wright-engineering 0.1.0__tar.gz → 0.1.4__tar.gz

{wright_engineering-0.1.0 → wright_engineering-0.1.4}/.gitignore

@@ -226,6 +226,10 @@ yarn-error.log*
 
 # Playwright / E2E Testing
 test-results/
+release-evidence*.json
+!specs/047-python-oci-release-train/contracts/release-evidence.schema.json
+*.spdx.json
+*.sarif
 playwright-report/
 blob-report/
 playwright/.cache/
@@ -248,6 +252,7 @@ vault/
 *.db-wal
 *.db-shm
 *.db-journal
+*.lifecycle.lock
 
 # LanceDB vector database runtime data
 *.lance/

{wright_engineering-0.1.0 → wright_engineering-0.1.4}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: wright-engineering
-Version: 0.1.0
+Version: 0.1.4
 Summary: Public-alpha helper CLI for the Wright local-first engineering appliance
 Project-URL: Homepage, https://github.com/burhop/wright
 Project-URL: Source, https://github.com/burhop/wright
@@ -19,6 +19,7 @@ Classifier: Programming Language :: Python :: 3
 Classifier: Programming Language :: Python :: 3.11
 Classifier: Programming Language :: Python :: 3.12
 Classifier: Programming Language :: Python :: 3.13
+Classifier: Programming Language :: Python :: 3.14
 Classifier: Topic :: Scientific/Engineering
 Requires-Python: >=3.11
 Description-Content-Type: text/markdown
@@ -36,7 +37,7 @@ Description-Content-Type: text/markdown
 <p align="center">
   <a href="https://github.com/burhop/wright/actions/workflows/python-quality.yml?query=branch%3Amain"><img src="https://github.com/burhop/wright/actions/workflows/python-quality.yml/badge.svg?branch=main" alt="Production Python CI"></a>
   <a href="https://github.com/burhop/wright/actions/workflows/frontend-quality.yml?query=branch%3Amain"><img src="https://github.com/burhop/wright/actions/workflows/frontend-quality.yml/badge.svg?branch=main" alt="Production Frontend CI"></a>
-  <a href="https://github.com/burhop/wright/actions/workflows/docker-build.yml?query=branch%3Amain"><img src="https://github.com/burhop/wright/actions/workflows/docker-build.yml/badge.svg?branch=main" alt="Production Docker Build"></a>
+  <a href="https://github.com/burhop/wright/actions/workflows/docker-pr.yml"><img src="https://github.com/burhop/wright/actions/workflows/docker-pr.yml/badge.svg" alt="OCI Pull Request Validation"></a>
   <a href="https://github.com/burhop/wright/actions/workflows/docs-deploy.yml?query=branch%3Amain"><img src="https://github.com/burhop/wright/actions/workflows/docs-deploy.yml/badge.svg?branch=main" alt="Production Docs"></a>
   <a href="https://github.com/burhop/wright/actions/workflows/public-alpha-safety.yml?query=branch%3Amain"><img src="https://github.com/burhop/wright/actions/workflows/public-alpha-safety.yml/badge.svg?branch=main" alt="Production Security Scan"></a>
   <a href="https://github.com/burhop/wright/actions/workflows/release.yml?query=branch%3Amain"><img src="https://github.com/burhop/wright/actions/workflows/release.yml/badge.svg?branch=main" alt="Production Release"></a>
@@ -211,9 +212,9 @@ wright/
 |-- packages/
 |   |-- core/                   # Shared domain models and logging
 |   |-- agent_adapters/         # Adapter pattern for agent runtimes
-|   |-- workspace_service/      # Workspace lifecycle orchestration facade
+|   |-- workspace_service/      # Workspace application use cases and local adapters
 |   |-- tool_registry/          # MCP registry and validation logic
-|   `-- data_vault/             # Placeholder package for future storage extraction
+|   `-- data_vault/             # SQLite lifecycle, repositories, and secret storage
 |-- hermes-plugin-wright/       # Wright Hermes plugin compatibility package
 |-- tests/
 |   |-- ui-integration/         # Playwright integration tests

