Marona Python SDK
Run Agents through one managed API, with structured output, local tools, Hub capabilities, streaming, realtime and A2A collaboration.
Install
Version 2.5.0. Package registry.
Python 3.10+.
python -m pip install --upgrade marona==2.5.0
Set MARONA_API_KEY in your backend environment. Never commit it, log it,
or embed a developer key in browser or mobile code. Use an exact accessible
marona/* model alias from Marona Platform.
Agent quickstart
Save as examples/agent_example.py. Run without arguments for text, or with a real
PNG/JPEG path for document extraction. Use stable application user IDs and a
distinct session ID for each conversation.
import asyncio
import base64
import os
import sys
from pathlib import Path
from marona import Agent, Marona, Runner
async def main():
async with Marona(
api_key=os.environ["MARONA_API_KEY"],
base_url=os.getenv("MARONA_RUNTIME_URL", "https://edge.marona.ai"),
) as marona:
agent = Agent(
name="Document Assistant",
model=os.getenv("MARONA_MODEL", "marona/qwen-qwen3.8-max-0902"),
instructions="Answer clearly and concisely.",
tool_choice="none",
)
user_input = "Reply with exactly OK."
if len(sys.argv) > 1:
path = Path(sys.argv[1])
mime = {".png": "image/png", ".jpg": "image/jpeg", ".jpeg": "image/jpeg"}[path.suffix.lower()]
data_url = f"data:{mime};base64," + base64.b64encode(path.read_bytes()).decode("ascii")
user_input = [{"role": "user", "content": [
{"type": "input_text", "text": "Describe this image and transcribe any visible text."},
{"type": "input_image", "image_url": data_url},
]}]
result = await Runner.run(
agent, user_input, user_id="example-user", session_id="example-session"
)
print(result.output)
if __name__ == "__main__":
asyncio.run(main())
python examples/agent_example.py
python examples/agent_example.py image.png
Encode actual file bytes with standard Base64. Image and file blocks accept
raw Base64 in image_data / file_data, or complete matching data URLs.
Do not encode a path, encode twice, or send placeholder data. Remote URLs must
be reachable by the runtime. PDF, audio and realtime support depend on the
selected model; render PDF pages to images when native PDF is unavailable.
Structured output through Agent
The following fragment uses the authenticated client from the quickstart.
document_input is your text or document message input.
from pydantic import BaseModel, ConfigDict
from marona import Agent, Runner
class Extraction(BaseModel):
model_config = ConfigDict(extra="forbid")
text: str
agent = Agent(
name="Document Reader",
model="marona/qwen-qwen3.8-max-0902",
instructions="Extract the document text.",
output_type=Extraction,
output_schema_strict=True,
)
result = await Runner.run(agent, document_input, user_id="user-123")
print(result.output.text)
The explicit strict option asks the provider to enforce the supplied schema; the SDK also validates the final result before returning it. Strict mode requires a compatible model and schema. Declare every object property as required, use nullable values for optional fields, and set additionalProperties to false. Unsupported model capabilities or invalid output produce errors; they do not silently fall back to unstructured text. Input schemas, function tool schemas, guardrails, dynamic instructions and lifecycle hooks are also supported.
Apps and user connections
page = await marona.apps.list_async(user_id="user-123", limit=20)
action = await marona.apps.connect_async("calendar", user_id="user-123")
# Complete any returned authorization_url before calling protected tools.
await marona.apps.disconnect_async("calendar")
Listing an App does not authorize its protected operations. Follow the returned
connection action for the end user. Use hub.connect to expose a scoped set of
App or Skill capabilities to an Agent; Apps authorization and Hub tool discovery
are separate operations.
A2A collaboration and serving
import os
from marona import A2APeer, A2AServer, Agent
peer = A2APeer(name="reviewer", url="https://reviewer.example.com")
coordinator = Agent(name="Coordinator", peers=[peer])
server = A2AServer(
agent=coordinator,
url="https://coordinator.example.com",
skills=[{"id": "review", "name": "Review", "description": "Review a document"}],
)
# Apply production authentication and TLS at your service boundary.
server.run(host="127.0.0.1", port=8100)
Peers support Agent Card discovery, REST/JSON-RPC messages, task retrieval, cancellation, continuation and streamed task events. Servers persist task state. Use explicit credentials, restricted skills, HTTPS, and an appropriate durable task directory for production. Local JSON stores are for a single service instance; multi-instance deployments require coordinated task storage.
Push notifications are not implemented.
Brain2Agent (B2A)
Native B2A v0.1 exchanges decoded semantic intent and agent responses. The
independent neural service owns signal decoding and feedback encoding, with
vendor-hosted MCP, HTTP or local plugin backends. Models and device drivers
are supplied by the interface provider. Configure Agent.protocols and connect with
Runner.connect, following the persistent realtime session lifecycle. These examples
read one captured signal file using your configured provider.
One configured protocol is selected automatically. With several configured protocols,
select by name (protocol="b2a" in Python, the corresponding option/overload in
other SDKs). Duplicate names and ambiguous selection are rejected. Implement
AgentProtocol to add another protocol without adding Agent properties. Existing
A2A peers and servers retain their agent-to-agent role; they are not automatically
converted into input protocols. Agent.b2a and B2ARunner remain compatibility APIs.
Save as examples/b2a_intent.py:
"""Run a captured signal through an independent provider and an Agent-bound B2A session."""
import asyncio
import json
import os
import sys
from pathlib import Path
from marona import Agent, B2A, B2ACodec, Runner, Marona
INSTRUCTIONS = """Interpret the decoded intent using its context.
Preserve uncertainty and ask for clarification when needed.
Use connected tools under Marona's permissions and confirmation requirements.
"""
async def main():
signal = json.loads(Path(sys.argv[1]).read_text())
neural_service = B2ACodec(
os.environ["B2A_CODEC_URL"],
token=os.environ["B2A_NEURAL_TOKEN"],
transport=os.environ.get("B2A_CODEC_TRANSPORT", "mcp"),
)
async with Marona() as client:
agent = Agent(
name="B2A Intent Agent",
model=os.environ.get("MARONA_MODEL", "marona/auto"),
instructions=INSTRUCTIONS,
tools=client.hub.connect(),
protocols=[B2A(
provider=neural_service, output_profile=os.environ["B2A_OUTPUT_PROFILE"]
)],
)
async with await Runner.connect(
agent,
user_id=os.environ["B2A_USER_ID"],
session_id=os.environ["B2A_SESSION_ID"],
) as session:
await session.send_signal(signal)
async for event in session:
print(event)
if event.type in {"feedback", "signal.status", "error"}:
break # This file sends one captured window; keep open for continuous input.
if __name__ == "__main__":
asyncio.run(main())
Single run with structured output
Save as examples/b2a_structured.py. This opens a connection, decodes the signal, runs
the agent, validates the response, encodes feedback, and closes the connection.
"""Run a captured signal through an independent provider and an Agent-bound B2A session."""
import asyncio
import json
import os
import sys
from pathlib import Path
from pydantic import BaseModel, ConfigDict
from marona import Agent, B2A, B2ACodec, Runner, Marona
class NeuralResponse(BaseModel):
model_config = ConfigDict(extra="forbid")
text: str
INSTRUCTIONS = """Interpret the decoded intent using its context.
Preserve uncertainty and ask for clarification when needed.
Use connected tools under Marona's permissions and confirmation requirements.
"""
async def main():
signal = json.loads(Path(sys.argv[1]).read_text())
neural_service = B2ACodec(
os.environ["B2A_CODEC_URL"],
token=os.environ["B2A_NEURAL_TOKEN"],
transport=os.environ.get("B2A_CODEC_TRANSPORT", "mcp"),
)
async with Marona() as client:
agent = Agent(
name="B2A Intent Agent",
model=os.environ.get("MARONA_MODEL", "marona/qwen-qwen3.8-max-0902"),
instructions=INSTRUCTIONS,
output_type=NeuralResponse,
output_schema_strict=True,
tools=client.hub.connect(),
protocols=[B2A(
provider=neural_service, output_profile=os.environ["B2A_OUTPUT_PROFILE"]
)],
)
result = await Runner.run(
agent, signal,
user_id=os.environ["B2A_USER_ID"],
session_id=os.environ["B2A_SESSION_ID"],
)
print(result.output.text)
if __name__ == "__main__":
asyncio.run(main())
Python returns the declared Pydantic model in result.output. Other SDKs validate
the declared JSON schema and expose their language's structured output representation.
Invalid output is rejected before encoding. Decoder abstention, required approval,
or failure does not become a successful typed result; use a persistent connection
for interactive clarification, approvals, and feedback delivery acknowledgments.
The SDK manages protocol messages, sequencing, event cursors, decoding and encoding.
Set B2A_CODEC_URL, B2A_NEURAL_TOKEN, B2A_OUTPUT_PROFILE, B2A_USER_ID and
B2A_SESSION_ID. Use B2A_CODEC_TRANSPORT=mcp or http. session_id identifies
an application conversation; each connection gets a separate native transport
session. The application authorizes processing before connecting; device and
protocol scope fields are supplied internally. Closing revokes those scopes.
Keep the session open to send more signals. Feedback events contain encoded
output; printing them does not deliver feedback. An interface driver acknowledges
presentation only after delivery. Failed or uncertain sends are never replayed
automatically. Native B2A supports server-hosted Hub tools and agent graphs;
SDK-local functions, callbacks and peer callbacks require server-hosted equivalents.
B2A connections automatically negotiate HTTP SSE with current runtimes. Sending a
signal returns when accepted; agent.delta events carry provisional text during
generation, followed by validated, encoded feedback. Keep consuming the session
stream for subsequent turns. The SDK handles transport and sequencing; no background
task or polling loop is required in application code. Heartbeats keep an active
stream alive without imposing a generation-wide timeout. Runner.run collects the
completed result and retains its configured run limit. Older runtimes fall back to
HTTP JSON and retained cursor events; the connection's streaming flag reports
whether live deltas are available.
See the repository's docs/b2a-protocol.md for the complete wire contract.
Neural provider connection options
B2ACodec supports optional overrides for provider tool names and HTTP paths.
Omit them when your provider uses the SDK defaults.
| Configuration | Applies to | SDK defaults |
|---|---|---|
decode_tool, encode_tool |
MCP tool names | decode, encode |
decode_path, encode_path |
HTTP endpoint paths | /v1/decode, /v1/encode |
For MCP, configure the provider's complete MCP endpoint URL and select the MCP transport. Tool names identify the provider's tools; HTTP path overrides do not affect MCP calls. These illustrative names must match your provider.
neural_service = B2ACodec(
codec_url,
token=codec_token,
transport="mcp",
decode_tool="neural_decode",
encode_tool="neural_encode",
)
For HTTP, configure the provider base URL. Paths start with / and are appended
to that URL after removing its trailing slash. For example,
https://neural.example/api plus /neural/decode calls
https://neural.example/api/neural/decode. MCP tool names do not affect HTTP calls.
neural_service = B2ACodec(
service_url,
token=codec_token,
transport="http",
decode_path="/neural/decode",
encode_path="/neural/encode",
)
The SDK defaults to HTTP when transport is omitted; the B2A quickstarts above
explicitly select MCP. Pass the resulting service as the B2A provider in the same
Agent.protocols configuration. These options change routing only: request and
response schemas still follow the B2A provider contract. Implement B2AProvider
when a vendor needs payload translation. These are neural-service routes, separate
from Marona's /runtime/b2a/... endpoints.
Execution and errors
Use Runner.stream for streamed Agent events and
RealtimeRunner for a live session. Delegation and handoffs use explicit Agent
graphs. Set execution limits and validate permissions before tools with side
effects; cancellation cannot roll back an operation that has already executed.
Inspect the canonical error code, HTTP status, request ID and retry metadata. Correct invalid input and authorization errors before retrying. Use bounded retries for transient failures. Never include credentials or document content in error reports.
See Platform documentation for language
specific examples and migration guidance. These files are generated from
docs/client-sdk-guides.json; verify them with
python scripts/sync_client_sdk_docs.py --check.
Communication protocols are configured through protocols; Runner.connect opens persistent connections and Runner.run completes a single input. The 2.3 B2A entry points remain compatible.
Metadata
Release files for marona 2.5.0
For a detailed explanation of source distributions (sdists) and built distributions (wheels), please see the package formats documentation.
Source distribution (sdist)
| File | Size | Uploaded | Provenance | Actions |
|---|---|---|---|---|
| marona-2.5.0.tar.gz | 119.0 kB | With provenance | Details for marona-2.5.0.tar.gz |
Built distribution (wheel)
| File | Interpreter | ABI | Platform | Actions Reset |
|---|---|---|---|---|
| marona-2.5.0-py3-none-any.whl | Python 3 | none | any | Details for marona-2.5.0-py3-none-any.whl |
Total release size: 213.2 kB
Release files / marona-2.5.0.tar.gz
| Download URL | marona-2.5.0.tar.gz |
|---|---|
| Size | 119.0 kB |
| Tags | Source |
|
SHA-256 checksum How to use checksums |
780312594d5af55876bdbba6a005473c9d69b53fcfead68690917be887174f65
|
|
BLAKE2b-256 checksum How to use checksums |
c017281c0429db1231d87b2871fc5ec5021d468c6d21fb5801cfffec562b4370
|
| Upload date | |
|
Uploaded using Trusted Publishing? What is trusted publishing? |
Yes |
| Uploaded via |
twine/7.0.0 CPython/3.13.16
|
Provenance
Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.
PyPI Publish Attestation
PyPI verified that this artifact, at this checksum, originated from the publisher listed below.
Signed by GitHub Actions, verified by PyPI on Nov 12, 2026.
Transparency logRelease files / marona-2.5.0-py3-none-any.whl
| Download URL | marona-2.5.0-py3-none-any.whl |
|---|---|
| Size | 94.2 kB |
| Tags | Python 3 |
|
SHA-256 checksum How to use checksums |
d3a38f3e1fb3d40baf428a1412510d897027f5b7aeae26cb943e321144237e11
|
|
BLAKE2b-256 checksum How to use checksums |
7bf406317505b68a0e97990b99dd957d1e2e0eaf1740ce48ec3c6000ddc8a641
|
| Upload date | |
|
Uploaded using Trusted Publishing? What is trusted publishing? |
Yes |
| Uploaded via |
twine/7.0.0 CPython/3.13.16
|
Provenance
Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.
PyPI Publish Attestation
PyPI verified that this artifact, at this checksum, originated from the publisher listed below.
Signed by GitHub Actions, verified by PyPI on Nov 12, 2026.
Transparency logSecurity for marona 2.5.0
Provenance
Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.
Full provenance
Both files in this release have been uploaded with provenance metadata.
Attestation for marona-2.5.0.tar.gz
PyPI Publish Attestation
PyPI verified that this artifact, at this checksum, originated from the publisher listed below.
Signed by GitHub Actions, verified by PyPI on Nov 12, 2026.
Transparency logA note on package security
PyPI is a repository for distributing packages, not a service for auditing them. While third-party security researchers and our staff do their best to detect and remove malicious packages, PyPI cannot guarantee the quality, security or suitability of any given package.
To learn more about protecting yourself from malicious actors, visit our package security documentation.