agent-os-kernel 1.1.0__py3-none-any.whl → 1.3.0__py3-none-any.whl

modules/emk/tests/test_store_anti_patterns.py

@@ -0,0 +1,239 @@
+"""Tests for store adapter anti-pattern functionality."""
+
+import pytest
+import tempfile
+import os
+
+from emk.schema import Episode
+from emk.store import FileAdapter
+
+
+@pytest.fixture
+def temp_file():
+    """Create a temporary file for testing."""
+    fd, path = tempfile.mkstemp(suffix=".jsonl")
+    os.close(fd)
+    yield path
+    # Cleanup
+    if os.path.exists(path):
+        os.remove(path)
+
+
+def test_retrieve_failures(temp_file):
+    """Test retrieving only failure episodes."""
+    adapter = FileAdapter(temp_file)
+    
+    # Store mix of success and failure episodes
+    success_episode = Episode(
+        goal="Success goal",
+        action="Success action",
+        result="Success",
+        reflection="Worked well"
+    )
+    adapter.store(success_episode)
+    
+    failure_episode1 = Episode(
+        goal="Failure goal 1",
+        action="Failure action 1",
+        result="Failed",
+        reflection="Need to fix",
+        metadata={"is_failure": True, "failure_reason": "Timeout"}
+    )
+    adapter.store(failure_episode1)
+    
+    failure_episode2 = Episode(
+        goal="Failure goal 2",
+        action="Failure action 2",
+        result="Failed",
+        reflection="Error occurred",
+        metadata={"is_failure": True, "failure_reason": "Connection error"}
+    )
+    adapter.store(failure_episode2)
+    
+    # Retrieve only failures
+    failures = adapter.retrieve_failures()
+    
+    assert len(failures) == 2
+    assert all(ep.is_failure() for ep in failures)
+
+
+def test_retrieve_successes(temp_file):
+    """Test retrieving only successful episodes."""
+    adapter = FileAdapter(temp_file)
+    
+    # Store mix of success and failure episodes
+    for i in range(3):
+        success_episode = Episode(
+            goal=f"Success goal {i}",
+            action=f"Success action {i}",
+            result="Success",
+            reflection="Worked well"
+        )
+        adapter.store(success_episode)
+    
+    failure_episode = Episode(
+        goal="Failure goal",
+        action="Failure action",
+        result="Failed",
+        reflection="Need to fix",
+        metadata={"is_failure": True}
+    )
+    adapter.store(failure_episode)
+    
+    # Retrieve only successes
+    successes = adapter.retrieve_successes()
+    
+    assert len(successes) == 3
+    assert all(not ep.is_failure() for ep in successes)
+
+
+def test_retrieve_with_anti_patterns(temp_file):
+    """Test retrieving both successes and failures."""
+    adapter = FileAdapter(temp_file)
+    
+    # Store multiple episodes
+    for i in range(2):
+        success = Episode(
+            goal=f"API call {i}",
+            action="GET /api/data",
+            result="200 OK",
+            reflection="Success"
+        )
+        adapter.store(success)
+    
+    for i in range(2):
+        failure = Episode(
+            goal=f"API call {i}",
+            action="GET /api/data",
+            result="500 Error",
+            reflection="Failed",
+            metadata={"is_failure": True}
+        )
+        adapter.store(failure)
+    
+    # Retrieve both
+    result = adapter.retrieve_with_anti_patterns(limit=5)
+    
+    assert "successes" in result
+    assert "failures" in result
+    assert len(result["successes"]) == 2
+    assert len(result["failures"]) == 2
+
+
+def test_retrieve_with_anti_patterns_no_failures(temp_file):
+    """Test retrieve with anti-patterns when no failures exist."""
+    adapter = FileAdapter(temp_file)
+    
+    # Store only successes
+    for i in range(3):
+        episode = Episode(
+            goal=f"Goal {i}",
+            action=f"Action {i}",
+            result="Success",
+            reflection="Done"
+        )
+        adapter.store(episode)
+    
+    result = adapter.retrieve_with_anti_patterns()
+    
+    assert len(result["successes"]) == 3
+    assert len(result["failures"]) == 0
+
+
+def test_retrieve_with_anti_patterns_exclude_failures(temp_file):
+    """Test retrieve with anti-patterns with failures excluded."""
+    adapter = FileAdapter(temp_file)
+    
+    # Store both types
+    success = Episode(goal="Success", action="A", result="OK", reflection="Good")
+    adapter.store(success)
+    
+    failure = Episode(
+        goal="Failure",
+        action="B",
+        result="Error",
+        reflection="Bad",
+        metadata={"is_failure": True}
+    )
+    adapter.store(failure)
+    
+    # Retrieve without failures
+    result = adapter.retrieve_with_anti_patterns(include_failures=False)
+    
+    assert len(result["successes"]) == 1
+    assert len(result["failures"]) == 0
+
+
+def test_retrieve_failures_with_additional_filters(temp_file):
+    """Test retrieving failures with additional metadata filters."""
+    adapter = FileAdapter(temp_file)
+    
+    # Store failures with different metadata
+    failure1 = Episode(
+        goal="API failure",
+        action="GET /api",
+        result="Error",
+        reflection="Failed",
+        metadata={"is_failure": True, "user_id": "123"}
+    )
+    adapter.store(failure1)
+    
+    failure2 = Episode(
+        goal="DB failure",
+        action="Query DB",
+        result="Error",
+        reflection="Failed",
+        metadata={"is_failure": True, "user_id": "456"}
+    )
+    adapter.store(failure2)
+    
+    # Retrieve failures for specific user
+    user_failures = adapter.retrieve_failures(filters={"user_id": "123"})
+    
+    assert len(user_failures) == 1
+    assert user_failures[0].metadata["user_id"] == "123"
+
+
+def test_retrieve_successes_with_limit(temp_file):
+    """Test retrieving successes with limit."""
+    adapter = FileAdapter(temp_file)
+    
+    # Store many successes
+    for i in range(10):
+        episode = Episode(
+            goal=f"Goal {i}",
+            action=f"Action {i}",
+            result="Success",
+            reflection="Done"
+        )
+        adapter.store(episode)
+    
+    # Store one failure
+    failure = Episode(
+        goal="Failure",
+        action="Action",
+        result="Error",
+        reflection="Failed",
+        metadata={"is_failure": True}
+    )
+    adapter.store(failure)
+    
+    # Retrieve with limit
+    successes = adapter.retrieve_successes(limit=5)
+    
+    assert len(successes) == 5
+    assert all(not ep.is_failure() for ep in successes)
+
+
+def test_retrieve_empty_store(temp_file):
+    """Test retrieving from empty store."""
+    adapter = FileAdapter(temp_file)
+    
+    failures = adapter.retrieve_failures()
+    successes = adapter.retrieve_successes()
+    result = adapter.retrieve_with_anti_patterns()
+    
+    assert len(failures) == 0
+    assert len(successes) == 0
+    assert len(result["successes"]) == 0
+    assert len(result["failures"]) == 0

