agento-core 0.1.4__tar.gz

agento_core-0.1.4/.gitignore

@@ -0,0 +1,58 @@
+.DS_Store
+logs/
+workspace/.claude.json
+
+# Python
+__pycache__/
+*.pyc
+.venv/
+*.egg-info/
+.pytest_cache/
+
+# Storage (MySQL data, etc.)
+storage/*
+!storage/.gitkeep
+
+# OAuth credential files
+tokens/
+
+# Cloned app repositories
+workspace/app/*
+!workspace/app/.gitkeep
+
+# Local env overrides
+secrets.env
+docker/.cron.env
+docker/.toolbox.env
+node_modules/
+
+# Generated config files (created by bin/agento install)
+workspace/SOUL.md
+workspace/AGENTS.md
+docker/.cron.env
+
+# User modules (company-specific, like Magento app/code/)
+app/code/*
+!app/code/_example/
+
+# Deployment-specific module state (like Magento app/etc/config.php)
+app/etc/*
+!app/etc/.gitkeep
+
+# Build artifacts
+dist/
+
+# Reindexed data (generated by bin/agento reindex)
+workspace/systems/
+
+# Company-specific knowledge base and prompts (legacy, migrated to systems/)
+workspace/KnowledgeBase/
+workspace/prompts/
+
+# Toolbox session
+docker/toolbox/session.json
+
+# Claude worktrees
+.claude/worktrees/
+
+.mcp

agento_core-0.1.4/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2024-present Marcin Klauza
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

