algo-cli-runtime 0.18.0__tar.gz → 0.19.2__tar.gz

{algo_cli_runtime-0.18.0 → algo_cli_runtime-0.19.2}/.gitignore

@@ -8,9 +8,11 @@ __pycache__/
 .mypy_cache/
 .ruff_cache/
 .coverage
+coverage.xml
 htmlcov/
 benchmark-results/
 build/
+.build/
 dist/
 *.egg-info/
 .venv/

{algo_cli_runtime-0.18.0 → algo_cli_runtime-0.19.2}/CHANGELOG.md

@@ -4,6 +4,153 @@ All notable changes to Algo CLI are documented here. The format follows [Keep a
 
 ## [Unreleased]
 
+## [0.19.2] - 2026-09-13
+
+### Fixed
+
+- Detect standalone `uv pip` installations from distribution metadata and
+  update them through `uv pip --python` instead of assuming their virtual
+  environment contains the `pip` module, while preserving `uv tool` ownership
+  for custom configured tool directories.
+- Allow the post-upload PyPI verifier up to six observations with 30 seconds of
+  scheduled backoff for absent or partially visible matching files. Malformed
+  responses and conflicting files still stop publication immediately.
+- Report an empty successful PyPI response and a missing SHA-256 field as
+  explicit validation failures. Only HTTP 404 represents an absent version.
+- Correct release documentation to distinguish the published package from
+  later development changes.
+- Refresh the Boron managed-browser package, checksum, release observation, and
+  coupled test fixtures for Chrome `153.0.8010.36`, including the generated
+  Debian package lock used by hosted Linux builds.
+- Bind protected draft capture to the exact `v0.19.2` tag while deriving
+  GitHub's assigned release ID from one unambiguous, bounded release listing.
+  Preserve the immutable tagged source separately from the current protected-main
+  publisher so exact-asset recovery remains possible after `main` advances.
+
+## [0.19.1.post1] - 2026-09-10
+
+This post-release removes the unpublished Echo Veil Git reference
+from public package metadata while retaining the exact development and
+qualification pin. It also carries the release-verifier and scheduler-safe test
+corrections and empty browser-proxy cancellation accounting qualified after the
+original immutable candidate was tagged. It is published on PyPI and as an
+[immutable GitHub release](https://github.com/Seabass-up/Algo-cli/releases/tag/v0.19.1.post1).
+The changes documented under 0.19.1 below are included in this release.
+
+## [0.19.1] - Unpublished Candidate
+
+This candidate was superseded by the published `0.19.1.post1` package. Its
+immutable tag is retained unchanged because its direct Git dependency made its
+package metadata incompatible with PyPI. The earlier unpublished 0.19.0 tag and
+draft are also retained unchanged and must not be published.
+
+### Fixed
+
+- Stop browser event processing at the first terminal navigation result even
+  when Chrome coalesces later events into the same pipe read. Preserve verified,
+  failed, handoff, and unknown outcomes and mandatory browser cleanup; do not
+  retry a rejected session or treat failure as success.
+- Discover Astra through the signed-in Codex model catalog and preserve provider
+  routing and reasoning settings instead of hiding newer models behind a stale
+  fallback list.
+- Recover from eligible empty/partial Responses streams with bounded retries,
+  retain partial output, and preserve denial, cancellation, and uncertain-effect
+  barriers instead of repeating unsafe work.
+- Repair Echo credential-registry/startup compatibility and protected retrieval;
+  bind descendant reads to authorized roots and reject link, reparse, rename,
+  and stale-evidence races without a plaintext-memory fallback.
+- Preserve saved workspace settings during transient smoke and one-shot runs.
+- Reuse static Windows security API bindings while keeping identity, ownership,
+  ACL, and path authorization checks fresh; preserve explicit CRLF/LF bytes.
+- Bound verification recovery when a permitted verifier is unavailable. Denied
+  tools and model narration cannot establish task completion.
+- Clarify unchanged updates: the command installs compatible published packages,
+  not unpublished GitHub commits, and does not claim the latest version when
+  installed metadata cannot be verified.
+- Stop Windows launchers before unsafe self-replacement and print an exact,
+  quoted PowerShell command for the owning package manager. Published 0.18.0
+  needs this external upgrade path; retrying its active launcher cannot fix
+  WinError 32.
+- Handle bare `algo-cli update` before legacy migration or app-state reads so
+  recovery does not depend on broken or unqualified application state. Keep
+  normal and one-shot startup migration checks intact, and print recovery
+  commands without inserting line breaks into paths.
+
+### Release Operations
+
+- Bind live browser evidence to the builder's complete package provenance:
+  exact Debian snapshots, package-lock digests and counts, and explicit false
+  hermetic/reproducible claims. Exercise the real producer-to-consumer contract
+  so a stale hand-written fixture cannot hide an incompatible record.
+- Preserve the live browser driver's closed failure codes in hosted diagnostics,
+  including cleanup failures. Unknown exception text remains redacted, failed
+  runs remain blocked, and no passing evidence is written after a rejection.
+- Obtain GHCR's exact pull challenge before exchanging the isolated Docker
+  login for a Bearer token. Do not send Basic credentials to blob endpoints;
+  keep exact realm, service, scope, size, digest, and redirect checks intact.
+- Record the owner's explicit one-release delegation for 0.19.0 environment
+  approvals. Delegated approval is not independent human review and cannot
+  bypass failed checks or authorize later releases.
+- Correct browser-build evidence validation for pinned Buildx/BuildKit output:
+  accept finite provenance resource samples, bind the uploaded source archive
+  and nested frontend request, and resolve image-config identity from the
+  digest-verified platform manifest. Report closed, content-free build failure
+  codes without exposing raw logs or weakening publication and approval gates.
+- Qualify real source-bound builds in ordinary CI, including standard Hatchling
+  ZIP metadata, its automatically included `.gitignore`, and canonical
+  dependency-range ordering. Accept the versionless local-project lock entry
+  while requiring exact build-tool pins. Reject special-file entries and
+  hidden directory payloads, and retain exact source and reproducibility receipts.
+- Freeze the stability candidate separately from the unfinished contained test
+  runner. No new model-callable contained execution or native browser/computer
+  control is enabled by this release.
+- Add a digest-pinned published-0.18.0 upgrade check alongside clean wheel
+  installation on Linux, Windows, and macOS. Exercise pip, uv, and both pipx
+  backends with synthetic user-state preservation and repeated-update checks.
+  On Windows, exercise the external owning-manager path and verify the new
+  launcher's refusal separately; do not claim the old self-updater works.
+  Explicitly close synthetic SQLite connections and require temporary-state
+  cleanup before recording a passing result.
+- Adopt the owner's explicit single-owner release policy: only Seabass-up may
+  trigger and approve releases, with self-review and administrator bypass of
+  the environment approval wait allowed. Existing protected-source,
+  immutability, browser-evidence, and package-provenance gates remain mandatory.
+
+### Changed
+
+- Bound the governed memory bridge to Echo Veil's scope-aware 0.8 API, added a
+  full-commit-pinned optional extra, and canonicalized Algo's credential-free
+  `localhost` Ollama default to an IP-literal loopback before Echo validation.
+- Replaced the duplicate in-memory Echo wrapper with one authoritative bridge
+  to `echo_veil.agent_memory`, enforced matching supported source/distribution
+  versions plus pinned non-editable installation identity, and separated
+  installation, crypto, write, index, retrieval, persistence, restart,
+  rotation, and health readiness facts.
+- Routed ordinary remember, automatic capture, context recall, listing, and
+  deletion through Echo when protection is required; curated/history mutations
+  are explicitly prohibited instead of creating a plaintext shadow.
+
+### Security
+
+- Rejected the incompatible Echo Veil 0.5 API instead of reporting it as
+  supported, and replaced raw initialization exception classes in optional-mode
+  warnings with bounded operational failure codes.
+- Added fail-closed required protection, non-leaking diagnostics, scoped profile
+  configuration without raw key material, and a fresh-process black-box test
+  proving ordinary write → confidential disk state → restart → authorized
+  recall while rejecting a mismatched scope.
+- Redacted the process working directory from one-shot session events and made
+  similarity scoring numerically stable for very large finite vectors so
+  runtime warnings cannot disclose local source paths.
+- Made automatic memory capture fail closed and opt-in through a versioned
+  consent marker; legacy saved booleans can no longer authorize durable writes.
+- Added a commit-pin, PEP 610, and installed-RECORD integrity gate for Echo
+  Veil, kept registry dependencies under a hashed lock audit, and upgraded
+  `cryptography` past `PYSEC-2026-3552`.
+- Applied the same hashed registry audit and separate Echo identity audit to
+  release builds, and refreshed the website lock to remove all reported npm
+  advisories without restoring the quarantined marketing changes.
+
 ## [0.18.0] - 2026-07-17
 
