b3-prosaic-runtime 0.9.1__tar.gz

b3_prosaic_runtime-0.9.1/CHANGELOG.md

@@ -0,0 +1,209 @@
+# Changelog
+
+## 0.9.1 — 2026-10-13
+
+- Add versioned `RuntimeAdapter` for trusted host projections and normalization
+  around an unmodified Runtime. Execution callbacks can only reduce authority.
+- Share deadline, request/tool allowances and reported-token evidence across all
+  adapter attempts; preserve known partial and unknown usage and callback failures.
+- Ordinary execution, conversation APIs, accounting and PostgreSQL remain unchanged.
+- Publish only the SDK distribution; retain adapter compatibility qualification.
+
+## Unreleased historical candidates
+
+- Prepare Runtime 0.8.1 and the paired PostgreSQL recorder 0.2.1 patch candidates.
+- Recheck cancellation and absolute deadlines after observer/accounting preparation,
+  immediately before dispatch. Count provider requests only at actual attempts.
+- Bound JSON and SSE reads by the absolute execution deadline and preserve usage
+  already observed before cancellation, timeout or a later preparation failure.
+
+## 0.8.0 — 2026-10-10
+
+- Rename the distribution to `b3-prosaic-runtime` with the index dependency
+  `b3-prosaic>=0.4,<0.5`; Python imports and the `prosaic-runtime` CLI stay unchanged.
+- Rename the separate PostgreSQL recorder to `b3-prosaic-runtime-postgres` 0.2.0,
+  selecting Runtime 0.8.x. Include local Apache license and provenance notices.
+- Export source versions and qualify clean Git archive wheels/sdists with matching
+  metadata, source payloads, license files and installed import ownership.
+- Migrate using a fresh environment or image: legacy and renamed distributions
+  share import paths. Candidate artifacts remain unpublished until qualification.
+
+## 0.7.1 — 2026-10-10
+
+- Export validate_execution_artifact, validate_custom_tools and custom_descriptors
+  for pure admission without model calls or CLI discovery.
+- Reuse execution validation for effort, routing and selected-provider controls,
+  including acquisition inheritance of the final agent's execution context.
+- Pin Prosaic 0.3.2 with the public canonical artifact-definition validator.
+
+## 0.7.0 — 2026-10-09
+
+- Ship recorder adapter 0.1.1 with read-only catalog/type/constraint/grant readiness
+  checks; incompatible schema or missing runtime privileges fail before dispatch.
+
+- Native Anthropic Messages profiles support text, streaming, and Runtime-managed
+  builtin, custom, and CLI tools through the shared bounded execution loop.
+  Existing profiles continue to default to OpenAI-compatible Chat Completions.
+- Anthropic usage capture handles cumulative SSE snapshots and distinct cache
+  categories. Cache-write and unsupported pricing categories remain unpriced;
+  conflicting or partial evidence cannot produce a trusted cost estimate.
+- Anthropic supports `temperature: null` to omit sampling parameters; unsupported
+  effort, thinking, JSON mode, and server tools fail explicitly. Durable CLI
+  accounting accepts `--accounting-provider anthropic`.
+
+## 0.6.0 — 2026-10-08
+
+- Optional trusted execution context records customer/account, user/project and
+  workflow lineage; omitted IDs resolve to configured defaults or `default`.
+  Existing unmetered SDK/CLI calls and serialized Result fields remain compatible.
+- Per-provider-call accounting captures UTC timestamps, requested/reported model
+  and input/output/cache/reasoning token usage across HTTP, SSE and tool loops.
+  Unknown/partial evidence is retained; duplicate-key/conflicting usage is quarantined.
+- Separate `prosaic-runtime-postgres` 0.1.0 adapter persists intent before dispatch,
+  immutable scoped observations and decimal cost estimates with frozen rate cards.
+  Replay is idempotent, queries are bounded and reporting uses a consistent snapshot.
+- Recorder failure never automatically retries a paid model request. Accounting
+  remains opt-in; customer charging, billing export and monetary caps are not enabled.
+
+## 0.5.3 — 2026-10-07
+
+- Pin Python Prosaic 0.3.1 at immutable commit
+  `ee145ef29a62dbcf7f5e8abdf1d979749398718d` and refresh installation guidance.
+
+## 0.5.2 — 2026-10-07
+
+- Public `StructuredToolLoop` for explicitly selected JSON tool-request transport:
+  closed envelopes, registered-tool authorization, bounded history/deadlines,
+  correction and repeated-call detection. Final domain admission remains host-owned;
+  native calling remains a separate explicit transport, not an automatic fallback.
+- Host-controlled `cli_sandbox_v1`: optional required-mode Seatbelt (macOS) or
+  Bubblewrap >= 0.12.0 (Linux, including ARM64), private scratch/HOME, read-only
+  evidence/dependencies, no host IP network and fail-closed preflight. Default is
+  off; callbacks/validators/native coding providers remain outside this boundary.
+- Sandboxed CLI walkthroughs, synthetic containment probe and Linux/macOS CI gates;
+  Ubuntu CI grants user namespaces only to its trusted Bubblewrap executable,
+  retaining host-wide AppArmor restrictions.
+- Retains the immutable Python Prosaic 0.3.0 dependency; no Node/npm required.
+- Supports macOS framework Python startup with an exact framework-library read
+  grant; no broad interpreter-prefix or workspace access is added.
+
+## 0.5.1 — 2026-10-01
+
+- Pin the Python Prosaic 0.3.0 release, replacing the TypeScript CLI dependency.
+
+## 0.5.0 — 2026-10-01
+
+- Operator-trusted YAML CLI-tool manifests, fixed executable/argv execution
+  without a shell, explicit environment grants, read-root validation, bounded
+  subprocess output/time, cancellation and offline availability/version preflight.
+  Runtime `preflight` checks an agent or all tools without model requests.
+- Complete installable CLI analyzer, neutral Markdown, HTTP/SSE runner and optional
+  actual Understanding adapter; host Python callback and CLI-tool guides.
+- CLI descriptors bind manifest semantics and resolved executable paths; relative
+  PATH lookup is canonicalized before changing the tool's working directory.
+  Tools remain trusted host code, not an OS sandbox or complete injection defense.
+- Release verification: 265 Runtime tests pass, including native HTTP/SSE and
+  CLI boundary cases; source distribution and wheel build successfully. The
+  earlier development campaign results below are retained as dated observations.
+
+- Immutable host-registered `CustomTool` API, strict closed-schema validation,
+  finite JSON/result bounds, authorization predicate, native HTTP/SSE execution,
+  versioned structural events, and a runnable catalogue example. Registration
+  grants no authority; prose, YAML and host policy must agree.
+- Callbacks are trusted synchronous code, not sandboxed or forcibly preemptible.
+  Fixed safe error envelopes have an independent 256-byte ceiling, even when
+  the configured successful-result bound is smaller.
+- Stage-1 source verification: 207 Runtime / 101 Harness tests, real local
+  HTTP/SSE examples, both package builds. All four TokenProxy models tested in
+  both modes; 6/8 Runtime invocations and 6/8 Harness cases succeeded/admitted.
+  Explicit-first-tool failures and fabricated no-tool answers stayed blocked;
+  no admission rule was relaxed. Wider adversarial hardening/MCP remain queued.
+- Fresh review fixes: preserve malformed custom-call shapes through HTTP/SSE
+  parsing (including invalid stream fragments), and redact callback cancellation
+  messages while retaining exit 130/known usage. Final source tests: 220 Runtime /
+  101 Harness. A second unchanged-policy all-model matrix succeeded in 5/8 Runtime
+  cases and admitted 6/8 Harness cases; zero-call endpoint misses stayed blocked.
+
+## 0.4.0 — 2026-10-01
+
+- Prosaic inspection deadlines return an unsuccessful `inspection_timeout`
+  result instead of leaking a subprocess timeout exception from `run()`.
+
+- Public Runtime inference rejects HTTP redirects rather than forwarding
+  endpoint bearer credentials to another destination. Diagnostics already
+  rejected redirects; real two-server tests cover tool and no-tool inference.
+
+- No-tool HTTP requests now enforce the serialized input-byte limit, including
+  request overhead, just like tool-loop requests.
+
+- Public usage totals stay unknown when any completed turn lacks complete,
+  nonnegative integer usage. Genuine reported zero remains zero; known partial
+  sums are diagnostic metadata, not a complete invocation total.
+
+- Opt-in Prosaic `acquisition` artifact: perform an explicitly granted first
+  native tool call before disclosing full agent prose, resources and arguments.
+  One conversation/model/deadline/tool budget; failed acquisition blocks with
+  no fallback. `acquisition_v1` capability, HTTP/SSE ordering and denial tests,
+  staged and explicit no-tool preloading examples. Completed-turn reported usage
+  is retained when a later cancellation, input limit or timeout stops execution.
+
+- An explicit initial tool choice now fails with `tool_choice_not_honored` if
+  the endpoint omits, substitutes or adds first-turn calls. No returned call is
+  executed on a mismatch and no automatic retry is made. Reported usage is kept.
+  Automatic tool selection remains optional. `initial_tool_enforcement_v1`
+  advertises the stricter contract.
+
+## 0.3.0 — 2026-09-30
+
+- Successful `read_file` results and events bind the file path, byte SHA-256,
+  offset, lines read and total line count. Structural events omit file content
+  and raw arguments.
+- `RunPolicy.initial_tool` requests a granted function on the first turn only;
+  permission intersection remains unchanged. Capability flags let consumers
+  require read provenance and initial-tool support explicitly.
+- Four-tier Markdown examples, a larger synthetic launch dossier, TokenProxy
+  YAML profiles and `examples/run_tiers.py` demonstrate independent bounded
+  agents with and without read tools. This is not recursive agent execution.
+- Live basic native-read probes passed for all four TokenProxy model IDs with
+  streaming on/off and automatic/explicit tool choice (16 combinations).
+- Known limitation: some richer reader prompts returned text without the
+  explicitly requested tool call. This version requests tool choice but does
+  not itself reject its omission; consumers must verify tool execution/events.
+  A successful read does not establish answer correctness.
+
+## 0.2.0 — 2026-09-29
+
+### Breaking changes
+
+- Runtime configuration now uses YAML/YML exclusively. TOML support was removed
+  without a migration layer. Default discovery checks `prosaic-runtime.yaml`,
+  then `prosaic-runtime.yml`. PyYAML is now a runtime dependency.
+- CLI invocations now show status and elapsed-time progress on stderr by default;
+  `--quiet` suppresses progress. JSON output remains on stdout.
+
+### Added
+
+- `doctor` checks configuration, Prosaic availability, credentials and model
+  discovery; inference requires explicit `--inference`.
+- `smoke --live` runs packaged no-tool and read-tool probes with synthetic evidence,
+  reporting completion, observed streaming and actual tool execution independently.
+- `--output text` prints the answer without a JSON wrapper.
+- YAML `limits.timeout_s` and `limits.max_tool_rounds`, with CLI overrides.
+- Structured `tool_started` and `tool_completed` events.
+- A complete first-run guide, runnable examples with and without tools, and
+  `examples/run_examples.py` with in-memory endpoint/model overrides.
+
+### Licensing and verification
+
+- Project license is Apache-2.0; historical MIT attribution is retained.
+- Expanded automated coverage for YAML loading, permissions, diagnostics, CLI
+  output, example programs and live-smoke reporting.
+- Live verification performed with ThinkingCap-Qwen3.6-27B-OptiQ-4bit:
+  authenticated discovery, streamed completion, a real file-tool round trip,
+  and plain-text CLI output passed. No credentials are included in this release.
+
+## 0.1.0 — 2026-09-29
+
+- Initial extraction of generic OpenAI-compatible execution from Echelon,
+  with a Prosaic-only Python API and CLI, streaming, bounded file tools,
+  explicit permissions, events and transport conformance tests.