agento_core-0.1.4/PKG-INFO

@@ -0,0 +1,160 @@
+Metadata-Version: 2.4
+Name: agento-core
+Version: 0.1.4
+Summary: AI Agent Framework — automates tasks using AI agents in Docker containers
+Project-URL: Homepage, https://github.com/agento-cc/agento
+Project-URL: Repository, https://github.com/agento-cc/agento
+Project-URL: Documentation, https://github.com/agento-cc/agento/tree/main/docs
+Project-URL: Issues, https://github.com/agento-cc/agento/issues
+Project-URL: Changelog, https://github.com/agento-cc/agento/blob/main/CHANGELOG.md
+Author: Marcin Klauza
+License: MIT
+License-File: LICENSE
+Keywords: agent,ai,automation,docker,framework,modular
+Classifier: Development Status :: 3 - Alpha
+Classifier: License :: OSI Approved :: MIT License
+Classifier: Programming Language :: Python :: 3
+Classifier: Programming Language :: Python :: 3.12
+Classifier: Topic :: Software Development :: Libraries :: Application Frameworks
+Requires-Python: >=3.12
+Requires-Dist: cryptography>=43.0
+Requires-Dist: httpx>=0.27
+Requires-Dist: pymysql>=1.1
+Provides-Extra: dev
+Requires-Dist: basedpyright>=1.29; extra == 'dev'
+Requires-Dist: pytest-mock>=3.14; extra == 'dev'
+Requires-Dist: pytest>=8.0; extra == 'dev'
+Requires-Dist: respx>=0.22; extra == 'dev'
+Requires-Dist: ruff>=0.11; extra == 'dev'
+Provides-Extra: test
+Requires-Dist: pytest-mock>=3.14; extra == 'test'
+Requires-Dist: pytest>=8.0; extra == 'test'
+Requires-Dist: respx>=0.22; extra == 'test'
+Description-Content-Type: text/markdown
+
+# Agento
+
+[![CI](https://github.com/saipix/agento/actions/workflows/ci.yml/badge.svg)](https://github.com/saipix/agento/actions/workflows/ci.yml)
+[![License: MIT](https://img.shields.io/badge/License-MIT-yellow.svg)](https://opensource.org/licenses/MIT)
+[![Python 3.11+](https://img.shields.io/badge/python-3.11+-blue.svg)](https://www.python.org/downloads/)
+
+Self-hosted agent automation platform with modular integrations, Python execution runtime, Node.js toolbox, scoped config, and extension modules. Automates tasks using AI agents (Claude Code, OpenAI Codex) in Docker containers.
+
+## Why Two Runtimes?
+
+Agento enforces a strict security boundary between the AI sandbox and credentials. The sandbox where agents run has **zero access** to secrets. The toolbox is the only container that holds credentials, exposed via an MCP server that the agent calls through controlled tool interfaces.
+
+```
+┌───────────────────────────────────────────────────────┐
+│                    Docker Network                     │
+│                                                       │
+│  ┌─────────────┐   ┌─────────────┐   ┌─────────────┐ │
+│  │   Sandbox   │   │   Toolbox   │   │     Cron    │ │
+│  │   Claude/   │   │   Node.js   │   │    Python   │ │
+│  │   Codex     │   │  MCP Server │   │   Consumer  │ │
+│  │             │   │             │   │ + Scheduler │ │
+│  │ NO secrets  │   │ Credentials │   │  Job Queue  │ │
+│  └─────────────┘   └──────┬──────┘   └─────────────┘ │
+│                           │                           │
+│                     ┌─────┴─────┐                     │
+│                     │   MySQL   │                     │
+│                     └───────────┘                     │
+└───────────────────────────────────────────────────────┘
+```
+
+## Quick Start
+
+```bash
+uv tool install agento                # Install the CLI
+agento init my-project                # Scaffold a new project
+cd my-project
+agento up                             # Start Docker Compose
+agento setup:upgrade                  # Apply migrations
+```
+
+## Architecture
+
+Agento runs three Docker containers on a shared network:
+
+- **Cron** (Python) -- Job queue consumer, scheduler, CLI host. Manages the lifecycle of agent jobs, runs migrations, and dispatches events. Connects to MySQL for job state, config, and module metadata.
+- **Toolbox** (Node.js) -- MCP credential broker. Registers tools from modules (MySQL adapters, API clients) and exposes them over stdio. The only container with access to secrets.
+- **Sandbox** (Claude Code / OpenAI Codex) -- Ephemeral container where the AI agent executes. Has no credentials, no direct database access. Communicates with the toolbox exclusively through MCP tool calls.
+
+## Module System
+
+Agento uses a Magento-inspired modular architecture. Each module is a self-contained package.
+
+**Core modules** ship with the framework in `src/agento/modules/` (jira, claude, codex, core, crypt, agent_view).
+
+**User modules** live in `app/code/` and are deployment-specific (gitignored by default).
+
+Every module contains a `module.json` manifest and optional companion files:
+
+| File | Purpose |
+|------|---------|
+| `module.json` | Module manifest (name, version, tools, knowledge) |
+| `di.json` | Dependency injection configuration |
+| `events.json` | Observer declarations for event-driven extensibility |
+| `config.json` | Default config values with field metadata |
+| `cron.json` | Scheduled job definitions |
+| `sql/*.sql` | Schema migrations |
+| `data_patch.json` | Data patches applied during setup |
+
+**Config** follows a 3-level fallback: ENV vars (`CONFIG__MODULE__PATH`) take highest priority, then DB (`core_config_data`), then `config.json` defaults. Config can be scoped per agent_view for multi-tenant setups.
+
+**Events** use an observer pattern. Modules declare observers in `events.json` and the framework dispatches events synchronously during lifecycle hooks (job start, job complete, schedule tick, etc.).
+
+## Installation
+
+### Path A — Docker Compose (recommended)
+
+For end users, demos, PoC, and self-hosting:
+
+```bash
+uv tool install agento               # or: pip install agento
+agento init my-project                # Scaffold project with Docker Compose
+cd my-project
+agento up                             # Start containers (cron + toolbox + MySQL)
+agento setup:upgrade                  # Apply migrations, install crontab
+```
+
+### System check
+
+```bash
+agento doctor                         # Verify prerequisites
+```
+
+## Creating Your First Module
+
+```bash
+agento module:add my-app \
+  --description="My application module" \
+  --tool mysql:mysql_prod:"Production database (read-only)"
+```
+
+This creates a module in `app/code/my-app/` with a `module.json`, `config.json`, and `knowledge/` directory. Set credentials with:
+
+```bash
+agento config:set my_app/tools/mysql_prod/host 10.0.0.1
+agento config:set my_app/tools/mysql_prod/pass secret123
+```
+
+See [Creating a Module](docs/modules/creating-a-module.md) for the full guide.
+
+## Documentation
+
+Full developer documentation is available in [docs/](docs/):
+
+- [Getting Started](docs/getting-started.md) -- Install and create your first module
+- [CLI Reference](docs/cli/) -- All `agento` commands
+- [Module Guide](docs/modules/) -- Creating and managing modules
+- [Config System](docs/config/) -- 3-level fallback, encryption, ENV vars
+- [Architecture](docs/architecture/) -- Containers, zero-trust, job queue
+
+## Contributing
+
+Contributions are welcome. See [CONTRIBUTING.md](CONTRIBUTING.md) for guidelines on setting up a development environment, running tests, and submitting pull requests.
+
+## License
+
+MIT. See [LICENSE](LICENSE) for the full text.

