bernstein 3.19.2__tar.gz → 3.20.0__tar.gz

bernstein-3.20.0/.coverage-baseline.json

@@ -0,0 +1,8 @@
+{
+  "diff_coverage_floor_percent": 90,
+  "head_sha": "406ba3a78dbcc58972bea28c6a04876fac34bfe9",
+  "line_rate": 0.847,
+  "run_id": "34415941851",
+  "total_coverage_percent": 84.7,
+  "updated_at": "2026-09-14T14:15:05+00:00"
+}

bernstein-3.20.0/.gitattributes

@@ -0,0 +1,39 @@
+# Generated artefacts. Marking them keeps GitHub from counting them in
+# language statistics and collapses them by default in review diffs, so a
+# routine refresh does not bury the hand-written changes in the same PR.
+#
+# docs/reference/openapi.json is rebuilt by scripts/generate_openapi.py and
+# pinned by tests/unit/test_openapi_snapshot_drift.py; edit the routes, not
+# the snapshot.
+docs/reference/openapi.json linguist-generated=true
+# README demo evidence: byte-exact artifacts - the receipt's hashes and
+# signature die on any EOL translation, so no checkout may rewrite them.
+docs/assets/demo-run/demo.cast -text linguist-generated
+docs/assets/demo-run/demo.gif -text linguist-generated
+docs/assets/demo-run/run-receipt.json -text linguist-generated
+docs/assets/demo-run/run-receipt.pub.pem -text linguist-generated
+# Committed receipt test vectors: the same byte-exact rule. A signature is
+# over the bytes, so an EOL translation on checkout silently invalidates the
+# evidence that tests/unit/test_*_receipt_format_vectors.py compares against.
+tests/fixtures/receipt-vectors/*.json -text
+tests/fixtures/receipt-vectors/*.pem -text
+# Trust record vectors are the same byte-exact artefacts as the receipt
+# vectors above: a signature is over the bytes, and the committed public key
+# is compared byte-for-byte, so no checkout may translate their line endings.
+tests/fixtures/trust-record-vectors/*.json -text
+tests/fixtures/trust-record-vectors/*.pem -text
+# Agent-card UTF-16 ordering vector: same byte-exact rule. The signature and
+# the regeneration test both compare raw bytes, so no checkout may translate
+# line endings in the card body, its signature sidecar, the digest, or the
+# public key.
+tests/fixtures/agent-card-utf16-vector/*.json -text
+tests/fixtures/agent-card-utf16-vector/*.pem -text
+tests/fixtures/agent-card-utf16-vector/*.sha256 -text
+
+# Evidence-envelope vectors: same byte-exact rule as the three vector sets
+# above. The RFC 8785 canonicalisation, its detached signature and the
+# `.sha256` sidecar are all compared as raw bytes, so no checkout may
+# translate line endings in them.
+tests/fixtures/evidence-envelope-vectors/*.json -text
+tests/fixtures/evidence-envelope-vectors/*.pem -text
+tests/fixtures/evidence-envelope-vectors/*.sha256 -text

