baselith-core 1.0.2__tar.gz → 1.2.0__tar.gz

baselith_core-1.2.0/PKG-INFO

@@ -0,0 +1,413 @@
+Metadata-Version: 2.4
+Name: baselith-core
+Version: 1.2.0
+Summary: A Modular Framework for Baselith-Core Orchestration featuring World Models (MCTS), Swarm, and Native MCP.
+Author-email: Gippo <baselith.ai@gmail.com>
+License-Expression: AGPL-3.0-only
+Project-URL: Homepage, https://baselithcore.xyz
+Project-URL: Documentation, https://docs.baselithcore.xyz
+Project-URL: Repository, https://github.com/baselithcore/baselithcore
+Project-URL: Changelog, https://github.com/baselithcore/baselithcore/blob/main/CHANGELOG.md
+Project-URL: Marketplace, https://marketplace.baselithcore.xyz
+Keywords: ai,agents,framework
+Classifier: Development Status :: 4 - Beta
+Classifier: Intended Audience :: Developers
+Classifier: Framework :: FastAPI
+Classifier: Programming Language :: Python :: 3 :: Only
+Classifier: Programming Language :: Python :: 3.12
+Classifier: Programming Language :: Python :: 3.13
+Classifier: Programming Language :: Python :: 3.14
+Classifier: Typing :: Typed
+Requires-Python: >=3.12
+Description-Content-Type: text/markdown
+License-File: LICENSE
+License-File: LICENSE.exception
+License-File: NOTICE
+Requires-Dist: alembic>=1.13.0
+Requires-Dist: anthropic<1.0,>=0.18.0
+Requires-Dist: argon2-cffi>=23.1.0
+Requires-Dist: cryptography>=50.0.0
+Requires-Dist: fastapi<0.200,>=0.140.13
+Requires-Dist: httpx<1.0,>=0.27.0
+Requires-Dist: jsonschema>=4.23.0
+Requires-Dist: numpy>=1.24.0
+Requires-Dist: ollama<1.0,>=0.6.0
+Requires-Dist: openai<3.0,>=2.2.0
+Requires-Dist: opentelemetry-api>=1.21.0
+Requires-Dist: opentelemetry-exporter-otlp>=1.21.0
+Requires-Dist: opentelemetry-instrumentation-fastapi>=0.42b0
+Requires-Dist: opentelemetry-instrumentation-httpx>=0.42b0
+Requires-Dist: opentelemetry-instrumentation-redis>=0.42b0
+Requires-Dist: opentelemetry-sdk>=1.21.0
+Requires-Dist: opentelemetry-semantic-conventions>=0.42b0
+Requires-Dist: orjson<4.0,>=3.11.7
+Requires-Dist: packaging>=23.2
+Requires-Dist: prometheus-client<1.0,>=0.20.0
+Requires-Dist: psycopg[binary,pool]<4.0,>=3.2.1
+Requires-Dist: pydantic-settings>=2.0.0
+Requires-Dist: PyJWT<3.0,>=2.14.0
+Requires-Dist: python-dotenv>=1.0.0
+Requires-Dist: python-multipart>=0.0.30
+Requires-Dist: PyYAML>=6.0
+Requires-Dist: redis[hiredis]<6.0,>=5.0.7
+Requires-Dist: rq>=1.15.0
+Requires-Dist: sentry-sdk[fastapi]>=2.0.0
+Requires-Dist: sqlalchemy[asyncio]>=2.0.0
+Requires-Dist: structlog>=24.1.0
+Requires-Dist: uvicorn[standard]<1.0,>=0.30.0
+Requires-Dist: rich>=13.7.0
+Requires-Dist: rich-argparse>=1.4.0
+Requires-Dist: argcomplete>=3.2.0
+Provides-Extra: browser
+Requires-Dist: playwright>=1.62.0; extra == "browser"
+Provides-Extra: documents
+Requires-Dist: pypdf>=6.21.2; extra == "documents"
+Requires-Dist: python-docx<2,>=1.2.0; extra == "documents"
+Requires-Dist: python-pptx<2,>=1.0.2; extra == "documents"
+Requires-Dist: openpyxl==3.1.5; extra == "documents"
