@techwavedev/agi-agent-kit 1.6.0 → 1.6.3

package/CHANGELOG.md

@@ -5,6 +5,71 @@ All notable changes to this project will be documented in this file.
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
 and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [1.6.3] - 2026-03-14
+
+### Added
+
+- **MCP Compatibility Layer** — The framework is now consumable as MCP servers by Claude Desktop, Antigravity, Cursor, Copilot, OpenCode, OpenClaw, and any MCP-compatible client. Two servers provided:
+  - `execution/mcp_server.py` (`agi-framework`) — 13 tools covering the full execution layer: memory auto-query, store, retrieve, cache, list, cross-agent coordination (store/sync/status/handoff/broadcast/pending), and session health check.
+  - `skills/qdrant-memory/mcp_server.py` (`qdrant-memory`) — 6 tools wrapping the skill's Python modules directly (no subprocess, no external package).
+- **MCP Skill Scaffolding** — `init_skill.py` now auto-generates `mcp_server.py` + `mcp_tools.json` for every new skill. Template lives at `skill-creator/templates/mcp_server_template.py`.
+
+- **Kiro (AWS) compatibility** — Added `.kiro/steering/agents.md` symlink → `AGENTS.md`. Kiro now loads the same agent instructions as Claude Code, Antigravity, and all other coding agents.
+
+### Design Decision
+
+MCP support is **purely additive** — no existing files modified, no validator changes. Rationale: `quick_validate.py` enforces an allowlist `{name, description, license, allowed-tools, metadata}`; adding new top-level SKILL.md keys would break all existing skills. MCP lives in separate files (`mcp_server.py`, `mcp_tools.json`) alongside the skill structure. The `metadata:` field (already allowed) is available for lightweight MCP hints.
+
+**MCP scope clarification:** All coding agents with bash access (Antigravity, Claude Code, Kiro, Cursor, OpenCode, Copilot) were already fully compatible via the symlinked `AGENTS.md`. Agent teams, sub-agents, skills, and memory all work natively for these agents. MCP is only needed for pure chat interfaces (Claude Desktop, etc.) with no bash execution capability.
+
+### Documentation
+
+- **`docs/mcp-compatibility.md`** — New. Full MCP reference: tool catalog, client compatibility matrix, architecture decision rationale, setup for all agents.
+- **`skills/qdrant-memory/SKILL.md`** — Updated MCP Quick Start section to reference `mcp_server.py` instead of the external `@qdrant/mcp-server-qdrant` package.
+- **`AGENTS.md`** — Added MCP Servers table under Framework Self-Development → Key Scripts.
+- **`docs/execution/mcp_server.md`** — New. Documents all 13 tools, transport protocol, environment variables.
+- **`skills/SKILLS_CATALOG.md`** — Regenerated; `qdrant-memory` now shows `MCP Server: mcp_server.py` row.
+
+## [1.6.2] - 2026-03-14
+
+### Added
+
+- **Contextual AGI Integration Blocks (1,200 Extended Skills)** — All 1,200 extended skills in `templates/skills/extended/` now include contextually adapted AGI Framework Integration blocks. Each block is domain-specific and provides: Memory-First Protocol (skill-specific Qdrant queries), Storing Results (concrete real-world examples), Multi-Agent Collaboration (skill-specific cross-agent sharing), and a 4th domain-specific section (e.g., Token Versioning for design-system, Brand Source of Truth for brand, Signed Audit Trail for security, Playbook Integration for devops, Asset Registry for banner design).
+
+### Fixed
+
+- **Python 3.11 f-string compatibility** — Resolved `SyntaxError` in `templates/skills/extended/frontend/ui-ux-pro-max/scripts/design_system.py`: backslash inside f-string expression extracted to intermediate variable.
+
+## [1.6.1] - 2026-03-14
+
+### Added
+
+- **Distributed Agent Authentication** — Replaced local SQLite auth storage with shared Qdrant `agent_auth` collection. Identities, access grants, content hashes, and audit trails are now distributed across all agents sharing a Qdrant instance. 8 payload indexes for efficient filtering. Deterministic UUIDs for idempotent operations. (36/36 tests)
+- **Hyperledger Aries Integration** — Replaced deprecated MultiChain with Hyperledger Aries ACA-Py 1.5.0 (OpenWallet Foundation). W3C DID identity, Ed25519 signing, official Docker image (`ghcr.io/openwallet-foundation/acapy-agent:1.5.0`). Optional add-on — HMAC-SHA256 works without Aries.
+- **Memory Mode Tiers** — Three operational modes (`MEMORY_MODE`): Solo (single user), Team (multi-tenancy with developer isolation), Pro (blockchain auth + access control). All backward-compatible, no data migration needed.
+- **Real-Time Agent Events** — Apache Pulsar event bus for push notifications between agents. Auto-publishes on `memory_manager.py store` (team/pro modes). 9 event types. Project-scoped topics (`persistent://agi/memory/<project>`). Graceful degradation when Pulsar unavailable. (19/19 tests)
+- **BM25 Auto-Sync on Boot** — `session_boot.py` now automatically syncs the local BM25 keyword index from shared Qdrant data, ensuring every machine has consistent hybrid search results.
+- **Docker Compose for Pulsar** — `docker-compose.pulsar.yml` with `apachepulsar/pulsar:4.1.3`, lightweight standalone mode (256-512MB heap), health checks.
+- **Docker Compose for Aries** — `docker-compose.aries.yml` with official ACA-Py 1.5.0 image, wallet configuration.
+
+### Changed
+
+- **`blockchain_auth.py`** — Complete rewrite: `QdrantAuthStore` replaces SQLite, `AriesClient` replaces MultiChain. All auth data stored in shared Qdrant collection.
+- **`session_boot.py`** — Now reports Pulsar status, Aries status, and BM25 sync results. Auto-syncs BM25 from Qdrant on every boot.
+- **`memory_manager.py`** — Auto-publishes Pulsar events on store (team/pro). Health check includes events status.
+- **`session_init.py`** — Creates `agent_auth` Qdrant collection with 4-dimensional vectors and 8 payload indexes.
+
+### Documentation
+
+- **`docs/memory-modes.md`** — Complete rewrite. Why each mode, when to use, scenario comparisons, data storage table. Every feature verified with test evidence.
+- **`docs/blockchain-auth.md`** — Complete rewrite. Technology comparison (MultiChain vs Ethereum vs Aries), Qdrant vs SQLite rationale, trust model diagram, all CLI commands verified.
+- **`docs/agent-events.md`** — Complete rewrite. Pulsar vs Redis/RabbitMQ/Kafka comparison, verified capabilities table, corrected dependency requirements.
+
+### Removed
+
+- **MultiChain** — Deprecated (last commit 2023, no maintained Docker image). Replaced by Hyperledger Aries.
+- **SQLite auth storage** — Replaced by shared Qdrant `agent_auth` collection for distributed consistency.
+
 ## [1.6.0] - 2026-03-12
 
 ### Added

package/README.md

@@ -80,13 +80,16 @@ python3 skills/plugin-discovery/scripts/platform_setup.py --project-dir .
 | Feature                       | Description                                                                                   |
 | ----------------------------- | --------------------------------------------------------------------------------------------- |
 | **Deterministic Execution**   | Separates business logic (Python scripts) from AI reasoning (Directives)                      |
-| **Modular Skill System**      | 1,191 plug-and-play skills across 3 tiers, organized in 16 domain categories                  |
+| **Modular Skill System**      | 1,191+ plug-and-play skills across 3 tiers, organized in 16 domain categories                 |
+| **Memory Mode Tiers**         | Solo → Team → Pro: start simple, add multi-tenancy and auth as needed — no data migration     |
+| **Distributed Agent Auth**    | HMAC-SHA256 signing, hash anchoring, project access control via shared Qdrant (Hyperledger Aries optional) |
+| **Real-Time Agent Events**    | Apache Pulsar event bus for push notifications between agents — graceful degradation if unavailable |
+| **Hybrid Memory**             | Qdrant vectors + BM25 keywords with weighted score merge (95% token savings)                  |
+| **Platform-Adaptive**         | Auto-detects Claude Code, Gemini CLI, Codex CLI, Cursor, Copilot, OpenCode, AdaL, Antigravity |
+| **Multi-Agent Orchestration** | Agent Teams, subagents, Powers, or sequential personas — adapts to platform                   |
 | **Structured Plan Execution** | Batch or subagent-driven execution with two-stage review (spec + quality)                     |
 | **TDD Enforcement**           | Iron-law RED-GREEN-REFACTOR cycle — no production code without failing test                   |
 | **Verification Gates**        | Evidence before claims — no completion without fresh verification output                      |
-| **Platform-Adaptive**         | Auto-detects Claude Code, Gemini CLI, Codex CLI, Cursor, Copilot, OpenCode, AdaL, Antigravity |
-| **Multi-Agent Orchestration** | Agent Teams, subagents, Powers, or sequential personas — adapts to platform                   |
-| **Hybrid Memory**             | Qdrant vectors + BM25 keywords with weighted score merge (95% token savings)                  |
 | **Self-Healing Workflows**    | Agents read error logs, patch scripts, and update directives automatically                    |
 | **One-Shot Setup**            | Platform detection + project stack scan + auto-configuration in one command                   |
 
