[AAASM-2714] 🔧 (python-sdk): Harmonize FFI infra — native/ dir + committed Cargo.lock

[Chisanan232]

Description

Harmonizes the Python SDK's native FFI packaging with node-sdk and go-sdk. Two infra-only changes — no behavior, API, or build semantics changed:

1. Moved the PyO3 crate rust/aa-ffi-python/ → native/aa-ffi-python/, mirroring node-sdk/native/aa-ffi-node and go-sdk/native/aa-ffi-go. The redundant single-member rust/Cargo.toml workspace wrapper was dropped; the crate is now standalone (all dep versions explicit, no workspace inheritance), exactly like aa-ffi-node.
2. Committed the crate's Cargo.lock (previously gitignored) for reproducible native builds, matching node-sdk/native/aa-ffi-node/Cargo.lock. The .gitignore now scopes to native/**/target/.

All path references were repointed: pyproject.toml ([tool.maturin].manifest-path), native-core-build.yml (path trigger + manifest-path), dependabot.yml (cargo directory), the maturin integration test, agent_assembly/types.py build-hint docstrings, and the docs (README, CONTRIBUTING, architecture/compatibility/troubleshooting, incl. the GitHub blob link). Historical verification-reports/*.md are left as point-in-time records.

Deliberately NOT changed (per ticket scope): pyo3 0.28 + extension-module, the 3-crate git-SHA pin (aa-core/aa-proto/aa-sdk-client @ 9cf8a033…), crate-type = ["cdylib"], and org URL casing (separate ticket).

Type of Change

• ♻️ Refactoring

Breaking Changes

• No

Related Issues

• Related JIRA ticket: AAASM-2714 (subtasks AAASM-2716 impl, AAASM-2717 verify)

Closes AAASM-2714.

Testing

• Integration tests added/updated (test_native_core_maturin.py manifest-path)
• Manual testing performed

Verified on macOS arm64 / CPython 3.13:

• git grep 'rust/aa-ffi-python' → no matches outside historical reports; rust/ dir removed; Cargo.lock tracked.
• cargo check --locked (native/aa-ffi-python) → resolves from committed lock, compiles.
• uv sync + maturin develop --manifest-path native/aa-ffi-python/Cargo.toml → built/installed agent_assembly._core.
• uv run pytest test/ -q → 423 passed, 7 skipped.
• AAASM_RUN_MATURIN_TESTS=1 pytest test_native_core_maturin.py → 1 passed (drives a real maturin build via the new path).

See verification-reports/AAASM-2714.md.

Checklist

• Code follows project style guidelines
• Self-review completed
• Documentation updated if needed
• All tests passing

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.

📢 Thoughts on this report? Let us know!

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

[Chisanan232]

Review — Claude Code

CI: ✅ All green incl. CI Success, build-native-core, the full build-and-test matrix, SonarCloud, and codecov/patch (e2e jobs correctly skipped on PR).

Scope vs AAASM-2714 (harmonize FFI infra to match node-sdk — native/ dir + committed Cargo.lock): ✅ Complete + verified.

• rust/aa-ffi-python → native/aa-ffi-python; the orphan single-member rust/Cargo.toml workspace removed so the crate compiles standalone (true parity with node-sdk's aa-ffi-node).
• native/aa-ffi-python/Cargo.lock committed; .gitignore now ignores native/**/target/.
• maturin manifest-path, native-core-build.yml PR trigger (rust/**→native/**), and dependabot cargo directory all repointed.
• Untouched as scoped: pyo3 0.28, the 3-crate git-SHA pin, crate-type, and org casing.

Local: cargo check --locked ✅, uv sync ✅, maturin develop ✅, pytest 423 passed / 7 skipped, gated maturin smoke test ✅.

Verdict: ✅ Ready for approval + merge. Note: AAASM-2721 (python-sdk org-casing) is intentionally sequenced to begin after this merges, to avoid a same-repo conflict.