meshflow-contracts 0.2.3__tar.gz

meshflow_contracts-0.2.3/LICENSE

@@ -0,0 +1,202 @@
+
+                                 Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "[]"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright [yyyy] [name of copyright owner]
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.

meshflow_contracts-0.2.3/PKG-INFO

@@ -0,0 +1,102 @@
+Metadata-Version: 2.4
+Name: meshflow-contracts
+Version: 0.2.3
+Summary: Shared MeshFlow platform contracts.
+Keywords: meshflow,contracts,pydantic,schemas
+Author: MeshFlow contributors
+License-Expression: Apache-2.0
+License-File: LICENSE
+Classifier: Development Status :: 3 - Alpha
+Classifier: Intended Audience :: Developers
+Classifier: Programming Language :: Python :: 3
+Classifier: Programming Language :: Python :: 3 :: Only
+Classifier: Programming Language :: Python :: 3.14
+Classifier: Typing :: Typed
+Requires-Dist: pydantic>=2.13.4,<3
+Requires-Python: >=3.14
+Project-URL: Repository, https://github.com/MeshFlow-os/meshflow-contracts
+Project-URL: Issues, https://github.com/MeshFlow-os/meshflow-contracts/issues
+Project-URL: Changelog, https://github.com/MeshFlow-os/meshflow-contracts/blob/main/CHANGELOG.md
+Description-Content-Type: text/markdown
+
+# MeshFlow Contracts
+
+Shared Pydantic contracts used by Core, Gateway, and MeshFlow apps.
+
+Rule of thumb: if a model is only used by one app, it does not belong here.
+
+## Installation
+
+This package is preparing for public PyPI publication. After the release is
+published, install the supported `0.2` line with `pip install "meshflow-contracts~=0.2.3"`.
+Until then, consumers must not assume the distribution is available on PyPI.
+
+Maintainers: use the package-specific [release and adoption runbook](RELEASING.md).
+It describes release gates without implying that `0.2.3` is already published.
+
+## External ingress manifests
+
+Apps may declare optional generic external ingress capabilities through
+`AppManifest.external_ingress`. Each entry fixes the audience, private upstream
+path, methods, content types, scopes, body limit, and rate policy that platform
+services may snapshot and enforce. The contract describes policy only; it does
+not route traffic or authorize grants.
+
+Manifests that omit `external_ingress` remain valid and declare no external
+ingress capabilities.
+
+External ingress policy is intentionally conservative for Core/Gateway
+snapshots: internal upstream paths must be canonical absolute app-internal
+paths, capability ids are unique per manifest, methods are limited to `GET`,
+`POST`, `PUT`, and `DELETE`, and numeric limits are strict integers. Contract
+safety caps are 100 MiB per request body, 1,000 requests per window, and 3,600
+seconds per rate window.
+
+## Integration request tokens
+
+`IntegrationRequestClaims` defines the shared internal JWT payload Gateway sends
+only to private app ingress after Core has validated an integration grant. The
+contract adds `token_type="integration_request"` without changing existing
+`app_request` or `lifecycle` token claims.
+
+The claims model requires workspace, installation, app/audience, capability,
+grant, subject user, request, `jti`, immutable scopes, and strict integer `iat`
+/ `exp` values. App id and audience must match, token lifetime is capped at
+3,600 seconds, undeclared claims are rejected, and validated copies re-run the
+same invariants. JWT registered claims keep their JWT semantics: `iss` accepts a
+case-sensitive non-empty StringOrURI, including HTTPS URIs and arbitrary
+human-readable no-colon issuer strings, while `sub` and `jti` are case-sensitive
+opaque URL-safe strings rather than MeshFlow identifiers. This package validates
+claim shape only; cryptographic verification and equality to the configured
+issuer remain runtime responsibilities alongside signing, minting, JWKS
+validation, replay handling, routing, lifecycle status, error taxonomy, and grant
+persistence.
+
+## 0.2.3 recovery rollout notes
+
+The failed `v0.2.0`, `v0.2.1`, and `v0.2.2` tags are immutable unpublished history. They
+must never be moved, reused, published, or turned into GitHub Releases. `0.2.3`
+is the recovery candidate, and consumers must wait for its public package verification. Core
+adopts the verified package before Gateway; the schema upgrade alone does not
+enable runtime capabilities.
+
+- Apps that omit `external_ingress` preserve `0.1.0` parse/serialize behavior;
+  omission grants no public ingress.
+- Registration and runtime rollout depend on Core/Gateway adopting their own
+  snapshot, introspection, routing, and policy-enforcement behavior.
+- Core/Gateway must ignore `external_ingress` until their own snapshot,
+  introspection, routing, and policy-enforcement work lands.
+- Apps must ignore `integration_request` until they implement private external
+  ingress consumers; existing browser and lifecycle paths keep using
+  `app_request` and `lifecycle` semantics.
+- No Core, Gateway, or app domain behavior is enabled solely by upgrading this
+  package.
+
+Packaging metadata, licensing, source-level checks, strict artifact inspection, and
+wheel/sdist smoke tests are enforced by release CI before consumer adoption.
+
+## License
+
+Licensed under the Apache License 2.0. See [LICENSE](LICENSE).
+
+Copyright 2026 MeshFlow contributors.

