langchain-gestaltdb 0.1.0__tar.gz

langchain_gestaltdb-0.1.0/.github/workflows/ci.yml

@@ -0,0 +1,158 @@
+name: CI
+
+on:
+  pull_request:
+    branches: [main]
+  push:
+    branches: [main]
+  workflow_dispatch:
+
+permissions:
+  contents: read
+
+concurrency:
+  group: ci-${{ github.workflow }}-${{ github.event.pull_request.number || github.ref }}
+  cancel-in-progress: true
+
+jobs:
+  quality:
+    name: Quality
+    runs-on: ubuntu-latest
+    timeout-minutes: 10
+    steps:
+      - uses: actions/checkout@v4
+      - uses: astral-sh/setup-uv@v6
+        with:
+          version: "0.12.21"
+          enable-cache: true
+      - run: uv sync --python 3.12 --locked --group dev --extra lmdb
+      - run: uv run --locked ruff check .
+      - run: uv run --locked ruff format --check .
+      - run: uv run --locked mypy
+
+  tests:
+    name: Tests (Python ${{ matrix.python }})
+    runs-on: ubuntu-latest
+    timeout-minutes: 15
+    strategy:
+      fail-fast: false
+      matrix:
+        python: ["3.10", "3.11", "3.12", "3.13"]
+    steps:
+      - uses: actions/checkout@v4
+      - uses: astral-sh/setup-uv@v6
+        with:
+          version: "0.12.21"
+          enable-cache: true
+      - run: uv sync --python '${{ matrix.python }}' --locked --group dev --extra lmdb
+      - run: uv run --locked pytest --cov=langchain_gestaltdb --cov-report=term-missing --cov-fail-under=90
+
+  latest-dependencies:
+    name: Latest dependencies
+    runs-on: ubuntu-latest
+    timeout-minutes: 15
+    steps:
+      - uses: actions/checkout@v4
+      - uses: astral-sh/setup-uv@v6
+        with:
+          version: "0.12.21"
+          enable-cache: true
+      - run: uv sync --python 3.12 --group dev --extra lmdb --upgrade
+      - run: uv run --frozen pytest
+
+  additional-backends:
+    name: Backend (${{ matrix.backend }})
+    runs-on: ubuntu-latest
+    timeout-minutes: 20
+    strategy:
+      fail-fast: false
+      matrix:
+        include:
+          - backend: leveldb
+            extra: leveldb
+          - backend: pyrex
+            extra: rocksdb
+    env:
+      GESTALTDB_TEST_BACKEND: ${{ matrix.backend }}
+    steps:
+      - uses: actions/checkout@v4
+      - name: Install LevelDB native library
+        if: matrix.backend == 'leveldb'
+        run: |
+          sudo apt-get update
+          sudo apt-get install --yes libleveldb-dev
+      - uses: astral-sh/setup-uv@v6
+        with:
+          version: "0.12.21"
+          enable-cache: true
+      - run: uv sync --python 3.12 --locked --group dev --extra lmdb --extra '${{ matrix.extra }}'
+      - run: uv run --locked pytest tests/integration_tests/test_backend_contract.py
+
+  minimum-dependencies:
+    name: Minimum direct dependencies
+    runs-on: ubuntu-latest
+    timeout-minutes: 15
+    steps:
+      - uses: actions/checkout@v4
+      - uses: astral-sh/setup-uv@v6
+        with:
+          version: "0.12.21"
+          enable-cache: true
+      # Deliberately re-resolve in the disposable runner, not against uv.lock.
+      - run: uv sync --python 3.10 --group dev --extra lmdb --resolution lowest-direct
+      - run: uv run --frozen pytest
+
+  distribution:
+    name: Installed wheel
+    runs-on: ubuntu-latest
+    timeout-minutes: 15
+    steps:
+      - uses: actions/checkout@v4
+      - uses: astral-sh/setup-uv@v6
+        with:
+          version: "0.12.21"
+          enable-cache: true
+      - run: uv sync --python 3.12 --locked --group dev --extra lmdb
+      - run: uv build --no-sources
+      - run: uv run --locked twine check dist/*
+      - name: Validate release artifact contents
+        run: |
+          version=$(uv run --locked python -c 'from importlib.metadata import version; print(version("langchain-gestaltdb"))')
+          uv run --locked python scripts/release.py verify-artifacts "$version"
+      - name: Test installed wheel outside the checkout
+        shell: bash
+        run: |
+          uv venv --python 3.12 "$RUNNER_TEMP/wheel-env"
+          wheel=$(find "$GITHUB_WORKSPACE/dist" -maxdepth 1 -name '*.whl' -print -quit)
+          uv pip install --python "$RUNNER_TEMP/wheel-env/bin/python" "${wheel}[lmdb]" 'pytest>=8,<10' 'langchain-tests==1.0.0'
+          cd "$RUNNER_TEMP"
+          "$RUNNER_TEMP/wheel-env/bin/python" -c 'import langchain_gestaltdb; assert "site-packages" in langchain_gestaltdb.__file__'
+          "$RUNNER_TEMP/wheel-env/bin/python" -m pytest "$GITHUB_WORKSPACE/tests" -c "$GITHUB_WORKSPACE/pyproject.toml"
+      - name: Retain the tested main distributions for explicitly approved releases
+        if: github.event_name == 'push' && github.ref == 'refs/heads/main'
+        uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4
+        with:
+          name: distributions-${{ github.sha }}-${{ github.run_attempt }}
+          path: dist/*
+          if-no-files-found: error
+          retention-days: 30
+
+  gate:
+    name: CI gate
+    if: always()
+    needs: [quality, tests, minimum-dependencies, latest-dependencies, additional-backends, distribution]
+    runs-on: ubuntu-latest
+    timeout-minutes: 5
+    steps:
+      - name: Require every job to succeed
+        env:
+          RESULTS: ${{ toJSON(needs) }}
+        run: |
+          python3 - <<'PY'
+          import json
+          import os
+          results = json.loads(os.environ["RESULTS"])
+          failed = [name for name, job in results.items() if job["result"] != "success"]
+          if failed:
+              raise SystemExit(f"Required CI jobs did not succeed: {failed}")
+          PY

