agent-lifecycle-kit 2.26.0__tar.gz → 2.28.0__tar.gz

{agent_lifecycle_kit-2.26.0/src/agent_lifecycle_kit.egg-info → agent_lifecycle_kit-2.28.0}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: agent-lifecycle-kit
-Version: 2.26.0
+Version: 2.28.0
 Summary: Provider-neutral lifecycle control layer that helps coding agents plan, execute, validate, and prove software tasks to completion.
 Author: Agent Lifecycle Kit contributors
 License: Apache-2.0
@@ -13,8 +13,9 @@ Classifier: Programming Language :: Python :: 3.11
 Classifier: Programming Language :: Python :: 3.12
 Classifier: Programming Language :: Python :: 3.13
 Classifier: Programming Language :: Python :: 3.14
+Classifier: Programming Language :: Python :: 3.15
 Classifier: Typing :: Typed
-Requires-Python: <3.15,>=3.11
+Requires-Python: <3.16,>=3.11
 Description-Content-Type: text/markdown
 License-File: LICENSE
 License-File: NOTICE
@@ -28,20 +29,20 @@ Dynamic: license-file
 
 [![License: Apache-2.0](https://img.shields.io/badge/license-Apache--2.0-green.svg)](LICENSE)
 [![Release](https://img.shields.io/github/v/release/avksp/agent-lifecycle-kit?label=release)](https://github.com/avksp/agent-lifecycle-kit/releases)
-![Python](https://img.shields.io/badge/python-3.11--3.14-blue.svg)
+![Python](https://img.shields.io/badge/python-3.11--3.15-blue.svg)
 
-**Agent Lifecycle Kit (ALK)** coordinates coding-agent work through a verifiable finish. It keeps the requested outcome, reviewed plan, execution boundaries, evidence and
-acceptance decisions connected while the external agent changes the project.
+**Agent Lifecycle Kit (ALK)** coordinates coding-agent work through a verifiable finish. It keeps the requested outcome, reviewed plan, execution boundaries, evidence and acceptance decisions connected while the external agent changes the project.
 
-The provider-neutral workflow works with Codex, Claude Code, Qwen Code, Goose, OpenInterpreter, Pi, Grok Build, or another CLI. Provider commands, model choice and secret handling
-stay in adapters or host-local profiles.
+The provider-neutral workflow works with Codex, Claude Code, Qwen Code, Goose, OpenInterpreter, Pi, Grok Build, or another CLI. Provider commands, model choice and secret handling stay in adapters or host-local profiles.
 
 ALK provides a verifiable finish for external-agent work with proportionate control. It adds only the checks and evidence needed for the task; most of the time remains for research, implementation and product verification.
 
+Release 2.28 adds [bounded lifecycle and accounting baselines](docs/reference/performance-and-resource-budgets.md#release-228-lifecycle-and-accounting-baselines). Repository tools measure real read-only operations and separate fixture preparation from operation and subprocess time. The Windows fixture comparison observed a 13.08% median reduction in one six-sample experiment; it is not a universal speed promise. All security and platform checks remain required.
+
 ## Quick start
 Start with [install ALK and make the first run](docs/guides/install-and-first-run.md). Release 2.23 adds [compact S0/S1 authoring](docs/reference/tier-proportional-plan-packages.md) with explicit checklist completion and unchanged approval gates. Release 2.22 adds [conservative plan-review reuse](docs/reference/conservative-delta-review.md) with independent current applicability and no automatic full reruns. Release 2.21 adds [command accounting, bounded preparation and response recovery](docs/reference/source-native-workflow-accounting.md). Release 2.20 adds [target-bound initialization](docs/reference/cli.md#release-220-composed-initialization-and-digest-display), [bounded local continuation](docs/reference/workflow-continuation.md) and batched Git snapshots. Release 2.19 adds [safe artifact authoring and planning preflight](docs/reference/safe-artifact-authoring.md), [bounded review handoff](docs/reference/review-mesh.md#bounded-review-handoff) and thin skills with complete references. Release 2.18 bounds process/Git diagnostics, hardens signing and distinguishes OpenCode 1.x/2.x compatibility ([adapter notes](docs/adapters/opencode.md)); 2.17 strengthens [workflow validation and recovery](docs/reference/workflow-completeness.md). Release 2.16 introduced cumulative accounting within verified host capabilities; see [retention maintenance](docs/operations/retention-maintenance.md).
 