@@ -269,6 +272,87 @@ The system operates on three layers:
 
 ---
 
+## 🔐 Distributed Agent System
+
+The framework supports fully distributed agent deployments where multiple agents across different machines share context, authenticate writes, and receive real-time notifications — all through the shared Qdrant instance.
+
+### Memory Mode Tiers
+
+Set `MEMORY_MODE` in `.env` to choose your tier. All modes are backward-compatible — upgrade anytime without data migration.
+
+| Mode | Use Case | Infrastructure | Key Feature |
+|---|---|---|---|
+| **Solo** | Single developer, one agent | Ollama + Qdrant | Full hybrid search, semantic cache |
+| **Team** | Multiple agents sharing context | Same as Solo | Developer isolation + shared memories (`--shared`) |
+| **Pro** | Enterprise / high-trust | Same + optional Aries | Signed writes, hash anchoring, access control, audit trail |
+
+```bash
+# Solo: just works
+MEMORY_MODE=solo python3 execution/session_boot.py --auto-fix
+
+# Team: agents share context, each has private + shared memories
+MEMORY_MODE=team python3 execution/memory_manager.py store \
+  --content "Use Redis for session cache" --type decision --project myapp --shared
+
+# Pro: signed writes with tamper detection and access control
+MEMORY_MODE=pro python3 execution/blockchain_auth.py init
+python3 execution/blockchain_auth.py register --entity-type developer --entity-id you@co.com
+python3 execution/blockchain_auth.py grant --entity-id you@co.com --project myapp --permissions read,write
+python3 execution/memory_manager.py store --content "Decision" --type decision --project myapp --auth
+# → {"status": "stored", "signature": "...", "blockchain_anchor": {"status": "anchored"}, "event": {"status": "published"}}
+```
+
+### Blockchain Authentication (Pro Mode)
+
+Pro mode adds cryptographic verification to every write:
+
+- **HMAC-SHA256 signing** — every memory gets a signature at write-time
+- **Hash anchoring** — content hash stored in Qdrant `agent_auth` collection for tamper detection
+- **Project access control** — grant read/write per entity per project
+- **Audit trail** — who wrote what, when, with verification status
+- **W3C DID identity** (optional) — via Hyperledger Aries ACA-Py 1.5.0 (Apache 2.0)
+
+All auth data is stored in the shared Qdrant instance — no separate database needed. See [docs/blockchain-auth.md](./docs/blockchain-auth.md).
+
+### Real-Time Agent Events (Apache Pulsar)
+
+Optional add-on for team/pro modes. Without Pulsar, agents poll Qdrant on each query (~10ms). With Pulsar, events are pushed instantly.
+
+```bash
+# Start Pulsar (single container, ~256MB heap)
+docker compose -f docker-compose.pulsar.yml up -d
+pip install pulsar-client
+
+# Events auto-publish on memory store
+python3 execution/memory_manager.py store \
+  --content "Switched to PostgreSQL" --type decision --project myapp
+# → "event": {"status": "published", "topic": "persistent://agi/memory/myapp"}
+```
+
+If Pulsar is down, events are silently dropped — Qdrant stores always succeed. See [docs/agent-events.md](./docs/agent-events.md).
+
+### Architecture (Distributed)
+
+```text
+┌─ Machine 1 ──────────────────┐    ┌─ Machine 2 ──────────────────┐
+│  Agent A (Claude)            │    │  Agent B (Gemini)            │
+│  └─ memory_manager.py        │    │  └─ memory_manager.py        │
+│     ├─ Qdrant (shared) ──────┼────┼─── Qdrant (shared)          │
+│     ├─ BM25 (auto-synced) ◄──┼────┼─── BM25 (auto-synced)       │
+│     └─ Pulsar events ────────┼────┼──► Pulsar events             │
+└──────────────────────────────┘    └──────────────────────────────┘
+```
+
+Every component is sourced from the shared Qdrant:
+- **Memories & cache** — Qdrant `agent_memory` + `semantic_cache`
+- **Auth data** — Qdrant `agent_auth` (pro mode)
+- **BM25 keyword index** — local SQLite, auto-rebuilt from Qdrant on each `session_boot`
+- **Events** — Apache Pulsar (optional, graceful degradation)
+
+For full details: [docs/memory-modes.md](./docs/memory-modes.md) · [docs/blockchain-auth.md](./docs/blockchain-auth.md) · [docs/agent-events.md](./docs/agent-events.md)
+
+---
+
 ## 🧠 Hybrid Memory (BM25 + Vector)
 
 Dual-engine retrieval: Qdrant vector similarity for semantic concepts + SQLite FTS5 BM25 for exact keyword matching. Automatically merges results with configurable weights.
@@ -482,7 +566,10 @@ Use these keywords, commands, and phrases to trigger specific capabilities:
 ## 📚 Documentation
 
 - **[AGENTS.md](./AGENTS.md)** — Complete architecture and operating principles
-- **[skills/SKILLS_CATALOG.md](./templates/skills/SKILLS_CATALOG.md)** — Skill catalog
+- **[docs/memory-modes.md](./docs/memory-modes.md)** — Memory mode tiers (Solo / Team / Pro)
+- **[docs/blockchain-auth.md](./docs/blockchain-auth.md)** — Distributed auth with Hyperledger Aries
+- **[docs/agent-events.md](./docs/agent-events.md)** — Real-time events with Apache Pulsar
+- **[skills/SKILLS_CATALOG.md](./skills/SKILLS_CATALOG.md)** — Skill catalog
 - **[CHANGELOG.md](./CHANGELOG.md)** — Version history
 - **[THIRD-PARTY-LICENSES.md](./THIRD-PARTY-LICENSES.md)** — Third-party attributions
 
@@ -504,20 +591,22 @@ If these community skills help you, consider [starring the original repo](https:
 
 ---
 
-## �️ Roadmap
+## 🗺️ Roadmap
 
-| Feature                             | Status     | Description                                                                                                                                                                                                                                                           |
-| ----------------------------------- | ---------- | --------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
-| **Federated Agent Memory**          | 🔬 Design  | Cross-agent knowledge sharing via project-scoped Qdrant collections. Agents working on the same project read each other's decisions, errors, and patterns — building collective intelligence across sessions and platforms.                                           |
-| **Blockchain Agent Trust & Tenancy** | 🔬 Design  | Local, free blockchain layer (Hyperledger Fabric / MultiChain) for agent identity, trust, and tenant isolation. Agents sign writes, verify authorship before consuming shared context, and access is scoped to three tiers: Global (shared patterns, token savings), Tenant (project/team-locked), and Private (single-agent). Zero performance tax — validation is async at write-time, never blocking reads. |
-| **Event-Driven Agent Streaming**    | 🔬 Design  | Real-time cross-machine agent communication via Apache Pulsar. Agents publish decisions and observations to tenant-scoped topics with built-in multi-tenancy, enabling reactive workflows — e.g., a security agent triggers remediation when a vulnerability scan agent publishes findings. Pulsar's unified pub/sub + queuing and native geo-replication make it ideal for distributed agent meshes. |
-| **Control Tower Orchestrator**      | 🚧 Active  | Central dispatcher that tracks all active agents, sub-agents, teams, and LLMs across machines. Provides `register`, `heartbeat`, `assign`, `reassign`, and `dashboard` commands for global visibility and task distribution via Qdrant. |
-| **Secrets Management (Vault)**      | 🔬 Design  | HashiCorp Vault integration for secure secret sharing between agents. Agents authenticate via their blockchain identity (Ed25519 keypair), access tenant-scoped secrets (API keys, tokens, credentials), and never store secrets in Qdrant or on disk. Vault's dynamic secrets and lease-based access ensure zero long-lived credentials. |
-| **Workflow Engine**                 | 📋 Planned | Execute `data/workflows.json` playbooks as guided multi-skill sequences with progress tracking and branching logic.                                                                                                                                                   |
+| Feature                             | Status       | Description                                                                                                                                                                                                               |
+| ----------------------------------- | ------------ | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
+| **Federated Agent Memory**          | ✅ Shipped    | Cross-agent knowledge sharing via shared Qdrant. Multi-tenancy with developer isolation, `--shared` flag for team visibility. 15/15 tests. ([docs](./docs/memory-modes.md))                                               |
+| **Blockchain Agent Trust & Tenancy** | ✅ Shipped   | HMAC-SHA256 signed writes, hash anchoring, project access control, audit trail — all via shared Qdrant `agent_auth` collection. Optional W3C DID via Hyperledger Aries ACA-Py 1.5.0. 36/36 tests. ([docs](./docs/blockchain-auth.md)) |
+| **Event-Driven Agent Streaming**    | ✅ Shipped    | Apache Pulsar event bus with auto-publish on `memory_manager.py store`. Project-scoped topics, graceful degradation. 19/19 tests. ([docs](./docs/agent-events.md))                                                        |
+| **Memory Mode Tiers**               | ✅ Shipped    | Solo → Team → Pro progression. Backward-compatible upgrades, no data migration. BM25 auto-synced from shared Qdrant on boot. ([docs](./docs/memory-modes.md))                                                            |
+| **Control Tower Orchestrator**      | 🚧 Active    | Basic dispatcher for agent registration and heartbeat via Qdrant (`control_tower.py`). Needs dedicated docs, test coverage, and integration with `session_boot`.                                                          |
+| **Workflow Engine**                 | 📋 Planned   | Execute `data/workflows.json` playbooks as guided multi-skill sequences with progress tracking. Data schema exists, execution script not yet implemented.                                                                 |
+| **Platform-Adaptive Orchestration** | 🔬 Design    | Use platform-native orchestration when available (Anthropic Agent Teams, Gemini sub-agents) and fall back to Qdrant-based Control Tower dispatch otherwise. Unified interface across providers.                            |
+| **Secrets Management (Vault)**      | 🔬 Design    | HashiCorp Vault integration for secure secret sharing. Agents authenticate via Ed25519 keypair, access tenant-scoped secrets. Zero long-lived credentials.                                                                |
 
