ideapress 0.1.0__tar.gz

ideapress-0.1.0/.editorconfig

@@ -0,0 +1,23 @@
+root = true
+
+[*]
+charset = utf-8
+end_of_line = lf
+insert_final_newline = true
+trim_trailing_whitespace = true
+indent_style = space
+indent_size = 4
+
+[*.py]
+indent_size = 4
+max_line_length = 100
+
+[*.{toml,yml,yaml,json}]
+indent_size = 2
+
+[*.md]
+trim_trailing_whitespace = false
+max_line_length = off
+
+[Makefile]
+indent_style = tab

ideapress-0.1.0/.github/workflows/ci.yml

@@ -0,0 +1,159 @@
+name: CI
+
+on:
+  push:
+    branches: [main]
+  pull_request:
+
+jobs:
+  format:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+      - uses: actions/setup-python@v5
+        with: { python-version: "3.12" }
+      - run: pip install ruff
+      - run: ruff format --check .
+
+  lint:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+      - uses: actions/setup-python@v5
+        with: { python-version: "3.12" }
+      - run: pip install ruff
+      - run: ruff check .
+
+  types:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+      - uses: actions/setup-python@v5
+        with: { python-version: "3.12" }
+      - run: pip install -e ".[dev]"
+      - run: mypy src tests
+
+  boundaries:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+      - uses: actions/setup-python@v5
+        with: { python-version: "3.12" }
+      - run: pip install -e ".[dev]"
+      - run: lint-imports
+
+  tests:
+    runs-on: ubuntu-latest
+    strategy:
+      matrix:
+        python-version: ["3.12", "3.13"]
+    steps:
+      - uses: actions/checkout@v4
+      - uses: actions/setup-python@v5
+        with: { python-version: "${{ matrix.python-version }}" }
+      - run: pip install -e ".[dev]"
+      - run: pytest -m "not live and not performance" --cov --cov-report=xml
+
+  tests-314-early-warning:
+    runs-on: ubuntu-latest
+    continue-on-error: true
+    steps:
+      - uses: actions/checkout@v4
+      - uses: actions/setup-python@v5
+        with: { python-version: "3.14" }
+      - run: pip install -e ".[dev]"
+      - run: pytest -m "not live and not performance"
+
+  db-matrix:
+    name: tests (PostgreSQL)
+    runs-on: ubuntu-latest
+    services:
+      postgres:
+        image: postgres:16
+        # Credentials and database name match `weightsdb.testing`'s documented default URL, so the
+        # service this job starts is the one the package looks for. The scaffold named a
+        # `postgres`/`postgres` server nothing ever connected to, and passed it as
+        # `DATABASE_URL` — a variable `temporary_postgres` does not read — in the bare
+        # `postgresql://` form, which resolves to the psycopg2 driver this project does not
+        # install. LoadCoach fixed the same three defects in its own job.
+        env:
+          POSTGRES_USER: weightsdb
+          POSTGRES_PASSWORD: weightsdb
+          POSTGRES_DB: weightsdb_test
+        ports: ["5432:5432"]
+        options: >-
+          --health-cmd "pg_isready -U weightsdb -d weightsdb_test" --health-interval 5s --health-timeout 5s --health-retries 10
+    steps:
+      - uses: actions/checkout@v4
+      - uses: actions/setup-python@v5
+        with: { python-version: "3.12" }
+      - run: pip install -e ".[dev,postgres]"
+        # `-m integration` selects on a marker this repo never declares or applies, so it collected
+        # zero tests and exited 5 — the job would be red on every commit while appearing to test
+        # PostgreSQL (M4 handoff HR2, defect 2, which is why both siblings select by path).
+      - run: pytest -m "not live and not performance" tests/integration
+        env:
+          # A silently skipped dialect is an untested dialect: this turns the skip into a failure.
+          WEIGHTSDB_REQUIRE_POSTGRES: "1"
+          WEIGHTSDB_POSTGRES_URL: postgresql+psycopg://weightsdb:weightsdb@localhost:5432/weightsdb_test
+
+  coverage:
+    needs: [tests]
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+      - uses: actions/setup-python@v5
+        with: { python-version: "3.12" }
+      - run: pip install -e ".[dev]"
+      - run: pytest -m "not live and not performance" --cov --cov-report=term-missing --cov-fail-under=85
+
+  contracts:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+      - uses: actions/setup-python@v5
+        with: { python-version: "3.12" }
+      - run: pip install -e ".[dev]"
+      - run: pytest -m contract
+
+  security:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+        # gitleaks scans *history*, and `actions/checkout` fetches a single commit by default.
+        # For a push it is handed `<first-pushed>^..<last-pushed>`, so the parent of the first
+        # pushed commit has to be in the object store; in a depth-1 clone it is not, and git
+        # answers "unknown revision", which the action reports as exit code 1. It fails the same
+        # way whether or not a secret exists, so a green run would not have meant anything either.
+        with: { fetch-depth: 0 }
+      - uses: actions/setup-python@v5
+        with: { python-version: "3.12" }
+      - run: pip install pip-audit
+      - run: pip-audit
+      - uses: gitleaks/gitleaks-action@v2
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+
+  build:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+      - uses: actions/setup-python@v5
+        with: { python-version: "3.12" }
+      - run: pip install build twine
+      - run: python -m build
+      - run: twine check dist/*
+      - uses: actions/upload-artifact@v4
+        with: { name: dist, path: dist/ }
+
+  install-check:
+    needs: [build]
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+      - uses: actions/setup-python@v5
+        with: { python-version: "3.12" }
+      - uses: actions/download-artifact@v4
+        with: { name: dist, path: dist/ }
+      - run: pip install dist/*.whl
+      - run: python -c "import ideapress"

