dependencies in their own realm.</h3>
+
+<p align="center">
+  Depfix lets one Python process load multiple pure-Python package versions side by side—even when their transitive dependencies conflict.
+</p>
+
+<p align="center">
+  <a href="https://pypi.org/project/depfix/"><img alt="PyPI" src="https://img.shields.io/pypi/v/depfix?style=for-the-badge&logo=pypi&logoColor=white" /></a>
+  <a href="https://pypi.org/project/depfix/"><img alt="Python 3.11+" src="https://img.shields.io/pypi/pyversions/depfix?style=for-the-badge&logo=python&logoColor=white" /></a>
+  <a href="https://github.com/agent0ai/depfix/actions/workflows/ci.yml"><img alt="CI" src="https://img.shields.io/github/actions/workflow/status/agent0ai/depfix/ci.yml?branch=main&style=for-the-badge&label=CI" /></a>
+  <a href="https://github.com/sponsors/agent0ai"><img alt="Sponsor agent0ai" src="https://img.shields.io/badge/Sponsor-agent0ai-FF69B4?style=for-the-badge&logo=githubsponsors&logoColor=white" /></a>
+</p>
+
+<p align="center">
+  <a href="#quick-start">Quick start</a> ·
+  <a href="#why-depfix">Why Depfix</a> ·
+  <a href="#from-live-imports-to-locked-deployments">Deployment</a> ·
+  <a href="#documentation">Documentation</a> ·
+  <a href="https://github.com/agent0ai/depfix/issues">Issues</a>
+</p>
+
+```python
+from depfix import import_module
+
+idna_2 = import_module("idna==2.10")
+idna_3 = import_module("idna==3.10")
+
+assert idna_2.__depfix_version__ == "2.10"
+assert idna_3.__depfix_version__ == "3.10"
+assert idna_2 is not idna_3
+```
+
+No virtual-environment switching. No `sys.path` swapping. No installation into the active `site-packages`.
+
+## Why Depfix
+
+| Capability | Why it matters |
+| --- | --- |
+| **Side-by-side versions** | Load different versions of the same pure-Python distribution in one process. |
+| **Dependency realms** | Each root keeps parent-specific dependency edges, so one graph does not flatten into another. |
+| **Zero-configuration start** | Call `import_module()` directly; the first request prepares an exact graph in the user cache. |
+| **Reproducible deployments** | Export deterministic manifests, install frozen state, and build complete air-gap bundles. |
+| **Real package sources** | Resolve PyPI requirements, Git refs, URLs, local projects, wheels, and standalone Python files. |
+| **Honest isolation** | Pure-Python realm loading is supported; unsafe native-extension loading fails explicitly. |
+
+## Quick start
+
+Install Depfix from PyPI:
+
+```bash
+python -m pip install depfix
+```
+
+Then ask for the package version your code needs:
+
+```python
+from depfix import import_module, load_package
+
+requests = import_module("requests>=2.31,<3")
+tools = load_package("setuptools==75.0.0")
+
+print(requests.__depfix_version__)
+print(tools.name, tools.version, tools.module_names)
+setuptools = tools.modules.setuptools
+```
+
+`import_module()` returns exactly one canonical module. If a distribution exposes zero or several public roots, Depfix
+raises a typed discovery error instead of guessing. Use `module=` to select a known root or `load_package()` to inspect a
+lazy package handle.
+
+Importing `depfix` itself performs no resolution, network, cache, or subprocess work. Those begin only when a load or
+preparation API is called.
+
+## How it works
+
+```text
+requirement or source
+  → exact uv-backed resolution
+  → hash-pinned artifact graph
+  → verified, content-addressed cache
+  → parent-specific dependency realm
+  → canonical synthetic module identity
+```
+
+Realm modules live under graph- and node-qualified internal names. Their logical imports are resolved through declared
+dependency edges, not the process's ambient third-party packages. Repeated calls for the same graph and logical module
+return the same module object.
+
+Depfix invokes uv through its documented executable interface. It does not import uv internals, vendor a uv binary, alter
+the active environment, or add prepared package trees to global `sys.path`.
+
+## Sources
+
+```python
+import_module("requests>=2.31,<3")
+import_module("pypi:requests[socks]~=2.32")
+import_module("git:https://github.com/acme/sdk.git@v2.4.0")
+import_module("url:https://packages.example/acme_sdk-2.4.0-py3-none-any.whl#sha256=<digest>")
+import_module("file:../acme-sdk")
+import_module("file:./helpers.py")
+import_module("py:https://modules.example/utilities.py#sha256=<digest>")
