platformforge 0.1.2__tar.gz → 0.1.4__tar.gz

{platformforge-0.1.2 → platformforge-0.1.4}/.github/workflows/ci.yml

@@ -32,6 +32,10 @@ jobs:
           python-version: ${{ matrix.python }}
       - name: Install
         run: pip install -e ".[dev]"
+      # lf-0019 B2 — rota Git Bash no Windows depende deste shim;
+      # `bash -n` pega erro de sintaxe/CRLF antes de qualquer usuário.
+      - name: Git Bash installer syntax (lf-0019)
+        run: bash -n install.windows.sh
       - name: Lint
         run: python scripts/validate.py --gate lint
       - name: Tests

{platformforge-0.1.2 → platformforge-0.1.4}/.github/workflows/publish-pypi.yml

@@ -186,9 +186,16 @@ jobs:
       - name: Install published package in clean venv
         run: |
           python -m venv /tmp/verify-venv
-          /tmp/verify-venv/bin/python -m pip install --no-cache-dir \
-            --index-url https://pypi.org/simple \
-            "platformforge==${{ inputs.version }}"
+          for i in 1 2 3 4 5 6 7 8 9 10; do
+            if /tmp/verify-venv/bin/python -m pip install --no-cache-dir \
+              --index-url https://pypi.org/simple \
+              "platformforge==${{ inputs.version }}"; then break; fi
+
+                echo "install attempt $i failed (index propagation); retrying in 30s"
+
+                sleep 30
+
+              done
 
       - name: Smoke test console script
         run: /tmp/verify-venv/bin/platformforge --version

{platformforge-0.1.2 → platformforge-0.1.4}/CHANGELOG.md

@@ -1,6 +1,20 @@
 # CHANGELOG
 
 All notable changes. Format: wave/feature, the "why", key commits.
+## [0.1.4] - 2026-10-20
+
+### Changed
+- Cycle 12.1: vendored `scripts/forge_bootstrap.py` re-stamped to the canonical ruff-formatted source; `install.windows.sh` added as the Git Bash/MSYS install route; CI gains a `bash -n` gate for it; economy validation receipt rebound to the release head.
+
+## [0.1.3] - 2026-10-20
+
+### Changed
+- Cycle 12 portable distribution: `data_path()` zipimport-safe via
+  `as_file` + ExitStack with thread-safe dedupe; contracts/freeze/envelope
+  loaders resolve packaged data without a checkout.
+- `test_artifact_contents.py` builds the real wheel and asserts
+  `data/{rules,knowledge,contracts,evals}` file-by-file.
+- Economy-parity validation receipt rebound to the functional HEAD.
 
 ## [0.1.2] - 2026-10-18
 

{platformforge-0.1.2 → platformforge-0.1.4}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.5
 Name: platformforge
-Version: 0.1.2
+Version: 0.1.4
 Summary: Agentic Platform Engineering intelligence platform — deterministic, offline-first, evidence-first
 Project-URL: Homepage, https://github.com/EdgarSocrates98/platform-forge
 Project-URL: Repository, https://github.com/EdgarSocrates98/platform-forge
@@ -46,6 +46,7 @@ Requires-Dist: pyyaml>=6.0
 Provides-Extra: aws
 Requires-Dist: boto3<2,>=1.34; extra == 'aws'
 Provides-Extra: dev
+Requires-Dist: build>=1.0; extra == 'dev'
 Requires-Dist: pytest<10,>=9; extra == 'dev'
 Requires-Dist: ruff<1,>=0.7; extra == 'dev'
 Provides-Extra: mcp

{platformforge-0.1.2 → platformforge-0.1.4}/docs/economy-parity/VALIDATION-RECEIPT.json

