agent-lifecycle-kit 2.32.0__tar.gz → 2.33.0__tar.gz

{agent_lifecycle_kit-2.32.0/src/agent_lifecycle_kit.egg-info → agent_lifecycle_kit-2.33.0}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: agent-lifecycle-kit
-Version: 2.32.0
+Version: 2.33.0
 Summary: Provider-neutral lifecycle control layer that helps coding agents plan, execute, validate, and prove software tasks to completion.
 Author: Agent Lifecycle Kit contributors
 License: Apache-2.0
@@ -35,14 +35,14 @@ Dynamic: license-file
 
 The provider-neutral workflow works with Codex, Claude Code, Qwen Code, Goose, OpenInterpreter, Pi, Grok Build, or another CLI. Provider commands, model choice and secret handling stay in adapters or host-local profiles.
 
-Release 2.32 adds [advisory process observations and eight selected reading routes](docs/reference/cli.md#release-232-process-observations-and-reading-scope); missing whole-run evidence and provider usage remain null/UNAVAILABLE. ALK provides a verifiable finish for external-agent work with proportionate control. Release 2.31 strengthens supported-text secret checks, enforces global branch and critical-file coverage floors, and gives a bounded structural refusal for malformed legacy state. See [the 2.31 check boundaries](docs/reference/cli.md#release-231-bounded-quality-checks). See [workflow history and recovery](docs/reference/workflow-state-storage.md) for the earlier storage and renewal features. Install the Python package as well as the plugin for the new CLI commands.
+Release 2.33 simplifies selected internal boundaries and checks the release validators themselves. It removes two private-import allowances (83 to 81), reduces one final-evidence flow from 58 to 41 branches, and adds selected Ruff/strict-mypy checks without increasing runtime baselines. Existing architecture debt remains visible. See [the 2.33 scope](docs/reference/cli.md#release-233-selected-architecture-and-tooling-quality). Release 2.32 adds [advisory process observations and eight selected reading routes](docs/reference/cli.md#release-232-process-observations-and-reading-scope); missing whole-run evidence and provider usage remain null/UNAVAILABLE. ALK provides a verifiable finish for external-agent work with proportionate control. Release 2.31 strengthens supported-text secret checks, enforces global branch and critical-file coverage floors, and gives a bounded structural refusal for malformed legacy state. See [the 2.31 check boundaries](docs/reference/cli.md#release-231-bounded-quality-checks). See [workflow history and recovery](docs/reference/workflow-state-storage.md) for the earlier storage and renewal features. Install the Python package as well as the plugin for the new CLI commands.
 
 Release 2.28 adds [bounded lifecycle and accounting baselines](docs/reference/performance-and-resource-budgets.md#release-228-lifecycle-and-accounting-baselines). Repository tools measure real read-only operations and separate fixture preparation from operation and subprocess time. The Windows fixture comparison observed a 13.08% median reduction in one six-sample experiment; it is not a universal speed promise. All security and platform checks remain required.
 
 ## Quick start
 Start with [install ALK and make the first run](docs/guides/install-and-first-run.md). Release 2.23 adds [compact S0/S1 authoring](docs/reference/tier-proportional-plan-packages.md) with explicit checklist completion and unchanged approval gates. Release 2.22 adds [conservative plan-review reuse](docs/reference/conservative-delta-review.md) with independent current applicability and no automatic full reruns. Release 2.21 adds [command accounting, bounded preparation and response recovery](docs/reference/source-native-workflow-accounting.md). Release 2.20 adds [target-bound initialization](docs/reference/cli.md#release-220-composed-initialization-and-digest-display), [bounded local continuation](docs/reference/workflow-continuation.md) and batched Git snapshots. Release 2.19 adds [safe artifact authoring and planning preflight](docs/reference/safe-artifact-authoring.md), [bounded review handoff](docs/reference/review-mesh.md#bounded-review-handoff) and thin skills with complete references. Release 2.18 bounds process/Git diagnostics, hardens signing and distinguishes OpenCode 1.x/2.x compatibility ([adapter notes](docs/adapters/opencode.md)); 2.17 strengthens [workflow validation and recovery](docs/reference/workflow-completeness.md). Release 2.16 introduced cumulative accounting within verified host capabilities; see [retention maintenance](docs/operations/retention-maintenance.md).
 
