sliceagent 0.1.0__tar.gz

sliceagent-0.1.0/.dockerignore

@@ -0,0 +1,20 @@
+# keep the build context (and image) lean — only src + packaging are needed to install
+.git
+.venv
+**/__pycache__
+*.pyc
+*.whl
+brain/
+.mindmux/
+scratch/
+runs/
+evals/
+tests/
+docs/
+prototype/
+examples/
+.claude/
+.coverage
+.pytest_cache
+.ruff_cache
+*.pdf

sliceagent-0.1.0/.env.example

@@ -0,0 +1,21 @@
+# copy to .env and fill in. .env is gitignored.
+# (For persistent settings beyond secrets, prefer sliceagent.toml — see sliceagent.toml.example.
+#  Precedence: these env vars override sliceagent.toml, which overrides defaults.)
+LLM_API_KEY=sk-...                       # REQUIRED — any OpenAI-compatible provider (OpenAI/DeepSeek/Moonshot/…)
+AGENT_MODEL=gpt-5.5                      # REQUIRED — model id (no default; pick your provider's model)
+# LLM_BASE_URL=https://api.deepseek.com  # provider endpoint; omit for OpenAI
+# AGENT_PROXY=http://127.0.0.1:7890      # optional proxy URL (default: direct connection)
+# SHOW_SLICE=1                           # print the slice each turn
+# back-compat: OPENAI_API_KEY / OPENAI_BASE_URL / MOONSHOT_API_KEY are still accepted as fallbacks
+
+# --- memory tier (ON by default — memem ships as a dependency; these just relocate the stores) ---
+# SLICEAGENT_VAULT=~/.sliceagent/vault    # sliceagent's STATE vault (episodic cache + task-state records)
+# MEMEM_VAULT=~/obsidian-brain        # memem's lesson vault (markdown long-term memories)
+# MEMEM_DIR=~/.memem                  # memem's index/state dir
+
+# --- safety / hooks (optional) ---
+# AGENT_POLICY=teenager                   # teenager (default: auto edits, ask on commands) | baby-sitter (ask on all) | let-it-go (auto) — all block catastrophic
+# AGENT_MINE=deterministic                # write side of memory loop: deterministic (default) | llm | off
+# AGENT_SUBAGENT_DEPTH=1                   # max delegation depth (0 disables spawn_subagent)
+# AGENT_VERIFY_CMD=python3 -m pytest -q   # Oracle: run before "done"; failures force another turn
+# AGENT_MAX_TOKENS=200000                 # budget ceiling

sliceagent-0.1.0/.github/ISSUE_TEMPLATE/bug_report.md

@@ -0,0 +1,21 @@
+---
+name: Bug report
+about: Something doesn't work as expected
+labels: bug
+---
+
+**What happened**
+<!-- The behavior you saw, with the error message / traceback verbatim if any. -->
+
+**Expected**
+<!-- What you expected instead. -->
+
+**Repro**
+1.
+2.
+
+**Environment**
+- sliceagent version: <!-- `sliceagent version` -->
+- OS / Python:
+- Model / provider:
+- Install method: <!-- install.sh · uv · pipx · docker · pip -e -->

sliceagent-0.1.0/.github/ISSUE_TEMPLATE/feature_request.md

@@ -0,0 +1,15 @@
+---
+name: Feature request
+about: Suggest an idea or improvement
+labels: enhancement
+---
+
+**The problem**
+<!-- What are you trying to do that's hard or impossible today? -->
+
+**Proposed solution**
+<!-- What you'd like to happen. -->
+
+**Moat note (if relevant)**
+<!-- sliceagent's moat is the bounded, reconstructed per-turn slice (no transcript accumulation). If your
+     idea touches context/memory, note how it stays moat-safe — see CONTRIBUTING.md / ARCHITECTURE.md. -->