meshflow_contracts-0.2.3/README.md

@@ -0,0 +1,81 @@
+# MeshFlow Contracts
+
+Shared Pydantic contracts used by Core, Gateway, and MeshFlow apps.
+
+Rule of thumb: if a model is only used by one app, it does not belong here.
+
+## Installation
+
+This package is preparing for public PyPI publication. After the release is
+published, install the supported `0.2` line with `pip install "meshflow-contracts~=0.2.3"`.
+Until then, consumers must not assume the distribution is available on PyPI.
+
+Maintainers: use the package-specific [release and adoption runbook](RELEASING.md).
+It describes release gates without implying that `0.2.3` is already published.
+
+## External ingress manifests
+
+Apps may declare optional generic external ingress capabilities through
+`AppManifest.external_ingress`. Each entry fixes the audience, private upstream
+path, methods, content types, scopes, body limit, and rate policy that platform
+services may snapshot and enforce. The contract describes policy only; it does
+not route traffic or authorize grants.
+
+Manifests that omit `external_ingress` remain valid and declare no external
+ingress capabilities.
+
+External ingress policy is intentionally conservative for Core/Gateway
+snapshots: internal upstream paths must be canonical absolute app-internal
+paths, capability ids are unique per manifest, methods are limited to `GET`,
+`POST`, `PUT`, and `DELETE`, and numeric limits are strict integers. Contract
+safety caps are 100 MiB per request body, 1,000 requests per window, and 3,600
+seconds per rate window.
+
+## Integration request tokens
+
+`IntegrationRequestClaims` defines the shared internal JWT payload Gateway sends
+only to private app ingress after Core has validated an integration grant. The
+contract adds `token_type="integration_request"` without changing existing
+`app_request` or `lifecycle` token claims.
+
+The claims model requires workspace, installation, app/audience, capability,
+grant, subject user, request, `jti`, immutable scopes, and strict integer `iat`
+/ `exp` values. App id and audience must match, token lifetime is capped at
+3,600 seconds, undeclared claims are rejected, and validated copies re-run the
+same invariants. JWT registered claims keep their JWT semantics: `iss` accepts a
+case-sensitive non-empty StringOrURI, including HTTPS URIs and arbitrary
+human-readable no-colon issuer strings, while `sub` and `jti` are case-sensitive
+opaque URL-safe strings rather than MeshFlow identifiers. This package validates
+claim shape only; cryptographic verification and equality to the configured
+issuer remain runtime responsibilities alongside signing, minting, JWKS
+validation, replay handling, routing, lifecycle status, error taxonomy, and grant
+persistence.
+
+## 0.2.3 recovery rollout notes
+
+The failed `v0.2.0`, `v0.2.1`, and `v0.2.2` tags are immutable unpublished history. They
+must never be moved, reused, published, or turned into GitHub Releases. `0.2.3`
+is the recovery candidate, and consumers must wait for its public package verification. Core
+adopts the verified package before Gateway; the schema upgrade alone does not
+enable runtime capabilities.
+
+- Apps that omit `external_ingress` preserve `0.1.0` parse/serialize behavior;
+  omission grants no public ingress.
+- Registration and runtime rollout depend on Core/Gateway adopting their own
+  snapshot, introspection, routing, and policy-enforcement behavior.
+- Core/Gateway must ignore `external_ingress` until their own snapshot,
+  introspection, routing, and policy-enforcement work lands.
+- Apps must ignore `integration_request` until they implement private external
+  ingress consumers; existing browser and lifecycle paths keep using
+  `app_request` and `lifecycle` semantics.
+- No Core, Gateway, or app domain behavior is enabled solely by upgrading this
+  package.
+
+Packaging metadata, licensing, source-level checks, strict artifact inspection, and
+wheel/sdist smoke tests are enforced by release CI before consumer adoption.
+
+## License
+
+Licensed under the Apache License 2.0. See [LICENSE](LICENSE).
+
+Copyright 2026 MeshFlow contributors.

