Skip to main content

Official UMF Python support

umf-core provides the umf import namespace for the current UMF language. The authored spec/metamodel/umf.yaml generates the packaged JSON Schemas, portable constraint programs and Python shape data. Pydantic provides access models; it does not define a competing format. Consumer extensions and execution policies remain in consumer repositories.

Historical Core 0.10.0 pure-Python wheel:

pip install https://github.com/DocumentDrivenDX/umf/releases/download/umf-v0.5.1/umf_core-0.10.0-py3-none-any.whl

The URL above is a historical artifact and does not identify the current native runtime. Core 0.10.2 is published through the GitHub release and PyPI. Its publication path is configured and verified; its evidence does not qualify CPython 3.14. The development source builds a platform-specific native Rust extension instead:

rustup toolchain install 1.90.0
pip install ./python

Building from a checkout or source distribution requires Cargo/Rust 1.90.0 and the locked Cargo dependencies. An installed native wheel does not require Cargo, Node, Bun or V8. Native import failures are explicit; there is no semantic fallback. Pydantic remains the Python access-model dependency. This development change does not publish or replace the release linked above.

The separately distributed experimental umf_access host adapter is not required to read or validate UMF documents.

Development candidate distribution version 0.10.3 is distinct from the UMF document/core version 0.10.0. The existing 0.10.0 pure-Python wheel linked above is metadata-only for native execution and does not provide the single-SET action runtime. The source package now exposes create_action_engine, prepare_single_set_action, admit_generated_action_invocation, and admit_generated_record_values; their bounded admission profile is specified by CONTRACT-906. No installation URL for the 0.10.3 candidate native wheel is listed until its platform-specific release assets are published and qualified. The 0.10.3 package metadata admits Python >=3.11,<3.15, matching the versioned Python 3.11–3.14 profiles; the native engine continues to refuse unsupported future minors explicitly.

from umf import read_document, validate_document, write_document

document = read_document('''
umf: "0.10.0"
id: orders
vocabularies: {}
modules: []
''', format="yaml")
result = validate_document(document)
assert result.valid and result.complete
# Unknown or unregistered extension meaning can instead make complete false.
text = write_document(document, format="yaml")
assert read_document(text, format="yaml").to_dict() == document.to_dict()

Use canonical camelCase property names when constructing models. to_dict() preserves unknown content and field presence; checked_copy() revalidates mutable model state. Current APIs accept core 0.10.0; retired core dispatch and upgrade/rollback paths are removed. Structural checks and ordered core semantic constraints use generated data through bounded generic interpreters. Installed Python and TypeScript share 139 frozen conformance vectors; this is not a claim of parity for every TypeScript adapter or native execution API.

Unknown vocabulary versions, labels and qualifiers remain serializable and make interpretation incomplete. Consumers must refuse execution when their binding cannot interpret required semantics. Exact numeric token carriers, UUID/128-bit carriers, explicit null and omission retain their separate meanings.

Extensions register explicitly through Registry and Extension with exact versions, permitted scopes, a JSON Schema and optional semantic callback. Callbacks receive copies; schema references must be local. Documents never authorize loading code or fetching schemas. schema_validator() is reusable for consumer-owned schemas and honors their declared dialect.

The R2 Rust-backed production hosts and their resource controls are described in bindings/core/README.md. Ordinary UMF values retain the portable safe-number/UTF-16 profile. Standalone Python consumer-schema validation uses a separate native Python value profile; exact tested runtime versions and compatibility limits belong to the R2 qualification evidence.

The additive R3 compiler is available as from umf.rust_codegen import CodegenEngine. Construct it with the nine explicit trusted resources described in the binding README. Its snake_case convenience methods cover both generators, access diffing, table deployment/migration compilation and verification, change discovery and row-scope normalization. call() retains the complete semantic result envelope; convenience methods raise UmfCodegenError for semantic failures. Cooperative controls use the same operation context through admission, Rust and result copies. The existing umf_codegen default CLI and its MiniRacer dependency remain until R4.

Run python -m pytest python/tests from the repository root. Build with uv build --project python. The source distribution includes the current generated resources and supports building a wheel without the repository. Release checks install the actual wheel in an isolated environment, compare its packaged resource bytes and replay the shared core conformance corpus.

Metadata

Release files for umf-core 0.10.3

For a detailed explanation of source distributions (sdists) and built distributions (wheels), please see the package formats documentation.

Source distribution (sdist)

Source distribution for umf-core 0.10.3
File Size Uploaded Provenance
umf_core-0.10.3.tar.gz 2.8 MB With provenance Details

Built distributions (wheels)

Table of built distributions (wheels) for umf-core 0.10.3
File Interpreter ABI Platform
umf_core-0.10.3-cp311-abi3-manylinux_2_34_x86_64.whl CPython 3.11 abi3 Linux glibc 2.34+ x86-64 Details
umf_core-0.10.3-cp311-abi3-macosx_11_0_arm64.whl CPython 3.11 abi3 macOS 11.0+ ARM64 Details

Total release size: 9.8 MB

Release files / umf_core-0.10.3.tar.gz

Download URL umf_core-0.10.3.tar.gz
Size 2.8 MB
Tags Source
SHA-256 checksum
How to use checksums
61b3e12a84f68f890fa34e2da14bbda47e101b7c6eadd5207680827e8daa694c
BLAKE2b-256 checksum
How to use checksums
85765c61b172236838ef2e9d3b296caaa8ab841dd628eb68f05e4d08b28cbd89
Upload date
Uploaded using Trusted Publishing?
What is trusted publishing?
Yes
Uploaded via twine/7.0.0 CPython/3.13.16

Provenance

Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.

PyPI Publish Attestation

PyPI verified that this artifact, at this checksum, originated from the publisher listed below.

Signed by GitHub Actions, verified by PyPI on Oct 27, 2026.

Transparency log

Release files / umf_core-0.10.3-cp311-abi3-manylinux_2_34_x86_64.whl

Download URL umf_core-0.10.3-cp311-abi3-manylinux_2_34_x86_64.whl
Size 3.6 MB
Tags CPython 3.11 Linux glibc 2.34+ x86-64 abi3
SHA-256 checksum
How to use checksums
cd35f255900ec122e5e2d47d1fbac658cc127d3f16ba82e643e199b7d8cebd75
BLAKE2b-256 checksum
How to use checksums
6bfe724685bfa20da89a845d7558299d514ab11f8f7d08d17c808cd8ad4ef105
Upload date
Uploaded using Trusted Publishing?
What is trusted publishing?
Yes
Uploaded via twine/7.0.0 CPython/3.13.16

Provenance

Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.

PyPI Publish Attestation

PyPI verified that this artifact, at this checksum, originated from the publisher listed below.

Signed by GitHub Actions, verified by PyPI on Oct 27, 2026.

Transparency log

Release files / umf_core-0.10.3-cp311-abi3-macosx_11_0_arm64.whl

Download URL umf_core-0.10.3-cp311-abi3-macosx_11_0_arm64.whl
Size 3.3 MB
Tags CPython 3.11 abi3 macOS 11.0+ ARM64
SHA-256 checksum
How to use checksums
dc2586793e1492d1f825bd9e12f27d5db9f9330ae2343d9e7773c7052f1f6ea6
BLAKE2b-256 checksum
How to use checksums
e85a38995576356367e00591358a9d969ecd52149584dd3648de6a39b29cb9be
Upload date
Uploaded using Trusted Publishing?
What is trusted publishing?
Yes
Uploaded via twine/7.0.0 CPython/3.13.16

Provenance

Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.

PyPI Publish Attestation

PyPI verified that this artifact, at this checksum, originated from the publisher listed below.

Signed by GitHub Actions, verified by PyPI on Oct 27, 2026.

Transparency log

Security for umf-core 0.10.3

Provenance

Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.

Full provenance

All 3 files in this release have been uploaded with provenance metadata.

Select from 3 files

Attestation for umf_core-0.10.3.tar.gz

PyPI Publish Attestation

PyPI verified that this artifact, at this checksum, originated from the publisher listed below.

Signed by GitHub Actions, verified by PyPI on Oct 27, 2026.

Transparency log

A note on package security

PyPI is a repository for distributing packages, not a service for auditing them. While third-party security researchers and our staff do their best to detect and remove malicious packages, PyPI cannot guarantee the quality, security or suitability of any given package.

To learn more about protecting yourself from malicious actors, visit our package security documentation.

Anthropic, PBC Visionary sponsor Bloomberg Visionary sponsor Hudson River Trading Visionary sponsor Meta Visionary sponsor NVIDIA Visionary sponsor Microsoft Sustainability sponsor Depot Continuous Integration AWS Cloud computing and Security Sponsor Datadog Monitoring Fastly CDN Google Download Analytics Sentry Error logging StatusPage Status page