selah 0.1.0rc1__tar.gz

selah-0.1.0rc1/PKG-INFO

@@ -0,0 +1,105 @@
+Metadata-Version: 2.5
+Name: selah
+Version: 0.1.0rc1
+Summary: Model-, provider-, account-, and environment-neutral protocol package
+Author: Everplay-Tech LLC
+License-Expression: Apache-2.0
+Requires-Python: >=3.11
+Requires-Dist: rfc8785==0.1.4
+Provides-Extra: all
+Requires-Dist: fastapi<1,>=0.115; extra == 'all'
+Requires-Dist: mcp<3,>=2.1; extra == 'all'
+Requires-Dist: noldorian==0.2.6; extra == 'all'
+Requires-Dist: uvicorn<1,>=0.30; extra == 'all'
+Provides-Extra: animation
+Provides-Extra: google
+Provides-Extra: mcp
+Requires-Dist: mcp<3,>=2.1; extra == 'mcp'
+Provides-Extra: noldorian
+Requires-Dist: noldorian==0.2.6; extra == 'noldorian'
+Provides-Extra: server
+Requires-Dist: fastapi<1,>=0.115; extra == 'server'
+Requires-Dist: uvicorn<1,>=0.30; extra == 'server'
+Description-Content-Type: text/markdown
+
+# SELAH
+
+SELAH is an agent-native integration system and protocol for portable identity, environment awareness, capability boundaries, and deterministic, receipt-backed communication.
+
+It gives an agent a small, stable vocabulary for answering four practical questions:
+
+1. Who is this agent?
+2. What runtime, provider, account, environment, and project context is actually observed?
+3. Which capabilities are merely available, and which have been explicitly granted?
+4. What decision was made, and what evidence can another process verify?
+
+SELAH is model-, provider-, account-, and environment-neutral. Its core does not call a model, choose a provider, read credentials, or infer authority from model text. Adapters supply authenticated evidence and provider-specific behavior at the boundary.
+
+SELAH is installed to give an agent a portable, structured identity and an observed environment/capability/receipt layer. Departments govern documents and prompts through packaged language profiles, and Spanish is the explicit cross-department communication profile. Start with `selah --help`, then use the documented setup and orientation flow below.
+
+## Install
+
+~~~sh
+python -m pip install selah==0.1.0rc1
+~~~
+
+The base distribution has one runtime dependency, rfc8785==0.1.4. Optional adapter extras are available for mcp, server, google, noldorian, animation, and all. The core import does not load optional SDKs.
+
+## First run
+
+The setup command asks for one human choice: name a new agent or select an existing opaque agent ID. It then reports local observations. If the adapter cannot know a context field, SELAH asks for a conditional confirmation instead of silently treating the field as known.
+
+For a new identity, the conditional confirmation is bound to the pending transition saved in the configured state database. Re-running the same product-facing command with `--confirm` consumes that transition and reuses its candidate identity; a mismatched, expired, malformed, or already-consumed transition fails closed.
+
+~~~sh
+STATE=.selah/selah.sqlite3
+
+# First call: inspect the conditional context prompt.
+selah --json --state "$STATE" setup --name Ada
+
+# Second call: confirm that saving the still-unknown observations is acceptable.
+selah --json --state "$STATE" setup --name Ada --confirm
+~~~
+
+The setup response includes an identity, an observed context projection, and an onboarding receipt. The receipt is evidence of the transition; it is not a grant.
+
+Inspect the saved orientation with the agent_id returned by setup:
+
+~~~sh
+selah --json --state "$STATE" orient --agent-id agent:REPLACE_ME --profile latina
+~~~
+
+Orientation is read-only. It distinguishes known values from unknown values, observed capabilities from authorized capabilities, and current authority from missing or stale authority.
+
+## Deny before allow
+
+An observed capability is not permission. A grant must be issued by an authenticated authority adapter and must match the agent, scope, authority generation, and time window. The runnable quickstart at examples/selah/quickstart.py shows both paths:
+
+~~~sh
+python examples/selah/quickstart.py
+~~~
+
+The example reports:
+
+- MISSING_GRANT when a capability is observed but no grant exists;
+- ALLOW after an explicit, scoped grant is issued by the fixture verifier;
+- the onboarding receipt ID and digest for later inspection.
+
+The fixture uses an internal verifier seam only to keep the example offline and deterministic. A deployed adapter must obtain its issuer and principal from its authenticated transport or authority system; a caller cannot create them by supplying a label, boolean, or digest.
+
+## Runtime lifecycle mutations
+
+The optional runtime lifecycle adapter keeps `status` read-only. `start` and `stop` require the typed identity, session, runtime lifecycle grant, ALLOW authority decision, an `ExecutableDispatch`, and its `StateRepository`. The dispatch nonce is claimed before the provider is loaded or called, so a dispatch can execute at most once. Bind the operation into the authority request with `RuntimeAdapter.operation_intent_hash("start")` or `RuntimeAdapter.operation_intent_hash("stop")`; callers using the mutation API without typed dispatch/state receive a stable denial.
+
+## What SELAH does not claim
+
+SELAH does not promise universal protection from manipulation, prompt injection, or semantic drift. It makes a narrower, measured and testable claim: when an integration uses the typed language, authenticated context, explicit grants, fail-closed decisions, and receipts, the evaluation suite can measure whether particular drift and instruction-hacking cases were reduced. Results are reported by model, language profile, corpus, and release threshold rather than converted into a general guarantee.
+
+## Related documents
+
+- docs/selah/SECURITY.md — identity, context, observations, grants, decisions, receipts, and the trust boundary.
+- docs/selah/LANGUAGE.md — deterministic lexical and grammatical protocol behavior.
+- docs/selah/MIGRATION.md — explicit one-way migration from legacy ACETATE records.
+- examples/selah/quickstart.py — an offline installed-package walkthrough.
+
+SELAH is not Dreamjournal. Dreamjournal is a separate product. SELAH is not a Dreamjournal dependency, and Dreamjournal is not a SELAH dependency. Neither package imports, bundles, or release-gates the other, and Dreamjournal does not provide SELAH identity or authority.

selah-0.1.0rc1/README.md

@@ -0,0 +1,81 @@
+# SELAH
+
+SELAH is an agent-native integration system and protocol for portable identity, environment awareness, capability boundaries, and deterministic, receipt-backed communication.
+
+It gives an agent a small, stable vocabulary for answering four practical questions:
+
+1. Who is this agent?
+2. What runtime, provider, account, environment, and project context is actually observed?
+3. Which capabilities are merely available, and which have been explicitly granted?
+4. What decision was made, and what evidence can another process verify?
+
+SELAH is model-, provider-, account-, and environment-neutral. Its core does not call a model, choose a provider, read credentials, or infer authority from model text. Adapters supply authenticated evidence and provider-specific behavior at the boundary.
+
+SELAH is installed to give an agent a portable, structured identity and an observed environment/capability/receipt layer. Departments govern documents and prompts through packaged language profiles, and Spanish is the explicit cross-department communication profile. Start with `selah --help`, then use the documented setup and orientation flow below.
+
+## Install
+
+~~~sh
+python -m pip install selah==0.1.0rc1
+~~~
+
+The base distribution has one runtime dependency, rfc8785==0.1.4. Optional adapter extras are available for mcp, server, google, noldorian, animation, and all. The core import does not load optional SDKs.
+
+## First run
+
+The setup command asks for one human choice: name a new agent or select an existing opaque agent ID. It then reports local observations. If the adapter cannot know a context field, SELAH asks for a conditional confirmation instead of silently treating the field as known.
+
+For a new identity, the conditional confirmation is bound to the pending transition saved in the configured state database. Re-running the same product-facing command with `--confirm` consumes that transition and reuses its candidate identity; a mismatched, expired, malformed, or already-consumed transition fails closed.
+
+~~~sh
+STATE=.selah/selah.sqlite3
+
+# First call: inspect the conditional context prompt.
+selah --json --state "$STATE" setup --name Ada
+
+# Second call: confirm that saving the still-unknown observations is acceptable.
+selah --json --state "$STATE" setup --name Ada --confirm
+~~~
+
+The setup response includes an identity, an observed context projection, and an onboarding receipt. The receipt is evidence of the transition; it is not a grant.
+
+Inspect the saved orientation with the agent_id returned by setup:
+
+~~~sh
+selah --json --state "$STATE" orient --agent-id agent:REPLACE_ME --profile latina
+~~~
+
+Orientation is read-only. It distinguishes known values from unknown values, observed capabilities from authorized capabilities, and current authority from missing or stale authority.
+
+## Deny before allow
+
+An observed capability is not permission. A grant must be issued by an authenticated authority adapter and must match the agent, scope, authority generation, and time window. The runnable quickstart at examples/selah/quickstart.py shows both paths:
+
+~~~sh
+python examples/selah/quickstart.py
+~~~
+
+The example reports:
+
+- MISSING_GRANT when a capability is observed but no grant exists;
+- ALLOW after an explicit, scoped grant is issued by the fixture verifier;
+- the onboarding receipt ID and digest for later inspection.
+
+The fixture uses an internal verifier seam only to keep the example offline and deterministic. A deployed adapter must obtain its issuer and principal from its authenticated transport or authority system; a caller cannot create them by supplying a label, boolean, or digest.
+
+## Runtime lifecycle mutations
+
+The optional runtime lifecycle adapter keeps `status` read-only. `start` and `stop` require the typed identity, session, runtime lifecycle grant, ALLOW authority decision, an `ExecutableDispatch`, and its `StateRepository`. The dispatch nonce is claimed before the provider is loaded or called, so a dispatch can execute at most once. Bind the operation into the authority request with `RuntimeAdapter.operation_intent_hash("start")` or `RuntimeAdapter.operation_intent_hash("stop")`; callers using the mutation API without typed dispatch/state receive a stable denial.
+
+## What SELAH does not claim
+
+SELAH does not promise universal protection from manipulation, prompt injection, or semantic drift. It makes a narrower, measured and testable claim: when an integration uses the typed language, authenticated context, explicit grants, fail-closed decisions, and receipts, the evaluation suite can measure whether particular drift and instruction-hacking cases were reduced. Results are reported by model, language profile, corpus, and release threshold rather than converted into a general guarantee.
+
+## Related documents
+
+- docs/selah/SECURITY.md — identity, context, observations, grants, decisions, receipts, and the trust boundary.
+- docs/selah/LANGUAGE.md — deterministic lexical and grammatical protocol behavior.
+- docs/selah/MIGRATION.md — explicit one-way migration from legacy ACETATE records.
+- examples/selah/quickstart.py — an offline installed-package walkthrough.
+
+SELAH is not Dreamjournal. Dreamjournal is a separate product. SELAH is not a Dreamjournal dependency, and Dreamjournal is not a SELAH dependency. Neither package imports, bundles, or release-gates the other, and Dreamjournal does not provide SELAH identity or authority.

selah-0.1.0rc1/pyproject.toml

@@ -0,0 +1,62 @@
+[build-system]
+requires = ["hatchling==1.32.0"]
+build-backend = "hatchling.build"
+
+[project]
+name = "selah"
+version = "0.1.0rc1"
+description = "Model-, provider-, account-, and environment-neutral protocol package"
+readme = "README.md"
+requires-python = ">=3.11"
+license = "Apache-2.0"
+authors = [{name = "Everplay-Tech LLC"}]
+dependencies = ["rfc8785==0.1.4"]
+
+[project.optional-dependencies]
+mcp = ["mcp>=2.1,<3"]
+server = ["fastapi>=0.115,<1", "uvicorn>=0.30,<1"]
+# Google and animation remain provider-neutral boundaries in this release;
+# their adapters accept a user-selected provider/domain implementation.
+google = []
+noldorian = ["noldorian==0.2.6"]
+animation = []
+all = [
+    "mcp>=2.1,<3",
+    "fastapi>=0.115,<1",
+    "uvicorn>=0.30,<1",
+    "noldorian==0.2.6",
+]
+
+[project.scripts]
+selah = "selah.cli:main"
+
+[dependency-groups]
+acceptance = [
+    "build==1.6.1",
+    "hatchling==1.32.0",
+    "jsonschema==4.23.0",
+    "pytest==9.1.1",
+]
+
+[tool.hatch.build.targets.wheel]
+packages = ["src/selah"]
+
+[tool.hatch.build.targets.sdist]
+include = ["README.md", "pyproject.toml", "src/selah/**"]
+
+# Kept as an explicit package-data contract for tooling that reads the
+# historical setuptools metadata. Hatchling is the active PEP 517 backend.
+[tool.setuptools.packages.find]
+where = ["src"]
+namespaces = true
+
+[tool.setuptools.package-data]
+selah = [
+    "py.typed",
+    "protocol/schemas/**/*.json",
+    "protocol/data/language-v2/**/*.json",
+    "protocol/data/profiles/**/*.json",
+    "protocol/data/departments/*.json",
+    "protocol/data/departments/**/*.json",
+    "protocol/schemas/departmental-document-v1/*.json",
+]

selah-0.1.0rc1/src/selah/__init__.py

@@ -0,0 +1,105 @@
+"""Small, import-safe public SELAH package surface.
+
+The exports below are typed core contracts.  They are resolved lazily so
+resource discovery can inspect an installed wheel without importing runtime
+dependencies.  Optional adapters and provider SDKs are never imported as a
+side effect of importing :mod:`selah`.
+"""
+
+from importlib import import_module
+from typing import Any
+
+
+__version__ = "0.1.0rc1"
+PROTOCOL_VERSION = "SELAH/1"
+LANGUAGE_VERSION = "SELAH/1"
+
+_EXPORTS: dict[str, tuple[str, str]] = {
+    "AgentIdentity": (".identity", "AgentIdentity"),
+    "AgentOrientation": (".orientation", "AgentOrientation"),
+    "AuthorityDecision": (".authority", "AuthorityDecision"),
+    "AuthorityEngine": (".authority", "AuthorityEngine"),
+    "AuthorityRequest": (".authority", "AuthorityRequest"),
+    "AuthoritySession": (".authority", "AuthoritySession"),
+    "CapabilityDecision": (".capabilities", "CapabilityDecision"),
+    "CapabilityGrant": (".capabilities", "CapabilityGrant"),
+    "CapabilityObservation": (".capabilities", "CapabilityObservation"),
+    "CapabilityScope": (".capabilities", "CapabilityScope"),
+    "ContextObservation": (".context", "ContextObservation"),
+    "OnboardingChoice": (".onboarding", "OnboardingChoice"),
+    "OnboardingService": (".onboarding", "OnboardingService"),
+    "OrientationService": (".orientation", "OrientationService"),
+    "AgentDepartmentBinding": (".prompting", "AgentDepartmentBinding"),
+    "DepartmentBindingReceipt": (".prompting", "DepartmentBindingReceipt"),
+    "PromptBundleManifest": (".prompting", "PromptBundleManifest"),
+    "PromptBundleReceipt": (".prompting", "PromptBundleReceipt"),
+    "ReceiptDigestContract": (".prompting", "ReceiptDigestContract"),
+    "build_prompt_bundle": (".prompting", "build_prompt_bundle"),
+    "active_binding_at": (".prompting", "active_binding_at"),
+    "RuntimeIdentity": (".identity", "RuntimeIdentity"),
+    "SessionBinding": (".sessions", "SessionBinding"),
+}
+
+
+def __getattr__(name: str) -> Any:
+    """Load one documented core contract on first access."""
+
+    target = _EXPORTS.get(name)
+    if target is None:
+        raise AttributeError(f"module {__name__!r} has no attribute {name!r}")
+    module_name, attribute = target
+    value = getattr(import_module(module_name, __name__), attribute)
+    globals()[name] = value
+    return value
+
+
+def protocol_version() -> str:
+    """Return the stable SELAH protocol identifier."""
+
+    return PROTOCOL_VERSION
+
+
+def language_version() -> str:
+    """Return the strict native-language protocol identifier."""
+
+    return LANGUAGE_VERSION
+
+
+def main(argv: object = None) -> int:
+    """Delegate lazily to :mod:`selah.cli` without loading it at import time."""
+
+    from .cli import main as cli_main
+
+    return cli_main(argv)
+
+__all__ = [
+    "AgentIdentity",
+    "AgentDepartmentBinding",
+    "AgentOrientation",
+    "AuthorityDecision",
+    "AuthorityEngine",
+    "AuthorityRequest",
+    "AuthoritySession",
+    "CapabilityDecision",
+    "CapabilityGrant",
+    "CapabilityObservation",
+    "CapabilityScope",
+    "ContextObservation",
+    "DepartmentBindingReceipt",
+    "LANGUAGE_VERSION",
+    "OnboardingChoice",
+    "OnboardingService",
+    "OrientationService",
+    "PromptBundleManifest",
+    "PromptBundleReceipt",
+    "PROTOCOL_VERSION",
+    "RuntimeIdentity",
+    "ReceiptDigestContract",
+    "SessionBinding",
+    "active_binding_at",
+    "build_prompt_bundle",
+    "__version__",
+    "language_version",
+    "main",
+    "protocol_version",
+]

selah-0.1.0rc1/src/selah/adapters/__init__.py

@@ -0,0 +1,38 @@
+"""Lazy discovery of replaceable SELAH adapters.
+
+This registry contains names and import paths only.  It never imports an
+adapter, provider SDK, network client, or credential source on package import.
+"""
+
+from __future__ import annotations
+
+import importlib
+from types import ModuleType
+
+
+ADAPTER_MODULES = {
+    "animation": "selah.adapters.animation",
+    "google": "selah.adapters.google",
+    "http": "selah.adapters.http",
+    "mcp": "selah.adapters.mcp",
+    "noldorian": "selah.adapters.noldorian",
+    "runtime": "selah.adapters.runtime",
+}
+OPTIONAL_ADAPTERS = tuple(sorted(ADAPTER_MODULES))
+
+
+def adapter_module(name: str) -> ModuleType:
+    """Load one named adapter; reject arbitrary module paths."""
+
+    if not isinstance(name, str) or name not in ADAPTER_MODULES:
+        raise ValueError("name must identify a documented SELAH adapter")
+    return importlib.import_module(ADAPTER_MODULES[name])
+
+
+def adapter_modules() -> dict[str, str]:
+    """Return the stable adapter registry without importing its modules."""
+
+    return dict(ADAPTER_MODULES)
+
+
+__all__ = ["ADAPTER_MODULES", "OPTIONAL_ADAPTERS", "adapter_module", "adapter_modules"]

selah-0.1.0rc1/src/selah/adapters/animation/__init__.py

@@ -0,0 +1,29 @@
+"""Optional animation-domain boundary for SELAH."""
+
+from .application import (
+    ANIMATION_ADAPTER_VERSION,
+    ANIMATION_CAPABILITY,
+    ANIMATION_DOMAIN_VERSION,
+    AnimationAdapter,
+    AnimationAuthorityRequired,
+    AnimationError,
+    AnimationOperationRejected,
+    AnimationProfile,
+    AnimationProviderRejected,
+    adapter_manifest,
+    domain_profile,
+)
+
+__all__ = [
+    "ANIMATION_ADAPTER_VERSION",
+    "ANIMATION_CAPABILITY",
+    "ANIMATION_DOMAIN_VERSION",
+    "AnimationAdapter",
+    "AnimationAuthorityRequired",
+    "AnimationError",
+    "AnimationOperationRejected",
+    "AnimationProfile",
+    "AnimationProviderRejected",
+    "adapter_manifest",
+    "domain_profile",
+]