mtech-ai-local-runner 0.1.32 → 0.1.33

package/README.md

@@ -458,3 +458,24 @@ query timeout, command and validation failures use distinct safe codes. The
 inventory must still be fresh at Codex spawn. No automatic retry is performed.
 
 The reviewed manual Codex path preserves the existing CLI and ChatGPT login. It is separate from unattended daemon readiness. After the exact CLI/native reader and Gateway release are installed, an employee-authorized foreground pilot uses `mtec-ai-local-runner manual-codex --job-id=<approved Job UUID>`. It refuses a running daemon, unresolved recovery state, unknown release/account or a different Job. It does not stop services or alter personal settings. A direct administrator policy inventory occurs just before the approved execution; historical inventory is not continuous MDM monitoring. The Gateway OAuth client refuses refresh in this manual command. Actual vendor account startup may still refresh shared credentials and requires disclosure in the exact launch approval.
+
+
+### Local Fix with disclosed validation
+
+The existing daemon can use a reviewed `gateway_publish_v1` installation for
+approved local Codex fixes. It freezes the owned model and sends only sealed,
+bounded changed text files to Gateway's existing publication service. Server
+credentials create the generated branch and canonical development PR; no local
+Git token, ECR, new CI installation or native PHP verifier is required.
+
+Validation is explicitly **UNVERIFIED** in this mode, with CI **not run**.
+Executor-reported checks, failures and checks not run stay attributed to the
+executor in the PR, Work Item and Slack result. No new test/shell tool is granted.
+A PR-created result is not a test-pass claim. Existing read-only Claude/Codex
+investigation and the optional strict CI-required mode keep their prior behavior.
+
+Only an exact reviewed v2 installation with matching mode/profile/runtime hashes
+advertises `local_fix_gateway_publish_v1`. Publishing/installation/DEV activation
+and an exact approved Fix contract/launch are still required before real use.
+An unresolved canonical PR approval or publication receipt pauses delivery; do
+not rerun the model or delete recovery state to force a PR.

package/dist/src/daemon/execution-coordinator.js

@@ -453,7 +453,7 @@ export class ExecutionCoordinator {
                                     await append({ eventType: 'checkpoint_ready', summary: 'final checkpoint ready' });
                                 await publicationStep(() => this.deps.state.save({ jobId: job.id, generation: job.generation, leaseToken: job.leaseToken, phase: 'publication_pending', bindingId: binding.bindingId, eventCursor: sequence, workspaceManifest: workspace.manifest, publicationRecovery: { version: 1, job, checkoutPath: workspace.path, bindingId: binding.bindingId, completedEvent: event, gatewayContext: this.deps.gateway.publicationRecoveryContext?.(binding.bindingId), securityReceipt: adapter.securityReceipt?.(), freezeConfirmed: lifecycle.frozen } }));
                                 publicationPending = true;
-                                localFixPublication = await publicationStep(() => fixSession.finalize());
+                                localFixPublication = await publicationStep(() => fixSession.finalize(event));
                                 if (this.deps.gateway.syncPublicationCursor) {
                                     try {
                                         const cursor = await publicationStep(() => this.deps.gateway.syncPublicationCursor(binding.bindingId, sequence));

package/dist/src/daemon/runtime.js

@@ -192,11 +192,13 @@ export async function reconcilePreparationState(previous, deps) {
 export function localRunnerCapabilities(probes, trustedLocalFixHost = false, verificationMode) {
     return probes.map(probe => {
         const authenticated = probe.available && probe.authenticated;
-        const capabilities = probe.capabilities.filter(value => value !== 'local_fix_publication_v1' && value !== 'local_fix_gateway_ci_v1');
+        const capabilities = probe.capabilities.filter(value => value !== 'local_fix_publication_v1' && value !== 'local_fix_gateway_ci_v1' && value !== 'local_fix_gateway_publish_v1');
         if (trustedLocalFixHost && authenticated && probe.id === 'codex_cli') {
             capabilities.push('local_fix_publication_v1');
             if (verificationMode === 'gateway_ci_v1')
                 capabilities.push('local_fix_gateway_ci_v1');
+            if (verificationMode === 'gateway_publish_v1')
+                capabilities.push('local_fix_gateway_publish_v1');
         }
         return { adapter: probe.id, version: probe.version, authenticated, capabilities };
     });

package/dist/src/gateway-client.js

@@ -551,7 +551,7 @@ export class McpGatewayClient {
                 delete receipt.preparation_timing;
                 delete receipt.launch_process;
             }
-            Object.assign(body, { files: input.files, security_receipt: receipt, host_receipt: input.hostReceipt });
+            Object.assign(body, { files: input.files, security_receipt: receipt, host_receipt: input.hostReceipt, ...(input.validationReport ? { validation_report: input.validationReport } : {}) });
         }
         else
             Object.assign(body, { publication_id: input.publicationId, ...(input.canonicalApprovalId ? { canonical_approval_id: input.canonicalApprovalId } : {}) });

package/dist/src/publication/installed-host.js

@@ -49,9 +49,11 @@ export async function loadInstalledLocalFixHost(input) {
         const raw = await readPrivateJson(file);
         if (raw.schema === 'local-fix-host-installation-v2') {
             const config = raw;
-            if (config.enabled !== true || config.verification_mode !== 'gateway_ci_v1' || config.runnerId !== input.runnerId)
+            if (config.enabled !== true || !['gateway_ci_v1', 'gateway_publish_v1'].includes(config.verification_mode) || config.runnerId !== input.runnerId)
                 throw denied();
             assertServerCiRegistration(config.registration);
+            if (config.verification_mode !== (config.registration.verification_mode ?? 'gateway_ci_v1'))
+                throw denied();
             const packageRoot = await realpath(fileURLToPath(new URL('../../../', import.meta.url)));
             const assertReleaseCurrent = () => verifyLocalFixRuntime(packageRoot, config.runtimeFiles, config.registration.receipt);
             await assertReleaseCurrent();

package/dist/src/publication/recovery.js

@@ -32,7 +32,7 @@ export async function recoverLocalFixPublication(input) {
     let session;
     try {
         session = await input.host.prepare({ job, checkoutPath: r.checkoutPath, bindingId, lifecycle: { isFrozen: () => true, isCurrent: () => current, securityReceipt: () => r.securityReceipt } });
-        const receipt = await session.finalize();
+        const receipt = await session.finalize(event);
         if (heartbeatError)
             throw new PublicationOutcomeUnknownError();
         const cursor = await input.gateway.syncLocalPublicationCursor(bindingId, s.eventCursor ?? 0);

package/dist/src/publication/server-ci-host.js

@@ -5,6 +5,7 @@ import { constants } from 'node:fs';
 import { lstat, open, realpath } from 'node:fs/promises';
 import path from 'node:path';
 import { setTimeout as delay } from 'node:timers/promises';
+import { MAX_EVENT_SUMMARY_CHARS } from '../protocol.js';
 import { protocolHash } from './candidate.js';
 import { FilePublicationJournal } from './journal.js';
 import { GitSnapshotHost } from './git-snapshot.js';
@@ -15,21 +16,59 @@ const matches = (p, s) => s.endsWith('/**') ? safePath(s.slice(0, -3)) && (p ===
 const bindingFields = ['binding_id', 'actor_id', 'runner_id', 'job_id', 'generation', 'attempt_id', 'execution_contract_id', 'work_loop_id', 'repository_lease_id', 'repository_key', 'base_commit_sha', 'working_branch', 'contract_fingerprint', 'task_package_fingerprint', 'launch_fingerprint'];
 const bindingProof = (v) => { const b = Object.fromEntries(bindingFields.map(k => [k, v[k]])); if (!Number.isSafeInteger(b.generation) || b.generation < 1 || bindingFields.some(k => k !== 'generation' && (typeof b[k] !== 'string' || !b[k])))
     throw denied(); return b; };
-export function assertServerCiRegistration(r) { const { review, ...manifest } = r; if (!review || review.status !== 'reviewed' || review.fingerprint !== protocolHash(manifest) || !r.project || r.ci_profile_fingerprint !== protocolHash(r.ci_profile) || Object.values(r.receipt).length !== 3 || Object.values(r.receipt).some(v => !/^[a-f0-9]{64}$/.test(v)))
-    throw denied(); }
+export function assertServerCiRegistration(r) {
+    const { review, ...manifest } = r;
+    if (r.verification_mode !== undefined && !['gateway_ci_v1', 'gateway_publish_v1'].includes(r.verification_mode))
+        throw denied();
+    const p = r.ci_profile;
+    if (r.verification_mode === 'gateway_publish_v1' && (!p || Object.keys(p).some(k => !['review_status', 'validation_policy', 'destination_branch', 'trusted_files'].includes(k)) || p.review_status !== 'reviewed' || p.validation_policy !== 'disclose_unverified' || typeof p.destination_branch !== 'string' || !p.destination_branch))
+        throw denied();
+    // Both server modes use the Gateway's ordered list of pinned file records.
+    // Older CI registrations without a local profile schema remain compatible.
+    if (r.verification_mode === 'gateway_publish_v1' || p?.trusted_files !== undefined) {
+        const files = p?.trusted_files, seen = new Set();
+        if (!Array.isArray(files) || !files.length || files.length > 50)
+            throw denied();
+        for (const file of files) {
+            if (!file || typeof file !== 'object' || Array.isArray(file) || Object.keys(file).some(k => !['path', 'sha256'].includes(k)) || typeof file.path !== 'string' || !safePath(file.path) || !/^[A-Za-z0-9_][A-Za-z0-9_./-]*$/.test(file.path) || /(^|\/)(vendor|node_modules|secrets)(\/|$)/.test(file.path) || seen.has(file.path) || typeof file.sha256 !== 'string' || !/^[a-f0-9]{64}$/.test(file.sha256))
+                throw denied();
+            seen.add(file.path);
+        }
+        if (!seen.has('bitbucket-pipelines.yml'))
+            throw denied();
+    }
+    if (!review || review.status !== 'reviewed' || review.fingerprint !== protocolHash(manifest) || !r.project || r.ci_profile_fingerprint !== protocolHash(r.ci_profile) || Object.values(r.receipt).length !== 3 || Object.values(r.receipt).some(v => !/^[a-f0-9]{64}$/.test(v)))
+        throw denied();
+}
+/** Executor text is disclosure only; never derive trusted statuses from it. */
+function validationReport(event) {
+    if (event === undefined)
+        return { summary: 'No executor validation report was provided.', evidence: [] };
+    if (event.eventType !== 'completed' || typeof event.summary !== 'string' || event.summary.length > MAX_EVENT_SUMMARY_CHARS || !event.summary.trim())
+        throw denied();
+    const evidence = event.payload?.completion_evidence === undefined ? [] : event.payload.completion_evidence;
+    if (!Array.isArray(evidence) || evidence.length > 20 || evidence.some(v => typeof v !== 'string' || v.length > 500 || !v.trim()))
+        throw denied();
+    const clean = (v) => v.replace(/[\u0000-\u0008\u000b\u000c\u000e-\u001f\u007f]/g, '').trim();
+    const summary = clean(event.summary), items = evidence.map(clean);
+    if (!summary || items.some(v => !v))
+        throw denied();
+    return { summary, evidence: items };
+}
 /** Only host-owned frozen bytes cross the Gateway boundary. Git is exclusively
  * a pinned credential-free object reader; verification/publication run remotely. */
 export function createServerCiLocalFixHost(options) {
     const registration = structuredClone(options.registration);
     assertServerCiRegistration(registration);
-    return { requiresOwnedFreeze: true, verificationMode: 'gateway_ci_v1', prepare: async (input) => {
+    const mode = registration.verification_mode ?? 'gateway_ci_v1';
+    return { requiresOwnedFreeze: true, verificationMode: mode, prepare: async (input) => {
             await options.assertReleaseCurrent?.();
             const lifecycle = input.lifecycle;
             if (!lifecycle)
                 throw denied();
             const { job } = input, pkg = job.taskPackage, scope = pkg.local_fix_scope, repo = pkg.repository, limits = scope?.candidate_limits, allowed = scope?.allowed_paths;
             const root = await realpath(options.privateRoot), st = await lstat(root);
-            if (!lifecycle.isCurrent() || pkg.runtime_adapter !== 'codex_cli' || !scope || scope.verification_mode !== 'gateway_ci_v1' || scope.ci_profile_fingerprint !== registration.ci_profile_fingerprint || protocolHash(scope.ci_profile) !== protocolHash(registration.ci_profile) || !Array.isArray(scope.required_commands) || scope.required_commands.length || !scope.registered_tests || typeof scope.registered_tests !== 'object' || Object.keys(scope.registered_tests).length || !Array.isArray(allowed) || !allowed.length || allowed.some(p => typeof p !== 'string' || !(safePath(p) || p.endsWith('/**') && safePath(p.slice(0, -3)))) || protocolHash(allowed) !== protocolHash(pkg.allowed_paths) || repo.key !== registration.project || job.gatewayTaskPackageFingerprint !== protocolHash(pkg) || Object.entries(registration.receipt).some(([k, v]) => scope[k] !== v) || !limits || ['max_changed_files', 'max_diff_bytes', 'max_file_bytes'].some(k => !Number.isSafeInteger(limits[k]) || limits[k] < 1) || root !== options.privateRoot || !st.isDirectory() || st.isSymbolicLink() || (st.mode & 0o077) !== 0 || (process.getuid && st.uid !== process.getuid()) || root === input.checkoutPath || root.startsWith(input.checkoutPath + path.sep))
+            if (!lifecycle.isCurrent() || pkg.runtime_adapter !== 'codex_cli' || !scope || scope.verification_mode !== mode || scope.ci_profile_fingerprint !== registration.ci_profile_fingerprint || protocolHash(scope.ci_profile) !== protocolHash(registration.ci_profile) || !Array.isArray(scope.required_commands) || scope.required_commands.length || !scope.registered_tests || typeof scope.registered_tests !== 'object' || Object.keys(scope.registered_tests).length || !Array.isArray(allowed) || !allowed.length || allowed.some(p => typeof p !== 'string' || !(safePath(p) || p.endsWith('/**') && safePath(p.slice(0, -3)))) || protocolHash(allowed) !== protocolHash(pkg.allowed_paths) || repo.key !== registration.project || job.gatewayTaskPackageFingerprint !== protocolHash(pkg) || Object.entries(registration.receipt).some(([k, v]) => scope[k] !== v) || !limits || ['max_changed_files', 'max_diff_bytes', 'max_file_bytes'].some(k => !Number.isSafeInteger(limits[k]) || limits[k] < 1) || root !== options.privateRoot || !st.isDirectory() || st.isSymbolicLink() || (st.mode & 0o077) !== 0 || (process.getuid && st.uid !== process.getuid()) || root === input.checkoutPath || root.startsWith(input.checkoutPath + path.sep))
                 throw denied();
             const fence = { jobId: job.id, generation: job.generation, leaseToken: job.leaseToken, launchGrant: job.launchGrant, bindingId: input.bindingId };
             const binding = bindingProof((await options.gateway.localPublicationContext(fence)).context);
@@ -39,8 +78,9 @@ export function createServerCiLocalFixHost(options) {
             const current = async () => { if (closed || !lifecycle.isCurrent() || !lifecycle.isFrozen())
                 throw denied(); await options.assertReleaseCurrent?.(); if (protocolHash(bindingProof((await options.gateway.localPublicationContext(fence)).context)) !== protocolHash(binding) || closed || !lifecycle.isCurrent() || !lifecycle.isFrozen())
                 throw denied(); await seal?.assertUnchanged(); };
-            return { close: async () => { closed = true; }, finalize() {
+            return { close: async () => { closed = true; }, finalize(completedEvent) {
                     return finalization ??= (async () => {
+                        const report = mode === 'gateway_publish_v1' ? validationReport(completedEvent) : undefined;
                         await current();
                         const host = new GitSnapshotHost({ root: input.checkoutPath, privateRoot: root, git: options.git, baseCommitSha: binding.base_commit_sha, workingBranch: binding.working_branch, maxFileBytes: limits.max_file_bytes, maxTotalBytes: 128 * 1024 * 1024 });
                         const observed = await host.observe();
@@ -99,7 +139,7 @@ export function createServerCiLocalFixHost(options) {
                                 await fd.close();
                             }
                         }
-                        const journal = new FilePublicationJournal(root), key = protocolHash({ mode: 'gateway_ci_v1', binding }), deltaFingerprint = protocolHash({ binding, files, profile: registration.ci_profile_fingerprint });
+                        const journal = new FilePublicationJournal(root), key = protocolHash({ mode, binding }), deltaFingerprint = protocolHash({ binding, files, profile: registration.ci_profile_fingerprint, ...(report ? { validation_report: report } : {}) });
                         return journal.exclusive(key, async () => {
                             const previous = await journal.load(key);
                             if (previous && previous.candidate_fingerprint !== deltaFingerprint)
@@ -114,7 +154,7 @@ export function createServerCiLocalFixHost(options) {
                             let result;
                             stageStarted = true;
                             try {
-                                result = (await options.gateway.executeServerCiPublication({ ...fence, operation: 'stage', files, securityReceipt: { ...security }, hostReceipt: { ...registration.receipt } })).result;
+                                result = (await options.gateway.executeServerCiPublication({ ...fence, operation: 'stage', files, ...(report ? { validationReport: report } : {}), securityReceipt: { ...security }, hostReceipt: { ...registration.receipt } })).result;
                             }
                             catch {
                                 throw new PublicationOutcomeUnknownError();
@@ -135,7 +175,7 @@ export function createServerCiLocalFixHost(options) {
                                 if (result.status === 'completed') {
                                     await current();
                                     const ci = result.ci;
-                                    if (result.verification_mode !== 'gateway_ci_v1' || ci?.status !== 'passed' || typeof result.commit_sha !== 'string' || !/^[a-f0-9]{40}$/.test(result.commit_sha) || ci.commit_sha !== result.commit_sha || result.working_branch !== binding.working_branch)
+                                    if (result.verification_mode !== mode || (mode === 'gateway_ci_v1' ? ci?.status !== 'passed' || ci.commit_sha !== result.commit_sha : ci?.status !== 'not_run' || result.verification?.status !== 'unverified') || typeof result.commit_sha !== 'string' || !/^[a-f0-9]{40}$/.test(result.commit_sha) || result.working_branch !== binding.working_branch)
                                         throw new PublicationOutcomeUnknownError();
                                     return result;
                                 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "mtech-ai-local-runner",
-  "version": "0.1.32",
+  "version": "0.1.33",
   "private": false,
   "license": "UNLICENSED",
   "bin": {