fix: open-source cleanup, capability tiers, provider analysis

- Secrets moved from hardcoded strings to env vars (OAuth credentials)
- .gitignore overhauled for open-source readiness
- .env.example updated with new env var placeholders
- LICENSE file added
- Model capability tiers (4-level) in provider_manager and snapshot
- Claude provider analysis documented in anthropic.py

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

Author: EightRice

.env.example

@@ -25,3 +25,10 @@ HEARTBEAT_INTERVAL=60
 
 # Testnet
 SEPOLIA_RPC_URL=https://eth-sepolia.g.alchemy.com/v2/YOUR_API_KEY
+
+# Google OAuth2 (for Calendar/Tasks connector)
+GOOGLE_CLIENT_ID=your_google_client_id_here
+GOOGLE_CLIENT_SECRET=your_google_client_secret_here
+
+# Voice module (optional, for voice connector)
+VOICE_MODULE_DIR=./voice

.gitignore

@@ -1,27 +1,46 @@
-FUNDING_LEADS.md
-CLAUDE.md
-rpb_gemini.txt
-rpb_speaker_notes.md
-share.md
-artefacts/
+# Environment and secrets
 .env
-node_modules/
+*.env
+
+# Python
 __pycache__/
 *.pyc
-.claude-workers/
-artifacts/
-training_run*.log
-deployment-addresses.json
-# ATN runtime
+*.pyo
 *.egg-info/
 dist/
 build/
 .pytest_cache/
+
+# Node
+node_modules/
+bun.lockb
+bun.lock
+
+# IDE
+.vscode/
+.idea/
+
+# Logs
+*.log
+training_run*.log
+
+# Data and artifacts
+data/
+artifacts/
+artefacts/
 test_data_*/
+
+# ATN runtime
 *.running.json
 latest.txt
-bun.lockb
-bun.lock
+deployment-addresses.json
+.claude-workers/
+
+# Project-specific
+FUNDING_LEADS.md
+CLAUDE.md
+rpb_gemini.txt
+rpb_speaker_notes.md
+share.md
 /agents/
-*.log
 PLAN.md

LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 ATN Contributors
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

atn/connectors/google_calendar/server.py

@@ -42,11 +42,8 @@
 GCAL_BASE = "https://www.googleapis.com/calendar/v3"
 GTASKS_BASE = "https://tasks.googleapis.com/tasks/v1"
 
-CLIENT_ID = (
-    "901620659302-e7pkd1o0bsooedaothhkln9rhc5ah8k5"
-    ".apps.googleusercontent.com"
-)
-CLIENT_SECRET = "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"
+CLIENT_ID = os.environ.get("GOOGLE_CLIENT_ID", "")
+CLIENT_SECRET = os.environ.get("GOOGLE_CLIENT_SECRET", "")
 TOKEN_ENDPOINT = "https://oauth2.googleapis.com/token"
 
 # Mutable token state — refreshed automatically on 401.

atn/connectors/voice/server.py

@@ -1,6 +1,6 @@
 """MCP server for voice / text-to-speech -- lets agents speak aloud.
 
-Wraps the voice module (c:/code/voice) as MCP tools so that any
+Wraps an external voice module as MCP tools so that any
 ATN agent can produce audible speech on the user's machine.
 
 Supports two backends:
@@ -11,7 +11,7 @@
 
 Usage (standalone):
     python server.py
-    python server.py --voice-dir C:/code/voice
+    python server.py --voice-dir /path/to/voice
 
 Usage (via ATN):
     Launched automatically by ConnectorManager.start("voice")
@@ -22,6 +22,7 @@
 import argparse
 import json
 import logging
+import os
 import sys
 from typing import Optional
 
@@ -38,7 +39,10 @@
 
 # -- Configuration -------------------------------------------------------------
 
-VOICE_MODULE_DIR = r"C:\code\voice"
+VOICE_MODULE_DIR = os.environ.get(
+    "VOICE_MODULE_DIR",
+    os.path.join(os.path.dirname(__file__), "..", "..", "..", "voice"),
+)
 
 # -- MCP Server ----------------------------------------------------------------
 

atn/oauth.py

@@ -16,6 +16,7 @@
 import asyncio
 import json
 import logging
+import os
 import urllib.parse
 import urllib.request
 from typing import Any
@@ -24,11 +25,11 @@
 
 # -- Google OAuth2 constants --------------------------------------------------
 
-GOOGLE_CLIENT_ID = (
-    "901620659302-e7pkd1o0bsooedaothhkln9rhc5ah8k5"
-    ".apps.googleusercontent.com"
+GOOGLE_CLIENT_ID = os.environ.get(
+    "GOOGLE_CLIENT_ID",
+    "",
 )
-GOOGLE_CLIENT_SECRET = "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"
+GOOGLE_CLIENT_SECRET = os.environ.get("GOOGLE_CLIENT_SECRET", "")
 GOOGLE_AUTH_ENDPOINT = "https://accounts.google.com/o/oauth2/auth"
 GOOGLE_TOKEN_ENDPOINT = "https://oauth2.googleapis.com/token"
 

atn/providers/anthropic.py

@@ -5,6 +5,46 @@
   - Tool definition translation
   - Response parsing (text blocks, tool_use blocks)
   - Retry with exponential backoff for transient errors (429, 503, 529)
+
+Provider Unification Analysis: AnthropicProvider vs BridgeProvider
+===================================================================
+Two paths exist for running Claude models:
+
+1. BridgeProvider (bridge.py) — Claude Agent SDK via TypeScript subprocess
+   - Spawns a bun subprocess running bridge/claude-bridge.ts
+   - Uses Claude Agent SDK's native multi-turn orchestration (send_orchestrate)
+   - The SDK handles its own agentic loop, context compaction, session resumption
+   - Built-in shell tools (Bash, Read, Write, Glob, Grep) live in the SDK process
+   - ATN framework tools are relayed as MCP tool_call/tool_result over stdin/stdout
+   - Streaming events arrive on stderr as @@EVENT@@ NDJSON lines
+   - Supports session_id for cross-turn prompt caching and context persistence
+   - Requires bun + node_modules installed; heavier subprocess lifecycle
+
+2. AnthropicProvider (this file) — Python REST client via httpx
+   - Direct HTTP calls to the Anthropic Messages API
+   - Multi-turn orchestration uses the generic loop in base.py (send_orchestrate)
+     which calls send_stream() repeatedly, executing tool calls in Python
+   - Shell tools come from atn/shell_tools.py (Python implementations)
+   - No subprocess, no SDK dependency — pure Python
+   - No native session resumption or context compaction
+   - Lighter weight, easier to test, works without bun/node
+
+Key differences:
+  - BridgeProvider has native context compaction (SDK auto-summarises on overflow)
+  - BridgeProvider has session resumption via session_id (persistent conversations)
+  - BridgeProvider emits richer events (tool_use_start/result, compaction, thinking)
+  - AnthropicProvider uses the base class generic agentic loop (simpler but less capable)
+  - AnthropicProvider could be enhanced to use the Anthropic Python SDK's agent loop
+    for parity with BridgeProvider without the TypeScript subprocess overhead
+
+Path forward:
+  - Short-term: Both paths coexist. BridgeProvider is used for the orchestrator
+    (needs session persistence + compaction). AnthropicProvider is used for
+    delegates and one-shot calls (lighter weight, no subprocess overhead).
+  - Medium-term: Consider migrating AnthropicProvider to use the Anthropic Python
+    SDK's agent loop (anthropic.Agent) instead of the generic base.py loop.
+    This would give parity with BridgeProvider (compaction, session management)
+    without the TypeScript subprocess, and could eventually replace BridgeProvider.
 """
 from __future__ import annotations
 

atn/runtime/provider_manager.py

@@ -23,6 +23,71 @@
 
 log = logging.getLogger(__name__)
 
+# ---------------------------------------------------------------------------
+# Model capability tiers
+# ---------------------------------------------------------------------------
+# Tier 4: orchestrator — multi-agent coordination, complex planning, 20+ tools
+# Tier 3: autonomous   — independent multi-step execution, 10+ tools, self-correction
+# Tier 2: tool-use     — reliable tool calling, structured instructions, single-task
+# Tier 1: conversational — text in/out, unreliable with tools
+
+TIER_LABELS: dict[int, str] = {
+    4: "orchestrator",
+    3: "autonomous",
+    2: "tool-use",
+    1: "conversational",
+}
+
+# Known model → tier mappings.  Prefix matching is used: the longest prefix
+# that matches wins.  Unknown models default to tier 2.
+_MODEL_TIERS: dict[str, int] = {
+    # Anthropic
+    "claude-opus-4": 4,
+    "claude-sonnet-4": 3,
+    "claude-haiku-4": 2,
+    "claude-sonnet-3.5": 3,
+    "claude-haiku-3.5": 2,
+    # OpenAI
+    "o3": 4,
+    "o1": 3,
+    "gpt-4o": 3,
+    "gpt-4-turbo": 3,
+    "gpt-4": 3,
+    "gpt-3.5": 2,
+    # Google
+    "gemini-2.5-pro": 4,
+    "gemini-2.5-flash": 3,
+    "gemini-2.0-flash": 3,
+    "gemini-2.0-pro": 4,
+    "gemini-1.5-pro": 3,
+    "gemini-1.5-flash": 2,
+}
+
+_DEFAULT_TIER = 2
+
+
+def get_model_tier(model_id: str) -> int:
+    """Return the capability tier (1-4) for a model ID.
+
+    Uses longest-prefix matching against _MODEL_TIERS.
+    Unknown models default to tier 2 (tool-use).
+    """
+    if not model_id:
+        return _DEFAULT_TIER
+    lower = model_id.lower()
+    best_match = 0
+    best_tier = _DEFAULT_TIER
+    for prefix, tier in _MODEL_TIERS.items():
+        if lower.startswith(prefix.lower()) and len(prefix) > best_match:
+            best_match = len(prefix)
+            best_tier = tier
+    return best_tier
+
+
+def get_tier_label(tier: int) -> str:
+    """Return the human-readable label for a tier number."""
+    return TIER_LABELS.get(tier, "unknown")
+
 
 class ProviderManager:
     """Provider configuration, resolution, probing, and lifecycle."""
@@ -341,7 +406,13 @@ def get_available_models(self, provider_name: str, *, require_active: bool = Fal
                 {"id": "claude-haiku-4-5", "name": "Claude Haiku 4.5"},
             ],
         }
-        return _PROVIDER_MODELS.get(provider_name, [])
+        models = _PROVIDER_MODELS.get(provider_name, [])
+        # Enrich each model entry with capability tier
+        for m in models:
+            tier = get_model_tier(m["id"])
+            m["capability_tier"] = tier
+            m["tier_label"] = get_tier_label(tier)
+        return models
 
     # ------------------------------------------------------------------
     # Provider management (config UI)
@@ -374,15 +445,23 @@ async def provider_list(self) -> list[dict[str, Any]]:
             else:
                 setup_hint = None
 
+            models = self.get_available_models(pid)
+            # Derive orchestrator_capable from model tiers (backward compat)
+            max_tier = max((m.get("capability_tier", _DEFAULT_TIER) for m in models), default=_DEFAULT_TIER) if models else _DEFAULT_TIER
+            # Fall back to the static flag for providers with no model list
+            orch_capable = max_tier >= 4 if models else info.get("orchestrator_capable", False)
+
             entry: dict[str, Any] = {
                 "id": pid,
                 "name": info["name"],
                 "description": info["description"],
                 "auth_type": info["auth_type"],
                 "configured": configured,
                 "active": is_active,
-                "orchestrator_capable": info.get("orchestrator_capable", False),
-                "models": self.get_available_models(pid),
+                "orchestrator_capable": orch_capable,
+                "max_capability_tier": max_tier,
+                "max_tier_label": get_tier_label(max_tier),
+                "models": models,
                 "setup_hint": setup_hint,
             }
 
@@ -406,17 +485,22 @@ async def provider_list(self) -> list[dict[str, Any]]:
             pconfig = self._config.providers.get(pid)
             base_url = pconfig.base_url if pconfig else ""
 
+            default_model = pconfig.default_model if pconfig else ""
+            custom_tier = get_model_tier(default_model)
+
             entry = {
                 "id": pid,
                 "name": pid,
                 "description": f"Custom OpenAI-compatible provider ({base_url})",
                 "auth_type": "api_key",
                 "configured": True,
                 "active": is_active,
-                "orchestrator_capable": True,
+                "orchestrator_capable": custom_tier >= 4,
+                "max_capability_tier": custom_tier,
+                "max_tier_label": get_tier_label(custom_tier),
                 "custom": True,
                 "base_url": base_url,
-                "default_model": pconfig.default_model if pconfig else "",
+                "default_model": default_model,
                 "models": [],
                 "setup_hint": None,
             }

atn/runtime/snapshot.py

@@ -6,6 +6,7 @@
 from typing import Any, TYPE_CHECKING
 
 from ..models import AgentStatus, StepType, TaskStatus
+from .provider_manager import get_model_tier, get_tier_label
 
 if TYPE_CHECKING:
     from .agent_registry import AgentRegistry
@@ -124,9 +125,12 @@ def snapshot(self) -> dict:
                 primary_provider = raw_provider
                 fallback_providers = []
             orch_model = orch_defn.cognitive_model or ""
+            orch_tier = get_model_tier(orch_model)
             orch_info = {
                 "provider": primary_provider,
                 "model": orch_model,
+                "capability_tier": orch_tier,
+                "tier_label": get_tier_label(orch_tier),
                 "available_models": self.provider_manager.get_available_models(primary_provider),
                 "fallback_providers": fallback_providers,
             }