messagefoundry 0.2.6__tar.gz → 0.2.7__tar.gz

{messagefoundry-0.2.6 → messagefoundry-0.2.7}/.gitattributes

@@ -2,3 +2,4 @@
 # `git diff --exit-code`) can't be tripped by Windows CRLF drift (DEP-1).
 uv.lock text eol=lf
 requirements.lock text eol=lf
+.mefor-hooks/** text eol=lf

{messagefoundry-0.2.6 → messagefoundry-0.2.7}/.github/workflows/release.yml

@@ -54,6 +54,21 @@ jobs:
         with:
           python-version: "3.14"
 
+      - name: Rewrite README repo slug for the public PyPI long_description
+        run: |
+          # PyPI renders README.md (pyproject `readme = "README.md"`) as the project description and
+          # fetches it anonymously. The source README points at the PRIVATE source repo
+          # (wshallwshall/MessageFoundry) so the team's GitHub view shows the private repo's own CI
+          # badges — but anonymous fetches of a private repo's Actions badge SVG 404 (broken badge
+          # images), and every body link 404s on click. The public mirror (MEFORORG/MessageFoundry)
+          # runs the same workflows and is anonymously reachable, so rewrite the slug here (the same
+          # rewrite scripts/publish/publish.ps1 applies to the mirror) before `python -m build` embeds
+          # the README. Ephemeral runner edit only — never committed.
+          sed -i 's#wshallwshall/MessageFoundry#MEFORORG/MessageFoundry#g' README.md
+          if grep -q 'wshallwshall/MessageFoundry' README.md; then
+            echo '::error::README slug rewrite left private-repo links'; exit 1
+          fi
+
       - name: Build sdist + wheel
         run: |
           python -m pip install --upgrade pip build

{messagefoundry-0.2.6 → messagefoundry-0.2.7}/.gitignore

@@ -80,3 +80,8 @@ TRANSCRIPTS.md
 # Still usable by name (they sit in PROFILES_DIR) and copy-on to the test box.
 /harness/load/profiles/hospital-baseline.toml
 /harness/load/profiles/soak-12h.toml
+# --- MessageFoundry ---
+.mefor/
+*.db*
+.DS_Store
+Thumbs.db

messagefoundry-0.2.7/.mefor-hooks/pre-commit

@@ -0,0 +1,25 @@
+#!/bin/sh
+# MessageFoundry pre-commit checks — generated by the VS Code extension.
+# Runs `messagefoundry check` so a commit can't introduce a broken config.
+# Bypass once with: git commit --no-verify
+
+PY=python
+command -v python >/dev/null 2>&1 || PY=python3
+if ! command -v "$PY" >/dev/null 2>&1; then
+  echo "MessageFoundry: python not found; skipping checks." >&2
+  exit 0
+fi
+
+# Prefer a project virtualenv if present (Windows + POSIX layouts).
+if [ -x ".venv/Scripts/python.exe" ]; then
+  PY=".venv/Scripts/python.exe"
+elif [ -x ".venv/bin/python" ]; then
+  PY=".venv/bin/python"
+fi
+
+if ! "$PY" -c "import messagefoundry" >/dev/null 2>&1; then
+  echo "MessageFoundry: 'messagefoundry' not importable in this environment; skipping checks." >&2
+  exit 0
+fi
+
+exec "$PY" -m messagefoundry check --config 'samples/config' --messages 'samples/messages'

{messagefoundry-0.2.6 → messagefoundry-0.2.7}/CHANGELOG.md

@@ -6,6 +6,30 @@ All notable changes to MessageFoundry are documented here. The format follows
 
 ## [Unreleased]
 
+## [0.2.7] — 2026-06-27 — Early Access
+
+A docs/packaging release that fixes the broken badge images on the PyPI project page
+and adds a config-check pre-commit hook.
+
+### Fixed
+- **Broken badge images in the PyPI project description.** The CI and Security status
+  badges in the README pointed at the **private** source repo, so they rendered as
+  broken images on the public PyPI page — an anonymous viewer can't fetch a private
+  repo's GitHub Actions badge SVG (it 404s). The README now points at the public
+  mirror (`MEFORORG/MessageFoundry`), and the release build additionally rewrites any
+  remaining `wshallwshall`→`MEFORORG` repo slug in the README before it is embedded as
+  the PyPI `long_description`, so the rendered badges resolve anonymously. (#568)
+
+### Added
+- **`messagefoundry check` pre-commit hook.** A VS Code-extension-generated
+  `.mefor-hooks/pre-commit` runs `messagefoundry check` so a commit can't introduce a
+  broken config (skips cleanly if python or the package isn't importable; bypass with
+  `--no-verify`). (#568)
+
+### Docs
+- Backlog **#47** — base64 embedded-document (attachment) pruning (Mirth
+  attachment-handler / data-pruner parity); and a Changelog link in the README. (#568)
+
 ## [0.2.6] — 2026-06-27 — Early Access
 
 A large release: the **throughput-maximization build** (high-fan-out store-once, multi-process
@@ -275,7 +299,8 @@ tests, but the external code review + penetration test (the bar for a security-c
 - Releases are built, SBOM'd (CycloneDX), and signed with [Sigstore](https://www.sigstore.dev/) — see the
   `release` workflow.
 
-[Unreleased]: https://github.com/wshallwshall/MessageFoundry/compare/v0.2.6...HEAD
+[Unreleased]: https://github.com/wshallwshall/MessageFoundry/compare/v0.2.7...HEAD
+[0.2.7]: https://github.com/wshallwshall/MessageFoundry/compare/v0.2.6...v0.2.7
 [0.2.6]: https://github.com/wshallwshall/MessageFoundry/compare/v0.2.5...v0.2.6
 [0.2.5]: https://github.com/wshallwshall/MessageFoundry/compare/v0.2.4...v0.2.5
 [0.2.4]: https://github.com/wshallwshall/MessageFoundry/compare/v0.2.3...v0.2.4

{messagefoundry-0.2.6 → messagefoundry-0.2.7}/PKG-INFO

@@ -1,7 +1,11 @@
 Metadata-Version: 2.4
 Name: messagefoundry
-Version: 0.2.6
+Version: 0.2.7
 Summary: Open-source healthcare integration engine — route, transform, and validate messages across many formats and connection types
+Project-URL: Homepage, https://messagefoundry.org/
+Project-URL: Documentation, https://messagefoundry.org/
+Project-URL: Repository, https://github.com/MEFORORG/MessageFoundry
+Project-URL: Issues, https://github.com/MEFORORG/MessageFoundry/issues
 License-Expression: AGPL-3.0-or-later
 License-File: LICENSE
 License-File: NOTICE
@@ -66,10 +70,13 @@ Description-Content-Type: text/markdown
 
 # MessageFoundry
 
-[![CI](https://github.com/wshallwshall/MessageFoundry/actions/workflows/ci.yml/badge.svg)](https://github.com/wshallwshall/MessageFoundry/actions/workflows/ci.yml)
-[![Security](https://github.com/wshallwshall/MessageFoundry/actions/workflows/security.yml/badge.svg)](https://github.com/wshallwshall/MessageFoundry/actions/workflows/security.yml)
-[![License: AGPL v3](https://img.shields.io/badge/License-AGPL_v3-blue.svg)](https://github.com/wshallwshall/MessageFoundry/blob/main/LICENSE)
-[![Python 3.14+](https://img.shields.io/badge/python-3.14%2B-blue.svg)](https://github.com/wshallwshall/MessageFoundry/blob/main/pyproject.toml)
+[![CI](https://github.com/MEFORORG/MessageFoundry/actions/workflows/ci.yml/badge.svg)](https://github.com/MEFORORG/MessageFoundry/actions/workflows/ci.yml)
+[![Security](https://github.com/MEFORORG/MessageFoundry/actions/workflows/security.yml/badge.svg)](https://github.com/MEFORORG/MessageFoundry/actions/workflows/security.yml)
+[![License: AGPL v3](https://img.shields.io/badge/License-AGPL_v3-blue.svg)](https://github.com/MEFORORG/MessageFoundry/blob/main/LICENSE)
+[![Python 3.14+](https://img.shields.io/badge/python-3.14%2B-blue.svg)](https://github.com/MEFORORG/MessageFoundry/blob/main/pyproject.toml)
+
+**Website & documentation: [messagefoundry.org](https://messagefoundry.org/)** ·
+**[Changelog](https://github.com/MEFORORG/MessageFoundry/blob/main/CHANGELOG.md)**
 
 MessageFoundry is an **open-source healthcare integration engine** — a modern, Python-native HL7
 interface engine. It connects clinical and business systems by routing, transforming, and validating
@@ -96,10 +103,10 @@ The PySide6 console talks to it over a localhost HTTP + WebSocket API — the sa
 whether the engine runs in-process, as a local daemon, or (later) on a remote host.
 No hand-rolled IPC; the deployment split is a config choice, not an architectural fork.
 
-See **[docs/architecture-diagram.md](https://github.com/wshallwshall/MessageFoundry/blob/main/docs/architecture-diagram.md)** for the rendered diagrams —
+See **[docs/architecture-diagram.md](https://github.com/MEFORORG/MessageFoundry/blob/main/docs/architecture-diagram.md)** for the rendered diagrams —
 system topology, runtime message flow through the staged queue, and the config wiring graph (Mermaid,
 renders on GitHub and in the VS Code preview). The prose source of truth is
-[docs/ARCHITECTURE.md](https://github.com/wshallwshall/MessageFoundry/blob/main/docs/ARCHITECTURE.md).
+[docs/ARCHITECTURE.md](https://github.com/MEFORORG/MessageFoundry/blob/main/docs/ARCHITECTURE.md).
 
 ### Key decisions
 - **Reliable by default.** A durable, transactional pipeline gives at-least-once delivery,
@@ -113,7 +120,7 @@ renders on GitHub and in the VS Code preview). The prose source of truth is
 - **PHI is first-class.** Authentication, RBAC, a user-attributed audit log of message
   views/replays, **encryption-at-rest** for message bodies (AES-256-GCM), **global PHI log redaction**,
   and **transport TLS** (HTTPS/WSS for the API plus MLLP-over-TLS) are **built**; MFA and off-box log
-  shipping remain on the roadmap. See [docs/PHI.md](https://github.com/wshallwshall/MessageFoundry/blob/main/docs/PHI.md) for the full data-protection map.
+  shipping remain on the roadmap. See [docs/PHI.md](https://github.com/MEFORORG/MessageFoundry/blob/main/docs/PHI.md) for the full data-protection map.
 
 ## Features
 
@@ -132,9 +139,9 @@ transport TLS — and it runs single-node or in active-passive high availability
 
 Full documentation lives on **[messagefoundry.org](https://messagefoundry.org/)**:
 
-- **[Mental map](https://messagefoundry.org/assets/docs/MessageFoundry-Mental-Model.pdf)** — a one-page
-  picture of how the pieces fit: Connections → Router → Handlers → Connections, with the headless
-  engine and the console/IDE that drive it.
+- **[Mental map](https://messagefoundry.org/assets/docs/MessageFoundry-Mental-Model.pdf)** — an
+  orientation guide to how the pieces fit: Connections → Router → Handlers → Connections, with the
+  headless engine and the console/IDE that drive it.
 - **[Install Guide](https://messagefoundry.org/assets/docs/MessageFoundry-Install-Guide.pdf)** — install,
   configure, secure, and roll out to production.
 - **[User Guide](https://messagefoundry.org/assets/docs/MessageFoundry-User-Guide.pdf)** — author and
@@ -149,7 +156,7 @@ Full documentation lives on **[messagefoundry.org](https://messagefoundry.org/)*
 **The recommended way to deploy MessageFoundry is to install the published package from
 [PyPI](https://pypi.org/project/messagefoundry/)** — a signed, version-pinned wheel is the
 supported production artifact, with no source checkout required. Install it as a **pinned
-dependency**, then scaffold your own config repo ([ADR 0017](https://github.com/wshallwshall/MessageFoundry/blob/main/docs/adr/0017-consumer-deployment-model.md)):
+dependency**, then scaffold your own config repo ([ADR 0017](https://github.com/MEFORORG/MessageFoundry/blob/main/docs/adr/0017-consumer-deployment-model.md)):
 
 ```bash
 pip install "messagefoundry==<version>"   # pin the exact engine version (core runtime, SQLite store)
@@ -181,8 +188,8 @@ test harness* below for where to get it.
 > **Verify before you install (supply chain).** Every release is built by a GitHub Actions workflow,
 > Sigstore-signed, and carries SLSA build-provenance + PEP 740 attestations. Verify a downloaded
 > wheel against its source commit with
-> `gh attestation verify <wheel> --repo wshallwshall/MessageFoundry`, or pull the signed wheel + SBOM
-> from the [GitHub Release assets](https://github.com/wshallwshall/MessageFoundry/releases). For an
+> `gh attestation verify <wheel> --repo MEFORORG/MessageFoundry`, or pull the signed wheel + SBOM
+> from the [GitHub Release assets](https://github.com/MEFORORG/MessageFoundry/releases). For an
 > air-gapped site, mirror the wheel to a private index.
 >
 > *(Engine developers install from a checkout instead — see [Development](#development).)*
@@ -219,14 +226,14 @@ python -m messagefoundry.console --url http://127.0.0.1:8765
 
 ### VS Code extension & test harness
 
-- **VS Code extension** ([`ide/`](https://github.com/wshallwshall/MessageFoundry/tree/main/ide/)) — author and test interfaces in your editor: a New Route
+- **VS Code extension** ([`ide/`](https://github.com/MEFORORG/MessageFoundry/tree/main/ide/)) — author and test interfaces in your editor: a New Route
   Wizard, validate-on-save, a Test Bench (dry-run `.hl7` files with before/after diffs), Stage →
   Promote to a running engine, and an HL7-aware `@messagefoundry` chat participant. **It is not on PyPI**
   (a VS Code extension is a different ecosystem) **and not yet on the VS Code Marketplace** — Marketplace
-  + Open VSX publishing is **planned** (see [the backlog](https://github.com/wshallwshall/MessageFoundry/blob/main/docs/BACKLOG.md)). Until then, get it from
+  + Open VSX publishing is **planned** (see [the backlog](https://github.com/MEFORORG/MessageFoundry/blob/main/docs/BACKLOG.md)). Until then, get it from
   this repo: open the `ide/` folder in VS Code and press **F5** (Extension Development Host), or build the
   VSIX (`cd ide && npm install && npx @vscode/vsce package`) and install the `.vsix`. See
-  [ide/README.md](https://github.com/wshallwshall/MessageFoundry/blob/main/ide/README.md).
+  [ide/README.md](https://github.com/MEFORORG/MessageFoundry/blob/main/ide/README.md).
 - **Test harness** — synthetic-only send/receive (MLLP), load, and failover tooling for exercising a
   running engine. It ships as a **separate distribution, `messagefoundry-harness`**, released in lockstep
   with the engine (it is *not* in the engine wheel): `pip install messagefoundry-harness`, then
@@ -235,14 +242,14 @@ python -m messagefoundry.console --url http://127.0.0.1:8765
 ## License
 
 MessageFoundry is licensed under the **GNU Affero General Public License v3.0 or later**
-(`AGPL-3.0-or-later`) — see [LICENSE](https://github.com/wshallwshall/MessageFoundry/blob/main/LICENSE). Running a modified version as a network service
+(`AGPL-3.0-or-later`) — see [LICENSE](https://github.com/MEFORORG/MessageFoundry/blob/main/LICENSE). Running a modified version as a network service
 triggers the AGPL's §13 source-offer obligation. A separately-licensed commercial edition is planned
 by **MessageFoundry Organization** under the standard open-core model — see
-[COMMERCIAL-LICENSE.md](https://github.com/wshallwshall/MessageFoundry/blob/main/COMMERCIAL-LICENSE.md) (terms pending legal review). See [NOTICE](https://github.com/wshallwshall/MessageFoundry/blob/main/NOTICE)
+[COMMERCIAL-LICENSE.md](https://github.com/MEFORORG/MessageFoundry/blob/main/COMMERCIAL-LICENSE.md) (terms pending legal review). See [NOTICE](https://github.com/MEFORORG/MessageFoundry/blob/main/NOTICE)
 for copyright and attribution.
 
 ## Contributing
 
-Contributions are welcome — see [CONTRIBUTING.md](https://github.com/wshallwshall/MessageFoundry/blob/main/CONTRIBUTING.md), our
-[Code of Conduct](https://github.com/wshallwshall/MessageFoundry/blob/main/CODE_OF_CONDUCT.md), and how the project is governed in [GOVERNANCE.md](https://github.com/wshallwshall/MessageFoundry/blob/main/GOVERNANCE.md).
-A signed [Contributor License Agreement](https://github.com/wshallwshall/MessageFoundry/blob/main/CLA.md) is required before a pull request can be merged.
+Contributions are welcome — see [CONTRIBUTING.md](https://github.com/MEFORORG/MessageFoundry/blob/main/CONTRIBUTING.md), our
+[Code of Conduct](https://github.com/MEFORORG/MessageFoundry/blob/main/CODE_OF_CONDUCT.md), and how the project is governed in [GOVERNANCE.md](https://github.com/MEFORORG/MessageFoundry/blob/main/GOVERNANCE.md).
+A signed [Contributor License Agreement](https://github.com/MEFORORG/MessageFoundry/blob/main/CLA.md) is required before a pull request can be merged.

{messagefoundry-0.2.6 → messagefoundry-0.2.7}/README.md

@@ -1,9 +1,12 @@
 # MessageFoundry
 
-[![CI](https://github.com/wshallwshall/MessageFoundry/actions/workflows/ci.yml/badge.svg)](https://github.com/wshallwshall/MessageFoundry/actions/workflows/ci.yml)
-[![Security](https://github.com/wshallwshall/MessageFoundry/actions/workflows/security.yml/badge.svg)](https://github.com/wshallwshall/MessageFoundry/actions/workflows/security.yml)
-[![License: AGPL v3](https://img.shields.io/badge/License-AGPL_v3-blue.svg)](https://github.com/wshallwshall/MessageFoundry/blob/main/LICENSE)
-[![Python 3.14+](https://img.shields.io/badge/python-3.14%2B-blue.svg)](https://github.com/wshallwshall/MessageFoundry/blob/main/pyproject.toml)
+[![CI](https://github.com/MEFORORG/MessageFoundry/actions/workflows/ci.yml/badge.svg)](https://github.com/MEFORORG/MessageFoundry/actions/workflows/ci.yml)
+[![Security](https://github.com/MEFORORG/MessageFoundry/actions/workflows/security.yml/badge.svg)](https://github.com/MEFORORG/MessageFoundry/actions/workflows/security.yml)
+[![License: AGPL v3](https://img.shields.io/badge/License-AGPL_v3-blue.svg)](https://github.com/MEFORORG/MessageFoundry/blob/main/LICENSE)
+[![Python 3.14+](https://img.shields.io/badge/python-3.14%2B-blue.svg)](https://github.com/MEFORORG/MessageFoundry/blob/main/pyproject.toml)
+
+**Website & documentation: [messagefoundry.org](https://messagefoundry.org/)** ·
+**[Changelog](https://github.com/MEFORORG/MessageFoundry/blob/main/CHANGELOG.md)**
 
 MessageFoundry is an **open-source healthcare integration engine** — a modern, Python-native HL7
 interface engine. It connects clinical and business systems by routing, transforming, and validating
@@ -30,10 +33,10 @@ The PySide6 console talks to it over a localhost HTTP + WebSocket API — the sa
 whether the engine runs in-process, as a local daemon, or (later) on a remote host.
 No hand-rolled IPC; the deployment split is a config choice, not an architectural fork.
 
-See **[docs/architecture-diagram.md](https://github.com/wshallwshall/MessageFoundry/blob/main/docs/architecture-diagram.md)** for the rendered diagrams —
+See **[docs/architecture-diagram.md](https://github.com/MEFORORG/MessageFoundry/blob/main/docs/architecture-diagram.md)** for the rendered diagrams —
 system topology, runtime message flow through the staged queue, and the config wiring graph (Mermaid,
 renders on GitHub and in the VS Code preview). The prose source of truth is
-[docs/ARCHITECTURE.md](https://github.com/wshallwshall/MessageFoundry/blob/main/docs/ARCHITECTURE.md).
+[docs/ARCHITECTURE.md](https://github.com/MEFORORG/MessageFoundry/blob/main/docs/ARCHITECTURE.md).
 
 ### Key decisions
 - **Reliable by default.** A durable, transactional pipeline gives at-least-once delivery,
@@ -47,7 +50,7 @@ renders on GitHub and in the VS Code preview). The prose source of truth is
 - **PHI is first-class.** Authentication, RBAC, a user-attributed audit log of message
   views/replays, **encryption-at-rest** for message bodies (AES-256-GCM), **global PHI log redaction**,
   and **transport TLS** (HTTPS/WSS for the API plus MLLP-over-TLS) are **built**; MFA and off-box log
-  shipping remain on the roadmap. See [docs/PHI.md](https://github.com/wshallwshall/MessageFoundry/blob/main/docs/PHI.md) for the full data-protection map.
+  shipping remain on the roadmap. See [docs/PHI.md](https://github.com/MEFORORG/MessageFoundry/blob/main/docs/PHI.md) for the full data-protection map.
 
 ## Features
 
@@ -66,9 +69,9 @@ transport TLS — and it runs single-node or in active-passive high availability
 
 Full documentation lives on **[messagefoundry.org](https://messagefoundry.org/)**:
 
-- **[Mental map](https://messagefoundry.org/assets/docs/MessageFoundry-Mental-Model.pdf)** — a one-page
-  picture of how the pieces fit: Connections → Router → Handlers → Connections, with the headless
-  engine and the console/IDE that drive it.
+- **[Mental map](https://messagefoundry.org/assets/docs/MessageFoundry-Mental-Model.pdf)** — an
+  orientation guide to how the pieces fit: Connections → Router → Handlers → Connections, with the
+  headless engine and the console/IDE that drive it.
 - **[Install Guide](https://messagefoundry.org/assets/docs/MessageFoundry-Install-Guide.pdf)** — install,
   configure, secure, and roll out to production.
 - **[User Guide](https://messagefoundry.org/assets/docs/MessageFoundry-User-Guide.pdf)** — author and
@@ -83,7 +86,7 @@ Full documentation lives on **[messagefoundry.org](https://messagefoundry.org/)*
 **The recommended way to deploy MessageFoundry is to install the published package from
 [PyPI](https://pypi.org/project/messagefoundry/)** — a signed, version-pinned wheel is the
 supported production artifact, with no source checkout required. Install it as a **pinned
-dependency**, then scaffold your own config repo ([ADR 0017](https://github.com/wshallwshall/MessageFoundry/blob/main/docs/adr/0017-consumer-deployment-model.md)):
+dependency**, then scaffold your own config repo ([ADR 0017](https://github.com/MEFORORG/MessageFoundry/blob/main/docs/adr/0017-consumer-deployment-model.md)):
 
 ```bash
 pip install "messagefoundry==<version>"   # pin the exact engine version (core runtime, SQLite store)
@@ -115,8 +118,8 @@ test harness* below for where to get it.
 > **Verify before you install (supply chain).** Every release is built by a GitHub Actions workflow,
 > Sigstore-signed, and carries SLSA build-provenance + PEP 740 attestations. Verify a downloaded
 > wheel against its source commit with
-> `gh attestation verify <wheel> --repo wshallwshall/MessageFoundry`, or pull the signed wheel + SBOM
-> from the [GitHub Release assets](https://github.com/wshallwshall/MessageFoundry/releases). For an
+> `gh attestation verify <wheel> --repo MEFORORG/MessageFoundry`, or pull the signed wheel + SBOM
+> from the [GitHub Release assets](https://github.com/MEFORORG/MessageFoundry/releases). For an
 > air-gapped site, mirror the wheel to a private index.
 >
 > *(Engine developers install from a checkout instead — see [Development](#development).)*
@@ -153,14 +156,14 @@ python -m messagefoundry.console --url http://127.0.0.1:8765
 
 ### VS Code extension & test harness
 
-- **VS Code extension** ([`ide/`](https://github.com/wshallwshall/MessageFoundry/tree/main/ide/)) — author and test interfaces in your editor: a New Route
+- **VS Code extension** ([`ide/`](https://github.com/MEFORORG/MessageFoundry/tree/main/ide/)) — author and test interfaces in your editor: a New Route
   Wizard, validate-on-save, a Test Bench (dry-run `.hl7` files with before/after diffs), Stage →
   Promote to a running engine, and an HL7-aware `@messagefoundry` chat participant. **It is not on PyPI**
   (a VS Code extension is a different ecosystem) **and not yet on the VS Code Marketplace** — Marketplace
-  + Open VSX publishing is **planned** (see [the backlog](https://github.com/wshallwshall/MessageFoundry/blob/main/docs/BACKLOG.md)). Until then, get it from
+  + Open VSX publishing is **planned** (see [the backlog](https://github.com/MEFORORG/MessageFoundry/blob/main/docs/BACKLOG.md)). Until then, get it from
   this repo: open the `ide/` folder in VS Code and press **F5** (Extension Development Host), or build the
   VSIX (`cd ide && npm install && npx @vscode/vsce package`) and install the `.vsix`. See
-  [ide/README.md](https://github.com/wshallwshall/MessageFoundry/blob/main/ide/README.md).
+  [ide/README.md](https://github.com/MEFORORG/MessageFoundry/blob/main/ide/README.md).
 - **Test harness** — synthetic-only send/receive (MLLP), load, and failover tooling for exercising a
   running engine. It ships as a **separate distribution, `messagefoundry-harness`**, released in lockstep
   with the engine (it is *not* in the engine wheel): `pip install messagefoundry-harness`, then
@@ -169,14 +172,14 @@ python -m messagefoundry.console --url http://127.0.0.1:8765
 ## License
 
 MessageFoundry is licensed under the **GNU Affero General Public License v3.0 or later**
-(`AGPL-3.0-or-later`) — see [LICENSE](https://github.com/wshallwshall/MessageFoundry/blob/main/LICENSE). Running a modified version as a network service
+(`AGPL-3.0-or-later`) — see [LICENSE](https://github.com/MEFORORG/MessageFoundry/blob/main/LICENSE). Running a modified version as a network service
 triggers the AGPL's §13 source-offer obligation. A separately-licensed commercial edition is planned
 by **MessageFoundry Organization** under the standard open-core model — see
-[COMMERCIAL-LICENSE.md](https://github.com/wshallwshall/MessageFoundry/blob/main/COMMERCIAL-LICENSE.md) (terms pending legal review). See [NOTICE](https://github.com/wshallwshall/MessageFoundry/blob/main/NOTICE)
+[COMMERCIAL-LICENSE.md](https://github.com/MEFORORG/MessageFoundry/blob/main/COMMERCIAL-LICENSE.md) (terms pending legal review). See [NOTICE](https://github.com/MEFORORG/MessageFoundry/blob/main/NOTICE)
 for copyright and attribution.
 
 ## Contributing
 
-Contributions are welcome — see [CONTRIBUTING.md](https://github.com/wshallwshall/MessageFoundry/blob/main/CONTRIBUTING.md), our
-[Code of Conduct](https://github.com/wshallwshall/MessageFoundry/blob/main/CODE_OF_CONDUCT.md), and how the project is governed in [GOVERNANCE.md](https://github.com/wshallwshall/MessageFoundry/blob/main/GOVERNANCE.md).
-A signed [Contributor License Agreement](https://github.com/wshallwshall/MessageFoundry/blob/main/CLA.md) is required before a pull request can be merged.
+Contributions are welcome — see [CONTRIBUTING.md](https://github.com/MEFORORG/MessageFoundry/blob/main/CONTRIBUTING.md), our
+[Code of Conduct](https://github.com/MEFORORG/MessageFoundry/blob/main/CODE_OF_CONDUCT.md), and how the project is governed in [GOVERNANCE.md](https://github.com/MEFORORG/MessageFoundry/blob/main/GOVERNANCE.md).
+A signed [Contributor License Agreement](https://github.com/MEFORORG/MessageFoundry/blob/main/CLA.md) is required before a pull request can be merged.

{messagefoundry-0.2.6 → messagefoundry-0.2.7}/docs/BACKLOG.md

@@ -2419,6 +2419,88 @@ investigation (2026-06-27).
 
 ---
 
+## 47. Embedded-document (base64 attachment) pruning — strip OBX-5 / `mfb64:` blobs after a per-connection window (Mirth attachment-handler parity) (P2)
+
+**Type:** feature — selective PHI/storage minimization. Large **base64-encoded embedded documents** (PDF
+reports, CCD/C-CDA, scanned images) ride inline in messages — in HL7 they arrive in **OBX-5** (ED data
+type), and generically anywhere via the ADR 0028 `mfb64:v1:` carriage marker
+([`adr/0028-base64-binary-carriage-codec.md`](adr/0028-base64-binary-carriage-codec.md)). These blobs are
+often tens to hundreds of KB each and are stored verbatim in the raw message at **every** persisted stage
+(`ingress` → `routed` → `outbound`), so a chatty document feed bloats the store far out of proportion to
+its message *count*. The ask: let **each connection** carry a setting to **purge just the embedded
+documents** after a timeframe, keeping the rest of the message (segments, fields, metadata, disposition)
+intact.
+
+**Gap today.** Retention is all-or-nothing on the whole body: the global `RetentionRunner`
+([`pipeline/retention.py`](../messagefoundry/pipeline/retention.py)) calls `purge_message_bodies`
+([`store/store.py`](../messagefoundry/store/store.py)), which **nulls the entire raw body** keep-metadata,
+store-wide, by message age only. There is no way to evict *only the bulky attachment* while preserving the
+surrounding HL7 (the segments an operator still wants to see), and no per-connection window (that broader
+gap is **#34**). Nothing offloads the blob at ingest either — it rides the pipeline inline.
+
+**What Mirth does (researched 2026-06-26).** Mirth solves this with **two** complementary mechanisms, and
+it's worth deciding which we mirror:
+- **Attachment Handler (offload at ingest).** A per-channel handler on the source connector extracts bulky
+  embedded content *before* the message is stored/transformed — e.g. a **Regex** handler pulls the base64
+  PDF out of OBX-5, a **DICOM**/**JavaScript**/**Custom** handler for other shapes. The extracted bytes go
+  to a **separate attachment table** (`d_ma<channelId>`) and the inline blob is replaced in the message by
+  an **attachment token** (`${ATTACH:...}`); it's reattached on the outbound via the same token. A Base64
+  decode option ([MIRTH-2799](https://www.mirthcorp.com/community/issues/si/jira.issueviews:issue-html/MIRTH-2799/MIRTH-2799.html))
+  stores the *decoded* bytes, not the base64 string. This keeps the main message rows small and avoids
+  loading the blob through every transformer step — the recommended lever to bound DB growth.
+- **Data Pruner (prune after a window).** A scheduled task prunes message **content** and **metadata** on
+  *independent* clocks per channel's Message Storage settings — e.g. keep metadata indefinitely but prune
+  content (incl. attachments) after 1 day. Attachments live in their own tables and are pruned with the
+  content. Pruning runs only when the scheduler is enabled, and *which* messages prune is governed by the
+  per-channel storage/`max_message_age` settings.
+  *(Sources: [Zen Healthcare — The Data Pruner](https://consultzen.com/mirth-connect-tutorial-data-pruner/);
+  [NextGen — Message Pruning Settings](https://docs.nextgen.com/en-US/mirth%C2%AE-connect-by-nextgen-healthcare-user-guide-3273569/message-pruning-settings-14245);
+  [CapMinds — high-volume CCD/C-CDA channels](https://www.capminds.com/blog/optimizing-mirth-connect-channels-for-high-volume-ccd-c-cda-document-workflows/).)*
+
+**Design fork (for the ADR).** The user's literal ask is the **prune-after-a-window** half (Mirth's Data
+Pruner, attachment-scoped). The more impactful half is **offload-at-ingest** (Mirth's Attachment Handler),
+which stops the bloat at the source instead of carrying it through three stages first. Decide whether to
+build (a) an in-place **selective strip** of the embedded document after a per-connection window — cheaper,
+matches the request, but the blob still bloats the store until the window elapses and is duplicated across
+stages meanwhile; (b) an **ingest-time offload** to a separate attachment store with a placeholder marker
+(true Mirth parity, bounds growth from the start, but a larger build touching the pipeline + a new store
+table + reattach-on-outbound); or (c) both, with (a) as the near-term increment.
+
+**Scope (when built — increment (a)):**
+- A **per-connection `prune_documents_after` window** (with an embedded-doc size threshold), layered over a
+  global default — the same **global-default + per-connection-override** model used for FIFO,
+  `RetryPolicy`, `BuildupThreshold`, and proposed for **#34** retention. Author it on the inbound
+  `ConnectionSpec` and/or as `connections.toml` keys (ADR 0007) so it stays hand-/GUI-editable.
+- A new store purge path (sibling to `purge_message_bodies`) that **rewrites the stored raw in place**,
+  replacing each embedded document with a small **placeholder/tombstone** (size + content-type + a
+  "pruned <ts>" marker) while leaving the rest of the message byte-stable. Target both carriage forms: the
+  generic `mfb64:v1:` marker and HL7 **OBX-5 ED** embeds. **Never string-slice raw HL7** (CLAUDE.md §8) —
+  edit via the parsed model / codec and re-encode. Must land on **all three** backends (SQLite / Postgres /
+  SQL Server).
+- Preserve every invariant: **never delete the row** (counts / disposition / audit stay intact), the
+  message remains parseable after the strip, and emit **one audit entry per pass** recording the
+  per-connection window + counts + bytes reclaimed (no message content). Pruning a document is irreversible —
+  surface it as a distinct disposition/flag so an operator viewing the message knows the attachment was
+  evicted vs never present.
+
+**Out of scope / leave to siblings:** whole-message retention windows and dead-letter pruning are **#34**
+(this is the *document-only*, finer-grained cut — they should share the per-connection-override plumbing).
+`audit_days` stays keep-forever. The ingest-time offload (fork (b)) is its own ADR if pursued.
+
+**Why P2 / on-trigger.** Real document feeds (radiology results with embedded PDFs, CCDs) are exactly where
+store bloat bites, and PHI data-minimization wants the bulky attachment gone on a *shorter* clock than the
+clinical metadata — a standard Mirth operator expectation. But it's not an open exposure on the shipping
+config and wants an ADR (the design fork above) before code. **Trigger:** a feed carrying large OBX-5 / base64
+embedded documents whose volume bloats the store. Relates to **#34** (per-connection retention — shared
+override plumbing), **ADR 0028** (base64 carriage), and **#21**/**#33** (per-connection observability /
+config-UX).
+
+**Source:** owner request (2026-06-26) — "let each connection purge base64 embedded documents (OBX-5 in
+HL7, or other message types) after a timeframe; they bloat the logs — research what Mirth does." Mirth
+attachment-handler + data-pruner behavior researched the same day (citations above).
+
+---
+
 *Everything else from the 2026-06-10 full-codebase review (1 critical, 13 high, 33 medium, 31 low —
 78 findings) has been remediated; see the review report's §6 action order. The two items it still
 sourced — **#1 (SQL Server concurrency)** and **#2 (console off-thread)** — are now both **DONE**

