M7.1: extract nisse-core

What isn't the dev agent's moves to nisse-core, unchanged in behaviour,
with its tests: canonical, render, render_anthropic, llm, catalog, probe,
context, views, state, reconcile, worker, cancel, dump, transport, matrix,
execution, testing, vault, memory, oplog, envfile and gitea (whole).

- nisse_core.state.StateStore holds the tables every agent has; an
  agent's subclass adds its tables (version, migrations), roles and
  views. nisse_dev.state.StateStore adds the build VM blocks (v5).
- views.project takes what each role is shown, rather than a fixed table.
- Vault takes the agent's name (agent=), for provenance.
- A test that nisse_core never imports an agent.
- The loop, config, git, delegation, expert, tools and evals stay in
  nisse-dev until nisse-ops has a loop to share.

Docs: the Development Plan marks M7.1 done and notes that Phase 6 waits on
the agent host and Terraform; Architecture Part L names the package.

Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01J5Utyfzw7gF7UhjRDEtjTk

nisse-dev/src/nisse_dev/loop/agent.py

@@ -34,8 +34,8 @@ from nisse_core.actions import (
     Action,
     Verdict,
 )
-from nisse_dev.cancel import Cancel
-from nisse_dev.canonical import (
+from nisse_core.cancel import Cancel
+from nisse_core.canonical import (
     ActionVerdict,
     DelegationCompleted,
     DelegationStarted,
@@ -46,13 +46,19 @@ from nisse_dev.canonical import (
     ToolResult,
     UserMessage,
 )
+from nisse_core.execution import HostKeyChanged, HostUnavailable
+from nisse_core.gitea import GiteaClient, GiteaError, Issue, PullRequest
+from nisse_core.llm import LLMError, RoleMap
+from nisse_core.memory import Memory
+from nisse_core.oplog import OpLog
+from nisse_core.state import WorkItem
+from nisse_core.transport import InboundMessage, Transport
+from nisse_core.vault import Vault, VaultError
+from nisse_core.worker import Worker
 from nisse_dev.config import GENERAL
 from nisse_dev.delegation import DELEGATION_INTENT, Delegation
-from nisse_dev.execution import HostKeyChanged, HostUnavailable
 from nisse_dev.expert import BudgetExhausted, ExpertDesk
 from nisse_dev.git import GitError
-from nisse_dev.gitea import GiteaClient, GiteaError, Issue, PullRequest
-from nisse_dev.llm import LLMError, RoleMap
 from nisse_dev.loop import preflight
 from nisse_dev.loop.actions import classify, commits
 from nisse_dev.loop.classifier import IN_SCOPE, ActionClassifier, Scope
@@ -99,13 +105,8 @@ from nisse_dev.loop.tools import (
     TOOLCHAIN_STEP,
     WAIT_FOR_REVIEW,
 )
-from nisse_dev.memory import Memory
-from nisse_dev.oplog import OpLog
-from nisse_dev.state import StateStore, WorkItem
+from nisse_dev.state import StateStore
 from nisse_dev.tools import EXECUTION_TOOLS, Workspace
-from nisse_dev.transport import InboundMessage, Transport
-from nisse_dev.vault import Vault, VaultError
-from nisse_dev.worker import Worker
 
 INTAKE_INTERVAL_S = 30.0
 _GO = frozenset({"go", "approve"})

nisse-dev/src/nisse_dev/loop/build.py

@@ -7,29 +7,29 @@ import threading
 from collections.abc import Callable
 from dataclasses import dataclass
 
-from nisse_dev.cancel import Cancel
-from nisse_dev.catalog import ModelCatalog, select_client
+from nisse_core.cancel import Cancel
+from nisse_core.catalog import ModelCatalog, select_client
+from nisse_core.context import BudgetedClient
+from nisse_core.execution import SSHHost
+from nisse_core.gitea import GiteaClient
+from nisse_core.llm import AnthropicPassthroughClient, LiteLLMClient
+from nisse_core.matrix import MatrixTransport
+from nisse_core.memory import Memory
+from nisse_core.oplog import OpLog
+from nisse_core.vault import Vault
+from nisse_core.worker import SerialWorker
 from nisse_dev.config import AgentConfig, ConfigError
 from nisse_dev.config import Project as ProjectEntry
-from nisse_dev.context import BudgetedClient
 from nisse_dev.delegation import Caps
-from nisse_dev.execution import SSHHost
 from nisse_dev.git import GitRepo, HTTPSToken, PushCredential, SSHKey
-from nisse_dev.gitea import GiteaClient
-from nisse_dev.llm import AnthropicPassthroughClient, LiteLLMClient
 from nisse_dev.loop.agent import LoopAgent, Project
 from nisse_dev.loop.classifier import ActionClassifier
 from nisse_dev.loop.driver import Driver
 from nisse_dev.loop.help import Helpers
 from nisse_dev.loop.milestones import Milestones
 from nisse_dev.loop.reader import GoAheadReader
-from nisse_dev.matrix import MatrixTransport
-from nisse_dev.memory import Memory
-from nisse_dev.oplog import OpLog
 from nisse_dev.state import StateStore
 from nisse_dev.tools import Workspace
-from nisse_dev.vault import Vault
-from nisse_dev.worker import SerialWorker
 
 # How long shutdown waits for running work before leaving the store to the
 # durability layer (L8). A milestone can run far longer than a service
@@ -301,7 +301,12 @@ def build_loop_agent(
     )
     transport = MatrixTransport(config.matrix)
     vault = (
-        Vault(config.vault.root, config.vault.folders, ignore=config.vault.ignore)
+        Vault(
+            config.vault.root,
+            config.vault.folders,
+            agent="nisse-dev",
+            ignore=config.vault.ignore,
+        )
         if config.vault
         else None
     )

nisse-dev/src/nisse_dev/loop/classifier.py

@@ -17,8 +17,8 @@ from dataclasses import dataclass
 from typing import Any
 
 from nisse_core.actions import CONTAINED, DANGEROUS, Action, Verdict
-from nisse_dev.canonical import StoredEvent, ToolCall, UserMessage
-from nisse_dev.llm import LLMClient, LLMError
+from nisse_core.canonical import StoredEvent, ToolCall, UserMessage
+from nisse_core.llm import LLMClient, LLMError
 
 SAFE = "safe"
 IN_SCOPE = "in_scope"

nisse-dev/src/nisse_dev/loop/driver.py

@@ -11,11 +11,11 @@ from collections.abc import Callable, Mapping
 from dataclasses import dataclass
 from typing import Any, Literal
 
-from nisse_dev.cancel import Cancel, skip_calls
-from nisse_dev.canonical import AssistantText, Fact, ToolCall, ToolResult
-from nisse_dev.llm import LLMClient, LLMError
+from nisse_core.cancel import Cancel, skip_calls
+from nisse_core.canonical import AssistantText, Fact, ToolCall, ToolResult
+from nisse_core.llm import LLMClient, LLMError
+from nisse_core.state import Transcript
 from nisse_dev.loop.tools import WAITING, names
-from nisse_dev.state import Transcript
 from nisse_dev.tools import Workspace
 
 DEFAULT_MAX_TURNS = 30

nisse-dev/src/nisse_dev/loop/help.py

@@ -11,10 +11,10 @@ half-edited tree).
 from collections.abc import Callable, Mapping
 from dataclasses import dataclass, field
 
+from nisse_core.llm import LLMClient, RoleMap
 from nisse_dev.config import Profile
 from nisse_dev.delegation import Caps
 from nisse_dev.expert import DEFAULT_BUDGET
-from nisse_dev.llm import LLMClient, RoleMap
 from nisse_dev.loop.tools import _tool
 
 DELEGATE = _tool(

nisse-dev/src/nisse_dev/loop/items.py

@@ -8,7 +8,8 @@ agreement, what it is waiting for) is in ``data["loop"]``.
 from dataclasses import asdict, dataclass
 from typing import Any
 
-from nisse_dev.state import StateStore, WorkItem
+from nisse_core.state import WorkItem
+from nisse_dev.state import StateStore
 
 READY = "ready"
 RUNNING = "running"  # a driver run is under way; on boot it means interrupted

nisse-dev/src/nisse_dev/loop/milestones.py

@@ -13,8 +13,8 @@ import uuid
 from dataclasses import dataclass
 from typing import Literal
 
+from nisse_core.gitea import GiteaClient, GiteaError, PullRequest
 from nisse_dev.git import GitError, GitRepo, PushCredential
-from nisse_dev.gitea import GiteaClient, GiteaError, PullRequest
 from nisse_dev.state import StateStore
 
 OPEN_PR = "open_pr"

nisse-dev/src/nisse_dev/loop/preflight.py

@@ -21,7 +21,7 @@ from dataclasses import dataclass, field
 from typing import Any
 
 from nisse_core.actions import split_shell, unwrap
-from nisse_dev.execution import SSHHost
+from nisse_core.execution import SSHHost
 
 # What the harness itself runs on a build VM (L13, D4): part of the
 # template, never of a project's toolchain.

nisse-dev/src/nisse_dev/loop/reader.py

@@ -10,8 +10,8 @@ The driver's model reads for now; the classifier role takes over in M2.6.
 
 from typing import Any
 
-from nisse_dev.canonical import StoredEvent, ToolCall, UserMessage
-from nisse_dev.llm import LLMClient, LLMError
+from nisse_core.canonical import StoredEvent, ToolCall, UserMessage
+from nisse_core.llm import LLMClient, LLMError
 
 
 def command_form(text: str) -> str: