1.5.91: scene backdrops, transcript views, stages that rehearse and record

.github/workflows/py-tests.yaml

@@ -79,3 +79,59 @@ jobs:
 
       - name: Validate Personal Agent Protocol examples
         run: python scripts/validate_pap_examples.py
+
+  # The external adapters, against the real framework, in the real sandbox: what
+  # the job above skips, since it holds no framework and its kernel no namespaces.
+  evals-adapters:
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v7
+        with:
+          token: ${{ secrets.GITHUB_TOKEN }}
+
+      - name: Install system deps
+        run: |
+          sudo apt-get update
+          sudo apt-get install -y libdbus-1-3 libdbus-1-dev libglib2.0-dev
+
+      # Ubuntu's AppArmor refuses unprivileged user namespaces by default; the
+      # sandbox refuses to run without them, so these tests would only skip.
+      - name: Allow user namespaces
+        run: sudo sysctl -w kernel.apparmor_restrict_unprivileged_userns=0
+
+      - uses: astral-sh/setup-uv@v7
+        with:
+          version: "latest"
+          python-version: "3.13"
+          activate-environment: true
+
+      - name: Install the package
+        run: uv pip install -e .[test]
+
+      # In an environment of its own, as in the adapter's image: the pin is the
+      # adapter's, read from it. tiktoken's encoding is seeded because a sandbox
+      # has no network to fetch it with.
+      - name: Install the pinned Inspect
+        run: |
+          version=$(sed -n 's/^INSPECT_VERSION = "\(.*\)"$/\1/p' agent_runtimes/evals/adapters/inspect_ai.py)
+          uv venv "$RUNNER_TEMP/inspect"
+          uv pip install --python "$RUNNER_TEMP/inspect/bin/python" "inspect-ai==$version" "agent-client-protocol<1" openai packaging
+          TIKTOKEN_CACHE_DIR="$RUNNER_TEMP/tiktoken" "$RUNNER_TEMP/inspect/bin/python" -c "import tiktoken; tiktoken.get_encoding('o200k_base')"
+
+      - name: Install the pinned Harbor
+        run: |
+          version=$(sed -n 's/^HARBOR_VERSION = "\(.*\)"$/\1/p' agent_runtimes/evals/adapters/harbor.py)
+          uv venv "$RUNNER_TEMP/harbor"
+          uv pip install --python "$RUNNER_TEMP/harbor/bin/python" "harbor==$version"
+
+      # What a task's own Dockerfile starts from, so those tests run rather than skip.
+      - name: Pull the task image
+        run: docker pull python:3.12-slim
+
+      - name: Run the adapter tests
+        env:
+          DATALAYER_INSPECT_AI_PYTHON: ${{ runner.temp }}/inspect/bin/python
+          DATALAYER_INSPECT_AI_TIKTOKEN_CACHE: ${{ runner.temp }}/tiktoken
+          DATALAYER_HARBOR_PYTHON: ${{ runner.temp }}/harbor/bin/python
+        run: pytest agent_runtimes/tests/test_evals_adapters.py agent_runtimes/tests/test_evals_adapters_environments.py agent_runtimes/tests/test_evals_adapters_relay.py agent_runtimes/tests/test_evals_adapters_harbor_docker.py agent_runtimes/tests/test_evals_adapters_harbor_sources.py agent_runtimes/tests/test_evals_adapters_sandbox.py agent_runtimes/tests/test_evals_adapters_inspect.py agent_runtimes/tests/test_evals_adapters_harbor.py agent_runtimes/tests/test_evals_adapters_command.py

.licenserc.yaml

@@ -9,6 +9,7 @@ header:
 
   paths-ignore:
     - '**/*.toml'
+    - '**/*.mmd'
     - '**/*.apt'
     - '**/*.cedar'
     - '**/*.csv'
@@ -17,6 +18,7 @@ header:
     - '**/*.ipynb'
     - '**/*.j2'
     - '**/*.json'
+    - '**/*.jsonl'
     - '**/*.mamba'
     - '**/*.md'
     - '**/*.mdx'

Makefile

@@ -196,7 +196,6 @@ RUFF_TARGETS = \
 	agent_runtimes/specs/model_providers.py \
 	agent_runtimes/specs/memory.py \
 	agent_runtimes/specs/strategies.py \
-	agent_runtimes/specs/guardrails.py \
 	agent_runtimes/specs/benchmarks.py \
 	agent_runtimes/specs/evals.py \
 	agent_runtimes/specs/triggers.py \
@@ -435,7 +434,7 @@ loop-demo-nocodemode: # loop-demo-nocodemode
 list-specs: # list specs
 	agent-runtimes list-specs
 
-specs: specs-clone specs-sandbox-variants specs-generate specs-format ## generate Python and TypeScript code from YAML specifications (agents, teams, scenes, frames, cogs, ops, guards, gates, tracks, applications, MCP servers, skills, envvars)
+specs: specs-clone specs-sandbox-variants specs-generate specs-format ## generate Python and TypeScript code from YAML specifications (agents, teams, scenes, frames, cogs, ops, guards, gates, tracks, battles, stages, applications, MCP servers, skills, envvars)
 
 specs-sandbox-variants: ## scaffold sandbox example agent specs for all supported sandbox variants
 	$(call step,Generating sandbox variant example agents)
@@ -583,6 +582,24 @@ specs-generate: ## generate all Python and TypeScript specs from YAML
 	else \
 	  echo "Skipping Track specifications: $(AGENTSPECS_DIR)/agentspecs/tracks not found (agentspecs < 0.0.14)"; \
 	fi
+	$(call step,Generating Battle specifications)
+	@if [ -d "$(AGENTSPECS_DIR)/agentspecs/battles" ]; then \
+	  python scripts/codegen/generate_ops.py --kind battles \
+	    --specs-dir $(AGENTSPECS_DIR)/agentspecs/battles \
+	    --python-output agent_runtimes/specs/battles.py \
+	    --typescript-output src/specs/battles.ts; \
+	else \
+	  echo "Skipping Battle specifications: $(AGENTSPECS_DIR)/agentspecs/battles not found (agentspecs < 0.0.145)"; \
+	fi
+	$(call step,Generating Stage specifications)
+	@if [ -d "$(AGENTSPECS_DIR)/agentspecs/stages" ]; then \
+	  python scripts/codegen/generate_ops.py --kind stages \
+	    --specs-dir $(AGENTSPECS_DIR)/agentspecs/stages \
+	    --python-output agent_runtimes/specs/stages.py \
+	    --typescript-output src/specs/stages.ts; \
+	else \
+	  echo "Skipping Stage specifications: $(AGENTSPECS_DIR)/agentspecs/stages not found (agentspecs < 0.0.149)"; \
+	fi
 	$(call step,Generating Op specifications)
 	@if [ -d "$(AGENTSPECS_DIR)/agentspecs/ops" ]; then \
 	  python scripts/codegen/generate_ops.py --kind ops \
@@ -622,11 +639,6 @@ specs-generate: ## generate all Python and TypeScript specs from YAML
 	  --specs-dir $(AGENTSPECS_DIR)/agentspecs/strategies \
 	  --python-output agent_runtimes/specs/strategies.py \
 	  --typescript-output src/specs/strategies.ts
-	$(call step,Generating guardrail specifications)
-	python scripts/codegen/generate_guardrails.py \
-	  --specs-dir $(AGENTSPECS_DIR)/agentspecs/guardrails \
-	  --python-output agent_runtimes/specs/guardrails.py \
-	  --typescript-output src/specs/guardrails.ts
 	$(call step,Generating eval specifications)
 	python scripts/codegen/generate_evals.py \
 	  --specs-dir $(AGENTSPECS_DIR)/agentspecs/evals \

README.md

@@ -40,7 +40,7 @@ loop --local -a example-simple
 
 - **The meta-harness.** Coding agents run as harnesses, driven over the Agent Client Protocol (ACP): **Claude Code, Codex, OpenCode and pi** today. The runtime launches the harness, lends it tools through the MCP gateway and writes the skills into its workspace. It serves the harness over every protocol it serves its own agents on. The **Shield** surrounds it: the pod's egress boundary, the policies and the session's rules, the audit record and the trace. See [Harnesses](https://agent-runtimes.datalayer.tech/harnesses/) and [the Shield](https://agent-runtimes.datalayer.tech/shield/).
 - **Protocol integrations.**
-  - *Transports to a UI or another agent*: AG-UI, the Vercel AI SDK, ACP and A2A (served, and called as a client), with A2UI, MCP-UI and MCP Apps for generative UI.
+  - *Transports to a UI or another agent*: AG-UI, the Vercel AI SDK, ACP and A2A (served, and called as a client), with A2UI and MCP-UI for generative UI.
   - *Tools*: MCP, local servers over stdio and remote servers over Streamable HTTP.
   - *Identity, consent and commerce*, each a Reactor plugin: Web Bot Auth (with a draft TAP profile), PAP (Personal Agent Protocol), PACT, UCP and the Agentic Commerce Protocol.
 

