verb-authority 0.10.0b14__tar.gz

verb_authority-0.10.0b14/.github/ISSUE_TEMPLATE/bypass-or-tool-schema.yml

@@ -0,0 +1,68 @@
+name: Bypass report or tool schema
+description: Share a minimal bypass, inference error, or sanitized real tool schema.
+title: "[bypass/schema] "
+body:
+  - type: markdown
+    attributes:
+      value: |
+        Thanks for helping map the boundary. Do not include secrets, private data, or live targets. Use SECURITY.md for sensitive reports.
+
+  - type: dropdown
+    id: report-type
+    attributes:
+      label: Report type
+      options:
+        - Gate or provenance bypass
+        - Policy inference error
+        - Sanitized real tool schema
+        - Documentation or evaluation correction
+    validations:
+      required: true
+
+  - type: input
+    id: version
+    attributes:
+      label: Version or commit
+      placeholder: v0.9.0 or a commit SHA
+    validations:
+      required: true
+
+  - type: textarea
+    id: schema
+    attributes:
+      label: Minimal tool schema and provenance setup
+      description: Remove proprietary names and data. Show Param/Tool declarations and trusted_args or ledger setup.
+      render: python
+    validations:
+      required: true
+
+  - type: textarea
+    id: call
+    attributes:
+      label: Proposed tool call
+      description: Provide the smallest call that reproduces the result.
+      render: python
+    validations:
+      required: true
+
+  - type: textarea
+    id: result
+    attributes:
+      label: Observed and expected decisions
+      description: Include allow, needs_confirm, and reason when available, then explain what you expected.
+    validations:
+      required: true
+
+  - type: textarea
+    id: context
+    attributes:
+      label: Additional context
+      description: Note transformations, false positives, or why the schema is representative.
+
+  - type: checkboxes
+    id: safety
+    attributes:
+      label: Safety check
+      options:
+        - label: I removed credentials, private data, proprietary schema details, and live targets.
+          required: true

verb_authority-0.10.0b14/.github/ISSUE_TEMPLATE/schema-scan-feedback.yml

@@ -0,0 +1,61 @@
+name: Schema scan feedback
+description: Correct an inference, add a public schema, or share a redacted local report.
+title: "[schema scan] "
+body:
+  - type: markdown
+    attributes:
+      value: |
+        Thanks for helping improve the authority map. Prefer a public source URL or a `--redact-names` report. Do not upload private schemas, credentials, runtime values, customer data, or production endpoints.
+
+  - type: dropdown
+    id: feedback-type
+    attributes:
+      label: Feedback type
+      options:
+        - Inferred policy correction
+        - Inferred verb-risk correction
+        - MCP annotation conflict
+        - Public Atlas schema addition
+        - Redacted local scan result
+    validations:
+      required: true
+
+  - type: input
+    id: version
+    attributes:
+      label: Verb Authority version or commit
+      placeholder: 0.10.0b14 or a commit SHA
+    validations:
+      required: true
+
+  - type: input
+    id: public-source
+    attributes:
+      label: Immutable public source URL, if applicable
+      description: Link to a specific commit rather than a moving branch.
+      placeholder: https://github.com/owner/repo/blob/<commit>/path
+
+  - type: textarea
+    id: finding
+    attributes:
+      label: Minimal finding or redacted report excerpt
+      description: Include inferred risk/policy, the expected classification, and the reason. A `--redact-names` excerpt is welcome.
+    validations:
+      required: true
+
+  - type: textarea
+    id: reproduction
+    attributes:
+      label: Reproduction command
+      description: Show the local scan command and report format; do not include private paths.
+      placeholder: python -m verb_authority scan tools.json --redact-names --format json
+
+  - type: checkboxes
+    id: safety
+    attributes:
+      label: Safety check
+      options:
+        - label: I reviewed this submission and removed private schemas, credentials, runtime values, customer data, and production endpoints.
