agentic-engineering-harness 0.8.6 → 0.8.8

package/docs/evidence/self-hosting/delivery-policy-limitation.md

@@ -0,0 +1,11 @@
+# Self-hosting GitHub delivery policy limitation
+
+This limitation was documented before changing the delivery policy model.
+
+The project configuration currently exposes `delivery.github.enabled` as a broad switch. When enabled, `configuredExternalEffects` adds `github.issue.create`, `github.branch.create`, `git.push`, and, unless explicitly disabled, `github.pull-request.create`. A project that only wants to publish a branch and pull request cannot express that narrower scope.
+
+The accepted-delivery implementation also enters through `finalizeAcceptedIssue`. A CHANGE TaskContract without `contract.issue` returns `SKIPPED`, even if GitHub delivery is enabled and the operation reached an accepted candidate. Thus the current path cannot deliver the original self-hosting Home request, which is not issue-derived.
+
+The model now requires an explicit closed action list whenever GitHub delivery is enabled. The AEH self-hosting checkout allows only local delivery branch creation and commit, `git.push`, and pull-request create/update. Issue creation, merge, force push, branch deletion, repository deletion, and credential mutation remain outside the configured/supported action set. External actions remain subject to the current candidate, accepted AcceptanceOracle, project policy, ToolActionGate, and exact human action authorization where required.
+
+The operation finalizer now has a no-Issue CHANGE path. It creates the configured local delivery branch only after acceptance, commits through `git.commit`, pushes without force, and creates or updates the matching PR through the existing action gate. Issue-derived handoff behavior remains governed by its sealed TaskContract and separately configured actions.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "agentic-engineering-harness",
-  "version": "0.8.6",
+  "version": "0.8.8",
   "description": "OSS-first engineering harness for deterministic, spec-driven, issue-driven, audit-governed and orchestration-first multi-agent software delivery.",
   "type": "module",
   "workspaces": [

package/schemas/project.schema.json

@@ -45,7 +45,7 @@
       "benchmark": { "type": "object", "properties": { "enabled": { "type": "boolean" }, "resultsDir": { "type": "string" }, "repetitions": { "type": "integer", "minimum": 1 } } },
       "packs": { "type": "object", "additionalProperties": { "type": "object", "required": ["servers"], "properties": { "servers": { "type": "array", "items": { "type": "string" } }, "enabled": { "type": "boolean" } } } }
     } },
-    "delivery": { "type": "object", "properties": { "stateDir": { "type": "string" }, "github": { "type": "object", "properties": { "enabled": { "type": "boolean" }, "tokenEnv": { "type": "string", "minLength": 1 }, "repository": { "type": "string", "pattern": "^[^/]+/[^/]+$" }, "apiBaseUrl": { "type": "string", "format": "uri" }, "assignTokenOwner": { "type": "boolean" }, "labels": { "type": "array", "items": { "type": "string" } }, "branchPattern": { "type": "string", "minLength": 1 }, "finalizeOnAcceptance": { "type": "boolean" }, "pullRequestDraft": { "type": "boolean" }, "pullRequests": { "type": "boolean" } } }, "paseo": { "type": "object", "properties": { "enabled": { "type": "boolean" }, "createWorkspace": { "type": "boolean" }, "autoUseWorkspace": { "type": "boolean" }, "worktreeSlugPattern": { "type": "string", "minLength": 1 } } } } },
+    "delivery": { "type": "object", "properties": { "stateDir": { "type": "string" }, "github": { "type": "object", "properties": { "enabled": { "type": "boolean" }, "allowedActions": { "type": "array", "items": { "enum": ["git.branch.create","git.commit","git.push","github.issue.create","github.branch.create","github.pull-request.create"] } }, "tokenEnv": { "type": "string", "minLength": 1 }, "repository": { "type": "string", "pattern": "^[^/]+/[^/]+$" }, "apiBaseUrl": { "type": "string", "format": "uri" }, "assignTokenOwner": { "type": "boolean" }, "labels": { "type": "array", "items": { "type": "string" } }, "branchPattern": { "type": "string", "minLength": 1 }, "finalizeOnAcceptance": { "type": "boolean" }, "pullRequestDraft": { "type": "boolean" }, "pullRequests": { "type": "boolean" } }, "allOf": [{ "if": { "properties": { "enabled": { "const": true } }, "required": ["enabled"] }, "then": { "required": ["allowedActions"] } }] }, "paseo": { "type": "object", "properties": { "enabled": { "type": "boolean" }, "createWorkspace": { "type": "boolean" }, "autoUseWorkspace": { "type": "boolean" }, "worktreeSlugPattern": { "type": "string", "minLength": 1 } } } } },
     "memory": { "type": "object" },
     "codeIntelligence": { "type": "object", "properties": { "provider": { "type": "string" }, "required": { "type": "boolean" }, "graphPath": { "type": "string" }, "snapshotDir": { "type": "string" }, "codeOnly": { "type": "boolean" }, "refreshCommand": { "type": "string" }, "scheduling": { "type": "object", "properties": { "useEdges": { "type": "boolean" }, "maxGraphHops": { "type": "integer", "minimum": 1 }, "maxSharedNodes": { "type": "integer", "minimum": 0 }, "centralityConflictThreshold": { "type": "number", "minimum": 0 } } } } },
     "context": { "type": "object", "properties": {

package/templates/project.yaml

@@ -151,6 +151,7 @@ delivery:
   stateDir: .harness/delivery
   github:
     enabled: false
+    allowedActions: []
     tokenEnv: GH_TOKEN
     assignTokenOwner: true
     labels: []

package/dist/releases/release-1790879524733-14883-031f8c92/agents/waveExecutor.d.ts

@@ -1,72 +0,0 @@
-import type { AgentExecutionSelection } from "./types.js";
-import { type ParallelismPlan } from "./parallelism.js";
-import { type PlannerOutput, type WorkUnitOutput } from "./outputContracts.js";
-import type { ControlPlaneSnapshot } from "../core/controlPlane.js";
-import type { HarnessProjectConfig, TaskContract, ValidationReport, WorkerSession } from "../core/types.js";
-import { type ExecutionBlueprint, type ParticipantAssignmentV1 } from "../architecture/participantPlan.js";
-import type { ExecutionCatalogV1 } from "../architecture/executionCatalog.js";
-import type { CandidateImpactAssessmentRuntimeV1, CandidateImpactV1, ChangeSetV1 } from "../candidates/assembler.js";
-import type { CandidateRevisionV1 } from "../operations/v2Contracts.js";
-import { resolveKnowledgeGate, type KnowledgeCacheV1, type KnowledgeLookupResultV1, type KnowledgeModeV1, type KnowledgePackV1, type KnowledgeResolutionV1 } from "../knowledge/index.js";
-import type { ProjectStackProfileV1 } from "../participants/stack.js";
-export interface DelegationExecutionResult {
-    task: WorkUnitOutput;
-    session: WorkerSession;
-    changedFiles: string[];
-    patch: string;
-    status: "PASS" | "FAIL";
-    message?: string;
-    distributed?: boolean;
-    candidate?: CandidateRevisionV1;
-    impact?: CandidateImpactV1;
-    changeSet?: ChangeSetV1;
-}
-export interface WaveExecutionSummary {
-    wave: number;
-    taskIds: string[];
-    status: "PASS" | "FAIL";
-    results: DelegationExecutionResult[];
-    barrier?: ValidationReport;
-}
-export interface PlannerWaveResult {
-    used: boolean;
-    plan?: PlannerOutput;
-    blueprint?: ExecutionBlueprint;
-    schedule?: ParallelismPlan;
-    waves: WaveExecutionSummary[];
-    sessions: WorkerSession[];
-    aggregateSession?: WorkerSession;
-    report?: ValidationReport;
-}
-export declare function executePlannerWaves(input: {
-    root: string;
-    stateRoot: string;
-    config: HarnessProjectConfig;
-    contract: TaskContract;
-    plannerSelection?: AgentExecutionSelection;
-    librarianSelection?: AgentExecutionSelection;
-    implementationSelection: AgentExecutionSelection;
-    executionCatalog: ExecutionCatalogV1;
-    controller?: ControlPlaneSnapshot;
-    precomputedPlan?: PlannerOutput;
-    semanticAssessment?: CandidateImpactAssessmentRuntimeV1;
-    projectStack?: ProjectStackProfileV1;
-    knowledgeMode?: KnowledgeModeV1;
-    knowledgeCache?: KnowledgeCacheV1;
-    knowledgeResolutions?: readonly KnowledgeResolutionV1[];
-    knowledgeLookup?: (gap: Parameters<NonNullable<Parameters<typeof resolveKnowledgeGate>[0]["lookup"]>>[0]) => Promise<KnowledgePackV1 | KnowledgeLookupResultV1>;
-    revalidate: () => Promise<ValidationReport>;
-}): Promise<PlannerWaveResult>;
-export declare function resolvePlannerKnowledge(plan: PlannerOutput, input: Pick<Parameters<typeof executePlannerWaves>[0], "contract" | "root" | "config" | "librarianSelection" | "knowledgeMode" | "knowledgeCache" | "knowledgeResolutions" | "knowledgeLookup"> & Partial<Pick<Parameters<typeof executePlannerWaves>[0], "stateRoot">>): Promise<KnowledgeResolutionV1[]>;
-export declare function validatePlannerWavePlan(contract: TaskContract, plan: PlannerOutput): string[];
-export declare function selectionForParticipant(base: AgentExecutionSelection, assignment: ParticipantAssignmentV1, catalog: ExecutionCatalogV1): AgentExecutionSelection;
-/**
- * AEH-V2-0129: `workflow.planning.worktreeIsolation` defaults to true and is honored by per-unit
- * candidate worktrees. When it is explicitly disabled, same-workspace writers are serialized
- * deterministically (one work unit at a time) instead of running parallel writers, because
- * DELEGATED candidate assembly always captures one ChangeSet per unit.
- */
-export declare function waveConcurrencyV1(planning: {
-    worktreeIsolation?: boolean;
-    maxWaveConcurrency?: number;
-} | undefined, taskCount: number): number;