@pushpalsdev/cli 1.0.83 → 1.0.85

package/dist/pushpals-cli.js

@@ -450,7 +450,7 @@ var DEFAULT_CONFIG_DIR = "configs";
 var TRUTHY2 = new Set(["1", "true", "yes", "on"]);
 var FALSY2 = new Set(["0", "false", "no", "off"]);
 var DEFAULT_WORKERPALS_QUALITY_CRITIC_MIN_SCORE = 8;
-var DEFAULT_WORKERPALS_QUALITY_MAX_AUTO_REVISIONS = 1;
+var DEFAULT_WORKERPALS_QUALITY_MAX_AUTO_REVISIONS = 3;
 var DEFAULT_WORKERPALS_FILE_MODIFYING_JOBS = ["task.execute"];
 var DEFAULT_WORKERPALS_OUTPUT_MAX_CHARS = 192 * 1024;
 var DEFAULT_WORKERPALS_OUTPUT_MAX_LINES = 600;
@@ -817,6 +817,7 @@ function loadPushPalsConfig(options = {}) {
   const workerOpenAICodexPython = firstNonEmpty(process.env.PUSHPALS_OPENAI_CODEX_PYTHON, asString(workerNode.openai_codex_python, "python"), "python");
   const workerOpenAICodexTimeoutMs = Math.max(1e4, asInt(workerNode.openai_codex_timeout_ms, 7200000));
   const workerQualityMaxAutoRevisions = Math.max(0, Math.min(10, asInt(parseIntEnv("WORKERPALS_QUALITY_MAX_AUTO_REVISIONS") ?? workerNode.quality_max_auto_revisions, DEFAULT_WORKERPALS_QUALITY_MAX_AUTO_REVISIONS)));
+  const workerQualityValidationMaxAutoRevisions = Math.max(0, Math.min(10, asInt(parseIntEnv("WORKERPALS_QUALITY_VALIDATION_MAX_AUTO_REVISIONS") ?? workerNode.quality_validation_max_auto_revisions, DEFAULT_WORKERPALS_QUALITY_MAX_AUTO_REVISIONS)));
   const workerFileModifyingJobs = (() => {
     const envRaw = firstNonEmpty(process.env.WORKERPALS_FILE_MODIFYING_JOBS);
     const parsed = envRaw ? envRaw.split(",").map((entry) => entry.trim()).filter(Boolean) : asStringArray(workerNode.file_modifying_jobs);
@@ -829,6 +830,10 @@ function loadPushPalsConfig(options = {}) {
   const workerQualityValidationStepTimeoutMs = Math.max(1000, asInt(parseIntEnv("WORKERPALS_QUALITY_VALIDATION_STEP_TIMEOUT_MS") ?? workerNode.quality_validation_step_timeout_ms, DEFAULT_WORKERPALS_QUALITY_VALIDATION_STEP_TIMEOUT_MS));
   const workerQualityCriticTimeoutMs = Math.max(1000, asInt(parseIntEnv("WORKERPALS_QUALITY_CRITIC_TIMEOUT_MS") ?? workerNode.quality_critic_timeout_ms, DEFAULT_WORKERPALS_QUALITY_CRITIC_TIMEOUT_MS));
   const workerQualitySoftPassOnExhausted = parseBoolEnv("WORKERPALS_QUALITY_SOFT_PASS_ON_EXHAUSTED") ?? asBoolean(workerNode.quality_soft_pass_on_exhausted, true);
+  const workerQualityScopeGateEnabled = parseBoolEnv("WORKERPALS_QUALITY_SCOPE_GATE_ENABLED") ?? asBoolean(workerNode.quality_scope_gate_enabled, true);
+  const workerQualityValidationGateEnabled = parseBoolEnv("WORKERPALS_QUALITY_VALIDATION_GATE_ENABLED") ?? asBoolean(workerNode.quality_validation_gate_enabled, true);
+  const workerQualityCriticGateEnabled = parseBoolEnv("WORKERPALS_QUALITY_CRITIC_GATE_ENABLED") ?? asBoolean(workerNode.quality_critic_gate_enabled, true);
+  const workerQualityPublishGateEnabled = parseBoolEnv("WORKERPALS_QUALITY_PUBLISH_GATE_ENABLED") ?? asBoolean(workerNode.quality_publish_gate_enabled, true);
   const workerQualityCriticMinScore = (() => {
     const configThresholdRaw = workerNode.quality_critic_min_score == null ? "" : String(workerNode.quality_critic_min_score);
     const raw = firstNonEmpty(process.env.WORKERPALS_QUALITY_CRITIC_MIN_SCORE, configThresholdRaw, String(DEFAULT_WORKERPALS_QUALITY_CRITIC_MIN_SCORE));
@@ -1119,6 +1124,11 @@ function loadPushPalsConfig(options = {}) {
       outputMaxLines: workerOutputMaxLines,
       outputMaxHeadLines: workerOutputMaxHeadLines,
       qualityMaxAutoRevisions: workerQualityMaxAutoRevisions,
+      qualityValidationMaxAutoRevisions: workerQualityValidationMaxAutoRevisions,
+      qualityScopeGateEnabled: workerQualityScopeGateEnabled,
+      qualityValidationGateEnabled: workerQualityValidationGateEnabled,
+      qualityCriticGateEnabled: workerQualityCriticGateEnabled,
+      qualityPublishGateEnabled: workerQualityPublishGateEnabled,
       qualityValidationStepTimeoutMs: workerQualityValidationStepTimeoutMs,
       qualityCriticTimeoutMs: workerQualityCriticTimeoutMs,
       qualitySoftPassOnExhausted: workerQualitySoftPassOnExhausted,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pushpalsdev/cli",
-  "version": "1.0.83",
+  "version": "1.0.85",
   "description": "PushPals terminal CLI for LocalBuddy -> RemoteBuddy orchestration",
   "license": "MIT",
   "repository": {

package/runtime/configs/default.toml

@@ -150,7 +150,14 @@ file_modifying_jobs = ["task.execute"]
 output_max_chars = 196608
 output_max_lines = 600
 output_max_head_lines = 120
-quality_max_auto_revisions = 1
+quality_max_auto_revisions = 3
+quality_validation_max_auto_revisions = 3
+quality_scope_gate_enabled = true
+quality_validation_gate_enabled = true
+quality_critic_gate_enabled = true
+quality_publish_gate_enabled = true
+# Browser/e2e validation commands get a longer built-in floor (10m) because they
+# may need to start a dev server and run browser automation.
 quality_validation_step_timeout_ms = 180000
 quality_critic_timeout_ms = 45000
 quality_soft_pass_on_exhausted = true

package/runtime/configs/local.example.toml

@@ -66,7 +66,14 @@ file_modifying_jobs = ["task.execute"]
 output_max_chars = 196608
 output_max_lines = 600
 output_max_head_lines = 120
-quality_max_auto_revisions = 1
+quality_max_auto_revisions = 3
+quality_validation_max_auto_revisions = 3
+quality_scope_gate_enabled = true
+quality_validation_gate_enabled = true
+quality_critic_gate_enabled = true
+quality_publish_gate_enabled = true
+# Browser/e2e validation commands get a longer built-in floor (10m) because they
+# may need to start a dev server and run browser automation.
 quality_validation_step_timeout_ms = 180000
 quality_critic_timeout_ms = 45000
 quality_soft_pass_on_exhausted = true

package/runtime/sandbox/.pushpals-remotebuddy-fallback.js

@@ -734,7 +734,7 @@ var DEFAULT_CONFIG_DIR = "configs";
 var TRUTHY = new Set(["1", "true", "yes", "on"]);
 var FALSY = new Set(["0", "false", "no", "off"]);
 var DEFAULT_WORKERPALS_QUALITY_CRITIC_MIN_SCORE = 8;
-var DEFAULT_WORKERPALS_QUALITY_MAX_AUTO_REVISIONS = 1;
+var DEFAULT_WORKERPALS_QUALITY_MAX_AUTO_REVISIONS = 3;
 var DEFAULT_WORKERPALS_FILE_MODIFYING_JOBS = ["task.execute"];
 var DEFAULT_WORKERPALS_OUTPUT_MAX_CHARS = 192 * 1024;
 var DEFAULT_WORKERPALS_OUTPUT_MAX_LINES = 600;
@@ -1103,6 +1103,7 @@ function loadPushPalsConfig(options = {}) {
   const workerOpenAICodexPython = firstNonEmpty(process.env.PUSHPALS_OPENAI_CODEX_PYTHON, asString(workerNode.openai_codex_python, "python"), "python");
   const workerOpenAICodexTimeoutMs = Math.max(1e4, asInt(workerNode.openai_codex_timeout_ms, 7200000));
   const workerQualityMaxAutoRevisions = Math.max(0, Math.min(10, asInt(parseIntEnv("WORKERPALS_QUALITY_MAX_AUTO_REVISIONS") ?? workerNode.quality_max_auto_revisions, DEFAULT_WORKERPALS_QUALITY_MAX_AUTO_REVISIONS)));
+  const workerQualityValidationMaxAutoRevisions = Math.max(0, Math.min(10, asInt(parseIntEnv("WORKERPALS_QUALITY_VALIDATION_MAX_AUTO_REVISIONS") ?? workerNode.quality_validation_max_auto_revisions, DEFAULT_WORKERPALS_QUALITY_MAX_AUTO_REVISIONS)));
   const workerFileModifyingJobs = (() => {
     const envRaw = firstNonEmpty(process.env.WORKERPALS_FILE_MODIFYING_JOBS);
     const parsed = envRaw ? envRaw.split(",").map((entry) => entry.trim()).filter(Boolean) : asStringArray(workerNode.file_modifying_jobs);
@@ -1115,6 +1116,10 @@ function loadPushPalsConfig(options = {}) {
   const workerQualityValidationStepTimeoutMs = Math.max(1000, asInt(parseIntEnv("WORKERPALS_QUALITY_VALIDATION_STEP_TIMEOUT_MS") ?? workerNode.quality_validation_step_timeout_ms, DEFAULT_WORKERPALS_QUALITY_VALIDATION_STEP_TIMEOUT_MS));
   const workerQualityCriticTimeoutMs = Math.max(1000, asInt(parseIntEnv("WORKERPALS_QUALITY_CRITIC_TIMEOUT_MS") ?? workerNode.quality_critic_timeout_ms, DEFAULT_WORKERPALS_QUALITY_CRITIC_TIMEOUT_MS));
   const workerQualitySoftPassOnExhausted = parseBoolEnv("WORKERPALS_QUALITY_SOFT_PASS_ON_EXHAUSTED") ?? asBoolean(workerNode.quality_soft_pass_on_exhausted, true);
+  const workerQualityScopeGateEnabled = parseBoolEnv("WORKERPALS_QUALITY_SCOPE_GATE_ENABLED") ?? asBoolean(workerNode.quality_scope_gate_enabled, true);
+  const workerQualityValidationGateEnabled = parseBoolEnv("WORKERPALS_QUALITY_VALIDATION_GATE_ENABLED") ?? asBoolean(workerNode.quality_validation_gate_enabled, true);
+  const workerQualityCriticGateEnabled = parseBoolEnv("WORKERPALS_QUALITY_CRITIC_GATE_ENABLED") ?? asBoolean(workerNode.quality_critic_gate_enabled, true);
+  const workerQualityPublishGateEnabled = parseBoolEnv("WORKERPALS_QUALITY_PUBLISH_GATE_ENABLED") ?? asBoolean(workerNode.quality_publish_gate_enabled, true);
   const workerQualityCriticMinScore = (() => {
     const configThresholdRaw = workerNode.quality_critic_min_score == null ? "" : String(workerNode.quality_critic_min_score);
     const raw = firstNonEmpty(process.env.WORKERPALS_QUALITY_CRITIC_MIN_SCORE, configThresholdRaw, String(DEFAULT_WORKERPALS_QUALITY_CRITIC_MIN_SCORE));
@@ -1405,6 +1410,11 @@ function loadPushPalsConfig(options = {}) {
       outputMaxLines: workerOutputMaxLines,
       outputMaxHeadLines: workerOutputMaxHeadLines,
       qualityMaxAutoRevisions: workerQualityMaxAutoRevisions,
+      qualityValidationMaxAutoRevisions: workerQualityValidationMaxAutoRevisions,
+      qualityScopeGateEnabled: workerQualityScopeGateEnabled,
+      qualityValidationGateEnabled: workerQualityValidationGateEnabled,
+      qualityCriticGateEnabled: workerQualityCriticGateEnabled,
+      qualityPublishGateEnabled: workerQualityPublishGateEnabled,
       qualityValidationStepTimeoutMs: workerQualityValidationStepTimeoutMs,
       qualityCriticTimeoutMs: workerQualityCriticTimeoutMs,
       qualitySoftPassOnExhausted: workerQualitySoftPassOnExhausted,
@@ -1763,6 +1773,16 @@ var NODE_BACKED_CLI_NAMES = new Set([
   "vitest",
   "webpack"
 ]);
+var BUN_OPTIONS_WITH_VALUE = new Set(["--cwd", "-C"]);
+var PACKAGE_MANAGER_OPTIONS_WITH_VALUE = new Set([
+  "--cwd",
+  "--dir",
+  "--filter",
+  "--prefix",
+  "--workspace",
+  "-C",
+  "-F"
+]);
 // packages/shared/src/session_event_visibility.ts
 var ALWAYS_VISIBLE_EVENT_TYPES = new Set(["question_asked"]);
 // packages/shared/src/localbuddy_runtime.ts

package/runtime/sandbox/apps/workerpals/src/backends/openhands_task_execute.ts

@@ -16,6 +16,7 @@ import {
   parseStructuredResult,
   filterResultLines,
 } from "../common/execution_utils.js";
+import { buildWorkerSandboxWritableEnv } from "../common/sandbox_env.js";
 import { computeTimeoutWarningWindow } from "../timeout_policy.js";
 
 // ---- Script path (resolved relative to this file) ----------------------------
@@ -286,7 +287,7 @@ export async function executeWithOpenHands(
       stdout: "pipe",
       stderr: "pipe",
       env: {
-        ...process.env,
+        ...buildWorkerSandboxWritableEnv(repo),
         PUSHPALS_REPO_PATH: repo,
         PUSHPALS_ASSIGNED_REPO_ROOT: repo,
         PYTHONIOENCODING: "utf-8",

package/runtime/sandbox/apps/workerpals/src/common/generic_python_executor.ts

@@ -18,6 +18,7 @@ import {
   filterResultLines,
   streamLines,
 } from "./execution_utils.js";
+import { buildWorkerSandboxWritableEnv } from "./sandbox_env.js";
 
 interface GenericPythonExecutorConfig {
   backendName: string;
@@ -180,7 +181,7 @@ export function createGenericPythonExecutor(
         stdout: "pipe",
         stderr: "pipe",
         env: {
-          ...process.env,
+          ...buildWorkerSandboxWritableEnv(repo),
           PUSHPALS_REPO_PATH: repo,
           PUSHPALS_ASSIGNED_REPO_ROOT: repo,
           PYTHONIOENCODING: "utf-8",

package/runtime/sandbox/apps/workerpals/src/common/sandbox_env.ts

@@ -0,0 +1,76 @@
+import { createHash } from "crypto";
+import { existsSync, mkdirSync } from "fs";
+import { homedir, tmpdir } from "os";
+import { basename, resolve } from "path";
+
+function stringEnv(source: NodeJS.ProcessEnv = process.env): Record<string, string> {
+  const env: Record<string, string> = {};
+  for (const [key, value] of Object.entries(source)) {
+    if (typeof value === "string") env[key] = value;
+  }
+  return env;
+}
+
+function safeRepoSlug(repo: string): string {
+  const leaf = basename(resolve(repo)).replace(/[^A-Za-z0-9_.-]+/g, "-") || "repo";
+  const hash = createHash("sha256").update(resolve(repo)).digest("hex").slice(0, 12);
+  return `${leaf}-${hash}`;
+}
+
+function defaultExpoPortForRepo(repo: string): string {
+  const hashPrefix = createHash("sha256").update(resolve(repo)).digest("hex").slice(0, 8);
+  const offset = Number.parseInt(hashPrefix, 16) % 1_000;
+  return String(19_006 + offset);
+}
+
+function ensureDirs(paths: string[]): void {
+  for (const path of paths) {
+    try {
+      mkdirSync(path, { recursive: true });
+    } catch {
+      // Best effort: command output will expose any remaining filesystem blocker.
+    }
+  }
+}
+
+function resolveOriginalHome(env: Record<string, string>): string {
+  return env.HOME || env.USERPROFILE || homedir();
+}
+
+function resolveCodexHome(env: Record<string, string>, originalHome: string): string | undefined {
+  if (env.CODEX_HOME) return env.CODEX_HOME;
+  const defaultCodexHome = resolve(originalHome, ".codex");
+  return existsSync(defaultCodexHome) ? defaultCodexHome : undefined;
+}
+
+export function buildWorkerSandboxWritableEnv(
+  repo: string,
+  sourceEnv: NodeJS.ProcessEnv = process.env,
+): Record<string, string> {
+  const env = stringEnv(sourceEnv);
+  const originalHome = resolveOriginalHome(env);
+  const codexHome = resolveCodexHome(env, originalHome);
+  const baseDir = resolve(tmpdir(), "pushpals-worker-env", safeRepoSlug(repo));
+  const homeDir = resolve(baseDir, "home");
+  const cacheDir = resolve(baseDir, "cache");
+  const expoDir = resolve(baseDir, "expo");
+  const defaultExpoPort = defaultExpoPortForRepo(repo);
+  ensureDirs([homeDir, cacheDir, expoDir, resolve(cacheDir, "npm")]);
+
+  return {
+    ...env,
+    ...(codexHome ? { CODEX_HOME: codexHome } : {}),
+    HOME: homeDir,
+    USERPROFILE: homeDir,
+    XDG_CACHE_HOME: cacheDir,
+    npm_config_cache: resolve(cacheDir, "npm"),
+    EXPO_HOME: expoDir,
+    EXPO_NO_TELEMETRY: env.EXPO_NO_TELEMETRY ?? "1",
+    EXPO_NO_INTERACTIVE: env.EXPO_NO_INTERACTIVE ?? "1",
+    CI: env.CI ?? "1",
+    BROWSER: env.BROWSER ?? "none",
+    EXPO_DEV_SERVER_PORT: env.EXPO_DEV_SERVER_PORT ?? defaultExpoPort,
+    RCT_METRO_PORT: env.RCT_METRO_PORT ?? defaultExpoPort,
+    PUSHPALS_VALIDATION_REPO: repo,
+  };
+}