@mmerterden/multi-agent-pipeline 20.30.0 → 20.33.0

package/pipeline/contract/manifest.json

@@ -1,5 +1,5 @@
 {
-  "contractVersion": "1.4.0",
+  "contractVersion": "1.6.0",
   "supportedMajors": [1],
   "description": "The pipeline's client contract: every surface a client reads or writes, the CLI invocation and the HTTP route that carry it, and the schema its JSON follows. Schemas are not copied here; schemasDir points at the one tree the producers validate against. Paths in cli are relative to the pipeline directory (installed: ~/.claude).",
   "schemasDir": "../schemas",
@@ -13,7 +13,7 @@
       "redact": "1 drops every x-sensitivity local field, as --redact does; forced for a request that carries an Origin",
       "v": "the major to serve; see README.md"
     },
-    "confirm": "POST /v1/runs/{id}/kill, POST /v1/gc, POST /v1/autopilot/on, POST /v1/stack, POST /v1/runs/{id}/steer and POST /v1/runs/{id}/review-verdict take two requests: the first returns a preview, confirmToken and expiresAt; the second sends confirmToken back. DELETE /v1/routines/{name} takes the token as ?confirm=. Tokens are 32 random bytes held in the server's memory, single use, valid 120 seconds, bound to the route and its target.",
+    "confirm": "POST /v1/runs/{id}/kill, POST /v1/gc, POST /v1/autopilot/on, POST /v1/stack, POST /v1/runs/{id}/steer, POST /v1/runs/{id}/review-verdict, POST /v1/repos and POST /v1/jobs take two requests: the first returns a preview, confirmToken and expiresAt; the second sends confirmToken back. DELETE /v1/routines/{name} and DELETE /v1/repos/{id} take the token as ?confirm=. Tokens are 32 random bytes held in the server's memory, single use, valid 120 seconds, bound to the route and its target.",
     "tags": "Every surface carries remote (the scope a remote carrier would require: read, answer, launch, or local-only for anything that widens what runs on this machine) and risk (the confirmation tier it would require: read, low, high). Locally the bearer token is the only credential; nothing enforces the tags yet.",
     "origin": "A request may carry no Origin, the server's own (http://127.0.0.1:<port>), or one passed with --allow-origin. Writes (POST, DELETE) and the chat route accept no Origin but the server's own. The bearer token is read from the Authorization header only."
   },
@@ -74,6 +74,11 @@
     "autopilot-off-request.schema.json",
     "autopilot-off.schema.json",
     "repos.schema.json",
+    "repo-request.schema.json",
+    "repo-change.schema.json",
+    "office-jobs.schema.json",
+    "job-request.schema.json",
+    "job-change.schema.json",
     "activity.schema.json",
     "activity-chat.schema.json",
     "routines.schema.json",
@@ -86,6 +91,11 @@
     "steer-request.schema.json",
     "steer.schema.json",
     "ledger.schema.json",
+    "system-status.schema.json",
+    "office-credentials.schema.json",
+    "office-memory.schema.json",
+    "prune-logs.schema.json",
+    "prune-logs-request.schema.json",
     "run-results.schema.json",
     "run-evidence.schema.json",
     "issue-maturity.schema.json",
@@ -97,7 +107,9 @@
     "tool-call.schema.json",
     "service-read.schema.json",
     "permissions.schema.json",
-    "contract-error.schema.json"
+    "contract-error.schema.json",
+    "office-settings.schema.json",
+    "office-settings-request.schema.json"
   ],
   "surfaces": [
     {
@@ -107,7 +119,7 @@
       "query": ["group", "redact"],
       "cli": ["node", "scripts/runs-index.mjs", "--json", "[--group <group>]", "[--redact]"],
       "schema": "runs-index.schema.json",
-      "version": "1.2.0",
+      "version": "1.3.0",
       "remote": "read",
       "risk": "read"
     },
@@ -118,7 +130,7 @@
       "query": ["redact"],
       "cli": ["node", "scripts/runs-index.mjs", "--json", "--task-id", "{id}", "[--redact]"],
       "schema": "runs-index.schema.json",
-      "version": "1.2.0",
+      "version": "1.3.0",
       "remote": "read",
       "risk": "read"
     },
@@ -188,14 +200,38 @@
       "id": "repos",
       "method": "GET",
       "path": "/v1/repos",
-      "query": ["redact"],
-      "cli": ["node", "scripts/launch-request.mjs", "repos", "[--redact]"],
+      "query": ["redact", "all"],
+      "cli": ["node", "scripts/launch-request.mjs", "repos", "[--redact]", "[--all]"],
       "schema": "repos.schema.json",
       "version": "1.1.0",
-      "note": "The repositories POST /v1/launch?repo= accepts: configured autopilot repos and registered ones.",
+      "note": "The repositories POST /v1/launch?repo= accepts: configured autopilot repos and registered ones. ?all=1 adds suggested checkouts from earlier runs and registered entries that are gone.",
       "remote": "read",
       "risk": "read"
     },
+    {
+      "id": "repo-add",
+      "method": "POST",
+      "path": "/v1/repos",
+      "query": [],
+      "body": "repo-request.schema.json",
+      "cli": ["node", "scripts/launch-request.mjs", "register-repo", "<path>"],
+      "schema": "repo-change.schema.json",
+      "version": "1.1.0",
+      "note": "Two steps: the preview names the repository, the confirmation stores it in launch-repos.json. Only a git checkout that is neither the home directory nor the root is accepted.",
+      "remote": "local-only",
+      "risk": "high"
+    },
+    {
+      "id": "repo-remove",
+      "method": "DELETE",
+      "path": "/v1/repos/{id}",
+      "query": ["confirm"],
+      "schema": "repo-change.schema.json",
+      "version": "1.1.0",
+      "note": "Two steps: without confirm the preview and a token; with ?confirm=<token> the registered entry is removed. Configured autopilot repositories are not touched.",
+      "remote": "local-only",
+      "risk": "high"
+    },
     {
       "id": "launch",
       "method": "POST",
@@ -341,7 +377,7 @@
       "scope": "read",
       "cli": ["node", "scripts/runs-index.mjs", "--json", "[--group <group>]", "--redact"],
       "schema": "runs-index.schema.json",
-      "version": "1.2.0",
+      "version": "1.3.0",
       "note": "Always redacted; redact=0 is refused.",
       "risk": "read"
     },
@@ -354,7 +390,7 @@
       "scope": "read",
       "cli": ["node", "scripts/runs-index.mjs", "--json", "--task-id", "{id}", "--redact"],
       "schema": "runs-index.schema.json",
-      "version": "1.2.0",
+      "version": "1.3.0",
       "note": "Always redacted; redact=0 is refused.",
       "risk": "read"
     },
@@ -447,7 +483,7 @@
       "query": [],
       "cli": ["node", "scripts/activity-snapshot.mjs", "--json"],
       "schema": "activity.schema.json",
-      "version": "1.0.0",
+      "version": "1.1.0",
       "note": "Derived from disk on every call; no field is machine-local, so redact changes nothing.",
       "remote": "read",
       "risk": "read"
@@ -459,7 +495,7 @@
       "query": [],
       "cli": ["node", "scripts/activity-snapshot.mjs", "--json"],
       "schema": "activity.schema.json",
-      "version": "1.0.0",
+      "version": "1.1.0",
       "note": "text/event-stream: an `activity` event carrying the document whenever it changes (checked every 2 seconds), a comment line as heartbeat. At most 4 streams at once (429 too-many-streams).",
       "remote": "read",
       "risk": "read"
@@ -479,7 +515,7 @@
         "[--limit <n>]"
       ],
       "schema": "activity-chat.schema.json",
-      "version": "1.0.0",
+      "version": "1.1.0",
       "note": "agentId main is the session itself. Refused (403) to any Origin but the server's own page, even an allowed one. limit is 1 to 500, 200 by default; before is the offset the previous page returned.",
       "remote": "read",
       "risk": "read"
@@ -491,7 +527,7 @@
       "query": [],
       "cli": ["node", "scripts/routine-registry.mjs", "list", "--json"],
       "schema": "routines.schema.json",
-      "version": "1.0.0",
+      "version": "1.1.0",
       "remote": "read",
       "risk": "read"
     },
@@ -502,11 +538,35 @@
       "query": ["confirm"],
       "cli": ["node", "scripts/routine-registry.mjs", "remove", "--name", "{name}"],
       "schema": "routine-delete.schema.json",
-      "version": "1.0.0",
+      "version": "1.1.0",
       "note": "Two steps: without confirm the preview and a token; with ?confirm=<token> the removal. A shipped command is refused (409 not-removable).",
       "remote": "local-only",
       "risk": "high"
     },
+    {
+      "id": "jobs",
+      "method": "GET",
+      "path": "/v1/jobs",
+      "query": [],
+      "cli": ["node", "scripts/job-launch.mjs", "list"],
+      "schema": "office-jobs.schema.json",
+      "version": "1.0.0",
+      "note": "The jobs the office can hand to someone: the command, the role that does it, team or solo, typed parameters and what it writes outside the machine; available is false when the command is not installed here.",
+      "remote": "read",
+      "risk": "read"
+    },
+    {
+      "id": "job-start",
+      "method": "POST",
+      "path": "/v1/jobs",
+      "query": [],
+      "body": "job-request.schema.json",
+      "schema": "job-change.schema.json",
+      "version": "1.0.0",
+      "note": "Two steps: the preview names the role, repository, exact prompt and what the job writes; the confirmation re-checks that the repository is allowed and starts it with claude --bg under the unattended profile after the workspace trust, agent-guard registration and sandbox checks; claude's own output stays in the server's log. A team job is refused while a run is live in that repository. Never reachable from a phone.",
+      "remote": "local-only",
+      "risk": "high"
+    },
     {
       "id": "stack",
       "method": "GET",
@@ -552,6 +612,80 @@
       "risk": "read",
       "note": "Estimates at list price from cost-table.json. Each amount names its source (tracker-state, transcript, mixed); a run nobody could measure is not-measured with null numbers, never 0. prices.warning names a price table older than 60 days."
     },
+    {
+      "id": "system",
+      "method": "GET",
+      "path": "/v1/system",
+      "query": [],
+      "cli": ["node", "scripts/system-status.mjs", "--json"],
+      "schema": "system-status.schema.json",
+      "version": "1.0.0",
+      "remote": "read",
+      "risk": "read",
+      "note": "Numbers only: CPU load, memory, free disk, the pipeline's own sessions and toolkit processes and its log folder size. No path, process argument, user or host name. A value that could not be measured is null."
+    },
+    {
+      "id": "prune-logs",
+      "method": "POST",
+      "path": "/v1/prune-logs",
+      "query": [],
+      "body": "prune-logs-request.schema.json",
+      "cli": ["node", "scripts/office-prune.mjs", "preview|apply", "{days}", "--json"],
+      "schema": "prune-logs.schema.json",
+      "version": "1.0.0",
+      "remote": "local-only",
+      "risk": "high",
+      "note": "Two steps: the preview lists the task log folders older than 7, 30 or 90 days; the confirmation lists them again, refuses with 409 changed when they differ, and prunes only that list (prune-logs.sh --only-from). The audit trail, metrics and counters are never removed; a folder written in the last minutes and a run that can still be resumed are spared."
+    },
+    {
+      "id": "settings",
+      "method": "GET",
+      "path": "/v1/settings",
+      "query": [],
+      "cli": ["node", "scripts/office-settings.mjs", "--json"],
+      "schema": "office-settings.schema.json",
+      "version": "1.0.0",
+      "remote": "local-only",
+      "risk": "read",
+      "note": "The output language, the fable rung and model routing, read from the preferences file."
+    },
+    {
+      "id": "settings-set",
+      "method": "POST",
+      "path": "/v1/settings",
+      "query": [],
+      "body": "office-settings-request.schema.json",
+      "cli": ["node", "scripts/office-settings.mjs", "set", "{setting}", "{value}", "--json"],
+      "schema": "office-settings.schema.json",
+      "version": "1.0.0",
+      "remote": "local-only",
+      "risk": "high",
+      "note": "Two steps: the preview names the change, the confirmation runs what /multi-agent:language, /multi-agent:model or /multi-agent:route-on|off runs; one change at a time (429 busy). Route on passes the saved strategy back; widening it stays in the terminal."
+    },
+    {
+      "id": "credentials",
+      "method": "GET",
+      "path": "/v1/credentials",
+      "query": ["probe"],
+      "cli": ["node", "scripts/office-credentials.mjs", "--json", "[--probe]"],
+      "schema": "office-credentials.schema.json",
+      "version": "1.0.0",
+      "remote": "local-only",
+      "risk": "read",
+      "note": "Logical names and verdicts only, never a value. probe=1 makes one cheap authenticated request per configured credential. Renewal is /multi-agent:setup in the terminal. Local only: not even the verdicts go to a phone."
+    },
+    {
+      "id": "memory",
+      "method": "GET",
+      "path": "/v1/memory",
+      "query": [],
+      "cli": ["node", "scripts/office-memory.mjs", "--json"],
+      "schema": "office-memory.schema.json",
+      "version": "1.0.0",
+      "remote": "local-only",
+      "risk": "read",
+      "note": "Counts per repository from the learning loop's stores and the newest learnings, redacted and cut to 120 characters. Local only."
+    },
     {
       "id": "run-results",
       "method": "GET",
@@ -582,7 +716,7 @@
       "body": "review-verdict-request.schema.json",
       "cli": ["node", "scripts/work-items.mjs", "verdict", "{id}", "[--post]"],
       "schema": "review-verdict.schema.json",
-      "version": "1.0.0",
+      "version": "1.1.0",
       "note": "Two steps. Only a finished review whose every finding is triaged is previewed (409 review-incomplete); the token is bound to the decision and findingsDigest, and a confirmation after either changed is 409 confirm-mismatch.",
       "remote": "launch",
       "risk": "high"
@@ -594,7 +728,7 @@
       "query": [],
       "cli": ["node", "scripts/work-items.mjs", "maturity", "{key}"],
       "schema": "issue-maturity.schema.json",
-      "version": "1.0.0",
+      "version": "1.1.0",
       "note": "key is URL-encoded (owner%2Frepo%23N for a GitHub issue).",
       "remote": "read",
       "risk": "read"
@@ -606,8 +740,8 @@
       "query": ["redact"],
       "cli": ["node", "scripts/work-items.mjs", "prs"],
       "schema": "prs.schema.json",
-      "version": "1.0.0",
-      "note": "Bitbucket listing is not implemented; its source entry says so.",
+      "version": "1.1.0",
+      "note": "One list across every GitHub account gh is logged in to (each asked with its own token in GH_TOKEN) and the configured Bitbucket Server (https, token in the header). A source that cannot be read says why. Redacted, URLs and logins are dropped.",
       "remote": "read",
       "risk": "read"
     },