-It includes macOS, Linux and Windows instructions, Python 3.11-3.14, [PyPI](https://pypi.org/project/agent-lifecycle-kit/) installation with `python -m pip install agent-lifecycle-kit==2.26.0`, and common `agent-lifecycle version` errors. See [2.15 migration notes](docs/reference/cli.md#migrating-authority-artifacts-to-215) and [authority boundaries](docs/reference/authority-artifact-boundaries.md).
+It includes macOS, Linux and Windows instructions, Python 3.11-3.15, [PyPI](https://pypi.org/project/agent-lifecycle-kit/) installation with `python -m pip install agent-lifecycle-kit==2.28.0`, and common `agent-lifecycle version` errors. See [2.15 migration notes](docs/reference/cli.md#migrating-authority-artifacts-to-215) and [authority boundaries](docs/reference/authority-artifact-boundaries.md).
 
 For a quick start, run:
 

{agent_lifecycle_kit-2.26.0 → agent_lifecycle_kit-2.28.0}/README.md

@@ -6,20 +6,20 @@
 
 [![License: Apache-2.0](https://img.shields.io/badge/license-Apache--2.0-green.svg)](LICENSE)
 [![Release](https://img.shields.io/github/v/release/avksp/agent-lifecycle-kit?label=release)](https://github.com/avksp/agent-lifecycle-kit/releases)
-![Python](https://img.shields.io/badge/python-3.11--3.14-blue.svg)
+![Python](https://img.shields.io/badge/python-3.11--3.15-blue.svg)
 
-**Agent Lifecycle Kit (ALK)** coordinates coding-agent work through a verifiable finish. It keeps the requested outcome, reviewed plan, execution boundaries, evidence and
-acceptance decisions connected while the external agent changes the project.
+**Agent Lifecycle Kit (ALK)** coordinates coding-agent work through a verifiable finish. It keeps the requested outcome, reviewed plan, execution boundaries, evidence and acceptance decisions connected while the external agent changes the project.
 
-The provider-neutral workflow works with Codex, Claude Code, Qwen Code, Goose, OpenInterpreter, Pi, Grok Build, or another CLI. Provider commands, model choice and secret handling
-stay in adapters or host-local profiles.
+The provider-neutral workflow works with Codex, Claude Code, Qwen Code, Goose, OpenInterpreter, Pi, Grok Build, or another CLI. Provider commands, model choice and secret handling stay in adapters or host-local profiles.
 
 ALK provides a verifiable finish for external-agent work with proportionate control. It adds only the checks and evidence needed for the task; most of the time remains for research, implementation and product verification.
 
+Release 2.28 adds [bounded lifecycle and accounting baselines](docs/reference/performance-and-resource-budgets.md#release-228-lifecycle-and-accounting-baselines). Repository tools measure real read-only operations and separate fixture preparation from operation and subprocess time. The Windows fixture comparison observed a 13.08% median reduction in one six-sample experiment; it is not a universal speed promise. All security and platform checks remain required.
+
 ## Quick start
 Start with [install ALK and make the first run](docs/guides/install-and-first-run.md). Release 2.23 adds [compact S0/S1 authoring](docs/reference/tier-proportional-plan-packages.md) with explicit checklist completion and unchanged approval gates. Release 2.22 adds [conservative plan-review reuse](docs/reference/conservative-delta-review.md) with independent current applicability and no automatic full reruns. Release 2.21 adds [command accounting, bounded preparation and response recovery](docs/reference/source-native-workflow-accounting.md). Release 2.20 adds [target-bound initialization](docs/reference/cli.md#release-220-composed-initialization-and-digest-display), [bounded local continuation](docs/reference/workflow-continuation.md) and batched Git snapshots. Release 2.19 adds [safe artifact authoring and planning preflight](docs/reference/safe-artifact-authoring.md), [bounded review handoff](docs/reference/review-mesh.md#bounded-review-handoff) and thin skills with complete references. Release 2.18 bounds process/Git diagnostics, hardens signing and distinguishes OpenCode 1.x/2.x compatibility ([adapter notes](docs/adapters/opencode.md)); 2.17 strengthens [workflow validation and recovery](docs/reference/workflow-completeness.md). Release 2.16 introduced cumulative accounting within verified host capabilities; see [retention maintenance](docs/operations/retention-maintenance.md).
 
-It includes macOS, Linux and Windows instructions, Python 3.11-3.14, [PyPI](https://pypi.org/project/agent-lifecycle-kit/) installation with `python -m pip install agent-lifecycle-kit==2.26.0`, and common `agent-lifecycle version` errors. See [2.15 migration notes](docs/reference/cli.md#migrating-authority-artifacts-to-215) and [authority boundaries](docs/reference/authority-artifact-boundaries.md).
+It includes macOS, Linux and Windows instructions, Python 3.11-3.15, [PyPI](https://pypi.org/project/agent-lifecycle-kit/) installation with `python -m pip install agent-lifecycle-kit==2.28.0`, and common `agent-lifecycle version` errors. See [2.15 migration notes](docs/reference/cli.md#migrating-authority-artifacts-to-215) and [authority boundaries](docs/reference/authority-artifact-boundaries.md).
 
 For a quick start, run:
 

{agent_lifecycle_kit-2.26.0 → agent_lifecycle_kit-2.28.0}/pyproject.toml

@@ -4,10 +4,10 @@ build-backend = "setuptools.build_meta"
 
 [project]
 name = "agent-lifecycle-kit"
-version = "2.26.0"
+version = "2.28.0"
 description = "Provider-neutral lifecycle control layer that helps coding agents plan, execute, validate, and prove software tasks to completion."
 readme = "README.md"
-requires-python = ">=3.11,<3.15"
+requires-python = ">=3.11,<3.16"
 license = { text = "Apache-2.0" }
 authors = [{ name = "Agent Lifecycle Kit contributors" }]
 keywords = [
@@ -35,6 +35,7 @@ classifiers = [
   "Programming Language :: Python :: 3.12",
   "Programming Language :: Python :: 3.13",
   "Programming Language :: Python :: 3.14",
+  "Programming Language :: Python :: 3.15",
   "Typing :: Typed",
 ]
 dependencies = []

{agent_lifecycle_kit-2.26.0 → agent_lifecycle_kit-2.28.0}/src/agent_lifecycle/_version.py

@@ -1,3 +1,3 @@
 """Package version."""
 
-__version__ = "2.26.0"
+__version__ = "2.28.0"

{agent_lifecycle_kit-2.26.0 → agent_lifecycle_kit-2.28.0}/src/agent_lifecycle/accounting/contracts.py

@@ -627,7 +627,24 @@ if TYPE_CHECKING:
     from contextlib import AbstractContextManager
     from typing import Protocol
 
-    class _JournalStoragePort(Protocol):
+    class _FinancialTransactionPort(Protocol):
+        """Only the capabilities used by admitted reservation and claim rules."""
+
+        def _require_financial_transaction(self) -> None: ...
+
+        def _reserve_identity_keys(self, operation: Operation) -> None: ...
+
+        def _closed_scope(self, scope: str) -> object | None: ...
+
+        def _conflict(self, scopes: tuple[str, ...], reason: str, payload: dict) -> str: ...
+
+        def _key(self, kind: str, key: object, scope: str, owner: str, value: str) -> bool: ...
+
+        def _load(self, scope: str) -> tuple[dict | None, int]: ...
+
+        def _record(self, scope: str, state: dict | None, revision: int, kind: str, payload: dict) -> int: ...
+
+    class _JournalStoragePort(_FinancialTransactionPort, Protocol):
         """Static view of the existing live Journal composition; no runtime base."""
 
         _admission_depth: int
@@ -669,8 +686,6 @@ if TYPE_CHECKING:
         @staticmethod
         def _compile_opening(scope: BudgetScope, policy: BudgetPolicy, value: OpeningImport) -> dict: ...
 
-        def _conflict(self, scopes: tuple[str, ...], reason: str, payload: dict) -> str: ...
-
         @staticmethod
         def _create_v4_schema(db: sqlite3.Connection, *, writer_version: int = 4) -> None: ...
 
@@ -697,12 +712,8 @@ if TYPE_CHECKING:
 
         def _index(self, table: str, key: str, scope: str, owner: str, payload: dict) -> dict: ...
 
-        def _key(self, kind: str, key: object, scope: str, owner: str, value: str) -> bool: ...
-
         def _live_facts(self, scope: str, *, restore: bool = False) -> tuple[dict, int, list, list]: ...
 
-        def _load(self, scope: str) -> tuple[dict | None, int]: ...
-
         _observation_scope: str | None
 
         def _observed_candidates(self, scope: str, evidence: dict) -> list[dict]: ...
@@ -714,8 +725,6 @@ if TYPE_CHECKING:
 
         def _preflight_supplied_finals(self, scope: str, receipts: list[dict]) -> None: ...
 
