arbora 0.1.8.dev5__tar.gz → 0.1.8.dev6__tar.gz

{arbora-0.1.8.dev5 → arbora-0.1.8.dev6}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: arbora
-Version: 0.1.8.dev5
+Version: 0.1.8.dev6
 Summary: The deployable MCP, REST, control-plane, fleet, WebUI, and operations composition for the Knuckles agent platform.
 Author-email: Repository Maintainers <maintainers@knuckles.team>
 License-Expression: MIT
@@ -14,16 +14,17 @@ Classifier: Programming Language :: Python :: 3.14
 Requires-Python: >=3.12
 Description-Content-Type: text/markdown
 License-File: LICENSE
-Requires-Dist: agent-utilities<4.0.0,>=3.1.0
+Requires-Dist: meristem<5.0.0,>=4.0.1
 Requires-Dist: eunomia-core>=0.3.10
 Requires-Dist: httpx>=0.28.1
 Requires-Dist: pyjwt>=2.15.1
 Requires-Dist: joserfc>=1.7.5
 Requires-Dist: python-multipart>=0.0.32
-Requires-Dist: agent-connector-sdk[a2a,mcp]<0.6.0,>=0.5.5
+Requires-Dist: scion-sdk[a2a,mcp]<0.6.0,>=0.5.9
 Requires-Dist: aiohttp>=3.14.5
 Requires-Dist: anyio>=4.15.1
-Requires-Dist: epistemic-graph[server]<3.0.0,>=2.27.6
+Requires-Dist: medulla<3.0.0,>=2.27.10
+Requires-Dist: medulla-stem<3.0.0,>=2.27.10
 Requires-Dist: fastapi>=0.143.3
 Requires-Dist: filelock>=4.2.0
 Requires-Dist: msgpack>=1.2.1
@@ -34,10 +35,16 @@ Requires-Dist: starlette>=1.8.0
 Requires-Dist: fastmcp>=4.1.0
 Requires-Dist: mcp<3.0.0,>=2.3.0
 Requires-Dist: opentelemetry-api>=1.45.1
-Requires-Dist: pydantic-ai-slim[openai]==2.57.0
+Requires-Dist: pydantic-ai-slim[openai]==2.63.0
 Requires-Dist: universal-skills<2.0.0,>=1.3.11
+Requires-Dist: cryptography>=50.0.2
+Provides-Extra: acp
+Requires-Dist: agent-client-protocol==0.11.0; extra == "acp"
+Requires-Dist: pydantic-ai-harness[acp]==0.63.0; extra == "acp"
 Provides-Extra: test
-Requires-Dist: agent-terminal-ui>=2.3.1; extra == "test"
+Requires-Dist: agent-client-protocol==0.11.0; extra == "test"
+Requires-Dist: tuig==2.3.6; (sys_platform == "linux" and (platform_machine == "x86_64" or platform_machine == "aarch64")) and extra == "test"
+Requires-Dist: pyte==0.8.2; extra == "test"
 Requires-Dist: pytest>=9.1.1; extra == "test"
 Requires-Dist: pytest-asyncio>=1.4.0; extra == "test"
 Requires-Dist: pytest-cov>=7.1.0; extra == "test"
@@ -49,10 +56,10 @@ Requires-Dist: types-PyYAML>=6.0.12.20260906; extra == "test"
 Requires-Dist: python-telegram-bot>=22.8; extra == "test"
 Requires-Dist: setuptools>=84.0.0; extra == "test"
 Provides-Extra: webui
-Requires-Dist: agent-webui<3.0.0,>=2.8.2; extra == "webui"
+Requires-Dist: agent-webui<3.0.0,>=2.8.3; extra == "webui"
 Requires-Dist: uvicorn>=0.54.0; extra == "webui"
 Provides-Extra: gateway-widgets
-Requires-Dist: agent-connector-sdk[a2a,mcp]<0.6.0,>=0.5.5; extra == "gateway-widgets"
+Requires-Dist: scion-sdk[a2a,mcp]<0.6.0,>=0.5.9; extra == "gateway-widgets"
 Provides-Extra: vault
 Requires-Dist: hvac>=2.4.0; extra == "vault"
 Provides-Extra: messaging-telegram
@@ -153,7 +160,7 @@ the durable database, a connector implementation, or the browser UI.
 - Project the same governed operations through REST and unary A2A.
 - Discover, admit, supervise, and route the MCP connector fleet.
 - Apply identity, tenant, action-policy, idempotency, and provenance controls.
-- Host Agent Web UI and coordinate terminal, desktop, messaging, and attended
+- Host Overstory and coordinate terminal, desktop, messaging, and attended
   browser capabilities.
 - Generate deployment configuration and report live readiness through `/health`.
 