bernstein-3.20.0/.gitignore

@@ -0,0 +1,235 @@
+# Python bytecode and distribution
+__pycache__/
+*.pyc
+*.pyo
+*.egg-info/
+dist/
+build/
+
+# Python environments
+# No trailing slash: a worktree may carry ``.venv`` as a symlink to a shared
+# interpreter, and ``.venv/`` matches directories only, so the symlink would
+# otherwise be picked up by ``git add -A``.
+.venv
+
+# Environment variables
+.env
+.env.*
+.env.local
+# ...but checked-in templates must stay trackable: `.env.*` above also matches
+# `.env.example`, so every template written so far was silently dropped while
+# the compose files and docs kept telling people to copy one.
+!.env.example
+!**/.env.example
+
+# A2A v1.0 agent-card signing keys — minted on first run, must NEVER be committed.
+.bernstein/keys/
+
+# Internal docs (local only — kept on disk, excluded from git)
+docs/superpowers/
+docs/research/
+docs/launch/
+docs/social/
+docs/conference/
+docs/plans/
+docs/specs/
+docs/content-calendar.md
+docs/jetbrains-deferral.md
+docs/roadmap-200-tickets.md
+
+# IDE and Editor directories/files
+.DS_Store
+.idea/
+.vscode/
+*.swp
+
+# AI/assistant/Claude-specific tooling
+.claude/
+
+# Package and dependency caches
+node_modules/
+.pytest_cache/
+.ruff_cache/
+.mypy_cache/
+
+# Bernstein workspace state — .sdd must NEVER be committed to git (CI enforced)
+.sdd/
+# The same runtime directories when a run's root is the checkout itself
+# rather than .sdd/. Two of them hold key material -- auth/ carries the
+# agent-identity JWT secret and a2a/identity/ the private half of the
+# lineage signing keypair -- and auth/ is already in _MERGE_DENY_PREFIXES
+# (core/git/git_pr.py), so the project has decided these must never reach
+# main. The merge gate is the last line; without these entries `git add -A`
+# stages a key long before any gate sees it. Anchored to the root so a
+# legitimate nested directory of the same name is untouched.
+/auth/
+/a2a/
+/default/
+
+# MkDocs build output
+site/
+
+# Design specs and development plans (private)
+docs/specs/
+docs/plans/
+
+# Build / test artifacts
+coverage-test.xml
+coverage*.xml
+*.junit.xml
+htmlcov/
+.coverage
+# Tunnel registry state written by an older, CWD-relative test fixture.
+# The fixture is tmp-scoped now; this stays as a guard against regressions.
+/tunnels-test.json
+
+# Local-only fixture for the public-docs banned-claim guard test
+# (tests/unit/test_benchmark_public_site.py). Never tracked -- the phrase
+# list it holds names specific third-party products. See
+# scripts/check_pr_text_hygiene.py for the matching pattern.
+/tests/fixtures/benchmarks/local/
+
+# Project/Repository-specific generated or log files
+*.pid
+*.log
+
+# Git worktrees
+.worktrees/
+
+# Coverage reports
+.coverage
+coverage.xml
+htmlcov/
+
+# Documentation and content
+docs/social/
+docs/content-calendar.md
+docs/research*
+
+# Internal-only design specs / workflow design (never ship to public docs)
+dev/
+docs/internal/
+docs/strategy/
+docs/competitive/
+
+# Release-notes drafts and outreach copy (live in /pr/, never the repo)
+.release-notes-*.draft.md
+.release-notes-*.outreach.md
+.release-notes-*.internal.md
+.release-notes-*.wip.md
+.release-*.md
+*-outreach.md
+*-draft.md
+*.draft.md
+
+# Marketing
+marketing/*
+
+# Runtime-local MCP config (localhost server, not for sharing)
+.claude/mcp.json
+.hypothesis/
+.mcpregistry_github_token
+.mcpregistry_registry_token
+# Stray secret-token files.  Narrowed from `*token*` — that pattern also
+# matched `src/bernstein/core/tokens/**`, which made hatchling drop the
+# entire sub-package from the wheel (v1.8.10 crashed on `bernstein run`
+# with ModuleNotFoundError: bernstein.core.tokens).  Do NOT revert.
+*.token
+*_token.json
+*_token.yaml
+*_token.txt
+auth_token*
+docs/openapi.json
+
+# pytest-benchmark output
+.benchmarks/
+.env
+
+# Local benchmark run artifacts (simulation/eval outputs — regenerated on demand)
+benchmarks/results/
+benchmarks/swe_bench/results/
+.cache/
+
+# Working notes an agent writes beside the repo while preparing a change
+# (PR bodies, review drafts). Three of these were committed by accident in
+# a single week and reached main, so the directory is ignored rather than
+# relying on everyone remembering to leave it out of `git add -A`.
+scratch/
+
+# Internal-only research / strategy / audit material (never ship to public docs)
+docs/internal/
+docs/strategy/
+docs/competitive/
+docs/_internal/
+docs/**/_internal/
+docs/**/INTERNAL_*.md
+docs/**/*-internal.md
+docs/**/*-strategy.md
+docs/**/*-roadmap.md
+docs/**/*-deep-audit*.md
+docs/**/*-deep-dive*.md
+docs/**/*-analysis-v*.md
+docs/**/*-roadmap-signals*.md
+docs/**/*-inheritance*.md
+docs/**/*-gap-map*.md
+docs/**/*-backlog-*.md
+docs/**/RESRCH-*.md
+docs/**/KF-*.md
+docs/**/MT-*.md
+docs/**/OAI-*.md
+docs/**/SDD-*.md
+docs/**/RAG-*.md
+
+# mutmut 3 working tree (./mutants/) and mutation-test cache (.mutmut-cache)
+mutants/
+.mutmut-cache
+
+# The observability snapshot corpus is tracked on purpose: it is the
+# regression gate's baseline (scripts/observability/gate.py) and has to
+# accumulate one file per day. Re-include it from the docs internal
+# excludes above; git needs every parent directory unignored before it
+# will descend into the corpus.
+!docs/_internal/
+docs/_internal/*
+!docs/_internal/observability/
+docs/_internal/observability/*
+!docs/_internal/observability/snapshots/
+
+# Scratch written at the repo root by an orchestrated run: per-task
+# decomposition specs and review verdicts. They are inputs to a run, not part
+# of the tree, and two of them reached main through a pull request that used
+# `git add -A`. Ignored at the root only, so a real file with one of these
+# names elsewhere is unaffected.
+/task*.json
+/verdicts.json
+
+# `.coverage` alone matches one filename. Running the suite in parallel makes
+# pytest-cov write one shard per worker as `.coverage.<host>.<pid>.<random>`,
+# and 25 of them reached main because nothing matched that shape.
+.coverage.*
+!.coverage-baseline.json
+
+# Editor and tooling backups: a `.bak` beside the file it copies is never the
+# artefact, and one reached main under src/.
+*.bak
+*.orig
+*.rej
+
+# Per-run review scratch. These are written into the work tree by the review
+# pass and are not part of any change.
+REVIEW-*.md
+
+# Working notes agents write at the repository root while resolving an
+# issue. All three shapes have been committed by runs; none is ever part
+# of a change.
+/IMPLEMENTATION_PLAN.md
+/pr-body-*.md
+/test.txt
+
+# Qwen Code internal files (never part of the repo)
+*.qwen*.json
+
+# Web-research notes an orchestrated run writes beside the checkout while it
+# works. They are inputs to one run, not part of the tree; one of them was
+# committed by an agent pass and would have shipped in the pull request.
+/web-research/

bernstein-3.20.0/.plugin/plugin.json

@@ -0,0 +1,25 @@
+{
+  "name": "bernstein",
+  "version": "3.20.0",
+  "description": "The open-source governance layer for AI agents. Spawn parallel agents in per-task git worktrees, verify their work, and merge results; no model in the coordination loop, so replaying a plan reproduces its task graph byte-identically.",
+  "author": {
+    "name": "chernistry",
+    "url": "https://github.com/chernistry"
+  },
+  "homepage": "https://github.com/sipyourdrink-ltd/bernstein",
+  "repository": "https://github.com/sipyourdrink-ltd/bernstein",
+  "license": "Apache-2.0",
+  "keywords": [
+    "orchestration",
+    "multi-agent",
+    "coding-agents",
+    "claude-code",
+    "codex",
+    "gemini"
+  ],
+  "commands": "./commands/",
+  "agents": "./agents/",
+  "rules": "./rules/",
+  "skills": "./skills/",
+  "mcpServers": "./.mcp.json"
+}

bernstein-3.20.0/CITATION.cff

@@ -0,0 +1,46 @@
+cff-version: 1.2.0
+message: "If you use Bernstein in academic or industry work, please cite it using the metadata below."
+type: software
+title: "Bernstein: a deterministic, open-source governance layer for AI agents"
+abstract: >-
+  Bernstein is a deterministic orchestrator that runs a crew of CLI coding
+  agents (Claude Code, Codex, Gemini CLI, and 40+ more) against a single
+  goal in per-task git worktrees.  There is no model in the coordination
+  loop, so replay of yesterday's plan reproduces yesterday's task graph
+  byte-identically.  Every step carries signed lineage, and an opt-in
+  HMAC-SHA256 audit chain covers every scheduling decision.  Verification
+  splits by key material: the Ed25519 signature legs and the Merkle seal
+  check from the on-disk artefacts alone, while replaying the HMAC chain
+  needs the install's audit key.
+authors:
+  - given-names: Alex
+    family-names: Chernysh
+    email: alex@alexchernysh.com
+    affiliation: independent
+repository-code: "https://github.com/sipyourdrink-ltd/bernstein"
+url: "https://bernstein.run"
+license: Apache-2.0
+keywords:
+  - multi-agent
+  - agent-orchestration
+  - cli-coding-agents
+  - deterministic-scheduler
+  - hmac-audit
+  - parallel-worktrees
+  - claude-code
+  - codex-cli
+  - gemini-cli
+  - aider
+  - software-engineering
+version: "3.20.0"
+date-released: "2026-09-20"
+preferred-citation:
+  type: software
+  title: "Bernstein: a deterministic, open-source governance layer for AI agents"
+  authors:
+    - given-names: Alex
+      family-names: Chernysh
+      email: alex@alexchernysh.com
+  year: 2026
+  url: "https://bernstein.run"
+  repository-code: "https://github.com/sipyourdrink-ltd/bernstein"