tibet-forge 0.1.0__tar.gz

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (17) hide show
  1. tibet_forge-0.1.0/.gitignore +74 -0
  2. tibet_forge-0.1.0/PKG-INFO +203 -0
  3. tibet_forge-0.1.0/README.md +171 -0
  4. tibet_forge-0.1.0/pyproject.toml +56 -0
  5. tibet_forge-0.1.0/src/tibet_forge/__init__.py +31 -0
  6. tibet_forge-0.1.0/src/tibet_forge/cli.py +256 -0
  7. tibet_forge-0.1.0/src/tibet_forge/config.py +118 -0
  8. tibet_forge-0.1.0/src/tibet_forge/forge.py +223 -0
  9. tibet_forge-0.1.0/src/tibet_forge/scanners/__init__.py +12 -0
  10. tibet_forge-0.1.0/src/tibet_forge/scanners/bloat.py +200 -0
  11. tibet_forge-0.1.0/src/tibet_forge/scanners/duplicate.py +202 -0
  12. tibet_forge-0.1.0/src/tibet_forge/scanners/quality.py +146 -0
  13. tibet_forge-0.1.0/src/tibet_forge/scanners/security.py +187 -0
  14. tibet_forge-0.1.0/src/tibet_forge/score.py +149 -0
  15. tibet_forge-0.1.0/src/tibet_forge/wrappers/__init__.py +10 -0
  16. tibet_forge-0.1.0/src/tibet_forge/wrappers/decorator.py +81 -0
  17. tibet_forge-0.1.0/src/tibet_forge/wrappers/injector.py +157 -0
tibet_forge-0.1.0/.gitignore ADDED
@@ -0,0 +1,74 @@
1
+ # Secrets & env
2
+ .env
3
+ *.env
4
+ *.secret
5
+
6
+ # Keys & certs
7
+ *.key
8
+ *.pem
9
+ certs/
10
+ secrets/
11
+
12
+ # Databases & dumps
13
+ *.db
14
+ *.sqlite
15
+ *.sql
16
+ dump_*/
17
+
18
+ # EXCEPT: Allow database schemas (needed for server rebuild)
19
+ !database-schemas/*.sql
20
+
21
+ # Logs & runtime data
22
+ logs/
23
+ *.log
24
+ __pycache__/
25
+ *.pyc
26
+ venv/
27
+ .venv/
28
+ **/venv/
29
+ **/.venv/
30
+
31
+ # Configs met secrets (we gebruiken straks templates)
32
+ config/
33
+ brain_api/provisioning.local.json
34
+ brain_api/provisioning.json
35
+
36
+ # Landing pages (privé - niet open source)
37
+ landing-pages/
38
+ humotica.com/
39
+ jtel.nl/
40
+
41
+ # Social media posts (strategie - niet open source)
42
+ SOCIAL-MEDIA-POSTS.md
43
+ HN-POST-UNDER-4000.md
44
+ STRATO-DEPLOY-HUMOTICA.md
45
+
46
+ # Endorsement outreach (privaat contact)
47
+ ARXIV-ENDORSEMENT-OUTREACH.md
48
+
49
+ # Deployment secrets
50
+ DEPLOYMENT-GUIDE.md
51
+
52
+ # R Project files (Dirty Data Challenge)
53
+ .Rproj.user
54
+ .Rhistory
55
+ .RData
56
+ .Ruserdata
57
+ *.zip
58
+ .mural_tokens.json
59
+ auth.json
60
+ gen-lang-client*.json
61
+ *.credentials.json
62
+
63
+ # Rust build artifacts
64
+ **/target/
65
+ *.whl
66
+
67
+ # Compiled binaries (build locally)
68
+ jis-router/jis-router
69
+ sentinel-rs/sentinel-rs
70
+
71
+ # Build distribution
72
+ sandbox/ai/codex/dist/
73
+ sandbox_backup/
74
+ did-jis-core
tibet_forge-0.1.0/PKG-INFO ADDED
@@ -0,0 +1,203 @@
1
+ Metadata-Version: 2.4
2
+ Name: tibet-forge
3
+ Version: 0.1.0
4
+ Summary: From vibe code to trusted tool. Automatic TIBET provenance, bloat detection, duplicate checking, and trust scoring.
5
+ Project-URL: Homepage, https://humotica.com
6
+ Project-URL: Repository, https://github.com/humotica/tibet-forge
7
+ Author: Gemini IDD
8
+ Author-email: "J. van de Meent" <jasper@humotica.com>, "R. AI" <info@humotica.com>
9
+ License: MIT
10
+ Keywords: ai-native,audit,badge,bloat,certification,ci-cd,code-quality,forge,provenance,security,tibet,trust,vibe-coding
11
+ Classifier: Development Status :: 3 - Alpha
12
+ Classifier: Intended Audience :: Developers
13
+ Classifier: License :: OSI Approved :: MIT License
14
+ Classifier: Operating System :: OS Independent
15
+ Classifier: Programming Language :: Python :: 3
16
+ Classifier: Programming Language :: Python :: 3.10
17
+ Classifier: Programming Language :: Python :: 3.11
18
+ Classifier: Programming Language :: Python :: 3.12
19
+ Classifier: Topic :: Security
20
+ Classifier: Topic :: Software Development :: Quality Assurance
21
+ Requires-Python: >=3.10
22
+ Requires-Dist: httpx>=0.24.0
23
+ Requires-Dist: rich>=13.0.0
24
+ Requires-Dist: tibet-core>=0.2.0
25
+ Provides-Extra: dev
26
+ Requires-Dist: pytest>=7.0; extra == 'dev'
27
+ Requires-Dist: ruff>=0.1.0; extra == 'dev'
28
+ Provides-Extra: full
29
+ Requires-Dist: semgrep>=1.0.0; extra == 'full'
30
+ Requires-Dist: tree-sitter>=0.20.0; extra == 'full'
31
+ Description-Content-Type: text/markdown
32
+
33
+ # tibet-forge
34
+
35
+ **From vibe code to trusted tool.**
36
+
37
+ The Let's Encrypt of AI provenance. Automatic TIBET integration, bloat detection, duplicate checking, and trust scoring.
38
+
39
+ ## The Problem
40
+
41
+ Vibe coding is loose:
42
+ - No tests
43
+ - No provenance
44
+ - Duplicate of 50 other tools
45
+ - Bloated dependencies
46
+ - Trust = 0
47
+
48
+ ## The Solution
49
+
50
+ ```bash
51
+ tibet-forge certify ./my-project
52
+ ```
53
+
54
+ ```
55
+ ╔════════════════════════════════════════════════════════╗
56
+ ║ Humotica Trust Score: 87/100 (B+) ║
57
+ ║ ✓ CERTIFIED ║
58
+ ╚════════════════════════════════════════════════════════╝
59
+
60
+ Badge markdown:
61
+ [![Humotica Trust Score](https://img.shields.io/badge/...)]
62
+ ```
63
+
64
+ ## Installation
65
+
66
+ ```bash
67
+ pip install tibet-forge
68
+ ```
69
+
70
+ ## Quick Start
71
+
72
+ ```bash
73
+ # Scan your project
74
+ tibet-forge scan .
75
+
76
+ # Full certification
77
+ tibet-forge certify .
78
+
79
+ # Just the score
80
+ tibet-forge score .
81
+
82
+ # See what would be wrapped
83
+ tibet-forge wrap --dry-run .
84
+ ```
85
+
86
+ ## What It Does
87
+
88
+ ### 1. SCAN
89
+
90
+ Analyzes your code:
91
+
92
+ - **Bloat Check** - "You import `requests` but only do GET calls"
93
+ - **Duplicate Detection** - "Your RAG parser exists as `rapid-rag`"
94
+ - **Security Scan** - "Hardcoded API key detected"
95
+ - **Quality Check** - README? Tests? Docstrings?
96
+
97
+ ### 2. WRAP
98
+
99
+ Auto-injects TIBET provenance:
100
+
101
+ ```python
102
+ # Before
103
+ def login(user, password):
104
+ ...
105
+
106
+ # After
107
+ @tibet_audit(action="login", erachter="User authentication")
108
+ def login(user, password):
109
+ ...
110
+ ```
111
+
112
+ ### 3. CONNECT
113
+
114
+ Matches you with similar projects:
115
+
116
+ ```
117
+ Similar Projects Found:
118
+ • rapid-rag (65% similar)
119
+ Consider using rapid-rag instead of building your own RAG
120
+ https://pypi.org/project/rapid-rag/
121
+ ```
122
+
123
+ ### 4. CERTIFY
124
+
125
+ Generates trust score and badge:
126
+
127
+ ```
128
+ Humotica Trust Score: 87/100 (B+)
129
+ ├── Code Quality: 85/100 (weight: 25%)
130
+ ├── Security: 95/100 (weight: 25%)
131
+ ├── Efficiency: 80/100 (weight: 20%)
132
+ ├── Uniqueness: 70/100 (weight: 15%)
133
+ └── Provenance: 100/100 (weight: 15%)
134
+
135
+ ✓ CERTIFIED
136
+ ```
137
+
138
+ ## Trust Score Components
139
+
140
+ | Component | Weight | What It Measures |
141
+ |-----------|--------|------------------|
142
+ | Code Quality | 25% | README, tests, docs, types |
143
+ | Security | 25% | No vulns, no hardcoded secrets |
144
+ | Efficiency | 20% | No bloat, no unused imports |
145
+ | Uniqueness | 15% | Not reinventing the wheel |
146
+ | Provenance | 15% | TIBET integration readiness |
147
+
148
+ ## Configuration
149
+
150
+ Create `tibet-forge.json`:
151
+
152
+ ```json
153
+ {
154
+ "name": "my-project",
155
+ "scan_bloat": true,
156
+ "scan_duplicates": true,
157
+ "scan_security": true,
158
+ "auto_wrap": true,
159
+ "min_score_for_badge": 70
160
+ }
161
+ ```
162
+
163
+ Or in `pyproject.toml`:
164
+
165
+ ```toml
166
+ [tool.tibet-forge]
167
+ scan_bloat = true
168
+ min_score_for_badge = 70
169
+ ```
170
+
171
+ ## The Badge
172
+
173
+ Projects scoring 70+ get the Humotica Trust badge:
174
+
175
+ [![Humotica Trust Score](https://img.shields.io/badge/Humotica_Trust_Score-87%2F100-green)](https://humotica.com/trust)
176
+
177
+ ## Why "Forge"?
178
+
179
+ Like a blacksmith's forge:
180
+ - Takes raw ore (vibe code)
181
+ - Heats it up (analysis)
182
+ - Hammers it (wrapping)
183
+ - Produces strong steel (trusted tool)
184
+
185
+ ## Enterprise Use
186
+
187
+ "Internal AI scripts must pass tibet-forge with 90+ to reach production."
188
+
189
+ The gamification works:
190
+ - Developers hate security
191
+ - Developers love high scores
192
+ - → Voluntary code improvement
193
+
194
+ ## Links
195
+
196
+ - [tibet-core](https://github.com/Humotica/tibet-core)
197
+ - [rapid-rag](https://github.com/Humotica/rapid-rag)
198
+ - [oomllama](https://github.com/Humotica/oomllama)
199
+ - [Humotica](https://humotica.com)
200
+
201
+ ## License
202
+
203
+ MIT - Humotica
tibet_forge-0.1.0/README.md ADDED
@@ -0,0 +1,171 @@
1
+ # tibet-forge
2
+
3
+ **From vibe code to trusted tool.**
4
+
5
+ The Let's Encrypt of AI provenance. Automatic TIBET integration, bloat detection, duplicate checking, and trust scoring.
6
+
7
+ ## The Problem
8
+
9
+ Vibe coding is loose:
10
+ - No tests
11
+ - No provenance
12
+ - Duplicate of 50 other tools
13
+ - Bloated dependencies
14
+ - Trust = 0
15
+
16
+ ## The Solution
17
+
18
+ ```bash
19
+ tibet-forge certify ./my-project
20
+ ```
21
+
22
+ ```
23
+ ╔════════════════════════════════════════════════════════╗
24
+ ║ Humotica Trust Score: 87/100 (B+) ║
25
+ ║ ✓ CERTIFIED ║
26
+ ╚════════════════════════════════════════════════════════╝
27
+
28
+ Badge markdown:
29
+ [![Humotica Trust Score](https://img.shields.io/badge/...)]
30
+ ```
31
+
32
+ ## Installation
33
+
34
+ ```bash
35
+ pip install tibet-forge
36
+ ```
37
+
38
+ ## Quick Start
39
+
40
+ ```bash
41
+ # Scan your project
42
+ tibet-forge scan .
43
+
44
+ # Full certification
45
+ tibet-forge certify .
46
+
47
+ # Just the score
48
+ tibet-forge score .
49
+
50
+ # See what would be wrapped
51
+ tibet-forge wrap --dry-run .
52
+ ```
53
+
54
+ ## What It Does
55
+
56
+ ### 1. SCAN
57
+
58
+ Analyzes your code:
59
+
60
+ - **Bloat Check** - "You import `requests` but only do GET calls"
61
+ - **Duplicate Detection** - "Your RAG parser exists as `rapid-rag`"
62
+ - **Security Scan** - "Hardcoded API key detected"
63
+ - **Quality Check** - README? Tests? Docstrings?
64
+
65
+ ### 2. WRAP
66
+
67
+ Auto-injects TIBET provenance:
68
+
69
+ ```python
70
+ # Before
71
+ def login(user, password):
72
+ ...
73
+
74
+ # After
75
+ @tibet_audit(action="login", erachter="User authentication")
76
+ def login(user, password):
77
+ ...
78
+ ```
79
+
80
+ ### 3. CONNECT
81
+
82
+ Matches you with similar projects:
83
+
84
+ ```
85
+ Similar Projects Found:
86
+ • rapid-rag (65% similar)
87
+ Consider using rapid-rag instead of building your own RAG
88
+ https://pypi.org/project/rapid-rag/
89
+ ```
90
+
91
+ ### 4. CERTIFY
92
+
93
+ Generates trust score and badge:
94
+
95
+ ```
96
+ Humotica Trust Score: 87/100 (B+)
97
+ ├── Code Quality: 85/100 (weight: 25%)
98
+ ├── Security: 95/100 (weight: 25%)
99
+ ├── Efficiency: 80/100 (weight: 20%)
100
+ ├── Uniqueness: 70/100 (weight: 15%)
101
+ └── Provenance: 100/100 (weight: 15%)
102
+
103
+ ✓ CERTIFIED
104
+ ```
105
+
106
+ ## Trust Score Components
107
+
108
+ | Component | Weight | What It Measures |
109
+ |-----------|--------|------------------|
110
+ | Code Quality | 25% | README, tests, docs, types |
111
+ | Security | 25% | No vulns, no hardcoded secrets |
112
+ | Efficiency | 20% | No bloat, no unused imports |
113
+ | Uniqueness | 15% | Not reinventing the wheel |
114
+ | Provenance | 15% | TIBET integration readiness |
115
+
116
+ ## Configuration
117
+
118
+ Create `tibet-forge.json`:
119
+
120
+ ```json
121
+ {
122
+ "name": "my-project",
123
+ "scan_bloat": true,
124
+ "scan_duplicates": true,
125
+ "scan_security": true,
126
+ "auto_wrap": true,
127
+ "min_score_for_badge": 70
128
+ }
129
+ ```
130
+
131
+ Or in `pyproject.toml`:
132
+
133
+ ```toml
134
+ [tool.tibet-forge]
135
+ scan_bloat = true
136
+ min_score_for_badge = 70
137
+ ```
138
+
139
+ ## The Badge
140
+
141
+ Projects scoring 70+ get the Humotica Trust badge:
142
+
143
+ [![Humotica Trust Score](https://img.shields.io/badge/Humotica_Trust_Score-87%2F100-green)](https://humotica.com/trust)
144
+
145
+ ## Why "Forge"?
146
+
147
+ Like a blacksmith's forge:
148
+ - Takes raw ore (vibe code)
149
+ - Heats it up (analysis)
150
+ - Hammers it (wrapping)
151
+ - Produces strong steel (trusted tool)
152
+
153
+ ## Enterprise Use
154
+
155
+ "Internal AI scripts must pass tibet-forge with 90+ to reach production."
156
+
157
+ The gamification works:
158
+ - Developers hate security
159
+ - Developers love high scores
160
+ - → Voluntary code improvement
161
+
162
+ ## Links
163
+
164
+ - [tibet-core](https://github.com/Humotica/tibet-core)
165
+ - [rapid-rag](https://github.com/Humotica/rapid-rag)
166
+ - [oomllama](https://github.com/Humotica/oomllama)
167
+ - [Humotica](https://humotica.com)
168
+
169
+ ## License
170
+
171
+ MIT - Humotica
tibet_forge-0.1.0/pyproject.toml ADDED
@@ -0,0 +1,56 @@
1
+ [build-system]
2
+ requires = ["hatchling"]
3
+ build-backend = "hatchling.build"
4
+
5
+ [project]
6
+ name = "tibet-forge"
7
+ version = "0.1.0"
8
+ description = "From vibe code to trusted tool. Automatic TIBET provenance, bloat detection, duplicate checking, and trust scoring."
9
+ readme = "README.md"
10
+ license = {text = "MIT"}
11
+ requires-python = ">=3.10"
12
+ authors = [
13
+ {name = "J. van de Meent", email = "jasper@humotica.com"},
14
+ {name = "R. AI", email = "info@humotica.com"},
15
+ {name = "Gemini IDD"},
16
+ ]
17
+ keywords = [
18
+ "tibet", "forge", "trust", "provenance", "audit",
19
+ "vibe-coding", "code-quality", "security", "bloat",
20
+ "certification", "badge", "ci-cd", "ai-native"
21
+ ]
22
+ classifiers = [
23
+ "Development Status :: 3 - Alpha",
24
+ "Intended Audience :: Developers",
25
+ "License :: OSI Approved :: MIT License",
26
+ "Operating System :: OS Independent",
27
+ "Programming Language :: Python :: 3",
28
+ "Programming Language :: Python :: 3.10",
29
+ "Programming Language :: Python :: 3.11",
30
+ "Programming Language :: Python :: 3.12",
31
+ "Topic :: Software Development :: Quality Assurance",
32
+ "Topic :: Security",
33
+ ]
34
+ dependencies = [
35
+ "tibet-core>=0.2.0",
36
+ "httpx>=0.24.0",
37
+ "rich>=13.0.0",
38
+ ]
39
+
40
+ [project.optional-dependencies]
41
+ full = ["tree-sitter>=0.20.0", "semgrep>=1.0.0"]
42
+ dev = ["pytest>=7.0", "ruff>=0.1.0"]
43
+
44
+ [project.urls]
45
+ Homepage = "https://humotica.com"
46
+ Repository = "https://github.com/humotica/tibet-forge"
47
+
48
+ [project.scripts]
49
+ tibet-forge = "tibet_forge.cli:main"
50
+ forge = "tibet_forge.cli:main"
51
+
52
+ [tool.hatch.build.targets.sdist]
53
+ include = ["/src"]
54
+
55
+ [tool.hatch.build.targets.wheel]
56
+ packages = ["src/tibet_forge"]
tibet_forge-0.1.0/src/tibet_forge/__init__.py ADDED
@@ -0,0 +1,31 @@
1
+ """
2
+ tibet-forge: From vibe code to trusted tool.
3
+
4
+ The Let's Encrypt of AI provenance.
5
+
6
+ Usage:
7
+ # Scan your project
8
+ tibet-forge scan .
9
+
10
+ # Full pipeline: scan, wrap, certify
11
+ tibet-forge certify .
12
+
13
+ # Check trust score
14
+ tibet-forge score .
15
+
16
+ What it does:
17
+ 1. SCAN - AST analysis for bloat, duplicates, security
18
+ 2. WRAP - Auto-inject TIBET provenance
19
+ 3. CONNECT - Match with similar projects
20
+ 4. CERTIFY - Generate trust score and badge
21
+
22
+ The vibe coder doesn't need to understand TIBET.
23
+ It just works. Like HTTPS.
24
+ """
25
+
26
+ from .forge import Forge
27
+ from .score import TrustScore
28
+ from .config import ForgeConfig
29
+
30
+ __version__ = "0.1.0"
31
+ __all__ = ["Forge", "TrustScore", "ForgeConfig"]