modules/iatp/.github/workflows/docker-build.yml

@@ -0,0 +1,124 @@
+name: Docker Build and Push
+
+on:
+  push:
+    branches:
+      - main
+      - develop
+    tags:
+      - 'v*'
+  pull_request:
+    branches:
+      - main
+      - develop
+
+env:
+  REGISTRY: ghcr.io
+  IMAGE_PREFIX: imran-siddique/iatp
+
+jobs:
+  build-and-push:
+    runs-on: ubuntu-latest
+    permissions:
+      contents: read
+      packages: write
+
+    strategy:
+      matrix:
+        include:
+          - dockerfile: docker/Dockerfile.sidecar-python
+            image-name: sidecar-python
+            context: .
+          - dockerfile: docker/Dockerfile.agent
+            image-name: agent
+            context: .
+
+    steps:
+      - name: Checkout repository
+        uses: actions/checkout@v4
+
+      - name: Set up Docker Buildx
+        uses: docker/setup-buildx-action@v3
+
+      - name: Log in to Container Registry
+        if: github.event_name != 'pull_request'
+        uses: docker/login-action@v3
+        with:
+          registry: ${{ env.REGISTRY }}
+          username: ${{ github.actor }}
+          password: ${{ secrets.GITHUB_TOKEN }}
+
+      - name: Extract metadata
+        id: meta
+        uses: docker/metadata-action@v5
+        with:
+          images: ${{ env.REGISTRY }}/${{ env.IMAGE_PREFIX }}-${{ matrix.image-name }}
+          tags: |
+            type=ref,event=branch
+            type=ref,event=pr
+            type=semver,pattern={{version}}
+            type=semver,pattern={{major}}.{{minor}}
+            type=semver,pattern={{major}}
+            type=sha
+
+      - name: Build and push Docker image
+        uses: docker/build-push-action@v5
+        with:
+          context: ${{ matrix.context }}
+          file: ${{ matrix.dockerfile }}
+          push: ${{ github.event_name != 'pull_request' }}
+          tags: ${{ steps.meta.outputs.tags }}
+          labels: ${{ steps.meta.outputs.labels }}
+          cache-from: type=gha
+          cache-to: type=gha,mode=max
+
+      - name: Image digest
+        run: echo ${{ steps.meta.outputs.digest }}
+
+  test-compose:
+    runs-on: ubuntu-latest
+    needs: build-and-push
+    if: github.event_name == 'pull_request'
+    permissions:
+      contents: read
+
+    steps:
+      - name: Checkout repository
+        uses: actions/checkout@v4
+
+      - name: Set up Docker Compose
+        run: |
+          docker compose version
+
+      - name: Build services
+        run: |
+          docker compose build bank-agent iatp-sidecar-python honeypot-agent honeypot-sidecar
+
+      - name: Start services
+        run: |
+          docker compose up -d bank-agent iatp-sidecar-python honeypot-agent honeypot-sidecar
+
+      - name: Wait for services
+        run: |
+          sleep 30
+
+      - name: Check service health
+        run: |
+          docker compose ps
+          docker compose logs bank-agent
+          docker compose logs iatp-sidecar-python
+          docker compose logs honeypot-agent
+          docker compose logs honeypot-sidecar
+
+      - name: Test secure bank agent
+        run: |
+          curl -f http://localhost:8000/health || exit 1
+
+      - name: Test sidecar health
+        run: |
+          curl -f http://localhost:8001/health || exit 1
+
+      - name: Stop services
+        if: always()
+        run: |
+          docker compose down -v

