@awak-app/simy-cli 0.2.3 → 0.4.0

package/README.md

@@ -1,6 +1,6 @@
 # SIMY CLI
 
-Local execution agent for SIMY Agentic Loop runs.
+Local execution agent for SIMY Local Tasks and Agentic Loop runs.
 
 For normal use, install SIMY globally and keep its background agent running:
 
@@ -44,6 +44,95 @@ the Provider command boundary, and permits exactly one Provider invocation. It
 does not create an Agentic Loop ledger, audit session, or retry lifecycle for
 that task.
 
+## Local Tasks
+
+CLI API contract v9 promotes non-coding work to a first-class **Local Task**
+runtime. A Local Task is separate from Agentic Loop: it runs one bounded Codex
+or Claude Code session without Git branches, pull requests, audits, or automatic
+Provider retries. Knowledge-work deliverables use an isolated task sandbox by
+default, so they do not require a repository.
+
+`POST /v1/local-tasks/start` accepts JSON or the same verified multipart
+attachment envelope used by Agentic Loop and requires a stable
+`Idempotency-Key`. Repeating the same request returns the original task; using
+the same key for different content returns
+`LOCAL_TASK_IDEMPOTENCY_CONFLICT`. `GET /v1/local-tasks/reconcile` with the same
+header recovers a task when the original response was lost. Only the key hash is
+persisted. Task state, verified inputs, and the event log stay under
+`~/.simy/tasks/<task-id>/`. Tasks that do not need a Git
+repository run in `~/simy/<task-id>/`, with generated files in its `outputs/`
+directory. The public snapshot exposes this user-facing workspace as
+`workspace_display_path` without exposing internal state paths. Set
+`SIMY_LOCAL_TASK_WORKSPACE_ROOT` to override the default workspace root.
+
+Local Tasks provide:
+
+- `GET /v1/local-tasks/<id>` for the current structured snapshot;
+- `GET /v1/local-tasks/reconcile` for request-key reconciliation;
+- `GET /v1/local-tasks/<id>/stream` for live Server-Sent Events;
+- `POST /v1/local-tasks/<id>/control` with `{"action":"stop"}`;
+- `GET /v1/local-tasks/<id>/artifacts/<artifact-id>` for a verified output;
+- one Provider invocation, a configurable Provider-token safety budget, and a
+  bounded runtime timeout;
+- restart-safe terminal persistence. An interrupted active task fails closed
+  after CLI restart and is never replayed automatically.
+
+Interactive Pipelines can use the same daemon worker for a `local_task` node.
+The CLI still invokes the selected Provider exactly once. Before the node is
+reported as successful, every output file is re-verified, uploaded through a
+task-bound short-lived URL, and committed only after SIMY rechecks its byte
+size and SHA-256 digest. Ordinary My AI Local Tasks keep their existing local
+verified-download behavior. Scheduled or unattended Pipeline runs are not
+allowed to select a desktop implicitly.
+
+Web and Backend may opt into `durable_local_task_steps` for a versioned
+multi-step Local Task. The daemon then claims and executes one closed-schema
+step at a time (maximum eight), with an independent Provider invocation
+boundary per step and aggregate step, token, and runtime budgets. The task
+workspace is stable for the turn while each lease attempt has its own local
+record. A step that crossed its Provider boundary is never replayed
+automatically.
+
+Plan initialization uses a two-phase claim. Web stores an authoritative
+`execution_spec.controlled_plan`; the CLI validates that its Provider,
+operation, permission, repository, approval target, and aggregate budgets
+cannot exceed the enclosing execution spec, then submits the exact plan for
+Backend persistence. The CLI never asks a Provider to infer or expand a plan.
+Older one-shot requests receive a deterministic one-step compatibility plan.
+
+Human approval and unknown Provider results are distinct non-executable
+dispositions. Neither holds a Provider process, heartbeat lease, or update
+work reservation. Only bounded summaries and verified artifact references from
+completed steps may enter the next step's context. Unknown plan fields,
+unscoped approvals, unsafe paths, and Provider-supplied risk metadata fail
+closed. The original `local_task_execution.v1` one-shot path remains available
+unchanged for clients that do not negotiate this feature.
+
+Contract 10 additionally advertises `bounded_local_task_subtasks`. Backend
+admits at most two Provider children at once from a closed `parallel_reads`
+plan with 2-4 source-bound candidates. When Crew declines or times out, the
+same v2 contract can admit one `serial_uploaded` read-only child for 2-4
+uploaded sources; this fallback never routes those uploads through the v1 CLI
+staging materializer. The CLI never prefetches beyond an available execution slot:
+each child starts only after a fenced server claim and an explicitly confirmed
+invocation boundary. Children inherit the parent Provider and model, run in
+separate read-only task sandboxes, receive only verified immutable SIMY uploads,
+and cannot use mutation tools or nested delegation. Downloaded bytes are checked
+against the claimed size and SHA-256 digest, then exposed through a mode `0400`
+file without revealing the storage URI to the Provider.
+
+Cancellation uses one pool-wide abort signal and prevents new claims. Unknown
+invocation or final-status boundaries are never replayed automatically. Sibling
+fan-in summaries remain explicitly untrusted data, and all lease, generation,
+budget, usage, and elapsed-time bigint fields cross the JSON boundary as
+canonical decimal strings. The contract 9 `durable_local_task_steps` path
+remains serial and unchanged.
+
+External side effects such as sending messages, submitting forms, uploading, or
+purchasing are outside this MVP. The router rejects them instead of silently
+granting broad permissions. The legacy `/v1/direct-execution/*` contract remains
+available for older Web clients.
+
 ## CLI updates
 
 The CLI checks the npm registry at startup and once per hour while it is
@@ -114,6 +203,61 @@ limit. SIMY Web can edit that suggestion and call
 `provider_token_budget`. The CLI persists the higher limit and resumes the same
 run. SIMY token consumption remains a separate platform billing record.
 
+## SQM local checks
+
+SQM deliberately has two identity-bound stages:
+
+1. `simy sqm min-check` quickly inspects committed changes, the working tree,
+   untracked files, and deletions. It runs only deterministic low-cost rules,
+   reports preliminary findings, and writes the applicable state, transition,
+   stress, and scenario plan. A passing min-check is not a complete validation.
+2. `simy sqm check` verifies that repository, base, HEAD, working-tree digest,
+   and signed bundle still match the min-check. It then evaluates applicable
+   state transitions, invariants, stress/strength expectations, and scenarios,
+   writes `proof.json`, and signs that proof with the local device identity.
+
+Normal runs do not require a separate sync command: the CLI
+uses a verified local cache and revalidates it with TTL and ETag semantics.
+The Agentic Loop runs min-check after each code modification and the full check
+before PR readiness. Findings and the redacted signed-proof summary are recorded
+in its audit; source text is never uploaded.
+
+Configure the bundle service with `SIMY_SQM_BUNDLE_URL`. Authentication uses
+the current SIMY session in the coding loop, or `SIMY_SQM_TOKEN`/
+`SIMY_ACCESS_TOKEN` for the diagnostic command. On the first authenticated
+HTTPS request, the CLI receives the bundle verification key from the SIMY
+gateway, verifies the signed bundle, and pins that key to the endpoint,
+account, organization, and repository cache identity for offline use. Explicit
+trust anchors can instead be configured as a JSON key-ID map in
+`SIMY_SQM_PUBLIC_KEYS_JSON`, or as one `SIMY_SQM_KEY_ID` plus
+`SIMY_SQM_PUBLIC_KEY`. Public keys may be PEM, base64 SPKI, or a base64 raw
+32-byte Ed25519 key. Optional settings are:
+
+- `SIMY_SQM_CACHE_DIR`: verified bundle cache location.
+- `SIMY_SQM_CACHE_TTL_MS`: revalidation TTL, defaulting to five minutes.
+- `SIMY_SQM_ACCOUNT_ID` and `SIMY_SQM_ORGANIZATION_ID`: tenant identity for
+  diagnostic checks. Coding-loop checks receive tenant identity from the
+  authenticated session. Cache entries are isolated by endpoint, account,
+  organization, and repository, and the organization is verified against the
+  signed bundle. `SIMY_SQM_ORGANIZATION_ID` is required for standalone
+  diagnostic checks; without a tenant identity SQM fails closed in shadow mode.
+
+Use either phase with `--offline` to prohibit network access and `--refresh` to force
+ETag revalidation, `--base <branch>` to select a base branch, and `--json` for
+machine-readable results. Full check additionally accepts `--min-result`,
+`--proof`, `--signed-evidence`, and `--no-upload`. The min result and full proof
+share one pinned signed bundle and one exact repository identity, so a code
+change cannot silently reuse an old preflight. If Cloud is unavailable, the CLI clearly warns and
+uses the last unexpired signature-verified bundle only after a network failure
+or Cloud 5xx response. Authentication, authorization, compatibility,
+signature, schema, tenant, and expiry failures never execute stale knowledge.
+With no verified cache it skips SQM
+in shadow mode. Bundles contain only the fixed declarative checker vocabulary;
+the CLI never executes shell, JavaScript, Python, WASM, or another remotely
+supplied implementation. A module's matcher array has explicit **AND semantics**:
+every matcher must match before any check in that module runs; it is not an OR
+list.
+
 ## Interactive console
 
 Running `simy` in a terminal opens the Agentic Loop chat. It discovers the

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@awak-app/simy-cli",
-  "version": "0.2.3",
-  "description": "Local SIMY Agentic Loop executor for Codex and Claude Code.",
+  "version": "0.4.0",
+  "description": "Local SIMY executor for non-coding Local Tasks and Agentic Loop runs.",
   "type": "module",
   "bin": {
     "simy": "src/index.js"
@@ -14,6 +14,10 @@
     "start": "node ./src/index.js",
     "test": "node --test",
     "test:e2e:console": "node ./scripts/console-e2e.js",
+    "test:e2e:sqm-complete-loop": "node ./scripts/sqm-complete-loop-e2e.js",
+    "test:e2e:console:narrow": "CLI_E2E_COLUMNS=78 CLI_E2E_ROWS=40 node ./scripts/console-e2e.js",
+    "test:e2e:console:no-color": "CLI_E2E_NO_COLOR=1 node ./scripts/console-e2e.js",
+    "test:e2e:console:recovery": "node ./scripts/console-recovery-e2e.js",
     "test:e2e:auto-update": "node ./scripts/auto-update-e2e.js",
     "test:e2e:audit-gate": "node ./scripts/audit-gate-e2e.js",
     "test:e2e:retry-circuit": "node ./scripts/retry-circuit-e2e.js",
@@ -26,13 +30,16 @@
     "test:e2e:budgets": "node ./scripts/budget-enforcement-e2e.js",
     "test:e2e:desktop-executor": "node ./scripts/desktop-executor-e2e.js",
     "test:e2e:pre-guardrail": "node ./scripts/pre-guardrail-e2e.js",
+    "test:e2e:local-task-default-workspace": "node ./scripts/local-task-default-workspace-e2e.js",
+    "test:e2e:local-task-idempotency": "node ./scripts/local-task-idempotency-e2e.js",
     "test:e2e:completion-contract": "node ./scripts/completion-contract-e2e.js",
     "test:e2e:console:real-provider": "node ./scripts/real-provider-console-e2e.js",
     "test:e2e:console:fullstack": "node ./scripts/fullstack-cli-smoke.js",
-    "check": "npm run check:auto-update && node --check ./src/desktop-executor.js && node --check ./scripts/desktop-executor-e2e.js && node --check ./scripts/pre-guardrail-e2e.js && node --check ./scripts/fixtures/fake-desktop-provider.js && npm run check:syntax && npm run check:real-provider-syntax && npm test && npm run check:package",
-    "check:auto-update": "node --check ./src/auto-update.js && node --check ./scripts/auto-update-e2e.js",
+    "check": "npm run check:auto-update && node --check ./src/desktop-executor.js && node --check ./src/local-task.js && node --check ./scripts/desktop-executor-e2e.js && node --check ./scripts/pre-guardrail-e2e.js && node --check ./scripts/fixtures/fake-desktop-provider.js && npm run check:syntax && npm run check:real-provider-syntax && npm test && npm run check:package",
+    "check:auto-update": "node --check ./src/auto-update.js && node --check ./scripts/auto-update-e2e.js && npm run check:sqm",
+    "check:sqm": "node --check ./src/sqm/canonical.js && node --check ./src/sqm/validation.js && node --check ./src/sqm/repository.js && node --check ./src/sqm/checkers.js && node --check ./src/sqm/bundle-store.js && node --check ./src/sqm/proof.js && node --check ./src/sqm/evidence-client.js && node --check ./src/sqm/session.js && node --check ./src/sqm/index.js && node --check ./src/sqm/command.js && node --check ./scripts/sqm-complete-loop-e2e.js",
     "check:real-provider-syntax": "node --check ./scripts/real-codex-probe.js && node --check ./scripts/real-claude-probe.js && node --check ./scripts/real-provider-console-fixture.js && node --check ./scripts/real-provider-console-e2e.js",
-    "check:syntax": "node --check ./src/index.js && node --check ./src/agent.js && node --check ./src/browser.js && node --check ./src/web-api.js && node --check ./src/run-registry.js && node --check ./src/direct-executor.js && node --check ./src/execution-guardrail.js && node --check ./src/backend-executable.js && node --check ./src/provider-stream.js && node --check ./src/console/index.js && node --check ./src/console/app.js && node --check ./src/console/commands.js && node --check ./src/local-attachments.js && node --check ./src/repository-inventory.js && node --check ./src/session-store.js && node --check ./src/web-origin.js && node --check ./src/workspace-context.js && node --check ./src/orchestrator/index.js && node --check ./src/orchestrator/shared.js && node --check ./src/orchestrator/recovery.js && node --check ./src/orchestrator/risk.js && node --check ./src/orchestrator/contract.js && node --check ./src/orchestrator/completion-contract.js && node --check ./src/orchestrator/instruction.js && node --check ./src/orchestrator/problem-solving.js && node --check ./src/orchestrator/budget.js && node --check ./src/orchestrator/execution-io.js && node --check ./src/orchestrator/presentation.js && node --check ./src/orchestrator/result.js && node --check ./src/orchestrator/retry.js && node --check ./src/orchestrator/evidence.js && node --check ./src/orchestrator/independent-audit.js && node --check ./src/orchestrator/audit.js && node --check ./src/orchestrator/loop.js && node --check ./src/runner.js && node --check ./scripts/fixtures/completion-contract-fixture.js && node --check ./scripts/fixtures/fake-coding-backend.js && node --check ./scripts/e2e-terminal-evidence.js && node --check ./scripts/audit-gate-e2e.js && node --check ./scripts/completion-contract-e2e.js && node --check ./scripts/retry-circuit-e2e.js && node --check ./scripts/follow-up-charter-e2e.js && node --check ./scripts/task-routing-e2e.js && node --check ./scripts/executor-version-preflight-e2e.js && node --check ./scripts/blocked-recovery-e2e.js && node --check ./scripts/process-localization-e2e.js && node --check ./scripts/hypothesis-retries-e2e.js && node --check ./scripts/budget-enforcement-e2e.js && node --check ./scripts/console-e2e-fixture.js && node --check ./scripts/console-e2e.js && node --check ./scripts/real-provider-console-fixture.js && node --check ./scripts/real-provider-console-e2e.js && node --check ./scripts/fullstack-cli-smoke.js && node --check ./scripts/check-package-contents.js",
+    "check:syntax": "node --check ./src/index.js && node --check ./src/agent.js && node --check ./src/browser.js && node --check ./src/web-api.js && node --check ./src/durable-local-task-worker.js && node --check ./src/durable-local-task-steps-contract.js && node --check ./src/bounded-local-task-subtasks-contract.js && node --check ./src/bounded-local-task-subtask-pool.js && node --check ./src/local-task-artifact-contract.js && node --check ./src/execution-capability-contract.js && node --check ./src/shutdown.js && node --check ./src/run-registry.js && node --check ./src/direct-executor.js && node --check ./src/execution-guardrail.js && node --check ./src/backend-executable.js && node --check ./src/provider-stream.js && node --check ./src/console/index.js && node --check ./src/console/app.js && node --check ./src/console/commands.js && node --check ./src/local-attachments.js && node --check ./src/repository-inventory.js && node --check ./src/session-store.js && node --check ./src/web-origin.js && node --check ./src/workspace-context.js && node --check ./src/orchestrator/index.js && node --check ./src/orchestrator/shared.js && node --check ./src/orchestrator/recovery.js && node --check ./src/orchestrator/risk.js && node --check ./src/orchestrator/contract.js && node --check ./src/orchestrator/completion-contract.js && node --check ./src/orchestrator/instruction.js && node --check ./src/orchestrator/problem-solving.js && node --check ./src/orchestrator/budget.js && node --check ./src/orchestrator/execution-io.js && node --check ./src/orchestrator/presentation.js && node --check ./src/orchestrator/result.js && node --check ./src/orchestrator/retry.js && node --check ./src/orchestrator/evidence.js && node --check ./src/orchestrator/independent-audit.js && node --check ./src/orchestrator/audit.js && node --check ./src/orchestrator/loop.js && node --check ./src/runner.js && node --check ./scripts/fixtures/completion-contract-fixture.js && node --check ./scripts/fixtures/fake-coding-backend.js && node --check ./scripts/e2e-terminal-evidence.js && node --check ./scripts/audit-gate-e2e.js && node --check ./scripts/completion-contract-e2e.js && node --check ./scripts/retry-circuit-e2e.js && node --check ./scripts/follow-up-charter-e2e.js && node --check ./scripts/task-routing-e2e.js && node --check ./scripts/executor-version-preflight-e2e.js && node --check ./scripts/blocked-recovery-e2e.js && node --check ./scripts/process-localization-e2e.js && node --check ./scripts/hypothesis-retries-e2e.js && node --check ./scripts/budget-enforcement-e2e.js && node --check ./scripts/local-task-default-workspace-e2e.js && node --check ./scripts/local-task-idempotency-e2e.js && node --check ./scripts/console-e2e-fixture.js && node --check ./scripts/console-e2e.js && node --check ./scripts/console-recovery-e2e-fixture.js && node --check ./scripts/console-recovery-e2e.js && node --check ./scripts/real-provider-console-fixture.js && node --check ./scripts/real-provider-console-e2e.js && node --check ./scripts/fullstack-cli-smoke.js && node --check ./scripts/check-package-contents.js",
     "check:package": "node ./scripts/check-package-contents.js"
   },
   "engines": {
@@ -52,6 +59,8 @@
   },
   "dependencies": {
     "ink": "^6.8.0",
+    "pdf-lib": "^1.17.1",
+    "pngjs": "^7.0.0",
     "react": "^19.2.0"
   },
   "devDependencies": {