flightdeck-connect 0.1.0__tar.gz

flightdeck_connect-0.1.0/PKG-INFO

@@ -0,0 +1,205 @@
+Metadata-Version: 2.4
+Name: flightdeck-connect
+Version: 0.1.0
+Summary: The MCP rail for NorthGate AI FlightDeck — provision governed MCP tools into Claude Code, Cursor, and Codex; run governed agent lanes; verify signed evidence packs offline.
+Author-email: NorthGate Strategic LLC <support@northgatestrategic.com>
+License: Proprietary
+Project-URL: Homepage, https://ai-flightdeck.com
+Project-URL: Company, https://airecai.com
+Keywords: ai,agents,mcp,model-context-protocol,ai-flightdeck,evidence,verification,audit,conductor
+Classifier: Development Status :: 4 - Beta
+Classifier: Intended Audience :: Developers
+Classifier: License :: Other/Proprietary License
+Classifier: Operating System :: OS Independent
+Classifier: Programming Language :: Python :: 3
+Classifier: Programming Language :: Python :: 3.8
+Classifier: Programming Language :: Python :: 3.9
+Classifier: Programming Language :: Python :: 3.10
+Classifier: Programming Language :: Python :: 3.11
+Classifier: Programming Language :: Python :: 3.12
+Classifier: Programming Language :: Python :: 3.13
+Classifier: Topic :: Software Development :: Libraries :: Python Modules
+Classifier: Topic :: System :: Systems Administration
+Requires-Python: >=3.8
+Description-Content-Type: text/markdown
+Provides-Extra: dev
+Requires-Dist: pytest>=7.0; extra == "dev"
+
+# conductor-cli
+
+Agent CLI + Model Context Protocol server for **Conductor** — NorthGate's
+AI-assisted-delivery governance substrate.
+
+After `pip install conductor-cli` you get:
+
+- **`conductor`** — a stdlib-only HTTP client for the `/v1/conductor/*` API.
+- **`conductor-mcp`** — a stdio JSON-RPC Model Context Protocol server that
+  exposes **34 tools** (21 `conductor_*` + 13 `flightdeck_*`, scoped at
+  runtime via `MCP_TOOL_SET=flightdeck|conductor|all`) to MCP-aware agent
+  runtimes (Claude Code, Cursor, Codex, VS Code agents). The `flightdeck_*`
+  family implements the FlightDeck Agent Contract v1 loop —
+  `get_handoff → read_exam → prepare_workspace → submit_return`.
+- **`flightdeck-verify`** — standalone offline evidence-pack verifier
+  (stdlib-only; exit 0/1/2; `--json`).
+- **`flightdeck-gate`** — pre-merge git gate for verify-gated merges
+  (chain walk + accept-gate conjuncts + reference-transaction guard).
+
+## Install
+
+```bash
+pip install conductor-cli
+```
+
+Zero runtime dependencies (pure Python stdlib). Python 3.8+.
+
+## Auth
+
+The CLI authenticates one of two ways:
+
+| Header | Env var | Source |
+|---|---|---|
+| `X-Agent-Token` | `CONDUCTOR_AGENT_TOKEN` | Service token issued by `/v1/conductor/projects/{id}/agent-tokens`. Preferred for agents. |
+| `X-JWT-Token` | `CONDUCTOR_USER_JWT` | A standard TrustSHIELD access token. Fallback for humans. |
+
+```bash
+export CONDUCTOR_AGENT_TOKEN=cdtr_...
+conductor whoami
+```
+
+## CLI quickstart
+
+```bash
+# Probe auth + caller mode
+conductor whoami
+
+# Project + task ops
+conductor project list
+conductor project create --name "TrustSHIELD Conductor delivery"
+conductor task list --project <project-id>
+
+# Workflow transition (Policy Mesh gated)
+conductor transition TASK-0040 \
+    --action submit_review --to-state review_ready \
+    --actor-member-id <member-id> \
+    --reason "tests pass, ruff clean" \
+    --evidence gitlab_mr=https://gitlab.com/.../merge_requests/126
+
+# Release pack — download + offline verify
+conductor export --project <project-id> --out release.tar.gz
