hypermind 0.31.0__tar.gz → 0.31.1__tar.gz

{hypermind-0.31.0 → hypermind-0.31.1}/.env.example

@@ -17,10 +17,10 @@ RELATA_URL=http://localhost:9090
 # Bearer token if the server requires auth (lite/dev mode needs none).
 # RELATA_TOKEN=
 
-# Start Relata so the orgs ledger types are writable by the unauthenticated
-# dev principal (lite mode). The Hm* types themselves are auto-registered by
-# `hmctl orgs` / the distributed master; this env grants access at boot:
-#
+# Start Relata (Hm* types auto-register; this grants the dev principal access):
+#   docker compose -f deploy/docker-compose.yml up -d relata      # easiest
+# or bare:
 #   RELATA_ORG_MODE=lite \
 #   RELATA_ACL_GRANT="HmClaim:read+write,HmDispute:read+write,HmReputation:read+write,HmTranscript:read+write" \
 #     relata serve
+# Verify with:  hmctl orgs doctor

{hypermind-0.31.0 → hypermind-0.31.1}/CHANGELOG.md

@@ -16,6 +16,12 @@ changes only on major-version bumps.
 
 _Current trunk._
 
+## [0.31.1] — 2026-07-09
+
+### Added
+- **Relata in docker-compose** — `docker compose -f deploy/docker-compose.yml up -d relata` starts a ready-for-orgs Relata (`ghcr.io/zysec-ai/relata`, lite mode + `Hm*` ACL grant) on `:9090`. (Prometheus moved to host `:9091`.)
+- **k8s distributed fleet** — `deploy/k8s/orgs-distributed.yaml`: Relata + master + N worker replicas; `kubectl apply` then `kubectl scale deploy/hm-orgs-worker`. README "Deploy & scale" shows the one-liner (compose/docker) and the cluster (k8s) paths.
+
 ## [0.31.0] — 2026-07-09
 
 ### Added

{hypermind-0.31.0 → hypermind-0.31.1}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: hypermind
-Version: 0.31.0
+Version: 0.31.1
 Summary: Federated agent intelligence — reference SDK for the HyperMind SCITT contested-claims profile
 Project-URL: Homepage, https://github.com/ZySec-AI/hypermind
 Project-URL: Documentation, https://github.com/ZySec-AI/hypermind/tree/main/docs
@@ -260,23 +260,27 @@ Common flags: `--relata-url` (or `$RELATA_URL`), `--llm openai|anthropic`, `--ll
 hmctl orgs doctor          # ✓/✗ for LLM key · Relata reachable · Hm* types writable
 ```
 
-**2. Start Relata** (lite/dev; the `Hm*` types are auto-registered by the SDK, this grants the dev principal access at boot):
+**2. Start Relata** (one-liner — the `Hm*` types auto-register; this grants the dev principal access at boot):
 ```bash
-RELATA_ORG_MODE=lite \
-RELATA_ACL_GRANT="HmClaim:read+write,HmDispute:read+write,HmReputation:read+write,HmTranscript:read+write" \
-  relata serve            # → http://localhost:9090
+docker compose -f deploy/docker-compose.yml up -d relata        # → http://localhost:9090
+# or bare:  docker run -p 9090:9090 -e RELATA_ORG_MODE=lite \
+#   -e RELATA_ACL_GRANT="HmClaim:read+write,HmDispute:read+write,HmReputation:read+write,HmTranscript:read+write" \
+#   ghcr.io/zysec-ai/relata:latest serve
 ```
 
-**3. Run** — single host: `hmctl orgs simulate … --live`. Across a **cluster** (Locust-style master/worker; all share one Relata):
+**3. Run** — single host: `hmctl orgs simulate … --live`. For a **cluster** (Locust-style master/worker, all sharing one Relata), the copy-paste path is Kubernetes:
+```bash
+kubectl create secret generic hm-llm --from-literal=OPENAI_API_KEY=sk-...
+kubectl apply -f deploy/k8s/orgs-distributed.yaml     # Relata + master + 8 workers
+kubectl scale deploy/hm-orgs-worker --replicas=16     # scale the fleet
+kubectl logs deploy/hm-orgs-master -f                 # watch it
+```
+Or run the master/worker processes by hand on any hosts:
 ```bash
-# master host — shards the swarm, provisions Relata, reassigns failed shards
 python -m hypermind.orgs.distributed master --template university \
-    --members 10000 --rounds 8 --expected-workers 4 \
-    --host 0.0.0.0 --port 8765 --relata-url http://<relata-host>:9090
-
-# each worker host — dials the master, runs its shard (needs the same LLM env)
-python -m hypermind.orgs.distributed worker \
-    --master-host <master-ip> --port 8765 --capacity 2500
+    --members 10000 --rounds 8 --expected-workers 4 --host 0.0.0.0 --port 8765 \
+    --relata-url http://<relata-host>:9090
+python -m hypermind.orgs.distributed worker --master-host <master-ip> --port 8765 --capacity 2500
 ```
 
 Worked example: [`examples/org_university.py`](examples/org_university.py). Discover all presets via `hypermind.orgs.templates.list_templates()`.

{hypermind-0.31.0 → hypermind-0.31.1}/README.md

@@ -172,23 +172,27 @@ Common flags: `--relata-url` (or `$RELATA_URL`), `--llm openai|anthropic`, `--ll
 hmctl orgs doctor          # ✓/✗ for LLM key · Relata reachable · Hm* types writable
 ```
 
-**2. Start Relata** (lite/dev; the `Hm*` types are auto-registered by the SDK, this grants the dev principal access at boot):
+**2. Start Relata** (one-liner — the `Hm*` types auto-register; this grants the dev principal access at boot):
 ```bash
-RELATA_ORG_MODE=lite \
-RELATA_ACL_GRANT="HmClaim:read+write,HmDispute:read+write,HmReputation:read+write,HmTranscript:read+write" \
-  relata serve            # → http://localhost:9090
+docker compose -f deploy/docker-compose.yml up -d relata        # → http://localhost:9090
+# or bare:  docker run -p 9090:9090 -e RELATA_ORG_MODE=lite \
+#   -e RELATA_ACL_GRANT="HmClaim:read+write,HmDispute:read+write,HmReputation:read+write,HmTranscript:read+write" \
+#   ghcr.io/zysec-ai/relata:latest serve
 ```
 
-**3. Run** — single host: `hmctl orgs simulate … --live`. Across a **cluster** (Locust-style master/worker; all share one Relata):
+**3. Run** — single host: `hmctl orgs simulate … --live`. For a **cluster** (Locust-style master/worker, all sharing one Relata), the copy-paste path is Kubernetes:
+```bash
+kubectl create secret generic hm-llm --from-literal=OPENAI_API_KEY=sk-...
+kubectl apply -f deploy/k8s/orgs-distributed.yaml     # Relata + master + 8 workers
+kubectl scale deploy/hm-orgs-worker --replicas=16     # scale the fleet
+kubectl logs deploy/hm-orgs-master -f                 # watch it
+```
+Or run the master/worker processes by hand on any hosts:
 ```bash
-# master host — shards the swarm, provisions Relata, reassigns failed shards
 python -m hypermind.orgs.distributed master --template university \
-    --members 10000 --rounds 8 --expected-workers 4 \
-    --host 0.0.0.0 --port 8765 --relata-url http://<relata-host>:9090
-
-# each worker host — dials the master, runs its shard (needs the same LLM env)
-python -m hypermind.orgs.distributed worker \
-    --master-host <master-ip> --port 8765 --capacity 2500
+    --members 10000 --rounds 8 --expected-workers 4 --host 0.0.0.0 --port 8765 \
+    --relata-url http://<relata-host>:9090
+python -m hypermind.orgs.distributed worker --master-host <master-ip> --port 8765 --capacity 2500
 ```
 
 Worked example: [`examples/org_university.py`](examples/org_university.py). Discover all presets via `hypermind.orgs.templates.list_templates()`.

{hypermind-0.31.0 → hypermind-0.31.1}/deploy/docker-compose.yml

@@ -1,16 +1,34 @@
-# HyperMind v0.6 local observability stack — uvicorn + Prometheus + Grafana + Jaeger.
+# HyperMind v0.6 local stack — Relata (orgs state) + uvicorn + Prometheus + Grafana + Jaeger.
 #
-# Boot:    docker-compose -f deploy/docker-compose.yml up
-# UIs:     Grafana   http://localhost:3000  (anonymous Viewer)
-#          Prometheus http://localhost:9090
-#          Jaeger    http://localhost:16686
-#          API       http://localhost:8080
+# Boot:    docker compose -f deploy/docker-compose.yml up -d
+# Relata:  docker compose -f deploy/docker-compose.yml up -d relata   # just the orgs backend
+# UIs:     Relata     http://localhost:9090
+#          Grafana    http://localhost:3000  (anonymous Viewer)
+#          Prometheus http://localhost:9091
+#          Jaeger     http://localhost:16686
+#          API        http://localhost:8080
 #
-# This stack is for local pilots and CI smoke tests. Production deployments
-# use the Helm chart in deploy/k8s/ (untouched by this file).
+# For local pilots / CI smoke tests / single-host orgs runs. The k8s manifests
+# in deploy/k8s/ cover the distributed master/worker fleet for a real cluster.
 
 services:
 
+  # Relata — the orgs engine's shared state / source of truth. Lite dev mode,
+  # unauthenticated, with the Hm* ledger types ACL-granted at boot. `hmctl orgs`
+  # / the distributed master auto-register the types themselves.
+  relata:
+    image: ghcr.io/zysec-ai/relata:latest
+    container_name: hypermind-relata
+    command: ["serve"]
+    environment:
+      - RELATA_ORG_MODE=lite
+      - RELATA_ACL_GRANT=HmClaim:read+write,HmDispute:read+write,HmReputation:read+write,HmTranscript:read+write
+      - RELATA_STORE_MAX_RAM_MB=2048
+    ports:
+      - "9090:9090"
+    volumes:
+      - relata-data:/var/lib/relata
+
   hypermind:
     build:
       context: ..
@@ -33,12 +51,14 @@ services:
     environment:
       - HYPERMIND_NAMESPACE=production
       - PYTHONUNBUFFERED=1
+      - RELATA_URL=http://relata:9090
     ports:
       - "8080:8080"
     volumes:
       - hypermind-data:/var/lib/hypermind
     depends_on:
       - jaeger
+      - relata
 
   prometheus:
     image: prom/prometheus:v2.51.0
@@ -47,7 +67,7 @@ services:
       - --config.file=/etc/prometheus/prometheus.yml
       - --storage.tsdb.retention.time=7d
     ports:
-      - "9090:9090"
+      - "9091:9090"   # host 9091 — Relata owns the canonical 9090
     volumes:
       - ./prometheus/prometheus.yml:/etc/prometheus/prometheus.yml:ro
 
@@ -78,3 +98,4 @@ services:
 volumes:
   hypermind-data:
   grafana-data:
+  relata-data:

hypermind-0.31.1/deploy/k8s/orgs-distributed.yaml

@@ -0,0 +1,112 @@
+# HyperMind orgs — distributed master/worker fleet on Kubernetes (#177).
+#
+# Topology: one Relata (shared state) · one master (coordinator) · N workers
+# (shard runners). Workers dial the master's Service; all share the one Relata.
+#
+#   kubectl apply -f deploy/k8s/orgs-distributed.yaml
+#   kubectl scale deploy/hm-orgs-worker --replicas=8      # scale the fleet
+#   kubectl logs deploy/hm-orgs-master -f                 # watch the run
+#
+# Set your LLM key first:
+#   kubectl create secret generic hm-llm --from-literal=OPENAI_API_KEY=sk-...
+---
+apiVersion: v1
+kind: Namespace
+metadata:
+  name: hypermind
+---
+# --- Relata: shared state / source of truth --------------------------------
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: relata
+  namespace: hypermind
+spec:
+  replicas: 1
+  selector: { matchLabels: { app: relata } }
+  template:
+    metadata: { labels: { app: relata } }
+    spec:
+      containers:
+        - name: relata
+          image: ghcr.io/zysec-ai/relata:latest
+          args: ["serve"]
+          env:
+            - { name: RELATA_ORG_MODE, value: "lite" }
+            - name: RELATA_ACL_GRANT
+              value: "HmClaim:read+write,HmDispute:read+write,HmReputation:read+write,HmTranscript:read+write"
+            - { name: RELATA_STORE_MAX_RAM_MB, value: "4096" }
+          ports: [{ containerPort: 9090 }]
+          readinessProbe:
+            httpGet: { path: /health, port: 9090 }
+            initialDelaySeconds: 3
+---
+apiVersion: v1
+kind: Service
+metadata:
+  name: relata
+  namespace: hypermind
+spec:
+  selector: { app: relata }
+  ports: [{ port: 9090, targetPort: 9090 }]
+---
+# --- Master: the coordinator (headless Service so workers can resolve it) ---
+apiVersion: v1
+kind: Service
+metadata:
+  name: hm-orgs-master
+  namespace: hypermind
+spec:
+  clusterIP: None            # headless — stable DNS: hm-orgs-master.hypermind
+  selector: { app: hm-orgs-master }
+  ports: [{ port: 8765, targetPort: 8765 }]
+---
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: hm-orgs-master
+  namespace: hypermind
+spec:
+  replicas: 1
+  selector: { matchLabels: { app: hm-orgs-master } }
+  template:
+    metadata: { labels: { app: hm-orgs-master } }
+    spec:
+      containers:
+        - name: master
+          image: ghcr.io/zysec-ai/hypermind:latest
+          command: ["python", "-m", "hypermind.orgs.distributed", "master"]
+          args:
+            - "--template=university"
+            - "--members=10000"
+            - "--rounds=8"
+            - "--expected-workers=8"
+            - "--host=0.0.0.0"
+            - "--port=8765"
+            - "--relata-url=http://relata:9090"
+            - "--llm=openai"
+            - "--llm-model=openai/gpt-4o-mini"
+          envFrom: [{ secretRef: { name: hm-llm } }]   # OPENAI_API_KEY
+          ports: [{ containerPort: 8765 }]
+---
+# --- Workers: shard runners (scale this replica count = expected-workers) ---
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: hm-orgs-worker
+  namespace: hypermind
+spec:
+  replicas: 8
+  selector: { matchLabels: { app: hm-orgs-worker } }
+  template:
+    metadata: { labels: { app: hm-orgs-worker } }
+    spec:
+      containers:
+        - name: worker
+          image: ghcr.io/zysec-ai/hypermind:latest
+          command: ["python", "-m", "hypermind.orgs.distributed", "worker"]
+          args:
+            - "--master-host=hm-orgs-master.hypermind"
+            - "--port=8765"
+            - "--capacity=1250"
+          envFrom: [{ secretRef: { name: hm-llm } }]   # workers build their own LLM client

{hypermind-0.31.0 → hypermind-0.31.1}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "hatchling.build"
 
 [project]
 name = "hypermind"
-version = "0.31.0"
+version = "0.31.1"
 description = "Federated agent intelligence — reference SDK for the HyperMind SCITT contested-claims profile"
 readme = "README.md"
 requires-python = ">=3.11,<3.14"

{hypermind-0.31.0 → hypermind-0.31.1}/src/hypermind/__init__.py

@@ -73,7 +73,7 @@ open = HyperMindAgent.open
 #: is held until the §External & human gates clear (IETF I-D, IANA,
 #: third-party audit, OpenSSF acceptance, ≥3 pilots) — at that point we
 #: cut ``1.0.0`` GA. See ROADMAP.md §Status snapshot.
-__version__ = "0.31.0"
+__version__ = "0.31.1"
 
 #: SLSA build-provenance level committed for every release artefact.
 #: Cosign keyless signing + slsa-github-generator + PEP 740 attestations