MCP authentication flag has inverted and updated

.copyright.tmpl

@@ -0,0 +1,2 @@
+SPDX-FileCopyrightText: 2026 AOT Technologies
+SPDX-License-Identifier: Apache-2.0

.github/workflows/docker-policy.yml

@@ -0,0 +1,43 @@
+##
+## SPDX-FileCopyrightText: 2026 AOT Technologies
+## SPDX-License-Identifier: Apache-2.0
+##
+
+# Enforce baseline container hygiene: digest-pinned base image and non-root USER.
+name: Docker policy
+
+on:
+  push:
+    branches: [main, master]
+    paths:
+      - "Dockerfile"
+      - "docker/**"
+  pull_request:
+    paths:
+      - "Dockerfile"
+      - "docker/**"
+
+jobs:
+  check:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+
+      - name: Verify Dockerfiles use digest-pinned FROM and non-root USER
+        shell: bash
+        run: |
+          set -euo pipefail
+          shopt -s nullglob
+          files=(Dockerfile docker/*/Dockerfile)
+          for f in "${files[@]}"; do
+            echo "Checking $f"
+            if ! grep -qE '^FROM [^[:space:]]+@sha256:[a-f0-9]{64}' "$f"; then
+              echo "ERROR: $f must use FROM image@sha256:<64-hex-digest>" >&2
+              exit 1
+            fi
+            if ! grep -qE '^USER[[:space:]]' "$f"; then
+              echo "ERROR: $f must end with a non-root USER directive" >&2
+              exit 1
+            fi
+          done
+          echo "PASS: all Dockerfiles pinned and non-root"

.github/workflows/lint.yml

@@ -0,0 +1,54 @@
+##
+## SPDX-FileCopyrightText: 2026 AOT Technologies
+## SPDX-License-Identifier: Apache-2.0
+##
+
+
+name: Lint and Type Check
+
+on:
+  pull_request:
+    branches: [ "main" ]
+
+jobs:
+  ruff:
+    name: Ruff Linters
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+
+      - name: Set up Python
+        uses: actions/setup-python@v5
+        with:
+          python-version: "3.12"
+
+      - name: Install dependencies
+        run: |
+          python -m pip install --upgrade pip
+          pip install -e ".[dev]"
+
+      - name: Run Ruff (Linting)
+        # --output-format=github automatically creates inline annotations on your PR code!
+        run: ruff check --output-format=github .
+
+      - name: Run Ruff (Formatting Check)
+        run: ruff format --check .
+
+  mypy:
+    name: Mypy Type Check
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+
+      - name: Set up Python
+        uses: actions/setup-python@v5
+        with:
+          python-version: "3.12"
+
+      - name: Install dependencies
+        run: |
+          python -m pip install --upgrade pip
+          pip install -e ".[dev]"
+
+      - name: Run Mypy (Type checking)
+        run: mypy

.github/workflows/publish.yml

@@ -0,0 +1,233 @@
+##
+## SPDX-FileCopyrightText: 2026 AOT Technologies
+## SPDX-License-Identifier: Apache-2.0
+##
+
+# Pinned action SHAs are immutable; update intentionally when upgrading.
+# yamllint disable rule:line-length
+name: Publish Node Wire package
+
+# Manual trigger: go to Actions → "Publish Node Wire package" → Run workflow.
+# package_path must match the allowlist below (prevents confused-deputy path abuse).
+#
+# Examples:
+#   package_path: packages/runtime
+#   package_path: packages/connectors/fhir_epic
+#   package_path: packages/connectors/google_drive
+on:
+  workflow_dispatch:
+    inputs:
+      package_path:
+        description: |
+          Relative path to the package directory (must be allowlisted).
+          Examples: packages/runtime | packages/connectors/fhir_epic
+        required: true
+        type: string
+      version:
+        description: "Semver version to publish (e.g. 0.2.0)"
+        required: true
+        type: string
+
+env:
+  PIP_AUDIT_VERSION: "2.7.3"
+  CYCLONEDX_BOM_VERSION: "4.6.1"
+
+jobs:
+  # ─────────────────────────────────────────────────────────────────────────────
+  # Build a binary wheel for each platform (Linux / macOS / Windows).
+  # cibuildwheel compiles Cython extensions and produces manylinux / macosx /
+  # win_amd64 wheels. The NoPyBuild override in setup.py ensures .py source
+  # files are excluded from all wheels.
+  # ─────────────────────────────────────────────────────────────────────────────
+  build-wheels:
+    name: Build (${{ matrix.os }})
+    strategy:
+      fail-fast: false
+      matrix:
+        os: [ubuntu-latest, macos-latest, windows-latest]
+    runs-on: ${{ matrix.os }}
+    permissions:
+      contents: read
+
+    steps:
+      - name: Validate package path (allowlist)
+        shell: python
+        run: |
+          import os
+          import sys
+
+          raw = "${{ inputs.package_path }}".strip().replace("\\", "/")
+          norm = os.path.normpath(raw).replace("\\", "/")
+          # Reject traversal / absolute paths
+          if norm.startswith("..") or os.path.isabs(raw):
+              print("ERROR: invalid package_path", file=sys.stderr)
+              sys.exit(1)
+          allowed = {
+              "packages/runtime",
+              "packages/connectors/http_generic",
+              "packages/connectors/stripe",
+              "packages/connectors/smtp",
+              "packages/connectors/google_drive",
+              "packages/connectors/fhir_cerner",
+              "packages/connectors/fhir_epic",
+          }
+          if norm not in allowed:
+              print(f"ERROR: package_path {norm!r} is not allowlisted.", file=sys.stderr)
+              print("Allowed:", sorted(allowed), file=sys.stderr)
+              sys.exit(1)
+          print(f"PASS: package_path {norm!r} is allowlisted")
+
+      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+
+      - name: Set up Python
+        uses: actions/setup-python@v5.3.0
+        with:
+          python-version: "3.11"
+
+      - name: Install build tools
+        run: python -m pip install --upgrade pip "cython>=3.0" "cibuildwheel>=2.16.0"
+
+      - name: Build platform wheel(s)
+        run: |
+          cd "${{ inputs.package_path }}"
+          python -m cibuildwheel --output-dir dist
+        env:
+          # Build only Python 3.11+ wheels (matches requires-python in pyproject.toml)
+          CIBW_BUILD: "cp311-* cp312-*"
+          # Skip 32-bit targets and PyPy — not supported
+          CIBW_SKIP: "*-win32 *-manylinux_i686 pp*"
+
+      # ── Security gate: verify no .py source files leaked into any wheel ──────
+      - name: Verify binary-only wheel (no .py source)
+        shell: python
+        run: |
+          import glob, sys, zipfile
+
+          wheels = glob.glob("${{ inputs.package_path }}/dist/*.whl")
+          if not wheels:
+              print("ERROR: No wheels produced", file=sys.stderr)
+              sys.exit(1)
+
+          leaked: dict[str, list[str]] = {}
+          for whl in wheels:
+              with zipfile.ZipFile(whl) as zf:
+                  bad = [n for n in zf.namelist() if n.endswith(".py")]
+              if bad:
+                  leaked[whl] = bad
+
+          if leaked:
+              print("SECURITY FAIL: .py files found in wheel(s):", file=sys.stderr)
+              for whl, files in leaked.items():
+                  print(f"  {whl}:", file=sys.stderr)
+                  for f in files:
+                      print(f"    {f}", file=sys.stderr)
+              sys.exit(1)
+
+          print(f"PASS: {len(wheels)} wheel(s) verified — no .py source files")
+
+      - name: Record wheel SHA256 (artifact integrity)
+        shell: python
+        run: |
+          import glob, hashlib, pathlib, sys
+          dist = pathlib.Path("${{ inputs.package_path }}") / "dist"
+          wheels = sorted(dist.glob("*.whl"))
+          if not wheels:
+              print("ERROR: no wheels to hash", file=sys.stderr)
+              sys.exit(1)
+          lines = []
+          for w in wheels:
+              h = hashlib.sha256(w.read_bytes()).hexdigest()
+              line = f"{h}  {w.name}"
+              print(line)
+              lines.append(line)
+          (dist / "sha256sums.txt").write_text("\n".join(lines) + "\n", encoding="utf-8")
+
+      - name: Upload wheel artifacts
+        uses: actions/upload-artifact@b4b15b8c7c6ac21ea08fcf65892d2ee8f75cf882 # v4.4.3
+        with:
+          name: wheels-${{ matrix.os }}
+          path: ${{ inputs.package_path }}/dist/*.whl
+          if-no-files-found: error
+
+  # ─────────────────────────────────────────────────────────────────────────────
+  # Collect all platform wheels, run supply-chain checks, publish to PyPI.
+  # Uses Trusted Publisher (OIDC) — no long-lived PyPI API tokens needed.
+  # Configure on PyPI: Settings → Publishing → Add Publisher (GitHub, this repo,
+  # workflow name = "Publish Node Wire package").
+  # ─────────────────────────────────────────────────────────────────────────────
+  publish:
+    name: Publish to PyPI
+    needs: build-wheels
+    runs-on: ubuntu-latest
+    permissions:
+      id-token: write # Required for Trusted Publisher OIDC
+      contents: read
+
+    steps:
+      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+
+      - name: Set up Python
+        uses: actions/setup-python@v5.3.0
+        with:
+          python-version: "3.11"
+
+      - name: Download all wheel artifacts
+        uses: actions/download-artifact@v4
+        with:
+          path: dist-all
+
+      - name: Flatten into dist/ directory
+        run: |
+          mkdir -p dist
+          find dist-all -name "*.whl" -exec cp {} dist/ \;
+          echo "Wheels collected:"
+          ls dist/
+          sha256sum dist/*.whl | tee dist/sha256sums.txt
+
+      - name: Validate wheel version matches input
+        shell: python
+        run: |
+          import glob, sys
+
+          expected = "${{ inputs.version }}"
+          wheels = glob.glob("dist/*.whl")
+          if not wheels:
+              print("ERROR: No wheels found for publish", file=sys.stderr)
+              sys.exit(1)
+
+          bad = [w for w in wheels if f"-{expected}-" not in w and f"-{expected.replace('.', '_')}-" not in w]
+          if bad:
+              print(f"ERROR: Version mismatch. Expected {expected!r} in filename.", file=sys.stderr)
+              for w in bad:
+                  print(f"  {w}", file=sys.stderr)
+              sys.exit(1)
+
+          print(f"PASS: {len(wheels)} wheel(s) match version {expected!r}")
+
+      - name: Install built wheels for CVE scan
+        run: pip install dist/*.whl
+
+      - name: Vulnerability scan (CVE gate — blocks publish on HIGH or higher)
+        run: |
+          pip install "pip-audit==${{ env.PIP_AUDIT_VERSION }}"
+          pip-audit --fail-on HIGH
+
+      - name: Generate SBOM
+        run: |
+          pip install "cyclonedx-bom==${{ env.CYCLONEDX_BOM_VERSION }}"
+          cyclonedx-py environment -o sbom.json
+          echo "SBOM generated: sbom.json"
+
+      - name: Upload SBOM as release artifact
+        uses: actions/upload-artifact@b4b15b8c7c6ac21ea08fcf65892d2ee8f75cf882 # v4.4.3
+        with:
+          name: sbom-${{ inputs.version }}
+          path: sbom.json
+
+      - name: Publish to PyPI (Trusted Publisher / OIDC + Sigstore attestations)
+        uses: pypa/gh-action-pypi-publish@76f52bc884231f62b9a034ebfe128415bbaabdfc # v1.12.4
+        with:
+          packages-dir: dist/
+          # attestations: true generates a Sigstore attestation automatically.
+          # Clients can verify with: pip download <pkg> && python -m pypi_attestation_viewer <whl>
+          attestations: true