+Requires-Dist: xlrd>=2.0.2; extra == "documents"
+Requires-Dist: docling<3,>=2.132.0; extra == "documents"
+Provides-Extra: ocr
+Requires-Dist: pdf2image>=1.17.0; extra == "ocr"
+Requires-Dist: Pillow==13.0.0; extra == "ocr"
+Requires-Dist: pytesseract>=0.3.13; extra == "ocr"
+Provides-Extra: mineru
+Requires-Dist: mineru[pipeline]<4,>=3.4.4; extra == "mineru"
+Provides-Extra: web
+Requires-Dist: beautifulsoup4>=4.14.2; extra == "web"
+Requires-Dist: soupsieve>=2.8.4; extra == "web"
+Requires-Dist: playwright>=1.62.0; extra == "web"
+Provides-Extra: qdrant
+Requires-Dist: qdrant-client<2.0,>=1.15.1; extra == "qdrant"
+Provides-Extra: rag
+Requires-Dist: sentence-transformers==5.6.0; extra == "rag"
+Provides-Extra: nlp
+Requires-Dist: spacy<4,>=3.8.15; extra == "nlp"
+Provides-Extra: gemini
+Requires-Dist: google-genai<2.0,>=1.16.0; extra == "gemini"
+Provides-Extra: tokenizer
+Requires-Dist: tiktoken>=0.7.0; extra == "tokenizer"
+Provides-Extra: evaluation
+Requires-Dist: deepeval>=2.0.0; extra == "evaluation"
+Provides-Extra: sandbox
+Requires-Dist: docker>=7.0.0; extra == "sandbox"
+Provides-Extra: huggingface
+Requires-Dist: huggingface-hub>=0.20.0; extra == "huggingface"
+Requires-Dist: transformers>=5.3.0; extra == "huggingface"
+Requires-Dist: accelerate>=0.25.0; extra == "huggingface"
+Provides-Extra: load
+Requires-Dist: locust>=2.20.0; extra == "load"
+Provides-Extra: memory
+Requires-Dist: supermemory>=0.1.0; extra == "memory"
+Provides-Extra: pii
+Requires-Dist: presidio-analyzer>=2.2.0; extra == "pii"
+Requires-Dist: presidio-anonymizer>=2.2.0; extra == "pii"
+Provides-Extra: bedrock
+Requires-Dist: anthropic[bedrock]<1.0,>=0.18.0; extra == "bedrock"
+Provides-Extra: vertex
+Requires-Dist: anthropic[vertex]<1.0,>=0.18.0; extra == "vertex"
+Provides-Extra: computer-use
+Requires-Dist: mss>=9.0.0; extra == "computer-use"
+Requires-Dist: Pillow==13.0.0; extra == "computer-use"
+Requires-Dist: pyautogui>=0.9.54; extra == "computer-use"
+Provides-Extra: plugin-compat
+Requires-Dist: defusedxml<1.0,>=0.7.1; extra == "plugin-compat"
+Requires-Dist: email-validator>=2.1.0; extra == "plugin-compat"
+Requires-Dist: markdown-it-py<4.0,>=3.0.0; extra == "plugin-compat"
+Requires-Dist: networkx>=3.0; extra == "plugin-compat"
+Requires-Dist: sse-starlette>=2.1.0; extra == "plugin-compat"
+Dynamic: license-file
+
+<p align="center">
+  <picture>
+    <source media="(prefers-color-scheme: dark)" srcset="https://raw.githubusercontent.com/baselithcore/baselithcore/main/media/full-white-og.png">
+    <source media="(prefers-color-scheme: light)" srcset="https://raw.githubusercontent.com/baselithcore/baselithcore/main/media/full-black-og.png">
+    <img alt="BaselithCore Logo" src="https://raw.githubusercontent.com/baselithcore/baselithcore/main/media/full-black-og.png" width="500">
+  </picture>
+</p>
+
+# BaselithCore
+
+> **Agents that survive production.** Durable execution, enforced budgets, and EU AI Act evidence — self-hosted, with no companion SaaS.
+
+[![CI](https://github.com/baselithcore/baselithcore/actions/workflows/ci.yml/badge.svg?branch=main)](https://github.com/baselithcore/baselithcore/actions/workflows/ci.yml)
+[![PyPI](https://img.shields.io/pypi/v/baselith-core.svg?style=flat-square&logo=pypi&logoColor=white)](https://pypi.org/p/baselith-core/)
+[![Python 3.12+](https://img.shields.io/badge/python-3.12+-blue.svg?style=flat-square&logo=python&logoColor=white)](https://www.python.org/downloads/)
+[![Licence: AGPL-3.0](https://img.shields.io/badge/licence-AGPL--3.0-blue.svg?style=flat-square)](https://github.com/baselithcore/baselithcore/blob/main/LICENSE)
+[![Your plugins: any licence](https://img.shields.io/badge/your%20plugins-any%20licence-brightgreen.svg?style=flat-square)](https://github.com/baselithcore/baselithcore/blob/main/LICENSE.exception)
+[![Docs](https://img.shields.io/badge/docs-baselithcore.xyz-0b5394.svg?style=flat-square)](https://docs.baselithcore.xyz)
+
+<p align="center">
+  <a href="https://raw.githubusercontent.com/baselithcore/baselithcore/main/media/demo-install.gif">
+    <img src="https://raw.githubusercontent.com/baselithcore/baselithcore/main/media/demo-install.gif"
+         alt="Installing BaselithCore from PyPI into a fresh virtualenv, then scaffolding a project with the CLI — empty directory to running skeleton"
+         width="720" height="508">
+  </a>
+</p>
+
+BaselithCore is a Python orchestration engine for agentic AI. Execution state is
+checkpointed as a run proceeds, so an interrupted process resumes from its last
+completed step instead of replaying side effects. Every request carries a budget
+that caps iterations, tool calls, tokens and USD spend, and every step emits
+OpenTelemetry spans and Prometheus metrics with real cost attached — the audit
+trail a regulated deployment has to produce is written while the system runs,
+not reconstructed from logs afterwards.
+
+> **1.0 is the stable line.** The public `baselith` API follows Semantic
+> Versioning: a breaking change waits for a major release and goes through a
+> deprecation cycle first. Coming from 0.x? The top-level `core` and `plugins`
+> packages moved under `baselith`, the long-deprecated shims are gone, and
+> several security postures now fail closed — [Migrating to
+> 1.0](https://docs.baselithcore.xyz/advanced/migrating-to-1-0/) has the
+> checklist and [upgrade notes](https://docs.baselithcore.xyz/advanced/upgrade-notes/)
+> the details.
+
+<div align="center">
+
+[**Quick start**](#quick-start) · [**Plugins**](#plugins) · [**Docs**](https://docs.baselithcore.xyz) · [**Website**](https://baselithcore.xyz) · [**Marketplace**](https://marketplace.baselithcore.xyz) · [**Architecture**](#architecture-at-a-glance) · [**Changelog**](https://github.com/baselithcore/baselithcore/blob/main/CHANGELOG.md) · [**Contributing**](https://github.com/baselithcore/baselithcore/blob/main/CONTRIBUTING.md)
+
+</div>
+
+> **Writing a plugin? You keep your source.** The [plugin exception](https://github.com/baselithcore/baselithcore/blob/main/LICENSE.exception)
+> lets any plugin that uses the framework as a library ship under any licence you
+> like, including a closed one. Same terms for everyone.
+
+---
+
+## Why BaselithCore
+
+- **Agents that survive production.** Durable execution with checkpoint/resume, replayable tool steps, state history and fork/rewind — a `SIGKILL` mid-run recovers without repeating a single side effect.
+- **Everything included, nothing rented.** Evaluation suites, LLM-as-judge, red-teaming, OpenTelemetry tracing, Prometheus metrics with real USD cost, Helm and Terraform deployment — built in, self-hosted, no companion SaaS to subscribe to.
+- **Brakes, not just horsepower.** Autonomy gating, durable human-in-the-loop approvals, per-request cost budgets, prompt-injection guardrails and sandboxed code execution, every seam fail-closed by default — plus opt-in EU AI Act, GDPR, NIS2 and DORA primitives with evidence trails.
+
+## Quick start
+
+Kick the tyres without installing anything:
+
+```bash
+uvx --from baselith-core baselith --version
+```
+
+Then take it as a library, in one command. The distribution is
+**`baselith-core`** on PyPI:
+
+```bash
+uv pip install baselith-core        # or: pip install baselith-core
+```
+
+```python
+import asyncio
+
+from baselith import Agent, Crew, Task
+
+researcher = Agent(system_prompt="You are a meticulous researcher.")
+writer = Agent(system_prompt="You write crisp executive summaries.")
+
+crew = Crew(agents=[researcher, writer], tasks=[
+    Task("Research {topic} and list the key facts.", agent=researcher),
+    Task("Write a summary from the research.", agent=writer),
+])
+
+
+async def main() -> None:
+    result = await crew.run(inputs={"topic": "vector databases"})
+    print(result.final)
+
+
+asyncio.run(main())
+```
+
+Typed, budgeted and observable from the first line — the
+[quickstart](https://docs.baselithcore.xyz/getting-started/quickstart/) adds
+tools, structured output and a checkpoint store.
+
+`baselith` is the public API and the only surface that carries a
+compatibility promise; `import baselith` costs ~3 ms because names resolve
+lazily. The framework's own packages live under `baselith.core.*` and each
+declares what it promises — see [API stability
+tiers](https://docs.baselithcore.xyz/advanced/api-stability/).
+
+Or the whole runtime — API, PostgreSQL, FalkorDB and Qdrant, plus two Hugging
+Face Text Embeddings Inference servers for embedding and reranking, with
+migrations applied at startup. From a checkout of this repository, with Docker
+running:
+
+```bash
+uv pip install -e .             # installs the `baselith` CLI
+baselith setup docker-core      # writes .env and configs/.env.docker.core
+docker compose --env-file configs/.env.docker.core -f docker-compose.core.yml up -d --wait
+baselith doctor                 # environment and configuration diagnostics
+```
+
+`--wait` returns only once every health check is green, so the next line can
+assume the stack is serving:
+
+```bash
+curl --fail http://localhost:8000/health
+```
+
+<p align="center">
+  <a href="https://raw.githubusercontent.com/baselithcore/baselithcore/main/media/demo-runtime.gif">
+    <img src="https://raw.githubusercontent.com/baselithcore/baselithcore/main/media/demo-runtime.gif"
+         alt="The Compose stack coming up — the api, postgres, redis and qdrant containers each reaching Healthy, then /health answering ok"
+         width="720" height="509">
+  </a>
+</p>
+
+In a project generated by `baselith init`, `baselith up` does all of this for
+you: it writes the runtime files, builds and waits for `/health` in one command.
+
+Optional capabilities (RAG, browser automation, OCR, extra model providers,
+vector backends, …) install as extras — the [installation
+guide](https://docs.baselithcore.xyz/getting-started/installation/) lists them,
+and the [Docker Core guide](https://github.com/baselithcore/baselithcore/blob/main/mkdocs-site/docs/getting-started/docker-core.md)
+covers the checkout-based runtime in full.
+
+## Plugins
+
+Everything domain-specific is a plugin, and the CLI does the plumbing. Scaffold
+one, check it, run it — without leaving the terminal:
+
+```bash
+baselith plugin create my_plugin --type agent               # manifest.yaml, plugin.py, agent.py
+baselith plugin validate my_plugin                          # syntax, manifest, schema, deps, env vars
+baselith plugin add my_plugin --name my_plugin --docker     # build, rebuild the API image, probe HTTP
+```
+
+<p align="center">
+  <a href="https://raw.githubusercontent.com/baselithcore/baselithcore/main/media/demo.gif">
+    <img src="https://raw.githubusercontent.com/baselithcore/baselithcore/main/media/demo.gif"
+         alt="Scaffolding an agent plugin and validating it — three commands, no boilerplate"
+         width="720" height="509">
+  </a>
+</p>
+
+`--type` picks the shape: `agent`, `router` or `graph`. Running someone else's
+plugin is the same `add` command with a Git URL, and the marketplace is one
+command away:
+
+```bash
+baselith plugin add https://github.com/your-org/plugin-example --docker
+baselith plugin marketplace search browser
+baselith plugin marketplace install <plugin-id>
+```
+
+`baselith plugin list`, `status` and `logs` cover day-to-day work; `sign` writes
+the integrity hash a hardened deployment verifies before it imports anything.
+
+The distribution ships official plugins under `baselith.plugins`, each signed
+and strictly typed: `api_routers`, `browser_agent`, `coding_agent`,
+`document_sources`, `goals`, `payments` (a reference AP2 adapter),
+`reasoning_agent` and `web_scraper`.
+
+The [first-plugin tutorial](https://docs.baselithcore.xyz/getting-started/first-plugin/)
+walks one end to end · [creating
+plugins](https://docs.baselithcore.xyz/plugins/creating-plugins/) ·
+[packaging](https://docs.baselithcore.xyz/plugins/packaging/) ·
+[marketplace](https://docs.baselithcore.xyz/plugins/marketplace/)
+
+## Architecture at a glance
+
+```mermaid
+graph TD
+    subgraph SC["Sacred Core (Agnostic Engine)"]
+        A["Core Orchestrator<br/>(intent · routing · adaptive loop · durable checkpoint/resume)"]
+        F["Flow Handlers"]
+
+        subgraph COG["Cognitive Layer"]
+            RE["Reasoning<br/>(MCTS · Tree-of-Thoughts)"]
+            WM["World Model<br/>(risk · rollback · simulation)"]
+            SW["Swarm<br/>(auction protocols)"]
+            PL["Planning"]
+            MT["Meta · Reflection · Adversarial"]
+        end
+
+        LP["Engineered Loops<br/>(verifier · stall guard · escalation)"]
+        M["Memory Hierarchy<br/>(STM → MTM → LTM)"]
+        S["Storage Layer<br/>(Postgres · Qdrant/pgvector · Redis)"]
+        R["Plugin Registry"]
+        RES["Resilience · Observability · Guardrails"]
+        GOV["Governance<br/>(autonomy gating · human-in-the-loop · budgets · compliance evidence)"]
+    end
+
+    A --> COG
+    A --> F
+    A --> LP
+    A --> M
+    M --> S
+    COG --> M
+
+    R --> C["Custom Agent Plugins"]
+    R --> D["Capability Extensions"]
+    R -.->|Inject Handlers| A
+    R -.->|Inject Routers| G["API Gateway"]
+
+    A --> H["LLM Layer<br/>(Anthropic · OpenAI · Gemini · Ollama · HF)<br/>native tool-calling · typed output · cross-provider fallback"]
+    F --> H
+
+    A --> I["Interop<br/>(MCP · A2A streaming · AP2 mandates · realtime duplex)"]
+    A -.->|wrapped by| RES
+    A -.->|gated by| GOV
+```
+
+Two rules hold the shape: `baselith/core/` stays domain-agnostic, and everything
+domain-specific is a plugin. The [architecture
+docs](https://docs.baselithcore.xyz/architecture/overview/) go deeper.
+
+<details>
+<summary><b>What's inside</b> — the full capability list</summary>
+
+| | |
+| :-- | :-- |
+| **Typed agents & declarative crews** | Single-import `Agent`, sequential/parallel/manager-led `Crew`, free-form group chat → [Agent API](https://docs.baselithcore.xyz/core-modules/agent/) |
+| **Durable execution & time-travel** | Checkpoint/resume (Postgres, SQLite or in-memory), replayable tool steps, state history, fork/rewind → [Orchestration](https://docs.baselithcore.xyz/core-modules/orchestration/) |
+| **Loop engineering** | Verifier-owned loops with stall detection, feed-forward lessons, escalation and resumable outcomes → [Loops](https://docs.baselithcore.xyz/core-modules/loops/) |
+| **Structured event streaming** | Per-run agent events in-process or over SSE, plus async run submission with completion webhooks → [Orchestration](https://docs.baselithcore.xyz/core-modules/orchestration/) |
+| **Cognitive layer** | MCTS, Tree-of-Thoughts, world model, swarm auctions & bounded handoffs → [Reasoning](https://docs.baselithcore.xyz/core-modules/reasoning/) · [Swarm](https://docs.baselithcore.xyz/core-modules/swarm/) |
+| **Governance & safety** | Autonomy gating, durable human-in-the-loop, plan approval, loop & tool budgets, layered guardrails, sandboxed code → [Autonomy & Safety](https://docs.baselithcore.xyz/core-modules/orchestration/) |
+| **Memory & RAG** | STM→MTM→LTM hierarchy, hybrid search, hierarchical chunking, full RAG pipeline, Qdrant or pgvector backends → [Memory](https://docs.baselithcore.xyz/core-modules/memory/) |
+| **Multimodal** | Vision, native PDF and audio content blocks, speech-to-text and text-to-speech (OpenAI, ElevenLabs, Google or any OpenAI-compatible server), and a duplex voice session contract with barge-in → [Services](https://docs.baselithcore.xyz/core-modules/services/) · [Realtime](https://docs.baselithcore.xyz/core-modules/realtime/) |
+| **Interoperability** | Native dual-era MCP (server + client + declarative registry), A2A peer interop, AP2 signed-mandate commerce → [MCP](https://docs.baselithcore.xyz/core-modules/mcp/) · [A2A](https://docs.baselithcore.xyz/core-modules/a2a/) |
+| **Self-improvement, governed** | Skill evolution, prompt compilation and evolutionary search — every change eval-gated, audited and human-approvable → [Skill Evolution](https://docs.baselithcore.xyz/core-modules/skill-evolution/) |
+| **Evaluation & observability** | Trajectory eval in CI, multi-model bake-off, LLM-as-judge, red-team, OTel + Prometheus with USD cost metrics → [Evaluation](https://docs.baselithcore.xyz/core-modules/evaluation/) |
+| **Regulatory toolkit** | Opt-in EU AI Act / GDPR / NIS2 / DORA primitives with evidence trails → [Regulatory Compliance](https://docs.baselithcore.xyz/advanced/regulatory-compliance/) |
+| **Production deployment** | Docker, Helm, Terraform, SLO rules, typed SDKs → [Deployment](https://docs.baselithcore.xyz/advanced/deployment/) |
+
+</details>
+
+## Contributing
+
+Contributions are welcome, and the on-ramps are deliberately marked:
+
+- [**good first issue**](https://github.com/baselithcore/baselithcore/issues?q=is%3Aissue+is%3Aopen+label%3A%22good+first+issue%22) — scoped, with context and an acceptance check
+- [**help wanted**](https://github.com/baselithcore/baselithcore/issues?q=is%3Aissue+is%3Aopen+label%3A%22help+wanted%22) — bigger pieces that need an owner
+- [**Discussions**](https://github.com/baselithcore/baselithcore/discussions) — questions, ideas, and what you built
+
+[CONTRIBUTING.md](https://github.com/baselithcore/baselithcore/blob/main/CONTRIBUTING.md) covers the dev setup, the quality gates your
+PR has to pass, and the review turnaround you can expect. Every pull request
+runs **13,000+ tests** behind a **85% branch-coverage floor**, strict typing,
+architecture-boundary and docs-consistency gates.
+[GOVERNANCE.md](https://github.com/baselithcore/baselithcore/blob/main/GOVERNANCE.md) says how decisions get made and what needs a
+proposal before code; [CODE_OF_CONDUCT.md](https://github.com/baselithcore/baselithcore/blob/main/CODE_OF_CONDUCT.md) applies to every
+space the project uses. Questions belong in
+[SUPPORT.md](https://github.com/baselithcore/baselithcore/blob/main/SUPPORT.md)'s channels, vulnerabilities in
+[SECURITY.md](https://github.com/baselithcore/baselithcore/blob/main/SECURITY.md)'s; release history lives in
+[CHANGELOG.md](https://github.com/baselithcore/baselithcore/blob/main/CHANGELOG.md).
+
+## Licence
+
+**AGPL-3.0-only** — see [LICENSE](https://github.com/baselithcore/baselithcore/blob/main/LICENSE).
+[LICENSE.exception](https://github.com/baselithcore/baselithcore/blob/main/LICENSE.exception) adds a permission under AGPL section 7:
+a plugin that uses the framework as a library — rather than patching files under
+`baselith/core/` — may be licensed under any terms you choose, including closed ones, and
+section 13 never reaches it. Offered to everyone on identical terms; your plugin
+carries the notice described in section 3(c), and [plugin
+packaging](https://docs.baselithcore.xyz/plugins/packaging/) says what it must say.
+
+[NOTICE](https://github.com/baselithcore/baselithcore/blob/main/NOTICE) adds one term under
+AGPL section 7(b): **attribution**. Commercial use is welcome; every copy must keep
+the `NOTICE` file, and a product that shows legal notices (an About, Legal or
+Credits screen) must credit *"Based on BaselithCore by The BaselithCore Authors"*.
+
+---
+Copyright © 2026 The BaselithCore Authors — see [NOTICE](https://github.com/baselithcore/baselithcore/blob/main/NOTICE).

baselith_core-1.2.0/baselith/core/_core_version.py

@@ -0,0 +1,13 @@
+"""The public core release this ``baselith/core/`` tree corresponds to.
+
+This file is byte-identical in every distribution of the framework. The public
+open-core project's release job rewrites it together with ``_version.py``, so
+there the two always agree. A downstream distribution that ships this ``baselith/core/``
+alongside its own components receives the file through the normal core
+alignment and never rewrites it: its ``_version.py`` carries the distribution's
+own version, while ``CORE_VERSION`` still says which public core release the
+tree contains. The system update notice compares ``CORE_VERSION`` (never the
+distribution version) with the public core's releases and security advisories.
+"""
+
+CORE_VERSION = "1.2.0"

baselith_core-1.2.0/baselith/core/_version.py

@@ -0,0 +1,3 @@
+"""Single source of truth for the framework version."""
+
+__version__ = "1.2.0"