flowspec2 1.0.0__tar.gz

flowspec2-1.0.0/.gitignore

@@ -0,0 +1,29 @@
+# Python
+__pycache__/
+*.py[cod]
+*.egg-info/
+.eggs/
+build/
+dist/
+
+# venv / uv
+.venv/
+
+# local environment files
+.env*
+
+# tooling caches
+.pytest_cache/
+.ruff_cache/
+.mypy_cache/
+
+# OS
+.DS_Store
+
+# editors
+.idea/
+.vscode/
+
+# Local harness documentation
+/AGENTS.md
+/CLAUDE.md

flowspec2-1.0.0/CHANGELOG.md

@@ -0,0 +1,178 @@
+<!-- section:toc -->
+
+Table of Contents:
+
+- Unreleased: 24 <!-- section:unreleased -->
+- Version 1.0.0 — 2026-07-16: 29 <!-- section:version-1-0-0 -->
+    - Added: 33 <!-- section:version-1-0-0-added -->
+    - Changed: 60 <!-- section:version-1-0-0-changed -->
+    - Security: 119 <!-- section:version-1-0-0-security -->
+- Version 0.2.0 — prepared 2026-07-13, not published: 134 <!-- section:version-0-2-0 -->
+    - Added: 138 <!-- section:version-0-2-0-added -->
+    - Changed: 155 <!-- section:version-0-2-0-changed -->
+    - Security: 170 <!-- section:version-0-2-0-security -->
+
+<!-- /section:toc -->
+
+# Changelog
+
+All notable project changes are recorded here. Versioning follows
+[VERSIONING.md](docs/VERSIONING.md).
+
+<!-- section:unreleased -->
+
+## Unreleased
+
+<!-- /section:unreleased -->
+<!-- section:version-1-0-0 -->
+
+## Version 1.0.0 — 2026-07-16
+
+<!-- section:version-1-0-0-added -->
+
+### Added
+
+- Public contribution, conduct, citation, issue, and pull-request contracts for
+  the stable open-source release.
+- Public support routing for usage questions, reproducible defects, proposals,
+  and private vulnerability reports.
+- Deterministic GitHub Pages publication that resolves every project-owned
+  schema and compatibility-profile identifier from canonical package sources.
+- Optional persisted `await_external.max_resends` enforcement with a host-facing
+  remaining-budget contract, atomic exhaustion rejection, and backward-compatible
+  host-owned limiting when omitted.
+- Canonical detached Ed25519 authentication for fully replayed authoring
+  evidence, with Python and CLI signing and verification interfaces.
+- Content-addressed human presentation review for candidate route and prompt
+  prose, with a fixed public rubric, source-bound subjects, offline
+  verification, and detached reviewer authentication.
+- Canonical report-only operational evidence for model-specific routing and
+  extraction probes, bound to verified final sources, exact request contracts,
+  raw responses, and deterministic offline replay. Authored/counterfactual probe
+  pairs isolate the influence of trigger examples and extraction guidance.
+- Deterministic analytical lowering for the supported v3 preview subset, with
+  full v2 profile and compilation checks, policy-bound loss rehydration, stable
+  rejection diagnostics, and an exact preview fixed-point proof.
+
+<!-- /section:version-1-0-0-added -->
+<!-- section:version-1-0-0-changed -->
+
+### Changed
+
+- Converted the maintained source, schemas, runtime messages, examples,
+  documentation, fixtures, and tests to English. This intentionally replaces
+  Portuguese public identifiers and accepted aliases with explicit English
+  contracts, and adds a repository-wide regression check for language drift.
+- Moved project-owned schema and compatibility-profile identifiers to the
+  `wllsena.github.io/flowspec2` namespace, replaced operational-looking example
+  hosts with reserved domains, and removed internal editorial annotations.
+- Adopted PEP 639 license metadata and documented the stable package boundary
+  around `flowspec/2`, with `flowspec/3-draft` remaining experimental.
+- Removed repository-local harness doctrine and model integrations that depended
+  on non-public sibling tooling; the public package now exposes only its
+  self-contained transport and provider-neutral evidence contracts.
+- Documented the distinction between source-linked canonical IR and fully
+  expanded executable topology, including controlled execution cycles versus
+  forbidden dependency cycles and arbitrary author-defined loops.
+- Replaced the v3 preview's untyped passthrough map with ordered, immutable,
+  policy-classified migration loss entries; authored previews reject the
+  migration-only artifact, and localized awaits now account for resume and
+  timeout lifecycle rails. Loss categories now bind their allowed source paths
+  so category relabeling cannot authorize unrelated rehydration.
+- Separated graph assembly from schema relations, FlowSpec value contracts,
+  tool lifecycle validation, and external-resume validation.
+- Separated semantic orchestration from path, derive, predicate, state, and
+  schema contract groups while preserving diagnostic identity.
+- Separated Rasa import from export conversion.
+- Replaced hidden complete-source authoring equality with a versioned public
+  semantic acceptance contract, aggregate missing/mismatch/unexpected feedback,
+  and explicit variable presentation paths. Authoring case, corpus, provider
+  prompt, and evidence-envelope identities advanced together.
+- Expanded the conformance kit with gated-derivation traces for open and closed
+  guards, ignored gated input, ordered lookup, and declared fallback behavior.
+- Reused a compiled Draft 2020-12 validator while preserving best-match error
+  diagnostics, and made routing catalogs include non-exclusive trigger examples.
+- Advanced authoring acceptance, case, corpus, and provider-prompt contracts so
+  trigger examples and extraction hints are presence-checked but graded only by
+  report-only operational evidence.
+- Added manually dispatched CI and build-once release verification that uses a
+  pinned build backend, validates archive safety and installability, and
+  atomically preserves checksummed package artifacts for publication.
+- Added a tag-triggered release workflow that publishes the one verified
+  artifact set to PyPI through Trusted Publishing with attestations, then
+  attaches the same distributions and checksum manifest to a GitHub Release.
+- Bounded public runtime and optional dependencies to supported major lines and
+  added a machine-checked dependency-policy contract.
+- Updated the tested LangGraph floor and made the dependency-policy test verify
+  semantic bounds instead of rejecting valid patch upgrades.
+- Added grouped Dependabot updates for the uv lock and immutable GitHub Actions
+  references, with repository-wide tests enforcing both automation contracts.
+- Made runtime LLM system prompts deployment-neutral and configurable without
+  changing their closed routing or extraction schemas.
+- Expanded prior-art and compatibility analysis across current Rasa CALM,
+  Parlant, OpenDialog, Voiceflow, Botpress, Langflow, and Flowise capabilities,
+  with explicit format, runtime, and host ownership boundaries.
+
+<!-- /section:version-1-0-0-changed -->
+<!-- section:version-1-0-0-security -->
+
+### Security
+
+- Removed source, documentation, tests, packaging exceptions, and local harness
+  artifacts that referenced non-public development infrastructure.
+- Pinned the maintained `cryptography` implementation for Ed25519 operations;
+  private keys remain outside evidence and cannot be loaded from environment
+  files.
+- Restricted source-distribution discovery to an explicit public allowlist and
+  made package verification reject regular files outside that boundary.
+
+<!-- /section:version-1-0-0-security -->
+
+<!-- /section:version-1-0-0 -->
+<!-- section:version-0-2-0 -->
+
+## Version 0.2.0 — prepared 2026-07-13, not published
+
+<!-- section:version-0-2-0-added -->
+
+### Added
+
+- Closed structural, semantic, runtime-profile, and compilation diagnostics.
+- Canonical FlowIR contracts, digests, state compatibility, and declarative
+  active-state migration.
+- Typed tool, subflow, external-wait, observability, and HTTP backend contracts.
+- Rasa CALM and Open Workflow interoperability profiles with explicit loss
+  accounting.
+- Provider-neutral AI-authoring benchmark, packaged reference corpus,
+  conformance kit, Gemini transport, and closed structured-output projection.
+- Content-addressed authoring evidence with provider-reported effective model
+  versions and deterministic offline replay verification.
+- Locked cross-version CI and installed-package smoke tests.
+
+<!-- /section:version-0-2-0-added -->
+<!-- section:version-0-2-0-changed -->
+
+### Changed
+
+- Isolated evaluator-private benchmark oracles from author-facing requests.
+- Advanced the authoring evidence envelope to
+  `flowspec2/authoring-benchmark-evidence@2`.
+- Bound evidence to the configured correction protocol as well as exact
+  captures and execution contracts.
+- Separated the declarative CLI grammar from command handlers and I/O
+  boundaries.
+- Extracted closed local-reference and external-resume JSON Schema validation
+  from graph compilation.
+
+<!-- /section:version-0-2-0-changed -->
+<!-- section:version-0-2-0-security -->
+
+### Security
+
+- Required explicit network consent for live-model evaluation.
+- Excluded credentials and nondeterministic operational metadata from evidence.
+- Pinned CI actions and toolchains to immutable versions with read-only
+  repository permissions.
+
+<!-- /section:version-0-2-0-security -->
+<!-- /section:version-0-2-0 -->

