project-corpus 2.0.1__tar.gz

project_corpus-2.0.1/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 Project Corpus contributors
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

project_corpus-2.0.1/PKG-INFO

@@ -0,0 +1,271 @@
+Metadata-Version: 2.4
+Name: project-corpus
+Version: 2.0.1
+Summary: Optional reference Runtime for Project Corpus Protocol
+License-Expression: MIT
+Project-URL: Homepage, https://github.com/darksleep1983/project-corpus
+Project-URL: Documentation, https://darksleep1983.github.io/project-corpus/
+Project-URL: Repository, https://github.com/darksleep1983/project-corpus
+Project-URL: Issues, https://github.com/darksleep1983/project-corpus/issues
+Project-URL: Changelog, https://github.com/darksleep1983/project-corpus/blob/main/CHANGELOG.md
+Keywords: ai-agents,markdown,mcp,project-memory,project-state
+Classifier: Development Status :: 4 - Beta
+Classifier: Intended Audience :: Developers
+Classifier: Operating System :: OS Independent
+Classifier: Programming Language :: Python :: 3
+Classifier: Programming Language :: Python :: 3.11
+Classifier: Programming Language :: Python :: 3.12
+Classifier: Topic :: Software Development :: Libraries
+Requires-Python: >=3.11
+Description-Content-Type: text/markdown
+License-File: LICENSE
+Dynamic: license-file
+
+# Project Corpus
+
+[Русская версия](README.ru.md)
+
+[![CI](https://github.com/darksleep1983/project-corpus/actions/workflows/test.yml/badge.svg?branch=main)](https://github.com/darksleep1983/project-corpus/actions/workflows/test.yml)
+[![Docs build](https://github.com/darksleep1983/project-corpus/actions/workflows/docs.yml/badge.svg?branch=main)](https://github.com/darksleep1983/project-corpus/actions/workflows/docs.yml)
+[![Python](https://img.shields.io/badge/python-3.11%2B-3776AB?logo=python&logoColor=white)](https://www.python.org/)
+[![License](https://img.shields.io/badge/license-MIT-66d9c2)](LICENSE)
+[![Release](https://img.shields.io/github/v/release/darksleep1983/project-corpus?display_name=tag&sort=semver)](https://github.com/darksleep1983/project-corpus/releases)
+
+**Persistent project state and authority for AI agents.**
+
+Project Corpus is a Markdown-first, vendor-neutral protocol that lets ChatGPT,
+Codex, Claude, and other AI agents resume a project from clean context without
+relying on chat memory.
+
+It records the project's canonical identity, current state, evidence, exact
+next action, and authority boundaries in files that remain available when an
+AI session ends. The [Protocol](protocol/v2/README.md) needs only Markdown; the
+[optional Runtime](docs/runtime/cli.md) adds technical enforcement.
+
+```mermaid
+flowchart LR
+  subgraph without_corpus["Without Project Corpus"]
+    direction TB
+    A1["AI Session A"] --> M["chat memory / ad-hoc notes"]
+    M --> E["session ends"]
+    E --> B1["AI Session B"]
+    B1 --> I["reconstruct from incomplete context"]
+  end
+  subgraph with_corpus["With Project Corpus"]
+    direction TB
+    A2["AI Session A"] --> C["Project Corpus"]
+    C --> P["PROJECT.md — what the project is"]
+    C --> S["STATUS.md — where the project is now"]
+    C --> T["Tasks — authorized work"]
+    C --> R["Reports — evidence"]
+    C --> Y["Policy — project-side limits"]
+    C --> B2["AI Session B"]
+    B2 --> L["load canonical state"]
+    L --> N["continue from exact next action"]
+  end
+```
+
+> AI sessions are disposable. Project state is not.
+
+## More than a memory bank
+
+A memory bank helps an agent remember information. Project Corpus additionally
+defines what is canonical, what is current, what counts as evidence, what comes
+next, and who may change state.
+
+## 60-second Quick Start
+
+No Runtime, MCP server, or package installation is required.
+
+1. Download or clone this repository.
