koyote 1.1.0__tar.gz

koyote-1.1.0/.dockerignore

@@ -0,0 +1,10 @@
+target/
+.venv/
+__pycache__/
+.pytest_cache/
+logs/
+.koyote/
+.git/
+trials/
+docs/
+sdk/typescript/node_modules/

koyote-1.1.0/.github/workflows/publish.yml

@@ -0,0 +1,48 @@
+name: publish
+
+on:
+  push:
+    tags: ["v*"]
+
+jobs:
+  build-wheels:
+    strategy:
+      matrix:
+        os: [ubuntu-latest, macos-latest, windows-latest]
+    runs-on: ${{ matrix.os }}
+    steps:
+      - uses: actions/checkout@v4
+      - uses: PyO3/maturin-action@v1
+        with:
+          command: build
+          args: --release --out dist
+      - uses: actions/upload-artifact@v4
+        with:
+          name: wheels-${{ matrix.os }}
+          path: dist
+
+  sdist:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+      - uses: PyO3/maturin-action@v1
+        with:
+          command: sdist
+          args: --out dist
+      - uses: actions/upload-artifact@v4
+        with:
+          name: wheels-sdist
+          path: dist
+
+  publish:
+    needs: [build-wheels, sdist]
+    runs-on: ubuntu-latest
+    environment: pypi
+    permissions:
+      id-token: write
+    steps:
+      - uses: actions/download-artifact@v4
+        with:
+          path: dist
+          merge-multiple: true
+      - uses: pypa/gh-action-pypi-publish@release/v1

koyote-1.1.0/.gitignore

@@ -0,0 +1,40 @@
+# Rust build artifacts
+/target/
+
+# Python artifacts
+__pycache__/
+*.pyc
+*.pyo
+*.pyd
+*.so
+*.dylib
+*.egg-info/
+dist/
+build/
+.pytest_cache/
+.venv/
+
+# Compart transient state
+.compart/
+
+# Language SDK artifacts
+sdk/typescript/node_modules/
+sdk/typescript/*.node
+sdk/typescript/native/target/
+sdk/typescript/native/Cargo.lock
+sdk/typescript/*.tgz
+sdk/typescript/sdk-darwin-*/
+
+# Bench & transient state
+.DS_Store
+.opencode/
+logs/
+.agents/
+.claude/
+.envrc
+
+# Test runs write index state into fixture checkouts; never commit it
+trials/**/.koyote/
+trials/**/.volf/
+trials/**/.sheepdog/
+trials/**/.compart/

koyote-1.1.0/CHANGELOG.md

@@ -0,0 +1,156 @@
+# Changelog
+
+All notable changes to Koyote are documented here.
+
+## [Unreleased]
+
+### Changed
+- **Rename Volf → Koyote across product, code, and docs.** Package `koyote` 1.1.0 (CLI, imports, crate `koyote-core`, `KOYOTE_*` env, `.koyote/` state dirs, MCP tools, `@koyote` trigger, trailers, SDK names). Hard cut with no aliases. KB keeps pinned legacy read paths for `.volf/`, `.sheepdog/`, and `.compart/` trees.
+- **Howl warns, Hunt repairs.** Consult Issues sign as Howl, verified Trust PRs as Hunt — two voices, one reasoning engine.
+
+### Changed
+- **Rename Sheepdog → Volf across product, code, and docs.** Package `volf` 1.1.0 (CLI, imports, crate `volf-core`, `VOLF_*` env, `.volf/` state dirs, MCP tools, `@volf` trigger, trailers, SDK names). Hard cut with no aliases. KB keeps pinned legacy read paths for `.sheepdog/` and `.compart/` trees.
+- **Howl, the hunt voice.** The watch loop and monitoring surface speak as Howl — `Howl hunting` in serve/doctor output. Shepherd advises, Shearer repairs, Howl hunts; one reasoning engine behind all three.
+
+### Added
+- **Alias-aware callsite analysis and repair.** The AST locator resolves proven client bindings (`const s = new Stripe()`, `require('stripe')`, `import stripe as s`) and reports `alias`-tagged callsites. DIRECT rewrites instantiate exact-identifier variants with the receiver preserved — regexes are never loosened, exotic bindings fail closed.
+
+### Added
+- **External-Change Dependency Graph (`volf graph`).** Native Rust graph engine mapping external providers, versions, OpenAPI contracts, manifest dependencies, wrapper clients, and AST callsites.
+- **Day-0 Risk Register (`volf audit`).** Instant audit command scanning codebases for at-risk, deprecated, and auto-repairable external API callsites with ANSI and GitHub Issue markdown exports.
+- **Autonomous Continuous Maintenance (`volf maintain`).** Closed-loop maintenance engine detecting upstream breaking changes, synthesizing surgical AST patches, running local formatters (`prettier`, `ruff`), and opening verified Developer Trust PRs.
+- **Provider Contract Registry (`volf providers`).** Pre-indexed breaking-change contract catalog for Stripe, OpenAI, Anthropic, Clerk, Sentry, Supabase, Twilio, Octokit, and AWS SDK.
+- **Time-Machine Replay Protocol (`volf reproduce`).** Historical benchmark engine evaluating verified ground-truth migrations against real open-source repositories with zero blast radius.
+- **GitHub App & Webhook Server (`volf app`).** Continuous webhook daemon for automated PR drift detection and verification.
+- **Change-source abstraction (`volf.change_source`).** Thin `ChangeSource`/`Detection` types generalizing the pipeline beyond vendor SDKs (OpenAPI, GraphQL, protobuf, webhooks, MCP, internal services as representable, fail-closed kinds).
+- **Invisible decision engine (`VolfIntelligence`).** Internal DIRECT/AI/HYBRID/QUARANTINE routing with confidence, token estimates, and blast-radius metadata. No `--ai`/`--direct` user flags.
+- **Repository knowledge flywheel (`.volf/knowledge/`).** Namespaced verified-pattern cache with legacy fallback reads, failure quarantine, and test-recipe seeding on index.
+- **Incremental indexing (`index_state.json`).** Commit-SHA + mtime tracking; `changed_since_index()` reports freshness and discovery deltas.
+- **Installation persistence (`volf.github.installations`).** Flat-JSON install records with PENDING → INDEXED → READY lifecycle and Day-0 indexing on install events.
+- **Scoped BYOK credentials.** Env → per-installation → global resolution (0600); secrets never enter repo state, logs, or knowledge.
+- **`volf doctor`.** Six-line product readiness: GitHub, AI provider, index, knowledge, test command, monitoring.
+- **Fail-closed webhook serving.** Missing secret is a hard error (`--no-secret` is local-debug only).
+- **Rename Compart → Volf.** Package, CLI, crate, env vars (`VOLF_*`), state dirs (`.volf/`), and docs. Hard cut: no `compart` aliases. KB entries under old `.compart/` trees are still read via legacy fallback; re-run `volf auth` once to recreate credentials.
+
+### Changed
+- **Relicensed Apache-2.0.** The project moves from Elastic License 2.0 to the
+  Apache License 2.0. The Volf name and logo remain trademarks of Volf
+  Labs (see NOTICE). Contributors are covered by CLA.md.
+- **Agent Provenance Trailers (spec v0.1).** `volf commit` now emits the
+  open `Agent-*` trailer names defined in SPEC.md (`Agent-Origin`,
+  `Agent-Agent`, `Agent-Execution`, `Agent-Compartment`, `Agent-Sandbox`),
+  adding `Agent-Origin` classification and collapsing security detail to the
+  spec's `clean`/`blocked` enum so trailers stay grep-queryable. Releases
+  prior to 1.1 wrote legacy `Volf-*` names; readers should accept both.
+- **SPEC.md.** Open specification for Agent Provenance Trailers - plain git,
+  neutral naming, CC0 license text, legacy compatibility mapping.
+- **CLA.md.** Contributor license agreement keeping future dual-licensing open.
+
+## [1.0.4] - 2026-08-19
+
+### Added
+- **Frozen Public CLI Contract.** Clean grouped CLI surface (`init`, `status`, `inspect`, `claude/opencode/codex/cursor/aider`, `exec`, `-w`, `step`, `--run`, `diff`, `apply`, `commit`, `undo`, `restore`). Suppressed internal plumbing commands (`wrap`, `lanes`, `sessions`, `integrate`) from public `--help`.
+- **Primary `--run <workflow>` DAG Command.** Execute multi-step workflow DAGs directly with `compart --run <name>` across isolated compartments (`research`, `builder`, `tester`, `reviewer`).
+- **Dual Workflow Discovery.** Discovers workflow YAMLs in both `workflows/<name>.yaml` and `.compart/workflows/<name>.yaml`.
+- **Hostile Concurrency Test Suite.** Added canonical "Two Agents, Two Realities" integration tests proving simultaneous multi-agent policy isolation, process tree inheritance, and snapshot collision immunity.
+
+## [1.0.3] - 2026-08-18
+
+### Added
+- **Interactive PTY Supervision.** Raw terminal PTY supervisor supporting true native TUI fidelity, ANSI color, alternate screen, and window resize events.
+- **Git Provenance Trailers.** `compart commit` embeds structured RFC-5322 metadata trailers (`Compart-Execution`, `Compart-Agent`, `Compart-Compartment`, `Compart-Security: clean`).
+- **Instant Physical Rollback.** `compart undo` restores pre-execution BLAKE3 hash snapshots in ~2 milliseconds.
+
+### Fixed
+
+- **Version drift.** `compart.__version__` is now read from installed
+  package metadata instead of a hardcoded constant that lagged behind
+  releases.
+
+## [0.9.3] - 2026-08-02
+
+### Removed
+
+- **Dead code culled.** Dropped the unused C ABI (`src/c_api.rs`,
+  `include/compart.h`), the credential proxy's unused header-injection
+  machinery, the `profile` config knob, and a re-export shim module.
+  No public Python/TS API change.
+
+## [0.9.2] - 2026-08-01
+
+### Removed
+
+- **Go SDK removed.** The `sdk/go/` module was dropped; Compart now ships
+  Python and TypeScript SDKs only. `Cargo.toml` no longer emits a
+  `staticlib` archive, `include/compart.h` no longer references the Go
+  bindings, and all Go code samples were stripped from the docs.
+
+### Changed
+
+- **Product rebrand.** The README is now a product landing page rather than a
+  technical writeup: a one-line hero promise ("Sandbox any AI agent in
+  seconds"), a "Why Compart" section, benefit-led features, real use cases
+  (coding agents, builds/tests, deploys, pipelines), and an honest security
+  model. SDK, CLI, and package metadata descriptions now carry the same
+  product voice.
+- **CLI branding.** `compart --version` and `--help` now surface the
+  tagline, and `compart run`/`why` print a brand banner on interactive
+  terminals. Non-TTY output stays machine-friendly for scripts and CI.
+- **TypeScript SDK package metadata.** `@compart/sdk` descriptions updated;
+  the publish layout is trimmed to the shipped macOS platform packages
+  (`darwin-arm64`, `darwin-x64`) at version `0.9.2`.
+- **Version bumped to `0.9.2`** across the Rust core, Python package, and
+  TypeScript SDK to publish the rebranded build to PyPI.
+
+## [0.9.1] - 2026-07-31
+
+### Fixed
+
+- **CLI: `compart run` now prints command output.** The compartment
+  function returned a `subprocess.CompletedProcess` while the CLI only
+  printed dict results, so `stdout`/`stderr` were silently swallowed. The
+  CLI now captures and prints `Stdout:`/`Stderr:` blocks after the run
+  summary.
+- **CLI: non-zero command exit codes now surface.** `compart run "exit 3"`
+  previously reported `Status: success`; the CLI now exits with status `1`
+  when the shell command fails.
+- **Credential proxy: absolute-form (`HTTP_PROXY`) requests now get
+  credential-injected.** Route matching now uses the path component of the
+  request target, so both origin-form (`/openai/v1/chat`) and absolute-form
+  (`http://host/openai/v1/chat`, as sent by `HTTP_PROXY` clients) are
+  matched and rewritten. Query strings survive the rewrite.
+- **TypeScript SDK: fixed compile error.** `Runtime::names()` in the napi
+  wrapper called a method that had been removed from the Rust `Runtime`
+  struct; the `names()` method was restored, so `npm run build` and
+  `npm test` pass again.
+
+### Changed
+
+- **Docs restyled.** The README and SDK docs now follow the structure used
+  by top YC developer-tool projects: a one-line value proposition, an
+  above-the-fold quickstart, a "Why" section, a feature table, and a
+  professional footer. The stale `compart.runtime` import in the
+  "Advanced Users" example was replaced with the correct
+  `compart.compartments` subclass pattern.
+- **Tests import the installed package.** The pytest `pythonpath = ["python"]`
+  config was removed because the source tree no longer contains a compiled
+  native core (`_core` ships inside the wheel). Install the package
+  (`pip install .`) before running the test suite.
+- **Test isolation.** `Box.enter()` calls in the box-lifecycle tests now pass
+  `sandbox=False`, so the irreversible kernel Seatbelt sandbox is no longer
+  applied to the shared pytest process (which poisoned `os.getcwd()` for
+  later tests).
+
+### Added
+
+- `tests/test_cli.py` - CLI regression tests (stdout/stderr printing, exit
+  codes, `goal` positional, `why`).
+- `tests/test_proxy.py` - credential proxy regression tests (origin-form,
+  absolute-form, no-match pass-through, query preservation).
+
+### Verified
+
+- Python: 107 tests pass (installed wheel).
+- Rust core: 423 tests pass.
+- Go SDK: `go vet` clean, 15 tests pass.
+- TypeScript SDK: builds and all smoke tests pass.

koyote-1.1.0/CLA.md

@@ -0,0 +1,25 @@
+# Contributor License Agreement
+
+Thank you for contributing to Koyote.
+
+By submitting a pull request, comment, or any other contribution to this
+repository, you agree to the following:
+
+1. **Copyright license.** You grant Koyote Labs (Tanmay Jayant Devare) a
+   perpetual, worldwide, non-exclusive, royalty-free, irrevocable license to
+   use, reproduce, modify, distribute, sublicense, and relicense your
+   contribution as part of Koyote - including under proprietary or dual-license
+   terms in future commercial offerings.
+
+2. **Patent license.** To the extent you hold patent claims covering your
+   contribution, you grant the same rights for those claims.
+
+3. **You have the right to contribute.** You confirm the contribution is your
+   own work (or you are authorized to submit it) and does not violate any
+   third-party license or agreement.
+
+4. **No obligation.** Submitting a contribution does not guarantee it will be
+   merged or maintained.
+
+Your original authorship is always recorded in git history. This agreement
+only covers licensing; attribution stays with you.

koyote-1.1.0/CODE_OF_CONDUCT.md

@@ -0,0 +1,17 @@
+# Contributor Covenant Code of Conduct
+
+## Our Pledge
+
+We as members, contributors, and leaders pledge to make participation in our community a harassment-free experience for everyone, regardless of age, body size, visible or invisible disability, ethnicity, sex characteristics, gender identity and expression, level of experience, education, socio-economic status, nationality, personal appearance, race, religion, or sexual identity and orientation.
+
+## Our Standards
+
+Examples of behavior that contributes to a positive environment:
+- Demonstrating empathy and kindness toward other people
+- Being respectful of differing opinions, viewpoints, and experiences
+- Giving and gracefully accepting constructive feedback
+- Accepting responsibility and apologizing to those affected by our mistakes
+
+## Enforcement
+
+Instances of abusive, harassing, or otherwise unacceptable behavior may be reported to the project team at `conduct@koyote.dev`.

koyote-1.1.0/CONTRIBUTING.md

@@ -0,0 +1,25 @@
+# Contributing to Koyote
+
+We welcome contributions to the Koyote source-available runtime!
+
+## Licensing & License Agreement
+
+By contributing to Koyote, you agree that your contributions will be licensed under the [Apache License 2.0](LICENSE), and to the terms of the [CLA](CLA.md).
+
+## Development Setup
+
+1. **Prerequisites**: Python >= 3.10, Rust >= 1.75, `maturin` (`pip install maturin`).
+2. **Build Native Extension**:
+   ```bash
+   maturin develop
+   ```
+3. **Run Tests**:
+   ```bash
+   python3 -m pytest
+   ```
+
+## Pull Request Guidelines
+
+- Ensure all existing unit and E2E tests pass.
+- Write unit tests for new features or bug fixes.
+- Keep changes focused, surgical, and well-documented.