agent-lifecycle-kit 2.27.0__tar.gz → 2.29.0__tar.gz

{agent_lifecycle_kit-2.27.0/src/agent_lifecycle_kit.egg-info → agent_lifecycle_kit-2.29.0}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: agent-lifecycle-kit
-Version: 2.27.0
+Version: 2.29.0
 Summary: Provider-neutral lifecycle control layer that helps coding agents plan, execute, validate, and prove software tasks to completion.
 Author: Agent Lifecycle Kit contributors
 License: Apache-2.0
@@ -29,20 +29,20 @@ Dynamic: license-file
 
 [![License: Apache-2.0](https://img.shields.io/badge/license-Apache--2.0-green.svg)](LICENSE)
 [![Release](https://img.shields.io/github/v/release/avksp/agent-lifecycle-kit?label=release)](https://github.com/avksp/agent-lifecycle-kit/releases)
-![Python](https://img.shields.io/badge/python-3.11--3.14-blue.svg)
+![Python](https://img.shields.io/badge/python-3.11--3.15-blue.svg)
 
-**Agent Lifecycle Kit (ALK)** coordinates coding-agent work through a verifiable finish. It keeps the requested outcome, reviewed plan, execution boundaries, evidence and
-acceptance decisions connected while the external agent changes the project.
+**Agent Lifecycle Kit (ALK)** coordinates coding-agent work through a verifiable finish. It keeps the requested outcome, reviewed plan, execution boundaries, evidence and acceptance decisions connected while the external agent changes the project.
 
-The provider-neutral workflow works with Codex, Claude Code, Qwen Code, Goose, OpenInterpreter, Pi, Grok Build, or another CLI. Provider commands, model choice and secret handling
-stay in adapters or host-local profiles.
+The provider-neutral workflow works with Codex, Claude Code, Qwen Code, Goose, OpenInterpreter, Pi, Grok Build, or another CLI. Provider commands, model choice and secret handling stay in adapters or host-local profiles.
 
 ALK provides a verifiable finish for external-agent work with proportionate control. It adds only the checks and evidence needed for the task; most of the time remains for research, implementation and product verification.
 
+Release 2.28 adds [bounded lifecycle and accounting baselines](docs/reference/performance-and-resource-budgets.md#release-228-lifecycle-and-accounting-baselines). Repository tools measure real read-only operations and separate fixture preparation from operation and subprocess time. The Windows fixture comparison observed a 13.08% median reduction in one six-sample experiment; it is not a universal speed promise. All security and platform checks remain required.
+
 ## Quick start
 Start with [install ALK and make the first run](docs/guides/install-and-first-run.md). Release 2.23 adds [compact S0/S1 authoring](docs/reference/tier-proportional-plan-packages.md) with explicit checklist completion and unchanged approval gates. Release 2.22 adds [conservative plan-review reuse](docs/reference/conservative-delta-review.md) with independent current applicability and no automatic full reruns. Release 2.21 adds [command accounting, bounded preparation and response recovery](docs/reference/source-native-workflow-accounting.md). Release 2.20 adds [target-bound initialization](docs/reference/cli.md#release-220-composed-initialization-and-digest-display), [bounded local continuation](docs/reference/workflow-continuation.md) and batched Git snapshots. Release 2.19 adds [safe artifact authoring and planning preflight](docs/reference/safe-artifact-authoring.md), [bounded review handoff](docs/reference/review-mesh.md#bounded-review-handoff) and thin skills with complete references. Release 2.18 bounds process/Git diagnostics, hardens signing and distinguishes OpenCode 1.x/2.x compatibility ([adapter notes](docs/adapters/opencode.md)); 2.17 strengthens [workflow validation and recovery](docs/reference/workflow-completeness.md). Release 2.16 introduced cumulative accounting within verified host capabilities; see [retention maintenance](docs/operations/retention-maintenance.md).
 
