scopeforge 0.1.0__py3-none-any.whl

scopeforge-0.1.0.dist-info/METADATA

@@ -0,0 +1,188 @@
+Metadata-Version: 2.5
+Name: scopeforge
+Version: 0.1.0
+Summary: ScopeForge — Commercial-Grade Cybersecurity Multi-Agent Harness & Interactive TUI
+Author-email: Boopathi Raj <boopathi@neuronestai.in>
+License: Apache-2.0
+Keywords: agent-harness,claude-code,cybersecurity,langchain,langgraph,mcp,security-automation,textual,tui
+Classifier: Development Status :: 4 - Beta
+Classifier: Environment :: Console
+Classifier: Intended Audience :: Developers
+Classifier: Intended Audience :: Information Technology
+Classifier: License :: OSI Approved :: Apache Software License
+Classifier: Operating System :: OS Independent
+Classifier: Programming Language :: Python :: 3
+Classifier: Programming Language :: Python :: 3.12
+Classifier: Topic :: Security
+Classifier: Topic :: Terminals
+Requires-Python: >=3.12
+Requires-Dist: anyio>=4.4
+Requires-Dist: httpx>=0.27
+Requires-Dist: langchain>=1.0.0
+Requires-Dist: langgraph>=1.0.0
+Requires-Dist: llama-index-core>=0.14.0
+Requires-Dist: pydantic>=2.7
+Requires-Dist: pyyaml>=6.0
+Requires-Dist: textual>=8.0.0
+Provides-Extra: dev
+Requires-Dist: hypothesis>=6; extra == 'dev'
+Requires-Dist: pytest-asyncio>=0.23; extra == 'dev'
+Requires-Dist: pytest>=8; extra == 'dev'
+Requires-Dist: respx>=0.22; extra == 'dev'
+Description-Content-Type: text/markdown
+
+# ScopeForge
+
+> **Commercial-Grade Cybersecurity Multi-Agent Harness & Claude Code Style TUI**  
+> Autonomous SecOps Orchestrator, LangGraph Multi-Agent Team, LangChain Tool Harness, MCP Bridge & Interactive Terminal UI.
+
+[![PyPI version](https://img.shields.io/pypi/v/scopeforge.svg)](https://pypi.org/project/scopeforge/)
+[![Python Versions](https://img.shields.io/pypi/pyversions/scopeforge.svg)](https://pypi.org/project/scopeforge/)
+[![License: Apache-2.0](https://img.shields.io/badge/License-Apache_2.0-blue.svg)](https://opensource.org/licenses/Apache-2.0)
+[![Built with Textual](https://img.shields.io/badge/UI-Textual-darkviolet.svg)](https://textual.textualize.io/)
+[![Orchestration LangGraph](https://img.shields.io/badge/Orchestrator-LangGraph-orange.svg)](https://langchain-ai.github.io/langgraph/)
+
+---
+
+## ⚡ What is ScopeForge?
+
+**ScopeForge** is a standalone, commercial-grade autonomous cybersecurity agent harness and terminal interface designed to work like **Claude Code** and **Open Code**, but specifically engineered with **ScopeGate Rules of Engagement (RoE)** safety guarantees.
+
+Powered by **LangChain**, **LangGraph**, **Textual**, and the **Model Context Protocol (MCP)**, ScopeForge coordinates specialized cybersecurity agents to perform automated reconnaissance, vulnerability scanning, static code analysis (SAST), proof-of-concept verification, and executive reporting—or operates as a general-purpose AI coding and system administration assistant.
+
+---
+
+## 🚀 Installation & Quickstart
+
+### 1. Install via pip / pipx / uv
+
+```bash
+# Recommended: Install using pipx (isolated environment)
+pipx install scopeforge
+
+# Or standard pip
+pip install scopeforge
+
+# Or run instantly without installation via uv
+uvx scopeforge
+```
+
+### 2. Launch the Interactive TUI
+
+Simply type `scopeforge` or the shorthand `sf` in your terminal:
+
+```bash
+scopeforge
+# Or:
+sf
+```
+
+ScopeForge will launch directly into the dark-themed reactive terminal UI.
+
+---
+
+## ⌨️ Modern Terminal Shortcuts
+
+ScopeForge uses standard modern terminal `Ctrl+[key]` bindings:
+
+| Shortcut | Secondary | Action | Description |
+|:---:|:---:|:---|:---|
+| <kbd>Ctrl+M</kbd> | <kbd>F1</kbd> | **Model Switcher** | Open live model picker, filter presets, or configure custom endpoints |
+| <kbd>Ctrl+H</kbd> | <kbd>F2</kbd> | **Help Cheatsheet** | Show all slash commands, shortcuts, and agent roles |
+| <kbd>Ctrl+O</kbd> | <kbd>F3</kbd> | **Toggle SecOps Mode** | Cycle policy gates (`plan` ↔ `live` ↔ `artifacts`) |
+| <kbd>Ctrl+B</kbd> | <kbd>F4</kbd> | **Toggle Sidebar** | Expand or collapse agent telemetry and finding ledger |
+| <kbd>Ctrl+W</kbd> | <kbd>F5</kbd> | **SecOps Wiki** | Open persistent knowledge base and user preferences |
