ci: Python CI + protocol schema gates

.github/workflows/auctoriseal-ci.yml

@@ -1,25 +1,58 @@
 name: auctoriseal-ci
 
 on:
+  workflow_dispatch:
   pull_request:
   push:
     branches: [ main ]
 
+permissions:
+  contents: read
+
 jobs:
-  build_test:
+  test:
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@v4
-      - uses: actions/setup-node@v4
+
+      - uses: actions/setup-python@v5
         with:
-          node-version: 20
-      - name: Build
+          python-version: "3.11"
+
+      - name: Protocol gates
+        shell: bash
         run: |
           set -euo pipefail
-          node -v
-          npm -v || true
-          npm run build
-      - name: Test
+          test -f protocol/protocol.md
+          test -f protocol/seal.schema.json
+          test -f protocol/authority.schema.json
+          test -f protocol/revocation.schema.json
+          python3 - <<'PY'
+import json, pathlib
+req = [
+  "protocol/seal.schema.json",
+  "protocol/authority.schema.json",
+  "protocol/revocation.schema.json",
+  "protocol/envelope.schema.json",
+  "protocol/error.schema.json",
+]
+for p in req:
+    fp = pathlib.Path(p)
+    if not fp.exists():
+        raise SystemExit(f"E_MISSING_{p}")
+    json.loads(fp.read_text(encoding="utf-8"))
+print("OK: schemas parse")
+PY
+
+      - name: Install test deps
+        shell: bash
+        run: |
+          set -euo pipefail
+          python3 -m pip install --upgrade pip
+          python3 -m pip install pytest
+
+      - name: Pytest
+        shell: bash
         run: |
           set -euo pipefail
-          npm run test
+          python3 -m pytest -q

auctoriseal/__init__.py

@@ -0,0 +1 @@
+# AUCTORISEAL namespace shim for CI import stability.

auctoriseal/api/__init__.py

@@ -0,0 +1 @@
+# namespace package

auctoriseal/api/server.py

@@ -0,0 +1 @@
+from ...api.server import *  # noqa: F401,F403

auctoriseal/authority/__init__.py

@@ -0,0 +1 @@
+# namespace package

auctoriseal/authority/delegation.py

@@ -0,0 +1 @@
+from ...authority.delegation import *  # noqa: F401,F403

auctoriseal/authority/freeze.py

@@ -0,0 +1 @@
+from ...authority.freeze import *  # noqa: F401,F403

auctoriseal/authority/modes.py

@@ -0,0 +1 @@
+from ...authority.modes import *  # noqa: F401,F403

auctoriseal/authority/policy.py

@@ -0,0 +1 @@
+from ...authority.policy import *  # noqa: F401,F403

auctoriseal/cli/__init__.py

@@ -0,0 +1 @@
+# namespace package

auctoriseal/cli/inspect_ledger.py

@@ -0,0 +1 @@
+from ...cli.inspect_ledger import *  # noqa: F401,F403

auctoriseal/ledger/__init__.py

@@ -0,0 +1 @@
+# namespace package

auctoriseal/ledger/integrity.py

@@ -0,0 +1 @@
+from ...ledger.integrity import *  # noqa: F401,F403

auctoriseal/ledger/reader.py

@@ -0,0 +1 @@
+from ...ledger.reader import *  # noqa: F401,F403

auctoriseal/ledger/retention.py

@@ -0,0 +1 @@
+from ...ledger.retention import *  # noqa: F401,F403

auctoriseal/ledger/writer.py

@@ -0,0 +1 @@
+from ...ledger.writer import *  # noqa: F401,F403

auctoriseal/seals/__init__.py

@@ -0,0 +1 @@
+# namespace package

auctoriseal/seals/issuer.py

@@ -0,0 +1 @@
+from ...seals.issuer import *  # noqa: F401,F403

auctoriseal/seals/revoker.py

@@ -0,0 +1 @@
+from ...seals.revoker import *  # noqa: F401,F403

auctoriseal/seals/validator.py

@@ -0,0 +1 @@
+from ...seals.validator import *  # noqa: F401,F403

pyproject.toml

@@ -0,0 +1,12 @@
+[project]
+name = "auctoriseal"
+version = "0.1.0"
+requires-python = ">=3.11"
+dependencies = []
+
+[tool.pytest.ini_options]
+addopts = "-q"
+testpaths = ["tests"]
+
+[tool.ruff]
+line-length = 100