@@ -1,7 +1,7 @@
 {
   "benchmarks": {
     "control_plane_overhead": "docs/economy-parity/ECONOMY-BENCHMARKS.md",
-    "end_to_end": "insufficient evidence — no production corpus claimed"
+    "end_to_end": "insufficient evidence \u2014 no production corpus claimed"
   },
   "closure_sha": null,
   "cycle": "economy-parity",
@@ -11,89 +11,89 @@
     "economy-agentic": {
       "ok": true,
       "reproduce": "pytest -q tests/test_economy_agents_waste.py tests/test_economy_evals.py -k uniqueness or debate or duplication or fanout or waste or stagnant",
-      "seconds": 0.36
+      "seconds": 0.88
     },
     "economy-budget": {
       "ok": true,
       "reproduce": "pytest -q tests/test_economy_contracts.py -k budget or limit or protected or dimension",
-      "seconds": 0.28
+      "seconds": 0.71
     },
     "economy-cache": {
       "ok": true,
       "reproduce": "pytest -q tests/test_economy_cache.py",
-      "seconds": 0.29
+      "seconds": 1.03
     },
     "economy-closure": {
       "ok": true,
       "reproduce": "python -c import sys\nfrom pathlib import Path\nreq = {'docs/economy-parity/FINAL-REPORT.md':\n         ['validated_sha', 'remote_ci', 'known gap'],\n       'docs/economy-parity/FINAL-MATRIX.md':\n         ['validated', 'externally-unverified'],\n       'docs/economy-parity/ECONOMY-BENCHMARKS.md':\n         ['Control Plane Overhead', 'End-to-End'],\n       'docs/economy/ROUTING.md':\n         ['decide', 'advisory'],\n       'docs/economy-parity/POLISH-BASELINE.md': ['drift']}\nbad = []\nfor f, needles in req.items():\n    p = Path(f)\n    if not p.is_file(): bad.append(('missing', f)); continue\n    txt = p.read_text()\n    for n in needles:\n        if n not in txt: bad.append((f, n))\nm = Path('docs/economy-parity/FINAL-MATRIX.md').read_text()\nif '\\n' + '|' in m and ' fully-production' in m:\n    bad.append(('matrix', 'overclaimed status'))\nif bad: print(bad); sys.exit(1)\nprint('closure docs coherent')\n && pytest -q tests/test_economy_closure.py",
-      "seconds": 0.4
+      "seconds": 0.71
     },
     "economy-context": {
       "ok": true,
       "reproduce": "pytest -q tests/test_economy_gateway.py -k TestGateway or TestLazy or TestRole or Suff",
-      "seconds": 0.29
+      "seconds": 0.53
     },
     "economy-contracts": {
       "ok": true,
       "reproduce": "pytest -q tests/test_economy_contracts.py tests/test_economy_v2.py",
-      "seconds": 0.48
+      "seconds": 0.86
     },
     "economy-evals": {
       "ok": true,
       "reproduce": "pytest -q tests/test_economy_evals.py",
-      "seconds": 0.38
+      "seconds": 0.68
     },
     "economy-qpt": {
       "ok": true,
       "reproduce": "pytest -q tests/test_qpt_v2.py tests/test_economy_fleet_qpt.py",
-      "seconds": 0.94
+      "seconds": 2.03
     },
     "economy-receipt": {
       "ok": true,
-      "reproduce": "python -c import json, re, subprocess, sys\nfrom pathlib import Path\nsys.path.insert(0, 'scripts')\nimport validate as V\np = Path(V.ECONOMY_RECEIPT_PATH)\nif not p.is_file():\n    print('missing receipt:', p); sys.exit(1)\nr = json.loads(p.read_text())\nbad = []\nif r.get('schema') != V.ECONOMY_RECEIPT_SCHEMA:\n    bad.append(('schema', r.get('schema')))\nvs = r.get('validated_sha') or ''\nok_sha = subprocess.run(['git','cat-file','-e',\n    vs + '^{commit}'], capture_output=True).returncode == 0\nif not ok_sha: bad.append(('validated_sha-not-a-commit', vs))\nhead = subprocess.run(['git','rev-parse','HEAD'],\n    capture_output=True, text=True).stdout.strip()\n# PR merge ref: HEAD^2 is the pushed branch tip — the Option-A\n# pair (functional commit + receipt commit) sits one level down.\nhead2 = subprocess.run(['git','rev-parse','HEAD^2'],\n    capture_output=True, text=True).stdout.strip()\nbase = head2 if __import__('re').fullmatch(r'[0-9a-f]{40}', head2) else head\nhead1 = subprocess.run(['git','rev-parse', base + '~1'],\n    capture_output=True, text=True).stdout.strip()\nif vs not in (base, head1):\n    bad.append(('validated_sha-stale', vs, head))\ncanon = set(V._economy_gate_names())\nextra = set(r.get('gates', {})) - canon\nif extra: bad.append(('noncanonical-gates', sorted(extra)))\npat = re.compile('tests/' + r'\\S+' + r'\\.py')\nfor g, e in r.get('gates', {}).items():\n    for t in pat.findall(e.get('reproduce') or ''):\n        if not Path(t).is_file():\n            bad.append(('dead-reproduce-path', g, t))\nif r.get('verdict') not in ('validated', 'failed'):\n    bad.append(('verdict', r.get('verdict')))\nif bad: print(bad); sys.exit(1)\nprint('receipt coherent:', len(r['gates']), 'gates,',\n      'sha bound')\n",
-      "seconds": 0.04
