synth-ai 0.22.2.dev678__tar.gz → 0.22.2.dev679__tar.gz

{synth_ai-0.22.2.dev678/synth_ai.egg-info → synth_ai-0.22.2.dev679}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: synth-ai
-Version: 0.22.2.dev678
+Version: 0.22.2.dev679
 Summary: Python SDK, CLI and MCP servers for Synth Index search and Swarms
 Author-email: Synth AI <josh@usesynth.ai>
 License-Expression: MIT

{synth_ai-0.22.2.dev678 → synth_ai-0.22.2.dev679}/pyproject.toml

@@ -1,6 +1,6 @@
 [project]
 name = "synth-ai"
-version = "0.22.2.dev678"
+version = "0.22.2.dev679"
 description = "Python SDK, CLI and MCP servers for Synth Index search and Swarms"
 keywords = ["synth", "index", "search", "citations", "research", "swarms", "mcp", "sdk"]
 authors = [{name = "Synth AI", email = "josh@usesynth.ai"}]

{synth_ai-0.22.2.dev678 → synth_ai-0.22.2.dev679}/synth_ai/sdk/index/contributions.py

@@ -13,6 +13,7 @@ from uuid import UUID
 from pydantic import BeforeValidator, Field, StringConstraints, field_validator, model_validator
 
 from synth_ai.sdk.research.contracts.forge.contracts import ExactReference, Identifier
+from synth_ai.sdk.research.contracts.forge.operations import RevisionReference
 
 from .artifacts import ArtifactPublicationPrepareResponse, ArtifactUuid
 from .contracts import ContributionReference, IndexContract
@@ -112,13 +113,36 @@ class ForgeResearchSource(IndexContract):
         return self
 
 
+ARCHIVE_V3 = "forge.private-archive.v3"
+
+
 class ForgePublicResearchSource(ForgeResearchSource):
-    """Exact private archive plus safe proposed public credit; backend decides release."""
+    """Exact private archive plus safe proposed public credit; backend decides release.
+
+    Mirrors backend ``packages/contributions/forge_release.py``. ``revision_reference``
+    (Forge decision 0001, ``forge.revision-reference.v1``) binds the selected export's
+    producer, operation and time, not only its payload; ``archive_schema_version`` names
+    the private archive version that carries those references (v3). The backend public
+    review policy refuses a Forge-origin public source that omits either
+    (``forge_revision_reference_required``, ``forge_archive_v3_required``); they stay
+    optional on the wire so older private registrations still decode.
+    """
 
     schema_version: Literal["synth.index.forge-source.v2"] = "synth.index.forge-source.v2"
     archive_publication_id: ArtifactUuid
     archive_manifest_digest_sha256: Digest
     public_provenance: PublicScientificProvenance
+    revision_reference: RevisionReference | None = None
+    archive_schema_version: Literal["forge.private-archive.v3"] | None = None
+
+    @model_validator(mode="after")
+    def provenance_pin_names_the_export(self):
+        if (
+            self.revision_reference is not None
+            and self.revision_reference.reference != self.export
+        ):
+            raise ValueError("revision reference must name the exported revision")
+        return self
 
 
 def _legacy_source_version(value):

{synth_ai-0.22.2.dev678 → synth_ai-0.22.2.dev679}/synth_ai/sdk/research/contracts/forge/operations.py

@@ -10,6 +10,7 @@ from .contracts import (
     Contract,
     Digest,
     ExactReference,
+    ForgeError,
     Identifier,
     Producer,
     Scope,
@@ -67,6 +68,35 @@ class RecordRevision(Contract):
     recorded_at: AwareDatetime
 
 
+REVISION_REFERENCE_V1 = "forge.revision-reference.v1"
+
+
+class RevisionReference(Contract):
+    """Exact identity of one complete retained revision, provenance included.
+
+    See docs/decisions/0001. ``reference.digest_sha256`` keeps its payload-only
+    meaning; ``document_digest_sha256`` binds producer, operation and time too.
+    It proves the document Forge recorded, not external producer attestation.
+    """
+
+    schema_version: Literal["forge.revision-reference.v1"] = REVISION_REFERENCE_V1
+    reference: ExactReference
+    document_digest_sha256: Digest
+
+
+def revision_reference(record: RecordRevision) -> RevisionReference:
+    record = RecordRevision.model_validate(record.model_dump(mode="json"))
+    if (
+        record.reference.authority != "forge"
+        or record.reference.kind != record.payload.kind
+        or record.reference.digest_sha256 != contract_digest(record.payload)
+    ):
+        raise ForgeError("reference_conflict", "record differs from exact source bytes")
+    return RevisionReference(
+        reference=record.reference, document_digest_sha256=contract_digest(record)
+    )
+
+
 class PublicWrite(Contract):
     """Public intent; backend supplies authenticated producer and canonical scope."""
 

{synth_ai-0.22.2.dev678 → synth_ai-0.22.2.dev679/synth_ai.egg-info}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: synth-ai
-Version: 0.22.2.dev678
+Version: 0.22.2.dev679
 Summary: Python SDK, CLI and MCP servers for Synth Index search and Swarms
 Author-email: Synth AI <josh@usesynth.ai>
 License-Expression: MIT