meshflow_contracts-0.2.3/meshflow_contracts/__init__.py

@@ -0,0 +1,9 @@
+"""Shared MeshFlow platform contracts."""
+
+from meshflow_contracts.auth import IntegrationRequestClaims
+
+__version__ = "0.2.3"
+
+__all__ = [
+    "IntegrationRequestClaims",
+]

meshflow_contracts-0.2.3/meshflow_contracts/auth.py

@@ -0,0 +1,108 @@
+import re
+from typing import Any, Literal, Mapping, Self
+
+from pydantic import BaseModel, ConfigDict, Field, field_serializer, field_validator, model_validator
+
+
+WorkspaceRole = Literal["owner", "admin", "member"]
+InstallationRole = Literal["admin", "member", "viewer"]
+InternalTokenType = Literal["app_request", "lifecycle", "integration_request"]
+IntegrationRequestTokenType = Literal["integration_request"]
+
+IDENTIFIER_PATTERN = r"^[a-z0-9]+(?:[._:-][a-z0-9]+)*$"
+JWT_STRING_OR_URI_PATTERN = r"^[^\x00-\x1f\x7f]+$"
+JWT_OPAQUE_URL_SAFE_PATTERN = r"^[A-Za-z0-9._~:-]+$"
+MAX_INTEGRATION_REQUEST_LIFETIME_SECONDS = 3_600
+MAX_JWT_REGISTERED_CLAIM_LENGTH = 512
+
+
+class AuthContext(BaseModel):
+    user_id: str
+    workspace_id: str
+    installation_id: str | None = None
+    workspace_role: WorkspaceRole
+    installation_role: InstallationRole | None = None
+    request_id: str
+
+
+class InternalJWTClaims(BaseModel):
+    iss: str
+    aud: str
+    sub: str
+    user_id: str
+    workspace_id: str
+    installation_id: str | None = None
+    workspace_role: WorkspaceRole
+    installation_role: InstallationRole | None = None
+    request_id: str
+    token_type: InternalTokenType
+    iat: int
+    exp: int
+    purpose: str | None = Field(default=None)
+
+
+class IntegrationRequestClaims(BaseModel):
+    model_config = ConfigDict(frozen=True, extra="forbid")
+
+    iss: str
+    aud: str = Field(pattern=IDENTIFIER_PATTERN)
+    sub: str
+    token_type: IntegrationRequestTokenType
+    workspace_id: str = Field(pattern=IDENTIFIER_PATTERN)
+    installation_id: str = Field(pattern=IDENTIFIER_PATTERN)
+    app_id: str = Field(pattern=IDENTIFIER_PATTERN)
+    capability_id: str = Field(pattern=IDENTIFIER_PATTERN)
+    integration_grant_id: str = Field(pattern=IDENTIFIER_PATTERN)
+    subject_user_id: str = Field(pattern=IDENTIFIER_PATTERN)
+    scopes: tuple[str, ...] = Field(min_length=1)
+    request_id: str = Field(pattern=IDENTIFIER_PATTERN)
+    jti: str
+    iat: int = Field(strict=True)
+    exp: int = Field(strict=True)
+
+    @field_validator("iss")
+    @classmethod
+    def validate_string_or_uri_claim(cls, value: str) -> str:
+        if len(value) > MAX_JWT_REGISTERED_CLAIM_LENGTH:
+            raise ValueError("claim is too long")
+        if re.fullmatch(JWT_STRING_OR_URI_PATTERN, value) is None:
+            raise ValueError("claim must be a non-empty StringOrURI without control characters")
+        return value
+
+    @field_validator("sub", "jti")
+    @classmethod
+    def validate_opaque_url_safe_claim(cls, value: str) -> str:
+        if len(value) > MAX_JWT_REGISTERED_CLAIM_LENGTH:
+            raise ValueError("claim is too long")
+        if re.fullmatch(JWT_OPAQUE_URL_SAFE_PATTERN, value) is None:
+            raise ValueError("claim must be a non-empty URL-safe opaque string")
+        return value
+
+    @field_validator("scopes")
+    @classmethod
+    def validate_scopes(cls, scopes: tuple[str, ...]) -> tuple[str, ...]:
+        if len(set(scopes)) != len(scopes):
+            raise ValueError("scopes must be unique")
+        if any(re.fullmatch(IDENTIFIER_PATTERN, scope) is None for scope in scopes):
+            raise ValueError("scopes must be identifiers")
+        return scopes
+
+    @field_serializer("scopes")
+    def serialize_scopes(self, value: tuple[str, ...]) -> list[str]:
+        return list(value)
+
+    @model_validator(mode="after")
+    def validate_cross_field_invariants(self) -> "IntegrationRequestClaims":
+        if self.aud != self.app_id:
+            raise ValueError("audience must match app id")
+        lifetime_seconds = self.exp - self.iat
+        if lifetime_seconds <= 0 or lifetime_seconds > MAX_INTEGRATION_REQUEST_LIFETIME_SECONDS:
+            raise ValueError("integration request lifetime must be positive and bounded")
+        return self
+
+    def model_copy(self, *, update: Mapping[str, Any] | None = None, deep: bool = False) -> Self:
+        copied = super().model_copy(deep=deep)
+        data = copied.model_dump(round_trip=True)
+        if update is not None:
+            data.update(update)
+        return type(self).model_validate(data)

meshflow_contracts-0.2.3/meshflow_contracts/errors.py

@@ -0,0 +1,7 @@
+from pydantic import BaseModel
+
+
+class ErrorResponse(BaseModel):
+    code: str
+    message: str
+    request_id: str | None = None

