dos-kernel 0.25.0__tar.gz → 0.26.0__tar.gz

{dos_kernel-0.25.0/src/dos_kernel.egg-info → dos_kernel-0.26.0}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: dos-kernel
-Version: 0.25.0
+Version: 0.26.0
 Summary: Dispatch Operating System — the domain-free trust substrate for fleets of autonomous agents (verdict spine, ship oracle, structured refusal, lane arbiter, correlation spine).
 Author: Anthony Chaudhary
 License: MIT
@@ -46,6 +46,8 @@ Requires-Dist: slack-helpers>=0.2; extra == "notify-slack"
 Provides-Extra: export-otlp
 Requires-Dist: opentelemetry-sdk>=1.20; extra == "export-otlp"
 Requires-Dist: opentelemetry-exporter-otlp-proto-http>=1.20; extra == "export-otlp"
+Provides-Extra: memory-mem0
+Requires-Dist: mem0ai>=0.1; extra == "memory-mem0"
 Provides-Extra: paper
 Requires-Dist: arxiv-latex-cleaner>=1.0; extra == "paper"
 Dynamic: license-file
@@ -64,8 +66,18 @@ Dynamic: license-file
 [![Python versions](https://img.shields.io/pypi/pyversions/dos-kernel)](https://pypi.org/project/dos-kernel/)
 [![CI](https://github.com/anthony-chaudhary/dos-kernel/actions/workflows/ci.yml/badge.svg)](https://github.com/anthony-chaudhary/dos-kernel/actions/workflows/ci.yml)
 [![verified by DOS](https://github.com/anthony-chaudhary/dos-kernel/actions/workflows/dos-gate.yml/badge.svg)](https://github.com/anthony-chaudhary/dos-kernel/actions/workflows/dos-gate.yml)
+[![commit-claims](https://img.shields.io/endpoint?url=https%3A%2F%2Fraw.githubusercontent.com%2Fanthony-chaudhary%2Fdos-kernel%2Fmaster%2Fdocs%2Fscoreboard%2Fanthony-chaudhary%2Fdos-kernel%2Fbadge.json)](https://github.com/anthony-chaudhary/dos-kernel/blob/master/docs/scoreboard/methodology.md)
 [![License: MIT](https://img.shields.io/badge/License-MIT-blue.svg)](https://github.com/anthony-chaudhary/dos-kernel/blob/master/LICENSE)
 
+<p align="center">
+  <img src="https://raw.githubusercontent.com/anthony-chaudhary/dos-kernel/master/docs/assets/caught-lie-cast.svg" alt="A terminal recording of the caught lie. The agent reports: Done! Shipped the login endpoint (AUTH1) and the password reset (AUTH2). git log shows one commit — AUTH1: ship the login endpoint. dos verify AUTH AUTH1 answers SHIPPED (exit 0); dos verify AUTH AUTH2 answers NOT_SHIPPED via none (exit 1) — caught. The exit code is the verdict: gate the agent's done on it and a false claim cannot land." width="100%">
+  <br>
+  <em>The whole pitch in one recording: the agent claims two features shipped; git backs one.
+  <code>dos verify</code> answers from the commits, the lie exits <code>1</code>, and a gate on that
+  exit code refuses the false "done". Every line is the real CLI's verbatim output —
+  <a href="https://github.com/anthony-chaudhary/dos-kernel/blob/master/scripts/build_caught_lie_cast.py"><code>scripts/build_caught_lie_cast.py</code></a> re-records it whenever the output changes.</em>
+</p>
+
 <p align="center">
   <img src="https://raw.githubusercontent.com/anthony-chaudhary/dos-kernel/master/docs/assets/loop-hero.svg" alt="Two agent fleets side by side. Left, no referee: agents all report 'done!', every report is believed, and silent corruption (lies, collisions, spin) piles up into a codebase that 'sorta works' and can't be changed. Right, DOS adjudicates: dos verify reads git and the run branches to SHIPPED (exit 0, land it) or NOT_SHIPPED (exit 1, re-dispatch — caught), and that verdict steers the next step." width="100%">
   <br>
@@ -115,7 +127,7 @@ zero config, and the only thing you ever install is one small Python package.
 > entries there undoes it. (No runtime detected? It says so and lists the
 > names to pick from — it never guesses.)
 
