orizu 0.5.5 → 0.5.7

package/dist/hosted-bootstrap.js

@@ -24,7 +24,7 @@
  */
 import { sweepForTokenResidue } from './daytona-slice.js';
 import { redactSecrets } from './secret-redaction.js';
-import { BEARER_BASENAME, BOOT_CONTEXT_BASENAME, DEFAULT_CACHE_REFRESH_BUFFER_MS, HELPER_SCRIPT_BASENAME, PREBAKED_MARKER_PATH, REPO_CRED_CACHE_BASENAME, SETUP_HOOK_RELATIVE_PATH, parsePrebakedMarker, renderCredentialHelperScript, serializeBootContext, } from './hosted-runtime-assets.js';
+import { AGENT_GIT_IDENTITY, BEARER_BASENAME, BOOT_CONTEXT_BASENAME, DEFAULT_CACHE_REFRESH_BUFFER_MS, HELPER_SCRIPT_BASENAME, PREBAKED_MARKER_PATH, REPO_CRED_CACHE_BASENAME, SETUP_HOOK_RELATIVE_PATH, parsePrebakedMarker, renderCredentialHelperScript, serializeBootContext, } from './hosted-runtime-assets.js';
 function newEventId() {
     const cryptoObj = globalThis.crypto;
     if (cryptoObj?.randomUUID)
@@ -236,6 +236,11 @@ export async function bootstrapHostedSandbox(opts) {
         // Persist the helper repo-LOCAL (never --global) for subsequent fetch/push.
         await session.exec(`git -C ${workspaceDir} config credential.helper ${shellSingleQuote(helperValue)}`);
         await session.exec(`git -C ${workspaceDir} config credential.useHttpPath true`);
+        // Repo-LOCAL agent identity: the sandbox has no ambient git identity, so
+        // without this every agent `git commit` dies with "Author identity unknown"
+        // (ALI-1036, found live in QA-3). Same identity the loop stamps on events.
+        await session.exec(`git -C ${workspaceDir} config user.name ${shellSingleQuote(AGENT_GIT_IDENTITY.name)}`);
+        await session.exec(`git -C ${workspaceDir} config user.email ${shellSingleQuote(AGENT_GIT_IDENTITY.email)}`);
         record('repo_cloned', true, `cloned ${opts.sessionBranch}`);
         await sink.append('repo_cloned', { branch: opts.sessionBranch, workspaceDir });
         // 4 — Provision the Orizu CLI (non-fatal, recorded — OpenInspect setup.sh

package/dist/hosted-runtime-assets.js

@@ -31,6 +31,14 @@ export const DEFAULT_CACHE_REFRESH_BUFFER_MS = 5 * 60 * 1000;
 /** Customer setup hook path, relative to the repo root (mirrors OpenInspect's
  *  `.openinspect/setup.sh` — fresh-boot only, non-fatal, output captured). */
 export const SETUP_HOOK_RELATIVE_PATH = '.orizu/setup.sh';
+/**
+ * The git author identity for hosted-agent commits. Bootstrap configures it
+ * repo-LOCAL in the sandbox clone (never --global) so agent `git commit` works
+ * out of the box — the sandbox has no ambient identity and commits died with
+ * "Author identity unknown" (ALI-1036, found live in QA-3). The loop uses the
+ * same identity for run-event attribution; keep them identical.
+ */
+export const AGENT_GIT_IDENTITY = { name: 'Orizu Agent', email: 'agent@orizu.ai' };
 // -- Pre-baked runtime marker (ALI-1017) -------------------------------------
 /**
  * Absolute path of the marker the pre-baked hosted-runtime image writes at build

package/dist/hosted-session-cli.js

@@ -37,7 +37,7 @@
 import { createLocalSimProvider, } from './sandbox-provider.js';
 import { bootstrapHostedSandbox, createBootstrapRunEventSink, } from './hosted-bootstrap.js';
 import { resumeRunEventSink } from './hosted-run-event-sink.js';
-import { BEARER_BASENAME } from './hosted-runtime-assets.js';
+import { AGENT_GIT_IDENTITY, BEARER_BASENAME } from './hosted-runtime-assets.js';
 import { createVercelProvider } from './vercel-sandbox-provider.js';
 import { buildEgressPolicy, DEFAULT_EGRESS_CANARY_HOST } from './egress-policy.js';
 import { hostedLoopCommand } from './hosted-loop.js';
@@ -355,7 +355,7 @@ export async function startHostedSession(opts) {
         model,
         reasoningEffort: opts.reasoningEffort,
         messageId: `${runId}:task`,
-        author: { name: 'Orizu Agent', email: 'agent@orizu.ai' },
+        author: AGENT_GIT_IDENTITY,
         anthropicDummyKey: opts.modelApiKey ? ANTHROPIC_DUMMY_KEY : undefined,
         // ALI-1017: skip the in-sandbox opencode install when the image ships it.
         prebaked: prebakedImage,

package/dist/manifests-cli.js

@@ -73,6 +73,66 @@ function asRecord(value) {
 function num(value) {
     return typeof value === 'number' ? value : 0;
 }
+// -- list table (ALI-1038) ----------------------------------------------------
+/** "3m" / "4h" / "2d" — enough resolution to pick a manifest out of a list. */
+function relativeAge(iso, now) {
+    if (typeof iso !== 'string')
+        return '-';
+    const then = Date.parse(iso);
+    if (Number.isNaN(then))
+        return '-';
+    const mins = Math.max(0, Math.floor((now - then) / 60_000));
+    if (mins < 60)
+        return `${mins}m`;
+    const hours = Math.floor(mins / 60);
+    if (hours < 48)
+        return `${hours}h`;
+    return `${Math.floor(hours / 24)}d`;
+}
+/** One-glance change summary from the stored proposedState — no live API call. */
+function changesSummary(manifest) {
+    if (manifest.actionType !== 'repo_merge')
+        return '-';
+    const proposed = asRecord(manifest.proposedState);
+    const files = num(proposed.filesChanged);
+    const parts = `${files} file${files === 1 ? '' : 's'} +${num(proposed.additions)}/-${num(proposed.deletions)}`;
+    // Instruction files steer agent behavior — reviewers should see the flag in the list.
+    return proposed.touches_instruction_files === true ? `${parts} !instr` : parts;
+}
+/** Reviewable-first (pending_approval, then draft), newest first within a group. */
+function listOrder(a, b) {
+    const rank = (m) => m.status === 'pending_approval' ? 0 : m.status === 'draft' ? 1 : 2;
+    const byRank = rank(a) - rank(b);
+    if (byRank !== 0)
+        return byRank;
+    const created = (m) => typeof m.createdAt === 'string' ? Date.parse(m.createdAt) || 0 : 0;
+    return created(b) - created(a);
+}
+/** Render manifests as the standard padEnd table (matches teams/projects list). */
+function manifestsTable(manifests, now) {
+    if (manifests.length === 0)
+        return 'promotion manifests\n(none)';
+    const rows = [...manifests].sort(listOrder).map(manifest => ({
+        id: typeof manifest.id === 'string' ? manifest.id : '(unknown)',
+        status: typeof manifest.status === 'string' ? manifest.status : '(unknown)',
+        type: typeof manifest.actionType === 'string' ? manifest.actionType : '(unknown)',
+        changes: changesSummary(manifest),
+        author: typeof manifest.authorActorType === 'string' ? manifest.authorActorType : '-',
+        age: relativeAge(manifest.createdAt, now),
+    }));
+    const idWidth = Math.max('ID'.length, ...rows.map(row => row.id.length));
+    const statusWidth = Math.max('STATUS'.length, ...rows.map(row => row.status.length));
+    const typeWidth = Math.max('TYPE'.length, ...rows.map(row => row.type.length));
+    const changesWidth = Math.max('CHANGES'.length, ...rows.map(row => row.changes.length));
+    const authorWidth = Math.max('AUTHOR'.length, ...rows.map(row => row.author.length));
+    const header = `${'ID'.padEnd(idWidth)}  ${'STATUS'.padEnd(statusWidth)}  ${'TYPE'.padEnd(typeWidth)}  ` +
+        `${'CHANGES'.padEnd(changesWidth)}  ${'AUTHOR'.padEnd(authorWidth)}  AGE`;
+    const divider = `${'-'.repeat(idWidth)}  ${'-'.repeat(statusWidth)}  ${'-'.repeat(typeWidth)}  ` +
+        `${'-'.repeat(changesWidth)}  ${'-'.repeat(authorWidth)}  ---`;
+    const body = rows.map(row => `${row.id.padEnd(idWidth)}  ${row.status.padEnd(statusWidth)}  ${row.type.padEnd(typeWidth)}  ` +
+        `${row.changes.padEnd(changesWidth)}  ${row.author.padEnd(authorWidth)}  ${row.age}`);
+    return [header, divider, ...body].join('\n');
+}
 // repo_merge manifests (ALI-972) render the compare summary from stored evidence
 // — no live GitHub call — so a reviewer can approve informed without a PR.
 function repoMergeShow(manifest) {
@@ -108,7 +168,7 @@ export async function manifestsCommand(args, io) {
         const response = await fetcherFrom(io)(`/api/cli/promotion-manifests${query}`);
         const data = await requireOk(response, 'Manifest list');
         const manifests = Array.isArray(data.manifests) ? data.manifests : [];
-        emit(io, { manifests }, ['promotion manifests', ...manifests.map(manifestLine)].join('\n'));
+        emit(io, { manifests }, manifestsTable(manifests, Date.now()));
         return 0;
     }
     if (subcommand === 'show') {
@@ -135,7 +195,23 @@ export async function manifestsCommand(args, io) {
         });
         const data = await requireOk(response, `Manifest ${subcommand}`);
         const manifest = (data.manifest ?? {});
-        emit(io, { manifest }, manifestLine(manifest));
+        const lines = [manifestLine(manifest)];
+        // Reject reaps the session branch best-effort; a failed reap must never be
+        // silent (ALI-1043) — surface it with the exact cleanup command.
+        if (subcommand === 'reject' && manifest.actionType === 'repo_merge') {
+            const outcome = asRecord(manifest.outcome);
+            const branch = asRecord(manifest.proposedState).branch;
+            if (outcome.branchDeleted === true) {
+                lines.push('session branch deleted');
+            }
+            else if (typeof branch === 'string' && branch.length > 0) {
+                lines.push(`warning: the session branch could not be deleted — remove it with: git push origin --delete ${branch}`);
+            }
+            else {
+                lines.push('warning: the session branch could not be deleted (branch name unavailable)');
+            }
+        }
+        emit(io, { manifest }, lines.join('\n'));
         return 0;
     }
     io.print('Usage: orizu manifests <list|show|approve|reject|apply> ... [--json]');

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "orizu",
-  "version": "0.5.5",
+  "version": "0.5.7",
   "private": false,
   "type": "module",
   "bin": {

package/src/hosted-bootstrap.ts

@@ -27,6 +27,7 @@ import type { SandboxSession } from './sandbox-provider.js'
 import { sweepForTokenResidue, type HygieneFinding } from './daytona-slice.js'
 import { redactSecrets } from './secret-redaction.js'
 import {
+  AGENT_GIT_IDENTITY,
   BEARER_BASENAME,
   BOOT_CONTEXT_BASENAME,
   DEFAULT_CACHE_REFRESH_BUFFER_MS,
@@ -410,6 +411,11 @@ export async function bootstrapHostedSandbox(opts: HostedBootstrapOptions): Prom
     // Persist the helper repo-LOCAL (never --global) for subsequent fetch/push.
     await session.exec(`git -C ${workspaceDir} config credential.helper ${shellSingleQuote(helperValue)}`)
     await session.exec(`git -C ${workspaceDir} config credential.useHttpPath true`)
+    // Repo-LOCAL agent identity: the sandbox has no ambient git identity, so
+    // without this every agent `git commit` dies with "Author identity unknown"
+    // (ALI-1036, found live in QA-3). Same identity the loop stamps on events.
+    await session.exec(`git -C ${workspaceDir} config user.name ${shellSingleQuote(AGENT_GIT_IDENTITY.name)}`)
+    await session.exec(`git -C ${workspaceDir} config user.email ${shellSingleQuote(AGENT_GIT_IDENTITY.email)}`)
     record('repo_cloned', true, `cloned ${opts.sessionBranch}`)
     await sink.append('repo_cloned', { branch: opts.sessionBranch, workspaceDir })
 

package/src/hosted-runtime-assets.ts

@@ -35,6 +35,15 @@ export const DEFAULT_CACHE_REFRESH_BUFFER_MS = 5 * 60 * 1000
  *  `.openinspect/setup.sh` — fresh-boot only, non-fatal, output captured). */
 export const SETUP_HOOK_RELATIVE_PATH = '.orizu/setup.sh'
 
+/**
+ * The git author identity for hosted-agent commits. Bootstrap configures it
+ * repo-LOCAL in the sandbox clone (never --global) so agent `git commit` works
+ * out of the box — the sandbox has no ambient identity and commits died with
+ * "Author identity unknown" (ALI-1036, found live in QA-3). The loop uses the
+ * same identity for run-event attribution; keep them identical.
+ */
+export const AGENT_GIT_IDENTITY = { name: 'Orizu Agent', email: 'agent@orizu.ai' } as const
+
 // -- Pre-baked runtime marker (ALI-1017) -------------------------------------
 
 /**

package/src/hosted-session-cli.ts

@@ -49,7 +49,7 @@ import {
   type HostedRuntimePaths,
 } from './hosted-bootstrap.js'
 import { resumeRunEventSink } from './hosted-run-event-sink.js'
-import { BEARER_BASENAME } from './hosted-runtime-assets.js'
+import { AGENT_GIT_IDENTITY, BEARER_BASENAME } from './hosted-runtime-assets.js'
 import { createVercelProvider } from './vercel-sandbox-provider.js'
 import { buildEgressPolicy, DEFAULT_EGRESS_CANARY_HOST } from './egress-policy.js'
 import { hostedLoopCommand, type HostedLoopContext } from './hosted-loop.js'
@@ -534,7 +534,7 @@ export async function startHostedSession(
     model,
     reasoningEffort: opts.reasoningEffort,
     messageId: `${runId}:task`,
-    author: { name: 'Orizu Agent', email: 'agent@orizu.ai' },
+    author: AGENT_GIT_IDENTITY,
     anthropicDummyKey: opts.modelApiKey ? ANTHROPIC_DUMMY_KEY : undefined,
     // ALI-1017: skip the in-sandbox opencode install when the image ships it.
     prebaked: prebakedImage,

package/src/manifests-cli.ts

@@ -93,6 +93,71 @@ function num(value: unknown): number {
   return typeof value === 'number' ? value : 0
 }
 
+// -- list table (ALI-1038) ----------------------------------------------------
+
+/** "3m" / "4h" / "2d" — enough resolution to pick a manifest out of a list. */
+function relativeAge(iso: unknown, now: number): string {
+  if (typeof iso !== 'string') return '-'
+  const then = Date.parse(iso)
+  if (Number.isNaN(then)) return '-'
+  const mins = Math.max(0, Math.floor((now - then) / 60_000))
+  if (mins < 60) return `${mins}m`
+  const hours = Math.floor(mins / 60)
+  if (hours < 48) return `${hours}h`
+  return `${Math.floor(hours / 24)}d`
+}
+
+/** One-glance change summary from the stored proposedState — no live API call. */
+function changesSummary(manifest: Record<string, unknown>): string {
+  if (manifest.actionType !== 'repo_merge') return '-'
+  const proposed = asRecord(manifest.proposedState)
+  const files = num(proposed.filesChanged)
+  const parts = `${files} file${files === 1 ? '' : 's'} +${num(proposed.additions)}/-${num(proposed.deletions)}`
+  // Instruction files steer agent behavior — reviewers should see the flag in the list.
+  return proposed.touches_instruction_files === true ? `${parts} !instr` : parts
+}
+
+/** Reviewable-first (pending_approval, then draft), newest first within a group. */
+function listOrder(a: Record<string, unknown>, b: Record<string, unknown>): number {
+  const rank = (m: Record<string, unknown>): number =>
+    m.status === 'pending_approval' ? 0 : m.status === 'draft' ? 1 : 2
+  const byRank = rank(a) - rank(b)
+  if (byRank !== 0) return byRank
+  const created = (m: Record<string, unknown>): number =>
+    typeof m.createdAt === 'string' ? Date.parse(m.createdAt) || 0 : 0
+  return created(b) - created(a)
+}
+
+/** Render manifests as the standard padEnd table (matches teams/projects list). */
+function manifestsTable(manifests: Record<string, unknown>[], now: number): string {
+  if (manifests.length === 0) return 'promotion manifests\n(none)'
+  const rows = [...manifests].sort(listOrder).map(manifest => ({
+    id: typeof manifest.id === 'string' ? manifest.id : '(unknown)',
+    status: typeof manifest.status === 'string' ? manifest.status : '(unknown)',
+    type: typeof manifest.actionType === 'string' ? manifest.actionType : '(unknown)',
+    changes: changesSummary(manifest),
+    author: typeof manifest.authorActorType === 'string' ? manifest.authorActorType : '-',
+    age: relativeAge(manifest.createdAt, now),
+  }))
+  const idWidth = Math.max('ID'.length, ...rows.map(row => row.id.length))
+  const statusWidth = Math.max('STATUS'.length, ...rows.map(row => row.status.length))
+  const typeWidth = Math.max('TYPE'.length, ...rows.map(row => row.type.length))
+  const changesWidth = Math.max('CHANGES'.length, ...rows.map(row => row.changes.length))
+  const authorWidth = Math.max('AUTHOR'.length, ...rows.map(row => row.author.length))
+  const header =
+    `${'ID'.padEnd(idWidth)}  ${'STATUS'.padEnd(statusWidth)}  ${'TYPE'.padEnd(typeWidth)}  ` +
+    `${'CHANGES'.padEnd(changesWidth)}  ${'AUTHOR'.padEnd(authorWidth)}  AGE`
+  const divider =
+    `${'-'.repeat(idWidth)}  ${'-'.repeat(statusWidth)}  ${'-'.repeat(typeWidth)}  ` +
+    `${'-'.repeat(changesWidth)}  ${'-'.repeat(authorWidth)}  ---`
+  const body = rows.map(
+    row =>
+      `${row.id.padEnd(idWidth)}  ${row.status.padEnd(statusWidth)}  ${row.type.padEnd(typeWidth)}  ` +
+      `${row.changes.padEnd(changesWidth)}  ${row.author.padEnd(authorWidth)}  ${row.age}`
+  )
+  return [header, divider, ...body].join('\n')
+}
+
 // repo_merge manifests (ALI-972) render the compare summary from stored evidence
 // — no live GitHub call — so a reviewer can approve informed without a PR.
 function repoMergeShow(manifest: Record<string, unknown>): string {
@@ -130,7 +195,7 @@ export async function manifestsCommand(args: string[], io: ManifestsCommandIo):
     const response = await fetcherFrom(io)(`/api/cli/promotion-manifests${query}`)
     const data = await requireOk(response, 'Manifest list')
     const manifests = Array.isArray(data.manifests) ? (data.manifests as Record<string, unknown>[]) : []
-    emit(io, { manifests }, ['promotion manifests', ...manifests.map(manifestLine)].join('\n'))
+    emit(io, { manifests }, manifestsTable(manifests, Date.now()))
     return 0
   }
 
@@ -159,7 +224,23 @@ export async function manifestsCommand(args: string[], io: ManifestsCommandIo):
     })
     const data = await requireOk(response, `Manifest ${subcommand}`)
     const manifest = (data.manifest ?? {}) as Record<string, unknown>
-    emit(io, { manifest }, manifestLine(manifest))
+    const lines = [manifestLine(manifest)]
+    // Reject reaps the session branch best-effort; a failed reap must never be
+    // silent (ALI-1043) — surface it with the exact cleanup command.
+    if (subcommand === 'reject' && manifest.actionType === 'repo_merge') {
+      const outcome = asRecord(manifest.outcome)
+      const branch = asRecord(manifest.proposedState).branch
+      if (outcome.branchDeleted === true) {
+        lines.push('session branch deleted')
+      } else if (typeof branch === 'string' && branch.length > 0) {
+        lines.push(
+          `warning: the session branch could not be deleted — remove it with: git push origin --delete ${branch}`
+        )
+      } else {
+        lines.push('warning: the session branch could not be deleted (branch name unavailable)')
+      }
+    }
+    emit(io, { manifest }, lines.join('\n'))
     return 0
   }