-It includes macOS, Linux and Windows instructions, Python 3.11-3.15, [PyPI](https://pypi.org/project/agent-lifecycle-kit/) installation with `python -m pip install agent-lifecycle-kit==2.32.0`, and common `agent-lifecycle version` errors. See [2.15 migration notes](docs/reference/cli.md#migrating-authority-artifacts-to-215) and [authority boundaries](docs/reference/authority-artifact-boundaries.md).
+It includes macOS, Linux and Windows instructions, Python 3.11-3.15, [PyPI](https://pypi.org/project/agent-lifecycle-kit/) installation with `python -m pip install agent-lifecycle-kit==2.33.0`, and common `agent-lifecycle version` errors. See [2.15 migration notes](docs/reference/cli.md#migrating-authority-artifacts-to-215) and [authority boundaries](docs/reference/authority-artifact-boundaries.md).
 
 For a quick start, run:
 

{agent_lifecycle_kit-2.32.0 → agent_lifecycle_kit-2.33.0}/README.md

@@ -12,14 +12,14 @@
 
 The provider-neutral workflow works with Codex, Claude Code, Qwen Code, Goose, OpenInterpreter, Pi, Grok Build, or another CLI. Provider commands, model choice and secret handling stay in adapters or host-local profiles.
 
-Release 2.32 adds [advisory process observations and eight selected reading routes](docs/reference/cli.md#release-232-process-observations-and-reading-scope); missing whole-run evidence and provider usage remain null/UNAVAILABLE. ALK provides a verifiable finish for external-agent work with proportionate control. Release 2.31 strengthens supported-text secret checks, enforces global branch and critical-file coverage floors, and gives a bounded structural refusal for malformed legacy state. See [the 2.31 check boundaries](docs/reference/cli.md#release-231-bounded-quality-checks). See [workflow history and recovery](docs/reference/workflow-state-storage.md) for the earlier storage and renewal features. Install the Python package as well as the plugin for the new CLI commands.
+Release 2.33 simplifies selected internal boundaries and checks the release validators themselves. It removes two private-import allowances (83 to 81), reduces one final-evidence flow from 58 to 41 branches, and adds selected Ruff/strict-mypy checks without increasing runtime baselines. Existing architecture debt remains visible. See [the 2.33 scope](docs/reference/cli.md#release-233-selected-architecture-and-tooling-quality). Release 2.32 adds [advisory process observations and eight selected reading routes](docs/reference/cli.md#release-232-process-observations-and-reading-scope); missing whole-run evidence and provider usage remain null/UNAVAILABLE. ALK provides a verifiable finish for external-agent work with proportionate control. Release 2.31 strengthens supported-text secret checks, enforces global branch and critical-file coverage floors, and gives a bounded structural refusal for malformed legacy state. See [the 2.31 check boundaries](docs/reference/cli.md#release-231-bounded-quality-checks). See [workflow history and recovery](docs/reference/workflow-state-storage.md) for the earlier storage and renewal features. Install the Python package as well as the plugin for the new CLI commands.
 
 Release 2.28 adds [bounded lifecycle and accounting baselines](docs/reference/performance-and-resource-budgets.md#release-228-lifecycle-and-accounting-baselines). Repository tools measure real read-only operations and separate fixture preparation from operation and subprocess time. The Windows fixture comparison observed a 13.08% median reduction in one six-sample experiment; it is not a universal speed promise. All security and platform checks remain required.
 
 ## Quick start
 Start with [install ALK and make the first run](docs/guides/install-and-first-run.md). Release 2.23 adds [compact S0/S1 authoring](docs/reference/tier-proportional-plan-packages.md) with explicit checklist completion and unchanged approval gates. Release 2.22 adds [conservative plan-review reuse](docs/reference/conservative-delta-review.md) with independent current applicability and no automatic full reruns. Release 2.21 adds [command accounting, bounded preparation and response recovery](docs/reference/source-native-workflow-accounting.md). Release 2.20 adds [target-bound initialization](docs/reference/cli.md#release-220-composed-initialization-and-digest-display), [bounded local continuation](docs/reference/workflow-continuation.md) and batched Git snapshots. Release 2.19 adds [safe artifact authoring and planning preflight](docs/reference/safe-artifact-authoring.md), [bounded review handoff](docs/reference/review-mesh.md#bounded-review-handoff) and thin skills with complete references. Release 2.18 bounds process/Git diagnostics, hardens signing and distinguishes OpenCode 1.x/2.x compatibility ([adapter notes](docs/adapters/opencode.md)); 2.17 strengthens [workflow validation and recovery](docs/reference/workflow-completeness.md). Release 2.16 introduced cumulative accounting within verified host capabilities; see [retention maintenance](docs/operations/retention-maintenance.md).
 
-It includes macOS, Linux and Windows instructions, Python 3.11-3.15, [PyPI](https://pypi.org/project/agent-lifecycle-kit/) installation with `python -m pip install agent-lifecycle-kit==2.32.0`, and common `agent-lifecycle version` errors. See [2.15 migration notes](docs/reference/cli.md#migrating-authority-artifacts-to-215) and [authority boundaries](docs/reference/authority-artifact-boundaries.md).
+It includes macOS, Linux and Windows instructions, Python 3.11-3.15, [PyPI](https://pypi.org/project/agent-lifecycle-kit/) installation with `python -m pip install agent-lifecycle-kit==2.33.0`, and common `agent-lifecycle version` errors. See [2.15 migration notes](docs/reference/cli.md#migrating-authority-artifacts-to-215) and [authority boundaries](docs/reference/authority-artifact-boundaries.md).
 
 For a quick start, run:
 

{agent_lifecycle_kit-2.32.0 → agent_lifecycle_kit-2.33.0}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "setuptools.build_meta"
 
 [project]
 name = "agent-lifecycle-kit"
-version = "2.32.0"
+version = "2.33.0"
 description = "Provider-neutral lifecycle control layer that helps coding agents plan, execute, validate, and prove software tasks to completion."
 readme = "README.md"
 requires-python = ">=3.11,<3.16"

{agent_lifecycle_kit-2.32.0 → agent_lifecycle_kit-2.33.0}/src/agent_lifecycle/_version.py

@@ -1,3 +1,3 @@
 """Package version."""
 
-__version__ = "2.32.0"
+__version__ = "2.33.0"

{agent_lifecycle_kit-2.32.0 → agent_lifecycle_kit-2.33.0}/src/agent_lifecycle/accounting/host_bridge.py

@@ -64,7 +64,8 @@ def _no_duplicates(pairs: list[tuple[str, Any]]) -> dict[str, Any]:
     return value
 
 
-def _json(raw: bytes) -> dict[str, Any]:
+def decode_json_object(raw: bytes) -> dict[str, Any]:
+    """Decode raw accounting JSON with the existing strict object/error contract."""
     try:
         value = json.loads(
             raw, object_pairs_hook=_no_duplicates, parse_constant=lambda _value: _fail("accounting-json-invalid")
@@ -76,6 +77,9 @@ def _json(raw: bytes) -> dict[str, Any]:
     return value
 
 
+_json = decode_json_object
+
+
 class BoundedReader:
     """One immutable input snapshot and a shared conservative content-read budget."""
 

{agent_lifecycle_kit-2.32.0 → agent_lifecycle_kit-2.33.0}/src/agent_lifecycle/adapter_sessions/limited_native_evidence.py

@@ -10,7 +10,14 @@ import hashlib
 from datetime import UTC, datetime
 from pathlib import Path
 
-from agent_lifecycle.accounting.host_bridge import ARTIFACT_BYTES, PROFILE_BYTES, BoundedReader, _json
+from agent_lifecycle.accounting.host_bridge import (
+    ARTIFACT_BYTES,
+    PROFILE_BYTES,
+    BoundedReader,
+)
+from agent_lifecycle.accounting.host_bridge import (
+    decode_json_object as _json,
+)
 from agent_lifecycle.adapter_sessions.attempt_authority import _invocation_namespace, require_positive_attempt_result
 from agent_lifecycle.adapter_sessions.ordinary_audit import verify_area_report
 from agent_lifecycle.adapter_sessions.qualification_context import (

{agent_lifecycle_kit-2.32.0 → agent_lifecycle_kit-2.33.0}/src/agent_lifecycle/workflow/closing_policy.py

@@ -4,14 +4,15 @@ from __future__ import annotations
 
 from typing import Any
 
+from agent_lifecycle.contracts.closing_time import closing_instant
 from agent_lifecycle.contracts.errors import LifecycleError
-from agent_lifecycle.contracts.workflow_state_schemas import _closing_instant, validate_closing_context
+from agent_lifecycle.contracts.workflow_state_schemas import validate_closing_context
 
 
 def evaluate_closing_action(context: dict[str, Any], action: str, now: str, subject: dict[str, Any]) -> dict[str, Any]:
     """Classify supplied data before independent native authority and gate checks."""
     validated = validate_closing_context(context)
-    current = _closing_instant(now, "now")
+    current = closing_instant(now, "now")
     if type(subject) is not dict or set(subject) != {
         "runId",
         "packageId",
@@ -26,9 +27,9 @@ def evaluate_closing_action(context: dict[str, Any], action: str, now: str, subj
         raise LifecycleError("closing-context-invalid", "Closing subject differs from the active window")
     matched = type(action) is str and action in validated["allowedActions"]
     in_window = (
-        _closing_instant(validated["validFrom"], "validFrom")
+        closing_instant(validated["validFrom"], "validFrom")
         <= current
-        < _closing_instant(validated["expiresAt"], "expiresAt")
+        < closing_instant(validated["expiresAt"], "expiresAt")
     )
     return {
         "schemaVersion": "agent-closing-action-classification.v1",

