evarness 0.2.2__tar.gz → 0.2.3__tar.gz

{evarness-0.2.2 → evarness-0.2.3}/PKG-INFO

@@ -1,24 +1,23 @@
 Metadata-Version: 2.4
 Name: evarness
-Version: 0.2.2
+Version: 0.2.3
 Summary: The governed agent harness for small local models. It proves what it did.
-License: Apache-2.0
+License-Expression: Apache-2.0
 License-File: LICENSE
 Keywords: ai,llm,agent,harness,governance,privacy,ollama,local-first,mcp,plugins
 Author: Evarness contributors
 Requires-Python: >=3.12,<3.14
 Classifier: Development Status :: 3 - Alpha
-Classifier: Environment :: Console
-Classifier: Environment :: Web Environment
 Classifier: Intended Audience :: End Users/Desktop
-Classifier: License :: OSI Approved :: Apache Software License
 Classifier: Operating System :: OS Independent
 Classifier: Programming Language :: Python :: 3
 Classifier: Programming Language :: Python :: 3.12
 Classifier: Programming Language :: Python :: 3.13
+Classifier: Topic :: Scientific/Engineering :: Artificial Intelligence
 Classifier: Topic :: Communications :: Email
 Classifier: Topic :: Office/Business :: Scheduling
-Classifier: Topic :: Scientific/Engineering :: Artificial Intelligence
+Classifier: Environment :: Console
+Classifier: Environment :: Web Environment
 Provides-Extra: all
 Provides-Extra: email
 Provides-Extra: ml
@@ -29,9 +28,12 @@ Requires-Dist: cryptography (>=43,<51)
 Requires-Dist: ddgs (>=9.14,<10.0)
 Requires-Dist: duckdb (>=1.1,<2)
 Requires-Dist: fastapi (>=0.109,<1)
-Requires-Dist: google-api-python-client (>=2.0,<3.0) ; extra == "email" or extra == "all"
-Requires-Dist: google-auth (>=2.0,<3.0) ; extra == "email" or extra == "all"
-Requires-Dist: google-auth-oauthlib (>=1.0,<2.0) ; extra == "email" or extra == "all"
+Requires-Dist: google-api-python-client (>=2.0,<3.0) ; extra == "all"
+Requires-Dist: google-api-python-client (>=2.0,<3.0) ; extra == "email"
+Requires-Dist: google-auth (>=2.0,<3.0) ; extra == "all"
+Requires-Dist: google-auth (>=2.0,<3.0) ; extra == "email"
+Requires-Dist: google-auth-oauthlib (>=1.0,<2.0) ; extra == "all"
+Requires-Dist: google-auth-oauthlib (>=1.0,<2.0) ; extra == "email"
 Requires-Dist: httpcore (>=1,<2)
 Requires-Dist: httpx (>=0.27,<1)
 Requires-Dist: keyring (>=25.0.0,<26.0.0)
@@ -55,15 +57,17 @@ Requires-Dist: pytesseract (>=0.3.13,<0.4.0)
 Requires-Dist: python-dotenv (>=1.2.1,<2.0.0)
 Requires-Dist: python-multipart (>=0.0.31)
 Requires-Dist: pyyaml (>=6.0,<7.0)
-Requires-Dist: scikit-learn (>=1.3) ; extra == "email" or extra == "all"
-Requires-Dist: sentence-transformers (>=5.5.1,<6.0.0) ; extra == "ml" or extra == "all"
+Requires-Dist: scikit-learn (>=1.3) ; extra == "all"
+Requires-Dist: scikit-learn (>=1.3) ; extra == "email"
+Requires-Dist: sentence-transformers (>=5.5.1,<6.0) ; extra == "all"
+Requires-Dist: sentence-transformers (>=5.5.1,<6.0) ; extra == "ml"
 Requires-Dist: starlette (>=1.3.1,<2)
 Requires-Dist: trafilatura (>=2.1.0,<3.0.0)
 Requires-Dist: uvicorn (>=0.27,<1)
 Requires-Dist: watchdog (>=4.0.0,<5.0.0)
 Project-URL: Bug Tracker, https://github.com/evarness-ai/evarness/issues
 Project-URL: Changelog, https://github.com/evarness-ai/evarness/blob/main/CHANGELOG.md
-Project-URL: Documentation, https://github.com/evarness-ai/evarness/blob/main/README.md
+Project-URL: Documentation, https://evarness-ai.github.io/evarness/
 Project-URL: Homepage, https://github.com/evarness-ai/evarness
 Project-URL: Repository, https://github.com/evarness-ai/evarness
 Description-Content-Type: text/markdown
@@ -109,12 +113,14 @@ adaptation. Governance provides authority.
 ## Try it in three minutes
 
 You need [uv](https://docs.astral.sh/uv/) or [pipx](https://pipx.pypa.io/)
-([install notes](https://evarness-ai.github.io/evarness/getting-started/install/)). On
-Windows, one script sets everything up in Docker Desktop; see the
+([install notes](https://evarness-ai.github.io/evarness/getting-started/install/)), and
+Python 3.12 or 3.13: `uv` fetches one if you have neither, and a uv or pipx pinned to
+another Python says `No solution found`; pass `--python 3.13` then. On Windows, one script
+sets everything up in Docker Desktop; see the
 [Windows guide](https://evarness-ai.github.io/evarness/guides/windows/).
 
 ```bash
-uv tool install "evarness[email]"   # or: pipx install "evarness[email]"
+uv tool install "evarness[email]" --upgrade   # or: pipx install "evarness[email]"
 evarness doctor                     # can Evarness run here, and what to fix
 evarness email demo                 # a synthetic mailbox, a scripted model, no network
 ```
@@ -126,8 +132,7 @@ touches yours. Export that home's proof bundle, ledger and session logs both, an
 offline:
 
 ```bash
-evarness governance proof-bundle export --db ~/.evarness-demo/governance/audit.db \
-    --session-logs ~/.evarness-demo/logs --out bundle.json
+evarness governance proof-bundle export --home ~/.evarness-demo --out bundle.json
 evarness governance proof-bundle verify bundle.json   # exit 0 verified, 1 a violation
 ```
 
@@ -255,6 +260,10 @@ poetry run evarness email demo           # the whole stack from source: no accou
 scripts/ci_local.sh --fast               # ruff, black, mypy, import contracts, the tests for what changed
 ```
 
+`uv sync` in a clone installs the package and the `evarness` command too
+(`uv run evarness doctor`); the gate's tools are Poetry's dev group, so `poetry install`
+is the step to work on the code.
+
 [CONTRIBUTING.md](CONTRIBUTING.md) has the governance rules every change keeps, the DCO
 sign-off, the stable-tier rule and **where help is wanted**. Read the
 [code of conduct](CODE_OF_CONDUCT.md). Coding agents: [AGENTS.md](AGENTS.md). Questions and

{evarness-0.2.2 → evarness-0.2.3}/README.md

@@ -39,12 +39,14 @@ adaptation. Governance provides authority.
 ## Try it in three minutes
 
 You need [uv](https://docs.astral.sh/uv/) or [pipx](https://pipx.pypa.io/)
-([install notes](https://evarness-ai.github.io/evarness/getting-started/install/)). On
-Windows, one script sets everything up in Docker Desktop; see the
+([install notes](https://evarness-ai.github.io/evarness/getting-started/install/)), and
+Python 3.12 or 3.13: `uv` fetches one if you have neither, and a uv or pipx pinned to
+another Python says `No solution found`; pass `--python 3.13` then. On Windows, one script
+sets everything up in Docker Desktop; see the
 [Windows guide](https://evarness-ai.github.io/evarness/guides/windows/).
 
 ```bash
-uv tool install "evarness[email]"   # or: pipx install "evarness[email]"
+uv tool install "evarness[email]" --upgrade   # or: pipx install "evarness[email]"
 evarness doctor                     # can Evarness run here, and what to fix
 evarness email demo                 # a synthetic mailbox, a scripted model, no network
 ```
@@ -56,8 +58,7 @@ touches yours. Export that home's proof bundle, ledger and session logs both, an
 offline:
 
 ```bash
-evarness governance proof-bundle export --db ~/.evarness-demo/governance/audit.db \
-    --session-logs ~/.evarness-demo/logs --out bundle.json
+evarness governance proof-bundle export --home ~/.evarness-demo --out bundle.json
 evarness governance proof-bundle verify bundle.json   # exit 0 verified, 1 a violation
 ```
 
@@ -185,6 +186,10 @@ poetry run evarness email demo           # the whole stack from source: no accou
 scripts/ci_local.sh --fast               # ruff, black, mypy, import contracts, the tests for what changed
 ```
 
+`uv sync` in a clone installs the package and the `evarness` command too
+(`uv run evarness doctor`); the gate's tools are Poetry's dev group, so `poetry install`
+is the step to work on the code.
+
 [CONTRIBUTING.md](CONTRIBUTING.md) has the governance rules every change keeps, the DCO
 sign-off, the stable-tier rule and **where help is wanted**. Read the
 [code of conduct](CODE_OF_CONDUCT.md). Coding agents: [AGENTS.md](AGENTS.md). Questions and

{evarness-0.2.2 → evarness-0.2.3}/pyproject.toml

@@ -1,18 +1,17 @@
-[tool.poetry]
+[project]
 name = "evarness"
-version = "0.2.2"
+version = "0.2.3"
 description = "The governed agent harness for small local models. It proves what it did."
-authors = ["Evarness contributors"]
 readme = "README.md"
 license = "Apache-2.0"
-homepage = "https://github.com/evarness-ai/evarness"
-repository = "https://github.com/evarness-ai/evarness"
-documentation = "https://github.com/evarness-ai/evarness/blob/main/README.md"
+authors = [{ name = "Evarness contributors" }]
+# 3.13 supported since 2026-09-26: the core has no 3.12-only code; what held it back was
+# numpy<2 (no cp313 wheels) and heavy dependencies nothing imported.
+requires-python = ">=3.12,<3.14"
 keywords = ["ai", "llm", "agent", "harness", "governance", "privacy", "ollama", "local-first", "mcp", "plugins"]
 classifiers = [
     "Development Status :: 3 - Alpha",
     "Intended Audience :: End Users/Desktop",
-    "License :: OSI Approved :: Apache Software License",
     "Operating System :: OS Independent",
     "Programming Language :: Python :: 3",
     "Programming Language :: Python :: 3.12",
@@ -23,6 +22,45 @@ classifiers = [
     "Environment :: Console",
     "Environment :: Web Environment",
 ]
+# The dependency table stays Poetry's ([tool.poetry.dependencies]: caret constraints and
+# the optional markers the extras name), which PEP 621 spells by listing dependencies
+# here as dynamic. Everything else about the package is in this table, so uv, pip and any
+# PEP 621 reader see a project: `uv sync` in a clone used to resolve an empty workspace
+# and install nothing (#373).
+dynamic = ["dependencies"]
+
+[project.urls]
+Homepage = "https://github.com/evarness-ai/evarness"
+Repository = "https://github.com/evarness-ai/evarness"
+Documentation = "https://evarness-ai.github.io/evarness/"
+"Bug Tracker" = "https://github.com/evarness-ai/evarness/issues"
+Changelog = "https://github.com/evarness-ai/evarness/blob/main/CHANGELOG.md"
+
+[project.scripts]
+evarness = "evarness.main:main"
+
+# The domain plugins, discovered exactly as a third-party plugin is: by the
+# `evarness.plugins` entry-point group, with their manifest.yaml read from beside
+# the module named here (OSS plan M6, decisions 2 and 10). The public tree ships the
+# email slice's three (R2) -- the email profile mounts them; `default` names none -- and
+# the fenced four stay private until release 2.
+[project.entry-points."evarness.plugins"]
+email_workflows = "evarness_personal.plugins.email_workflows.plugin:setup"
+gmail = "evarness_personal.plugins.gmail.plugin:setup"
+imap = "evarness_personal.plugins.imap.plugin:setup"
+
+[project.optional-dependencies]
+# The email assistant (OSS plan R2/R6), declared in the public tree only: here the Google
+# packages are main dependencies already (see the dependency table), and an extra that
+# names a main dependency would make it extra-only in the wheel.
+# The versions repeat the dependency table's optional entries below, which carry the
+# same constraints for the lock: this table is what the wheel's Requires-Dist reads.
+email = ["google-api-python-client>=2.0,<3.0", "google-auth>=2.0,<3.0", "google-auth-oauthlib>=1.0,<2.0", "scikit-learn>=1.3"]
+ml = ["sentence-transformers>=5.5.1,<6.0"]
+all = ["sentence-transformers>=5.5.1,<6.0", "google-api-python-client>=2.0,<3.0", "google-auth>=2.0,<3.0", "google-auth-oauthlib>=1.0,<2.0", "scikit-learn>=1.3"]
+
+[tool.poetry]
+# What PEP 621 cannot say: where the packages are, what else ships, and what stays out.
 packages = [
     { include = "evarness", from = "src" },
     { include = "memris", from = "src" },  # the memory-graph engine, public (ADR-0115 decision 10)
@@ -72,28 +110,7 @@ exclude = [
 "config/skills/research/research-draft/**/*",
 ]
 
-[tool.poetry.urls]
-"Bug Tracker" = "https://github.com/evarness-ai/evarness/issues"
-"Changelog" = "https://github.com/evarness-ai/evarness/blob/main/CHANGELOG.md"
-
-[tool.poetry.scripts]
-evarness = "evarness.main:main"
-
-# The domain plugins, discovered exactly as a third-party plugin is: by the
-# `evarness.plugins` entry-point group, with their manifest.yaml read from beside
-# the module named here (OSS plan M6, decisions 2 and 10). The public tree ships the
-# email slice's three (R2) -- the email profile mounts them; `default` names none -- and
-# the fenced four stay private until release 2.
-[tool.poetry.plugins."evarness.plugins"]
-email_workflows = "evarness_personal.plugins.email_workflows.plugin:setup"
-gmail = "evarness_personal.plugins.gmail.plugin:setup"
-imap = "evarness_personal.plugins.imap.plugin:setup"
-
 [tool.poetry.dependencies]
-# 3.13 supported since 2026-09-26: the core has no 3.12-only code; what held it back was
-# numpy<2 (no cp313 wheels) and heavy dependencies nothing imported.
-python = ">=3.12,<3.14"
-
 # LangChain: the only parts the code imports. `langchain_core.tools.BaseTool` is every
 # tool's base class (skills, MCP bridge, research); the two chat clients are llm/client.py's
 # (lazily). 1.x since 2026-09-26, which the private coding agent's langgraph 1.x needs.
@@ -202,14 +219,6 @@ pytest-xdist = "^3.6"
 import-linter = "^2.15"
 
 
-[tool.poetry.extras]
-# The email assistant (OSS plan R2/R6), declared in the public tree only: here the Google
-# packages are main dependencies already (see the dependency table), and an extra that
-# names a main dependency would make it extra-only in the wheel.
-email = ["google-api-python-client", "google-auth", "google-auth-oauthlib", "scikit-learn"]
-ml = ["sentence-transformers"]
-all = ["sentence-transformers", "google-api-python-client", "google-auth", "google-auth-oauthlib", "scikit-learn"]
-
 [build-system]
 requires = ["poetry-core"]
 build-backend = "poetry.core.masonry.api"
@@ -220,6 +229,10 @@ target-version = ['py312']
 
 [tool.ruff]
 line-length = 100
+# Explicit, and the same value ruff infers from [project].requires-python. Before the
+# [project] table ruff had nothing to infer from and fell back to 3.9, which kept the
+# 3.12-era UP rules off and sorted tomllib (stdlib since 3.11) as third-party.
+target-version = "py312"
 
 [tool.ruff.lint]
 # BLE: a broad `except` must say why (`# noqa: BLE001 — reason`) or narrow. T20: no
@@ -227,7 +240,11 @@ line-length = 100
 # RUF100: a `# noqa` for a rule that is off or not triggered is an error, so markers
 # stay honest (0.16 upgrade: 1534 such markers removed; their reasons kept as comments).
 select = ["E", "W", "F", "I", "B", "C4", "UP", "S", "BLE", "T20", "RUF100"]
-ignore = ["E501", "S101"]
+# UP042 and UP047 arrived with the 3.12 target. UP042 rewrites `(str, Enum)` classes to
+# StrEnum, which changes what str() and format() of a member return; UP047 rewrites
+# signatures to PEP 695 generics. Both are code changes to review on their own, not to
+# slip in with a packaging change (#375 tracks adopting them).
+ignore = ["E501", "S101", "UP042", "UP047"]
 
 [tool.ruff.lint.isort]
 # Every source root under src/, named so grouping does not depend on ruff's detection

{evarness-0.2.2 → evarness-0.2.3}/src/evarness/__init__.py

@@ -10,6 +10,6 @@ from evarness.foundation.legacy import alias_legacy_environment
 
 __all__ = ["__version__"]
 
-__version__ = "0.2.2"
+__version__ = "0.2.3"
 
 alias_legacy_environment()

{evarness-0.2.2 → evarness-0.2.3}/src/evarness/cli/governance.py

@@ -320,6 +320,54 @@ proof_bundle_app = typer.Typer(
 governance_app.add_typer(proof_bundle_app, name="proof-bundle")
 
 
+def _home_of_ledger(db: Path) -> Path | None:
+    """The Evarness home a ledger path belongs to: ``<home>/governance/audit.db``."""
+    return db.parent.parent if db.parent.name == "governance" else None
+
+
+def _home_of_logs(logs: Path) -> Path | None:
+    """The Evarness home a session-log directory belongs to: ``<home>/logs``."""
+    return logs.parent if logs.name == "logs" else None
+
+
+def resolve_bundle_sources(
+    *,
+    home: Path | None,
+    db: Path | None,
+    session_logs: Path | None,
+    default_db: Path,
+    default_logs: Path,
+) -> tuple[Path, Path, str | None]:
+    """Where an export reads its ledger and its session logs, and a note when the two
+    come from different homes.
+
+    ``--home`` names both (``<home>/governance/audit.db`` and ``<home>/logs``); ``--db``
+    and ``--session-logs`` each override one. A ``--db`` alone that sits in a home's
+    ``governance/`` brings that home's ``logs/`` with it: the ledger of one home checked
+    against another home's sessions fails every-call-and-answer-audited for sessions the
+    ledger never saw (#362), which is what happened with the demo's ledger and the
+    owner's own chat sessions.
+    """
+    ledger = db or (home / "governance" / "audit.db" if home else default_db)
+    if session_logs is not None:
+        logs = session_logs
+    elif home is not None:
+        logs = home / "logs"
+    elif db is not None and (ledger_home := _home_of_ledger(db)) is not None:
+        logs = ledger_home / "logs"
+    else:
+        logs = default_logs
+    ledger_home, logs_home = _home_of_ledger(ledger), _home_of_logs(logs)
+    note = None
+    if ledger_home is not None and logs_home is not None and ledger_home != logs_home:
+        note = (
+            f"note: the ledger is {ledger_home}'s and the session logs are {logs_home}'s; "
+            "a bundle across two homes does not verify. Pass --home, or --session-logs "
+            "for the ledger's home."
+        )
+    return ledger, logs, note
+
+
 @proof_bundle_app.command("export")
 def proof_bundle_export(
     out: Annotated[Path, typer.Option("--out", help="Where to write the bundle (JSON).")],
@@ -333,6 +381,14 @@ def proof_bundle_export(
         list[str] | None, typer.Option("--run", help="Only this run id (repeatable).")
     ] = None,
     subject: Annotated[str, typer.Option("--subject", help="What the bundle covers.")] = "",
+    home: Annotated[
+        Path | None,
+        typer.Option(
+            "--home",
+            help="An Evarness home (the demo's, say): its governance/audit.db and logs/ "
+            "stand in for --db and --session-logs.",
+        ),
+    ] = None,
     db: Annotated[
         Path | None, typer.Option("--db", help="Audit ledger (default: this home's).")
     ] = None,
@@ -361,14 +417,20 @@ def proof_bundle_export(
     from evarness.foundation.paths import audit_db_path
     from evarness.kernel.governance.audit import proof_bundle
 
-    ledger = db or audit_db_path()
+    ledger, logs, note = resolve_bundle_sources(
+        home=home,
+        db=db,
+        session_logs=session_logs,
+        default_db=audit_db_path(),
+        default_logs=session_log_dir(),
+    )
     if not ledger.exists():
         print_error(f"no audit ledger at {ledger}")
         raise typer.Exit(2)
+    if note:
+        console.print(note)
     try:
-        seen = proof_bundle.observations_from_session_logs(
-            session_logs or session_log_dir(), since=since, until=until
-        )
+        seen = proof_bundle.observations_from_session_logs(logs, since=since, until=until)
         if observations is not None:
             raw = json.loads(observations.read_text(encoding="utf-8"))
             seen = seen + proof_bundle.observations_from_json(raw)

{evarness-0.2.2 → evarness-0.2.3}/src/evarness_personal/plugins/email_workflows/demo/run.py

@@ -375,6 +375,9 @@ def render_summary(report: DemoReport) -> str:
         "own (`evarness learning status`).",
         "",
         f"Everything is in {report.home}. Run it again: nothing is fetched or judged twice.",
+        "Verify this run offline, ledger and session logs from this home: "
+        f"`evarness governance proof-bundle export --home {report.home} --out bundle.json "
+        "&& evarness governance proof-bundle verify bundle.json`.",
         "Connect your own mailbox with `evarness email setup` when you are ready.",
     ]
     return "\n".join(lines)