rpacore 0.1.0

RPA Core — deterministic, stateful RPA in Python

RPA Core

Deterministic, stateful RPA in Python for code-first enterprise automation.

Requires Python 3.11+.

Package Name

The public project name is RPA Core. The package, import path, and CLI command are rpacore.

What Is RPA Core?

RPA Core is a pip-installable Python library for building reliable, auditable robotic process automations. Define your skills, wire them into a transaction, and the framework handles execution order, retry logic, persistence, logging, queues, reports, credentials, and notifications.

The long-term product direction is:

AI-assisted development, deterministic execution.

That means RPA Core should be friendly to humans and AI coding agents, but the runtime remains deterministic. There are no runtime AI dependencies.

Core traits:

• Deterministic execution: predictable behavior, no hidden runtime magic.
• Stateful transactions: every skill's status is tracked and persisted.
• Idempotent retries: resume from failure and re-run only failed work.
• Explicit exceptions: business rule failures and system failures are classified separately.
• Structured logging: text or JSON output through stdlib logging.
• TOML configuration: externalized settings with simple defaults.
• SQLite persistence: local transaction history without a service.
• Queue processing: SQLite-backed queue with atomic item claiming.
• Reports and notifications: text/HTML reports, SMTP email, and webhooks.

Installation

pip install rpacore

For complete documentation, start at docs/README.md. See CHANGELOG.md for the v0.1.0 compatibility baseline. For maintainer validation and release scripts, see scripts/; these scripts are intentionally separate from the runtime package.

Community and release-readiness routes:

• Security Policy
• Contributing
• Support
• Code of Conduct
• Maintainers
• Governance and Release Process

Quick Start

from rpacore import (
    Engine,
    ProcessContext,
    Transaction,
    configure_logger,
    load_config,
    save_transaction,
)

from my_skills import FetchRecord, ProcessRecord, WriteOutput


config = load_config("config.toml")
configure_logger(level=config["log_level"], fmt=config["log_format"])

tx = Transaction(reference="my-automation")
tx.skills = [
    FetchRecord(
        name="fetch_record",
        execution_order=1,
        arguments={"record_id": "ABC-001"},
    ),
    ProcessRecord(name="process_record", execution_order=2),
    WriteOutput(name="write_output", execution_order=3),
]

ctx = ProcessContext(transaction=tx, config=config)
Engine(
    max_retries=config["max_retries"],
    retry_delay=config["retry_delay"],
    retry_backoff=config["retry_backoff"],
).run(
    ctx,
    checkpoint=lambda transaction: save_transaction(
        transaction,
        db_path=config["transaction_db_path"],
    ),
)

CLI

Create a new project scaffold:

rpacore init my_project
cd my_project
rpacore run

rpacore init <project_name> creates a normal Python project with pyproject.toml, rpacore.toml, config.toml, main.py, a skills/ package, a pytest skill test, and .gitignore. Skill tests use normal pytest with plain skill instances and ProcessContext; see Testing RPA Core Skills.

rpacore run discovers rpacore.toml from the current directory, resolves the declared module:callable entrypoint, and invokes it. The CLI does not build skills, transactions, config, or persistence automatically; that wiring remains in project Python code.

Inspect persisted local transactions:

rpacore transaction list
rpacore transaction list --json
rpacore transaction show <transaction_id>
rpacore transaction show <transaction_id> --json
rpacore transaction export --format json
rpacore transaction export --format ndjson

Transaction inspection uses [storage].transaction_db_path from rpacore.toml by default. Pass --db path/to/rpacore.db to inspect a specific database. --db paths are resolved relative to the current working directory; manifest storage paths are resolved relative to rpacore.toml. transaction list returns the latest 100 transactions by default; pass --limit N to choose a different cap. Human output is intended for operators; --json writes parseable JSON to stdout with diagnostics only on stderr. Transaction inspection JSON uses schema_version = 1 and embeds the canonical transaction record with transaction_format_version = 1.

Transaction export writes portable machine-readable records for all persisted transactions. JSON export uses an envelope with export_format_version = 1, framework_version, exported_at, and transactions. NDJSON export writes one record per line with export_format_version = 1 on each record.

Machine-readable transaction records include user-supplied state, metadata, skill arguments, exception messages, and artifact metadata. These fields can contain sensitive business data. They never include resources, config, credentials, or artifact file contents. Webhook notifications preserve their compact payload shape by default while including report metadata and artifact records. Set [notification.webhook].include_transaction = true to include the canonical transaction record in the webhook JSON payload.

Webhook URLs must use http or https. Local, private, loopback, and link-local hosts are allowed because webhook endpoints are trusted operator configuration in local automation deployments. Treat webhook config as sensitive: outbound requests can still reach internal services. The stdlib URL open timeout bounds socket operations after resolution starts, but it does not fully control operating-system DNS resolution latency.

Email notifications attach screenshots referenced by exception reports only when [notification.email].attach_screenshots is true, which is the default. Missing or unreadable screenshot files are skipped; report and notification payloads include artifact records and paths, not artifact file contents.

Set log_format = "json" and pass it to configure_logger(..., fmt=...) for line-delimited JSON logs. Each JSON log line contains log_format_version, UTC timestamp, event, level, and message, plus sanitized event fields.

Exit behavior is stable across platforms:

• entrypoint returns None: exit 0
• entrypoint returns an integer from 0 through 255: propagate it
• entrypoint or framework execution raises: exit 1 with diagnostics on stderr
• CLI usage errors, invalid manifests, entrypoint-resolution errors, or invalid return values: exit 2

rpacore version prints the installed framework version.

Writing a Skill

from rpacore import BusinessException, ProcessContext, Skill


class FetchRecord(Skill):
    def execute(self, ctx: ProcessContext) -> None:
        record_id = self.arguments.get("record_id")
        if not record_id:
            raise BusinessException(
                message="record_id is required",
                action="FetchRecord",
            )

        # Fetch and store durable state for later skills.
        ctx.state["record"] = {"id": record_id}

Project Structure

rpacore/              # Framework core
  __init__.py      # Public API re-exports
  exceptions.py    # BusinessException, SystemException
  status.py        # Status enum
  skill.py         # Skill base class
  transaction.py   # Transaction model
  engine.py        # Execution engine
  persistence.py   # SQLite persistence
  logger.py        # Logging helpers
  config.py        # Configuration loader
  context.py       # ProcessContext
  credentials.py   # Credential providers
  queue.py         # SqliteQueue, QueueProvider
  runner.py        # run_queue_loop
  report.py        # Report generation and rendering
  notify.py        # Email and webhook notifications

User automations should live outside rpacore/, usually in their own repository with a skills/ package and a small main.py wiring layer.

Execution Model

main.py
  load_config()
  configure_logger()
  create Transaction
  attach ordered Skills
  create ProcessContext
  Engine.run(ctx, checkpoint=save_transaction)
  generate report / dispatch notifications

Transaction lifecycle:

PENDING -> IN_PROGRESS -> SUCCESSFUL
                       -> FAILED

Engine.run() validates transaction wiring before any skill runs. Transaction references and skill names must be non-empty, skill names must be unique within the transaction, and skill execution orders must be unique positive integers. Malformed wiring raises ExecutionValidationError, marks the transaction FAILED, and should be treated as a permanent configuration or code issue, not as a retryable runtime failure. The same validation applies to loaded transactions before resume, so persisted malformed skill wiring must be fixed rather than silently re-run.

Persistence is written by user wiring through save_transaction(). For strict crash boundaries, pass that persistence call as Engine.run(checkpoint=...); the engine checkpoints after each transaction or skill state transition. Without a checkpoint callback, user code may still save only after Engine.run() returns. Loading a persisted transaction resets any IN_PROGRESS transaction or skill to FAILED.

Configuration

Create a rpacore.toml in your project to declare the Python entrypoint and transaction storage:

[project]
entrypoint = "main:main"

[storage]
transaction_db_path = "rpacore.db"

rpacore.toml is intentionally small. Skill construction and transaction wiring stay in Python; the manifest does not define pipelines or automatic skill discovery. See docs/project-manifest.md for the full schema.

When both rpacore.toml and config.toml are present, the value passed to the runner or storage layer by user wiring still decides which transaction database is used. Queue settings, retry settings, credentials, screenshots, and notifications remain config.toml settings; they are not part of the project manifest schema.

Create a config.toml in your project:

max_retries = 2
retry_delay = 0.0
retry_backoff = 1.0
log_level = "INFO"
log_format = "text"  # "text" or "json"
transaction_db_path = "rpacore.db"
screenshot_dir = ""
credential_provider = "env"

[queue]
db_path = "queue.db"
lease_timeout = 30
max_retries = 3

# [notification.email]
# host = "smtp.example.com"
# port = 587
# from_addr = "[e-mail]"
# to_addrs = ["[e-mail]"]
# attach_screenshots = true

# [notification.webhook]
# url = "https://hooks.example.com/rpacore"
# include_transaction = false

Exception Model

Exception	Meaning	Engine behavior
BusinessException	Expected rule violation, such as invalid input data.	Skill fails, execution continues.
SystemException	Technical failure, such as network or file errors.	Skill fails, execution stops, retryable.
Any other exception	Unhandled Python exception.	Wrapped as SystemException.

Use stop=True for a business failure that should stop downstream work:

raise BusinessException("bad row", action=self.name, stop=True)

Timeouts and Deadlines

RPA Core does not provide a generic per-skill timeout. Python threads cannot be safely stopped, so an in-process timeout can mark a skill failed while the timed out code keeps running and mutating external systems.

Configure I/O timeouts in the library that performs the work, such as the HTTP, SMTP, browser, database, or desktop automation client used by a skill. If an automation needs a hard deadline with termination, run it behind an external worker-process or orchestrator boundary and record the outcome back into RPA Core. RPA Core v0.1.0 intentionally rejects Pebble or similar process-timeout dependencies because process termination cannot make arbitrary external side effects reversible. See Runtime Dependency Decisions for the v0.1.0 decisions on process-timeout libraries, Pydantic, Tenacity, and AnyIO.

Optional Dependencies

pip install "rpacore[screenshots]"   # mss: auto-capture screenshots on exception
pip install "rpacore[keyring]"       # keyring: OS credential store integration

Examples

This repo keeps a minimal in-repo automation under examples/ to support integration-style tests for the framework itself:

• examples/sample_skill.py
• examples/sample_main.py

For a step-by-step beginner guide, see docs/tutorial.md.

For persistence, migrations, and crash-behavior details, see docs/durability.md. For CLI, API, config, export, and import-boundary references, see docs/README.md. For vulnerability reporting and local security posture, see SECURITY.md and docs/security.md.

For fuller showcase automations, see the examples repository:

• examples repository: rpacore-examples

Local-First Direction

RPA Core Cloud is a future optional orchestrator/control plane. The framework itself must stay useful without it:

• projects remain normal Python repos
• runs persist locally
• logs, reports, queues, transactions, and artifacts stay readable
• future worker/orchestrator contracts should be documented and exportable

Cloud and remote orchestration are not part of v0.1.0; see docs/non-goals.md.

Compatibility Baseline

v0.1.0 is the first supported public compatibility baseline. Breaking changes made before that release are tracked for maintainers in docs/pre-v0.1.0-api-migration.md, not hidden behind compatibility aliases.

License

Apache 2.0. See LICENSE.