{messagefoundry-0.2.6 → messagefoundry-0.2.7}/messagefoundry/__init__.py

@@ -61,7 +61,7 @@ from messagefoundry.parsing.message import Message, RawMessage
 from messagefoundry.parsing.split import split_by_obr
 from messagefoundry.timezone import convert_hl7_timestamp, to_zone
 
-__version__ = "0.2.6"
+__version__ = "0.2.7"
 
 __all__ = [
     "Message",

{messagefoundry-0.2.6 → messagefoundry-0.2.7}/pyproject.toml

@@ -48,6 +48,13 @@ dependencies = [
     "defusedxml>=0.7.1",    # hardened XML parse for RawMessage.xml() — XXE/DTD/entity-expansion safe (ADR 0004, BACKLOG #31)
 ]
 
+# Shown on the PyPI sidebar; point at the PUBLIC repo/site (the wshallwshall repo is private).
+[project.urls]
+Homepage = "https://messagefoundry.org/"
+Documentation = "https://messagefoundry.org/"
+Repository = "https://github.com/MEFORORG/MessageFoundry"
+Issues = "https://github.com/MEFORORG/MessageFoundry/issues"
+
 [project.optional-dependencies]
 console = [
     "PySide6>=6.6",         # admin console (LGPL — OSS-distributable)