agent_runtimes/__main__.py

@@ -31,6 +31,7 @@
 import asyncio
 import logging
 import os
+import sys
 from typing import Annotated, Optional
 
 import typer
@@ -67,6 +68,7 @@
 from agent_runtimes.commands.list_specs import (
     list_agentspecs,
 )
+from agent_runtimes.commands.mcp import app as mcp_app
 from agent_runtimes.commands.mcp_servers_catalog import (
     OutputFormat as CatalogOutputFormat,
 )
@@ -94,9 +96,24 @@
     serve_server,
 )
 from agent_runtimes.commands.sessions import app as sessions_app
+from agent_runtimes.commands.tool_approvals import app as tool_approvals_app
+
+
+def _log_level(argv: list[str]) -> int:
+    """INFO, but WARNING for `agent-runtimes mcp …` without `-v`.
+
+    `mcp` prints a result meant for `| jq`; the libraries imported below
+    (botocore at the chat import) log at INFO before any command runs.
+    """
+    words = [word for word in argv[1:] if not word.startswith("-")]
+    if words[:1] == ["mcp"] and not {"-v", "--verbose"} & set(argv[1:]):
+        return logging.WARNING
+    return logging.INFO
+
 
 logging.basicConfig(
-    level=logging.INFO,
+    level=_log_level(sys.argv),
+    stream=sys.stderr,
     format="%(asctime)s - %(name)s - %(levelname)s - %(message)s",
 )
 logger = logging.getLogger(__name__)
@@ -363,6 +380,16 @@ def main_callback(
         "--keep",
         help="Leave the cloud runtime running when the session ends.",
     ),
+    without_mcp_servers: bool = typer.Option(
+        False,
+        "--without-mcp-servers",
+        help="Configure the cloud runtime's agent with none of its MCP servers (with --cloud and --prompt).",
+    ),
+    without_skills: list[str] | None = typer.Option(
+        None,
+        "--without-skill",
+        help="Leave this skill of the agent out, by id; repeat for each (with --cloud and --prompt).",
+    ),
     prompts: list[str] | None = typer.Option(
         None,
         "--prompt",
@@ -510,6 +537,12 @@ def main_callback(
             chat_args.extend(["--minutes", str(minutes)])
         if keep:
             chat_args.append("--keep")
+        # Declared here and handed on: an option the group does not know is
+        # read as the name of a command.
+        if without_mcp_servers:
+            chat_args.append("--without-mcp-servers")
+        for skill in without_skills or []:
+            chat_args.extend(["--without-skill", skill])
         for prompt in prompts or []:
             chat_args.extend(["--prompt", prompt])
         if harness:
@@ -563,6 +596,8 @@ def harnesses_command() -> None:
 app.add_typer(sandboxes_app)
 app.add_typer(console_app)
 app.add_typer(memory_app)
+app.add_typer(tool_approvals_app)
+app.add_typer(mcp_app)
 app.add_typer(envs_app)
 app.add_typer(evals_app)
 app.add_typer(pools_app)

agent_runtimes/access_log.py

@@ -0,0 +1,65 @@
+# Copyright (c) 2025-2026 Datalayer, Inc.
+# Distributed under the terms of the Modified BSD License.
+
+"""
+No token in the server's log.
+
+A browser cannot set a header on a websocket, so the page sends its token in
+the query string — ``/api/v1/configure/sandbox/ws?agent_id=…&token=eyJ…`` —
+and uvicorn logged that path whole, the user's JWT with it (r1, 8 November
+2026): in its access log for a request, in ``uvicorn.error`` for a websocket
+it accepted or refused. A filter on both loggers withholds the value of every
+credential in a query string before the line is written.
+"""
+
+from __future__ import annotations
+
+import logging
+import re
+from typing import Any
+
+#: A query parameter whose value is a credential.
+_QUERY_CREDENTIAL = re.compile(
+    r"([?&](?:token|access_token|id_token|api_key|apikey|key|jwt|auth|"
+    r"authorization|password|secret)=)[^&\s\"']+",
+    re.IGNORECASE,
+)
+
+WITHHELD = "[withheld]"
+
+#: The loggers uvicorn writes a request's path to.
+LOGGERS = ("uvicorn.access", "uvicorn.error", "uvicorn")
+
+
+def redact_query(text: str) -> str:
+    """``text`` with the value of each credential in a query string withheld."""
+    return _QUERY_CREDENTIAL.sub(lambda m: m.group(1) + WITHHELD, text)
+
+
+def _redacted(value: Any) -> Any:
+    if isinstance(value, str):
+        return redact_query(value)
+    if isinstance(value, tuple):
+        return tuple(_redacted(v) for v in value)
+    if isinstance(value, dict):
+        return {k: _redacted(v) for k, v in value.items()}
+    return value
+
+
+class QueryTokenFilter(logging.Filter):
+    """Withhold the credentials of a query string in a log record."""
+
+    def filter(self, record: logging.LogRecord) -> bool:
+        if isinstance(record.msg, str):
+            record.msg = redact_query(record.msg)
+        if record.args:
+            record.args = _redacted(record.args)
+        return True
+
+
+def install_access_log_redaction() -> None:
+    """Put the filter on uvicorn's loggers, once."""
+    for name in LOGGERS:
+        logger = logging.getLogger(name)
+        if not any(isinstance(f, QueryTokenFilter) for f in logger.filters):
+            logger.addFilter(QueryTokenFilter())