modules/iatp/.github/workflows/publish.yml

@@ -0,0 +1,174 @@
+# =============================================================================
+# PyPI Publishing Workflow
+# =============================================================================
+# This workflow publishes the package to PyPI when a GitHub Release is created.
+# It uses Trusted Publishing (OIDC) for secure, tokenless authentication.
+#
+# Setup Instructions:
+# 1. Go to https://pypi.org/manage/account/publishing/
+# 2. Add a new "pending publisher" with:
+#    - PyPI Project Name: inter-agent-trust-protocol
+#    - Owner: imran-siddique
+#    - Repository: inter-agent-trust-protocol
+#    - Workflow name: publish.yml
+#    - Environment: pypi
+# =============================================================================
+
+name: Publish to PyPI
+
+on:
+  release:
+    types: [published]
+  
+  # Allow manual trigger for testing
+  workflow_dispatch:
+    inputs:
+      target:
+        description: 'Target repository'
+        required: true
+        default: 'testpypi'
+        type: choice
+        options:
+          - testpypi
+          - pypi
+
+jobs:
+  # ==========================================================================
+  # Build Distribution
+  # ==========================================================================
+  build:
+    name: Build distribution 📦
+    runs-on: ubuntu-latest
+
+    steps:
+      - name: Checkout repository
+        uses: actions/checkout@v4
+
+      - name: Set up Python
+        uses: actions/setup-python@v5
+        with:
+          python-version: "3.11"
+
+      - name: Install build dependencies
+        run: |
+          python -m pip install --upgrade pip
+          pip install build twine
+
+      - name: Build package
+        run: python -m build
+
+      - name: Check package metadata
+        run: twine check dist/*
+
+      - name: Upload distribution artifacts
+        uses: actions/upload-artifact@v4
+        with:
+          name: python-package-distributions
+          path: dist/
+
+  # ==========================================================================
+  # Publish to TestPyPI (for testing)
+  # ==========================================================================
+  publish-testpypi:
+    name: Publish to TestPyPI 🧪
+    if: github.event_name == 'workflow_dispatch' && github.event.inputs.target == 'testpypi'
+    needs: build
+    runs-on: ubuntu-latest
+    
+    environment:
+      name: testpypi
+      url: https://test.pypi.org/p/inter-agent-trust-protocol
+
+    permissions:
+      id-token: write  # Required for OIDC trusted publishing
+
+    steps:
+      - name: Download distribution artifacts
+        uses: actions/download-artifact@v4
+        with:
+          name: python-package-distributions
+          path: dist/
+
+      - name: Publish to TestPyPI
+        uses: pypa/gh-action-pypi-publish@release/v1
+        with:
+          repository-url: https://test.pypi.org/legacy/
+
+  # ==========================================================================
+  # Publish to PyPI (production)
+  # ==========================================================================
+  publish-pypi:
+    name: Publish to PyPI 🚀
+    if: github.event_name == 'release' || (github.event_name == 'workflow_dispatch' && github.event.inputs.target == 'pypi')
+    needs: build
+    runs-on: ubuntu-latest
+    
+    environment:
+      name: pypi
+      url: https://pypi.org/p/inter-agent-trust-protocol
+
+    permissions:
+      id-token: write  # Required for OIDC trusted publishing
+
+    steps:
+      - name: Download distribution artifacts
+        uses: actions/download-artifact@v4
+        with:
+          name: python-package-distributions
+          path: dist/
+
+      - name: Publish to PyPI
+        uses: pypa/gh-action-pypi-publish@release/v1
+
+  # ==========================================================================
+  # Create GitHub Release Assets
+  # ==========================================================================
+  github-release:
+    name: Upload to GitHub Release 📎
+    if: github.event_name == 'release'
+    needs: [build, publish-pypi]
+    runs-on: ubuntu-latest
+
+    permissions:
+      contents: write  # Required for uploading release assets
+
+    steps:
+      - name: Download distribution artifacts
+        uses: actions/download-artifact@v4
+        with:
+          name: python-package-distributions
+          path: dist/
+
+      - name: Upload to GitHub Release
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+        run: |
+          gh release upload '${{ github.ref_name }}' dist/** --repo '${{ github.repository }}'
+
+  # ==========================================================================
+  # Post-publish verification
+  # ==========================================================================
+  verify:
+    name: Verify installation ✅
+    if: github.event_name == 'release'
+    needs: publish-pypi
+    runs-on: ubuntu-latest
+    
+    steps:
+      - name: Set up Python
+        uses: actions/setup-python@v5
+        with:
+          python-version: "3.11"
+
+      - name: Wait for PyPI to update
+        run: sleep 60
+
+      - name: Install from PyPI
+        run: |
+          pip install inter-agent-trust-protocol
+          
+      - name: Verify installation
+        run: |
+          python -c "import iatp; print(f'IATP version: {iatp.__version__}')"
+          iatp --version
+          iatp --help