+2. Copy the contents of [`templates/v2/minimal/`](templates/v2/minimal/) into
+   the root of your project. From a repository checkout:
+
+   macOS/Linux:
+
+   ```sh
+   cp -R templates/v2/minimal/. /path/to/your-project/
+   ```
+
+   PowerShell:
+
+   ```powershell
+   Copy-Item -Force .\templates\v2\minimal\AGENTS.md C:\path\to\your-project\
+   Copy-Item -Recurse -Force .\templates\v2\minimal\.project-corpus C:\path\to\your-project\
+   ```
+
+3. Fill in [`.project-corpus/state/PROJECT.md`](templates/v2/minimal/.project-corpus/state/PROJECT.md)
+   with the project ID and durable project identity.
+4. Fill in [`.project-corpus/state/STATUS.md`](templates/v2/minimal/.project-corpus/state/STATUS.md)
+   with the same project ID, verified baseline, blockers, evidence references,
+   and exact next action.
+5. Give ChatGPT, Codex, Claude, or another agent access to the project folder.
+   In a manual chat, upload `AGENTS.md`, `PROJECT.md`, and `STATUS.md`. If you
+   are uploading files manually, also upload the active Task and any Reports
+   referenced by `STATUS.md`. Then say:
+
+   > Load Project Corpus for this project. Follow `AGENTS.md`; read
+   > `.project-corpus/state/PROJECT.md` and
+   > `.project-corpus/state/STATUS.md` completely; if an active Task or cited
+   > Reports are available, load only those relevant artifacts; state the
+   > project ID, current status, active Task, and exact next action; then
+   > continue from that action.
+
+### Want enforcement too?
+
+The optional Runtime is currently installed from a local clone, not from PyPI:
+
+```sh
+git clone https://github.com/darksleep1983/project-corpus.git
+cd project-corpus
+python -m pip install .
+project-corpus validate /path/to/your-project
+project-corpus doctor /path/to/your-project
+```
+
+It adds validation/doctor, external owner trust, policy enforcement,
+expected-hash transactions, audit/recovery, and optional local stdio MCP.
+Controlled writes require an external owner trust grant; follow the
+[Runtime CLI guide](docs/runtime/cli.md) rather than treating project content as
+authority.
+
+## Protocol and Runtime
+
+| Project Corpus Protocol | Optional Project Corpus Runtime |
+| --- | --- |
+| Markdown-first and vendor-neutral | Validation and controlled CLI |
+| No installation or database | External owner trust and policy enforcement |
+| Manual workflow supported | Verified writes and audit/recovery |
+| MCP optional | Optional local stdio MCP |
+
+The Protocol is the portable product contract. The Runtime implements it but
+does not define or silently amend it. Enforced guarantees apply only in
+controlled modes on the qualified local filesystems listed in the
+[platform matrix](docs/security/platform-guarantees.md).
+
+## Maintained V1 workflow
+
+The original V1 workflow remains available for existing projects. Its template
+contains:
+
+```text
+AGENTS.md
+OPERATOR_PROFILE.md
+PROJECT_ROADMAP_CURRENT.md
+CORPUS_ACCESS_CURRENT.md
+LOADER_PROMPT_CURRENT.md
+SESSION_HANDOFF_CURRENT.md
+SESSION_HANDOFF_FULL_CURRENT.md
+Tasks/
+Report/
+```
+
+`AGENTS.md` defines the rules. The roadmap and handoffs preserve current state.
+`Tasks/` contains scoped work orders; `Report/` contains evidence of completed
+work.
+
+## Choose one V1 access mode
+
+| Mode | Best for | What happens |
+| --- | --- | --- |
+| Direct folder | Codex, Claude Code, ChatGPT Work, and other local agents | Give the client access only to the Corpus folder and let it read or update the files directly. |
+| Your own MCP | Clients that support an MCP server or file connector | Connect a trusted server of your choice, restrict it to the Corpus root, and record its real capabilities. |
+| Manual session | Any AI chat, with no setup | Upload the seven current files at the start; at the end, save only the replacement files the AI returns. |