{wright_engineering-0.1.0 → wright_engineering-0.1.4}/README.md

@@ -11,7 +11,7 @@
 <p align="center">
   <a href="https://github.com/burhop/wright/actions/workflows/python-quality.yml?query=branch%3Amain"><img src="https://github.com/burhop/wright/actions/workflows/python-quality.yml/badge.svg?branch=main" alt="Production Python CI"></a>
   <a href="https://github.com/burhop/wright/actions/workflows/frontend-quality.yml?query=branch%3Amain"><img src="https://github.com/burhop/wright/actions/workflows/frontend-quality.yml/badge.svg?branch=main" alt="Production Frontend CI"></a>
-  <a href="https://github.com/burhop/wright/actions/workflows/docker-build.yml?query=branch%3Amain"><img src="https://github.com/burhop/wright/actions/workflows/docker-build.yml/badge.svg?branch=main" alt="Production Docker Build"></a>
+  <a href="https://github.com/burhop/wright/actions/workflows/docker-pr.yml"><img src="https://github.com/burhop/wright/actions/workflows/docker-pr.yml/badge.svg" alt="OCI Pull Request Validation"></a>
   <a href="https://github.com/burhop/wright/actions/workflows/docs-deploy.yml?query=branch%3Amain"><img src="https://github.com/burhop/wright/actions/workflows/docs-deploy.yml/badge.svg?branch=main" alt="Production Docs"></a>
   <a href="https://github.com/burhop/wright/actions/workflows/public-alpha-safety.yml?query=branch%3Amain"><img src="https://github.com/burhop/wright/actions/workflows/public-alpha-safety.yml/badge.svg?branch=main" alt="Production Security Scan"></a>
   <a href="https://github.com/burhop/wright/actions/workflows/release.yml?query=branch%3Amain"><img src="https://github.com/burhop/wright/actions/workflows/release.yml/badge.svg?branch=main" alt="Production Release"></a>
@@ -186,9 +186,9 @@ wright/
 |-- packages/
 |   |-- core/                   # Shared domain models and logging
 |   |-- agent_adapters/         # Adapter pattern for agent runtimes
-|   |-- workspace_service/      # Workspace lifecycle orchestration facade
+|   |-- workspace_service/      # Workspace application use cases and local adapters
 |   |-- tool_registry/          # MCP registry and validation logic
-|   `-- data_vault/             # Placeholder package for future storage extraction
+|   `-- data_vault/             # SQLite lifecycle, repositories, and secret storage
 |-- hermes-plugin-wright/       # Wright Hermes plugin compatibility package
 |-- tests/
 |   |-- ui-integration/         # Playwright integration tests

{wright_engineering-0.1.0 → wright_engineering-0.1.4}/pyproject.toml

@@ -1,6 +1,6 @@
 [project]
 name = "wright-engineering"
-version = "0.1.0"
+version = "0.1.4"
 description = "Public-alpha helper CLI for the Wright local-first engineering appliance"
 requires-python = ">=3.11"
 readme = "README.md"
@@ -16,6 +16,7 @@ classifiers = [
     "Programming Language :: Python :: 3.11",
     "Programming Language :: Python :: 3.12",
     "Programming Language :: Python :: 3.13",
+    "Programming Language :: Python :: 3.14",
     "Topic :: Scientific/Engineering",
 ]
 dependencies = []
@@ -54,6 +55,11 @@ testpaths = [
     "packages/workspace_service/tests",
     "tests",
 ]
+markers = [
+    "gateway: provider-neutral GatewayService contract and isolation tests",
+    "mcp_protocol: official MCP SDK transport and protocol compatibility tests",
+    "release: exact-artifact release identity, supply-chain, and recovery contracts",
+]
 
 [dependency-groups]
 dev = [
@@ -69,3 +75,25 @@ build-backend = "hatchling.build"
 
 [tool.hatch.build.targets.wheel]
 packages = ["src/wright_engineering"]
+
+[tool.hatch.build.targets.sdist]
+include = [
+    "/src/wright_engineering",
+    "/README.md",
+    "/LICENSE",
+    "/pyproject.toml",
+]
+exclude = [
+    "/.gitignore",
+    "/.github",
+    "/.specify",
+    "/apps",
+    "/docker",
+    "/docs",
+    "/hermes-plugin-wright",
+    "/packages",
+    "/scripts",
+    "/specs",
+    "/tests",
+    "/windows-sandbox",
+]

wright_engineering-0.1.4/src/wright_engineering/__init__.py

@@ -0,0 +1,6 @@
+"""Wright public-alpha helper package."""
+
+from importlib.metadata import version
+
+
+__version__ = version("wright-engineering")

wright_engineering-0.1.4/src/wright_engineering/appliance.py

@@ -0,0 +1,36 @@
+from __future__ import annotations
+
+import json
+import os
+from urllib.error import HTTPError, URLError
+from urllib.request import Request, urlopen
+
+
+class ApplianceError(RuntimeError):
+    """Stable public error for appliance diagnostics."""
+
+
+def appliance_status(
+    api_url: str, token_env: str = "WRIGHT_API_TOKEN"
+) -> dict[str, object]:
+    token = os.environ.get(token_env)
+    headers = {"Authorization": f"Bearer {token}"} if token else {}
+    request = Request(f"{api_url.rstrip('/')}/api/health", headers=headers)
+    try:
+        with urlopen(request, timeout=5) as response:  # noqa: S310 - operator supplied URL
+            payload = json.loads(response.read())
+    except (HTTPError, URLError, TimeoutError, json.JSONDecodeError) as exc:
+        raise ApplianceError(
+            f"appliance status unavailable: {type(exc).__name__}"
+        ) from exc
+    if not isinstance(payload, dict):
+        raise ApplianceError("appliance returned an invalid health document")
+    return payload
+
+
+def config_diagnostic(api_url: str, token_env: str) -> dict[str, str]:
+    return {
+        "api_url": api_url,
+        "token_env": token_env,
+        "token_status": "set" if os.environ.get(token_env) else "not set",
+    }

wright_engineering-0.1.4/src/wright_engineering/cli.py

@@ -0,0 +1,101 @@
+from __future__ import annotations
+
+import argparse
+import json
+from pathlib import Path
+
+from . import __version__
+from .appliance import ApplianceError, appliance_status, config_diagnostic
+from .diagnostics import run_diagnostics
+from .mcp_bridge import serve_stdio
+
+
+DOCKER_IMAGE = "burhop/wright"
+GHCR_IMAGE = "ghcr.io/burhop/wright"
+DOCS_URL = "https://burhop.github.io/wright/"
+SUPPORT_EMAIL = "wright@makerengineer.com"
+
+
+def main(argv: list[str] | None = None) -> int:
+    parser = argparse.ArgumentParser(
+        prog="wright",
+        description="Public-alpha helper for the Wright local-first engineering appliance.",
+    )
+    parser.add_argument(
+        "--version",
+        action="version",
+        version=f"wright-engineering {__version__}",
+    )
+    subcommands = parser.add_subparsers(dest="command")
+    doctor = subcommands.add_parser(
+        "doctor", help="Run dependency-safe local diagnostics."
+    )
+    doctor.add_argument(
+        "--strict",
+        action="store_true",
+        help="Fail when an optional appliance prerequisite is missing.",
+    )
+    appliance = subcommands.add_parser(
+        "appliance", help="Inspect a running Wright appliance."
+    )
+    appliance_subcommands = appliance.add_subparsers(
+        dest="appliance_command", required=True
+    )
+    appliance_status_parser = appliance_subcommands.add_parser("status")
+    appliance_status_parser.add_argument("--api-url", default="http://127.0.0.1:8000")
+    config = subcommands.add_parser(
+        "config", help="Inspect configuration without secrets."
+    )
+    config.add_argument("--api-url", default="http://127.0.0.1:8000")
+    config.add_argument("--token-env", default="WRIGHT_API_TOKEN")
+    config.add_argument("--dry-run", action="store_true", required=True)
+    mcp = subcommands.add_parser(
+        "mcp", help="Run the direct provider-neutral MCP bridge."
+    )
+    mcp_subcommands = mcp.add_subparsers(dest="mcp_command", required=True)
+    serve = mcp_subcommands.add_parser("serve")
+    serve.add_argument("--stdio", action="store_true", required=True)
+    serve.add_argument("--workspace", type=Path, required=True)
+    serve.add_argument("--api-url", default="http://127.0.0.1:8000")
+    serve.add_argument("--session-id", default="wright-engineering")
+    serve.add_argument("--token-env", default="WRIGHT_API_TOKEN")
+
+    args = parser.parse_args(argv)
+    if args.command is None:
+        print("Wright public alpha")
+        print(f"Docker Hub image: {DOCKER_IMAGE}:<tag>")
+        print(f"GHCR image: {GHCR_IMAGE}:<tag>")
+        print(f"Docs: {DOCS_URL}")
+        print(f"Support: {SUPPORT_EMAIL}")
+        print("Docker remains the primary end-user install path for alpha.")
+        return 0
+    if args.command == "doctor":
+        diagnostics = run_diagnostics()
+        for item in diagnostics:
+            print(f"{'PASS' if item.ok else 'WARN'} {item.name}: {item.detail}")
+        if args.strict and not all(
+            item.ok for item in diagnostics if item.name != "api-token"
+        ):
+            return 1
+        return 0
+    if args.command == "appliance" and args.appliance_command == "status":
+        try:
+            print(json.dumps(appliance_status(args.api_url), sort_keys=True))
+        except ApplianceError as exc:
+            print(str(exc))
+            return 1
+        return 0
+    if args.command == "config":
+        print(
+            json.dumps(config_diagnostic(args.api_url, args.token_env), sort_keys=True)
+        )
+        return 0
+    if args.command == "mcp" and args.mcp_command == "serve":
+        return serve_stdio(
+            workspace=args.workspace,
+            api_url=args.api_url,
+            session_id=args.session_id,
+            token_env=args.token_env,
+        )
+    parser.error(f"unknown command: {args.command}")
+    return 2

wright_engineering-0.1.4/src/wright_engineering/diagnostics.py

@@ -0,0 +1,31 @@
+from __future__ import annotations
+
+from dataclasses import dataclass
+import os
+from pathlib import Path
+import shutil
+import sys
+
+
+@dataclass(frozen=True, slots=True)
+class Diagnostic:
+    name: str
+    ok: bool
+    detail: str
+
+
+def run_diagnostics() -> list[Diagnostic]:
+    return [
+        Diagnostic("python", sys.version_info >= (3, 11), sys.version.split()[0]),
+        Diagnostic(
+            "docker",
+            shutil.which("docker") is not None,
+            shutil.which("docker") or "not found",
+        ),
+        Diagnostic("workspace", Path.cwd().exists(), str(Path.cwd())),
+        Diagnostic(
+            "api-token",
+            bool(os.environ.get("WRIGHT_API_TOKEN")),
+            "set" if os.environ.get("WRIGHT_API_TOKEN") else "not set",
+        ),
+    ]

wright_engineering-0.1.4/src/wright_engineering/mcp_bridge.py

@@ -0,0 +1,84 @@
+from __future__ import annotations
+
+import json
+import os
+from pathlib import Path
+import sys
+from typing import BinaryIO
+from urllib.error import HTTPError, URLError
+from urllib.request import Request, urlopen
+
+
+class McpBridgeError(RuntimeError):
+    """Stable, redacted public bridge failure."""
+
+
+def _response_payload(content_type: str, body: bytes) -> bytes | None:
+    if not body:
+        return None
+    if "text/event-stream" in content_type:
+        data = [line[6:] for line in body.splitlines() if line.startswith(b"data: ")]
+        return data[-1] if data else None
+    return body
+
+
+def serve_stdio(
+    *,
+    workspace: Path,
+    api_url: str = "http://127.0.0.1:8000",
+    session_id: str = "wright-engineering",
+    token_env: str = "WRIGHT_API_TOKEN",
+    stdin: BinaryIO | None = None,
+    stdout: BinaryIO | None = None,
+) -> int:
+    """Bridge newline-delimited MCP STDIO messages to Wright Streamable HTTP."""
+    source = stdin or sys.stdin.buffer
+    sink = stdout or sys.stdout.buffer
+    token = os.environ.get(token_env)
+    if not token:
+        raise McpBridgeError(
+            f"required bearer token environment variable is not set: {token_env}"
+        )
+    transport_session: str | None = None
+    endpoint = f"{api_url.rstrip('/')}/mcp"
+    workspace_identity = str(workspace)
+    for raw_line in source:
+        if not raw_line.strip():
+            continue
+        try:
+            message = json.loads(raw_line)
+        except json.JSONDecodeError as exc:
+            raise McpBridgeError("invalid JSON on MCP STDIO input") from exc
+        protocol = "2025-11-25"
+        if message.get("method") == "initialize":
+            protocol = str(message.get("params", {}).get("protocolVersion", protocol))
+        headers = {
+            "Authorization": f"Bearer {token}",
+            "Content-Type": "application/json",
+            "Accept": "application/json, text/event-stream",
+            "Origin": "http://127.0.0.1",
+            "MCP-Protocol-Version": protocol,
+            "X-Wright-Session-Id": session_id,
+            "X-Wright-Workspace-Id": workspace_identity,
+        }
+        if transport_session:
+            headers["Mcp-Session-Id"] = transport_session
+        request = Request(
+            endpoint, data=json.dumps(message).encode(), headers=headers, method="POST"
+        )
+        try:
+            with urlopen(request, timeout=130) as response:  # noqa: S310 - explicit operator URL
+                transport_session = response.headers.get(
+                    "Mcp-Session-Id", transport_session
+                )
+                payload = _response_payload(
+                    response.headers.get("Content-Type", ""), response.read()
+                )
+        except (HTTPError, URLError, TimeoutError) as exc:
+            raise McpBridgeError(
+                f"Wright MCP transport failed: {type(exc).__name__}"
+            ) from exc
+        if payload:
+            sink.write(payload.rstrip(b"\r\n") + b"\n")
+            sink.flush()
+    return 0

wright_engineering-0.1.0/.agents/skills/speckit-agent-context-update/SKILL.md

@@ -1,31 +0,0 @@
----
-name: speckit-agent-context-update
-description: Refresh the managed Spec Kit section in the coding agent context file
-compatibility: Requires spec-kit project structure with .specify/ directory
-metadata:
-  author: github-spec-kit
-  source: agent-context:commands/speckit.agent-context.update.md
----
-
-# Update Coding Agent Context
-
-Refresh the managed Spec Kit section inside the active coding agent's context/instruction file (e.g. `CLAUDE.md`, `.github/copilot-instructions.md`, `AGENTS.md`).
-
-## Behavior
-
-The script reads the agent-context extension config at
-`.specify/extensions/agent-context/agent-context-config.yml` to discover:
-
-- `context_file` — the path of the coding agent context file to manage.
-- `context_markers.start` / `.end` — the delimiters surrounding the managed section. Defaults to `<!-- SPECKIT START -->` and `<!-- SPECKIT END -->` when the field is missing.
-
-It then creates, replaces, or appends the managed block so that the section points at the most recent plan path when one can be discovered (`specs/<feature>/plan.md`).
-
-If `context_file` is empty or the file cannot be located, the command reports nothing to do and exits successfully.
-
-## Execution
-
-- **Bash**: `.specify/extensions/agent-context/scripts/bash/update-agent-context.sh [plan_path]`
-- **PowerShell**: `.specify/extensions/agent-context/scripts/powershell/update-agent-context.ps1 [plan_path]`
-
-When `plan_path` is omitted, the script auto-detects the most recently modified `specs/*/plan.md`.