+          required: true
+        - label: I understand that an inference mismatch is not automatically a vulnerability in the upstream project.
+          required: true

verb_authority-0.10.0b14/.github/workflows/ci.yml

@@ -0,0 +1,441 @@
+name: CI
+
+on:
+  push:
+    branches: [main]
+  pull_request:
+
+permissions:
+  contents: read
+
+jobs:
+  test:
+    name: Python ${{ matrix.python-version }}
+    runs-on: ubuntu-latest
+    strategy:
+      fail-fast: false
+      matrix:
+        python-version: ["3.10", "3.11", "3.12", "3.13", "3.14"]
+
+    steps:
+      - name: Check out repository
+        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
+        with:
+          persist-credentials: false
+
+      - name: Set up Python
+        uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97 # v7.0.0
+        with:
+          python-version: ${{ matrix.python-version }}
+
+      - name: Install package and test dependency
+        run: python -m pip install "setuptools>=77" ".[dev]"
+
+      - name: Run complete test suite
+        run: python -m pytest -v
+
+  pydantic-integration:
+    name: Pydantic AI 2.35 adapter
+    runs-on: ubuntu-latest
+
+    steps:
+      - name: Check out repository
+        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
+        with:
+          persist-credentials: false
+
+      - name: Set up Python
+        uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97 # v7.0.0
+        with:
+          python-version: "3.12"
+
+      - name: Install the optional Pydantic AI integration
+        run: python -m pip install "setuptools>=77" ".[dev,pydantic]"
+
+      - name: Run the Pydantic AI integration contract
+        run: python -m pytest -v test_pydantic_ai_integration.py
+
+  package:
+    name: Build and smoke-test distribution
+    runs-on: ubuntu-latest
+
+    steps:
+      - name: Check out repository
+        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
+        with:
+          persist-credentials: false
+
+      - name: Set up Python
+        uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97 # v7.0.0
+        with:
+          python-version: "3.12"
+
+      - name: Bind verifier and source contract to the exact commit
+        env:
+          EXPECTED_SOURCE_COMMIT: ${{ github.sha }}
+        run: |
+          while IFS= read -r variable; do
+            case "$variable" in
+              GIT_CONFIG_*|GIT_TRACE*|LD_*|DYLD_*|GCONV_PATH|LOCPATH|PYTHONPATH|PYTHONHOME)
+                unset "$variable" ;;
+            esac
+          done < <(compgen -e)
+          unset GIT_DIR GIT_WORK_TREE GIT_INDEX_FILE GIT_OBJECT_DIRECTORY
+          unset GIT_ALTERNATE_OBJECT_DIRECTORIES GIT_COMMON_DIR GIT_NAMESPACE
+          unset GIT_REPLACE_REF_BASE GIT_GRAFT_FILE GIT_SHALLOW_FILE GIT_EXEC_PATH
+          unset GIT_PREFIX GIT_QUARANTINE_PATH GIT_EXTERNAL_DIFF GIT_DIFF_OPTS GIT_PAGER
+          export PATH=/usr/bin:/bin
+          export LC_ALL=C
+          export LANG=C
+          export GIT_CONFIG_NOSYSTEM=1
+          export GIT_CONFIG_GLOBAL=/dev/null
+          export GIT_NO_REPLACE_OBJECTS=1
+          export GIT_NO_LAZY_FETCH=1
+          export GIT_LITERAL_PATHSPECS=1
+          export GIT_TERMINAL_PROMPT=0
+          test -x /usr/bin/git && test ! -L /usr/bin/git
+          test "$(stat -c %u /usr/bin/git)" -eq 0
+          git_mode=$(stat -c %a -- /usr/bin/git)
+          [[ "$git_mode" =~ ^[0-7]{3,4}$ ]]
+          test "$((8#$git_mode & 8#022))" -eq 0
+          python_safe=$(readlink -f /usr/bin/python3)
+          case "$python_safe" in /usr/bin/python3|/usr/bin/python3.*) ;; *) exit 1 ;; esac
+          test -x "$python_safe" && test ! -L "$python_safe"