 ### Added

{algo_cli_runtime-0.18.0 → algo_cli_runtime-0.19.2}/CONTRIBUTING.md

@@ -16,11 +16,11 @@ python -m pip install -e ".[dev]"
 
 ```bash
 ruff check algo_cli tests
-mypy algo_cli/main.py algo_cli/tool_runtime.py algo_cli/tools.py algo_cli/harness.py --ignore-missing-imports --no-strict-optional --follow-imports=skip
+mypy algo_cli/main.py algo_cli/nathan_runtime.py algo_cli/tools.py algo_cli/harness.py --ignore-missing-imports --no-strict-optional --follow-imports=skip
 python -m compileall -q algo_cli ollama_cli
 pytest tests
 python scripts/check_public_release.py
-python scripts/smoke_wheel_install.py dist  # after python -m build
+python scripts/oliver_smoke_wheel_install.py dist  # after python -m build
 ```
 
 Run `cargo test --manifest-path harness-indexer/Cargo.toml --locked` or `go test ./...` from `harness-gateway/` when changing a native helper.

{algo_cli_runtime-0.18.0 → algo_cli_runtime-0.19.2}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: algo-cli-runtime
-Version: 0.18.0
+Version: 0.19.2
 Summary: Agent runtime for tools, durable context, and verified work
 Project-URL: Homepage, https://algo-cli.com
 Project-URL: Documentation, https://algo-cli.com/docs
@@ -40,11 +40,15 @@ Classifier: Programming Language :: Python :: 3.11
 Classifier: Programming Language :: Python :: 3.12
 Classifier: Topic :: Scientific/Engineering :: Artificial Intelligence
 Requires-Python: >=3.10
+Requires-Dist: cryptography>=44.0
+Requires-Dist: keyring>=25.0
 Requires-Dist: numpy>=1.20
 Requires-Dist: ollama>=0.5
+Requires-Dist: pathspec<2,>=1.1.1
 Requires-Dist: prompt-toolkit>=3.0
 Requires-Dist: rich>=13.0
 Requires-Dist: tomli>=2.0; python_version < '3.11'
+Requires-Dist: wcmatch<11,>=10.2.1
 Provides-Extra: dev
 Requires-Dist: mypy>=1.0; extra == 'dev'
 Requires-Dist: pytest-cov>=7.0; extra == 'dev'
@@ -54,11 +58,17 @@ Provides-Extra: pdf
 Requires-Dist: pymupdf>=1.24; extra == 'pdf'
 Provides-Extra: quantization
 Requires-Dist: turbovec>=0.7; extra == 'quantization'
+Provides-Extra: release
+Requires-Dist: build==1.5.0; extra == 'release'
+Requires-Dist: hatchling==1.31.0; extra == 'release'
+Requires-Dist: twine==6.2.0; extra == 'release'
+Provides-Extra: supply-chain
+Requires-Dist: pip-audit==2.10.1; extra == 'supply-chain'
 Description-Content-Type: text/markdown
 
