Jj`dZddlmZddlZddlZddlZddlmZmZddl m Z m Z ddl m Z ddlmZddlmZmZmZmZmZmZmZdd lmZmZmZmZmZdd lmZdd l m!Z!m"Z"m#Z#dd l$m%Z%dd l&m'Z'm(Z(ddl)m*Z*ddl+m,Z,m-Z-ddl.m/Z/ddl0m1Z1m2Z2ddl3m4Z4ejje6Z7Gdde8e Z9Gdde8e Z:e GddZ;e GddZGddZ?y) aPtah Bridge - orchestrator connecting AsyncEventBus and MemoryTaskQueue. Ptah maps roadmap execution steps to registered agents and routes execution through the modular AgentRegistry/TaskDispatcher security boundary. Execution path: PtahBridge -> AgentRegistry -> TaskDispatcher identity -> scope -> policy -> approval -> audit -> Agent.execute() -> AuthorizedExecutionService re-verifies, does not re-ask -> ExecutionProvider A step that a human had to approve raises exactly one approval request. The dispatcher owns that decision and hands it to the agent's execution service as a grant bound to the one agent call it just authorized; the service re-checks scope, policy, identity, action and the payload digest, and only then proceeds without asking again. Both gates run on every step - the inner one is a verification, not a formality - but one operator decision authorises one step, which is what the documented single-approval flow promises. ) annotationsN)IterableMapping) dataclassfield)Enum)Any) AgentResult BrowserAgent CoderAgentEvaluatorAgent PlannerAgent ResearchAgent SecurityAgent)EXECUTION_ATTEMPTED_KEY AsyncEventBusMemoryTaskQueuePersistentTaskStatusSQLiteTaskQueue)SQLiteDatabase)AuthorizedExecutionServiceBubblewrapExecutionProviderExecutionRefused)ExecutionProvider)InMemoryAgentRegistryInMemoryTaskDispatcher)ApprovalManager)AuditEventTypeAuditLog) AgentIdentity)PermissionGateway SecurityError) PolicyEnginec(eZdZdZdZdZdZdZdZdZ y) RoadmapStatusz(Lifecycle status of a roadmap execution.pendingrunning completedfailedblocked cancelledN) __name__ __module__ __qualname____doc__PENDINGRUNNING COMPLETEDFAILEDBLOCKED CANCELLEDL/home/oem/CyberBrain26-unified/src/cyberbrain26/orchestration/ptah_bridge.pyr%r%Fs#2GGI FGIr7r%c$eZdZdZdZdZdZdZdZy) StepStatusz*Lifecycle status of a single roadmap step.r& dispatchedr(r)r*N) r,r-r.r/r0 DISPATCHEDr2r3r4r6r7r8r:r:Qs4GJI FGr7r:ceZdZUdZded<ded<ded<eeZded<eeZ d ed <e jZ d ed <d Z ded<y ) RoadmapStepz)A single execution step within a roadmap.stridrole descriptiondefault_factorydict[str, Any]payloadz list[str] depends_onr:statusNStepResult | Noneresult)r,r-r.r/__annotations__rdictrFlistrGr:r0rHrJr6r7r8r>r>[sN3 G I#D9G^9!$7J 7#++FJ+ $F $r7r>cZeZdZUdZded<ded<ded<eeZded <d Zd ed <y ) StepResultz+Outcome of executing a single roadmap step.r?step_idrAboolsuccessrCrEdataNz str | Noneerror) r,r-r.r/rKrrLrSrTr6r7r8rOrOhs-5 L I M 6D.6E:r7rOceZdZUdZded<ded<eeZded<ejZ ded <ed Z d ed <y )Roadmapz7A collection of steps executed as a unit by the bridge.r?r@namerCzlist[RoadmapStep]stepsr%rHc*tjSN)timer6r7r8zRoadmap.{s diikr7float created_atN) r,r-r.r/rKrrMrXr%r0rHr^r6r7r8rVrVss?A G I$T:E :)11FM1.ABJBr7rV)r PtahBridgerVr%r>rOceZdZdZ ddd ddZ d ddZddZddZ ddZdd Z dd Z dd Z dd Z dd Z ddZy)r_aOrchestrator for roadmap-driven multi-agent execution. Ptah owns the default in-memory registry and dispatcher used by the local application. Every built-in Ptah agent receives an explicit AgentIdentity and shared PermissionGateway. The public roadmap/query API remains compatible with the previous implementation while execution is routed through the modular orchestration/security layer. N)identity_scopescP t|tr=|.|jj|jk7r t d|j}n| | t d|<|:|j#|jj|jk7r t d|xs t |_||_|xs| t|n t|_ |Bt|jtr(|jjd|jdt||_ t|j|_t!|j|j|_|xs| t%|nd}||_t)|xs t+|j"||j| |_t/|_t3|j0|j|j|| |_t7|j|jt9d d |j"|_t=|j|jt9dd |j"|j,|_tA|j|jt9dd |j"|_!tE|j|jt9dd |j"|_#tI|j|jt9dd |j"|_%tM|j|jt9dd |j"|_'|j:|j>|jB|jF|jJ|jNd|_(|o|jSD]\\} } |jPjU| } | t d| | jVjXj[d| D^|jPj]D]2} |j0j_| jVj`| 4i|_1i|_2tgjh|_5y)Nz=PtahBridge and task queue must share the same SQLite databasezFpass a SQLiteTaskQueue when configuring PtahBridge with SQLiteDatabasezBPtahBridge and ApprovalManager must share the same SQLite databaseptah.dispatch_stepT)replace)database) audit_log)approval_managerrfapproval_timeout_seconds)registry policy_enginerfrgrhz ptah-plannerplanner)agent_idrA)identitypermission_gatewayz ptah-codercoder)rmrnexecution_servicezptah-evaluator evaluatorz ptah-securitysecurityz ptah-researchresearchz ptah-browserbrowser)rkrorqrrrsrtz.identity_scopes references unknown Ptah role: c32K|]}t|ywrZ)r?).0scopes r8 z&PtahBridge.__init__..$s,LESZ,Ls)6 isinstancerrepath ValueError TypeErrorrbusrqueueregister_handler_dispatch_persistent_steprrfr#rjr!rnrrgrrrprrir dispatcherrr rkr ror rqrrrrrsr rt_agentsitemsgetrmscopesupdatevaluesregisterrl _roadmaps _step_resultsasyncioLock_lock) selfr}r~rgrhexecution_providerreraeffective_approval_managerrAragents r8__init__zPtahBridge.__init__s e_ -#(;(;x}}(L !`aa~~H  !e&7de e   , ))1#,,11X]]BT )-/   )1)=OH %?CT   Jtzz?$K JJ ' '$d&D&Dd (  "84)DNNC"3   $..# &6& 2:2FOX .D #!;!;  ?"="?  # #7nn%= " ./ 0]],,nn7%=  $ HH JJ"' $66   HH JJ"% $66"44   ( HH JJ")  $66 & HH JJ"( $66  & HH JJ"( $66  $ HH JJ"' $66  ||ZZ  || (   & / 5 5 7 M f ((.=$HQ%%,,,LV,LL  M\\((* CE MM " "5>>#:#:E B C.046\\^ r7c|xsg}t}|D]G}|j|vrtd|jd|d|j|jIt |||}||j |<|S)z[Register a new roadmap and return it. Validates that step IDs are unique. zduplicate step id 'z' in roadmap '')r@rWrX)setr@r{addrVr)r roadmap_idrWrXstep_idssteproadmaps r8create_roadmapzPtahBridge.create_roadmap1s  U "Dww(" )$''. AN LL !  "Zd%@%,z"r7c8|jj|S)z5Return a roadmap by id, or None if it does not exist.)rr)rrs r8 get_roadmapzPtahBridge.get_roadmapHs~~!!*--r7cHt|jjS)zReturn all registered roadmaps.)rMrrrs r8 list_roadmapszPtahBridge.list_roadmapsLsDNN))+,,r7c  K|jj|j}|gt|j|jdd|j}t j |_||_||j|j<|St|j}|jd|j|jd|t j|_ |j;t|j t"r d|d|j}|j j%|}||j j'd |j|j(j*|d | |j,j/t0j2|j(j*|jd ||d |j j%|}||jt4j ur|j j7|rt8j;d||j,j/t0j<|j(j*|jd d|j>xsd||d |j j%|}||jt4j@ur|j jC|rt8j;d||j,j/t0j<|j(j*|jd dtE|jxsijdxsd||d |j j%|}|?|jt4jFur#|j jI|d{}| tKd|jt4j@urt|jtrtMtE|jjd|jN|jtQ|jjdd|jjdi|jjd|jjtRdu}n|jt4jTur tKdtK|j>xsd|jjV|jXj[|j|j(j*| d{}|rtQ|jdnd} |r |jfni} |r |j>nd} t|j|j| | | }| rt j@nt j |_||_||j|j<|S7G7#t\$r} t| t^t`fr"t8j;d|j| n t8jcd|jt|j|jdtE| }t j |_||_||j|j<|cYd} ~ Sd} ~ wwxYww) zDispatch one roadmap step through the TaskDispatcher. The dispatcher performs the security boundary checks before the underlying agent's ``execute`` method is called. NFzunknown role: )rPrArRrTtask_idrzptah::rcrrlrF)r dispatch_step)durable_task_idr)rlractionmetadataz0re-dispatching previously failed durable step %sfailed_task_requeued)rlrrrJrTrz1re-dispatching previously blocked durable step %sblocked_task_requeuedrTz(durable roadmap task could not be loaded agent_namerRrS)rrrRrSrTexecution_attemptedzostep was interrupted after process restart; review its side effects before explicitly retrying the durable taskzdurable task ended with status zstep %s refused: %szstep %s failed unexpectedly)rPrArRrSrT)4rrrArOr@r:r3rHrJrrLrF setdefaultr<reryr~rget_job enqueue_jobrmrlrfrecordr TASK_CREATEDr retry_failedloggerwarningERRORrTr2 retry_blockedr?r0 dispatch_job RuntimeErrorr rWrQr INTERRUPTEDvaluerdispatch Exceptionr"r exceptionrRrS) rrrrrJrF durable_idjob agent_resultexcrRrSrTs r8 execute_stepzPtahBridge.execute_stepSs   + =YY&tyyk2 F %++DK DK*0D  tww 'Mt||$9dgg.<4 ++ C }}(Z O-T$ZL$''; jj((4;JJ**,'+ww(-(?(?'. !++NN))&33!&!8!8 $.5?z!Z ***,,Z8CO &:&A&AA // ;NNJJNN))&,,!&!8!8 $.5!iio2/9*4"* **,,Z8CO &:&D&DD 00<NNKZNN))&,,!&!8!8 $.6!3::#3"8"8"A"GRH/9*4"* **,,Z8C?szz5I5Q5Q'Q $ 7 7 CCC;&'QRR::!5!?!??Jszz[_D`#.#&szz~~lEJJ'O#P $ $SZZ^^Iu%E F ZZ^^FB7!jjnnW5 JJNN+BC5P $LZZ#7#C#CC&F ' Y'FszzGWGWFX%Y&*__%=%= GG"^^44#&>&  *1=$|++,%$0|  b&2 ""GG  /6j**:;L;L  &,477# }D4   # /?@A4dggsC  !>HYY#h F %++DK DK*0D  tww 'M s^C'[2*K+X!XFX!1X2X!6B&[2X!X!! [/*B:[*$[/%[2*[//[2c K |jjt|dt|dt|dd{}t|trBd|jd |jd |jd |jt|j iSdtt#|ddd t%t#|d dd t#|d ixsid t#|d dtdiS7#tt f$rS}t jdt|jdd|dd d d d id t|td icYd}~Sd}~wwxYww)zBExecute a persisted step payload and return JSON-safe result data.rrlrFrNzdurable step %s refused: %sunknownrzptah-dispatcherrRFrSrTT)rrr?rLr"rrrrrryr rrRrSrTrgetattrrQ)rrrrs r8rz$PtahBridge._dispatch_persistent_steps` !%!9!9C N+S_-S^,":"L lK 0l55<// ))++()I)I  #glL)LM tGL)TBC GL&"5; W\7D9 $T  5 /0  NN-s3779i3P/QSV /5S'   sIEAC4 C2 C4B$E2C44EAE E EEEcK|jj|}|td||j4d{tj |_t}d}t|j}|rd}t|D]}t|j}|r|j|s,|j||j||d{|jd|jjr|j!|j"nd}d}|sD|D]}t$j&|_tj&|_|cdddd{S|r|rtj(ntj*|_|cdddd{S7i77G7 #1d{7swYyxYww)zExecute roadmap steps while respecting dependencies. A roadmap with unresolved dependencies is explicitly marked BLOCKED instead of incorrectly being reported as COMPLETED. Nzunknown roadmap: FT)rrKeyErrorrr%r1rHrrMrXrGissubsetremoverrJrRrr@r:r4r3r2) rrrr(r)r&progressrdepss r8execute_roadmapzPtahBridge.execute_roadmap/s ..$$Z0 ?.zl;< <::) ) *22GN"%%IF7==)G  M(Dt/DDMM)$< NN4(++J==={{.;;..%MM$''2%)F#'(" !(9&0&8&8 9&3%:%:GN"E) ) ) >$$",, N S) ) ) ">#) ) ) ) ) sGc8|jj|S)z.Return the recorded result for a step, if any.)rr)rrPs r8 step_resultzPtahBridge.step_resultgs!!%%g..r7cX|jj|}|r |jSdS)z;Return the current status of a roadmap, or None if unknown.N)rrrH)rrrs r8roadmap_statuszPtahBridge.roadmap_statusks'..$$Z0!(w~~2d2r7cj|jj|}|rt|jSgS)z6Return the accumulated results for a given agent role.)rrrMresults)rrArs r8 agent_resultszPtahBridge.agent_resultsps,   &&+tEMM"33r7c^Ktjdt|jyw)z"Best-effort cleanup of the bridge.z%PtahBridge shutdown for roadmap(s)=%sN)rdebugrMrrs r8shutdownzPtahBridge.shutdownus! 3   s+-)NNNg>@NN)r}zAsyncEventBus | Noner~zMemoryTaskQueue | NonergzApprovalManager | Nonerhr]rzExecutionProvider | NonerezSQLiteDatabase | Noneraz"Mapping[str, Iterable[str]] | NonereturnNonerZ)rr?rWr?rXzlist[RoadmapStep] | NonerrV)rr?rzRoadmap | None)rz list[Roadmap])rr?rr>rrO)rrErrE)rr?rrV)rPr?rrI)rr?rzRoadmapStatus | None)rAr?rzlist[AgentResult])rr)r,r-r.r/rrrrrrrrrrrr6r7r8r_r_s %)(,37*.7;*.X$?CX$ !X$&X$1 X$ #( X$ 5 X$(X$<X$ X$B+/ (   ..-sss  sj% N3p/3 4  r7r_)@r/ __future__rrloggingr[collections.abcrr dataclassesrrenumrtypingr cyberbrain26.agents.orchestratorr r r r rrrcyberbrain26.control_planerrrrr$cyberbrain26.data_plane.sqlite_storercyberbrain26.execution_planerrr/cyberbrain26.extension_layer.execution_providerr*cyberbrain26.extension_layer.registry_implrr$cyberbrain26.security_plane.approvalr!cyberbrain26.security_plane.auditrr$cyberbrain26.security_plane.identityr &cyberbrain26.security_plane.permissionr!r""cyberbrain26.security_plane.policyr# getLoggerr,rr?r%r:r>rOrV__all__r_r6r7r8rs.# -(@ NAF>S;   8 $Cd  % %  %   CC C r r r7