+      "reproduce": "python -c import json, re, subprocess, sys\nfrom pathlib import Path\nsys.path.insert(0, 'scripts')\nimport validate as V\np = Path(V.ECONOMY_RECEIPT_PATH)\nif not p.is_file():\n    print('missing receipt:', p); sys.exit(1)\nr = json.loads(p.read_text())\nbad = []\nif r.get('schema') != V.ECONOMY_RECEIPT_SCHEMA:\n    bad.append(('schema', r.get('schema')))\nvs = r.get('validated_sha') or ''\nok_sha = subprocess.run(['git','cat-file','-e',\n    vs + '^{commit}'], capture_output=True).returncode == 0\nif not ok_sha: bad.append(('validated_sha-not-a-commit', vs))\nhead = subprocess.run(['git','rev-parse','HEAD'],\n    capture_output=True, text=True).stdout.strip()\n# PR merge ref: HEAD^2 is the pushed branch tip \u2014 the Option-A\n# pair (functional commit + receipt commit) sits one level down.\nhead2 = subprocess.run(['git','rev-parse','HEAD^2'],\n    capture_output=True, text=True).stdout.strip()\nbase = head2 if __import__('re').fullmatch(r'[0-9a-f]{40}', head2) else head\nhead1 = subprocess.run(['git','rev-parse', base + '~1'],\n    capture_output=True, text=True).stdout.strip()\nif vs not in (base, head1):\n    bad.append(('validated_sha-stale', vs, head))\ncanon = set(V._economy_gate_names())\nextra = set(r.get('gates', {})) - canon\nif extra: bad.append(('noncanonical-gates', sorted(extra)))\npat = re.compile('tests/' + r'\\S+' + r'\\.py')\nfor g, e in r.get('gates', {}).items():\n    for t in pat.findall(e.get('reproduce') or ''):\n        if not Path(t).is_file():\n            bad.append(('dead-reproduce-path', g, t))\nif r.get('verdict') not in ('validated', 'failed'):\n    bad.append(('verdict', r.get('verdict')))\nif bad: print(bad); sys.exit(1)\nprint('receipt coherent:', len(r['gates']), 'gates,',\n      'sha bound')\n",
+      "seconds": 0.07
     },
     "economy-reconcile": {
       "ok": true,
       "reproduce": "pytest -q tests/test_economy_gateway.py tests/test_economy_evals.py -k reconcil or mismatch or unobserved",
-      "seconds": 0.33
+      "seconds": 0.7
     },
     "economy-resume": {
       "ok": true,
       "reproduce": "pytest -q tests/test_economy_gateway.py -k resume or checkpoint",
-      "seconds": 0.28
+      "seconds": 0.7
     },
     "economy-routing": {
       "ok": true,
       "reproduce": "pytest -q tests/test_economy_evals.py -k routing or profile or champion or simple_task",
-      "seconds": 0.32
+      "seconds": 0.82
     },
     "economy-surface": {
       "ok": true,
       "reproduce": "python -c import subprocess, sys\ncmds = [\n ['platformforge','economy','doctor'],\n ['platformforge','economy','checkpoint','--run-id','gate',\n  '--spent','{\"tokens\":1}'],\n ['platformforge','economy','resume','--run-id','gate'],\n ['platformforge','economy','reconcile',\n  '--planned','{\"tokens\":1}','--observed','{\"tokens\":2}'],\n ['platformforge','economy','explain','--run-id','gate'],\n ['platformforge','cache','stats'],\n ['platformforge','cache','gc'],\n ['platformforge','context','capsule','--task','t',\n  '--facts','[{\"fact_id\":\"f\"}]'],\n ['platformforge','context','gc'],\n ['platformforge','routing','explain','--signal','{}'],\n ['platformforge','routing','compare',\n  '--champion','{}','--challenger','{}'],\n]\nfor c in cmds:\n    r = subprocess.run(c, capture_output=True)\n    if r.returncode not in (0, 2):\n        print('FAIL', c, r.returncode, r.stderr[-300:])\n        sys.exit(1)\nprint('all economy verbs respond')\n",
-      "seconds": 1.63
+      "seconds": 3.65
     },
     "economy-verification": {
       "ok": true,
       "reproduce": "pytest -q tests/test_economy_pricing_verify.py",
-      "seconds": 0.3
+      "seconds": 0.78
     }
   },
-  "generated_at": "2026-10-17T04:52:46Z",
+  "generated_at": "2026-10-20T14:25:20Z",
   "kind": "platformforge/economy-validation-receipt/1",
   "known_gaps": [
     "real provider pricing catalog not bundled (declared-rates engine only, by design)",
-    "money axis lacks a real model-call corpus — QPC money is unresolved without declared pricing + measured usage",
+    "money axis lacks a real model-call corpus \u2014 QPC money is unresolved without declared pricing + measured usage",
     "production savings unproven; microbench overhead only",
-    "analysis cache reuse requires identical evidence/policy/risk tuple — conservative by construction"
+    "analysis cache reuse requires identical evidence/policy/risk tuple \u2014 conservative by construction"
   ],
   "quality": {
     "note": "QPT/QPC floors enforced inside economy-qpt / economy-evals gates; quality floors gate every economy claim"
   },
-  "remote_ci": "PR pending; local gates canonical",
+  "remote_ci": "not independently verified",
   "schema": "platformforge/economy-validation-receipt/v1",
   "spec": "prompt_evo_economy.md",
-  "validated_sha": "11e2ace198d34d02cc0f6ca799317ce0ba78c4da",
+  "validated_sha": "b94d5ed481cd7ad18f5b21d710bda9af0ea3337b",
   "validator": "scripts/validate.py",
   "validator_version": "economy-validation-receipt/v1",
   "verdict": "validated"