 # Algo CLI
 
-[![CI](https://github.com/Seabass-up/algo-cli/actions/workflows/ci.yml/badge.svg)](https://github.com/Seabass-up/algo-cli/actions/workflows/ci.yml)
+[![CI](https://github.com/Seabass-up/Algo-cli/actions/workflows/oliver-ci.yml/badge.svg)](https://github.com/Seabass-up/Algo-cli/actions/workflows/oliver-ci.yml)
 [![PyPI](https://img.shields.io/pypi/v/algo-cli-runtime.svg)](https://pypi.org/project/algo-cli-runtime/)
 [![License: MIT](https://img.shields.io/badge/License-MIT-yellow.svg)](LICENSE)
 
@@ -84,15 +94,32 @@ algo-cli update
 ```
 
 `algo-cli update` upgrades the published `algo-cli-runtime` package using the
-installation's owning tool: pipx, uv, or the current Python environment's pip.
+installation's owning tool: pipx, `uv tool`, standalone `uv pip`, or the current
+Python environment's pip. Custom `uv tool` directories are resolved through uv
+before standalone `uv pip` environments are identified from the distribution's
+installer metadata. Standalone environments do not need a bundled pip module.
+It does not pull GitHub commits. [PyPI](https://pypi.org/project/algo-cli-runtime/)
+lists the current published version, and the
+[release records](https://github.com/Seabass-up/Algo-cli/releases) bind each
+published package to its qualified source. Changes listed as Unreleased in the
+changelog require a future package release before this command can install them.
 It leaves configuration, credentials, memory, and other files under
-`~/.algo_cli` untouched. Set `ALGO_CLI_UPDATE_MANAGER=pipx`, `uv`, or `pip`
-only when automatic installation detection needs an explicit override.
+`~/.algo_cli` untouched. Set `ALGO_CLI_UPDATE_MANAGER=pipx`, `uv`, `uv-pip`, or
+`pip` only when automatic installation detection needs an explicit override.
+
+On Windows, close Algo CLI sessions and run the owning manager directly:
+`pipx upgrade algo-cli-runtime`, `uv tool upgrade --no-sources algo-cli-runtime`,
+`uv pip install --python <python.exe> --upgrade --no-sources algo-cli-runtime`,
+or `python -m pip install --upgrade algo-cli-runtime` using the Python environment
+where Algo is installed. Published `0.18.0` cannot replace its active `.exe`
+launcher. The new `algo-cli update` guard stops before changing packages and
+prints the exact PowerShell command for the current installation. Retrying
+inside the running launcher does not release that Windows file lock.
 
 To install a reviewed source checkout instead, clone the repository and run
 `pipx install .` from its root.
 
-Optional extras are available for PDF rendering (`algo-cli-runtime[pdf]`) and experimental vector quantization (`algo-cli-runtime[quantization]`). The distribution installs the `algo-cli` command. Run `algo-cli doctor` for a side-effect-free readiness report.
+Optional extras are available for PDF rendering (`algo-cli-runtime[pdf]`) and experimental vector quantization (`algo-cli-runtime[quantization]`). Echo Veil is not a public package extra because its qualified 0.8 revision is not published on PyPI. Source development uses the exact commit-pinned `echo-veil` dependency group; operators who require Echo must install that same reviewed source revision into Algo's Python environment. The distribution installs the `algo-cli` command. Run `algo-cli doctor` for a side-effect-free readiness report.
 
 ## Quick Start
 
@@ -152,7 +179,7 @@ xAI's public API uses `XAI_API_KEY`; API calls can consume paid usage, so setup
 
 ### Privacy-safe context defaults
 
-Every normal chat request sends the active conversation and the assembled Algo CLI system context to the selected inference provider. That context includes `SOUL.md`, `IDENTITY.md`, `USER.md`, saved memories, and relevant retrieved lessons when available. With a cloud model, this content may leave the machine. Automatic memory capture is on by default; `/memory-auto off` stops new automatic captures (it does not delete existing memories).
+Every normal chat request sends the active conversation and the assembled Algo CLI system context to the selected inference provider. That context includes `SOUL.md`, `IDENTITY.md`, `USER.md`, saved memories, and relevant retrieved lessons when available. With a cloud model, this content may leave the machine. Automatic memory capture is off by default. `/memory-auto on` records explicit consent for the current capture policy and enables bounded capture after successful turns. `/memory-auto off` stops future automatic captures and clears that consent (it does not delete existing memories).
 
 The installed harness corpus contains only public Algo CLI docs, skills, and runtime metadata. Other local agent stores, working-directory code retrieval, index-compute-lab, and skill run-history capture are off by default because retrieved or summarized content can become part of a model request.
 
@@ -317,7 +344,7 @@ The CLI retrieves relevant records from a local index. The public built-in corpu
 /harness external status
 /harness build-rust
 /hsearch retrieval benchmark
-/hread algo-cli:memory:algo-cli-memory-lifecycle-contract.md
+/hread algo-cli:memory:ada-algo-cli-memory-lifecycle-contract.md
 ```
 
