Agent-to-agent communication, explicit prompt assembly, and workspace stage plans

.github/workflows/ci.yml

@@ -0,0 +1,150 @@
+name: CI
+
+on:
+  push:
+    branches: [main]
+  pull_request:
+    branches: [main]
+
+concurrency:
+  group: ci-${{ github.event.pull_request.number || github.sha }}
+  cancel-in-progress: ${{ github.event_name == 'pull_request' }}
+
+jobs:
+  backend:
+    name: Lint & Test (backend)
+    runs-on: ubuntu-latest
+
+    # The suite runs against a real Postgres, not sqlite or mocks: this
+    # codebase stores JSONB and never mocks the database (see the docstring
+    # on tests/test_protocols.py). pgvector's image rather than plain
+    # postgres because core's own schema declares a vector column.
+    services:
+      postgres:
+        image: pgvector/pgvector:pg16
+        env:
+          POSTGRES_USER: agentic
+          POSTGRES_PASSWORD: agentic
+          POSTGRES_DB: motoro
+        ports:
+          - 5432:5432
+        options: >-
+          --health-cmd "pg_isready -U agentic"
+          --health-interval 5s
+          --health-timeout 5s
+          --health-retries 5
+
+    # Two databases on one server, matching the split in config.py:
+    # `ASAREE_DATABASE_URL` is core's schema, `ASAREE_PRODUCT_DATABASE_URL`
+    # is ASAREE's own tables. Bare `DATABASE_URL` is here for the sake of
+    # `python -m motoro.migrations`, which reads settings with no product
+    # prefix. Set as real env vars because CI has no .env to fall back on,
+    # and subprocess-spawned MCP servers inherit them.
+    env:
+      DATABASE_URL: postgresql+asyncpg://agentic:agentic@localhost:5432/motoro
+      ASAREE_DATABASE_URL: postgresql+asyncpg://agentic:agentic@localhost:5432/motoro
+      ASAREE_PRODUCT_DATABASE_URL: postgresql+asyncpg://agentic:agentic@localhost:5432/asaree
+
+    steps:
+      - uses: actions/checkout@v6
+
+      # No setup-python step on purpose: `requires-python = ">=3.12"` plus uv's
+      # own managed interpreters already decide the version, and pinning one
+      # here would only let CI drift from what `uv sync` gives a developer
+      # locally.
+      - uses: astral-sh/setup-uv@v7
+        with:
+          enable-cache: true
+
+      # Cheap, and it guards the exact class of bug this workflow was added
+      # after: a `tool.uv.sources` pin edited without re-locking, so the
+      # lockfile still resolves the old commit.
+      - name: Check lockfile is up to date
+        run: uv lock --check
+
+      # The slow step by a wide margin -- motoro depends unconditionally on
+      # sentence-transformers, which pulls ~4.5 GB of torch + CUDA that
+      # nothing in ASAREE imports (EpistasisLab/motoro#6). The uv cache above
+      # absorbs it on warm runs; when that issue lands, this drops to well
+      # under a minute cold.
+      - name: Install dependencies
+        run: uv sync --frozen --group dev
+
+      - name: Ruff check
+        run: uv run ruff check src/asaree tests
+
+      # Deliberately absent: `ruff format --check`. This repo is knowingly not
+      # ruff-format-clean and reformatting it is not wanted, so the step could
+      # only ever be permanently-yellow noise. `ruff check` above is the part
+      # that finds real defects.
+
+      # Non-blocking until the pre-existing strict-mode backlog is paid down
+      # (same reasoning as motoro's own CI). Flip to blocking once clean.
+      - name: Mypy (warn only)
+        continue-on-error: true
+        run: uv run mypy src/asaree
+
+      # The service container only creates POSTGRES_DB; the second database
+      # has to be made by hand. Done with asyncpg rather than psql so the job
+      # depends only on the locked dependencies, not on whatever client
+      # tooling the runner image happens to ship.
+      - name: Create ASAREE's product database
+        run: |
+          uv run python - <<'PY'
+          import asyncio, asyncpg
+
+          async def main() -> None:
+              conn = await asyncpg.connect("postgresql://agentic:agentic@localhost:5432/motoro")
+              try:
+                  await conn.execute("CREATE DATABASE asaree")
+              finally:
+                  await conn.close()
+
+          asyncio.run(main())
+          PY
+
+      # Core's chain first, then ASAREE's -- the order `asaree.migrations`
+      # documents. `deploy` rather than `upgrade` so the pattern registry is
+      # projected into architectural_patterns too; the schema alone is not
+      # enough for tests that resolve a coordination strategy.
+      - name: Migrate core schema
+        run: uv run python -m motoro.migrations deploy --url "$DATABASE_URL"
+
+      - name: Migrate ASAREE schema
+        run: uv run python -m asaree.migrations upgrade --url "$ASAREE_PRODUCT_DATABASE_URL"
+
+      # The whole suite, on purpose: 769 tests in ~13s locally, so there is no
+      # slow tier worth splitting out.
+      - name: Pytest
+        run: uv run pytest tests/ -q --tb=short
+
+  frontend:
+    name: Type Check & Lint (frontend)
+    runs-on: ubuntu-latest
+    defaults:
+      run:
+        working-directory: frontend
+
+    steps:
+      - uses: actions/checkout@v6
+
+      - uses: actions/setup-node@v4
+        with:
+          node-version: "22"
+          cache: npm
+          cache-dependency-path: frontend/package-lock.json
+
+      - name: Install dependencies
+        run: npm ci
+
+      # `tsc -b`, not `tsc --noEmit`: this is a project-references build
+      # (tsconfig.json -> tsconfig.app.json + tsconfig.node.json), and
+      # `--noEmit` against the solution file type-checks nothing at all.
+      - name: Type check
+        run: npx tsc -b
+
+      # oxlint exits 0 on warnings, so this reports rather than gates. The
+      # standing baseline is 9 warnings; it is here to make that number
+      # visible and stop it climbing unnoticed.
+      - name: Lint
+        run: npx oxlint src

.gitignore

@@ -15,4 +15,3 @@ backups/
 # Generated by hatch-vcs at build time from the git tag (see pyproject.toml).
 src/asaree/_version.py
 sdk/src/asaree_client/_version.py
-prompts/

compose.dev.yml

@@ -0,0 +1,54 @@
+# Run the stack against the working trees instead of the built image.
+#
+# For testing a change to ASAREE *and* Motoro together before Motoro is tagged:
+# pyproject.toml pins motoro to a released git tag on purpose (never a floating
+# branch), so the only way to exercise an untagged Motoro is to put its source
+# where the installed package sits. That is exactly what this file does -- no
+# image rebuild, no throwaway tag, and nothing about the pin changes.
+#
+# Explicitly opt in, so it can never be active without being asked for:
+#
+#   docker compose -f compose.yml -f compose.dev.yml up -d --force-recreate \
+#       asaree-migrate asaree-app asaree-worker
+#
+# and drop back to the released pin by leaving the -f off and recreating.
+#
+# The frontend needs nothing here: compose.yml already bind-mounts ./frontend
+# for hot reload, so the UI is live off the working tree either way.
+
+services:
+  # Included because a source change can bring a new Alembic revision with it,
+  # and this one-shot runs from the image like everything else.
+  asaree-migrate:
+    volumes:
+      - ./src:/app/src
+      - ${MOTORO_SRC:-../Motoro/src/motoro}:/app/.venv/lib/python3.13/site-packages/motoro:ro
+      - ./workspace-core/src/asaree_workspace_core:/app/workspace-core/src/asaree_workspace_core:ro
+
+  asaree-app:
+    volumes:
+      - ./data:/app/data
+      - ./src:/app/src
+      # Read-only: the container runs as root, so a writable mount would leave
+      # root-owned __pycache__ directories scattered through the host checkout.
+      # Python simply skips writing bytecode when it can't.
+      #
+      # This is a plain directory overlay rather than an editable install --
+      # safe only while Motoro's own dependencies are unchanged, since uv never
+      # sees it. If Motoro gains a dependency, rebuild against a tag instead.
+      # The bundled MCP servers already spawn with `uv run --no-sync`, so
+      # nothing at runtime tries to reconcile the venv behind this mount.
+      - ${MOTORO_SRC:-../Motoro/src/motoro}:/app/.venv/lib/python3.13/site-packages/motoro:ro
+      # Same idea for the workspace package. Unlike `src`, it is COPYed into
+      # the image and installed editable *inside* it, so a new module there (a
+      # stage plan, say) is invisible until the image is rebuilt. Overlaying the
+      # package directory rather than the project keeps the editable install's
+      # own recorded path valid.
+      - ./workspace-core/src/asaree_workspace_core:/app/workspace-core/src/asaree_workspace_core:ro
+
+  asaree-worker:
+    volumes:
+      - ./data:/app/data
+      - ./src:/app/src
+      - ${MOTORO_SRC:-../Motoro/src/motoro}:/app/.venv/lib/python3.13/site-packages/motoro:ro
+      - ./workspace-core/src/asaree_workspace_core:/app/workspace-core/src/asaree_workspace_core:ro

frontend/src/api/client.ts

@@ -16,7 +16,7 @@ import type { DesignImpact, DesignRevision, DesignSpec, Experiment, ExperimentRe
 import type { LLMConnectionCheck, LLMProvider, LLMSetting, LLMSettingModelsResponse } from '@/types/llmSettings'
 import type { McpServer } from '@/types/mcpServers'
 import type { OkfBundle, OkfDocument } from '@/types/okf'
-import type { CellRunBatch, Protocol, ProtocolGraph, ProtocolRevision, ProtocolRun } from '@/types/protocols'
+import type { CellRunBatch, PromptPreview, Protocol, ProtocolGraph, ProtocolRevision, ProtocolRun } from '@/types/protocols'
 import type { Run, RunStep } from '@/types/runs'
 import type { Skill, SkillListResponse, SkillUrlPreview } from '@/types/skills'
 
@@ -284,6 +284,12 @@ export const protocolsApi = {
   // runnable Agent (see validate_single_node_runnable). Same polling shape
   // as a plain run (getRun), just with node_runs carrying only this one key.
   runNode: (id: string, nodeId: string) => request<ProtocolRun>(`/protocols/${id}/nodes/${nodeId}/run`, { method: 'POST' }),
+  // Read-only despite the POST: the graph goes in the body because the canvas
+  // being previewed is the one on screen, including edits autosave hasn't
+  // flushed yet. Creates no run of any kind. 422 for a node that isn't an
+  // agent, since only an agent is ever given a prompt.
+  promptPreview: (id: string, nodeId: string, graph: ProtocolGraph) =>
+    request<PromptPreview>(`/protocols/${id}/nodes/${nodeId}/prompt-preview`, { method: 'POST', body: { graph } }),
   getRevision: (id: string, revisionId: string) => request<ProtocolRevision>(`/protocols/${id}/revisions/${revisionId}`),
   getRun: (id: string, runId: string) => request<ProtocolRun>(`/protocols/${id}/runs/${runId}`),
   // Only raises cancel_requested_at -- a no-op (200, unchanged row) once the
@@ -363,6 +369,10 @@ export const runsApi = {
   // No server-side experiment_id filter exists yet (runs.py only filters by
   // agent_id) -- callers filter client-side on run_metadata.experiment_id.
   list: () => request<Run[]>('/runs'),
+  // Owner-scoped, same as the list. Fetched per node run for `input` -- the
+  // exact assembled prompt that agent was given, which is the one piece of
+  // handoff evidence that isn't already on the polled node_runs blob.
+  get: (runId: string) => request<Run>(`/runs/${runId}`),
   getSteps: (runId: string) => request<RunStep[]>(`/runs/${runId}/steps`),
 }
 

frontend/src/components/protocol/AddNodePanel.tsx

@@ -1,5 +1,5 @@
 import { useState } from 'react'
-import { ArrowRight, Atom, BookMarked, Bot, BrainCircuit, Cloud, Code2, Database, FileText, HardDrive, Repeat2, Route, ScrollText, ShieldCheck, Server, Sparkles, X } from 'lucide-react'
+import { ArrowRight, Atom, BookMarked, Bot, Braces, BrainCircuit, Cloud, Code2, Database, FileText, HardDrive, Repeat2, Route, ScrollText, ShieldCheck, Server, Sparkles, X } from 'lucide-react'
 import { Button } from '@/components/ui/button'
 import { Input } from '@/components/ui/input'
 import { DATASET_BROWSE } from './datasetCatalog'
@@ -123,6 +123,12 @@ const NODE_CATALOG = [
     description: 'Upload a single Markdown concept an Agent reads and rewrites as it works',
     icon: FileText,
   },
+  {
+    type: 'output_parser',
+    label: 'Output Parser',
+    description: "Defines the format an Agent's answer must take, and reads its named, typed fields back out",
+    icon: Braces,
+  },
   {
     type: 'script',
     label: 'Script',