@@ -173,20 +180,20 @@ then use the task-oriented references:
 
 | Layer | Authority | Relationship to Arbora |
 |---|---|---|
-| [Agent Web UI](https://knuckles-team.github.io/agent-webui/) | Browser experience and local interaction state | Arbora hosts it and supplies governed application routes. |
-| Agent Terminal UI | Terminal and headless interaction | Uses the governed Arbora REST interface. |
-| Geniusbot | Desktop cockpit | Uses the governed Arbora gateway for its primary panels. |
+| [Overstory](https://knuckles-team.github.io/overstory/) | Browser experience and local interaction state | Arbora hosts it and supplies governed application routes. |
+| Tuig | Terminal and headless interaction | Uses the governed Arbora REST interface. |
+| Axil | Desktop GUI | Uses the governed Arbora gateway for its primary panels. |
 | Messaging channels | Chat and voice entrypoints | Arbora hosts and supervises them; agent-utilities owns adapters and routing. |
 | **Arbora** | MCP, REST, A2A, identity policy, fleet supervision | The running process and public door. |
-| [agent-utilities](https://knuckles-team.github.io/agent-utilities/) | Agents, workflows, evaluation, and skills | Arbora invokes its typed control-plane services. |
-| [epistemic-graph](https://knuckles-team.github.io/epistemic-graph/) | Durable graph, SQL, RDF, vector, time, reasoning, and provenance | Arbora uses its generated client contracts. |
-| [agent-connector-sdk](https://knuckles-team.github.io/agent-connector-sdk/) | Connector servers, source synchronization, and governed effects | Arbora discovers and routes SDK-based connector services. |
+| [Meristem](https://knuckles-team.github.io/meristem/) | In-run execution harness | Arbora supplies run plans through typed harness contracts. |
+| [Medulla](https://knuckles-team.github.io/medulla/) | Durable graph, SQL, RDF, vector, time, reasoning, and provenance | Arbora uses its generated client contracts. |
+| [Scion SDK](https://knuckles-team.github.io/scion-sdk/) | Connector servers, source synchronization, and governed effects | Arbora discovers and routes SDK-based connector services. |
 
 The boundary is deliberate: Arbora authenticates, composes, routes,
 supervises, and projects. Each sibling remains the source of truth for its own
 domain.
 
-[![Knuckles platform runtime architecture](https://raw.githubusercontent.com/Knuckles-Team/epistemic-graph/main/docs/assets/runtime-architecture.svg)](https://knuckles-team.github.io/.github/architecture/#arbora)
+[![Knuckles platform runtime architecture](https://raw.githubusercontent.com/Knuckles-Team/medulla/main/docs/assets/runtime-architecture.svg)](https://knuckles-team.github.io/.github/architecture/#arbora)
 
 [Explore the live architecture](https://knuckles-team.github.io/.github/architecture/#arbora)
 

{arbora-0.1.8.dev5 → arbora-0.1.8.dev6}/README.md

@@ -57,7 +57,7 @@ the durable database, a connector implementation, or the browser UI.
 - Project the same governed operations through REST and unary A2A.
 - Discover, admit, supervise, and route the MCP connector fleet.
 - Apply identity, tenant, action-policy, idempotency, and provenance controls.
-- Host Agent Web UI and coordinate terminal, desktop, messaging, and attended
+- Host Overstory and coordinate terminal, desktop, messaging, and attended
   browser capabilities.
 - Generate deployment configuration and report live readiness through `/health`.
 
