nucleus-mcp 1.0.7 → 1.2.0

package/src/mcp_server_nucleus/runtime/agents/base.py

@@ -1,34 +0,0 @@
-from typing import List, Any, Optional
-from pydantic import BaseModel, Field
-
-class TrustProfile(BaseModel):
-    """
-    Security and Trust metadata for an Agent.
-    Defines what the agent is allowed to do and who verified it.
-    """
-    tier: str = Field(default="genesis", description="Trust Tier: genesis, verified, community, untrusted")
-    verification_hash: Optional[str] = Field(None, description="Cryptographic hash of the agent's code")
-    capabilities: List[str] = Field(default_factory=list, description="High-level capability grants (e.g. 'fs_read', 'net_out')")
-    maintainer: str = Field(default="@nucleus-core", description="Entity responsible for this agent")
-
-class SovereignAgent(BaseModel):
-    """
-    Base class for all Nucleus Sovereign Agents.
-    Wraps existing MCP capabilities into a standardized Agent interface.
-    """
-    name: str = Field(..., description="The unique handle of the agent (e.g., @nucleus/librarian)")
-    description: str = Field(..., description="Human-readable description of the agent's purpose")
-    instructions: str = Field(..., description="System prompt or behavioral instructions for the agent")
-    tools: List[Any] = Field(default_factory=list, description="List of MCP tools exposed by this agent")
-    trust: TrustProfile = Field(default_factory=TrustProfile, description="Security profile for the agent")
-    
-    def run(self, input_text: str) -> str:
-        """
-        Syntactic sugar for 'running' the agent.
-        In reality, Agents are tool containers, but this allows for simple testing.
-        """
-        return f"Agent {self.name} received: {input_text}"
-
-    class Config:
-        arbitrary_types_allowed = True
-

package/src/mcp_server_nucleus/runtime/agents/oracle/manifest.json

@@ -1,28 +0,0 @@
-{
-    "manifest_version": "1.0.0",
-    "agent": {
-        "id": "nucleus.core.oracle",
-        "name": "The Oracle",
-        "version": "1.0.0",
-        "description": "The Antifragile Co-Founder. Governance Entity responsible for strategic simulation and protocol evolution.",
-        "author": "Nucleus Genesis",
-        "license": "MIT"
-    },
-    "capabilities": [
-        {
-            "scope": "strategy",
-            "reason": "Required to read protocols, run simulations, and evolve the master strategy.",
-            "paths": [
-                "${BRAIN_PATH}/strategy",
-                "${BRAIN_PATH}/PROTOCOL_THE_ORACLE.md",
-                "${BRAIN_PATH}/IMPLEMENTATION_PLAN_PHASE61.md",
-                "${BRAIN_PATH}/decisions"
-            ],
-            "mode": "read_write"
-        }
-    ],
-    "lifecycle": {
-        "persistence": "immortal",
-        "cleanup": "none"
-    }
-}

package/src/mcp_server_nucleus/runtime/auth.py

@@ -1,98 +0,0 @@
-"""
-AuthManager: The Keyring.
-Manages access to Private Repositories via Environment Variables.
-
-Strategic Role:
-- EXTERNAL CONFIG: Never stores secrets in Brain. Only maps URLs to Env Vars.
-- INJECTION: Dynamically adds credentials to Git URLs for the Fetcher.
-- SCOPING: defaults to 'oauth2' username for GitHub PATs.
-"""
-
-import os
-import json
-import logging
-from typing import List, Optional
-from pathlib import Path
-from pydantic import BaseModel, Field
-from urllib.parse import urlparse, urlunparse
-
-logger = logging.getLogger("AUTH")
-
-class PrivateSource(BaseModel):
-    domain: str = Field(..., description="Git Domain (e.g. github.com)")
-    org: Optional[str] = Field(None, description="Optional Organization Scope")
-    token_env: str = Field(..., description="Name of Env Var holding the Token")
-    username: str = Field("oauth2", description="Username for HTTP Basic Auth")
-
-class Credentials(BaseModel):
-    username: str
-    token: str
-
-class AuthManager:
-    def __init__(self, brain_path: Path):
-        self.brain_path = brain_path
-        self.config_path = brain_path / "config" / "auth.json"
-        
-        self.sources: List[PrivateSource] = []
-        self._load_config()
-
-    def _load_config(self):
-        if self.config_path.exists():
-            try:
-                data = json.loads(self.config_path.read_text())
-                for item in data.get("sources", []):
-                    self.sources.append(PrivateSource(**item))
-            except Exception as e:
-                logger.error(f"Failed to load auth config: {e}")
-
-    def get_credentials(self, repo_url: str) -> Optional[Credentials]:
-        """
-        Match URL against configured sources to find credentials.
-        """
-        parsed = urlparse(repo_url)
-        domain = parsed.netloc
-        path = parsed.path.strip("/")
-        
-        # Find best match
-        # 1. Match Domain + Org
-        for source in self.sources:
-            if source.domain == domain and source.org:
-                if path.startswith(source.org + "/"):
-                    return self._resolve_env(source)
-                    
-        # 2. Match Domain Only
-        for source in self.sources:
-            if source.domain == domain and not source.org:
-                return self._resolve_env(source)
-                
-        return None
-
-    def _resolve_env(self, source: PrivateSource) -> Optional[Credentials]:
-        token = os.environ.get(source.token_env)
-        if token:
-            return Credentials(username=source.username, token=token)
-        logger.warning(f"Auth configured for {source.domain} but {source.token_env} is missing.")
-        return None
-
-    def inject_credentials(self, repo_url: str) -> str:
-        """
-        If credentials exist for this URL, inject them into the URL string.
-        Returns original URL if no creds found.
-        """
-        creds = self.get_credentials(repo_url)
-        if not creds:
-            return repo_url
-            
-        parsed = urlparse(repo_url)
-        
-        # Reconstruct with auth
-        # netloc = username:password@hostname
-        netloc = f"{creds.username}:{creds.token}@{parsed.hostname}"
-        
-        # Handle port if present
-        if parsed.port:
-            netloc += f":{parsed.port}"
-            
-        # Replace netloc
-        new_parsed = parsed._replace(netloc=netloc)
-        return urlunparse(new_parsed)