@tiangong-ai/cli 0.0.42 → 0.0.44

package/dist/research/workspace/setup.js

@@ -15,6 +15,7 @@ import { configuredResearchSecrets, isSensitiveEnvironmentName, sanitizeResearch
 import { inspectResearchSetupCatalog, RESEARCH_SETUP_CREDENTIALS, RESEARCH_SETUP_INSTALLER, RESEARCH_SETUP_SETTINGS, RESEARCH_SETUP_SKILLS, resolveSetupSkills, setupSkill, setupSource, setupTargetRoot, verifyResearchSetupRuntimeContract, } from "./setup-catalog.js";
 import { acquireFileLock, canonicalJson, ensureDirectory, fileSize, hashRegularTree, isObject, pathExists, REGULAR_TREE_HASH_ALGORITHM, readJsonFile, sha256File, sha256Text, workspacePaths, writeJsonAtomic, writeTextAtomic, } from "./storage.js";
 import { packageRoot, packageVersion, RESEARCH_PACKAGE_NAME } from "./constants.js";
+import { inspectReviewerBridgeStatus } from "./review-executor.js";
 import { exactResearchCliCommand, pinResearchCliCommand, researchSetupApplyCommand, researchSetupRetryCommand, } from "./setup-invocation.js";
 import { doctorResearchWorkspace, initializeResearchWorkspace, loadWorkspaceConfig, } from "./workspace.js";
 const RECOVERY_SKILL_NAME = "tiangong-auto-research-recovery";
@@ -38,6 +39,7 @@ export async function createResearchSetupPlan(input) {
     const scope = input.scope ?? "project";
     const agents = normalizeAgents(input.agents ?? ["codex"]);
     const agentRoutes = normalizeAgentRoutes(input.agentRoutes);
+    const reviewerExecution = normalizeReviewerExecution(input.reviewerExecution);
     if (input.declarativeConfigurationSha256 !== undefined &&
         !/^[0-9a-f]{64}$/.test(input.declarativeConfigurationSha256)) {
         throw setupError({
@@ -103,7 +105,19 @@ export async function createResearchSetupPlan(input) {
     const selected = resolveSetupSkills([
         ...new Set([...BRAVE_PROFILE_SKILLS[input.evidenceProfile], ...input.skillIds]),
     ]);
-    const producerInstallTarget = agentRoutes.producerAgent === "codex" ? "codex" : "claude-code";
+    if ((agentRoutes.producerAgent === "workbuddy" || agentRoutes.producerAgent === "codebuddy") &&
+        selected.some((skill) => skill.id === "tiangong.auto-research") &&
+        !selected.some((skill) => skill.id === "tiangong.auto-research-workbuddy")) {
+        throw setupError({
+            code: "RESEARCH_SETUP_SELECTION_INVALID",
+            step: "selection",
+            reason: "A WorkBuddy/CodeBuddy native producer requires the thin sandboxed-IDE adapter beside the canonical orchestrator.",
+            minimumAction: "Select both tiangong.auto-research and tiangong.auto-research-workbuddy, or choose a Codex/Claude producer.",
+            retryCommand: "tiangong-ai research setup catalog --json",
+            exitCode: 2,
+        });
+    }
+    const producerInstallTarget = agentRoutes.producerAgent === "claude" ? "claude-code" : "codex";
     if (selected.some((skill) => skill.role === "orchestrator") &&
         !agents.includes(producerInstallTarget)) {
         throw setupError({
@@ -178,6 +192,7 @@ export async function createResearchSetupPlan(input) {
         credentialSources,
         settings,
         agentRoutes,
+        reviewerExecution,
         checks: {
             live: input.liveChecks === true,
             allowSyntheticUnstructureUpload: input.allowSyntheticUnstructureUpload === true,
@@ -1230,7 +1245,13 @@ export async function doctorResearchSetup(workspace, options = {}) {
             return `${command} is executable (${sanitizeResearchText(result.stdout.trim()).slice(0, 120)}).`;
         });
     }
-    if (platform() === "win32") {
+    if (plan.reviewerExecution.transport === "sandbox-bridge") {
+        await setupDoctorCheck(checks, "platform-sandbox", "runtime", async () => {
+            const status = await inspectReviewerBridgeStatus(root);
+            return `Owner-controlled reviewer sidecar is ready; version=${status.packageVersion}; key=${status.keyFingerprint.slice(0, 12)}.`;
+        });
+    }
+    else if (platform() === "win32") {
         const production = plan.workspace.mode === "production-research";
         checks.push({
             id: "platform-sandbox",
@@ -1281,18 +1302,26 @@ export async function doctorResearchSetup(workspace, options = {}) {
         requiredFor: ["setup", "research-core"],
     });
     const reviewerCommand = plan.agentRoutes.reviewerAgent;
-    await setupDoctorCheck(checks, `agent.${reviewerCommand}.reviewer`, "agent", async () => {
-        const result = await runner({
-            command: reviewerCommand,
-            args: ["--version"],
-            cwd: root,
-            environment: agentDoctorEnvironment(environment),
-            timeoutMs: 30_000,
+    if (plan.reviewerExecution.transport === "sandbox-bridge") {
+        await setupDoctorCheck(checks, `agent.${reviewerCommand}.reviewer`, "agent", async () => {
+            const status = await inspectReviewerBridgeStatus(root);
+            return `${reviewerCommand} reviewer is delegated to the exact-version owner-controlled sidecar (${status.keyFingerprint.slice(0, 12)}).`;
         });
-        if (result.exitCode !== 0)
-            throw new Error(`${reviewerCommand} is not executable`);
-        return `${reviewerCommand} reviewer CLI is executable (${sanitizeResearchText(result.stdout.trim()).slice(0, 160)}).`;
-    });
+    }
+    else {
+        await setupDoctorCheck(checks, `agent.${reviewerCommand}.reviewer`, "agent", async () => {
+            const result = await runner({
+                command: reviewerCommand,
+                args: ["--version"],
+                cwd: root,
+                environment: agentDoctorEnvironment(environment),
+                timeoutMs: 30_000,
+            });
+            if (result.exitCode !== 0)
+                throw new Error(`${reviewerCommand} is not executable`);
+            return `${reviewerCommand} reviewer CLI is executable (${sanitizeResearchText(result.stdout.trim()).slice(0, 160)}).`;
+        });
+    }
     await setupDoctorCheck(checks, "agent-route-config", "agent", async () => {
         const config = await loadWorkspaceConfig(root);
         if (config.producer.executionMode !== "native-host" ||
@@ -1307,7 +1336,7 @@ export async function doctorResearchSetup(workspace, options = {}) {
                 !config.reviewer.pricing)) {
             throw new Error("Production agent models and reviewed pricing are incomplete.");
         }
-        return `${config.producer.agent}(native-host) -> ${config.reviewer.agent}(headless-cli).`;
+        return `${config.producer.agent}(native-host) -> ${config.reviewer.agent}(headless-cli) via ${config.reviewerExecution.transport}.`;
     });
     const selected = plan.selection.skillIds.map(setupSkill);
     const installations = await inspectSelectedInstallations(plan, selected, environment);
@@ -1780,6 +1809,10 @@ function parseResearchSetupPlan(value) {
         Object.values(value.settings).some((item) => typeof item !== "string") ||
         !isObject(value.agentRoutes) ||
         !validAgentRoutes(value.agentRoutes) ||
+        !isObject(value.reviewerExecution) ||
+        (value.reviewerExecution.transport !== "native-direct" &&
+            value.reviewerExecution.transport !== "sandbox-bridge") ||
+        value.reviewerExecution.isolationProvider !== "platform-capsule" ||
         !isObject(value.checks) ||
         typeof value.checks.live !== "boolean" ||
         typeof value.checks.allowSyntheticUnstructureUpload !== "boolean" ||
@@ -1864,6 +1897,10 @@ function assertPlanMatchesCatalog(plan) {
     if (canonicalJson(plan.agentRoutes) !== canonicalJson(normalizeAgentRoutes(plan.agentRoutes))) {
         throw planCatalogDrift("agent routes");
     }
+    if (canonicalJson(plan.reviewerExecution) !==
+        canonicalJson(normalizeReviewerExecution(plan.reviewerExecution))) {
+        throw planCatalogDrift("reviewer execution transport");
+    }
     if (canonicalJson(plan.install.agents) !== canonicalJson(normalizeAgents(plan.install.agents))) {
         throw planCatalogDrift("agent selection order or duplicates");
     }
@@ -1893,7 +1930,7 @@ function validAgentRoutes(value) {
     ]);
     if (Object.keys(value).some((key) => !allowed.has(key)))
         return false;
-    if ((value.producerAgent !== "codex" && value.producerAgent !== "claude") ||
+    if (!["codex", "claude", "workbuddy", "codebuddy"].includes(String(value.producerAgent)) ||
         (value.reviewerAgent !== "codex" && value.reviewerAgent !== "claude") ||
         value.producerAgent === value.reviewerAgent ||
         !(value.producerModel === null || typeof value.producerModel === "string") ||
@@ -2004,6 +2041,22 @@ function normalizedCredentialSources(selected, supplied) {
     })
         .sort((left, right) => left.id.localeCompare(right.id));
 }
+function normalizeReviewerExecution(value) {
+    const transport = value?.transport ?? "native-direct";
+    const isolationProvider = value?.isolationProvider ?? "platform-capsule";
+    if ((transport !== "native-direct" && transport !== "sandbox-bridge") ||
+        isolationProvider !== "platform-capsule") {
+        throw setupError({
+            code: "RESEARCH_SETUP_REVIEW_TRANSPORT_INVALID",
+            step: "reviewer-execution",
+            reason: "Reviewer execution must explicitly use native-direct or sandbox-bridge with the platform capsule.",
+            minimumAction: "Choose native-direct on a normal host, or sandbox-bridge with an owner-started sidecar outside the IDE sandbox.",
+            retryCommand: "tiangong-ai research setup plan --help",
+            exitCode: 2,
+        });
+    }
+    return { transport, isolationProvider };
+}
 function normalizeAgentRoutes(value) {
     const producerAgent = normalizeAgentKind(value?.producerAgent ?? "codex", "producer");
     const reviewerAgent = normalizeAgentKind(value?.reviewerAgent ?? (producerAgent === "codex" ? "claude" : "codex"), "reviewer");
@@ -2029,11 +2082,15 @@ function normalizeAgentRoutes(value) {
 function normalizeAgentKind(value, label) {
     if (value === "codex" || value === "claude")
         return value;
+    if (label === "producer" && (value === "workbuddy" || value === "codebuddy"))
+        return value;
     throw setupError({
         code: "RESEARCH_SETUP_AGENT_ROUTE_INVALID",
         step: "agent-route",
-        reason: `${label} agent must be codex or claude.`,
-        minimumAction: "Choose Codex or Claude Code and keep the reviewer on the other family.",
+        reason: label === "producer"
+            ? "producer agent must be codex, claude, workbuddy, or codebuddy."
+            : "reviewer agent must be codex or claude.",
+        minimumAction: "Choose the current native producer host and keep the reviewer on an independent Codex or Claude CLI family.",
         retryCommand: "tiangong-ai research setup plan --help",
         exitCode: 2,
     });
@@ -2193,6 +2250,7 @@ async function configureAgentRoutes(plan) {
         ...config,
         producer: setupAgentRoute(config.producer, plan.agentRoutes.producerAgent, "native-host", plan.agentRoutes.producerModel, plan.agentRoutes.producerPricing),
         reviewer: setupAgentRoute(config.reviewer, plan.agentRoutes.reviewerAgent, "headless-cli", plan.agentRoutes.reviewerModel, plan.agentRoutes.reviewerPricing),
+        reviewerExecution: plan.reviewerExecution,
     };
     await writeJsonAtomic(paths.config, updated);
 }
@@ -2201,7 +2259,7 @@ function setupAgentRoute(current, agent, executionMode, plannedModel, plannedPri
     return {
         agent,
         executionMode,
-        binary: agent === "codex" ? "codex" : "claude",
+        binary: agent === "codex" ? "codex" : agent === "claude" ? "claude" : `${agent}-native-host`,
         model: plannedModel ?? (sameAgent ? current.model : null),
         effort: sameAgent ? (current.effort ?? "low") : "low",
         ...(agent === "codex" ? { verbosity: sameAgent ? (current.verbosity ?? "low") : "low" } : {}),
@@ -3959,7 +4017,7 @@ async function appendSemanticScholarLiveCheck(checks, input) {
     const headers = new Headers({ Accept: "application/json" });
     if (apiKey)
         headers.set("x-api-key", apiKey);
-    const url = "https://api.semanticscholar.org/graph/v1/paper/search?query=reproducible%20research&limit=1&fields=paperId";
+    const url = "https://api.semanticscholar.org/graph/v1/paper/DOI:10.1038/s41586-020-2649-2?fields=paperId";
     try {
         let response;
         let retryAfterSeconds = null;