+          test "$(stat -c %u "$python_safe")" -eq 0
+          python_mode=$(stat -c %a -- "$python_safe")
+          [[ "$python_mode" =~ ^[0-7]{3,4}$ ]]
+          test "$((8#$python_mode & 8#022))" -eq 0
+          git_safe=(/usr/bin/git --no-pager --no-replace-objects \
+            -c core.fsmonitor=false -c core.hooksPath=/dev/null -c diff.external= \
+            -c protocol.allow=never -c protocol.ext.allow=never \
+            -c protocol.file.allow=never)
+          source_commit=$("${git_safe[@]}" rev-parse --verify 'HEAD^{commit}')
+          test "$source_commit" = "$EXPECTED_SOURCE_COMMIT"
+          verifier="${{ runner.temp }}/verify_release_artifacts.py"
+          verifier_blob=$("$python_safe" -I - \
+            "$source_commit" "$verifier" "${{ github.workspace }}" <<'PY'
+          import hashlib
+          import re
+          import subprocess
+          import sys
+
+          source_commit, output_path, repository = sys.argv[1:]
+          if re.fullmatch(r"[0-9a-f]{40}|[0-9a-f]{64}", source_commit) is None:
+              raise SystemExit("invalid exact source commit")
+          hexadecimal_size = len(source_commit)
+          git = [
+              "/usr/bin/git", "--no-pager", "--no-replace-objects",
+              "-c", "core.fsmonitor=false", "-c", "core.hooksPath=/dev/null",
+              "-c", "diff.external=", "-c", "protocol.allow=never",
+              "-c", "protocol.ext.allow=never", "-c", "protocol.file.allow=never",
+              "-C", repository,
+          ]
+
+          def read_object(kind, object_id, limit):
+              process = subprocess.Popen(
+                  [*git, "cat-file", kind, object_id],
+                  stdin=subprocess.DEVNULL,
+                  stdout=subprocess.PIPE,
+                  stderr=subprocess.DEVNULL,
+              )
+              assert process.stdout is not None
+              payload = process.stdout.read(limit + 1)
+              if len(payload) > limit:
+                  process.kill()
+                  process.wait()
+                  raise SystemExit(f"oversized git {kind} object")
+              if process.wait() != 0:
+                  raise SystemExit(f"cannot read git {kind} object")
+              framed = f"{kind} {len(payload)}\0".encode("ascii") + payload
+              digest = (
+                  hashlib.sha1(framed).hexdigest()
+                  if hexadecimal_size == 40
+                  else hashlib.sha256(framed).hexdigest()
+              )
+              if digest != object_id:
+                  raise SystemExit(f"git {kind} object hash mismatch")
+              return payload
+
+          def tree_entries(tree_id):
+              payload = read_object("tree", tree_id, 16 * 1024 * 1024)
+              width = hexadecimal_size // 2
+              position = 0
+              while position < len(payload):
+                  space = payload.find(b" ", position)
+                  nul = payload.find(b"\0", space + 1)
+                  end = nul + 1 + width
+                  if space <= position or nul <= space + 1 or end > len(payload):
+                      raise SystemExit("malformed git tree")
+                  yield (
+                      payload[position:space],
+                      payload[space + 1:nul],
+                      payload[nul + 1:end].hex(),
+                  )
+                  position = end
+
+          commit = read_object("commit", source_commit, 16 * 1024 * 1024)
+          trees = [
+              line[5:].decode("ascii")
+              for line in commit.split(b"\n\n", 1)[0].splitlines()
+              if line.startswith(b"tree ")
+          ]
+          if len(trees) != 1:
+              raise SystemExit("commit has no unique tree")
+          current = trees[0]
+          for component, expected_mode in (
+              (b"scripts", b"40000"),
+              (b"verify_release_artifacts.py", b"100644"),
+          ):
+              matches = [entry for entry in tree_entries(current) if entry[1] == component]
+              if len(matches) != 1 or matches[0][0].lstrip(b"0") != expected_mode:
+                  raise SystemExit("verifier path is absent or has an unsafe mode")
+              current = matches[0][2]
+          verifier_payload = read_object("blob", current, 16 * 1024 * 1024)
+          with open(output_path, "xb") as output:
+              output.write(verifier_payload)
+          print(current)
+          PY
+          )
+          test "$("${git_safe[@]}" hash-object --no-filters "$verifier")" = "$verifier_blob"
+          printf 'SOURCE_COMMIT=%s\n' "$source_commit" >> "$GITHUB_ENV"
+          printf 'RELEASE_VERIFIER=%s\n' "$verifier" >> "$GITHUB_ENV"
+
+      - name: Install build frontend
+        run: python -m pip install "build>=1.2,<2" "setuptools>=77"
+
+      - name: Build source distribution
+        run: python -m build --sdist
+
+      - name: Verify source distribution before extraction
+        run: |
+          python -I "$RELEASE_VERIFIER" sdist \
+            --project pyproject.toml \
+            --dist dist \
+            --repository "${{ github.workspace }}" \
+            --source-commit "$SOURCE_COMMIT"
+
+      - name: Extract and inspect source distribution
+        run: |
+          python -I "$RELEASE_VERIFIER" extract-sdist \
+            --project pyproject.toml \
+            --dist dist \
+            --output "${{ runner.temp }}/verb-authority-sdist" \
+            --repository "${{ github.workspace }}" \
+            --source-commit "$SOURCE_COMMIT"
+          sdist_root=$(find "${{ runner.temp }}/verb-authority-sdist" \
+            -mindepth 1 -maxdepth 1 -type d -print -quit)
+          test -n "$sdist_root"
+          test -f "$sdist_root/LANDSCAPE.md"
+          test -f "$sdist_root/docs/assets/social-preview.jpg"
+          test -f "$sdist_root/pydantic_ai_demo.py"
+          test -f "$sdist_root/scripts/installed_pydantic_smoke.py"
+          test -f "$sdist_root/scripts/installed_wheel_smoke.py"
+          test -f "$sdist_root/scripts/verify_release_artifacts.py"
+          printf 'SDIST_ROOT=%s\n' "$sdist_root" >> "$GITHUB_ENV"
+
+      - name: Test extracted source distribution
+        run: |
+          python -m pip install "$SDIST_ROOT[dev]"
+          cd "$SDIST_ROOT"
+          python -m pytest -v
+
+      - name: Build wheel from extracted source distribution
+        run: python -m build --wheel --outdir "${{ github.workspace }}/dist" "$SDIST_ROOT"
+
+      - name: Verify distribution identities
+        run: |
+          python -I "$RELEASE_VERIFIER" artifacts \
+            --project pyproject.toml \
+            --dist "${{ github.workspace }}/dist" \
+            --repository "${{ github.workspace }}" \
+            --source-commit "$SOURCE_COMMIT"
+
+      - name: Generate and verify SHA-256 checksums
+        working-directory: dist
+        run: |
+          sha256sum *.whl *.tar.gz > SHA256SUMS
+          sha256sum --check SHA256SUMS
+
+      - name: Install the built wheel
+        run: |
+          env -u PYTHONPATH -u PYTHONHOME \
+            python -I -m pip install --force-reinstall --no-deps dist/*.whl
+
+      - name: Smoke-test installed commands
+        working-directory: ${{ runner.temp }}
+        run: |
+          printf '%s\n' \
+            'from pathlib import Path' \
+            'Path("installed-smoke-shadow.marker").write_text("temp module imported", encoding="utf-8")' \
