Community edition — free tier features

Synced from private repo. Enterprise/Pro features available at gozerai.com.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

Author: chrisarseno

.env.example

@@ -0,0 +1,57 @@
+# Vinzy-Engine Configuration
+# Copy this file to .env and fill in your values
+
+# Environment
+VINZY_ENVIRONMENT=development
+
+# Security Keys (CHANGE THESE IN PRODUCTION)
+VINZY_SECRET_KEY=change-me-to-a-random-secret
+VINZY_HMAC_KEY=change-me-to-a-random-hmac-key
+VINZY_API_KEY=change-me-to-a-random-api-key
+VINZY_SUPER_ADMIN_KEY=change-me-to-a-random-super-admin-key
+
+# HMAC Keyring (JSON dict for key rotation)
+# VINZY_HMAC_KEYS={"0": "primary-key", "1": "rotated-key"}
+
+# Database
+VINZY_DB_URL=sqlite+aiosqlite:///./data/vinzy.db
+
+# Server
+VINZY_HOST=0.0.0.0
+VINZY_PORT=8080
+VINZY_API_PREFIX=
+
+# CORS
+# VINZY_CORS_ORIGINS=["http://localhost:3000","http://localhost:8000"]
+
+# Licensing Defaults
+VINZY_DEFAULT_MACHINES_LIMIT=3
+VINZY_DEFAULT_LICENSE_DAYS=365
+VINZY_HEARTBEAT_INTERVAL=3600
+
+# Lease Settings
+VINZY_LEASE_TTL=86400
+VINZY_LEASE_OFFLINE_TTL=259200
+
+# Pagination
+VINZY_DEFAULT_PAGE_SIZE=20
+VINZY_MAX_PAGE_SIZE=100
+
+# ── Zuultimate Integration ──
+VINZY_ZUULTIMATE_BASE_URL=http://zuultimate:8000
+VINZY_ZUULTIMATE_SERVICE_TOKEN=change-me-to-a-random-service-token
+
+# ── Product Callbacks (notify products after provisioning completes) ──
+# JSON map: product code → webhook URL
+# VINZY_PRODUCT_CALLBACKS={"ARC": "http://arclane:8012/api/billing/provision-complete"}
+VINZY_PRODUCT_CALLBACKS=
+VINZY_PRODUCT_CALLBACK_TOKEN=
+
+# ── Stripe ──
+# VINZY_STRIPE_SECRET_KEY=sk_live_...
+# VINZY_STRIPE_WEBHOOK_SECRET=whsec_...
+# VINZY_STRIPE_PRICE_MAP={"arclane_pro_monthly": "price_...", "arclane_enterprise_monthly": "price_..."}
+
+# ── Email (for license delivery) ──
+# VINZY_EMAIL_PROVIDER=resend
+# VINZY_EMAIL_API_KEY=re_...

.github/workflows/ci.yml

@@ -0,0 +1,34 @@
+name: CI
+
+on:
+  push:
+    branches: [main]
+  pull_request:
+    branches: [main]
+
+jobs:
+  test:
+    runs-on: ubuntu-latest
+    strategy:
+      matrix:
+        python-version: ["3.11", "3.12"]
+
+    steps:
+      - uses: actions/checkout@v4
+
+      - name: Set up Python ${{ matrix.python-version }}
+        uses: actions/setup-python@v5
+        with:
+          python-version: ${{ matrix.python-version }}
+
+      - name: Install dependencies
+        run: |
+          python -m pip install --upgrade pip
+          pip install -e ".[dev]"
+
+      - name: Run tests
+        run: pytest tests/ -v --tb=short --cov --cov-report=term-missing
+
+      - name: Verify migrations
+        run: |
+          PYTHONPATH=src alembic -x sqlalchemy.url=sqlite:///tmp_ci.db upgrade head

.github/workflows/security.yml

@@ -0,0 +1,40 @@
+name: Security
+
+on:
+  push:
+    branches: [master, main]
+  pull_request:
+    branches: [master, main]
+  schedule:
+    - cron: '0 9 * * 1'  # Weekly Monday 9am UTC
+
+jobs:
+  dependency-scan:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+      - uses: actions/setup-python@v5
+        with:
+          python-version: "3.13"
+      - name: Install dependencies
+        run: |
+          pip install pip-audit safety
+          pip install -e ".[dev]" 2>/dev/null || pip install -e "." 2>/dev/null || true
+      - name: Pip audit
+        run: pip-audit --strict --desc || true
+        continue-on-error: true
+      - name: Safety check
+        run: safety check || true
+        continue-on-error: true
+
+  code-scan:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+      - uses: actions/setup-python@v5
+        with:
+          python-version: "3.13"
+      - name: Install bandit
+        run: pip install bandit
+      - name: Run bandit
+        run: bandit -r src/ -ll -ii || bandit -r . -ll -ii --exclude ./tests,./venv,./.venv || true

.gitignore

@@ -0,0 +1,62 @@
+# Python
+__pycache__/
+*.py[cod]
+*.class
+*.so
+*.egg-info/
+*.egg
+dist/
+build/
+.eggs/
+
+# Virtual environments
+.venv/
+venv/
+env/
+ENV/
+
+# IDE / Editors
+.idea/
+.vscode/
+*.swp
+*.swo
+*~
+.project
+.settings/
+
+# Testing / Coverage
+.pytest_cache/
+.coverage
+htmlcov/
+coverage.xml
+*.cover
+.hypothesis/
+.mypy_cache/
+.ruff_cache/
+
+# Environment / Secrets
+.env
+.env.*
+!.env.example
+
+# Runtime data
+data/
+logs/
+*.log
+*.db
+*.sqlite
+*.sqlite3
+
+# OS files
+.DS_Store
+Thumbs.db
+Desktop.ini
+
+# Distribution
+*.tar.gz
+*.whl
+
+# Temporary files
+tmp/
+temp/
+*.tmp

.mailmap

@@ -0,0 +1 @@
+Chris Arsenault <info@gozerai.com>

CHANGELOG.md

@@ -0,0 +1,23 @@
+# Changelog
+
+All notable changes to this project will be documented in this file.
+
+The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/),
+and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
+
+## [0.1.0] - 2026-02-22
+
+### Added
+
+- Initial public release
+- HMAC-signed cryptographic key generation and validation
+- License lifecycle management (create, activate, deactivate, expire)
+- Agent entitlement system with per-agent feature resolution
+- Cross-product license composition (sum/max/union strategies)
+- Delegation-aware usage metering
+- Behavioral anomaly detection (z-score analysis)
+- Cryptographic audit trail with hash chain verification
+- Signed leases for offline validation
+- Multi-tenant support with scoped queries
+- Admin dashboard and CLI tools
+- RESTful API with FastAPI

COMMERCIAL-LICENSE.md

@@ -0,0 +1,43 @@
+# Commercial License
+
+## Dual Licensing
+
+This project is available under two licenses:
+
+1. **GNU Affero General Public License v3.0 (AGPL-3.0)** — for open-source use
+2. **Commercial License** — for proprietary/commercial use
+
+## When You Need a Commercial License
+
+The AGPL-3.0 requires that if you run a modified version of this software as a network service, you must make your complete source code available to users of that service. A commercial license removes this obligation.
+
+**You need a commercial license if you:**
+
+- Use this software in a proprietary SaaS product or internal service
+- Want to modify the software without sharing your changes
+- Cannot comply with AGPL-3.0 obligations in your organization
+- Need commercial support, SLA guarantees, or custom features
+
+**You do NOT need a commercial license if you:**
+
+- Use the software for personal or educational purposes
+- Contribute back all modifications under AGPL-3.0
+- Run the software internally and comply with AGPL-3.0 terms
+
+## Obtaining a Commercial License
+
+For commercial licensing inquiries, contact:
+
+- Email: licensing@gozerai.com
+- GitHub: [@chrisarseno](https://github.com/GozerAI)
+
+## What the Commercial License Includes
+
+- Perpetual license for the purchased version
+- Permission to use in proprietary products without source disclosure
+- Priority support and bug fixes
+- Access to private channels for integration assistance
+
+## Copyright
+
+Copyright (c) 2025-2026 Chris Arsenault / GozerAI. All rights reserved.

CONTRIBUTING.md

@@ -0,0 +1,81 @@
+# Contributing to Vinzy-Engine
+
+Thank you for your interest in contributing! This guide will help you get started.
+
+## Getting Started
+
+### Prerequisites
+
+- Python >=3.11
+- Git
+
+### Setup
+
+1. **Fork** the repository on GitHub
+2. **Clone** your fork:
+   ```bash
+   git clone https://github.com/YOUR-USERNAME/vinzy-engine.git
+   cd vinzy-engine
+   ```
+3. **Create a virtual environment**:
+   ```bash
+   python -m venv .venv
+   source .venv/bin/activate  # Linux/macOS
+   .venv\Scripts\activate     # Windows
+   ```
+4. **Install dependencies**:
+   ```bash
+   pip install -e ".[dev]"
+   ```
+
+## Development Workflow
+
+1. Create a feature branch:
+   ```bash
+   git checkout -b feature/your-feature-name
+   ```
+2. Make your changes
+3. Run the test suite:
+   ```bash
+   pytest tests/ -q
+   ```
+4. Commit your changes using [Conventional Commits](https://www.conventionalcommits.org/):
+   ```bash
+   git commit -m "feat: add new feature"
+   ```
+5. Push to your fork and open a Pull Request
+
+### Commit Message Format
+
+- `feat:` — New feature
+- `fix:` — Bug fix
+- `docs:` — Documentation only
+- `test:` — Adding or updating tests
+- `refactor:` — Code change that neither fixes a bug nor adds a feature
+- `chore:` — Maintenance tasks
+
+## Code Style
+
+- Format with [black](https://github.com/psf/black) (line length 100)
+- Lint with [ruff](https://github.com/astral-sh/ruff)
+
+## Security
+
+If you discover a security vulnerability, please see [SECURITY.md](SECURITY.md) for responsible disclosure instructions.
+
+## Pull Request Process
+
+1. Ensure all tests pass
+2. Update documentation if needed
+3. Keep PRs focused — one feature or fix per PR
+4. Write a clear description of what changed and why
+
+## Reporting Issues
+
+- Use GitHub Issues to report bugs or request features
+- Include steps to reproduce for bug reports
+- Check existing issues before opening a new one
+
+## License
+
+By contributing, you agree that your contributions will be licensed under the [AGPL-3.0 License](LICENSE).