{platformforge-0.1.2 → platformforge-0.1.4}/docs/installation/account-installation.md

@@ -4,6 +4,6 @@ Run `install.sh` (POSIX) or `install.ps1` (Windows) from this checkout. Installe
 
 Published variables use prefix `PLATFORM_FORGE`: `HOME`, `INSTALL_ROOT`, `VENV`, `PYTHON`, `CLI`, and `LAUNCHER`. Underscores are canonical because POSIX shells reject hyphens. Windows also receives aliases such as `PLATFORM-FORGE-HOME`, without administrator permission.
 
-POSIX installer writes `~/.config/forjas/env.sh`; open a new shell or run `source ~/.config/forjas/env.sh`. Windows processes opened after installation receive HKCU variables. Under Windows Git Bash, `install.sh` writes both HKCU variables and this Bash environment file; reload with `source ~/.config/forjas/env.sh`.
+POSIX installer writes `~/.config/forjas/env.sh`; open a new shell or run `source ~/.config/forjas/env.sh`. Windows processes opened after installation receive HKCU variables. Under Windows Git Bash, `install.sh` writes both HKCU variables and this Bash environment file; reload with `source ~/.config/forjas/env.sh`. When PowerShell is unavailable or blocked by policy, `install.windows.sh` is the dedicated Git Bash route — it runs the same shared bootstrap and never spawns `powershell.exe`/`pwsh`.
 
 `setup.sh`/`setup.ps1` remains compatibility mode. The Forge doctor and Portal validate runtime paths while never reading credentials.

{platformforge-0.1.2 → platformforge-0.1.4}/install.ps1

@@ -1,5 +1,7 @@
-# Forge account install — editable runtime + user-scoped environment.
+# Forge account install — wheel runtime + user-scoped environment.
 # Persists HKCU variables and can refresh current session when dot-sourced.
+# The default installs a built wheel (no checkout dependence). Pass --editable
+# for the development flow (CLI tied to this checkout).
 $ErrorActionPreference = "Stop"
 $isDotSourced = $MyInvocation.InvocationName -eq "."
 $oldLocation = Get-Location
@@ -16,7 +18,7 @@ try {
         }
     }
     if (-not $py) { throw "install: no Python executable on PATH (need >=3.10)" }
-    $installArgs = @("--editable", "--persist-env", "--allow-download") + $args
+    $installArgs = @("--persist-env", "--allow-download") + $args
     & $py @pyArgs scripts/forge_bootstrap.py @installArgs
     $status = $LASTEXITCODE
     if ($status -eq 0) {

{platformforge-0.1.2 → platformforge-0.1.4}/install.sh

@@ -1,6 +1,8 @@
 #!/usr/bin/env bash
-# Forge account install — editable runtime + user-scoped environment.
+# Forge account install — wheel runtime + user-scoped environment.
 # Works from POSIX shells and native Windows Git Bash.
+# The default installs a built wheel (no checkout dependence). Pass --editable
+# for the development flow (CLI tied to this checkout).
 set -euo pipefail
 
 _forge_is_sourced=0
@@ -37,7 +39,7 @@ if [ -z "$PY" ]; then
   if [ "$_forge_is_sourced" -eq 1 ]; then return 2; fi
   exit 2
 fi
-ARGS=(--editable --persist-env --allow-download "$@")
+ARGS=(--persist-env --allow-download "$@")
 if "$PY" "${PY_ARGS[@]}" scripts/forge_bootstrap.py "${ARGS[@]}"; then
   status=0
 else

