vcp-sdk 0.3.0__tar.gz

vcp_sdk-0.3.0/.gitignore

@@ -0,0 +1,316 @@
+# Local per-collaborator overrides (top of Scope Hierarchy; must not be committed)
+CLAUDE.local.md
+
+# Build artifacts
+bin/creed-crypto
+
+# Dependencies
+node_modules
+node_modules/
+.pnp
+.pnp.js
+venv/
+__pycache__/
+*.pyc
+*.pyo
+*.pyd
+.Python
+.mypy_cache/
+env/
+build/
+dist/
+*.egg-info/
+
+# Testing
+coverage/
+*.lcov
+.nyc_output
+.coverage
+.coverage.*
+htmlcov/
+.pytest_cache/
+
+# Production
+/build
+/dist
+*/dist
+*/build
+
+# SvelteKit build artifacts
+.svelte-kit/
+*/.svelte-kit/
+
+# Logs and output files
+logs
+*.log
+*.out
+
+# Backup files
+*.bak
+*.backup
+*.old
+npm-debug.log*
+yarn-debug.log*
+yarn-error.log*
+pnpm-debug.log*
+lerna-debug.log*
+
+# Environment (comprehensive — covers .env, .env.*, and *.env)
+.env
+.env.*
+*.env
+
+# IDE
+.vscode/*
+!.vscode/extensions.json
+!.vscode/settings.json.example
+.idea
+*.swp
+*.swo
+*~
+.DS_Store
+# macOS AppleDouble sidecars and archive metadata (non-UTF-8; crash py scans)
+._*
+__MACOSX/
+
+# Turborepo
+.turbo
+
+# Changesets
+.changeset/
+
+# Temporary
+tmp/
+temp/
+*.tmp
+
+# Production PostgreSQL configuration
+.env.production.postgresql
+.mypy_baseline.json
+
+# Test artifacts and reports
+test_artifacts/
+test-results/
+test_results/
+test_reports/
+reports/memory/
+reports/fagan/
+reports/performance/
+reports/qa/
+reports/qa-crawl/*/
+output/playwright/
+test*.db
+dump.rdb
+
+# Large regenerable artifacts — build output, research dumps (never in git history)
+superego-frontend/output/
+research/fablereconstruction/
+
+# SSL private material (never commit secrets)
+ssl/*.key
+ssl/*.srl
+ssl/*.csr
+
+# Temporary test files
+test-*.html
+test-*.js
+test_*.html
+test_*.js
+
+# Report files in root (should be in reports/)
+*_report*.json
+*_report*.md
+fagan*.json
+memory_leak*.json
+smart_memory*.json
+security-scan*.json
+# Re-assert env exclusions for nested paths
+config/*.env
+superego-frontend/.env*
+!.env.example
+!.env.template
+!.env.staging.example
+!superego-frontend/.env.example
+data/sessions/superego.db
+docs/UVC_CSM_EMOJI_DUMP.md
+*.db
+*.db-shm
+*.db-wal
+
+
+# Signing keys (never commit private key material)
+*.key
+data/constitutions/registry/.keys/signing.key
+data/attestation_keys/*.pem
+
+# Browser/session state
+cookies.txt
+**/cookies.txt
+
+# Secrets directory (salts, encrypted keys — never commit)
+data/secrets/
+# Local JWT/encryption key material (finding #6: .secrets/jwt_secret has no .key suffix
+# so *.key alone did not cover it). Rotate + untrack existing tracked copies separately.
+.secrets/
+
+# GPG keyring (contains private key)
+data/keys/.gnupg/
+.venv
+.venv_check/
+
+# Coverage reports
+coverage.xml
+
+# Test artifacts in registry
+data/constitutions/registry/test_safety_*.json
+
+# ML Model Cache
+.cache/
+# Hypothesis database (property-based testing)
+.hypothesis/
+.mcp.json
+
+# Runtime data (not source code)
+data/compliance_reports/
+data/gdpr_trust_states.json
+data/billing/dead_letters/
+data/audit_logs/
+services/data/audit_logs/
+profiling_data/
+memory/superego/welfare/
+:memory:
+
+# Flash Review Cache
+.flash_findings.json
+.flash_full_review_checkpoint.json
+.review_for_claude.diff
+reports/flash_full_review_*.json
+reports/flash_full_review_*.md
+reports/red_team_audit/
+data/deployment_snapshots/snapshot_*/
+archives/reports/untracked/
+
+# Runtime audit logs (regenerated, can contain sensitive session metadata)
+data/audit/*.jsonl
+
+# Security audit reports (regenerable, large files)
+archives/docs/security/security_audit_*.json
+archives/docs/security/security_audit_*.txt
+archives/docs/security/type_safety_report.json
+**/security_audit_*.json
+**/security_audit_*.txt
+
+# Gitleaks and security scan reports (regenerable)
+gitleaks-report.json
+bandit_report.json
+
+# UVC debug dumps (keep UVC_CSM_EMOJI_COMPLETE_DUMP.json - it's conversation history)
+
+# Playwright MCP artifacts
+.playwright-mcp/
+
+# LibreOffice lock files
+.~lock.*
+
+# Claude Code agent execution logs
+.code/agents/*/exec-call_*.txt
+# Claude Code agent worktrees (isolated agent copies)
+.claude/worktrees/
+.flash_costs.json
+
+# Large benchmark results (use Git LFS or external storage)
+benchmarks/results/*.jsonl
+logs/flash_review.log
+
+# Archived audit logs (local reference only)
+archives/audit_logs/
+
+# Mutation Testing
+reports/mutation/*.html
+reports/mutation/*.json
+reports/mutation/*.sqlite
+reports/mutation/*.toml
+superego-frontend/mutation-report/
+superego-frontend/mutation-report.json
+superego-frontend/.stryker-tmp/
+superego-frontend/.stryker-tmp-*/
+.stryker-tmp/
+.stryker-tmp-*/
+
+# Performance benchmark baselines
+.benchmarks/
+# Rust build artifacts
+crates/*/target/
+/target/
+
+# Session diaries and retrospectives (PRIVATE - never commit)
+memory/diary/
+memory/retrospective/
+scripts/test_api_keys.py
+
+# Vector stores (too large for GitHub)
+memory/vector_stores/
+
+# Session transcript backups (local only)
+memory/transcript_backups/
+mettle-api/
+
+# Screenshots (use archives/ or external storage)
+*.png
+*.jpg
+*.jpeg
+!superego-frontend/static/**/*.png
+!superego-frontend/static/**/*.jpg
+!docs/**/*.png
+# public/ is the served static-asset dir — its brand images are deliberate app
+# assets, not screenshots. Without this, *.png assets there 404 in every deploy
+# (e.g. creed-logo.png → blank hero wave) while .webp siblings ship fine.
+!superego-frontend/public/**/*.png
+!superego-frontend/public/**/*.jpg
+!superego-frontend/public/**/*.jpeg
+~$lue Context Protocol MDPI I3D1.docx
+
+# Runtime state (process IDs, lock files)
+.backend.pid
+.frontend.pid
+.claude/scheduled_tasks.lock
+
+# Playwright CLI local snapshots (distinct from .playwright-mcp)
+.playwright-cli/
+creed_guardian/models/
+
+# Model weights (large binaries)
+weights/
+*.gguf
+
+# Paper preparation scripts (moved to _papers/scripts/)
+apply_i3d8_*.py
+diag_*.py
+fix_narrative*.py
+restore_*.py
+validate_docx.py
+deep_validate.py
+compare_structure.py
+check_ordering.py
+minimal_edit.py
+test_repack.py
+test_minimal_edit.py
+diff_parts.py
+probe_refs.py
+strip_numpr_refs.py
+find_*.py
+
+# VCP concordance debug artifacts (binary, not source)
+*.docx
+
+# Fagan reports and audit artifacts
+fagan_*.md
+*_fagan_report*.md
+*_audit_report*.md
+
+# design-sync upload staging (regenerable; source of truth is the claude.ai/design project + .design-sync/)
+ds-bundle/
+fleet-server/target/
+
+# freeze skill session config (per-checkout, not shared)
+.claude/skills/freeze/.active-freeze.json

vcp_sdk-0.3.0/PKG-INFO

@@ -0,0 +1,95 @@
+Metadata-Version: 2.4
+Name: vcp-sdk
+Version: 0.3.0
+Summary: Value Context Protocol SDK — portable AI ethics validation
+Project-URL: Homepage, https://valuecontextprotocol.org
+Project-URL: Repository, https://github.com/Creed-Space/vcp-sdk-python
+Project-URL: Documentation, https://valuecontextprotocol.org/docs/sdk
+Author-email: Creed Space <hello@creed.space>
+License-Expression: Apache-2.0
+Keywords: ai,alignment,ethics,safety,values,vcp
+Classifier: Development Status :: 3 - Alpha
+Classifier: Intended Audience :: Developers
+Classifier: License :: OSI Approved :: Apache Software License
+Classifier: Programming Language :: Python :: 3
+Classifier: Programming Language :: Python :: 3.10
+Classifier: Programming Language :: Python :: 3.11
+Classifier: Programming Language :: Python :: 3.12
+Classifier: Programming Language :: Python :: 3.13
+Classifier: Topic :: Scientific/Engineering :: Artificial Intelligence
+Classifier: Topic :: Software Development :: Libraries :: Python Modules
+Requires-Python: >=3.10
+Provides-Extra: dev
+Requires-Dist: jsonschema>=4.0; extra == 'dev'
+Requires-Dist: pytest>=7.0; extra == 'dev'
+Provides-Extra: jsonschema
+Requires-Dist: jsonschema>=4.0; extra == 'jsonschema'
+Description-Content-Type: text/markdown
+
+# vcp-sdk
+
+Python SDK for the **Value Context Protocol (VCP)** — a standard for encoding
+values context (personas, scopes, and behavioral constraints) so AI systems can
+carry, validate, and exchange it portably. Zero runtime dependencies.
+
+Learn more at [valuecontextprotocol.org](https://valuecontextprotocol.org).
+
+## Install
+
+```bash
+pip install vcp-sdk
+```
+
+Python 3.10+. Optional extra `vcp-sdk[jsonschema]` enables JSON-schema
+validation of VCP-Lite documents.
+
+## What's in the box
+
+| API | Purpose |
+| --- | --- |
+| `Token` | Parse and validate VCP/I identity tokens (`family.safe.guide@1.0.0:SEC`) |
+| `canonicalize_token`, `tokens_equal`, `uri_to_canonical` | Token normalization helpers |
+| `CSM1Code` | Parse and validate VCP/S CSM1 structured codes |
+| `validate_lite`, `lite_to_token`, `lite_to_csm1` | Validate VCP-Lite JSON documents and convert them |
+| `Context` | Encode/decode full VCP context payloads |
+
+## Quick start
+
+```python
+from vcp import Token, CSM1Code, canonicalize_token
+from vcp.lite import validate_lite, lite_to_token
+
+# VCP/I tokens
+token = Token.parse("family.safe.guide@1.0.0:SEC")
+
+# Normalization
+canonicalize_token("Family.Safe.Guide@01.0.0")  # -> "family.safe.guide@1.0.0"
+
+# VCP/S CSM1 codes
+code = CSM1Code.parse("Z4+P+T+W:SEC")
+
+# VCP-Lite documents
+import json
+with open("my-values.vcp-lite.json") as f:
+    doc = json.load(f)
+errors = validate_lite(doc)  # [] when valid, list of messages otherwise
+if not errors:
+    print(lite_to_token(doc))
+```
+
+Parse failures raise `ValueError` with a message describing the grammar
+violation; `validate_lite` returns error strings instead of raising.
+
+## Command-line validation
+
+The [`creed-space-cli`](https://pypi.org/project/creed-space-cli/) package
+builds a lint-style CLI on top of this SDK:
+
+```bash
+creed vcp validate family.safe.guide@1.0.0
+creed vcp parse "Z4+P+T+W:SEC"
+```
+
+## License
+
+Apache-2.0. Maintained by [Creed Space](https://creed.space).

vcp_sdk-0.3.0/README.md

@@ -0,0 +1,67 @@
+# vcp-sdk
+
+Python SDK for the **Value Context Protocol (VCP)** — a standard for encoding
+values context (personas, scopes, and behavioral constraints) so AI systems can
+carry, validate, and exchange it portably. Zero runtime dependencies.
+
+Learn more at [valuecontextprotocol.org](https://valuecontextprotocol.org).
+
+## Install
+
+```bash
+pip install vcp-sdk
+```
+
+Python 3.10+. Optional extra `vcp-sdk[jsonschema]` enables JSON-schema
+validation of VCP-Lite documents.
+
+## What's in the box
+
+| API | Purpose |
+| --- | --- |
+| `Token` | Parse and validate VCP/I identity tokens (`family.safe.guide@1.0.0:SEC`) |
+| `canonicalize_token`, `tokens_equal`, `uri_to_canonical` | Token normalization helpers |
+| `CSM1Code` | Parse and validate VCP/S CSM1 structured codes |
+| `validate_lite`, `lite_to_token`, `lite_to_csm1` | Validate VCP-Lite JSON documents and convert them |
+| `Context` | Encode/decode full VCP context payloads |
+
+## Quick start
+
+```python
+from vcp import Token, CSM1Code, canonicalize_token
+from vcp.lite import validate_lite, lite_to_token
+
+# VCP/I tokens
+token = Token.parse("family.safe.guide@1.0.0:SEC")
+
+# Normalization
+canonicalize_token("Family.Safe.Guide@01.0.0")  # -> "family.safe.guide@1.0.0"
+
+# VCP/S CSM1 codes
+code = CSM1Code.parse("Z4+P+T+W:SEC")
+
+# VCP-Lite documents
+import json
+with open("my-values.vcp-lite.json") as f:
+    doc = json.load(f)
+errors = validate_lite(doc)  # [] when valid, list of messages otherwise
+if not errors:
+    print(lite_to_token(doc))
+```
+
+Parse failures raise `ValueError` with a message describing the grammar
+violation; `validate_lite` returns error strings instead of raising.
+
+## Command-line validation
+
+The [`creed-space-cli`](https://pypi.org/project/creed-space-cli/) package
+builds a lint-style CLI on top of this SDK:
+
+```bash
+creed vcp validate family.safe.guide@1.0.0
+creed vcp parse "Z4+P+T+W:SEC"
+```
+
+## License
+
+Apache-2.0. Maintained by [Creed Space](https://creed.space).

vcp_sdk-0.3.0/pyproject.toml

@@ -0,0 +1,39 @@
+[build-system]
+requires = ["hatchling"]
+build-backend = "hatchling.build"
+
+[project]
+name = "vcp-sdk"
+version = "0.3.0"
+description = "Value Context Protocol SDK — portable AI ethics validation"
+readme = "README.md"
+license = "Apache-2.0"
+requires-python = ">=3.10"
+authors = [
+    {name = "Creed Space", email = "hello@creed.space"},
+]
+keywords = ["ai", "ethics", "values", "alignment", "safety", "vcp"]
+classifiers = [
+    "Development Status :: 3 - Alpha",
+    "Intended Audience :: Developers",
+    "License :: OSI Approved :: Apache Software License",
+    "Programming Language :: Python :: 3",
+    "Programming Language :: Python :: 3.10",
+    "Programming Language :: Python :: 3.11",
+    "Programming Language :: Python :: 3.12",
+    "Programming Language :: Python :: 3.13",
+    "Topic :: Scientific/Engineering :: Artificial Intelligence",
+    "Topic :: Software Development :: Libraries :: Python Modules",
+]
+
+[project.urls]
+Homepage = "https://valuecontextprotocol.org"
+Repository = "https://github.com/Creed-Space/vcp-sdk-python"
+Documentation = "https://valuecontextprotocol.org/docs/sdk"
+
+[project.optional-dependencies]
+jsonschema = ["jsonschema>=4.0"]
+dev = ["pytest>=7.0", "jsonschema>=4.0"]
+
+[tool.hatch.build.targets.wheel]
+packages = ["src/vcp"]

vcp_sdk-0.3.0/src/vcp/__init__.py

@@ -0,0 +1,50 @@
+"""VCP SDK — Value Context Protocol for portable AI ethics.
+
+Validate tokens, parse CSM1 codes, and work with VCP-Lite definitions.
+
+    >>> from vcp import Token, CSM1Code, validate_lite
+    >>> token = Token.parse("family.safe.guide@1.0.0")
+    >>> code = CSM1Code.parse("N5+F+E")
+    >>> errors = validate_lite({"vcp_version": "lite-1.0", ...})
+"""
+
+from .context import Context
+from .csm1 import (
+    ADHERENCE_BEHAVIORS,
+    PERSONA_NAMES,
+    SCOPE_CONFLICTS,
+    SCOPE_SYNERGIES,
+    V2_SCOPE_CHARS,
+    CSM1Code,
+    Persona,
+    Scope,
+    check_scope_conflicts,
+)
+from .lite import lite_to_csm1, lite_to_token, validate_lite
+from .token import Token, canonicalize_token, tokens_equal, uri_to_canonical
+
+__all__ = [
+    # Context (v0.2.0)
+    "Context",
+    # Token
+    "Token",
+    "canonicalize_token",
+    "tokens_equal",
+    "uri_to_canonical",
+    # CSM1
+    "CSM1Code",
+    "Persona",
+    "Scope",
+    "PERSONA_NAMES",
+    "V2_SCOPE_CHARS",
+    "SCOPE_CONFLICTS",
+    "SCOPE_SYNERGIES",
+    "ADHERENCE_BEHAVIORS",
+    "check_scope_conflicts",
+    # Lite
+    "validate_lite",
+    "lite_to_csm1",
+    "lite_to_token",
+]
+
+__version__ = "0.3.0"