+| <kbd>Ctrl+Y</kbd> | <kbd>F6</kbd> | **Copy Last Response** | Copy the latest AI response to system clipboard |
+| <kbd>Ctrl+T</kbd> | <kbd>F7</kbd> | **Toggle Native Mouse** | Switch between TUI clicks and terminal text selection |
+| <kbd>Ctrl+L</kbd> | — | **Clear Screen** | Clear conversation stream and reset buffer |
+| <kbd>Ctrl+Q</kbd> | — | **Quit** | Safely exit ScopeForge |
+
+---
+
+## 🤖 Multi-Agent Team (LangGraph)
+
+ScopeForge routes tasks dynamically to specialized autonomous agents:
+
+- 🧠 **Supervisor**: General architecture, system management, code discussion, and high-level strategy.
+- 💻 **DevAgent**: Local code workspace operations, terminal sandbox commands, skill installation, and live web research.
+- 🛰️ **ReconAgent**: Passive & active reconnaissance, port discovery telemetry, and attack surface enumeration.
+- 🔬 **AuditAgent**: Static code auditing (SAST), CVE advisory correlation, and OWASP vulnerability identification.
+- ⚡ **ExploitAgent**: Controlled proof-of-concept (PoC) validation within strict authorized bounds.
+- 📋 **ReportAgent**: Executive SecOps summary, CVSS scoring, and remediation action plans.
+
+Agents communicate asynchronously using the cryptographically verified **Agent-to-Agent (A2A) Protocol Bus**.
+
+---
+
+## 🛠️ LangChain Autonomous Tool-Calling Harness
+
+ScopeForge provides real autonomous tool execution through LangChain:
+- **Autonomous Tool Binding**: Models (`OpenRouter`, `Groq`, `DeepSeek`, `Claude`, `OpenAI`) are automatically bound to the complete toolsuite and active MCP tools via `chat_model.bind_tools()`.
+- **Iterative Tool Execution**: The harness detects `tool_calls`, executes tools safely via the ScopeGate middleware pipeline, feeds `ToolMessage` outputs back into context, and synthesizes answers iteratively.
+- **Built-in Tools**:
+  - `bash_cli`: Sandboxed shell execution with dangerous-pattern blocking.
+  - `google_web_search`: Live web search for fast technical lookups.
+  - `view_file` / `write_file` / `edit_file`: Surgical code workspace inspection and editing.
+  - `glob_files` / `grep_search`: Fast repository pattern discovery.
+  - `git_status_tool` / `git_diff_tool` / `git_commit_tool`: Git version control operations.
+  - `recon_port_scan` / `web_surface_probe`: Perimeter discovery tools.
+  - `sast_code_audit` / `cve_advisory_search`: Vulnerability triage tools.
+
+---
+
+## 🌐 Model Support & Custom API Configuration
+
+ScopeForge supports any OpenAI-compatible, Anthropic, or Ollama provider:
+
+### Quick Presets (Zero Setup):
+- `openrouter-free`: Meta-router for high-availability free frontier models (`openrouter/free`).
+- `openrouter-free-nemotron`: NVIDIA Nemotron 550B Free.
+- `groq-llama3`: Llama 3.3 70B on Groq Ultra-Fast inference.
+- `ollama-llama3`: Offline local models via Ollama.
+
+### Custom Endpoints & Third-Party Proxies:
+Open the Model Switcher (<kbd>Ctrl+M</kbd>) or use slash commands:
+
+```text
+/model
+/config set key <API_KEY>
+/config set model <MODEL_ID>
+/config set base <CUSTOM_URL>
+```
+
+ScopeForge features native paste de-duplication and custom endpoint normalization (no forced path appending).
+
+---
+
+## 🔌 Model Context Protocol (MCP) & Skills
+
+### MCP Integration:
+```text
+/mcp                                    # List all configured MCP servers
+/mcp tools                              # View all registered MCP tools
+/mcp add <name> <command>               # Add and enable an MCP server
+/mcp enable <name>                      # Enable a server
+/mcp disable <name>                     # Disable a server
+```
+
+### Extensible Skills (`SKILL.md`):
+Install custom skills from any Git repository:
+```text
+/skill install https://github.com/example/sec-skills
+/skill list
+```
+
+---
+
+## 🛡️ ScopeGate Rules of Engagement (RoE)
+
+ScopeForge operates under 3 strict enforcement modes:
+1. **PLAN (`plan`)**: Zero network egress. Generates falsifiable hypotheses, models attack surface, and plans audits.
+2. **ARTIFACTS (`artifacts`)**: Inspects locally supplied source code, HAR files, and logs without external traffic.
+3. **LIVE (`live`)**: Network tools enabled strictly against authorized scope domains and IPs.
+
+---
+
+## 📜 License
+
+Licensed under the **Apache License, Version 2.0**.