+
+The three modes use the same protocol. An unavailable MCP server is not a
+blocker: switch to direct-folder or manual access.
+
+Read the detailed guides:
+
+- [Direct folder](docs/access/direct-folder.md)
+- [Your own MCP](docs/access/own-mcp.md)
+- [Manual sessions](docs/access/manual.md)
+
+## V1 five-minute start
+
+1. Download or clone this repository.
+2. Copy one language folder to a safe location and name it `Corpus`:
+   - `template/en` for English;
+   - `template/ru` for Russian.
+3. Open `CORPUS_ACCESS_CURRENT.md` and choose an access mode.
+4. Give your AI the matching text from
+   [`PROJECT_INSTRUCTION_TEMPLATE.md`](PROJECT_INSTRUCTION_TEMPLATE.md).
+5. Say what you want to build in normal language.
+
+Example:
+
+> Start a new project. I want to build a local photo organizer. First help me
+> define the architecture. Do not install, delete, publish, or contact anyone.
+
+## Client guides
+
+- [ChatGPT](docs/clients/chatgpt.md)
+- [Codex](docs/clients/codex.md)
+- [Claude Code](docs/clients/claude-code.md)
+- [Claude Desktop](docs/clients/claude-desktop.md)
+- [Other AI clients](docs/clients/other-clients.md)
+
+Client interfaces and plan availability can change. Each guide keeps volatile
+client setup separate from the stable Corpus protocol and links to official
+documentation.
+
+## V1 manual mode really works
+
+If you do not want to configure local folders or MCP:
+
+1. upload the seven current files in a new session;
+2. upload only the Tasks and Reports relevant to the request;
+3. ask the AI to read `AGENTS.md` first and issue a loading receipt;
+4. work normally;
+5. ask for a manual synchronization package;
+6. back up the old local files and save the returned replacements.
+
+Ordinary synchronization must not rewrite `AGENTS.md` or
+`OPERATOR_PROFILE.md`. The AI should return only files that actually changed and
+must not claim that it saved them on your computer.
+
+## Important limits
+
+Manual and direct-folder modes are not enforced Runtime modes. Controlled
+Runtime guarantees are scoped to documented operations on qualified local
+NTFS, ext4, and APFS filesystems; read the [security model](docs/security.md)
+for the complete boundaries.
+
+- Project Corpus is a documentation protocol, not a security sandbox.
+- Real access is controlled by your AI client, filesystem permissions, or your
+  chosen MCP server.
+- V1 direct-folder and manual workflows do not gain Runtime enforcement.
+- The optional V2 Runtime provides local CLI and stdio MCP only; it does not
+  provide HTTP/remote MCP or audit third-party servers.
+- A saved Report is not proof that a service or external system is currently
+  healthy.
+- Do not store passwords, tokens, cookies, seed phrases, or API keys in the
+  Corpus.
+- Keep one active project per Corpus.
+
+More: [how it works](docs/how-it-works.md), [FAQ](docs/faq.md),
+[security model](docs/security.md), [languages](docs/languages.md), and
+[moving or removing a Corpus](docs/uninstall.md).
+
+## Current status
+
+Project Corpus V2 is the current open-source generation. The bilingual
+templates, three access modes, documentation links, repository integrity and
+optional Runtime are checked automatically. Release changes are recorded in
+the [changelog](CHANGELOG.md).
+
+## Feedback
+
+Use [GitHub Issues](https://github.com/darksleep1983/project-corpus/issues) for
+bugs, setup questions, and improvement ideas. Do not post secrets or private
+Corpus contents.
+
+## Support the project
+
+Project Corpus is free and MIT-licensed. Voluntary support is available through
+USDT on TON; see the [support page and wallet address](SUPPORT.md). A donation is
+not a purchase and does not provide additional rights or guarantees.
+
+## License
+
+MIT. See [LICENSE](LICENSE).

