platformforge 0.2.2__tar.gz → 0.3.0__tar.gz

{platformforge-0.2.2 → platformforge-0.3.0}/CHANGELOG.md

@@ -1,7 +1,14 @@
 # CHANGELOG
 
 All notable changes. Format: wave/feature, the "why", key commits.
-## [0.2.2] - 2026-10-29
+## [0.2.3] - 2026-10-23
+
+### Security
+
+- Vendored `_installkit` 1.0.4: unsafe ledger keys surfaced in
+  `status().drift.unsafe`; `doctor` marks them non-repairable.
+
+## [0.2.2] - 2026-10-23
 
 ### Fixed
 
@@ -73,6 +80,13 @@ All notable changes. Format: wave/feature, the "why", key commits.
 
 ## [Unreleased]
 
+## [0.3.0] - 2026-10-23
+
+### Fixed
+
+- `ui._has_vcs_root`/`_cli_argv`: stray `forge.json` ancestor bound.
+  Regression tests added.
+
 ## [0.1.6] - 2026-10-21
 
 ### Changed

{platformforge-0.2.2 → platformforge-0.3.0}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.5
 Name: platformforge
-Version: 0.2.2
+Version: 0.3.0
 Summary: Agentic Platform Engineering intelligence platform — deterministic, offline-first, evidence-first
 Project-URL: Homepage, https://github.com/EdgarSocrates98/platform-forge
 Project-URL: Repository, https://github.com/EdgarSocrates98/platform-forge

{platformforge-0.2.2 → platformforge-0.3.0}/docs/audits/FORGE_CONTEXT_FINAL_HOMOLOGATION.md

@@ -318,3 +318,56 @@ consumidor não-UTF-8 quebrava install **e** uninstall.
 | PyPI | PUBLICADO | `pypi.org/pypi/platformforge/json` → `0.2.1` |
 | Wheel smoke | PASS | wheel publicado contém `_forgecontext` v1.3.2 (`_read_doc` presente) — verificado via `pip download platformforge==0.2.1` |
 | Regressão | PASS | teste cp1252 `AGENTS.md` → `FORGE-CONTEXT-CONFLICT` nomeado em install e uninstall |
+
+## Pós-release hardening waves — evidência (2026-10-23 UTC)
+
+Duas ondas de patch: `0.2.2` (install 2.0 hardening — traversal containment, lock token, journal quarantine, repair schema, atomic-write mode) e `0.2.3` (receipt truthfulness, user-scope no-op, unsafe drift surfacing).
+
+| Item | Estado | Evidência |
+|---|---|---|
+| Tags | CRIADAS | `v0.2.2`, `v0.2.3` nos merge commits |
+| GitHub Release | CRIADO | `gh release view v0.2.3` |
+| PyPI | PUBLICADO | `pypi.org/pypi/platformforge/json` → `0.2.3` |
+| Wheel conteúdo | VERIFICADO | `pip download platformforge==0.2.3` → `_installkit` 1.0.4 (`_INSTALLKIT_VERSION`) |
+| Install E2E (wheel→workspace) | PASS | ver secção Cycle 8 abaixo |
+
+## Cycle 8 — E2E real em host Devin (EXECUTADO 2026-10-23)
+
+Setup: venv limpa + `pip install` dos wheels PyPI publicados →
+`sparkforge-aws install --root /tmp/e2e-host/proj --host devin -y` →
+receipt `forge/InstallReceipt/v1` `status=completed`, `verification=PASS`.
+
+Jornada do host (esta sessão Devin CLI), cada passo verificado por saída
+de ferramenta, não por afirmação textual:
+
+| Passo | Resultado | Evidência |
+|---|---|---|
+| Descobrir Forge | ✓ | bloco managed `forge:ecosystem` em `AGENTS.md` do workspace |
+| Registry | ✓ | `.forge/context/registry.json` → `spark-forge-aws: available` |
+| Protocolo | ✓ | `AGENT_PROTOCOL.md` (4 130 B) + `ROUTING.md` |
+| Capacidades | ✓ | `sparkforge-aws capabilities` → `forge/capabilities/v1`, 0.6.3 |
+| Rules | ✓ | `rules lookup --id SF-PY-001` → catálogo retorna a regra |
+| Knowledge (wheel, sem git) | ✓ | `knowledge search "glue worker"` → `glue/workers-and-capacity.md`, `knowledge_origin=package` (site-packages) |
+| Regra aplicada a caso real | ✓ | `analyze pyspark job.py` → `judge --glue 5.1` → finding `SF-PY-002` P1 (`df.collect()` job.py:5), evidência `f_6bba98` |
+| Receipt auditável | ✓ | `.sparkforge_aws/receipts/install-*.json` |
+
+Outros hosts: Claude Code / Codex CLI / Copilot — não instalados neste
+ambiente; marcados `não verificado` (não como sucesso). A matriz de hosts
+por path renderizado é coberta pelos testes de render (`rendered_hosts`).
+
+## Cycle 9 — economia/observabilidade (medido, não estimado)
+
+| Métrica | Observado |
+|---|---|
+| Bytes adicionados ao workspace | 37 897 (knowledge stubs) + 28 169 (.forge) + docs |
+| `AGENTS.md` / `CLAUDE.md` / `AGENT_PROTOCOL.md` | 1 978 / 418 / 4 130 B |
+| `registry.json` + `ROUTING.md` + capability manifest | 9 094 / 1 508 / 17 567 B |
+| Knowledge stubs | 43 ponteiros (37 897 B); conteúdo carregado lazy do pacote |
+| Host mirrors (.agents + .devin) | 1 723 209 B cada (perfis+skills renderizados) |
+| Latência cold-start (spawn+exec) | capabilities ≈25 s, rules ≈15 s, knowledge ≈5 s (1ª chamada, inclui startup do intérprete) |
+| Tokens de provider | `unresolved` — sem transcript de host, não estimado |
+
+Sentinel: release `v0.2.2` existe no GitHub; publicação PyPI
+**bloqueada** — workflow `Release` gated no environment `pypi`
+(trusted publisher + approval humana). Job `publish to PyPI (OIDC, gated)`
+falhou por design até o dono aprovar.

{platformforge-0.2.2 → platformforge-0.3.0}/docs/economy-parity/VALIDATION-RECEIPT.json

@@ -11,75 +11,75 @@
     "economy-agentic": {
       "ok": true,
       "reproduce": "pytest -q tests/test_economy_agents_waste.py tests/test_economy_evals.py -k uniqueness or debate or duplication or fanout or waste or stagnant",
-      "seconds": 3.31
+      "seconds": 3.87
     },
     "economy-budget": {
       "ok": true,
       "reproduce": "pytest -q tests/test_economy_contracts.py -k budget or limit or protected or dimension",
-      "seconds": 2.54
+      "seconds": 2.49
     },
     "economy-cache": {
       "ok": true,
       "reproduce": "pytest -q tests/test_economy_cache.py",
-      "seconds": 12.07
+      "seconds": 2.77
     },
     "economy-closure": {
       "ok": true,
       "reproduce": "python -c import sys\nfrom pathlib import Path\nreq = {'docs/economy-parity/FINAL-REPORT.md':\n         ['validated_sha', 'remote_ci', 'known gap'],\n       'docs/economy-parity/FINAL-MATRIX.md':\n         ['validated', 'externally-unverified'],\n       'docs/economy-parity/ECONOMY-BENCHMARKS.md':\n         ['Control Plane Overhead', 'End-to-End'],\n       'docs/economy/ROUTING.md':\n         ['decide', 'advisory'],\n       'docs/economy-parity/POLISH-BASELINE.md': ['drift']}\nbad = []\nfor f, needles in req.items():\n    p = Path(f)\n    if not p.is_file(): bad.append(('missing', f)); continue\n    txt = p.read_text()\n    for n in needles:\n        if n not in txt: bad.append((f, n))\nm = Path('docs/economy-parity/FINAL-MATRIX.md').read_text()\nif '\\n' + '|' in m and ' fully-production' in m:\n    bad.append(('matrix', 'overclaimed status'))\nif bad: print(bad); sys.exit(1)\nprint('closure docs coherent')\n && pytest -q tests/test_economy_closure.py",
-      "seconds": 3.49
+      "seconds": 3.45
     },
     "economy-context": {
       "ok": true,
       "reproduce": "pytest -q tests/test_economy_gateway.py -k TestGateway or TestLazy or TestRole or Suff",
-      "seconds": 2.62
+      "seconds": 2.65
     },
     "economy-contracts": {
       "ok": true,
       "reproduce": "pytest -q tests/test_economy_contracts.py tests/test_economy_v2.py",
-      "seconds": 3.92
+      "seconds": 3.97
     },
     "economy-evals": {
       "ok": true,
       "reproduce": "pytest -q tests/test_economy_evals.py",
-      "seconds": 3.17
+      "seconds": 3.24
     },
     "economy-qpt": {
       "ok": true,
       "reproduce": "pytest -q tests/test_qpt_v2.py tests/test_economy_fleet_qpt.py",
-      "seconds": 8.57
+      "seconds": 8.76
     },
     "economy-receipt": {
       "ok": true,
       "reproduce": "python -c import json, re, subprocess, sys\nfrom pathlib import Path\nsys.path.insert(0, 'scripts')\nimport validate as V\np = Path(V.ECONOMY_RECEIPT_PATH)\nif not p.is_file():\n    print('missing receipt:', p); sys.exit(1)\nr = json.loads(p.read_text())\nbad = []\nif r.get('schema') != V.ECONOMY_RECEIPT_SCHEMA:\n    bad.append(('schema', r.get('schema')))\nvs = r.get('validated_sha') or ''\nok_sha = subprocess.run(['git','cat-file','-e',\n    vs + '^{commit}'], capture_output=True).returncode == 0\nif not ok_sha: bad.append(('validated_sha-not-a-commit', vs))\nhead = subprocess.run(['git','rev-parse','HEAD'],\n    capture_output=True, text=True).stdout.strip()\n# PR merge ref: HEAD^2 is the pushed branch tip \u2014 the Option-A\n# pair (functional commit + receipt commit) sits one level down.\nhead2 = subprocess.run(['git','rev-parse','HEAD^2'],\n    capture_output=True, text=True).stdout.strip()\nbase = head2 if __import__('re').fullmatch(r'[0-9a-f]{40}', head2) else head\nhead1 = subprocess.run(['git','rev-parse', base + '~1'],\n    capture_output=True, text=True).stdout.strip()\nif vs not in (base, head1):\n    bad.append(('validated_sha-stale', vs, head))\ncanon = set(V._economy_gate_names())\nextra = set(r.get('gates', {})) - canon\nif extra: bad.append(('noncanonical-gates', sorted(extra)))\npat = re.compile('tests/' + r'\\S+' + r'\\.py')\nfor g, e in r.get('gates', {}).items():\n    for t in pat.findall(e.get('reproduce') or ''):\n        if not Path(t).is_file():\n            bad.append(('dead-reproduce-path', g, t))\nif r.get('verdict') not in ('validated', 'failed'):\n    bad.append(('verdict', r.get('verdict')))\nif bad: print(bad); sys.exit(1)\nprint('receipt coherent:', len(r['gates']), 'gates,',\n      'sha bound')\n",
-      "seconds": 0.35
+      "seconds": 0.34
     },
     "economy-reconcile": {
       "ok": true,
       "reproduce": "pytest -q tests/test_economy_gateway.py tests/test_economy_evals.py -k reconcil or mismatch or unobserved",
-      "seconds": 2.87
+      "seconds": 2.91
     },
     "economy-resume": {
       "ok": true,
       "reproduce": "pytest -q tests/test_economy_gateway.py -k resume or checkpoint",
-      "seconds": 2.62
+      "seconds": 2.58
     },
     "economy-routing": {
       "ok": true,
       "reproduce": "pytest -q tests/test_economy_evals.py -k routing or profile or champion or simple_task",
-      "seconds": 2.95
+      "seconds": 2.86
     },
     "economy-surface": {
       "ok": true,
       "reproduce": "python -c import subprocess, sys\ncmds = [\n ['platformforge','economy','doctor'],\n ['platformforge','economy','checkpoint','--run-id','gate',\n  '--spent','{\"tokens\":1}'],\n ['platformforge','economy','resume','--run-id','gate'],\n ['platformforge','economy','reconcile',\n  '--planned','{\"tokens\":1}','--observed','{\"tokens\":2}'],\n ['platformforge','economy','explain','--run-id','gate'],\n ['platformforge','cache','stats'],\n ['platformforge','cache','gc'],\n ['platformforge','context','capsule','--task','t',\n  '--facts','[{\"fact_id\":\"f\"}]'],\n ['platformforge','context','gc'],\n ['platformforge','routing','explain','--signal','{}'],\n ['platformforge','routing','compare',\n  '--champion','{}','--challenger','{}'],\n]\nfor c in cmds:\n    r = subprocess.run(c, capture_output=True)\n    if r.returncode not in (0, 2):\n        print('FAIL', c, r.returncode, r.stderr[-300:])\n        sys.exit(1)\nprint('all economy verbs respond')\n",
-      "seconds": 16.02
+      "seconds": 15.82
     },
     "economy-verification": {
       "ok": true,
       "reproduce": "pytest -q tests/test_economy_pricing_verify.py",
-      "seconds": 2.87
+      "seconds": 2.73
     }
   },
-  "generated_at": "2026-10-23T04:16:58Z",
+  "generated_at": "2026-10-23T10:19:50Z",
   "kind": "platformforge/economy-validation-receipt/1",
   "known_gaps": [
     "real provider pricing catalog not bundled (declared-rates engine only, by design)",
@@ -93,7 +93,7 @@
   "remote_ci": "not independently verified",
   "schema": "platformforge/economy-validation-receipt/v1",
   "spec": "prompt_evo_economy.md",
-  "validated_sha": "b3b4558bedfcfd434034af1573c3129128cca12a",
+  "validated_sha": "fa189bb443d9c9354e6e2dae7544bac2409769fa",
   "validator": "scripts/validate.py",
   "validator_version": "economy-validation-receipt/v1",
   "verdict": "validated"

{platformforge-0.2.2 → platformforge-0.3.0}/platformforge/__init__.py

@@ -4,4 +4,4 @@ Deterministic-first, offline-first, evidence-first. The core never imports
 LLM SDKs, cloud SDKs, or MCP — those live behind optional adapters.
 """
 
-__version__ = "0.2.2"
+__version__ = "0.3.0"

{platformforge-0.2.2 → platformforge-0.3.0}/platformforge/_installkit.py

@@ -35,10 +35,10 @@ from dataclasses import dataclass, field
 from pathlib import Path, PurePosixPath
 from typing import Any
 
-_INSTALLKIT_VERSION = "1.0.3"
+_INSTALLKIT_VERSION = "1.0.4"
 # Filled by the vendor step (scripts/installkit/vendor.py) — the sha256 of
 # the canonical source body, so drift checks can compare vendored copies.
-_SOURCE_SHA256 = "b102bf086301aa0d"
+_SOURCE_SHA256 = "7a51eb0c03d7a342"
 
 SCHEMA_MANIFEST = "forge/InstallationManifest/v1"
 SCHEMA_RECEIPT = "forge/InstallReceipt/v1"
@@ -1083,6 +1083,7 @@ def status(ctx: InstallContext) -> dict[str, Any]:
             "ok": ok,
             "modified": [d for d in bad if d["status"] == "modified"],
             "missing": [d for d in bad if d["status"] == "missing"],
+            "unsafe": [d for d in bad if d["status"] == "unsafe"],
         },
         "receipts": [r.name for r in receipts],
         "forge_portal": forge_portal_presence(),
@@ -1107,12 +1108,18 @@ def doctor(ctx: InstallContext) -> dict[str, Any]:
     )
     for d in ledger.drift(ctx.root, ctx.spec):
         if d["status"] != "ok":
+            unsafe = d["status"] == "unsafe"
             checks.append(
                 {
                     "id": f"drift:{d['path']}",
                     "status": "FAIL",
-                    "detail": d["status"],
-                    "repairable": True,
+                    "detail": (
+                        "unsafe — ledger key escapes the install root; "
+                        "repair skips it: edit or rebuild the ledger"
+                        if unsafe
+                        else d["status"]
+                    ),
+                    "repairable": not unsafe,
                 }
             )
     if ctx.spec.mcp_server_name:

{platformforge-0.2.2 → platformforge-0.3.0}/platformforge/ui/home.py

@@ -15,22 +15,22 @@ from pathlib import Path
 from platformforge.ui.i18n import t
 from platformforge.ui.kit import NonInteractive, UIContext, _c, dashboard, select
 
-FORGE_NAME = 'platform-forge'
-CLI_NAME = 'platformforge'
-CLI_ENTRY = 'platformforge.cli.main:main'
+FORGE_NAME = "platform-forge"
+CLI_NAME = "platformforge"
+CLI_ENTRY = "platformforge.cli.main:main"
 
 _MENU: list[tuple[str, list[str] | None]] = [
-    ('Analyze this project (infrastructure facts)', ['analyze', 'iac']),
-    ('Evidence inventory (artifacts in scope)', ['inspect']),
-    ('Impact explorer (graph stats / blast unlock)', ['graph', 'stats']),
-    ('Risk explorer (change decomposition)', ['risk']),
-    ('Explore agents', ['agents', 'list']),
-    ('AI hosts (observe + launch)', ['hosts']),
-    ('MCP explorer (tool registry)', ['mcp', 'tools']),
-    ('Check installation health', ['doctor']),
-    ('Installation status (ledger + drift)', ['install', 'status']),
-    ('MCP verify (real handshake)', ['install', 'mcp-verify']),
-    ('Graph Studio (browser)', ['graph','ui']),
+    ("Analyze this project (infrastructure facts)", ["analyze", "iac"]),
+    ("Evidence inventory (artifacts in scope)", ["inspect"]),
+    ("Impact explorer (graph stats / blast unlock)", ["graph", "stats"]),
+    ("Risk explorer (change decomposition)", ["risk"]),
+    ("Explore agents", ["agents", "list"]),
+    ("AI hosts (observe + launch)", ["hosts"]),
+    ("MCP explorer (tool registry)", ["mcp", "tools"]),
+    ("Check installation health", ["doctor"]),
+    ("Installation status (ledger + drift)", ["install", "status"]),
+    ("MCP verify (real handshake)", ["install", "mcp-verify"]),
+    ("Graph Studio (browser)", ["graph", "ui"]),
     ("installation wizard", "__wizard__"),
     ("quit", None),
 ]
@@ -44,7 +44,11 @@ def _cli_argv(extra: list[str]) -> list[str] | None:
     if CLI_ENTRY:
         module, _, fn = CLI_ENTRY.partition(":")
         checkout = next(
-            (a for a in Path(__file__).resolve().parents if (a / "forge.json").is_file()),
+            (
+                a
+                for a in Path(__file__).resolve().parents
+                if (a / "forge.json").is_file() and (a / "pyproject.toml").is_file()
+            ),
             None,
         )
         if checkout is None:
@@ -59,7 +63,7 @@ def _cli_argv(extra: list[str]) -> list[str] | None:
 
 
 def _run_argv(argv: list[str]) -> int:
-    env = dict(__import__('os').environ, FORGE_TEXT_OUTPUT="1")
+    env = dict(__import__("os").environ, FORGE_TEXT_OUTPUT="1")
     try:
         return subprocess.run(argv, check=False, env=env).returncode
     except FileNotFoundError:
@@ -72,6 +76,7 @@ def run_home(*, ctx: UIContext | None = None) -> int:
         raise NonInteractive("home requires a TTY")
     if ctx.ansi:  # full-screen path; ANSI-free terminals keep the inline kit
         from platformforge.ui.tui import run_tui
+
         return run_tui(ctx=ctx)
     dashboard(
         f"{FORGE_NAME}  workspace: {Path.cwd().name}",

{platformforge-0.2.2 → platformforge-0.3.0}/platformforge/ui/wizard.py

@@ -53,7 +53,8 @@ _SCOPE_LABELS = {
 def _has_vcs_root(start: Path) -> bool:
     """Return whether current directory belongs to a supported project root."""
     return any(
-        (candidate / ".git").exists() or (candidate / "forge.json").is_file()
+        (candidate / ".git").exists()
+        or ((candidate / "forge.json").is_file() and (candidate / "pyproject.toml").is_file())
         for candidate in (start, *start.parents)
     )
 
@@ -66,8 +67,7 @@ def _scope_choices(ctx: UIContext) -> list[str]:
             _c(
                 ctx,
                 "33",
-                "  No repository detected; choose Entire workspace to use this directory "
-                "or My user account.",
+                "  No repository detected; choose Entire workspace to use this directory or My user account.",
             )
         )
         scopes.remove("project")

{platformforge-0.2.2 → platformforge-0.3.0}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "hatchling.build"
 
 [project]
 name = "platformforge"
-version = "0.2.2"
+version = "0.3.0"
 description = "Agentic Platform Engineering intelligence platform — deterministic, offline-first, evidence-first"
 readme = "README.md"
 license = { file = "LICENSE" }

{platformforge-0.2.2 → platformforge-0.3.0}/scripts/forge_installkit.py

@@ -35,10 +35,10 @@ from dataclasses import dataclass, field
 from pathlib import Path, PurePosixPath
 from typing import Any
 
-_INSTALLKIT_VERSION = "1.0.3"
+_INSTALLKIT_VERSION = "1.0.4"
 # Filled by the vendor step (scripts/installkit/vendor.py) — the sha256 of
 # the canonical source body, so drift checks can compare vendored copies.
-_SOURCE_SHA256 = "b102bf086301aa0d"
+_SOURCE_SHA256 = "7a51eb0c03d7a342"
 
 SCHEMA_MANIFEST = "forge/InstallationManifest/v1"
 SCHEMA_RECEIPT = "forge/InstallReceipt/v1"
@@ -1083,6 +1083,7 @@ def status(ctx: InstallContext) -> dict[str, Any]:
             "ok": ok,
             "modified": [d for d in bad if d["status"] == "modified"],
             "missing": [d for d in bad if d["status"] == "missing"],
+            "unsafe": [d for d in bad if d["status"] == "unsafe"],
         },
         "receipts": [r.name for r in receipts],
         "forge_portal": forge_portal_presence(),
@@ -1107,12 +1108,18 @@ def doctor(ctx: InstallContext) -> dict[str, Any]:
     )
     for d in ledger.drift(ctx.root, ctx.spec):
         if d["status"] != "ok":
+            unsafe = d["status"] == "unsafe"
             checks.append(
                 {
                     "id": f"drift:{d['path']}",
                     "status": "FAIL",
-                    "detail": d["status"],
-                    "repairable": True,
+                    "detail": (
+                        "unsafe — ledger key escapes the install root; "
+                        "repair skips it: edit or rebuild the ledger"
+                        if unsafe
+                        else d["status"]
+                    ),
+                    "repairable": not unsafe,
                 }
             )
     if ctx.spec.mcp_server_name:

{platformforge-0.2.2 → platformforge-0.3.0}/tests/test_contracts.py

@@ -58,6 +58,6 @@ def test_slo_contract_validates(tmp_path):
 
 
 def test_version_pinned():
-    assert __version__ == "0.2.2"
+    assert __version__ == "0.3.0"
     import platformforge
     assert platformforge.__version__

platformforge-0.3.0/tests/test_vcs_marker.py

@@ -0,0 +1,29 @@
+"""Regression: stray forge.json in an ancestor must not mark a project root."""
+
+import tempfile
+from pathlib import Path
+
+from platformforge.ui import wizard
+
+
+def test_stray_forge_json_ancestor_is_not_a_root() -> None:
+    root = Path(tempfile.mkdtemp())
+    (root / "forge.json").write_text("{}")
+    inner = root / "a" / "b"
+    inner.mkdir(parents=True)
+    assert not wizard._has_vcs_root(inner)
+
+
+def test_forge_json_with_pyproject_is_a_root(tmp_path: Path) -> None:
+    (tmp_path / "forge.json").write_text("{}")
+    (tmp_path / "pyproject.toml").write_text('[project]\nname = "x"\n')
+    inner = tmp_path / "sub"
+    inner.mkdir()
+    assert wizard._has_vcs_root(inner)
+
+
+def test_git_alone_is_a_root(tmp_path: Path) -> None:
+    (tmp_path / ".git").mkdir()
+    inner = tmp_path / "sub"
+    inner.mkdir()
+    assert wizard._has_vcs_root(inner)

{platformforge-0.2.2 → platformforge-0.3.0}/uv.lock

@@ -479,7 +479,7 @@ wheels = [
 
 [[package]]
 name = "platformforge"
-version = "0.2.2"
+version = "0.3.0"
 source = { editable = "." }
 dependencies = [
     { name = "jsonschema" },