{agent_lifecycle_kit-2.32.0 → agent_lifecycle_kit-2.33.0}/src/agent_lifecycle/workflow/implementation_audit_gate.py

@@ -295,6 +295,32 @@ def _revalidate_task_evidence_report(
         raise LifecycleError("evidence-contract-invalid", "audit evidence summary is stale or incomplete")
 
 
+def _accepted_final_typed_tasks(state: dict[str, Any], frozen: dict[Any, Any], typed_ids: set[str]) -> dict[Any, Any]:
+    """Check frozen evidence membership before any final report is loaded."""
+    expected = {}
+    for task in state.get("tasks", []):
+        if not isinstance(task, dict) or task.get("status") != "ACCEPTED":
+            continue
+        task_id = task.get("id")
+        owner = frozen.get(task_id)
+        if owner is None:
+            raise LifecycleError("evidence-contract-invalid", "accepted task is outside frozen plan")
+        required = owner.get("evidenceIds")
+        if not isinstance(required, list) or any(not isinstance(item, str) for item in required):
+            raise LifecycleError("evidence-contract-invalid", "frozen task evidence inventory is invalid")
+        if typed_ids.intersection(required):
+            if task.get("evidenceIds") != required or task_id in expected:
+                raise LifecycleError("evidence-contract-invalid", "typed task evidence inventory changed")
+            expected[task_id] = task
+    for owner in frozen.values():
+        ids = owner.get("evidenceIds", [])
+        if not isinstance(ids, list) or any(not isinstance(item, str) for item in ids):
+            raise LifecycleError("evidence-contract-invalid", "frozen evidence IDs are invalid")
+        if owner.get("required", True) and typed_ids.intersection(ids) and owner["id"] not in expected:
+            raise LifecycleError("evidence-contract-invalid", "required typed task is not accepted")
+    return expected
+
+
 def validate_final_task_evidence_reports(
     state_path: Path,
     state: dict[str, Any],
@@ -328,27 +354,7 @@ def validate_final_task_evidence_reports(
     frozen = {item["id"]: item for item in workstreams if isinstance(item, dict) and isinstance(item.get("id"), str)}
     if len(frozen) != len(workstreams):
         raise LifecycleError("evidence-contract-invalid", "typed workstream IDs are ambiguous")
-    expected = {}
-    for task in state.get("tasks", []):
-        if not isinstance(task, dict) or task.get("status") != "ACCEPTED":
-            continue
-        task_id = task.get("id")
-        owner = frozen.get(task_id)
-        if owner is None:
-            raise LifecycleError("evidence-contract-invalid", "accepted task is outside frozen plan")
-        required = owner.get("evidenceIds")
-        if not isinstance(required, list) or any(not isinstance(item, str) for item in required):
-            raise LifecycleError("evidence-contract-invalid", "frozen task evidence inventory is invalid")
-        if typed_ids.intersection(required):
-            if task.get("evidenceIds") != required or task_id in expected:
-                raise LifecycleError("evidence-contract-invalid", "typed task evidence inventory changed")
-            expected[task_id] = task
-    for owner in frozen.values():
-        ids = owner.get("evidenceIds", [])
-        if not isinstance(ids, list) or any(not isinstance(item, str) for item in ids):
-            raise LifecycleError("evidence-contract-invalid", "frozen evidence IDs are invalid")
-        if owner.get("required", True) and typed_ids.intersection(ids) and owner["id"] not in expected:
-            raise LifecycleError("evidence-contract-invalid", "required typed task is not accepted")
+    expected = _accepted_final_typed_tasks(state, frozen, typed_ids)
     reports = audit.get("reports")
     if not isinstance(reports, list) or audit.get("missingTaskIds") != []:
         raise LifecycleError("evidence-contract-invalid", "final audit report inventory is incomplete")

{agent_lifecycle_kit-2.32.0 → agent_lifecycle_kit-2.33.0/src/agent_lifecycle_kit.egg-info}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: agent-lifecycle-kit
-Version: 2.32.0
+Version: 2.33.0
 Summary: Provider-neutral lifecycle control layer that helps coding agents plan, execute, validate, and prove software tasks to completion.
 Author: Agent Lifecycle Kit contributors
 License: Apache-2.0
@@ -35,14 +35,14 @@ Dynamic: license-file
 
 The provider-neutral workflow works with Codex, Claude Code, Qwen Code, Goose, OpenInterpreter, Pi, Grok Build, or another CLI. Provider commands, model choice and secret handling stay in adapters or host-local profiles.
 
-Release 2.32 adds [advisory process observations and eight selected reading routes](docs/reference/cli.md#release-232-process-observations-and-reading-scope); missing whole-run evidence and provider usage remain null/UNAVAILABLE. ALK provides a verifiable finish for external-agent work with proportionate control. Release 2.31 strengthens supported-text secret checks, enforces global branch and critical-file coverage floors, and gives a bounded structural refusal for malformed legacy state. See [the 2.31 check boundaries](docs/reference/cli.md#release-231-bounded-quality-checks). See [workflow history and recovery](docs/reference/workflow-state-storage.md) for the earlier storage and renewal features. Install the Python package as well as the plugin for the new CLI commands.
+Release 2.33 simplifies selected internal boundaries and checks the release validators themselves. It removes two private-import allowances (83 to 81), reduces one final-evidence flow from 58 to 41 branches, and adds selected Ruff/strict-mypy checks without increasing runtime baselines. Existing architecture debt remains visible. See [the 2.33 scope](docs/reference/cli.md#release-233-selected-architecture-and-tooling-quality). Release 2.32 adds [advisory process observations and eight selected reading routes](docs/reference/cli.md#release-232-process-observations-and-reading-scope); missing whole-run evidence and provider usage remain null/UNAVAILABLE. ALK provides a verifiable finish for external-agent work with proportionate control. Release 2.31 strengthens supported-text secret checks, enforces global branch and critical-file coverage floors, and gives a bounded structural refusal for malformed legacy state. See [the 2.31 check boundaries](docs/reference/cli.md#release-231-bounded-quality-checks). See [workflow history and recovery](docs/reference/workflow-state-storage.md) for the earlier storage and renewal features. Install the Python package as well as the plugin for the new CLI commands.
 
 Release 2.28 adds [bounded lifecycle and accounting baselines](docs/reference/performance-and-resource-budgets.md#release-228-lifecycle-and-accounting-baselines). Repository tools measure real read-only operations and separate fixture preparation from operation and subprocess time. The Windows fixture comparison observed a 13.08% median reduction in one six-sample experiment; it is not a universal speed promise. All security and platform checks remain required.
 
 ## Quick start
 Start with [install ALK and make the first run](docs/guides/install-and-first-run.md). Release 2.23 adds [compact S0/S1 authoring](docs/reference/tier-proportional-plan-packages.md) with explicit checklist completion and unchanged approval gates. Release 2.22 adds [conservative plan-review reuse](docs/reference/conservative-delta-review.md) with independent current applicability and no automatic full reruns. Release 2.21 adds [command accounting, bounded preparation and response recovery](docs/reference/source-native-workflow-accounting.md). Release 2.20 adds [target-bound initialization](docs/reference/cli.md#release-220-composed-initialization-and-digest-display), [bounded local continuation](docs/reference/workflow-continuation.md) and batched Git snapshots. Release 2.19 adds [safe artifact authoring and planning preflight](docs/reference/safe-artifact-authoring.md), [bounded review handoff](docs/reference/review-mesh.md#bounded-review-handoff) and thin skills with complete references. Release 2.18 bounds process/Git diagnostics, hardens signing and distinguishes OpenCode 1.x/2.x compatibility ([adapter notes](docs/adapters/opencode.md)); 2.17 strengthens [workflow validation and recovery](docs/reference/workflow-completeness.md). Release 2.16 introduced cumulative accounting within verified host capabilities; see [retention maintenance](docs/operations/retention-maintenance.md).
 
-It includes macOS, Linux and Windows instructions, Python 3.11-3.15, [PyPI](https://pypi.org/project/agent-lifecycle-kit/) installation with `python -m pip install agent-lifecycle-kit==2.32.0`, and common `agent-lifecycle version` errors. See [2.15 migration notes](docs/reference/cli.md#migrating-authority-artifacts-to-215) and [authority boundaries](docs/reference/authority-artifact-boundaries.md).
+It includes macOS, Linux and Windows instructions, Python 3.11-3.15, [PyPI](https://pypi.org/project/agent-lifecycle-kit/) installation with `python -m pip install agent-lifecycle-kit==2.33.0`, and common `agent-lifecycle version` errors. See [2.15 migration notes](docs/reference/cli.md#migrating-authority-artifacts-to-215) and [authority boundaries](docs/reference/authority-artifact-boundaries.md).
 
 For a quick start, run: