okto-pulse-core
Domain and application engine for Okto Pulse, with transport-neutral ports, contracts and MCP commands.
Ship with AI. Stay in control.
You probably want to install
okto-pulseinstead. This package is the internal engine. Theokto-pulsepackage provides the CLI, frontend, and everything you need to get started.
What's inside
- 0 SQLAlchemy models — Core owns no concrete relational mappings. This is checked by scanning for
__tablename__assignments anywhere undercore/; the Community edition owns the SQLAlchemy model and repository adapters. - 54 service classes — Full business logic with governance rules, board agent governance, resource propagation + lineage, bug-regression workflow, archive/restore, traceability and board-level resource readiness. Source: classes ending in
Serviceundercore/services. - 0 API route modules — Core owns application contracts and use cases, not concrete FastAPI routers. The count scans
core/api/*.py; Community owns the REST adapter and route modules. - Governance gates — Resource readiness, resource-to-task coverage, spec coverage, validation, evaluation, task completion, cognitive closeout, architecture-findings, evidence and bug traceability controls.
- 282 MCP tools — Complete Model Context Protocol command catalog for AI agent integration, counted from the transport-neutral Core catalog after importing the server, including:
- Pipeline CRUD (Ideation, Refinement, Spec, Card)
- Q&A and choice questions across every entity
- Mockups (HTML+Tailwind, sanitised) and Knowledge Bases at spec/refinement/card scope
- Decisions with supersedence and coverage gates
- Per-card Knowledge attachment lifecycle (
add_card_knowledgeand friends) - 32 Knowledge Graph tools: logical queries, cognitive consolidation, public schema, bounded Health and governed deletion status. Maintenance and recovery controls are internal.
- Community runtime exposure: 282 core MCP tools, 0 community-only MCP tools
- Application composition contracts — edition-neutral runtime, auth, storage, persistence, graph, telemetry and transport ports; concrete app construction belongs to the edition
- Hexagonal backend ports — runtime, telemetry, repository/UoW and KG provider seams, plus the adapter readiness ledger, documented in
ARCHITECTURE.md - Knowledge Graph contracts and orchestration — graph schema vocabulary, query/consolidation semantics, deterministic + cognitive workers, 11 node types and 16 relationship types. Source:
len(KGEdgeType)incore/kg/schemas.py; Community supplies the concrete Okto Grafx Board and Global runtimes through public ports. - Bounded operational metric samples — governance, architecture, bug-regression, resource-lineage and global-discovery observability keep capped diagnostic samples. Global-discovery count APIs remain monotonic totals and do not derive totals from the retained sample ring.
Governance Gate Surface
See Cognitive Action Center sections for its read-only attention/history grouping and unchanged completion authority.
Project Structure agent protocol: Spec authors/evaluators must either author a relevant tree or explicitly persist a justified non-applicability statement in the Spec context before advancing. This is an agent-review obligation, not an additional server gate. See the canonical protocol and tested examples.
The main governance families are:
| Gate family | Gates |
|---|---|
| Resource readiness | Resource readiness; resource-to-task coverage |
| Spec coverage | Scenario/test coverage; functional requirement/business rule coverage; technical requirement/task coverage; API contract/task coverage; active decision/task coverage |
| Validation and evaluation | Spec validation; spec qualitative evaluation; task validation |
| Execution quality | Task start/spec readiness; task conclusion; cognitive closeout; architecture-findings done; test evidence; bug test-first/traceability |
| Delivery and verification | Current implementation/test obligations, architecture classification and method-specific evidence admission |
The two execution-quality additions introduced in 0.2.3 — cognitive closeout (a done transition is blocked while active cognitive-consolidation items remain) and the architecture-findings done gate (active architecture warnings block spec/card done) — remain enforced in the current release.
Architecture
The core is a ports-and-policy package: it owns the SDLC domain, the governance gates and the Knowledge Graph contracts, and delegates every concrete mechanism (database, graph runtime, filesystem, HTTP, scheduler) to the active edition.
→ Architecture overview — layering, boundary governance (AF-20/21/22, AF-28/29/30/31), MCP composition helpers and the edition-ownership rules. → ARCHITECTURE.md — the deep hexagonal reference (ports, adapter readiness ledger, provider registry). → Relational ownership matrix — the executable AF-35 Core/edition ownership boundary and residual inventory.
Ports & Adapter Interfaces
See also Optional graph observation ports for ranked retrieval, retained history/diff and bounded analytics without an engine dependency in Core.
Core defines ~100 Protocol contracts across 78 modules in okto_pulse/core/ports/ plus
30 Knowledge-Graph interfaces in okto_pulse/core/kg/interfaces/. Each one is a seam: core
declares what it needs; it never constructs a database, opens a file, resolves an environment
variable or speaks a wire protocol.
Unfilled slots fail closed (R-P2-03A-D) rather than falling back to a silent default.
→ Full port catalogue — every protocol with its method count and contract, grouped by persistence, KG storage/runtime, KG governance, delivery/workers, MCP/inbound, read models and telemetry.
Docker
This repo has no Dockerfile. The deployable artifact is a single image built from the sibling okto-pulse repo:
okto-pulse/Dockerfiletargetlocal-runtimebuilds wheels from this repo andokto-pulse/as siblings (used byokto-pulse/docker-compose.ymland the release pipeline's smoke build).okto-pulse/Dockerfiletargetpypi-runtimeinstallsokto-pulse==<version>from PyPI, which transitively pulls this package off PyPI per the floor inokto-pulse/pyproject.toml(used byokto-pulse/docker-compose.prod.yml).
To run the published image:
docker run -d --name okto-pulse \
-e HOST=0.0.0.0 -e MCP_HOST=0.0.0.0 \
-p 8100:8100 -p 8101:8101 \
-v okto-pulse-data:/data \
ghcr.io/oktolabsai/okto-pulse:latest
See okto-pulse/README.md for the full Docker quickstart, and okto-pulse/CLAUDE.md for the multi-stage build architecture.
Release Notes
Current: 0.3.3 — Core defines actionable semantic evidence, agent-mediated Code Traceability, governed lifecycle validation, exact KG recovery, canonical delivery Analytics, immutable Sprint commitment and dependency-aware lineage as edition-neutral contracts.
→ Full release notes — 0.3.3, 0.3.2, 0.3.1 and 0.3.0 changesets, plus 0.2.6, 0.2.5, 0.2.3, 0.2.2, 0.2.1, 0.2.0 and the 0.1.x line.
SaaS Closure Audit
The executable ownership matrix is generated by okto-pulse-saas-closure. Every transitional budget must remain zero; the command fails closed on import, dependency, adapter, wheel, or documentation drift.
| Surface | Core contract | Community/local adapter | SaaS swap target | Executable gates |
|---|---|---|---|---|
| Relational runtime | repository/UoW and schema lifecycle ports; no ad-hoc dialect or engine/session factory bypass | SQLite/SQLAlchemy adapters in community.adapters.sqlalchemy_* and relational_schema_lifecycle | SQLite -> Aurora/Postgres | run_relational_residue_gate, audit_dependency_conformance, audit_community_core_import_boundary |
| KG graph runtime | KG interfaces, policies and adapter-neutral schema compatibility helpers | edition-owned graph adapters behind Community routed composition | edition graph adapters -> remote graph provider | audit_dependency_conformance, ImportBoundaryGate, audit_community_core_import_boundary |
| Durable files and artifacts | StorageProvider, RebuildAuditArtifactStore and CognitivePendingWorkProvider contracts | filesystem storage, upload_dir, rebuild audit storage and cognitive-pending providers | filesystem -> S3 | run_rebuild_audit_storage_gate, run_core_settings_defaults_gate, run_public_config_stability_gate |
| Telemetry effects | TelemetryPort contracts, event schema and privacy policy | local JSONL store, state files, beacon sender and product telemetry adapters | local telemetry files/API -> AWS telemetry API | run_telemetry_store_ownership_gate, run_telemetry_sender_ownership_gate, run_telemetry_product_ownership_gate |
| Scheduler/runtime effects | JobSpec, SchedulerControl and KG daily tick policy | APScheduler-backed SingletonSchedulerControl | APScheduler local runtime -> runtime scheduler adapter | SchedulerControlSymbolGate, scheduler_signal_conformance |
| MCP resources and versions | MCP instruction/resource/version provider ports and stable public catalog | Community resource catalog, capability descriptors and package version wiring | local catalog/version reads -> deployment provider | run_public_config_stability_gate, register_instruction_provider, register_package_version_provider |
| F16 executable surface | Owner | Observed | Terminal target |
|---|---|---|---|
| Core import rows | Core | 7869 | classified |
| Community-to-Core import rows | Community | 1155 | classified |
| Direct dependency rows | Distribution owner | 25 | classified |
import_boundary_baseline budget |
675c43ee-7d91-4cc3-8f87-44eeb293f90c |
0 | 0 |
singleton_baseline budget |
675c43ee-7d91-4cc3-8f87-44eeb293f90c |
0 | 0 |
dependency_temporary_exceptions budget |
675c43ee-7d91-4cc3-8f87-44eeb293f90c |
0 | 0 |
graph_runtime_compatibility budget |
675c43ee-7d91-4cc3-8f87-44eeb293f90c |
0 | 0 |
rebuild_artifact_compatibility budget |
675c43ee-7d91-4cc3-8f87-44eeb293f90c |
0 | 0 |
community_private_reach_ins budget |
675c43ee-7d91-4cc3-8f87-44eeb293f90c |
0 | 0 |
community_adapter_bridges budget |
675c43ee-7d91-4cc3-8f87-44eeb293f90c |
0 | 0 |
af35_relational_residue budget |
675c43ee-7d91-4cc3-8f87-44eeb293f90c |
0 | 0 |
License
Elastic License 2.0 — free for personal and commercial use. Cannot be offered as a hosted/managed service.
Glossary
Implementation and integration tracking: Delivery Evidence — tasks, test cards and Spec closure. Includes the provider-neutral completion gate, REST/MCP contracts, agent guidance and paired Community persistence/UI. Not installed into the active user runtime.
For plain-language definitions of recurring domain and architecture terms used in this repository, see the Glossary.
Metadata
Release files for okto-pulse-core 0.4.1
For a detailed explanation of source distributions (sdists) and built distributions (wheels), please see the package formats documentation.
Source distribution (sdist)
| File | Size | Uploaded | Provenance | Actions |
|---|---|---|---|---|
| okto_pulse_core-0.4.1.tar.gz | 22.6 MB | Without provenance | Details for okto_pulse_core-0.4.1.tar.gz |
Built distribution (wheel)
| File | Interpreter | ABI | Platform | Actions Reset |
|---|---|---|---|---|
| okto_pulse_core-0.4.1-py3-none-any.whl | Python 3 | none | any | Details for okto_pulse_core-0.4.1-py3-none-any.whl |
Total release size: 26.3 MB
Release files / okto_pulse_core-0.4.1.tar.gz
| Download URL | okto_pulse_core-0.4.1.tar.gz |
|---|---|
| Size | 22.6 MB |
| Tags | Source |
|
SHA-256 checksum How to use checksums |
0fd6f1b041fb9ecc2afcbd3cbb970e8cac078e0c4a33e70861dbebbad0caf079
|
|
BLAKE2b-256 checksum How to use checksums |
01707449003e101158ca90cf640d6b2375150ce9cf8cdd3459635688d15d33e5
|
| Upload date | |
|
Uploaded using Trusted Publishing? What is trusted publishing? |
No |
| Uploaded via |
twine/7.0.0 CPython/3.14.3
|
Release files / okto_pulse_core-0.4.1-py3-none-any.whl
| Download URL | okto_pulse_core-0.4.1-py3-none-any.whl |
|---|---|
| Size | 3.7 MB |
| Tags | Python 3 |
|
SHA-256 checksum How to use checksums |
309d8a94d6ac7ada567ed8e374ab43279572673a95080a7771790cad50731f44
|
|
BLAKE2b-256 checksum How to use checksums |
dd27d7b2b9eb41968377dfb8e375ca660f918e1eb6179698dfd182eabae1b07e
|
| Upload date | |
|
Uploaded using Trusted Publishing? What is trusted publishing? |
No |
| Uploaded via |
twine/7.0.0 CPython/3.14.3
|
Security for okto-pulse-core 0.4.1
Provenance
Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.
No provenance found
None of the files in this release were uploaded with provenance metadata.
A note on package security
PyPI is a repository for distributing packages, not a service for auditing them. While third-party security researchers and our staff do their best to detect and remove malicious packages, PyPI cannot guarantee the quality, security or suitability of any given package.
To learn more about protecting yourself from malicious actors, visit our package security documentation.