 ---
 
-## �🛡️ Security
+## 🛡️ Security
 
 This package includes a pre-flight security scanner that checks for private terms before publishing. All templates are sanitized for public use.
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@techwavedev/agi-agent-kit",
-  "version": "1.6.0",
+  "version": "1.6.3",
   "description": "Enterprise-Grade Agentic Framework - Modular skill-based AI assistant toolkit with deterministic execution, semantic memory, and platform-adaptive orchestration.",
   "bin": {
     "agi-agent-kit": "./bin/init.js"
@@ -40,4 +40,4 @@
   "engines": {
     "node": ">=16.0.0"
   }
-}
+}

package/templates/base/.env.example

@@ -69,3 +69,31 @@ SNYK_TOKEN=
 SENTRY_DSN=
 # Datadog API Key
 DD_API_KEY=
+
+# --- Memory Mode (solo / team / pro) ---
+# solo  = Ollama + Qdrant only (single developer, no identity tagging)
+# team  = + Multi-tenancy (developer/agent identity, shared memory, isolation)
+# pro   = + Blockchain auth (signed writes, hash anchoring, access control)
+MEMORY_MODE=team
+
+# Developer identity (optional — auto-detected from git config user.email)
+# AGI_DEVELOPER_ID=your@email.com
+# AGI_AGENT_ID=my-agent
+
+# --- Hyperledger Aries — Blockchain Auth (pro mode only, optional add-on) ---
+# Only needed if MEMORY_MODE=pro. Solo and team modes ignore these entirely.
+# Start with: docker compose -f docker-compose.aries.yml up -d
+ARIES_ADMIN_URL=http://localhost:8031
+ARIES_ADMIN_KEY=changeme_use_a_strong_api_key
+ARIES_WALLET_KEY=changeme_use_a_strong_wallet_key
+ARIES_HTTP_PORT=8030
+ARIES_ADMIN_PORT=8031
+
+# --- Apache Pulsar — Real-Time Events (team/pro, optional add-on) ---
+# Enables real-time event push between agents (auto-publish on memory store).
+# Without Pulsar, agents fall back to polling Qdrant (which always works).
+# Start with: docker compose -f docker-compose.pulsar.yml up -d
+PULSAR_URL=pulsar://localhost:6650
+PULSAR_HTTP_URL=http://localhost:8080
+PULSAR_PORT=6650
+PULSAR_HTTP_PORT=8080