 `/harness score` grades Algo CLI's internal retrieval/runtime readiness.

{algo_cli_runtime-0.18.0 → algo_cli_runtime-0.19.2}/README.md

@@ -1,6 +1,6 @@
 # Algo CLI
 
-[![CI](https://github.com/Seabass-up/algo-cli/actions/workflows/ci.yml/badge.svg)](https://github.com/Seabass-up/algo-cli/actions/workflows/ci.yml)
+[![CI](https://github.com/Seabass-up/Algo-cli/actions/workflows/oliver-ci.yml/badge.svg)](https://github.com/Seabass-up/Algo-cli/actions/workflows/oliver-ci.yml)
 [![PyPI](https://img.shields.io/pypi/v/algo-cli-runtime.svg)](https://pypi.org/project/algo-cli-runtime/)
 [![License: MIT](https://img.shields.io/badge/License-MIT-yellow.svg)](LICENSE)
 
@@ -26,15 +26,32 @@ algo-cli update
 ```
 
 `algo-cli update` upgrades the published `algo-cli-runtime` package using the
-installation's owning tool: pipx, uv, or the current Python environment's pip.
+installation's owning tool: pipx, `uv tool`, standalone `uv pip`, or the current
+Python environment's pip. Custom `uv tool` directories are resolved through uv
+before standalone `uv pip` environments are identified from the distribution's
+installer metadata. Standalone environments do not need a bundled pip module.
+It does not pull GitHub commits. [PyPI](https://pypi.org/project/algo-cli-runtime/)
+lists the current published version, and the
+[release records](https://github.com/Seabass-up/Algo-cli/releases) bind each
+published package to its qualified source. Changes listed as Unreleased in the
+changelog require a future package release before this command can install them.
 It leaves configuration, credentials, memory, and other files under
-`~/.algo_cli` untouched. Set `ALGO_CLI_UPDATE_MANAGER=pipx`, `uv`, or `pip`
-only when automatic installation detection needs an explicit override.
+`~/.algo_cli` untouched. Set `ALGO_CLI_UPDATE_MANAGER=pipx`, `uv`, `uv-pip`, or
+`pip` only when automatic installation detection needs an explicit override.
+
+On Windows, close Algo CLI sessions and run the owning manager directly:
+`pipx upgrade algo-cli-runtime`, `uv tool upgrade --no-sources algo-cli-runtime`,
+`uv pip install --python <python.exe> --upgrade --no-sources algo-cli-runtime`,
+or `python -m pip install --upgrade algo-cli-runtime` using the Python environment
+where Algo is installed. Published `0.18.0` cannot replace its active `.exe`
+launcher. The new `algo-cli update` guard stops before changing packages and
+prints the exact PowerShell command for the current installation. Retrying
+inside the running launcher does not release that Windows file lock.
 
 To install a reviewed source checkout instead, clone the repository and run
 `pipx install .` from its root.
 
-Optional extras are available for PDF rendering (`algo-cli-runtime[pdf]`) and experimental vector quantization (`algo-cli-runtime[quantization]`). The distribution installs the `algo-cli` command. Run `algo-cli doctor` for a side-effect-free readiness report.
+Optional extras are available for PDF rendering (`algo-cli-runtime[pdf]`) and experimental vector quantization (`algo-cli-runtime[quantization]`). Echo Veil is not a public package extra because its qualified 0.8 revision is not published on PyPI. Source development uses the exact commit-pinned `echo-veil` dependency group; operators who require Echo must install that same reviewed source revision into Algo's Python environment. The distribution installs the `algo-cli` command. Run `algo-cli doctor` for a side-effect-free readiness report.
 
 ## Quick Start
 
@@ -94,7 +111,7 @@ xAI's public API uses `XAI_API_KEY`; API calls can consume paid usage, so setup
 
 ### Privacy-safe context defaults
 
-Every normal chat request sends the active conversation and the assembled Algo CLI system context to the selected inference provider. That context includes `SOUL.md`, `IDENTITY.md`, `USER.md`, saved memories, and relevant retrieved lessons when available. With a cloud model, this content may leave the machine. Automatic memory capture is on by default; `/memory-auto off` stops new automatic captures (it does not delete existing memories).
+Every normal chat request sends the active conversation and the assembled Algo CLI system context to the selected inference provider. That context includes `SOUL.md`, `IDENTITY.md`, `USER.md`, saved memories, and relevant retrieved lessons when available. With a cloud model, this content may leave the machine. Automatic memory capture is off by default. `/memory-auto on` records explicit consent for the current capture policy and enables bounded capture after successful turns. `/memory-auto off` stops future automatic captures and clears that consent (it does not delete existing memories).
 
 The installed harness corpus contains only public Algo CLI docs, skills, and runtime metadata. Other local agent stores, working-directory code retrieval, index-compute-lab, and skill run-history capture are off by default because retrieved or summarized content can become part of a model request.
 
@@ -259,7 +276,7 @@ The CLI retrieves relevant records from a local index. The public built-in corpu
 /harness external status
 /harness build-rust
 /hsearch retrieval benchmark
-/hread algo-cli:memory:algo-cli-memory-lifecycle-contract.md
+/hread algo-cli:memory:ada-algo-cli-memory-lifecycle-contract.md
 ```
 
 `/harness score` grades Algo CLI's internal retrieval/runtime readiness.

algo_cli_runtime-0.19.2/algo_cli/__init__.py

@@ -0,0 +1,32 @@
+"""Algo CLI agent runtime."""
+
+from __future__ import annotations
+
+from importlib import import_module
+from types import ModuleType
+
+__version__ = "0.19.2"
+
+_RENAMED_INTERNAL_MODULES = {
+    "elsie_memory_path_policy": "irene_memory_path_policy",
+    "elsie_memory_receipts": "grace_memory_receipts",
+    "memory_candidates": "julia_memory_candidates",
+    "memory_echo_veil": "ada_memory_echo_veil",
+    "oneshot": "oliver_oneshot",
+    "program_runtime": "nathan_program_runtime",
+    "tool_policy": "samuel_policy",
+    "tool_runtime": "nathan_runtime",
+    "runtime_qos": "theodore_runtime_qos",
+    "task_ledger": "ada_task_ledger",
+}
+
+
+def __getattr__(name: str) -> ModuleType:
+    """Keep package-attribute imports working after hardening module renames."""
+
+    target = _RENAMED_INTERNAL_MODULES.get(name)
+    if target is None:
+        raise AttributeError(f"module {__name__!r} has no attribute {name!r}")
+    module = import_module(f".{target}", __name__)
+    globals()[name] = module
+    return module