sliceagent-0.1.0/.github/PULL_REQUEST_TEMPLATE.md

@@ -0,0 +1,16 @@
+<!-- Thanks for contributing to sliceagent! Keep PRs focused and small where possible. -->
+
+## What & why
+<!-- One or two sentences: what does this change and why? Link any issue (#123). -->
+
+## Changes
+-
+
+## Checklist
+- [ ] `bash scripts/run_tests.sh` passes locally
+- [ ] `ruff check src/sliceagent tests evals` is clean
+- [ ] Added/updated a regression test for the change
+- [ ] No edits to verifiers/tests purely to make them pass (reward-hacking)
+- [ ] **Moat respected:** no transcript accumulation / LLM-summarization in the loop; provider quirks stay
+      behind the `LLMClient` contract in `llm.py`; changes are task- and provider-agnostic
+      (see [CONTRIBUTING.md](../CONTRIBUTING.md))

sliceagent-0.1.0/.github/dependabot.yml

@@ -0,0 +1,10 @@
+version: 2
+updates:
+  - package-ecosystem: "pip"
+    directory: "/"
+    schedule:
+      interval: "weekly"
+  - package-ecosystem: "github-actions"
+    directory: "/"
+    schedule:
+      interval: "weekly"

sliceagent-0.1.0/.github/workflows/ci.yml

@@ -0,0 +1,44 @@
+name: CI
+
+on:
+  push:
+    branches: ['**']   # every branch (pre-1.0): CI runs on each push, not just main
+  pull_request:
+
+jobs:
+  test:
+    name: ${{ matrix.os }} · py${{ matrix.python }}
+    runs-on: ${{ matrix.os }}
+    strategy:
+      fail-fast: false
+      matrix:
+        os: [ubuntu-latest, macos-latest]
+        python: ["3.11", "3.12"]
+    steps:
+      - uses: actions/checkout@v4
+
+      - uses: actions/setup-python@v5
+        with:
+          python-version: ${{ matrix.python }}
+
+      - name: Install ripgrep (powers grep / glob / the code-index tier)
+        run: |
+          if [ "$RUNNER_OS" = "Linux" ]; then
+            sudo apt-get update && sudo apt-get install -y ripgrep
+          else
+            brew install ripgrep
+          fi
+
+      - name: Install sliceagent + dev/tui extras
+        run: |
+          python -m pip install --upgrade pip
+          pip install -e ".[dev,tui]"
+
+      - name: Smoke — the installed console script runs
+        run: sliceagent version
+
+      - name: Lint (ruff)
+        run: ruff check src/sliceagent tests
+
+      - name: Tests
+        run: bash scripts/run_tests.sh

sliceagent-0.1.0/.github/workflows/publish.yml

@@ -0,0 +1,36 @@
+name: publish
+
+# Publish to PyPI via trusted publishing (OIDC — no tokens).
+# Triggers: a published GitHub release, or a manual dispatch from the Actions tab.
+on:
+  release:
+    types: [published]
+  workflow_dispatch:
+
+jobs:
+  build:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+      - uses: actions/setup-python@v5
+        with:
+          python-version: "3.12"
+      - run: python -m pip install build
+      - run: python -m build
+      - uses: actions/upload-artifact@v4
+        with:
+          name: dist
+          path: dist/
+
+  publish:
+    needs: build
+    runs-on: ubuntu-latest
+    environment: pypi
+    permissions:
+      id-token: write   # OIDC token for PyPI trusted publishing
+    steps:
+      - uses: actions/download-artifact@v4
+        with:
+          name: dist
+          path: dist/
+      - uses: pypa/gh-action-pypi-publish@release/v1

