@autodevjapan/godd-mcp-alpha 3.6.0 → 3.8.0

package/docs/adapter-contracts.md

@@ -143,6 +143,21 @@ const { module } = await runtime.compile({
 });
 ```
 
+`spawnCompileCacheEvaluator` accepts only a `godd-native` binary whose bytes match
+the committed package manifest. It materializes the verified bytes, probes that
+copy with `handshake show --json` (5000 ms timeout, 65536-byte stdout limit,
+empty stderr, and no `GODD_*` probe environment variables). During the committed
+`advisory` migration stage, an H1–H11 rejection writes its safe receipt to the
+parent stderr and starts the same L3-verified package binary. The later
+`required` stage will block that launch after the 4-target and override/source
+checkout checks are complete. This subpath does not accept unverified overrides;
+the package-local binary must pass L3 integrity verification. The NDJSON
+stdin/stdout pipes remain attached, the child window is hidden on Windows, and
+the verified temporary copy is cleaned when the child closes or fails. Integrity
+failures throw `CompileCacheRuntimeError` with code `NATIVE_INTEGRITY_REJECTED`;
+required-stage handshake failures use `NATIVE_HANDSHAKE_REJECTED` and expose the
+stable handshake reason in `handshakeReasonCode`.
+
 - **The compiler stays yours.** `compile` is injected. The runtime never starts
   a Next.js runtime or an MDX compiler, and the compiled module is opaque to it.
 - **One timer owner.** `startReconcileTimer()` throws if called twice on the

package/native-assets.json

@@ -1,8 +1,8 @@
 {
-  "schemaVersion": 2,
-  "releaseTag": "godd-native-v0.2.56",
-  "expectedVersion": "godd-native 0.2.56",
-  "sourceCommit": "dab9ff17cdb73f262c29e972c378fc73aebc1d5c",
+  "schemaVersion": 3,
+  "releaseTag": "godd-native-v0.2.59",
+  "expectedVersion": "godd-native 0.2.59",
+  "sourceCommit": "43c093416bd9830d683750c6ce05b016813435e3",
   "capabilities": [
     "autonomy",
     "cobol-evidence",
@@ -16,30 +16,83 @@
     "plan-audit",
     "research"
   ],
-  "baselineBytes": 45499484,
+  "handshakeProtocol": {
+    "supportedProtocolMajors": [
+      1
+    ],
+    "minimumProtocolMinorByMajor": {
+      "1": 1
+    }
+  },
+  "capabilityCatalogDigest": "7fd64d8c567f76c32bb18711a8a0aa616df842da10d0e5ca4685a878fd68fb3d",
+  "routedCommands": [
+    "autonomy",
+    "codec-capability",
+    "compile-cache",
+    "content-generation",
+    "dataset-coverage",
+    "evidence-cobol",
+    "gateway-operations",
+    "godd-a-dir",
+    "learn-skill",
+    "managed-gitignore",
+    "operate",
+    "peer-summary",
+    "plan-audit",
+    "realtime-admission",
+    "realtime-admission-dev",
+    "research",
+    "shard-partition",
+    "test-evidence"
+  ],
+  "routedCommandEntryDigests": {
+    "autonomy": "9968e855a0dfbb8c861b41a9ef77c07b6bef6021e2b519098882a66c533df17f",
+    "codec-capability": "c42a0a334e7744fd47c040c2e5c09dff624eee02fbea1cd01a721f35b57520bd",
+    "compile-cache": "cd4949c86b20fa19a8ca83646424e2f2ab15a2b652c343c8b443b697c6fdc539",
+    "content-generation": "e4c5e1731fa9f3439e62a19a1d4c9cb21efdc28162731e51116a194cf6bf4b4f",
+    "dataset-coverage": "31be076baa2b47e7851adbd42d0885d3a6f902b56133ea3384991772df66a88b",
+    "evidence-cobol": "086ee7120c4db890b9e2de627fc00b2c843939b07e014553f2549ad219203f8b",
+    "gateway-operations": "97218eff67bfb58c600ee4988b3e1dcf7071fe15f0a9acdcf94fdb885e1d1a2f",
+    "godd-a-dir": "7810bf4642150849d45f6031cb4bfe7e8834c4000356d77e3f7d2f0e8f9dd1aa",
+    "learn-skill": "e8cb2f1bf1fe59cfa4ed2cee070ff753c8f2595e91f9eadf2f43d64812793f43",
+    "managed-gitignore": "487b7167c4f4d7691b105e550c1e06c71113a434258c4f8525b90a86f75db73e",
+    "operate": "2f619fe4b46c760b966bc1890f0380b048958fc70d27c79e3df38df79405170a",
+    "peer-summary": "b0f612e5b5c5f90c9a97486a5bdac22999dd21a609ccbf2e5431351a52c2d3c3",
+    "plan-audit": "9bc81d0ac70c62917cbd0d8c6b9723428c4a170e8fb48165e1fa64ced768a28c",
+    "realtime-admission": "200468566f677d5b82d1ef2d9ce76855bba5a40998a512a1539bb9dcadcd81c8",
+    "realtime-admission-dev": "cab9e64721cb7f9442797744a193a12d2aa3a5d4a71234f60173b291c19ed0a6",
+    "research": "a2b9cc8a7cf3499891f4d7fa4f4b603df2d28baf77a02397bd718224e7cfefad",
+    "shard-partition": "0f90efb80a81187e9031a3cf7779c238959ac706bf7742affe6e4a562da5d645",
+    "test-evidence": "12814a80813f56bf013729b8f01e520e94adbfc6561c607acfa952a9a56bf764"
+  },
+  "baselineBytes": 45518964,
   "maximumAssetBytes": 50000000,
   "maximumTarballBytes": 25000000,
   "maximumUnpackedBytes": 55000000,
   "targets": {
     "darwin-arm64": {
       "artifact": "godd-native-aarch64-apple-darwin",
-      "bytes": 9692320,
-      "sha256": "b4722e50c11704a9cc54d837f174f488e1fa263a30c292497020e7aed0170b31"
+      "targetTriple": "aarch64-apple-darwin",
+      "bytes": 9692336,
+      "sha256": "edc8b4ddf2413cd781e46a6f28351f86846a0d70c54be7c5878369b6daa289a9"
     },
     "darwin-x64": {
       "artifact": "godd-native-x86_64-apple-darwin",
-      "bytes": 10748296,
-      "sha256": "a18a26afe4d4467d71b76736ee786d1634b979977c057ed9448a7bab8c97969c"
+      "targetTriple": "x86_64-apple-darwin",
+      "bytes": 10752400,
+      "sha256": "4554c598d0502a6c59123d67a684e935b6c28b97975cb9d6cccc617e52e05f4f"
     },
     "linux-x64": {
       "artifact": "godd-native-x86_64-unknown-linux-musl",
-      "bytes": 11810608,
-      "sha256": "41f76b3c7b87b29dd212f7786090fb4ce212b1b1f005bc0edc85474466717679"
+      "targetTriple": "x86_64-unknown-linux-musl",
+      "bytes": 11814704,
+      "sha256": "20047d950aa4c37a4b1a2b90435f98f86d66819ed0245977cbdab92c69f760fa"
     },
     "win32-x64": {
       "artifact": "godd-native-x86_64-pc-windows-msvc.exe",
-      "bytes": 13248000,
-      "sha256": "4a2deceaa61b02072c595885bdb21ce7163690581436fd104e69ddf1adf3d316"
+      "targetTriple": "x86_64-pc-windows-msvc",
+      "bytes": 13259264,
+      "sha256": "a9f4de4e9277a0d9a6de6da6354dbfebf33e55236a36dd346fb0f528b1ac1573"
     }
   }
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@autodevjapan/godd-mcp-alpha",
-  "version": "3.6.0",
+  "version": "3.8.0",
   "type": "module",
   "description": "Governed AI development workflows that turn natural-language intent into specifications, tested code, reviews, documentation, and shippable pull requests.",
   "license": "UNLICENSED",
@@ -73,8 +73,8 @@
     "godd"
   ],
   "scripts": {
-    "build": "pnpm generate:native-catalog && node esbuild.config.js && tsc --ignoreConfig src/audio-length-adapter-contract.ts src/media-interval-adapter-contract.ts src/compile-cache-adapter-contract.ts src/compile-cache-runtime.ts --declaration --emitDeclarationOnly --declarationMap false --outDir dist --module ES2022 --target ES2022 --moduleResolution bundler --resolveJsonModule --types node --skipLibCheck",
-    "build:release": "pnpm generate:native-catalog && GODD_BUILD_MODE=release node esbuild.config.js && tsc --ignoreConfig src/audio-length-adapter-contract.ts src/media-interval-adapter-contract.ts src/compile-cache-adapter-contract.ts src/compile-cache-runtime.ts --declaration --emitDeclarationOnly --declarationMap false --outDir dist --module ES2022 --target ES2022 --moduleResolution bundler --resolveJsonModule --types node --skipLibCheck",
+    "build": "pnpm generate:native-catalog && node esbuild.config.js && tsc --ignoreConfig src/audio-length-adapter-contract.ts src/media-interval-adapter-contract.ts src/compile-cache-adapter-contract.ts src/compile-cache-runtime.ts --declaration --emitDeclarationOnly --declarationMap false --rootDir src --outDir dist --module ES2022 --target ES2022 --moduleResolution bundler --resolveJsonModule --types node --skipLibCheck",
+    "build:release": "pnpm generate:native-catalog && GODD_BUILD_MODE=release node esbuild.config.js && tsc --ignoreConfig src/audio-length-adapter-contract.ts src/media-interval-adapter-contract.ts src/compile-cache-adapter-contract.ts src/compile-cache-runtime.ts --declaration --emitDeclarationOnly --declarationMap false --rootDir src --outDir dist --module ES2022 --target ES2022 --moduleResolution bundler --resolveJsonModule --types node --skipLibCheck",
     "generate:native-catalog": "tsx scripts/generate-native-catalog.ts",
     "anchor:keyring": "tsx scripts/registry-anchor-keyring.ts",
     "catalog:generate": "tsx scripts/generate-command-catalog.ts",
@@ -93,7 +93,7 @@
     "quality-gate:execution-mode-parity-docker": "docker buildx build --load --no-cache-filter gate --file docker/execution-mode-parity.Dockerfile --tag godd-execution-parity-gate:local .."
   },
   "dependencies": {
-    "@modelcontextprotocol/sdk": "1.30.1",
+    "@modelcontextprotocol/sdk": "1.31.0",
     "koffi": "3.3.2",
     "yaml": "^2.9.1",
     "zod": "4.6.5"

package/scripts/native-assets.js

@@ -6,26 +6,37 @@ import { fileURLToPath } from "node:url";
 const packageRoot = join(dirname(fileURLToPath(import.meta.url)), "..");
 const MANIFEST_KEYS = [
   "baselineBytes",
+  "capabilityCatalogDigest",
   "capabilities",
   "expectedVersion",
+  "handshakeProtocol",
   "maximumAssetBytes",
   "maximumTarballBytes",
   "maximumUnpackedBytes",
   "releaseTag",
+  "routedCommandEntryDigests",
+  "routedCommands",
   "schemaVersion",
   "sourceCommit",
   "targets",
 ];
-const TARGET_KEYS = ["artifact", "bytes", "sha256"];
+const TARGET_KEYS = ["artifact", "bytes", "sha256", "targetTriple"];
 const EXPECTED_TARGET_ARTIFACTS = Object.freeze({
   "darwin-arm64": "godd-native-aarch64-apple-darwin",
   "darwin-x64": "godd-native-x86_64-apple-darwin",
   "linux-x64": "godd-native-x86_64-unknown-linux-musl",
   "win32-x64": "godd-native-x86_64-pc-windows-msvc.exe",
 });
+const EXPECTED_TARGET_TRIPLES = Object.freeze({
+  "darwin-arm64": "aarch64-apple-darwin",
+  "darwin-x64": "x86_64-apple-darwin",
+  "linux-x64": "x86_64-unknown-linux-musl",
+  "win32-x64": "x86_64-pc-windows-msvc",
+});
 const SHA256_PATTERN = /^[0-9a-f]{64}$/;
 const COMMIT_PATTERN = /^[0-9a-f]{40}$/;
 const CAPABILITY_PATTERN = /^[a-z][a-z0-9-]{0,63}$/;
+const ROUTED_COMMAND_PATTERN = /^[a-z0-9]+(?:-[a-z0-9]+)*$/;
 const RELEASE_TAG_PATTERN = /^godd-native-v(\d+\.\d+\.\d+)$/;
 const SIDECAR_BYTES = 65;
 const HARD_MAX_UNPACKED_BYTES = 64_000_000;
@@ -53,8 +64,8 @@ function requirePositiveInteger(value, label) {
 
 export function validateNativeManifest(value) {
   requireExactKeys(value, MANIFEST_KEYS, "Native manifest");
-  if (value.schemaVersion !== 2) {
-    throw new Error("Native manifest schemaVersion must be 2");
+  if (value.schemaVersion !== 3) {
+    throw new Error("Native manifest schemaVersion must be 3");
   }
   const tagMatch =
     typeof value.releaseTag === "string"
@@ -83,6 +94,55 @@ export function validateNativeManifest(value) {
   ) {
     throw new Error("Native manifest capabilities are invalid");
   }
+  if (!isRecord(value.handshakeProtocol)) {
+    throw new Error("Native manifest handshakeProtocol is invalid");
+  }
+  requireExactKeys(
+    value.handshakeProtocol,
+    ["minimumProtocolMinorByMajor", "supportedProtocolMajors"],
+    "Native manifest handshakeProtocol",
+  );
+  const supportedProtocolMajors = value.handshakeProtocol.supportedProtocolMajors;
+  const minimumProtocolMinorByMajor = value.handshakeProtocol.minimumProtocolMinorByMajor;
+  if (
+    !Array.isArray(supportedProtocolMajors) ||
+    supportedProtocolMajors.length === 0 ||
+    !supportedProtocolMajors.every((major) => Number.isSafeInteger(major) && major > 0 && major <= 0xffff) ||
+    new Set(supportedProtocolMajors).size !== supportedProtocolMajors.length ||
+    JSON.stringify(supportedProtocolMajors) !==
+      JSON.stringify([...supportedProtocolMajors].sort((left, right) => left - right)) ||
+    !isRecord(minimumProtocolMinorByMajor)
+  ) {
+    throw new Error("Native manifest handshakeProtocol values are invalid");
+  }
+  const expectedMajorKeys = supportedProtocolMajors.map(String).sort();
+  if (JSON.stringify(Object.keys(minimumProtocolMinorByMajor).sort()) !== JSON.stringify(expectedMajorKeys)) {
+    throw new Error("Native manifest handshakeProtocol major map is invalid");
+  }
+  for (const major of supportedProtocolMajors) {
+    const minimumMinor = minimumProtocolMinorByMajor[String(major)];
+    if (!Number.isSafeInteger(minimumMinor) || minimumMinor < 0 || minimumMinor > 0xffff) {
+      throw new Error(`Native manifest minimum protocol minor is invalid for major ${major}`);
+    }
+  }
+  if (typeof value.capabilityCatalogDigest !== "string" || !SHA256_PATTERN.test(value.capabilityCatalogDigest)) {
+    throw new Error("Native manifest capabilityCatalogDigest is invalid");
+  }
+  if (
+    !Array.isArray(value.routedCommands) ||
+    value.routedCommands.length === 0 ||
+    !value.routedCommands.every((command) => typeof command === "string" && ROUTED_COMMAND_PATTERN.test(command)) ||
+    new Set(value.routedCommands).size !== value.routedCommands.length ||
+    JSON.stringify(value.routedCommands) !== JSON.stringify([...value.routedCommands].sort())
+  ) {
+    throw new Error("Native manifest routedCommands are invalid");
+  }
+  requireExactKeys(value.routedCommandEntryDigests, value.routedCommands, "Native manifest route entry digests");
+  for (const command of value.routedCommands) {
+    if (typeof value.routedCommandEntryDigests[command] !== "string" || !SHA256_PATTERN.test(value.routedCommandEntryDigests[command])) {
+      throw new Error(`Native manifest route entry digest is invalid for ${command}`);
+    }
+  }
   requirePositiveInteger(value.baselineBytes, "baselineBytes");
   requirePositiveInteger(value.maximumAssetBytes, "maximumAssetBytes");
   requirePositiveInteger(value.maximumTarballBytes, "maximumTarballBytes");
@@ -108,6 +168,9 @@ export function validateNativeManifest(value) {
     if (entry.artifact !== expectedArtifact) {
       throw new Error(`Native manifest artifact mismatch for ${target}`);
     }
+    if (entry.targetTriple !== EXPECTED_TARGET_TRIPLES[target]) {
+      throw new Error(`Native manifest target triple mismatch for ${target}`);
+    }
     if (artifacts.has(entry.artifact)) {
       throw new Error(`Native manifest artifact is duplicated: ${entry.artifact}`);
     }
@@ -173,12 +236,12 @@ export const EXPECTED_NATIVE_ASSET_FILES = Object.freeze(
 // 気づけない）。到達前に検知するため、警告用の閾値と ratchet 上限を定義する。
 export const NATIVE_ASSET_HEADROOM_WARNING_BYTES = 2_000_000;
 
-// `godd-native-v0.2.56` の exact baseline を、意味のある追加増加を止める
+// `godd-native-v0.2.59` の exact baseline を、意味のある追加増加を止める
 // non-cumulative ratchet として固定する。absolute ceiling は別途50MBで維持する。
-// 4 binary の receipt 合計45,499,224 bytesに、4つの65-byte `.sha256` sidecarを加える。
-// release run 36821298261 のreceipt・API size/digest・sidecar実物を照合した。
-// sourceはdab9ff17cdb73f262c29e972c378fc73aebc1d5c。50MBまでの残余は4,500,516 bytes。
-export const NATIVE_ASSET_BASELINE_CEILING_BYTES = 45_499_484;
+// 4 binary の receipt 合計45,518,704 bytesに、4つの65-byte `.sha256` sidecarを加える。
+// release run 36973505369 のsealed receipt・公開API size/digest・全asset実物を照合した。
+// sourceは43c093416bd9830d683750c6ce05b016813435e3。50MBまでの残余は4,481,036 bytes。
+export const NATIVE_ASSET_BASELINE_CEILING_BYTES = 45_518_964;
 
 /**
  * 現在の昇格済みreleaseを上限とし、1 byteでも追加増加すれば拒否するratchet。