+```
+
+Standard PEP 508 direct references work too. Mutable Git refs are pinned to commits during export. Credentials remain in
+external uv, index, keyring, or Git configuration and are never serialized into manifests.
+
+## From live imports to locked deployments
+
+Live mode is ideal for exploration: it resolves into the platform cache and creates no project files. When the graph must
+be reproducible, prepare it explicitly:
+
+```bash
+depfix export . --output .depfix/imports.lock
+depfix install .depfix/imports.lock --frozen
+DEPFIX_FROZEN=1 python application.py
+```
+
+`export` scans static `import_module()` and `load_package()` calls without executing application code. The manifest records
+exact artifacts, hashes, target identity, import ownership, source provenance, policy, and parent-specific edges.
+
+For disconnected targets:
+
+```bash
+depfix bundle .depfix/imports.lock --output dist/application.depfixbundle --include-depfix-runtime
+depfix install dist/application.depfixbundle --offline --frozen
+```
+
+| Mode | Resolution | Network | Project state |
+| --- | --- | --- | --- |
+| **Live** | On the first request | Allowed by policy | None |
+| **Prepared** | During export | Optional during install | Deterministic manifest |
+| **Air-gapped** | On the connected build host | Forbidden on target | Manifest + exact bundle |
+
+## IDE support
+
+```bash
+depfix ide sync .depfix/imports.lock
+depfix ide configure .depfix/imports.lock
+```
+
+Depfix generates a physical `depfix_imports` package with graph-specific stubs, editor snippets, and source maps. Distinct
+aliases keep distinct version-specific APIs while runtime loading continues to use canonical realm identities.
+
+## Boundaries worth knowing
+
+Depfix is an alpha release focused on CPython 3.11–3.13. Its isolation boundary prevents dependency-graph collisions; it
+is not a sandbox for untrusted Python code.
+
+Pure-Python wheels, namespace packages, resources, relative and circular imports, selected metadata access, threads, and
+spawn workers are covered. Native extensions can carry process-global ABI and library state that cannot be made safe by
+renaming a module. Depfix rejects unknown native loading with `NativeIsolationRequired`; use an application-owned worker
+process when native code is required.
+
+## Documentation
+
+| I want to… | Start here |
+| --- | --- |
+| Get a project running | [Getting started](https://github.com/agent0ai/depfix/blob/main/docs/guides/getting-started.md) |
+| Understand dependency isolation | [Import realms](https://github.com/agent0ai/depfix/tree/main/docs/concepts/import-realms) |
+| Follow resolution and package discovery | [Resolution](https://github.com/agent0ai/depfix/tree/main/docs/concepts/resolution) |
+| Prepare containers or offline systems | [Deployment](https://github.com/agent0ai/depfix/tree/main/docs/concepts/deployment) |
+| Inspect the Python surface | [Python API](https://github.com/agent0ai/depfix/blob/main/docs/reference/api.md) |
+| Inspect every command | [CLI reference](https://github.com/agent0ai/depfix/blob/main/docs/reference/cli.md) |
+| Review security assumptions | [Threat model](https://github.com/agent0ai/depfix/blob/main/docs/operations/threat-model.md) |
+| Diagnose a failure | [Troubleshooting](https://github.com/agent0ai/depfix/blob/main/docs/guides/troubleshooting.md) |
+
+Browse the complete [documentation map](https://github.com/agent0ai/depfix/tree/main/docs).
+
+## Created by agent0ai
+
+Depfix is an open-source project by [agent0ai](https://github.com/agent0ai), creator of
+[Agent Zero](https://github.com/agent0ai/agent-zero), [Space Agent](https://github.com/agent0ai/space-agent), and
+[DOX](https://github.com/agent0ai/dox).
+
+- Found a bug or compatibility gap? [Open an issue](https://github.com/agent0ai/depfix/issues).
+- Want to contribute? Read [CONTRIBUTING.md](https://github.com/agent0ai/depfix/blob/main/CONTRIBUTING.md).
+- Preparing a release? Follow [RELEASING.md](https://github.com/agent0ai/depfix/blob/main/RELEASING.md).
+- Want to support agent0ai's work? [Sponsor on GitHub](https://github.com/sponsors/agent0ai).
+
+## License status
+
+No license has been selected yet. Until the owner adds an explicit `LICENSE`, the source is publicly visible but no open-
+source license grant should be assumed. License selection remains a blocker for the first public release.