sliceagent-0.1.0/.gitignore

@@ -0,0 +1,58 @@
+# secrets
+.env
+.env.*
+!.env.example
+
+# node (prototype)
+node_modules/
+prototype/node_modules/
+
+# python (core)
+__pycache__/
+*.pyc
+.venv/
+venv/
+*.egg-info/
+.pytest_cache/
+*.whl
+/dist/
+/build/
+
+# agent scratch / runtime
+scratch/
+*.jsonl
+.DS_Store
+
+# prompt A/B generated artifacts (variant .txt are regenerated from slice.py by variants.build_all)
+evals/prompt_ab/variants/
+evals/prompt_ab/runs/
+
+# local memagent state / monitor runtime (personal; not part of the repo)
+.memagent/
+monitor/
+brain/
+.mindmux/
+
+# local tooling artifacts (not part of the repo).
+# NOTE: gitignore has no inline comments — keep each pattern on its own line.
+# .claude/ = local session dir · .coverage = coverage.py data · runs/ = eval outputs ·
+# *.pdf = decks/local docs (force-add if a real doc PDF is ever needed).
+.claude/
+.coverage
+runs/
+*.pdf
+
+# ── internal-only: untracked 2026-07-02 for the public launch (files stay on disk locally) ──
+# evals/  = internal benchmark harness + ~127 MB of captured tbench/job run artifacts (deb/lz4/pt/logs)
+# prototype/ = superseded ~250-line JS proof-of-concept (its own README: "not the production codebase")
+# docs/STEP3-PLAN.md, docs/MEMEM-DIAGNOSIS.md = internal R&D planning notes, not user docs
+evals/
+prototype/
+docs/STEP3-PLAN.md
+docs/MEMEM-DIAGNOSIS.md
+
+# internal engineering roadmap (wave planning), not product docs — untracked 2026-07-02
+ROADMAP.md
+
+# all of docs/ is internal (architecture/spec/brand assets) — not published; untracked 2026-07-02
+docs/

sliceagent-0.1.0/CHANGELOG.md

@@ -0,0 +1,65 @@
+# Changelog
+
+All notable changes to sliceagent. Format follows [Keep a Changelog](https://keepachangelog.com/);
+this project aims for [Semantic Versioning](https://semver.org/).
+
+## [Unreleased]
+
+## [0.1.0] — 2026-07-02
+
+First public release.
+
+### Added
+- **`sliceagent init`** — guided first-run setup (provider, API key, model); tests the key and writes
+  `~/.sliceagent/config.toml` (0600). Config-persisted keys mean the next run needs no env vars.
+- **`sliceagent config` / `config --list` / `config --path`** — discover every setting, its default, and
+  current value. New central env-var registry (`envspec.py`) is the single source of truth.
+- **`sliceagent help` / `version`** subcommands.
+- **Startup config validation** — a typo'd enum (e.g. `AGENT_POLICY`) now warns instead of silently
+  defaulting.
+- **Always-pinned live UI** (`AGENT_TUI=live`) — a bordered input box stays at the bottom while output
+  streams above it, in the normal buffer (native copy/paste).
+- **Lexical topic router** (default) — routing no longer costs an LLM round-trip per follow-up;
+  `AGENT_ROUTER=llm` restores the classifier. Measured identical to the LLM router on continue/resume.
+- **Per-tool wall-clock timeout** (`AGENT_TOOL_TIMEOUT`, opt-in) — a stuck tool no longer hangs the turn.
+- Docs: `QUICKSTART.md`, `CONTRIBUTING.md`.
+- **One-command install** — `install.sh` (bootstraps `uv` → isolated tool install), a `Dockerfile`, and a
+  README `## Install` (uv / pipx / docker). MIT `LICENSE` declared in metadata; `NOTICE` records
+  third-party attributions; `SECURITY.md` documents the threat model + a disclosure path.
+- **Three permission modes** — `baby-sitter` / `teenager` (default) / `let-it-go`, all sharing a
+  catastrophic-command floor; `/mode` + `/model` two-tier selector menus; **Esc = undo**.
+- **MCP spawn-security screen** (`mcp_security.py`) — refuses a shell-interpreter MCP entry that does network
+  egress or writes OS-persistence surfaces, before it is spawned.
+- **`read_file` window** — `offset`/`limit` + a default view cap + a `<system>` footer (a large file no
+  longer floods the slice); a `glob` file-finder; `grep` `output_mode`/`--type`/context; `str_replace`
+  `replace_all`; model pricing single-sourced in `model_catalog`; `with_retry` honors `Retry-After`.
+- **"$ saved" cost meter** — shows dollars saved vs a full-transcript agent, re-priced live on `/model`.
+- **CI** (`.github/workflows/ci.yml`, ubuntu+macOS × py3.11/3.12: install + lint + tests),
+  `scripts/run_tests.sh`, a `ruff` config + `[dev]` extra, single-sourced version, and contribution
+  scaffolding (`CODE_OF_CONDUCT.md`, issue/PR templates).
+
+### Removed
+- The full-screen Textual UI (`AGENT_TUI=textual`) and its `textual` dependency. The inline `rich` REPL is
+  the proven default (native copy/paste/scrollback on any terminal); `AGENT_TUI=live` remains for the
+  always-pinned composer, `off` for plain stdout.
+
+### Changed
+- Default UI is the inline `rich` REPL (native copy/paste on any terminal). The composer is a bordered,
+  bottom-pinned box.
+- Permission confirms are arrow-key selectable (Yes / No / Always) instead of typed.
+- The user's message is echoed the instant Enter is pressed — before any routing/LLM work (no input lag).
+- `AGENT_PROXY=off` now forces a direct connection (previously misread as a proxy URL); the network route
+  is shown on startup (`net=…`).
+- Read/list tool cards show the action header only (no content dump); commands and failures show output.
+
+### Reliability
+- Hook callbacks are guarded: advisory hooks (budget/oracle/plugin) degrade gracefully on error; the
+  permission hook fails **closed** (denies) on error.
+- Streaming assembly survives a malformed chunk (skipped) and a mid-stream drop (salvages the partial, or
+  re-rolls via retry when nothing was assembled).
+- Session teardown is guarded and bounded — a stuck MCP server / index write can't freeze exit.
+
+### Core
+- Initial Python core: the slice/cache-not-log loop, typed memory tiers, reconstruction seam,
+  event-sink host. Tools, skills, subagents, MCP, plugins, sandbox, permission policy,
+  session/topic resume, durable cross-session memory (memem).