scopeforge-0.1.0.dist-info/RECORD

@@ -0,0 +1,85 @@
+scopeforge_engine/__init__.py,sha256=uzWMmijxhSZ-iCPtY1wpXRN3Oop2JsyH5nU6zPLEkZw,49
+scopeforge_engine/agent.py,sha256=gxerBb80XlTEQfsEDBhKNvOqoXT0K9Ny0UAzX1SpAAc,14628
+scopeforge_engine/browser.py,sha256=NL3Ear5RX6JqneM6fIBU9nzmUv9GawWtDgMF6uKra_Q,3278
+scopeforge_engine/coach.py,sha256=AzofVcA4FE7n8x4r_QLiNh5wC_fPpK2vk6-_IzH5uBg,5297
+scopeforge_engine/coverage_skeleton.py,sha256=dn77eeKPWZqiu_QOtwOUusovB2R77_mkH5ZThj6ycT4,2455
+scopeforge_engine/db.py,sha256=Ujm95NY09mGiM0ObLOfCNZUc8EY8ll9SqLgeagUiKvw,3495
+scopeforge_engine/egress.py,sha256=rPPUmEQJ1QT4pleY0eTBModKaVCnFyZFkX12WCTW1PE,11422
+scopeforge_engine/evidence.py,sha256=Rg8MYhVJd0FU3kzDrwLBzl2hJYAwNSXR6xTbcpC3xDY,9121
+scopeforge_engine/exporter.py,sha256=BP56lYmo4vBRBQiEU0RIzqvoZWljj-s5qqtmBoaNopY,6371
+scopeforge_engine/labs.py,sha256=fs7itYbEo79tPn9iNmF2F4GNcvmtCr-Q30NULmZLEUQ,3955
+scopeforge_engine/mcp.py,sha256=xvTD7dkVppzfDOXyP7ETt3qjQpsPGfcRl3X00tv57FI,7505
+scopeforge_engine/mcp_bridge.py,sha256=ABK8sZzmMAIox35oLpZLEUkhy3FQ1Jl1oCW7IuI6ChU,2791
+scopeforge_engine/parsers.py,sha256=H_Ghh64UBBX-Dm1GClSlBB6ilrJZPcAg-bvgWMqhyJg,11216
+scopeforge_engine/policy.py,sha256=UjgS3hxxVVTa8OuJznXV6P6uRwQIl0BgV9piRBkPy3w,25206
+scopeforge_engine/proof_gate.py,sha256=C-hFOy1cb4KWfuWegcXkMcZiuo2ylr0lPPCZz40cwSY,3305
+scopeforge_engine/protocol_generated.py,sha256=1kEDYIzznVV3fHZxz-puEkdXkN9X0FuMjdbJbF9ytgY,1692
+scopeforge_engine/providers.py,sha256=oJpJe_e-XgqrIVmdRkHlVOEsy2_tPUTzIZL11V55zPc,6990
+scopeforge_engine/reports.py,sha256=gZebdZ0LnbWiTmh_ISIbVlWY090xE2AZCMhEyvdU85w,3067
+scopeforge_engine/roles.py,sha256=aYCyeWdKAVAJZpb5DwErnWEiUlyASJYUVm0KnvLyLXU,8921
+scopeforge_engine/runs.py,sha256=w6F4Vf6Kz6_DRMlCtdwb4zH4RKWLc-wMAojcVlhrav4,11227
+scopeforge_engine/server.py,sha256=M3JXyIFaozpXA1F26USQtpfOcjwGYJNFltnH0vWlL5U,79198
+scopeforge_engine/store.py,sha256=iNLRql0ybxQE4cFaW58-gFz3-mugiifv4izTyw0a5OM,4023
+scopeforge_engine/tools.py,sha256=cbsNFhl9AMdScYIfSj_WQcijeXQXW2P4hPinFRV8rsE,7308
+scopeforge_engine/a2a/__init__.py,sha256=wjnkLMa14od6BG6gCkXvrECnMuTjcvCWxwSNoiwkYBU,162
+scopeforge_engine/a2a/bus.py,sha256=6QBpXjGGYWSdIWyrVnjypDYyfptETWh86eDuHj8Wq2M,1944
+scopeforge_engine/a2a/protocol.py,sha256=VBNH7PkCc7Rw2Gq6cbd-97VtwrZKFXVuqdrgB1LOEHs,1596
+scopeforge_engine/agents/__init__.py,sha256=-ZamANIlk5id7EtTB4Mt_nqCdKaIsw2H72807EW6Ifw,298
+scopeforge_engine/agents/custom_agent.py,sha256=YDfnkowcNwEAQQON-Ztq0Kix8CJQYU1ex3qbbWyD3yM,3419
+scopeforge_engine/agents/graph.py,sha256=4LDSsLcmYjtQpQLO1zyiPBVX8nmHwA87TQrnkhiUYJM,40174
+scopeforge_engine/agents/state.py,sha256=dJPujvZmV3rEqA8FaKTlV4_XqCaxVW7sdAPka8vp_u4,958
+scopeforge_engine/llm_providers/__init__.py,sha256=SPLtopCYAES_gcp3q6p6rdXbjOtgV6CeYxR_2Dlt-fQ,431
+scopeforge_engine/llm_providers/factory.py,sha256=ki1c5ZWIDKmzwn0Gh5jI30QhWJLc24ckcB3qLEyqmaE,8039
+scopeforge_engine/llm_providers/manager.py,sha256=XPp2sk313sH2yzpKl4S7YvzOVw0JI9fl4240bC1-NUY,21254
+scopeforge_engine/llm_providers/mock.py,sha256=2kLgOEr3DAbsCABrkctZI8jKCSIBQIADxjRa5UYRUL4,13153
+scopeforge_engine/llm_providers/models.py,sha256=-LIxFLnAf_wDbXJ1jTfy6EqzaUWYU_KXaza72zvEfJg,8632
+scopeforge_engine/middleware/__init__.py,sha256=_2PvLj47fAhLU5RXHVNFTAg-DaCQv4eoULh4xjydyi0,620
+scopeforge_engine/middleware/approval.py,sha256=CmFSySeid3JliCUFXa0fqKjYojage2uDT-BlNDp3_1Q,2287
+scopeforge_engine/middleware/audit.py,sha256=rgsubRWVZKY2oWdp4Ha9yQ_8Tm8ZXhUdPV8hqDh4-HQ,2816
+scopeforge_engine/middleware/base.py,sha256=lHUqqJEy3PNdVPFQofpPOFsG338oFpHNTdN6YJPoSmg,1848
+scopeforge_engine/middleware/pipeline.py,sha256=svkwNirAb7ENSPV1HKDs6iIIa1Z3nBbtnEXhaYTVT6c,2906
+scopeforge_engine/middleware/redaction.py,sha256=D3OplE_3n3lUTatWv8UqTuWO6-9ZtunMLRWuDMhl8ds,2378
+scopeforge_engine/middleware/scope_gate.py,sha256=T5OlpaEw57MXa-6OxS1qAYUY9BN-d9RX2ixfKlWeXfI,4414
+scopeforge_engine/models/__init__.py,sha256=LFFvVY_CsK-GAmzb_nx8qQpGdNDbHJ1UymRkyBTy9b4,2404
+scopeforge_engine/models/anthropic_compat.py,sha256=jMi_v_RoHbWprMMJDQ5c3KaH0Knrp5_tEqhPtPwanPc,12164
+scopeforge_engine/models/errors.py,sha256=hinKesVJNzaEa5q3q8_Fw7LgfOibvyCJXEh4wVOFKro,1161
+scopeforge_engine/models/factory.py,sha256=wi8jL1E-HDX6vgG4Fnsbb0sgX9XPYs_qI-Jje1EvQ8c,2702
+scopeforge_engine/models/gemini.py,sha256=42NAu-DMSm71SZe0jfFv7VPtYBDIQEyJVt-MDr_jt0M,13004
+scopeforge_engine/models/http.py,sha256=sHtPc7URtfBEYfA7F-MnJRIXB6YQ4KkR9f-U_vz_t8E,4488
+scopeforge_engine/models/litellm_bridge.py,sha256=8E3zeyRpclLbFz7i62W8dW4QrpsFg0EiFcwkvlb0TG8,8304
+scopeforge_engine/models/mock.py,sha256=2RfUcJc41EjEuf0P573UKwsnLyErUILrou9Bnd5SEVI,3454
+scopeforge_engine/models/ollama.py,sha256=_HlbkWqC6klZAcicDwe1mKm4qr_faCjfjA45etEspo4,9935
+scopeforge_engine/models/openai_compat.py,sha256=cZyATu_CxcCi6YKNnnbZPqbziqCd0kFT3fC3jq5AqlY,14456
+scopeforge_engine/models/presets.py,sha256=XOytR_FcrsECU4X0ozHPQVrRBveJ4_j6zt91K_ixIUE,3555
+scopeforge_engine/models/replay.py,sha256=ARV_3jtsGxThsMGVsw9DpP-CScnJPk81XfJsqr7chvM,3343
+scopeforge_engine/models/router.py,sha256=hGwIQ1CYeoJ7Vf49Wfh_wZ-oHHkWWumdynSoioYBtAo,5535
+scopeforge_engine/models/sanitize.py,sha256=NoI2m8omJ5cVjc5AVjSFZBzoNeEdep7Pc_Pjklk3L7s,3926
+scopeforge_engine/models/secrets.py,sha256=RG-PQf2tn-iKw-Vz26JLM4kiCx-Wbikvvd4apEvm1Cc,3155
+scopeforge_engine/models/types.py,sha256=ODFHTXalEiJXXwbZrIwamEHLZEh334LU6khPcPoSeq8,4879
+scopeforge_engine/rag/__init__.py,sha256=GPpTOnYHRKrwSElX0ru3wGPGcpAy6oqDLOfl0mcmDkE,185
+scopeforge_engine/rag/engine.py,sha256=dveyrTCjOiQz5Er2zEOKy3gGUPIuCLcIchWLcvx0r74,6963
+scopeforge_engine/sec_tools/__init__.py,sha256=PqGmd-L-04_s6UcZLDTZeYF0CUFl0m_68ROzo1iD9R8,995
+scopeforge_engine/sec_tools/code_tools.py,sha256=YsBfsTeorL4A64I89fPsYdA29IKNgamh9MPdZJdI4xA,15091
+scopeforge_engine/sec_tools/tools.py,sha256=LGtgjXm4KVeUToYzLOgPvjXL_XJDbaeMws1Vp_bBbp8,15480
+scopeforge_engine/skills/__init__.py,sha256=EI_3g-7qPupp7jU4vB0PNlR-SjN7a8BF8V11AjnEO4s,162
+scopeforge_engine/skills/manager.py,sha256=J6ZtTSEnegqvTi2a2vx5ay_-4_CZgszDzywLu4-g81U,10620
+scopeforge_engine/skills/models.py,sha256=G2Pu0AEw1LGBDydq4bEab5kSGRfu_Y_k4M6RrA5EhSY,3611
+scopeforge_engine/tui/__init__.py,sha256=YZPzcux1-Zxv86-H9tokoyfaLTQgizLpDMbgOarzUMI,118
+scopeforge_engine/tui/app.py,sha256=V-u8_Fi6peZ3ccK9eJthM52k2GFGy3C4O2myIEsS8PE,60124
+scopeforge_engine/tui/clipboard.py,sha256=Va92v1Tw7J_IVQOJqb1lVl4g36ipi43qSND--YZ37HQ,8507
+scopeforge_engine/tui/styles.py,sha256=bgIEecY8KAXZyjm7fZUCPqLQDzUVCdBnDtKBC8WodaM,3880
+scopeforge_engine/tui/screens/approval_screen.py,sha256=UAMjSB76J5gMBwmSEwyiBgLoSTxFyIwjpVlXfh5Ie4s,1986
+scopeforge_engine/tui/screens/help_screen.py,sha256=GPWHMJftFjue4t47KrRDKkuAPaZ6oLp2YbKraf5IkQ8,5441
+scopeforge_engine/tui/screens/model_screen.py,sha256=ztxJHNQm242-DSvHejhygNDWrXbqYVop0R3lzP9718U,25406
+scopeforge_engine/tui/screens/wiki_screen.py,sha256=PUDHO8g-8OEEnJIAh4-9XcG8e_PCbRVk9eqz2ge8qFo,2343
+scopeforge_engine/tui/widgets/chat_log.py,sha256=3zMt1kmpP2vbXQHf3fZJEI7xDbbIbn3Rkz7Zg-Q9_aw,12338
+scopeforge_engine/tui/widgets/clipboard_input.py,sha256=ewLYrc4Z0jNr5oq3ZSRLcineSMjtmPplttui3Snbg28,3782
+scopeforge_engine/tui/widgets/header_bar.py,sha256=DhiGrPw8Mrw2hfei5qt-6GvV3ysktWIU9dFed5Xb0D8,2633
+scopeforge_engine/tui/widgets/prompt_bar.py,sha256=vwreuNKHcxcHYz8qVTft2iiAFKXn41cwwxMxMrgXyMk,6500
+scopeforge_engine/tui/widgets/sidebar.py,sha256=H7d3HEWl8WY0K41OaAA5kUp2onkvKUAtz63w409DtBc,7288
+scopeforge_engine/wiki/__init__.py,sha256=xQux0Bo9d1hlDoLk_5rGcVqeAMC_xVVJltk64VFItic,118
+scopeforge_engine/wiki/store.py,sha256=6wV-PSrxGVPWLlZs6qiAkunQ73fjrMwHZJCD9TgvYl8,4473
+scopeforge-0.1.0.dist-info/METADATA,sha256=CXz2rn7dshCcQP3oCjReT3CnDYszVEE19H28Yg9_qno,8258
+scopeforge-0.1.0.dist-info/WHEEL,sha256=W3fkpkm7-wf9vBI5Z-7s0eWkeM-spu78I8Neb98DeEg,87
+scopeforge-0.1.0.dist-info/entry_points.txt,sha256=1pZyZ-mu7SiD6hOfWZZrQOpHOpWootS0MqNlUj1d12I,278
+scopeforge-0.1.0.dist-info/RECORD,,