flowspec2-1.0.0/CITATION.cff

@@ -0,0 +1,16 @@
+cff-version: 1.2.0
+message: "If you use flowspec2, cite the software using this metadata."
+title: flowspec2
+type: software
+version: 1.0.0
+date-released: 2026-07-16
+authors:
+  - name: wllsena
+repository-code: "https://github.com/wllsena/flowspec2"
+url: "https://github.com/wllsena/flowspec2"
+license: MIT
+keywords:
+  - conversational-ai
+  - workflow
+  - state-machine
+  - langgraph

flowspec2-1.0.0/CODE_OF_CONDUCT.md

@@ -0,0 +1,67 @@
+<!-- section:toc -->
+
+Table of Contents:
+
+- Our commitment: 17 <!-- section:commitment -->
+- Expected behavior: 27 <!-- section:expected-behavior -->
+- Unacceptable behavior: 38 <!-- section:unacceptable-behavior -->
+- Reporting: 50 <!-- section:reporting -->
+- Enforcement: 60 <!-- section:enforcement -->
+
+<!-- /section:toc -->
+
+# Code of Conduct
+
+<!-- section:commitment -->
+
+## Our commitment
+
+We are committed to a respectful, inclusive, and technically constructive
+community. Participation is welcome regardless of background, identity,
+experience, or viewpoint when it follows this code and the GitHub Community
+Guidelines.
+
+<!-- /section:commitment -->
+<!-- section:expected-behavior -->
+
+## Expected behavior
+
+- Discuss ideas and evidence rather than attacking people.
+- Give actionable feedback and accept correction in good faith.
+- Respect privacy, security boundaries, and coordinated disclosure.
+- Keep issues and pull requests relevant to the project.
+- Credit the work of others and disclose material conflicts of interest.
+
+<!-- /section:expected-behavior -->
+<!-- section:unacceptable-behavior -->
+
+## Unacceptable behavior
+
+- Harassment, threats, discrimination, or sexualized attention.
+- Publishing private information, credentials, or security details without
+  permission.
+- Deliberate disruption, impersonation, spam, or deceptive attribution.
+- Retaliation against someone who reports a concern in good faith.
+- Conduct that violates the GitHub Terms of Service or Community Guidelines.
+
+<!-- /section:unacceptable-behavior -->
+<!-- section:reporting -->
+
+## Reporting
+
+Report repository conduct concerns privately to the maintainer through the
+contact options on the [maintainer's GitHub profile](https://github.com/wllsena).
+Security vulnerabilities follow [SECURITY.md](SECURITY.md) instead. Reports are
+handled with the minimum disclosure needed to investigate and respond.
+
+<!-- /section:reporting -->
+<!-- section:enforcement -->
+
+## Enforcement
+
+The maintainer may edit or remove content, lock conversations, reject
+contributions, or restrict participation when necessary to protect the
+community. Decisions consider context, impact, prior behavior, and whether the
+participant takes responsibility and repairs harm.
+
+<!-- /section:enforcement -->

flowspec2-1.0.0/CONTRIBUTING.md

@@ -0,0 +1,89 @@
+<!-- section:toc -->
+
+Table of Contents:
+
+- Development setup: 21 <!-- section:development-setup -->
+- Contract changes: 38 <!-- section:contract-changes -->
+- Verification: 53 <!-- section:verification -->
+- Pull requests: 70 <!-- section:pull-requests -->
+- Security reports: 83 <!-- section:security-reports -->
+
+<!-- /section:toc -->
+
+# Contributing to flowspec2
+
+Thank you for improving flowspec2. Contributions must preserve the closed
+format boundary: authors describe valid conversational rails, and the runtime
+rejects behavior outside those declared contracts.
+
+<!-- section:development-setup -->
+
+## Development setup
+
+Clone the repository, install the locked environment, and run the project gate:
+
+```bash
+uv sync --extra dev
+make ci
+make package-check
+```
+
+Docker is required by the Pyright wrapper used by `make typecheck` and
+`make ci`. Live-model commands are optional, require explicit network consent,
+and are never part of the default test suite.
+
+<!-- /section:development-setup -->
+<!-- section:contract-changes -->
+
+## Contract changes
+
+Changes to public Python APIs, CLI output, JSON Schemas, format identifiers,
+runtime profiles, IR, evidence envelopes, or compatibility adapters must update
+their tests, documentation, callers, and changelog in the same contribution.
+Incompatible contracts receive a new versioned identifier; existing identifiers
+are never silently reinterpreted.
+
+Architecture decisions that change a public interface or impose migration cost
+require an ADR in `docs/adr/`. Experimental work remains isolated from the
+stable `flowspec/2` runtime contract.
+
+<!-- /section:contract-changes -->
+<!-- section:verification -->
+
+## Verification
+
+Before opening a pull request, run:
+
+```bash
+make ci
+make package-check
+```
+
+Add regression tests that exercise the real failure path. Do not skip, delete,
+or weaken a failing test to make a change pass. Generated package artifacts,
+credentials, environment files, and live-model evidence do not belong in the
+repository.
+
+<!-- /section:verification -->
+<!-- section:pull-requests -->
+
+## Pull requests
+
+Use a focused branch and a conventional-commit title. The pull request must
+explain what changed, why it changed, how it was verified, and how to roll it
+back. Keep unrelated refactors out of the diff and disclose AI assistance when
+it materially authored the change.
+
+By submitting a contribution, you agree that it may be distributed under the
+project's MIT License and that you have the right to contribute it.
+
+<!-- /section:pull-requests -->
+<!-- section:security-reports -->
+
+## Security reports
+
+Do not disclose a suspected vulnerability in a public issue. Follow
+[SECURITY.md](SECURITY.md) and remove credentials, private flow documents, and
+citizen data from every report and reproduction.
+
+<!-- /section:security-reports -->

flowspec2-1.0.0/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 wllsena
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.