+            'raise SystemExit(0)' \
+            > verb_authority.py
+          env -u PYTHONHOME PYTHONPATH="${{ runner.temp }}" \
+            python -I -m verb_authority
+          env -u PYTHONPATH -u PYTHONHOME \
+            verb-authority scan --help
+          env -u PYTHONPATH -u PYTHONHOME \
+            verb-authority-scan "$SDIST_ROOT/atlas/public_mcp_schemas.json" \
+            --format json --output authority-report.json
+          env -u PYTHONPATH -u PYTHONHOME \
+            verb-authority diff "$SDIST_ROOT/atlas/public_mcp_schemas.json" \
+            "$SDIST_ROOT/atlas/public_mcp_schemas.json" \
+            --fail-on-increase
+          env -u PYTHONPATH -u PYTHONHOME \
+            verb-authority-diff authority-report.json authority-report.json \
+            --format json --output authority-diff.json
+          cp "$SDIST_ROOT/scripts/installed_wheel_smoke.py" installed_wheel_smoke.py
+          expected_version=$(env -u PYTHONPATH -u PYTHONHOME python -I -c 'import sys, tomllib; print(tomllib.load(open(sys.argv[1], "rb"))["project"]["version"])' "$SDIST_ROOT/pyproject.toml")
+          env -u PYTHONPATH -u PYTHONHOME \
+            python -I installed_wheel_smoke.py \
+            --expected-version "$expected_version" \
+            --forbid-root "${{ github.workspace }}" \
+            --forbid-root "$SDIST_ROOT"
+          env -u PYTHONPATH -u PYTHONHOME \
+            python -I -c 'import json; assert json.load(open("authority-report.json"))["summary"]["tools"] == 10'
+          env -u PYTHONPATH -u PYTHONHOME \
+            python -I -c 'import json; assert json.load(open("authority-diff.json"))["summary"]["changes"] == 0'
+          env -u PYTHONPATH -u PYTHONHOME \
+            python -I -m pip check
+          test ! -e installed-smoke-shadow.marker
+
+      - name: Install and smoke-test the optional Pydantic AI adapter
+        run: |
+          shopt -s nullglob
+          wheels=(dist/*.whl)
+          test "${#wheels[@]}" -eq 1
+          env -u PYTHONPATH -u PYTHONHOME \
+            python -I -m pip install --force-reinstall "${wheels[0]}[pydantic]"
+          cp "$SDIST_ROOT/scripts/installed_pydantic_smoke.py" \
+            "${{ runner.temp }}/installed_pydantic_smoke.py"
+          expected_version=$(env -u PYTHONPATH -u PYTHONHOME python -I -c 'import sys, tomllib; print(tomllib.load(open(sys.argv[1], "rb"))["project"]["version"])' "$SDIST_ROOT/pyproject.toml")
+          cd "${{ runner.temp }}"
+          env -u PYTHONPATH -u PYTHONHOME \
+            python -I installed_pydantic_smoke.py \
+            --expected-version "$expected_version" \
+            --forbid-root "${{ github.workspace }}" \
+            --forbid-root "$SDIST_ROOT"
+          env -u PYTHONPATH -u PYTHONHOME python -I -m pip check
+
+      - name: Smoke-test local composite action
+        uses: ./
+        with:
+          before: ${{ github.workspace }}/atlas/public_mcp_schemas.json
+          after: ${{ github.workspace }}/atlas/public_mcp_schemas.json
+          fail_on_increase: "true"
+          # The Atlas intentionally preserves known review debt. This step
+          # verifies packaging and an identity comparison; the dedicated
+          # action-shadowing job below verifies fail_on_review itself.
+          fail_on_review: "false"
+
+      - name: Preserve distributions
+        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
+        with:
+          name: python-distributions
+          path: dist/
+          if-no-files-found: error
+
+  action-shadowing:
+    name: Composite action ignores consumer module shadowing
+    runs-on: ubuntu-latest
+    env:
+      PYTHONPATH: .
+
+    steps:
+      - name: Check out action below the consumer workspace
+        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
+        with:
+          path: verb-authority-action
+          persist-credentials: false
+
+      - name: Set up Python
+        uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97 # v7.0.0
+        with:
+          python-version: "3.12"
+
+      - name: Create a hostile consumer module and a widening schema diff
+        shell: bash
+        run: |
+          printf '%s\n' \
+            'from pathlib import Path' \
+            'Path("shadow-imported.marker").write_text("consumer module ran", encoding="utf-8")' \
+            'raise SystemExit(0)' \
+            > verb_authority.py
+          printf '%s\n' \
+            'from pathlib import Path' \
+            'Path("pip-shadow-imported.marker").write_text("consumer pip module ran", encoding="utf-8")' \
+            'raise SystemExit(0)' \
+            > pip.py
+          printf '%s\n' \
+            '{"tools":[{"name":"set_limit","inputSchema":{"type":"object","properties":{"amount":{"type":"number","maximum":10}},"required":["amount"]}}]}' \
+            > before.json
+          printf '%s\n' \
+            '{"tools":[{"name":"set_limit","inputSchema":{"type":"object","properties":{"amount":{"type":"number","maximum":10}},"required":["amount"]}}]}' \
+            > ./--help
+          printf '%s\n' \
+            '{"tools":[{"name":"set_limit","inputSchema":{"type":"object","properties":{"amount":{"type":"number","maximum":100}},"required":["amount"]}}]}' \
+            > after.json
+          printf '%s\n' \
+            '{"tools":[{"name":"set_limit","inputSchema":{"type":"object","properties":{"amount":{"type":"number","maximum":1}},"required":["amount"]}}]}' \
+            > option-before.json
+          printf '%s\n' \
+            '{"tools":[{"name":"set_limit","inputSchema":{"type":"object","properties":{"amount":{"type":"number","minimum":0}},"required":["amount"]}}]}' \
+            > review-before.json
+          printf '%s\n' \
+            '{"tools":[{"name":"set_limit","inputSchema":{"type":"object","properties":{"amount":{"type":"number","minimum":-100}},"required":["amount"]}}]}' \
+            > review-after.json
+
+      - name: Run the composite action from the hostile workspace
+        id: authority-diff
+        continue-on-error: true
+        uses: ./verb-authority-action
+        with:
+          before: before.json
+          after: after.json
+          fail_on_increase: "true"
+          fail_on_review: "false"
+
+      - name: Run the composite action on review-only drift
+        id: authority-review
+        continue-on-error: true
+        uses: ./verb-authority-action
+        with:
+          before: review-before.json
+          after: review-after.json
+          fail_on_increase: "false"
+          fail_on_review: "true"
+
+      - name: Treat an option-looking baseline as a schema path
+        id: authority-option-before
+        continue-on-error: true
+        uses: ./verb-authority-action
+        with:
+          before: --help
+          after: after.json
+          fail_on_increase: "true"
+          fail_on_review: "false"
+
+      - name: Treat an option-looking candidate as a schema path
+        id: authority-option-after
+        continue-on-error: true
+        uses: ./verb-authority-action
+        with:
+          before: option-before.json
+          after: --help
+          fail_on_increase: "true"
+          fail_on_review: "false"
+
+      - name: Verify the installed CLI enforced both real thresholds
+        if: always()
+        shell: bash
+        env:
+          INCREASE_OUTCOME: ${{ steps.authority-diff.outcome }}
+          REVIEW_OUTCOME: ${{ steps.authority-review.outcome }}
+          OPTION_BEFORE_OUTCOME: ${{ steps.authority-option-before.outcome }}
+          OPTION_AFTER_OUTCOME: ${{ steps.authority-option-after.outcome }}
+        run: |
+          test "$INCREASE_OUTCOME" = "failure"
+          test "$REVIEW_OUTCOME" = "failure"
+          test "$OPTION_BEFORE_OUTCOME" = "failure"
+          test "$OPTION_AFTER_OUTCOME" = "failure"
+          test ! -e shadow-imported.marker
+          test ! -e pip-shadow-imported.marker