agento_core-0.1.4/README.md

@@ -0,0 +1,126 @@
+# Agento
+
+[![CI](https://github.com/saipix/agento/actions/workflows/ci.yml/badge.svg)](https://github.com/saipix/agento/actions/workflows/ci.yml)
+[![License: MIT](https://img.shields.io/badge/License-MIT-yellow.svg)](https://opensource.org/licenses/MIT)
+[![Python 3.11+](https://img.shields.io/badge/python-3.11+-blue.svg)](https://www.python.org/downloads/)
+
+Self-hosted agent automation platform with modular integrations, Python execution runtime, Node.js toolbox, scoped config, and extension modules. Automates tasks using AI agents (Claude Code, OpenAI Codex) in Docker containers.
+
+## Why Two Runtimes?
+
+Agento enforces a strict security boundary between the AI sandbox and credentials. The sandbox where agents run has **zero access** to secrets. The toolbox is the only container that holds credentials, exposed via an MCP server that the agent calls through controlled tool interfaces.
+
+```
+┌───────────────────────────────────────────────────────┐
+│                    Docker Network                     │
+│                                                       │
+│  ┌─────────────┐   ┌─────────────┐   ┌─────────────┐ │
+│  │   Sandbox   │   │   Toolbox   │   │     Cron    │ │
+│  │   Claude/   │   │   Node.js   │   │    Python   │ │
+│  │   Codex     │   │  MCP Server │   │   Consumer  │ │
+│  │             │   │             │   │ + Scheduler │ │
+│  │ NO secrets  │   │ Credentials │   │  Job Queue  │ │
+│  └─────────────┘   └──────┬──────┘   └─────────────┘ │
+│                           │                           │
+│                     ┌─────┴─────┐                     │
+│                     │   MySQL   │                     │
+│                     └───────────┘                     │
+└───────────────────────────────────────────────────────┘
+```
+
+## Quick Start
+
+```bash
+uv tool install agento                # Install the CLI
+agento init my-project                # Scaffold a new project
+cd my-project
+agento up                             # Start Docker Compose
+agento setup:upgrade                  # Apply migrations
+```
+
+## Architecture
+
+Agento runs three Docker containers on a shared network:
+
+- **Cron** (Python) -- Job queue consumer, scheduler, CLI host. Manages the lifecycle of agent jobs, runs migrations, and dispatches events. Connects to MySQL for job state, config, and module metadata.
+- **Toolbox** (Node.js) -- MCP credential broker. Registers tools from modules (MySQL adapters, API clients) and exposes them over stdio. The only container with access to secrets.
+- **Sandbox** (Claude Code / OpenAI Codex) -- Ephemeral container where the AI agent executes. Has no credentials, no direct database access. Communicates with the toolbox exclusively through MCP tool calls.
+
+## Module System
+
+Agento uses a Magento-inspired modular architecture. Each module is a self-contained package.
+
+**Core modules** ship with the framework in `src/agento/modules/` (jira, claude, codex, core, crypt, agent_view).
+
+**User modules** live in `app/code/` and are deployment-specific (gitignored by default).
+
+Every module contains a `module.json` manifest and optional companion files:
+
+| File | Purpose |
+|------|---------|
+| `module.json` | Module manifest (name, version, tools, knowledge) |
+| `di.json` | Dependency injection configuration |
+| `events.json` | Observer declarations for event-driven extensibility |
+| `config.json` | Default config values with field metadata |
+| `cron.json` | Scheduled job definitions |
+| `sql/*.sql` | Schema migrations |
+| `data_patch.json` | Data patches applied during setup |
+
+**Config** follows a 3-level fallback: ENV vars (`CONFIG__MODULE__PATH`) take highest priority, then DB (`core_config_data`), then `config.json` defaults. Config can be scoped per agent_view for multi-tenant setups.
+
+**Events** use an observer pattern. Modules declare observers in `events.json` and the framework dispatches events synchronously during lifecycle hooks (job start, job complete, schedule tick, etc.).
+
+## Installation
+
+### Path A — Docker Compose (recommended)
+
+For end users, demos, PoC, and self-hosting:
+
+```bash
+uv tool install agento               # or: pip install agento
+agento init my-project                # Scaffold project with Docker Compose
+cd my-project
+agento up                             # Start containers (cron + toolbox + MySQL)
+agento setup:upgrade                  # Apply migrations, install crontab
+```
+
+### System check
+
+```bash
+agento doctor                         # Verify prerequisites
+```
+
+## Creating Your First Module
+
+```bash
+agento module:add my-app \
+  --description="My application module" \
+  --tool mysql:mysql_prod:"Production database (read-only)"
+```
+
+This creates a module in `app/code/my-app/` with a `module.json`, `config.json`, and `knowledge/` directory. Set credentials with:
+
+```bash
+agento config:set my_app/tools/mysql_prod/host 10.0.0.1
+agento config:set my_app/tools/mysql_prod/pass secret123
+```
+
+See [Creating a Module](docs/modules/creating-a-module.md) for the full guide.
+
+## Documentation
+
+Full developer documentation is available in [docs/](docs/):
+
+- [Getting Started](docs/getting-started.md) -- Install and create your first module
+- [CLI Reference](docs/cli/) -- All `agento` commands
+- [Module Guide](docs/modules/) -- Creating and managing modules
+- [Config System](docs/config/) -- 3-level fallback, encryption, ENV vars
+- [Architecture](docs/architecture/) -- Containers, zero-trust, job queue
+
+## Contributing
+
+Contributions are welcome. See [CONTRIBUTING.md](CONTRIBUTING.md) for guidelines on setting up a development environment, running tests, and submitting pull requests.
+
+## License
+
+MIT. See [LICENSE](LICENSE) for the full text.

