ms-tau-sdk 1.0.0__tar.gz

ms_tau_sdk-1.0.0/.gitignore

@@ -0,0 +1,15 @@
+# Python cache and virtualenvs
+__pycache__/
+*.py[cod]
+.venv/
+venv/
+
+# Environment files and local secrets
+.env
+.env.*
+!.env.example
+.astro/
+release-dist/
+
+# OS files
+.DS_Store

ms_tau_sdk-1.0.0/CHANGELOG.md

@@ -0,0 +1,22 @@
+# Changelog
+
+## 1.0.0 — 2026-09-16
+
+- Established Main Sequence TAU SDK as the `ms-tau-sdk` Python distribution, `ms_tau_sdk`
+  namespace, and `ms-tau` process command.
+- Made every process project-workspace-bound and exposed `create_app` plus `TauSDKSettings` as the
+  public construction surface.
+- Preserved the existing Main Sequence transports, runtime-credential client, provider hydration,
+  durable and sessionless Tau execution, persistence, streaming, A2A, MCP, and lifecycle behavior.
+- Adopted Tau-native project `.tau` configuration and project-owned extensions with no parallel SDK
+  prompt configuration or deployment enable flag.
+- Removed container, Compose, Kubernetes, image, overlay, wheelhouse, and optional web/search/video
+  tool ownership from this project.
+- Added allowlisted wheel/sdist verification, isolated installed-process checks, release checksums,
+  dependency/provenance metadata, build attestation, and PyPI trusted-publishing automation.
+- Declared the reviewed Python API, command, settings, project-configuration, and tested wire
+  contracts as the first stable compatibility surface.
+- Removed residual provider-specific image-build and push material from the historical archive.
+
+The changelog for the retired deployment project is retained as
+[historical context](./docs/history/astro/CHANGELOG.md).

ms_tau_sdk-1.0.0/PKG-INFO

@@ -0,0 +1,162 @@
+Metadata-Version: 2.5
+Name: ms-tau-sdk
+Version: 1.0.0
+Summary: Workspace-bound Tau application primitives for Main Sequence projects
+Project-URL: Changelog, https://github.com/mainsequence-sdk/ms-tau-sdk/blob/development/CHANGELOG.md
+Project-URL: Documentation, https://github.com/mainsequence-sdk/ms-tau-sdk/tree/development/docs
+Project-URL: Issues, https://github.com/mainsequence-sdk/ms-tau-sdk/issues
+Project-URL: Repository, https://github.com/mainsequence-sdk/ms-tau-sdk
+Keywords: agents,main-sequence,sdk,tau
+Classifier: Development Status :: 5 - Production/Stable
+Classifier: Framework :: FastAPI
+Classifier: Programming Language :: Python :: 3
+Classifier: Programming Language :: Python :: 3.13
+Requires-Python: >=3.13
+Requires-Dist: anyio>=4.10
+Requires-Dist: fastapi>=0.116
+Requires-Dist: httpx>=0.28
+Requires-Dist: jsonschema<5,>=4.25
+Requires-Dist: mcp<2,>=1.27
+Requires-Dist: pydantic-settings>=2.10
+Requires-Dist: pydantic>=2.11
+Requires-Dist: pypdf<7,>=6.0
+Requires-Dist: python-multipart>=0.0.20
+Requires-Dist: structlog<27,>=26.1
+Requires-Dist: tau-ai==0.4.2
+Requires-Dist: uvicorn[standard]>=0.35
+Description-Content-Type: text/markdown
+
+<p align="center">
+  <a href="https://www.main-sequence.io">
+    <img src="https://www.main-sequence.io/images/logos/MS_logo_long_black.png" alt="Main Sequence" width="460">
+  </a>
+</p>
+
+<h1 align="center">Main Sequence TAU SDK</h1>
+
+<p align="center">
+  <strong>Run Tau as a workspace-native Main Sequence coding agent.</strong>
+</p>
+
+<p align="center">
+  <a href="https://pypi.org/project/ms-tau-sdk/"><img src="https://img.shields.io/pypi/v/ms-tau-sdk.svg?logo=pypi&amp;logoColor=white" alt="PyPI version"></a>
+  <a href="https://pypi.org/project/ms-tau-sdk/"><img src="https://img.shields.io/pypi/pyversions/ms-tau-sdk.svg" alt="Supported Python versions"></a>
+  <a href="https://github.com/mainsequence-sdk/ms-tau-sdk/actions/workflows/quality.yml"><img src="https://github.com/mainsequence-sdk/ms-tau-sdk/actions/workflows/quality.yml/badge.svg?branch=development" alt="Quality checks"></a>
+  <a href="https://github.com/mainsequence-sdk/ms-tau-sdk/actions/workflows/publish-to-pipy.yml"><img src="https://github.com/mainsequence-sdk/ms-tau-sdk/actions/workflows/publish-to-pipy.yml/badge.svg" alt="PyPI publication"></a>
+  <a href="https://github.com/mainsequence-sdk/ms-tau-sdk/issues"><img src="https://img.shields.io/github/issues/mainsequence-sdk/ms-tau-sdk.svg" alt="Open issues"></a>
+</p>
+
+`ms-tau-sdk` packages the Tau runtime integration, Main Sequence authentication and transports,
+and durable agent-session machinery as a normal Python dependency. A project installs the SDK and
+runs it from its own workspace—there is no separate Astro image, executor overlay, or second
+deployment model.
+
+| Contract | Value |
+| --- | --- |
+| PyPI distribution | `ms-tau-sdk` |
+| Python package | `ms_tau_sdk` |
+| Command | `ms-tau` |
+| Python entry point | `ms_tau_sdk.app:create_app` |
+| Required Python | 3.13 or newer |
+| Project customization | Standard workspace `.tau/` configuration |
+
+## Quick start
+
+Add the SDK to the project that will host the agent:
+
+```bash
+uv add ms-tau-sdk
+```
+
+Provide the runtime credential that Main Sequence assigned to the deployment:
+
+```bash
+export MAINSEQUENCE_BACKEND="https://api.main-sequence.app"
+export MAINSEQUENCE_RUNTIME_CREDENTIAL_ID="<runtime-credential-id>"
+export MAINSEQUENCE_RUNTIME_CREDENTIAL_SECRET="<runtime-credential-secret>"
+```
+
+Start the service from the project workspace:
+
+```bash
+uv run ms-tau
+```
+
+The credential pair is exchanged for short-lived Main Sequence access tokens. Do not commit it or
+place it in `.tau` configuration. For an embedded ASGI deployment, construct the same application
+in Python:
+
+```python
+from ms_tau_sdk import create_app
+
+app = create_app()
+```
+
+## Workspace-owned Tau behavior
+
+The consuming repository owns the effective Tau configuration. It can override the packaged Tau
+defaults and install project-specific tools through the normal `.tau/` structure:
+
+```text
+your-project/
+├── .tau/
+│   ├── SYSTEM.md
+│   ├── settings.json
+│   └── extensions/
+├── pyproject.toml
+└── uv.lock
+```
+
+Extensions run as project code in the same process and trust boundary as the rest of the
+repository. Optional capabilities such as general web access belong in a project extension; they
+are not bundled into the SDK. Main Sequence transport and protocol behavior remains SDK-owned.
+
+## Included capabilities
+
+- FastAPI application construction and lifecycle management
+- runtime-credential exchange and authenticated Main Sequence backend access
+- provider validation and credential hydration
+- durable Tau sessions, leases, restore, persistence, cancellation, eviction, and shutdown
+- sessionless Tau execution
+- chat, responses, SSE, A2A, health, and readiness transports
+- Main Sequence MCP and protocol-required task controls
+- packaged defaults that participate in Tau's normal workspace configuration
+
+## Deployment boundary
+
+This repository publishes Python distributions only. It contains no Dockerfile, Compose stack,
+Kubernetes manifest, runtime image, executor bundle, or container-publication pipeline. The
+consuming project owns its dependency lock, deployable artifact, system dependencies, project
+code, prompts, skills, hooks, and extensions.
+
+The project identity and migration are defined by
+[ADR 56](./docs/adrs/adr-56-main-sequence-tau-sdk-workspace-bound-library-deployment.md). See the
+[quickstart](./docs/getting-started/quickstart.md), [documentation index](./docs/README.md), and
+[release guide](./docs/reference/releasing.md) for the complete contracts.
+
+## Development
+
+The repository uses Python 3.13 and `uv`:
+
+```bash
+uv sync --frozen
+uv run pytest
+uv run ruff check .
+uv run mypy
+```
+
+Releases are immutable and tag-driven. Pushing a tag that exactly matches the package version—for
+example, `v1.0.0`—builds and verifies the wheel and source distribution, then publishes them to
+PyPI through OIDC trusted publishing. No PyPI API token or container registry is involved.
+
+## Built on Tau
+
+<p align="center">
+  <a href="https://github.com/huggingface/tau">
+    <img src="https://raw.githubusercontent.com/huggingface/tau/main/docs/assets/tau-header.svg" alt="Tau" width="760">
+  </a>
+</p>
+
+Main Sequence TAU SDK integrates the open-source
+[Tau coding agent](https://github.com/huggingface/tau) into the Main Sequence platform while
+preserving Tau's workspace-native configuration and extension model.

ms_tau_sdk-1.0.0/README.md

@@ -0,0 +1,134 @@
+<p align="center">
+  <a href="https://www.main-sequence.io">
+    <img src="https://www.main-sequence.io/images/logos/MS_logo_long_black.png" alt="Main Sequence" width="460">
+  </a>
+</p>
+
+<h1 align="center">Main Sequence TAU SDK</h1>
+
+<p align="center">
+  <strong>Run Tau as a workspace-native Main Sequence coding agent.</strong>
+</p>
+
+<p align="center">
+  <a href="https://pypi.org/project/ms-tau-sdk/"><img src="https://img.shields.io/pypi/v/ms-tau-sdk.svg?logo=pypi&amp;logoColor=white" alt="PyPI version"></a>
+  <a href="https://pypi.org/project/ms-tau-sdk/"><img src="https://img.shields.io/pypi/pyversions/ms-tau-sdk.svg" alt="Supported Python versions"></a>
+  <a href="https://github.com/mainsequence-sdk/ms-tau-sdk/actions/workflows/quality.yml"><img src="https://github.com/mainsequence-sdk/ms-tau-sdk/actions/workflows/quality.yml/badge.svg?branch=development" alt="Quality checks"></a>
+  <a href="https://github.com/mainsequence-sdk/ms-tau-sdk/actions/workflows/publish-to-pipy.yml"><img src="https://github.com/mainsequence-sdk/ms-tau-sdk/actions/workflows/publish-to-pipy.yml/badge.svg" alt="PyPI publication"></a>
+  <a href="https://github.com/mainsequence-sdk/ms-tau-sdk/issues"><img src="https://img.shields.io/github/issues/mainsequence-sdk/ms-tau-sdk.svg" alt="Open issues"></a>
+</p>
+
+`ms-tau-sdk` packages the Tau runtime integration, Main Sequence authentication and transports,
+and durable agent-session machinery as a normal Python dependency. A project installs the SDK and
+runs it from its own workspace—there is no separate Astro image, executor overlay, or second
+deployment model.
+
+| Contract | Value |
+| --- | --- |
+| PyPI distribution | `ms-tau-sdk` |
+| Python package | `ms_tau_sdk` |
+| Command | `ms-tau` |
+| Python entry point | `ms_tau_sdk.app:create_app` |
+| Required Python | 3.13 or newer |
+| Project customization | Standard workspace `.tau/` configuration |
+
+## Quick start
+
+Add the SDK to the project that will host the agent:
+
+```bash
+uv add ms-tau-sdk
+```
+
+Provide the runtime credential that Main Sequence assigned to the deployment:
+
+```bash
+export MAINSEQUENCE_BACKEND="https://api.main-sequence.app"
+export MAINSEQUENCE_RUNTIME_CREDENTIAL_ID="<runtime-credential-id>"
+export MAINSEQUENCE_RUNTIME_CREDENTIAL_SECRET="<runtime-credential-secret>"
+```
+
+Start the service from the project workspace:
+
+```bash
+uv run ms-tau
+```
+
+The credential pair is exchanged for short-lived Main Sequence access tokens. Do not commit it or
+place it in `.tau` configuration. For an embedded ASGI deployment, construct the same application
+in Python:
+
+```python
+from ms_tau_sdk import create_app
+
+app = create_app()
+```
+
+## Workspace-owned Tau behavior
+
+The consuming repository owns the effective Tau configuration. It can override the packaged Tau
+defaults and install project-specific tools through the normal `.tau/` structure:
+
+```text
+your-project/
+├── .tau/
+│   ├── SYSTEM.md
+│   ├── settings.json
+│   └── extensions/
+├── pyproject.toml
+└── uv.lock
+```
+
+Extensions run as project code in the same process and trust boundary as the rest of the
+repository. Optional capabilities such as general web access belong in a project extension; they
+are not bundled into the SDK. Main Sequence transport and protocol behavior remains SDK-owned.
+
+## Included capabilities
+
+- FastAPI application construction and lifecycle management
+- runtime-credential exchange and authenticated Main Sequence backend access
+- provider validation and credential hydration
+- durable Tau sessions, leases, restore, persistence, cancellation, eviction, and shutdown
+- sessionless Tau execution
+- chat, responses, SSE, A2A, health, and readiness transports
+- Main Sequence MCP and protocol-required task controls
+- packaged defaults that participate in Tau's normal workspace configuration
+
+## Deployment boundary
+
+This repository publishes Python distributions only. It contains no Dockerfile, Compose stack,
+Kubernetes manifest, runtime image, executor bundle, or container-publication pipeline. The
+consuming project owns its dependency lock, deployable artifact, system dependencies, project
+code, prompts, skills, hooks, and extensions.
+
+The project identity and migration are defined by
+[ADR 56](./docs/adrs/adr-56-main-sequence-tau-sdk-workspace-bound-library-deployment.md). See the
+[quickstart](./docs/getting-started/quickstart.md), [documentation index](./docs/README.md), and
+[release guide](./docs/reference/releasing.md) for the complete contracts.
+
+## Development
+
+The repository uses Python 3.13 and `uv`:
+
+```bash
+uv sync --frozen
+uv run pytest
+uv run ruff check .
+uv run mypy
+```
+
+Releases are immutable and tag-driven. Pushing a tag that exactly matches the package version—for
+example, `v1.0.0`—builds and verifies the wheel and source distribution, then publishes them to
+PyPI through OIDC trusted publishing. No PyPI API token or container registry is involved.
+
+## Built on Tau
+
+<p align="center">
+  <a href="https://github.com/huggingface/tau">
+    <img src="https://raw.githubusercontent.com/huggingface/tau/main/docs/assets/tau-header.svg" alt="Tau" width="760">
+  </a>
+</p>
+
+Main Sequence TAU SDK integrates the open-source
+[Tau coding agent](https://github.com/huggingface/tau) into the Main Sequence platform while
+preserving Tau's workspace-native configuration and extension model.

ms_tau_sdk-1.0.0/pyproject.toml

@@ -0,0 +1,101 @@
+[build-system]
+requires = ["hatchling>=1.27"]
+build-backend = "hatchling.build"
+
+[project]
+name = "ms-tau-sdk"
+version = "1.0.0"
+description = "Workspace-bound Tau application primitives for Main Sequence projects"
+readme = "README.md"
+requires-python = ">=3.13"
+keywords = ["agents", "main-sequence", "sdk", "tau"]
+classifiers = [
+  "Development Status :: 5 - Production/Stable",
+  "Framework :: FastAPI",
+  "Programming Language :: Python :: 3",
+  "Programming Language :: Python :: 3.13",
+]
+dependencies = [
+  "anyio>=4.10",
+  "fastapi>=0.116",
+  "httpx>=0.28",
+  "jsonschema>=4.25,<5",
+  "mcp>=1.27,<2",
+  "pydantic>=2.11",
+  "pydantic-settings>=2.10",
+  "pypdf>=6.0,<7",
+  "python-multipart>=0.0.20",
+  "structlog>=26.1,<27",
+  "tau-ai==0.4.2",
+  "uvicorn[standard]>=0.35",
+]
+
+[project.urls]
+Changelog = "https://github.com/mainsequence-sdk/ms-tau-sdk/blob/development/CHANGELOG.md"
+Documentation = "https://github.com/mainsequence-sdk/ms-tau-sdk/tree/development/docs"
+Issues = "https://github.com/mainsequence-sdk/ms-tau-sdk/issues"
+Repository = "https://github.com/mainsequence-sdk/ms-tau-sdk"
+
+[project.scripts]
+ms-tau = "ms_tau_sdk.cli:main"
+
+[dependency-groups]
+dev = [
+  "mypy>=1.17",
+  "pytest>=8.4",
+  "pytest-asyncio>=1.1",
+  "pytest-cov>=7.1.0",
+  "pytest-timeout>=2.4.0",
+  "respx>=0.22",
+  "ruff>=0.12",
+  "types-jsonschema>=4.26.0.20260518",
+]
+
+[tool.hatch.build.targets.wheel]
+packages = ["src/ms_tau_sdk"]
+
+[tool.hatch.build.targets.sdist]
+include = [
+  "/CHANGELOG.md",
+  "/README.md",
+  "/pyproject.toml",
+  "/src/ms_tau_sdk",
+]
+
+[tool.pytest.ini_options]
+addopts = [
+  "--import-mode=importlib",
+  "--strict-config",
+  "--strict-markers",
+  "--timeout=10",
+]
+asyncio_mode = "auto"
+testpaths = [
+  "tests",
+]
+
+[tool.ruff]
+target-version = "py313"
+line-length = 100
+
+[tool.ruff.lint]
+select = ["E", "F", "I", "UP", "B", "ASYNC", "RUF"]
+
+[tool.ruff.lint.per-file-ignores]
+"tests/**" = ["S101"]
+
+[tool.mypy]
+python_version = "3.13"
+strict = true
+files = [
+  "src/ms_tau_sdk",
+]
+
+[tool.coverage.run]
+branch = true
+source = ["ms_tau_sdk"]
+
+[tool.coverage.report]
+fail_under = 74
+show_missing = true
+skip_covered = true

ms_tau_sdk-1.0.0/src/ms_tau_sdk/__init__.py

@@ -0,0 +1,10 @@
+"""Public construction surface for Main Sequence TAU SDK."""
+
+from importlib.metadata import version
+
+__version__: str = version("ms-tau-sdk")
+
+from .app import create_app
+from .settings import TauSDKSettings
+
+__all__ = ["TauSDKSettings", "__version__", "create_app"]

ms_tau_sdk-1.0.0/src/ms_tau_sdk/agents/__init__.py

@@ -0,0 +1,5 @@
+"""Agent-scoped runtime contracts."""
+
+from .snapshot import AgentExecutionSnapshot
+
+__all__ = ["AgentExecutionSnapshot"]

ms_tau_sdk-1.0.0/src/ms_tau_sdk/agents/sessionless.py

@@ -0,0 +1,25 @@
+"""Construction boundary for sessionless Tau harness execution."""
+
+from __future__ import annotations
+
+from tau_agent.harness import AgentHarness, AgentHarnessConfig
+from tau_agent.provider import ModelProvider
+
+
+def create_sessionless_harness(
+    *,
+    provider: ModelProvider,
+    model: str,
+    system: str,
+    max_turns: int,
+) -> AgentHarness:
+    """Create a sessionless harness without persistence or coding tools."""
+    return AgentHarness(
+        AgentHarnessConfig(
+            provider=provider,
+            model=model,
+            system=system,
+            tools=[],
+            max_turns=max_turns,
+        )
+    )

ms_tau_sdk-1.0.0/src/ms_tau_sdk/agents/snapshot.py

@@ -0,0 +1,44 @@
+"""Immutable agent configuration supplied by the deployment control plane."""
+
+from __future__ import annotations
+
+from typing import Literal
+
+from pydantic import BaseModel, ConfigDict, Field, field_validator
+
+
+class AgentExecutionSnapshot(BaseModel):
+    """Bounded local configuration for agent-targeted, sessionless execution."""
+
+    model_config = ConfigDict(extra="forbid")
+
+    schema_version: Literal[1] = 1
+    agent_uid: str = Field(min_length=1)
+    name: str = ""
+    description: str = ""
+    harness: Literal["tau"] = "tau"
+    default_provider: str = ""
+    default_model: str = ""
+    default_thinking: str = ""
+    instructions: str = ""
+    allowed_input_media_types: tuple[str, ...] = (
+        "text/plain",
+        "text/markdown",
+        "application/json",
+        "text/csv",
+    )
+    sessionless_capabilities: tuple[str, ...] = ()
+    max_turns: int = Field(default=1, ge=1, le=16)
+
+    @field_validator("agent_uid", "default_provider", "default_model", "default_thinking")
+    @classmethod
+    def strip_identity_and_defaults(cls, value: str) -> str:
+        return value.strip()
+
+    @field_validator("allowed_input_media_types")
+    @classmethod
+    def normalize_media_types(cls, value: tuple[str, ...]) -> tuple[str, ...]:
+        normalized = tuple(dict.fromkeys(item.strip().lower() for item in value if item.strip()))
+        if not normalized:
+            raise ValueError("allowed_input_media_types must not be empty")
+        return normalized

ms_tau_sdk-1.0.0/src/ms_tau_sdk/api/__init__.py

@@ -0,0 +1 @@
+"""FastAPI route modules."""