depfix-0.1.0/README.md

@@ -0,0 +1,187 @@
+<p align="center">
+  <img src="https://raw.githubusercontent.com/agent0ai/depfix/main/.github/readme-banner.svg" alt="Depfix — isolated Python dependency realms" width="100%" />
+</p>
+
+<h3 align="center">Import the version you need. Keep its dependencies in their own realm.</h3>
+
+<p align="center">
+  Depfix lets one Python process load multiple pure-Python package versions side by side—even when their transitive dependencies conflict.
+</p>
+
+<p align="center">
+  <a href="https://pypi.org/project/depfix/"><img alt="PyPI" src="https://img.shields.io/pypi/v/depfix?style=for-the-badge&logo=pypi&logoColor=white" /></a>
+  <a href="https://pypi.org/project/depfix/"><img alt="Python 3.11+" src="https://img.shields.io/pypi/pyversions/depfix?style=for-the-badge&logo=python&logoColor=white" /></a>
+  <a href="https://github.com/agent0ai/depfix/actions/workflows/ci.yml"><img alt="CI" src="https://img.shields.io/github/actions/workflow/status/agent0ai/depfix/ci.yml?branch=main&style=for-the-badge&label=CI" /></a>
+  <a href="https://github.com/sponsors/agent0ai"><img alt="Sponsor agent0ai" src="https://img.shields.io/badge/Sponsor-agent0ai-FF69B4?style=for-the-badge&logo=githubsponsors&logoColor=white" /></a>
+</p>
+
+<p align="center">
+  <a href="#quick-start">Quick start</a> ·
+  <a href="#why-depfix">Why Depfix</a> ·
+  <a href="#from-live-imports-to-locked-deployments">Deployment</a> ·
+  <a href="#documentation">Documentation</a> ·
+  <a href="https://github.com/agent0ai/depfix/issues">Issues</a>
+</p>
+
+```python
+from depfix import import_module
+
+idna_2 = import_module("idna==2.10")
+idna_3 = import_module("idna==3.10")
+
+assert idna_2.__depfix_version__ == "2.10"
+assert idna_3.__depfix_version__ == "3.10"
+assert idna_2 is not idna_3
+```
+
+No virtual-environment switching. No `sys.path` swapping. No installation into the active `site-packages`.
+
+## Why Depfix
+
+| Capability | Why it matters |
+| --- | --- |
+| **Side-by-side versions** | Load different versions of the same pure-Python distribution in one process. |
+| **Dependency realms** | Each root keeps parent-specific dependency edges, so one graph does not flatten into another. |
+| **Zero-configuration start** | Call `import_module()` directly; the first request prepares an exact graph in the user cache. |
+| **Reproducible deployments** | Export deterministic manifests, install frozen state, and build complete air-gap bundles. |
+| **Real package sources** | Resolve PyPI requirements, Git refs, URLs, local projects, wheels, and standalone Python files. |
+| **Honest isolation** | Pure-Python realm loading is supported; unsafe native-extension loading fails explicitly. |
+
+## Quick start
+
+Install Depfix from PyPI:
+
+```bash
+python -m pip install depfix
+```
+
+Then ask for the package version your code needs:
+
+```python
+from depfix import import_module, load_package
+
+requests = import_module("requests>=2.31,<3")
+tools = load_package("setuptools==75.0.0")
+
+print(requests.__depfix_version__)
+print(tools.name, tools.version, tools.module_names)
+setuptools = tools.modules.setuptools
+```
+
+`import_module()` returns exactly one canonical module. If a distribution exposes zero or several public roots, Depfix
+raises a typed discovery error instead of guessing. Use `module=` to select a known root or `load_package()` to inspect a
+lazy package handle.
+
+Importing `depfix` itself performs no resolution, network, cache, or subprocess work. Those begin only when a load or
+preparation API is called.
+
+## How it works
+
+```text
+requirement or source
+  → exact uv-backed resolution
+  → hash-pinned artifact graph
+  → verified, content-addressed cache
+  → parent-specific dependency realm
+  → canonical synthetic module identity
+```
+
+Realm modules live under graph- and node-qualified internal names. Their logical imports are resolved through declared
+dependency edges, not the process's ambient third-party packages. Repeated calls for the same graph and logical module
+return the same module object.
+
+Depfix invokes uv through its documented executable interface. It does not import uv internals, vendor a uv binary, alter
+the active environment, or add prepared package trees to global `sys.path`.
+
+## Sources
+
+```python
+import_module("requests>=2.31,<3")
+import_module("pypi:requests[socks]~=2.32")
+import_module("git:https://github.com/acme/sdk.git@v2.4.0")
+import_module("url:https://packages.example/acme_sdk-2.4.0-py3-none-any.whl#sha256=<digest>")
