@crvouga/dev-fleet 0.0.0-stage → 0.2.0

package/agents/registry.json

@@ -0,0 +1,209 @@
+{
+  "$schema": "./registry.schema.json",
+  "version": 1,
+  "defaults": {
+    "codex": {
+      "model": "gpt-6.1-sol"
+    },
+    "claude": {
+      "model": "sonnet"
+    },
+    "opencode": {
+      "model": "openrouter/auto"
+    },
+    "gemini": {
+      "model": "auto"
+    },
+    "grok": {
+      "model": "grok-4.7"
+    },
+    "antigravity": {
+      "model": "gemini-3.8-flash"
+    }
+  },
+  "proxy": {
+    "models": {
+      "codex": "gpt-6.1-sol",
+      "claude": "claude-sonnet-4-6",
+      "opencode": "gpt-6.1-sol",
+      "gemini": "gemini-3-flash",
+      "grok": "grok-4.7",
+      "antigravity": "gemini-3.8-flash"
+    },
+    "accounts": {
+      "claude": {
+        "provider": "claude",
+        "models": ["claude-opus-5-5", "claude-sonnet-5-5", "claude-haiku-5-5"]
+      },
+      "codex": {
+        "provider": "codex",
+        "models": ["gpt-6.1-sol"]
+      },
+      "opencode": {
+        "provider": "antigravity",
+        "models": ["gemini-3.8-flash"]
+      }
+    },
+    "routes": {
+      "claude": {
+        "model": "claude-sonnet-4-6",
+        "native": "claude",
+        "harness": "opencode"
+      },
+      "codex": {
+        "model": "gpt-6.1-sol",
+        "native": "codex",
+        "harness": "opencode"
+      },
+      "gemini": {
+        "model": "gemini-3-flash",
+        "native": "gemini",
+        "harness": "opencode"
+      },
+      "grok": {
+        "model": "grok-4.7",
+        "native": "grok",
+        "harness": "opencode"
+      },
+      "muse": {
+        "model": "devin/muse-wonder-1-0",
+        "native": null,
+        "harness": "opencode"
+      },
+      "antigravity": {
+        "model": "gemini-3.8-flash",
+        "native": "antigravity",
+        "harness": "opencode"
+      }
+    }
+  },
+  "nodes": {},
+  "tools": {
+    "codex": {
+      "binary": "codex",
+      "config": "CODEX_HOME/config.toml",
+      "authentication": "Independent codex login for direct; Vault environment key for proxy",
+      "proxy": "responses",
+      "source": "https://learn.chatgpt.com/docs/config-file/config-reference",
+      "directEndpoint": "Native vendor/account configuration; no portable endpoint override is applied",
+      "capabilities": {
+        "streaming": "unverified on fleet nodes",
+        "toolCalls": "unverified on fleet nodes",
+        "usageTracking": "independent native/runtime state",
+        "unattendedProfile": true
+      }
+    },
+    "claude": {
+      "binary": "claude",
+      "config": "--settings FILE",
+      "authentication": "Independent claude auth login for direct; ANTHROPIC_AUTH_TOKEN for proxy",
+      "proxy": "messages",
+      "source": "https://code.claude.com/docs/en/llm-gateway-connect",
+      "directEndpoint": "Native vendor/account configuration; no portable endpoint override is applied",
+      "capabilities": {
+        "streaming": "unverified on fleet nodes",
+        "toolCalls": "unverified on fleet nodes",
+        "usageTracking": "independent native/runtime state",
+        "unattendedProfile": true
+      }
+    },
+    "opencode": {
+      "binary": "opencode",
+      "config": "OPENCODE_CONFIG",
+      "authentication": "Existing dev-fleet opencode sync/Vault; runtime environment key for proxy",
+      "proxy": "responses",
+      "source": "https://opencode.ai/docs/config/",
+      "directEndpoint": "Existing dev-fleet OpenCode provider catalog and OpenRouter auto policy",
+      "capabilities": {
+        "streaming": "unverified on fleet nodes",
+        "toolCalls": "unverified on fleet nodes",
+        "usageTracking": "independent native/runtime state",
+        "unattendedProfile": true
+      }
+    },
+    "gemini": {
+      "binary": "gemini",
+      "config": "GEMINI_CLI_HOME/.gemini/settings.json",
+      "authentication": "Native Google login for direct; supported gateway authentication with runtime Vault key for proxy",
+      "proxy": "generateContent",
+      "source": "https://github.com/google-gemini/gemini-cli/blob/v0.66.0/packages/core/src/core/contentGenerator.ts",
+      "directEndpoint": "Native vendor/account configuration; no portable endpoint override is applied",
+      "capabilities": {
+        "streaming": "unverified on fleet nodes",
+        "toolCalls": "unverified on fleet nodes",
+        "usageTracking": "independent native/runtime state",
+        "unattendedProfile": true
+      }
+    },
+    "t3": {
+      "binary": "t3",
+      "config": "T3CODE_HOME/userdata/settings.json providerInstances",
+      "authentication": "Independent t3 up --connect and peer pairing",
+      "proxy": null,
+      "source": "Installed T3 contracts/settings.ts and providerInstance.ts; see audit.md",
+      "directEndpoint": "Native vendor/account configuration; no portable endpoint override is applied",
+      "capabilities": {
+        "streaming": "unverified on fleet nodes",
+        "toolCalls": "unverified on fleet nodes",
+        "usageTracking": "independent native/runtime state",
+        "unattendedProfile": false
+      }
+    },
+    "cursor": {
+      "binary": "cursor",
+      "config": "OS-specific Cursor User/settings.json and .cursor/mcp.json",
+      "authentication": "Interactive Cursor Settings > Models; credentials stay in application storage",
+      "proxy": null,
+      "source": "https://prod.cursor.com/help/models-and-usage/api-keys",
+      "directEndpoint": "Native vendor/account configuration; no portable endpoint override is applied",
+      "capabilities": {
+        "streaming": "unverified on fleet nodes",
+        "toolCalls": "unverified on fleet nodes",
+        "usageTracking": "independent native/runtime state",
+        "unattendedProfile": false
+      }
+    },
+    "antigravity": {
+      "binary": "antigravity",
+      "config": "Profile --gemini-dir (antigravity-cli/settings.json, modelProvider gemini)",
+      "authentication": "Shared CLI proxy: GEMINI_API_KEY (Vault) with GOOGLE_GEMINI_BASE_URL; no Google sign-in",
+      "proxy": "generateContent",
+      "source": "https://antigravity.google/docs/install/",
+      "directEndpoint": "Native vendor/account configuration; no portable endpoint override is applied",
+      "capabilities": {
+        "streaming": "unverified on fleet nodes",
+        "toolCalls": "unverified on fleet nodes",
+        "usageTracking": "independent native/runtime state",
+        "unattendedProfile": true
+      }
+    },
+    "copilot": {
+      "binary": "copilot",
+      "config": "Native config and repository .github/copilot-instructions.md",
+      "authentication": "Independent native GitHub login",
+      "proxy": null,
+      "source": "https://docs.github.com/en/copilot/how-tos/copilot-cli",
+      "directEndpoint": "Native vendor/account configuration; no portable endpoint override is applied",
+      "capabilities": {
+        "streaming": "unverified on fleet nodes",
+        "toolCalls": "unverified on fleet nodes",
+        "usageTracking": "independent native/runtime state",
+        "unattendedProfile": false
+      }
+    },
+    "grok": {
+      "binary": "grok",
+      "config": "GROK_HOME/config.toml",
+      "authentication": "Shared CLI proxy: custom [model.*] entry with env_key CLIPROXY_API_KEY (Vault); no grok login",
+      "proxy": "chat_completions",
+      "source": "https://docs.x.ai/build/settings/reference",
+      "directEndpoint": "Native vendor/account configuration; no portable endpoint override is applied",
+      "capabilities": {
+        "streaming": "unverified on fleet nodes",
+        "toolCalls": "unverified on fleet nodes",
+        "usageTracking": "independent native/runtime state",
+        "unattendedProfile": true
+      }
+    }
+  }
+}

package/agents/registry.schema.json

@@ -0,0 +1,149 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "title": "Personal portable agent registry",
+  "type": "object",
+  "required": ["version", "defaults", "proxy", "nodes", "tools"],
+  "additionalProperties": false,
+  "properties": {
+    "$schema": {
+      "type": "string"
+    },
+    "version": {
+      "const": 1
+    },
+    "defaults": {
+      "type": "object"
+    },
+    "proxy": {
+      "type": "object",
+      "required": ["models"],
+      "properties": {
+        "models": {
+          "type": "object"
+        },
+        "accounts": {
+          "description": "Tools T3 offers once per signed-in proxy account. Accounts are never listed here: they are discovered from the proxy's model list. provider is the proxy credential type that serves the tool; models are preferred defaults (Claude: opus, sonnet, haiku).",
+          "type": "object",
+          "additionalProperties": {
+            "type": "object",
+            "required": ["provider", "models"],
+            "additionalProperties": false,
+            "properties": {
+              "provider": {
+                "type": "string",
+                "pattern": "^[a-z][a-z0-9]{0,30}$"
+              },
+              "models": {
+                "type": "array",
+                "minItems": 1,
+                "items": {
+                  "type": "string",
+                  "pattern": "^[a-zA-Z0-9_.:+-]+$"
+                }
+              }
+            }
+          }
+        }
+      }
+    },
+    "nodes": {
+      "type": "object",
+      "propertyNames": {
+        "pattern": "^[a-z0-9][a-z0-9-]{0,62}$"
+      },
+      "additionalProperties": {
+        "type": "object",
+        "additionalProperties": false,
+        "properties": {
+          "codex": {
+            "type": "object",
+            "additionalProperties": false,
+            "properties": {
+              "direct": {
+                "type": "string",
+                "pattern": "^[a-zA-Z0-9_./:+-]+$"
+              },
+              "proxy": {
+                "type": "string",
+                "pattern": "^[a-zA-Z0-9_./:+-]+$"
+              }
+            }
+          },
+          "claude": {
+            "type": "object",
+            "additionalProperties": false,
+            "properties": {
+              "direct": {
+                "type": "string",
+                "pattern": "^[a-zA-Z0-9_./:+-]+$"
+              },
+              "proxy": {
+                "type": "string",
+                "pattern": "^[a-zA-Z0-9_./:+-]+$"
+              }
+            }
+          },
+          "opencode": {
+            "type": "object",
+            "additionalProperties": false,
+            "properties": {
+              "direct": {
+                "type": "string",
+                "pattern": "^[a-zA-Z0-9_./:+-]+$"
+              },
+              "proxy": {
+                "type": "string",
+                "pattern": "^[a-zA-Z0-9_./:+-]+$"
+              }
+            }
+          },
+          "gemini": {
+            "type": "object",
+            "additionalProperties": false,
+            "properties": {
+              "direct": {
+                "type": "string",
+                "pattern": "^[a-zA-Z0-9_./:+-]+$"
+              },
+              "proxy": {
+                "type": "string",
+                "pattern": "^[a-zA-Z0-9_./:+-]+$"
+              }
+            }
+          },
+          "grok": {
+            "type": "object",
+            "additionalProperties": false,
+            "properties": {
+              "direct": {
+                "type": "string",
+                "pattern": "^[a-zA-Z0-9_./:+-]+$"
+              },
+              "proxy": {
+                "type": "string",
+                "pattern": "^[a-zA-Z0-9_./:+-]+$"
+              }
+            }
+          },
+          "antigravity": {
+            "type": "object",
+            "additionalProperties": false,
+            "properties": {
+              "direct": {
+                "type": "string",
+                "pattern": "^[a-zA-Z0-9_./:+-]+$"
+              },
+              "proxy": {
+                "type": "string",
+                "pattern": "^[a-zA-Z0-9_./:+-]+$"
+              }
+            }
+          }
+        }
+      }
+    },
+    "tools": {
+      "type": "object"
+    }
+  }
+}

package/agents/setup.md

@@ -0,0 +1,158 @@
+# Bugs and feature requests
+
+This file ships inside the dev-fleet package. If you are an agent working in
+another project and dev-fleet is wrong or lacks something, do not edit it
+here, in a clone or on a machine. Raise an issue in the dev-fleet repository;
+`devfleet --help` prints the address and `devfleet commands --json` carries
+the rule under `agent.support`.
+
+# Manager-led Ubuntu fleet setup
+
+For the enrolled Ubuntu development fleet, run on the designated manager:
+
+```sh
+devfleet fleet-sync
+```
+
+Read the [Fleet operator guide](../../fleet/docs/ubuntu-sync.md) for enrollment,
+approved revisions, bootstrap, provider checks and unresolved release gates.
+Routine fleet updates do not require a command sequence on individual nodes.
+The legacy local commands below retain their existing behavior for compatibility.
+
+# Developer fleet configuration setup
+
+Use **personal** for node and T3 configuration. Workstation and fleet are internal
+implementation packages; neither exports its own executable.
+
+`fleet-sync` installs the `devfleet` launcher on every machine it converges,
+linked to the fleet-owned checkout of the applied revision. On such a machine:
+
+```sh
+devfleet fleet-status
+```
+
+`fleet-node-sync` reconciles one machine from a checkout of dev-fleet
+(`--workspace PATH` or `PERSONAL_WORKSPACE` names it). It is for development:
+run from the published package it is refused, because `fleet-sync` does the
+same from a checkout it owns.
+Each machine still needs its own authorized Vault session, SSH keys and T3 pairing.
+The sync never copies them or provisions infrastructure.
+
+## Reconciliation
+
+`fleet-node-sync` applies by invocation. It reconciles the locked toolchain, installs
+one `personal` launcher, retires the repository-owned `ws` launcher, upserts the
+Codex proxy profile, and reconciles T3 provider instances. `--dry-run` lists these
+steps without writing or installing. The default node ID is the normalized hostname;
+use `--id NAME` to retain an existing node's registry overrides.
+
+The selected revision defaults to checkout HEAD. `--revision FULL_SHA` pins a
+reviewed commit already fetched into that checkout. Deployment uses a clean Git
+worktree and preserves developer edits. For whole-fleet maintenance, use the manager command above; this legacy local route does not orchestrate other nodes. A failed step stops later steps and reports
+partial progress; it never claims authentication or inference was verified.
+
+Portable models live in `agents/registry.json`; T3 desired provider instances live
+in `agents/t3.json`. Edit these tracked definitions and deploy a reviewed revision.
+New sessions use the updated configuration. Running sessions are not restarted.
+
+## T3 plan, apply, import and cleanup
+
+```sh
+devfleet t3-apply --dry-run --json
+devfleet t3-apply
+devfleet t3-status
+devfleet t3-cleanup --dry-run
+```
+
+Plans show create/update/delete/unchanged/conflict by instance ID, with no settings
+values or credentials. `devfleet t3-apply --plan-hash HASH` binds apply to the exact
+settings, ownership state, desired definitions and destination reviewed in a plan.
+A stale plan fails. A second apply with identical inputs performs no settings write.
+
+A provider instance becomes managed when created by personal, or explicitly imported:
+
+```sh
+devfleet t3-apply --import personal_grok_proxy
+devfleet t3-apply
+```
+
+Import grants ownership of the entire named provider instance. It does not change
+its settings immediately. Subsequent applies reconcile that instance to the tracked
+definition, including removal of extra fields. Existing unowned instances cause a
+conflict, even when their names match. Unrelated instances and settings are preserved.
+
+Removing an instance from the desired definition removes it on the next apply.
+`devfleet t3-cleanup` removes **all owned provider instances** while retaining
+threads, projects, pairing, native provider instances, credentials and profile files.
+It does not delete T3's data directory or secret store. Historical threads may need
+a replacement provider selected after their managed instance is removed.
+
+`--t3-home PATH` selects a T3 base directory (otherwise T3CODE_HOME or ~/.t3).
+`--definition FILE` selects a version-1 desired definition. Supported interpolation
+is `${workspace}`, `${agents}` and `${node}`. The current schema deliberately supports
+the verified Codex proxy adapter fields; it rejects inline credential definitions.
+T3 proxy execution requires macOS/Linux/WSL; native Windows execution is unverified.
+
+## State and concurrency
+
+T3 owns `userdata/settings.json`. Personal merges only its declared instances and
+stores IDs in `userdata/personal-managed.json`, with mode 0600. Private settings and
+state backups sit beside that file. They may contain existing secret references or
+values and must never enter Git or reports. Symlink/malformed destinations fail.
+
+Personal operations use an exclusive lock, atomic replacement, pre-write freshness
+checks and post-write verification. T3's own theme CLI uses the same optimistic
+external-file update pattern; T3 does not honor personal's lock. Avoid concurrent
+Settings edits during apply: there is no cross-process atomic compare-and-swap with
+T3. No strict transaction across application and ownership files is claimed. Ownership
+intent is saved before settings so interrupted creates/removals can be retried.
+Inspect interrupted operations before removing a stale `.lock` directory.
+
+T3's installed server source at revision
+`322f6544dfad0a3c8a0c8cbecf2c7f7874b14268` was inspected for provider-instance shape,
+external settings watch/reload, and optimistic CLI writes. Future T3 schema changes
+require adapter verification. A disk-level success is not a live inference test.
+
+## Supported alternatives
+
+`PROVIDER_PROTOCOL_INCOMPATIBLE` means the gateway answered that it has no
+endpoint, method or media type for the protocol a route speaks (HTTP 404, 405,
+415 or 501). The route as declared cannot work, so the check fails and the
+sync exits nonzero; signing in again or retrying changes nothing. Nothing on
+the machine is changed to work around it.
+
+The protocol a tool speaks to the proxy is its `proxy` field in
+`agents/registry.json` (`responses`, `messages`, `generateContent` or
+`chat_completions`). The supported alternatives, in this order:
+
+1. A model the proxy lists at `/v1/models` for the same protocol: change the
+   tool's model in `agents/registry.json`.
+2. Another protocol the tool's own CLI speaks and the pinned proxy serves.
+   `chat_completions` is served for OpenAI-compatible clients such as
+   OpenCode and Grok.
+3. The tool's direct profile, signed in natively on that machine, instead of
+   the shared proxy.
+
+Each is a reviewed change to a tracked file, followed by `devfleet
+fleet-sync`. A newer CLIProxyAPI is a reviewed change to
+`cliproxy/image.lock.json`; a sync never upgrades it to get around a failure.
+
+A model that is merely missing from the catalog is `PROVIDER_MODEL_UNAVAILABLE`
+instead: a warning, because it is usually the provider account's (billing or
+access), not the route's.
+
+## Other local operations
+
+All former workstation operations are available through `dev-fleet`:
+
+```sh
+dev-fleet tools check --json
+bun src/agents/cli.ts agents verify --node NODE --tool codex --profile proxy --json
+dev-fleet opencode sync
+dev-fleet net check
+```
+
+`devfleet fleet-status` diagnoses the manager and registered remote nodes.
+`devfleet fleet-discover` lists visible Tailscale computers. The local SSH roster
+still requires real aliases and checkout paths; discovery never guesses these.
+Use `personal commands --json` to discover the complete interface.

package/agents/t3.json

@@ -0,0 +1,40 @@
+{
+  "version": 1,
+  "instances": {
+    "personal_gateway_models": {
+      "driver": "opencode",
+      "displayName": "OpenCode CLI Proxy",
+      "enabled": true,
+      "config": {
+        "binaryPath": "${workspace}/agents/opencode-proxy.ts"
+      },
+      "environment": [
+        {
+          "name": "WS_AGENT_NODE",
+          "value": "${node}",
+          "sensitive": false
+        }
+      ]
+    },
+    "personal_grok_proxy": {
+      "driver": "grok",
+      "displayName": "Grok CLI Proxy",
+      "enabled": true,
+      "config": {
+        "binaryPath": "${workspace}/agents/grok-proxy.ts"
+      },
+      "environment": [
+        {
+          "name": "WS_AGENT_NODE",
+          "value": "${node}",
+          "sensitive": false
+        },
+        {
+          "name": "XAI_API_KEY",
+          "value": "fleet-cli-proxy",
+          "sensitive": false
+        }
+      ]
+    }
+  }
+}

package/ansible/macos/manager.yml

@@ -0,0 +1,30 @@
+---
+# Manager power policy. Workers depend on the manager's singleton services
+# (CLI proxy, Beszel hub), so the manager never sleeps on AC power. Sleep on
+# battery is left to the human. The settings are the `pmset` object in
+# policy.json; fleet-sync measures the same object as manager:power. Changing
+# them needs an administrator: ansible-playbook -K manager.yml
+- name: Keep the fleet manager awake on AC power
+  hosts: localhost
+  connection: local
+  become: true
+  gather_facts: false
+  vars_files:
+    - policy.json
+  tasks:
+    - name: Inspect effective power management settings
+      ansible.builtin.command:
+        argv: [/usr/bin/pmset, -g, custom]
+      changed_when: false
+      register: pmset_custom
+    - name: Apply the declared AC power settings
+      ansible.builtin.command:
+        argv: [/usr/bin/pmset, -c, '{{ item.key }}', '{{ item.value }}']
+      loop: '{{ pmset | dict2items }}'
+      loop_control:
+        label: '{{ item.key }}'
+      vars:
+        ac_section: "{{ pmset_custom.stdout.split('AC Power:') | last }}"
+        observed: "{{ ac_section | regex_findall('^\\s*' ~ item.key ~ '\\s+(\\S+)', multiline=True) | first | default('') }}"
+      when: observed != item.value
+      changed_when: true

package/ansible/macos/policy.json

@@ -0,0 +1,9 @@
+{
+  "version": 1,
+  "minimumMajorVersion": 14,
+  "pmset": {
+    "sleep": "0",
+    "womp": "1"
+  },
+  "beszelDaemon": "dev.devfleet.beszel-agent"
+}