platformforge 0.1.0__py3-none-any.whl

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (659) hide show
  1. platformforge/__init__.py +7 -0
  2. platformforge/__main__.py +5 -0
  3. platformforge/_forge_portal.py +913 -0
  4. platformforge/_graphstudio.py +376 -0
  5. platformforge/_graphview.py +181 -0
  6. platformforge/_installkit.py +1706 -0
  7. platformforge/agents/__init__.py +156 -0
  8. platformforge/agents/bench.py +61 -0
  9. platformforge/agents/contextpack.py +137 -0
  10. platformforge/agents/contracts.py +394 -0
  11. platformforge/agents/coordinators.py +98 -0
  12. platformforge/agents/critic.py +113 -0
  13. platformforge/agents/debate.py +161 -0
  14. platformforge/agents/executors.py +160 -0
  15. platformforge/agents/guardian.py +48 -0
  16. platformforge/agents/mirrors.py +240 -0
  17. platformforge/agents/orchestrator.py +295 -0
  18. platformforge/agents/planner.py +116 -0
  19. platformforge/agents/playbook.py +51 -0
  20. platformforge/agents/referee.py +132 -0
  21. platformforge/agents/reviewers.py +113 -0
  22. platformforge/agents/roster.py +893 -0
  23. platformforge/agents/runledger.py +85 -0
  24. platformforge/agents/runstore.py +74 -0
  25. platformforge/agents/specialists.py +73 -0
  26. platformforge/agents/taskspec.py +94 -0
  27. platformforge/agents/uniqueness.py +115 -0
  28. platformforge/agents/verifier.py +106 -0
  29. platformforge/aiplat/__init__.py +4 -0
  30. platformforge/aiplat/models.py +175 -0
  31. platformforge/analytics/__init__.py +6 -0
  32. platformforge/analytics/capacity.py +109 -0
  33. platformforge/analytics/debt.py +92 -0
  34. platformforge/analytics/dx.py +69 -0
  35. platformforge/analytics/finops_v4.py +171 -0
  36. platformforge/analytics/goldenpath.py +131 -0
  37. platformforge/analytics/history.py +233 -0
  38. platformforge/analytics/measurement.py +149 -0
  39. platformforge/analytics/models.py +127 -0
  40. platformforge/analytics/opsanalytics.py +119 -0
  41. platformforge/analytics/policyintel.py +139 -0
  42. platformforge/analytics/reliability.py +106 -0
  43. platformforge/analytics/soak.py +135 -0
  44. platformforge/analytics/store.py +254 -0
  45. platformforge/bench.py +174 -0
  46. platformforge/cases/__init__.py +13 -0
  47. platformforge/cases/casefile.py +106 -0
  48. platformforge/cases/context_audit.py +134 -0
  49. platformforge/cases/ledgers.py +174 -0
  50. platformforge/cases/replay.py +142 -0
  51. platformforge/cases/routing_audit.py +162 -0
  52. platformforge/caveman/__init__.py +11 -0
  53. platformforge/caveman/compress.py +156 -0
  54. platformforge/cicd/__init__.py +16 -0
  55. platformforge/cicd/backstage.py +51 -0
  56. platformforge/cicd/dockerfile.py +64 -0
  57. platformforge/cicd/github_actions.py +122 -0
  58. platformforge/cicd/gitlab_ci.py +56 -0
  59. platformforge/cicd/gitops.py +130 -0
  60. platformforge/cli/__init__.py +0 -0
  61. platformforge/cli/fleetcmd.py +457 -0
  62. platformforge/cli/main.py +3832 -0
  63. platformforge/cloud/__init__.py +8 -0
  64. platformforge/cloud/aws.py +254 -0
  65. platformforge/cloud/common.py +69 -0
  66. platformforge/cloud/multicloud.py +143 -0
  67. platformforge/collect/__init__.py +11 -0
  68. platformforge/collect/detect.py +254 -0
  69. platformforge/context/__init__.py +10 -0
  70. platformforge/context/capsule.py +60 -0
  71. platformforge/context/gateway.py +227 -0
  72. platformforge/context/refs.py +49 -0
  73. platformforge/context/sufficiency.py +50 -0
  74. platformforge/core/__init__.py +1 -0
  75. platformforge/core/hashing.py +39 -0
  76. platformforge/core/ownership.py +220 -0
  77. platformforge/core/receipts.py +74 -0
  78. platformforge/core/redaction.py +97 -0
  79. platformforge/core/store.py +119 -0
  80. platformforge/core/workspace.py +89 -0
  81. platformforge/data/contracts/agent-handoff.schema.json +26 -0
  82. platformforge/data/contracts/agent-run.schema.json +27 -0
  83. platformforge/data/contracts/agent-spec.schema.json +43 -0
  84. platformforge/data/contracts/capability.schema.json +23 -0
  85. platformforge/data/contracts/change-event.schema.json +22 -0
  86. platformforge/data/contracts/change-intent.schema.json +62 -0
  87. platformforge/data/contracts/change-plan.schema.json +43 -0
  88. platformforge/data/contracts/collector-receipt.schema.json +36 -0
  89. platformforge/data/contracts/context-pack.schema.json +29 -0
  90. platformforge/data/contracts/debate.schema.json +31 -0
  91. platformforge/data/contracts/distribution-manifest-v1.schema.json +81 -0
  92. platformforge/data/contracts/drift-event.schema.json +21 -0
  93. platformforge/data/contracts/fact.schema.json +35 -0
  94. platformforge/data/contracts/finding.schema.json +20 -0
  95. platformforge/data/contracts/graph-v2.schema.json +67 -0
  96. platformforge/data/contracts/graph.schema.json +40 -0
  97. platformforge/data/contracts/install-receipt-v1.schema.json +49 -0
  98. platformforge/data/contracts/observation.schema.json +93 -0
  99. platformforge/data/contracts/receipt.schema.json +21 -0
  100. platformforge/data/contracts/recommendation.schema.json +32 -0
  101. platformforge/data/contracts/refusal.schema.json +16 -0
  102. platformforge/data/contracts/slo-contract.schema.json +25 -0
  103. platformforge/data/contracts/task-spec.schema.json +37 -0
  104. platformforge/data/contracts/workspace-manifest-v1.schema.json +62 -0
  105. platformforge/data/evals/cases/agent-budget-exhaustion/case.yaml +6 -0
  106. platformforge/data/evals/cases/agent-conflicting-specialists/case.yaml +11 -0
  107. platformforge/data/evals/cases/agent-fleet-optimization/case.yaml +13 -0
  108. platformforge/data/evals/cases/agent-host-no-subagents/case.yaml +6 -0
  109. platformforge/data/evals/cases/agent-incident-multi/case.yaml +13 -0
  110. platformforge/data/evals/cases/agent-missing-evidence/case.yaml +6 -0
  111. platformforge/data/evals/cases/agent-multi-domain-audit/case.yaml +14 -0
  112. platformforge/data/evals/cases/agent-production-change/case.yaml +15 -0
  113. platformforge/data/evals/cases/agent-security-mandatory/case.yaml +12 -0
  114. platformforge/data/evals/cases/agent-simple-iac/case.yaml +14 -0
  115. platformforge/data/evals/cases/approval-integrity-seal/case.yaml +6 -0
  116. platformforge/data/evals/cases/capacity-hot/case.yaml +7 -0
  117. platformforge/data/evals/cases/capacity-hot/fixture/capacity.json +5 -0
  118. platformforge/data/evals/cases/catalog-noowner/case.yaml +7 -0
  119. platformforge/data/evals/cases/catalog-noowner/fixture/catalog-info.yaml +6 -0
  120. platformforge/data/evals/cases/contract-fact/case.yaml +5 -0
  121. platformforge/data/evals/cases/contract-fact/fixture/doc.json +2 -0
  122. platformforge/data/evals/cases/cosign-unverified/case.yaml +8 -0
  123. platformforge/data/evals/cases/cosign-unverified/fixture/sig.json +33 -0
  124. platformforge/data/evals/cases/expected-delta-refusal/case.yaml +6 -0
  125. platformforge/data/evals/cases/finops-noattr/case.yaml +9 -0
  126. platformforge/data/evals/cases/finops-noattr/fixture/costs.json +7 -0
  127. platformforge/data/evals/cases/fleet-inv-absent-allocation-unknown/case.yaml +7 -0
  128. platformforge/data/evals/cases/fleet-inv-centrality-not-criticality/case.yaml +7 -0
  129. platformforge/data/evals/cases/fleet-inv-correlation-not-causality/case.yaml +7 -0
  130. platformforge/data/evals/cases/fleet-inv-dx-no-person-metrics/case.yaml +7 -0
  131. platformforge/data/evals/cases/fleet-inv-federation-restricted-denied/case.yaml +7 -0
  132. platformforge/data/evals/cases/fleet-inv-federation-secret-denied/case.yaml +7 -0
  133. platformforge/data/evals/cases/fleet-inv-history-window-deterministic/case.yaml +7 -0
  134. platformforge/data/evals/cases/fleet-inv-low-util-not-deletable/case.yaml +7 -0
  135. platformforge/data/evals/cases/fleet-inv-member-key-deterministic/case.yaml +7 -0
  136. platformforge/data/evals/cases/fleet-inv-missing-denominator/case.yaml +7 -0
  137. platformforge/data/evals/cases/fleet-inv-partial-coverage-visible/case.yaml +7 -0
  138. platformforge/data/evals/cases/fleet-inv-plan-changeintent-only/case.yaml +7 -0
  139. platformforge/data/evals/cases/fleet-inv-report-all-cited/case.yaml +7 -0
  140. platformforge/data/evals/cases/fleet-inv-small-sample-confidence/case.yaml +7 -0
  141. platformforge/data/evals/cases/fleet-inv-uncertain-optimization-suppressed/case.yaml +7 -0
  142. platformforge/data/evals/cases/gha-dangerous/case.yaml +12 -0
  143. platformforge/data/evals/cases/gha-dangerous/fixture/.github/workflows/ci.yaml +11 -0
  144. platformforge/data/evals/cases/gitops-v2/case.yaml +11 -0
  145. platformforge/data/evals/cases/gitops-v2/fixture/argo.yaml +41 -0
  146. platformforge/data/evals/cases/graph-k8s-blast/case.yaml +7 -0
  147. platformforge/data/evals/cases/graph-k8s-blast/fixture/deploy.yaml +15 -0
  148. platformforge/data/evals/cases/iac-module-nopin/case.yaml +8 -0
  149. platformforge/data/evals/cases/iac-module-nopin/fixture/main.tf +3 -0
  150. platformforge/data/evals/cases/iac-plan-replace/case.yaml +8 -0
  151. platformforge/data/evals/cases/iac-plan-replace/fixture/plan.json +12 -0
  152. platformforge/data/evals/cases/iac-sg-open/case.yaml +8 -0
  153. platformforge/data/evals/cases/iac-sg-open/fixture/main.tf +9 -0
  154. platformforge/data/evals/cases/iam-oidc/case.yaml +8 -0
  155. platformforge/data/evals/cases/iam-oidc/fixture/policy.json +11 -0
  156. platformforge/data/evals/cases/iam-wildcard-positive/case.yaml +8 -0
  157. platformforge/data/evals/cases/iam-wildcard-positive/fixture/policy.json +3 -0
  158. platformforge/data/evals/cases/k8s-bad-actor/case.yaml +19 -0
  159. platformforge/data/evals/cases/k8s-bad-actor/fixture/app.yaml +97 -0
  160. platformforge/data/evals/cases/k8s-beta-api/case.yaml +8 -0
  161. platformforge/data/evals/cases/k8s-beta-api/fixture/cr.yaml +7 -0
  162. platformforge/data/evals/cases/k8s-dep-api-boundary/case.yaml +15 -0
  163. platformforge/data/evals/cases/k8s-dep-api-boundary/fixture/app.yaml +25 -0
  164. platformforge/data/evals/cases/k8s-dep-api-clean/case.yaml +12 -0
  165. platformforge/data/evals/cases/k8s-dep-api-clean/fixture/app.yaml +29 -0
  166. platformforge/data/evals/cases/k8s-dep-api-unknown/case.yaml +11 -0
  167. platformforge/data/evals/cases/k8s-dep-api-unknown/fixture/app.yaml +25 -0
  168. platformforge/data/evals/cases/k8s-dep-api-v120/case.yaml +12 -0
  169. platformforge/data/evals/cases/k8s-dep-api-v120/fixture/app.yaml +25 -0
  170. platformforge/data/evals/cases/k8s-dep-api-v129/case.yaml +9 -0
  171. platformforge/data/evals/cases/k8s-dep-api-v129/fixture/app.yaml +25 -0
  172. platformforge/data/evals/cases/k8s-hpa-noreq/case.yaml +8 -0
  173. platformforge/data/evals/cases/k8s-hpa-noreq/fixture/app.yaml +28 -0
  174. platformforge/data/evals/cases/k8s-limits-boundary/case.yaml +10 -0
  175. platformforge/data/evals/cases/k8s-limits-boundary/fixture/app.yaml +15 -0
  176. platformforge/data/evals/cases/k8s-limits-negative/case.yaml +8 -0
  177. platformforge/data/evals/cases/k8s-limits-negative/fixture/deploy.yaml +15 -0
  178. platformforge/data/evals/cases/k8s-limits-positive/case.yaml +8 -0
  179. platformforge/data/evals/cases/k8s-limits-positive/fixture/deploy.yaml +14 -0
  180. platformforge/data/evals/cases/k8s-nopdb/case.yaml +7 -0
  181. platformforge/data/evals/cases/k8s-nopdb/fixture/app.yaml +34 -0
  182. platformforge/data/evals/cases/knowledge-registry/case.yaml +10 -0
  183. platformforge/data/evals/cases/kyverno-dep/case.yaml +10 -0
  184. platformforge/data/evals/cases/kyverno-dep/fixture/pol.yaml +18 -0
  185. platformforge/data/evals/cases/kyverno-legacy/case.yaml +8 -0
  186. platformforge/data/evals/cases/kyverno-legacy/fixture/pol.yaml +7 -0
  187. platformforge/data/evals/cases/live-aws-collect/case.yaml +11 -0
  188. platformforge/data/evals/cases/live-aws-collect/fixture/aws/ec2_describe-vpcs.json +15 -0
  189. platformforge/data/evals/cases/live-aws-collect/fixture/aws/iam_list-users.denied.txt +1 -0
  190. platformforge/data/evals/cases/live-aws-collect/fixture/aws/sts_get-caller-identity.json +5 -0
  191. platformforge/data/evals/cases/live-drift/case.yaml +8 -0
  192. platformforge/data/evals/cases/live-drift/fixture/after.json +22 -0
  193. platformforge/data/evals/cases/live-drift/fixture/before.json +22 -0
  194. platformforge/data/evals/cases/live-incident/case.yaml +7 -0
  195. platformforge/data/evals/cases/live-incident/fixture/changes.json +8 -0
  196. platformforge/data/evals/cases/live-incident/fixture/incident.json +7 -0
  197. platformforge/data/evals/cases/live-k8s-collect/case.yaml +10 -0
  198. platformforge/data/evals/cases/live-k8s-collect/fixture/kubectl/get_configmaps.denied.txt +1 -0
  199. platformforge/data/evals/cases/live-k8s-collect/fixture/kubectl/get_deployments.apps.json +25 -0
  200. platformforge/data/evals/cases/live-k8s-collect/fixture/kubectl/get_pods.json +17 -0
  201. platformforge/data/evals/cases/live-k8s-collect/fixture/kubectl/get_secrets.json +13 -0
  202. platformforge/data/evals/cases/live-multicluster/case.yaml +7 -0
  203. platformforge/data/evals/cases/live-multicluster/fixture/clusters.json +6 -0
  204. platformforge/data/evals/cases/live-plan/case.yaml +7 -0
  205. platformforge/data/evals/cases/live-plan/fixture/drift.json +8 -0
  206. platformforge/data/evals/cases/live-reconcile/case.yaml +7 -0
  207. platformforge/data/evals/cases/live-reconcile/fixture/desired.json +7 -0
  208. platformforge/data/evals/cases/live-reconcile/fixture/observed.json +18 -0
  209. platformforge/data/evals/cases/live-secrets-boundary/case.yaml +8 -0
  210. platformforge/data/evals/cases/live-secrets-boundary/fixture/envelope.json +16 -0
  211. platformforge/data/evals/cases/live-temporal-graph/case.yaml +10 -0
  212. platformforge/data/evals/cases/live-temporal-graph/fixture/graph.json +22 -0
  213. platformforge/data/evals/cases/ops-approval/case.yaml +6 -0
  214. platformforge/data/evals/cases/ops-convergence/case.yaml +6 -0
  215. platformforge/data/evals/cases/ops-execution-safety/case.yaml +6 -0
  216. platformforge/data/evals/cases/ops-intent/case.yaml +6 -0
  217. platformforge/data/evals/cases/ops-planning/case.yaml +6 -0
  218. platformforge/data/evals/cases/ops-policy/case.yaml +6 -0
  219. platformforge/data/evals/cases/ops-rollback/case.yaml +6 -0
  220. platformforge/data/evals/cases/ops-verification/case.yaml +6 -0
  221. platformforge/data/evals/cases/rollback-argocd-revision/case.yaml +6 -0
  222. platformforge/data/evals/cases/rollback-blind-inverse/case.yaml +6 -0
  223. platformforge/data/evals/cases/rollback-git-commit/case.yaml +6 -0
  224. platformforge/data/evals/cases/rollback-impossible/case.yaml +6 -0
  225. platformforge/data/evals/cases/rollback-k8s-annotation-restore/case.yaml +6 -0
  226. platformforge/data/evals/cases/rollback-k8s-scale/case.yaml +6 -0
  227. platformforge/data/evals/cases/rollback-material-tamper/case.yaml +6 -0
  228. platformforge/data/evals/cases/rollback-terraform-replan/case.yaml +6 -0
  229. platformforge/data/evals/cases/rollback-unknown/case.yaml +6 -0
  230. platformforge/data/evals/cases/routing-specialist/case.yaml +9 -0
  231. platformforge/data/evals/cases/rtk-roundtrip/case.yaml +5 -0
  232. platformforge/data/evals/cases/rtk-roundtrip/fixture/verbose.txt +300 -0
  233. platformforge/data/evals/cases/sbom-vuln/case.yaml +9 -0
  234. platformforge/data/evals/cases/sbom-vuln/fixture/sbom.json +9 -0
  235. platformforge/data/evals/cases/secret-prose-mixed/fixture/app.env +1 -0
  236. platformforge/data/evals/cases/secret-prose-mixed/fixture/policy-notes.md +7 -0
  237. platformforge/data/evals/cases/secrets-noleak/case.yaml +5 -0
  238. platformforge/data/evals/cases/secrets-noleak/fixture/app.env +2 -0
  239. platformforge/data/evals/cases/slo-fastburn/case.yaml +8 -0
  240. platformforge/data/evals/cases/slo-fastburn/fixture/events.yaml +2 -0
  241. platformforge/data/evals/cases/slo-fastburn/fixture/slo.yaml +4 -0
  242. platformforge/data/evals/cases/slo-noinput/case.yaml +8 -0
  243. platformforge/data/evals/cases/slo-noinput/fixture/events.yaml +1 -0
  244. platformforge/data/evals/cases/slo-noinput/fixture/slo.yaml +4 -0
  245. platformforge/data/evals/cases/sot-conflict/case.yaml +6 -0
  246. platformforge/data/evals/cases/token-budget/case.yaml +6 -0
  247. platformforge/data/evals/cases/token-budget/fixture/big.py +50 -0
  248. platformforge/data/evals/cases/xr-delete/case.yaml +8 -0
  249. platformforge/data/evals/cases/xr-delete/fixture/xr.yaml +10 -0
  250. platformforge/data/evals/cases/xr-graph-chain/case.yaml +8 -0
  251. platformforge/data/evals/cases/xr-graph-chain/fixture/xrd.yaml +90 -0
  252. platformforge/data/evals/cases/xr-negative-crd/case.yaml +8 -0
  253. platformforge/data/evals/cases/xr-negative-crd/fixture/widget.yaml +19 -0
  254. platformforge/data/evals/cases/xr-upbound-mr/case.yaml +8 -0
  255. platformforge/data/evals/cases/xr-upbound-mr/fixture/bucket.yaml +12 -0
  256. platformforge/data/evals/qpt-bench/change-review/case.yaml +5 -0
  257. platformforge/data/evals/qpt-bench/change-review/fixture/plan.json +9 -0
  258. platformforge/data/evals/qpt-bench/gha-security/case.yaml +5 -0
  259. platformforge/data/evals/qpt-bench/gha-security/fixture/ci.yml +10 -0
  260. platformforge/data/evals/qpt-bench/iam-investigate/case.yaml +5 -0
  261. platformforge/data/evals/qpt-bench/iam-investigate/fixture/policy.json +6 -0
  262. platformforge/data/evals/qpt-bench/incident-analysis/case.yaml +5 -0
  263. platformforge/data/evals/qpt-bench/incident-analysis/fixture/query.json +5 -0
  264. platformforge/data/evals/qpt-bench/incident-analysis/fixture/rules.yaml +6 -0
  265. platformforge/data/evals/qpt-bench/k8s-review/case.yaml +6 -0
  266. platformforge/data/evals/qpt-bench/k8s-review/fixture/deploy.yaml +15 -0
  267. platformforge/data/evals/qpt-bench/tf-security/case.yaml +5 -0
  268. platformforge/data/evals/qpt-bench/tf-security/fixture/main.tf +17 -0
  269. platformforge/data/knowledge/aws/eks.yaml +20 -0
  270. platformforge/data/knowledge/aws/iam.yaml +28 -0
  271. platformforge/data/knowledge/aws/network-exposure.yaml +19 -0
  272. platformforge/data/knowledge/aws/organizations.yaml +19 -0
  273. platformforge/data/knowledge/crossplane/composition-providers.yaml +20 -0
  274. platformforge/data/knowledge/crossplane/managed-resources.yaml +26 -0
  275. platformforge/data/knowledge/crossplane/v1-v2.yaml +25 -0
  276. platformforge/data/knowledge/kubernetes/api-deprecations.yaml +33 -0
  277. platformforge/data/knowledge/kubernetes/autoscaling-rbac.yaml +27 -0
  278. platformforge/data/knowledge/kubernetes/gateway-api.yaml +20 -0
  279. platformforge/data/knowledge/kubernetes/pod-security.yaml +26 -0
  280. platformforge/data/knowledge/sources.yaml +516 -0
  281. platformforge/data/knowledge/terraform/lifecycle.yaml +18 -0
  282. platformforge/data/knowledge/terraform/plan-semantics.yaml +26 -0
  283. platformforge/data/lab/chaos-pod-kill/chaos.yaml +3 -0
  284. platformforge/data/lab/chaos-pod-kill/facts.json +13 -0
  285. platformforge/data/lab/fleets/acme/capacity.yaml +35 -0
  286. platformforge/data/lab/fleets/acme/costs.yaml +25 -0
  287. platformforge/data/lab/fleets/acme/events.yaml +41 -0
  288. platformforge/data/lab/fleets/acme/fleet.yaml +51 -0
  289. platformforge/data/lab/fleets/acme/graph.yaml +45 -0
  290. platformforge/data/lab/fleets/acme/policies.yaml +28 -0
  291. platformforge/data/lab/fleets/acme/requests.yaml +24 -0
  292. platformforge/data/lab/scenarios/argo-bad-rollout/expected.yaml +6 -0
  293. platformforge/data/lab/scenarios/argo-bad-rollout/fixture/app.yaml +9 -0
  294. platformforge/data/lab/scenarios/aws-dump/expected.yaml +19 -0
  295. platformforge/data/lab/scenarios/aws-dump/fixture/compute.json +4 -0
  296. platformforge/data/lab/scenarios/aws-dump/fixture/iam.json +7 -0
  297. platformforge/data/lab/scenarios/aws-dump/fixture/network.json +6 -0
  298. platformforge/data/lab/scenarios/aws-dump/fixture/org.json +4 -0
  299. platformforge/data/lab/scenarios/aws-dump/fixture/storage.json +4 -0
  300. platformforge/data/lab/scenarios/container-unsigned/expected.yaml +5 -0
  301. platformforge/data/lab/scenarios/container-unsigned/fixture/supply.json +11 -0
  302. platformforge/data/lab/scenarios/cost-idle-workload/expected.yaml +5 -0
  303. platformforge/data/lab/scenarios/cost-idle-workload/fixture/costs.json +12 -0
  304. platformforge/data/lab/scenarios/crossplane-platform/expected.yaml +16 -0
  305. platformforge/data/lab/scenarios/crossplane-platform/fixture/negative.yaml +18 -0
  306. platformforge/data/lab/scenarios/crossplane-platform/fixture/xrd.yaml +90 -0
  307. platformforge/data/lab/scenarios/demo-platform/expected.yaml +16 -0
  308. platformforge/data/lab/scenarios/demo-platform/fixture/.github/workflows/ci.yml +10 -0
  309. platformforge/data/lab/scenarios/demo-platform/fixture/deploy.yaml +16 -0
  310. platformforge/data/lab/scenarios/demo-platform/fixture/infra.tf +5 -0
  311. platformforge/data/lab/scenarios/fleet-ai/expected.yaml +12 -0
  312. platformforge/data/lab/scenarios/fleet-capacity/expected.yaml +12 -0
  313. platformforge/data/lab/scenarios/fleet-cost/expected.yaml +18 -0
  314. platformforge/data/lab/scenarios/fleet-federation/expected.yaml +11 -0
  315. platformforge/data/lab/scenarios/fleet-golden-path/expected.yaml +18 -0
  316. platformforge/data/lab/scenarios/fleet-op-hotspot/expected.yaml +11 -0
  317. platformforge/data/lab/scenarios/fleet-ownership/expected.yaml +17 -0
  318. platformforge/data/lab/scenarios/fleet-partial/expected.yaml +10 -0
  319. platformforge/data/lab/scenarios/fleet-policy-friction/expected.yaml +10 -0
  320. platformforge/data/lab/scenarios/fleet-recurring-incident/expected.yaml +12 -0
  321. platformforge/data/lab/scenarios/fleet-report/expected.yaml +13 -0
  322. platformforge/data/lab/scenarios/fleet-risk/expected.yaml +18 -0
  323. platformforge/data/lab/scenarios/gitops-drift/expected.yaml +6 -0
  324. platformforge/data/lab/scenarios/gitops-drift/fixture/app.yaml +12 -0
  325. platformforge/data/lab/scenarios/k8s-bad-readiness/expected.yaml +6 -0
  326. platformforge/data/lab/scenarios/k8s-bad-readiness/fixture/deploy.yaml +23 -0
  327. platformforge/data/lab/scenarios/k8s-bad-readiness/fixture/netpol.yaml +9 -0
  328. platformforge/data/lab/scenarios/k8s-missing-limits/expected.yaml +6 -0
  329. platformforge/data/lab/scenarios/k8s-missing-limits/fixture/deploy.yaml +26 -0
  330. platformforge/data/lab/scenarios/k8s-missing-limits/fixture/netpol.yaml +9 -0
  331. platformforge/data/lab/scenarios/k8s-single-replica/expected.yaml +5 -0
  332. platformforge/data/lab/scenarios/k8s-single-replica/fixture/deploy.yaml +26 -0
  333. platformforge/data/lab/scenarios/k8s-single-replica/fixture/netpol.yaml +4 -0
  334. platformforge/data/lab/scenarios/live-aws-collect/expected.yaml +4 -0
  335. platformforge/data/lab/scenarios/live-aws-collect/fixture/aws/ec2_describe-vpcs.json +15 -0
  336. platformforge/data/lab/scenarios/live-aws-collect/fixture/aws/iam_list-users.denied.txt +1 -0
  337. platformforge/data/lab/scenarios/live-aws-collect/fixture/aws/sts_get-caller-identity.json +5 -0
  338. platformforge/data/lab/scenarios/live-k8s-collect/expected.yaml +4 -0
  339. platformforge/data/lab/scenarios/live-k8s-collect/fixture/kubectl/get_configmaps.denied.txt +1 -0
  340. platformforge/data/lab/scenarios/live-k8s-collect/fixture/kubectl/get_deployments.apps.json +25 -0
  341. platformforge/data/lab/scenarios/live-k8s-collect/fixture/kubectl/get_pods.json +17 -0
  342. platformforge/data/lab/scenarios/live-k8s-collect/fixture/kubectl/get_secrets.json +13 -0
  343. platformforge/data/lab/scenarios/live-kind/expected.yaml +14 -0
  344. platformforge/data/lab/scenarios/live-kind/fixture/kubectl/get_configmaps.denied.txt +1 -0
  345. platformforge/data/lab/scenarios/live-kind/fixture/kubectl/get_deployments.apps.json +25 -0
  346. platformforge/data/lab/scenarios/live-kind/fixture/kubectl/get_pods.json +17 -0
  347. platformforge/data/lab/scenarios/live-kind/fixture/kubectl/get_secrets.json +13 -0
  348. platformforge/data/lab/scenarios/network-policy-missing/expected.yaml +6 -0
  349. platformforge/data/lab/scenarios/network-policy-missing/fixture/deploy.yaml +26 -0
  350. platformforge/data/lab/scenarios/ops-bad-rollout/expected.yaml +3 -0
  351. platformforge/data/lab/scenarios/ops-bad-rollout/fixture/ops.yaml +33 -0
  352. platformforge/data/lab/scenarios/ops-break-glass/expected.yaml +3 -0
  353. platformforge/data/lab/scenarios/ops-break-glass/fixture/ops.yaml +21 -0
  354. platformforge/data/lab/scenarios/ops-broken-selector/expected.yaml +3 -0
  355. platformforge/data/lab/scenarios/ops-broken-selector/fixture/ops.yaml +21 -0
  356. platformforge/data/lab/scenarios/ops-changed-plan-hash/expected.yaml +3 -0
  357. platformforge/data/lab/scenarios/ops-changed-plan-hash/fixture/ops.yaml +20 -0
  358. platformforge/data/lab/scenarios/ops-conflicting-operation/expected.yaml +3 -0
  359. platformforge/data/lab/scenarios/ops-conflicting-operation/fixture/ops.yaml +21 -0
  360. platformforge/data/lab/scenarios/ops-expired-approval/expected.yaml +3 -0
  361. platformforge/data/lab/scenarios/ops-expired-approval/fixture/ops.yaml +20 -0
  362. platformforge/data/lab/scenarios/ops-partial-failure/expected.yaml +3 -0
  363. platformforge/data/lab/scenarios/ops-partial-failure/fixture/ops.yaml +24 -0
  364. platformforge/data/lab/scenarios/ops-policy-denial/expected.yaml +3 -0
  365. platformforge/data/lab/scenarios/ops-policy-denial/fixture/ops.yaml +17 -0
  366. platformforge/data/lab/scenarios/ops-replica-drift/expected.yaml +3 -0
  367. platformforge/data/lab/scenarios/ops-replica-drift/fixture/ops.yaml +28 -0
  368. platformforge/data/lab/scenarios/ops-rollback-annotate/expected.yaml +3 -0
  369. platformforge/data/lab/scenarios/ops-rollback-annotate/fixture/ops.yaml +41 -0
  370. platformforge/data/lab/scenarios/ops-rollback-gitops/expected.yaml +3 -0
  371. platformforge/data/lab/scenarios/ops-rollback-gitops/fixture/ops.yaml +38 -0
  372. platformforge/data/lab/scenarios/ops-rollback-impossible/expected.yaml +3 -0
  373. platformforge/data/lab/scenarios/ops-rollback-impossible/fixture/ops.yaml +34 -0
  374. platformforge/data/lab/scenarios/ops-rollback-scale/expected.yaml +3 -0
  375. platformforge/data/lab/scenarios/ops-rollback-scale/fixture/ops.yaml +40 -0
  376. platformforge/data/lab/scenarios/ops-rollback-terraform/expected.yaml +3 -0
  377. platformforge/data/lab/scenarios/ops-rollback-terraform/fixture/ops.yaml +38 -0
  378. platformforge/data/lab/scenarios/ops-rollback-terraform/fixture/tf/tfplan.bin +1 -0
  379. platformforge/data/lab/scenarios/ops-stale-observation/expected.yaml +3 -0
  380. platformforge/data/lab/scenarios/ops-stale-observation/fixture/ops.yaml +20 -0
  381. platformforge/data/lab/scenarios/secret-exposure/expected.yaml +5 -0
  382. platformforge/data/lab/scenarios/secret-exposure/fixture/app.env +2 -0
  383. platformforge/data/lab/scenarios/slo-burn/expected.yaml +5 -0
  384. platformforge/data/lab/scenarios/slo-burn/fixture/events.yaml +2 -0
  385. platformforge/data/lab/scenarios/slo-burn/fixture/slo.yaml +4 -0
  386. platformforge/data/lab/scenarios/terraform-iam-wildcard/expected.yaml +5 -0
  387. platformforge/data/lab/scenarios/terraform-iam-wildcard/fixture/policy.json +14 -0
  388. platformforge/data/lab/scenarios/terraform-public-bucket/expected.yaml +6 -0
  389. platformforge/data/lab/scenarios/terraform-public-bucket/fixture/main.tf +5 -0
  390. platformforge/data/portable_skills/platformforge-agents/SKILL.md +47 -0
  391. platformforge/data/portable_skills/platformforge-change/SKILL.md +41 -0
  392. platformforge/data/portable_skills/platformforge-core/SKILL.md +62 -0
  393. platformforge/data/portable_skills/platformforge-economy/SKILL.md +42 -0
  394. platformforge/data/portable_skills/platformforge-finops/SKILL.md +34 -0
  395. platformforge/data/portable_skills/platformforge-fleet/SKILL.md +39 -0
  396. platformforge/data/portable_skills/platformforge-governance/SKILL.md +76 -0
  397. platformforge/data/portable_skills/platformforge-graph/SKILL.md +46 -0
  398. platformforge/data/portable_skills/platformforge-lab/SKILL.md +39 -0
  399. platformforge/data/portable_skills/platformforge-sdd/SKILL.md +39 -0
  400. platformforge/data/portable_skills/platformforge-security/SKILL.md +38 -0
  401. platformforge/data/portable_skills/platformforge-sre/SKILL.md +41 -0
  402. platformforge/data/rules/catalog/finops.yaml +26 -0
  403. platformforge/data/rules/catalog/gitops.yaml +161 -0
  404. platformforge/data/rules/catalog/iac.yaml +84 -0
  405. platformforge/data/rules/catalog/k8s.yaml +322 -0
  406. platformforge/data/rules/catalog/orchestration.yaml +99 -0
  407. platformforge/data/rules/catalog/product.yaml +42 -0
  408. platformforge/data/rules/catalog/routing.yaml +122 -0
  409. platformforge/data/rules/catalog/security.yaml +159 -0
  410. platformforge/data/rules/catalog/sre.yaml +67 -0
  411. platformforge/diagnose/__init__.py +75 -0
  412. platformforge/distribution/__init__.py +18 -0
  413. platformforge/distribution/bundle.py +127 -0
  414. platformforge/distribution/hostflow.py +247 -0
  415. platformforge/distribution/models.py +80 -0
  416. platformforge/distribution/service.py +225 -0
  417. platformforge/economy/__init__.py +27 -0
  418. platformforge/economy/bench.py +66 -0
  419. platformforge/economy/budget.py +198 -0
  420. platformforge/economy/cache.py +287 -0
  421. platformforge/economy/checkpoint.py +112 -0
  422. platformforge/economy/collection.py +142 -0
  423. platformforge/economy/doctor.py +207 -0
  424. platformforge/economy/engine.py +158 -0
  425. platformforge/economy/envelope.py +61 -0
  426. platformforge/economy/fleetpack.py +86 -0
  427. platformforge/economy/ledger.py +232 -0
  428. platformforge/economy/plan.py +131 -0
  429. platformforge/economy/pricing.py +101 -0
  430. platformforge/economy/qpt.py +286 -0
  431. platformforge/economy/reconcile.py +86 -0
  432. platformforge/economy/verifyplan.py +107 -0
  433. platformforge/economy/waste.py +123 -0
  434. platformforge/evals/__init__.py +16 -0
  435. platformforge/evals/coverage.py +140 -0
  436. platformforge/evals/fleet_invariants.py +260 -0
  437. platformforge/evals/ops_invariants.py +158 -0
  438. platformforge/evals/runner.py +541 -0
  439. platformforge/federation/__init__.py +4 -0
  440. platformforge/federation/node.py +135 -0
  441. platformforge/finops/__init__.py +14 -0
  442. platformforge/finops/alloc.py +31 -0
  443. platformforge/finops/costs.py +79 -0
  444. platformforge/finops/focus.py +100 -0
  445. platformforge/finops/graph_cost.py +51 -0
  446. platformforge/finops/ingest.py +144 -0
  447. platformforge/finops/insights.py +193 -0
  448. platformforge/finops/unit.py +36 -0
  449. platformforge/fleet/__init__.py +5 -0
  450. platformforge/fleet/loader.py +73 -0
  451. platformforge/fleet/models.py +155 -0
  452. platformforge/fleet/orggraph.py +172 -0
  453. platformforge/fleet/query.py +154 -0
  454. platformforge/forge/__init__.py +9 -0
  455. platformforge/forge/collect.py +88 -0
  456. platformforge/forge/delegate.py +77 -0
  457. platformforge/forge/manifest.py +106 -0
  458. platformforge/freeze/__init__.py +22 -0
  459. platformforge/freeze/exceptions.py +56 -0
  460. platformforge/freeze/manifest.py +167 -0
  461. platformforge/freeze/snapshots.py +108 -0
  462. platformforge/graph/__init__.py +39 -0
  463. platformforge/graph/backend.py +174 -0
  464. platformforge/graph/bench.py +245 -0
  465. platformforge/graph/build.py +130 -0
  466. platformforge/graph/delivery.py +183 -0
  467. platformforge/graph/diff.py +292 -0
  468. platformforge/graph/events.py +116 -0
  469. platformforge/graph/migrate.py +44 -0
  470. platformforge/graph/model.py +264 -0
  471. platformforge/graph/persist.py +97 -0
  472. platformforge/graph/query.py +290 -0
  473. platformforge/graph/temporal.py +78 -0
  474. platformforge/graph/vocab.py +63 -0
  475. platformforge/graphview.py +94 -0
  476. platformforge/iac/__init__.py +7 -0
  477. platformforge/iac/drift.py +53 -0
  478. platformforge/iac/plan.py +84 -0
  479. platformforge/iac/terraform.py +123 -0
  480. platformforge/install/__init__.py +1 -0
  481. platformforge/install/service.py +421 -0
  482. platformforge/k8s/__init__.py +8 -0
  483. platformforge/k8s/helm.py +152 -0
  484. platformforge/k8s/hubble.py +87 -0
  485. platformforge/k8s/manifests.py +513 -0
  486. platformforge/knowledge/__init__.py +1 -0
  487. platformforge/knowledge/packs.py +157 -0
  488. platformforge/knowledge/registry.py +249 -0
  489. platformforge/knowledge/select.py +127 -0
  490. platformforge/lab/__init__.py +5 -0
  491. platformforge/lab/chaos.py +71 -0
  492. platformforge/lab/fleetlab.py +351 -0
  493. platformforge/lab/opslab.py +271 -0
  494. platformforge/lab/runner.py +219 -0
  495. platformforge/live/__init__.py +36 -0
  496. platformforge/live/budget.py +92 -0
  497. platformforge/live/capability.py +80 -0
  498. platformforge/live/collectors/__init__.py +6 -0
  499. platformforge/live/collectors/aws.py +370 -0
  500. platformforge/live/collectors/aws_transport.py +98 -0
  501. platformforge/live/collectors/k8s.py +389 -0
  502. platformforge/live/collectors/k8s_transport.py +85 -0
  503. platformforge/live/cursors.py +48 -0
  504. platformforge/live/drift.py +130 -0
  505. platformforge/live/envelope.py +85 -0
  506. platformforge/live/federation.py +113 -0
  507. platformforge/live/fixtures.py +168 -0
  508. platformforge/live/identity.py +258 -0
  509. platformforge/live/incident.py +200 -0
  510. platformforge/live/models.py +435 -0
  511. platformforge/live/reconcile.py +382 -0
  512. platformforge/live/remediate.py +169 -0
  513. platformforge/live/store.py +256 -0
  514. platformforge/live/topology.py +249 -0
  515. platformforge/mcp/__init__.py +7 -0
  516. platformforge/mcp/parity.py +69 -0
  517. platformforge/mcp/registry.py +427 -0
  518. platformforge/mcp/server.py +84 -0
  519. platformforge/mcp/tools.py +732 -0
  520. platformforge/models/__init__.py +21 -0
  521. platformforge/models/base.py +214 -0
  522. platformforge/observe/__init__.py +26 -0
  523. platformforge/observe/capacity.py +39 -0
  524. platformforge/observe/dr.py +67 -0
  525. platformforge/observe/grafana.py +76 -0
  526. platformforge/observe/incident.py +58 -0
  527. platformforge/observe/otel.py +135 -0
  528. platformforge/observe/postmortem.py +72 -0
  529. platformforge/observe/prometheus.py +88 -0
  530. platformforge/observe/slo.py +125 -0
  531. platformforge/ops/__init__.py +8 -0
  532. platformforge/ops/actions.py +215 -0
  533. platformforge/ops/analytics.py +83 -0
  534. platformforge/ops/approval.py +275 -0
  535. platformforge/ops/autorem.py +101 -0
  536. platformforge/ops/config.py +175 -0
  537. platformforge/ops/engine.py +758 -0
  538. platformforge/ops/envelope.py +135 -0
  539. platformforge/ops/executors/__init__.py +1 -0
  540. platformforge/ops/executors/base.py +211 -0
  541. platformforge/ops/executors/git.py +77 -0
  542. platformforge/ops/executors/gitops.py +134 -0
  543. platformforge/ops/executors/terraform.py +84 -0
  544. platformforge/ops/gates.py +135 -0
  545. platformforge/ops/goldenpath.py +180 -0
  546. platformforge/ops/material.py +181 -0
  547. platformforge/ops/models.py +421 -0
  548. platformforge/ops/operation.py +335 -0
  549. platformforge/ops/opgraph.py +233 -0
  550. platformforge/ops/policy.py +275 -0
  551. platformforge/ops/preconditions.py +109 -0
  552. platformforge/ops/registry.py +101 -0
  553. platformforge/ops/risk.py +216 -0
  554. platformforge/ops/rollback.py +287 -0
  555. platformforge/ops/rollback_builders.py +163 -0
  556. platformforge/ops/runbook.py +269 -0
  557. platformforge/ops/simulate.py +125 -0
  558. platformforge/ops/source_of_truth.py +198 -0
  559. platformforge/ops/store.py +157 -0
  560. platformforge/ops/verify.py +190 -0
  561. platformforge/optimize/__init__.py +4 -0
  562. platformforge/optimize/engine.py +109 -0
  563. platformforge/optimize/models.py +68 -0
  564. platformforge/optimize/scan.py +196 -0
  565. platformforge/plan/__init__.py +107 -0
  566. platformforge/portable_cli.py +199 -0
  567. platformforge/portal_adapter.py +740 -0
  568. platformforge/portal_assets/chunk-7_l-b4Tr.js +1 -0
  569. platformforge/portal_assets/chunk-B0Iad6pD.js +1 -0
  570. platformforge/portal_assets/chunk-B605XnCF.js +1 -0
  571. platformforge/portal_assets/chunk-B7N3TXcn.js +1 -0
  572. platformforge/portal_assets/chunk-BAj6yGem.js +1 -0
  573. platformforge/portal_assets/chunk-BGUitn2r.js +1 -0
  574. platformforge/portal_assets/chunk-BVKnCv85.js +1 -0
  575. platformforge/portal_assets/chunk-BYyM9V_w.js +1 -0
  576. platformforge/portal_assets/chunk-BaQMhq-G.js +1 -0
  577. platformforge/portal_assets/chunk-BavOrxVm.js +1 -0
  578. platformforge/portal_assets/chunk-Bb0C24YV.js +1 -0
  579. platformforge/portal_assets/chunk-BfCFGPzs.js +1 -0
  580. platformforge/portal_assets/chunk-C2t4OUVu.js +1 -0
  581. platformforge/portal_assets/chunk-C3pI4QjU.js +1 -0
  582. platformforge/portal_assets/chunk-C4gpbtbP.js +1 -0
  583. platformforge/portal_assets/chunk-CGWeHhKY.js +1 -0
  584. platformforge/portal_assets/chunk-CJCT86Dr.js +1 -0
  585. platformforge/portal_assets/chunk-CXcsLDPJ.js +1 -0
  586. platformforge/portal_assets/chunk-CcjxoLxw.js +1 -0
  587. platformforge/portal_assets/chunk-D-gBPXHa.js +1 -0
  588. platformforge/portal_assets/chunk-D3eZogIe.js +1 -0
  589. platformforge/portal_assets/chunk-DQU0VyoQ.js +1 -0
  590. platformforge/portal_assets/chunk-DqWNkF1O.js +1 -0
  591. platformforge/portal_assets/chunk-DuPPkSIE.js +3 -0
  592. platformforge/portal_assets/chunk-DyIHOW_a.js +1 -0
  593. platformforge/portal_assets/chunk-Fx4zSGL5.js +1 -0
  594. platformforge/portal_assets/chunk-UBKt05Rg.js +1 -0
  595. platformforge/portal_assets/chunk-htnJDQEY.js +1 -0
  596. platformforge/portal_assets/chunk-kXRFMGqe.js +1 -0
  597. platformforge/portal_assets/chunk-qe3u763a.js +1 -0
  598. platformforge/portal_assets/favicon.ico +0 -0
  599. platformforge/portal_assets/index.html +13 -0
  600. platformforge/portal_assets/main-QDFVZK3T.js +5 -0
  601. platformforge/portal_assets/styles-MQEBDFDX.css +1 -0
  602. platformforge/product/__init__.py +10 -0
  603. platformforge/product/backstage.py +49 -0
  604. platformforge/product/catalog.py +74 -0
  605. platformforge/product/crossplane.py +341 -0
  606. platformforge/product/golden_paths/__init__.py +5 -0
  607. platformforge/product/golden_paths/engine.py +97 -0
  608. platformforge/product/golden_paths/library.yaml +198 -0
  609. platformforge/product/golden_paths/model.py +84 -0
  610. platformforge/product/maturity.py +107 -0
  611. platformforge/product/scorecards.py +84 -0
  612. platformforge/resources.py +36 -0
  613. platformforge/risk/__init__.py +5 -0
  614. platformforge/risk/engine.py +95 -0
  615. platformforge/risk/signals.py +49 -0