+import_module("file:../acme-sdk")
+import_module("file:./helpers.py")
+import_module("py:https://modules.example/utilities.py#sha256=<digest>")
+```
+
+Standard PEP 508 direct references work too. Mutable Git refs are pinned to commits during export. Credentials remain in
+external uv, index, keyring, or Git configuration and are never serialized into manifests.
+
+## From live imports to locked deployments
+
+Live mode is ideal for exploration: it resolves into the platform cache and creates no project files. When the graph must
+be reproducible, prepare it explicitly:
+
+```bash
+depfix export . --output .depfix/imports.lock
+depfix install .depfix/imports.lock --frozen
+DEPFIX_FROZEN=1 python application.py
+```
+
+`export` scans static `import_module()` and `load_package()` calls without executing application code. The manifest records
+exact artifacts, hashes, target identity, import ownership, source provenance, policy, and parent-specific edges.
+
+For disconnected targets:
+
+```bash
+depfix bundle .depfix/imports.lock --output dist/application.depfixbundle --include-depfix-runtime
+depfix install dist/application.depfixbundle --offline --frozen
+```
+
+| Mode | Resolution | Network | Project state |
+| --- | --- | --- | --- |
+| **Live** | On the first request | Allowed by policy | None |
+| **Prepared** | During export | Optional during install | Deterministic manifest |
+| **Air-gapped** | On the connected build host | Forbidden on target | Manifest + exact bundle |
+
+## IDE support
+
+```bash
+depfix ide sync .depfix/imports.lock
+depfix ide configure .depfix/imports.lock
+```
+
+Depfix generates a physical `depfix_imports` package with graph-specific stubs, editor snippets, and source maps. Distinct
+aliases keep distinct version-specific APIs while runtime loading continues to use canonical realm identities.
+
+## Boundaries worth knowing
+
+Depfix is an alpha release focused on CPython 3.11–3.13. Its isolation boundary prevents dependency-graph collisions; it
+is not a sandbox for untrusted Python code.
+
+Pure-Python wheels, namespace packages, resources, relative and circular imports, selected metadata access, threads, and
+spawn workers are covered. Native extensions can carry process-global ABI and library state that cannot be made safe by
+renaming a module. Depfix rejects unknown native loading with `NativeIsolationRequired`; use an application-owned worker
+process when native code is required.
+
+## Documentation
+
+| I want to… | Start here |
+| --- | --- |
+| Get a project running | [Getting started](https://github.com/agent0ai/depfix/blob/main/docs/guides/getting-started.md) |
+| Understand dependency isolation | [Import realms](https://github.com/agent0ai/depfix/tree/main/docs/concepts/import-realms) |
+| Follow resolution and package discovery | [Resolution](https://github.com/agent0ai/depfix/tree/main/docs/concepts/resolution) |
+| Prepare containers or offline systems | [Deployment](https://github.com/agent0ai/depfix/tree/main/docs/concepts/deployment) |
+| Inspect the Python surface | [Python API](https://github.com/agent0ai/depfix/blob/main/docs/reference/api.md) |
+| Inspect every command | [CLI reference](https://github.com/agent0ai/depfix/blob/main/docs/reference/cli.md) |
+| Review security assumptions | [Threat model](https://github.com/agent0ai/depfix/blob/main/docs/operations/threat-model.md) |
+| Diagnose a failure | [Troubleshooting](https://github.com/agent0ai/depfix/blob/main/docs/guides/troubleshooting.md) |
+
+Browse the complete [documentation map](https://github.com/agent0ai/depfix/tree/main/docs).
+
+## Created by agent0ai
+
+Depfix is an open-source project by [agent0ai](https://github.com/agent0ai), creator of
+[Agent Zero](https://github.com/agent0ai/agent-zero), [Space Agent](https://github.com/agent0ai/space-agent), and
+[DOX](https://github.com/agent0ai/dox).
+
+- Found a bug or compatibility gap? [Open an issue](https://github.com/agent0ai/depfix/issues).
+- Want to contribute? Read [CONTRIBUTING.md](https://github.com/agent0ai/depfix/blob/main/CONTRIBUTING.md).
+- Preparing a release? Follow [RELEASING.md](https://github.com/agent0ai/depfix/blob/main/RELEASING.md).
+- Want to support agent0ai's work? [Sponsor on GitHub](https://github.com/sponsors/agent0ai).
+
+## License status
+
+No license has been selected yet. Until the owner adds an explicit `LICENSE`, the source is publicly visible but no open-
+source license grant should be assumed. License selection remains a blocker for the first public release.

depfix-0.1.0/RELEASING.md

@@ -0,0 +1,40 @@
+# Release checklist
+
+No command or workflow in this repository publishes automatically. The first accepted upload is the definitive PyPI name
+allocation.
+
+## Owner-controlled blockers
+
+- [ ] Choose and add an owner-approved `LICENSE`; update PEP 621 license metadata and classifiers.
+- [x] Record `agent0ai` as project owner in package metadata.
+- [x] Record the owner-specified canonical source, documentation, issue, and changelog URLs.
+- [ ] Apply [the prepared GitHub About metadata](.github/REPOSITORY_METADATA.md) in repository settings.
+- [ ] Run `python scripts/name_preflight.py`; confirm the normalized `depfix` name with PyPI. A missing page is not a
+  reservation guarantee. Do not upload an empty placeholder.
+- [ ] Configure protected `testpypi` and `pypi` repository environments with required reviewers.
+- [ ] Configure matching TestPyPI/PyPI trusted publishers for the workflow and environment names.
+- [ ] Add the private security reporting contact to `SECURITY.md`.
+
+## Candidate validation
+
+- [ ] Update `_version.py` and `CHANGELOG.md`; confirm no unintended API/manifest format change.
+- [ ] Run `python scripts/release_check.py` on a clean connected host.
+- [ ] Review the printed wheel/sdist SHA-256 values and archive inventories.
+- [ ] Confirm the wheel is `py3-none-any`, contains `py.typed` and schemas, and contains no tests, caches, credentials,
+  third-party packages, uv binaries, or project manifests.
+- [ ] Install the exact wheel locally and verify `import depfix`, `depfix --help`, `depfix --version`, uv discovery, one live
+  import, and one export/install/offline run.
+- [ ] Confirm CI passes Windows, macOS, Linux, supported Python versions, minimum uv, current uv, build, and clean-wheel jobs.
+
+## TestPyPI (explicit manual workflow)
+
+- [ ] Invoke `Publish TestPyPI` manually for the reviewed commit.
+- [ ] Install from TestPyPI while sourcing dependencies from PyPI, then repeat CLI/live/prepared checks.
+- [ ] Verify rendered metadata, README, files, and dependency declarations.
+
+## PyPI (explicit manual workflow)
+
+- [ ] Create and push the deliberate signed/annotated release tag according to owner policy.
+- [ ] Invoke `Publish PyPI` manually with that tag and pass the protected-environment approval.
+- [ ] Verify the PyPI page, artifact hashes, `pip install depfix`, `depfix --version`, uv installation, and a basic live import.
+- [ ] Create the repository-host release from the same tag and changelog entry.

depfix-0.1.0/SECURITY.md

@@ -0,0 +1,24 @@
+# Security policy
+
+## Supported versions
+
+Until the first public release, only the current `0.1.x` source line receives security fixes. This document will be updated
+when another maintained line exists.
+
+## Reporting
+
+There is no owner-approved private security contact in the repository. Before publication, the owner must add the intended
+private reporting channel. Until then, do not post live credentials, private index URLs, proprietary packages, or exploit
+details in a public issue; contact the repository owner through an already established private channel.
+
+Include the Depfix version, Python/uv versions, platform, source kind, frozen/offline state, and a minimal redacted
+reproduction. `depfix doctor --json` is useful after review.
+
+## Scope
+
+Relevant issues include artifact/manifest/bundle verification bypasses, archive traversal or links, credential disclosure,
+unexpected network access in offline mode, resolution in frozen mode, cache race/collision attacks, ambient dependency
+leaks, and unsafe native-module loading. Malicious behavior inherent to intentionally executed third-party Python code is
+outside the isolation claim, though validation escapes remain in scope.
+
+See [the threat model](docs/operations/threat-model.md) for controls and residual risks.

depfix-0.1.0/docs/AGENTS.md

@@ -0,0 +1,35 @@
+# Documentation
+
+## Purpose
+
+- Explain Depfix to users, operators, contributors, and runtime implementers beyond the README quick path.
+
+## Ownership
+
+- This tree owns API, CLI, architecture, resolution, realm, deployment, security, migration, troubleshooting, verification, and research documentation.
+
+## Local Contracts
+
+- Describe shipped behavior in the present tense and label proposals or experiments explicitly.
+- Keep commands executable from the repository root unless a document says otherwise.
+- Link to the canonical contract rather than duplicating long normative details.
+
+## Work Guidance
+
+- Organize durable product concepts into named folders with their own DOX contracts.
+- Keep the root README concise; move deep operational and internal explanations here.
+
+## Verification
+
+- Check relative links and run the commands a changed guide promises when practical.
+
+## Child DOX Index
+
+- [`concepts/AGENTS.md`](concepts/AGENTS.md) — core technical concepts, each in an independent folder.
+- [`guides/AGENTS.md`](guides/AGENTS.md) — task-oriented onboarding and troubleshooting.
+- [`operations/AGENTS.md`](operations/AGENTS.md) — security and verification procedures.
+- [`project/AGENTS.md`](project/AGENTS.md) — implementation records and historical baselines.
+- [`reference/AGENTS.md`](reference/AGENTS.md) — exact Python and CLI interfaces.
+- [`research/AGENTS.md`](research/AGENTS.md) — explicitly non-shipping design research.
+
+`README.md` is the human documentation index and remains owned by this parent.

depfix-0.1.0/docs/README.md

@@ -0,0 +1,19 @@
+# Depfix documentation
+
+Start with the [getting-started guide](guides/getting-started.md), then use this map to go deeper.
+
+| I want to… | Start here |
+| --- | --- |
+| Load two versions in one process | [Import realms](concepts/import-realms/) |
+| Understand how a request becomes an exact graph | [Resolution](concepts/resolution/) |
+| Understand downloaded and extracted package state | [Artifacts and cache](concepts/artifacts-and-cache/) |
+| Prepare reproducible or offline execution | [Deployment](concepts/deployment/) |
+| Inspect the lock format | [Resolved manifests](concepts/manifests/) |
+| Look up Python calls | [Python API](reference/api.md) |
+| Look up commands | [CLI reference](reference/cli.md) |
+| Fix an error | [Troubleshooting](guides/troubleshooting.md) |
+| Review safety boundaries | [Threat model](operations/threat-model.md) |
+| Validate a change or release | [Verification](operations/verification.md) |
+
+The [research area](research/) contains forward-looking import-system work and is not a promise of shipped behavior. The
+[project records](project/) preserve implementation audits without mixing historical detail into user guidance.

depfix-0.1.0/docs/concepts/AGENTS.md

@@ -0,0 +1,30 @@
+# Core concepts
+
+## Purpose
+
+- Separate Depfix's stable technical ideas into independently understandable and maintainable domains.
+
+## Ownership
+
+- Each child folder owns one concept, its boundaries, and links to deeper reference material.
+
+## Local Contracts
+
+- Concept docs explain why the system is shaped this way; references define exact syntax and guides define tasks.
+- A concept folder must remain useful when read independently with the parent documentation index.
+
+## Work Guidance
+
+- Keep concept boundaries narrow and add cross-links where a workflow crosses domains.
+
+## Verification
+
+- Compare concept claims with implementation tests and the current public API.
+
+## Child DOX Index
+
+- [`artifacts-and-cache/AGENTS.md`](artifacts-and-cache/AGENTS.md) — immutable content, verification, and materialization.
+- [`deployment/AGENTS.md`](deployment/AGENTS.md) — live, prepared, and air-gapped operation.
+- [`import-realms/AGENTS.md`](import-realms/AGENTS.md) — runtime identity and dependency isolation.
+- [`manifests/AGENTS.md`](manifests/AGENTS.md) — deterministic resolved graph records.
+- [`resolution/AGENTS.md`](resolution/AGENTS.md) — source normalization, selection, inspection, and uv.

depfix-0.1.0/docs/concepts/artifacts-and-cache/AGENTS.md

@@ -0,0 +1,24 @@
+# Artifacts and cache
+
+## Purpose
+
+- Document immutable package content, integrity checks, and safe local materialization.
+
+## Ownership
+
+- This folder owns the content-addressed cache model and artifact lifecycle.
+
+## Local Contracts
+
+- Blob identity is SHA-256 content identity; completed extracted targets are environment-specific and read-only.
+- Cache mutation uses bounded input, locks, temporary construction, verification, and atomic promotion.
+
+## Work Guidance
+
+- Distinguish immutable artifacts from realm nodes and request-resolution entries.
+
+## Verification
+
+- Use cache, wheel-safety, bundle, and concurrency tests for changed claims.
+
+## Child DOX Index