@mndrk/agx 2.0.38 → 2.0.40

package/cloud-runtime/standalone/mcp/dist/tools/tasks.js

@@ -0,0 +1,244 @@
+import { z } from "zod";
+import { getSupabase } from "../db.js";
+import { buildTaskContext } from "../task-context.js";
+import { signTask } from "../security.js";
+import { STAGE_ORDER, parseFrontmatter, buildContent, resolveTaskConfig, } from "../types.js";
+// ============ SCHEMAS ============
+export const tasksListSchema = z.object({
+    userId: z.string().uuid().optional().describe("Filter by user ID"),
+    project: z.string().optional().describe("Filter by project name"),
+    status: z.enum(["queued", "in_progress", "blocked", "completed", "failed"])
+        .optional().describe("Filter by status"),
+    stage: z.enum(STAGE_ORDER).optional().describe("Filter by SDLC stage"),
+    limit: z.number().int().min(1).max(100).default(50).describe("Max results"),
+});
+export const tasksGetSchema = z.object({
+    id: z.string().uuid().describe("Task ID"),
+    includeLogs: z.boolean().default(false).describe("Include task logs"),
+});
+export const tasksCreateSchema = z.object({
+    title: z.string().min(1).describe("Task title"),
+    description: z.string().optional().describe("Task description"),
+    project: z.string().optional().describe("Project name"),
+    priority: z.number().int().min(1).max(5).default(3).describe("Priority (1=highest, 5=lowest)"),
+    engine: z.enum(["claude", "gemini", "ollama"]).default("claude").describe("AI engine to use"),
+    provider: z.string().optional().describe("Provider/runtime to use (e.g. cao, claude_code)"),
+    model: z.string().optional().describe("Model to use (e.g. claude-3-5-sonnet)"),
+    swarm: z.boolean().optional().describe("Route task to swarm/CAO runtime"),
+    stage: z.enum(STAGE_ORDER).default("ideation").describe("Initial SDLC stage"),
+    userId: z.string().uuid().optional().describe("Owner user ID"),
+});
+export const tasksUpdateSchema = z.object({
+    id: z.string().uuid().describe("Task ID"),
+    status: z.enum(["queued", "in_progress", "blocked", "completed", "failed"]).optional(),
+    stage: z.enum(STAGE_ORDER).optional(),
+    priority: z.number().int().min(1).max(5).optional(),
+    project: z.string().optional(),
+    progress: z.number().int().min(0).max(100).optional().describe("Progress percentage (0-100)"),
+    result: z.string().optional().describe("Result/output summary"),
+    swarm: z.boolean().optional(),
+});
+export const tasksLogSchema = z.object({
+    taskId: z.string().uuid().describe("Task ID"),
+    content: z.string().min(1).describe("Log content"),
+});
+// ============ HANDLERS ============
+export async function tasksList(args) {
+    const supabase = getSupabase();
+    const activeQueueStatuses = ["queued", "in_progress"];
+    let query = supabase
+        .from("tasks")
+        .select("*")
+        .order("priority", { ascending: true, nullsFirst: false })
+        .order("created_at", { ascending: false })
+        .limit(args.limit);
+    if (args.userId)
+        query = query.eq("user_id", args.userId);
+    if (args.project)
+        query = query.eq("project", args.project);
+    if (args.status)
+        query = query.eq("status", args.status);
+    if (args.stage && !args.status)
+        query = query.in("status", activeQueueStatuses);
+    if (args.stage)
+        query = query.eq("stage", args.stage);
+    const { data, error } = await query;
+    if (error)
+        throw new Error(`Failed to list tasks: ${error.message}`);
+    return {
+        tasks: data || [],
+        count: data?.length || 0,
+    };
+}
+export async function tasksGet(args) {
+    const supabase = getSupabase();
+    const { data: task, error } = await supabase
+        .from("tasks")
+        .select("*")
+        .eq("id", args.id)
+        .single();
+    if (error) {
+        if (error.code === "PGRST116") {
+            throw new Error(`Task not found: ${args.id}`);
+        }
+        throw new Error(`Failed to get task: ${error.message}`);
+    }
+    // Fetch stage prompt
+    const context = await buildTaskContext(task);
+    const { comments_digest: commentsDigest, stage_config } = context;
+    // Resolve configuration (Task > Stage)
+    const resolvedConfig = resolveTaskConfig(task, stage_config);
+    let signature = task.signature;
+    if (task.user_id) {
+        const { data: secretData } = await supabase
+            .from("user_secrets")
+            .select("daemon_secret_hash")
+            .eq("user_id", task.user_id)
+            .single();
+        if (secretData?.daemon_secret_hash) {
+            const newSignature = signTask({
+                id: task.id,
+                user_id: task.user_id,
+                content: task.content,
+                stage: task.stage || "ideation",
+                engine: task.engine || "claude",
+                provider: resolvedConfig.provider,
+                model: resolvedConfig.model,
+                swarm: resolvedConfig.swarm,
+                swarm_models: resolvedConfig.swarm_models,
+                created_at: task.created_at,
+                comments_digest: commentsDigest,
+            }, secretData.daemon_secret_hash);
+            if (newSignature !== signature) {
+                await supabase
+                    .from("tasks")
+                    .update({ signature: newSignature })
+                    .eq("id", task.id);
+            }
+            signature = newSignature;
+        }
+    }
+    const result = {
+        task: { ...task, ...resolvedConfig, signature, ...context },
+    };
+    if (args.includeLogs) {
+        const { data: logs, error: logsError } = await supabase
+            .from("task_logs")
+            .select("*")
+            .eq("task_id", args.id)
+            .order("created_at", { ascending: true });
+        if (logsError) {
+            throw new Error(`Failed to get task logs: ${logsError.message}`);
+        }
+        result.logs = logs || [];
+    }
+    return result;
+}
+export async function tasksCreate(args) {
+    const supabase = getSupabase();
+    // Build markdown content with frontmatter
+    const frontmatter = {
+        status: "queued",
+        stage: args.stage,
+        engine: args.engine,
+        priority: args.priority,
+    };
+    if (args.provider)
+        frontmatter.provider = args.provider;
+    if (args.model)
+        frontmatter.model = args.model;
+    if (typeof args.swarm === "boolean")
+        frontmatter.swarm = args.swarm;
+    if (args.project)
+        frontmatter.project = args.project;
+    const body = `# ${args.title}\n\n${args.description || ""}`;
+    const content = buildContent(frontmatter, body);
+    const { data, error } = await supabase
+        .from("tasks")
+        .insert({
+        content,
+        title: args.title,
+        status: "queued",
+        stage: args.stage,
+        project: args.project,
+        priority: args.priority,
+        engine: args.engine,
+        provider: args.provider,
+        model: args.model,
+        swarm: args.swarm,
+        user_id: args.userId,
+    })
+        .select()
+        .single();
+    if (error)
+        throw new Error(`Failed to create task: ${error.message}`);
+    return { task: data };
+}
+export async function tasksUpdate(args) {
+    const supabase = getSupabase();
+    // Get current task
+    const { data: task, error: getError } = await supabase
+        .from("tasks")
+        .select("*")
+        .eq("id", args.id)
+        .single();
+    if (getError) {
+        if (getError.code === "PGRST116") {
+            throw new Error(`Task not found: ${args.id}`);
+        }
+        throw new Error(`Failed to get task: ${getError.message}`);
+    }
+    // Parse and update frontmatter
+    const { frontmatter, body } = parseFrontmatter(task.content);
+    if (args.status !== undefined)
+        frontmatter.status = args.status;
+    if (args.stage !== undefined)
+        frontmatter.stage = args.stage;
+    if (args.priority !== undefined)
+        frontmatter.priority = args.priority;
+    if (args.project !== undefined)
+        frontmatter.project = args.project;
+    if (args.progress !== undefined)
+        frontmatter.progress = args.progress;
+    if (args.result !== undefined)
+        frontmatter.result = args.result;
+    if (args.swarm !== undefined)
+        frontmatter.swarm = args.swarm;
+    const updatedContent = buildContent(frontmatter, body);
+    // Build update object
+    const updates = {
+        content: updatedContent,
+        updated_at: new Date().toISOString(),
+    };
+    if (args.status !== undefined)
+        updates.status = args.status;
+    if (args.stage !== undefined)
+        updates.stage = args.stage;
+    if (args.priority !== undefined)
+        updates.priority = args.priority;
+    if (args.project !== undefined)
+        updates.project = args.project;
+    if (args.swarm !== undefined)
+        updates.swarm = args.swarm;
+    const { data: updatedTask, error: updateError } = await supabase
+        .from("tasks")
+        .update(updates)
+        .eq("id", args.id)
+        .select()
+        .single();
+    if (updateError)
+        throw new Error(`Failed to update task: ${updateError.message}`);
+    return { task: updatedTask };
+}
+export async function tasksLog(args) {
+    const supabase = getSupabase();
+    const { data, error } = await supabase
+        .from("task_logs")
+        .insert({ task_id: args.taskId, content: args.content })
+        .select()
+        .single();
+    if (error)
+        throw new Error(`Failed to add log: ${error.message}`);
+    return { log: data };
+}
+//# sourceMappingURL=tasks.js.map

package/cloud-runtime/standalone/mcp/dist/types.js

@@ -0,0 +1,74 @@
+export const STAGE_ORDER = [
+    "ideation",
+    "planning",
+    "coding",
+    "qa",
+    "acceptance",
+    "pr",
+    "pr_review",
+    "merge",
+    "done",
+];
+/**
+ * Resolves task configuration by merging task-level settings with stage-level defaults.
+ * Task settings take precedence.
+ */
+export function resolveTaskConfig(task, stageConfig) {
+    const provider = task.provider || stageConfig?.provider || "unspecified";
+    const model = task.model || stageConfig?.model || "unspecified";
+    const swarm = task.swarm ?? stageConfig?.swarm ?? false;
+    const swarm_models = task.swarm_models?.length ? task.swarm_models : (stageConfig?.swarm_models || []);
+    return {
+        provider,
+        model,
+        swarm,
+        swarm_models,
+    };
+}
+// Parse YAML frontmatter from markdown
+export function parseFrontmatter(markdown) {
+    const match = markdown.match(/^---\n([\s\S]*?)\n---\n([\s\S]*)$/);
+    if (!match) {
+        return { frontmatter: {}, body: markdown };
+    }
+    const frontmatter = {};
+    const lines = match[1].split('\n');
+    for (const line of lines) {
+        const colonIndex = line.indexOf(':');
+        if (colonIndex > 0) {
+            const key = line.slice(0, colonIndex).trim();
+            const value = line.slice(colonIndex + 1).trim();
+            // Parse numbers and booleans
+            if (value === 'true')
+                frontmatter[key] = true;
+            else if (value === 'false')
+                frontmatter[key] = false;
+            else if (/^\d+$/.test(value))
+                frontmatter[key] = parseInt(value);
+            else
+                frontmatter[key] = value;
+        }
+    }
+    return { frontmatter, body: match[2] };
+}
+// Extract title from markdown (first H1)
+export function extractTitle(markdown) {
+    const { body } = parseFrontmatter(markdown);
+    const match = body.match(/^#\s+(.+)$/m);
+    return match ? match[1] : undefined;
+}
+// Build content from frontmatter and body
+export function buildContent(frontmatter, body) {
+    const frontmatterStr = Object.entries(frontmatter)
+        .map(([k, v]) => `${k}: ${v}`)
+        .join("\n");
+    return `---\n${frontmatterStr}\n---\n${body}`;
+}
+// Get next SDLC stage
+export function getNextStage(currentStage) {
+    const index = STAGE_ORDER.indexOf(currentStage);
+    if (index === -1 || index >= STAGE_ORDER.length - 1)
+        return null;
+    return STAGE_ORDER[index + 1];
+}
+//# sourceMappingURL=types.js.map

package/cloud-runtime/standalone/node_modules/@img/{sharp-linux-x64 → sharp-darwin-arm64}/package.json

@@ -1,13 +1,13 @@
 {
-  "name": "@img/sharp-linux-x64",
+  "name": "@img/sharp-darwin-arm64",
   "version": "0.34.5",
-  "description": "Prebuilt sharp for use with Linux (glibc) x64",
+  "description": "Prebuilt sharp for use with macOS 64-bit ARM",
   "author": "Lovell Fuller <npm@lovell.info>",
   "homepage": "https://sharp.pixelplumbing.com",
   "repository": {
     "type": "git",
     "url": "git+https://github.com/lovell/sharp.git",
-    "directory": "npm/linux-x64"
+    "directory": "npm/darwin-arm64"
   },
   "license": "Apache-2.0",
   "funding": {
@@ -15,7 +15,7 @@
   },
   "preferUnplugged": true,
   "optionalDependencies": {
-    "@img/sharp-libvips-linux-x64": "1.2.4"
+    "@img/sharp-libvips-darwin-arm64": "1.2.4"
   },
   "files": [
     "lib"
@@ -25,22 +25,16 @@
   },
   "type": "commonjs",
   "exports": {
-    "./sharp.node": "./lib/sharp-linux-x64.node",
+    "./sharp.node": "./lib/sharp-darwin-arm64.node",
     "./package": "./package.json"
   },
   "engines": {
     "node": "^18.17.0 || ^20.3.0 || >=21.0.0"
   },
-  "config": {
-    "glibc": ">=2.26"
-  },
   "os": [
-    "linux"
-  ],
-  "libc": [
-    "glibc"
+    "darwin"
   ],
   "cpu": [
-    "x64"
+    "arm64"
   ]
 }

package/cloud-runtime/standalone/node_modules/@img/{sharp-libvips-linux-x64 → sharp-libvips-darwin-arm64}/README.md

@@ -1,6 +1,6 @@
-# `@img/sharp-libvips-linux-x64`
+# `@img/sharp-libvips-darwin-arm64`
 
-Prebuilt libvips and dependencies for use with sharp on Linux (glibc) x64.
+Prebuilt libvips and dependencies for use with sharp on macOS 64-bit ARM.
 
 ## Licensing
 

package/cloud-runtime/standalone/node_modules/@img/{sharp-libvips-linuxmusl-x64 → sharp-libvips-darwin-arm64}/lib/glib-2.0/include/glibconfig.h

@@ -63,15 +63,15 @@ typedef unsigned int guint32;
 
 #define G_HAVE_GINT64 1          /* deprecated, always true */
 
-typedef signed long gint64;
-typedef unsigned long guint64;
+G_GNUC_EXTENSION typedef signed long long gint64;
+G_GNUC_EXTENSION typedef unsigned long long guint64;
 
-#define G_GINT64_CONSTANT(val)	(val##L)
-#define G_GUINT64_CONSTANT(val)	(val##UL)
+#define G_GINT64_CONSTANT(val)	(G_GNUC_EXTENSION (val##LL))
+#define G_GUINT64_CONSTANT(val)	(G_GNUC_EXTENSION (val##ULL))
 
-#define G_GINT64_MODIFIER "l"
-#define G_GINT64_FORMAT "li"
-#define G_GUINT64_FORMAT "lu"
+#define G_GINT64_MODIFIER "ll"
+#define G_GINT64_FORMAT "lli"
+#define G_GUINT64_FORMAT "llu"
 
 
 #define GLIB_SIZEOF_VOID_P 8
@@ -121,7 +121,6 @@ typedef unsigned long guintptr;
 
 #define G_VA_COPY va_copy
 
-#define G_VA_COPY_AS_ARRAY 1
 
 #define G_HAVE_ISO_VARARGS 1
 
@@ -203,7 +202,7 @@ typedef int GPid;
 
 #define GLIB_SYSDEF_AF_UNIX 1
 #define GLIB_SYSDEF_AF_INET 2
-#define GLIB_SYSDEF_AF_INET6 10
+#define GLIB_SYSDEF_AF_INET6 30
 
 #define GLIB_SYSDEF_MSG_OOB 1
 #define GLIB_SYSDEF_MSG_PEEK 2

package/cloud-runtime/standalone/node_modules/@img/{sharp-libvips-linux-x64 → sharp-libvips-darwin-arm64}/package.json

@@ -1,13 +1,13 @@
 {
-  "name": "@img/sharp-libvips-linux-x64",
+  "name": "@img/sharp-libvips-darwin-arm64",
   "version": "1.2.4",
-  "description": "Prebuilt libvips and dependencies for use with sharp on Linux (glibc) x64",
+  "description": "Prebuilt libvips and dependencies for use with sharp on macOS 64-bit ARM",
   "author": "Lovell Fuller <npm@lovell.info>",
   "homepage": "https://sharp.pixelplumbing.com",
   "repository": {
     "type": "git",
     "url": "git+https://github.com/lovell/sharp-libvips.git",
-    "directory": "npm/linux-x64"
+    "directory": "npm/darwin-arm64"
   },
   "license": "LGPL-3.0-or-later",
   "funding": {
@@ -27,16 +27,10 @@
     "./package": "./package.json",
     "./versions": "./versions.json"
   },
-  "config": {
-    "glibc": ">=2.26"
-  },
   "os": [
-    "linux"
-  ],
-  "libc": [
-    "glibc"
+    "darwin"
   ],
   "cpu": [
-    "x64"
+    "arm64"
   ]
 }

package/cloud-runtime/standalone/notes/comments-context-demo.md

@@ -0,0 +1,141 @@
+# Demo: Task Comments as Execution Context
+
+## What was built
+- Task comments are part of signed execution context.
+- `lib/task-context.ts` composes prompt context with a `COMMENTS` section and computes `comments_digest` (SHA-256 over ordered comments).
+- Signed payload producers re-compute digest and re-sign when comments change:
+  - `POST /api/tasks/[id]/comments`
+  - `DELETE /api/tasks/[id]/comments/[commentId]`
+  - `GET /api/tasks/[id]`
+  - `POST /api/queue` (pull)
+  - MCP `tasks.get` and `queue.pull`
+- Signature includes `comments_digest`, so stale signatures are invalid after comment mutations.
+
+## Acceptance status (2026-02-07)
+- E2E blocked in this sandbox by port restrictions (cannot bind localhost on `127.0.0.1:3100`).
+- Cloud sync blocked in this sandbox: `tsx` IPC socket bind blocked.
+- Rerun in an environment that allows localhost binds + IPC sockets and has DB credentials, then record results here.
+
+## Local setup (required for demo)
+1. Install dependencies:
+```bash
+npm install
+```
+2. Configure env:
+```bash
+cp .env.example .env.local
+# Fill in DB values for:
+# - NEXT_PUBLIC_DB_URL (or DB_URL)
+# - DB_SERVICE_ROLE_KEY
+```
+3. Run dev server:
+```bash
+npm run dev
+```
+Expected:
+- App available at `http://localhost:3000`.
+- Auth + task data load via DB.
+
+## Demo (UI)
+1. Start the app: `npm run dev`
+2. Open dashboard and select a task.
+3. Add a comment in `Comments`.
+4. Confirm it appears in timeline.
+5. Refresh and verify prompt/context now includes the comment.
+
+Expected:
+- `COMMENTS` section includes the new entry.
+- `comments_digest` changes after each comment mutation.
+- Returned `signature` matches the new digest.
+
+## Demo (API)
+1. Add comment:
+```bash
+curl -X POST "http://localhost:3000/api/tasks/<taskId>/comments" \
+  -H "Content-Type: application/json" \
+  -H "Authorization: Bearer <access_token>" \
+  -d '{"content":"Add context here"}'
+```
+2. Fetch task:
+```bash
+curl -X GET "http://localhost:3000/api/tasks/<taskId>" \
+  -H "Authorization: Bearer <access_token>"
+```
+3. Verify:
+- `comments_digest` present and updated.
+- `context.prompt` contains `COMMENTS`.
+- `signature` changes when digest changes.
+
+## Demo (Queue/MCP)
+1. Pull via queue (`POST /api/queue`) or MCP (`queue.pull`).
+2. Verify returned prompt includes `COMMENTS` and digest/signature fields.
+3. Add another comment and pull again; verify digest/signature roll forward.
+
+## E2E (Playwright) — rerun commands
+```bash
+npm run test:e2e:sandbox -- e2e/comments.spec.ts
+```
+If you are not in a sandbox and want to override host/port:
+```bash
+SANDBOX=1 CLOUD_SYNC_DISABLED=1 E2E_HOST=0.0.0.0 E2E_PORT=3101 npx playwright test e2e/comments.spec.ts
+```
+Expected:
+- Playwright starts Next.js dev server.
+- Browser flow creates a comment and validates digest/signature changes.
+
+## Cloud sync (MCP log) — rerun commands
+```bash
+export DB_URL="https://<project>.db.co"
+export DB_SERVICE_ROLE_KEY="<service-role-key>"
+node mcp/tmp-log.mjs
+```
+Expected:
+- MCP tool connects and writes a task log entry for this acceptance run.
+
+## Evidence (this environment)
+- `npm run test:e2e:sandbox -- e2e/comments.spec.ts` failed (Next.js web server did not start; no URL visited):
+  - Command output:
+    - `> agx-cloud@0.1.0 test:e2e:sandbox`
+    - `> SANDBOX=1 CLOUD_SYNC_DISABLED=1 E2E_HOST=127.0.0.1 E2E_PORT=3100 playwright test e2e/comments.spec.ts`
+    - `[WebServer] (node:11097) Warning: The 'NO_COLOR' env is ignored due to the 'FORCE_COLOR' env being set.`
+    - `[WebServer] (Use \`node --trace-warnings ...\` to show where the warning was created)`
+    - `[WebServer] ⚠ Warning: Next.js inferred your workspace root, but it may not be correct.`
+    - `[WebServer] We detected multiple lockfiles and selected the directory of /Users/mendrika/package-lock.json as the root directory.`
+    - `[WebServer] Detected additional lockfiles:`
+    - `[WebServer]   * /Users/mendrika/Projects/Agents/agx-cloud/package-lock.json`
+    - `[WebServer] (node:11098) Warning: The 'NO_COLOR' env is ignored due to the 'FORCE_COLOR' env being set.`
+    - `[WebServer] (Use \`node --trace-warnings ...\` to show where the warning was created)`
+    - `[WebServer] ⨯ Failed to start server`
+    - `[WebServer] Error: listen EPERM: operation not permitted 127.0.0.1:3100`
+    - `[WebServer] at <unknown> (Error: listen EPERM: operation not permitted 127.0.0.1:3100) {`
+    - `[WebServer]   code: 'EPERM'`
+    - `[WebServer]   errno: -1`
+    - `[WebServer]   syscall: 'listen'`
+    - `[WebServer]   address: '127.0.0.1'`
+    - `[WebServer]   port: 3100`
+    - `[WebServer] }`
+    - `Error: Process from config.webServer exited early.`
+- `DB_URL=https://iicvrgtzktvsrestfqif.db.co DB_SERVICE_ROLE_KEY="<service-role-key>" node mcp/tmp-log.mjs` failed (IPC socket blocked):
+  - Command output:
+    - `Error: listen EPERM: operation not permitted /tmp/tsx-501/11143.pipe`
+    - `at Server.setupListenHandle [as _listen2] (node:net:1918:21)`
+    - `at listenInCluster (node:net:1997:12)`
+    - `at Server.listen (node:net:2119:5)`
+    - `at file:///Users/mendrika/Projects/Agents/agx-cloud/mcp/node_modules/tsx/dist/cli.mjs:53:31537`
+    - `code: 'EPERM' errno: -1 syscall: 'listen' address: '/tmp/tsx-501/11143.pipe'`
+    - `Node.js v25.5.0`
+    - `Failed to log via MCP: McpError: MCP error -32000: Connection closed`
+    - `at McpError.fromError (file:///Users/mendrika/Projects/Agents/agx-cloud/mcp/node_modules/@modelcontextprotocol/sdk/dist/esm/types.js:2035:16)`
+    - `at Client._onclose (file:///Users/mendrika/Projects/Agents/agx-cloud/mcp/node_modules/@modelcontextprotocol/sdk/dist/esm/shared/protocol.js:259:32)`
+    - `at _transport.onclose (file:///Users/mendrika/Projects/Agents/agx-cloud/mcp/node_modules/@modelcontextprotocol/sdk/dist/esm/shared/protocol.js:223:18)`
+    - `at ChildProcess.<anonymous> (file:///Users/mendrika/Projects/Agents/agx-cloud/mcp/node_modules/@modelcontextprotocol/sdk/dist/esm/client/stdio.js:85:31)`
+    - `at ChildProcess.emit (node:events:508:20)`
+    - `at maybeClose (node:internal/child_process:1084:16)`
+    - `at ChildProcess._handle.onexit (node:internal/child_process:304:5) {`
+    - `code: -32000`
+    - `data: undefined`
+    - `}`
+
+## Notes
+- Comments beginning with `[execution/` or `Execution result from agx` are excluded from prompt context.
+- Clients should treat signature/digest mismatch as fatal and re-pull task context before continuing execution.