-        def _record(self, scope: str, state: dict | None, revision: int, kind: str, payload: dict) -> int: ...
-
         def _retained(self, table: str, key: str) -> dict | None: ...
 
         def _source_preflight(self, receipt: dict) -> None: ...
@@ -755,6 +764,7 @@ if TYPE_CHECKING:
         writer: EvidenceRef
 else:
     # Preserve the exact nominal runtime bases and authority checks.
+    _FinancialTransactionPort = object
     _JournalStoragePort = object
 
 

{agent_lifecycle_kit-2.26.0 → agent_lifecycle_kit-2.28.0}/src/agent_lifecycle/accounting/declared_ledger_legacy.py

@@ -21,6 +21,7 @@ from agent_lifecycle.accounting.declared_ledger_records import (
 from agent_lifecycle.contracts import LifecycleError, canonical_bytes, canonical_digest
 from agent_lifecycle.contracts.authority_io import normalize_authority_path, read_authority_bytes
 from agent_lifecycle.contracts.bounded_json import load_bounded_json as _r11_json
+from agent_lifecycle.contracts.private_storage_compat import read_compat_private_bytes
 
 _MAX_REQUEST_BYTES = 131_072
 
@@ -32,42 +33,15 @@ def _read_private(
     allowed_modes: tuple[int, ...] = (0o600,),
     max_bytes: int = _MAX_REQUEST_BYTES,
 ) -> bytes:
-    if os.name == "nt":
-        from agent_lifecycle.contracts.private_storage import read_private_bytes
-
-        try:
-            return read_private_bytes(path, root=root, modes=allowed_modes, max_bytes=max_bytes)
-        except LifecycleError as exc:
-            raise LifecycleError("codex-exact-private-path-unsafe", exc.message) from exc
-    if not path.is_relative_to(root):
-        raise LifecycleError("codex-exact-private-path-unsafe", "private artifact lies outside root")
-    current = path.parent
-    while current != root:
-        info = current.lstat()
-        relative = current.relative_to(root).parts
-        shared_parent = relative in {("work",), ("work", "release-2-16"), ("work", "release-2-16", "evidence")}
-        if not stat.S_ISDIR(info.st_mode) or (not shared_parent and stat.S_IMODE(info.st_mode) != 0o700):
-            raise LifecycleError("codex-exact-private-path-unsafe", "private parent is not mode 0700")
-        current = current.parent
-    info = path.lstat()
-    if not stat.S_ISREG(info.st_mode) or stat.S_IMODE(info.st_mode) not in allowed_modes or info.st_size > max_bytes:
-        raise LifecycleError("codex-exact-private-path-unsafe", "private file has unsafe mode, type or size")
-    flags = os.O_RDONLY | getattr(os, "O_NOFOLLOW", 0)
-    fd = os.open(path, flags)
-    with os.fdopen(fd, "rb") as stream:
-        opened = os.fstat(stream.fileno())
-
-        def identity(item: os.stat_result) -> tuple[int, int, int, int, int]:
-            return (item.st_dev, item.st_ino, item.st_mode, item.st_size, item.st_mtime_ns)
-
-        if identity(opened) != identity(info):
-            raise LifecycleError("codex-exact-private-path-unsafe", "private file changed before reading")
-        raw = stream.read(max_bytes + 1)
-        if identity(os.fstat(stream.fileno())) != identity(opened):
-            raise LifecycleError("codex-exact-private-path-unsafe", "private file changed while reading")
-    if len(raw) > max_bytes:
-        raise LifecycleError("codex-exact-private-overflow", "private artifact exceeds byte limit")
-    return raw
+    return read_compat_private_bytes(
+        path,
+        root=root,
+        allowed_modes=allowed_modes,
+        max_bytes=max_bytes,
+        shared_parents=frozenset({("work",), ("work", "release-2-16"), ("work", "release-2-16", "evidence")}),
+        unsafe_code="codex-exact-private-path-unsafe",
+        overflow_code="codex-exact-private-overflow",
+    )
 
 
 def _r11_git(root: Path, *args: str) -> bytes:

{agent_lifecycle_kit-2.26.0 → agent_lifecycle_kit-2.28.0}/src/agent_lifecycle/accounting/financial_transactions.py

@@ -6,11 +6,10 @@ These primitives confer no host, provider or dispatch authority.
 from dataclasses import asdict
 
 from .contracts import (
-    JournalUnavailable,
     Operation,
     RevisionConflict,
     _BindingConflict,
-    _JournalStoragePort,
+    _FinancialTransactionPort,
     _projection,
     digest,
     identity,
@@ -18,14 +17,12 @@ from .contracts import (
 )
 
 
-def _require_financial_transaction(journal: _JournalStoragePort) -> None:
-    journal._check_owner()
-    if not journal._db.in_transaction or journal._admission_depth != 1:
-        raise JournalUnavailable("Financial operation requires admitted transaction", write_outcome="NOT_STARTED")
+def _require_financial_transaction(journal: _FinancialTransactionPort) -> None:
+    journal._require_financial_transaction()
 
 
 def _reserve_in_transaction(
-    journal: _JournalStoragePort, operation: Operation, *, expected_revision: int | None = None
+    journal: _FinancialTransactionPort, operation: Operation, *, expected_revision: int | None = None
 ) -> str:
     """Apply ordinary reservation arithmetic inside the caller's admitted transaction."""
     _require_financial_transaction(journal)
@@ -61,25 +58,16 @@ def _reserve_in_transaction(
         return journal._conflict((scope,), "Scope/policy/task binding mismatch", op)
     if not _reservation_fits(state, revision, operation):
         return "DENY"
-    journal._db.execute("SAVEPOINT identity_batch")
     try:
-        for kind, key in (
-            ("operation", [scope, operation.operation_id]),
-            ("dispatch", [scope, operation.dispatch_key]),
-            ("permit", operation.permit_id),
-        ):
-            journal._key(kind, key, scope, operation.operation_id, operation.binding_digest)
-        journal._db.execute("RELEASE identity_batch")
+        journal._reserve_identity_keys(operation)
     except _BindingConflict as exc:
-        journal._db.execute("ROLLBACK TO identity_batch")
-        journal._db.execute("RELEASE identity_batch")
         return journal._conflict(exc.scopes, str(exc), op)
     journal._record(scope, state, revision, "RESERVE", {"operation": op})
     return "RESERVED"
 
 
 def _claim_in_transaction(
-    journal: _JournalStoragePort, scope: str, operation_id: str, binding_digest: str, claim_id: str
+    journal: _FinancialTransactionPort, scope: str, operation_id: str, binding_digest: str, claim_id: str
 ) -> str:
     """Claim once inside the caller's admitted transaction; no dispatch authority is conferred."""
     _require_financial_transaction(journal)

{agent_lifecycle_kit-2.26.0 → agent_lifecycle_kit-2.28.0}/src/agent_lifecycle/accounting/journal.py

@@ -32,6 +32,7 @@ from .contracts import (
     EvidenceRef,
     JournalEvent,
     JournalHandle,
+    Operation,
     UsageOutcome,
     canonical,
     digest,
@@ -270,6 +271,29 @@ class Journal(
             return self._archive_state(scope)
         return None, 0
 
+    def _require_financial_transaction(self) -> None:
+        self._check_owner()
+        if not self._db.in_transaction or self._admission_depth != 1:
+            raise JournalUnavailable("Financial operation requires admitted transaction", write_outcome="NOT_STARTED")
+
+    def _reserve_identity_keys(self, operation: Operation) -> None:
+        """Keep a reservation's immutable identities atomic inside admission."""
+        self._require_financial_transaction()
+        scope = operation.budget_scope_id
+        self._db.execute("SAVEPOINT identity_batch")
+        try:
+            for kind, key in (
+                ("operation", [scope, operation.operation_id]),
+                ("dispatch", [scope, operation.dispatch_key]),
+                ("permit", operation.permit_id),
+            ):
+                self._key(kind, key, scope, operation.operation_id, operation.binding_digest)
+            self._db.execute("RELEASE identity_batch")
+        except _BindingConflict:
+            self._db.execute("ROLLBACK TO identity_batch")
+            self._db.execute("RELEASE identity_batch")
+            raise
+
     def _key(self, kind: str, key: object, scope: str, owner: str, value: str) -> bool:
         """Reserve/check a global immutable key inside the current transaction."""
         encoded = canonical(key)

{agent_lifecycle_kit-2.26.0 → agent_lifecycle_kit-2.28.0}/src/agent_lifecycle/adapter_sessions/private_input.py

@@ -8,6 +8,7 @@ import stat
 from pathlib import Path
 
 from agent_lifecycle.contracts import LifecycleError
+from agent_lifecycle.contracts.private_storage_compat import read_compat_private_bytes
 
 _MAX_REQUEST_BYTES = 131_072
 
@@ -102,42 +103,15 @@ def _read_private(
     allowed_modes: tuple[int, ...] = (0o600,),
     max_bytes: int = _MAX_REQUEST_BYTES,
 ) -> bytes:
-    if os.name == "nt":
-        from agent_lifecycle.contracts.private_storage import read_private_bytes
-
-        try:
-            return read_private_bytes(path, root=root, modes=allowed_modes, max_bytes=max_bytes)
-        except LifecycleError as exc:
-            raise LifecycleError("codex-exact-private-path-unsafe", exc.message) from exc
-    if not path.is_relative_to(root):
-        raise LifecycleError("codex-exact-private-path-unsafe", "private artifact lies outside root")
-    current = path.parent
-    while current != root:
-        info = current.lstat()
-        relative = current.relative_to(root).parts
-        shared_parent = relative in {("work",), ("work", "release-2-16"), ("work", "release-2-16", "evidence")}
-        if not stat.S_ISDIR(info.st_mode) or (not shared_parent and stat.S_IMODE(info.st_mode) != 0o700):
-            raise LifecycleError("codex-exact-private-path-unsafe", "private parent is not mode 0700")
-        current = current.parent
-    info = path.lstat()
-    if not stat.S_ISREG(info.st_mode) or stat.S_IMODE(info.st_mode) not in allowed_modes or info.st_size > max_bytes:
-        raise LifecycleError("codex-exact-private-path-unsafe", "private file has unsafe mode, type or size")
-    flags = os.O_RDONLY | getattr(os, "O_NOFOLLOW", 0)
-    fd = os.open(path, flags)
-    with os.fdopen(fd, "rb") as stream:
-        opened = os.fstat(stream.fileno())
-
-        def identity(item: os.stat_result) -> tuple[int, int, int, int, int]:
-            return (item.st_dev, item.st_ino, item.st_mode, item.st_size, item.st_mtime_ns)
-
-        if identity(opened) != identity(info):
-            raise LifecycleError("codex-exact-private-path-unsafe", "private file changed before reading")
-        raw = stream.read(max_bytes + 1)
-        if identity(os.fstat(stream.fileno())) != identity(opened):
-            raise LifecycleError("codex-exact-private-path-unsafe", "private file changed while reading")
-    if len(raw) > max_bytes:
-        raise LifecycleError("codex-exact-private-overflow", "private artifact exceeds byte limit")
-    return raw
+    return read_compat_private_bytes(
+        path,
+        root=root,
+        allowed_modes=allowed_modes,
+        max_bytes=max_bytes,
+        shared_parents=frozenset({("work",), ("work", "release-2-16"), ("work", "release-2-16", "evidence")}),
+        unsafe_code="codex-exact-private-path-unsafe",
+        overflow_code="codex-exact-private-overflow",
+    )
 
 
 def _require(value: bool, code: str, message: str) -> None:

{agent_lifecycle_kit-2.26.0 → agent_lifecycle_kit-2.28.0}/src/agent_lifecycle/contracts/agent_plugin_qualification_schemas.py

@@ -126,17 +126,7 @@ AGENT_PLUGIN_QUALIFICATION_SCHEMAS: dict[str, dict[str, Any]] = {
 }
 
 
-def validate_qualification_profile(profile: dict[str, Any]) -> dict[str, Any]:
-    """Validate a data-only client profile and its self-digest."""
-
-    blockers: list[dict[str, Any]] = []
-    if not isinstance(profile, dict):
-        return _validation([_issue("profile-not-object")])
-    _required_text(profile, "schemaVersion", PROFILE_SCHEMA, blockers)
-    for field in ("profileId", "adapterId", "client", "host"):
-        if not isinstance(profile.get(field), str) or not profile[field].strip():
-            blockers.append(_issue("profile-field-invalid", field=field))
-
+def _profile_package(profile: dict[str, Any], blockers: list[dict[str, Any]]) -> None:
     package = profile.get("package")
     if not isinstance(package, dict):
         blockers.append(_issue("profile-package-invalid"))
@@ -149,6 +139,8 @@ def validate_qualification_profile(profile: dict[str, Any]) -> dict[str, Any]:
         if skills != list(CANONICAL_SKILLS):
             blockers.append(_issue("profile-required-skills", expected=list(CANONICAL_SKILLS), actual=skills))
 
+
+def _profile_discovery(profile: dict[str, Any], blockers: list[dict[str, Any]]) -> None:
     discovery = profile.get("discovery")
     if not isinstance(discovery, dict):
         blockers.append(_issue("profile-discovery-invalid"))
@@ -165,6 +157,8 @@ def validate_qualification_profile(profile: dict[str, Any]) -> dict[str, Any]:
         if not isinstance(markers, list) or not all(isinstance(item, str) and item for item in markers):
             blockers.append(_issue("profile-discovery-markers"))
 
+
+def _profile_installation(profile: dict[str, Any], blockers: list[dict[str, Any]]) -> None:
     installation = profile.get("installation")
     if not isinstance(installation, dict):
         blockers.append(_issue("profile-installation-invalid"))
@@ -176,6 +170,8 @@ def validate_qualification_profile(profile: dict[str, Any]) -> dict[str, Any]:
         ):
             blockers.append(_issue("profile-installation-boundary"))
 
+
+def _profile_environment(profile: dict[str, Any], blockers: list[dict[str, Any]]) -> None:
     environment = profile.get("environment")
     if not isinstance(environment, dict):
         blockers.append(_issue("profile-environment-invalid"))
@@ -187,6 +183,8 @@ def validate_qualification_profile(profile: dict[str, Any]) -> dict[str, Any]:
         if environment.get("allowPatterns"):
             blockers.append(_issue("profile-environment-wildcard"))
 
+
+def _profile_host_version(profile: dict[str, Any], blockers: list[dict[str, Any]]) -> None:
     host_version_policy = profile.get("hostVersionPolicy")
     if not isinstance(host_version_policy, dict):
         blockers.append(_issue("profile-host-version-policy-invalid"))
@@ -205,6 +203,8 @@ def validate_qualification_profile(profile: dict[str, Any]) -> dict[str, Any]:
             except ValueError:
                 blockers.append(_issue("profile-host-version-policy-invalid", mode=mode))
 
+
+def _profile_qualification(profile: dict[str, Any], blockers: list[dict[str, Any]]) -> None:
     qualification = profile.get("qualification")
     if not isinstance(qualification, dict):
         blockers.append(_issue("profile-qualification-invalid"))
@@ -222,6 +222,23 @@ def validate_qualification_profile(profile: dict[str, Any]) -> dict[str, Any]:
         if qualification.get("modelCalls") != 0 or qualification.get("hostLaunch") is not True:
             blockers.append(_issue("profile-qualification-safety"))
 
+
+def validate_qualification_profile(profile: dict[str, Any]) -> dict[str, Any]:
+    """Validate a data-only client profile and its self-digest."""
+
+    blockers: list[dict[str, Any]] = []
+    if not isinstance(profile, dict):
+        return _validation([_issue("profile-not-object")])
+    _required_text(profile, "schemaVersion", PROFILE_SCHEMA, blockers)
+    for field in ("profileId", "adapterId", "client", "host"):
+        if not isinstance(profile.get(field), str) or not profile[field].strip():
+            blockers.append(_issue("profile-field-invalid", field=field))
+    _profile_package(profile, blockers)
+    _profile_discovery(profile, blockers)
+    _profile_installation(profile, blockers)
+    _profile_environment(profile, blockers)
+    _profile_host_version(profile, blockers)
+    _profile_qualification(profile, blockers)
     boundary = profile.get("descriptorBoundary")
     if (
         not isinstance(boundary, dict)

{agent_lifecycle_kit-2.26.0 → agent_lifecycle_kit-2.28.0}/src/agent_lifecycle/contracts/authority_io.py

@@ -12,6 +12,7 @@ import time
 import uuid
 from collections.abc import Iterator
 from contextlib import ExitStack, contextmanager, suppress
+from functools import cache
 from pathlib import Path
 from typing import Any, BinaryIO
 
@@ -165,7 +166,7 @@ class _Directory:
     def stat_child(self, name: str) -> os.stat_result:
         if self.fd is not None:
             return os.stat(name, dir_fd=self.fd, follow_symlinks=False)
-        return (self.path / name).stat(follow_symlinks=False)
+        return os.stat(os.path.join(self.path, name), follow_symlinks=False)  # noqa: PTH116, PTH118
 
     def open_child(self, name: str) -> int:
         if self.fd is not None:
@@ -207,11 +208,7 @@ class _Directory:
         elif self.handle is not None:
             if not self.writable:
                 raise LifecycleError("authority-io-unavailable", "Directory write authority is required")
-            from ctypes import wintypes
-
             api = _windows_api()
-            api.FlushFileBuffers.argtypes = [wintypes.HANDLE]
-            api.FlushFileBuffers.restype = wintypes.BOOL
             if not api.FlushFileBuffers(self.handle):
                 raise LifecycleError("authority-durability-unavailable", "Directory durability barrier failed")
         else:
@@ -484,6 +481,18 @@ def append_authority_bytes(path: Path, data: bytes, *, root: Path | None = None)
 
 
 def _windows_api() -> Any:
+    if sys.platform != "win32":
+        raise LifecycleError("authority-io-unavailable", "Windows authority I/O is unavailable")
+    return _windows_api_bindings()
+
+
+@cache
+def _windows_api_bindings() -> Any:
+    """Publish only complete bindings; concurrent first calls may build equivalent copies.
+
+    Cache DLL/function configuration only. Handles, I/O, identities and ctypes'
+    thread-local last-error values remain live at each call site.
+    """
     if sys.platform != "win32":
         raise LifecycleError("authority-io-unavailable", "Windows authority I/O is unavailable")
     import ctypes
@@ -504,6 +513,8 @@ def _windows_api() -> Any:
     api.CloseHandle.restype = wintypes.BOOL
     api.GetFileInformationByHandleEx.argtypes = [wintypes.HANDLE, ctypes.c_int, wintypes.LPVOID, wintypes.DWORD]
     api.GetFileInformationByHandleEx.restype = wintypes.BOOL
+    api.FlushFileBuffers.argtypes = [wintypes.HANDLE]
+    api.FlushFileBuffers.restype = wintypes.BOOL
     return api
 
 

{agent_lifecycle_kit-2.26.0 → agent_lifecycle_kit-2.28.0}/src/agent_lifecycle/contracts/performance_limits.py

@@ -32,7 +32,7 @@ class PerformanceLimits:
     max_simple_literal_rules: int = 64
     max_linux_group_samples_per_second: int = 4
     max_ed25519_optimized_to_reference_median_ratio_bps: int = 2_000
-    max_benchmark_samples_per_case: int = 31
+    max_benchmark_samples_per_case: int = 7
     max_benchmark_output_bytes: int = 16 * 1024 * 1024
     max_evidence_bytes_per_run: int = 96 * 1024 * 1024
 
@@ -126,7 +126,26 @@ def validate_performance_policy(policy: Mapping[str, Any]) -> PerformanceLimits:
     if not isinstance(raw_limits, Mapping):
         raise LifecycleError("performance-policy-limits-invalid", "performance policy limits must be an object")
     limits = performance_limits_from_json(raw_limits)
-    benchmark = policy.get("benchmark")
+    _validate_benchmark_policy(policy.get("benchmark"), limits)
+    operations = policy.get("operations")
+    if (
+        not isinstance(operations, list)
+        or not operations
+        or not all(isinstance(item, str) and item for item in operations)
+    ):
+        raise LifecycleError(
+            "performance-policy-operations-invalid", "performance policy operations must be non-empty strings"
+        )
+    if len(set(operations)) != len(operations):
+        raise LifecycleError("performance-policy-operations-invalid", "performance policy operations must be unique")
+    if policy.get("productionPromotionClaimed") is not False:
+        raise LifecycleError(
+            "performance-policy-promotion-invalid", "performance policy cannot claim production promotion"
+        )
+    return limits
+
+
+def _validate_benchmark_policy(benchmark: Any, limits: PerformanceLimits) -> None:
     if not isinstance(benchmark, Mapping):
         raise LifecycleError("performance-policy-benchmark-invalid", "performance policy benchmark must be an object")
     benchmark_allowed = {
@@ -153,22 +172,27 @@ def validate_performance_policy(policy: Mapping[str, Any]) -> PerformanceLimits:
         raise LifecycleError("performance-policy-benchmark-exceeds-limit", "samplesPerCase exceeds the typed ceiling")
     if benchmark["maxOutputBytes"] > limits.max_benchmark_output_bytes:
         raise LifecycleError("performance-policy-benchmark-exceeds-limit", "maxOutputBytes exceeds the typed ceiling")
-    operations = policy.get("operations")
-    if (
-        not isinstance(operations, list)
-        or not operations
-        or not all(isinstance(item, str) and item for item in operations)
-    ):
+    _validate_benchmark_caps(benchmark, limits)
+
+
+def _validate_benchmark_caps(benchmark: Mapping[str, Any], limits: PerformanceLimits) -> None:
+    hard_caps = {
+        "warmupSamples": 2,
+        "samplesPerCase": 7,
+        "maxCommandWallSeconds": 120,
+        "maxTotalWallSeconds": 600,
+        "maxOutputBytes": 16 * 1024 * 1024,
+    }
+    if any(benchmark[name] > cap for name, cap in hard_caps.items()):
         raise LifecycleError(
-            "performance-policy-operations-invalid", "performance policy operations must be non-empty strings"
+            "performance-policy-benchmark-exceeds-limit",
+            "Benchmark exceeds an immutable sampling, wall or output ceiling",
         )
-    if len(set(operations)) != len(operations):
-        raise LifecycleError("performance-policy-operations-invalid", "performance policy operations must be unique")
-    if policy.get("productionPromotionClaimed") is not False:
+    if limits.max_benchmark_samples_per_case > 7 or limits.max_benchmark_output_bytes > 16 * 1024 * 1024:
         raise LifecycleError(
-            "performance-policy-promotion-invalid", "performance policy cannot claim production promotion"
+            "performance-policy-benchmark-exceeds-limit",
+            "Typed benchmark ceilings cannot exceed the hard limits",
         )
-    return limits
 
 
 __all__ = [