@pushpalsdev/cli 1.0.6 → 1.0.7

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pushpalsdev/cli",
-  "version": "1.0.6",
+  "version": "1.0.7",
   "description": "PushPals terminal CLI for LocalBuddy -> RemoteBuddy orchestration",
   "license": "MIT",
   "repository": {
@@ -17,10 +17,11 @@
   "files": [
     "bin",
     "dist",
+    "runtime",
     "README.md"
   ],
   "scripts": {
-    "build": "bun build ../../scripts/pushpals-cli.ts --target=bun --outfile ./dist/pushpals-cli.js",
+    "build": "bun run ../../scripts/sync-cli-runtime-assets.ts && bun build ../../scripts/pushpals-cli.ts --target=bun --outfile ./dist/pushpals-cli.js",
     "prepack": "bun run build"
   },
   "engines": {

package/runtime/.env.example

@@ -0,0 +1,73 @@
+# PushPals minimal environment template
+#
+# Canonical configuration is TOML:
+#   configs/default.toml
+#   configs/<profile>.toml
+#   configs/local.toml (gitignored)
+#
+# Keep this file to deployment wiring + secrets only.
+
+# -----------------------------------------------------------------------------
+# Wiring
+# -----------------------------------------------------------------------------
+PUSHPALS_PROFILE=dev
+PUSHPALS_SERVER_URL=http://localhost:3001
+PUSHPALS_SESSION_ID=dev
+
+# Expo bootstrap URLs.
+EXPO_PUBLIC_PUSHPALS_URL=http://localhost:3001
+EXPO_PUBLIC_LOCAL_AGENT_URL=http://localhost:3003
+
+# Optional runtime wiring for wrappers/containers.
+# PUSHPALS_REPO_PATH=
+
+# -----------------------------------------------------------------------------
+# Secrets (machine/CI only)
+# -----------------------------------------------------------------------------
+# PUSHPALS_AUTH_TOKEN=
+# PUSHPALS_GIT_TOKEN=
+# GITHUB_TOKEN=
+# GH_TOKEN=
+# Optional: `bun run start` attempts non-interactive GH auth refresh by default; set to 0 to disable.
+# PUSHPALS_GH_AUTH_REFRESH_ON_START=1
+# WORKERPALS_OPENHANDS_WEB_MCP_AUTH_TOKEN=
+#
+# LLM provider secrets (recommended in env, not TOML):
+# (If localbuddy/remotebuddy/workerpals use backend="openai", this single key
+# is used as the default across all services.)
+# OPENAI_API_KEY=
+# OPENAI_BASE_URL=
+# OPENAI_ORG_ID=
+# OPENAI_PROJECT=
+#
+# Optional per-service API keys (override service-specific llm.api_key):
+# LOCALBUDDY_LLM_API_KEY=
+# REMOTEBUDDY_LLM_API_KEY=
+# WORKERPALS_LLM_API_KEY=
+#
+# OpenAI Codex CLI behavior is primarily configured in `configs/local.toml`
+# under [localbuddy.llm], [remotebuddy.llm], [workerpals.llm], and
+# [workerpals.openai_codex]. Keep secrets/URLs in env only.
+#
+# Optional Codex env overrides (advanced; env overrides TOML):
+# PUSHPALS_OPENAI_CODEX_AUTH_MODE=auto
+# PUSHPALS_OPENAI_CODEX_BIN=bun x --yes @openai/codex
+# PUSHPALS_OPENAI_CODEX_BASE_URL=
+#   - auto: use API key when present, otherwise use `codex login` session
+#   - api_key: force API-key auth (requires OPENAI_API_KEY)
+#   - chatgpt: force ChatGPT/Codex CLI login auth (ignores OPENAI_API_KEY)
+#   When Codex CLI auth is required,
+#   `bun run start` will run Codex login preflight on host before Docker/services.
+# Non-secret Codex behavior knobs belong in TOML:
+#   [workerpals.openai_codex]
+#   timeout_ms, timeout_s, reasoning_effort, approval_policy, sandbox, color, json
+# Docker mode: worker auto-mounts host ~/.codex by default.
+# Optional override:
+# PUSHPALS_OPENAI_CODEX_HOST_CODEX_HOME=
+# PUSHPALS_OPENAI_CODEX_CONTAINER_CODEX_HOME=/root/.codex
+
+# Optional network proxy wiring (if your environment requires it).
+# HTTP_PROXY=
+# HTTPS_PROXY=
+# NO_PROXY=
+# ALL_PROXY=

package/runtime/configs/backend.toml

@@ -0,0 +1,79 @@
+default_backend = "miniswe"
+
+[env]
+shared_passthrough = [
+  "HTTP_PROXY",
+  "HTTPS_PROXY",
+  "NO_PROXY",
+  "ALL_PROXY",
+  "http_proxy",
+  "https_proxy",
+  "no_proxy",
+  "all_proxy",
+  "PUSHPALS_GIT_TOKEN",
+  "GITHUB_TOKEN",
+  "GH_TOKEN",
+  "GIT_TOKEN",
+  "OPENAI_API_KEY",
+  "OPENAI_BASE_URL",
+  "OPENAI_API_BASE",
+  "OPENAI_ORG_ID",
+  "OPENAI_PROJECT",
+  "PUSHPALS_REPO_PATH",
+  "WORKERPALS_DEBUG",
+]
+
+[backends.openhands]
+script_segments = ["backends", "openhands", "openhands_executor.py"]
+python_config_key = "openhandsPython"
+timeout_config_key = "openhandsTimeoutMs"
+passthrough_env = [
+  "WORKERPALS_OPENHANDS_PROMPT_PROFILE",
+  "WORKERPALS_OPENHANDS_AGENT_MAX_STEPS",
+  "WORKERPALS_OPENHANDS_WORKSPACE_PYTHON",
+  "WORKERPALS_OPENHANDS_LLM_NUM_RETRIES",
+  "WORKERPALS_OPENHANDS_LLM_RETRY_MULTIPLIER",
+  "WORKERPALS_OPENHANDS_LLM_RETRY_MIN_WAIT",
+  "WORKERPALS_OPENHANDS_LLM_RETRY_MAX_WAIT",
+  "WORKERPALS_OPENHANDS_LLM_TIMEOUT_SEC",
+  "WORKERPALS_OPENHANDS_LLM_MAX_MESSAGE_CHARS",
+  "WORKERPALS_OPENHANDS_LLM_TIMEOUT_RECOVERY_ATTEMPTS",
+  "WORKERPALS_OPENHANDS_LLM_TIMEOUT_RECOVERY_BACKOFF_SEC",
+  "WORKERPALS_OPENHANDS_TASK_PROMPT_MODE",
+  "WORKERPALS_OPENHANDS_LARGE_INSTRUCTION_CHARS",
+  "WORKERPALS_OPENHANDS_ENABLE_BROWSER_TOOL",
+  "WORKERPALS_OPENHANDS_ENABLE_WEB_MCP",
+  "WORKERPALS_OPENHANDS_MCP_CONFIG_JSON",
+  "WORKERPALS_OPENHANDS_WEB_MCP_URL",
+  "WORKERPALS_OPENHANDS_WEB_MCP_NAME",
+  "WORKERPALS_OPENHANDS_WEB_MCP_TRANSPORT",
+  "WORKERPALS_OPENHANDS_WEB_MCP_AUTH_TOKEN",
+  "WORKERPALS_OPENHANDS_WEB_MCP_HEADERS_JSON",
+  "WORKERPALS_OPENHANDS_WEB_MCP_TIMEOUT_SEC",
+]
+
+[backends.miniswe]
+script_segments = ["backends", "miniswe", "miniswe_executor.py"]
+python_config_key = "miniswePython"
+timeout_config_key = "minisweTimeoutMs"
+passthrough_env = [
+  "WORKERPALS_MINISWE_AGENT_MAX_STEPS",
+  "WORKERPALS_MINISWE_TOOLCALL_RETRY_MAX",
+  "WORKERPALS_MINISWE_TOOL_BROKER",
+  "WORKERPALS_MINISWE_TOOL_BROKER_MAX_STEPS",
+  "WORKERPALS_MINISWE_TOOL_BROKER_MAX_ACTIONS_PER_STEP",
+  "WORKERPALS_MINISWE_TOOL_BROKER_SHELL_TIMEOUT_SEC",
+]
+
+[backends.openai_codex]
+script_segments = ["backends", "openai_codex", "openai_codex_executor.py"]
+python_config_key = "openaiCodexPython"
+timeout_config_key = "openaiCodexTimeoutMs"
+passthrough_env = [
+  "PUSHPALS_OPENAI_CODEX_BIN",
+  "PUSHPALS_OPENAI_CODEX_BIN_JSON",
+  "PUSHPALS_OPENAI_CODEX_AUTH_MODE",
+  "PUSHPALS_OPENAI_CODEX_BASE_URL",
+  "PUSHPALS_OPENAI_CODEX_HOST_CODEX_HOME",
+  "PUSHPALS_OPENAI_CODEX_CONTAINER_CODEX_HOME",
+]

package/runtime/configs/default.toml

@@ -0,0 +1,259 @@
+profile = "dev"
+session_id = "dev"
+
+[llm.lmstudio]
+context_window = 4096
+min_output_tokens = 256
+token_safety_margin = 64
+batch_tail_messages = 3
+batch_chunk_tokens = 0
+batch_memory_chars = 0
+
+[paths]
+data_dir = "outputs/data"
+shared_db_path = "outputs/data/pushpals.db"
+remotebuddy_db_path = "outputs/data/remotebuddy-state.db"
+
+[server]
+url = "http://localhost:3001"
+host = "0.0.0.0"
+port = 3001
+debug_http = false
+stale_claim_ttl_ms = 120000
+stale_claim_sweep_interval_ms = 5000
+
+[localbuddy]
+port = 3003
+status_heartbeat_ms = 120000
+
+[localbuddy.llm]
+backend = "lmstudio"
+endpoint = "http://127.0.0.1:1234"
+model = "local-model"
+session_id = "localbuddy-dev"
+
+[remotebuddy]
+poll_ms = 2000
+status_heartbeat_ms = 120000
+workerpal_online_ttl_ms = 15000
+wait_for_workerpal_ms = 15000
+auto_spawn_workerpals = true
+max_workerpals = 10
+workerpal_startup_timeout_ms = 10000
+workerpal_docker = true
+workerpal_require_docker = true
+workerpal_image = ""
+workerpal_poll_ms = 0
+workerpal_heartbeat_ms = 0
+workerpal_labels = []
+execution_budget_interactive_ms = 600000
+execution_budget_normal_ms = 1500000
+execution_budget_background_ms = 1800000
+finalization_budget_ms = 120000
+crash_restart_enabled = true
+crash_restart_max_restarts = 3
+crash_restart_backoff_ms = 3000
+
+[remotebuddy.memory]
+enabled = true
+include_cross_session = true
+max_recall_items = 12
+max_recall_chars = 2400
+max_summary_chars = 420
+retention_days = 30
+
+[remotebuddy.llm]
+backend = "lmstudio"
+endpoint = "http://127.0.0.1:1234"
+model = "local-model"
+session_id = "remotebuddy-dev"
+
+[remotebuddy.autonomy]
+enabled = true
+kill_switch_enabled = false
+tick_interval_ms = 300000
+heartbeat_log_ms = 30000
+vision_context_max_chars = 65536
+ideation_budget_ms = 20000
+llm_timeout_ms = 60000
+allow_dirty_worktree = false
+ideation_max_candidates = 20
+top_k = 3
+explore_rate = 0.3
+min_confidence = 0.65
+max_concurrent_objectives = 2
+max_dispatch_per_hour = 6
+max_dispatch_per_hour_by_type = { flaky_test = 4, lint_fix = 3, type_fix = 3, small_refactor = 2, feature_small = 2, feature_medium = 1, feature_large = 0, docs = 1, dep_bump = 0 }
+max_dispatch_per_hour_by_component = { "apps/server" = 3, "apps/remotebuddy" = 2, "apps/workerpals" = 2, "apps/client" = 2, "packages/protocol" = 1, "packages/shared" = 2, "tests/integration" = 2, "tests/unit" = 2 }
+max_token_usage_per_hour = 120000
+max_runtime_ms_per_hour = 5400000
+cooldown_fail_streak_threshold = 2
+cooldown_ms = 1800000
+stale_objective_ttl_ms = 2700000
+stale_objective_sweep_interval_ms = 60000
+auto_freeze_fail_streak_threshold = 3
+auto_freeze_duration_ms = 1800000
+evaluator_window_hours = 24
+evaluator_min_samples = 6
+evaluator_min_success_rate = 0.45
+evaluator_max_regret_rate = 0.35
+evaluator_run_interval_ms = 120000
+alert_queue_pending_threshold = 20
+alert_job_failure_rate_threshold = 0.3
+alert_autonomy_failure_rate_threshold = 0.45
+allow_read_anywhere = true
+pr_feedback_comment_rows = 16
+pr_feedback_comment_chars = 600
+pr_feedback_summary_chars = 600
+question_ttl_ms = 259200000
+policy_version = "policy-v3.3"
+impact_model_version = "impact-v1"
+
+[remotebuddy.autonomy.replay]
+store_prompt_payloads = false
+max_runs_with_payloads = 50
+max_payload_bytes = 262144
+
+[workerpals]
+poll_ms = 2000
+heartbeat_ms = 5000
+executor = "miniswe"
+openhands_python = "python"
+openhands_timeout_ms = 1800000
+miniswe_python = "python"
+miniswe_timeout_ms = 1800000
+openai_codex_python = "python"
+openai_codex_timeout_ms = 7200000
+openhands_stuck_guard_enabled = true
+openhands_stuck_guard_explore_limit = 18
+openhands_stuck_guard_min_elapsed_ms = 180000
+openhands_stuck_guard_broad_scan_limit = 2
+openhands_stuck_guard_no_progress_max_ms = 300000
+require_push = false
+push_agent_branch = false
+require_docker = false
+skip_docker_self_check = false
+docker_image = "pushpals-worker-sandbox:latest"
+docker_timeout_ms = 7260000
+docker_idle_timeout_ms = 600000
+docker_agent_startup_timeout_ms = 45000
+docker_warm_max_attempts = 3
+docker_warm_retry_backoff_ms = 2000
+docker_job_max_attempts = 2
+docker_job_retry_backoff_ms = 3000
+docker_warm_memory_mb = 2048
+docker_warm_cpus = 2
+file_modifying_jobs = ["task.execute"]
+output_max_chars = 196608
+output_max_lines = 600
+output_max_head_lines = 120
+quality_max_auto_revisions = 4
+quality_validation_step_timeout_ms = 180000
+quality_critic_timeout_ms = 45000
+quality_soft_pass_on_exhausted = true
+quality_critic_min_score = 8.0
+quality_critic_max_diff_chars = 16000
+quality_critic_max_validation_output_chars = 8000
+executor_result_prefix = "__PUSHPALS_OH_RESULT__ "
+docker_network_mode = "bridge"
+base_ref = "origin/main_agents"
+labels = []
+failure_cooldown_ms = 20000
+
+[workerpals.openhands]
+workspace_python = "python3"
+agent_server_url = ""
+prompt_profile = "auto"
+task_prompt_mode = "none"
+large_instruction_chars = 1800
+enable_web_mcp = false
+web_mcp_url = ""
+web_mcp_name = "web-search"
+web_mcp_transport = "streamable-http"
+web_mcp_timeout_sec = 0
+enable_browser_tool = false
+lmstudio_slot_id = -1
+llm_num_retries = 2
+llm_retry_multiplier = 1.5
+llm_retry_min_wait = 1
+llm_retry_max_wait = 4
+llm_timeout_sec = 240
+llm_max_message_chars = 8000
+llm_timeout_recovery_attempts = 2
+llm_timeout_recovery_backoff_sec = 5
+agent_max_steps = 30
+auto_steer_enabled = true
+auto_steer_initial_delay_sec = 90
+auto_steer_interval_sec = 60
+auto_steer_max_nudges = 30
+
+[workerpals.llm]
+backend = "lmstudio"
+endpoint = "http://127.0.0.1:1234"
+model = "local-model"
+session_id = "workerpals-dev"
+
+[workerpals.openai_codex]
+timeout_ms = 7200000
+progress_log_interval_s = 30
+reasoning_effort = "high"
+approval_policy = "never"
+sandbox = "workspace-write"
+color = "never"
+json = true
+
+[source_control_manager]
+repo_path = ".worktrees/source_control_manager"
+remote = "origin"
+pushpals_branch = "main_agents"
+base_branch = "main"
+branch_prefix = "agent/"
+poll_interval_seconds = 10
+checks = []
+state_dir = "outputs/data/source_control_manager"
+port = 3002
+delete_after_merge = false
+max_attempts = 3
+merge_strategy = "cherry-pick"
+push_main_after_merge = true
+open_pr_after_push = true
+pr_base_branch = "main"
+pr_title = ""
+pr_body = ""
+pr_draft = false
+status_heartbeat_ms = 120000
+skip_clean_check = false
+auto_create_main_branch = false
+
+[source_control_manager.review_agent]
+enabled = false
+poll_interval_ms = 60000
+reviewer_md_path = "prompts/review_agent/reviewer.md"
+pass_threshold = 9.5
+max_pr_comments_before_give_up = 10
+merge_method = "squash"
+codex_auth_mode = "chatgpt"
+codex_bin = "bun x --yes @openai/codex"
+codex_home_dir = ""
+codex_timeout_ms = 300000
+
+[startup]
+worker_image_rebuild = "auto"
+log_config_on_start = true
+sync_integration_with_main = true
+skip_llm_preflight = false
+auto_start_lmstudio = true
+lmstudio_ready_timeout_ms = 120000
+lmstudio_cli = "lms"
+lmstudio_port = 1234
+lmstudio_start_args = ""
+startup_warmup = true
+startup_warmup_timeout_ms = 120000
+startup_warmup_poll_ms = 1000
+allow_external_clean = false
+port_preflight = true
+port_conflict_policy = "terminate_pushpals"
+
+[client]
+local_agent_url = "http://localhost:3003"
+trace_tail_lines = 100

package/runtime/configs/dev.toml

@@ -0,0 +1,2 @@
+[source_control_manager]
+skip_clean_check = true

package/runtime/configs/local.example.toml

@@ -0,0 +1,124 @@
+# Copy this file to configs/local.toml for machine-specific, non-secret overrides.
+# Keep secrets in .env (or CI secret store), not in TOML.
+
+[localbuddy.llm]
+backend = "openai_codex"
+model = "gpt-5-codex"
+codex_auth_mode = "chatgpt"
+codex_bin = "bun x --yes @openai/codex"
+codex_timeout_ms = 120000
+reasoning_effort = "high"
+
+[remotebuddy.llm]
+backend = "openai_codex"
+model = "gpt-5-codex"
+codex_auth_mode = "chatgpt"
+codex_bin = "bun x --yes @openai/codex"
+codex_timeout_ms = 120000
+reasoning_effort = "high"
+
+[remotebuddy]
+max_workerpals = 10
+crash_restart_enabled = true
+crash_restart_max_restarts = 3
+crash_restart_backoff_ms = 3000
+
+[remotebuddy.autonomy]
+llm_timeout_ms = 60000
+allow_dirty_worktree = false
+
+[remotebuddy.memory]
+enabled = true
+include_cross_session = true
+max_recall_items = 12
+max_recall_chars = 2400
+max_summary_chars = 420
+retention_days = 30
+
+[workerpals.llm]
+backend = "openai_codex"
+model = "gpt-5-codex"
+codex_auth_mode = "chatgpt"
+codex_bin = "bun x --yes @openai/codex"
+codex_timeout_ms = 120000
+reasoning_effort = "high"
+
+[workerpals]
+executor = "openai_codex"
+docker_image = "pushpals-worker-sandbox:latest"
+openhands_timeout_ms = 1800000
+openai_codex_timeout_ms = 7200000
+docker_timeout_ms = 7260000
+openhands_stuck_guard_enabled = true
+openhands_stuck_guard_explore_limit = 18
+openhands_stuck_guard_min_elapsed_ms = 180000
+openhands_stuck_guard_broad_scan_limit = 2
+openhands_stuck_guard_no_progress_max_ms = 300000
+docker_warm_memory_mb = 2048
+docker_warm_cpus = 2
+file_modifying_jobs = ["task.execute"]
+output_max_chars = 196608
+output_max_lines = 600
+output_max_head_lines = 120
+quality_max_auto_revisions = 4
+quality_validation_step_timeout_ms = 180000
+quality_critic_timeout_ms = 45000
+quality_soft_pass_on_exhausted = true
+quality_critic_min_score = 8.0
+quality_critic_max_diff_chars = 16000
+quality_critic_max_validation_output_chars = 8000
+executor_result_prefix = "__PUSHPALS_OH_RESULT__ "
+
+[workerpals.openhands]
+prompt_profile = "minimal"
+llm_timeout_sec = 180
+llm_max_message_chars = 12000
+llm_timeout_recovery_attempts = 2
+llm_timeout_recovery_backoff_sec = 5
+agent_max_steps = 30
+auto_steer_enabled = true
+auto_steer_initial_delay_sec = 90
+auto_steer_interval_sec = 60
+auto_steer_max_nudges = 30
+
+[workerpals.openai_codex]
+auth_mode = "chatgpt"
+bin = "bun x --yes @openai/codex"
+timeout_ms = 7200000
+progress_log_interval_s = 30
+# timeout_s = 120  # optional; if set, overrides timeout_ms
+reasoning_effort = "high"
+approval_policy = "never"
+sandbox = "workspace-write"
+color = "never"
+json = true
+
+[llm.lmstudio]
+context_window = 4096
+min_output_tokens = 256
+batch_tail_messages = 3
+
+[source_control_manager]
+repo_path = ".worktrees/source_control_manager"
+pushpals_branch = "main_agents"
+base_branch = "main"
+checks = []
+
+[source_control_manager.review_agent]
+enabled = true
+poll_interval_ms = 60000
+reviewer_md_path = "prompts/review_agent/reviewer.md"
+pass_threshold = 8.1
+max_pr_comments_before_give_up = 10
+merge_method = "squash"
+codex_auth_mode = "chatgpt"
+codex_bin = "bun x --yes @openai/codex"
+codex_home_dir = ""
+codex_timeout_ms = 300000
+
+[startup]
+log_config_on_start = true
+startup_warmup = true
+lmstudio_ready_timeout_ms = 120000
+port_preflight = true
+port_conflict_policy = "terminate_pushpals"  # fail|terminate_pushpals

package/runtime/prompts/localbuddy/local_quick_reply_json_system_suffix.md

@@ -0,0 +1,2 @@
+Respond in strict JSON with this shape:
+{"reply":"<final user-facing response>"}

package/runtime/prompts/localbuddy/local_quick_reply_system_prompt.md

@@ -0,0 +1,10 @@
+You are PushPals LocalBuddy.
+
+Respond directly and briefly for lightweight chat and coordination questions.
+If the user asks for coding/execution work, remind them to use:
+/ask_remote_buddy <request>
+
+Return ONLY the final user-facing reply. Never reveal internal reasoning, analysis steps, or chain-of-thought.
+Do not include numbered analysis, "identify constraints", "self-correction", or planning text.
+Keep replies concise and helpful (max 2 short sentences).
+If unclear, ask one brief clarifying question.

package/runtime/prompts/localbuddy/local_quick_reply_user_prompt.md

@@ -0,0 +1,2 @@
+User message: {{user_message}}
+Return JSON only.

package/runtime/prompts/localbuddy/localbuddy_planner_git_diff_section.md

@@ -0,0 +1,3 @@
+
+Git diff (truncated):
+{{git_diff}}

package/runtime/prompts/localbuddy/localbuddy_planner_git_status_section.md

@@ -0,0 +1,3 @@
+
+Git status:
+{{git_status}}

package/runtime/prompts/localbuddy/localbuddy_planner_output_contract.md

@@ -0,0 +1,5 @@
+Planner-specific output contract:
+- For this response, output STRICT JSON only.
+- JSON shape: { "tasks": [{ "title": string, "description": string, "toolsNeeded": string[], "confidence": number }] }
+- Do not include markdown, prose, or code fences.
+- Keep tasks concrete and executable by available tools.

package/runtime/prompts/localbuddy/localbuddy_planner_user_prompt.md

@@ -0,0 +1,2 @@
+User request: "{{user_text}}"
+{{git_status_section}}{{git_diff_section}}