sliceagent-0.1.0/CODE_OF_CONDUCT.md

@@ -0,0 +1,12 @@
+# Code of Conduct
+
+This project follows the [Contributor Covenant](https://www.contributor-covenant.org/version/2/1/code_of_conduct/)
+(v2.1). In short: be respectful, assume good faith, and keep discussion constructive and on-topic.
+
+Harassment, discrimination, personal attacks, and other unacceptable behavior are not tolerated.
+
+**Reporting:** to report a concern, email **tongtao.wang@gmail.com**. Reports are handled confidentially.
+Maintainers may remove, edit, or reject contributions and comments that violate this Code of Conduct, and
+may ban (temporarily or permanently) any contributor for behavior they deem inappropriate.
+
+The full text and enforcement guidelines are at the Contributor Covenant link above.

sliceagent-0.1.0/CONTRIBUTING.md

@@ -0,0 +1,56 @@
+# Contributing
+
+## Dev setup
+
+```bash
+uv sync                 # or: pip install -e ".[dev,tui,treesitter]"   # [dev] = pytest + ruff
+```
+
+Python ≥ 3.11. The core is `openai`-free — only `llm.py`/`cli.py` import the SDK — so the whole loop is
+testable offline with a fake LLM.
+
+## Running the tests
+
+sliceagent uses a **dependency-free custom test runner** (no pytest): each `tests/test_*.py` is a standalone
+script with a tiny `@check` harness that exits non-zero on failure. Run the whole offline suite:
+
+```bash
+bash scripts/run_tests.sh             # runs every tests/test_*.py, tallies, exits non-zero on any failure
+ruff check src/sliceagent tests evals   # lint (real-bug rules; house style configured in pyproject)
+```
+
+or a single file:
+
+```bash
+PYTHONPATH=src .venv/bin/python tests/test_reliability.py
+```
+
+The offline suite must stay green on every change. **No live API calls in the offline suite** — stub the
+LLM (see `tests/test_reliability.py` / `tests/test_live_composer.py` for the patterns: fake `complete()`,
+pipe-driven prompt_toolkit apps, recording Rich consoles). Eval tooling that needs a key lives in `evals/`
+and is run manually.
+
+### Testing interactive UI offline
+Drive prompt_toolkit Applications with a pipe input + `DummyOutput`, and Rich sinks with a
+`Console(file=StringIO())` — see `tests/test_live_composer.py`. This catches layout/keybinding/logic
+regressions without a tty.
+
+## Architecture in one breath
+
+The loop (`loop.py`) is the moat: one `while(true)` per turn over a **bounded slice** that is the SEED
+(built once by `make_build_slice`), then working memory **accumulates** as native messages within the turn
+and is sealed to the durable cache at the turn boundary. The core depends only on contracts
+(`interfaces.py`): `LLMClient`, `ToolHost`, `Retriever`, `Oracle`, plus an event `dispatch` and `hooks`. It
+never imports implementations.
+
+**Layering rule:** `loop.py`/`pfc.py`/`seed.py` are the moat — keep them stateless and contract-only. UI
+(`tui.py`, `cli.py`), tools, providers, and extensions are periphery: use well-known building blocks and
+keep them behind seams (event sinks, the tool registry, the `LLMClient`/`Memory` interfaces).
+
+## Conventions
+
+- Match the surrounding code's comment density and idiom. Comments explain *why*, not *what*.
+- Every behavior change ships a test in the same PR.
+- Keep the agent **task-agnostic** and **LLM/provider-agnostic**: no task-type-specific heuristics in the
+  core; provider quirks stay isolated in `llm.py`.
+- New environment variables go in `envspec.py` (a coverage test enforces this).

