interlock-agentgov 0.3.0__tar.gz

interlock_agentgov-0.3.0/.github/workflows/ci.yml

@@ -0,0 +1,162 @@
+name: CI
+
+on:
+  push:
+    branches: [main]
+  pull_request:
+  workflow_dispatch:
+
+concurrency:
+  group: ${{ github.workflow }}-${{ github.ref }}
+  cancel-in-progress: true
+
+permissions:
+  contents: read
+
+jobs:
+  test:
+    name: test (py${{ matrix.python-version }}, ${{ matrix.os }})
+    runs-on: ${{ matrix.os }}
+    strategy:
+      fail-fast: false
+      matrix:
+        python-version: ["3.11", "3.12"]
+        os: [ubuntu-latest]
+        include:
+          # The advisory lock, the reaped worker thread, and the subprocess
+          # restart tests are all OS-dependent. Cover a second platform on the
+          # current Python so a macOS-only or Linux-only regression is caught.
+          - python-version: "3.12"
+            os: macos-latest
+    steps:
+      - uses: actions/checkout@v4
+
+      - name: Install uv
+        uses: astral-sh/setup-uv@v5
+        with:
+          enable-cache: true
+
+      - name: Set up Python ${{ matrix.python-version }}
+        run: uv python install ${{ matrix.python-version }}
+
+      - name: Install the project
+        run: uv sync --frozen --python ${{ matrix.python-version }}
+
+      - name: Lint (ruff check)
+        run: uv run ruff check .
+
+      - name: Format (ruff format --check)
+        run: uv run ruff format --check .
+
+      - name: Type-check the package (mypy --strict)
+        run: uv run mypy src/
+
+      - name: Type-check tests and examples (mypy --strict)
+        run: uv run mypy --strict tests/ examples/
+
+      - name: Tests with coverage
+        run: uv run pytest -v --cov=agentgov --cov-report=term-missing --cov-report=xml
+
+      # postgres.py runs only against a server, so this job, which has none,
+      # leaves it out (97% measured without it); the postgres job below
+      # measures everything, it included.
+      - name: Enforce coverage floor
+        run: uv run coverage report --fail-under=95 --omit=src/agentgov/postgres.py
+
+      - name: Run the benchmarks end to end
+        run: |
+          uv run python examples/denial_of_wallet_benchmark.py --seconds 1
+          uv run python examples/persistence_demo.py
+          uv run python examples/live_demo.py --out /tmp/agentgov-demo --no-color
+          uv run agentgov verify /tmp/agentgov-demo/governor.db
+
+      - name: Verify the ARC1 reference vectors with the installed CLI
+        working-directory: vectors/arc1
+        run: |
+          uv run agentgov verify-receipt valid/committed-refund.bundle.json \
+            --pubkey keys/issuer.pub \
+            --witness witness/cosignatures.jsonl --witness-pubkey keys/witness.pub \
+            --rows valid/committed-refund.rows.json
+          # A forged signature must exit 4 (SIGNATURE), not merely non-zero.
+          code=0
+          uv run agentgov verify-receipt invalid/forged-signature.bundle.json \
+            --pubkey keys/issuer.pub || code=$?
+          test "$code" -eq 4
+
+  postgres:
+    name: test against PostgreSQL ${{ matrix.postgres }} (py3.12)
+    runs-on: ubuntu-latest
+    strategy:
+      fail-fast: false
+      matrix:
+        # 14 is the oldest the shared ledger is written for; 16 is current.
+        postgres: ["14", "16"]
+    services:
+      postgres:
+        image: postgres:${{ matrix.postgres }}
+        env:
+          POSTGRES_USER: agentgov_admin
+          POSTGRES_PASSWORD: agentgov
+          POSTGRES_DB: postgres
+        ports:
+          - 5432:5432
+        options: >-
+          --health-cmd "pg_isready -U agentgov_admin"
+          --health-interval 2s
+          --health-timeout 5s
+          --health-retries 30
+    # The same suite as the test job, with the PostgreSQL tests required
+    # rather than skippable: a service that failed to come up fails the job
+    # instead of passing it by skipping the fleet's concurrency proofs.
+    env:
+      AGENTGOV_TEST_POSTGRES_DSN: postgresql://agentgov_admin:agentgov@localhost:5432/postgres
+      AGENTGOV_REQUIRE_POSTGRES: "1"
+    steps:
+      - uses: actions/checkout@v4
+
+      - name: Install uv
+        uses: astral-sh/setup-uv@v5
+        with:
+          enable-cache: true
+
+      - name: Set up Python 3.12
+        run: uv python install 3.12
+
+      - name: Install the project
+        run: uv sync --frozen --python 3.12
+
+      - name: Tests with coverage, PostgreSQL required
+        run: uv run pytest -v --cov=agentgov --cov-report=term-missing
+
+      # Every module, postgres.py included (97% measured).
+      - name: Enforce coverage floor
+        run: uv run coverage report --fail-under=95
+
+  build:
+    name: build (wheel + sdist)
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+
+      - name: Install uv
+        uses: astral-sh/setup-uv@v5
+        with:
+          enable-cache: true
+
+      - name: Build, failing on packaging warnings
+        # `uv build` reports metadata problems (deprecated license fields,
+        # bad classifiers) as warnings but still exits 0, so a clean release
+        # has to assert on them. It writes all progress to stderr, so match
+        # the warnings themselves rather than treating any stderr as failure.
+        run: |
+          set -o pipefail
+          uv build 2>&1 | tee build.log
+          if grep -i '^warning' build.log; then
+            echo "::error::uv build emitted packaging warnings"
+            exit 1
+          fi
+
+      - uses: actions/upload-artifact@v4
+        with:
+          name: dist
+          path: dist/

interlock_agentgov-0.3.0/.gitignore

@@ -0,0 +1,68 @@
+# Pitch, positioning and brainstorming material. This repository is public and
+# its documentation is engineering mechanics only. Keep strategy notes out of it.
+CONCEPT.md
+CONCEPT*.md
+PITCH*.md
+*_pitch.md
+NOTES.md
+BRAINSTORM*.md
+
+# Secrets. Never commit an API key.
+.env
+.env.*
+!.env.example
+*.pem
+*.key
+
+# Live-API benchmark receipts: raw response payloads, cost summaries, SQLite
+# ledgers and metering journals. Regenerate with
+# `uv run python scripts/generate_real_usage.py`.
+benchmarks/live_data/
+
+# Live-demo artifacts (`uv run python examples/live_demo.py`)
+demo/
+
+# SQLite ledgers and their sidecars, wherever they land
+*.db
+*.db-wal
+*.db-shm
+*.db.lock
+*.sqlite
+*.sqlite3
+
+# Python build and bytecode
+__pycache__/
+*.pyc
+*.pyo
+*.py[oc]
+build/
+dist/
+wheels/
+*.egg-info
+
+# Virtual environments
+.venv
+venv/
+
+# Test and tooling caches
+.coverage
+coverage.xml
+htmlcov/
+.pytest_cache/
+.ruff_cache/
+.mypy_cache/
+
+# VHS-rendered terminal recordings (regenerate with `vhs demo.tape`)
+demo.gif
+
+# Editors
+.idea/
+.vscode/
+*.swp
+
+# OS metadata
+.DS_Store
+Thumbs.db
+
+# Logs
+*.log

interlock_agentgov-0.3.0/.python-version

@@ -0,0 +1 @@
+3.11