hive-hub 0.1.1__tar.gz

hive_hub-0.1.1/.github/workflows/ci.yml

@@ -0,0 +1,134 @@
+name: Hive Hub release matrix
+
+on:
+  pull_request:
+  push:
+    branches:
+      - main
+      - release/v0.1.1
+  workflow_dispatch:
+
+permissions:
+  contents: read
+
+jobs:
+  organization-seeds:
+    name: Native RAPP Work organization seeds
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+      - uses: actions/setup-python@v5
+        with:
+          python-version: "3.11"
+      - uses: actions/checkout@v4
+        with:
+          repository: kody-w/rapp-work
+          ref: 29ead23b21645f8d7682ee00414930ffa9ce0ca6
+          path: .hive-hub/deps/rapp-work
+          persist-credentials: false
+      - uses: actions/checkout@v4
+        with:
+          repository: kody-w/rapp-1
+          ref: 591e014ad39e223b00ab343ae26e5d9a867ebeee
+          path: .hive-hub/deps/rapp-1
+          persist-credentials: false
+      - name: Verify exact packages and native organization/workspace initialization
+        run: python -B scripts/check_organization_seeds.py --exercise-native
+
+  python:
+    name: Python ${{ matrix.python }}
+    runs-on: ubuntu-latest
+    strategy:
+      fail-fast: false
+      matrix:
+        python: ["3.10", "3.11", "3.14"]
+    steps:
+      - uses: actions/checkout@v4
+      - uses: actions/setup-python@v5
+        with:
+          python-version: ${{ matrix.python }}
+      - name: Core and integrated adapter contracts
+        env:
+          PYTHONPATH: src:.
+        run: >-
+          python -B -m unittest -v
+          tests.test_contracts
+          tests.test_hub
+          tests.test_private_access
+          tests.test_safety_cli
+          tests.test_adapter_runtime
+          tests.test_release_integration
+          tests.test_organization_seeds
+      - name: Adapter conformance
+        run: python -B -m unittest discover -s adapters/tests -t . -v
+
+  skill:
+    name: Skill Python ${{ matrix.python }}
+    runs-on: ubuntu-latest
+    strategy:
+      fail-fast: false
+      matrix:
+        python: ["3.11", "3.14"]
+    steps:
+      - uses: actions/checkout@v4
+      - uses: actions/setup-python@v5
+        with:
+          python-version: ${{ matrix.python }}
+      - run: python -B -m unittest tests.test_hive_hub -v
+      - run: python -B scripts/check.py
+      - run: python -B scripts/prove.py
+
+  node-static:
+    name: Node ${{ matrix.node }}
+    runs-on: ubuntu-latest
+    strategy:
+      fail-fast: false
+      matrix:
+        node: ["20.18.1", "22"]
+    steps:
+      - uses: actions/checkout@v4
+      - uses: actions/setup-python@v5
+        with:
+          python-version: "3.11"
+      - uses: actions/setup-node@v4
+        with:
+          cache: npm
+          node-version: ${{ matrix.node }}
+      - run: npm ci --ignore-scripts --no-audit --no-fund
+      - run: npm run verify
+      - name: Browser-free local HTTP smoke
+        run: |
+          mkdir -p .hive-hub
+          python -m http.server 8123 --bind 127.0.0.1 >.hive-hub/http.log 2>&1 &
+          server_pid=$!
+          trap 'kill "$server_pid"' EXIT
+          for attempt in 1 2 3 4 5; do
+            curl -fsS http://127.0.0.1:8123/.well-known/hive-hub.json >/dev/null && break
+            sleep 1
+          done
+          node scripts/smoke-http.mjs --base http://127.0.0.1:8123/
+
+  release:
+    name: Release, privacy, and packaging
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+      - uses: actions/setup-python@v5
+        with:
+          python-version: "3.11"
+      - name: Deterministic inventories and privacy
+        run: |
+          python -B scripts/sync_integrated_release.py --check
+          python -B scripts/update_agent_lock.py --check
+          python -B scripts/build_release_manifest.py --check
+          python -B scripts/check_public_release.py
+          git diff --check
+      - name: Build and clean-install wheel and sdist
+        run: |
+          python -m pip install build
+          SOURCE_DATE_EPOCH=1789758971 python -m build
+          python scripts/normalize_sdist.py dist/hive_hub-0.1.1.tar.gz
+          python -m venv .hive-hub/ci-install
+          .hive-hub/ci-install/bin/python -m pip install --no-deps dist/hive_hub-0.1.1-py3-none-any.whl
+          .hive-hub/ci-install/bin/hive-hub --version
+          .hive-hub/ci-install/bin/python -c "import adapters, hive_hub; assert hive_hub.__version__ == '0.1.1'"