sliceagent-0.1.0/Dockerfile

@@ -0,0 +1,21 @@
+# sliceagent — runnable container image.
+#   docker build -t sliceagent .
+#   docker run -it -e LLM_API_KEY=$LLM_API_KEY -v "$PWD:/work" -w /work sliceagent
+# The agent edits files in the mounted workspace (/work); pass your key via -e (never bake it in).
+FROM python:3.12-slim
+
+# git: memem is a git dependency · ripgrep: powers the code-index / search tier
+RUN apt-get update \
+    && apt-get install -y --no-install-recommends git ripgrep ca-certificates \
+    && rm -rf /var/lib/apt/lists/*
+
+WORKDIR /app
+COPY . /app
+RUN pip install --no-cache-dir ".[tui]"
+
+# Drop privileges; the workspace is bind-mounted at runtime.
+RUN useradd -m agent
+USER agent
+WORKDIR /work
+
+ENTRYPOINT ["sliceagent"]

sliceagent-0.1.0/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 TT-Wang
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

sliceagent-0.1.0/NOTICE

@@ -0,0 +1,61 @@
+sliceagent
+Copyright (c) 2026 TT-Wang
+Licensed under the MIT License — see LICENSE.
+
+This product includes code ported from, and architecture reimplemented after, the
+open-source projects below. We are grateful to their authors.
+
+────────────────────────────────────────────────────────────────────────────
+Hermes — https://github.com/NousResearch/hermes   (MIT License)
+Copyright (c) 2025 Nous Research
+
+  Verbatim / closely-ported source:
+    src/sliceagent/binsniff.py          ← tools/binary_extensions.py
+    src/sliceagent/fuzzy.py             ← fuzzy_match.py (_calculate_line_positions)
+    src/sliceagent/context_overflow.py  ← overflow-pattern matcher
+    src/sliceagent/mcp_security.py      ← hermes_cli/mcp_security.py
+  Pattern / structure adapted:
+    src/sliceagent/errors.py (classify + retry/backoff), src/sliceagent/sandbox.py
+    (execution backend), src/sliceagent/subdir_hints.py, and the execute_code
+    (code-as-action) pattern.
+
+  The MIT License text for Hermes is reproduced under THIRD-PARTY-LICENSES below
+  (its notice clause requires carrying the copyright + permission notice).
+
+────────────────────────────────────────────────────────────────────────────
+Kimi-Code — https://github.com/MoonshotAI/kimi-code   (Moonshot AI)
+
+  ARCHITECTURE AND PATTERNS reimplemented in Python (no source copied — ideas,
+  not code):
+    access.py + scheduler.py (resource-access model for safe tool parallelism),
+    policy.py (permission chain), config.py (layered config), clock.py, cron.py,
+    flags.py, model_catalog.py, mcp_client.py (the mcp__server__tool namespacing),
+    loop.py (micro-compaction), tui.py (selector menus + footer/streaming),
+    code_grep.py (ripgrep pagination), agents.py (named-agent registry).
+  See the upstream repository for its license terms.
+
+────────────────────────────────────────────────────────────────────────────
+Also gratefully acknowledged for ideas and conventions: Aider, OpenHands.
+
+════════════════════════════ THIRD-PARTY-LICENSES ═══════════════════════════
+
+Hermes — MIT License
+Copyright (c) 2025 Nous Research
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.