@moretea-labs/forge 1.5.0-rc.1
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/AGENTS.md +120 -0
- package/CHANGELOG.md +36 -0
- package/CLAUDE.md +120 -0
- package/CODE_OF_CONDUCT.md +23 -0
- package/CONTRIBUTING.md +77 -0
- package/LICENSE +22 -0
- package/NOTICE +9 -0
- package/README.en.md +5 -0
- package/README.es.md +12 -0
- package/README.fr.md +12 -0
- package/README.ja.md +12 -0
- package/README.md +132 -0
- package/README.zh-CN.md +84 -0
- package/SECURITY.md +50 -0
- package/SKILL.md +431 -0
- package/SUPPORT.md +31 -0
- package/THIRD_PARTY_NOTICES.md +18 -0
- package/agents/openai.yaml +4 -0
- package/assets/AGENTS.md +68 -0
- package/assets/CLAUDE.md +68 -0
- package/assets/branding/README.md +10 -0
- package/assets/branding/forge-controller-flow.mmd +8 -0
- package/assets/hooks/AGENTS.md +75 -0
- package/assets/hooks/CLAUDE.md +75 -0
- package/assets/hooks/anti-simplification.sh +12 -0
- package/assets/hooks/changelog-guard.sh +80 -0
- package/assets/hooks/codex.hooks.template.json +60 -0
- package/assets/hooks/first-principles-guard.sh +72 -0
- package/assets/hooks/hook-input.sh +618 -0
- package/assets/hooks/lib/session-state.sh +106 -0
- package/assets/hooks/lib/workflow-state.sh +1730 -0
- package/assets/hooks/post-bash.sh +215 -0
- package/assets/hooks/post-edit-guard.sh +256 -0
- package/assets/hooks/post-tool-observer.sh +99 -0
- package/assets/hooks/pre-edit-guard.sh +240 -0
- package/assets/hooks/prompt-guard.sh +1077 -0
- package/assets/hooks/run-hook.sh +67 -0
- package/assets/hooks/security-sentinel.sh +115 -0
- package/assets/hooks/session-start-context.sh +593 -0
- package/assets/hooks/settings.template.json +60 -0
- package/assets/hooks/stop-orchestrator.sh +171 -0
- package/assets/hooks/subagent-return-channel-guard.sh +107 -0
- package/assets/hooks/worktree-guard.sh +39 -0
- package/assets/initializer-question-pack.v1.json +132 -0
- package/assets/initializer-question-pack.v1.schema.json +46 -0
- package/assets/initializer-question-pack.v2.json +174 -0
- package/assets/initializer-question-pack.v3.json +206 -0
- package/assets/initializer-question-pack.v3.schema.json +92 -0
- package/assets/initializer-question-pack.v4.json +557 -0
- package/assets/initializer-question-pack.v4.schema.json +169 -0
- package/assets/partials/01-header.partial.md +10 -0
- package/assets/partials/02-iron-rules.partial.md +30 -0
- package/assets/partials/03-philosophy.partial.md +32 -0
- package/assets/partials/04-project-structure.partial.md +56 -0
- package/assets/partials/05-workflow.partial.md +79 -0
- package/assets/partials/06-cloudflare.partial.md +20 -0
- package/assets/partials/07-footer.partial.md +38 -0
- package/assets/partials/08-orchestration.partial.md +49 -0
- package/assets/partials/09-compact-instructions.partial.md +11 -0
- package/assets/partials/_assembly-order.md +40 -0
- package/assets/partials-agents/01-header.partial.md +8 -0
- package/assets/partials-agents/02-operating-mode.partial.md +44 -0
- package/assets/partials-agents/03-orchestration.partial.md +45 -0
- package/assets/partials-agents/04-task-protocol.partial.md +69 -0
- package/assets/partials-agents/05-coding-constraints.partial.md +20 -0
- package/assets/partials-agents/06-quality-safety.partial.md +23 -0
- package/assets/partials-agents/07-cloudflare.partial.md +9 -0
- package/assets/partials-agents/08-deep-docs.partial.md +32 -0
- package/assets/plan-map.json +301 -0
- package/assets/plugin-registry.v1.json +8 -0
- package/assets/project-structures/ai-native-collaborative-editor.txt +25 -0
- package/assets/project-structures/ai-native-product-copilot.txt +21 -0
- package/assets/project-structures/ai-native-runtime-console.txt +25 -0
- package/assets/project-structures/ai-native-sidecar-kernel.txt +19 -0
- package/assets/project-structures/astro-ssr.txt +25 -0
- package/assets/project-structures/expo-nativewind.txt +52 -0
- package/assets/project-structures/monorepo.txt +63 -0
- package/assets/project-structures/remix.txt +50 -0
- package/assets/project-structures/tanstack-start-workers.txt +51 -0
- package/assets/project-structures/vite-tanstack.txt +58 -0
- package/assets/reference-configs/AGENTS.md +13 -0
- package/assets/reference-configs/CLAUDE.md +13 -0
- package/assets/reference-configs/agentic-development-flow.md +94 -0
- package/assets/reference-configs/ai-workflows.md +14 -0
- package/assets/reference-configs/changelog-versioning.md +13 -0
- package/assets/reference-configs/coding-standards.md +14 -0
- package/assets/reference-configs/development-protocol.md +21 -0
- package/assets/reference-configs/document-generation.md +38 -0
- package/assets/reference-configs/evaluator-rubric.md +19 -0
- package/assets/reference-configs/external-tooling.md +374 -0
- package/assets/reference-configs/git-strategy.md +14 -0
- package/assets/reference-configs/global-working-rules.md +64 -0
- package/assets/reference-configs/handoff-protocol.md +38 -0
- package/assets/reference-configs/harness-overview.md +124 -0
- package/assets/reference-configs/heartbeat-triage.md +57 -0
- package/assets/reference-configs/hook-operations.md +96 -0
- package/assets/reference-configs/release-deploy.md +40 -0
- package/assets/reference-configs/spa-day-protocol.md +14 -0
- package/assets/reference-configs/sprint-contracts.md +89 -0
- package/assets/reference-configs/workflow-orchestration.md +14 -0
- package/assets/skill-hooks.json +41 -0
- package/assets/skill-version.json +189 -0
- package/assets/skills/claude-review/SKILL.md +231 -0
- package/assets/skills/codex-review/SKILL.md +103 -0
- package/assets/templates/AGENTS.md +13 -0
- package/assets/templates/CLAUDE.md +13 -0
- package/assets/templates/architecture.template.md +80 -0
- package/assets/templates/brief.template.md +38 -0
- package/assets/templates/contract.template.md +104 -0
- package/assets/templates/decisions.template.md +85 -0
- package/assets/templates/factor-factory/factor-backtest-report.template.md +36 -0
- package/assets/templates/factor-factory/factor-hypothesis.template.md +30 -0
- package/assets/templates/factor-factory/factor-registry.template.json +5 -0
- package/assets/templates/gitignore.template +53 -0
- package/assets/templates/guides/metro-esm-gotchas.template.md +46 -0
- package/assets/templates/helpers/architecture-event.ts +822 -0
- package/assets/templates/helpers/architecture-queue.sh +647 -0
- package/assets/templates/helpers/archive-architecture-request.sh +244 -0
- package/assets/templates/helpers/archive-workflow.sh +295 -0
- package/assets/templates/helpers/capability-config.ts +394 -0
- package/assets/templates/helpers/capability-resolver.ts +505 -0
- package/assets/templates/helpers/capture-plan.sh +335 -0
- package/assets/templates/helpers/check-agent-tooling.sh +1533 -0
- package/assets/templates/helpers/check-architecture-sync.sh +287 -0
- package/assets/templates/helpers/check-brain-manifest.sh +255 -0
- package/assets/templates/helpers/check-context-files.sh +49 -0
- package/assets/templates/helpers/check-deploy-sql-order.sh +117 -0
- package/assets/templates/helpers/check-skill-version.ts +193 -0
- package/assets/templates/helpers/check-task-sync.sh +65 -0
- package/assets/templates/helpers/check-task-workflow.sh +1002 -0
- package/assets/templates/helpers/codex-handoff-resume.sh +269 -0
- package/assets/templates/helpers/context-contract-sync.sh +516 -0
- package/assets/templates/helpers/contract-run.ts +465 -0
- package/assets/templates/helpers/contract-worktree.sh +725 -0
- package/assets/templates/helpers/ensure-task-workflow.sh +1218 -0
- package/assets/templates/helpers/harness-trace-grade.sh +150 -0
- package/assets/templates/helpers/heartbeat-triage.sh +361 -0
- package/assets/templates/helpers/inspect-project-state.ts +280 -0
- package/assets/templates/helpers/maintenance-triage.sh +167 -0
- package/assets/templates/helpers/migrate-project-template.sh +54 -0
- package/assets/templates/helpers/migrate-workflow-docs.ts +413 -0
- package/assets/templates/helpers/new-plan.sh +183 -0
- package/assets/templates/helpers/new-spec.sh +50 -0
- package/assets/templates/helpers/new-sprint.sh +49 -0
- package/assets/templates/helpers/plan-to-todo.sh +799 -0
- package/assets/templates/helpers/prepare-codex-handoff.sh +203 -0
- package/assets/templates/helpers/prepare-handoff.sh +81 -0
- package/assets/templates/helpers/refresh-current-status.sh +469 -0
- package/assets/templates/helpers/select-agent-context-blocks.sh +66 -0
- package/assets/templates/helpers/ship-worktrees.sh +561 -0
- package/assets/templates/helpers/sprint-backlog.sh +837 -0
- package/assets/templates/helpers/summarize-failures.sh +125 -0
- package/assets/templates/helpers/switch-plan.sh +153 -0
- package/assets/templates/helpers/sync-brain-docs.sh +381 -0
- package/assets/templates/helpers/verify-contract.sh +705 -0
- package/assets/templates/helpers/verify-sprint.sh +680 -0
- package/assets/templates/helpers/workflow-contract.ts +202 -0
- package/assets/templates/helpers/workstream-sync.sh +263 -0
- package/assets/templates/implementation-notes.template.md +37 -0
- package/assets/templates/packages.template.md +45 -0
- package/assets/templates/plan.template.md +77 -0
- package/assets/templates/prd.template.md +165 -0
- package/assets/templates/research.template.md +25 -0
- package/assets/templates/review.template.md +78 -0
- package/assets/templates/spec.template.md +31 -0
- package/assets/templates/sprint.template.md +69 -0
- package/assets/templates/tech-stack.template.md +57 -0
- package/assets/versions.json +77 -0
- package/assets/workflow-contract.v1.json +671 -0
- package/bin/forge-desktop-helper.mjs +204 -0
- package/bin/forge-hook.mjs +32 -0
- package/bin/forge-runtime-service.mjs +34 -0
- package/bin/forge-runtime.mjs +30 -0
- package/bin/forge.mjs +32 -0
- package/docs/CHANGELOG.md +978 -0
- package/docs/README.md +72 -0
- package/docs/README.zh-CN.md +58 -0
- package/docs/architecture/chatgpt-handoff-facade.md +393 -0
- package/docs/architecture/current/README.md +158 -0
- package/docs/architecture/current/approved-target-architecture.zh-CN.md +1501 -0
- package/docs/architecture/current/architecture-invariants.md +331 -0
- package/docs/architecture/current/automation-and-schedule-engine.md +453 -0