hive_hub-0.1.1/.github/workflows/pages.yml

@@ -0,0 +1,93 @@
+name: Verify and deploy static Hive Hub
+
+on:
+  pull_request:
+  push:
+    branches:
+      - main
+  workflow_dispatch:
+
+permissions:
+  contents: read
+
+concurrency:
+  group: pages-${{ github.ref }}
+  cancel-in-progress: true
+
+jobs:
+  verify:
+    permissions:
+      contents: read
+      pages: write
+    runs-on: ubuntu-latest
+    steps:
+      - name: Check out repository
+        uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4
+        with:
+          fetch-depth: 0
+
+      - name: Set up pinned Node.js
+        uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4
+        with:
+          cache: npm
+          node-version: 20.18.1
+
+      - name: Set up Python
+        uses: actions/setup-python@v5
+        with:
+          python-version: "3.11"
+
+      - name: Install build-only dependencies
+        run: npm ci --ignore-scripts --no-audit --no-fund
+
+      - name: Verify deterministic public surface
+        run: npm run verify
+
+      - name: Verify public privacy boundary
+        run: python -B scripts/check_public_release.py
+
+      - name: Verify receipt history against pull request base
+        if: github.event_name == 'pull_request'
+        env:
+          BASE_REF: ${{ github.base_ref }}
+        run: npm run check:receipts -- --base "origin/$BASE_REF"
+
+      - name: Verify receipt history against previous main
+        if: github.event_name == 'push'
+        run: npm run check:receipts -- --base HEAD^
+
+      - name: Require committed generated output
+        run: |
+          if test -n "$(git status --porcelain -- .nojekyll .well-known api hub index.html llms.txt)"; then
+            git status --short -- .nojekyll .well-known api hub index.html llms.txt
+            echo "Generated public output is not committed or is stale." >&2
+            exit 1
+          fi
+
+      - name: Build isolated Pages artifact
+        run: npm run build:site
+
+      - name: Configure Pages
+        if: github.event_name != 'pull_request'
+        uses: actions/configure-pages@983d7736d9b0ae728b81ab479565c72886d7745b # v5
+
+      - name: Upload Pages artifact
+        if: github.event_name != 'pull_request'
+        uses: actions/upload-pages-artifact@56afc609e74202658d3ffba0e8f6dda462b719fa # v3
+        with:
+          path: site
+
+  deploy:
+    if: github.event_name != 'pull_request'
+    needs: verify
+    permissions:
+      id-token: write
+      pages: write
+    environment:
+      name: github-pages
+      url: ${{ steps.deployment.outputs.page_url }}
+    runs-on: ubuntu-latest
+    steps:
+      - name: Deploy GitHub Pages
+        id: deployment
+        uses: actions/deploy-pages@d6db90164ac5ed86f2b6aed7e0febac5b3c0c03e # v4

