Supply Chain Monkey is one repository and one PyPI distribution with two supported surfaces: a consumer client library and a deployed FastAPI supplier service.
The PyPI distribution is supply-chain-monkey. The import
package is scm.
src/py/scm/models.py owns public response contracts.src/py/scm/client.py owns the reusable consumer HTTP client.src/py/scm/server/ owns the FastAPI app, credentials, and providers.tests/L0_foundation/ owns fast contract coverage.tests/L99_signoff/ owns release and deployment gates.
dev is the integration branch. main is the public
source branch. production is the Wavenumber Appliku deployment
branch and must be updated only through protected PR/merge flow.
Runtime credentials are environment variables owned by the deployment host. Provider modules must not load local files or mutate environment state at import time.