ideapress-0.1.0/.github/workflows/release.yml

@@ -0,0 +1,30 @@
+name: Release
+
+on:
+  push:
+    tags: ["v*.*.*"]
+
+permissions:
+  id-token: write   # required for PyPI Trusted Publishing
+  contents: write   # required to create the GitHub release
+
+jobs:
+  release:
+    runs-on: ubuntu-latest
+    environment: pypi
+    steps:
+      - uses: actions/checkout@v4
+      - uses: actions/setup-python@v5
+        with: { python-version: "3.12" }
+      - run: pip install build twine
+      - run: python -m build
+      - run: twine check dist/*
+      - run: pip install "dist/$(ls dist | grep .whl)[dev]"
+      - run: pytest -m "not live and not performance"
+      - name: Publish to PyPI
+        uses: pypa/gh-action-pypi-publish@release/v1
+      - name: Create GitHub release
+        uses: softprops/action-gh-release@v2
+        with:
+          generate_release_notes: true
+          files: dist/*

ideapress-0.1.0/.gitignore

@@ -0,0 +1,106 @@
+# ---- Python ----
+__pycache__/
+*.py[cod]
+*$py.class
+*.so
+.Python
+build/
+develop-eggs/
+dist/
+downloads/
+eggs/
+.eggs/
+lib/
+lib64/
+parts/
+sdist/
+var/
+wheels/
+*.egg-info/
+.installed.cfg
+*.egg
+MANIFEST
+
+# ---- Packaging / build backends ----
+pip-wheel-metadata/
+share/python-wheels/
+
+# ---- Testing / coverage ----
+.pytest_cache/
+.cache
+.coverage
+.coverage.*
+coverage.xml
+*.cover
+*.py,cover
+htmlcov/
+nosetests.xml
+.hypothesis/
+
+# ---- Type checking / linting ----
+.mypy_cache/
+.dmypy.json
+dmypy.json
+.ruff_cache/
+.pytype/
+
+# ---- Virtual environments ----
+.venv/
+venv/
+ENV/
+env/
+env.bak/
+venv.bak/
+.python-version
+
+# ---- Distribution / dependency locking ----
+# requirements/*.lock is deliberately NOT ignored. The lock files are committed
+# inputs: CI and release jobs install from them with --require-hashes (Packaging
+# and Release Standards §4, Security Standards §11), so an ignored lock file
+# means a checkout that cannot build.
+
+# ---- Editors / OS ----
+.vscode/
+.idea/
+*.swp
+*.swo
+.DS_Store
+Thumbs.db
+
+# ---- Suite runtime state (this component's local data) ----
+# The application writes to XDG paths at runtime (~/.config, ~/.local/share,
+# ~/.local/state per Master Architecture §1.2), never inside the repository.
+# These entries only guard against a developer pointing XDG_* at the repo
+# during local testing.
+.local/
+.config/
+*.sqlite3
+*.sqlite3-journal
+*.sqlite3-wal
+*.sqlite3-shm
+/data/
+/logs/
+/backups/
+/artifacts/
+/exports/
+
+# ---- Secrets ----
+# Per Security Standards §8: secrets are never committed. Config files may
+# only name where a secret comes from (*_env / *_file), never the value.
+.env
+.env.*
+*.key
+*.pem
+secrets.toml
+
+# ---- Node-free JS assets (MirrorWall consumers may still use a local tool) ----
+node_modules/
+
+# ---- Build artifacts from docs generation ----
+docs/api/openapi-v1.json.tmp
+
+# ---- Milestone evidence (transcripts, exports and hashes from a build run) ----
+# M7's exit condition is a demonstration, and the artefacts it produces — briefs, generated
+# documents, three export formats, hash comparisons, resident-model polls — are evidence for a
+# handoff, not source. They stay on disk for the reader of that handoff and out of the history.
+.m7-evidence/

ideapress-0.1.0/.importlinter

@@ -0,0 +1,40 @@
+[importlinter]
+root_package = ideapress
+include_external_packages = True
+
+[importlinter:contract:layers]
+name = IdeaPress internal layering
+type = layers
+layers =
+    web
+    cli
+    services
+    domain
+containers = ideapress
+
+[importlinter:contract:web-cli-independence]
+name = Web and CLI never import each other
+type = independence
+modules =
+    ideapress.web
+    ideapress.cli
+
+[importlinter:contract:domain-purity]
+name = Domain imports no frameworks
+type = forbidden
+source_modules = ideapress.domain
+forbidden_modules =
+    fastapi
+    starlette
+    sqlalchemy
+    typer
+    httpx
+    jinja2
+
+[importlinter:contract:no-other-applications]
+name = IdeaPress must not import other applications
+type = forbidden
+source_modules = ideapress
+forbidden_modules =
+    freeweight
+    loadcoach

ideapress-0.1.0/.pre-commit-config.yaml

@@ -0,0 +1,22 @@
+repos:
+  - repo: https://github.com/astral-sh/ruff-pre-commit
+    rev: v0.6.9
+    hooks:
+      - id: ruff
+        args: [--fix]
+      - id: ruff-format
+  - repo: https://github.com/pre-commit/pre-commit-hooks
+    rev: v4.6.0
+    hooks:
+      - id: trailing-whitespace
+      - id: end-of-file-fixer
+      - id: check-toml
+      - id: check-json
+      - id: check-added-large-files
+      - id: check-merge-conflict
+      - id: mixed-line-ending
+        args: [--fix=lf]
+  - repo: https://github.com/gitleaks/gitleaks
+    rev: v8.18.4
+    hooks:
+      - id: gitleaks

ideapress-0.1.0/CHANGELOG.md

@@ -0,0 +1,104 @@
+# Changelog
+
+All notable changes to `ideapress` are documented here.
+Format follows [Keep a Changelog](https://keepachangelog.com/en/1.1.0/); versioning follows
+[Semantic Versioning](https://semver.org/), pre-1.0 per
+packaging and release standards §3.
+
+## [Unreleased]
+
+### Added
+- `GET`/`PUT /settings`, `GET /workflows/{id}`, `POST /projects/{id}/units/{unit_id}/revise`, and
+  the `workflow` and `prompts` command groups — the four endpoints and two groups the specification
+  lists that the phases had not yet built.
+- Exporters for Markdown, HTML and JSON, byte-identical for the same committed project across
+  repeats, locales, timezones and hash seeds. The HTML is a single self-contained file with no
+  external reference of any kind, so it opens with no network.
+- Export format versioning, recorded on every export and embedded in every rendered document.
+- `GET`/`POST /projects/{id}/export`, `GET /export/formats`, and `ideapress export run|formats`.
+- The `project_review` stage: cross-unit consistency findings, advisory by design.
+- The open content-type registry, with `article` and `report` shipped.
+- Review: `audit_fast`, `audit_deep` (escalation only, once per unit per round), `critique` with
+  "leave it alone" as a first-class verdict, and `revise` bounded by the round limit or by
+  diminishing returns computed from deterministic finding counts. Which stop applied is recorded.
+- A revision that increases validation failures is rejected and the previous version kept.
+- Migration `0004`: `audit_findings`, `critiques`. The findings, their severity and evidence, and
+  what changed between rounds, on the unit page.
+- The core loop: draft, validate, repair (bounded, then pause the unit), coverage and an atomic
+  commit, with complete provenance on every committed version.
+- Migration `0003`: `unit_versions`, `validations`, `coverage`, `exports`.
+- The unit page and `ideapress unit list|show|history`, showing content, coverage, validation and
+  the attempts that produced it.
+- Deterministic validation: all seven families from workflows §4 — structural, length, format,
+  content constraints, reference integrity, consistency and safety — with failures classed blocking
+  or advisory, and no model involved anywhere.
+- Context assembly to a token budget, with the reduction order as data. Requirements and the unit
+  specification are never dropped; when they alone exceed the budget the stage fails carrying both
+  the required figure and the budget.
+- The stage runner: a background thread per stage, the unit state machine as a transition table,
+  persisted gap-free stage events, and SSE that replays from `Last-Event-ID` after a disconnect.
+- `POST /projects/{id}/plan`, `POST /projects/{id}/stages/{stage}/run`, the task and stream
+  endpoints, `GET /workflows`, and the plan page showing each requirement beside its quotation.
+- `ideapress plan build|show` and `ideapress stage run|list|status|cancel`.
+- Migration `0002`: `requirements`, `units`, `stage_runs`, `attempts`, `stage_events`.
+- Requirement compilation: every requirement carries a verbatim quotation from the author material,
+  and one that cannot be quoted is refused and shown as refused. Check kinds are a closed set of
+  literal-string and numeric comparisons; there is deliberately no pattern check.
+- The plan gate: every blocking requirement must be assigned to at least one unit, and an empty
+  requirement list or an empty plan does not satisfy it.
+- The inference port (`InferenceBackend`, `StageRequest`, `StageResult`, `StageEvent`,
+  `BackendHealth`) and three adapters: Ollama over ModelRack, a deterministic offline fake, and an
+  OpenAI-compatible one. Switching between them is configuration.