hive_hub-0.1.1/.github/workflows/release.yml

@@ -0,0 +1,78 @@
+name: Publish to PyPI
+
+on:
+  push:
+    tags:
+      - "v*"
+  workflow_dispatch:
+
+permissions:
+  contents: read
+
+jobs:
+  build:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+      - uses: actions/setup-python@v5
+        with:
+          python-version: "3.11"
+
+      - name: Verify inventories, privacy, and the shipped examples
+        env:
+          PYTHONPATH: src:.
+        run: |
+          python -B scripts/sync_integrated_release.py --check
+          python -B scripts/update_agent_lock.py --check
+          python -B scripts/build_release_manifest.py --check
+          python -B scripts/check_public_release.py
+          python -B -m unittest tests.test_shipped_examples
+
+      - name: Confirm the tag matches the declared version
+        if: startsWith(github.ref, 'refs/tags/v')
+        run: |
+          declared="$(python -c 'import tomllib,pathlib; print(tomllib.loads(pathlib.Path("pyproject.toml").read_text())["project"]["version"])')"
+          tagged="${GITHUB_REF_NAME#v}"
+          if test "$declared" != "$tagged"; then
+            echo "Tag $GITHUB_REF_NAME does not match pyproject version $declared." >&2
+            exit 1
+          fi
+          echo "version=$declared" >> "$GITHUB_ENV"
+
+      - name: Build reproducible wheel and sdist
+        run: |
+          python -m pip install build
+          SOURCE_DATE_EPOCH=1789758971 python -m build
+          python scripts/normalize_sdist.py dist/*.tar.gz
+
+      - name: Clean-install the wheel and exercise the CLI
+        run: |
+          python -m venv .release-install
+          .release-install/bin/python -m pip install --no-deps dist/*.whl
+          .release-install/bin/hive-hub --version
+          .release-install/bin/hive-hub schema list > /dev/null
+          .release-install/bin/hive-hub chant parse \
+            "JUNIPER QUARTZ HARBOR BIRCH COBALT NOOK FLINT" > /dev/null
+          .release-install/bin/python -c "import adapters, hive_hub"
+          rm -rf .release-install
+
+      - uses: actions/upload-artifact@v4
+        with:
+          name: distributions
+          path: dist/
+
+  publish:
+    needs: build
+    runs-on: ubuntu-latest
+    environment:
+      name: pypi
+      url: https://pypi.org/p/hive-hub
+    permissions:
+      id-token: write
+    steps:
+      - uses: actions/download-artifact@v4
+        with:
+          name: distributions
+          path: dist/
+      - name: Publish with PyPI Trusted Publishing
+        uses: pypa/gh-action-pypi-publish@release/v1

hive_hub-0.1.1/.well-known/hive-hub.json

@@ -0,0 +1 @@
+{"apiVersion":"1.0.0","coreSchemas":{"path":"api/hive-hub/v1/core-schemas/index.json","ref":"sha256:865ad5a621a28236065dedbbbc8d0817ac4b51484c6c925aa63ebb32d57996dd","url":"https://kody-w.github.io/hive-hub/api/hive-hub/v1/core-schemas/index.json"},"globalSkill":{"path":"hub/skills/hive-network/SKILL.md","ref":"sha256:cac94774096b729cfdc7340b85baa62a5aac96ee7329d37db8e35beed277acf8","url":"https://kody-w.github.io/hive-hub/hub/skills/hive-network/SKILL.md"},"join":"https://kody-w.github.io/hive-hub/hub/join/","kind":"hive-hub-well-known","llms":"https://kody-w.github.io/hive-hub/llms.txt","pagesIndex":{"path":"api/hive-hub/v1/index.json","ref":"sha256:735470491b84f759fa2a85190a7e7108fb41a1171200f6b522c69d3a869288c2","url":"https://kody-w.github.io/hive-hub/api/hive-hub/v1/index.json"},"rawIndex":"https://raw.githubusercontent.com/kody-w/hive-hub/main/api/hive-hub/v1/index.json","release":{"path":"api/hive-hub/v1/releases/sha256/eb/eb4b8c33aeb9f33fc0f009bef4005e0619962a64dc7b1fbf5a8fd21984588a7e.json","ref":"sha256:eb4b8c33aeb9f33fc0f009bef4005e0619962a64dc7b1fbf5a8fd21984588a7e","url":"https://kody-w.github.io/hive-hub/api/hive-hub/v1/releases/sha256/eb/eb4b8c33aeb9f33fc0f009bef4005e0619962a64dc7b1fbf5a8fd21984588a7e.json"}}

hive_hub-0.1.1/AGENTS.md

@@ -0,0 +1,20 @@
+# Hive Hub engineering contract
+
+Hive Hub is protocol-neutral and equally usable by humans and any AI.
+
+- Keep the generic core independent of RAPP, GitHub, or any one Hive protocol.
+- Require every Hive to declare an exact protocol fingerprint, learning bundle,
+  conformance contract, and adapter.
+- Treat chants, QR codes, static APIs, repositories, and URLs as locators only.
+- Use existing source ACLs. Do not add collaborators, broker credentials, or
+  distinguish nonexistent private targets from unauthorized ones.
+- `acl-only` is the default. Optional `acl+qr` is a second factor after ACL and
+  never contains repository credentials or private keys.
+- Public builds must not read, hash, name, or publish private dialbooks.
+- Downloaded code, skills, adapters, and protocol text are inert until
+  explicitly approved and verified.
+- Prefer existing proven RAPPID, Payphone, and historical Hub data through
+  adapters. Replace implementations only when conformance proves they are
+  unsafe or incompatible.
+- Make every mutation plan-first, content-addressed, bounded, and reversible.
+

hive_hub-0.1.1/CHANGELOG.md

@@ -0,0 +1,32 @@
+# Changelog
+
+## 0.1.1 - 2026-09-18
+
+- Added protocol-neutral `hive-hub-chant/1` with deterministic seven-word
+  locators derived from a complete `dial:sha256:` Dial Record ID.
+- Corrected the public sample chant while preserving the original 0.1.0 source
+  URLs, release object, schemas, and device-local dialbook compatibility.
+- Added a versioned `hive-hub-dialbook/2` profile that separates aliases from
+  chants and cryptographically binds locator and declaration references.
+
+## 0.1.0 - 2026-09-18
+
+- Introduced the typed, standard-library-only `hive_hub` package and
+  `hive-hub` CLI.
+- Added closed canonical contracts and packaged JSON Schemas.
+- Added separated local/public/private dialbooks and collision-safe dialing.
+- Added inert protocol learning, adapter registration, join cards,
+  plan/apply/revert subscriptions, and one-card bootstrap.
+- Added mandatory ACL semantics and optional scope/epoch-bound `acl+qr`.
+- Added bounded no-follow storage, duplicate-key refusal, atomic no-replace
+  writes, clean JSON errors, and zero-network tests.
+- Integrated six exact-fingerprint stdlib adapters through a lazy, optional
+  core bridge and plan-first CLI registration.
+- Added the locked universal Agent Skill with exact core camera-AI card support
+  and repository-neutral verified join-contract detection.
+- Added the public-only deterministic static API, Pages join surface, release
+  metadata, published core schemas, dual QR cards, and append-only receipts.
+- Added deterministic source inventory, privacy scanning, packaging checks, and
+  Python/Node CI matrices.
+- Hardened Windows link verification with no-follow Win32 handle metadata so
+  ordinary files report one link and hardlinks fail closed.

hive_hub-0.1.1/LICENSE

@@ -0,0 +1,22 @@
+MIT License
+
+Copyright (c) 2026 Hive Hub contributors
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.
+

hive_hub-0.1.1/MANIFEST.in

@@ -0,0 +1,23 @@
+include AGENTS.md
+include CHANGELOG.md
+include LICENSE
+include package.json
+include package-lock.json
+include public-manifest.json
+include README.md
+include RELEASE_INVENTORY.md
+include llms.txt
+include .nojekyll
+recursive-include .github *.yml
+recursive-include .well-known *.json
+recursive-include api *.json *.svg
+recursive-include docs *.md
+recursive-include examples *.json *.md *.py
+recursive-include adapters *.json *.md *.py py.typed
+recursive-include hub *.css *.html *.js *.json
+recursive-include public-src *.json
+recursive-include release *.json
+recursive-include scripts *.mjs *.py
+recursive-include skills/hive-hub *.json *.md *.py
+recursive-include src/hive_hub/schema *.json
+recursive-include tests *.py