@shivaedev/work-fleet 0.1.0 → 0.2.0

package/CHANGELOG.md

@@ -1,5 +1,28 @@
 # Changelog
 
+## 0.2.0 - 2026-10-17
+
+### Added
+
+- Export `briefEditPrompt(previous, current)` for correction prompts, `briefSteerIntent(previous, record, requestedAt)` for durable intent preparation, and `steerBrief(state, stored, previous)` for delivery through the existing session service.
+
+### Fixed
+
+- Steer approved brief edits into an active worker or repair turn with a change summary and the full new brief. Persist each revision's steer attempt before delivery so reconciliation and restarts do not repeat it; failed steering retains the new criteria for review.
+- Show brief steer requests, acknowledged delivery times and failures in Fleet status. Attempt records and session views expose optional `briefSteers` entries with `revision`, `requestedAt`, optional `steeredAt` and optional `error` fields.
+- Cloud worker and reviewer startup instructions use login-shell environment activation, with a single fallback when Node does not match `.node-version`. Code workers run `./script/update` immediately after fetching and creating their branch; report workers run it before executing repository commands.
+- Align published SQL, Platform, contract and Work Board dependencies with the current framework releases.
+- Fresh worker retries refresh their preparation from current main before host dispatch, preserving prior attempts and response receipts without asking a human to resolve stale preparation.
+- Stalled turns retain their recovery state when a brief edit replaces the current decision. Retry or dispatch of the revised brief abandons the stalled turn and starts a fresh session; late output and acknowledgements remain fenced out. Release can also abandon the stalled turn after a decision replacement.
+- Retry and release can abandon a stalled provider turn even when it still reports running or no longer responds. Retry starts a fresh session, and abandoned turns cannot supply accepted output or late acknowledgements. Attempts retain the provider's last observation and interruption or observation failures in an optional `abandoned` field.
+
+## 0.1.1 - 2026-10-16
+
+### Fixed
+
+- Validate only the newest run of each GitHub check name on the adopted head, using completion time or start time. Superseded cancelled or failed runs no longer trigger repairs.
+- Revalidate check repairs that leave the PR head unchanged without repeating the approved review. Three completed repairs of the same failing checks exhaust the repair limit even when a repair submission failed between them.
+
 ## 0.1.0 - 2026-10-16
 
 ### Added

package/README.md

@@ -98,7 +98,7 @@ fleet-launch:
 
 The launch fields are strings. Omitted fields inherit the host settings; without host settings or an override, they inherit provider defaults. An invalid override fails before dispatch. The selected settings also apply to repair turns. `src/board/fleetField.test.ts`, `src/host/commands.test.ts` and `src/engine/launchSettings.spec.ts` cover these rules.
 
-The worker brief is the authored content in the item's own Markdown source. Editing a linked goal, plan, report or decision, or an unrelated item, does not change that brief. When prepared or active work has no open decision, Fleet approves an edited brief in place on the next pass if it still has `fleet: approved`, its owner is omitted or `codex`, and its status is not `done`, `superseded` or `deferred`. The worker keeps its session, turn and PR without a Board context changed decision. A changed brief that fails these conditions still stops for a human. `work-fleet dispatch <id>` can explicitly approve the current approved brief in place, even while its worker turn runs. Retry on the context decision approves the brief that decision was published against; an answer to a decision from before an edit cannot approve the new brief. Approval updates the stored context and prompt, supersedes the decision, and preserves the current attempts, thread and PR. The running turn remains observed, then independent review uses the new criteria and repairs continue the same worker thread. Removing approval stops further execution. Changing the item's `status`, including `done`, preserves work that has started and its open decisions. That work completes through the normal execution, review and delivery path; only an explicit release answer releases unfinished execution ownership. Uncertain provider receipts retain ownership for reconciliation. `src/engine/approvedBrief.spec.ts`, `src/engine/contextScope.spec.ts`, `src/engine/contextAuthority.spec.ts` and `src/host/approvedRevision.spec.ts`, `src/host/approveBrief.spec.ts`, `src/engine/briefApproval.spec.ts` and `src/engine/staleDecisions.spec.ts` cover these transitions against PostgreSQL with Markdown Board fixtures and a synthetic provider.
+The worker brief is the authored content in the item's own Markdown source. Editing a linked goal, plan, report or decision, or an unrelated item, does not change that brief. When prepared or active work has no open decision, Fleet approves an edited brief in place on the next pass if it still has `fleet: approved`, its owner is omitted or `codex`, and its status is not `done`, `superseded` or `deferred`. The worker keeps its session, turn and PR without a Board context changed decision. A changed brief that fails these conditions still stops for a human. `work-fleet dispatch <id>` can explicitly approve the current approved brief in place, even while its worker turn runs. Retry on the context decision approves the brief that decision was published against; an answer to a decision from before an edit cannot approve the new brief. Approval updates the stored context and prompt, supersedes the decision, and preserves the current thread and PR. When the worker or repair turn has an active receipt, Fleet steers it through the existing provider steer operation with a summary of the changes followed by the full new brief. Each authored revision is attempted at most once per turn, including after restart or a brief reverting to a previously steered revision. The approved brief and steer intent commit together before the provider call. CLI status records the request time, acknowledged delivery time or failure; interrupted delivery remains unconfirmed and is not replayed. Unsupported or failed steering leaves the updated brief in place for independent review and later repairs on the same worker thread. Completed turns and reviewers receive no brief steer. `src/engine/briefSteering.spec.ts`, `src/engine/briefSteerRecovery.spec.ts` and `src/host/briefSteering.spec.ts` prove these boundaries with real PostgreSQL, synthetic providers and a daemon SIGKILL/restart. Removing approval stops further execution. Changing the item's `status`, including `done`, preserves work that has started and its open decisions. That work completes through the normal execution, review and delivery path; only an explicit release answer releases unfinished execution ownership. Uncertain provider receipts retain ownership for reconciliation. `src/engine/approvedBrief.spec.ts`, `src/engine/contextScope.spec.ts`, `src/engine/contextAuthority.spec.ts` and `src/host/approvedRevision.spec.ts`, `src/host/approveBrief.spec.ts`, `src/engine/briefApproval.spec.ts` and `src/engine/staleDecisions.spec.ts` cover these transitions against PostgreSQL with Markdown Board fixtures and a synthetic provider.
 
 Cloud hosts compute the Board directory's repository-relative path only when that directory is inside the repository and git-ignored. Before launching, Fleet checks each criterion's text for that path. A match publishes an orchestrator decision naming the criteria and explaining that Cloud workers cannot read local-only Board data, without starting a session. Edit the criteria to use data available to the worker, then dispatch again. Local workers, Board directories outside the repository, directories that are not ignored, and paths mentioned only in the body do not trigger this guard. `src/host/localOnlyCriteria.spec.ts` covers these cases and dispatch after an edit against PostgreSQL with a synthetic repository and provider.
 
@@ -323,7 +323,7 @@ Each scheduler pass shares a Board snapshot and identity index across admission,
 
 Fleet excludes files with invalid metadata or unreadable sources from admission, records a Board problem with the file and diagnostic, and retries them on the next pass. An unrelated invalid file leaves running work executing. A lookup of an invalid or missing work source still blocks that work; when metadata cannot supply its identity, the missing-identity diagnostic includes the Board file problems. The named problem reaches the execution status and the published decision, using the original approved context for publication. `src/host/boardReadErrors.spec.ts` proves admission, recovery, running-work isolation and named diagnostics against real PostgreSQL.
 
-Provide `BoardGateway`, `FleetRepository`, `FleetPolicy`, `FleetIntegrations` and `SessionService` to `Fleet.layer`. The Markdown gateway reads Board context, and `postgresFleetRepository(namespace?)` supplies durable SQL attachments on a native `SqlClient`. Fleet stores each record field in an effect-sql model column and persists foreign occupancy through a separate model repository. Versioned repository writes reject stale updates; the adapter retains Fleet’s one-based record versions. Startup migrates existing JSONB records into those columns, preserving nested values, record versions and admission order. `src/storage/modelMigration.spec.ts` reads every migrated record back unchanged and exercises updates and requeueing; `src/host/modelMigration.spec.ts` covers daemon HTTP reads and writes after startup migration.
+Provide `BoardGateway`, `FleetRepository`, `FleetPolicy`, `FleetIntegrations` and `SessionService` to `Fleet.layer`. The Markdown gateway reads Board context, and `postgresFleetRepository(namespace?)` supplies durable SQL attachments on a native `SqlClient`. Fleet stores scalar fields and scalar lists in typed PostgreSQL columns through effect-sql models. Nested objects use typed columns, and repeated records use ordered child tables, including archived cycles. Foreign occupancy uses a separate model repository. Versioned transaction writes reject stale updates and replace child rows atomically; the adapter retains Fleet’s one-based record versions. Record reads hold a shared transaction lock while loading their columns and children. Startup migrates existing JSONB and text records, preserving nested values, record versions and admission order. `src/storage/typedMigration.spec.ts` reads every current and archived field back unchanged, distinguishes empty and absent structures, and proves rollback after migration and child-write failures. `src/storage/modelMigration.spec.ts` exercises the JSONB upgrade and requeueing; `src/host/modelMigration.spec.ts` covers daemon HTTP reads and writes after startup migration.
 
 A session journal persists intents and acknowledged turns before further remote mutation. `src/session/service.test.ts` and `src/engine/recovery.spec.ts` cover receipt ordering and recovery without duplicate launch.
 

package/dist/admit.d.ts

@@ -15,6 +15,33 @@ export declare const admit: (work: {
     readonly admissionReady?: boolean | undefined;
     readonly areas?: readonly string[] | undefined;
     readonly attempts: readonly {
+        readonly abandoned?: {
+            readonly at: number;
+            readonly interruptError?: string | undefined;
+            readonly observation?: {
+                readonly capacity?: "flexUnavailable" | "rateLimitExceeded" | "serverOverloaded" | undefined;
+                readonly error?: string | undefined;
+                readonly execution: "accepted" | "completed" | "failed" | "interrupted" | "running";
+                readonly output: string;
+                readonly progress?: readonly {
+                    readonly id: string;
+                    readonly status?: string | undefined;
+                }[] | undefined;
+                readonly provisioning: "ready" | "unknown";
+                readonly receipt: {
+                    readonly sessionId: string;
+                    readonly turnId: string;
+                };
+                readonly turnMissing?: boolean | undefined;
+            } | undefined;
+            readonly observationError?: string | undefined;
+        } | undefined;
+        readonly briefSteers?: readonly {
+            readonly error?: string | undefined;
+            readonly requestedAt: number;
+            readonly revision: string;
+            readonly steeredAt?: number | undefined;
+        }[] | undefined;
         readonly checkFailures?: readonly string[] | undefined;
         readonly missingSince?: number | undefined;
         readonly observationRetries?: number | undefined;
@@ -253,6 +280,33 @@ export declare const admit: (work: {
         readonly admissionReady?: boolean | undefined;
         readonly areas?: readonly string[] | undefined;
         readonly attempts: readonly {
+            readonly abandoned?: {
+                readonly at: number;
+                readonly interruptError?: string | undefined;
+                readonly observation?: {
+                    readonly capacity?: "flexUnavailable" | "rateLimitExceeded" | "serverOverloaded" | undefined;
+                    readonly error?: string | undefined;
+                    readonly execution: "accepted" | "completed" | "failed" | "interrupted" | "running";
+                    readonly output: string;
+                    readonly progress?: readonly {
+                        readonly id: string;
+                        readonly status?: string | undefined;
+                    }[] | undefined;
+                    readonly provisioning: "ready" | "unknown";
+                    readonly receipt: {
+                        readonly sessionId: string;
+                        readonly turnId: string;
+                    };
+                    readonly turnMissing?: boolean | undefined;
+                } | undefined;
+                readonly observationError?: string | undefined;
+            } | undefined;
+            readonly briefSteers?: readonly {
+                readonly error?: string | undefined;
+                readonly requestedAt: number;
+                readonly revision: string;
+                readonly steeredAt?: number | undefined;
+            }[] | undefined;
             readonly checkFailures?: readonly string[] | undefined;
             readonly missingSince?: number | undefined;
             readonly observationRetries?: number | undefined;

package/dist/admit.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"admit.d.ts","sourceRoot":"","sources":["../src/admit.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAChC,OAAO,EAAE,SAAS,EAAE,MAAM,wCAAwC,CAAC;AAGnE,OAAO,KAAK,EAAE,YAAY,EAAE,SAAS,EAAE,kBAAkB,EAAE,MAAM,YAAY,CAAC;AAE9E,eAAO,MAAM,KAAK;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;+CAIH,MAAM,KAAK,MAAM,CAAC,MAAM,CAAC,SAAS,EAAE,YAAY,CAAC,+CA4B9D,CAAC"}
+{"version":3,"file":"admit.d.ts","sourceRoot":"","sources":["../src/admit.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAChC,OAAO,EAAE,SAAS,EAAE,MAAM,wCAAwC,CAAC;AAGnE,OAAO,KAAK,EAAE,YAAY,EAAE,SAAS,EAAE,kBAAkB,EAAE,MAAM,YAAY,CAAC;AAE9E,eAAO,MAAM,KAAK;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;+CAIH,MAAM,KAAK,MAAM,CAAC,MAAM,CAAC,SAAS,EAAE,YAAY,CAAC,+CA4B9D,CAAC"}