headlesscode 1.2.1 → 1.2.2

package/src/project-store.ts

@@ -95,11 +95,22 @@ export interface ProjectMetadata {
  */
 export function resolveProjectIdentity(workspaceRoot: string): ProjectIdentity {
 	const root = path.resolve(workspaceRoot)
+	// OpenShell runs an independent Git clone so its writable workspace does not
+	// expose host repository metadata. Preserve the original project's store key
+	// without mounting or reading the original repository path in the sandbox.
+	const identityRoot = process.env.HEADLESSCODE_PROJECT_IDENTITY_ROOT?.trim()
+	if (identityRoot && path.isAbsolute(identityRoot)) return { keySource: path.resolve(identityRoot), kind: "git" }
+	// Sandboxed workers may set these to a private Git directory so ordinary
+	// commits cannot touch shared host metadata. Project identity must still
+	// resolve through the workspace's real .git pointer and shared common dir.
+	const gitEnv = { ...process.env }
+	for (const key of ["GIT_DIR", "GIT_COMMON_DIR", "GIT_WORK_TREE", "GIT_NAMESPACE", "GIT_OBJECT_DIRECTORY", "GIT_ALTERNATE_OBJECT_DIRECTORIES", "GIT_INDEX_FILE"]) delete gitEnv[key]
 	// 1. Git repo → `--git-common-dir` (worktree-aware: resolves to the main
 	//    repo's .git from inside a worktree), parent = identity source.
 	try {
 		const out = execFileSync("git", ["rev-parse", "--git-common-dir"], {
 			cwd: root,
+			env: gitEnv,
 			encoding: "utf-8",
 			timeout: 10_000,
 			stdio: ["ignore", "pipe", "ignore"],

package/src/qa/qa.ts

@@ -49,6 +49,7 @@ import { addCustomInstructions } from "../vendor/zoo-code/src/core/prompts/secti
 import type { ChatTool, LlmClient, SessionResult } from "../engine/types.js"
 import type { MemoryStore } from "../memory/types.js"
 import type { SessionBudget } from "../budget/budget.js"
+import { runOpenShellSubsession } from "../cloud/openshell-subsession.js"
 
 /** Default mode slug used for QA sessions (the qa-agent mode). */
 export const DEFAULT_QA_MODE = "qa-agent"
@@ -246,6 +247,17 @@ export async function runQa(options: RunQaOptions): Promise<QaResult> {
 		memory = null,
 		project,
 	} = options
+	if (process.env.HEADLESSCODE_EXECUTION_PROVIDER === "openshell" && !llmClient) {
+		try {
+			return await runOpenShellSubsession<QaResult>("qa", workspaceRoot, {
+				workspaceRoot, mode, model, baseUrl, maxIterations, budget, project,
+				...(options.taskText ? { taskText: options.taskText } : {}),
+			})
+		} catch (error) {
+			const message = error instanceof Error ? error.message : String(error)
+			return { verdict: "error", evidence: "", summary: `QA session failed: ${message}` }
+		}
+	}
 
 	// Detect whether the target repo actually defines the requested mode. If
 	// not, fall back to the generic checklist as a system prompt override.

package/src/watcher/cli.ts

@@ -32,6 +32,7 @@ import * as path from "node:path"
 
 import { Logger } from "../engine/logger.js"
 import { watchIssues, type SweepResult } from "./watch.js"
+import { openshellPreflight } from "../cloud/openshell-preflight.js"
 
 const WATCH_USAGE = `headlesscode watch — Phase 5 GitHub issue watcher
 
@@ -61,6 +62,7 @@ Options:
                          <repo>/.worktrees/.watcher-state.json)
   --mode <slug>          Harness mode for workers (default: code; forwarded
                          to the spawner as ORCHESTRATOR_MODE)
+  --execution-provider <local|openshell> Worker runtime (default: local)
   --qa                   Pass-through: record that a QA round should follow
                          each batch (see docs/phase5-issue-watcher.md)
   --deploy               Pass-through: record that a deploy gate should follow
@@ -92,6 +94,7 @@ export interface WatchCliOptions {
 	maxConcurrentSessions: number
 	stateFile?: string
 	mode: string
+	executionProvider: "local" | "openshell"
 	qa: boolean
 	deploy: boolean
 	memoryDir?: string
@@ -110,6 +113,7 @@ export function parseWatchArgs(argv: string[]): { options: WatchCliOptions; erro
 		maxPerSweep: 5,
 		maxConcurrentSessions: 3,
 		mode: "code",
+		executionProvider: process.env.HEADLESSCODE_EXECUTION_PROVIDER === "openshell" ? "openshell" : "local",
 		qa: false,
 		deploy: false,
 		dryRun: false,
@@ -135,6 +139,12 @@ export function parseWatchArgs(argv: string[]): { options: WatchCliOptions; erro
 		}
 
 		switch (flag) {
+			case "--execution-provider": {
+				const v = next()
+				if (v !== "local" && v !== "openshell") return { options, error: "--execution-provider must be local or openshell" }
+				options.executionProvider = v
+				break
+			}
 			case "--owner": {
 				const v = next()
 				if (v === undefined) {
@@ -300,6 +310,13 @@ export async function watchMain(argv: string[]): Promise<number> {
 			return 2
 		}
 	}
+	if (!options.dryRun && options.executionProvider === "openshell") {
+		const issue = openshellPreflight()
+		if (issue) {
+			process.stderr.write(`headlesscode watch: OpenShell preflight failed: ${issue}\n`)
+			return 2
+		}
+	}
 
 	const ghRepo = options.ghRepo ?? path.basename(repoRoot)
 	const logger = new Logger({ level: "info" })
@@ -328,6 +345,7 @@ export async function watchMain(argv: string[]): Promise<number> {
 			retryFailed: options.retryFailed,
 			dryRun: options.dryRun,
 			mode: options.mode,
+			executionProvider: options.executionProvider,
 			memoryDir: options.memoryDir,
 			qa: options.qa,
 			deploy: options.deploy,

package/src/watcher/watch.ts

@@ -129,6 +129,7 @@ export interface WatcherConfig {
 	spawn?: (batch: SpawnBatch) => SpawnResult | Promise<SpawnResult>
 	/** Harness mode for workers (forwarded to the spawner as ORCHESTRATOR_MODE). */
 	mode?: string
+	executionProvider?: "local" | "openshell"
 	/** Memory dir for workers (forwarded to the spawner as HEADLESSCODE_MEMORY_DIR). */
 	memoryDir?: string
 	/** Phase 4 pass-through: recorded on the batch entry (see docs). */
@@ -480,7 +481,7 @@ function batchId(): string {
  * with cwd = the target repo so `git rev-parse --show-toplevel` resolves).
  * No worktree creation happens in TS; the bash script remains the spawner.
  */
-export function defaultSpawn(batch: SpawnBatch, config: Pick<WatcherConfig, "mode" | "memoryDir">): SpawnResult {
+export function defaultSpawn(batch: SpawnBatch, config: Pick<WatcherConfig, "mode" | "memoryDir" | "executionProvider">): SpawnResult {
 	const issues: SplitIssue[] = [
 		{ number: batch.issue.number, title: batch.issue.title, body: batch.issue.body },
 	]
@@ -511,6 +512,7 @@ export function defaultSpawn(batch: SpawnBatch, config: Pick<WatcherConfig, "mod
 			...process.env,
 			TARGET_REPO: batch.repoRoot,
 			ORCHESTRATOR_MODE: config.mode ?? "code",
+			HEADLESSCODE_EXECUTION_PROVIDER: config.executionProvider ?? process.env.HEADLESSCODE_EXECUTION_PROVIDER ?? "local",
 			HEADLESSCODE_PROJECT: path.basename(batch.repoRoot),
 			...(config.memoryDir ? { HEADLESSCODE_MEMORY_DIR: path.resolve(config.memoryDir) } : {}),
 		},