project_corpus-2.0.1/README.md

@@ -0,0 +1,248 @@
+# Project Corpus
+
+[Русская версия](README.ru.md)
+
+[![CI](https://github.com/darksleep1983/project-corpus/actions/workflows/test.yml/badge.svg?branch=main)](https://github.com/darksleep1983/project-corpus/actions/workflows/test.yml)
+[![Docs build](https://github.com/darksleep1983/project-corpus/actions/workflows/docs.yml/badge.svg?branch=main)](https://github.com/darksleep1983/project-corpus/actions/workflows/docs.yml)
+[![Python](https://img.shields.io/badge/python-3.11%2B-3776AB?logo=python&logoColor=white)](https://www.python.org/)
+[![License](https://img.shields.io/badge/license-MIT-66d9c2)](LICENSE)
+[![Release](https://img.shields.io/github/v/release/darksleep1983/project-corpus?display_name=tag&sort=semver)](https://github.com/darksleep1983/project-corpus/releases)
+
+**Persistent project state and authority for AI agents.**
+
+Project Corpus is a Markdown-first, vendor-neutral protocol that lets ChatGPT,
+Codex, Claude, and other AI agents resume a project from clean context without
+relying on chat memory.
+
+It records the project's canonical identity, current state, evidence, exact
+next action, and authority boundaries in files that remain available when an
+AI session ends. The [Protocol](protocol/v2/README.md) needs only Markdown; the
+[optional Runtime](docs/runtime/cli.md) adds technical enforcement.
+
+```mermaid
+flowchart LR
+  subgraph without_corpus["Without Project Corpus"]
+    direction TB
+    A1["AI Session A"] --> M["chat memory / ad-hoc notes"]
+    M --> E["session ends"]
+    E --> B1["AI Session B"]
+    B1 --> I["reconstruct from incomplete context"]
+  end
+  subgraph with_corpus["With Project Corpus"]
+    direction TB
+    A2["AI Session A"] --> C["Project Corpus"]
+    C --> P["PROJECT.md — what the project is"]
+    C --> S["STATUS.md — where the project is now"]
+    C --> T["Tasks — authorized work"]
+    C --> R["Reports — evidence"]
+    C --> Y["Policy — project-side limits"]
+    C --> B2["AI Session B"]
+    B2 --> L["load canonical state"]
+    L --> N["continue from exact next action"]
+  end
+```
+
+> AI sessions are disposable. Project state is not.
+
+## More than a memory bank
+
+A memory bank helps an agent remember information. Project Corpus additionally
+defines what is canonical, what is current, what counts as evidence, what comes
+next, and who may change state.
+
+## 60-second Quick Start
+
+No Runtime, MCP server, or package installation is required.
+
+1. Download or clone this repository.
+2. Copy the contents of [`templates/v2/minimal/`](templates/v2/minimal/) into
+   the root of your project. From a repository checkout:
+
+   macOS/Linux:
+
+   ```sh
+   cp -R templates/v2/minimal/. /path/to/your-project/
+   ```
+
+   PowerShell:
+
+   ```powershell
+   Copy-Item -Force .\templates\v2\minimal\AGENTS.md C:\path\to\your-project\
+   Copy-Item -Recurse -Force .\templates\v2\minimal\.project-corpus C:\path\to\your-project\
+   ```
+
+3. Fill in [`.project-corpus/state/PROJECT.md`](templates/v2/minimal/.project-corpus/state/PROJECT.md)
+   with the project ID and durable project identity.
+4. Fill in [`.project-corpus/state/STATUS.md`](templates/v2/minimal/.project-corpus/state/STATUS.md)
+   with the same project ID, verified baseline, blockers, evidence references,
+   and exact next action.
+5. Give ChatGPT, Codex, Claude, or another agent access to the project folder.
+   In a manual chat, upload `AGENTS.md`, `PROJECT.md`, and `STATUS.md`. If you
+   are uploading files manually, also upload the active Task and any Reports
+   referenced by `STATUS.md`. Then say:
+
+   > Load Project Corpus for this project. Follow `AGENTS.md`; read
+   > `.project-corpus/state/PROJECT.md` and
+   > `.project-corpus/state/STATUS.md` completely; if an active Task or cited
+   > Reports are available, load only those relevant artifacts; state the
+   > project ID, current status, active Task, and exact next action; then
+   > continue from that action.
+
+### Want enforcement too?
+
+The optional Runtime is currently installed from a local clone, not from PyPI:
+
+```sh
+git clone https://github.com/darksleep1983/project-corpus.git
+cd project-corpus
+python -m pip install .
+project-corpus validate /path/to/your-project
+project-corpus doctor /path/to/your-project
+```
+
+It adds validation/doctor, external owner trust, policy enforcement,
+expected-hash transactions, audit/recovery, and optional local stdio MCP.
+Controlled writes require an external owner trust grant; follow the
+[Runtime CLI guide](docs/runtime/cli.md) rather than treating project content as
+authority.
+
+## Protocol and Runtime
+
+| Project Corpus Protocol | Optional Project Corpus Runtime |
+| --- | --- |
+| Markdown-first and vendor-neutral | Validation and controlled CLI |
+| No installation or database | External owner trust and policy enforcement |
+| Manual workflow supported | Verified writes and audit/recovery |
+| MCP optional | Optional local stdio MCP |
+
+The Protocol is the portable product contract. The Runtime implements it but
+does not define or silently amend it. Enforced guarantees apply only in
+controlled modes on the qualified local filesystems listed in the
+[platform matrix](docs/security/platform-guarantees.md).
+
+## Maintained V1 workflow
+
+The original V1 workflow remains available for existing projects. Its template
+contains:
+
+```text
+AGENTS.md
+OPERATOR_PROFILE.md
+PROJECT_ROADMAP_CURRENT.md
+CORPUS_ACCESS_CURRENT.md
+LOADER_PROMPT_CURRENT.md
+SESSION_HANDOFF_CURRENT.md
+SESSION_HANDOFF_FULL_CURRENT.md
+Tasks/
+Report/
+```
+
+`AGENTS.md` defines the rules. The roadmap and handoffs preserve current state.
+`Tasks/` contains scoped work orders; `Report/` contains evidence of completed
+work.
+
+## Choose one V1 access mode
+
+| Mode | Best for | What happens |
+| --- | --- | --- |
+| Direct folder | Codex, Claude Code, ChatGPT Work, and other local agents | Give the client access only to the Corpus folder and let it read or update the files directly. |
+| Your own MCP | Clients that support an MCP server or file connector | Connect a trusted server of your choice, restrict it to the Corpus root, and record its real capabilities. |
+| Manual session | Any AI chat, with no setup | Upload the seven current files at the start; at the end, save only the replacement files the AI returns. |
+
+The three modes use the same protocol. An unavailable MCP server is not a
+blocker: switch to direct-folder or manual access.
+
+Read the detailed guides:
+
+- [Direct folder](docs/access/direct-folder.md)
+- [Your own MCP](docs/access/own-mcp.md)
+- [Manual sessions](docs/access/manual.md)
+
+## V1 five-minute start
+
+1. Download or clone this repository.
+2. Copy one language folder to a safe location and name it `Corpus`:
+   - `template/en` for English;
+   - `template/ru` for Russian.
+3. Open `CORPUS_ACCESS_CURRENT.md` and choose an access mode.
+4. Give your AI the matching text from
+   [`PROJECT_INSTRUCTION_TEMPLATE.md`](PROJECT_INSTRUCTION_TEMPLATE.md).
+5. Say what you want to build in normal language.
+
+Example:
+
+> Start a new project. I want to build a local photo organizer. First help me
+> define the architecture. Do not install, delete, publish, or contact anyone.
+
+## Client guides
+
+- [ChatGPT](docs/clients/chatgpt.md)
+- [Codex](docs/clients/codex.md)
+- [Claude Code](docs/clients/claude-code.md)
+- [Claude Desktop](docs/clients/claude-desktop.md)
+- [Other AI clients](docs/clients/other-clients.md)
+
+Client interfaces and plan availability can change. Each guide keeps volatile
+client setup separate from the stable Corpus protocol and links to official
+documentation.
+
+## V1 manual mode really works
+
+If you do not want to configure local folders or MCP:
+
+1. upload the seven current files in a new session;
+2. upload only the Tasks and Reports relevant to the request;
+3. ask the AI to read `AGENTS.md` first and issue a loading receipt;
+4. work normally;
+5. ask for a manual synchronization package;
+6. back up the old local files and save the returned replacements.
+
+Ordinary synchronization must not rewrite `AGENTS.md` or
+`OPERATOR_PROFILE.md`. The AI should return only files that actually changed and
+must not claim that it saved them on your computer.
+
+## Important limits
+
+Manual and direct-folder modes are not enforced Runtime modes. Controlled
+Runtime guarantees are scoped to documented operations on qualified local
+NTFS, ext4, and APFS filesystems; read the [security model](docs/security.md)
+for the complete boundaries.
+
+- Project Corpus is a documentation protocol, not a security sandbox.
+- Real access is controlled by your AI client, filesystem permissions, or your
+  chosen MCP server.
+- V1 direct-folder and manual workflows do not gain Runtime enforcement.
+- The optional V2 Runtime provides local CLI and stdio MCP only; it does not
+  provide HTTP/remote MCP or audit third-party servers.
+- A saved Report is not proof that a service or external system is currently
+  healthy.
+- Do not store passwords, tokens, cookies, seed phrases, or API keys in the
+  Corpus.
+- Keep one active project per Corpus.
+
+More: [how it works](docs/how-it-works.md), [FAQ](docs/faq.md),
+[security model](docs/security.md), [languages](docs/languages.md), and
+[moving or removing a Corpus](docs/uninstall.md).
+
+## Current status
+
+Project Corpus V2 is the current open-source generation. The bilingual
+templates, three access modes, documentation links, repository integrity and
+optional Runtime are checked automatically. Release changes are recorded in
+the [changelog](CHANGELOG.md).
+
+## Feedback
+
+Use [GitHub Issues](https://github.com/darksleep1983/project-corpus/issues) for
+bugs, setup questions, and improvement ideas. Do not post secrets or private
+Corpus contents.
+
+## Support the project
+
+Project Corpus is free and MIT-licensed. Voluntary support is available through
+USDT on TON; see the [support page and wallet address](SUPPORT.md). A donation is
+not a purchase and does not provide additional rights or guarantees.
+
+## License
+
+MIT. See [LICENSE](LICENSE).