b3_prosaic_runtime-0.9.1/LICENSE

@@ -0,0 +1,202 @@
+
+                                 Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "[]"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright [yyyy] [name of copyright owner]
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.

b3_prosaic_runtime-0.9.1/LICENSE-MIT

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 Testimonial
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

b3_prosaic_runtime-0.9.1/MANIFEST.in

@@ -0,0 +1,24 @@
+recursive-include examples *.md *.yml *.yaml *.json *.py
+include examples/cli-tool/pyproject.toml
+include docs/cli-tools.md
+include docs/security.md
+include docs/adr-cli-sandbox.md
+prune examples/cli-tool/build
+global-exclude *.local.yml *.local.yaml
+
+include docs/structured-tools.md
+include docs/workflow-factory-runtime-implementation.md
+include docs/release-0.7.1.md
+include docs/tool-effects.md
+include docs/accounting.md
+include docs/telemetry.md
+include docs/conformance.md
+include CHANGELOG.md
+recursive-include tests/support *.py
+include scripts/wheel_smoke.py
+include scripts/production_wheel_smoke.py
+include docs/production-acceptance.md
+include scripts/release_artifacts.py
+include docs/package-index.md
+include docs/conversations.md
+include scripts/conversation_wheel_smoke.py

b3_prosaic_runtime-0.9.1/NOTICE.md

@@ -0,0 +1,16 @@
+# Provenance
+
+The OpenAI-compatible transport, agent loop, compaction, path filters, progress helpers and transcript writer were extracted from B3Cognition/echelon at commit `3c606aa1ef9e44cc587ba122648392e0250f3094`.
+
+The initial repository history preserves commits touching the five extracted implementation files and LICENSE, with `src/harness/ai_cli_backends/` renamed to `src/prosaic_runtime/`. Original author metadata and commit messages are retained. Commit IDs change because the history is filtered. The source repository and full context are available at https://github.com/B3Cognition/echelon.
+
+Transport conformance tests were adapted from Echelon's `tests/unit/test_ai_cli_backend.py` at the same commit. Echelon-specific tools and control protocols remain in Echelon.
+
+Prosaic Runtime is distributed under the Apache License, Version 2.0; see LICENSE.
+Runtime integration and API work is Copyright (c) 2026 B3 Cognition.
+
+The extracted code was originally distributed under MIT. Its original notice,
+`Copyright (c) 2026 Testimonial`, and permission text are retained in LICENSE-MIT.
+This historical attribution does not replace the project's Apache-2.0 license.
+Third-party components retain their own licenses. Previously published versions
+and tags retain the license notices shipped with them.