meshflow_contracts-0.2.3/meshflow_contracts/manifest.py

@@ -0,0 +1,164 @@
+import re
+from typing import Any
+from urllib.parse import urlsplit
+
+from pydantic import (
+    BaseModel,
+    ConfigDict,
+    Field,
+    HttpUrl,
+    field_serializer,
+    field_validator,
+    model_validator,
+)
+
+
+IDENTIFIER_PATTERN = r"^[a-z0-9]+(?:[._:-][a-z0-9]+)*$"
+INTERNAL_UPSTREAM_PATH_PATTERN = re.compile(r"^/[A-Za-z0-9._:-]+(?:/[A-Za-z0-9._:-]+)*$")
+CONTENT_TYPE_PATTERN = re.compile(r"^[a-z0-9!#$&^_.+-]+/[a-z0-9!#$&^_.+*-]+$")
+SAFE_EXTERNAL_INGRESS_METHODS = frozenset({"GET", "POST", "PUT", "DELETE"})
+MAX_EXTERNAL_INGRESS_BODY_BYTES = 100 * 1024 * 1024
+MAX_EXTERNAL_INGRESS_RATE_REQUESTS = 1_000
+MAX_EXTERNAL_INGRESS_RATE_WINDOW_SECONDS = 3_600
+
+
+class Publisher(BaseModel):
+    name: str
+
+
+class ServiceDefinition(BaseModel):
+    base_url: HttpUrl | str
+    health_url: str
+    manifest_url: str
+    openapi_url: str
+
+
+class NavigationEntry(BaseModel):
+    id: str
+    label: str
+    path: str
+    icon: str | None = None
+
+
+class NavigationDefinition(BaseModel):
+    entries: list[NavigationEntry]
+
+
+class PermissionDefinition(BaseModel):
+    id: str
+    description: str
+
+
+class SettingsDefinition(BaseModel):
+    sections: list[dict[str, Any]] = Field(default_factory=list)
+
+
+class ExternalIngressRatePolicy(BaseModel):
+    model_config = ConfigDict(frozen=True)
+
+    requests: int = Field(strict=True, gt=0, le=MAX_EXTERNAL_INGRESS_RATE_REQUESTS)
+    window_seconds: int = Field(
+        strict=True, gt=0, le=MAX_EXTERNAL_INGRESS_RATE_WINDOW_SECONDS
+    )
+
+
+class ExternalIngressDefinition(BaseModel):
+    model_config = ConfigDict(frozen=True)
+
+    capability_id: str = Field(pattern=IDENTIFIER_PATTERN)
+    audience: str = Field(pattern=IDENTIFIER_PATTERN)
+    allowed_methods: tuple[str, ...] = Field(min_length=1)
+    allowed_content_types: tuple[str, ...] = Field(min_length=1)
+    internal_upstream_path: str
+    scopes: tuple[str, ...] = Field(min_length=1)
+    max_body_bytes: int = Field(strict=True, gt=0, le=MAX_EXTERNAL_INGRESS_BODY_BYTES)
+    rate_policy: ExternalIngressRatePolicy
+
+    @field_validator("allowed_methods")
+    @classmethod
+    def validate_allowed_methods(cls, methods: tuple[str, ...]) -> tuple[str, ...]:
+        if len(set(methods)) != len(methods):
+            raise ValueError("allowed methods must be unique")
+        if any(method not in SAFE_EXTERNAL_INGRESS_METHODS for method in methods):
+            raise ValueError("allowed methods must be safe uppercase HTTP methods")
+        return methods
+
+    @field_validator("allowed_content_types")
+    @classmethod
+    def validate_allowed_content_types(
+        cls, content_types: tuple[str, ...]
+    ) -> tuple[str, ...]:
+        if len(set(content_types)) != len(content_types):
+            raise ValueError("allowed content types must be unique")
+        if any(CONTENT_TYPE_PATTERN.fullmatch(value) is None for value in content_types):
+            raise ValueError("allowed content types must be media types")
+        return content_types
+
+    @field_validator("scopes")
+    @classmethod
+    def validate_scopes(cls, scopes: tuple[str, ...]) -> tuple[str, ...]:
+        if len(set(scopes)) != len(scopes):
+            raise ValueError("scopes must be unique")
+        if any(re.fullmatch(IDENTIFIER_PATTERN, scope) is None for scope in scopes):
+            raise ValueError("scopes must be identifiers")
+        return scopes
+
+    @field_serializer("allowed_methods", "allowed_content_types", "scopes")
+    def serialize_policy_tuple(self, value: tuple[str, ...]) -> list[str]:
+        return list(value)
+
+    @field_validator("internal_upstream_path")
+    @classmethod
+    def validate_internal_upstream_path(cls, path: str) -> str:
+        parsed = urlsplit(path)
+        segments = parsed.path.split("/")
+        if (
+            INTERNAL_UPSTREAM_PATH_PATTERN.fullmatch(path) is None
+            or path.startswith("//")
+            or path.endswith("/")
+            or parsed.scheme
+            or parsed.netloc
+            or parsed.query
+            or parsed.fragment
+            or "%" in path
+            or "\\" in path
+            or "" in segments[1:]
+            or ".." in segments
+            or "." in segments
+        ):
+            raise ValueError("internal upstream path must be a normalized absolute path")
+        return path
+
+
+class AppManifest(BaseModel):
+    schema_version: str
+    app_id: str
+    slug: str
+    name: str
+    version: str
+    publisher: Publisher
+    service: ServiceDefinition
+    navigation: NavigationDefinition
+    description: str | None = None
+    permissions: list[PermissionDefinition] = Field(default_factory=list)
+    settings: SettingsDefinition = Field(default_factory=SettingsDefinition)
+    triggers: list[dict[str, Any]] = Field(default_factory=list)
+    actions: list[dict[str, Any]] = Field(default_factory=list)
+    jobs: list[dict[str, Any]] = Field(default_factory=list)
+    ai_tools: list[dict[str, Any]] = Field(default_factory=list)
+    external_ingress: tuple[ExternalIngressDefinition, ...] = Field(
+        default_factory=tuple, exclude_if=lambda value: value == ()
+    )
+
+    @field_serializer("external_ingress")
+    def serialize_external_ingress(
+        self, value: tuple[ExternalIngressDefinition, ...]
+    ) -> list[ExternalIngressDefinition]:
+        return list(value)
+
+    @model_validator(mode="after")
+    def validate_unique_external_ingress_capability_ids(self) -> "AppManifest":
+        capability_ids = [entry.capability_id for entry in self.external_ingress]
+        if len(set(capability_ids)) != len(capability_ids):
+            raise ValueError("external ingress capability ids must be unique")
+        return self

