axstack 0.56.0 → 0.56.1

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "axstack",
-  "version": "0.56.0",
+  "version": "0.56.1",
   "description": "Axstack installer and setup CLI: installs owned chat skills and role data, configures supported harness settings, and checks T3 Code capabilities.",
   "keywords": [
     "claude-code",

package/skills/axstack/references/fleet-dispatch.md

@@ -25,7 +25,7 @@ Synthetic evidence can pass binding checks; helpers cannot authenticate it.
 3. Keep the model/effort/provider pins from the run; do not re-resolve to another
    model when quota/auth/timeout fails. Missing native `t3_thread_configuration`
    means unavailable effective fields stay unknown. Catalog runtimeModes advertise
-   support; they do not prove effective access. Native task/thread facts supply
+   provider restrictions; they do not prove effective access. Native task/thread facts supply
    only the fields actually returned. A worker assertion is not native readback.
 4. Normalize current driver assignments and the pending batch as below. Sample
    telemetry with C2's bounded command, then recompute C1 immediately before each
@@ -71,7 +71,25 @@ excludes the forwarding environmentId, and evidence points to the preserved raw
 native call/result. environment/project/capabilities are read on the selected
 host; links are read on origin. The capabilities envelope uses `valueText` for
 exact raw catalog bytes instead of value. Project repositoryIdentity.canonicalKey
-must match the requested repositoryId. Unknown mappings hold rather than guessing.
+must match the requested repositoryId. If project-read identity is null/omitted,
+`projectList` may carry an ordered array of `t3_project_list` read envelopes on
+that same environment. Collect from cursor 0 through native nextCursor:null,
+recording actual cursor/limit arguments (native defaults: 0/20, limit at most 100).
+Every page must join without gaps, extra arguments or duplicate project IDs.
+The selected project's ID and workspaceRoot must equal project-read; every
+available canonicalKey must equal repositoryId, including when both reads have
+identity. Missing identity in both, incomplete pagination and any conflict hold.
+
+For observed T3 0.1.5 native Codex/Claude drivers, omitted provider runtimeModes
+means no provider restriction: native resolveRuntimeMode and RuntimePolicy
+preserve the requested mode. Bind this only with catalog runtimeMode equal to
+the request, exactly one selected provider, canRunChildTask:true and an explicit
+empty constraints array. Explicit mode restrictions must include the requested
+mode. Unknown version/driver omission semantics, missing caller authority,
+unavailable providers or restrictions hold. This is preflight support, never
+proof of a child's effective mode; terminal receipts still require actual native
+readback. Preserve the exact catalog bytes/digest; do not synthesize runtimeModes
+or repositoryIdentity in the saved raw reads. Unknown mappings hold rather than guessing.
 The pure `inspectDestination` API returns per-term pass/fail/unknown with evidence;
 `dispatch-plan` holds on a failed/unknown term. This is supplied binding proof only.
 
@@ -131,7 +149,51 @@ For isolated review include checkout with those fields, candidate/base and readb
 Never infer local file existence from a remote absolute path.
 Requested settings remain separate from effective native status.providerInstanceId,
 model/options and thread.providerInstanceId/model/runtimeMode. Missing effective
-options or mode is unknown and holds required verification.
+options or mode is unknown and holds required verification, except for the bounded
+T3 0.1.5 initial remote-launch join below.
+
+### T3 0.1.5 initial remote receipt
+
+The remote `readRemoteTask` emitter omits options and returns null childRunId and
+latestTerminalRunId. Preserve those raw omissions/nulls. A current family shell
+is current thread metadata, not an immutable settings record for an older run.
+Never use it to authorize a continuation from an origin summary lacking a run ID.
+
+For the sole initial remote run, optional receipt `nativeFamily` can corroborate
+settings and run identity. The driver acquires `orchestration.getThreadFamily`
+with exact `{threadId}` on the actual destination using an authenticated native
+RPC read with `orchestration:read` scope. This is metadata access, not agent
+execution or an alternate worker launch path. Record host/environment identity,
+authenticated acquisition provenance, exact request/result, and independently
+observed server version. Do not execute an agent through SSH/CLI to obtain it.
+Temporary read sessions require their authorized lifecycle and revocation; never
+put tokens/tickets into evidence. This contract grants no auth/session authority.
+
+The envelope is `{tool:"orchestration.getThreadFamily",transport:"t3-native-rpc",
+environmentId,serverVersion:"0.1.5",args:{threadId},observedAt,evidence,value}`.
+`value` is the unmodified native `{snapshotSequence,threads}` response. Retain
+raw bytes separately, including any diagnostic/revocation trailer; parse only
+the JSON response into a separate file. Never rewrite the raw response as JSON.
+The version must also match selected destination versions; observe the family
+after thread/wait and no later than receipt evaluation. Missing provenance holds.
+
+Require a unique child with the selected project, exact title/current run,
+provider/model/options/mode and delegatedFrom origin environment/thread. Every
+returned family member must explicitly have idle/completed status, null active
+run/request, zero pending guest input and an empty pendingBackgroundTasks array.
+Unknown or live descendants hold even when remote status claims no pending child.
+
+The fallback requires native thread runCount:1, exactly one recentRuns row at
+ordinal:1, null local child IDs/childRunIds on status/submission, null origin
+latestTerminalRunId, and identical origin/destination final text. Existing
+current-run, completed terminal, marker, question and host/path checks still
+apply. Explicit status options or run IDs cannot be overwritten by family facts.
+T3 remote launch forwards the accepted explicit model selection and uses it for
+both thread creation and the initial message; this is the source-backed scope
+of the join. More runs or missing counts/ordinals hold. Later continuations need
+actual result-run/per-run settings provenance; repeated matching markers or
+current family settings are insufficient. Complete native statuses retain their
+existing run-ID path. Saved inputs cannot authenticate their own provenance.
 
 `inspectFleetReceipt(receipt,{attempt,recommendation,recommendationJSON,now})`
 returns terms, never authority. Existing dispatch-plan --verify can additionally

package/skills/axstack/references/fleet-route-schema.md

@@ -168,6 +168,11 @@ Optional `nativeInventory` is normalized before counts under
 Unknown native totals are null; balance ranking uses the separately labelled
 pendingLowerBound. Counts also retain inventoryReasons/evidence; flags.countsUnknown follows normalized status.
 Optional `nativeDestination` carries observed native forwarded preflight reads.
+Optional `nativeDestination.projectList` is the complete ordered native project-list
+page envelopes used to join a cold project-read repository identity; preserve
+raw reads and catalogs. Conflicting identities/workspaces or incomplete pages hold.
+T3 0.1.5 native provider mode omissions require the documented caller/provider
+authority evidence, never synthesized catalog fields.
 The same reference defines terminal receipt validation and its supplied-evidence
 limitation. Live drivers require these observed facts, not synthetic caller claims.
 Legacy normalized input remains unchanged. Remote coordinator remains disabled.

package/skills/axstack/scripts/fleet-destination.js

@@ -7,6 +7,9 @@ export function inspectDestination(observation, recommendation, capabilitiesText
     state: pass ? 'pass' : missing ? 'unknown' : 'fail', evidence: evidence ?? null });
   const s = recommendation.selected;
   const o = observation ?? {};
+  const observed = (read, tool, environmentId, args) => read?.tool === tool
+    && read?.environmentId === environmentId && canonical(read?.args) === canonical(args)
+    && time(read?.observedAt) && read.observedAt <= now && text(read?.evidence);
   for (const [name, tool, environmentId, args] of [
     ['environment', 't3_environment_read', s.environmentId, {}],
     ['project', 't3_project_read', s.environmentId, { projectId: s.projectId }],
@@ -14,22 +17,58 @@ export function inspectDestination(observation, recommendation, capabilitiesText
     ['links', 't3_environment_links', recommendation.originEnvironmentId, {}],
   ]) {
     const read = o[name];
-    term('destination-observation', read?.tool === tool && read?.environmentId === environmentId
-      && canonical(read?.args) === canonical(args) && time(read?.observedAt)
-      && read.observedAt <= now && text(read?.evidence), read);
+    term('destination-observation', observed(read, tool, environmentId, args), read);
   }
   term('destination-identity', o.environment?.value?.environmentId === s.environmentId,
     o.environment?.value?.environmentId);
   term('destination-project', o.project?.value?.id === s.projectId && text(o.project?.value?.workspaceRoot),
     o.project?.value);
-  term('destination-repository', o.project?.value?.repositoryIdentity?.canonicalKey === s.repositoryId,
-    o.project?.value?.repositoryIdentity);
+  const project = o.project?.value;
+  let listed;
+  if (o.projectList !== undefined) {
+    const pages = o.projectList;
+    const projects = [];
+    let cursor = 0;
+    let complete = Array.isArray(pages) && pages.length > 0;
+    if (complete) for (const page of pages) {
+      const args = page?.args;
+      const limit = args?.limit ?? 20;
+      const rows = page?.value?.projects;
+      const next = page?.value?.nextCursor;
+      complete &&= cursor !== null && observed(page, 't3_project_list', s.environmentId, {
+        ...(args?.cursor === undefined ? {} : { cursor }),
+        ...(args?.limit === undefined ? {} : { limit }),
+      }) && (args?.cursor ?? 0) === cursor && Number.isInteger(limit) && limit >= 1 && limit <= 100
+        && Array.isArray(rows) && rows.length <= limit
+        && (next === null || (next === cursor + limit && rows.length === limit));
+      if (Array.isArray(rows)) projects.push(...rows);
+      cursor = next;
+    }
+    listed = projects.find((p) => p?.id === s.projectId);
+    term('destination-project-list', complete && cursor === null
+      && projects.every((p) => text(p?.id)) && new Set(projects.map((p) => p?.id)).size === projects.length
+      && listed?.id === s.projectId && listed.id === project?.id && listed?.workspaceRoot === project?.workspaceRoot, pages);
+  }
+  // ProjectService.listPage resolves the cold identity cache; getById need not.
+  const identities = [project?.repositoryIdentity, listed?.repositoryIdentity].filter((v) => v != null);
+  term('destination-repository', identities.length > 0
+    && identities.every((v) => v.canonicalKey === s.repositoryId), identities,
+  identities.length === 0);
   term('destination-catalog', o.capabilities?.valueText === capabilitiesText, o.capabilities?.valueText);
   const catalog = JSON.parse(capabilitiesText);
-  const provider = catalog.providers?.find((v) => v.providerInstanceId === recommendation.request.providerInstanceId);
-  term('destination-execution', provider?.canRunChildTask === true
-    && provider?.runtimeModes?.includes(recommendation.request.runtimeMode), provider,
-  provider?.canRunChildTask == null || !Array.isArray(provider?.runtimeModes));
+  const providers = catalog.providers?.filter((v) => v.providerInstanceId === recommendation.request.providerInstanceId);
+  const provider = providers?.length === 1 ? providers[0] : undefined;
+  const mode = recommendation.request.runtimeMode;
+  // T3 0.1.5 resolveRuntimeMode/RuntimePolicy preserve modes without restrictions.
+  // Limit omission semantics to the observed version and native drivers we checked.
+  const unrestricted = provider?.runtimeModes === undefined && o.environment?.value?.serverVersion === '0.1.5'
+    && ['codex', 'claudeAgent'].includes(provider?.driverKind);
+  const supported = unrestricted || (Array.isArray(provider?.runtimeModes) && provider.runtimeModes.includes(mode));
+  term('destination-execution', provider?.canRunChildTask === true && supported
+    && catalog.runtimeMode === mode && Array.isArray(provider?.constraints) && provider.constraints.length === 0,
+  { provider, runtimeMode: catalog.runtimeMode, serverVersion: o.environment?.value?.serverVersion },
+  providers?.length === 0 || provider?.canRunChildTask == null || catalog.runtimeMode == null
+    || provider?.constraints == null || (provider?.runtimeModes === undefined && !unrestricted));
   const local = s.environmentId === recommendation.originEnvironmentId;
   const link = o.links?.value?.links?.find((v) => v.environmentId === s.environmentId);
   term('destination-access', o.links?.value?.environmentId === recommendation.originEnvironmentId

package/skills/axstack/scripts/fleet-native-receipt.js

@@ -0,0 +1,35 @@
+// T3 0.1.5 remote status omits options and a result-run ID. Never synthesize them.
+import { canonical, text, time } from './fleet-config.js';
+
+export function inspectNativeFamily(receipt, expected) {
+  const r = receipt;
+  const n = r.nativeFamily;
+  const s = expected.recommendation.selected;
+  const a = expected.attempt;
+  const child = r.status?.value?.remoteChild?.threadId;
+  const current = r.thread?.value?.thread?.latestRunId;
+  const terms = [];
+  const term = (pass, evidence) => terms.push({ code: 'receipt-native-family',
+    state: pass ? 'pass' : evidence == null ? 'unknown' : 'fail', evidence: evidence ?? null });
+  term(n?.tool === 'orchestration.getThreadFamily' && n?.transport === 't3-native-rpc'
+    && n?.environmentId === s.environmentId && n?.serverVersion === '0.1.5'
+    && s.versions?.t3 === n.serverVersion && canonical(n?.args) === canonical({ threadId: child })
+    && time(n?.observedAt) && n.observedAt <= expected.now
+    && n.observedAt >= r.thread?.observedAt && n.observedAt >= r.terminal?.observedAt
+    && text(n?.evidence), n);
+  const rows = n?.value?.threads;
+  const matches = Array.isArray(rows) ? rows.filter((v) => v?.id === child) : [];
+  term(time(n?.value?.snapshotSequence) && Array.isArray(rows)
+    && rows.every((v) => text(v?.id)) && new Set(rows.map((v) => v.id)).size === rows.length
+    && matches.length === 1, n?.value);
+  const shell = matches[0];
+  term(shell?.id === child && shell?.projectId === s.projectId && shell?.title === a?.title
+    && shell?.latestRunId === current && text(current)
+    && shell?.delegatedFrom?.environmentId === a?.origin?.environmentId
+    && shell?.delegatedFrom?.threadId === a?.origin?.threadId, shell);
+  term(shell?.status === 'completed' && Array.isArray(rows)
+    && rows.every((v) => ['completed', 'idle'].includes(v?.status) && v?.activeRunId === null
+      && Array.isArray(v?.pendingBackgroundTasks) && v.pendingBackgroundTasks.length === 0
+      && v?.pendingRuntimeRequest === null && v?.pendingGuestMessageCount === 0), rows);
+  return { terms, shell };
+}

package/skills/axstack/scripts/fleet-receipt.js

@@ -1,5 +1,6 @@
 // Saved evidence validator. A pass binds supplied facts; it cannot authenticate them.
 import { canonical, record, text, time } from './fleet-config.js';
+import { inspectNativeFamily } from './fleet-native-receipt.js';
 
 function options(value) {
   if (!Array.isArray(value)) return record(value) ? value : null;
@@ -57,12 +58,30 @@ export function inspectFleetReceipt(receipt, expected) {
     && target?.providerInstanceId === request.providerInstanceId && target?.model === request.model
     && same(options(target?.options), request.options) && r.requested?.runtimeMode === request.runtimeMode,
   r.requested);
+  const native = r.nativeFamily === undefined ? null : inspectNativeFamily(r, expected);
+  if (native) terms.push(...native.terms);
+  const shell = native?.shell;
+  const nativeValid = remote && native?.terms.every((t) => t.state === 'pass');
+  if (native) term('receipt-effective', shell?.providerInstanceId === request.providerInstanceId
+    && shell?.modelSelection?.instanceId === request.providerInstanceId
+    && shell?.modelSelection?.model === request.model
+    && Array.isArray(shell?.modelSelection?.options)
+    && same(options(shell?.modelSelection?.options), request.options)
+    && shell?.runtimeMode === request.runtimeMode, shell?.modelSelection);
+  const runs = r.thread?.value?.recentRuns;
+  // Without the origin result-run ID, only the sole initial run can own its summary.
+  const initial = nativeValid && status?.childThreadId === null && submitted?.childThreadId === null
+    && status?.childRunId === null && submitted?.childRunId === null
+    && status?.latestTerminalRunId === null && thread?.runCount === 1
+    && Array.isArray(runs) && runs.length === 1 && runs[0]?.ordinal === 1;
+  const effectiveOptions = status?.options === undefined && initial
+    ? shell?.modelSelection?.options : status?.options;
   term('receipt-effective', status?.providerInstanceId === request.providerInstanceId
     && status?.model === request.model && thread?.providerInstanceId === request.providerInstanceId
-    && thread?.model === request.model && same(options(status?.options), request.options)
+    && thread?.model === request.model && same(options(effectiveOptions), request.options)
     && thread?.runtimeMode === request.runtimeMode, { provider: status?.providerInstanceId,
-    model: status?.model, options: status?.options ?? null, runtimeMode: thread?.runtimeMode },
-  status?.options == null || thread?.runtimeMode == null);
+    model: status?.model, options: effectiveOptions ?? null, runtimeMode: thread?.runtimeMode },
+  effectiveOptions == null || thread?.runtimeMode == null);
   const terminal = r.terminal?.value;
   term('receipt-terminal', status?.status === 'completed' && status?.latestTerminalStatus === 'completed'
     && status?.workState === 'result_available' && status?.hasPendingChildRuns === false
@@ -84,9 +103,8 @@ export function inspectFleetReceipt(receipt, expected) {
     && questions.value.requests.length === 0, questions,
   questions == null || questions.value?.requests === undefined);
   const current = thread?.latestRunId;
-  const runs = r.thread?.value?.recentRuns;
   const latest = Array.isArray(runs) ? runs.find((v) => v.runId === current) : null;
-  term('receipt-run', text(current) && status?.latestTerminalRunId === current
+  term('receipt-run', text(current) && (status?.latestTerminalRunId === current || initial)
     && terminal?.threadId === child(status) && terminal?.runId === current
     && (!terminal?.resultRun || (terminal.resultRun.runId === current && terminal.resultRun.status === 'completed'))
     && (!remote || (r.remoteChild?.environmentId === s.environmentId
@@ -94,7 +112,7 @@ export function inspectFleetReceipt(receipt, expected) {
     && latest?.status === 'completed' && Number.isSafeInteger(latest?.ordinal)
     && runs.every((v) => Number.isSafeInteger(v.ordinal) && v.ordinal <= latest.ordinal),
   { current, originTerminal: status?.latestTerminalRunId, terminal, runs },
-  !current || !status?.latestTerminalRunId || !terminal?.runId || !Array.isArray(runs)
+  !current || (!status?.latestTerminalRunId && !initial) || !terminal?.runId || !Array.isArray(runs)
     || (remote && !r.remoteChild?.runId));
   const marker = `AXSTACK-DONE key=${a?.key} head=${a?.candidate} report=${r.evidence?.path}`;
   const finalMarker = (value) => {
@@ -110,7 +128,8 @@ export function inspectFleetReceipt(receipt, expected) {
   const items = r.thread?.value?.items;
   const final = Array.isArray(items) ? items.filter((v) => v.runId === current && v.createdBy === 'agent').at(-1) : null;
   term('receipt-marker', /^[a-f0-9]{40}$/.test(a?.candidate ?? '')
-    && finalMarker(status?.latestTerminalSummary) === marker && finalMarker(final?.text) === marker,
+    && finalMarker(status?.latestTerminalSummary) === marker && finalMarker(final?.text) === marker
+    && (!initial || status?.latestTerminalSummary === final?.text),
   { origin: status?.latestTerminalSummary, destination: final?.text });
   term('receipt-host-path', r.evidence?.hostId === s.hostId && r.evidence?.environmentId === s.environmentId
     && absolute(r.evidence?.path) && finalMarker(status?.latestTerminalSummary)?.endsWith(` report=${r.evidence.path}`), r.evidence);