platformforge-0.1.4/install.windows.sh

@@ -0,0 +1,156 @@
+#!/usr/bin/env bash
+# Forge account install — Windows Git Bash route (MSYS2 / Git for Windows).
+#
+# Thin adapter over scripts/forge_bootstrap.py — the SAME shared Python
+# bootstrap install.sh and install.ps1 exec. Nothing here reimplements a
+# pipeline stage: env discovery → python resolution → venv → runtime →
+# launcher → HKCU + Git Bash env.sh persistence → InstallReceipt → smoke
+# verify all live in the bootstrap; this script only picks the
+# interpreter, invokes it and surfaces FORGE-* refusal codes.
+#
+# Primary target: Git Bash. On a non-MSYS POSIX shell the script still
+# runs (documented decision — the shared bootstrap is platform-agnostic)
+# but install.sh stays the canonical POSIX route and the script says so.
+# It NEVER spawns powershell.exe/pwsh — PowerShell is not a fallback on
+# this route; a shell that is not bash refuses FORGE-SHELL-UNAVAILABLE.
+#
+# CRLF: keep LF endings. A checkout cloned with core.autocrlf=true can
+# hand bash a CRLF file it cannot parse (the \r lands inside tokens) —
+# repair a converted copy once with:  sed -i 's/\r$//' install.windows.sh
+if [ -z "${BASH_VERSION:-}" ]; then
+  echo "install.windows.sh: FORGE-SHELL-UNAVAILABLE — esta rota exige bash (Git Bash); a shell atual nao e bash" >&2
+  echo "  remedy: run 'bash install.windows.sh' inside Git Bash, or use install.ps1 under PowerShell" >&2
+  exit 2
+fi
+set -euo pipefail
+
+_forge_is_sourced=0
+if [[ "${BASH_SOURCE[0]}" != "$0" ]]; then
+  _forge_is_sourced=1
+fi
+_forge_original_dir=$PWD
+_forge_root="$(cd -- "$(dirname -- "${BASH_SOURCE[0]}")" && pwd -P)"
+cd "$_forge_root"
+
+_forge_is_git_bash=0
+case "${MSYSTEM:-}:${OSTYPE:-}" in
+  *MSYS*|*MINGW*|*UCRT*|*CYGWIN*) _forge_is_git_bash=1 ;;
+  *)
+    # Tolerated, documented (lf-0018): the shared bootstrap is
+    # platform-agnostic so a stray POSIX invocation still works — but
+    # install.sh is the canonical POSIX route and we say so.
+    echo "install.windows.sh: esta e a rota Windows Git Bash; em POSIX o caminho canonico e ./install.sh — continuando (mesmo bootstrap compartilhado)" >&2
+    echo "install.windows.sh: this is the Windows Git Bash route; on POSIX the canonical route is ./install.sh — continuing (same shared bootstrap)" >&2
+    ;;
+esac
+_forge_dry_run=0
+for arg in "$@"; do
+  if [ "$arg" = "--dry-run" ]; then _forge_dry_run=1; break; fi
+done
+
+# Interpreter selection, same priority as the lf-0017 pipeline:
+# --python flag > FORGE_PYTHON > PATH scan (python3|python|py -3).
+_forge_python_arg=""
+_forge_prev=""
+for arg in "$@"; do
+  if [ "$_forge_prev" = "--python" ]; then _forge_python_arg="$arg"; fi
+  case "$arg" in
+    --python=*) _forge_python_arg="${arg#--python=}" ;;
+  esac
+  _forge_prev="$arg"
+done
+
+PY=""
+PY_ARGS=()
+if [ -n "$_forge_python_arg" ]; then
+  PY="$_forge_python_arg"
+elif [ -n "${FORGE_PYTHON:-}" ]; then
+  PY="$FORGE_PYTHON"
+fi
+if [ -n "$PY" ]; then
+  # Intentional word-split: FORGE_PYTHON/--python may carry an
+  # invocation ("py -3.11") — the bootstrap validates it independently
+  # (FORGE_PYTHON reaches find_python via the environment itself).
+  # shellcheck disable=SC2206
+  _forge_py_argv=($PY)
+  PY="${_forge_py_argv[0]}"
+  PY_ARGS=("${_forge_py_argv[@]:1}")
+else
+  for candidate in python3 python py; do
+    if command -v "$candidate" >/dev/null 2>&1; then
+      PY="$(command -v "$candidate")"
+      case "$(basename -- "$PY")" in
+        py|py.exe) PY_ARGS=(-3) ;;
+      esac
+      break
+    fi
+  done
+fi