langchain_gestaltdb-0.1.0/.github/workflows/publish.yml

@@ -0,0 +1,121 @@
+name: Publish
+run-name: Publish ${{ inputs.version }} by @${{ github.actor }}
+
+on:
+  workflow_dispatch:
+    inputs:
+      version:
+        description: "Reviewed stable version (X.Y.Z); must match main's pyproject.toml"
+        required: true
+        type: string
+
+permissions:
+  contents: read
+
+concurrency:
+  group: pypi-publish
+  cancel-in-progress: false
+
+jobs:
+  prepare:
+    name: Verify release candidate
+    if: github.repository == 'mylonasc/langchain-gestaltdb' && github.ref == 'refs/heads/main'
+    runs-on: ubuntu-latest
+    timeout-minutes: 10
+    permissions:
+      contents: read
+      actions: read
+    steps:
+      - uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4
+        with:
+          persist-credentials: false
+      - name: Require reviewed version and green exact-main CI
+        id: candidate
+        env:
+          GH_TOKEN: ${{ github.token }}
+          VERSION: ${{ inputs.version }}
+        run: python3 scripts/release.py preflight "$VERSION"
+      - name: Download the distributions tested by that CI run
+        uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 # v4
+        with:
+          name: ${{ steps.candidate.outputs.artifact-name }}
+          run-id: ${{ steps.candidate.outputs.ci-run-id }}
+          github-token: ${{ github.token }}
+          path: dist
+      - name: Verify metadata, packaged files and hashes
+        env:
+          VERSION: ${{ inputs.version }}
+        run: python3 scripts/release.py verify-artifacts "$VERSION" | tee -a "$GITHUB_STEP_SUMMARY"
+      - uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4
+        with:
+          name: validated-distributions
+          path: dist/*
+          if-no-files-found: error
+          retention-days: 30
+
+  publish:
+    name: Publish to PyPI
+    needs: prepare
+    runs-on: ubuntu-latest
+    timeout-minutes: 10
+    environment:
+      name: pypi
+      url: https://pypi.org/p/langchain-gestaltdb
+    permissions:
+      id-token: write
+    steps:
+      # No checkout, dependency installation or build code in this privileged job.
+      - uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 # v4
+        with:
+          name: validated-distributions
+          path: dist
+      - name: Publish the approved distributions using Trusted Publishing
+        uses: pypa/gh-action-pypi-publish@dc37677b2e1c63e2034f94d8a5b11f265b73ba33 # release/v1
+        with:
+          packages-dir: dist/
+          print-hash: true
+          attestations: true
+
+  verify-install:
+    name: Published wheel (Python ${{ matrix.python }})
+    needs: publish
+    runs-on: ubuntu-latest
+    timeout-minutes: 15
+    strategy:
+      fail-fast: false
+      matrix:
+        python: ["3.10", "3.11", "3.12", "3.13"]
+    steps:
+      - uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4
+        with:
+          persist-credentials: false
+      - uses: astral-sh/setup-uv@d0cc045d04ccac9d8b7881df0226f9e82c39688e # v6
+        with:
+          version: "0.12.21"
+      - uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 # v4
+        with:
+          name: validated-distributions
+          path: dist
+      - name: Verify public hashes and install the wheel from PyPI outside the checkout
+        env:
+          VERSION: ${{ inputs.version }}
+          PYTHON: ${{ matrix.python }}
+        run: |
+          for attempt in 1 2 3 4 5; do
+            if python3 scripts/release.py verify-pypi "$VERSION"; then break; fi
+            if [ "$attempt" = 5 ]; then exit 1; fi
+            sleep 15
+          done
+          uv venv --python "$PYTHON" "$RUNNER_TEMP/released-env"
+          for attempt in 1 2 3 4 5; do
+            if uv pip install --python "$RUNNER_TEMP/released-env/bin/python" --no-cache \
+              --index-url https://pypi.org/simple --only-binary langchain-gestaltdb \
+              "langchain-gestaltdb[lmdb]==$VERSION" 'pytest>=8,<10' 'langchain-tests==1.0.0'; then
+              break
+            fi
+            if [ "$attempt" = 5 ]; then exit 1; fi
+            sleep 15
+          done
+          cd "$RUNNER_TEMP"
+          "$RUNNER_TEMP/released-env/bin/python" -c 'import os, importlib.metadata as m, langchain_gestaltdb as g; assert m.version("langchain-gestaltdb") == os.environ["VERSION"]; assert "site-packages" in g.__file__'
+          "$RUNNER_TEMP/released-env/bin/python" -m pytest "$GITHUB_WORKSPACE/tests" -c "$GITHUB_WORKSPACE/pyproject.toml"

