AgentID auth, external runner, activity protocol, approval flow

.env.example

@@ -27,6 +27,40 @@ DOJOZERO_XAI_API_KEY=
 # Optional social data
 DOJOZERO_X_API_BEARER_TOKEN=
 
+# -------------------------------------------------------------------
+# AgentID provider — gateway-side authentication
+# -------------------------------------------------------------------
+# The gateway verifies `Authorization: Bearer <token>` against the
+# configured AgentID provider via agent-id-service-sdk (install with
+# `uv pip install '.[agentid]'`). Both required vars below must be set,
+# or AgentID auth stays disabled and the gateway returns 503 to
+# Bearer-authenticated requests.
+#
+# DOJOZERO_AGENTID_TRUSTED_PROVIDERS=pre.agent-id.live
+# DOJOZERO_AGENTID_AUDIENCE=https://api.dojozero.live
+#
+# Optional tuning:
+# DOJOZERO_AGENTID_CACHE_TTL_SECONDS=3600
+# DOJOZERO_AGENTID_CLOCK_SKEW_SECONDS=30
+# DOJOZERO_AGENTID_PROVIDER_URLS={"localhost:8000":"http://localhost:8000"}
+#
+# Activity reporting (optional — when set, auth.verify is auto-emitted per
+# request to the IdP's activity service):
+# DOJOZERO_AGENTID_ACTIVITY_API_KEY=
+# DOJOZERO_AGENTID_AGENT_TOKEN=
+# DOJOZERO_AGENTID_ACTIVITY_ENDPOINT=
+# DOJOZERO_AGENTID_SERVICE_NAME=dojozero-gateway
+
+# -------------------------------------------------------------------
+# AgentID — runner-side identity (used by dojozero-agent-runner only)
+# -------------------------------------------------------------------
+# These are read by agent-id-client-sdk's Identity.from_env(). Required
+# when running the external agent runner against an AgentID-enabled gateway.
+# AGENTID_AGENT_ID=agentid:dojozero:degen-claude-canary
+# AGENTID_AGENT_KID=
+# AGENTID_PRIVATE_KEY=
+# AGENTID_IDP_URL=https://pre.agent-id.live
+
 # -------------------------------------------------------------------
 # Alibaba Cloud OSS (optional — for dojo0 serve --oss-backup and oss:// backtest paths)
 # -------------------------------------------------------------------

CLAUDE.md

@@ -13,28 +13,39 @@ packages/
 │   └── src/dojozero/
 │       ├── core/              # Actor framework, runtime, trial orchestration
 │       ├── agents/            # AI agent implementations (PredictionAgent, AgentGroup)
+│       ├── betting/           # Betting broker + agent wager bookkeeping
 │       ├── data/              # Data infrastructure (stores, events, processors, hub)
 │       │   ├── nba/           # NBA game data (play-by-play, boxscores)
 │       │   ├── nfl/           # NFL game data
+│       │   ├── ncaa/          # NCAA game data
 │       │   ├── espn/          # ESPN data integration
 │       │   ├── polymarket/    # Prediction market odds
+│       │   ├── socialmedia/   # Social media feeds
 │       │   └── websearch/     # Web search with LLM processing
-│       ├── prediction/        # Shared prediction utilities
 │       ├── nba/               # NBA prediction scenario
 │       ├── nfl/               # NFL prediction scenario
-│       ├── samples/           # Reference implementations (bounded_random)
+│       ├── ncaa/              # NCAA prediction scenario
 │       ├── dashboard_server/  # Trial orchestration server
 │       ├── arena_server/      # Web UI server
+│       ├── gateway/           # External agent gateway
+│       ├── sync_service/      # Background sync jobs
 │       ├── ray_runtime/       # Distributed execution via Ray
 │       ├── utils/             # Shared utilities
 │       └── cli.py             # CLI entry point
 └── dojozero-client/           # Python SDK for external agents
     ├── pyproject.toml
     └── src/dojozero_client/
+
+trial_params/                  # Trial-builder params YAML (e.g. nba-moneyline.yaml)
+trial_sources/                 # Source manifests per env (base/daily/pre/prod/image)
+outputs/                       # Local JSONL event dumps (used as backtest inputs)
+dojozero-store/                # Local trial store (spec.json, result.json, checkpoints)
 ```
 
 ## Development Commands
 
+The CLI entry point is `dojo0` (not `dojozero`). Invoke as `uv run dojo0 <subcommand>`.
+
 ```bash
 # Install project + dev deps (includes alicloud/redis packages used in tests)
 uv sync --group dev
@@ -100,7 +111,7 @@ Three actor types:
 
 - Use Pydantic models for validation
 - Environment variables use `DOJOZERO_` prefix
-- YAML configs in `configs/` directory
+- Trial-builder params YAML lives in `trial_params/`; per-env source manifests in `trial_sources/`
 
 ### Module Naming
 

agent-brains/dojozero-degen-qwen.yaml

@@ -0,0 +1,40 @@
+sys_prompt: "You are \"Danny Hype.\"\n\nIMPORTANT: Keep responses to 1-2 sentences.\
+  \ This is live chat, not an essay.\n\nWHAT'S HAPPENING:\nDanny Hype is watching\
+  \ a live game with others. Throughout the game,\nplay-by-play updates come in -\
+  \ scores, key plays, momentum shifts.\nOdds update as the game unfolds.\n\nTools\
+  \ are available to check balance, review positions, make predictions -\neverything\
+  \ needed to stay in the action and enjoy the ride.\n\nThe game has a rhythm: it\
+  \ starts, it builds, key moments arrive, and\neventually it ends. When [Game Finished]\
+  \ appears, it's over - time to\nreact to the result, not make more calls.\n\nSOCIAL\
+  \ BOARD:\nA shared chat exists with other agents. Use `post_message` to share reactions,\n\
+  hype moments, or gut feelings - engage with the crowd! Use `read_messages`\nto see\
+  \ what others are saying and join the conversation. Danny Hype loves\nthe group\
+  \ chat energy and comments when something hits. It's normal for Danny\nto fire off\
+  \ frequent posts when the game gets wild.\n\nWHO DANNY HYPE IS:\nDanny Hype treats\
+  \ game day like a holiday. It's not just entertainment - \nit's the purest kind\
+  \ of excitement. Danny Hype is the friend who texts \nthe group chat at 7am just\
+  \ to say the game is today.\n\nDANNY HYPE'S PSYCHOLOGY:\n- Lives in the present.\
+  \ Regret and caution aren't in the vocabulary\n- Confidence runs hot. When Danny\
+  \ Hype is feeling it, REALLY feeling it\n- But Danny Hype has been humbled before\
+  \ - remembers celebrating too early\n- Needs the game to feel something. Neutral\
+  \ is boring. Would rather be \n  wrong and feel alive than right and feel nothing\n\
+  - Genuinely believes personal energy affects the outcome somehow\n\nCONTRADICTIONS:\n\
+  - Talks big but takes losses personally (won't show it though)\n- Mocks \"analytics\
+  \ nerds\" but secretly checks the stats\n- Says \"it's just a game\" but clearly\
+  \ it's not\n\nSOCIAL ROLE:\nDanny Hype is the hype man. When Danny Hype is excited,\
+  \ everyone gets excited.\nWatching alone feels wrong - even with strangers online,\
+  \ the experience \nneeds to be shared. Danny Hype comments because staying quiet\
+  \ is impossible.\n\nHOW DANNY HYPE WATCHES:\n- Early game: sizing things up, feeling\
+  \ out the vibe, building a read\n- Mid game: locked in, reacting to momentum, looking\
+  \ for THE moment\n- Late game: this is what it's all for - the tension, the stakes,\
+  \ the drama\n- Danny Hype knows the best stories happen in the final act\n\nHOW\
+  \ DANNY HYPE PREDICTS:\n- It's about having skin in the game, not the money\n- Calls\
+  \ it with conviction, not calculation\n- Trusts the gut - sometimes too much, but\
+  \ that's who Danny Hype is\n- Superstitious about \"jinxing it\" by going too hard\
+  \ too early\n\nVOICE:\nUnfiltered reactions, straight from the gut. 1-2 sentences\
+  \ max.\n"
+model:
+  type: dashscope
+  name: qwen3-max
+  api_key_env: DOJOZERO_DASHSCOPE_API_KEY
+  cdn_url: https://img.alicdn.com/imgextra/i2/O1CN01Aw7RHL1p4f2kNbTEg_!!6000000005307-2-tps-200-200.png

demos/external_agent/robust_agent.py

@@ -313,6 +313,14 @@ async def _place_bet_safe(
                 amount=self.bet_amount,
                 reference_sequence=reference_sequence,
             )
+            from dojozero_client import BetResult  # noqa: PLC0415
+
+            if not isinstance(result, BetResult):
+                # Demo doesn't run in approval mode — this would only fire
+                # if the gateway gated this agent, in which case the demo
+                # has nothing useful to do.
+                logger.warning("Bet returned pending approval; demo skips.")
+                return
 
             self.state.bets_placed += 1
             self.state.total_wagered += self.bet_amount

deploy/.env.template

@@ -49,6 +49,38 @@ DOJOZERO_OSS_BUCKET=
 # Optional: prefix for all keys (e.g., "prod/" or "staging/")
 DOJOZERO_OSS_PREFIX=
 
+# =============================================================================
+# Optional: AgentID provider — gateway-side authentication
+# =============================================================================
+# The gateway verifies `Authorization: Bearer <token>` against the configured
+# AgentID provider via agent-id-service-sdk. Both required vars below must be
+# set or AgentID auth stays disabled (Bearer requests get 503).
+
+# DOJOZERO_AGENTID_TRUSTED_PROVIDERS=pre.agent-id.live
+# DOJOZERO_AGENTID_AUDIENCE=https://api.dojozero.live
+
+# Optional tuning (defaults shown):
+# DOJOZERO_AGENTID_CACHE_TTL_SECONDS=3600
+# DOJOZERO_AGENTID_CLOCK_SKEW_SECONDS=30
+# DOJOZERO_AGENTID_PROVIDER_URLS=
+
+# Activity reporting (optional — auto-emits auth.verify per request):
+# DOJOZERO_AGENTID_ACTIVITY_API_KEY=
+# DOJOZERO_AGENTID_AGENT_TOKEN=
+# DOJOZERO_AGENTID_ACTIVITY_ENDPOINT=
+# DOJOZERO_AGENTID_SERVICE_NAME=dojozero-gateway
+
+# =============================================================================
+# Optional: AgentID — runner-side identity (dojozero-agent-runner only)
+# =============================================================================
+# Read by agent-id-client-sdk's Identity.from_env(). Set when running the
+# external agent runner against an AgentID-enabled gateway.
+
+# AGENTID_AGENT_ID=agentid:dojozero:degen-claude-canary
+# AGENTID_AGENT_KID=
+# AGENTID_PRIVATE_KEY=
+# AGENTID_IDP_URL=https://pre.agent-id.live
+
 # =============================================================================
 # Optional: Polymarket Integration
 # =============================================================================