@@ -77,20 +77,20 @@ then use the task-oriented references:
 
 | Layer | Authority | Relationship to Arbora |
 |---|---|---|
-| [Agent Web UI](https://knuckles-team.github.io/agent-webui/) | Browser experience and local interaction state | Arbora hosts it and supplies governed application routes. |
-| Agent Terminal UI | Terminal and headless interaction | Uses the governed Arbora REST interface. |
-| Geniusbot | Desktop cockpit | Uses the governed Arbora gateway for its primary panels. |
+| [Overstory](https://knuckles-team.github.io/overstory/) | Browser experience and local interaction state | Arbora hosts it and supplies governed application routes. |
+| Tuig | Terminal and headless interaction | Uses the governed Arbora REST interface. |
+| Axil | Desktop GUI | Uses the governed Arbora gateway for its primary panels. |
 | Messaging channels | Chat and voice entrypoints | Arbora hosts and supervises them; agent-utilities owns adapters and routing. |
 | **Arbora** | MCP, REST, A2A, identity policy, fleet supervision | The running process and public door. |
-| [agent-utilities](https://knuckles-team.github.io/agent-utilities/) | Agents, workflows, evaluation, and skills | Arbora invokes its typed control-plane services. |
-| [epistemic-graph](https://knuckles-team.github.io/epistemic-graph/) | Durable graph, SQL, RDF, vector, time, reasoning, and provenance | Arbora uses its generated client contracts. |
-| [agent-connector-sdk](https://knuckles-team.github.io/agent-connector-sdk/) | Connector servers, source synchronization, and governed effects | Arbora discovers and routes SDK-based connector services. |
+| [Meristem](https://knuckles-team.github.io/meristem/) | In-run execution harness | Arbora supplies run plans through typed harness contracts. |
+| [Medulla](https://knuckles-team.github.io/medulla/) | Durable graph, SQL, RDF, vector, time, reasoning, and provenance | Arbora uses its generated client contracts. |
+| [Scion SDK](https://knuckles-team.github.io/scion-sdk/) | Connector servers, source synchronization, and governed effects | Arbora discovers and routes SDK-based connector services. |
 
 The boundary is deliberate: Arbora authenticates, composes, routes,
 supervises, and projects. Each sibling remains the source of truth for its own
 domain.
 
-[![Knuckles platform runtime architecture](https://raw.githubusercontent.com/Knuckles-Team/epistemic-graph/main/docs/assets/runtime-architecture.svg)](https://knuckles-team.github.io/.github/architecture/#arbora)
+[![Knuckles platform runtime architecture](https://raw.githubusercontent.com/Knuckles-Team/medulla/main/docs/assets/runtime-architecture.svg)](https://knuckles-team.github.io/.github/architecture/#arbora)
 
 [Explore the live architecture](https://knuckles-team.github.io/.github/architecture/#arbora)
 

{arbora-0.1.8.dev5 → arbora-0.1.8.dev6}/arbora/__init__.py

@@ -16,7 +16,7 @@ The live package layout is:
 - `arbora.deployment` — configuration, diagnostics, canaries, and operations.
 
 The ``arbora`` console command serves
-``arbora.mcp_server.server:mcp_server`` over stdio or authenticated
+``arbora.console:main`` over stdio or authenticated
 streamable HTTP. Capability limits that depend on unfinished upstream
 contracts are documented in ``docs/status.md`` and fail closed; no legacy
 fallback is implied by this package description.

{arbora-0.1.8.dev5 → arbora-0.1.8.dev6}/arbora/_version.py

@@ -3,4 +3,4 @@
 Updated only by `bump-my-version` (see `.bumpversion.toml`) — never hand-edited.
 """
 
-__version__ = "0.1.8.dev5"
+__version__ = "0.1.8.dev6"

{arbora-0.1.8.dev5 → arbora-0.1.8.dev6}/arbora/a2a/authority.py

@@ -300,8 +300,12 @@ class WorkItemA2AAuthority:
     def _request_digest(
         message: A2AMessage, context_id: str, decision: A2ARouteDecision
     ) -> str:
+        from arbora.agent_runs import native_stream_protocol
+
+        protocol = native_stream_protocol()
         return _digest(
             {
+                **({"host_transport_protocol": protocol} if protocol else {}),
                 "context_id": context_id,
                 "decision": decision.model_dump(mode="json"),
                 "message": message.model_dump(mode="json", by_alias=True),
@@ -317,7 +321,11 @@ class WorkItemA2AAuthority:
         request_digest: str,
         decision: A2ARouteDecision,
     ) -> dict[str, Any]:
+        from arbora.agent_runs import native_stream_protocol
+
+        protocol = native_stream_protocol()
         return {
+            **({"host_transport_protocol": protocol} if protocol else {}),
             "a2a_schema": _A2A_METADATA_SCHEMA,
             "a2a_context_id": context_id,
             "a2a_message_ref": persistence_reference(
@@ -421,22 +429,40 @@ class WorkItemA2AAuthority:
 
         if self.task_plan_config is not None and self.hosted_invocation is None:
             raise RuntimeError("UPGRADE_REQUIRED: hosted task-plan invocation")
+        from contextlib import nullcontext
+
         from arbora.agent_runs import native_run_scope
+        from arbora.current_plan_publication import bind_admitted_claim
         from arbora.host_bindings import preloaded_agent_tools
 
-        with native_run_scope(
-            run_id=run_id or task_id,
-            task_id=task_id,
-            context_id=context_id,
-            work_item_id=item_id,
-            session=session,
-            claim=claim,
-            owner_graph=(
-                work_items.native_owner_graph(work_engine)
+        with (
+            native_run_scope(
+                run_id=run_id or task_id,
+                task_id=task_id,
+                context_id=context_id,
+                work_item_id=item_id,
+                session=session,
+                claim=claim,
+                owner_graph=(
+                    work_items.native_owner_graph(work_engine)
+                    if self.task_plan_config is not None
+                    else None
+                ),
+                hosted_invocation=self.hosted_invocation,
+            ),
+            (
+                bind_admitted_claim(
+                    work_engine,
+                    session=session,
+                    run_id=run_id or task_id,
+                    work_item_id=item_id,
+                    claim=claim,
+                    hosted_invocation=self.hosted_invocation,
+                    owner_graph=work_items.native_owner_graph(work_engine),
+                )
                 if self.task_plan_config is not None
-                else None
+                else nullcontext()
             ),
-            hosted_invocation=self.hosted_invocation,
         ):
             return await self._agent_executor().execute_agent(
                 AgentExecutionRequest(
@@ -555,6 +581,39 @@ class WorkItemA2AAuthority:
             raise A2AIdempotencyConflict("A2A native run identity conflicts")
         return item
 
+    async def _notify_admission_or_settle(
+        self, session: Any, *, task_id: str, run_id: str, context_id: str, item_id: str
+    ) -> None:
+        """Settle only notification failures, never rerun or undo admission."""
+        from arbora.agent_runs import NativeRunAdmission, notify_native_admission
+
+        try:
+            notify_native_admission(
+                session, NativeRunAdmission(task_id, run_id, context_id, item_id)
+            )
+        except (Exception, asyncio.CancelledError) as failure:
+            try:
+                async with asyncio.timeout(5):
+                    cancelled = await self.cancel(task_id)
+                    readback = await asyncio.to_thread(
+                        self._authorized_item, task_id, "kg:write"
+                    )
+                    if (
+                        cancelled.status.state != "canceled"
+                        or not isinstance(readback, dict)
+                        or readback.get("status") != "cancelled"
+                    ):
+                        raise RuntimeError("cancellation not confirmed")
+            except (Exception, asyncio.CancelledError):
+                raise RuntimeError(
+                    "native admission notification failed: settlement unavailable"
+                ) from None
+            if isinstance(failure, asyncio.CancelledError):
+                raise
+            raise RuntimeError(
+                "native admission notification failed: admitted task canceled"
+            ) from None
+
     async def dispatch(
         self,
         *,
@@ -612,6 +671,13 @@ class WorkItemA2AAuthority:
             request_digest=request_digest,
             run_id=run_id,
         )
+        await self._notify_admission_or_settle(
+            session,
+            task_id=task_id,
+            run_id=run_id,
+            context_id=context_id,
+            item_id=item_id,
+        )
         if not created and item.get("status") in _TERMINAL:
             recovered = await self.get(task_id)
             if recovered is None:

{arbora-0.1.8.dev5 → arbora-0.1.8.dev6}/arbora/acp/__init__.py

@@ -17,6 +17,8 @@ from .session_policy import (
 )
 
 __all__ = [
+    "HostedACPAgent",
+    "serve_acp_stdio",
     "AcpRefusal",
     "AcpRefusalReason",
     "AcpSessionAdmission",
@@ -29,3 +31,12 @@ __all__ = [
     "CodingSessionRequest",
     "WorkspaceGrant",
 ]
+
+
+def __getattr__(name: str):
+    """Load the optional ACP SDK only when a host explicitly requests it."""
+    if name in {"HostedACPAgent", "serve_acp_stdio"}:
+        from . import adapter
+
+        return getattr(adapter, name)
+    raise AttributeError(name)