eslams-core 0.4.0__tar.gz

eslams_core-0.4.0/.github/workflows/ci.yml

@@ -0,0 +1,27 @@
+name: Core CI
+
+on:
+  push:
+    branches: [main]
+  pull_request:
+
+jobs:
+  test:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+      - uses: actions/setup-python@v5
+        with:
+          python-version: "3.12"
+      - name: Install
+        run: python -m pip install -e ".[dev]"
+      - name: Test
+        run: pytest
+      - name: Schema export smoke
+        run: eslams schemas export --out /tmp/eslams-schemas
+      - name: Core benchmark smoke
+        run: python -m eslams_core.bench arena-step --games tic-tac-toe --iterations 10 --json /tmp/core-step-bench.json
+      - name: Ruff
+        run: ruff check .
+      - name: Mypy
+        run: mypy src

eslams_core-0.4.0/.gitignore

@@ -0,0 +1,11 @@
+.venv/
+__pycache__/
+.pytest_cache/
+.mypy_cache/
+.ruff_cache/
+build/
+dist/
+out/
+*.egg-info/
+runs/
+.DS_Store

eslams_core-0.4.0/CHANGELOG.md

@@ -0,0 +1,202 @@
+# Changelog
+
+## v0.4.0 - 2026-06-11
+
+### Added
+
+- Added Core step contract v2 with deterministic `coreStep` request/response
+  semantics, canonical state/action/legal-action/observation hashes, compact
+  legal-action views, replay events, terminal summaries, and per-stage timings.
+- Added compact observation and prompt package generation with stable prefix
+  blocks, per-turn dynamic blocks, action output JSON schemas, prompt hashes,
+  and approximate token estimates.
+- Added shared model-action parsing with invalid-action taxonomy, corrective
+  retry prompts, `action_id` support, and streaming `action_ready` detection.
+- Added persistent runner-session support with hot in-memory state,
+  create/step/snapshot/ping/close APIs, and FastAPI route wiring for runner
+  containers.
+- Added `python -m eslams_core.bench arena-step ...` and `eslams bench
+  arena-step` benchmark harnesses for Core step timings and payload sizes.
+- Added observation budget reports, golden Core fixture generation, engine
+  capability metadata, and speculative-precompute eligibility metadata.
+- Added production-fail-closed seed derivation and runner request signing
+  helpers.
+- Added Platform TypeScript contract artifacts under `packages/core-contracts`
+  and a gated `@eslams/core-lite` TypeScript package for tic-tac-toe and
+  connect-four parity work.
+
+### Changed
+
+- Bumped Core package/version metadata to `0.4.0`, runner defaults to
+  `eslams-runner:0.4.0`, and schema bundle metadata to
+  `eslams-schema-bundle-v2`.
+- Extended schema export with Core step request/response, prompt package,
+  replay event, runner-session, and observability schemas.
+- Enriched runner health output with warm status, loaded game count, and
+  uptime while preserving existing hash fields.
+
+### Validation
+
+- Added v0.4.0 tests for Core step v2, prompt packages, shared model-action
+  parsing, runner sessions, seed/signing security, budgets, golden fixtures,
+  schema export, generated contract artifacts, and engine capability gates.
+
+## v0.3.2 - 2026-06-10
+
+### Security
+
+- Replaced runner artifact HMAC signatures with Ed25519 signature v2 for
+  official-publication trust. Legacy HMAC signatures remain readable as
+  `legacy_hmac` history, but they no longer satisfy official bundle validation.
+- Added in-process agent timeout enforcement so local agents cannot exceed
+  `time_budget_ms` without a timeout marker.
+
+### Fixed
+
+- Preserved `max_turns=0` as an explicit zero-turn run instead of falling back
+  to arena defaults.
+- Fixed primary scores to track the evaluated player (`player_1`) rather than
+  the highest seat score.
+- Fixed multi-player forfeit scoring so remaining seats keep their scores and
+  the forfeiting seat is isolated.
+
+### Changed
+
+- Bumped Core package/version metadata to `0.3.2` and runner defaults to
+  `eslams-runner:0.3.2`.
+- Added GitHub Actions CI for pytest, Ruff, and mypy.
+
+## v0.3.1 - 2026-06-10
+
+### Security
+
+- Hardened `.eslams` archive validation against zip path traversal and
+  concurrent validation races by validating every archive member before
+  extracting into a unique temporary directory.
+
+### Fixed
+
+- Logged Arena transition exceptions while keeping public transport failures
+  generic.
+- Fixed Checkers multi-jump continuation, including forced-piece legal actions.
+- Rejected missing explicit agents for arenas with more than two players.
+- Preserved literal edge backticks when parsing fenced JSON model responses.
+- Guarded malformed Backgammon move parsing and corrupt public replay JSONL rows.
+- Made catalogue export skip and warn on missing metadata rows instead of
+  crashing.
+- Generated replay HTML player panels from replay data instead of hardcoding two
+  player IDs.
+
+### Changed
+
+- Bumped Core package/version metadata to `0.3.1` and runner defaults to
+  `eslams-runner:0.3.1`.
+
+## v0.3.0 - 2026-06-09
+
+### Added
+
+- Added lightweight live Arena session APIs:
+  `start_session`, `step_session`, and `legal_actions_page`.
+- Added public JSON schemas for Arena start results, step results, legal-action
+  pages, action descriptors, and live Arena events.
+- Added CLI commands for live Arena transport:
+  `eslams arena start`, `eslams arena step`, and
+  `eslams arena legal-actions-page`.
+- Added public-safe legal action descriptors for all 50 registered games,
+  including stable action tokens, labels, groups, categories, prompt labels,
+  and deterministic sort keys.
+- Added canonical live `display_frame` projection using the same display-frame
+  shape as public replay packages.
+- Added public-safe live Arena events for session start, action acceptance,
+  state application, model-turn requests, human-turn readiness, completion, and
+  failure cases.
+- Added paged/searchable legal-action descriptor output for large action sets.
+- Added all-50 Arena start/step contract tests, public-safety checks, paging
+  tests, failure tests, CLI tests, timing assertions, and representative golden
+  fixtures.
+
+### Changed
+
+- Bumped Core package/version metadata to `0.3.0` and runner defaults to
+  `eslams-runner:0.3.0`.
+- Documented the v0.3.0 Arena transport contract, server-owned
+  `session_state` boundary, browser-safe fields, and release/tag instructions.
+- Narrowed public safety scanning so action descriptor `token` and
+  `prompt_label` are allowed only inside action descriptor rows.
+
+### Validation
+
+- `python3 -m pytest -q`
+- `python3 -m ruff check .`
+- `python3 -m mypy src`
+
+## v0.2.0 - 2026-06-09
+
+### Added
+
+- Added a versioned `eslams.contracts` package with deterministic schema export
+  for artifact manifests, validation summaries, replay events/manifests,
+  provider receipts, eval plans, progress events, resume checkpoints, official
+  results, publication bundles, runner jobs, and catalogue rows.
+- Added deterministic `schema_bundle_manifest.json` output for
+  `eslams schemas export`, including Core package version, git commit when
+  available, schema bundle version, schema hashes, and deterministic build id.
+- Added schema coverage for catalogue renderer rows, catalogue availability
+  rows, schema bundle manifests, and public display-frame rows.
+- Added artifact validation profiles for runner bundles, official bundles,
+  Battlefield bundles, and public replay packages, with no-secret JSON summaries.
+- Added public replay exports with actor metadata, participant metadata, state
+  hash status, replay completeness counters, public reasoning rows, and recursive
+  public-output safety scanning.
+- Added `replay/display_frames.jsonl` public-safe projections and optional-file
+  manifest rows for public replay packages.
+- Added `eslams runner result --artifact --artifact-uri --job-id` and
+  `eslams run --runner-result-json --artifact-uri` for canonical
+  `RunnerJobResult` emission.
+- Added provider runtime controls for timeout, connect/read timeout, retries,
+  retry backoff, synchronous concurrency limits, rate limits, generic gateway
+  base URLs, and normalized redacted provider receipts for success and failure.
+- Added provider-backed HTTP-agent status semantics:
+  `provider_ok`, `provider_receipt_missing`, `provider_usage_unavailable`,
+  `local_agent`, and `agent_error`.
+- Added model and game catalogue exports with official eval, Battlefield, and
+  Arena eligibility, explicit absence reasons, and all-50 renderer vocabulary
+  metadata.
+- Added Platform-aligned public game identity fields, category labels, variants,
+  difficulty, maturity, player counts, and model provider-control capability
+  metadata.
+- Added deterministic official, Battlefield, and public-match planning helpers
+  with shard partitioning, resume checkpoint checks, and JSONL progress events.
+- Added runner/container contracts, runner health output, and stateless Arena
+  transport helpers for all registered games.
+- Added trusted interactive state rehydration with strict hash validation by
+  default and non-strict repair diagnostics for server-owned interactive state.
+- Added publication bundle export and validation for uploaded replay,
+  Battlefield sample, and official proof workflows without storage/database
+  dependencies.
+- Added deterministic fixtures for artifacts, provider receipt scenarios, public
+  replay JSONL, official plans, and a Battlefield sample publication bundle.
+
+### Changed
+
+- Extended runner artifacts additively with public sidecars, validation summaries,
+  official result sidecars, metadata-only broadcast manifests, provider usage
+  aggregation, and scoring safety fields.
+- Split validity and eligibility fields across artifacts, public summaries,
+  official result merges, and publication bundles so evidence rows do not imply
+  ranked leaderboard eligibility.
+- Kept `.eslams` artifacts zip-compatible and backward-compatible while adding
+  Platform-facing public contracts.
+- Updated docs for Platform contracts, artifact profiles, public replay packages,
+  provider runtime behavior, catalogue commands, publication bundles, and
+  release/tag instructions for `v0.2.0`.
+
+### Validation
+
+- `python3 -m pytest -q`
+- `python3 -m ruff check .`
+- `python3 -m mypy src`
+- Deterministic schema export comparison
+- Publication bundle validation
+- Legacy `run` -> `validate` -> `replay` CLI smoke

eslams_core-0.4.0/CONTRIBUTING.md

@@ -0,0 +1,32 @@
+# Contributing
+
+Thank you for helping build eSlams Core.
+
+## Development
+
+```bash
+python -m venv .venv
+. .venv/bin/activate
+pip install -e ".[dev]"
+pytest
+ruff check .
+mypy src
+```
+
+## Design Rules
+
+- Keep public contracts versioned.
+- Keep arena identity owned by eSlams, even when logic is adapter-backed.
+- Never put hidden official eval content in the public repo.
+- Preserve trace privacy boundaries at generation time, not only in UI.
+- Add deterministic tests for every arena and artifact behavior.
+
+## Pull Requests
+
+Include:
+
+- a clear behavior summary
+- tests for new contracts or arena behavior
+- docs for protocol, artifact, or CLI changes
+- changelog entries for user-visible contracts, fixtures, or CLI changes
+- migration notes when public formats change

eslams_core-0.4.0/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 eSlams
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.