scopeforge-0.1.0.dist-info/WHEEL

@@ -0,0 +1,4 @@
+Wheel-Version: 1.0
+Generator: hatchling 1.32.4
+Root-Is-Purelib: true
+Tag: py3-none-any

scopeforge-0.1.0.dist-info/entry_points.txt

@@ -0,0 +1,7 @@
+[console_scripts]
+agi = scopeforge_engine.tui.app:main
+scopeforge = scopeforge_engine.tui.app:main
+scopeforge-engine = scopeforge_engine.server:main
+scopeforge-tui = scopeforge_engine.tui.app:main
+sf = scopeforge_engine.tui.app:main
+sourceforge = scopeforge_engine.tui.app:main

scopeforge_engine/__init__.py

@@ -0,0 +1 @@
+"""ScopeForge engine package (Phase 1 spine)."""

scopeforge_engine/a2a/__init__.py

@@ -0,0 +1,5 @@
+"""Agent-to-Agent (A2A) protocol package."""
+from .protocol import A2AMessage, A2AIntent
+from .bus import A2ABus
+
+__all__ = ["A2AMessage", "A2AIntent", "A2ABus"]

scopeforge_engine/a2a/bus.py

@@ -0,0 +1,65 @@
+"""Agent-to-Agent (A2A) Message Bus."""
+from __future__ import annotations
+
+import json
+from pathlib import Path
+from typing import Callable, Dict, List, Optional
+
+from .protocol import A2AMessage, A2AIntent
+
+
+class A2ABus:
+    """Central bus for inter-agent communication, telemetry, and collaboration."""
+
+    def __init__(self, log_path: Optional[Path] = None):
+        self.log_path = log_path or Path(".scopeforge/a2a_log.jsonl")
+        self.log_path.parent.mkdir(parents=True, exist_ok=True)
+        self.messages: List[A2AMessage] = []
+        self.subscribers: List[Callable[[A2AMessage], None]] = []
+
+    def subscribe(self, callback: Callable[[A2AMessage], None]):
+        """Subscribe to incoming A2A messages."""
+        self.subscribers.append(callback)
+
+    def publish(self, message: A2AMessage) -> A2AMessage:
+        """Sign and broadcast a message to subscribers and audit log."""
+        if not message.signature:
+            message.sign()
+
+        self.messages.append(message)
+
+        # Append to disk log
+        try:
+            with open(self.log_path, "a", encoding="utf-8") as f:
+                f.write(message.model_dump_json() + "\n")
+        except Exception:
+            pass
+
+        # Notify subscribers
+        for sub in self.subscribers:
+            try:
+                sub(message)
+            except Exception:
+                pass
+
+        return message
+
+    def send(
+        self,
+        sender: str,
+        recipient: str,
+        intent: A2AIntent,
+        payload: Dict,
+    ) -> A2AMessage:
+        """Convenience method to construct and publish an A2A message."""
+        msg = A2AMessage(
+            sender=sender,
+            recipient=recipient,
+            intent=intent,
+            payload=payload,
+        )
+        return self.publish(msg)
+
+    def get_history(self, limit: int = 50) -> List[A2AMessage]:
+        """Get recent A2A messages."""
+        return self.messages[-limit:]

scopeforge_engine/a2a/protocol.py

@@ -0,0 +1,44 @@
+"""A2A (Agent-to-Agent) Protocol: Standardized inter-agent messaging and delegation format."""
+from __future__ import annotations
+
+import datetime
+import hashlib
+import json
+import uuid
+from enum import Enum
+from typing import Any, Dict, Optional
+from pydantic import BaseModel, Field
+
+
+class A2AIntent(str, Enum):
+    TASK_DELEGATION = "TASK_DELEGATION"
+    TASK_RESULT = "TASK_RESULT"
+    EVIDENCE_SHARING = "EVIDENCE_SHARING"
+    CONSENSUS_REQUEST = "CONSENSUS_REQUEST"
+    CONSENSUS_RESPONSE = "CONSENSUS_RESPONSE"
+    HANDOVER = "HANDOVER"
+    ALERT = "ALERT"
+
+
+class A2AMessage(BaseModel):
+    """Standardized A2A Protocol Envelope."""
+    message_id: str = Field(default_factory=lambda: f"a2a_{uuid.uuid4().hex[:10]}")
+    timestamp: str = Field(default_factory=lambda: datetime.datetime.now(datetime.timezone.utc).isoformat())
+    protocol_version: str = "1.0.0"
+    sender: str
+    recipient: str
+    intent: A2AIntent
+    payload: Dict[str, Any]
+    signature: str = ""
+
+    def sign(self) -> str:
+        """Compute cryptographic hash of the message payload for integrity."""
+        raw = f"{self.sender}:{self.recipient}:{self.intent}:{json.dumps(self.payload, sort_keys=True)}"
+        self.signature = hashlib.sha256(raw.encode("utf-8")).hexdigest()
+        return self.signature
+
+    def verify(self) -> bool:
+        """Verify the integrity hash of the message."""
+        raw = f"{self.sender}:{self.recipient}:{self.intent}:{json.dumps(self.payload, sort_keys=True)}"
+        expected = hashlib.sha256(raw.encode("utf-8")).hexdigest()
+        return self.signature == expected