agento_core-0.1.4/pyproject.toml

@@ -0,0 +1,85 @@
+[build-system]
+requires = ["hatchling"]
+build-backend = "hatchling.build"
+
+[tool.hatch.build]
+include = [
+    "src/agento/**/*.py",
+    "src/agento/**/*.json",
+    "src/agento/**/*.js",
+    "src/agento/**/*.yml",
+    "src/agento/**/*.yaml",
+    "src/agento/**/*.md",
+    "src/agento/**/*.sql",
+    "src/agento/framework/cli/templates/*",
+    "src/agento/toolbox/package.json",
+    "src/agento/toolbox/package-lock.json",
+]
+
+[tool.hatch.build.targets.wheel]
+packages = ["src/agento"]
+
+[project]
+name = "agento-core"
+version = "0.1.4"
+description = "AI Agent Framework — automates tasks using AI agents in Docker containers"
+requires-python = ">=3.12"
+dependencies = [
+    "httpx>=0.27",
+    "PyMySQL>=1.1",
+    "cryptography>=43.0",
+]
+authors = [{name = "Marcin Klauza"}]
+license = {text = "MIT"}
+readme = "README.md"
+keywords = ["ai", "agent", "automation", "framework", "docker", "modular"]
+classifiers = [
+    "Development Status :: 3 - Alpha",
+    "License :: OSI Approved :: MIT License",
+    "Programming Language :: Python :: 3",
+    "Programming Language :: Python :: 3.12",
+    "Topic :: Software Development :: Libraries :: Application Frameworks",
+]
+
+[project.scripts]
+agento = "agento.framework.cli:main"
+agent = "agento.framework.cli:main"
+
+[project.entry-points."agento.modules"]
+jira = "agento.modules.jira"
+claude = "agento.modules.claude"
+codex = "agento.modules.codex"
+
+[project.urls]
+Homepage = "https://github.com/agento-cc/agento"
+Repository = "https://github.com/agento-cc/agento"
+Documentation = "https://github.com/agento-cc/agento/tree/main/docs"
+Issues = "https://github.com/agento-cc/agento/issues"
+Changelog = "https://github.com/agento-cc/agento/blob/main/CHANGELOG.md"
+
+[tool.pytest.ini_options]
+testpaths = ["tests", "app/code"]
+
+[tool.ruff]
+target-version = "py312"
+line-length = 120
+
+[tool.ruff.lint]
+select = ["E", "F", "W", "I", "UP", "B", "SIM", "RUF"]
+ignore = ["E501"]
+
+[tool.ruff.lint.isort]
+known-first-party = ["agento"]
+
+[project.optional-dependencies]
+dev = ["pytest>=8.0", "pytest-mock>=3.14", "respx>=0.22", "ruff>=0.11", "basedpyright>=1.29"]
+test = ["pytest>=8.0", "pytest-mock>=3.14", "respx>=0.22"]
+
+[dependency-groups]
+dev = [
+    "pytest>=8.0",
+    "pytest-mock>=3.14",
+    "respx>=0.22",
+    "ruff>=0.11",
+    "basedpyright>=1.29",
+]

agento_core-0.1.4/src/agento/framework/agent_config_writer.py

@@ -0,0 +1,162 @@
+"""Generate agent CLI config files from resolved scoped config.
+
+Before each worker run, generates native config files that agent CLIs expect:
+  - .claude.json (Claude Code project config)
+  - .claude/settings.json (Claude Code user settings)
+  - .mcp.json (MCP server configuration)
+  - .codex/config.toml (Codex CLI config)
+
+Config field paths follow the convention:
+  agent/claude/model          -> model for Claude CLI
+  agent/claude/personality    -> system prompt / personality
+  agent/mcp/servers           -> MCP server definitions (JSON)
+  agent/codex/model           -> model for Codex CLI
+"""
+from __future__ import annotations
+
+import json
+import logging
+from pathlib import Path
+from typing import Any
+
+logger = logging.getLogger(__name__)
+
+# Config path prefix for agent CLI settings
+AGENT_CONFIG_PREFIX = "agent/"
+
+
+def _get_agent_config(resolved_config: dict[str, tuple[str, bool]]) -> dict[str, str]:
+    """Extract agent/* paths from resolved DB overrides into a flat dict.
+
+    Returns {relative_path: value}, e.g. {"claude/model": "opus-4"}.
+    """
+    result = {}
+    for path, (value, _encrypted) in resolved_config.items():
+        if path.startswith(AGENT_CONFIG_PREFIX) and value is not None:
+            relative = path[len(AGENT_CONFIG_PREFIX):]
+            result[relative] = value
+    return result
+
+
+def generate_claude_config(working_dir: Path, agent_config: dict[str, str]) -> None:
+    """Generate .claude.json and .claude/settings.json in the working directory."""
+    # .claude.json — project-level config
+    claude_json: dict[str, Any] = {}
+
+    model = agent_config.get("claude/model")
+    if model:
+        claude_json["model"] = model
+
+    personality = agent_config.get("claude/personality")
+    if personality:
+        claude_json["systemPrompt"] = personality
+
+    permissions = agent_config.get("claude/permissions")
+    if permissions:
+        try:
+            claude_json["permissions"] = json.loads(permissions)
+        except (json.JSONDecodeError, TypeError):
+            logger.warning("Invalid JSON in agent/claude/permissions, skipping")
+
+    if claude_json:
+        config_path = working_dir / ".claude.json"
+        config_path.write_text(json.dumps(claude_json, indent=2) + "\n")
+        logger.debug("Generated %s", config_path)
+
+    # .claude/settings.json — user-level settings
+    settings: dict[str, Any] = {}
+
+    trust_level = agent_config.get("claude/trust_level")
+    if trust_level:
+        settings["permissions"] = {"dangerouslySkipPermissions": trust_level == "full"}
+
+    if settings:
+        settings_dir = working_dir / ".claude"
+        settings_dir.mkdir(parents=True, exist_ok=True)
+        settings_path = settings_dir / "settings.json"
+        settings_path.write_text(json.dumps(settings, indent=2) + "\n")
+        logger.debug("Generated %s", settings_path)
+
+
+def _inject_agent_view_id(servers: dict, agent_view_id: int) -> dict:
+    """Append ?agent_view_id=N to toolbox SSE/MCP URLs in mcpServers config."""
+    for server_cfg in servers.values():
+        url = server_cfg.get("url", "")
+        if "/sse" in url or "/mcp" in url:
+            sep = "&" if "?" in url else "?"
+            server_cfg["url"] = f"{url}{sep}agent_view_id={agent_view_id}"
+    return servers
+
+
+def generate_mcp_config(
+    working_dir: Path,
+    agent_config: dict[str, str],
+    *,
+    agent_view_id: int | None = None,
+) -> None:
+    """Generate .mcp.json in the working directory."""
+    servers_raw = agent_config.get("mcp/servers")
+    if not servers_raw:
+        return
+
+    try:
+        servers = json.loads(servers_raw)
+    except (json.JSONDecodeError, TypeError):
+        logger.warning("Invalid JSON in agent/mcp/servers, skipping .mcp.json generation")
+        return
+
+    if agent_view_id is not None:
+        servers = _inject_agent_view_id(servers, agent_view_id)
+
+    mcp_config = {"mcpServers": servers}
+    config_path = working_dir / ".mcp.json"
+    config_path.write_text(json.dumps(mcp_config, indent=2) + "\n")
+    logger.debug("Generated %s", config_path)
+
+
+def generate_codex_config(working_dir: Path, agent_config: dict[str, str]) -> None:
+    """Generate .codex/config.toml in the working directory."""
+    lines: list[str] = []
+
+    model = agent_config.get("codex/model")
+    if model:
+        lines.append(f'model = "{model}"')
+
+    approval_mode = agent_config.get("codex/approval_mode")
+    if approval_mode:
+        lines.append(f'approval_mode = "{approval_mode}"')
+
+    if not lines:
+        return
+
+    codex_dir = working_dir / ".codex"
+    codex_dir.mkdir(parents=True, exist_ok=True)
+    config_path = codex_dir / "config.toml"
+    config_path.write_text("\n".join(lines) + "\n")
+    logger.debug("Generated %s", config_path)
+
+
+def populate_agent_configs(
+    working_dir: str | Path,
+    scoped_overrides: dict[str, tuple[str, bool]],
+    *,
+    agent_view_id: int | None = None,
+) -> None:
+    """Generate all agent CLI config files from scoped DB overrides.
+
+    Called before each worker run with the merged (agent_view -> workspace -> global) overrides.
+    """
+    wd = Path(working_dir)
+    wd.mkdir(parents=True, exist_ok=True)
+
+    agent_config = _get_agent_config(scoped_overrides)
+
+    if not agent_config:
+        logger.debug("No agent/* config paths found, skipping config file generation")
+        return
+
+    generate_claude_config(wd, agent_config)
+    generate_mcp_config(wd, agent_config, agent_view_id=agent_view_id)
+    generate_codex_config(wd, agent_config)
+
+    logger.info("Populated agent config files in %s", wd)