+- One generation runs at a time, through one function, and the resident model is unloaded before a
+  different one loads (ADR-0038).
+- The prompt pack on `setspec.prompts`: versioned JSON records with a hashed manifest.
+- `GET /backends`, `POST /backends/test`, a backend page that states where content goes, and
+  `ideapress backend list|test|switch`.
+- Projects: create, list, open, update, archive, and delete with a preview of exactly what will be
+  removed. Slugs are derived from the title and never taken from input, and a project's artifact
+  directory is created private and containment-checked.
+- Migration `0001` on WeightsDB's runner: `projects`, `sources`, `settings`, `api_tokens`, verified
+  against both SQLite and PostgreSQL 16 including the Alembic-to-models parity check.
+- `ideapress project create|list|show|archive|delete` and `ideapress db upgrade|status|backup|restore`.
+- Project list and detail pages, with the shared CSRF token on every form.
+- Application skeleton on the shared packages: typed settings with the documented precedence and
+  refusals, structured logging with the suite's correlation fields, `/health`, `/version`,
+  `/system/status`, the system page, and the `serve`/`health`/`doctor`/`version`/`config` commands.
+- `[execution]` configuration: `max_concurrent_stages` (only 1 is accepted; a higher value is
+  refused at startup) and `unload_before_model_switch`.
+- A startup check that `[models.stages]`, `StageId` and workflows §2 name the same stages, and
+  refuses a binding for a stage that does not exist or a model-using stage with none.
+
+### Fixed
+- An export's recorded `sha256` is now the file's own digest, so `sha256sum` on the exported file
+  reproduces it.
+- A second process opening the database no longer marks a running stage as interrupted. Migration
+  `0005` records which process owns a stage run, and only a run whose owner is gone is marked.
+- `/api/v1/docs` and `/api/v1/openapi.json` work: response annotations imported only under
+  `TYPE_CHECKING` left forward references FastAPI could not resolve, so building the schema raised.
+- The CI workflow parses again: an edit had left a duplicate `env:` key on one step, which GitHub
+  refuses and PyYAML accepts, so the whole workflow was invalid and no job ran. A test now loads it
+  with a loader that refuses duplicate keys the way GitHub does.
+- The PostgreSQL CI job now names the server `weightsdb.testing` looks for, passes
+  `WEIGHTSDB_POSTGRES_URL` rather than `DATABASE_URL`, and uses the `+psycopg` driver this project
+  installs; it previously could not connect at all.
+- `pytest` now collects under the bare console script as well as `python -m pytest`
+  (`pythonpath = ["."]`), which is the invocation CI runs.
+- Coverage measures the importable `ideapress` package rather than the `src/ideapress` path, so a
+  non-editable install reports real coverage instead of 0 %.
+- The PostgreSQL CI job selects tests by path; it previously selected a marker this repository never
+  declares, collecting nothing.
+- `ruff` no longer formats `docs/`, which is a byte-identical mirror of the suite documentation.
+- Restored the six mirrored `docs/apps/ideapress/` documents; three were missing and three had been
+  edited downstream.
+
+### Changed
+- `loadcoach` moved out of the `dev` extra into a `loadcoach-contract` extra, so the default
+  development and CI environment has no other application installed.
+
+- Widened the `sweatmeter` pin to `>=0.4,<0.5`. SweatMeter's first published release is `0.4.0`
+  (`0.3.0` completed its development plan but never reached the index), and it adds the in-process
+  NVML GPU backend, selected automatically wherever the optional `pynvml` extra is installed.
+
+### Added
+- Repository scaffold generated from the suite's development plan (no functional code yet).

ideapress-0.1.0/CONTRIBUTING.md

@@ -0,0 +1,50 @@
+# Contributing to IdeaPress
+
+This repository is one component of the Local AI Suite. Before changing anything, read
+`docs/apps/ideapress/spec.md` and the current
+phase in `development-plan.md` — both are in this repository's `docs/` folder, copied from the suite's
+central documentation set so this repository can be worked on independently.
+
+## Development setup
+
+```bash
+python -m venv .venv
+source .venv/bin/activate
+pip install -e ".[dev]"
+pre-commit install
+```
+
+## Required reading, in order
+
+1. This component's spec — purpose, scope, non-goals, contracts.
+2. `development-plan.md` in the same folder — the phase you are implementing, its acceptance criteria and its tests.
+
+## Rules that apply to every change here
+
+* Follow the architecture's dependency direction.
+  This repository's `.importlinter` enforces it in CI; do not weaken that file to make an import work.
+* No business logic in a route handler or CLI command body — both call one service method and render
+.
+* An unavailable measurement is `Unsupported`, never zero, never `None` used as a substitute
+.
+* Prompts are versioned JSON records, not Python string literals.
+* Every phase's acceptance criteria in `development-plan.md` must be demonstrable, not merely
+  test-covered — the plan states what to run and what a person should see.
+
+## Before opening a pull request
+
+```bash
+ruff format --check .
+ruff check .
+mypy src tests
+lint-imports
+pytest -m "not live and not performance"
+```
+
+All of the above run in CI (`.github/workflows/ci.yml`); a red CI run blocks merge.
+
+## Commit style
+
+Conventional Commits (`feat:`, `fix:`, `docs:`, `refactor:`, `test:`, `chore:`, `perf:`, `build:`,
+`ci:`), with `!` or a `BREAKING CHANGE:` footer for breaking changes. Update `CHANGELOG.md` under
+`## [Unreleased]` for any user-visible change.