@jc_stack/ez-agents 0.1.0-beta.29 → 0.1.0-beta.31

package/CHANGELOG.md

@@ -2,6 +2,21 @@
 
 ## Unreleased
 
+## 0.1.0-beta.31
+
+- Make the owner-authorized contribution lifecycle explicit in shipped agent
+  guidance: take a coherent change through independent final-head review, CI,
+  applicable QA and, when authorized, merge. Release authority includes the
+  merge needed for publication, which continues through the reviewed GitHub
+  publisher, registry readback and eligible runtime verification. Preserve local
+  QA, diagnostics, auth-only work and deployment as separate boundaries.
+
+## 0.1.0-beta.30
+
+- Bind installed native command launchers to the deployment's canonical control
+  directory. This makes application registration use the owning agent's state
+  and prevents caller environment variables from redirecting that authority.
+
 ## 0.1.0-beta.29
 
 - Republish the beta.28 Voice connection and web-serving contract at a monotonic

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@jc_stack/ez-agents",
-  "version": "0.1.0-beta.29",
+  "version": "0.1.0-beta.31",
   "private": false,
   "type": "module",
   "description": "A lightweight foundation for persistent business AI assistants using existing AI harnesses, workspaces and plugins.",

package/src/updates/binding.mjs

@@ -19,7 +19,7 @@ export async function bindUpdates(home,hostConfig,packageRoot=fileURLToPath(new
   await fs.writeFile(path.join(bin,'ez'),`#!${process.execPath}\nimport fs from 'node:fs';import {pathToFileURL} from 'node:url';const c=JSON.parse(fs.readFileSync(${configFile}));const m=await import(pathToFileURL(c.packageRoot+'/src/plugins/manager.mjs'));m.main(['--home',${JSON.stringify(home)},...process.argv.slice(2)]).catch(e=>{console.error(e.message);process.exitCode=1});\n`,{mode:0o700});
   for(const [name,entry] of Object.entries(pkg.bin)) {
     const dest=path.join(bin,name);await fs.rm(dest,{force:true});
-    await fs.writeFile(dest,`#!${process.execPath}\nimport fs from 'node:fs';import {spawn} from 'node:child_process';const c=JSON.parse(fs.readFileSync(${configFile}));const child=spawn(c.packageRoot+'/'+${JSON.stringify(entry)},process.argv.slice(2),{stdio:'inherit',env:{...process.env,EZ_DEPLOYMENT_DIR:c.deploymentDir}});for(const s of ['SIGTERM','SIGINT'])process.on(s,()=>child.kill(s));child.on('error',e=>{console.error(e.message);process.exitCode=1});child.on('close',c=>process.exitCode=c??1);\n`,{mode:0o700});
+    await fs.writeFile(dest,`#!${process.execPath}\nimport fs from 'node:fs';import {spawn} from 'node:child_process';const c=JSON.parse(fs.readFileSync(${configFile}));const child=spawn(c.packageRoot+'/'+${JSON.stringify(entry)},process.argv.slice(2),{stdio:'inherit',env:{...process.env,EZ_DEPLOYMENT_DIR:c.deploymentDir,EZ_CONTROL_DIR:c.deploymentDir+'/control'}});for(const s of ['SIGTERM','SIGINT'])process.on(s,()=>child.kill(s));child.on('error',e=>{console.error(e.message);process.exitCode=1});child.on('close',c=>process.exitCode=c??1);\n`,{mode:0o700});
   }
   await bindToolDiscovery(home,config.workspace);
   return {ok:true,home,deploymentDir,packageRoot,policy:'Automatic compatible beta-channel updates by default; saved stable-only or manual policies take precedence. Local candidates require an explicit owner request.'};

package/templates/agent-guidance.md

@@ -67,6 +67,16 @@ a conflicting runner, context/prompt reconstruction or competing agent-turn queu
 Revise a violating patch before approval or merge; document real capability gaps
 instead of weakening the boundary to fit existing code.
 
+For an owner-authorized product, fix or contribution, complete one coherent
+loop: current main, focused PR, independent final-head review, required CI and
+applicable QA. When the owner request or saved maintainer mandate includes merge
+or release authority, then merge; release authority includes the merge needed for
+the release. Otherwise leave the reviewed PR ready and state the remaining
+authority. When release authority applies, continue through immutable
+artifact publication, the repository's reviewed GitHub publisher, registry
+readback and eligible installed-runtime verification. Local QA,
+diagnostics, auth-only work and deployment remain separate authority boundaries.
+
 Within the owner's request or saved contribution mandate, you may report evidenced
 existing violations and submit focused fixes. Check existing issues, PRs and active
 owners first; add sanitized evidence and a concrete next action to the existing

package/test/agent-guidance.test.ts

@@ -25,6 +25,14 @@ test('shared guidance makes direct owner chat replies a native transport action'
   assert.match(guidance, /unchanged scheduled\nmonitoring stays quiet/)
 })
 
+test('shared guidance completes authorized contribution and release loops', () => {
+  const guidance = agentGuidance()
+  assert.match(guidance, /independent final-head review, required CI and\napplicable QA/)
+  assert.match(guidance, /mandate includes merge\nor release authority, then merge; release authority includes the merge needed for\nthe release. Otherwise leave the reviewed PR ready and state the remaining\nauthority/)
+  assert.match(guidance, /immutable\nartifact publication, the repository's reviewed GitHub publisher, registry\nreadback/)
+  assert.match(guidance, /Local QA,\ndiagnostics, auth-only work and deployment remain separate authority boundaries/)
+})
+
 test('package guidance resolution ignores a workspace shadow file', async () => {
   const root = path.join(tmpdir(), `ez-guidance-${randomUUID()}`)
   await mkdir(root, { recursive: true })

package/test/updates.test.mjs

@@ -210,8 +210,9 @@ test('bound dispatch follows active package root and retains private scope',asyn
  assert.match(await fs.readFile(path.join(f.agent.workspace,'AGENTS.md'),'utf8'),/tools list --details/);
  const config=await read(path.join(f.home,'config.json'));config.packageRoot=f.source;await atomic(path.join(f.home,'config.json'),config);
  // A native launcher from the real package looks up its entry point in the active root.
- await fs.writeFile(path.join(f.source,'bin/ezenciel-agents.mjs'),'#!/usr/bin/env node\nconsole.log(process.env.EZ_DEPLOYMENT_DIR)',{mode:0o755});
- const result=await exec(path.join(f.home,'bin/ezenciel-agents'),['--version']);assert.equal(result.stdout.trim(),f.config.deploymentDir);
+ await fs.writeFile(path.join(f.source,'bin/ezenciel-agents.mjs'),'#!/usr/bin/env node\nconsole.log(process.env.EZ_DEPLOYMENT_DIR+"|"+process.env.EZ_CONTROL_DIR)',{mode:0o755});
+ const result=await exec(path.join(f.home,'bin/ezenciel-agents'),['--version'],{env:{...process.env,EZ_CONTROL_DIR:'/attacker'}});
+ assert.equal(result.stdout.trim(),f.config.deploymentDir+'|'+f.agent.controlDir);
  assert((await fs.readFile(path.join(f.agent.workspace,'TOOLS.md'),'utf8')).startsWith('My notes'));
 });
 test('upgrade subprocess environment never inherits relay/provider secrets',()=>{