-<sub>**v0.25.0** · 3900+ tests · CI: Python 3.11–3.13 on Linux + a Windows 3.13
+<sub>**v0.26.0** · 3900+ tests · CI: Python 3.11–3.13 on Linux + a Windows 3.13
 smoke run · the only runtime dependency is **PyYAML** · **MIT**.</sub>
 
 > 🧭 **Want it in plain words first?** What DOS is, what it catches, and what
@@ -587,6 +599,20 @@ thinks to. The per-host wiring for Cursor / Codex / Gemini is in
 **[the MCP README](https://github.com/anthony-chaudhary/dos-kernel/blob/master/src/dos_mcp/README.md)** — all four are MCP clients, so this
 works on every one of them with zero code.
 
+**Gemini CLI users get a one-liner.** DOS ships a `gemini-extension.json`
+manifest at the repo root, so the whole referee — the MCP server plus a context
+file that tells the model to gate its own done-claims — installs as one Gemini
+extension, no clone and no config edit:
+
+```bash
+pip install 'dos-kernel[mcp]'   # the server the extension launches
+gemini extensions install https://github.com/anthony-chaudhary/dos-kernel
+```
+
+The same manifest is what Google's auto-indexed
+[extensions gallery](https://geminicli.com/extensions/) crawls, so the listing
+is automatic.
+
 ### …then make the verdict *act* (hooks)
 
