jules-orchestrator-kit 0.8.0 → 0.8.1

package/.env.example

@@ -27,6 +27,9 @@ JULES_REPO=owner/repo
 # Allow modifications to command-defining files (package.json, Cargo.toml, etc.) in PRs (Default: false)
 # JULES_ALLOW_COMMAND_FILE_CHANGES=false
 
+# Allow modifications to agent rule files (AGENTS.md, JULES_RULES_TEMPLATE.md, .agent/rules/**) in PRs (Default: false)
+# JULES_ALLOW_AGENT_RULE_CHANGES=false
+
 # --- Execution Scope & Git ---
 # Base Branch for PR Audits & Merge-Base Calculations (Default: main)
 BASE_BRANCH=main

package/README.md

@@ -167,7 +167,8 @@ All commands are registered in `package.json` and can be run via `npm run <comma
 | `JULES_REPOLESS` | Set to `true` or `1` to run in repoless/serverless mode |
 | `JULES_DRY_RUN` | Set to `true` or `1` to simulate dispatching without making API calls |
 | `JULES_DAILY_BUDGET` | Daily max session budget for autonomous dispatches (Default: `300`) |
-| `JULES_ALLOW_COMMAND_FILE_CHANGES` | Set to `true` to allow PR changes to command-defining files like `package.json` (Default: `false`) |
+| `JULES_ALLOW_COMMAND_FILE_CHANGES` | Set to `true` to allow PR changes to command/config files like `package.json`, `tsconfig.json`, `vite.config.ts` (Default: `false`) |
+| `JULES_ALLOW_AGENT_RULE_CHANGES` | Set to `true` to allow PR changes to agent rule files like `AGENTS.md`, `JULES_RULES_TEMPLATE.md` (Default: `false`) |
 | `BASE_BRANCH` | Base branch for PR Audits & Merge-Base calculations (Default: `main`) |
 | `GITHUB_HEAD_REF` | PR Head Branch (Used dynamically by CI during OODA repair) |
 | `JULES_PROJECT_ROOT` | Root directory of the project (Auto-assigned during swarm executions) |

package/bin/init.js

@@ -265,6 +265,9 @@ const requiredGitignoreEntries = [
   ".env",
   ".agent/history/",
   ".agent/state/",
+  ".agent/jules-queue/.state/",
+  ".agent/jules-queue/failed/",
+  ".agent/jules-queue/.processing/",
   ".agent/jules-queue/*.md",
   "!.agent/jules-queue/README.md"
 ];

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "jules-orchestrator-kit",
-  "version": "0.8.0",
+  "version": "0.8.1",
   "description": "Orchestration kit for running Google Jules autonomous agents.",
   "repository": {
     "type": "git",

package/scripts/jules-queue-runner.mjs

@@ -183,20 +183,26 @@ async function runQueue() {
           logQueueState(file, "FAILED", error);
 
           const failureClass = classifyQueueFailure(error);
-          const NON_RETRYABLE = new Set(["security_violation", "diff_too_large", "budget_exhausted"]);
+          const NON_RETRYABLE = new Set(["security_violation", "diff_too_large"]);
 
           const taskState = getTaskState(file);
-          const attempts = (taskState.attempts || 0) + 1;
 
-          if (NON_RETRYABLE.has(failureClass) || attempts >= 3) {
-            const destPath = path.join(failedDir, file);
-            setTaskState(file, { attempts, status: "FAILED_PERMANENT", failure_class: failureClass, last_error: error.message, updated_at: new Date().toISOString() });
-            try { await safeMoveAsync(processingPath, destPath); } catch (_) {}
-            log.error(`Task [${title}] failed (${failureClass}). Moved to failed/. Error: ${error.message}`);
-          } else {
-            setTaskState(file, { attempts, status: "REQUEUED", failure_class: failureClass, last_error: error.message, updated_at: new Date().toISOString() });
+          if (failureClass === "budget_exhausted") {
+            setTaskState(file, { attempts: taskState.attempts || 0, status: "DEFERRED_BUDGET", failure_class: failureClass, last_error: error.message, updated_at: new Date().toISOString() });
             try { await safeMoveAsync(processingPath, filePath); } catch (_) {}
-            log.warn(`Task [${title}] failed (${failureClass}). Re-queued (Attempt ${attempts}/3). Error: ${error.message}`);
+            log.warn(`Task [${title}] deferred due to daily budget limit. Left in queue for next budget reset.`);
+          } else {
+            const attempts = (taskState.attempts || 0) + 1;
+            if (NON_RETRYABLE.has(failureClass) || attempts >= 3) {
+              const destPath = path.join(failedDir, file);
+              setTaskState(file, { attempts, status: "FAILED_PERMANENT", failure_class: failureClass, last_error: error.message, updated_at: new Date().toISOString() });
+              try { await safeMoveAsync(processingPath, destPath); } catch (_) {}
+              log.error(`Task [${title}] failed (${failureClass}). Moved to failed/. Error: ${error.message}`);
+            } else {
+              setTaskState(file, { attempts, status: "REQUEUED", failure_class: failureClass, last_error: error.message, updated_at: new Date().toISOString() });
+              try { await safeMoveAsync(processingPath, filePath); } catch (_) {}
+              log.warn(`Task [${title}] failed (${failureClass}). Re-queued (Attempt ${attempts}/3). Error: ${error.message}`);
+            }
           }
         }
       })

package/scripts/jules-self-audit.mjs

@@ -208,6 +208,22 @@ export function parseAndCleanStderr(stderrStr) {
   return lines.slice(-100).join("\n");
 }
 
+export function getOodaStateFile(mergeBase = "main") {
+  const oodaDir = path.resolve(process.cwd(), ".agent/state/ooda");
+  if (!fs.existsSync(oodaDir)) fs.mkdirSync(oodaDir, { recursive: true });
+
+  const keyInput = [
+    process.env.GITHUB_REPOSITORY || "",
+    process.env.GITHUB_REF || "",
+    process.env.GITHUB_HEAD_REF || "",
+    mergeBase,
+    process.cwd()
+  ].join("\u0000");
+
+  const key = crypto.createHash("sha256").update(keyInput).digest("hex").slice(0, 16);
+  return path.join(oodaDir, `${key}.json`);
+}
+
 export function logAuditMetrics(metrics) {
   const historyDir = path.resolve(process.cwd(), ".agent/history");
   if (!fs.existsSync(historyDir)) {
@@ -275,7 +291,9 @@ export function runSelfAudit() {
 
   if (commandFileChanges.length > 0 && process.env.JULES_ALLOW_COMMAND_FILE_CHANGES !== "true" && process.env.JULES_ALLOW_COMMAND_FILE_CHANGES !== "1") {
     const err = new Error(
-      "COMMAND FILE CHANGE DETECTED: " + commandFileChanges.join(", ") + ". Refusing to execute verification scripts from untrusted branch."
+      "COMMAND / BUILD CONFIG FILE CHANGE DETECTED: [" + commandFileChanges.join(", ") + "]. " +
+      "Refusing to execute verification scripts from untrusted branch. " +
+      "To override for legitimate dependency updates, set JULES_ALLOW_COMMAND_FILE_CHANGES=true."
     );
     err.code = 3;
     throw err;
@@ -287,7 +305,9 @@ export function runSelfAudit() {
 
   if (agentRuleChanges.length > 0 && process.env.JULES_ALLOW_AGENT_RULE_CHANGES !== "true" && process.env.JULES_ALLOW_AGENT_RULE_CHANGES !== "1") {
     const err = new Error(
-      "AGENT RULE FILE CHANGE DETECTED: " + agentRuleChanges.join(", ") + ". Refusing to load agent rules from untrusted branch."
+      "AGENT RULE FILE CHANGE DETECTED: [" + agentRuleChanges.join(", ") + "]. " +
+      "Refusing to load agent rules from untrusted branch. " +
+      "To override for legitimate rule updates, set JULES_ALLOW_AGENT_RULE_CHANGES=true."
     );
     err.code = 3;
     throw err;
@@ -442,22 +462,6 @@ export function runSelfAudit() {
       throw err;
     }
 
-function getOodaStateFile(mergeBase = "main") {
-  const oodaDir = path.resolve(process.cwd(), ".agent/state/ooda");
-  if (!fs.existsSync(oodaDir)) fs.mkdirSync(oodaDir, { recursive: true });
-
-  const keyInput = [
-    process.env.GITHUB_REPOSITORY || "",
-    process.env.GITHUB_REF || "",
-    process.env.GITHUB_HEAD_REF || "",
-    mergeBase,
-    process.cwd()
-  ].join("\u0000");
-
-  const key = crypto.createHash("sha256").update(keyInput).digest("hex").slice(0, 16);
-  return path.join(oodaDir, `${key}.json`);
-}
-
     let oodaRetries = 0;
     const oodaStateFile = getOodaStateFile(mergeBase);
     try {

package/scripts/utils.mjs

@@ -165,10 +165,29 @@ export function redactSecrets(text) {
   return sanitized;
 }
 
+export function pruneOldLedgers(stateDir, retentionDays = 30) {
+  try {
+    if (!fs.existsSync(stateDir)) return;
+    const now = Date.now();
+    const maxAgeMs = retentionDays * 24 * 60 * 60 * 1000;
+    const files = fs.readdirSync(stateDir);
+    files.forEach((file) => {
+      if (file.endsWith(".jsonl")) {
+        const filePath = path.join(stateDir, file);
+        const stat = fs.statSync(filePath);
+        if (now - stat.mtimeMs > maxAgeMs) {
+          try { fs.unlinkSync(filePath); } catch (_) {}
+        }
+      }
+    });
+  } catch (_) {}
+}
+
 export function getDailyLedgerPath(ledgerName = "sessions") {
   const dateStr = new Date().toISOString().split("T")[0];
   const stateDir = path.resolve(process.env.JULES_PROJECT_ROOT || process.cwd(), ".agent/state", ledgerName);
   ensureDir(stateDir);
+  pruneOldLedgers(stateDir, 30);
   return path.join(stateDir, `${dateStr}.jsonl`);
 }
 
@@ -183,7 +202,6 @@ export function appendLedger(ledgerName, payload) {
 }
 
 export function checkDailyBudget(maxSessions = 300) {
-  const dateStr = new Date().toISOString().split("T")[0];
   const ledgerPath = getDailyLedgerPath("sessions");
   
   if (!fs.existsSync(ledgerPath)) {