Merge pull request #1 from kurikomi-labs/release-0.2.0

Release 0.2.0 — Phase 7 (Sybil binding, queue, forget) + CI

Author: rainxchzed

.github/workflows/ci.yml

@@ -0,0 +1,75 @@
+name: CI
+
+# Run the test suite + a packaging check on every push to main and every PR.
+# This is the safety net for a public repo: nothing regresses silently, and the
+# branch ruleset can require the `test` check before a merge.
+
+on:
+  push:
+    branches: [main]
+  pull_request:
+
+permissions:
+  contents: read
+
+concurrency:
+  # cancel superseded runs on the same ref so a rapid push doesn't queue duplicates
+  group: ci-${{ github.ref }}
+  cancel-in-progress: true
+
+jobs:
+  test:
+    name: test (py${{ matrix.python-version }})
+    runs-on: ubuntu-latest
+    strategy:
+      fail-fast: false
+      matrix:
+        # match pyproject's supported range
+        python-version: ["3.10", "3.11", "3.12", "3.13"]
+    steps:
+      - uses: actions/checkout@v4
+
+      - uses: actions/setup-python@v5
+        with:
+          python-version: ${{ matrix.python-version }}
+
+      - name: Install (editable + dev + crypto + smart extras)
+        run: |
+          python -m pip install --upgrade pip
+          # Install the optional extras so the signed-pool tests (pynacl), real-hash
+          # tests (blake3), and semantic tests (sentence-transformers) run as written.
+          # NOTE: this means CI does NOT currently exercise the zero-dependency
+          # graceful-degradation paths (blake2b/unsigned/keyword) — several tests
+          # assume the optional deps are present rather than skipif-guarding their
+          # absence. Adding a second minimal-install matrix leg to cover the
+          # degradation paths is a tracked follow-up (see docs/03-roadmap.md).
+          pip install -e ".[dev,crypto,smart]"
+
+      - name: Run tests
+        run: python -m pytest -q
+
+  package:
+    name: build + twine check
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+      - uses: actions/setup-python@v5
+        with:
+          python-version: "3.12"
+      - name: Build sdist + wheel and validate metadata
+        run: |
+          python -m pip install --upgrade pip build twine
+          python -m build
+          python -m twine check dist/*
+      - name: Verify the runtime prompt ships in the wheel
+        # guards the packaging bug class we nearly shipped: komi/engine/prompts/distill.md
+        # is loaded at runtime, so it MUST be inside the wheel or pip installs can't distill.
+        run: |
+          python - <<'PY'
+          import glob, zipfile, sys
+          whl = glob.glob("dist/*.whl")[0]
+          names = zipfile.ZipFile(whl).namelist()
+          assert any(n.endswith("engine/prompts/distill.md") for n in names), \
+              "distill.md missing from wheel — pip-installed distillation would break"
+          print("ok: distill.md present in", whl)
+          PY

docs/03-roadmap.md

@@ -63,6 +63,11 @@
   removal-PR path.
 - 🔜 Plugin-marketplace distribution; docs site. *(external polish.)*
 - 🔜 GitHub branch protection on both repos (UI; require the "Verify learnings" check).
+- 🔜 CI: add a minimal-install matrix leg (no optional extras) to actually exercise
+  the zero-dependency degradation paths (blake2b/unsigned/keyword). The current CI
+  installs `[dev,crypto,smart]` so several signing/embedding tests run as written;
+  proving the dep-absent paths needs either skipif-guards or a second install
+  profile. (The engine *is* zero-dep; this is a test-coverage gap, not a code gap.)
 
 ## Known gaps / honest notes
 - Recall ranking is semantic (embeddings) when the model is installed, keyword FTS otherwise; both feed the same blend + a corroboration bonus.

pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "setuptools.build_meta"
 
 [project]
 name = "komi-learn"
-version = "0.1.0"
+version = "0.2.0"
 description = "A continuous, zero-friction learning layer for AI agents — learns about you and improves its own skills across every session, with an anonymized, provenance-verified global knowledge pool."
 readme = "README.md"
 requires-python = ">=3.10"

tests/test_installer.py

@@ -25,11 +25,26 @@ def home(tmp_path, monkeypatch):
 
 @pytest.fixture
 def working_model(monkeypatch):
-    """Mock verify_model() to a verified pass, so install proceeds past the gate."""
-    ok = reqmod.Requirement("model", True, True, "mock model verified")
-    monkeypatch.setattr(reqmod, "verify_model", lambda **kw: ok)
-    # doctor and setup import verify_model from this module at call time
-    return ok
+    """Make install proceed past the strict gate, regardless of what's installed on
+    the test runner. We mock BOTH verify_model() AND collect(): a bare CI runner has
+    no `claude` CLI (a REQUIRED check), so mocking only the model still leaves the
+    gate tripped and every post-gate test fails (this is what CI caught). Mocking
+    collect() to return all-passing required reqs makes these tests hermetic — they
+    exercise post-gate install behavior, not the host's environment."""
+    ok_model = reqmod.Requirement("model", True, True, "mock model verified")
+    monkeypatch.setattr(reqmod, "verify_model", lambda **kw: ok_model)
+
+    def _all_pass(*, api_key=None, pool=False):
+        return [
+            reqmod.Requirement("python", True, True, "mock python ok"),
+            reqmod.Requirement("claude-cli", True, True, "mock claude CLI ok"),
+            ok_model,
+            reqmod.Requirement("git", True, False, "mock git ok"),
+            reqmod.Requirement("signing", True, False, "mock signing ok"),
+        ]
+    monkeypatch.setattr(reqmod, "collect", _all_pass)
+    # setup.py imports these names from reqmod at call time, so patching reqmod is enough
+    return ok_model
 
 
 def _settings(home):
@@ -83,11 +98,16 @@ def test_install_creates_hooks_and_config(home, working_model):
 
 
 def test_install_uses_absolute_python_path(home, working_model):
+    import os
     setup.install()
     s = _settings(home)
     cmd = next(h["command"] for e in s["hooks"]["SessionStart"] for h in e["hooks"]
                if "komi.adapters" in h["command"])
-    assert cmd.split()[0] not in ("python", "python3", '"python"')
+    # the contract is an ABSOLUTE interpreter path (so the hook can't break on a
+    # PATH mismatch), not merely "not the literal string python". Strip surrounding
+    # quotes the command may add for paths-with-spaces, then require absoluteness.
+    interp = cmd.split(" -m ")[0].strip().strip('"')
+    assert os.path.isabs(interp), f"hook interpreter not absolute: {interp!r}"
 
 
 def test_install_merges_not_clobbers(home, working_model):
@@ -122,7 +142,10 @@ def test_install_self_heals_stale_hook_command(home, working_model):
     cmds = [h["command"] for e in s["hooks"]["SessionStart"] for h in e["hooks"]
             if "komi.adapters" in h["command"]]
     assert len(cmds) == 1
-    assert cmds[0].split()[0] not in ("python", "python3")
+    # the stale bare-`python` command must have been upgraded to an absolute path
+    import os
+    interp = cmds[0].split(" -m ")[0].strip().strip('"')
+    assert os.path.isabs(interp), f"stale command not healed to absolute path: {interp!r}"
 
 
 def test_install_stores_api_key(home, working_model):