project_corpus-2.0.1/pyproject.toml

@@ -0,0 +1,39 @@
+[build-system]
+requires = ["setuptools>=77"]
+build-backend = "setuptools.build_meta"
+
+[project]
+name = "project-corpus"
+version = "2.0.1"
+description = "Optional reference Runtime for Project Corpus Protocol"
+readme = "README.md"
+requires-python = ">=3.11"
+license = "MIT"
+license-files = ["LICENSE"]
+keywords = ["ai-agents", "markdown", "mcp", "project-memory", "project-state"]
+classifiers = [
+  "Development Status :: 4 - Beta",
+  "Intended Audience :: Developers",
+  "Operating System :: OS Independent",
+  "Programming Language :: Python :: 3",
+  "Programming Language :: Python :: 3.11",
+  "Programming Language :: Python :: 3.12",
+  "Topic :: Software Development :: Libraries",
+]
+dependencies = []
+
+[project.urls]
+Homepage = "https://github.com/darksleep1983/project-corpus"
+Documentation = "https://darksleep1983.github.io/project-corpus/"
+Repository = "https://github.com/darksleep1983/project-corpus"
+Issues = "https://github.com/darksleep1983/project-corpus/issues"
+Changelog = "https://github.com/darksleep1983/project-corpus/blob/main/CHANGELOG.md"
+
+[project.scripts]
+project-corpus = "project_corpus.cli:main"
+
+[tool.setuptools]
+package-dir = { "" = "src" }
+
+[tool.setuptools.packages.find]
+where = ["src"]

project_corpus-2.0.1/setup.cfg

@@ -0,0 +1,4 @@
+[egg_info]
+tag_build = 
+tag_date = 0
+

project_corpus-2.0.1/src/project_corpus/__init__.py

@@ -0,0 +1,3 @@
+"""Optional reference Runtime for Project Corpus Protocol."""
+
+__version__ = "2.0.1"

project_corpus-2.0.1/src/project_corpus/authority.py

@@ -0,0 +1,75 @@
+from __future__ import annotations
+
+from dataclasses import dataclass
+
+from .policy import ProjectPolicy
+from .trust import TrustGrant
+
+
+RUNTIME_HARD_LIMITS = frozenset({
+    "corpus.read", "corpus.stat", "corpus.validate", "migration.plan",
+    "migration.apply", "state.update", "task.create", "report.create",
+    "audit.read", "mcp.stdio", "git.status", "git.diff",
+})
+DIAGNOSTIC_CAPABILITIES = frozenset({"corpus.validate"})
+READ_ONLY_CAPABILITIES = frozenset({
+    "corpus.read", "corpus.stat", "corpus.validate", "migration.plan",
+    "audit.read", "git.status", "git.diff",
+})
+
+
+@dataclass(frozen=True)
+class AuthorityDecision:
+    effective: frozenset[str]
+    denied: frozenset[str]
+    policy_drift: bool
+    root_identity_match: bool
+    transport_allowed: bool
+    reasons: tuple[str, ...]
+
+    def permits(self, capability: str) -> bool:
+        return capability in self.effective
+
+
+def evaluate_authority(
+    *,
+    trust: TrustGrant,
+    policy: ProjectPolicy,
+    session_capabilities: set[str] | frozenset[str],
+    observed_root_identity: str,
+    transport: str,
+    runtime_hard_limits: frozenset[str] = RUNTIME_HARD_LIMITS,
+) -> AuthorityDecision:
+    requested = frozenset(session_capabilities)
+    reasons: list[str] = []
+    policy_drift = trust.policy_sha256 != policy.digest
+    root_match = trust.root_identity == observed_root_identity
+    transport_allowed = transport in trust.transports
+    if trust.project_id != policy.project_id:
+        return AuthorityDecision(
+            frozenset(), requested, policy_drift, root_match,
+            transport_allowed, ("PROJECT_ID_MISMATCH",),
+        )
+
+    effective = (
+        runtime_hard_limits & trust.capability_ceiling & policy.capabilities & requested
+    )
+    if policy_drift:
+        effective &= READ_ONLY_CAPABILITIES
+        reasons.append("POLICY_DRIFT")
+    if not root_match:
+        effective &= DIAGNOSTIC_CAPABILITIES
+        reasons.append("ROOT_IDENTITY_MISMATCH")
+    if not transport_allowed:
+        effective = frozenset()
+        reasons.append("TRANSPORT_NOT_GRANTED")
+    if requested - runtime_hard_limits:
+        reasons.append("RUNTIME_HARD_LIMIT")
+    if requested - trust.capability_ceiling:
+        reasons.append("OWNER_GRANT_LIMIT")
+    if requested - policy.capabilities:
+        reasons.append("PROJECT_POLICY_LIMIT")
+    return AuthorityDecision(
+        frozenset(effective), frozenset(requested - effective), policy_drift,
+        root_match, transport_allowed, tuple(dict.fromkeys(reasons)),
+    )