 To go from "the agent can ask" to "the host won't let a bad call through", wire
@@ -604,6 +630,15 @@ dos init --hooks antigravity .   # .agents/hooks.json
 dos init --hooks claude-cowork . # the SAME .claude/settings.json Claude Code reads
 ```
 
+The list above is illustrative, not authoritative — the live matrix is a verb:
+`dos hosts` prints every host DOS can wire, sourced from the registries themselves
+(`dos hosts --json` for tooling), so the table never rots out of sync with what
+`dos init --hooks` actually installs. Each row carries the host's tier, the events
+it binds, its dialect, its config path, the exact wiring command, and the host's
+own caveat (Codex's partial tool coverage, Cowork's not-yet-firing hooks). A host
+with **no** row is itself the signal: it has no hook seam, so its DOS surface is
+the advisory one (MCP + skills).
+
 That binds three shipped hooks: `pretool` denies a structurally-refused call
 before it runs, `stop` refuses a stop on an unverified "done," `posttool`
 re-surfaces a stalled stream. This is the **enforcement** path (the *host*
@@ -1029,11 +1064,27 @@ for a copy-me skeleton.
 - **[docs/FAQ.md](https://github.com/anthony-chaudhary/dos-kernel/blob/master/docs/FAQ.md)** — the arriving questions ("how do I
   verify an agent's claim?", "does it need an LLM?"), each answered in one
   self-contained block.
+- **[docs/ALTERNATIVES.md](https://github.com/anthony-chaudhary/dos-kernel/blob/master/docs/ALTERNATIVES.md)** — DOS and the
+  alternatives: evals, framework guardrails, Temporal, in-toto, plain CI —
+  what each does well, what DOS adds, and when NOT to use DOS.
 - **[docs/README.md](https://github.com/anthony-chaudhary/dos-kernel/blob/master/docs/README.md)** — the docs index (guides vs. design notes
   vs. the dated build-journal; the numbers are chronology, not a reading order).
 - **[docs/HACKING.md](https://github.com/anthony-chaudhary/dos-kernel/blob/master/docs/HACKING.md)** — extend DOS without forking it.
+- **[docs/DOT_DOS.md](https://github.com/anthony-chaudhary/dos-kernel/blob/master/docs/DOT_DOS.md)** — the `.dos`
+  surface: what that directory is, why it's safe to delete, and the
+  repo-resident state contract (policy in `dos.toml`, fossils under `.dos/`,
+  verdicts in git) that keeps every host adapter thin.
+- **[docs/STABILITY.md](https://github.com/anthony-chaudhary/dos-kernel/blob/master/docs/STABILITY.md)** — the compatibility
+  promise: what you may depend on, what SemVer means here, how deprecations
+  are announced (`DosDeprecationWarning`, a two-minor-release window), and
+  what will never break.
 - **[CLAUDE.md](https://github.com/anthony-chaudhary/dos-kernel/blob/master/CLAUDE.md)** / **[CONTRIBUTING.md](https://github.com/anthony-chaudhary/dos-kernel/blob/master/CONTRIBUTING.md)** — the
   architecture contract and how to send a change.
+- **[verify-action/](https://github.com/anthony-chaudhary/dos-kernel/blob/master/verify-action/README.md)** — the CI gate: a
+  composite Action and a reusable workflow that run `dos commit-audit` on every
+  PR and merge-queue group and post the verdict as the named **dos-verify**
+  status check; make it required and GitHub enforces what the kernel decides
+  (the *verified by DOS* badge above is this gate on the kernel's own repo).
 - **[docs/releases/](https://github.com/anthony-chaudhary/dos-kernel/tree/master/docs/releases)** — per-version release notes (the changelog).
 - **[The website](https://anthony-chaudhary.github.io/dos-kernel/)** — this page,
   condensed to one screen (good for sending to someone).
@@ -1058,6 +1109,10 @@ back verbatim:
   CrewAI, AutoGen, the OpenAI/Claude Agents SDK — with every framework recipe also
   shipped as a runnable, suite-pinned file under
   [`examples/fleet_frameworks/`](https://github.com/anthony-chaudhary/dos-kernel/tree/master/examples/fleet_frameworks).
+  Two seats ship as drivers in the package itself ([docs/305](https://github.com/anthony-chaudhary/dos-kernel/blob/master/docs/305_guardrail-seat-pair-openai-agents-and-crewai-plan.md)):
+  an OpenAI Agents SDK output guardrail that trips on a deliverable git can't
+  see, and a CrewAI task guardrail that turns the retry loop into a
+  do-the-work loop — one import line each.
 - [**Wire DOS into a Hermes / OpenClaw swarm**](https://github.com/anthony-chaudhary/dos-kernel/tree/master/examples/hermes_integration) —
   the offline, A/B-measured swarm-runtime example: the `exec-capability` gate
   refuses a prompt-injected command before it runs (real at a single agent), and

{dos_kernel-0.25.0 → dos_kernel-0.26.0}/README.md

@@ -12,8 +12,18 @@
 [![Python versions](https://img.shields.io/pypi/pyversions/dos-kernel)](https://pypi.org/project/dos-kernel/)
 [![CI](https://github.com/anthony-chaudhary/dos-kernel/actions/workflows/ci.yml/badge.svg)](https://github.com/anthony-chaudhary/dos-kernel/actions/workflows/ci.yml)
 [![verified by DOS](https://github.com/anthony-chaudhary/dos-kernel/actions/workflows/dos-gate.yml/badge.svg)](https://github.com/anthony-chaudhary/dos-kernel/actions/workflows/dos-gate.yml)
+[![commit-claims](https://img.shields.io/endpoint?url=https%3A%2F%2Fraw.githubusercontent.com%2Fanthony-chaudhary%2Fdos-kernel%2Fmaster%2Fdocs%2Fscoreboard%2Fanthony-chaudhary%2Fdos-kernel%2Fbadge.json)](https://github.com/anthony-chaudhary/dos-kernel/blob/master/docs/scoreboard/methodology.md)
 [![License: MIT](https://img.shields.io/badge/License-MIT-blue.svg)](https://github.com/anthony-chaudhary/dos-kernel/blob/master/LICENSE)
 
+<p align="center">
+  <img src="https://raw.githubusercontent.com/anthony-chaudhary/dos-kernel/master/docs/assets/caught-lie-cast.svg" alt="A terminal recording of the caught lie. The agent reports: Done! Shipped the login endpoint (AUTH1) and the password reset (AUTH2). git log shows one commit — AUTH1: ship the login endpoint. dos verify AUTH AUTH1 answers SHIPPED (exit 0); dos verify AUTH AUTH2 answers NOT_SHIPPED via none (exit 1) — caught. The exit code is the verdict: gate the agent's done on it and a false claim cannot land." width="100%">
+  <br>
+  <em>The whole pitch in one recording: the agent claims two features shipped; git backs one.
+  <code>dos verify</code> answers from the commits, the lie exits <code>1</code>, and a gate on that
+  exit code refuses the false "done". Every line is the real CLI's verbatim output —
+  <a href="https://github.com/anthony-chaudhary/dos-kernel/blob/master/scripts/build_caught_lie_cast.py"><code>scripts/build_caught_lie_cast.py</code></a> re-records it whenever the output changes.</em>
+</p>
+
 <p align="center">
   <img src="https://raw.githubusercontent.com/anthony-chaudhary/dos-kernel/master/docs/assets/loop-hero.svg" alt="Two agent fleets side by side. Left, no referee: agents all report 'done!', every report is believed, and silent corruption (lies, collisions, spin) piles up into a codebase that 'sorta works' and can't be changed. Right, DOS adjudicates: dos verify reads git and the run branches to SHIPPED (exit 0, land it) or NOT_SHIPPED (exit 1, re-dispatch — caught), and that verdict steers the next step." width="100%">
   <br>
@@ -63,7 +73,7 @@ zero config, and the only thing you ever install is one small Python package.
 > entries there undoes it. (No runtime detected? It says so and lists the
 > names to pick from — it never guesses.)
 
-<sub>**v0.25.0** · 3900+ tests · CI: Python 3.11–3.13 on Linux + a Windows 3.13
+<sub>**v0.26.0** · 3900+ tests · CI: Python 3.11–3.13 on Linux + a Windows 3.13
 smoke run · the only runtime dependency is **PyYAML** · **MIT**.</sub>
 
 > 🧭 **Want it in plain words first?** What DOS is, what it catches, and what
@@ -535,6 +545,20 @@ thinks to. The per-host wiring for Cursor / Codex / Gemini is in
 **[the MCP README](https://github.com/anthony-chaudhary/dos-kernel/blob/master/src/dos_mcp/README.md)** — all four are MCP clients, so this
 works on every one of them with zero code.
 
+**Gemini CLI users get a one-liner.** DOS ships a `gemini-extension.json`
+manifest at the repo root, so the whole referee — the MCP server plus a context
+file that tells the model to gate its own done-claims — installs as one Gemini
+extension, no clone and no config edit:
+
+```bash
+pip install 'dos-kernel[mcp]'   # the server the extension launches
+gemini extensions install https://github.com/anthony-chaudhary/dos-kernel
+```
+
+The same manifest is what Google's auto-indexed
+[extensions gallery](https://geminicli.com/extensions/) crawls, so the listing
+is automatic.
+
 ### …then make the verdict *act* (hooks)
 
 To go from "the agent can ask" to "the host won't let a bad call through", wire
@@ -552,6 +576,15 @@ dos init --hooks antigravity .   # .agents/hooks.json
 dos init --hooks claude-cowork . # the SAME .claude/settings.json Claude Code reads
 ```
 