+if [ -z "$PY" ]; then
+  echo "install.windows.sh: FORGE-PYTHON-NOT-FOUND — nenhum interpretador em PATH (precisa >=3.10)" >&2
+  echo "  remedio: instale Python e reabra o Git Bash, ou aponte FORGE_PYTHON=<caminho/python.exe>, ou rode ./install.windows.sh --python <exe>" >&2
+  echo "  remedy: install Python and reopen Git Bash, or set FORGE_PYTHON=<python.exe path>, or run ./install.windows.sh --python <exe>" >&2
+  cd "$_forge_original_dir"
+  if [ "$_forge_is_sourced" -eq 1 ]; then return 2; fi
+  exit 2
+fi
+if ! command -v "$PY" >/dev/null 2>&1 && [ ! -x "$PY" ]; then
+  echo "install.windows.sh: FORGE-PYTHON-UNEXECUTABLE — o interpretador apontado nao executa: $PY" >&2
+  echo "  remedio: corrija --python/FORGE_PYTHON ou remova a variavel para a varredura de PATH" >&2
+  echo "  remedy: fix --python/FORGE_PYTHON or unset it to fall back to the PATH scan" >&2
+  cd "$_forge_original_dir"
+  if [ "$_forge_is_sourced" -eq 1 ]; then return 2; fi
+  exit 2
+fi
+
+ARGS=(--persist-env --allow-download "$@")
+_forge_log="${TMPDIR:-${TMP:-/tmp}}/forge-install-windows.$$.log"
+status=0
+if command -v tee >/dev/null 2>&1; then
+  # tee keeps live output AND lets us lift the FORGE-* kind from the
+  # bootstrap's JSON report on failure.
+  "$PY" "${PY_ARGS[@]}" scripts/forge_bootstrap.py "${ARGS[@]}" 2>&1 | tee "$_forge_log" || status=${PIPESTATUS[0]}
+else
+  "$PY" "${PY_ARGS[@]}" scripts/forge_bootstrap.py "${ARGS[@]}" 2>&1 || status=$?
+fi
+
+if [ "$status" -eq 0 ]; then
+  rm -f "$_forge_log"
+  env_file="${XDG_CONFIG_HOME:-$HOME/.config}/forjas/env.sh"
+  if [ "$_forge_dry_run" -eq 1 ]; then
+    echo "Install plan complete. No files, variables or registry entries were written."
+  elif [ "$_forge_is_git_bash" -eq 1 ]; then
+    echo "Install complete. Windows user variables saved in HKCU\Environment and Git Bash environment saved in: $env_file"
+    echo "Reload current Git Bash with: source '$env_file'"
+  else
+    echo "Install complete. Open a new shell or run: source '$env_file'"
+  fi
+  if [ "$_forge_is_sourced" -eq 1 ] && [ -f "$env_file" ]; then
+    # A sourced installer can update its caller; an executed child cannot.
+    # shellcheck disable=SC1090
+    . "$env_file"
+  fi
+else
+  _forge_kind=""
+  _forge_detail=""
+  if [ -f "$_forge_log" ]; then
+    _forge_kind="$(sed -n 's/.*"kind"[[:space:]]*:[[:space:]]*"\([^"]*\)".*/\1/p' "$_forge_log" | tail -n 1)"
+    _forge_detail="$(sed -n 's/.*"detail"[[:space:]]*:[[:space:]]*"\([^"]*\)".*/\1/p' "$_forge_log" | tail -n 1)"
+  fi
+  rm -f "$_forge_log"
+  if [ -n "$_forge_kind" ]; then
+    echo "install.windows.sh: ${_forge_kind} — o bootstrap recusou: ${_forge_detail:-ver o relatorio JSON acima}" >&2
+    echo "install.windows.sh: ${_forge_kind} — bootstrap refused: ${_forge_detail:-see the JSON report above}" >&2
+  else
+    # Bootstrap crashed without a named refusal (traceback, no JSON).
+    echo "install.windows.sh: FORGE-INSTALL-BOOTSTRAP-FAILED — scripts/forge_bootstrap.py saiu com codigo $status sem recusa nomeada" >&2
+    echo "install.windows.sh: FORGE-INSTALL-BOOTSTRAP-FAILED — scripts/forge_bootstrap.py exited $status with no named refusal" >&2
+  fi
+  echo "  remedio: corrija a causa indicada pelo codigo FORGE-* e reexecute ./install.windows.sh; o receipt fica em ~/.forge/installations/" >&2
+  echo "  remedy: fix the cause named by the FORGE-* code and re-run ./install.windows.sh; the receipt lives under ~/.forge/installations/" >&2
+fi
+cd "$_forge_original_dir"
+if [ "$_forge_is_sourced" -eq 1 ]; then
+  return "$status"
+fi
+exit "$status"

{platformforge-0.1.2 → platformforge-0.1.4}/platformforge/__init__.py

@@ -4,4 +4,4 @@ Deterministic-first, offline-first, evidence-first. The core never imports
 LLM SDKs, cloud SDKs, or MCP — those live behind optional adapters.
 """
 
-__version__ = "0.1.2"
+__version__ = "0.1.4"

{platformforge-0.1.2 → platformforge-0.1.4}/platformforge/_forge_portal.py

@@ -243,8 +243,11 @@ class PortalAdapter:
         return detect_account_environment(self)
 
 
+PORTAL_VERSION = "1.0.0"
+
+
 def portal_version() -> str:
-    return "1.0.0"
+    return PORTAL_VERSION
 
 
 def workspace_name(root: str | None) -> str | None:

{platformforge-0.1.2 → platformforge-0.1.4}/platformforge/_installkit.py

@@ -22,6 +22,7 @@ import hashlib
 import json
 import os
 import platform
+import re
 import sys
 import tempfile
 import time
@@ -34,7 +35,7 @@ from typing import Any
 _INSTALLKIT_VERSION = "1.0.0"
 # Filled by the vendor step (scripts/installkit/vendor.py) — the sha256 of
 # the canonical source body, so drift checks can compare vendored copies.
-_SOURCE_SHA256 = "e2623a522e431c34"
+_SOURCE_SHA256 = "bc189dd2ae0028ce"
 
 SCHEMA_MANIFEST = "forge/InstallationManifest/v1"
 SCHEMA_RECEIPT = "forge/InstallReceipt/v1"
@@ -89,6 +90,20 @@ class InstallError(Exception):
         }
 
 
+_URL_USERINFO_RE = re.compile(r"(https?://)[^/@\s]+@")
+
+
+def redact_url_userinfo(text: str) -> str:
+    """Strip ``user:pass@`` userinfo from URLs in persisted/logged text.
+
+    ``--dist "name @ https://user:token@host/x.whl"`` must never land in
+    manifests, receipts or stdout verbatim (prompt §6.5 — nunca registrar
+    valores secretos). Host and path survive so diagnostics still identify
+    the wheelhouse.
+    """
+    return _URL_USERINFO_RE.sub(r"\1***@", text)
+
+
 def _utc_now() -> str:
     from datetime import datetime, timezone
 
@@ -1286,6 +1301,7 @@ def manifest_for(
     version: str,
     source: dict[str, Any],
     shim: Path | None,
+    installation_method: str | None = None,
 ) -> dict[str, Any]:
     doc = {
         "schema": SCHEMA_MANIFEST,
@@ -1301,6 +1317,16 @@ def manifest_for(
             "satisfies": spec.python_spec,
         },
         "source": source,
+        "installation_method": installation_method
+        or (
+            "pypi-wheel"
+            if source.get("kind") == "pypi"
+            else (
+                "git-checkout"
+                if source.get("editable", source.get("kind") == "git-checkout")
+                else "wheel"
+            )
+        ),
         "installed_at": _utc_now(),
         "installed_by": {"agent": "forge_bootstrap", "version": _INSTALLKIT_VERSION},
     }

{platformforge-0.1.2 → platformforge-0.1.4}/platformforge/evals/fleet_invariants.py

@@ -240,7 +240,9 @@ def probe_fleet_report_all_cited(tmp) -> dict[str, Any]:
     from pathlib import Path
 
     from platformforge.cli.fleetcmd import cmd_fleet
-    src = Path("lab/fleets/acme")
+    from platformforge.resources import data_path
+
+    src = data_path("lab", "fleets", "acme")
     with tempfile.TemporaryDirectory() as td:
         for f in src.glob("*.yaml"):
             (Path(td) / f.name).write_text(f.read_text())

{platformforge-0.1.2 → platformforge-0.1.4}/platformforge/freeze/manifest.py

@@ -7,7 +7,14 @@ from pathlib import Path
 from typing import Any
 
 SCHEMA = "platformforge/freeze-manifest/v1"
-CONTRACTS = Path(__file__).resolve().parents[2] / "contracts"
+
+
+def _contracts_dir() -> Path:
+    # `parents[2]` so existe no checkout; no wheel os schemas moram em
+    # `platformforge/data/contracts` (force-include) — `data_path` resolve os dois.
+    from platformforge.resources import data_path
+
+    return data_path("contracts")
 
 
 def _cli_verbs() -> list[str]:
@@ -30,7 +37,7 @@ def _capabilities() -> dict[str, Any]:
 
 
 def _schemas() -> dict[str, Any]:
-    files = sorted(p.name for p in CONTRACTS.glob("*.schema.json"))
+    files = sorted(p.name for p in _contracts_dir().glob("*.schema.json"))
     return {"count": len(files), "files": files}
 
 
@@ -44,7 +51,9 @@ def _agents() -> dict[str, Any]:
 
 
 def _knowledge_packs() -> dict[str, Any]:
-    kroot = Path(__file__).resolve().parents[2] / "knowledge"
+    from platformforge.resources import data_path
+
+    kroot = data_path("knowledge")
     packs = sorted(p.name for p in kroot.iterdir() if p.is_dir())
     srcs = 0
     import yaml

{platformforge-0.1.2 → platformforge-0.1.4}/platformforge/live/envelope.py

@@ -16,11 +16,16 @@ import jsonschema
 from platformforge.core.redaction import redact_obj, redact_text_report
 from platformforge.live.models import SCHEMA, CollectorReceipt, ObservationEnvelope
 
-_CONTRACT_DIR = Path(__file__).resolve().parents[2] / "contracts"
+
+def _contract_dir() -> Path:
+    # Checkout le `contracts/` da raiz; wheel le `platformforge/data/contracts`.
+    from platformforge.resources import data_path
+
+    return data_path("contracts")
 
 
 def _schema(name: str) -> dict[str, Any]:
-    p = _CONTRACT_DIR / name
+    p = _contract_dir() / name
     if not p.exists():
         return {}
     return json.loads(p.read_text())

platformforge-0.1.4/platformforge/resources.py

@@ -0,0 +1,56 @@
+"""Bundled data resolution — one contract for checkout and installed wheel.
+
+Data directories (`rules/`, `knowledge/`, `contracts/`, `evals/`, `lab/`) live
+at the repository root in development. In the wheel they are force-included
+under ``platformforge/data/`` (see pyproject.toml), so an installed package is
+self-contained: every loader resolves through :func:`data_path` and never
+depends on the checkout being present.
+"""
+
+from __future__ import annotations
+
+import atexit
+import threading
+from contextlib import ExitStack
+from importlib import resources
+from pathlib import Path
+
+_MATERIALIZED = ExitStack()
+_MATERIALIZE_LOCK = threading.Lock()
+_MATERIALIZED_PATHS: dict[tuple[str, ...], Path] = {}
+atexit.register(_MATERIALIZED.close)
+
+
+def data_path(*parts: str) -> Path:
+    """Resolve a bundled data path.
+
+    Order: ``platformforge/data/<parts>`` inside an installed wheel first,
+    then the repository root (development checkout / editable install where
+    no bundled ``data/`` tree exists inside the package).
+
+    ``platformforge/data/`` also exists in a checkout — it ships
+    ``portable_skills`` as regular package content — so the probe checks
+    the requested path itself (``data/<parts>``, defaulting to
+    ``data/rules`` when nothing was asked), not a fixed sentinel.
+    """
+    probe = parts if parts else ("rules",)
+    try:
+        pkg = resources.files("platformforge")
+        with _MATERIALIZE_LOCK:
+            installed = pkg.joinpath("data", *probe)
+            if installed.is_dir() or installed.is_file():
+                # as_file materializa o recurso num caminho real — Path(str(t))
+                # devolve um pseudo-caminho dentro do zip sob zipimport. O
+                # ExitStack vive ate o fim do processo para o path seguir
+                # valido; o lock + o cache evitam re-materializar o mesmo
+                # traversable a cada chamada sob zipimport/threads.
+                if parts in _MATERIALIZED_PATHS:
+                    return _MATERIALIZED_PATHS[parts]
+                path = _MATERIALIZED.enter_context(
+                    resources.as_file(pkg.joinpath("data", *parts))
+                )
+                _MATERIALIZED_PATHS[parts] = path
+                return path
+    except (ModuleNotFoundError, TypeError, FileNotFoundError):
+        pass
+    return Path(__file__).resolve().parents[1].joinpath(*parts)

{platformforge-0.1.2 → platformforge-0.1.4}/portal/manifest.json

@@ -179,8 +179,8 @@
   },
   "portal_version": "1.0.0",
   "schema": "forge/PortalAssets/1",
-  "server_generation": "a6bbc5f518d69537",
-  "server_sha256": "a6bbc5f518d695371215440166fdf032752beaf7c6d866dcc693ad13f9cd6f6e",
+  "server_generation": "fed7e298fc06c131",
+  "server_sha256": "fed7e298fc06c131d24c39d04f95eaf09501773a8e19cd6247a4c4d4d3153051",
   "telemetry_generation": "74a161196765669a",
   "telemetry_sha256": "74a161196765669a23a6989f7a06ae6cb38823eafdd7c78beecf322be3c1a457"
 }

{platformforge-0.1.2 → platformforge-0.1.4}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "hatchling.build"
 
 [project]
 name = "platformforge"
-version = "0.1.2"
+version = "0.1.4"
 description = "Agentic Platform Engineering intelligence platform — deterministic, offline-first, evidence-first"
 readme = "README.md"
 license = { file = "LICENSE" }
@@ -33,6 +33,9 @@ mcp = ["mcp>=2.2,<3"]
 dev = [
     "pytest>=9,<10",
     "ruff>=0.7,<1",
+    # Sem isto `.[dev]` nao traz `python -m build` e o teste de
+    # artefato real (test_artifact_contents) pularia o gate da wheel.
+    "build>=1.0",
 ]
 
 [project.scripts]