stackbite 0.5.107 → 0.5.109

package/README.md

@@ -251,22 +251,16 @@ provider 완료 증거와 구별합니다. Codex·Claude의 hooks는 시작·작
 기록합니다. CLI 로그인, workspace 신뢰, hooks 신뢰와 도구 실행 승인은 provider 안에서 처리합니다.
 Stackbite는 승인·sandbox를 우회하지 않습니다.
 
-Python SDK `AgentStackbite`는 방을 대상으로 합니다. 외부 스크립트는 `room_id`를
-명시하고, 좌석 안의 에이전트는 상속된 `STACKBITE_ROOM_ID`를 사용합니다. 인증된
-`TaskRoomClient`로 위임하며 방이 없는 호출은 거절합니다. 직접 방 API를 사용하려면
-`TaskRoomClient`를 사용합니다.
+스크립트와 에이전트는 native CLI 또는 인증된 Room HTTP API를 사용합니다.
+Seat 안에서 현재 Room의 좌석을 조회하려면 다음 명령을 실행합니다.
 
-기존 방의 좌석을 조회하는 예:
-
-```python
-from private_pty import AgentStackbite, TaskRoomClient
-
-sdk = AgentStackbite(room_id="review-room", client=TaskRoomClient())
-seats = sdk.list_agents()  # 이 방의 정의된 좌석; 정지된 좌석도 포함
+```sh
+stackbite-room seats --output json
 ```
 
-좌석 안에서는 `AgentStackbite()`가 상속된 방을 사용합니다. 생성자는 데몬을 시작하거나
-로컬 에이전트를 생성하지 않습니다.
+외부 스크립트는 `GET /api/rooms/{room_id}`로 Room과 Seat를 조회할 수 있습니다.
+Python 엔진과 함께 제공되던 소스 SDK(`private_pty.AgentStackbite`, `TaskRoomClient`)는
+native 전환에서 제거했습니다. Room HTTP 경로와 인증 계약은 유지합니다.
 
 기본 방 주소는 `http://127.0.0.1:8090`입니다. 명시적 `base_url`,
 `STACKBITE_ROOM_BRIDGE_URL`, 기본 주소 순서로 선택합니다. 클라이언트는 상태 위치에서
@@ -317,12 +311,11 @@ Work Stack은 작업 정리와 Task 권한을, Stackbite는 로컬 Room/Seat 실
 유지합니다. 선택한 Task의 workspace·revision을 확인한 뒤 방을 만들며 이 과정은 Task
 상태를 수정하지 않습니다.
 
-```powershell
-python -m private_pty.workstack_link room --task T-0041 --cwd C:\my-project --isolated --source-repo C:\my-project
-```
+선택 Task 연결은 native WorkStack 배포 경로와 Rust
+`stackbite_management::public_workstack::link` API에서 처리합니다.
 
 handoff의 첫 줄 `WorkStack binding:` JSON marker와 Task ID·workspace·revision 계약은
-유지합니다. `publish_checkpoint()`는 새로 검증한 바인딩과 안정적인 intent ID로 호출자가
+유지합니다. Rust `Link::publish_checkpoint()`는 새로 검증한 바인딩과 안정적인 intent ID로 호출자가
 작성한 사실만 전달합니다. commit_unknown은 operation-status로 확인하고 mutation을
 재전송하지 않습니다. 로그·프롬프트 자동 복사나 Task 자동 완료는 하지 않습니다.
 
@@ -333,19 +326,28 @@ handoff의 첫 줄 `WorkStack binding:` JSON marker와 Task ID·workspace·revis
 
 ## 개발과 성능 검토
 
-```powershell
-python -m pip install -r requirements-build.txt
-python stackbite.py
+제품 실행 경로는 `rust/`의 launcher, management, terminald와 TUI입니다.
+Python 엔진과 Rich TUI는 제거했습니다. Rust package 빌드는
+`scripts/build_rust_terminal.py`를 사용하고, 세 플랫폼 release builder는 그 package를
+native 배포본으로 조립합니다. `scripts/native_bundle.py`가 최종 파일 목록과 Python
+런타임 부재를 검사합니다.
+
+```sh
+cd rust
+cargo test --workspace
 ```
 
-핵심 구현은 `private_pty/`의 PTY·VT 버퍼·세션 registry·Room/Seat·실행 저널·Rich TUI와
-`office_backend_bridge.py`의 인증 HTTP API입니다. 런타임 데이터와 개인 설정은 배포에 포함하지
-않습니다. 정적 웹 오피스(`company_office_mockup.html` 등)는 제거되었고 `/agency-agents/`의
-manifest identity는 유지합니다.
+비교 테스트는 고정된 0.5.108 Git 소스를 테스트 캐시에 읽습니다. Git에 해당 커밋의
+객체와 테스트용 Python이 필요하며 제품 실행에는 필요하지 않습니다. 자세한 조건은
+`rust/test_support/python_oracle_root.rs`에 있습니다. 과거 Python 엔진 자체를 검증하던
+테스트는 native 제품의 qualification 결과로 집계하지 않습니다.
+
+런타임 데이터와 개인 설정은 배포에 포함하지 않습니다. `/agency-agents/` manifest
+identity와 기존 Room·Seat·기록·인증 계약은 유지합니다.
 원격 웹 접속의 origin·신뢰 프록시는 `STACKBITE_ALLOWED_ORIGINS`·`STACKBITE_TRUSTED_PROXY_IPS`로
 명시합니다. `X-Office-Token` 인증은 로컬 요청에도 필요합니다.
 
-### Python 테스트 스위트의 호스트 선행조건
+### 개발용 비교 테스트의 호스트 선행조건
 
 `tests/host_prerequisites.py`가 스위트가 전제하는 호스트 도구의 단일 표입니다. 빠진 항목은 pytest
 시작 시 한 번 보고되고, 그 항목이 필요한 테스트만 이유를 밝히며 건너뜁니다(Windows는 건너뛰지 않고
@@ -362,7 +364,7 @@ Linux 검증 명령(4 CPU 기준). 선행조건을 모두 갖춘 호스트에서
 건너뜀 없이 실행했음을 확인합니다.
 
 ```sh
-python -m pytest tests -q -p no:randomly -p no:cacheprovider -n 4 --dist loadfile --timeout=600
+python -m pytest tests/test_native_bundle_builder.py tests/test_build_macos_release.py tests/test_linux_release_packaging.py -q
 ```
 
 프로세스 안에서 도는 테스트는 `/etc/machine-id`가 없으면 스위트가 만든 임시 식별자를 쓰지만, 별도

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "stackbite",
-  "version": "0.5.107",
+  "version": "0.5.109",
   "description": "Verified native Stackbite CLI bootstrapper",
   "license": "UNLICENSED",
   "engines": {

package/packaging/npm/lib/bootstrap.js

@@ -505,6 +505,46 @@ function previousCacheHome(home, cache, platform) {
   return typeof home === 'string' && path.isAbsolute(home) && /^v1-[a-f0-9]{64}$/.test(path.basename(home))
     && !!cache && spelling(path.dirname(path.resolve(home))) === spelling(cache);
 }
+// Bounded portable.json of an image; null when absent, linked, oversized or malformed.
+async function portableMetadata(root) {
+  try { return JSON.parse((await readSmall(path.join(root, 'portable.json'), 16384)).toString('utf8')); }
+  catch { return null; }
+}
+// The release identity Python's former-cache check compares (Windows may omit platform).
+function portableMatches(value, spec) {
+  return !!value && typeof value === 'object' && value.product === 'Stackbite' && value.command === 'stackbite'
+    && value.version === spec.version && value.commit === spec.commit
+    && (Object.hasOwn(value, 'platform') ? value.platform : spec.platform === 'win32' ? spec.host : undefined) === spec.host;
+}
+// An absolute literal path with no linked ancestor and no source repository.
+async function literalPath(home) {
+  if (!path.isAbsolute(home) || path.resolve(home) !== home) return false;
+  for (let ancestor = home; ; ancestor = path.dirname(ancestor)) {
+    let info = null;
+    try { info = await fs.lstat(ancestor); } catch (error) { if (error.code !== 'ENOENT') return false; }
+    if (info?.isSymbolicLink() || info && await exists(path.join(ancestor, '.git'))) return false;
+    if (ancestor === path.dirname(ancestor)) return true;
+  }
+}
+// A previous-layout cache image recorded by a host with another cache root:
+// the shape and portable identity Python's _former_cache_image accepts. This
+// classifies the file only; no environment state changes it. It is only read.
+async function formerCache(home, spec) {
+  if (typeof home !== 'string' || !/^v1-[a-f0-9]{64}$/.test(path.basename(home))
+      || path.basename(path.dirname(home)) !== 'stackbite') return null;
+  try {
+    if (!await literalPath(home) || !(await fs.lstat(home)).isDirectory()) return null;
+  } catch { return null; }
+  return portableMatches(await portableMetadata(home), spec) ? home : null;
+}
+// A former cache selection this run may migrate: the engine moves a selection
+// only under its own state, so a per-run STACKBITE_STATE_DIR never does. The
+// engine reads a legacy HELM_STATE_DIR only when STACKBITE_STATE_DIR is absent
+// (even empty, the canonical name wins). It decides again under its locks.
+async function formerSelection(saved, environment, spec) {
+  const state = Object.hasOwn(environment, 'STACKBITE_STATE_DIR') ? environment.STACKBITE_STATE_DIR : environment.HELM_STATE_DIR;
+  return state && path.resolve(state) !== saved?.state ? null : formerCache(saved?.home, spec);
+}
 async function publishCache(payload, target, spec, options) {
   await assertBaseline(options.environment, spec.platform);
   let migrate = false;
@@ -515,7 +555,8 @@ async function publishCache(payload, target, spec, options) {
       if (!await exists(locator)) continue;
       const saved = JSON.parse((await readSmall(locator, 16384)).toString('utf8').replace(/^\uFEFF/, ''));
       const descriptor = options.environment.STACKBITE_NPM_REGISTRATION;
-      migrate = previousCacheHome(saved.home, options.cache, spec.platform);
+      migrate = previousCacheHome(saved.home, options.cache, spec.platform)
+        || !!await formerSelection(saved, options.environment, spec);
       if (!migrate && typeof saved.home === 'string' && path.isAbsolute(saved.home)
           && typeof saved.state === 'string' && path.isAbsolute(saved.state) && /^[a-f0-9]{32}$/.test(saved.installation_id)
           && (!descriptor || JSON.stringify(saved.npm_registration) === JSON.stringify(JSON.parse(descriptor)))) return;
@@ -533,15 +574,73 @@ async function publishCache(payload, target, spec, options) {
 function runtimeDirectory(environment, platform) {
   return path.join(installationRoot(environment, platform), 'app');
 }
-// The previous layout's image of this exact pinned identity, when it still
-// passes the full pinned validation. It is only read; a live process may use it.
+// This root's first locator, when it fully names an installation: the same
+// shape publishCache keeps without rewriting its home.
+async function establishedLocator(root) {
+  for (const name of ['default-install.json', 'install.json']) {
+    const locator = path.join(root, name);
+    if (!await exists(locator)) continue;
+    const saved = JSON.parse((await readSmall(locator, 16384)).toString('utf8').replace(/^\uFEFF/, ''));
+    return saved && typeof saved.home === 'string' && path.isAbsolute(saved.home)
+      && typeof saved.state === 'string' && path.isAbsolute(saved.state)
+      && /^[a-f0-9]{32}$/.test(saved.installation_id) ? saved : null;
+  }
+  return null;
+}
+async function installationLocator(environment, platform) {
+  const root = installationRoot(environment, platform);
+  return await selectedDirectory(root, environment, platform) ? establishedLocator(root) : null;
+}
+// The image root when its portable identity is this release; null otherwise.
+async function sameRelease(home, spec) {
+  let root;
+  try { root = await payloadRoot(home); } catch { return null; }
+  return portableMatches(await portableMetadata(root), spec) ? root : null;
+}
+// Another archive of this release (a re-signed build) carries its own valid
+// checksum manifest that pins its portable.json. A damaged image does not.
+async function anotherPin(root) {
+  try {
+    const hashes = JSON.parse((await readSmall(path.join(root, 'SHA256SUMS.json'))).toString('utf8'));
+    expectedMembers(hashes);
+    const metadata = await readSmall(path.join(root, 'portable.json'), 16384);
+    return hashes['portable.json'] === createHash('sha256').update(metadata).digest('hex');
+  } catch { return false; }
+}
+// An image the established installation already selects outside app/: an
+// explicit STACKBITE_HOME, else the locator's home. Another release or pin is
+// skipped; an image of this release must otherwise carry this package's pinned
+// documents, and the caller then validates its whole payload, so a damaged image
+// of this release is refused, not replaced. Publication keeps the locator's
+// home, except that a cache image (this host's or a former host's) is never run
+// in place.
+async function selectedImage(environment, spec, cache) {
+  const saved = await installationLocator(environment, spec.platform);
+  // A previous-cache selection keeps its existing migration path.
+  if (!saved || previousCacheHome(saved.home, cache, spec.platform)) return null;
+  const former = await formerCache(saved.home, spec);
+  for (const home of [environment.STACKBITE_HOME, saved.home]) {
+    if (typeof home !== 'string' || !path.isAbsolute(home) || home === former) continue;
+    const root = await sameRelease(home, spec);
+    if (!root) continue;
+    try { await pinnedDocuments(root, spec); }
+    catch (error) { if (await anotherPin(root)) continue; throw error; }
+    return path.resolve(home);
+  }
+  return null;
+}
+// An image of this exact pinned identity, when it passes the full pinned
+// validation. It is only read; a live process may use it.
+async function verifiedImage(home, spec) {
+  if (!home) return null;
+  try { await validatePayload(home, spec); } catch { return null; }
+  return home;
+}
 async function previousImage(legacy, cache, spec) {
-  if (!await existingCacheDirectory(cache) || !await exists(legacy)) return null;
-  try { await validatePayload(legacy, spec); } catch { return null; }
-  return legacy;
+  return await existingCacheDirectory(cache) && await exists(legacy) ? verifiedImage(legacy, spec) : null;
 }
 async function ensureBinary(spec, { cache = cacheDirectory(), runtime = null, downloadImpl = download, extractImpl = extractArchive,
-  checkOnly = false, reportCached = false, includePhone = false, progress = () => {},
+  checkOnly = false, reportCached = false, includePhone = false, reuseSelected = false, progress = () => {},
   environment = process.env, publishImpl = publishCache, registrationSource = null, ...options } = {}) {
   cache = await resolveCacheDirectory(cache);
   environment = { ...environment };
@@ -560,18 +659,25 @@ async function ensureBinary(spec, { cache = cacheDirectory(), runtime = null, do
     if (registrationSource) await registrationSource.validate();
     if (!checkOnly) await assertBaseline(environment, spec.platform);
     // Check-only callers (removal, setup --check) never publish; they may still
-    // use an image of the previous cache layout.
-    const home = await selectedDirectory(runtime, environment, spec.platform) && await exists(target) ? target
-      : checkOnly && await existingCacheDirectory(cache) && await exists(legacy) ? legacy : null;
+    // use an image of the previous cache layout, this host's or a former host's.
+    const published = await selectedDirectory(runtime, environment, spec.platform) && await exists(target);
+    const former = !published && reuseSelected
+      ? await formerCache((await installationLocator(environment, spec.platform))?.home, spec) : null;
+    const home = published ? target
+      : reuseSelected && await selectedImage(environment, spec, cache)
+        || (checkOnly ? (await existingCacheDirectory(cache) && await exists(legacy) ? legacy : former) : null);
     if (home) {
       if (checkOnly || reportCached) progress('validate');
       const installed = { home, executable: await validatePayload(home, spec, { includePhone }) };
-      if (!checkOnly) await publishImpl(target, target, spec, { ...options, environment, cache, existing: true });
+      // A selected image outside app/ is its own maintenance engine.
+      if (!checkOnly) await publishImpl(home, target, spec, { ...options, environment, cache, existing: true });
       if (checkOnly || reportCached) progress('ready');
       return installed;
     }
     if (checkOnly) throw notCached();
-    const previous = await previousImage(legacy, cache, spec);
+    // A verified previous-layout image is copied once into the durable target;
+    // the engine then moves a cache selection there.
+    const previous = await previousImage(legacy, cache, spec) || await verifiedImage(former, spec);
     if (previous) {
       progress('publish');
       await admitPublication(environment, spec.platform);
@@ -615,9 +721,11 @@ async function stageRelease(spec, staging, { downloadImpl, extractImpl, progress
   await fs.mkdir(extraction, { mode: 0o700 });
   progress('download');
   await downloadImpl(spec, archive);
-  // Recheck at the extraction boundary, including for injected test transports.
+  // download() itself verifies the exact size and SHA-256 before returning.
+  // Recheck any other transport at the extraction boundary.
   progress('archive');
-  if ((await fs.stat(archive)).size !== spec.size || await hashFile(archive, LIMITS.download) !== spec.sha256) fail('Pinned archive SHA-256 or size mismatch');
+  if (downloadImpl !== download && ((await fs.stat(archive)).size !== spec.size
+      || await hashFile(archive, LIMITS.download) !== spec.sha256)) fail('Pinned archive SHA-256 or size mismatch');
   progress('extract');
   await extractImpl(archive, extraction, spec);
   const payload = path.join(extraction, spec.root);
@@ -718,7 +826,7 @@ async function main(argv = process.argv.slice(2), options = {}) {
     try { installed = await timing.phase(environment, 'launcher.ensure', () => ensureBinary(spec, { ...options,
       environment, registrationSource,
       cache: options.cache || cacheDirectory(environment, platform),
-      checkOnly: removing || setup?.checkOnly || false, reportCached: Boolean(setup),
+      checkOnly: removing || setup?.checkOnly || false, reportCached: Boolean(setup), reuseSelected: !removing,
       includePhone: removing || Boolean(setup) || argv[0] === 'phone',
       progress: options.progress || stageReporter(options.stderr || process.stderr) })); }
     catch (error) {

package/packaging/npm/release.json

@@ -1,35 +1,35 @@
 {
   "schema": 1,
-  "version": "0.5.107",
-  "commit": "506288e3f01c20dd709905c95eaa46ad04471b17",
+  "version": "0.5.109",
+  "commit": "6239b4525c8addd92996c32d14fe4ff987f2106c",
   "repository": "Shinick-Han/stackbite",
   "platforms": {
     "win32-x64": {
-      "asset": "stackbite-0.5.107-windows-x64-506288e3f01c.zip",
-      "url": "https://github.com/Shinick-Han/stackbite/releases/download/v0.5.107/stackbite-0.5.107-windows-x64-506288e3f01c.zip",
-      "sha256": "6da273fbd3805fff41c3dc1346c39eb7290f4969b30e5f14124a9f9948659701",
-      "size": 96379204,
-      "root": "stackbite-0.5.107-windows-x64-506288e3f01c",
-      "manifestSha256": "fb81b39e291be6bd012b2d1e481f38aa506e38681ea463ddb55dd21bfeab309a",
-      "metadataSha256": "871eed20e507d284102373ce50e586919cf0ed3b5a791b6afa9d8cc7df762604"
+      "asset": "stackbite-0.5.109-windows-x64-6239b4525c8a.zip",
+      "url": "https://github.com/Shinick-Han/stackbite/releases/download/v0.5.109/stackbite-0.5.109-windows-x64-6239b4525c8a.zip",
+      "sha256": "bf854cc3c0ea1c571bf030ee4dcdd3280ebf7fc51842566ae7c84806fb4a2648",
+      "size": 75620079,
+      "root": "stackbite-0.5.109-windows-x64-6239b4525c8a",
+      "manifestSha256": "86d1b0083e8bb24c6d7807323c6dd0367f218df3f2f70b6865853e87498ef0f1",
+      "metadataSha256": "729775b4b8f527380f07dca18134bb0337e40630b654d7343b474bc7a351590d"
     },
     "linux-x64": {
-      "asset": "stackbite-0.5.107-linux-x86_64-506288e3f01c.tar.gz",
-      "url": "https://github.com/Shinick-Han/stackbite/releases/download/v0.5.107/stackbite-0.5.107-linux-x86_64-506288e3f01c.tar.gz",
-      "sha256": "74e451669bd460b690dc45d4abe9f7bbe6af10d0ab56519c5c4a7c0ff55b2350",
-      "size": 77586426,
-      "root": "stackbite-0.5.107-linux-x86_64-506288e3f01c",
-      "manifestSha256": "a3030ce79fe2b84314064f7a5f5794e744fe8d16cfa223d467a8670cdc957e15",
-      "metadataSha256": "9df20d2f675d4e4457a060d07b1b821146d9dcfaa92a532960cb8c6b39239d35"
+      "asset": "stackbite-0.5.109-linux-x86_64-6239b4525c8a.tar.gz",
+      "url": "https://github.com/Shinick-Han/stackbite/releases/download/v0.5.109/stackbite-0.5.109-linux-x86_64-6239b4525c8a.tar.gz",
+      "sha256": "c158d9682780799d411de03d669d95f040f1b7eedf243fb2322bf12ebb58eaed",
+      "size": 76560731,
+      "root": "stackbite-0.5.109-linux-x86_64-6239b4525c8a",
+      "manifestSha256": "ceda4e9e9375668273bc06bd8655c5a121ff7e8a8839ed6dab5ac00a0135f6b0",
+      "metadataSha256": "ecc12703927e7b16584fc5ef72bd0ba73f8504bacbcd1dc9750517f58578aab1"
     },
     "darwin-arm64": {
-      "asset": "stackbite-0.5.107-macos-arm64-506288e3f01c.tar.gz",
-      "url": "https://github.com/Shinick-Han/stackbite/releases/download/v0.5.107/stackbite-0.5.107-macos-arm64-506288e3f01c.tar.gz",
-      "sha256": "ddf4c956c7657df6bb4684aa3f7a9d677144cca2deb4e425e3a6442b88671262",
-      "size": 33557501,
-      "root": "stackbite-0.5.107-macos-arm64-506288e3f01c",
-      "manifestSha256": "4c2ab4d509a2fb1a48696c820b8c3f8cadea9441817e314a595ab8b08f34cef3",
-      "metadataSha256": "e07aedd09b464458bef021518136bbcfb3d9b521f72e1da991b6d1091cccaed3"
+      "asset": "stackbite-0.5.109-macos-arm64-6239b4525c8a.tar.gz",
+      "url": "https://github.com/Shinick-Han/stackbite/releases/download/v0.5.109/stackbite-0.5.109-macos-arm64-6239b4525c8a.tar.gz",
+      "sha256": "c072020d6f1571cbe6fe2edc9dbc91bbd1e16559629d6cacfa4922a892039932",
+      "size": 58348881,
+      "root": "stackbite-0.5.109-macos-arm64-6239b4525c8a",
+      "manifestSha256": "499e31056ff33004a101f5ea0b8d113b276e33c82520c4fbbcc50108d0af652c",
+      "metadataSha256": "ca1457292980aa202810185af7635321b9d35712e954ad29128990312affa474"
     }
   }
 }