agento_core-0.1.4/src/agento/framework/agent_manager/__init__.py

@@ -0,0 +1,36 @@
+"""Agent Manager — multi-token orchestration for LLM agent providers."""
+
+from .active import read_credentials, resolve_active_token, update_active_token
+from .auth import AuthenticationError, AuthResult, authenticate_interactive, save_credentials
+from .config import AgentManagerConfig
+from .models import AgentProvider, RotationResult, Token, UsageSummary
+from .rotator import rotate_all, rotate_tokens, select_best_token
+from .token_store import deregister_token, get_token, get_token_by_path, list_tokens, register_token, set_primary_token
+from .usage_store import get_usage_summaries, get_usage_summary, record_usage
+
+__all__ = [
+    "AgentManagerConfig",
+    "AgentProvider",
+    "AuthResult",
+    "AuthenticationError",
+    "RotationResult",
+    "Token",
+    "UsageSummary",
+    "authenticate_interactive",
+    "deregister_token",
+    "get_token",
+    "get_token_by_path",
+    "get_usage_summaries",
+    "get_usage_summary",
+    "list_tokens",
+    "read_credentials",
+    "record_usage",
+    "register_token",
+    "resolve_active_token",
+    "rotate_all",
+    "rotate_tokens",
+    "save_credentials",
+    "select_best_token",
+    "set_primary_token",
+    "update_active_token",
+]