package/templates/base/CHANGELOG.md

@@ -5,6 +5,16 @@ All notable changes to this project will be documented in this file.
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
 and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [1.5.4] - 2026-02-22
+
+### Added
+
+- **Agent Teams & Dynamic State Handoff** — Implemented an advanced, purely deterministic sub-agent orchestration framework (closes #20):
+  - **`dispatch_agent_team.py`** — New orchestrator dynamically chains multiple targeted sub-agents, handling state transfer without agent loops or hallucinations.
+  - **Dynamic State Handoff (Pattern 6)** — Agents can pass complex intermediate data schemas directly through Qdrant semantic memory, which is pulled into the context of the next agent automatically.
+  - **Orchestrator Enforcement** — Orchestrator reads `handoff_state` explicitly requiring `next_steps` and `validation_requirements`, validating that sub-agents correctly divide tasks and dictate downstream validation.
+  - **Comprehensive Test Harness** — `execution/run_test_scenario.py` runs 6 sequential and parallel test scenarios, evaluating orchestrator logic, cross-domain parallel runs, and failure-recovery paths.
+  - **Full Team Patterns** — Built `documentation_team` (Writer, Reviewer, Changelog. Updater), `code_review_team` (Spec, Quality), `qa_team`, and `build_deploy_team`.
 ## [1.6.0] - 2026-03-12
 
 ### Added

package/templates/base/docker-compose.aries.yml

@@ -0,0 +1,47 @@
+# Hyperledger Aries (ACA-Py) — Blockchain-Authenticated Agent Memory
+# Usage: docker compose -f docker-compose.aries.yml up -d
+# Credentials: set ARIES_ADMIN_KEY in your .env file
+
+services:
+  aries-agent:
+    image: ghcr.io/openwallet-foundation/acapy-agent:1.5.0
+    container_name: agi-aries-agent
+    ports:
+      - "${ARIES_HTTP_PORT:-8030}:8030"       # DIDComm endpoint
+      - "${ARIES_ADMIN_PORT:-8031}:8031"      # Admin REST API
+    environment:
+      ACAPY_ADMIN: "[0.0.0.0,8031]"
+      ACAPY_ADMIN_API_KEY: "${ARIES_ADMIN_KEY:-changeme_set_in_dotenv}"
+      ACAPY_ENDPOINT: "http://localhost:${ARIES_HTTP_PORT:-8030}"
+      ACAPY_LABEL: "AGI Memory Agent"
+      ACAPY_LOG_LEVEL: "info"
+      ACAPY_AUTO_PROVISION: "true"
+      ACAPY_WALLET_TYPE: "askar"
+      ACAPY_WALLET_NAME: "agi-memory-wallet"
+      ACAPY_WALLET_KEY: "${ARIES_WALLET_KEY:-changeme_wallet_key}"
+    command: >
+      start
+        --inbound-transport http 0.0.0.0 8030
+        --outbound-transport http
+        --admin 0.0.0.0 8031
+        --admin-api-key ${ARIES_ADMIN_KEY:-changeme_set_in_dotenv}
+        --auto-provision
+        --wallet-type askar
+        --wallet-name agi-memory-wallet
+        --wallet-key ${ARIES_WALLET_KEY:-changeme_wallet_key}
+        --label "AGI Memory Agent"
+        --endpoint http://localhost:${ARIES_HTTP_PORT:-8030}
+        --log-level info
+    volumes:
+      - aries_wallet:/home/aries/.aries_cloudagent
+    env_file:
+      - .env
+    restart: unless-stopped
+    healthcheck:
+      test: ["CMD", "curl", "-f", "-H", "X-API-Key: ${ARIES_ADMIN_KEY:-changeme_set_in_dotenv}", "http://localhost:8031/status"]
+      interval: 10s
+      timeout: 5s
+      retries: 5
+
+volumes:
+  aries_wallet:

package/templates/base/docker-compose.pulsar.yml

@@ -0,0 +1,29 @@
+# Apache Pulsar — Real-Time Agent Event Bus
+# Usage: docker compose -f docker-compose.pulsar.yml up -d
+# Only needed for real-time push between agents (optional)
+
+services:
+  pulsar:
+    image: apachepulsar/pulsar:4.1.3
+    container_name: agi-pulsar
+    ports:
+      - "${PULSAR_PORT:-6650}:6650"         # Binary protocol
+      - "${PULSAR_HTTP_PORT:-8080}:8080"     # HTTP admin API
+    volumes:
+      - pulsar_data:/pulsar/data
+      - pulsar_conf:/pulsar/conf
+    command: bin/pulsar standalone
+    environment:
+      PULSAR_MEM: "-Xms256m -Xmx512m"
+    env_file:
+      - .env
+    restart: unless-stopped
+    healthcheck:
+      test: ["CMD", "curl", "-f", "http://localhost:8080/admin/v2/brokers/healthcheck"]
+      interval: 10s
+      timeout: 5s
+      retries: 5
+
+volumes:
+  pulsar_data:
+  pulsar_conf: