jules-orchestrator-kit 0.52.1 → 0.52.3

package/README.md

@@ -143,7 +143,7 @@ To maximize PR merge rates, dispatch tasks according to deterministic boundaries
 * **Fail-Closed Security & Secret Redaction:** Evaluates explicit Deny rules before Allow rules against canonicalized, case-folded paths. Redacts high-entropy keys and base64-encoded credentials (such as Kubernetes `Secret` manifests).
 * **Complexity & Cost Router:** Zero-dependency heuristic classifier (`src/router.mjs`) routing mechanical tasks to lightweight models while reserving primary models for complex refactors, with a `node --check` syntax-verification gate that transparently escalates a FAST-tier result to the primary provider if it left broken JS on disk.
 * **Terminal UI & Diagnostic Matrix (`agentctl doctor`):** Interactive terminal dashboard, task sidecar manager, and automated transactional self-repair.
-* **Verified Test Suite:** Tested with **802 unit tests across 91 suites passing in < 10.0s**.
+* **Verified Test Suite:** Tested with **809 unit tests across 91 suites passing in < 10.0s**.
 
 <br/>
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "jules-orchestrator-kit",
-  "version": "0.52.1",
+  "version": "0.52.3",
   "description": "Zero-dependency safety gatekeeper, test oracle generator, and multi-agent coordination protocol for Google Jules (jules) autonomous agents.",
   "repository": {
     "type": "git",

package/src/coverage.mjs

@@ -2,7 +2,7 @@ import { readFileSync, readdirSync, mkdtempSync, rmSync, existsSync, realpathSyn
 import { join, resolve, relative, isAbsolute } from "node:path";
 import { tmpdir } from "node:os";
 import { fileURLToPath } from "node:url";
-import { execSync } from "node:child_process";
+import { runCmd } from "./git.mjs";
 import { resolveVerify } from "./config.mjs";
 
 /**
@@ -136,23 +136,15 @@ export function runV8Coverage(testCmd, options = {}) {
       }
     }
 
-    let stdout = "";
-    let stderr = "";
-    let exitCode = 0;
-
-    try {
-      stdout = execSync(cmd, {
-        cwd: root,
-        env,
-        timeout: timeoutMs,
-        stdio: ["ignore", "pipe", "pipe"],
-        encoding: "utf-8",
-      });
-    } catch (err) {
-      exitCode = err.status || 1;
-      stdout = err.stdout ? String(err.stdout) : "";
-      stderr = err.stderr ? String(err.stderr) : err.message;
-    }
+    const res = runCmd(cmd, {
+      cwd: root,
+      env,
+      timeout: timeoutMs,
+      ignoreError: true,
+    });
+    const exitCode = res.status;
+    const stdout = res.stdout;
+    const stderr = res.stderr;
 
     const coverageByFile = new Map();
     const files = existsSync(tempCoverageDir) ? readdirSync(tempCoverageDir) : [];

package/src/git.mjs

@@ -412,3 +412,49 @@ export function worktreeRemove(root = process.cwd(), targetDir = "") {
 export function worktreePrune(root = process.cwd()) {
   return git(["worktree", "prune"], { cwd: root });
 }
+
+/**
+ * Extract 'owner/repo' from a git remote URL if it points to GitHub.
+ * Handles SSH (git@github.com:owner/repo.git), HTTPS (https://github.com/owner/repo.git),
+ * protocol prefixes (ssh://, git://) and URL-embedded credentials.
+ * @param {string} remoteUrl
+ * @returns {string} 'owner/repo' or '' if invalid/not GitHub
+ */
+export function parseGitHubRepo(remoteUrl) {
+  if (!remoteUrl || typeof remoteUrl !== "string") return "";
+  const trimmed = remoteUrl.trim();
+
+  // Match git@github.com:owner/repo(.git)
+  const sshMatch = trimmed.match(/^git@github\.com:([^/\s]+)\/([^/\s]+?)(?:\.git)?$/i);
+  if (sshMatch) {
+    return `${sshMatch[1]}/${sshMatch[2]}`;
+  }
+
+  // Match https://github.com/owner/repo(.git), http, ssh://, git://
+  try {
+    const urlObj = new URL(trimmed.startsWith("git@") ? `ssh://${trimmed}` : trimmed);
+    if (urlObj.hostname.toLowerCase() === "github.com") {
+      const parts = urlObj.pathname.replace(/^\/+/, "").replace(/\.git$/i, "").split("/");
+      if (parts.length >= 2 && parts[0] && parts[1]) {
+        return `${parts[0]}/${parts[1]}`;
+      }
+    }
+  } catch (_) {}
+
+  return "";
+}
+
+/**
+ * Attempt to resolve 'owner/repo' from the local repository's git remote origin.
+ * @param {string} [root=process.cwd()]
+ * @returns {string}
+ */
+export function resolveGitRemoteOrigin(root = process.cwd()) {
+  try {
+    const raw = git(["config", "--get", "remote.origin.url"], { cwd: root, ignoreError: true });
+    return parseGitHubRepo(raw);
+  } catch (_) {
+    return "";
+  }
+}
+

package/src/mutation.mjs

@@ -1,8 +1,7 @@
 import { readFileSync, writeFileSync, existsSync } from "node:fs";
 import { resolve, isAbsolute } from "node:path";
-import { execSync } from "node:child_process";
 import { createHash } from "node:crypto";
-import { diffText } from "./git.mjs";
+import { diffText, runCmd } from "./git.mjs";
 
 /**
  * @typedef {Object} MutationCandidate
@@ -574,22 +573,17 @@ export function executeMutant(mutant, options = {}) {
       stdout = execResult.stdout || "";
       stderr = execResult.stderr || "";
     } else {
-      try {
-        stdout = execSync(testCmd, {
-          cwd: root,
-          timeout: timeoutMs,
-          stdio: ["ignore", "pipe", "pipe"],
-          env: { ...process.env, CI: "true", JULES_MUTATION_RUN: "true" },
-          encoding: "utf-8",
-        });
-        exitCode = 0;
-      } catch (execErr) {
-        exitCode = execErr.status || execErr.statusCode || 1;
-        stdout = execErr.stdout ? execErr.stdout.toString() : "";
-        stderr = execErr.stderr ? execErr.stderr.toString() : execErr.message;
-        if (execErr.code === "ETIMEDOUT" || execErr.killed) {
-          status = "TIMEOUT";
-        }
+      const execResult = runCmd(testCmd, {
+        cwd: root,
+        timeout: timeoutMs,
+        env: { ...process.env, CI: "true", JULES_MUTATION_RUN: "true" },
+        ignoreError: true,
+      });
+      exitCode = execResult.status;
+      stdout = execResult.stdout;
+      stderr = execResult.stderr;
+      if (execResult.status === 124 || stderr.includes("ETIMEDOUT")) {
+        status = "TIMEOUT";
       }
     }
 

package/src/perf.mjs

@@ -1,5 +1,5 @@
 import { monitorEventLoopDelay } from "node:perf_hooks";
-import { execSync } from "node:child_process";
+import { runCmd } from "./git.mjs";
 import { resolveVerify } from "./config.mjs";
 
 /**
@@ -41,19 +41,15 @@ export function measureEventLoopDelay(target, options = {}) {
         }
       }
 
-      try {
-        stdout = execSync(cmd, {
-          cwd: root,
-          env,
-          timeout: timeoutMs,
-          stdio: ["ignore", "pipe", "pipe"],
-          encoding: "utf-8",
-        });
-      } catch (err) {
-        exitCode = err.status || 1;
-        stdout = err.stdout ? String(err.stdout) : "";
-        stderr = err.stderr ? String(err.stderr) : err.message;
-      }
+      const execResult = runCmd(cmd, {
+        cwd: root,
+        env,
+        timeout: timeoutMs,
+        ignoreError: true,
+      });
+      exitCode = execResult.status;
+      stdout = execResult.stdout;
+      stderr = execResult.stderr;
     }
   } finally {
     histogram.disable();

package/src/provider.mjs

@@ -2,7 +2,7 @@ import { spawnSync } from "node:child_process";
 import { existsSync } from "node:fs";
 import { join, extname } from "node:path";
 import { redactSecrets } from "./security.mjs";
-import { resolveWindowsSpawn } from "./git.mjs";
+import { resolveWindowsSpawn, resolveGitRemoteOrigin } from "./git.mjs";
 
 // Extensions node --check can parse as a script. .mjs/.cjs are unambiguous;
 // plain .js is checked as a script too — a stray top-level ESM import would
@@ -301,7 +301,9 @@ export function createProvider(spec = "jules", config = {}) {
       }
 
       const isRepoless = Boolean(task.repoless || ctx.repoless);
-      const rawRepo = task.source || ctx.source || config.source || process.env.JULES_REPO || "";
+      const root = ctx.root || config.root || process.cwd();
+      const detectedRepo = resolveGitRemoteOrigin(root);
+      const rawRepo = task.source || ctx.source || config.source || process.env.JULES_REPO || detectedRepo || "";
       if (!rawRepo && !ctx.dryRun && providerSpec.name === "jules" && !isRepoless) {
         throw new Error("Missing connected Jules repository source. Set JULES_REPO or pass source/repoless option.");
       }
@@ -951,7 +953,7 @@ export function createProvider(spec = "jules", config = {}) {
         if (ctx.pageSize) params.set("pageSize", String(ctx.pageSize));
         if (ctx.pageToken) params.set("pageToken", String(ctx.pageToken));
         const url = params.toString() ? `${baseUrl}?${params.toString()}` : baseUrl;
-        const res = await this.getSession("", { ...ctx, customUrl: url });
+        const res = await this.getSession(sessionId, { ...ctx, customUrl: url });
         return {
           activities: res?.raw?.activities || [],
           nextPageToken: res?.raw?.nextPageToken,

package/src/remediation.mjs

@@ -285,7 +285,7 @@ export function createWhackAMoleDetector(opts = {}) {
       const oscillatingTests = [...cycleTests];
 
       const testSummary = oscillatingTests.length > 0 ? oscillatingTests.join(" <-> ") : "tests";
-      const promptDirective = `[WHACK_A_MOLE_WARNING] You are trapped in a local optimization cycle where fixing one test breaks another (${testSummary}). Do not add more conditional edge-case band-aids. Revert recent patches and refactor the core logic cleanly.`;
+      const promptDirective = `[WHACK_A_MOLE_WARNING] You are trapped in a local optimization cycle where fixing one test breaks another (<UNTRUSTED>${testSummary}</UNTRUSTED>). Do not add more conditional edge-case band-aids. Revert recent patches and refactor the core logic cleanly.`;
 
       return {
         whackAMole: true,

package/src/session-ops.mjs

@@ -68,17 +68,25 @@ export async function extractSessionPatch(sessionId, opts = {}) {
   // 2. Inspect activity artifacts and logs if patch wasn't in top-level output
   for (const act of activities) {
     if (act.pullRequest) pr = act.pullRequest;
-    if (act.gitPatch || act.patch || act.diff) {
-      patch = patch || act.gitPatch || act.patch || act.diff;
+    if (act.gitPatch || act.patch || act.diff || act.changeSet?.gitPatch?.unidiffPatch) {
+      patch = patch || act.gitPatch || act.patch || act.diff || act.changeSet?.gitPatch?.unidiffPatch;
     }
-    if (act.artifacts && Array.isArray(act.artifacts)) {
-      for (const art of act.artifacts) {
-        if (art.patch || art.diff || (typeof art.content === "string" && art.content.startsWith("diff --git"))) {
-          patch = patch || art.patch || art.diff || art.content;
-        }
-        if (art.path || art.filename) {
-          files.add(art.path || art.filename);
-        }
+    const artifactList = [
+      ...(Array.isArray(act.artifacts) ? act.artifacts : []),
+      ...(Array.isArray(act.artifactsCreated?.artifacts) ? act.artifactsCreated.artifacts : []),
+    ];
+    for (const art of artifactList) {
+      const artPatch =
+        art.patch ||
+        art.diff ||
+        art.changeSet?.gitPatch?.unidiffPatch ||
+        art.gitPatch?.unidiffPatch ||
+        (typeof art.content === "string" && art.content.startsWith("diff --git") ? art.content : "");
+      if (artPatch) {
+        patch = patch || artPatch;
+      }
+      if (art.path || art.filename) {
+        files.add(art.path || art.filename);
       }
     }
     if (act.changedFiles && Array.isArray(act.changedFiles)) {

package/src/stack-detector.mjs

@@ -663,8 +663,28 @@ export function bootstrapZeroTestRepo(root = process.cwd(), options = {}) {
   const detected = detectPolyglotStack(root);
   const configPath = join(root, ".agent", "config.yml");
   const hasConfig = existsSync(configPath);
+  let existingTestCmd = "";
+  if (hasConfig) {
+    try {
+      const raw = readFileSync(configPath, "utf-8");
+      const match = raw.match(/^\s*test:\s*["']?(.*?)["']?\s*$/m) || raw.match(/^\s*test_cmd:\s*["']?(.*?)["']?\s*$/m);
+      if (match) {
+        existingTestCmd = match[1].trim();
+      }
+    } catch (_) {}
+  }
+
+  let hasPkgTest = false;
+  if (existsSync(join(root, "package.json"))) {
+    try {
+      const pkg = JSON.parse(readFileSync(join(root, "package.json"), "utf-8"));
+      hasPkgTest = Boolean(pkg?.scripts?.test);
+    } catch (_) {}
+  }
+
   const hasRealTestSuite =
-    hasConfig ||
+    (hasConfig && Boolean(existingTestCmd)) ||
+    hasPkgTest ||
     existsSync(join(root, "phpunit.xml")) ||
     existsSync(join(root, "pest.php")) ||
     existsSync(join(root, "turbo.json")) ||
@@ -672,7 +692,7 @@ export function bootstrapZeroTestRepo(root = process.cwd(), options = {}) {
     existsSync(join(root, "nx.json"));
 
   if (!options.force && hasRealTestSuite) {
-    return { bootstrapped: false, reason: "EXISTING_VERIFICATION_ORACLE", testCmd: detected.testCmd };
+    return { bootstrapped: false, reason: "EXISTING_VERIFICATION_ORACLE", testCmd: existingTestCmd || (hasPkgTest ? detected.testCmd : "") };
   }
 
   let testCmd = "";
@@ -697,8 +717,41 @@ export function bootstrapZeroTestRepo(root = process.cwd(), options = {}) {
     mkdirSync(join(root, ".agent"), { recursive: true });
   } catch (_) {}
 
-  const cfg = `version: 1\nprovider: jules\ntier: ultra\nverify:\n  test: "${testCmd}"\n  build: "${detected.buildCmd || ""}"\nlimits:\n  diff_kb: 75\n  daily_tasks: 300\n  repair_attempts: 3\nbranch_prefix: agent/\nbase_branch: main\n`;
-  writeFileSync(configPath, cfg, "utf-8");
+  if (hasConfig) {
+    try {
+      let rawConfig = readFileSync(configPath, "utf-8");
+      if (/^\s*test:\s*.*$/m.test(rawConfig)) {
+        rawConfig = rawConfig.replace(/^\s*test:\s*.*$/m, `  test: "${testCmd}"`);
+      } else if (/^\s*verify:\s*$/m.test(rawConfig)) {
+        rawConfig = rawConfig.replace(/^\s*verify:\s*$/m, `verify:\n  test: "${testCmd}"`);
+      } else {
+        rawConfig += `\nverify:\n  test: "${testCmd}"\n`;
+      }
+      if (detected.buildCmd && /^\s*build:\s*["']?["']?\s*$/m.test(rawConfig)) {
+        rawConfig = rawConfig.replace(/^\s*build:\s*.*$/m, `  build: "${detected.buildCmd}"`);
+      }
+      writeFileSync(configPath, rawConfig, "utf-8");
+    } catch (_) {}
+  } else {
+    const cfg = `version: 1\nprovider: jules\ntier: free\nverify:\n  test: "${testCmd}"\n  build: "${detected.buildCmd || ""}"\nlimits:\n  diff_kb: 75\n  daily_tasks: 15\n  repair_attempts: 3\nbranch_prefix: agent/\nbase_branch: main\n`;
+    writeFileSync(configPath, cfg, "utf-8");
+  }
+
+  const julesPath = join(root, ".agent", "jules.yml");
+  if (existsSync(julesPath)) {
+    try {
+      let rawJules = readFileSync(julesPath, "utf-8");
+      if (/^\s*test_cmd:\s*.*$/m.test(rawJules)) {
+        rawJules = rawJules.replace(/^\s*test_cmd:\s*.*$/m, `test_cmd: "${testCmd}"`);
+      } else {
+        rawJules += `\ntest_cmd: "${testCmd}"\n`;
+      }
+      if (detected.buildCmd && /^\s*build_cmd:\s*["']?["']?\s*$/m.test(rawJules)) {
+        rawJules = rawJules.replace(/^\s*build_cmd:\s*.*$/m, `build_cmd: "${detected.buildCmd}"`);
+      }
+      writeFileSync(julesPath, rawJules, "utf-8");
+    } catch (_) {}
+  }
 
   return { bootstrapped: true, stack: detected.stack, testCmd, configPath };
 }

package/src/webhook.mjs

@@ -480,25 +480,27 @@ export function verifySignature(payload, signatureHeader, secret) {
   if (!/^[0-9a-fA-F]{64}$/.test(hexSignature)) return false;
 
   const hmac = createHmac("sha256", secret);
-  const bodyBuf = Buffer.isBuffer(payload) ? payload : Buffer.from(payload, "utf-8");
+  const encoder = new TextEncoder();
+  const bodyBuf = payload instanceof Uint8Array ? payload : encoder.encode(payload);
   const digest = `sha256=${hmac.update(bodyBuf).digest("hex")}`;
 
-  const sigBuf = Buffer.from(signatureHeader, "utf-8");
-  const digestBuf = Buffer.from(digest, "utf-8");
+  const sigBuf = encoder.encode(signatureHeader);
+  const digestBuf = encoder.encode(digest);
 
-  if (sigBuf.length !== digestBuf.length) return false;
+  if (sigBuf.byteLength !== digestBuf.byteLength) return false;
   return timingSafeEqual(sigBuf, digestBuf);
 }
 
 /**
  * Parse incoming webhook body buffer into a JS object.
- * @param {Buffer} bodyBuf 
+ * @param {Buffer|Uint8Array|string} bodyBuf 
  * @param {string} contentType 
  * @returns {object} Parsed JSON payload
  */
 export function parseWebhookPayload(bodyBuf, contentType = "application/json") {
-  if (!bodyBuf || bodyBuf.length === 0) return {};
-  const str = bodyBuf.toString("utf-8").trim();
+  if (!bodyBuf || (bodyBuf.length === 0 && bodyBuf.byteLength === 0)) return {};
+  const decoder = new TextDecoder();
+  const str = (bodyBuf instanceof Uint8Array ? decoder.decode(bodyBuf) : String(bodyBuf)).trim();
   if (!str) return {};
 
   if (contentType.includes("application/x-www-form-urlencoded")) {