orkestra-runtime 0.1.2__tar.gz

orkestra_runtime-0.1.2/.github/workflows/ci.yml

@@ -0,0 +1,98 @@
+name: CI
+
+on:
+  push:
+    branches: [main]
+    tags: ["v*"]
+  pull_request:
+    branches: [main]
+
+permissions:
+  contents: read
+
+jobs:
+  quality:
+    name: Lint, types, security
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+      - uses: astral-sh/setup-uv@v5
+        with:
+          python-version: "3.12"
+      - name: Sync dependencies
+        run: uv sync --locked
+      - name: Ruff format check
+        run: uv run ruff format --check .
+      - name: Ruff lint
+        run: uv run ruff check .
+      - name: Mypy (strict)
+        run: uv run mypy
+      - name: Bandit
+        run: uv run bandit -c pyproject.toml -r src
+      - name: pip-audit
+        run: uv run pip-audit --skip-editable
+        continue-on-error: false
+
+  secrets-scan:
+    name: Secret scan
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+        with:
+          fetch-depth: 0
+      # Direct pinned gitleaks over full history (the wrapper action fails on
+      # push ranges that include the root commit).
+      - name: Run gitleaks (full history)
+        run: |
+          curl -sSfL -o /tmp/gitleaks.tgz \
+            https://github.com/gitleaks/gitleaks/releases/download/v8.24.3/gitleaks_8.24.3_linux_x64.tar.gz
+          tar -xzf /tmp/gitleaks.tgz -C /tmp gitleaks
+          /tmp/gitleaks detect --source . --redact -v
+
+  test:
+    name: Tests (py${{ matrix.python }} / ${{ matrix.os }})
+    runs-on: ${{ matrix.os }}
+    strategy:
+      fail-fast: false
+      matrix:
+        os: [ubuntu-latest, macos-latest]
+        python: ["3.12", "3.13"]
+    steps:
+      - uses: actions/checkout@v4
+      - uses: astral-sh/setup-uv@v5
+        with:
+          python-version: ${{ matrix.python }}
+      - name: Sync dependencies
+        run: uv sync --locked
+      - name: Configure git identity (worktree tests)
+        run: |
+          git config --global user.name "CI"
+          git config --global user.email "ci@example.invalid"
+          git config --global init.defaultBranch main
+      - name: Run tests with coverage
+        run: uv run pytest --cov=orkestra --cov-report=xml --cov-report=term
+      - name: Enforce coverage floor
+        run: uv run coverage report --fail-under=80
+
+  install-smoke:
+    name: Clean install smoke test
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+      - uses: astral-sh/setup-uv@v5
+        with:
+          python-version: "3.12"
+      - name: Build wheel
+        run: uv build
+      - name: Install wheel into fresh venv and smoke test
+        run: |
+          uv venv /tmp/smoke
+          VIRTUAL_ENV=/tmp/smoke uv pip install dist/*.whl
+          /tmp/smoke/bin/orkestra --version
+          /tmp/smoke/bin/orkestra --help
+          git config --global user.name "CI"
+          git config --global user.email "ci@example.invalid"
+          git config --global init.defaultBranch main
+          mkdir /tmp/smokeproj && cd /tmp/smokeproj
+          /tmp/smoke/bin/orkestra init . --non-interactive
+          /tmp/smoke/bin/orkestra doctor || true

orkestra_runtime-0.1.2/.github/workflows/publish-to-pypi.yml

@@ -0,0 +1,54 @@
+name: Publish to PyPI
+
+# PyPI Trusted Publishing via GitHub OIDC — no API tokens anywhere.
+# The `publish` job deploys through the protected `pypi` environment
+# (required reviewer: repository owner; tag pattern v*).
+
+on:
+  release:
+    types: [published]
+  workflow_dispatch:
+
+permissions:
+  contents: read
+
+jobs:
+  build:
+    name: Build distributions
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+      - uses: astral-sh/setup-uv@v5
+        with:
+          python-version: "3.12"
+      - name: Build sdist and wheel
+        run: uv build
+      - name: Check package metadata
+        run: uvx twine check --strict dist/*
+      - name: Smoke test the built wheel
+        run: |
+          uv venv /tmp/pubsmoke
+          VIRTUAL_ENV=/tmp/pubsmoke uv pip install dist/*.whl
+          /tmp/pubsmoke/bin/orkestra --version
+      - uses: actions/upload-artifact@v4
+        with:
+          name: dist
+          path: dist/
+          if-no-files-found: error
+
+  publish:
+    name: Publish to PyPI (requires approval)
+    needs: build
+    runs-on: ubuntu-latest
+    environment:
+      name: pypi
+      url: https://pypi.org/project/orkestra-runtime/
+    permissions:
+      id-token: write  # OIDC token for PyPI Trusted Publishing
+    steps:
+      - uses: actions/download-artifact@v4
+        with:
+          name: dist
+          path: dist/
+      - name: Publish to PyPI
+        uses: pypa/gh-action-pypi-publish@release/v1

orkestra_runtime-0.1.2/.gitignore

@@ -0,0 +1,41 @@
+# Python
+__pycache__/
+*.py[cod]
+*.egg-info/
+.eggs/
+build/
+dist/
+.venv/
+venv/
+
+# Tooling caches
+.pytest_cache/
+.mypy_cache/
+.ruff_cache/
+.pyright/
+.coverage
+coverage.xml
+htmlcov/
+
+# Orkestra runtime state (never commit local orchestration state)
+.orkestra/
+*.orkestra.db
+*.sqlite3
+
+# Worktrees and scratch
+.worktrees/
+.scratch/
+
+# OS
+.DS_Store
+
+# Editors
+.idea/
+.vscode/
+
+# Env / secrets
+.env
+.env.*
+*.pem
+*.key
+.claude/

orkestra_runtime-0.1.2/.gitleaks.toml

@@ -0,0 +1,17 @@
+# Gitleaks configuration for Orkestra.
+# The test suite and redaction module intentionally contain FAKE
+# credential-shaped strings to verify that redaction works; none are
+# real secrets.
+
+[extend]
+useDefault = true
+
+[allowlist]
+description = "Intentional fake credential shapes used to test redaction"
+paths = [
+    '''tests/unit/test_ids_and_redact\.py''',
+    '''tests/unit/test_redact_v2\.py''',
+    '''tests/unit/test_report\.py''',
+    '''tests/unit/test_store\.py''',
+    '''src/orkestra/redact\.py''',
+]

orkestra_runtime-0.1.2/BUILD_STATUS.md

@@ -0,0 +1,46 @@
+# Orkestra Build Status
+
+**Status:** COMPLETE
+**Phase:** 10 — Released (v0.1.0)
+**Last updated:** 2026-07-24
+
+## Phase checklist
+
+- [x] Phase 0 — Bootstrap and environment inventory
+- [x] Phase 1 — Research and architecture decision (docs/research/*, ADRs)
+- [x] Phase 2 — Repository and quality foundation
+- [x] Phase 3 — Core kernel and persistence
+- [x] Phase 4 — Adapter layer (claude-code, codex-cli, antigravity-cli,
+      gemini-cli, fake, external + contract kit)
+- [x] Phase 5 — Git workspace and integration engine
+- [x] Phase 6 — Director and capability system
+- [x] Phase 7 — CLI and operator experience
+- [x] Phase 8 — Policy, human gates, redaction (docker sandbox deferred
+      honestly to v0.2 — refused with explanation, see ROADMAP)
+- [ ] Phase 9 — E2E validation and dogfooding
+  - [x] 15-scenario fake-agent E2E suite (2/3/5-agent runs, fallback,
+        review rejection/repair, gate veto, decisions, interruption/
+        resume, cancellation, merge-conflict recovery)
+  - [x] Live smoke iterations 1–3 with real claude/codex/agy: director
+        analysis, live probes, plan challenges verified; three kernel
+        defects found and fixed (dirty-repo fail-fast, orphaned
+        PLANNING runs, prose acceptance commands crashing the pipeline)
+  - [x] Full live run to COMPLETE (run_7ccfb487: gate-caught failure,
+        fallback repair, Codex structured review approval, human gate,
+        integration branch verified — evidence/LIVE_SMOKE_REPORT.md)
+  - [x] Controlled self-review dogfood (run_cb25ff11: codex analysis
+        integrated after independent claude review; second task skipped
+        at the human gate after bounded review cycles — evidence in
+        docs/development/SELF_REVIEW.md)
+- [x] Phase 10 — Documentation, packaging, GitHub publication,
+      v0.1.0 tag + release, FINAL_BUILD_REPORT.md
+
+## Final quality gates
+
+- 211 tests passing (unit, integration, E2E, CLI)
+- Coverage 81% (floor 80); ruff / mypy --strict / bandit / pip-audit /
+  gitleaks clean; CI green on GitHub
+- Live cross-vendor orchestration + dogfood evidence in
+  docs/development/evidence/
+
+See FINAL_BUILD_REPORT.md for the complete evidence trail.

orkestra_runtime-0.1.2/CHANGELOG.md

@@ -0,0 +1,71 @@
+# Changelog
+
+All notable changes to Orkestra are documented in this file.
+
+The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/),
+and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html)
+(pre-1.0: minor versions may contain breaking changes, announced here).
+
+## [Unreleased]
+
+## [0.1.2] - 2026-07-24
+
+### Added
+
+- PyPI publication via Trusted Publishing (GitHub OIDC): new
+  `publish-to-pypi.yml` workflow builds, metadata-checks, and smoke-tests
+  distributions, then publishes through the protected `pypi` environment
+  with manual approval. No API tokens are stored anywhere.
+- Orkestra is now installable as `uv tool install orkestra-runtime`
+  (or `pip install orkestra-runtime`).
+
+## [0.1.1] - 2026-07-24
+
+### Security
+
+- Redaction hardening, driven directly by Orkestra's own dogfood
+  self-review (`docs/development/SELF_REVIEW.md`):
+  - New provider patterns: AWS session tokens, GCP `privateKeyData`,
+    Azure `AccountKey`/`SharedAccessSignature`/SAS `sig=`, GitLab
+    `glpat-`/`glcbt-`, Slack `xapp-`, npm `npm_`/`.npmrc` `_authToken`,
+    PyPI `pypi-`, URL userinfo passwords (user/host preserved).
+  - Generic credential matcher now covers provider-prefixed and
+    quoted-JSON keys (`AWS_SESSION_TOKEN=`, `"password": "..."`, plain
+    `token=`, camelCase `apiKey`) while skipping benign values
+    (status words, `${VAR}` templates, absolute paths, masked values)
+    and no longer over-consumes past commas.
+  - New `redact_structure()` recursively redacts sensitive keys in
+    structured event data BEFORE JSON serialization; wired into event
+    persistence.
+  - Table-driven positive/negative regression suite covering every
+    verified miss and false positive from the review.
+
+## [0.1.0] - 2026-07-24
+
+### Added
+
+- Deterministic orchestration kernel: persistent SQLite state, task DAG
+  with cycle detection, async scheduler with bounded retries, backoff,
+  fallback agents, cancellation, pause/resume, and crash recovery.
+- Agent adapter layer with first-party adapters for Claude Code, Codex
+  CLI, and Gemini CLI; scripted fake adapter; external-command adapter
+  protocol (`orkestra-jsonl/1`); adapter contract test kit.
+- Git workspace engine: per-task worktree isolation, base-commit
+  tracking, hook-disabled Git execution, diff path-policy checks,
+  no-ff integration with conflict detection, interrupted-operation
+  recovery.
+- Director system (default: Claude Code) with schema-validated decision
+  envelopes, deterministic heuristic fallback planner, capability
+  probes with budgets and caching, weighted capability matrix with
+  confidence, agent performance ledger, and dynamic reassignment.
+- Policy engine with safe defaults, explicit opt-in elevated modes,
+  independent-review enforcement (implementer ≠ reviewer), and
+  deterministic verification gates that agents cannot override.
+- Human gates: persisted decision records, `orkestra decisions` /
+  `orkestra approve`, resume-after-decision workflow.
+- CLI: `init`, `doctor`, `agents list|probe`, `analyze`, `plan`, `run`,
+  `status`, `logs`, `decisions`, `approve`, `pause`, `resume`, `cancel`,
+  `report`.
+- Secret redaction for logs, reports, and support bundles.
+- Full research corpus, architecture documentation, ADRs, and threat
+  model.

orkestra_runtime-0.1.2/CODE_OF_CONDUCT.md

@@ -0,0 +1,44 @@
+# Code of Conduct
+
+## Our pledge
+
+We as members, contributors, and leaders pledge to make participation in
+the Orkestra community a harassment-free experience for everyone,
+regardless of age, body size, visible or invisible disability, ethnicity,
+sex characteristics, gender identity and expression, level of experience,
+education, socio-economic status, nationality, personal appearance, race,
+religion, or sexual identity and orientation.
+
+## Our standards
+
+Examples of behavior that contributes to a positive environment:
+
+- Demonstrating empathy and kindness toward other people
+- Being respectful of differing opinions, viewpoints, and experiences
+- Giving and gracefully accepting constructive feedback
+- Accepting responsibility and apologizing to those affected by our
+  mistakes, and learning from the experience
+- Focusing on what is best for the overall community
+
+Examples of unacceptable behavior:
+
+- The use of sexualized language or imagery, and sexual attention or
+  advances of any kind
+- Trolling, insulting or derogatory comments, and personal or political
+  attacks
+- Public or private harassment
+- Publishing others' private information without their explicit permission
+- Other conduct which could reasonably be considered inappropriate in a
+  professional setting
+
+## Enforcement
+
+Instances of abusive, harassing, or otherwise unacceptable behavior may be
+reported to the project maintainers via GitHub. All complaints will be
+reviewed and investigated promptly and fairly. Maintainers are obligated
+to respect the privacy and security of the reporter of any incident.
+
+## Attribution
+
+This Code of Conduct is adapted from the
+[Contributor Covenant](https://www.contributor-covenant.org), version 2.1.

orkestra_runtime-0.1.2/CONTRIBUTING.md

@@ -0,0 +1,65 @@
+# Contributing to Orkestra
+
+Thanks for your interest in improving Orkestra.
+
+## Development setup
+
+Requirements: Python ≥ 3.12, [uv](https://docs.astral.sh/uv/), Git.
+
+```bash
+git clone https://github.com/andyyaro/orkestra
+cd orkestra
+uv sync            # creates .venv with dev dependencies
+uv run pytest      # run the test suite
+```
+
+## Quality gates (run before every PR)
+
+```bash
+uv run ruff format --check .
+uv run ruff check .
+uv run mypy
+uv run pytest --cov=orkestra
+uv run bandit -c pyproject.toml -r src
+```
+
+CI runs the same commands; PRs must be green.
+
+## Ground rules
+
+- **Determinism first.** The kernel must never depend on LLM output for
+  policy, state transitions, or verification. Director/agent output is
+  untrusted input — validate it.
+- **No fixed-agent-count assumptions.** Code, schemas, and tests must work
+  for 2 agents and for N agents. Never hard-code three.
+- **Security posture.** Subprocesses use argument arrays (no `shell=True`);
+  external paths are resolved and scope-checked; Git runs hook-disabled;
+  secrets are redacted from anything persisted.
+- **Evidence over self-report.** New agent-facing behavior needs a fake- or
+  contract-test demonstrating the failure modes (timeout, garbage output,
+  non-zero exit), not just the happy path.
+- **Tests accompany code.** Bug fixes include a regression test.
+
+## Adding an agent adapter
+
+See `docs/adapters/AUTHORING.md`. Implement the adapter contract, then run
+the contract test kit:
+
+```bash
+uv run pytest tests/adapters/test_contract.py --adapter your-adapter
+```
+
+## Commit / PR conventions
+
+- Small, atomic commits with imperative subjects.
+- PRs describe *what* and *why*; link issues.
+- ADRs (`docs/architecture/adr/`) for decisions that constrain future work.
+
+## Code of conduct
+
+See `CODE_OF_CONDUCT.md`. Be excellent to each other.
+
+## License
+
+Contributions are accepted under Apache-2.0 (inbound = outbound, per
+Apache-2.0 §5). No CLA.