+conductor verify release.tar.gz
+# -> Exit 0 + "OK: pack integrity verified." == nothing tampered.
+```
+
+`conductor --help` lists every subcommand. `--json` on any command gives
+machine-readable output for scripting; the default is friendly text.
+
+## Local board mode
+
+Local board mode is the zero-cloud bridge for IDEs. It operates directly on a
+filesystem board folder:
+
+```text
+<Project Conductor folder>/queue/TASK-*.md
+```
+
+No `CONDUCTOR_AGENT_TOKEN` or `CONDUCTOR_USER_JWT` is required.
+
+```bash
+BOARD="C:/Users/ericg/OneDrive - NorthGate Strategic LLC/Project Conductor"
+
+conductor --json local list --board "$BOARD"
+conductor --json local list --board "$BOARD" --state READY
+conductor --json local read TASK-0001 --board "$BOARD"
+conductor local handoff TASK-0001 --board "$BOARD"
+```
+
+Create and update packets:
+
+```bash
+conductor --json local create \
+  --board "$BOARD" \
+  --title "Audit the installer handoff" \
+  --objective "Verify artifacts and append evidence." \
+  --owner Codex \
+  --reviewer "Claude Code"
+
+conductor --json local signal TASK-0001 \
+  --board "$BOARD" \
+  --state REVIEW_READY \
+  --action submit_review \
+  --verdict "Audit completed; report attached." \
+  --next "Reviewer checks the evidence and accepts or requests changes."
+```
+
+## MCP server (Claude Code / Cursor / Codex)
+
+The `conductor-mcp` script implements the Model Context Protocol
+(2024-11-05) over stdio. Sample config snippets:
+
+**Claude Code** (`~/.config/claude/claude_desktop_config.json` or project-
+level `.mcp.json`):
+
+```json
+{
+  "mcpServers": {
+    "conductor": {
+      "command": "conductor-mcp",
+      "env": {
+        "CONDUCTOR_AGENT_TOKEN": "cdtr_..."
+      }
+    }
+  }
+}
+```
+
+**Cursor** (`~/.cursor/mcp.json`):
+
+```json
+{
+  "mcpServers": {
+    "conductor": {
+      "command": "conductor-mcp",
+      "env": {
+        "CONDUCTOR_AGENT_TOKEN": "cdtr_..."
+      }
+    }
+  }
+}
+```
+
+After restart, the agent's tool list includes 21 `conductor_*` tools —
+`conductor_project_list`, `conductor_transition`, `conductor_export`,
+`conductor_verify`, plus local-board tools such as `conductor_local_list`
+and `conductor_local_signal`. Tool-execution failures surface as
+`isError: true` in the MCP response (per spec); protocol/transport
+failures use the JSON-RPC error channel.
+
+## Custom API endpoint
+
+If you're targeting an environment other than the default
+(`https://airec-api-dxol6hwotq-uk.a.run.app`):
+
+```bash
+export CONDUCTOR_API_BASE=https://your-conductor-api.example.com
+# OR pass per-invocation:
+conductor --api-base https://your-conductor-api.example.com whoami
+```
+
+## Offline pack verification
+
+`conductor verify <pack.tar.gz>` works without API access. It extracts the
+archive in a temp dir, walks `SHA256SUMS` to verify every file's hash, then
+walks `audit-chain/chain.jsonl` to confirm per-tenant chain integrity
+(monotonic `chain_position` + `prev_event_hash` threading). Either kind of
+tampering surfaces a non-zero exit and a specific error.
+
+The check is identical to the embedded `audit-chain/verify.py` script that
+ships inside every pack — `conductor verify` is the more convenient
+hand-typed form.
+
+## Source
+
+Mirror of `packages/api/src/conductor/{cli,mcp}.py` from the upstream
+TrustSHIELD repo. See
+[Conductor-Build-Plan-2026-05-23.md](https://gitlab.com/dcairecai-group/erics-workspace)
+sections 4.2 + 5 for the full design.

flightdeck_connect-0.1.0/README.md

@@ -0,0 +1,178 @@
+# conductor-cli
+
+Agent CLI + Model Context Protocol server for **Conductor** — NorthGate's
+AI-assisted-delivery governance substrate.
+
+After `pip install conductor-cli` you get:
+
+- **`conductor`** — a stdlib-only HTTP client for the `/v1/conductor/*` API.
+- **`conductor-mcp`** — a stdio JSON-RPC Model Context Protocol server that
+  exposes **34 tools** (21 `conductor_*` + 13 `flightdeck_*`, scoped at
+  runtime via `MCP_TOOL_SET=flightdeck|conductor|all`) to MCP-aware agent
+  runtimes (Claude Code, Cursor, Codex, VS Code agents). The `flightdeck_*`
+  family implements the FlightDeck Agent Contract v1 loop —
+  `get_handoff → read_exam → prepare_workspace → submit_return`.
+- **`flightdeck-verify`** — standalone offline evidence-pack verifier
+  (stdlib-only; exit 0/1/2; `--json`).
+- **`flightdeck-gate`** — pre-merge git gate for verify-gated merges
+  (chain walk + accept-gate conjuncts + reference-transaction guard).
+
+## Install
+
+```bash
+pip install conductor-cli
+```
+
+Zero runtime dependencies (pure Python stdlib). Python 3.8+.
+
+## Auth
+
+The CLI authenticates one of two ways:
+
+| Header | Env var | Source |
+|---|---|---|
+| `X-Agent-Token` | `CONDUCTOR_AGENT_TOKEN` | Service token issued by `/v1/conductor/projects/{id}/agent-tokens`. Preferred for agents. |
+| `X-JWT-Token` | `CONDUCTOR_USER_JWT` | A standard TrustSHIELD access token. Fallback for humans. |
+
+```bash
+export CONDUCTOR_AGENT_TOKEN=cdtr_...
+conductor whoami
+```
+
+## CLI quickstart
+
+```bash
+# Probe auth + caller mode
+conductor whoami
+
+# Project + task ops
+conductor project list
+conductor project create --name "TrustSHIELD Conductor delivery"
+conductor task list --project <project-id>
+
+# Workflow transition (Policy Mesh gated)
+conductor transition TASK-0040 \
+    --action submit_review --to-state review_ready \
+    --actor-member-id <member-id> \
+    --reason "tests pass, ruff clean" \
+    --evidence gitlab_mr=https://gitlab.com/.../merge_requests/126
+
+# Release pack — download + offline verify
+conductor export --project <project-id> --out release.tar.gz
+conductor verify release.tar.gz
+# -> Exit 0 + "OK: pack integrity verified." == nothing tampered.
+```
+
+`conductor --help` lists every subcommand. `--json` on any command gives
+machine-readable output for scripting; the default is friendly text.
+
+## Local board mode
+
+Local board mode is the zero-cloud bridge for IDEs. It operates directly on a
+filesystem board folder:
+
+```text
+<Project Conductor folder>/queue/TASK-*.md
+```
+
+No `CONDUCTOR_AGENT_TOKEN` or `CONDUCTOR_USER_JWT` is required.
+
+```bash
+BOARD="C:/Users/ericg/OneDrive - NorthGate Strategic LLC/Project Conductor"
+
+conductor --json local list --board "$BOARD"
+conductor --json local list --board "$BOARD" --state READY
+conductor --json local read TASK-0001 --board "$BOARD"
+conductor local handoff TASK-0001 --board "$BOARD"
+```
+
+Create and update packets:
+
+```bash
+conductor --json local create \
+  --board "$BOARD" \
+  --title "Audit the installer handoff" \
+  --objective "Verify artifacts and append evidence." \
+  --owner Codex \
+  --reviewer "Claude Code"
+
+conductor --json local signal TASK-0001 \
+  --board "$BOARD" \
+  --state REVIEW_READY \
+  --action submit_review \
+  --verdict "Audit completed; report attached." \
+  --next "Reviewer checks the evidence and accepts or requests changes."
+```
+
+## MCP server (Claude Code / Cursor / Codex)
+
+The `conductor-mcp` script implements the Model Context Protocol
+(2024-11-05) over stdio. Sample config snippets:
+
+**Claude Code** (`~/.config/claude/claude_desktop_config.json` or project-
+level `.mcp.json`):
+
+```json
+{
+  "mcpServers": {
+    "conductor": {
+      "command": "conductor-mcp",
+      "env": {
+        "CONDUCTOR_AGENT_TOKEN": "cdtr_..."
+      }
+    }
+  }
+}
+```
+
+**Cursor** (`~/.cursor/mcp.json`):
+
+```json
+{
+  "mcpServers": {
+    "conductor": {
+      "command": "conductor-mcp",
+      "env": {
+        "CONDUCTOR_AGENT_TOKEN": "cdtr_..."
+      }
+    }
+  }
+}
+```
+
+After restart, the agent's tool list includes 21 `conductor_*` tools —
+`conductor_project_list`, `conductor_transition`, `conductor_export`,
+`conductor_verify`, plus local-board tools such as `conductor_local_list`
+and `conductor_local_signal`. Tool-execution failures surface as
+`isError: true` in the MCP response (per spec); protocol/transport
+failures use the JSON-RPC error channel.
+
+## Custom API endpoint
+
+If you're targeting an environment other than the default
+(`https://airec-api-dxol6hwotq-uk.a.run.app`):
+
+```bash
+export CONDUCTOR_API_BASE=https://your-conductor-api.example.com
+# OR pass per-invocation:
+conductor --api-base https://your-conductor-api.example.com whoami
+```
+
+## Offline pack verification
+
+`conductor verify <pack.tar.gz>` works without API access. It extracts the
+archive in a temp dir, walks `SHA256SUMS` to verify every file's hash, then
+walks `audit-chain/chain.jsonl` to confirm per-tenant chain integrity
+(monotonic `chain_position` + `prev_event_hash` threading). Either kind of
+tampering surfaces a non-zero exit and a specific error.
+
+The check is identical to the embedded `audit-chain/verify.py` script that
+ships inside every pack — `conductor verify` is the more convenient
+hand-typed form.
+
+## Source
+
+Mirror of `packages/api/src/conductor/{cli,mcp}.py` from the upstream
+TrustSHIELD repo. See
+[Conductor-Build-Plan-2026-05-23.md](https://gitlab.com/dcairecai-group/erics-workspace)
+sections 4.2 + 5 for the full design.

flightdeck_connect-0.1.0/pyproject.toml

@@ -0,0 +1,105 @@
+[build-system]
+requires = ["setuptools>=68.0", "wheel"]
+build-backend = "setuptools.build_meta"
+
+[project]
+# PyPI distribution name is flightdeck-connect (the marketed on-ramp:
+# `pip install flightdeck-connect`). "conductor-cli" was unavailable on
+# PyPI (third-party AGPL project), and the canon (docs 2026-07-26)
+# keeps conductor-* for internal paths/imports only — the import
+# package stays `conductor`, all five console-script names unchanged.
+name = "flightdeck-connect"
+version = "0.1.0"
+description = "The MCP rail for NorthGate AI FlightDeck — provision governed MCP tools into Claude Code, Cursor, and Codex; run governed agent lanes; verify signed evidence packs offline."
+readme = "README.md"
+license = { text = "Proprietary" }
+requires-python = ">=3.8"
+authors = [
+    { name = "NorthGate Strategic LLC", email = "support@northgatestrategic.com" }
+]
+keywords = [
+    "ai", "agents", "mcp", "model-context-protocol", "ai-flightdeck",
+    "evidence", "verification", "audit", "conductor"
+]
+classifiers = [
+    "Development Status :: 4 - Beta",
+    "Intended Audience :: Developers",
+    "License :: Other/Proprietary License",
+    "Operating System :: OS Independent",
+    "Programming Language :: Python :: 3",
+    "Programming Language :: Python :: 3.8",
+    "Programming Language :: Python :: 3.9",
+    "Programming Language :: Python :: 3.10",
+    "Programming Language :: Python :: 3.11",
+    "Programming Language :: Python :: 3.12",
+    "Programming Language :: Python :: 3.13",
+    "Topic :: Software Development :: Libraries :: Python Modules",
+    "Topic :: System :: Systems Administration",
+]
+
+# Intentionally zero runtime dependencies. The CLI + MCP server use
+# pure Python stdlib (argparse, urllib, json, tarfile, hashlib, etc.)
+# so install is fast and dependency conflicts are impossible.
+dependencies = []
+
+[project.optional-dependencies]
+# Test-only deps. `pip install flightdeck-connect[dev]` to run the smoke
+# tests bundled in the source tree.
+dev = [
+    "pytest>=7.0",
+]
+
+[project.scripts]
+# `conductor` — the HTTP client CLI.
+#   $ conductor whoami
+#   $ conductor project list
+#   $ conductor transition TASK-0040 --action submit_review --to-state review_ready ...
+conductor = "conductor.cli:main"
+
+# `conductor-mcp` — the stdio JSON-RPC MCP server.
+#   In a Claude Code / Cursor / VS Code agent's MCP config:
+#     {
+#       "mcpServers": {
+#         "conductor": {
+#           "command": "conductor-mcp",
+#           "env": { "CONDUCTOR_AGENT_TOKEN": "cdtr_..." }
+#         }
+#       }
+#     }
+conductor-mcp = "conductor.mcp:main"
+
+# `flightdeck-verify` — the standalone offline evidence-pack verifier
+# (the community wedge: "check what an AI agent claims it did" as a
+# one-liner; no API access, no account, stdlib only).
+#   $ flightdeck-verify release-pack.tar.gz
+#   $ flightdeck-verify release-pack.tar.gz --json
+flightdeck-verify = "conductor.verify_pack:main"
+
+# `flightdeck-gate` — the verify-gated merge (Epic 1.5): a git
+# pre-merge-commit hook engine that refuses FlightDeck lane merges the
+# tamper-evident chain has not verified for EXACTLY the commit landing.
+#   $ flightdeck-gate install-hook --board <board> --repo <repo>
+#   $ flightdeck-gate check --board <board> --repo <repo> --head <sha>
+flightdeck-gate = "conductor.chain_gate:main"
+
+# `flightdeck-connect` — the river's first inch (2026-07-25): provision
+# the FlightDeck MCP server into the coding tools on this machine
+# (Claude Code project .mcp.json / Cursor mcp.json / `codex mcp add`),
+# by task profile (agent|cloud|operator -> MCP_TOOL_SET), idempotently,
+# chain-recording the provisioning when a board is given. Kimi is
+# detected and honestly reported as the file-handoff rail (its CLI
+# exposes no MCP surface today).
+#   $ flightdeck-connect --status
+#   $ flightdeck-connect --repo C:/proj --profile agent --board <board>
+flightdeck-connect = "conductor.connect:main"
+
+[project.urls]
+"Homepage" = "https://ai-flightdeck.com"
+"Company" = "https://airecai.com"
+
+[tool.setuptools]
+package-dir = { "" = "src" }
+
+[tool.setuptools.packages.find]
+where = ["src"]
+include = ["conductor*"]

flightdeck_connect-0.1.0/setup.cfg

@@ -0,0 +1,4 @@
+[egg_info]
+tag_build = 
+tag_date = 0
+

flightdeck_connect-0.1.0/src/conductor/__init__.py

@@ -0,0 +1,46 @@
+"""
+Conductor CLI + MCP server — standalone PyPI distribution.
+
+This is the agent-facing entry point to the Conductor substrate
+(https://gitlab.com/dcairecai-group/erics-workspace, packages/api/
+src/conductor/*). It ships FOUR console scripts:
+
+    conductor         — the stdlib-only HTTP client for /v1/conductor/*
+    conductor-mcp     — the stdio JSON-RPC Model Context Protocol server
+                         (34 tools: 21 conductor_* + 13 flightdeck_*,
+                         scoped at runtime via MCP_TOOL_SET)
+    flightdeck-verify — standalone offline evidence-pack verifier
+    flightdeck-gate   — pre-merge git gate (verify-gated merge hook)
+
+After `pip install conductor-cli`, an agent's MCP config (Claude
+Code / Cursor / Codex) can point at `conductor-mcp` (or
+`python -m conductor.mcp`) and the tools appear in the agent's tool
+list — including the FlightDeck Agent Contract v1 loop
+(get_handoff -> read_exam -> prepare_workspace -> submit_return;
+see docs/spec/agent-contract.md).
+
+This package is intentionally minimal:
+  - Pure Python stdlib. No third-party deps.
+  - Python 3.8+ supported (the embedded release-pack verifier runs
+    on even older interpreters, but this package targets 3.8+ to
+    match the CLI's tarfile filter='data' fallback path).
+  - Source modules: cli.py + mcp.py (upstream mirrors) plus the
+    package-native local_board.py, verifier.py, workspaces.py,
+    policy.py, verify_pack.py, chain_gate.py.
+
+Source-of-truth provenance:
+  The canonical copies of cli.py + mcp.py live at
+  `packages/api/src/conductor/{cli,mcp}.py` in the upstream repo.
+  THIS package's copies are MIRRORS — when the upstream files
+  change, mirror the change here too. A drift-guard test in the
+  upstream repo (packages/api/tests/test_conductor_cli_mirror.py
+  — added alongside this package) sha256-compares the two copies
+  and fails CI if they diverge. (Known drift to reconcile at next
+  upstream sync: mcp.py SERVER_VERSION "0.5.0" vs package 0.1.0.)
+  The remaining modules are package-native — this package is their
+  canonical home.
+"""
+
+__version__ = "0.1.0"
+
+__all__ = ["__version__"]