meshflow_contracts-0.2.3/meshflow_contracts/observability.py

@@ -0,0 +1,6 @@
+from pydantic import BaseModel
+
+
+class RequestContext(BaseModel):
+    request_id: str
+    service: str

meshflow_contracts-0.2.3/pyproject.toml

@@ -0,0 +1,64 @@
+[build-system]
+requires = ["uv_build>=0.11.28,<0.12"]
+build-backend = "uv_build"
+
+[project]
+name = "meshflow-contracts"
+version = "0.2.3"
+description = "Shared MeshFlow platform contracts."
+readme = "README.md"
+requires-python = ">=3.14"
+license = "Apache-2.0"
+license-files = ["LICENSE"]
+authors = [
+    { name = "MeshFlow contributors" },
+]
+keywords = ["meshflow", "contracts", "pydantic", "schemas"]
+classifiers = [
+    "Development Status :: 3 - Alpha",
+    "Intended Audience :: Developers",
+    "Programming Language :: Python :: 3",
+    "Programming Language :: Python :: 3 :: Only",
+    "Programming Language :: Python :: 3.14",
+    "Typing :: Typed",
+]
+dependencies = [
+    "pydantic>=2.13.4,<3",
+]
+
+[project.urls]
+Repository = "https://github.com/MeshFlow-os/meshflow-contracts"
+Issues = "https://github.com/MeshFlow-os/meshflow-contracts/issues"
+Changelog = "https://github.com/MeshFlow-os/meshflow-contracts/blob/main/CHANGELOG.md"
+
+[dependency-groups]
+dev = [
+    "mypy>=1.19.1",
+    "pyyaml>=6.0.3",
+    "pytest>=9.0.2",
+    "ruff>=0.14.14",
+    "types-pyyaml>=6.0.12",
+]
+
+[tool.ruff]
+line-length = 100
+target-version = "py314"
+
+[tool.mypy]
+python_version = "3.14"
+strict = true
+warn_unused_configs = true
+plugins = ["pydantic.mypy"]
+
+[tool.pytest.ini_options]
+pythonpath = ["."]
+markers = [
+    "integration: builds and smoke-installs real release distributions",
+]
+
+[tool.uv]
+required-version = "==0.11.28"
+
+[tool.uv.build-backend]
+module-root = ""
+module-name = "meshflow_contracts"