@awak-app/simy-cli 0.5.8 → 0.5.11

package/README.md

@@ -2,6 +2,28 @@
 
 Local execution agent for SIMY Local Tasks and Agentic Loop runs.
 
+## Apple Silicon Mac app
+
+The macOS installer includes a native status window and menu bar app. Open
+SIMY CLI from Applications and choose **Sign in**. The window shows SIMY login,
+the connected Web address and last successful heartbeat, Codex installation and
+login status, tasks, and updates separately. A Codex login check does not prove
+that a task can execute successfully; permissions and service availability are
+checked when work starts.
+
+Closing the window keeps the agent running. Open the app again or choose
+**Show SIMY CLI** from its menu bar icon to return. **Quit SIMY CLI** asks before
+interrupting active tasks. The normal `simy` command remains available.
+
+Signed patch/minor updates wait for idle and verify the new runtime before
+handoff; failed startup restores the previous installed version. After a runtime
+update, quit and reopen the app to load an updated native interface. The status
+window reports App and runtime versions separately while they differ.
+
+For development, `npm run build:macos-installer:dev` creates an unsigned app/DMG;
+production builds require Developer ID signing and notarization. Never publish
+unsigned development artifacts through the stable update manifest.
+
 For normal use, install SIMY globally and keep its background agent running:
 
 ```bash
@@ -373,6 +395,13 @@ processes, and exercises HIL plus lifecycle controls. It regenerates the
 screenshots, terminal frames, raw transcript, and SHA-256 manifest under
 `docs/pr-evidence/cli-agentic-loop-console/`.
 
+## Delivery Loop design proposals
+
+The [minimum completion plan](docs/delivery-minimum-completion/README.md) describes
+proposed checks for omitted requirements, inactive controls, unsaved results, and
+broken integrations at every delivery level, with workflow, sequence, and state
+diagrams. This is a design proposal, not a shipped completion guarantee.
+
 ## Publishing
 
 Publishing is handled by GitHub Actions in `.github/workflows/publish.yml`.
@@ -395,11 +424,46 @@ Deploy this CLI and the web capability proxy before enabling the backend scope
 requirement. Older clients receive an explicit upgrade error, never an expanded
 organization-wide bundle.
 
+### Minimum functional completion
+
+Every CLI coding-loop promotion now requires a current two-layer observation
+matrix: the requested operation and result, plus independently checked final
+postcondition and integration. See the [minimum completion contract](src/codex-plugins/simy/skills/agentic-delivery-loop/references/minimum-completion.md)
+for the executable format. Missing mappings, mismatching observations, changed
+artifacts or stale revisions block promotion even when the executor reports
+success. Independent review checks original-request coverage and the test oracle.
+
+Existing v2 run history is retained; resumed/rechecked runs need the new evidence.
+The same checker ships in the standalone Delivery Loop skill, but it does not
+control the host's final response or establish deployment completion.
+
 ### Submit repaired local delivery evidence to SQM
 
+The bundled Delivery Loop maintains an external acceptance checklist with separate
+user-journey and technical-invariant results. It refreshes the table after each
+evaluated action and marks evidence pending when the code or runtime context
+changes. The [acceptance evidence guide](src/codex-plugins/simy/skills/agentic-delivery-loop/references/acceptance-evidence.md)
+documents the offline validator shipped inside the skill. Its result establishes
+record completeness and artifact integrity, not overall delivery or deployment.
+At the start of each new run, the loop recommends and confirms one of five
+[delivery levels](src/codex-plugins/simy/skills/agentic-delivery-loop/references/delivery-levels.md)
+in chat. Risk-based ceilings keep sensitive or consequential changes on the
+required safety level; the selection adjusts verification depth but grants no
+additional authority.
+
 `simy sqm submit-evidence --file delivery.json --host https://app-dev.simy.one`
 submits an explicit bounded summary through your existing organization-bound device
 session. `--dry-run` previews the exact document without uploading it. See the
 [local evidence contract](src/codex-plugins/simy/skills/agentic-delivery-loop/references/local-sqm-evidence.md).
 The receipt identifies the source digest and analysis job; it is not a declaration
 that an incident or blocking rule has been published.
+
+## Delivery Loop shared specification
+
+The [Delivery Loop system specification](docs/systems/delivery-loop/README.md)
+explains its purpose, As-Is and proposed To-Be through twelve linked views. Keep
+these as shared team documents; each change updates affected views and checks
+cross-view consistency. The skill requires independent design, implementation-to-
+To-Be and PR reviews, plus explicitly opted-in SQM before and after PR creation.
+The [workflow reference](src/codex-plugins/simy/skills/agentic-delivery-loop/references/shared-system-specifications.md)
+explains baseline updates, historical regression coverage and evidence limits.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@awak-app/simy-cli",
-  "version": "0.5.8",
+  "version": "0.5.11",
   "description": "Local SIMY executor for non-coding Local Tasks and Agentic Loop runs.",
   "type": "module",
   "bin": {
@@ -40,8 +40,12 @@
     "check:auto-update": "node --check ./src/auto-update.js && node --check ./scripts/auto-update-e2e.js && npm run check:sqm",
     "check:sqm": "node --check ./src/sqm/canonical.js && node --check ./src/sqm/validation.js && node --check ./src/sqm/reliability.js && node --check ./src/sqm/repository.js && node --check ./src/sqm/checkers.js && node --check ./src/sqm/bundle-store.js && node --check ./src/sqm/proof.js && node --check ./src/sqm/evidence-client.js && node --check ./src/sqm/session.js && node --check ./src/sqm/index.js && node --check ./src/sqm/command.js && node --check ./src/sqm/agent-skill.js && node --check ./src/sqm/workflow-onboarding.js && node --check ./src/sqm/workflow-update.js && node --check ./src/sqm/review-worker.js && node --check ./scripts/sqm-complete-loop-e2e.js && node --check ./scripts/sqm-local-review-e2e.js",
     "check:real-provider-syntax": "node --check ./scripts/real-codex-probe.js && node --check ./scripts/real-claude-probe.js && node --check ./scripts/real-provider-console-fixture.js && node --check ./scripts/real-provider-console-e2e.js",
-    "check:syntax": "node --check ./src/index.js && node --check ./src/agent.js && node --check ./src/browser.js && node --check ./src/web-api.js && node --check ./src/durable-local-task-worker.js && node --check ./src/durable-local-task-steps-contract.js && node --check ./src/bounded-local-task-subtasks-contract.js && node --check ./src/bounded-local-task-subtask-pool.js && node --check ./src/local-task-artifact-contract.js && node --check ./src/execution-capability-contract.js && node --check ./src/shutdown.js && node --check ./src/run-registry.js && node --check ./src/direct-executor.js && node --check ./src/execution-guardrail.js && node --check ./src/backend-executable.js && node --check ./src/provider-stream.js && node --check ./src/console/index.js && node --check ./src/console/app.js && node --check ./src/console/commands.js && node --check ./src/local-attachments.js && node --check ./src/repository-inventory.js && node --check ./src/session-store.js && node --check ./src/web-origin.js && node --check ./src/workspace-context.js && node --check ./src/orchestrator/index.js && node --check ./src/orchestrator/shared.js && node --check ./src/orchestrator/recovery.js && node --check ./src/orchestrator/risk.js && node --check ./src/orchestrator/contract.js && node --check ./src/orchestrator/completion-contract.js && node --check ./src/orchestrator/instruction.js && node --check ./src/orchestrator/problem-solving.js && node --check ./src/orchestrator/budget.js && node --check ./src/orchestrator/execution-io.js && node --check ./src/orchestrator/presentation.js && node --check ./src/orchestrator/result.js && node --check ./src/orchestrator/retry.js && node --check ./src/orchestrator/evidence.js && node --check ./src/orchestrator/independent-audit.js && node --check ./src/orchestrator/audit.js && node --check ./src/orchestrator/loop.js && node --check ./src/runner.js && node --check ./scripts/fixtures/completion-contract-fixture.js && node --check ./scripts/fixtures/fake-coding-backend.js && node --check ./scripts/e2e-terminal-evidence.js && node --check ./scripts/audit-gate-e2e.js && node --check ./scripts/completion-contract-e2e.js && node --check ./scripts/retry-circuit-e2e.js && node --check ./scripts/follow-up-charter-e2e.js && node --check ./scripts/task-routing-e2e.js && node --check ./scripts/executor-version-preflight-e2e.js && node --check ./scripts/blocked-recovery-e2e.js && node --check ./scripts/process-localization-e2e.js && node --check ./scripts/hypothesis-retries-e2e.js && node --check ./scripts/budget-enforcement-e2e.js && node --check ./scripts/local-task-default-workspace-e2e.js && node --check ./scripts/local-task-idempotency-e2e.js && node --check ./scripts/console-e2e-fixture.js && node --check ./scripts/console-e2e.js && node --check ./scripts/console-recovery-e2e-fixture.js && node --check ./scripts/console-recovery-e2e.js && node --check ./scripts/real-provider-console-fixture.js && node --check ./scripts/real-provider-console-e2e.js && node --check ./scripts/fullstack-cli-smoke.js && node --check ./scripts/check-package-contents.js",
-    "check:package": "node ./scripts/check-package-contents.js"
+    "check:syntax": "node --check ./src/index.js && node --check ./src/install-update.js && node --check ./src/agent.js && node --check ./src/browser.js && node --check ./src/web-api.js && node --check ./src/durable-local-task-worker.js && node --check ./src/durable-local-task-steps-contract.js && node --check ./src/bounded-local-task-subtasks-contract.js && node --check ./src/bounded-local-task-subtask-pool.js && node --check ./src/local-task-artifact-contract.js && node --check ./src/execution-capability-contract.js && node --check ./src/shutdown.js && node --check ./src/run-registry.js && node --check ./src/direct-executor.js && node --check ./src/execution-guardrail.js && node --check ./src/backend-executable.js && node --check ./src/provider-stream.js && node --check ./src/console/index.js && node --check ./src/console/app.js && node --check ./src/console/commands.js && node --check ./src/local-attachments.js && node --check ./src/repository-inventory.js && node --check ./src/session-store.js && node --check ./src/web-origin.js && node --check ./src/workspace-context.js && node --check ./src/orchestrator/index.js && node --check ./src/orchestrator/shared.js && node --check ./src/orchestrator/recovery.js && node --check ./src/orchestrator/risk.js && node --check ./src/orchestrator/contract.js && node --check ./src/orchestrator/completion-contract.js && node --check ./src/orchestrator/minimum-completion.js && node --check ./src/codex-plugins/simy/skills/agentic-delivery-loop/scripts/check-minimum-completion.mjs && node --check ./src/orchestrator/instruction.js && node --check ./src/orchestrator/problem-solving.js && node --check ./src/orchestrator/budget.js && node --check ./src/orchestrator/execution-io.js && node --check ./src/orchestrator/presentation.js && node --check ./src/orchestrator/result.js && node --check ./src/orchestrator/retry.js && node --check ./src/orchestrator/evidence.js && node --check ./src/orchestrator/independent-audit.js && node --check ./src/orchestrator/audit.js && node --check ./src/orchestrator/loop.js && node --check ./src/runner.js && node --check ./scripts/fixtures/completion-contract-fixture.js && node --check ./scripts/fixtures/fake-coding-backend.js && node --check ./scripts/e2e-terminal-evidence.js && node --check ./scripts/audit-gate-e2e.js && node --check ./scripts/completion-contract-e2e.js && node --check ./scripts/retry-circuit-e2e.js && node --check ./scripts/follow-up-charter-e2e.js && node --check ./scripts/task-routing-e2e.js && node --check ./scripts/executor-version-preflight-e2e.js && node --check ./scripts/blocked-recovery-e2e.js && node --check ./scripts/process-localization-e2e.js && node --check ./scripts/hypothesis-retries-e2e.js && node --check ./scripts/budget-enforcement-e2e.js && node --check ./scripts/local-task-default-workspace-e2e.js && node --check ./scripts/local-task-idempotency-e2e.js && node --check ./scripts/console-e2e-fixture.js && node --check ./scripts/console-e2e.js && node --check ./scripts/console-recovery-e2e-fixture.js && node --check ./scripts/console-recovery-e2e.js && node --check ./scripts/real-provider-console-fixture.js && node --check ./scripts/real-provider-console-e2e.js && node --check ./scripts/fullstack-cli-smoke.js && node --check ./scripts/check-package-contents.js",
+    "check:package": "node ./scripts/check-package-contents.js",
+    "build:macos-installer:dev": "bash packaging/build-macos-arm64.sh --unsigned-dev",
+    "build:macos-installer": "bash packaging/build-macos-arm64.sh --production",
+    "test:macos-installer": "node --test packaging/test-macos-packaging.mjs",
+    "build:macos-installer:production": "bash packaging/build-macos-arm64.sh --production"
   },
   "engines": {
     "node": ">=20"

package/src/agent.js

@@ -48,6 +48,12 @@ import {
   inspectDesktopExecutor,
   normalizeDesktopExecutionTarget,
 } from "./desktop-executor.js";
+import {
+  createCodexStatusInspector,
+  createConnectionStatusTracker,
+  desktopAuthStatus,
+  desktopTaskStatus,
+} from "./desktop-status.js";
 import { recoveryContractForPreflight } from "./orchestrator/recovery.js";
 import {
   DEFAULT_RETRY_BUDGET,
@@ -237,6 +243,25 @@ export async function startAgent({
   let heartbeatInFlight = null;
   let durableLocalTaskWorker = null;
   let sqmLocalReviewWorker = null;
+  let loginUrl = null;
+  const connectionStatus = createConnectionStatusTracker({ now: dependencies.statusNow });
+  const codexStatus = createCodexStatusInspector({
+    inspect: dependencies.inspectCodexStatus,
+    now: dependencies.statusNowMs,
+  });
+
+  const requestDesktopLogin = () => {
+    if (isSessionValid(session, Date.now(), apiOrigin)) return null;
+    if (!loginUrl) {
+      loginUrl = new URL("/local-cli/connect", apiOrigin);
+      loginUrl.searchParams.set("port", String(port));
+      loginUrl.searchParams.set("nonce", authNonce);
+      loginUrl.searchParams.set("cli_version", CLI_VERSION);
+      loginUrl.searchParams.set("api_contract_version", String(CLI_API_CONTRACT_VERSION));
+      if (installMode) loginUrl.searchParams.set("install_mode", installMode);
+    }
+    return loginUrl.toString();
+  };
 
   const restoreRemoteRuns = async () => {
     if (!isSessionValid(session, Date.now(), apiOrigin) || !session?.device_id) return;
@@ -268,6 +293,8 @@ export async function startAgent({
   const heartbeat = () => {
     if (!isSessionValid(session, Date.now(), apiOrigin)) return Promise.resolve(false);
     if (heartbeatInFlight) return heartbeatInFlight;
+    connectionStatus.attempt();
+    let deviceHeartbeatSucceeded = false;
     heartbeatInFlight = Promise.resolve()
       .then(() =>
         heartbeatDevice({
@@ -280,12 +307,26 @@ export async function startAgent({
         }),
       )
       .then(async () => {
+        deviceHeartbeatSucceeded = true;
+        connectionStatus.success();
         const sqmResult = sqmLocalReviewWorker
           ? await sqmLocalReviewWorker.poll()
           : null;
         if (!sqmResult && durableLocalTaskWorker) await durableLocalTaskWorker.poll();
         return true;
       })
+      .catch((error) => {
+        if (!deviceHeartbeatSucceeded) {
+          const state = connectionStatus.failure(error);
+          if (state === "unauthorized") {
+            session = null;
+            loginUrl = null;
+            refreshAvailableCapabilities();
+            requestDesktopLogin();
+          }
+        }
+        throw error;
+      })
       .finally(() => {
         heartbeatInFlight = null;
       });
@@ -1530,14 +1571,8 @@ export async function startAgent({
     console.log(`SIMY Web host: ${apiOrigin}`);
   }
 
-  let loginUrl = null;
   if (!isSessionValid(session, Date.now(), apiOrigin)) {
-    loginUrl = new URL("/local-cli/connect", apiOrigin);
-    loginUrl.searchParams.set("port", String(port));
-    loginUrl.searchParams.set("nonce", authNonce);
-    loginUrl.searchParams.set("cli_version", CLI_VERSION);
-    loginUrl.searchParams.set("api_contract_version", String(CLI_API_CONTRACT_VERSION));
-    if (installMode) loginUrl.searchParams.set("install_mode", installMode);
+    requestDesktopLogin();
     if (!quiet) {
       console.log(`Sign in to SIMY: ${loginUrl.toString()}`);
       console.log(`Session file: ${sessionPath(apiOrigin, sessionRoot)}`);
@@ -1571,6 +1606,21 @@ export async function startAgent({
   server.on("close", () => {
     void shutdown().catch((error) => reportDurableLocalTaskError(error, quiet));
   });
+  const getDesktopStatus = async () => {
+    const auth = desktopAuthStatus(session, { webOrigin: apiOrigin });
+    return {
+      schemaVersion: 1,
+      sampledAt: new Date().toISOString(),
+      version: CLI_VERSION,
+      webOrigin: apiOrigin,
+      auth,
+      connection: connectionStatus.snapshot({ authenticated: auth.state === "signed_in" }),
+      tasks: desktopTaskStatus([registry, directRegistry, localTaskRegistry]),
+      update: updateManager?.snapshot?.() ?? null,
+      codex: await codexStatus(),
+      loginUrl: auth.state === "signed_in" ? null : requestDesktopLogin(),
+    };
+  };
   return {
     server,
     port,
@@ -1582,8 +1632,17 @@ export async function startAgent({
     shutdown,
     webOrigin: apiOrigin,
     get loginUrl() {
-      return loginUrl?.toString() ?? null;
+      return requestDesktopLogin();
+    },
+    requestDesktopLogin,
+    getDesktopStatus,
+    async refreshDesktopStatus() {
+      if (isSessionValid(session, Date.now(), apiOrigin)) {
+        await heartbeat().catch((error) => reportHeartbeatError(error, quiet));
+      }
+      return getDesktopStatus();
     },
+    refreshCodexStatus: () => codexStatus({ force: true }),
     workspace,
     repositoryScanRoot,
     get capabilities() {
@@ -1778,7 +1837,9 @@ export async function heartbeatLocalDevice({
   );
   if (!response.ok) {
     const payload = await response.json().catch(() => null);
-    throw new Error(webApiErrorMessage(payload, response.status));
+    const error = new Error(webApiErrorMessage(payload, response.status));
+    error.status = response.status;
+    throw error;
   }
 }