Thalos.NET 0.1.1

Thalos.NET

Named after Talos, the bronze guardian of Crete. Spelled Thalos because Talos.* is taken on nuget.org.

A Hermes-style, ZeroAlloc-native agent framework for .NET, built on Microsoft Agent Framework with first-class AI.Sentinel security and Model Context Protocol tools.

Targets net8.0 and net10.0.

Quick start

services.AddThalos(thalos => thalos
    .UseAnthropic(configuration)                       // Thalos:Anthropic section; ApiKey falls back to ANTHROPIC_API_KEY
    .UseAISentinel(o => o.EmbeddingGenerator = myEmbeddings)   // see the security note below
    .UseInMemorySessionStore()
    .AddMcpServersFromFile(Path.Combine(AppContext.BaseDirectory, ".mcp.json"))
    .RequireToolPolicy("roslyn__apply_*", "developer")
    .AddPolicy<DeveloperPolicy>()                      // any ZeroAlloc.Authorization [Policy("developer")]
    .AddAgent(new AgentDefinition
    {
        Id = AgentId.Parse("01ARZ3NDEKTSV4RRFFQ69G5FAV", null),
        Name = "Architect",
        Instructions = "You are a senior .NET architect. Use the roslyn tools to answer precisely.",
        Tools = ["roslyn__*"],
    }));

var runtime = provider.GetRequiredService<IAgentRuntime>();
var session = await runtime.CreateSessionAsync(agentId, caller, ct);           // caller: ISecurityContext supplied by the channel
var turn = await runtime.RunTurnAsync(new AgentTurnRequest(session.Value, "Who calls TaskRepository.UpdateAsync?", caller), ct);

await foreach (var evt in runtime.RunTurnStreamingAsync(new AgentTurnRequest(session.Value, "…", caller), ct))
{
    // TextDeltaEvent, ToolCallStartedEvent, ToolCallFinishedEvent, UsageEvent, TurnCompletedEvent | TurnFailedEvent
}

Tool names exposed to the model are {source}__{tool} (e.g. roslyn__find_callers); AgentDefinition.Tools and RequireToolPolicy take globs over that qualified name. Authorization is enforced by Thalos at the function boundary — before the tool runs — not by inspecting the chat stream afterwards.

A runnable REPL lives in samples/Thalos.Sample.Console.

Security: AI.Sentinel needs an embedding generator

AI.Sentinel 2.0.1's security detectors (prompt injection, jailbreak, exfiltration, …) are semantic. Without SentinelOptions.EmbeddingGenerator they return Clean and only the lexical/operational detectors run — UseAISentinel() with no embedding generator is not prompt-injection protection. Wire a real IEmbeddingGenerator (Ollama, OpenAI, …):

.UseAISentinel(o =>
{
    o.EmbeddingGenerator = embeddingGenerator;   // IEmbeddingGenerator<string, Embedding<float>>
    o.OnCritical = SentinelAction.Quarantine;    // surfaces as AgentError.Quarantined ("<Severity>: <DetectorId>")
    o.OnHigh = SentinelAction.Alert;
})

Local development against Daedalus

Until the packages are on nuget.org, consumers (Daedalus, phase 1.1) build from a local folder feed:

pwsh scripts/pack-local.ps1          # → C:\Projects\Prive\.nuget-local\Thalos.NET*.0.1.0-local.<timestamp>.nupkg

The script prints the exact version. In the consuming repo:

nuget.config (next to the solution):

<?xml version="1.0" encoding="utf-8"?>
<configuration>
  <packageSources>
    <clear />
    <add key="nuget.org" value="https://api.nuget.org/v3/index.json" />
    <add key="thalos-local" value="C:\Projects\Prive\.nuget-local" />
  </packageSources>
</configuration>

Directory.Packages.props (central package management):

<ItemGroup>
  <PackageVersion Include="Thalos.NET.Abstractions" Version="0.1.0-local.20260816120000" />
  <PackageVersion Include="Thalos.NET"              Version="0.1.0-local.20260816120000" />
  <PackageVersion Include="Thalos.NET.Testing"      Version="0.1.0-local.20260816120000" />
  <PackageVersion Include="Thalos.NET.Mcp"          Version="0.1.0-local.20260816120000" />
  <PackageVersion Include="Thalos.NET.Anthropic"    Version="0.1.0-local.20260816120000" />
  <PackageVersion Include="Thalos.NET.Sentinel"     Version="0.1.0-local.20260816120000" />
</ItemGroup>

Re-run the script and bump the pin after every change to Thalos.NET (NuGet caches by exact version, so never re-pack the same version — the timestamp suffix guarantees a fresh one). If a stale package is still picked up, clear %USERPROFILE%\.nuget\packages\thalos.net*.

Building

dotnet build              # 0 warnings — TreatWarningsAsErrors with Meziantou, Roslynator and ZeroAlloc analyzers
dotnet test               # unit, MCP (launches tests/Thalos.NET.Tests.McpServer over stdio), Sentinel, architecture

Versioning and releases

Same setup as Rag.NET; the runbook is docs/release.md.

• Versions come from git history via GitVersion (dotnet tool restore && dotnet dotnet-gitversion); nothing is hand-edited. Stable versions only — no prereleases are published.
• Releases are cut by release-please from conventional commits (enforced on PRs by commitlint): dispatch → review/merge the release PR → dispatch → vX.Y.Z tag + GitHub release.
• CI (.github/workflows/ci.yml) builds and tests on Ubuntu and Windows on every push/PR, packs and validates the six packages, and rehearses the nuget.org push against a local feed. Publishing to nuget.org is a manual dispatch with publish_to_nuget=true on the tagged release commit, using nuget.org Trusted Publishing (no stored API key).

Status: 0.1.0 — API is unstable until 1.0.