onepipeline
Execute a task DAG over oneagentgraph
and onevcs, merging their event
streams into one.
onepipeline is the composition layer. It owns the plan — a dependency graph
mixing direct agent nodes, repository lifecycle nodes, and explicit human actions
— executes it continuously, dispatching each node the moment its dependencies
settle, through a pluggable executor seam, and keeps a live channel open to
the planner supervising the run. The
agents come from oneagentgraph; the clones, worktrees, gates, and change
requests come from onevcs. Dependency direction is one-way: neither sibling
depends on this crate.
The public types, traits, config schemas, and CLI surface are the approved
contract in docs/contract.md, compiled — and implemented
behind it. onevcs is linked and called: sessions, publication, and a
session's event stream are library calls, so what a publication did is a typed
value rather than a line of prose to parse. oneagentgraph is still run as a
CLI, so a build of it that refuses will make the dispatches this crate starts
refuse too; the composition layer itself is complete.
Install
pip install onepipeline-cli # prebuilt binary, no Rust toolchain
npm install -g onepipeline-cli # the same binary, via npm
cargo install onepipeline # from crates.io, compiled locally
To install a revision that has not been released yet — which today is every revision, since the crate depends on its siblings by git and a git dependency cannot be published — build it from the repository:
cargo install --git https://github.com/nickderobertis/onepipeline onepipeline --locked
The package name is not optional: cargo install --git searches the whole
repository, and this one also carries the onepipeline-testfakes test harness,
so an unqualified command fails with multiple packages with binaries found.
Prebuilt archives for Linux (x86-64, arm64), macOS (Intel, Apple silicon), and
Windows (x86-64) are attached to every release, with sha256 checksums.
What it does
onepipeline start plan.json --heartbeat-interval 1800
start drives the run itself: a node — and each step within a lifecycle
node — dispatches the moment its dependencies settle, and settlement triggers
integration and publication immediately. No agent is required. The only pauses
are decision points: a ready kind: human node, or any surface declared
blocking, holds back the subtree that depends on it while every other branch
carries on, and clearing it with attest or reply resumes that subtree inside
the running loop.
--dag-graph REF attaches an agent graph as an observer — the shipped one is
a monitor member that watches the stream and raises what does not line up, plus
a resettable-cron check-in member that surfaces a status when nobody has
reported one for a while. It never drives the engine. Attached, start returns
when the run settles; exit 3 means nothing is driving the run, and
onepipeline adopt RUN attaches a fresh driver to the intact ledger.
A lifecycle node states the title its change request opens under, and may state
its body too. --pr-author-graph REF names an agent graph that drafts that body
instead, from the branch's own diff, once the branch is verified and before the
change request is opened; naming none is the default, and a drafting dispatch that
does not get there costs the change request its body and nothing else. It costs no
visibility either: a drafting dispatch that was configured, attempted, and produced
no body is recorded against the node under one of three endings — dispatch-failed
for one that could not be run or ran without succeeding, schema-refused for one
whose every answer the schema rejected, and no-body for one that answered inside
the schema and put nothing in it, which are three different fixes — and the node's
own settlement says the same thing, so results shows it. Naming no graph and
writing the body yourself spend no dispatch and are not reported.
A publication that fails does not always finish the node. onevcs says which
failure it was, and four of them settle under a word of their own — checks-failed
for a required check the host reports concluded red, checks-unsettled for a bound
that elapsed with the change still outstanding, push-rejected for a push the merge
path refused, and sync-conflict for a base that moved under the publication. Each
of the four leaves the rejected tree on the branch the session handed back, so the
node is dispatched again on that branch, with no step recorded as completed and
with the failure's reason and the id of every artifact its publication recorded
delivered as that dispatch's own context — the worker meets the diagnosis, on the
tree that has to change. Everything else settles publication-failed as it always
did and is not retried: the repository's own gate, a request refused at a trust
boundary, and a seam with no implementation behind it all answer the same way
however many times they are asked. The loop is bounded by
ONEPIPELINE_PUBLICATION_ATTEMPTS, three by default, and a node that spends it
settles failed under the last failure's word, saying how many attempts were made
and what each one ended with.
The planner supervises over the channel:
onepipeline next run-1 # read the next surface
onepipeline reply run-1 <<<'{"version":1,"commands":[ # edit the live graph
{"op":"retry","id":"failed","node":{"id":"retry","task":"..."}}]}'
onepipeline attest run-1 design-approval # complete a human action
Every edit is applied or rejected with a reason: reply exits 0 when the
reconciler applied it, 1 when it is queued but not yet reconciled, and 2 when
it was refused.
Read-only views — runs, status, host, monitor, results, goals,
transcript, telemetry — report unread surfaces, driver liveness, and
provider health without touching a run. status says what each in-flight node
is doing right now, with an event count and an age; transcript RUN [NODE]
renders a dispatched turn's tools and its words; telemetry reports what each
party spent and where the wall clock went, in eight buckets that sum exactly.
Anything nothing in the stack measures is reported absent, never as a zero.
Where a dispatch runs
The executor seam decides. v1 ships the local executor only; the trait and the rules grammar are shaped so a dispatch-server or Kubernetes executor is a config change rather than a code change.
executors:
- {name: local, type: local, max_load1: 8.0, min_free_mem: 2GiB}
rules:
- when: {executor_has_capacity: local}
use: local
- use: local
Ordered: the first rule whose when holds decides, and a rule with no when is
the fallback. A when tests an executor's capacity, the node's own labels
(when: {node_label: {persona: reviewer}}), or both — several conditions in one
when all have to hold.
Development
just bootstrap # from a clean clone
just check # the deterministic gate
just gate # check + the diff-scoped llmlint tier
just --list is the full command surface.
docs/contract-divergences.md records every place
the code could not compile the contract exactly as written, and what the planner
who owns the contract ruled on each.
License
MIT.
1 maintainer
Download files
Download the file for your platform. If you're not sure which to choose, learn more about installing packages.
Source Distributions
Built Distributions
Filter files by name, interpreter, ABI, and platform.
If you're not sure about the file name format, learn more about wheel file names.
Copy a direct link to the current filters
File details
Details for the file onepipeline_cli-0.10.1-py3-none-win_amd64.whl.
File metadata
- Download URL: onepipeline_cli-0.10.1-py3-none-win_amd64.whl
- Upload date:
- Size: 6.7 MB
- Tags: Python 3, Windows x86-64
- Uploaded using Trusted Publishing? No
- Uploaded via:
twine/7.0.0 CPython/3.13.14
File hashes
| Algorithm | Hash digest | |
|---|---|---|
| SHA256 |
d3dcfdbddaa0509d38ab30b0914328bbb41e87f2dea3c5fb0f969f0b01668c66
|
|
| MD5 |
6b33fc6731ddf110017194e453f44f16
|
|
| BLAKE2b-256 |
52d4380dc4f6181dc50d40d72bb30d1bb450c14a22027969a0839c71c037353b
|
File details
Details for the file onepipeline_cli-0.10.1-py3-none-manylinux_2_17_x86_64.manylinux2014_x86_64.whl.
File metadata
- Download URL: onepipeline_cli-0.10.1-py3-none-manylinux_2_17_x86_64.manylinux2014_x86_64.whl
- Upload date:
- Size: 6.5 MB
- Tags: Python 3, manylinux: glibc 2.17+ x86-64
- Uploaded using Trusted Publishing? No
- Uploaded via:
twine/7.0.0 CPython/3.13.14
File hashes
| Algorithm | Hash digest | |
|---|---|---|
| SHA256 |
17f1b96d3b142b4c3a8a2361c649dc3c72f2e3452cdc4fc75ded65f9b9c5caff
|
|
| MD5 |
fb47f13e2f836a5c26466e555b18e628
|
|
| BLAKE2b-256 |
700d7a783bfcd048e4504ca355a8366b94b2e743e24e29e8e3dd9272f890af35
|
File details
Details for the file onepipeline_cli-0.10.1-py3-none-manylinux_2_17_aarch64.manylinux2014_aarch64.whl.
File metadata
- Download URL: onepipeline_cli-0.10.1-py3-none-manylinux_2_17_aarch64.manylinux2014_aarch64.whl
- Upload date:
- Size: 6.0 MB
- Tags: Python 3, manylinux: glibc 2.17+ ARM64
- Uploaded using Trusted Publishing? No
- Uploaded via:
twine/7.0.0 CPython/3.13.14
File hashes
| Algorithm | Hash digest | |
|---|---|---|
| SHA256 |
9f61214ce76dcb396679cfe3cda894237e075f0904c8454b41e208e5394398ea
|
|
| MD5 |
08a286bfdfef22b6e35835d64a14cce5
|
|
| BLAKE2b-256 |
fbc8efa0d8dfb87f2badface376a0d904251ac4f76e356f06060dcf3073fe638
|
File details
Details for the file onepipeline_cli-0.10.1-py3-none-macosx_11_0_arm64.whl.
File metadata
- Download URL: onepipeline_cli-0.10.1-py3-none-macosx_11_0_arm64.whl
- Upload date:
- Size: 5.9 MB
- Tags: Python 3, macOS 11.0+ ARM64
- Uploaded using Trusted Publishing? No
- Uploaded via:
twine/7.0.0 CPython/3.13.14
File hashes
| Algorithm | Hash digest | |
|---|---|---|
| SHA256 |
98b3cf9f77272491782bad2c6397a23d1211a2ae32245d1a0cd4245e83ff522a
|
|
| MD5 |
7f292c5e053ef6295da0f7116d4be231
|
|
| BLAKE2b-256 |
b64f59771ac88718393121a026e58fc8c1584ab3ac077d1be498c0b73c6d3427
|
File details
Details for the file onepipeline_cli-0.10.1-py3-none-macosx_10_12_x86_64.whl.
File metadata
- Download URL: onepipeline_cli-0.10.1-py3-none-macosx_10_12_x86_64.whl
- Upload date:
- Size: 6.3 MB
- Tags: Python 3, macOS 10.12+ x86-64
- Uploaded using Trusted Publishing? No
- Uploaded via:
twine/7.0.0 CPython/3.13.14
File hashes
| Algorithm | Hash digest | |
|---|---|---|
| SHA256 |
0daae9cd2e20a60f796590cc171f84d0d602b96089d6c665d69fb0db1f68a90e
|
|
| MD5 |
547d30d42a5537518fc71a612cd2a94d
|
|
| BLAKE2b-256 |
65af319bbdf5ca69370b762d4348930a897f9ff9431d620e190069cd9fc708b0
|
