specsmith 0.11.3.dev425__tar.gz → 0.11.3.dev427__tar.gz

{specsmith-0.11.3.dev425/src/specsmith.egg-info → specsmith-0.11.3.dev427}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: specsmith
-Version: 0.11.3.dev425
+Version: 0.11.3.dev427
 Summary: Applied Epistemic Engineering toolkit — AEE agent sessions, execution profiles, FPGA/HDL governance, tool installer, 50+ CLI commands.
 Author: BitConcepts
 License-Expression: MIT

{specsmith-0.11.3.dev425 → specsmith-0.11.3.dev427}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "setuptools.build_meta"
 
 [project]
 name = "specsmith"
-version = "0.11.3.dev425"
+version = "0.11.3.dev427"
 description = "Applied Epistemic Engineering toolkit — AEE agent sessions, execution profiles, FPGA/HDL governance, tool installer, 50+ CLI commands."
 readme = "README.md"
 license = "MIT"

specsmith-0.11.3.dev427/src/specsmith/esdb/__init__.py

@@ -0,0 +1,2 @@
+# specsmith.esdb — ESDB integration package
+

specsmith-0.11.3.dev427/src/specsmith/esdb/bridge.py

@@ -0,0 +1,10 @@
+"""specsmith.esdb.bridge — thin re-export of chronomemory.EsdbBridge.
+
+EsdbBridge lives in the chronomemory package; this module exposes it under
+the specsmith.esdb.bridge namespace so that save/load commands can import it
+without depending directly on chronomemory at the top of cli.py.
+"""
+
+from chronomemory import EsdbBridge
+
+__all__ = ["EsdbBridge"]

{specsmith-0.11.3.dev425 → specsmith-0.11.3.dev427}/src/specsmith/governance_logic.py

@@ -90,54 +90,49 @@ def run_preflight(
     explicit_req_ids = [m.upper() for m in _EXPLICIT_REQ.findall(utterance)]
     explicit_test_ids = [m.upper() for m in _EXPLICIT_TEST.findall(utterance)]
 
-    # Validate explicit REQ IDs against requirements.json and add any that match.
-    # Paths below are: resolved trusted root + constant string suffixes — no user
-    # data flows into the filename components. The intermediary names are local
-    # constants to make this obvious to static analysis tools.
-    _REQS_SUFFIX = ".specsmith/requirements.json"
-    _TC_SUFFIX = ".specsmith/testcases.json"
-    if explicit_req_ids:
-        rq_json = (root / _REQS_SUFFIX).resolve()
-        if rq_json.is_file():
-            try:
-                rq_records = _json.loads(rq_json.read_text(encoding="utf-8"))
-            except (OSError, ValueError):
-                rq_records = []
-            known_req_ids = {r["id"] for r in rq_records if isinstance(r, dict) and r.get("id")}
-            for eid in explicit_req_ids:
-                if eid in known_req_ids and eid not in requirement_ids:
-                    requirement_ids.append(eid)
+    # Pre-compute .specsmith/ sub-paths via os.path.join from the already-sanitised
+    # root string.  os.path.join(str(root), const) is unambiguously clean to
+    # CodeQL's py/path-injection taint tracker: the left operand is the output of
+    # os.path.realpath (see _safe_resolve) and the right operands are literals.
+    _root_str: str = str(root)
+    _reqs_json_path = os.path.join(_root_str, ".specsmith", "requirements.json")
+    _tc_json_path = os.path.join(_root_str, ".specsmith", "testcases.json")
+
+    if explicit_req_ids and os.path.isfile(_reqs_json_path):
+        try:
+            rq_records = _json.loads(Path(_reqs_json_path).read_text(encoding="utf-8"))
+        except (OSError, ValueError):
+            rq_records = []
+        known_req_ids = {r["id"] for r in rq_records if isinstance(r, dict) and r.get("id")}
+        for eid in explicit_req_ids:
+            if eid in known_req_ids and eid not in requirement_ids:
+                requirement_ids.append(eid)
 
     # Resolve test case IDs from machine state
     test_case_ids: list[str] = []
-    # Include any explicitly named TEST-* IDs from the utterance.
-    if explicit_test_ids:
-        tc_json_explicit = (root / _TC_SUFFIX).resolve()
-        if tc_json_explicit.is_file():
-            try:
-                tc_explicit = _json.loads(tc_json_explicit.read_text(encoding="utf-8"))
-            except (OSError, ValueError):
-                tc_explicit = []
-            known_tc_ids = {r["id"] for r in tc_explicit if isinstance(r, dict) and r.get("id")}
-            for eid in explicit_test_ids:
-                if eid in known_tc_ids:
-                    test_case_ids.append(eid)
-    if requirement_ids:
-        tc_json = (root / _TC_SUFFIX).resolve()
-        if tc_json.is_file():
-            try:
-                records = _json.loads(tc_json.read_text(encoding="utf-8"))
-            except (OSError, ValueError):
-                records = []
-            req_set = set(requirement_ids)
-            for rec in records:
-                if (
-                    isinstance(rec, dict)
-                    and rec.get("requirement_id") in req_set
-                    and isinstance(rec.get("id"), str)
-                    and rec["id"] not in test_case_ids
-                ):
-                    test_case_ids.append(rec["id"])
+    if explicit_test_ids and os.path.isfile(_tc_json_path):
+        try:
+            tc_explicit = _json.loads(Path(_tc_json_path).read_text(encoding="utf-8"))
+        except (OSError, ValueError):
+            tc_explicit = []
+        known_tc_ids = {r["id"] for r in tc_explicit if isinstance(r, dict) and r.get("id")}
+        for eid in explicit_test_ids:
+            if eid in known_tc_ids:
+                test_case_ids.append(eid)
+    if requirement_ids and os.path.isfile(_tc_json_path):
+        try:
+            records = _json.loads(Path(_tc_json_path).read_text(encoding="utf-8"))
+        except (OSError, ValueError):
+            records = []
+        req_set = set(requirement_ids)
+        for rec in records:
+            if (
+                isinstance(rec, dict)
+                and rec.get("requirement_id") in req_set
+                and isinstance(rec.get("id"), str)
+                and rec["id"] not in test_case_ids
+            ):
+                test_case_ids.append(rec["id"])
 
     # Decision policy (deterministic, no LLM)
     # decision_str and instruction are always set by the intent dispatch below;

{specsmith-0.11.3.dev425 → specsmith-0.11.3.dev427}/src/specsmith/sync.py

@@ -257,6 +257,12 @@ def run_sync(root: Path, *, dry_run: bool = False) -> SyncResult:
                 "source": r.get("source", "docs/requirements/"),
                 "status": str(r.get("status", "defined")),
                 "test_ids": _req_to_tests.get(r["id"], []),
+                # Epistemic metadata — passed through from YAML so that
+                # generate_requirements_md renders them into REQUIREMENTS.md
+                # and belief.py can parse Platform/Boundary/Confidence fields.
+                **({"platform": str(r["platform"])} if r.get("platform") else {}),
+                **({"boundary": str(r["boundary"])} if r.get("boundary") else {}),
+                **({"confidence": str(r["confidence"])} if r.get("confidence") else {}),
             }
             for r in new_reqs
         ]

{specsmith-0.11.3.dev425 → specsmith-0.11.3.dev427/src/specsmith.egg-info}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: specsmith
-Version: 0.11.3.dev425
+Version: 0.11.3.dev427
 Summary: Applied Epistemic Engineering toolkit — AEE agent sessions, execution profiles, FPGA/HDL governance, tool installer, 50+ CLI commands.
 Author: BitConcepts
 License-Expression: MIT

{specsmith-0.11.3.dev425 → specsmith-0.11.3.dev427}/src/specsmith.egg-info/SOURCES.txt

@@ -139,6 +139,8 @@ src/specsmith/epistemic/certainty.py
 src/specsmith/epistemic/failure_graph.py
 src/specsmith/epistemic/recovery.py
 src/specsmith/epistemic/stress_tester.py
+src/specsmith/esdb/__init__.py
+src/specsmith/esdb/bridge.py
 src/specsmith/eval/__init__.py
 src/specsmith/eval/builtins.py
 src/specsmith/eval/runner.py