+The list above is illustrative, not authoritative — the live matrix is a verb:
+`dos hosts` prints every host DOS can wire, sourced from the registries themselves
+(`dos hosts --json` for tooling), so the table never rots out of sync with what
+`dos init --hooks` actually installs. Each row carries the host's tier, the events
+it binds, its dialect, its config path, the exact wiring command, and the host's
+own caveat (Codex's partial tool coverage, Cowork's not-yet-firing hooks). A host
+with **no** row is itself the signal: it has no hook seam, so its DOS surface is
+the advisory one (MCP + skills).
+
 That binds three shipped hooks: `pretool` denies a structurally-refused call
 before it runs, `stop` refuses a stop on an unverified "done," `posttool`
 re-surfaces a stalled stream. This is the **enforcement** path (the *host*
@@ -977,11 +1010,27 @@ for a copy-me skeleton.
 - **[docs/FAQ.md](https://github.com/anthony-chaudhary/dos-kernel/blob/master/docs/FAQ.md)** — the arriving questions ("how do I
   verify an agent's claim?", "does it need an LLM?"), each answered in one
   self-contained block.
+- **[docs/ALTERNATIVES.md](https://github.com/anthony-chaudhary/dos-kernel/blob/master/docs/ALTERNATIVES.md)** — DOS and the
+  alternatives: evals, framework guardrails, Temporal, in-toto, plain CI —
+  what each does well, what DOS adds, and when NOT to use DOS.
 - **[docs/README.md](https://github.com/anthony-chaudhary/dos-kernel/blob/master/docs/README.md)** — the docs index (guides vs. design notes
   vs. the dated build-journal; the numbers are chronology, not a reading order).
 - **[docs/HACKING.md](https://github.com/anthony-chaudhary/dos-kernel/blob/master/docs/HACKING.md)** — extend DOS without forking it.
+- **[docs/DOT_DOS.md](https://github.com/anthony-chaudhary/dos-kernel/blob/master/docs/DOT_DOS.md)** — the `.dos`
+  surface: what that directory is, why it's safe to delete, and the
+  repo-resident state contract (policy in `dos.toml`, fossils under `.dos/`,
+  verdicts in git) that keeps every host adapter thin.
+- **[docs/STABILITY.md](https://github.com/anthony-chaudhary/dos-kernel/blob/master/docs/STABILITY.md)** — the compatibility
+  promise: what you may depend on, what SemVer means here, how deprecations
+  are announced (`DosDeprecationWarning`, a two-minor-release window), and
+  what will never break.
 - **[CLAUDE.md](https://github.com/anthony-chaudhary/dos-kernel/blob/master/CLAUDE.md)** / **[CONTRIBUTING.md](https://github.com/anthony-chaudhary/dos-kernel/blob/master/CONTRIBUTING.md)** — the
   architecture contract and how to send a change.
+- **[verify-action/](https://github.com/anthony-chaudhary/dos-kernel/blob/master/verify-action/README.md)** — the CI gate: a
+  composite Action and a reusable workflow that run `dos commit-audit` on every
+  PR and merge-queue group and post the verdict as the named **dos-verify**
+  status check; make it required and GitHub enforces what the kernel decides
+  (the *verified by DOS* badge above is this gate on the kernel's own repo).
 - **[docs/releases/](https://github.com/anthony-chaudhary/dos-kernel/tree/master/docs/releases)** — per-version release notes (the changelog).
 - **[The website](https://anthony-chaudhary.github.io/dos-kernel/)** — this page,
   condensed to one screen (good for sending to someone).
@@ -1006,6 +1055,10 @@ back verbatim:
   CrewAI, AutoGen, the OpenAI/Claude Agents SDK — with every framework recipe also
   shipped as a runnable, suite-pinned file under
   [`examples/fleet_frameworks/`](https://github.com/anthony-chaudhary/dos-kernel/tree/master/examples/fleet_frameworks).
+  Two seats ship as drivers in the package itself ([docs/305](https://github.com/anthony-chaudhary/dos-kernel/blob/master/docs/305_guardrail-seat-pair-openai-agents-and-crewai-plan.md)):
+  an OpenAI Agents SDK output guardrail that trips on a deliverable git can't
+  see, and a CrewAI task guardrail that turns the retry loop into a
+  do-the-work loop — one import line each.
 - [**Wire DOS into a Hermes / OpenClaw swarm**](https://github.com/anthony-chaudhary/dos-kernel/tree/master/examples/hermes_integration) —
   the offline, A/B-measured swarm-runtime example: the `exec-capability` gate
   refuses a prompt-injected command before it runs (real at a single agent), and

{dos_kernel-0.25.0 → dos_kernel-0.26.0}/pyproject.toml

@@ -9,7 +9,7 @@ build-backend = "setuptools.build_meta"
 # src/), and the console scripts stay `dos` / `dos-mcp` — only the pip-install /
 # dependency-pin name is `dos-kernel`. See SECURITY.md "Supply chain".
 name = "dos-kernel"
-version = "0.25.0"
+version = "0.26.0"
 description = "Dispatch Operating System — the domain-free trust substrate for fleets of autonomous agents (verdict spine, ship oracle, structured refusal, lane arbiter, correlation spine)."
 # The PyPI project page renders this. Point it at the README so the page isn't
 # blank below the metadata (twine warns when it's missing). PyPI resolves
@@ -123,6 +123,18 @@ export-otlp = [
     "opentelemetry-sdk>=1.20",
     "opentelemetry-exporter-otlp-proto-http>=1.20",
 ]
+# The Mem0 memory-store driver (src/dos/drivers/memory_mem0, docs/314 P3). Kept OUT
+# of the core for the same reason as [mcp]/[tui]/[notify-slack]: the kernel stays
+# near-stdlib. `dos memory recall/verify/admit` work with NO extra (the built-in
+# `file` store; the admit gate reads only candidate bytes); this extra adds only the
+# Mem0 SDK so the same gates sweep a HOSTED memory store. The driver imports the SDK
+# LAZILY (inside the client builder, never at module load) and fails with an install
+# hint only when a read is attempted — so entry-point discovery of the driver never
+# fails for lack of it (the notify_slack discipline). The store seam
+# (dos.memory_stores) names no provider and stays dependency-free.
+memory-mem0 = [
+    "mem0ai>=0.1",
+]
 # The arXiv paper bundle tooling (paper/arxiv/make_bundle.py). NOT part of the
 # kernel — it operates on the paper, which itself only `import dos`-es nothing
 # (the paper is downstream of the code, the one-way arrow). Kept OUT of the core
@@ -298,6 +310,20 @@ antigravity = "dos.drivers.hook_dialects:antigravity_install_spec"
 # (anthropics/claude-code#63360, docs/298).
 claude-cowork = "dos.drivers.hook_dialects:claude_cowork_install_spec"
 
+# The memory-STORE providers (docs/314 P2/P3) — where a fleet's memories live, so
+# the recall gate (docs/103) and the write gate (`dos memory admit`) can run against
+# hosted memory, not just a directory of markdown. The kernel seam
+# (`dos.memory_stores`) holds the read-only MemoryStore Protocol + resolver + the
+# ONE unshadowable `file` built-in; every provider store names its vendor as code
+# (a Mem0 store is inherently Mem0-specific), which the vendor-blindness litmus
+# forbids in a kernel module — so it lives in a DRIVER and registers here, the same
+# kernel/driver split as `dos.judges` / `dos.notifiers`. `--store-kind mem0`
+# discovers it by name; the kernel imports none of them. The `mem0` store needs the
+# `[memory-mem0]` extra; its lazy import means discovering it here never fails when
+# the extra is absent (it resolves, and reports the install hint only on a read).
+[project.entry-points."dos.memory_stores"]
+mem0 = "dos.drivers.memory_mem0:Mem0Store"
+
 [project.urls]
 Homepage = "https://github.com/anthony-chaudhary/dos-kernel"
 Website = "https://anthony-chaudhary.github.io/dos-kernel/"

{dos_kernel-0.25.0 → dos_kernel-0.26.0}/src/dos/__init__.py

@@ -46,7 +46,7 @@ try:
 
     __version__ = _pkg_version("dos-kernel")
 except Exception:  # pragma: no cover - source-tree / not-installed fallback
-    __version__ = "0.25.0"
+    __version__ = "0.26.0"
 
 from dos import config  # noqa: F401  (re-export the seam as the package entry)
 from dos.config import (  # noqa: F401
@@ -166,6 +166,17 @@ from dos.reward import (  # noqa: F401  (the reward-set admission verdict, docs/
     AcceptanceAB,
     acceptance_ab as reward_acceptance_ab,
 )
+from dos.deprecation import (  # noqa: F401  (the typed deprecation category, docs/308)
+    DosDeprecationWarning,
+    warn_deprecated,
+)
+from dos.verified import (  # noqa: F401  (the in-process verify gate, issue #75)
+    # NB: this deliberately rebinds the `dos.verified` attribute from the
+    # submodule to the callable, so `from dos import verified` yields the
+    # decorator/context-manager (the issue-#75 surface), datetime.datetime-style.
+    verified,
+    NotShippedError,
+)
 
 __all__ = [
     "__version__",
@@ -258,4 +269,8 @@ __all__ = [
     "reward_admit",
     "AcceptanceAB",
     "reward_acceptance_ab",
+    "DosDeprecationWarning",
+    "warn_deprecated",
+    "verified",
+    "NotShippedError",
 ]