langchain_gestaltdb-0.1.0/.gitignore

@@ -0,0 +1,220 @@
+# Byte-compiled / optimized / DLL files
+__pycache__/
+*.py[codz]
+*$py.class
+
+# C extensions
+*.so
+
+# Distribution / packaging
+.Python
+build/
+develop-eggs/
+dist/
+downloads/
+eggs/
+.eggs/
+lib/
+lib64/
+parts/
+sdist/
+var/
+wheels/
+share/python-wheels/
+*.egg-info/
+.installed.cfg
+*.egg
+MANIFEST
+
+# PyInstaller
+#   Usually these files are written by a python script from a template
+#   before PyInstaller builds the exe, so as to inject date/other infos into it.
+*.manifest
+*.spec
+
+# Installer logs
+pip-log.txt
+pip-delete-this-directory.txt
+
+# Unit test / coverage reports
+htmlcov/
+.tox/
+.nox/
+.coverage
+.coverage.*
+.cache
+nosetests.xml
+coverage.xml
+*.cover
+*.py.cover
+*.lcov
+.hypothesis/
+.pytest_cache/
+cover/
+
+# Translations
+*.mo
+*.pot
+
+# Django stuff:
+*.log
+local_settings.py
+db.sqlite3
+db.sqlite3-journal
+
+# Flask stuff:
+instance/
+.webassets-cache
+
+# Scrapy stuff:
+.scrapy
+
+# Sphinx documentation
+docs/_build/
+
+# PyBuilder
+.pybuilder/
+target/
+
+# Jupyter Notebook
+.ipynb_checkpoints
+
+# IPython
+profile_default/
+ipython_config.py
+
+# pyenv
+#   For a library or package, you might want to ignore these files since the code is
+#   intended to run in multiple environments; otherwise, check them in:
+# .python-version
+
+# pipenv
+#   According to pypa/pipenv#598, it is recommended to include Pipfile.lock in version control.
+#   However, in case of collaboration, if having platform-specific dependencies or dependencies
+#   having no cross-platform support, pipenv may install dependencies that don't work, or not
+#   install all needed dependencies.
+# Pipfile.lock
+
+# uv
+#   Similar to Pipfile.lock, it is generally recommended to include uv.lock in version control.
+#   This is especially recommended for binary packages to ensure reproducibility, and is more
+#   commonly ignored for libraries.
+# uv.lock
+
+# poetry
+#   Similar to Pipfile.lock, it is generally recommended to include poetry.lock in version control.
+#   This is especially recommended for binary packages to ensure reproducibility, and is more
+#   commonly ignored for libraries.
+#   https://python-poetry.org/docs/basic-usage/#commit-your-poetrylock-file-to-version-control
+# poetry.lock
+# poetry.toml
+
+# pdm
+#   Similar to Pipfile.lock, it is generally recommended to include pdm.lock in version control.
+#   pdm recommends including project-wide configuration in pdm.toml, but excluding .pdm-python.
+#   https://pdm-project.org/en/latest/usage/project/#working-with-version-control
+# pdm.lock
+# pdm.toml
+.pdm-python
+.pdm-build/
+
+# pixi
+#   Similar to Pipfile.lock, it is generally recommended to include pixi.lock in version control.
+# pixi.lock
+#   Pixi creates a virtual environment in the .pixi directory, just like venv module creates one
+#   in the .venv directory. It is recommended not to include this directory in version control.
+.pixi/*
+!.pixi/config.toml
+
+# PEP 582; used by e.g. github.com/David-OConnor/pyflow and github.com/pdm-project/pdm
+__pypackages__/
+
+# Celery stuff
+celerybeat-schedule*
+celerybeat.pid
+
+# Redis
+*.rdb
+*.aof
+*.pid
+
+# RabbitMQ
+mnesia/
+rabbitmq/
+rabbitmq-data/
+
+# ActiveMQ
+activemq-data/
+
+# SageMath parsed files
+*.sage.py
+
+# Environments
+.env
+.envrc
+.venv
+env/
+venv/
+ENV/
+env.bak/
+venv.bak/
+
+# Spyder project settings
+.spyderproject
+.spyproject
+
+# Rope project settings
+.ropeproject
+
+# mkdocs/Zensical documentation
+/site
+
+# mypy
+.mypy_cache/
+.dmypy.json
+dmypy.json
+
+# Pyre type checker
+.pyre/
+
+# pytype static type analyzer
+.pytype/
+
+# Cython debug symbols
+cython_debug/
+
+# PyCharm
+#   JetBrains specific template is maintained in a separate JetBrains.gitignore that can
+#   be found at https://github.com/github/gitignore/blob/main/Global/JetBrains.gitignore
+#   and can be added to the global gitignore or merged into this file.  For a more nuclear
+#   option (not recommended) you can uncomment the following to ignore the entire idea folder.
+# .idea/
+
+# Abstra
+#   Abstra is an AI-powered process automation framework.
+#   Ignore directories containing user credentials, local state, and settings.
+#   Learn more at https://abstra.io/docs
+.abstra/
+
+# Visual Studio Code
+#   Visual Studio Code specific template is maintained in a separate VisualStudioCode.gitignore that
+#   can be found at https://github.com/github/gitignore/blob/main/Global/VisualStudioCode.gitignore
+#   and can be added to the global gitignore or merged into this file. However, if you prefer, you
+#   could uncomment the following to ignore the entire vscode folder
+# .vscode/
+# Temporary file for partial code execution
+tempCodeRunnerFile.py
+
+# Ruff stuff:
+.ruff_cache/
+
+# PyPI configuration file
+.pypirc
+
+# Marimo
+marimo/_static/
+marimo/_lsp/
+__marimo__/
+
+# Streamlit
+.streamlit/secrets.toml

langchain_gestaltdb-0.1.0/CHANGELOG.md

@@ -0,0 +1,28 @@
+# Changelog
+
+## [0.1.0] - 2026-10-18
+
+First public release of the Apache-2.0 LangChain integration for GestaltDB.
+
+- Embedded graph lifecycle, parameterized Cypher, bounded schema discovery,
+  graph-document ingestion and source provenance.
+- Fail-closed read-only query validation, bounded query/schema tools, and an
+  application-controlled toolkit with explicit write opt-in.
+- Bounded typed-graph retrieval with indexed/external seeds, source-linked
+  Documents, deterministic output ordering and explicit truncation metadata.
+- Four-valued historical claim status, filtered claim search, and bounded
+  provenance explanations; claims are separate from Cypher-visible graph edges.
+- Explicitly enabled assertion, correction and retraction tools with validated
+  provenance/validity, historical identity preservation and bounded commit receipts.
+- Tested on Python 3.10–3.13 with minimum/latest direct dependencies, installed
+  wheels, LMDB, LevelDB and PyRex contracts, and offline agent-style examples.
+- Manual, environment-approved PyPI Trusted Publishing via `publish.yml`, using
+  exact-main CI artifacts, attestations and post-publication installation tests.
+
+### Compatibility and limitations
+
+Requires `gestaltdb>=0.12.0,<0.13`, `langchain-core>=1.0,<2`, and
+`pydantic>=2.7,<3`. Explicit backend extras: `lmdb`, `leveldb`, `rocksdb` (PyRex).
+Backend guarantees vary; no universal atomicity/snapshot, native async, native
+vector store or computational timeout is claimed. Read-only tools are not a
+multitenant sandbox. See `docs/API.md` and `TECH_DEBT.md` before deployment.