  616. platformforge/routing/__init__.py +13 -0
  617. platformforge/routing/decision.py +191 -0
  618. platformforge/routing/router.py +328 -0
  619. platformforge/rtk/__init__.py +9 -0
  620. platformforge/rtk/compact.py +127 -0
  621. platformforge/rtk/parsers.py +199 -0
  622. platformforge/rules/__init__.py +5 -0
  623. platformforge/rules/engine.py +345 -0
  624. platformforge/sandbox/__init__.py +7 -0
  625. platformforge/sandbox/env.py +151 -0
  626. platformforge/sandbox/review.py +92 -0
  627. platformforge/sdd/__init__.py +8 -0
  628. platformforge/sdd/lifecycle.py +239 -0
  629. platformforge/security/__init__.py +19 -0
  630. platformforge/security/cosign.py +67 -0
  631. platformforge/security/iam.py +112 -0
  632. platformforge/security/identity.py +84 -0
  633. platformforge/security/kyverno.py +106 -0
  634. platformforge/security/sbom.py +59 -0
  635. platformforge/security/scan.py +63 -0
  636. platformforge/security/slsa.py +86 -0
  637. platformforge/security/supply.py +62 -0
  638. platformforge/tokensave/__init__.py +20 -0
  639. platformforge/tokensave/budget.py +62 -0
  640. platformforge/tokensave/estimate.py +21 -0
  641. platformforge/tokensave/index.py +172 -0
  642. platformforge/tokensave/ledger.py +121 -0
  643. platformforge/tokensave/packs.py +285 -0
  644. platformforge/ui/__init__.py +28 -0
  645. platformforge/ui/app.py +465 -0
  646. platformforge/ui/home.py +113 -0
  647. platformforge/ui/i18n.py +143 -0
  648. platformforge/ui/kit.py +689 -0
  649. platformforge/ui/screen.py +628 -0
  650. platformforge/ui/tui.py +94 -0
  651. platformforge/ui/wizard.py +309 -0
  652. platformforge/workspace/__init__.py +13 -0
  653. platformforge/workspace/models.py +35 -0
  654. platformforge/workspace/service.py +69 -0
  655. platformforge-0.1.0.dist-info/METADATA +212 -0
  656. platformforge-0.1.0.dist-info/RECORD +659 -0
  657. platformforge-0.1.0.dist-info/WHEEL +4 -0
  658. platformforge-0.1.0.dist-info/entry_points.txt +3 -0
  659. platformforge-0.1.0.dist-info/licenses/LICENSE +21 -0
@@ -0,0 +1,207 @@
1
+ """Economy doctor (§243–250) — health checks over the ledgers.
2
+
3
+ Each check inspects what actually exists (ledger rows, cache stats,
4
+ checkpoints, pricing catalog) and reports a finding only with evidence.
5
+ A check with no data reports `unresolved`, never a pass by absence.
6
+ """
7
+
8
+ from __future__ import annotations
9
+
10
+ import json
11
+ import re
12
+ import subprocess
13
+ import time
14
+ from pathlib import Path
15
+ from typing import Any
16
+
17
+ from platformforge.economy.cache import CacheStore
18
+ from platformforge.economy.checkpoint import CheckpointStore
19
+
20
+ SCHEMA = "platformforge/economy-doctor/v1"
21
+ RECEIPT_REL = Path("docs/economy-parity/VALIDATION-RECEIPT.json")
22
+ RECEIPT_SCHEMA = "platformforge/economy-validation-receipt/v1"
23
+
24
+
25
+ def _read_jsonl(path: Path) -> list[dict[str, Any]]:
26
+ if not path.exists():
27
+ return []
28
+ return [json.loads(l) for l in path.read_text().splitlines()
29
+ if l.strip()]
30
+
31
+
32
+ def _canonical_economy_gates(root: Path) -> set[str]:
33
+ """polish §9 — the canonical gate taxonomy lives in
34
+ scripts/validate.py; doctor derives it from the file, never from a
35
+ copy. Importing validate.py must not run main() — it doesn't."""
36
+ import importlib.util
37
+ spec_path = root / "scripts" / "validate.py"
38
+ if not spec_path.is_file():
39
+ return set()
40
+ spec = importlib.util.spec_from_file_location("pf_validate",
41
+ spec_path)
42
+ mod = importlib.util.module_from_spec(spec)
43
+ try:
44
+ spec.loader.exec_module(mod)
45
+ except Exception: # noqa: BLE001 — validator unreadable = no canon
46
+ return set()
47
+ return {n for n in getattr(mod, "GATES", {})
48
+ if n.startswith("economy-")}
49
+
50
+
51
+ def doctor(root: str | Path, *, now: float | None = None) -> dict[str, Any]:
52
+ """Run every economy health check. `ok` is true only when no check
53
+ produced a `warn`/`fail` — unresolved checks don't fake health."""
54
+ now = now if now is not None else time.time()
55
+ root = Path(root)
56
+ led = root / ".platformforge" / "ledger"
57
+ findings: list[dict[str, Any]] = []
58
+
59
+ def note(check: str, state: str, evidence: dict[str, Any],
60
+ fix: str = "") -> None:
61
+ findings.append({"check": check, "state": state,
62
+ "evidence": evidence, "recommended_fix": fix})
63
+
64
+ # --- cache disabled ------------------------------------------------
65
+ store = CacheStore(root / ".platformforge" / "cache")
66
+ stats = store.stats()
67
+ if stats["entries"] == 0 and stats["hits"] == 0 and \
68
+ stats["misses"] == 0:
69
+ note("cache-enabled", "warn", {"stats": stats},
70
+ "cache store is empty — reuse is not happening")
71
+ else:
72
+ note("cache-enabled", "ok", {"entries": stats["entries"]})
73
+
74
+ # --- cache hit rate ------------------------------------------------
75
+ total = stats["hits"] + stats["misses"]
76
+ if total >= 10:
77
+ rate = stats["hits"] / total
78
+ note("cache-hit-rate", "warn" if rate < 0.3 else "ok",
79
+ {"hit_rate": round(rate, 3), "samples": total},
80
+ "investigate dep churn or key scope" if rate < 0.3 else "")
81
+ else:
82
+ note("cache-hit-rate", "unresolved",
83
+ {"samples": total, "reason": "too few lookups to judge"})
84
+
85
+ # --- context oversized ----------------------------------------------
86
+ econ = _read_jsonl(led / "economy.jsonl")
87
+ builds = [e for e in econ if e.get("tool") == "context.build"]
88
+ if builds:
89
+ biggest = max(e.get("output_bytes", 0) for e in builds)
90
+ note("context-size", "warn" if biggest > 100_000 else "ok",
91
+ {"max_context_bytes": biggest, "builds": len(builds)},
92
+ "narrow scope or raise detail via refs" if biggest > 100_000
93
+ else "")
94
+ else:
95
+ note("context-size", "unresolved", {"builds": 0})
96
+
97
+ # --- provider calls --------------------------------------------------
98
+ prov = _read_jsonl(led / "provider.jsonl") + [
99
+ e for e in econ if e.get("entry_type") == "provider"]
100
+ if prov:
101
+ calls = sum(e.get("api_calls", e.get("calls", 0)) or 0
102
+ for e in prov)
103
+ note("provider-calls", "warn" if calls > 50 else "ok",
104
+ {"api_calls": calls, "entries": len(prov)},
105
+ "check evidence_gate — local evidence may answer")
106
+ else:
107
+ note("provider-calls", "unresolved", {"entries": 0})
108
+
109
+ # --- stale checkpoints ----------------------------------------------
110
+ cps = CheckpointStore(root / ".platformforge" / "checkpoints")
111
+ names = cps.list()
112
+ stale = []
113
+ for n in names:
114
+ cp = cps.load(n)
115
+ if cp and now - cp.created_at > 7 * 86400:
116
+ stale.append(n)
117
+ note("stale-checkpoints",
118
+ "warn" if stale else "ok",
119
+ {"checkpoints": len(names), "stale_7d": stale},
120
+ "gc or resume — spend may be double-counted" if stale else "")
121
+
122
+ # --- missing pricing ---------------------------------------------------
123
+ econ_missing = [e for e in econ
124
+ if e.get("code") == "PF-ECONOMY-PRICING-MISSING" or
125
+ e.get("refusal") == "PF-ECONOMY-PRICING-MISSING"]
126
+ note("pricing", "warn" if econ_missing else "ok",
127
+ {"missing_pricing_events": len(econ_missing)},
128
+ "declare a pricing row" if econ_missing else "")
129
+
130
+ # --- closure health (polish §41–43) ----------------------------------
131
+
132
+ # receipt freshness — bound to HEAD or HEAD~1 (receipt-only commit)
133
+ rcpt = root / RECEIPT_REL
134
+ if not rcpt.is_file():
135
+ note("receipt-fresh", "unresolved",
136
+ {"code": "PF-ECONOMY-RECEIPT-STALE", "path": str(rcpt)},
137
+ "generate: python scripts/validate.py --economy-receipt "
138
+ f"{RECEIPT_REL}")
139
+ else:
140
+ doc = json.loads(rcpt.read_text())
141
+ vs = doc.get("validated_sha") or ""
142
+ head = subprocess.run(
143
+ ["git", "rev-parse", "HEAD"], cwd=root,
144
+ capture_output=True, text=True, check=False).stdout.strip()
145
+ head1 = subprocess.run(
146
+ ["git", "rev-parse", "HEAD~1"], cwd=root,
147
+ capture_output=True, text=True, check=False).stdout.strip()
148
+ schema_ok = doc.get("schema") == RECEIPT_SCHEMA
149
+ if vs and head and vs in (head, head1) and schema_ok:
150
+ note("receipt-fresh", "ok",
151
+ {"validated_sha": vs[:12], "schema": doc["schema"]})
152
+ else:
153
+ note("receipt-fresh", "warn",
154
+ {"code": "PF-ECONOMY-RECEIPT-STALE",
155
+ "validated_sha": vs[:12], "head": head[:12],
156
+ "schema": doc.get("schema")},
157
+ "receipt predates HEAD or wrong schema — regenerate "
158
+ "via scripts/validate.py --economy-receipt")
159
+
160
+ # gate taxonomy — receipt gates must be canonical economy-* names
161
+ canon = _canonical_economy_gates(root)
162
+ extra = sorted(set(doc.get("gates", {})) - canon)
163
+ note("gate-taxonomy", "warn" if extra else "ok",
164
+ {"noncanonical": extra, "canonical": len(canon)},
165
+ "receipt carries a parallel taxonomy — regenerate from the "
166
+ "validator" if extra else "")
167
+
168
+ # reproduce paths — every tests/*.py referenced must exist
169
+ dead = [t for e in doc.get("gates", {}).values()
170
+ for t in re.findall(r"tests/\S+\.py",
171
+ str(e.get("reproduce") or ""))
172
+ if not (root / t).is_file()]
173
+ note("reproduce-paths", "warn" if dead else "ok",
174
+ {"dead_paths": dead},
175
+ "regenerate the receipt — test files moved" if dead else "")
176
+
177
+ # routing authority — EconomyEngine advises; routing.decide() decides
178
+ try:
179
+ from platformforge.economy.engine import EconomyEngine
180
+ adv = EconomyEngine(root).advice({"task_type": "analysis"})
181
+ marked = adv.get("schema") == "platformforge/economy-advice/v1" \
182
+ and adv.get("advisory") is True
183
+ note("routing-authority", "ok" if marked else "fail",
184
+ {"advice_schema": adv.get("schema"),
185
+ "advisory": adv.get("advisory")},
186
+ "EconomyEngine output lost its advisory marker — it must "
187
+ "never masquerade as a routing decision" if not marked
188
+ else "")
189
+ except Exception as exc: # noqa: BLE001 — probe failure is data
190
+ note("routing-authority", "unresolved", {"error": str(exc)})
191
+
192
+ # QPT — quality-per-cost engine present and callable
193
+ try:
194
+ from platformforge.economy.qpt import quality_per_cost
195
+ probe = quality_per_cost({"quality_pass": True},
196
+ {"quality_pass": True})
197
+ note("qpt", "ok" if isinstance(probe, dict) else "unresolved",
198
+ {"callable": True})
199
+ except Exception as exc: # noqa: BLE001 — probe failure is data
200
+ note("qpt", "unresolved", {"error": str(exc)})
201
+
202
+ states = {f["state"] for f in findings}
203
+ overall = ("fail" if "fail" in states else
204
+ "warn" if "warn" in states else
205
+ "unresolved" if states == {"unresolved"} else "ok")
206
+ return {"schema": SCHEMA, "overall": overall, "checks": findings,
207
+ "hint": "unresolved checks need data, not fixes"}
@@ -0,0 +1,158 @@
1
+ """Economy engine — escalation policy + report over the token ledger.
2
+
3
+ Order: cache → parser → index → rule → graph → local composition →
4
+ cheap model → strong model → multi-agent. The engine decides the cheapest
5
+ class that can answer a request, and reports *measured* consumption.
6
+ """
7
+
8
+ from __future__ import annotations
9
+
10
+ from dataclasses import dataclass
11
+ from pathlib import Path
12
+ from typing import Any
13
+
14
+ from platformforge.tokensave.ledger import LedgerEntry, TokenLedger
15
+
16
+ COST_ORDER = [
17
+ "cache", "parser", "index", "rule", "graph", "local-composition",
18
+ "cheap-model", "strong-model", "multi-agent",
19
+ ]
20
+ DETERMINISTIC_CLASSES = {"cache", "parser", "index", "rule", "graph",
21
+ "local-composition"}
22
+
23
+
24
+ @dataclass
25
+ class CostClass:
26
+ name: str
27
+ deterministic: bool
28
+ needs_model: bool
29
+
30
+
31
+ # §34 — execution strategies, cheapest first.
32
+ STRATEGIES = ("deterministic-only", "deterministic-plus-compose",
33
+ "single-specialist", "multi-specialist", "coordinated",
34
+ "review-required", "refuse")
35
+
36
+ # polish §22–26 — EconomyEngine output is an economic *recommendation*
37
+ # (EconomyAdvice), never a routing decision. The canonical authority is
38
+ # routing/decision.py::decide(); orchestration refuses anything without
39
+ # the platformforge/routing-decision/v1 schema.
40
+ SCHEMA_ADVICE = "platformforge/economy-advice/v1"
41
+
42
+ # §35 — capability requirements, provider-agnostic. The host maps these to
43
+ # models; the core never names a provider.
44
+ CAPABILITY_REQS = ("fast", "cheap", "coding", "reasoning", "long-context",
45
+ "review", "structured-output")
46
+
47
+
48
+ class EconomyEngine:
49
+ def __init__(self, root: str | Path):
50
+ self.root = Path(root)
51
+ self.ledger = TokenLedger(root)
52
+
53
+ def advice(self, signal: dict[str, Any]) -> dict[str, Any]:
54
+ """§33 — economic recommendation = f(task, deterministic reach,
55
+ evidence, risk, criticality, complexity, budgets, history).
56
+
57
+ Deterministic reach is checked FIRST: a task the engines can answer
58
+ never escalates to a model. Evidence gaps refuse rather than spend.
59
+
60
+ The output is an `economy-advice/v1` advisory — it informs a
61
+ RoutingRequest's signal but is NEVER a routing decision. The
62
+ canonical authority is `routing/decision.py::decide()`
63
+ (polish §22–26).
64
+ """
65
+ risk = signal.get("risk", "low")
66
+ complexity = signal.get("complexity", "low")
67
+ evidence_ready = signal.get("evidence_available", True)
68
+ blast = signal.get("blast_radius", "local")
69
+ security = signal.get("security_sensitive", False)
70
+ task_type = signal.get("task_type", "analysis")
71
+
72
+ base = self.cheapest_sufficient(
73
+ signal.get("question_kind", task_type), evidence_ready)
74
+ if base["cost_class"] == "unresolved":
75
+ return {"schema": SCHEMA_ADVICE, "advisory": True,
76
+ "strategy": "refuse", "reason": base["reason"],
77
+ "capability_requirements": []}
78
+ if base["deterministic"]:
79
+ return {"schema": SCHEMA_ADVICE, "advisory": True,
80
+ "strategy": "deterministic-only",
81
+ "cost_class": base["cost_class"], "reason": base["reason"],
82
+ "capability_requirements": ["fast", "cheap"]}
83
+ caps = ["structured-output"]
84
+ if task_type in ("review", "incident") or security:
85
+ caps.append("review")
86
+ if complexity == "high" or blast in ("platform", "org"):
87
+ caps.extend(["reasoning", "long-context"])
88
+ if risk in ("high", "critical") or security:
89
+ strat = "review-required" if evidence_ready else "refuse"
90
+ reason = ("high risk/security-sensitive requires review"
91
+ if evidence_ready else "insufficient evidence")
92
+ elif task_type == "incident" or blast in ("platform", "org"):
93
+ strat, reason = "coordinated", "cross-domain blast radius"
94
+ elif len(signal.get("domains", [])) > 1:
95
+ strat, reason = "multi-specialist", "multiple domains"
96
+ elif complexity in ("medium", "high"):
97
+ strat, reason = "single-specialist", "single-domain depth"
98
+ else:
99
+ strat, reason = "deterministic-plus-compose", "compose over facts"
100
+ return {"schema": SCHEMA_ADVICE, "advisory": True,
101
+ "strategy": strat, "reason": reason,
102
+ "capability_requirements": caps,
103
+ "cost_class": {"coordinated": "multi-agent",
104
+ "multi-specialist": "multi-agent",
105
+ "review-required": "strong-model",
106
+ "single-specialist": "cheap-model",
107
+ "deterministic-plus-compose": "local-composition",
108
+ }[strat]}
109
+
110
+ def strategy(self, signal: dict[str, Any]) -> dict[str, Any]:
111
+ """Deprecated alias for `advice()` (polish §26 — kept for
112
+ compat; the semantic name is EconomyAdvice)."""
113
+ return self.advice(signal)
114
+
115
+ def compare(self, signal: dict[str, Any],
116
+ strategies: list[str] | None = None) -> dict[str, Any]:
117
+ """§36 — champion/challenger shadow mode. Runs the strategy picker
118
+ per named strategy and records both projections in the ledger; it
119
+ never enables one automatically."""
120
+ strategies = strategies or ["single-specialist", "coordinated"]
121
+ projections = {}
122
+ for s in strategies:
123
+ proj = self.strategy(signal)
124
+ proj["forced_strategy"] = s
125
+ projections[s] = proj
126
+ self.ledger.record(LedgerEntry(
127
+ operation="economy.compare",
128
+ token_basis="unknown",
129
+ extra={"signal": signal, "strategy": s,
130
+ "projection": proj, "shadow": True}))
131
+ return {"mode": "shadow", "strategies": projections,
132
+ "note": "shadow comparison — no strategy auto-enabled"}
133
+
134
+ def cheapest_sufficient(self, question_kind: str,
135
+ evidence_ready: bool = True) -> dict[str, Any]:
136
+ """Which cost class can answer? Deterministic wherever possible."""
137
+ deterministic_answers = {
138
+ "lint", "rule-check", "inventory", "diff", "drift", "graph-query",
139
+ "impact", "policy", "budget-check", "freshness", "scorecard",
140
+ "slo-calc", "redaction", "compaction", "routing",
141
+ }
142
+ if question_kind in deterministic_answers:
143
+ cls = {"lint": "rule", "rule-check": "rule", "inventory": "index",
144
+ "diff": "parser", "drift": "graph", "graph-query": "graph",
145
+ "impact": "graph", "policy": "rule", "budget-check": "cache",
146
+ "freshness": "index", "scorecard": "local-composition",
147
+ "slo-calc": "rule", "redaction": "parser",
148
+ "compaction": "parser", "routing": "rule"}[question_kind]
149
+ return {"cost_class": cls, "deterministic": True,
150
+ "reason": "answerable without a model"}
151
+ if not evidence_ready:
152
+ return {"cost_class": "unresolved", "deterministic": False,
153
+ "reason": "insufficient evidence — refuse, don't spend a model"}
154
+ return {"cost_class": "cheap-model", "deterministic": False,
155
+ "reason": "requires composition beyond deterministic reach"}
156
+
157
+ def report(self) -> dict[str, Any]:
158
+ return {"cost_order": COST_ORDER, "ledger": self.ledger.report()}
@@ -0,0 +1,61 @@
1
+ """Context envelopes — the measured payload IS the consumed payload.
2
+
3
+ Cycle 2.1 §34–50: the bytes a judge/model actually receives are the bytes
4
+ the estimator counts. `serialize()` is the single canonical serializer for
5
+ both the full and the optimized context, so `measured == evaluated` by
6
+ construction. Deterministic working sets (facts the local engine reads)
7
+ are `kind="deterministic"` and are never counted as model tokens unless
8
+ someone serializes them into a `kind="model"` envelope.
9
+ """
10
+
11
+ from __future__ import annotations
12
+
13
+ import json
14
+ from dataclasses import dataclass, field
15
+ from typing import Any
16
+
17
+ from platformforge.tokensave.estimate import estimate_tokens
18
+
19
+
20
+ @dataclass
21
+ class ContextEnvelope:
22
+ """Serializable context payload.
23
+
24
+ kind: "model" (would be sent to a model/agent) | "deterministic"
25
+ (local engine working set — not token spend).
26
+ """
27
+ kind: str = "model"
28
+ files: list[dict[str, Any]] = field(default_factory=list)
29
+ facts: list[dict[str, Any]] = field(default_factory=list)
30
+ findings: list[dict[str, Any]] = field(default_factory=list)
31
+ rules: list[str] = field(default_factory=list)
32
+ graph: dict[str, Any] = field(default_factory=dict)
33
+ metadata: dict[str, Any] = field(default_factory=dict)
34
+
35
+ def to_dict(self) -> dict[str, Any]:
36
+ return {"kind": self.kind, "files": self.files, "facts": self.facts,
37
+ "findings": self.findings, "rules": self.rules,
38
+ "graph": self.graph, "metadata": self.metadata}
39
+
40
+ def serialize(self) -> bytes:
41
+ """Canonical wire format — one serializer for every envelope kind."""
42
+ return json.dumps(self.to_dict(), sort_keys=True,
43
+ separators=(",", ":"), default=str).encode()
44
+
45
+ @property
46
+ def byte_size(self) -> int:
47
+ return len(self.serialize())
48
+
49
+ @property
50
+ def estimated_tokens(self) -> int:
51
+ """Local estimate — labeled `estimated`, never `observed`."""
52
+ return estimate_tokens(self.serialize())
53
+
54
+ def ledger_fields(self) -> dict[str, Any]:
55
+ """Fields for TokenLedger rows (§42)."""
56
+ if self.kind == "deterministic":
57
+ return {"deterministic_input_bytes": self.byte_size,
58
+ "deterministic_fact_count": len(self.facts)}
59
+ return {"model_context_bytes": self.byte_size,
60
+ "model_context_tokens": self.estimated_tokens,
61
+ "deterministic_fact_count": 0}
@@ -0,0 +1,86 @@
1
+ """Cycle 5 Phase L — FleetContextPack (§213–219).
2
+
3
+ Never load the full fleet into model context (§214). Hierarchical
4
+ summary layers with per-layer budgets (§217–219): org → fleet →
5
+ cluster → resource detail, drill-down on demand (§218). Selection is
6
+ signal-driven (§216), deterministic, never an LLM call (§224–226).
7
+ """
8
+
9
+ from __future__ import annotations
10
+
11
+ import json
12
+ from typing import Any
13
+
14
+ SELECTION_SIGNALS = ("task_scope", "fleet_scope", "team", "environment",
15
+ "recent_changes", "risk", "hotspots",
16
+ "graph_centrality", "incidents", "cost_anomaly")
17
+ LAYERS = ("organization", "fleet", "cluster", "resource")
18
+
19
+ # per-layer token budget defaults — cheapest sufficient first (§219)
20
+ DEFAULT_BUDGETS = {"organization": 200, "fleet": 400, "cluster": 800,
21
+ "resource": 1600}
22
+
23
+
24
+ def _est_tokens(obj: Any) -> int:
25
+ return max(1, len(json.dumps(obj, sort_keys=True,
26
+ default=str)) // 4)
27
+
28
+
29
+ def fleet_context_pack(signals: dict[str, Any],
30
+ org_summary: dict[str, Any] | None = None,
31
+ fleet_summaries: list[dict[str, Any]] | None = None,
32
+ cluster_details: list[dict[str, Any]] | None = None,
33
+ resource_details: list[dict[str, Any]] | None = None,
34
+ budgets: dict[str, int] | None = None
35
+ ) -> dict[str, Any]:
36
+ """§215–219 — build the pack bottom-up *within budget*.
37
+
38
+ Layers fill cheapest-first; overflow is reported as `deferred`
39
+ (drill-down handles it later — §218), never silently truncated.
40
+ """
41
+ b = {**DEFAULT_BUDGETS, **(budgets or {})}
42
+ pack: dict[str, Any] = {
43
+ "schema": "platformforge/fleet-context-pack/v1",
44
+ "selection_signals": {k: signals[k] for k in SELECTION_SIGNALS
45
+ if k in signals},
46
+ "layers": {}, "deferred": [], "budgets": b}
47
+ sources = {"organization": org_summary,
48
+ "fleet": fleet_summaries or [],
49
+ "cluster": cluster_details or [],
50
+ "resource": resource_details or []}
51
+ used = 0
52
+ for layer in LAYERS:
53
+ data = sources[layer]
54
+ items = data if isinstance(data, list) else ([data] if data else [])
55
+ kept, deferred = [], 0
56
+ for item in items:
57
+ cost = _est_tokens(item)
58
+ if used + cost <= b[layer]:
59
+ kept.append(item)
60
+ used += cost
61
+ else:
62
+ deferred += 1
63
+ pack["layers"][layer] = {"items": kept, "tokens": sum(
64
+ _est_tokens(i) for i in kept)}
65
+ if deferred:
66
+ pack["deferred"].append({"layer": layer, "count": deferred,
67
+ "drill_down": True})
68
+ pack["total_tokens"] = used
69
+ pack["full_fleet_loaded"] = False # §214 — by construction
70
+ return pack
71
+
72
+
73
+ def drill_down(pack: dict[str, Any], layer: str,
74
+ items: list[dict[str, Any]],
75
+ budget: int = 1600) -> dict[str, Any]:
76
+ """§218 — expand one layer on demand, still budgeted."""
77
+ kept, cost, deferred = [], 0, 0
78
+ for item in items:
79
+ t = _est_tokens(item)
80
+ if cost + t <= budget:
81
+ kept.append(item)
82
+ cost += t
83
+ else:
84
+ deferred += 1
85
+ return {"layer": layer, "items": kept, "tokens": cost,
86
+ "deferred": deferred}