- package/docs/architecture/current/codegraph-context-provider.md +226 -0
- package/docs/architecture/current/control-plane-authority-inventory.md +82 -0
- package/docs/architecture/current/controller-repository-decoupling.md +148 -0
- package/docs/architecture/current/dispatch-and-agent-strategy.md +354 -0
- package/docs/architecture/current/entity-model.md +619 -0
- package/docs/architecture/current/external-plugin-governance.md +396 -0
- package/docs/architecture/current/failure-recovery.md +471 -0
- package/docs/architecture/current/governance.md +213 -0
- package/docs/architecture/current/human-interaction-plane.md +87 -0
- package/docs/architecture/current/implementation-status.md +128 -0
- package/docs/architecture/current/job-and-run-lifecycle.md +413 -0
- package/docs/architecture/current/local-workspace-target-grants.md +70 -0
- package/docs/architecture/current/migration-roadmap.md +105 -0
- package/docs/architecture/current/multi-repository-execution.md +371 -0
- package/docs/architecture/current/operations-runbook.md +45 -0
- package/docs/architecture/current/peer-supercontroller-runtime.md +32 -0
- package/docs/architecture/current/personal-assistant-plugin-baseline.md +207 -0
- package/docs/architecture/current/repository-access-modes.md +102 -0
- package/docs/architecture/current/route-policy.md +15 -0
- package/docs/architecture/current/route-session-concurrency.md +85 -0
- package/docs/architecture/current/runtime-architecture-simplification.md +214 -0
- package/docs/architecture/current/runtime-directory-map.md +49 -0
- package/docs/architecture/current/runtime-health-and-resource-lifecycle.md +85 -0
- package/docs/architecture/current/scheduler-and-resource-claims.md +432 -0
- package/docs/architecture/current/session-aware-execution-and-authorization.md +77 -0
- package/docs/architecture/current/system-overview.md +144 -0
- package/docs/architecture/current/target-requirements-traceability.md +202 -0
- package/docs/architecture/current/thin-harness-governance-policy.md +32 -0
- package/docs/architecture/current/thin-harness-v1.md +313 -0
- package/docs/architecture/current/verification-and-release-gates.md +391 -0
- package/docs/architecture/decisions/20260801-controller-home-sqlite-state.md +100 -0
- package/docs/architecture/decisions/20260803-canonical-skill-surface.md +40 -0
- package/docs/architecture/decisions/20260803-release-identity-binding-and-exit-policy.md +53 -0
- package/docs/architecture/diagrams/.gitkeep +1 -0
- package/docs/architecture/diagrams/agentic-dev-plugin-architecture.html +186 -0
- package/docs/architecture/domains/.gitkeep +0 -0
- package/docs/architecture/domains/public-surface.md +30 -0
- package/docs/architecture/domains/runtime-harness.md +33 -0
- package/docs/architecture/domains/verification.md +33 -0
- package/docs/architecture/domains/workflow-engine.md +30 -0
- package/docs/architecture/global-hook-runtime.md +162 -0
- package/docs/architecture/history.md +38 -0
- package/docs/architecture/index.md +114 -0
- package/docs/architecture/ios-semantic-automation-provider-v2.md +166 -0
- package/docs/architecture/modules/.gitkeep +0 -0
- package/docs/architecture/modules/controller-runtime/transport-lifecycle.md +24 -0
- package/docs/architecture/requests/.gitkeep +1 -0
- package/docs/architecture/requests/archive/2026/20260528-154740-ai-hooks-ai-hooks-hook-input-sh.md +59 -0
- package/docs/architecture/requests/archive/2026/20260528-154816-assets-hooks-assets-hooks-hook-input-sh.md +59 -0
- package/docs/architecture/requests/archive/2026/20260528-161851-ai-harness-workflow-contract-json-ai-harness-workflow-contract-json.md +59 -0
- package/docs/architecture/requests/archive/2026/20260528-161853-scripts-check-task-workflow-sh-scripts-check-task-workflow-sh.md +59 -0
- package/docs/architecture/requests/archive/2026/20260528-161911-assets-workflow-contract-v1-json-assets-workflow-contract-v1-json.md +59 -0
- package/docs/architecture/requests/archive/2026/20260528-222416-ai-hooks-ai-hooks-hook-input-sh.md +59 -0
- package/docs/architecture/requests/archive/2026/20260528-222444-ai-hooks-ai-hooks-pre-edit-guard-sh.md +59 -0
- package/docs/architecture/requests/archive/2026/20260528-222457-ai-hooks-ai-hooks-pre-edit-guard-sh.md +59 -0
- package/docs/architecture/requests/archive/2026/20260528-222648-ai-hooks-ai-hooks-pre-edit-guard-sh.md +59 -0
- package/docs/architecture/requests/archive/2026/20260528-222705-ai-hooks-ai-hooks-worktree-guard-sh.md +59 -0
- package/docs/architecture/requests/archive/2026/20260528-222726-ai-hooks-ai-hooks-prompt-guard-sh.md +59 -0
- package/docs/architecture/requests/archive/2026/20260528-222727-ai-hooks-ai-hooks-prompt-guard-sh.md +59 -0
- package/docs/architecture/requests/archive/2026/20260528-224736-ai-hooks-ai-hooks-hook-input-sh.md +59 -0
- package/docs/architecture/requests/archive/2026/20260528-233259-ai-hooks-ai-hooks-prompt-guard-sh.md +59 -0
- package/docs/architecture/requests/archive/2026/20260528-233335-assets-hooks-assets-hooks-prompt-guard-sh.md +59 -0
- package/docs/architecture/requests/archive/2026/20260528-233456-ai-hooks-ai-hooks-prompt-guard-sh.md +59 -0
- package/docs/architecture/requests/archive/2026/20260528-233457-assets-hooks-assets-hooks-prompt-guard-sh.md +59 -0
- package/docs/architecture/requests/archive/2026/20260528-233637-ai-hooks-ai-hooks-prompt-guard-sh.md +59 -0
- package/docs/architecture/requests/archive/2026/20260528-233638-assets-hooks-assets-hooks-prompt-guard-sh.md +59 -0
- package/docs/architecture/requests/archive/2026/20260529-000322-root-package-json.md +59 -0
- package/docs/architecture/requests/archive/2026/20260529-004238-ai-hooks-ai-hooks-lib-workflow-state-sh.md +59 -0
- package/docs/architecture/requests/archive/2026/20260529-020654-ai-harness-policy-json-ai-harness-policy-json.md +63 -0
- package/docs/architecture/requests/archive/2026/20260529-094236-ai-hooks-ai-hooks-prompt-guard-sh.md +60 -0
- package/docs/architecture/requests/archive/2026/20260529-094323-assets-hooks-assets-hooks-prompt-guard-sh.md +60 -0
- package/docs/architecture/requests/archive/2026/20260529-094331-ai-hooks-ai-hooks-prompt-guard-sh.md +60 -0
- package/docs/architecture/requests/archive/2026/20260529-094339-assets-hooks-assets-hooks-prompt-guard-sh.md +60 -0
- package/docs/architecture/requests/archive/2026/20260529-094430-assets-hooks-assets-hooks-session-start-context-sh.md +60 -0
- package/docs/architecture/requests/archive/2026/20260529-094446-ai-hooks-ai-hooks-session-start-context-sh.md +60 -0
- package/docs/architecture/requests/archive/2026/20260613-002040-runtime-harness-hook-adapters.md +68 -0
- package/docs/architecture/requests/archive/2026/root.md +68 -0
- package/docs/architecture/requests/archive/2026/runtime-harness-hook-adapters.md +76 -0
- package/docs/architecture/requests/archive/2026/verification-evals-checks.md +68 -0
- package/docs/architecture/requests/archive/2026/workflow-engine-contract-assets.md +69 -0
- package/docs/architecture/reviews/2026-07-11-access-surface-review.md +99 -0
- package/docs/architecture/snapshots/.gitkeep +1 -0
- package/docs/forge-autonomous-goal-loop.md +7 -0
- package/docs/forge-chatgpt-browser-engine.md +11 -0
- package/docs/forge-chatgpt-mcp-setup.md +239 -0
- package/docs/forge-chatgpt-supervised-automation.md +11 -0
- package/docs/forge-github-issue-launcher.md +7 -0
- package/docs/forge-plugin-management.md +95 -0
- package/docs/forge-provider-configuration.md +7 -0
- package/docs/forge-runtime-self-healing-loop.md +7 -0
- package/docs/images/forge-banner-cn.svg +1 -0
- package/docs/images/forge-banner.svg +1 -0
- package/docs/images/forge-controller-flow.svg +1 -0
- package/docs/images/image.png +0 -0
- package/docs/images/repo-harness-gptpro-cn.png +0 -0
- package/docs/images/repo-harness-gptpro.png +0 -0
- package/docs/images/repo-harness-hook-carrot.png +0 -0
- package/docs/operations/chatgpt-personal-assistant-runtime.md +83 -0
- package/docs/operations/checkout-route-integrity.md +22 -0
- package/docs/operations/controller-browser-plugin.md +299 -0
- package/docs/operations/controller-desktop-plugin.md +112 -0
- package/docs/operations/controller-performance-and-502.md +126 -0
- package/docs/operations/controller-reliability-runbook.md +134 -0
- package/docs/operations/environment-hardening.md +50 -0
- package/docs/operations/features.md +45 -0
- package/docs/operations/features.zh-CN.md +45 -0
- package/docs/operations/github-repository.md +60 -0
- package/docs/operations/gmail-assistant-routines.md +186 -0
- package/docs/operations/homebrew.md +26 -0
- package/docs/operations/local-system-assistant.md +46 -0
- package/docs/operations/local-system-assistant.zh-CN.md +46 -0
- package/docs/operations/mcp-tool-exposure.md +58 -0
- package/docs/operations/mobile-intents-shortcuts.md +117 -0
- package/docs/operations/open-source-release-hygiene.md +31 -0
- package/docs/operations/personal-assistant-operator-guide.md +61 -0
- package/docs/operations/platform-support.md +62 -0
- package/docs/operations/platform-support.zh-CN.md +61 -0
- package/docs/operations/provider-configuration.md +31 -0
- package/docs/operations/releasing.md +86 -0
- package/docs/operations/releasing.zh-CN.md +86 -0
- package/docs/operations/route-session-concurrency-baseline.json +893 -0
- package/docs/operations/route-session-concurrency-baseline.md +94 -0
- package/docs/operations/runtime-performance-diagnostics.md +14 -0
- package/docs/operations/sqlite-control-plane-recovery.md +65 -0
- package/docs/operations/standalone-disaster-recovery.md +136 -0
- package/docs/operations/troubleshooting.md +72 -0
- package/docs/operations/troubleshooting.zh-CN.md +70 -0
- package/docs/public-usage-guide.md +33 -0
- package/docs/public-usage-guide.zh-CN.md +33 -0
- package/docs/tutorials/01-install-and-start.md +93 -0
- package/docs/tutorials/01-install-and-start.zh-CN.md +93 -0
- package/docs/tutorials/02-connect-chatgpt.md +82 -0
- package/docs/tutorials/02-connect-chatgpt.zh-CN.md +80 -0
- package/docs/tutorials/03-first-repository-task.md +57 -0
- package/docs/tutorials/03-first-repository-task.zh-CN.md +57 -0
- package/docs/tutorials/README.md +13 -0
- package/docs/tutorials/README.zh-CN.md +13 -0
- package/docs/wiki/Architecture.md +85 -0
- package/docs/wiki/Core-Concepts.md +27 -0
- package/docs/wiki/Home.md +36 -0
- package/docs/wiki/Implementation.md +172 -0
- package/docs/wiki/Installation.md +50 -0
- package/docs/wiki/Integrations.md +29 -0
- package/docs/wiki/Operations.md +26 -0
- package/docs/wiki/Quick-Start.md +46 -0
- package/docs/wiki/Releases-and-Upgrades.md +34 -0
- package/docs/wiki/Runtime-Architecture.md +50 -0
- package/docs/wiki/Security-Model.md +31 -0
- package/docs/wiki/Troubleshooting.md +38 -0
- package/docs/wiki/Work-Lifecycle.md +31 -0
- package/docs/wiki/_Sidebar.md +21 -0
- package/install.ps1 +48 -0
- package/install.sh +66 -0
- package/package.json +156 -0
- package/scripts/activate-source-baseline.ts +335 -0
- package/scripts/architecture-event.ts +822 -0
- package/scripts/architecture-queue.sh +647 -0
- package/scripts/archive-architecture-request.sh +244 -0
- package/scripts/archive-workflow.sh +295 -0
- package/scripts/assemble-template.ts +1172 -0
- package/scripts/benchmark-controller-hotpath.ts +212 -0
- package/scripts/benchmark-controller-round2.ts +139 -0
- package/scripts/benchmark-ios-agent-device.ts +514 -0
- package/scripts/benchmark-route-session-concurrency.ts +714 -0
- package/scripts/benchmark-thin-harness-gateway-ab.ts +632 -0
- package/scripts/benchmark-thin-harness-mcp-e2e.ts +479 -0
- package/scripts/benchmark-thin-harness.ts +251 -0
- package/scripts/bootstrap-runtime-maintenance-recovery.sh +183 -0
- package/scripts/canary-global-hook.sh +263 -0
- package/scripts/capability-config.ts +394 -0
- package/scripts/capability-resolver.ts +505 -0
- package/scripts/capture-plan.sh +335 -0
- package/scripts/check-agent-tooling.sh +1549 -0
- package/scripts/check-architecture-sync.sh +373 -0
- package/scripts/check-brain-manifest.sh +255 -0
- package/scripts/check-ci.sh +16 -0
- package/scripts/check-context-files.sh +49 -0
- package/scripts/check-deploy-sql-order.sh +117 -0
- package/scripts/check-mcp-compatibility.ts +93 -0
- package/scripts/check-npm-release.sh +32 -0
- package/scripts/check-open-source-tracked-surface.sh +146 -0
- package/scripts/check-package-identity.mjs +117 -0
- package/scripts/check-platform-support.mjs +79 -0
- package/scripts/check-public-docs.sh +105 -0
- package/scripts/check-public-release-surface.sh +19 -0
- package/scripts/check-release-published.sh +57 -0
- package/scripts/check-release-readiness.sh +43 -0
- package/scripts/check-release-version.mjs +74 -0
- package/scripts/check-runtime-architecture.mjs +593 -0
- package/scripts/check-runtime-env.mjs +89 -0
- package/scripts/check-skill-version.ts +193 -0
- package/scripts/check-tarball-install-smoke.sh +66 -0
- package/scripts/check-task-sync.sh +65 -0
- package/scripts/check-task-workflow.sh +1002 -0
- package/scripts/check-third-party-notices.mjs +36 -0
- package/scripts/codex-handoff-resume.sh +269 -0
- package/scripts/complete-control-plane-cutover.ts +126 -0
- package/scripts/context-contract-sync.sh +516 -0
- package/scripts/contract-run.ts +465 -0
- package/scripts/contract-worktree.sh +725 -0
- package/scripts/controller-ngrok-rotation.sh +678 -0
- package/scripts/create-project-dirs.sh +282 -0
- package/scripts/ensure-codegraph.sh +16 -0
- package/scripts/ensure-task-workflow.sh +1218 -0
- package/scripts/export-requirement-portfolio.ts +28 -0
- package/scripts/factor-lab-check.sh +73 -0
- package/scripts/factor-lab-new.sh +96 -0
- package/scripts/factor-lab-promote.sh +86 -0
- package/scripts/factor-lab-reject.sh +68 -0
- package/scripts/harness-trace-grade.sh +150 -0
- package/scripts/heartbeat-triage.sh +361 -0
- package/scripts/hook-dispatch-diet-report.ts +234 -0
- package/scripts/hook-shim.sh +93 -0
- package/scripts/init-project.sh +505 -0
- package/scripts/initializer-question-pack.ts +200 -0
- package/scripts/inspect-project-state.ts +280 -0
- package/scripts/install-desktop-operator-registration.ts +45 -0
- package/scripts/install-standalone-recovery.ts +74 -0
- package/scripts/lib/AGENTS.md +13 -0
- package/scripts/lib/CLAUDE.md +13 -0
- package/scripts/lib/controller-home-env.sh +69 -0
- package/scripts/lib/project-init-lib.sh +2759 -0
- package/scripts/load-standalone-recovery.sh +17 -0
- package/scripts/loop-engine-cutover-gate.ts +324 -0
- package/scripts/maintenance-triage.sh +167 -0
- package/scripts/migrate-project-template.sh +1189 -0
- package/scripts/migrate-requirement-portfolio.ts +86 -0
- package/scripts/migrate-workflow-docs.ts +413 -0
- package/scripts/new-plan.sh +183 -0
- package/scripts/new-spec.sh +50 -0
- package/scripts/new-sprint.sh +49 -0
- package/scripts/open-source-audit-allowlist.txt +46 -0
- package/scripts/package-source-archive.sh +147 -0
- package/scripts/plan-to-todo.sh +799 -0
- package/scripts/prepare-codex-handoff.sh +203 -0
- package/scripts/prepare-handoff.sh +81 -0
- package/scripts/public-release-files.txt +39 -0
- package/scripts/public-release.ts +174 -0
- package/scripts/publish-release-tarball.sh +27 -0
- package/scripts/refresh-current-status.sh +469 -0
- package/scripts/refresh-ios-physical-runtime.ts +196 -0
- package/scripts/repair-executable-modes.ts +8 -0
- package/scripts/rollout-all-registered-repos.sh +7 -0
- package/scripts/route-nl-vs-ts-eval.ts +679 -0
- package/scripts/run-bun-test-file.ts +182 -0
- package/scripts/run-governed-gate.ts +140 -0
- package/scripts/run-mobile-monitor-bridge.ts +71 -0
- package/scripts/run-skill-evals.ts +1022 -0
- package/scripts/run-skill-hook.ts +244 -0
- package/scripts/run-supervised-command.ts +24 -0
- package/scripts/run-tests-portable.sh +20 -0
- package/scripts/select-agent-context-blocks.sh +66 -0
- package/scripts/setup-plugins.sh +43 -0
- package/scripts/ship-worktrees.sh +561 -0
- package/scripts/smoke-browser-cdp-bridge.ts +93 -0
- package/scripts/smoke-chatgpt-supervised-automation.ts +208 -0
- package/scripts/smoke-ios-physical-device.ts +114 -0
- package/scripts/smoke-mcp-http-runtime.ts +216 -0
- package/scripts/smoke-mcp-tool-surface.ts +117 -0
- package/scripts/smoke-runtime-recovery.ts +220 -0
- package/scripts/smoke-schedule-engine.ts +283 -0
- package/scripts/sprint-backlog.sh +837 -0
- package/scripts/stage-runtime-release.ts +38 -0
- package/scripts/summarize-failures.sh +125 -0
- package/scripts/switch-plan.sh +153 -0
- package/scripts/sync-brain-docs.sh +381 -0
- package/scripts/sync-codex-installed-copies.sh +183 -0
- package/scripts/test-governance.ts +75 -0
- package/scripts/verify-contract.sh +705 -0
- package/scripts/verify-forge-runtime.sh +31 -0
- package/scripts/verify-sprint.sh +680 -0
- package/scripts/windows-paths.d.mts +7 -0
- package/scripts/windows-paths.mjs +28 -0
- package/scripts/workflow-contract.ts +206 -0
- package/scripts/workstream-sync.sh +263 -0
- package/src/cli/agent-jobs/executable-resolver.ts +289 -0
- package/src/cli/agent-jobs/executor-health.ts +252 -0
- package/src/cli/agent-jobs/integration.ts +963 -0
- package/src/cli/agent-jobs/job-manager.ts +2030 -0
- package/src/cli/agent-jobs/types.ts +219 -0
- package/src/cli/agent-jobs/worker-lifecycle.ts +288 -0
- package/src/cli/chatgpt-browser/bind-server.ts +504 -0
- package/src/cli/chatgpt-browser/binding.ts +140 -0
- package/src/cli/chatgpt-browser/bridge-extension.ts +221 -0
- package/src/cli/chatgpt-browser/bridge-provider.ts +268 -0
- package/src/cli/chatgpt-browser/engine.ts +569 -0
- package/src/cli/chatgpt-browser/file-policy.ts +158 -0
- package/src/cli/chatgpt-browser/native-provider.ts +553 -0
- package/src/cli/chatgpt-browser/oracle-provider.ts +437 -0
- package/src/cli/chatgpt-browser/prompt-assembler.ts +29 -0
- package/src/cli/chatgpt-browser/session-store.ts +301 -0
- package/src/cli/chatgpt-browser/types.ts +172 -0
- package/src/cli/commands/adopt-plan.ts +186 -0
- package/src/cli/commands/brain-root.ts +132 -0
- package/src/cli/commands/brain.ts +609 -0
- package/src/cli/commands/capability-context.ts +613 -0
- package/src/cli/commands/chatgpt.ts +424 -0
- package/src/cli/commands/controller.ts +680 -0
- package/src/cli/commands/docs.ts +103 -0
- package/src/cli/commands/doctor.ts +476 -0
- package/src/cli/commands/global-runtime.ts +323 -0
- package/src/cli/commands/hook.ts +34 -0
- package/src/cli/commands/init-hook.ts +870 -0
- package/src/cli/commands/init.ts +829 -0
- package/src/cli/commands/install.ts +86 -0
- package/src/cli/commands/mcp.ts +315 -0
- package/src/cli/commands/migrate.ts +154 -0
- package/src/cli/commands/plugin.ts +74 -0
- package/src/cli/commands/prompt-guard-decision.ts +238 -0
- package/src/cli/commands/recovery.ts +667 -0
- package/src/cli/commands/repository.ts +224 -0
- package/src/cli/commands/run.ts +23 -0
- package/src/cli/commands/runtime.ts +191 -0
- package/src/cli/commands/security.ts +440 -0
- package/src/cli/commands/status.ts +137 -0
- package/src/cli/commands/tools.ts +167 -0
- package/src/cli/controller/check-runner.ts +1022 -0
- package/src/cli/controller/codex-continuation.ts +153 -0
- package/src/cli/controller/completion-backlog.ts +380 -0
- package/src/cli/controller/completion-orchestrator.ts +1807 -0
- package/src/cli/controller/completion-target.ts +96 -0
- package/src/cli/controller/composite-operations.ts +196 -0
- package/src/cli/controller/composite-result.ts +130 -0
- package/src/cli/controller/context-pack.ts +652 -0
- package/src/cli/controller/execution-completion.ts +175 -0
- package/src/cli/controller/execution-policy.ts +392 -0
- package/src/cli/controller/governance.ts +594 -0
- package/src/cli/controller/issue-store.ts +1421 -0
- package/src/cli/controller/launch-agents.ts +410 -0
- package/src/cli/controller/legacy-issue-cutover.ts +415 -0
- package/src/cli/controller/lifecycle-authority.ts +16 -0
- package/src/cli/controller/migrated-issue-decision.ts +237 -0
- package/src/cli/controller/operational-plan.ts +226 -0
- package/src/cli/controller/postcondition.ts +134 -0
- package/src/cli/controller/progress.ts +656 -0
- package/src/cli/controller/project-state.ts +147 -0
- package/src/cli/controller/requirement-portfolio-export.ts +146 -0
- package/src/cli/controller/requirement-portfolio-migration.ts +613 -0
- package/src/cli/controller/run-evidence.ts +43 -0
- package/src/cli/controller/runtime-config.ts +92 -0
- package/src/cli/controller/stuck-state-migration.ts +396 -0
- package/src/cli/controller/task-ledger.ts +632 -0
- package/src/cli/controller/task-status-resolver.ts +403 -0
- package/src/cli/controller/types.ts +273 -0
- package/src/cli/controller/work-mode.ts +186 -0
- package/src/cli/controller/worklog.ts +201 -0
- package/src/cli/diagnostic-entry.ts +39 -0
- package/src/cli/editing/edit-session.ts +1606 -0
- package/src/cli/editing/executable-modes.ts +70 -0
- package/src/cli/github/github.ts +274 -0
- package/src/cli/github/plugin.ts +345 -0
- package/src/cli/github/session.ts +104 -0
- package/src/cli/hook/prompt-guard-decision.ts +238 -0
- package/src/cli/hook/prompt-intents.ts +534 -0
- package/src/cli/hook/route-registry.ts +107 -0
- package/src/cli/hook/runtime.ts +303 -0
- package/src/cli/hook/state-snapshot.ts +388 -0
- package/src/cli/hook-entry.ts +51 -0
- package/src/cli/index.ts +574 -0
- package/src/cli/installer/managed-entries.ts +78 -0
- package/src/cli/installer/shared.ts +65 -0
- package/src/cli/installer/targets/claude.ts +136 -0
- package/src/cli/installer/targets/codex.ts +174 -0
- package/src/cli/installer/targets/registry.ts +28 -0
- package/src/cli/installer/types.ts +72 -0
- package/src/cli/local-bridge/connector-freshness.ts +529 -0
- package/src/cli/local-bridge/console-view-models.ts +324 -0
- package/src/cli/local-bridge/dashboard.ts +1312 -0
- package/src/cli/local-bridge/facade-api.ts +1877 -0
- package/src/cli/local-bridge/job-store.ts +1451 -0
- package/src/cli/local-bridge/mobile-intents.ts +344 -0
- package/src/cli/local-bridge/mobile-monitor.ts +209 -0
- package/src/cli/local-bridge/server.ts +3183 -0
- package/src/cli/local-bridge/types.ts +176 -0
- package/src/cli/mcp/access-mode.ts +132 -0
- package/src/cli/mcp/access-tools.ts +387 -0
- package/src/cli/mcp/audit.ts +32 -0
- package/src/cli/mcp/auth.ts +402 -0
- package/src/cli/mcp/instructions.ts +33 -0
- package/src/cli/mcp/legacy-context.ts +16 -0
- package/src/cli/mcp/legacy-tool-service.ts +5516 -0
- package/src/cli/mcp/multi-repository.ts +423 -0
- package/src/cli/mcp/oauth.ts +226 -0
- package/src/cli/mcp/paths.ts +134 -0
- package/src/cli/mcp/policy.ts +230 -0
- package/src/cli/mcp/proxy-env.ts +62 -0
- package/src/cli/mcp/readiness-projection.ts +24 -0
- package/src/cli/mcp/redaction.ts +21 -0
- package/src/cli/mcp/repo.ts +24 -0
- package/src/cli/mcp/repository-tools.ts +1295 -0
- package/src/cli/mcp/server.ts +341 -0
- package/src/cli/mcp/setup.ts +793 -0
- package/src/cli/mcp/tool-capability-cache.ts +87 -0
- package/src/cli/mcp/tools.ts +9 -0
- package/src/cli/mcp/toolset-names.ts +70 -0
- package/src/cli/mcp/toolset-selection.ts +41 -0
- package/src/cli/mcp/toolset.ts +300 -0
- package/src/cli/mcp/transports/AGENTS.md +39 -0
- package/src/cli/mcp/transports/CLAUDE.md +39 -0
- package/src/cli/mcp/transports/http.ts +1234 -0
- package/src/cli/mcp/transports/session-registry.ts +428 -0
- package/src/cli/mcp/transports/stdio.ts +8 -0
- package/src/cli/mcp/types.ts +41 -0
- package/src/cli/mcp/umbrella-tools.ts +117 -0
- package/src/cli/repo-adoption/reclaim-runtime.ts +681 -0
- package/src/cli/repositories/branch-name-policy.ts +57 -0
- package/src/cli/repositories/command-classifier.ts +600 -0
- package/src/cli/repositories/command-executor.ts +1066 -0
- package/src/cli/repositories/command-normalization.ts +53 -0
- package/src/cli/repositories/command-scope.ts +264 -0
- package/src/cli/repositories/controller-home.ts +88 -0
- package/src/cli/repositories/entity-migration.ts +199 -0
- package/src/cli/repositories/ephemeral-workspace.ts +62 -0
- package/src/cli/repositories/git-command-executor.ts +301 -0
- package/src/cli/repositories/goal-registry.ts +239 -0
- package/src/cli/repositories/identity.ts +64 -0
- package/src/cli/repositories/local-project-onboarding.ts +539 -0
- package/src/cli/repositories/locks.ts +262 -0
- package/src/cli/repositories/registry.ts +1057 -0
- package/src/cli/repositories/runtime-storage.ts +411 -0
- package/src/cli/repositories/safe-patch.ts +421 -0
- package/src/cli/repositories/selected-path-actions.ts +341 -0
- package/src/cli/repositories/structured-git.ts +257 -0
- package/src/cli/repositories/types.ts +155 -0
- package/src/cli/repositories/umbrella.ts +134 -0
- package/src/cli/repositories/workbench.ts +140 -0
- package/src/cli/repositories/worktree-storage.ts +137 -0
- package/src/cli/repository/inspector.ts +637 -0
- package/src/cli/repository/session-cache.ts +453 -0
- package/src/cli/runtime/helper-runner.ts +172 -0
- package/src/cli/runtime-invocation.ts +318 -0
- package/src/cli/tools/codegraph.ts +676 -0
- package/src/cli/v81-entry.ts +29 -0
- package/src/core/adoption/gitignore-plan.ts +127 -0
- package/src/core/adoption/helper-wrapper-plan.ts +159 -0
- package/src/core/adoption/manifest-templates.ts +60 -0
- package/src/core/adoption/modes.ts +7 -0
- package/src/core/adoption/operations.ts +126 -0
- package/src/core/adoption/plan.ts +149 -0
- package/src/core/adoption/render.ts +70 -0
- package/src/core/adoption/rollback.ts +62 -0
- package/src/core/adoption/summary.ts +43 -0
- package/src/core/adoption/workflow-contract-asset.ts +14 -0
- package/src/core/adoption/workflow-contract-plan.ts +31 -0
- package/src/effects/fs-transaction.ts +540 -0
- package/src/effects/git-executable.ts +59 -0
- package/src/effects/managed-block.ts +86 -0
- package/src/effects/path-safety.ts +47 -0
- package/src/effects/process-runner.ts +192 -0
- package/src/runtime/assistant/action-proposals.ts +279 -0
- package/src/runtime/assistant/intent.ts +395 -0
- package/src/runtime/assistant/model-provider.ts +460 -0
- package/src/runtime/assistant/openapi.ts +223 -0
- package/src/runtime/assistant/policy.ts +89 -0
- package/src/runtime/assistant/readiness.ts +258 -0
- package/src/runtime/assistant/routine-runtime.ts +477 -0
- package/src/runtime/assistant/schedule-binding.ts +171 -0
- package/src/runtime/assistant/standing-grants.ts +375 -0
- package/src/runtime/assistant/store.ts +243 -0
- package/src/runtime/assistant/types.ts +135 -0
- package/src/runtime/context/codegraph-read-provider.ts +347 -0
- package/src/runtime/context/codegraph-sidecar.cjs +207 -0
- package/src/runtime/control-plane/dispatch-priority.ts +67 -0
- package/src/runtime/control-plane/execution/direct-edit-work-completion.ts +151 -0
- package/src/runtime/control-plane/execution/execution-identity.ts +456 -0
- package/src/runtime/control-plane/execution/session-store.ts +175 -0
- package/src/runtime/control-plane/execution/validation.ts +117 -0
- package/src/runtime/control-plane/execution/verification-evidence.ts +191 -0
- package/src/runtime/control-plane/execution/work-handle-store.ts +225 -0
- package/src/runtime/control-plane/execution/work-prepare-request-store.ts +159 -0
- package/src/runtime/control-plane/execution/work-task-receipt.ts +445 -0
- package/src/runtime/control-plane/execution/work-terminal-cleanup.ts +821 -0
- package/src/runtime/control-plane/facade/capability-registry.ts +279 -0
- package/src/runtime/control-plane/facade/check-normalization.ts +233 -0
- package/src/runtime/control-plane/facade/codex-delegation.ts +196 -0
- package/src/runtime/control-plane/facade/controller-session-store.ts +199 -0
- package/src/runtime/control-plane/facade/facade-result.ts +41 -0
- package/src/runtime/control-plane/facade/goal-workloop-access.ts +177 -0
- package/src/runtime/control-plane/facade/goal-workloop.ts +1216 -0
- package/src/runtime/control-plane/facade/handoff-inbox-store.ts +221 -0
- package/src/runtime/control-plane/facade/index.ts +16 -0
- package/src/runtime/control-plane/facade/operation-digest.ts +528 -0
- package/src/runtime/control-plane/facade/plan-contract-store.ts +403 -0
- package/src/runtime/control-plane/facade/policy-gate.ts +149 -0
- package/src/runtime/control-plane/facade/requirement-board.ts +280 -0
- package/src/runtime/control-plane/facade/self-healing-loop.ts +555 -0
- package/src/runtime/control-plane/facade/suggested-actions.ts +108 -0
- package/src/runtime/control-plane/facade/types.ts +729 -0
- package/src/runtime/control-plane/facade/work-admission-policy.ts +93 -0
- package/src/runtime/control-plane/facade/work-continuation.ts +104 -0
- package/src/runtime/control-plane/facade/work-contract-store.ts +1118 -0
- package/src/runtime/control-plane/facade/work-task-projection.ts +66 -0
- package/src/runtime/control-plane/global-scheduler/reconciliation.ts +365 -0
- package/src/runtime/control-plane/global-scheduler/scheduler.ts +920 -0
- package/src/runtime/control-plane/global-scheduler/wake-signal.ts +89 -0
- package/src/runtime/control-plane/goal-loop/config-facade.ts +700 -0
- package/src/runtime/control-plane/goal-loop/config-store.ts +570 -0
- package/src/runtime/control-plane/goal-loop/config-types.ts +213 -0
- package/src/runtime/control-plane/goal-loop/executor-router.ts +109 -0
- package/src/runtime/control-plane/goal-loop/failure-taxonomy.ts +149 -0
- package/src/runtime/control-plane/goal-loop/goal-contract-store.ts +304 -0
- package/src/runtime/control-plane/goal-loop/goal-loop-engine.ts +1001 -0
- package/src/runtime/control-plane/goal-loop/handoff-packet.ts +160 -0
- package/src/runtime/control-plane/goal-loop/index.ts +13 -0
- package/src/runtime/control-plane/goal-loop/local-tools.ts +290 -0
- package/src/runtime/control-plane/goal-loop/policy-gates.ts +203 -0
- package/src/runtime/control-plane/goal-loop/provider-dispatch.ts +93 -0
- package/src/runtime/control-plane/goal-loop/provider-registry.ts +545 -0
- package/src/runtime/control-plane/goal-loop/types.ts +378 -0
- package/src/runtime/control-plane/governance/access-policy.ts +147 -0
- package/src/runtime/control-plane/governance/authorization.ts +195 -0
- package/src/runtime/control-plane/governance/external-effects.ts +43 -0
- package/src/runtime/control-plane/launcher/thin-launcher.ts +97 -0
- package/src/runtime/control-plane/persistence/metadata-payload-policy.ts +53 -0
- package/src/runtime/control-plane/persistence/requirement-store.ts +241 -0
- package/src/runtime/control-plane/persistence/sqlite-store.ts +539 -0
- package/src/runtime/control-plane/release-retention.ts +447 -0
- package/src/runtime/control-plane/repo-actor/actor.ts +181 -0
- package/src/runtime/control-plane/repo-actor/registry.ts +20 -0
- package/src/runtime/control-plane/routing/index.ts +1 -0
- package/src/runtime/control-plane/routing/route-policy.ts +379 -0
- package/src/runtime/control-plane/runtime-cleanup.ts +727 -0
- package/src/runtime/control-plane/runtime-generation.ts +509 -0
- package/src/runtime/control-plane/runtime-pid-ownership.ts +11 -0
- package/src/runtime/control-plane/runtime-status-client.ts +90 -0
- package/src/runtime/control-plane/startup-recovery.ts +198 -0
- package/src/runtime/diagnostics/connectivity-observability.ts +475 -0
- package/src/runtime/diagnostics/mcp-timing.ts +64 -0
- package/src/runtime/diagnostics/performance.ts +379 -0
- package/src/runtime/diagnostics/process-facade.ts +350 -0
- package/src/runtime/diagnostics/read-only-tool.ts +226 -0
- package/src/runtime/evidence/artifact-store.ts +154 -0
- package/src/runtime/evidence/event-ledger.ts +80 -0
- package/src/runtime/evidence/evidence-store.ts +68 -0
- package/src/runtime/evidence/process-check-receipt.ts +43 -0
- package/src/runtime/evidence/result-store.ts +209 -0
- package/src/runtime/evidence/sensitive-output.ts +353 -0
- package/src/runtime/execution/jobs/child-reference.ts +124 -0
- package/src/runtime/execution/jobs/legacy-adapter.ts +22 -0
- package/src/runtime/execution/jobs/receipt-recovery.ts +119 -0
- package/src/runtime/execution/jobs/receipt-store.ts +243 -0
- package/src/runtime/execution/jobs/store.ts +737 -0
- package/src/runtime/execution/jobs/timeouts.ts +109 -0
- package/src/runtime/execution/jobs/types.ts +230 -0
- package/src/runtime/execution/jobs/wait.ts +45 -0
- package/src/runtime/execution/process-runtime/canary.ts +26 -0
- package/src/runtime/execution/process-runtime/check-facade.ts +272 -0
- package/src/runtime/execution/process-runtime/check-receipt.ts +185 -0
- package/src/runtime/execution/process-runtime/check-runner-sidecar.ts +60 -0
- package/src/runtime/execution/process-runtime/command-facade.ts +321 -0
- package/src/runtime/execution/process-runtime/gc.ts +171 -0
- package/src/runtime/execution/process-runtime/index.ts +9 -0
- package/src/runtime/execution/process-runtime/interactive-admission.ts +23 -0
- package/src/runtime/execution/process-runtime/process-runner-entry.ts +466 -0
- package/src/runtime/execution/process-runtime/resource-claims.ts +440 -0
- package/src/runtime/execution/process-runtime/runtime.ts +1816 -0
- package/src/runtime/execution/process-runtime/store.ts +687 -0
- package/src/runtime/execution/process-runtime/types.ts +352 -0
- package/src/runtime/execution/thin-harness/async-process.ts +181 -0
- package/src/runtime/execution/thin-harness/batch-executor.ts +671 -0
- package/src/runtime/execution/thin-harness/execution-router.ts +700 -0
- package/src/runtime/execution/thin-harness/fast-executor.ts +1263 -0
- package/src/runtime/execution/thin-harness/fast-receipt.ts +235 -0
- package/src/runtime/execution/thin-harness/fingerprint-worker.ts +191 -0
- package/src/runtime/execution/thin-harness/index.ts +13 -0
- package/src/runtime/execution/thin-harness/latency-trace.ts +107 -0
- package/src/runtime/execution/thin-harness/lightweight-lanes.ts +745 -0
- package/src/runtime/execution/thin-harness/mutation-gate.ts +578 -0
- package/src/runtime/execution/thin-harness/proposal-store.ts +409 -0
- package/src/runtime/execution/thin-harness/request-ledger.ts +595 -0
- package/src/runtime/execution/thin-harness/search-worker.ts +114 -0
- package/src/runtime/execution/thin-harness/types.ts +313 -0
- package/src/runtime/execution/thin-harness/workspace-savepoint.ts +333 -0
- package/src/runtime/execution/workers/executor.ts +687 -0
- package/src/runtime/execution/workers/ownership.ts +94 -0
- package/src/runtime/execution/workers/worker-entry.ts +277 -0
- package/src/runtime/gateway/mcp/execution-tools.ts +2009 -0
- package/src/runtime/gateway/mcp/persisted-check-process.ts +255 -0
- package/src/runtime/gateway/mcp/process-tools.ts +230 -0
- package/src/runtime/gateway/mcp/resource-policy.ts +195 -0
- package/src/runtime/gateway/mcp/router.ts +1088 -0
- package/src/runtime/gateway/mcp/runtime-tools.ts +5994 -0
- package/src/runtime/gateway/mcp/work-validation-reconciler.ts +219 -0
- package/src/runtime/health/evaluator.ts +474 -0
- package/src/runtime/health/index.ts +2 -0
- package/src/runtime/health/operational-view.ts +198 -0
- package/src/runtime/maintenance/cleanup.ts +419 -0
- package/src/runtime/model-clients/deepseek-adapter.ts +312 -0
- package/src/runtime/model-clients/index.ts +2 -0
- package/src/runtime/model-clients/types.ts +101 -0
- package/src/runtime/observability/gateway-contention-metrics.ts +129 -0
- package/src/runtime/observability/route-session-benchmark.ts +110 -0
- package/src/runtime/personal-assistant/gmail-triage-manager.ts +231 -0
- package/src/runtime/personal-assistant/reporting-runtime.ts +344 -0
- package/src/runtime/personal-assistant/triage-runtime.ts +748 -0
- package/src/runtime/plugins/app-store-connect-adapter.ts +868 -0
- package/src/runtime/plugins/browser-adapter.ts +2812 -0
- package/src/runtime/plugins/browser-automation-service.ts +46 -0
- package/src/runtime/plugins/browser-handoff-host.ts +304 -0
- package/src/runtime/plugins/browser-handoff.ts +371 -0
- package/src/runtime/plugins/browser-macos-bridge.ts +865 -0
- package/src/runtime/plugins/browser-node-bridge-host.ts +64 -0
- package/src/runtime/plugins/browser-node-bridge.ts +249 -0
- package/src/runtime/plugins/desktop-adapter.ts +374 -0
- package/src/runtime/plugins/desktop-operator-registration.ts +418 -0
- package/src/runtime/plugins/errors.ts +39 -0
- package/src/runtime/plugins/execution-origin.ts +26 -0
- package/src/runtime/plugins/external-adapter.ts +322 -0
- package/src/runtime/plugins/external-registration.ts +308 -0
- package/src/runtime/plugins/external-unix-socket-probe.cjs +79 -0
- package/src/runtime/plugins/external-unix-socket.ts +238 -0
- package/src/runtime/plugins/first-party-registry.ts +37 -0
- package/src/runtime/plugins/github-adapter.ts +266 -0
- package/src/runtime/plugins/gmail-adapter.ts +729 -0
- package/src/runtime/plugins/google-calendar-adapter.ts +468 -0
- package/src/runtime/plugins/google-shared.ts +578 -0
- package/src/runtime/plugins/google-tasks-adapter.ts +535 -0
- package/src/runtime/plugins/interaction-session.ts +252 -0
- package/src/runtime/plugins/ios/agent-device-capabilities.ts +258 -0
- package/src/runtime/plugins/ios/agent-device-failures.ts +95 -0
- package/src/runtime/plugins/ios/agent-device-provider.ts +63 -0
- package/src/runtime/plugins/ios/agent-device-typed-provider.ts +268 -0
- package/src/runtime/plugins/ios/app-adapters.ts +122 -0
- package/src/runtime/plugins/ios-adapter.ts +509 -0
- package/src/runtime/plugins/ios-agent-device.ts +2311 -0
- package/src/runtime/plugins/ios-physical-device.ts +955 -0
- package/src/runtime/plugins/local-system-adapter.ts +1016 -0
- package/src/runtime/plugins/macos-capability-broker.ts +73 -0
- package/src/runtime/plugins/managed-process-adapter.ts +366 -0
- package/src/runtime/plugins/resend-adapter.ts +506 -0
- package/src/runtime/plugins/store.ts +1025 -0
- package/src/runtime/plugins/types.ts +138 -0
- package/src/runtime/projections/controller-context.ts +596 -0
- package/src/runtime/projections/git-status-sampler.ts +84 -0
- package/src/runtime/projections/invalidation.ts +250 -0
- package/src/runtime/projections/materialized-view.ts +694 -0
- package/src/runtime/recovery/actions.ts +158 -0
- package/src/runtime/recovery/audit.ts +38 -0
- package/src/runtime/recovery/classifier.ts +163 -0
- package/src/runtime/recovery/index.ts +9 -0
- package/src/runtime/recovery/local-jobs-repair.ts +393 -0
- package/src/runtime/recovery/maintenance-executor.ts +822 -0
- package/src/runtime/recovery/patch-handoff.ts +50 -0
- package/src/runtime/recovery/probe.ts +308 -0
- package/src/runtime/recovery/store.ts +35 -0
- package/src/runtime/recovery/types.ts +175 -0
- package/src/runtime/release/identity.ts +101 -0
- package/src/runtime/release/release-gate.ts +137 -0
- package/src/runtime/resources/claims/conflicts.ts +205 -0
- package/src/runtime/resources/index.ts +1 -0
- package/src/runtime/resources/leases/store.ts +539 -0
- package/src/runtime/resources/leases/types.ts +50 -0
- package/src/runtime/resources/ownership.ts +72 -0
- package/src/runtime/root/controller-services.ts +42 -0
- package/src/runtime/root/entry.ts +70 -0
- package/src/runtime/root/gateway-adapter.ts +46 -0
- package/src/runtime/root/local-bridge.ts +72 -0
- package/src/runtime/root/mcp-transport.ts +198 -0
- package/src/runtime/root/ownership.ts +94 -0
- package/src/runtime/root/readiness.ts +69 -0
- package/src/runtime/root/release-manifest.ts +147 -0
- package/src/runtime/root/release-materialize.ts +509 -0
- package/src/runtime/root/release-store.ts +236 -0
- package/src/runtime/root/runtime.ts +318 -0
- package/src/runtime/root/scheduler.ts +58 -0
- package/src/runtime/root/service-runner-entry.ts +20 -0
- package/src/runtime/root/service-runner.ts +69 -0
- package/src/runtime/root/service.ts +291 -0
- package/src/runtime/root/status.ts +127 -0
- package/src/runtime/root/types.ts +112 -0
- package/src/runtime/root/write-fence.ts +309 -0
- package/src/runtime/safe-tooling/browser-safe.ts +133 -0
- package/src/runtime/safe-tooling/external-filesystem.ts +304 -0
- package/src/runtime/safe-tooling/google-credential-store.ts +95 -0
- package/src/runtime/safe-tooling/google-oauth-broker.ts +286 -0
- package/src/runtime/safe-tooling/index.ts +11 -0
- package/src/runtime/safe-tooling/ios-development.ts +1039 -0
- package/src/runtime/safe-tooling/job-summary.ts +361 -0
- package/src/runtime/safe-tooling/plugin-summary.ts +53 -0
- package/src/runtime/safe-tooling/resend-oauth.ts +387 -0
- package/src/runtime/safe-tooling/review-artifacts.ts +133 -0
- package/src/runtime/safe-tooling/types.ts +103 -0
- package/src/runtime/safe-tooling/workspace-auth.ts +116 -0
- package/src/runtime/shared/bounded-child-supervisor.ts +235 -0
- package/src/runtime/shared/idempotent-retry.ts +128 -0
- package/src/runtime/shared/json-files.ts +43 -0
- package/src/runtime/shared/local-bridge-surface.ts +231 -0
- package/src/runtime/shared/managed-env.ts +154 -0
- package/src/runtime/shared/node-ts-loader.mjs +50 -0
- package/src/runtime/shared/process-environment.ts +97 -0
- package/src/runtime/shared/process-identity.ts +72 -0
- package/src/runtime/shared/process-tree.ts +227 -0
- package/src/runtime/shared/response-budget.ts +246 -0
- package/src/runtime/standalone-recovery/core.ts +2275 -0
- package/src/runtime/standalone-recovery/entry.ts +686 -0
- package/src/runtime/standalone-recovery/http-transport.ts +317 -0
- package/src/runtime/standalone-recovery/installer.ts +747 -0
- package/src/runtime/standalone-recovery/release.ts +241 -0
- package/src/runtime/watchdog/workflow-watchdog.ts +118 -0
- package/src/runtime/workflow/campaigns/cleanup.ts +263 -0
- package/src/runtime/workflow/campaigns/engine.ts +112 -0
- package/src/runtime/workflow/campaigns/normalize.ts +100 -0
- package/src/runtime/workflow/campaigns/review.ts +315 -0
- package/src/runtime/workflow/campaigns/store.ts +526 -0
- package/src/runtime/workflow/campaigns/supervisor.ts +112 -0
- package/src/runtime/workflow/campaigns/types.ts +290 -0
- package/src/runtime/workflow/campaigns/workspace-agent.ts +155 -0
- package/src/runtime/workflow/campaigns/workspace.ts +200 -0
- package/src/runtime/workflow/findings/store.ts +165 -0
- package/src/runtime/workflow/findings/types.ts +36 -0
- package/src/runtime/workflow/portfolio/engine.ts +20 -0
- package/src/runtime/workflow/portfolio/store.ts +185 -0
- package/src/runtime/workflow/portfolio/types.ts +29 -0
- package/src/runtime/workflow/schedules/engine.ts +620 -0
- package/src/runtime/workflow/schedules/settlement.ts +144 -0
- package/src/runtime/workflow/schedules/store.ts +417 -0
- package/src/runtime/workflow/schedules/types.ts +124 -0
- package/src/runtime/workspace-targets/index.ts +24 -0
- package/src/runtime/workspace-targets/target-grant.ts +721 -0
- package/src/testing/test-governance.ts +626 -0
- package/src/version.ts +21 -0
|
@@ -0,0 +1,185 @@
|
|
|
1
|
+
import { createHash } from 'crypto';
|
|
2
|
+
import type {
|
|
3
|
+
ProcessCheckReceiptEvidence,
|
|
4
|
+
ProcessCheckReceiptStatus,
|
|
5
|
+
} from '../../evidence/process-check-receipt';
|
|
6
|
+
import type { ManagedProcessRecord, ProcessRuntimeStatus } from './types';
|
|
7
|
+
|
|
8
|
+
export type { ProcessCheckReceiptEvidence, ProcessCheckReceiptStatus } from '../../evidence/process-check-receipt';
|
|
9
|
+
|
|
10
|
+
export interface ProcessCheckReceiptExpectation {
|
|
11
|
+
repoId?: string;
|
|
12
|
+
checkoutId?: string;
|
|
13
|
+
workId?: string;
|
|
14
|
+
executionSessionId?: string;
|
|
15
|
+
editSessionId?: string;
|
|
16
|
+
editRevision?: number;
|
|
17
|
+
issueId?: string;
|
|
18
|
+
taskId?: string;
|
|
19
|
+
checkId?: string;
|
|
20
|
+
requestId?: string;
|
|
21
|
+
processId?: string;
|
|
22
|
+
/** Required to rebind a shared physical Check Process to another consumer. */
|
|
23
|
+
checkExecution?: {
|
|
24
|
+
cacheKey: string;
|
|
25
|
+
revision: string;
|
|
26
|
+
definitionDigest: string;
|
|
27
|
+
environmentFingerprint: string;
|
|
28
|
+
timeoutMs: number;
|
|
29
|
+
scopeKey: string;
|
|
30
|
+
};
|
|
31
|
+
}
|
|
32
|
+
|
|
33
|
+
export interface ProcessCheckCompletionReceipt extends ProcessCheckReceiptEvidence {
|
|
34
|
+
runtimeStatus: Extract<ProcessRuntimeStatus, 'succeeded' | 'failed' | 'timed_out' | 'cancelled'>;
|
|
35
|
+
}
|
|
36
|
+
|
|
37
|
+
function fail(code: string, message: string): never {
|
|
38
|
+
throw new Error(`${code}: ${message}`);
|
|
39
|
+
}
|
|
40
|
+
|
|
41
|
+
function artifactSlug(id: string): string {
|
|
42
|
+
return id.toLowerCase().replace(/[^a-z0-9._-]+/g, '-').replace(/^-+|-+$/g, '') || 'check';
|
|
43
|
+
}
|
|
44
|
+
|
|
45
|
+
export function processCheckArtifactPath(checkId: string): string {
|
|
46
|
+
return `.ai/harness/checks/controller/latest-${artifactSlug(checkId)}.json`;
|
|
47
|
+
}
|
|
48
|
+
|
|
49
|
+
function receiptStatus(status: ProcessRuntimeStatus): ProcessCheckReceiptStatus {
|
|
50
|
+
if (status === 'succeeded') return 'passed';
|
|
51
|
+
if (status === 'failed') return 'failed';
|
|
52
|
+
if (status === 'timed_out') return 'timed_out';
|
|
53
|
+
if (status === 'cancelled') return 'cancelled';
|
|
54
|
+
fail('PROCESS_CHECK_RECEIPT_NOT_TERMINAL', `process status ${status} is not an accepted terminal check result`);
|
|
55
|
+
}
|
|
56
|
+
|
|
57
|
+
function assertExpected(label: string, actual: unknown, expected: unknown): void {
|
|
58
|
+
if (expected === undefined) return;
|
|
59
|
+
if (actual !== expected) {
|
|
60
|
+
fail('PROCESS_CHECK_RECEIPT_IDENTITY_MISMATCH', `${label} expected ${String(expected)} but received ${String(actual)}`);
|
|
61
|
+
}
|
|
62
|
+
}
|
|
63
|
+
|
|
64
|
+
function stableDigest(value: Record<string, unknown>): string {
|
|
65
|
+
return createHash('sha256').update(JSON.stringify(value)).digest('hex');
|
|
66
|
+
}
|
|
67
|
+
|
|
68
|
+
/**
|
|
69
|
+
* Normalize one persisted Process Runtime record into the single authoritative
|
|
70
|
+
* check completion receipt consumed by Edit Sessions, Work validation and Tasks.
|
|
71
|
+
*/
|
|
72
|
+
export function processCheckCompletionReceipt(
|
|
73
|
+
record: ManagedProcessRecord,
|
|
74
|
+
expected: ProcessCheckReceiptExpectation = {},
|
|
75
|
+
): ProcessCheckCompletionReceipt {
|
|
76
|
+
if (record.origin?.surface !== 'check' || !record.origin.checkId?.trim()) {
|
|
77
|
+
fail('PROCESS_CHECK_RECEIPT_NOT_CHECK', `process ${record.processId} is not a bound check process`);
|
|
78
|
+
}
|
|
79
|
+
const status = receiptStatus(record.status);
|
|
80
|
+
const contradictoryTerminal =
|
|
81
|
+
(status === 'passed' && (record.exitCode !== 0 || record.timedOut === true || record.cancelled === true))
|
|
82
|
+
|| (status === 'failed' && (record.exitCode === 0 || record.timedOut === true || record.cancelled === true))
|
|
83
|
+
|| (status === 'timed_out' && record.timedOut !== true)
|
|
84
|
+
|| (status === 'cancelled' && record.cancelled !== true);
|
|
85
|
+
if (contradictoryTerminal) {
|
|
86
|
+
fail(
|
|
87
|
+
'PROCESS_CHECK_RECEIPT_STATUS_CONTRADICTION',
|
|
88
|
+
`process ${record.processId} status ${record.status} contradicts exitCode/timedOut/cancelled terminal fields`,
|
|
89
|
+
);
|
|
90
|
+
}
|
|
91
|
+
if (!record.finishedAt) {
|
|
92
|
+
fail('PROCESS_CHECK_RECEIPT_INCOMPLETE', `process ${record.processId} has no finishedAt timestamp`);
|
|
93
|
+
}
|
|
94
|
+
const checkId = record.origin.checkId.trim();
|
|
95
|
+
const semanticRebind = expected.checkExecution !== undefined;
|
|
96
|
+
assertExpected('repoId', record.repoId, expected.repoId);
|
|
97
|
+
assertExpected('checkId', checkId, expected.checkId);
|
|
98
|
+
assertExpected('processId', record.processId, expected.processId);
|
|
99
|
+
if (semanticRebind) {
|
|
100
|
+
const physical = record.checkExecution;
|
|
101
|
+
if (!physical) {
|
|
102
|
+
fail('PROCESS_CHECK_RECEIPT_REUSE_IDENTITY_MISSING', `process ${record.processId} has no semantic Check execution identity`);
|
|
103
|
+
}
|
|
104
|
+
assertExpected('check cacheKey', physical.cacheKey, expected.checkExecution!.cacheKey);
|
|
105
|
+
assertExpected('check revision', physical.revision, expected.checkExecution!.revision);
|
|
106
|
+
assertExpected('check definitionDigest', physical.definitionDigest, expected.checkExecution!.definitionDigest);
|
|
107
|
+
assertExpected('check environmentFingerprint', physical.environmentFingerprint, expected.checkExecution!.environmentFingerprint);
|
|
108
|
+
assertExpected('check timeoutMs', physical.timeoutMs, expected.checkExecution!.timeoutMs);
|
|
109
|
+
assertExpected('check scopeKey', physical.scopeKey, expected.checkExecution!.scopeKey);
|
|
110
|
+
if (physical.reuseScope === 'checkout') {
|
|
111
|
+
assertExpected('checkout-scoped receipt checkoutId', record.checkoutId, expected.checkoutId);
|
|
112
|
+
}
|
|
113
|
+
} else {
|
|
114
|
+
assertExpected('checkoutId', record.checkoutId, expected.checkoutId);
|
|
115
|
+
assertExpected('workId', record.workId, expected.workId);
|
|
116
|
+
assertExpected('executionSessionId', record.origin.executionSessionId, expected.executionSessionId);
|
|
117
|
+
assertExpected('editSessionId', record.origin.editSessionId, expected.editSessionId);
|
|
118
|
+
assertExpected('editRevision', record.origin.editRevision, expected.editRevision);
|
|
119
|
+
assertExpected('issueId', record.origin.issueId, expected.issueId);
|
|
120
|
+
assertExpected('taskId', record.origin.taskId, expected.taskId);
|
|
121
|
+
assertExpected('requestId', record.origin.requestId, expected.requestId);
|
|
122
|
+
}
|
|
123
|
+
|
|
124
|
+
const consumerCheckoutId = semanticRebind ? expected.checkoutId ?? record.checkoutId : record.checkoutId;
|
|
125
|
+
const consumerWorkId = semanticRebind ? expected.workId : record.workId;
|
|
126
|
+
const consumerExecutionSessionId = semanticRebind ? expected.executionSessionId : record.origin.executionSessionId;
|
|
127
|
+
const consumerEditSessionId = semanticRebind ? expected.editSessionId : record.origin.editSessionId;
|
|
128
|
+
const consumerEditRevision = semanticRebind ? expected.editRevision : record.origin.editRevision;
|
|
129
|
+
const consumerIssueId = semanticRebind ? expected.issueId : record.origin.issueId;
|
|
130
|
+
const consumerTaskId = semanticRebind ? expected.taskId : record.origin.taskId;
|
|
131
|
+
const consumerRequestId = semanticRebind ? expected.requestId : record.origin.requestId;
|
|
132
|
+
const reusedExecution = semanticRebind && (
|
|
133
|
+
consumerCheckoutId !== record.checkoutId
|
|
134
|
+
|| consumerWorkId !== record.workId
|
|
135
|
+
|| consumerExecutionSessionId !== record.origin.executionSessionId
|
|
136
|
+
|| consumerEditSessionId !== record.origin.editSessionId
|
|
137
|
+
|| consumerEditRevision !== record.origin.editRevision
|
|
138
|
+
|| consumerIssueId !== record.origin.issueId
|
|
139
|
+
|| consumerTaskId !== record.origin.taskId
|
|
140
|
+
|| consumerRequestId !== record.origin.requestId
|
|
141
|
+
);
|
|
142
|
+
|
|
143
|
+
const ok = status === 'passed';
|
|
144
|
+
const summaryTail = (record.stderrTail || record.stdoutTail || '').trim().slice(-500);
|
|
145
|
+
const summary = ok
|
|
146
|
+
? `Passed with persisted Process evidence: ${record.processId}${reusedExecution ? ' (shared semantic Check execution)' : ''}`
|
|
147
|
+
: `${status === 'timed_out' ? 'Timed out' : status === 'cancelled' ? 'Cancelled' : 'Failed'} with persisted Process evidence: ${record.processId}${summaryTail ? `; ${summaryTail}` : ''}`;
|
|
148
|
+
const stable = {
|
|
149
|
+
schemaVersion: 1,
|
|
150
|
+
repoId: record.repoId,
|
|
151
|
+
checkoutId: consumerCheckoutId,
|
|
152
|
+
workId: consumerWorkId,
|
|
153
|
+
executionSessionId: consumerExecutionSessionId,
|
|
154
|
+
editSessionId: consumerEditSessionId,
|
|
155
|
+
editRevision: consumerEditRevision,
|
|
156
|
+
issueId: consumerIssueId,
|
|
157
|
+
taskId: consumerTaskId,
|
|
158
|
+
checkId,
|
|
159
|
+
requestId: consumerRequestId,
|
|
160
|
+
processId: record.processId,
|
|
161
|
+
commandId: record.commandId,
|
|
162
|
+
sourceCheckoutId: record.checkoutId,
|
|
163
|
+
checkCacheKey: record.checkExecution?.cacheKey,
|
|
164
|
+
checkRevision: record.checkExecution?.revision,
|
|
165
|
+
checkDefinitionDigest: record.checkExecution?.definitionDigest,
|
|
166
|
+
checkEnvironmentFingerprint: record.checkExecution?.environmentFingerprint,
|
|
167
|
+
reusedExecution,
|
|
168
|
+
status,
|
|
169
|
+
runtimeStatus: record.status as ProcessCheckCompletionReceipt['runtimeStatus'],
|
|
170
|
+
ok,
|
|
171
|
+
exitCode: record.exitCode,
|
|
172
|
+
timedOut: status === 'timed_out' || record.timedOut === true,
|
|
173
|
+
cancelled: status === 'cancelled' || record.cancelled === true,
|
|
174
|
+
artifactPath: processCheckArtifactPath(checkId),
|
|
175
|
+
summary,
|
|
176
|
+
startedAt: record.startedAt,
|
|
177
|
+
finishedAt: record.finishedAt,
|
|
178
|
+
} satisfies Omit<ProcessCheckCompletionReceipt, 'receiptId' | 'resultDigest'>;
|
|
179
|
+
const resultDigest = stableDigest(stable);
|
|
180
|
+
return {
|
|
181
|
+
...stable,
|
|
182
|
+
resultDigest,
|
|
183
|
+
receiptId: `check_receipt_${resultDigest.slice(0, 24)}`,
|
|
184
|
+
};
|
|
185
|
+
}
|
|
@@ -0,0 +1,60 @@
|
|
|
1
|
+
#!/usr/bin/env bun
|
|
2
|
+
import { createHash } from 'crypto';
|
|
3
|
+
import { resolve } from 'path';
|
|
4
|
+
import {
|
|
5
|
+
runControllerCheck,
|
|
6
|
+
snapshotControllerCheck,
|
|
7
|
+
} from '../../../cli/controller/check-runner';
|
|
8
|
+
|
|
9
|
+
interface ParsedArgs {
|
|
10
|
+
repo: string;
|
|
11
|
+
checkId: string;
|
|
12
|
+
timeoutMs?: number;
|
|
13
|
+
expectedCheckFingerprint: string;
|
|
14
|
+
}
|
|
15
|
+
|
|
16
|
+
function requiredValue(argv: string[], flag: string): string {
|
|
17
|
+
const index = argv.indexOf(flag);
|
|
18
|
+
const value = index >= 0 ? argv[index + 1]?.trim() : undefined;
|
|
19
|
+
if (!value) throw new Error(`PERSISTED_CHECK_USAGE: missing ${flag}`);
|
|
20
|
+
return value;
|
|
21
|
+
}
|
|
22
|
+
|
|
23
|
+
function parseArgs(argv: string[]): ParsedArgs {
|
|
24
|
+
const timeoutRaw = argv.includes('--timeout-ms') ? requiredValue(argv, '--timeout-ms') : undefined;
|
|
25
|
+
const timeoutMs = timeoutRaw === undefined ? undefined : Number(timeoutRaw);
|
|
26
|
+
if (timeoutMs !== undefined && (!Number.isFinite(timeoutMs) || timeoutMs <= 0)) {
|
|
27
|
+
throw new Error('PERSISTED_CHECK_USAGE: invalid --timeout-ms');
|
|
28
|
+
}
|
|
29
|
+
return {
|
|
30
|
+
repo: requiredValue(argv, '--repo'),
|
|
31
|
+
checkId: requiredValue(argv, '--check-id'),
|
|
32
|
+
timeoutMs,
|
|
33
|
+
expectedCheckFingerprint: requiredValue(argv, '--expected-check-fingerprint'),
|
|
34
|
+
};
|
|
35
|
+
}
|
|
36
|
+
|
|
37
|
+
export function runPersistedCheckSidecar(argv = process.argv.slice(2)): number {
|
|
38
|
+
const args = parseArgs(argv);
|
|
39
|
+
const root = resolve(args.repo);
|
|
40
|
+
const snapshot = snapshotControllerCheck(root, args.checkId);
|
|
41
|
+
const actualFingerprint = createHash('sha256').update(JSON.stringify(snapshot)).digest('hex');
|
|
42
|
+
if (actualFingerprint !== args.expectedCheckFingerprint) {
|
|
43
|
+
throw new Error('CHECK_SNAPSHOT_CHANGED: registered check changed before Process Runtime execution');
|
|
44
|
+
}
|
|
45
|
+
const result = runControllerCheck(root, args.checkId, args.timeoutMs, snapshot);
|
|
46
|
+
if (result.stdout) process.stdout.write(result.stdout);
|
|
47
|
+
if (result.stderr) process.stderr.write(result.stderr.endsWith('\n') ? result.stderr : `${result.stderr}\n`);
|
|
48
|
+
return result.ok ? 0 : Math.max(1, result.status || 1);
|
|
49
|
+
}
|
|
50
|
+
|
|
51
|
+
const direct = typeof process.argv[1] === 'string'
|
|
52
|
+
&& (process.argv[1].includes('check-runner-sidecar') || process.argv[1].endsWith('/forge-check-runner'));
|
|
53
|
+
if (direct) {
|
|
54
|
+
try {
|
|
55
|
+
process.exitCode = runPersistedCheckSidecar();
|
|
56
|
+
} catch (error) {
|
|
57
|
+
console.error(error instanceof Error ? error.message : String(error));
|
|
58
|
+
process.exitCode = 1;
|
|
59
|
+
}
|
|
60
|
+
}
|
|
@@ -0,0 +1,321 @@
|
|
|
1
|
+
/**
|
|
2
|
+
* repository_command_execute → Unified Process Runtime.
|
|
3
|
+
*
|
|
4
|
+
* Short readonly / focused commands: Direct (wait briefly, return result).
|
|
5
|
+
* Longer local build/test: Managed (same spawn, return handle).
|
|
6
|
+
* release / remote / non-idempotent: Durable (caller keeps ExecutionJob path).
|
|
7
|
+
*/
|
|
8
|
+
|
|
9
|
+
import type { RepositoryRecord } from '../../../cli/repositories/types';
|
|
10
|
+
import { classifyRepositoryCommand } from '../../../cli/repositories/command-classifier';
|
|
11
|
+
import {
|
|
12
|
+
executeRepositoryCommandAsync,
|
|
13
|
+
executeRepositoryReadOnlyCommandDirect,
|
|
14
|
+
type RepositoryCommandExecution,
|
|
15
|
+
} from '../../../cli/repositories/command-executor';
|
|
16
|
+
import { normalizeRepositoryCommand } from '../../../cli/repositories/command-normalization';
|
|
17
|
+
import { claimsForRepositoryCommand, scopeResourceClaims, toProcessClaims } from './resource-claims';
|
|
18
|
+
import {
|
|
19
|
+
spawnManagedProcess,
|
|
20
|
+
getProcessHandle,
|
|
21
|
+
waitForProcess,
|
|
22
|
+
cancelProcess,
|
|
23
|
+
readProcessLogs,
|
|
24
|
+
} from './runtime';
|
|
25
|
+
import type { ProcessHandle, ProcessCommandSpec } from './types';
|
|
26
|
+
import { DEFAULT_INTERACTIVE_WAIT_MS } from './types';
|
|
27
|
+
import { durationAwareInteractiveWaitMs } from './interactive-admission';
|
|
28
|
+
import { isFocusedCheckCommand } from '../thin-harness/execution-router';
|
|
29
|
+
import { assertExecutionIdentity, type ResolvedExecutionIdentity } from '../../control-plane/execution/execution-identity';
|
|
30
|
+
|
|
31
|
+
export type RepositoryCommandRoute =
|
|
32
|
+
| 'process_direct'
|
|
33
|
+
| 'process_managed'
|
|
34
|
+
| 'durable'
|
|
35
|
+
| 'reject';
|
|
36
|
+
|
|
37
|
+
export interface RepositoryCommandProcessInput {
|
|
38
|
+
controllerHome: string;
|
|
39
|
+
repository: RepositoryRecord;
|
|
40
|
+
command: string | readonly string[];
|
|
41
|
+
cwd?: string;
|
|
42
|
+
timeoutMs?: number;
|
|
43
|
+
interactiveWaitMs?: number;
|
|
44
|
+
maxOutputBytes?: number;
|
|
45
|
+
/** Force durable workflow (async apply, release, remote). */
|
|
46
|
+
forceDurable?: boolean;
|
|
47
|
+
requestId?: string;
|
|
48
|
+
workId?: string;
|
|
49
|
+
commandId?: string;
|
|
50
|
+
signal?: AbortSignal;
|
|
51
|
+
/** Explicit unregistered local workspace authority; never inferred from cwd. */
|
|
52
|
+
allowNonGitWorkspace?: boolean;
|
|
53
|
+
/** Immutable resolved identity — required; never inferred from main/active/cwd. */
|
|
54
|
+
executionIdentity: ResolvedExecutionIdentity;
|
|
55
|
+
}
|
|
56
|
+
|
|
57
|
+
export interface RepositoryCommandProcessResult {
|
|
58
|
+
route: RepositoryCommandRoute;
|
|
59
|
+
reason?: string;
|
|
60
|
+
process?: ProcessHandle;
|
|
61
|
+
/** Present for completed direct/managed handles. */
|
|
62
|
+
ok?: boolean;
|
|
63
|
+
exitCode?: number;
|
|
64
|
+
stdout?: string;
|
|
65
|
+
stderr?: string;
|
|
66
|
+
executionStatus?: RepositoryCommandExecution['status'];
|
|
67
|
+
policyDecision?: RepositoryCommandExecution['policyDecision'];
|
|
68
|
+
authorizationDecision?: RepositoryCommandExecution['authorizationDecision'];
|
|
69
|
+
approvalRequestId?: string;
|
|
70
|
+
durableSideEffects: {
|
|
71
|
+
executionJobCount: number;
|
|
72
|
+
localJobCount: number;
|
|
73
|
+
workerSpawnCount: number;
|
|
74
|
+
projectionUpdateCount: number;
|
|
75
|
+
};
|
|
76
|
+
suggestedOperation?: string;
|
|
77
|
+
}
|
|
78
|
+
|
|
79
|
+
const emptyEffects = {
|
|
80
|
+
executionJobCount: 0,
|
|
81
|
+
localJobCount: 0,
|
|
82
|
+
workerSpawnCount: 0,
|
|
83
|
+
projectionUpdateCount: 0,
|
|
84
|
+
};
|
|
85
|
+
|
|
86
|
+
function toProcessCommand(command: string | readonly string[], cwd: string): ProcessCommandSpec {
|
|
87
|
+
const normalized = normalizeRepositoryCommand(command);
|
|
88
|
+
if (normalized.kind === 'argv') {
|
|
89
|
+
return {
|
|
90
|
+
kind: 'argv',
|
|
91
|
+
executable: normalized.executable,
|
|
92
|
+
args: [...(normalized.args ?? [])],
|
|
93
|
+
cwd,
|
|
94
|
+
};
|
|
95
|
+
}
|
|
96
|
+
return {
|
|
97
|
+
kind: 'shell',
|
|
98
|
+
shellCommand: normalized.shellCommand ?? String(command),
|
|
99
|
+
cwd,
|
|
100
|
+
};
|
|
101
|
+
}
|
|
102
|
+
|
|
103
|
+
/**
|
|
104
|
+
* Decide Direct / Managed / Durable without spawning.
|
|
105
|
+
*/
|
|
106
|
+
export function classifyRepositoryCommandRoute(
|
|
107
|
+
command: string | readonly string[],
|
|
108
|
+
options: {
|
|
109
|
+
forceDurable?: boolean;
|
|
110
|
+
defaultBranch?: string;
|
|
111
|
+
timeoutMs?: number;
|
|
112
|
+
} = {},
|
|
113
|
+
): { route: RepositoryCommandRoute; reason: string } {
|
|
114
|
+
if (options.forceDurable) {
|
|
115
|
+
return { route: 'durable', reason: 'force_durable_or_async' };
|
|
116
|
+
}
|
|
117
|
+
const classification = classifyRepositoryCommand(command, options.defaultBranch);
|
|
118
|
+
// ExecutionJobs are retired. Authorized local destructive/remote-risk commands
|
|
119
|
+
// still execute through Process Runtime; SuperController owns retry/replay policy.
|
|
120
|
+
if (classification.risk === 'remote_write' || classification.risk === 'destructive') {
|
|
121
|
+
return {
|
|
122
|
+
route: 'process_managed',
|
|
123
|
+
reason: `risk_${classification.risk}_via_process_runtime`,
|
|
124
|
+
};
|
|
125
|
+
}
|
|
126
|
+
// release / rollback style commands
|
|
127
|
+
const text = Array.isArray(command) ? command.join(' ') : String(command);
|
|
128
|
+
if (/\b(?:gh\s+release\s+(?:create|delete|edit|upload)|git\s+push|npm\s+publish)\b/i.test(text)) {
|
|
129
|
+
return { route: 'durable', reason: 'release_or_remote_mutation' };
|
|
130
|
+
}
|
|
131
|
+
if (classification.risk === 'readonly') {
|
|
132
|
+
// Short readonly → direct. Only an *explicit* long timeout upgrades to managed.
|
|
133
|
+
if (typeof options.timeoutMs === 'number' && options.timeoutMs > 30_000) {
|
|
134
|
+
return { route: 'process_managed', reason: 'readonly_long_timeout' };
|
|
135
|
+
}
|
|
136
|
+
return { route: 'process_direct', reason: 'readonly_fast_path' };
|
|
137
|
+
}
|
|
138
|
+
// workspace_write / build-test
|
|
139
|
+
if (isFocusedCheckCommand(command) || /\b(?:test|typecheck|lint|build|check)\b/i.test(text)) {
|
|
140
|
+
return { route: 'process_managed', reason: 'local_build_or_test' };
|
|
141
|
+
}
|
|
142
|
+
// Unknown mutating local command remains one local Managed Process. Timeout is
|
|
143
|
+
// a process lifecycle budget and must never select a different architecture.
|
|
144
|
+
return { route: 'process_managed', reason: 'local_workspace_mutation' };
|
|
145
|
+
}
|
|
146
|
+
|
|
147
|
+
/**
|
|
148
|
+
* Execute via Unified Process Runtime when route is process_*.
|
|
149
|
+
* Does not create ExecutionJob / LocalJob / Worker.
|
|
150
|
+
*/
|
|
151
|
+
export async function executeRepositoryCommandViaProcessRuntime(
|
|
152
|
+
input: RepositoryCommandProcessInput,
|
|
153
|
+
): Promise<RepositoryCommandProcessResult> {
|
|
154
|
+
const decision = classifyRepositoryCommandRoute(input.command, {
|
|
155
|
+
forceDurable: input.forceDurable,
|
|
156
|
+
defaultBranch: input.repository.defaultBranch,
|
|
157
|
+
timeoutMs: input.timeoutMs,
|
|
158
|
+
});
|
|
159
|
+
|
|
160
|
+
if (decision.route === 'durable' || decision.route === 'reject') {
|
|
161
|
+
return {
|
|
162
|
+
route: decision.route,
|
|
163
|
+
reason: decision.reason,
|
|
164
|
+
durableSideEffects: emptyEffects,
|
|
165
|
+
suggestedOperation: 'repository_command_execute via Durable Work / Local Job',
|
|
166
|
+
};
|
|
167
|
+
}
|
|
168
|
+
|
|
169
|
+
if (!input.executionIdentity) {
|
|
170
|
+
throw new Error('EXECUTION_IDENTITY_REQUIRED: repository command process path requires an immutable executionIdentity');
|
|
171
|
+
}
|
|
172
|
+
const executionIdentity = input.executionIdentity;
|
|
173
|
+
if (executionIdentity.repositoryId !== input.repository.repoId) {
|
|
174
|
+
throw new Error(
|
|
175
|
+
`EXECUTION_IDENTITY_MISMATCH: repository ${input.repository.repoId} differs from identity ${executionIdentity.repositoryId}`,
|
|
176
|
+
);
|
|
177
|
+
}
|
|
178
|
+
if (executionIdentity.checkoutId !== input.repository.activeCheckoutId) {
|
|
179
|
+
throw new Error(
|
|
180
|
+
`CHECKOUT_ROUTE_MISMATCH: repository checkout ${input.repository.activeCheckoutId} differs from identity ${executionIdentity.checkoutId}`,
|
|
181
|
+
);
|
|
182
|
+
}
|
|
183
|
+
const cwd = input.cwd?.trim() || executionIdentity.canonicalRoot;
|
|
184
|
+
if (!cwd) {
|
|
185
|
+
return {
|
|
186
|
+
route: 'reject',
|
|
187
|
+
reason: 'missing_repository_cwd',
|
|
188
|
+
durableSideEffects: emptyEffects,
|
|
189
|
+
};
|
|
190
|
+
}
|
|
191
|
+
|
|
192
|
+
// A short readonly command owns no durable Process/Lease state. Validate the
|
|
193
|
+
// same immutable repository identity first, then execute with the bounded
|
|
194
|
+
// non-persistent reader. This keeps reads available while a stale/passive
|
|
195
|
+
// Runtime remains correctly fenced from Controller writes.
|
|
196
|
+
const canonicalCommand = normalizeRepositoryCommand(input.command);
|
|
197
|
+
if (decision.route === 'process_direct' && canonicalCommand.kind === 'argv') {
|
|
198
|
+
assertExecutionIdentity({
|
|
199
|
+
controllerHome: input.controllerHome,
|
|
200
|
+
identity: executionIdentity,
|
|
201
|
+
cwd,
|
|
202
|
+
requestedRepoId: input.repository.repoId,
|
|
203
|
+
requestedCheckoutId: input.repository.activeCheckoutId,
|
|
204
|
+
});
|
|
205
|
+
const direct = await executeRepositoryReadOnlyCommandDirect(input.repository, {
|
|
206
|
+
command: input.command,
|
|
207
|
+
cwd: input.cwd,
|
|
208
|
+
timeoutMs: Math.min(input.timeoutMs ?? 30_000, 30_000),
|
|
209
|
+
maxOutputBytes: input.maxOutputBytes,
|
|
210
|
+
signal: input.signal,
|
|
211
|
+
allowNonGitWorkspace: executionIdentity.authority === 'ephemeral_workspace',
|
|
212
|
+
});
|
|
213
|
+
return {
|
|
214
|
+
route: 'process_direct',
|
|
215
|
+
reason: decision.reason,
|
|
216
|
+
ok: direct.ok,
|
|
217
|
+
exitCode: direct.exitCode,
|
|
218
|
+
stdout: direct.stdout,
|
|
219
|
+
stderr: direct.stderr,
|
|
220
|
+
executionStatus: direct.status,
|
|
221
|
+
policyDecision: direct.policyDecision,
|
|
222
|
+
authorizationDecision: direct.authorizationDecision,
|
|
223
|
+
approvalRequestId: direct.approvalRequestId,
|
|
224
|
+
durableSideEffects: emptyEffects,
|
|
225
|
+
};
|
|
226
|
+
}
|
|
227
|
+
|
|
228
|
+
// An explicitly resolved ephemeral workspace has no canonical Runtime-owned
|
|
229
|
+
// Process storage. Keep its bounded local source edits on the same direct
|
|
230
|
+
// executor used for bounded reads instead of manufacturing a Process lease
|
|
231
|
+
// that a separate Runtime authority can fence. Unknown commands remain
|
|
232
|
+
// conservatively classified/authorized by the command executor; durable,
|
|
233
|
+
// remote, and destructive routes never reach this branch.
|
|
234
|
+
if (executionIdentity.authority === 'ephemeral_workspace' && input.allowNonGitWorkspace === true) {
|
|
235
|
+
const direct = await executeRepositoryCommandAsync(input.controllerHome, input.repository, {
|
|
236
|
+
command: input.command,
|
|
237
|
+
cwd: input.cwd,
|
|
238
|
+
timeoutMs: Math.min(input.timeoutMs ?? 30_000, 30_000),
|
|
239
|
+
maxOutputBytes: input.maxOutputBytes,
|
|
240
|
+
signal: input.signal,
|
|
241
|
+
allowNonGitWorkspace: true,
|
|
242
|
+
});
|
|
243
|
+
return {
|
|
244
|
+
route: 'process_direct',
|
|
245
|
+
reason: 'ephemeral_workspace_bounded_direct',
|
|
246
|
+
ok: direct.ok,
|
|
247
|
+
exitCode: direct.exitCode,
|
|
248
|
+
stdout: direct.stdout,
|
|
249
|
+
stderr: direct.stderr,
|
|
250
|
+
executionStatus: direct.status,
|
|
251
|
+
policyDecision: direct.policyDecision,
|
|
252
|
+
authorizationDecision: direct.authorizationDecision,
|
|
253
|
+
approvalRequestId: direct.approvalRequestId,
|
|
254
|
+
durableSideEffects: emptyEffects,
|
|
255
|
+
};
|
|
256
|
+
}
|
|
257
|
+
|
|
258
|
+
const interactiveWaitMs = durationAwareInteractiveWaitMs(
|
|
259
|
+
input.command,
|
|
260
|
+
input.interactiveWaitMs,
|
|
261
|
+
Math.min(DEFAULT_INTERACTIVE_WAIT_MS, 250),
|
|
262
|
+
);
|
|
263
|
+
const timeoutMs = Math.max(
|
|
264
|
+
interactiveWaitMs + 1,
|
|
265
|
+
Math.min(input.timeoutMs ?? 15 * 60_000, 24 * 60 * 60_000),
|
|
266
|
+
);
|
|
267
|
+
|
|
268
|
+
const claims = scopeResourceClaims(
|
|
269
|
+
claimsForRepositoryCommand(
|
|
270
|
+
input.command,
|
|
271
|
+
executionIdentity.repositoryId,
|
|
272
|
+
executionIdentity.checkoutId,
|
|
273
|
+
input.repository.defaultBranch,
|
|
274
|
+
),
|
|
275
|
+
executionIdentity.repositoryId,
|
|
276
|
+
executionIdentity.checkoutId,
|
|
277
|
+
input.workId,
|
|
278
|
+
);
|
|
279
|
+
|
|
280
|
+
const handle = await spawnManagedProcess({
|
|
281
|
+
controllerHome: input.controllerHome,
|
|
282
|
+
repoId: executionIdentity.repositoryId,
|
|
283
|
+
checkoutId: executionIdentity.checkoutId,
|
|
284
|
+
executionIdentity,
|
|
285
|
+
workId: input.workId,
|
|
286
|
+
commandId: input.commandId,
|
|
287
|
+
command: toProcessCommand(input.command, cwd),
|
|
288
|
+
// Short commands complete inside this budget; longer ones return a running handle.
|
|
289
|
+
interactiveWaitMs,
|
|
290
|
+
timeoutMs,
|
|
291
|
+
maxOutputBytes: input.maxOutputBytes,
|
|
292
|
+
resourceClaims: toProcessClaims(claims),
|
|
293
|
+
origin: {
|
|
294
|
+
surface: 'command',
|
|
295
|
+
toolName: 'repository_command_execute',
|
|
296
|
+
requestId: input.requestId,
|
|
297
|
+
correlationId: input.workId,
|
|
298
|
+
},
|
|
299
|
+
signal: input.signal,
|
|
300
|
+
returnHandleImmediately: input.forceDurable === true,
|
|
301
|
+
});
|
|
302
|
+
|
|
303
|
+
const route: RepositoryCommandRoute = handle.completed ? 'process_direct' : 'process_managed';
|
|
304
|
+
return {
|
|
305
|
+
route,
|
|
306
|
+
reason: decision.reason,
|
|
307
|
+
process: handle,
|
|
308
|
+
ok: handle.ok,
|
|
309
|
+
exitCode: handle.exitCode,
|
|
310
|
+
stdout: handle.stdout,
|
|
311
|
+
stderr: handle.stderr,
|
|
312
|
+
durableSideEffects: handle.durableSideEffects,
|
|
313
|
+
};
|
|
314
|
+
}
|
|
315
|
+
|
|
316
|
+
export {
|
|
317
|
+
getProcessHandle as getRepositoryCommandProcess,
|
|
318
|
+
waitForProcess as waitRepositoryCommandProcess,
|
|
319
|
+
cancelProcess as cancelRepositoryCommandProcess,
|
|
320
|
+
readProcessLogs as readRepositoryCommandProcessLogs,
|
|
321
|
+
};
|