modules/iatp/.github/workflows/python-package.yml

@@ -0,0 +1,121 @@
+name: Python Package and Tests
+
+on:
+  push:
+    branches:
+      - main
+      - develop
+  pull_request:
+    branches:
+      - main
+      - develop
+
+jobs:
+  test:
+    runs-on: ubuntu-latest
+    permissions:
+      contents: read
+    strategy:
+      matrix:
+        python-version: ['3.9', '3.10', '3.11', '3.12']
+
+    steps:
+      - name: Checkout repository
+        uses: actions/checkout@v4
+
+      - name: Set up Python ${{ matrix.python-version }}
+        uses: actions/setup-python@v5
+        with:
+          python-version: ${{ matrix.python-version }}
+          cache: 'pip'
+
+      - name: Install dependencies
+        run: |
+          python -m pip install --upgrade pip
+          pip install -e .
+          pip install -r requirements-dev.txt
+
+      - name: Lint with flake8 (if available)
+        run: |
+          pip install flake8 || true
+          # Stop the build if there are Python syntax errors or undefined names
+          flake8 . --count --select=E9,F63,F7,F82 --show-source --statistics --exclude=.venv,venv,build,dist || true
+          # Exit-zero treats all errors as warnings
+          flake8 . --count --exit-zero --max-complexity=10 --max-line-length=127 --statistics --exclude=.venv,venv,build,dist || true
+
+      - name: Test with pytest
+        run: |
+          pytest iatp/tests/ -v --tb=short
+
+      - name: Test CLI installation
+        run: |
+          iatp --version
+          iatp --help
+
+      - name: Test CLI verify with valid manifests
+        run: |
+          iatp verify examples/manifests/secure_bank.json
+          iatp verify examples/manifests/standard_agent.json
+
+      - name: Test CLI verify with invalid manifest
+        run: |
+          # This should fail - untrusted agent with no reversibility
+          if iatp verify examples/manifests/untrusted_honeypot.json; then
+            echo "ERROR: Expected validation to fail for untrusted manifest"
+            exit 1
+          else
+            echo "✓ Validation correctly failed for untrusted manifest"
+          fi
+
+  build:
+    runs-on: ubuntu-latest
+    needs: test
+    permissions:
+      contents: read
+
+    steps:
+      - name: Checkout repository
+        uses: actions/checkout@v4
+
+      - name: Set up Python
+        uses: actions/setup-python@v5
+        with:
+          python-version: '3.11'
+
+      - name: Install build dependencies
+        run: |
+          python -m pip install --upgrade pip
+          pip install build twine
+
+      - name: Build package
+        run: |
+          python -m build
+
+      - name: Check package
+        run: |
+          twine check dist/*
+
+      - name: Upload artifacts
+        uses: actions/upload-artifact@v4.5.0
+        with:
+          name: python-package-distributions
+          path: dist/
+
+  publish:
+    runs-on: ubuntu-latest
+    needs: build
+    if: github.event_name == 'push' && startsWith(github.ref, 'refs/tags/v')
+    permissions:
+      id-token: write  # For trusted publishing
+
+    steps:
+      - name: Download artifacts
+        uses: actions/download-artifact@v4.1.8
+        with:
+          name: python-package-distributions
+          path: dist/
+
+      - name: Publish to PyPI
+        uses: pypa/gh-action-pypi-publish@release/v1
+        with:
+          skip-existing: true