-It includes macOS, Linux and Windows instructions, Python 3.11-3.15, [PyPI](https://pypi.org/project/agent-lifecycle-kit/) installation with `python -m pip install agent-lifecycle-kit==2.27.0`, and common `agent-lifecycle version` errors. See [2.15 migration notes](docs/reference/cli.md#migrating-authority-artifacts-to-215) and [authority boundaries](docs/reference/authority-artifact-boundaries.md).
+It includes macOS, Linux and Windows instructions, Python 3.11-3.15, [PyPI](https://pypi.org/project/agent-lifecycle-kit/) installation with `python -m pip install agent-lifecycle-kit==2.29.0`, and common `agent-lifecycle version` errors. See [2.15 migration notes](docs/reference/cli.md#migrating-authority-artifacts-to-215) and [authority boundaries](docs/reference/authority-artifact-boundaries.md).
 
 For a quick start, run:
 

{agent_lifecycle_kit-2.27.0 → agent_lifecycle_kit-2.29.0}/README.md

@@ -6,20 +6,20 @@
 
 [![License: Apache-2.0](https://img.shields.io/badge/license-Apache--2.0-green.svg)](LICENSE)
 [![Release](https://img.shields.io/github/v/release/avksp/agent-lifecycle-kit?label=release)](https://github.com/avksp/agent-lifecycle-kit/releases)
-![Python](https://img.shields.io/badge/python-3.11--3.14-blue.svg)
+![Python](https://img.shields.io/badge/python-3.11--3.15-blue.svg)
 
-**Agent Lifecycle Kit (ALK)** coordinates coding-agent work through a verifiable finish. It keeps the requested outcome, reviewed plan, execution boundaries, evidence and
-acceptance decisions connected while the external agent changes the project.
+**Agent Lifecycle Kit (ALK)** coordinates coding-agent work through a verifiable finish. It keeps the requested outcome, reviewed plan, execution boundaries, evidence and acceptance decisions connected while the external agent changes the project.
 
-The provider-neutral workflow works with Codex, Claude Code, Qwen Code, Goose, OpenInterpreter, Pi, Grok Build, or another CLI. Provider commands, model choice and secret handling
-stay in adapters or host-local profiles.
+The provider-neutral workflow works with Codex, Claude Code, Qwen Code, Goose, OpenInterpreter, Pi, Grok Build, or another CLI. Provider commands, model choice and secret handling stay in adapters or host-local profiles.
 
 ALK provides a verifiable finish for external-agent work with proportionate control. It adds only the checks and evidence needed for the task; most of the time remains for research, implementation and product verification.
 
+Release 2.28 adds [bounded lifecycle and accounting baselines](docs/reference/performance-and-resource-budgets.md#release-228-lifecycle-and-accounting-baselines). Repository tools measure real read-only operations and separate fixture preparation from operation and subprocess time. The Windows fixture comparison observed a 13.08% median reduction in one six-sample experiment; it is not a universal speed promise. All security and platform checks remain required.
+
 ## Quick start
 Start with [install ALK and make the first run](docs/guides/install-and-first-run.md). Release 2.23 adds [compact S0/S1 authoring](docs/reference/tier-proportional-plan-packages.md) with explicit checklist completion and unchanged approval gates. Release 2.22 adds [conservative plan-review reuse](docs/reference/conservative-delta-review.md) with independent current applicability and no automatic full reruns. Release 2.21 adds [command accounting, bounded preparation and response recovery](docs/reference/source-native-workflow-accounting.md). Release 2.20 adds [target-bound initialization](docs/reference/cli.md#release-220-composed-initialization-and-digest-display), [bounded local continuation](docs/reference/workflow-continuation.md) and batched Git snapshots. Release 2.19 adds [safe artifact authoring and planning preflight](docs/reference/safe-artifact-authoring.md), [bounded review handoff](docs/reference/review-mesh.md#bounded-review-handoff) and thin skills with complete references. Release 2.18 bounds process/Git diagnostics, hardens signing and distinguishes OpenCode 1.x/2.x compatibility ([adapter notes](docs/adapters/opencode.md)); 2.17 strengthens [workflow validation and recovery](docs/reference/workflow-completeness.md). Release 2.16 introduced cumulative accounting within verified host capabilities; see [retention maintenance](docs/operations/retention-maintenance.md).
 
-It includes macOS, Linux and Windows instructions, Python 3.11-3.15, [PyPI](https://pypi.org/project/agent-lifecycle-kit/) installation with `python -m pip install agent-lifecycle-kit==2.27.0`, and common `agent-lifecycle version` errors. See [2.15 migration notes](docs/reference/cli.md#migrating-authority-artifacts-to-215) and [authority boundaries](docs/reference/authority-artifact-boundaries.md).
+It includes macOS, Linux and Windows instructions, Python 3.11-3.15, [PyPI](https://pypi.org/project/agent-lifecycle-kit/) installation with `python -m pip install agent-lifecycle-kit==2.29.0`, and common `agent-lifecycle version` errors. See [2.15 migration notes](docs/reference/cli.md#migrating-authority-artifacts-to-215) and [authority boundaries](docs/reference/authority-artifact-boundaries.md).
 
 For a quick start, run:
 

{agent_lifecycle_kit-2.27.0 → agent_lifecycle_kit-2.29.0}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "setuptools.build_meta"
 
 [project]
 name = "agent-lifecycle-kit"
-version = "2.27.0"
+version = "2.29.0"
 description = "Provider-neutral lifecycle control layer that helps coding agents plan, execute, validate, and prove software tasks to completion."
 readme = "README.md"
 requires-python = ">=3.11,<3.16"

{agent_lifecycle_kit-2.27.0 → agent_lifecycle_kit-2.29.0}/src/agent_lifecycle/_version.py

@@ -1,3 +1,3 @@
 """Package version."""
 
-__version__ = "2.27.0"
+__version__ = "2.29.0"

{agent_lifecycle_kit-2.27.0 → agent_lifecycle_kit-2.29.0}/src/agent_lifecycle/contracts/authority_io.py

@@ -12,6 +12,7 @@ import time
 import uuid
 from collections.abc import Iterator
 from contextlib import ExitStack, contextmanager, suppress
+from functools import cache
 from pathlib import Path
 from typing import Any, BinaryIO
 
@@ -165,7 +166,7 @@ class _Directory:
     def stat_child(self, name: str) -> os.stat_result:
         if self.fd is not None:
             return os.stat(name, dir_fd=self.fd, follow_symlinks=False)
-        return (self.path / name).stat(follow_symlinks=False)
+        return os.stat(os.path.join(self.path, name), follow_symlinks=False)  # noqa: PTH116, PTH118
 
     def open_child(self, name: str) -> int:
         if self.fd is not None:
@@ -207,11 +208,7 @@ class _Directory:
         elif self.handle is not None:
             if not self.writable:
                 raise LifecycleError("authority-io-unavailable", "Directory write authority is required")
-            from ctypes import wintypes
-
             api = _windows_api()
-            api.FlushFileBuffers.argtypes = [wintypes.HANDLE]
-            api.FlushFileBuffers.restype = wintypes.BOOL
             if not api.FlushFileBuffers(self.handle):
                 raise LifecycleError("authority-durability-unavailable", "Directory durability barrier failed")
         else:
@@ -484,6 +481,18 @@ def append_authority_bytes(path: Path, data: bytes, *, root: Path | None = None)
 
 
 def _windows_api() -> Any:
+    if sys.platform != "win32":
+        raise LifecycleError("authority-io-unavailable", "Windows authority I/O is unavailable")
+    return _windows_api_bindings()
+
+
+@cache
+def _windows_api_bindings() -> Any:
+    """Publish only complete bindings; concurrent first calls may build equivalent copies.
+
+    Cache DLL/function configuration only. Handles, I/O, identities and ctypes'
+    thread-local last-error values remain live at each call site.
+    """
     if sys.platform != "win32":
         raise LifecycleError("authority-io-unavailable", "Windows authority I/O is unavailable")
     import ctypes
@@ -504,6 +513,8 @@ def _windows_api() -> Any:
     api.CloseHandle.restype = wintypes.BOOL
     api.GetFileInformationByHandleEx.argtypes = [wintypes.HANDLE, ctypes.c_int, wintypes.LPVOID, wintypes.DWORD]
     api.GetFileInformationByHandleEx.restype = wintypes.BOOL
+    api.FlushFileBuffers.argtypes = [wintypes.HANDLE]
+    api.FlushFileBuffers.restype = wintypes.BOOL
     return api
 
 

{agent_lifecycle_kit-2.27.0 → agent_lifecycle_kit-2.29.0}/src/agent_lifecycle/contracts/performance_limits.py

@@ -32,7 +32,7 @@ class PerformanceLimits:
     max_simple_literal_rules: int = 64
     max_linux_group_samples_per_second: int = 4
     max_ed25519_optimized_to_reference_median_ratio_bps: int = 2_000
-    max_benchmark_samples_per_case: int = 31
+    max_benchmark_samples_per_case: int = 7
     max_benchmark_output_bytes: int = 16 * 1024 * 1024
     max_evidence_bytes_per_run: int = 96 * 1024 * 1024
 
@@ -126,7 +126,26 @@ def validate_performance_policy(policy: Mapping[str, Any]) -> PerformanceLimits:
     if not isinstance(raw_limits, Mapping):
         raise LifecycleError("performance-policy-limits-invalid", "performance policy limits must be an object")
     limits = performance_limits_from_json(raw_limits)
-    benchmark = policy.get("benchmark")
+    _validate_benchmark_policy(policy.get("benchmark"), limits)
+    operations = policy.get("operations")
+    if (
+        not isinstance(operations, list)
+        or not operations
+        or not all(isinstance(item, str) and item for item in operations)
+    ):
+        raise LifecycleError(
+            "performance-policy-operations-invalid", "performance policy operations must be non-empty strings"
+        )
+    if len(set(operations)) != len(operations):
+        raise LifecycleError("performance-policy-operations-invalid", "performance policy operations must be unique")
+    if policy.get("productionPromotionClaimed") is not False:
+        raise LifecycleError(
+            "performance-policy-promotion-invalid", "performance policy cannot claim production promotion"
+        )
+    return limits
+
+
+def _validate_benchmark_policy(benchmark: Any, limits: PerformanceLimits) -> None:
     if not isinstance(benchmark, Mapping):
         raise LifecycleError("performance-policy-benchmark-invalid", "performance policy benchmark must be an object")
     benchmark_allowed = {
@@ -153,22 +172,27 @@ def validate_performance_policy(policy: Mapping[str, Any]) -> PerformanceLimits:
         raise LifecycleError("performance-policy-benchmark-exceeds-limit", "samplesPerCase exceeds the typed ceiling")
     if benchmark["maxOutputBytes"] > limits.max_benchmark_output_bytes:
         raise LifecycleError("performance-policy-benchmark-exceeds-limit", "maxOutputBytes exceeds the typed ceiling")
-    operations = policy.get("operations")
-    if (
-        not isinstance(operations, list)
-        or not operations
-        or not all(isinstance(item, str) and item for item in operations)
-    ):
+    _validate_benchmark_caps(benchmark, limits)
+
+
+def _validate_benchmark_caps(benchmark: Mapping[str, Any], limits: PerformanceLimits) -> None:
+    hard_caps = {
+        "warmupSamples": 2,
+        "samplesPerCase": 7,
+        "maxCommandWallSeconds": 120,
+        "maxTotalWallSeconds": 600,
+        "maxOutputBytes": 16 * 1024 * 1024,
+    }
+    if any(benchmark[name] > cap for name, cap in hard_caps.items()):
         raise LifecycleError(
-            "performance-policy-operations-invalid", "performance policy operations must be non-empty strings"
+            "performance-policy-benchmark-exceeds-limit",
+            "Benchmark exceeds an immutable sampling, wall or output ceiling",
         )
-    if len(set(operations)) != len(operations):
-        raise LifecycleError("performance-policy-operations-invalid", "performance policy operations must be unique")
-    if policy.get("productionPromotionClaimed") is not False:
+    if limits.max_benchmark_samples_per_case > 7 or limits.max_benchmark_output_bytes > 16 * 1024 * 1024:
         raise LifecycleError(
-            "performance-policy-promotion-invalid", "performance policy cannot claim production promotion"
+            "performance-policy-benchmark-exceeds-limit",
+            "Typed benchmark ceilings cannot exceed the hard limits",
         )
-    return limits
 
 
 __all__ = [

{agent_lifecycle_kit-2.27.0 → agent_lifecycle_kit-2.29.0/src/agent_lifecycle_kit.egg-info}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: agent-lifecycle-kit
-Version: 2.27.0
+Version: 2.29.0
 Summary: Provider-neutral lifecycle control layer that helps coding agents plan, execute, validate, and prove software tasks to completion.
 Author: Agent Lifecycle Kit contributors
 License: Apache-2.0
@@ -29,20 +29,20 @@ Dynamic: license-file
 
 [![License: Apache-2.0](https://img.shields.io/badge/license-Apache--2.0-green.svg)](LICENSE)
 [![Release](https://img.shields.io/github/v/release/avksp/agent-lifecycle-kit?label=release)](https://github.com/avksp/agent-lifecycle-kit/releases)
-![Python](https://img.shields.io/badge/python-3.11--3.14-blue.svg)
+![Python](https://img.shields.io/badge/python-3.11--3.15-blue.svg)
 
-**Agent Lifecycle Kit (ALK)** coordinates coding-agent work through a verifiable finish. It keeps the requested outcome, reviewed plan, execution boundaries, evidence and
-acceptance decisions connected while the external agent changes the project.
+**Agent Lifecycle Kit (ALK)** coordinates coding-agent work through a verifiable finish. It keeps the requested outcome, reviewed plan, execution boundaries, evidence and acceptance decisions connected while the external agent changes the project.
 
-The provider-neutral workflow works with Codex, Claude Code, Qwen Code, Goose, OpenInterpreter, Pi, Grok Build, or another CLI. Provider commands, model choice and secret handling
-stay in adapters or host-local profiles.
+The provider-neutral workflow works with Codex, Claude Code, Qwen Code, Goose, OpenInterpreter, Pi, Grok Build, or another CLI. Provider commands, model choice and secret handling stay in adapters or host-local profiles.
 
 ALK provides a verifiable finish for external-agent work with proportionate control. It adds only the checks and evidence needed for the task; most of the time remains for research, implementation and product verification.
 
+Release 2.28 adds [bounded lifecycle and accounting baselines](docs/reference/performance-and-resource-budgets.md#release-228-lifecycle-and-accounting-baselines). Repository tools measure real read-only operations and separate fixture preparation from operation and subprocess time. The Windows fixture comparison observed a 13.08% median reduction in one six-sample experiment; it is not a universal speed promise. All security and platform checks remain required.
+
 ## Quick start
 Start with [install ALK and make the first run](docs/guides/install-and-first-run.md). Release 2.23 adds [compact S0/S1 authoring](docs/reference/tier-proportional-plan-packages.md) with explicit checklist completion and unchanged approval gates. Release 2.22 adds [conservative plan-review reuse](docs/reference/conservative-delta-review.md) with independent current applicability and no automatic full reruns. Release 2.21 adds [command accounting, bounded preparation and response recovery](docs/reference/source-native-workflow-accounting.md). Release 2.20 adds [target-bound initialization](docs/reference/cli.md#release-220-composed-initialization-and-digest-display), [bounded local continuation](docs/reference/workflow-continuation.md) and batched Git snapshots. Release 2.19 adds [safe artifact authoring and planning preflight](docs/reference/safe-artifact-authoring.md), [bounded review handoff](docs/reference/review-mesh.md#bounded-review-handoff) and thin skills with complete references. Release 2.18 bounds process/Git diagnostics, hardens signing and distinguishes OpenCode 1.x/2.x compatibility ([adapter notes](docs/adapters/opencode.md)); 2.17 strengthens [workflow validation and recovery](docs/reference/workflow-completeness.md). Release 2.16 introduced cumulative accounting within verified host capabilities; see [retention maintenance](docs/operations/retention-maintenance.md).
 
-It includes macOS, Linux and Windows instructions, Python 3.11-3.15, [PyPI](https://pypi.org/project/agent-lifecycle-kit/) installation with `python -m pip install agent-lifecycle-kit==2.27.0`, and common `agent-lifecycle version` errors. See [2.15 migration notes](docs/reference/cli.md#migrating-authority-artifacts-to-215) and [authority boundaries](docs/reference/authority-artifact-boundaries.md).
+It includes macOS, Linux and Windows instructions, Python 3.11-3.15, [PyPI](https://pypi.org/project/agent-lifecycle-kit/) installation with `python -m pip install agent-lifecycle-kit==2.29.0`, and common `agent-lifecycle version` errors. See [2.15 migration notes](docs/reference/cli.md#migrating-authority-artifacts-to-215) and [authority boundaries](docs/reference/authority-artifact-boundaries.md).
 
 For a quick start, run: