devrites 3.2.27 → 4.0.0

package/scripts/live-hosts/agent-result.schema.json

@@ -1,231 +0,0 @@
-{
-  "$schema": "https://json-schema.org/draft/2020-12/schema",
-  "type": "object",
-  "additionalProperties": false,
-  "required": [
-    "result_version",
-    "run_id",
-    "cell_id",
-    "host",
-    "role",
-    "status",
-    "baseline_id",
-    "scope_id",
-    "budget",
-    "side_effects",
-    "payload_type",
-    "execution",
-    "signals",
-    "usage",
-    "dispatch_reason_id",
-    "result_reason_id",
-    "outcome",
-    "terminal_sentinel",
-    "host_version",
-    "model"
-  ],
-  "properties": {
-    "result_version": {
-      "const": "agent-result/v1"
-    },
-    "run_id": {
-      "type": "string",
-      "pattern": "^drv-run-v1:[0-9a-f]{32}$"
-    },
-    "cell_id": {
-      "type": "string"
-    },
-    "host": {
-      "enum": [
-        "claude",
-        "codex"
-      ]
-    },
-    "role": {
-      "type": "string"
-    },
-    "status": {
-      "enum": [
-        "complete",
-        "partial",
-        "blocked",
-        "failed"
-      ]
-    },
-    "baseline_id": {
-      "type": "string"
-    },
-    "scope_id": {
-      "type": "string",
-      "pattern": "^[0-9a-f]{64}$"
-    },
-    "budget": {
-      "type": "object",
-      "additionalProperties": false,
-      "required": [
-        "files_used",
-        "loaded_lines_used",
-        "result_lines_used"
-      ],
-      "properties": {
-        "files_used": {
-          "type": "integer",
-          "minimum": 0
-        },
-        "loaded_lines_used": {
-          "type": "integer",
-          "minimum": 0
-        },
-        "result_lines_used": {
-          "type": "integer",
-          "minimum": 0
-        }
-      }
-    },
-    "side_effects": {
-      "type": "object",
-      "additionalProperties": false,
-      "required": [
-        "repo_writes",
-        "scratch_write_count"
-      ],
-      "properties": {
-        "repo_writes": {
-          "type": "array",
-          "items": {
-            "type": "object",
-            "additionalProperties": false,
-            "required": [
-              "path",
-              "kind",
-              "sha256"
-            ],
-            "properties": {
-              "path": {
-                "type": "string"
-              },
-              "kind": {
-                "enum": [
-                  "file",
-                  "symlink",
-                  "deleted"
-                ]
-              },
-              "sha256": {
-                "type": "string",
-                "pattern": "^[0-9a-f]{64}$"
-              }
-            }
-          }
-        },
-        "scratch_write_count": {
-          "type": "integer",
-          "minimum": 0
-        }
-      }
-    },
-    "payload_type": {
-      "enum": [
-        "review-findings",
-        "wright-report"
-      ]
-    },
-    "execution": {
-      "type": "object",
-      "additionalProperties": false,
-      "required": [
-        "mode",
-        "guard_strength",
-        "independence"
-      ],
-      "properties": {
-        "mode": {
-          "enum": [
-            "named",
-            "generic",
-            "inline",
-            "none"
-          ]
-        },
-        "guard_strength": {
-          "enum": [
-            "enforced",
-            "observed",
-            "unavailable",
-            "bypassed"
-          ]
-        },
-        "independence": {
-          "type": "boolean"
-        }
-      }
-    },
-    "signals": {
-      "type": "array",
-      "items": {
-        "type": "string"
-      },
-      "uniqueItems": true
-    },
-    "usage": {
-      "type": "object",
-      "additionalProperties": false,
-      "required": [
-        "input_tokens",
-        "output_tokens",
-        "cost_usd",
-        "cost_provenance"
-      ],
-      "properties": {
-        "input_tokens": {
-          "type": "integer",
-          "minimum": 0
-        },
-        "output_tokens": {
-          "type": "integer",
-          "minimum": 0
-        },
-        "cost_usd": {
-          "type": [
-            "string",
-            "null"
-          ],
-          "pattern": "^[0-9]+(\\.[0-9]+)?$"
-        },
-        "cost_provenance": {
-          "enum": [
-            "provider-reported",
-            "unavailable"
-          ]
-        }
-      }
-    },
-    "dispatch_reason_id": {
-      "type": "string",
-      "pattern": "^DRV-[A-Z0-9-]+$"
-    },
-    "result_reason_id": {
-      "type": "string",
-      "pattern": "^DRV-[A-Z0-9-]+$"
-    },
-    "outcome": {
-      "enum": [
-        "passed",
-        "denied",
-        "unavailable"
-      ]
-    },
-    "terminal_sentinel": {
-      "enum": [
-        "complete",
-        "interrupted"
-      ]
-    },
-    "host_version": {
-      "type": "string"
-    },
-    "model": {
-      "type": "string"
-    }
-  }
-}

package/scripts/live-hosts/claude.sh

@@ -1,87 +0,0 @@
-#!/usr/bin/env bash
-set -euo pipefail
-
-DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd -P)"
-# shellcheck disable=SC1091
-source "$DIR/common.sh"
-CONTRACT_HELPER="$DIR/host-transport.py"
-
-case "${1:-}" in
-  version)
-    contract_version claude
-    ;;
-  run)
-    ;;
-  *)
-    contract_die "expected version or run"
-    ;;
-esac
-
-contract_prepare_run
-if [ -n "${DEVRITES_CONTRACT_FAKE_HOST:-}" ]; then
-  contract_run_fake
-fi
-contract_read_auth
-actual_version="$(env -i "PATH=$PATH" "LANG=C" "LC_ALL=C" claude --version 2>/dev/null)" \
-  || contract_die "Claude version preflight failed"
-[ "$actual_version" = "$DEVRITES_CONTRACT_HOST_VERSION_PIN" ] \
-  || contract_die "Claude version pin changed"
-
-simulate="$(python3 "$CONTRACT_HELPER" field simulate)"
-role_class="$(python3 "$CONTRACT_HELPER" field role_class)"
-tools="Agent,Read,Glob,Grep"
-if [ "$role_class" = "wright" ]; then
-  tools="$tools,Edit,Write,Bash"
-fi
-if [ "$simulate" = "dispatch-unavailable" ]; then
-  exit 0
-fi
-schema="$(cat "$DIR/agent-result.schema.json")"
-mkdir -p "$XDG_CONFIG_HOME/claude"
-
-trap 'contract_interrupt_result; exit 130' INT TERM
-cd "$DEVRITES_ROOT"
-set +e
-env -i \
-  "PATH=$PATH" "LANG=C" "LC_ALL=C" "PYTHONDONTWRITEBYTECODE=1" \
-  "DEVRITES_CONTRACT_PACKET=$DEVRITES_CONTRACT_PACKET" \
-  python3 "$CONTRACT_HELPER" render |
-  env -i \
-    "PATH=$PATH" "LANG=C" "LC_ALL=C" \
-    "HOME=$HOME" "TMPDIR=$TMPDIR" \
-    "XDG_CONFIG_HOME=$XDG_CONFIG_HOME" "XDG_STATE_HOME=$XDG_STATE_HOME" \
-    "CLAUDE_CONFIG_DIR=$XDG_CONFIG_HOME/claude" \
-    "CLAUDE_CODE_DISABLE_NONESSENTIAL_TRAFFIC=1" \
-    "ANTHROPIC_API_KEY=$CONTRACT_AUTH_VALUE" \
-    "DEVRITES_ROOT=$DEVRITES_ROOT" \
-    "DEVRITES_AGENT_SCRATCH=$DEVRITES_AGENT_SCRATCH" \
-    "DEVRITES_RUN_ID=$DEVRITES_RUN_ID" \
-    claude -p \
-      --output-format json \
-      --json-schema "$schema" \
-      --model "$DEVRITES_CONTRACT_MODEL" \
-      --max-budget-usd "$DEVRITES_CONTRACT_MAX_COST_USD" \
-      --permission-mode dontAsk \
-      --tools "$tools" \
-      --setting-sources project \
-      --settings '{}' \
-      --strict-mcp-config \
-      --mcp-config '{"mcpServers":{}}' \
-      --no-chrome \
-      --no-session-persistence |
-  env -i \
-    "PATH=$PATH" "LANG=C" "LC_ALL=C" "PYTHONDONTWRITEBYTECODE=1" \
-    "DEVRITES_CONTRACT_PACKET=$DEVRITES_CONTRACT_PACKET" \
-    "DEVRITES_CONTRACT_RESULT=$DEVRITES_CONTRACT_RESULT" \
-    "DEVRITES_CONTRACT_HOST_VERSION_PIN=$DEVRITES_CONTRACT_HOST_VERSION_PIN" \
-    "DEVRITES_CONTRACT_MODEL=$DEVRITES_CONTRACT_MODEL" \
-    python3 "$CONTRACT_HELPER" normalize
-pipeline=("${PIPESTATUS[@]}")
-set -e
-host_rc="${pipeline[1]:-2}"
-normalize_rc="${pipeline[2]:-2}"
-[ "$normalize_rc" -eq 0 ] || exit 2
-if [ "$host_rc" -eq 130 ]; then
-  contract_interrupt_result
-fi
-exit "$host_rc"

package/scripts/live-hosts/codex.sh

@@ -1,85 +0,0 @@
-#!/usr/bin/env bash
-set -euo pipefail
-
-DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd -P)"
-# shellcheck disable=SC1091
-source "$DIR/common.sh"
-CONTRACT_HELPER="$DIR/host-transport.py"
-
-case "${1:-}" in
-  version)
-    contract_version codex
-    ;;
-  run)
-    ;;
-  *)
-    contract_die "expected version or run"
-    ;;
-esac
-
-contract_prepare_run
-if [ -n "${DEVRITES_CONTRACT_FAKE_HOST:-}" ]; then
-  contract_run_fake
-fi
-contract_read_auth
-actual_version="$(env -i "PATH=$PATH" "LANG=C" "LC_ALL=C" codex --version 2>/dev/null)" \
-  || contract_die "Codex version preflight failed"
-[ "$actual_version" = "$DEVRITES_CONTRACT_HOST_VERSION_PIN" ] \
-  || contract_die "Codex version pin changed"
-
-simulate="$(python3 "$CONTRACT_HELPER" field simulate)"
-if [ "$simulate" = "dispatch-unavailable" ]; then
-  exit 0
-fi
-role_class="$(python3 "$CONTRACT_HELPER" field role_class)"
-sandbox="read-only"
-if [ "$role_class" = "wright" ]; then
-  sandbox="workspace-write"
-fi
-mkdir -p "$XDG_CONFIG_HOME/codex"
-
-trap 'contract_interrupt_result; exit 130' INT TERM
-cd "$DEVRITES_ROOT"
-set +e
-env -i \
-  "PATH=$PATH" "LANG=C" "LC_ALL=C" "PYTHONDONTWRITEBYTECODE=1" \
-  "DEVRITES_CONTRACT_PACKET=$DEVRITES_CONTRACT_PACKET" \
-  python3 "$CONTRACT_HELPER" render |
-  env -i \
-    "PATH=$PATH" "LANG=C" "LC_ALL=C" \
-    "HOME=$HOME" "TMPDIR=$TMPDIR" \
-    "XDG_CONFIG_HOME=$XDG_CONFIG_HOME" "XDG_STATE_HOME=$XDG_STATE_HOME" \
-    "CODEX_HOME=$XDG_CONFIG_HOME/codex" \
-    "OPENAI_API_KEY=$CONTRACT_AUTH_VALUE" \
-    "DEVRITES_ROOT=$DEVRITES_ROOT" \
-    "DEVRITES_AGENT_SCRATCH=$DEVRITES_AGENT_SCRATCH" \
-    "DEVRITES_RUN_ID=$DEVRITES_RUN_ID" \
-    codex exec \
-      --json \
-      --ephemeral \
-      --strict-config \
-      --ignore-user-config \
-      --skip-git-repo-check \
-      --dangerously-bypass-hook-trust \
-      --sandbox "$sandbox" \
-      --model "$DEVRITES_CONTRACT_MODEL" \
-      --output-schema "$DIR/agent-result.schema.json" \
-      -c shell_environment_policy.inherit=none \
-      -C "$DEVRITES_ROOT" \
-      - |
-  env -i \
-    "PATH=$PATH" "LANG=C" "LC_ALL=C" "PYTHONDONTWRITEBYTECODE=1" \
-    "DEVRITES_CONTRACT_PACKET=$DEVRITES_CONTRACT_PACKET" \
-    "DEVRITES_CONTRACT_RESULT=$DEVRITES_CONTRACT_RESULT" \
-    "DEVRITES_CONTRACT_HOST_VERSION_PIN=$DEVRITES_CONTRACT_HOST_VERSION_PIN" \
-    "DEVRITES_CONTRACT_MODEL=$DEVRITES_CONTRACT_MODEL" \
-    python3 "$CONTRACT_HELPER" normalize
-pipeline=("${PIPESTATUS[@]}")
-set -e
-host_rc="${pipeline[1]:-2}"
-normalize_rc="${pipeline[2]:-2}"
-[ "$normalize_rc" -eq 0 ] || exit 2
-if [ "$host_rc" -eq 130 ]; then
-  contract_interrupt_result
-fi
-exit "$host_rc"

package/scripts/live-hosts/common.sh

@@ -1,113 +0,0 @@
-#!/usr/bin/env bash
-set -euo pipefail
-
-contract_die() {
-  printf '%s\n' "agent-contract host wrapper: $1" >&2
-  exit 2
-}
-
-contract_require() {
-  local name="$1"
-  [ -n "${!name:-}" ] || contract_die "missing isolated run input"
-}
-
-contract_path_within() {
-  local child="$1" parent="$2"
-  case "$child/" in
-    "$parent"/*) return 0 ;;
-    *) return 1 ;;
-  esac
-}
-
-contract_prepare_run() {
-  local name
-  for name in \
-    HOME TMPDIR XDG_CONFIG_HOME XDG_STATE_HOME \
-    DEVRITES_ROOT DEVRITES_AGENT_SCRATCH DEVRITES_RUN_ID \
-    DEVRITES_CONTRACT_RUN_ROOT DEVRITES_CONTRACT_PACKET \
-    DEVRITES_CONTRACT_RESULT DEVRITES_CONTRACT_HOST \
-    DEVRITES_CONTRACT_HOST_VERSION_PIN DEVRITES_CONTRACT_MODEL \
-    DEVRITES_CONTRACT_AUTH_FILE DEVRITES_CONTRACT_MAX_COST_USD
-  do
-    contract_require "$name"
-  done
-  for name in \
-    "$HOME" "$TMPDIR" "$XDG_CONFIG_HOME" "$XDG_STATE_HOME" \
-    "$DEVRITES_ROOT" "$DEVRITES_AGENT_SCRATCH"
-  do
-    contract_path_within "$name" "$DEVRITES_CONTRACT_RUN_ROOT" \
-      || contract_die "isolated root escaped the run directory"
-  done
-  contract_path_within "$DEVRITES_CONTRACT_PACKET" "$DEVRITES_AGENT_SCRATCH" \
-    || contract_die "packet escaped the scratch root"
-  contract_path_within "$DEVRITES_CONTRACT_RESULT" "$DEVRITES_AGENT_SCRATCH" \
-    || contract_die "result escaped the scratch root"
-  [ -f "$DEVRITES_CONTRACT_PACKET" ] || contract_die "packet is unavailable"
-  [ -f "$DEVRITES_CONTRACT_AUTH_FILE" ] || contract_die "scoped auth is unavailable"
-}
-
-contract_read_auth() {
-  local mode
-  if mode="$(stat -f '%Lp' "$DEVRITES_CONTRACT_AUTH_FILE" 2>/dev/null)"; then
-    :
-  else
-    mode="$(stat -c '%a' "$DEVRITES_CONTRACT_AUTH_FILE" 2>/dev/null)" \
-      || contract_die "cannot inspect scoped auth"
-  fi
-  [ "$mode" = "600" ] || contract_die "scoped auth must be mode 0600"
-  IFS= read -r CONTRACT_AUTH_VALUE < "$DEVRITES_CONTRACT_AUTH_FILE" \
-    || contract_die "scoped auth is empty"
-  [ -n "$CONTRACT_AUTH_VALUE" ] || contract_die "scoped auth is empty"
-}
-
-contract_run_fake() {
-  local -a env_args=(
-    "PATH=$PATH"
-    "LANG=C"
-    "LC_ALL=C"
-    "HOME=$HOME"
-    "TMPDIR=$TMPDIR"
-    "XDG_CONFIG_HOME=$XDG_CONFIG_HOME"
-    "XDG_STATE_HOME=$XDG_STATE_HOME"
-    "PYTHONDONTWRITEBYTECODE=1"
-    "DEVRITES_ROOT=$DEVRITES_ROOT"
-    "DEVRITES_AGENT_SCRATCH=$DEVRITES_AGENT_SCRATCH"
-    "DEVRITES_RUN_ID=$DEVRITES_RUN_ID"
-    "DEVRITES_CONTRACT_RUN_ROOT=$DEVRITES_CONTRACT_RUN_ROOT"
-    "DEVRITES_CONTRACT_PACKET=$DEVRITES_CONTRACT_PACKET"
-    "DEVRITES_CONTRACT_RESULT=$DEVRITES_CONTRACT_RESULT"
-    "DEVRITES_CONTRACT_HOST=$DEVRITES_CONTRACT_HOST"
-    "DEVRITES_CONTRACT_HOST_VERSION_PIN=$DEVRITES_CONTRACT_HOST_VERSION_PIN"
-    "DEVRITES_CONTRACT_MODEL=$DEVRITES_CONTRACT_MODEL"
-    "DEVRITES_CONTRACT_AUTH_FILE=$DEVRITES_CONTRACT_AUTH_FILE"
-    "DEVRITES_CONTRACT_MAX_COST_USD=$DEVRITES_CONTRACT_MAX_COST_USD"
-    "DEVRITES_CONTRACT_FAKE_VERSION=$DEVRITES_CONTRACT_FAKE_VERSION"
-  )
-  if [ -n "${DEVRITES_CONTRACT_FAKE_FAULT:-}" ]; then
-    env_args+=("DEVRITES_CONTRACT_FAKE_FAULT=$DEVRITES_CONTRACT_FAKE_FAULT")
-  fi
-  exec env -i "${env_args[@]}" python3 "$DEVRITES_CONTRACT_FAKE_HOST" run
-}
-
-contract_version() {
-  local binary="$1"
-  if [ -n "${DEVRITES_CONTRACT_FAKE_HOST:-}" ]; then
-    contract_require DEVRITES_CONTRACT_FAKE_VERSION
-    exec env -i \
-      "PATH=$PATH" "LANG=C" "LC_ALL=C" \
-      "DEVRITES_CONTRACT_FAKE_VERSION=$DEVRITES_CONTRACT_FAKE_VERSION" \
-      python3 "$DEVRITES_CONTRACT_FAKE_HOST" version
-  fi
-  command -v "$binary" >/dev/null 2>&1 || contract_die "host CLI is unavailable"
-  exec env -i "PATH=$PATH" "LANG=C" "LC_ALL=C" "$binary" --version
-}
-
-contract_interrupt_result() {
-  env -i \
-    "PATH=$PATH" "LANG=C" "LC_ALL=C" "PYTHONDONTWRITEBYTECODE=1" \
-    "DEVRITES_CONTRACT_PACKET=$DEVRITES_CONTRACT_PACKET" \
-    "DEVRITES_CONTRACT_RESULT=$DEVRITES_CONTRACT_RESULT" \
-    "DEVRITES_CONTRACT_HOST_VERSION_PIN=$DEVRITES_CONTRACT_HOST_VERSION_PIN" \
-    "DEVRITES_CONTRACT_MODEL=$DEVRITES_CONTRACT_MODEL" \
-    python3 "$CONTRACT_HELPER" interrupted >/dev/null 2>&1 || true
-}