engineering-platform 2.3.58__tar.gz → 2.3.66__tar.gz

{engineering_platform-2.3.58 → engineering_platform-2.3.66}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: engineering-platform
-Version: 2.3.58
+Version: 2.3.66
 Summary: Local-first Engineering Platform execution operations runtime
 Author: Peter van Tol
 License: MIT

{engineering_platform-2.3.58 → engineering_platform-2.3.66}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "setuptools.build_meta"
 
 [project]
 name = "engineering-platform"
-version = "2.3.58"
+version = "2.3.66"
 description = "Local-first Engineering Platform execution operations runtime"
 readme = "README.md"
 requires-python = ">=3.14,<3.15"

{engineering_platform-2.3.58 → engineering_platform-2.3.66}/src/engineering_platform/ENGINEERING_PLATFORM_CONFIG.json

@@ -3,7 +3,7 @@
   "platform": {
     "id": "engineering-platform",
     "name": "Engineering Platform",
-    "version": "2.3.58",
+    "version": "2.3.66",
     "generation": 2,
     "documentation_namespace": "engineering-platform",
     "capability_registry_version": 1

{engineering_platform-2.3.58 → engineering_platform-2.3.66}/src/engineering_platform/ENGINEERING_PLATFORM_VERSION.json

@@ -1,15 +1,15 @@
 {
   "bootstrap_contract": "2026.12",
   "checkpoint_format": 1,
-  "dashboard_version": "2.3.58",
+  "dashboard_version": "2.3.66",
   "handoff_protocol": 1,
   "memory_format": 2,
   "minimum_codex_cli": "0.146.0",
   "inbox_protocol": 1,
-  "platform_version": "2.3.58",
+  "platform_version": "2.3.66",
   "report_format": 2,
-  "runner_version": "2.3.58",
+  "runner_version": "2.3.66",
   "status_model": 1,
   "storage_schema": 44,
-  "watcher_version": "2.3.58"
+  "watcher_version": "2.3.66"
 }

{engineering_platform-2.3.58 → engineering_platform-2.3.66}/src/engineering_platform/agent_state.py

@@ -301,27 +301,38 @@ class TransactionState:
                 not isinstance(item, dict) or set(item) != audit_fields
                 or not all(isinstance(value, str) and value and len(value) <= MAX_DIAGNOSTIC_LENGTH and value == redact_diagnostic(value) for value in item.values())
                 or not item["iteration"].isdigit() or int(item["iteration"]) < 1
-                or item["outcome"] not in {"validated", "validation_failed", "agent_failed"}
+                or item["outcome"] not in {"validated", "validation_failed", "agent_failed", "assessment_rejected"}
                 or (item["commit_sha"] != "not_recorded" and not re.fullmatch(r"[0-9a-f]{40}", item["commit_sha"]))
                 for item in state.local_validation_audit
             )
         ):
             raise StateError("checkpoint local validation audit is invalid or unsafe")
         repair_audit_fields = audit_fields | {"repair_id", "origin", "input_candidate_sha", "dispatch_id"}
+        repair_delivery_scope_fields = repair_audit_fields | {"pre_repair_pull_request"}
+        repair_delivery_authority_fields = repair_delivery_scope_fields | {"repair_branch", "repair_base", "first_pr_authorized"}
         if (
             not isinstance(state.repair_audit, tuple)
             or len(state.repair_audit) > 3
             or any(
-                not isinstance(item, dict) or set(item) not in (audit_fields, repair_audit_fields)
+                not isinstance(item, dict) or set(item) not in (audit_fields, repair_audit_fields, repair_delivery_scope_fields, repair_delivery_authority_fields)
                 or not all(isinstance(value, str) and value and len(value) <= MAX_DIAGNOSTIC_LENGTH and value == redact_diagnostic(value) for value in item.values())
                 or not item["iteration"].isdigit() or int(item["iteration"]) < 1
                 or item["outcome"] not in {"planned", "submitted_for_recheck", "agent_failed", "agent_timed_out"}
                 or (item["commit_sha"] != "not_recorded" and not re.fullmatch(r"[0-9a-f]{40}", item["commit_sha"]))
-                or (set(item) == repair_audit_fields and (
+                or (set(item) in (repair_audit_fields, repair_delivery_scope_fields, repair_delivery_authority_fields) and (
                     not re.fullmatch(r"repair:[A-Za-z0-9_.:-]+:[1-3]", item["repair_id"])
                     or item["origin"] not in {"validation", "quality", "security", "hosted", "finalization"}
                     or (item["input_candidate_sha"] != "not_recorded" and not re.fullmatch(r"[0-9a-f]{40}", item["input_candidate_sha"]))
                 ))
+                or (set(item) in (repair_delivery_scope_fields, repair_delivery_authority_fields) and (
+                    item["pre_repair_pull_request"] != "none"
+                    and not (item["pre_repair_pull_request"].isdigit() and int(item["pre_repair_pull_request"]) >= 1)
+                ))
+                or (set(item) == repair_delivery_authority_fields and (
+                    (item["pre_repair_pull_request"] != "none" and item["first_pr_authorized"] != "no")
+                    or (item["pre_repair_pull_request"] == "none" and item["first_pr_authorized"] not in {"yes", "no"})
+                    or item["repair_branch"] == "none" or item["repair_base"] != "main"
+                ))
                 for item in state.repair_audit
             )
             or len({item.get("repair_id", f"legacy:{item['iteration']}") for item in state.repair_audit}) != len(state.repair_audit)

{engineering_platform-2.3.58 → engineering_platform-2.3.66}/src/engineering_platform/assets/dashboard.css

@@ -273,7 +273,7 @@ html[data-theme="light"] :is(#rateLimitReset,#codexCliUpdate){background:#e8fff5
 .prompt-history-row{cursor:pointer}.prompt-history-lineage{color:#b9b6c0;display:block;font:11px/1.35 system-ui;margin-top:4px;white-space:normal}
 /* The shared modal shell owns the prompt-detail frame and header. This
    component owns only its evidence layout and its inner document cards. */
-.prompt-detail-modal__panel{display:grid;grid-template-rows:auto auto minmax(0,1fr);height:100%;overflow:hidden}.prompt-detail-modal__content{align-items:start;box-sizing:border-box;display:grid;gap:18px;grid-template-columns:minmax(0,1fr) minmax(280px,.82fr);min-height:0;overflow:auto;overscroll-behavior:contain;padding:0 12px 10px;scrollbar-gutter:stable both-edges}.prompt-detail-leftbar,.prompt-detail-rightbar{align-content:start;align-items:start;display:grid;gap:18px;grid-row:1;min-width:0}.prompt-detail-leftbar{grid-column:1}.prompt-detail-rightbar{grid-column:2}.prompt-detail-leftbar :is(.prompt-detail-card--execution-summary,.prompt-detail-sidebar),.prompt-detail-rightbar :is(.prompt-detail-card--execution-context,.prompt-detail-card--pull-requests){grid-column:auto;grid-row:auto}.prompt-detail-sidebar{align-content:start;align-items:start;display:grid;gap:18px}.prompt-detail-card{border:1px solid var(--category-color);border-radius:14px;padding:18px}.prompt-detail-card--wide{grid-column:1/-1}.prompt-detail-card h3{color:var(--category-color);font-size:18px;margin:0 0 14px}.prompt-detail-card .field{margin:0 0 14px}.prompt-detail-card .field:last-child{margin-bottom:0}.prompt-detail-card pre{overflow-wrap:anywhere;white-space:pre-wrap}.prompt-detail-card--execution-context{min-width:0;overflow:hidden}.prompt-detail-card--execution-context :is(.field,.label,span,li){min-width:0;overflow-wrap:anywhere;word-break:break-word}.detail-list-field ul{margin:6px 0 0;padding-inline-start:22px}@media (max-width:620px){.prompt-detail-modal__content{grid-template-columns:1fr;padding-inline:8px}.prompt-detail-leftbar,.prompt-detail-rightbar{grid-column:1;grid-row:auto}}
+.prompt-detail-modal__panel{display:grid;grid-template-rows:auto auto minmax(0,1fr);height:100%;overflow:hidden}.prompt-detail-modal__content{align-items:start;box-sizing:border-box;display:grid;gap:18px;grid-template-columns:minmax(0,1fr) minmax(280px,.82fr);min-height:0;overflow:auto;overscroll-behavior:contain;padding:0 12px 10px;scrollbar-gutter:stable both-edges}.prompt-detail-leftbar,.prompt-detail-rightbar{align-content:start;align-items:start;display:grid;gap:18px;grid-row:1;min-width:0}.prompt-detail-leftbar{grid-column:1}.prompt-detail-rightbar{grid-column:2}.prompt-detail-leftbar :is(.prompt-detail-card--execution-summary,.prompt-detail-sidebar),.prompt-detail-rightbar :is(.prompt-detail-card--execution-context,.prompt-detail-card--pull-requests){grid-column:auto;grid-row:auto}.prompt-detail-sidebar{align-content:start;align-items:start;display:grid;gap:18px}.prompt-detail-card{border:1px solid var(--category-color);border-radius:14px;padding:18px}.prompt-detail-card--wide{grid-column:1/-1}.prompt-detail-card h3{color:var(--category-color);font-size:18px;margin:0 0 14px}.prompt-detail-card .field{margin:0 0 14px}.prompt-detail-card .field:last-child{margin-bottom:0}.prompt-detail-card pre{overflow-wrap:anywhere;white-space:pre-wrap}.prompt-detail-diagnostic>span:last-child{white-space:pre-wrap}.prompt-detail-card--execution-context{min-width:0;overflow:hidden}.prompt-detail-card--execution-context :is(.field,.label,span,li){min-width:0;overflow-wrap:anywhere;word-break:break-word}.detail-list-field ul{margin:6px 0 0;padding-inline-start:22px}@media (max-width:620px){.prompt-detail-modal__content{grid-template-columns:1fr;padding-inline:8px}.prompt-detail-leftbar,.prompt-detail-rightbar{grid-column:1;grid-row:auto}}
 .prompt-detail-provider-review{display:grid;gap:18px;grid-column:1/-1;grid-template-columns:minmax(0,1fr) minmax(260px,.58fr)}@media (max-width:760px){.prompt-detail-provider-review{grid-template-columns:1fr}}
 .prompt-detail-provider-review-stack{display:grid;gap:18px;grid-column:1/-1}.prompt-detail-provider-review>.prompt-detail-card{align-self:stretch;box-sizing:border-box}.prompt-detail-card--commit-timeline{display:flex;flex-direction:column;min-height:0}.prompt-detail-commit-timeline__list{align-content:start;display:grid;flex:1;gap:10px;list-style:none;margin:0;max-height:none;min-height:0;overflow:auto;padding:0 8px 0 0;scrollbar-gutter:stable}.prompt-detail-commit-timeline__item{border-top:1px solid color-mix(in srgb,var(--category-color) 38%,transparent);display:grid;gap:3px;padding-top:10px}.prompt-detail-commit-timeline__item:first-child{border-top:0;padding-top:0}.prompt-detail-commit-timeline__meta{color:var(--dashboard-modal-muted);font-size:12px;line-height:1.35}.prompt-detail-commit-timeline__item code{font-size:12px;overflow-wrap:anywhere}.prompt-detail-commit-timeline__item>span{font-size:13px;line-height:1.4;overflow-wrap:anywhere}
 .prompt-detail-commit-timeline__phase{border-top:1px solid color-mix(in srgb,var(--category-color) 52%,transparent);list-style:none;padding:13px 0 0}.prompt-detail-commit-timeline__phase:first-child{border-top:0;padding-top:0}.prompt-detail-commit-timeline__phase h4{color:var(--category-color);font-size:12px;letter-spacing:.04em;margin:0 0 9px;text-transform:uppercase}.prompt-detail-commit-timeline__phase-entries{display:grid;gap:10px;list-style:none;margin:0;padding:0 0 2px}.prompt-detail-commit-timeline__phase-entries .prompt-detail-commit-timeline__item{border-top:0;padding-top:0}
@@ -639,7 +639,7 @@ html[data-theme="light"] :is(.log-table,.telemetry-table) tbody tr:hover>td:firs
 #currentRun{--category-color:#65c5d9;--category-secondary:#a7e7f2;background:#1e2b33}
 #currentRun{container-name:active-execution;container-type:inline-size}
 #currentRun .current-run__grid,#currentRun .current-run__grid>*{min-width:0}
-@container active-execution (min-width:760px){#currentRun .current-run__grid{grid-template-columns:repeat(2,minmax(0,1fr))}#currentRun #currentDiagnostic{grid-column:1 / -1}}
+@container active-execution (min-width:760px){#currentRun .current-run__grid{grid-template-columns:repeat(2,minmax(0,1fr))}#currentRun #executionIdentity{grid-column:1}#currentRun .card:has(#executionEstimate){grid-column:2}#currentRun #executionContext,#currentRun #currentDiagnostic{grid-column:1 / -1}}
 #currentRun .card,#currentRun .card:has(#currentTime),#currentRun .card:has(#executionEstimate),#currentRun .card:has(#runId),#currentRun .card:has(#executionMode){--category-color:#65c5d9;--category-secondary:#a7e7f2;background:#1b2931;border-color:#65c5d9}
 #currentRun :is(.execution-lifecycle,.execution-context--primary){background:#1b2931!important}
 #engineering-dashboard-content>#technicalDetails{--category-color:var(--house-style);--section-secondary:#a7e7f2;background:#302a24;border-color:var(--house-style)}
@@ -985,7 +985,7 @@ html[data-theme="light"] ::-webkit-scrollbar-thumb:hover{background:#0a6b9d}
 /* Telemetry can contain multiple long tables. Keep its outer dialog within
    the visual viewport and scroll only its evidence body on small screens. */
 .telemetry-detail-modal{--modal-accent:#fb7185;--category-color:var(--modal-accent);--modal-outer-gutter:24px;--modal-panel-max-width:1120px;--modal-shell-inset:24px;--modal-shell-padding:0}.telemetry-detail-modal__panel{--modal-header-inset:var(--dashboard-modal-panel-padding);display:grid;grid-template-rows:auto auto minmax(0,1fr);height:100%;max-height:100%;overflow:hidden;width:min(1120px,100%)}.telemetry-detail-modal__content{max-height:none;min-height:0;overflow-x:hidden;overflow-y:auto;overscroll-behavior:contain;padding:0 4px 4px}@media(max-width:620px){.telemetry-detail-modal__panel{--modal-header-inset:18px;padding:18px}.telemetry-detail-modal__content{padding-inline:2px}}
-.lifecycle-detail-modal{--modal-default-accent:#65c5d9}.lifecycle-detail-modal__panel{background:var(--modal-surface);border:2px solid var(--modal-accent);border-radius:var(--dashboard-modal-radius);box-sizing:border-box;color:var(--dashboard-modal-ink);display:grid;grid-template-rows:auto minmax(0,1fr);max-width:min(680px,calc(100vw - 32px));overflow:hidden;padding:var(--dashboard-modal-panel-padding);width:100%}.lifecycle-detail-modal__content{color:var(--dashboard-modal-ink);display:grid;gap:18px;max-height:none;min-height:0;overflow:auto;overscroll-behavior:contain;padding:4px}.lifecycle-detail-modal__content .field>span:last-child{color:var(--dashboard-modal-ink)}.lifecycle-detail-modal__content h3{color:var(--modal-accent);font-size:16px;margin:0 0 8px}.lifecycle-detail-modal :is(.label,.lifecycle-detail-modal__phase-list strong){color:var(--modal-secondary-accent)}.lifecycle-detail-modal__phase-list{display:grid;gap:8px;list-style:none;margin:0;padding:0}.lifecycle-detail-modal__phase-list li{align-items:baseline;border-bottom:1px solid color-mix(in srgb,var(--modal-accent) 32%,transparent);display:flex;gap:12px;justify-content:space-between;padding:8px 0}.lifecycle-detail-modal__phase-list li:last-child{border-bottom:0}.lifecycle-detail-modal__phase-list span{color:var(--dashboard-modal-muted);text-align:end}html[data-theme="light"] .lifecycle-detail-modal :is(.label,.lifecycle-detail-modal__phase-list strong){color:color-mix(in srgb,var(--modal-secondary-accent) 76%,#182230)}@media(max-width:620px){.lifecycle-detail-modal__panel{max-width:calc(100vw - 32px);padding:18px}.lifecycle-detail-modal__phase-list li{align-items:flex-start;flex-direction:column;gap:4px}.lifecycle-detail-modal__phase-list span{text-align:start}}
+.lifecycle-detail-modal{--modal-default-accent:#65c5d9}.lifecycle-detail-modal__panel{background:var(--modal-surface);border:2px solid var(--modal-accent);border-radius:var(--dashboard-modal-radius);box-sizing:border-box;color:var(--dashboard-modal-ink);display:grid;grid-template-rows:auto minmax(0,1fr);max-width:min(680px,calc(100vw - 32px));overflow:hidden;padding:var(--dashboard-modal-panel-padding);width:100%}.lifecycle-detail-modal__content{color:var(--dashboard-modal-ink);display:grid;gap:18px;max-height:none;min-height:0;overflow:auto;overscroll-behavior:contain;padding:4px}.lifecycle-detail-modal__content .field>span:last-child{color:var(--dashboard-modal-ink)}.lifecycle-detail-modal__content h3{color:var(--modal-accent);font-size:16px;margin:0 0 8px}.lifecycle-detail-modal :is(.label,.lifecycle-detail-modal__phase-list strong){color:var(--modal-secondary-accent)}.lifecycle-detail-modal__phase-list{display:grid;gap:8px;list-style:none;margin:0;padding:0}.lifecycle-detail-modal__phase-list li{align-items:baseline;border-bottom:1px solid color-mix(in srgb,var(--modal-accent) 32%,transparent);display:flex;gap:12px;justify-content:space-between;padding:8px 0}.lifecycle-detail-modal__phase-list li:last-child{border-bottom:0}.lifecycle-detail-modal__phase-list span{color:var(--dashboard-modal-muted);text-align:start}html[data-theme="light"] .lifecycle-detail-modal :is(.label,.lifecycle-detail-modal__phase-list strong){color:color-mix(in srgb,var(--modal-secondary-accent) 76%,#182230)}@media(max-width:620px){.lifecycle-detail-modal__panel{max-width:calc(100vw - 32px);padding:18px}.lifecycle-detail-modal__phase-list li{align-items:flex-start;flex-direction:column;gap:4px}.lifecycle-detail-modal__phase-list span{text-align:start}}
 /* A telemetry Run-ID is a redundant activator inside an interactive row.
    The row owns its continuous rose selection surface, never the text itself. */
 .telemetry-run-link{-webkit-appearance:none;appearance:none;background:transparent;border:0;color:inherit;cursor:pointer;font:inherit;line-height:inherit;min-height:0;min-width:0;padding:0;text-align:left;text-decoration:none;white-space:nowrap}.telemetry-run-link:is(:hover,:active){background:transparent!important;color:inherit!important}.telemetry-run-link:is(:focus,:focus-visible){border-color:transparent!important;box-shadow:none!important;outline:0!important}

{engineering_platform-2.3.58 → engineering_platform-2.3.66}/src/engineering_platform/assets/dashboard.js

@@ -1863,6 +1863,8 @@ function renderExecutionContext(context, execution = {}) {
     [t("detail.target_checkout"), execution.checkout_path],
     [t("detail.target_branch"), execution.target_branch],
     [t("ui.active_branch"), execution.active_branch],
+    [t("detail.candidate_sha"), execution.candidate_sha],
+    [t("detail.repair_iteration"), execution.repair_iteration],
   ].filter(([, value]) => executionContextValue(value));
   if (!context || typeof context !== "object") {
     card.replaceChildren(
@@ -2244,7 +2246,7 @@ function lifecycleRepairEvidence(step) {
       dynamicField(t("detail.failed_checks"), item.failed_checks),
       dynamicField(t("detail.proposed_action"), item.proposed_action),
       dynamicField(t("detail.ai_repair_summary"), item.agent_summary),
-      lifecycleDetailField(t("detail.commit"), String(item.commit_sha || t("detail.not_recorded"))),
+      lifecycleDetailField(t("detail.commit"), item.commit_sha === "not_recorded" ? t("detail.not_recorded") : String(item.commit_sha || t("detail.not_recorded"))),
       lifecycleDetailField(t("detail.outcome"), t("lifecycle.repair_outcome." + outcome, {}, outcome || t("detail.not_recorded"))),
     );
     section.append(heading, grid);
@@ -2386,18 +2388,24 @@ function lifecycleFlow(projection, { historical = false } = {}) {
   return section;
 }
 function activeRunPullRequestEntries(execution) {
-  const repository = String(execution?.target_repository || "").trim();
-  if (!/^[A-Za-z0-9_.-]+\/[A-Za-z0-9_.-]+$/.test(repository)) return [];
+  const repository = String(execution?.github_repository || execution?.target_repository || "").trim();
+  const githubRepository = /^[A-Za-z0-9_.-]+\/[A-Za-z0-9_.-]+$/.test(repository)
+    ? repository : null;
+  const seen = new Set();
   return [
+    ["bound", execution?.pull_request],
     ["implementation", execution?.implementation_pr],
     ["finalization", execution?.finalization_pr],
   ].flatMap(([role, value]) => {
     const number = Number(value);
-    if (!Number.isInteger(number) || number <= 0) return [];
+    if (!Number.isInteger(number) || number <= 0 || seen.has(number)) return [];
+    seen.add(number);
     return [{
       role,
       number,
-      url: `https://github.com/${repository.split("/").map(encodeURIComponent).join("/")}/pull/${number}`,
+      url: githubRepository
+        ? `https://github.com/${githubRepository.split("/").map(encodeURIComponent).join("/")}/pull/${number}`
+        : null,
     }];
   });
 }
@@ -2408,19 +2416,22 @@ function renderActivePullRequests(execution, lifecycle) {
   const entries = activeRunPullRequestEntries(execution);
   if (!entries.length) return;
   const labels = {
+    bound: t("detail.bound_pull_request"),
     implementation: t("detail.implementation_pull_request"),
     finalization: t("detail.finalization_pull_request"),
   };
   const fields = entries.map((entry) => {
     const field = detailField(labels[entry.role], "");
-    const link = document.createElement("a");
-    link.className = "prompt-detail-pr-link";
-    link.href = entry.url;
-    link.target = "_blank";
-    link.rel = "noopener noreferrer";
-    link.textContent = `#${entry.number} ↗`;
-    link.setAttribute("aria-label", `${labels[entry.role]} #${entry.number}`);
-    field.lastElementChild.replaceChildren(link);
+    const value = entry.url ? document.createElement("a") : document.createElement("span");
+    value.className = "prompt-detail-pr-link";
+    value.textContent = `#${entry.number}${entry.url ? " ↗" : ""}`;
+    value.setAttribute("aria-label", `${labels[entry.role]} #${entry.number}`);
+    if (entry.url) {
+      value.href = entry.url;
+      value.target = "_blank";
+      value.rel = "noopener noreferrer";
+    }
+    field.lastElementChild.replaceChildren(value);
     return field;
   });
   const card = promptDetailCard(
@@ -3759,6 +3770,7 @@ const COMPONENT_DETAIL_CODES = new Set([
   "LIFECYCLE_WORKER_SERVER_HOSTED", "OPERATIONS_CONSOLE_SERVER_NATIVE",
   "DASHBOARD_RELAY_TAILSCALE_AVAILABLE", "DASHBOARD_RELAY_LAUNCH_AGENT_UNLOADED",
   "DASHBOARD_RELAY_PROCESS_INACTIVE", "DASHBOARD_RELAY_LIFECYCLE_UNAVAILABLE",
+  "DASHBOARD_RELAY_TAILSCALE_UNAVAILABLE", "DASHBOARD_RELAY_ENDPOINT_UNREACHABLE",
 ]);
 function transportState(code) {
   const raw = String(code || ""), normalized = LEGACY_TRANSPORT_STATUS_CODES[raw] || raw;
@@ -3895,6 +3907,19 @@ function showComponentModal(payload) {
       payload.healthy ? t("component.health_healthy") : t("component.health_unhealthy"),
   );
   componentDetailField(fields, t("component.version"), payload.version);
+  if (payload.component === "dashboard_relay") {
+    componentDetailEndpoint(fields, t("component.relay_access"), payload.relay_endpoint);
+    componentDetailField(fields, t("component.tailscale_ipv4"), payload.tailscale_ipv4);
+    componentDetailField(
+      fields,
+      t("component.relay_probe"),
+      payload.relay_reachable === true
+        ? t("component.relay_reachable")
+        : payload.relay_reachable === false
+          ? t("component.relay_unreachable")
+          : null,
+    );
+  }
   if (payload.kind === "TRANSPORT") {
     const transportTimestamp = (value) => value ? formatTimestamp(value) : null;
     if (payload.component === "http_ingress")
@@ -7808,7 +7833,8 @@ function promptDetailExecutionSections(history) {
   const dynamicRows = [];
   const dynamicDiagnosticField = (label, source) => {
     const original = executionContextValue(source), value = formatDiagnostic(original || t("detail.not_recorded"));
-    const field = detailField(label, value, true);
+    const field = detailField(label, value);
+    field.classList.add("prompt-detail-diagnostic");
     if (dynamicDiagnosticSource(original)) dynamicRows.push({ source: original, element: field.lastElementChild, format: formatDiagnosticProjection });
     return field;
   };
@@ -7912,19 +7938,12 @@ function promptDetailUsageSection(usage) {
     usage_snapshot_count: t("detail.usage_snapshot_count"),
     intermediate_usage_delta_available: t("detail.intermediate_usage_delta_available"),
     maximum_incremental_input_tokens: t("detail.maximum_incremental_input_tokens"),
-    actual_single_request_context_size: t("detail.actual_single_request_context_size"),
-    active_context_size: t("detail.active_context_size"),
     estimated_credits: t("detail.estimated_credits"),
     estimated_eur: t("detail.estimated_eur"),
-    speed_state: t("detail.speed_state"),
     usage_authority: t("detail.usage_authority"),
   };
   const visible = Object.entries(usage).filter(([key, value]) => labels[key] && value !== null && typeof value !== "object");
   const displayValue = (key, value) => {
-    if (["actual_single_request_context_size", "active_context_size"].includes(key) && value === "UNAVAILABLE") {
-      return t("format.unavailable");
-    }
-    if (key === "speed_state") return t(`provider_usage.speed.${String(value).toLowerCase()}`, {}, String(value));
     if (key === "usage_authority") return t(`provider_usage.authority.${String(value).toLowerCase()}`, {}, String(value));
     return value;
   };

{engineering_platform-2.3.58 → engineering_platform-2.3.66}/src/engineering_platform/assets/dashboard_locales.mjs

@@ -3391,11 +3391,11 @@ Object.assign(DASHBOARD_MESSAGES.nl, {"lifecycle.detail_assurance":"Kwaliteits-
 Object.assign(DASHBOARD_MESSAGES.de, {"lifecycle.detail_assurance":"Qualitäts- und Sicherheitsprüfung","lifecycle.repair_rounds":"Reparaturrunden: {used}/{maximum}","lifecycle.assurance_no_findings":"Keine Befunde erfasst"});
 Object.assign(DASHBOARD_MESSAGES.fr, {"lifecycle.detail_assurance":"Assurance qualité et sécurité","lifecycle.repair_rounds":"Cycles de correction : {used}/{maximum}","lifecycle.assurance_no_findings":"Aucune conclusion enregistrée"});
 Object.assign(DASHBOARD_MESSAGES.es, {"lifecycle.detail_assurance":"Garantía de calidad y seguridad","lifecycle.repair_rounds":"Rondas de reparación: {used}/{maximum}","lifecycle.assurance_no_findings":"No se registraron hallazgos"});
-Object.assign(DASHBOARD_MESSAGES.en, {"lifecycle.detail_repair_evidence":"Executed pull request check repairs","lifecycle.detail_repair_iteration":"Repair iteration {iteration}","lifecycle.repair_outcome.submitted_for_recheck":"Submitted for recheck","lifecycle.repair_outcome.agent_failed":"Agent repair failed","lifecycle.repair_outcome.agent_timed_out":"Agent repair timed out"});
-Object.assign(DASHBOARD_MESSAGES.nl, {"lifecycle.detail_repair_evidence":"Uitgevoerd PR-controleherstel","lifecycle.detail_repair_iteration":"Hersteliteratie {iteration}","lifecycle.repair_outcome.submitted_for_recheck":"Ingediend voor hercontrole","lifecycle.repair_outcome.agent_failed":"Agentherstel mislukt","lifecycle.repair_outcome.agent_timed_out":"Agentherstel heeft de tijdslimiet overschreden"});
-Object.assign(DASHBOARD_MESSAGES.de, {"lifecycle.detail_repair_evidence":"Durchgeführte PR-Prüfreparaturen","lifecycle.detail_repair_iteration":"Reparaturiteration {iteration}","lifecycle.repair_outcome.submitted_for_recheck":"Zur erneuten Prüfung eingereicht","lifecycle.repair_outcome.agent_failed":"Agentenreparatur fehlgeschlagen","lifecycle.repair_outcome.agent_timed_out":"Zeitlimit der Agentenreparatur überschritten"});
-Object.assign(DASHBOARD_MESSAGES.fr, {"lifecycle.detail_repair_evidence":"Réparations de contrôles de pull request effectuées","lifecycle.detail_repair_iteration":"Itération de réparation {iteration}","lifecycle.repair_outcome.submitted_for_recheck":"Soumis pour nouvelle vérification","lifecycle.repair_outcome.agent_failed":"Réparation par l’agent échouée","lifecycle.repair_outcome.agent_timed_out":"La réparation par l’agent a dépassé le délai"});
-Object.assign(DASHBOARD_MESSAGES.es, {"lifecycle.detail_repair_evidence":"Reparaciones de comprobaciones de solicitud realizadas","lifecycle.detail_repair_iteration":"Iteración de reparación {iteration}","lifecycle.repair_outcome.submitted_for_recheck":"Enviado para nueva comprobación","lifecycle.repair_outcome.agent_failed":"La reparación del agente falló","lifecycle.repair_outcome.agent_timed_out":"La reparación del agente superó el tiempo límite"});
+Object.assign(DASHBOARD_MESSAGES.en, {"lifecycle.detail_repair_evidence":"Executed pull request check repairs","lifecycle.detail_repair_iteration":"Repair iteration {iteration}","lifecycle.repair_outcome.planned":"Planned","lifecycle.repair_outcome.submitted_for_recheck":"Submitted for recheck","lifecycle.repair_outcome.agent_failed":"Agent repair failed","lifecycle.repair_outcome.agent_timed_out":"Agent repair timed out"});
+Object.assign(DASHBOARD_MESSAGES.nl, {"lifecycle.detail_repair_evidence":"Uitgevoerd PR-controleherstel","lifecycle.detail_repair_iteration":"Hersteliteratie {iteration}","lifecycle.repair_outcome.planned":"Gepland","lifecycle.repair_outcome.submitted_for_recheck":"Ingediend voor hercontrole","lifecycle.repair_outcome.agent_failed":"Agentherstel mislukt","lifecycle.repair_outcome.agent_timed_out":"Agentherstel heeft de tijdslimiet overschreden"});
+Object.assign(DASHBOARD_MESSAGES.de, {"lifecycle.detail_repair_evidence":"Durchgeführte PR-Prüfreparaturen","lifecycle.detail_repair_iteration":"Reparaturiteration {iteration}","lifecycle.repair_outcome.planned":"Geplant","lifecycle.repair_outcome.submitted_for_recheck":"Zur erneuten Prüfung eingereicht","lifecycle.repair_outcome.agent_failed":"Agentenreparatur fehlgeschlagen","lifecycle.repair_outcome.agent_timed_out":"Zeitlimit der Agentenreparatur überschritten"});
+Object.assign(DASHBOARD_MESSAGES.fr, {"lifecycle.detail_repair_evidence":"Réparations de contrôles de pull request effectuées","lifecycle.detail_repair_iteration":"Itération de réparation {iteration}","lifecycle.repair_outcome.planned":"Planifiée","lifecycle.repair_outcome.submitted_for_recheck":"Soumis pour nouvelle vérification","lifecycle.repair_outcome.agent_failed":"Réparation par l’agent échouée","lifecycle.repair_outcome.agent_timed_out":"La réparation par l’agent a dépassé le délai"});
+Object.assign(DASHBOARD_MESSAGES.es, {"lifecycle.detail_repair_evidence":"Reparaciones de comprobaciones de solicitud realizadas","lifecycle.detail_repair_iteration":"Iteración de reparación {iteration}","lifecycle.repair_outcome.planned":"Planificada","lifecycle.repair_outcome.submitted_for_recheck":"Enviado para nueva comprobación","lifecycle.repair_outcome.agent_failed":"La reparación del agente falló","lifecycle.repair_outcome.agent_timed_out":"La reparación del agente superó el tiempo límite"});
 Object.assign(DASHBOARD_MESSAGES.en, {"lifecycle.step.autonomous_quality_repair":"Autonomous quality repair","lifecycle.detail_autonomous_quality_repair_evidence":"Completed quality repair iterations"});
 Object.assign(DASHBOARD_MESSAGES.nl, {"lifecycle.step.autonomous_quality_repair":"Autonoom kwaliteitsherstel","lifecycle.detail_autonomous_quality_repair_evidence":"Uitgevoerde kwaliteitshersteliteraties"});
 Object.assign(DASHBOARD_MESSAGES.de, {"lifecycle.step.autonomous_quality_repair":"Autonome Qualitätsreparatur","lifecycle.detail_autonomous_quality_repair_evidence":"Durchgeführte Qualitätsreparaturiterationen"});
@@ -3722,11 +3722,11 @@ Object.assign(DASHBOARD_MESSAGES.de, {"configuration.provider_readiness_interval
 Object.assign(DASHBOARD_MESSAGES.fr, {"configuration.provider_readiness_interval":"Intervalle de vérification de disponibilité des fournisseurs","configuration.provider_readiness_interval_help":"À quelle fréquence ce tableau de bord ouvert revérifie la disponibilité locale de Codex et GitHub sans démarrer d’exécution.","configuration.minute_1":"1 minute","configuration.minutes_5":"5 minutes","configuration.minutes_10":"10 minutes"});
 Object.assign(DASHBOARD_MESSAGES.es, {"configuration.provider_readiness_interval":"Intervalo de comprobación de disponibilidad de proveedores","configuration.provider_readiness_interval_help":"Con qué frecuencia este panel abierto vuelve a comprobar la disponibilidad local de Codex y GitHub sin iniciar una ejecución.","configuration.minute_1":"1 minuto","configuration.minutes_5":"5 minutos","configuration.minutes_10":"10 minutos"});
 
-Object.assign(DASHBOARD_MESSAGES.en, {"detail.pull_requests":"Pull requests","detail.implementation_pull_request":"Implementation pull request","detail.finalization_pull_request":"Finalization pull request"});
-Object.assign(DASHBOARD_MESSAGES.nl, {"detail.pull_requests":"Pull requests","detail.implementation_pull_request":"Implementatie-pullrequest","detail.finalization_pull_request":"Finalisatie-pullrequest"});
-Object.assign(DASHBOARD_MESSAGES.de, {"detail.pull_requests":"Pull Requests","detail.implementation_pull_request":"Implementierungs-Pull-Request","detail.finalization_pull_request":"Finalisierungs-Pull-Request"});
-Object.assign(DASHBOARD_MESSAGES.fr, {"detail.pull_requests":"Pull requests","detail.implementation_pull_request":"Pull request d’implémentation","detail.finalization_pull_request":"Pull request de finalisation"});
-Object.assign(DASHBOARD_MESSAGES.es, {"detail.pull_requests":"Solicitudes de extracción","detail.implementation_pull_request":"Solicitud de extracción de implementación","detail.finalization_pull_request":"Solicitud de extracción de finalización"});
+Object.assign(DASHBOARD_MESSAGES.en, {"detail.pull_requests":"Pull requests","detail.bound_pull_request":"Bound pull request","detail.implementation_pull_request":"Implementation pull request","detail.finalization_pull_request":"Finalization pull request","detail.candidate_sha":"Candidate SHA"});
+Object.assign(DASHBOARD_MESSAGES.nl, {"detail.pull_requests":"Pull requests","detail.bound_pull_request":"Gebonden pull request","detail.implementation_pull_request":"Implementatie-pullrequest","detail.finalization_pull_request":"Finalisatie-pullrequest","detail.candidate_sha":"Kandidaat-SHA"});
+Object.assign(DASHBOARD_MESSAGES.de, {"detail.pull_requests":"Pull Requests","detail.bound_pull_request":"Gebundener Pull Request","detail.implementation_pull_request":"Implementierungs-Pull-Request","detail.finalization_pull_request":"Finalisierungs-Pull-Request","detail.candidate_sha":"Kandidaten-SHA"});
+Object.assign(DASHBOARD_MESSAGES.fr, {"detail.pull_requests":"Pull requests","detail.bound_pull_request":"Pull request lié","detail.implementation_pull_request":"Pull request d’implémentation","detail.finalization_pull_request":"Pull request de finalisation","detail.candidate_sha":"SHA candidat"});
+Object.assign(DASHBOARD_MESSAGES.es, {"detail.pull_requests":"Solicitudes de extracción","detail.bound_pull_request":"Solicitud de extracción vinculada","detail.implementation_pull_request":"Solicitud de extracción de implementación","detail.finalization_pull_request":"Solicitud de extracción de finalización","detail.candidate_sha":"SHA candidato"});
 Object.assign(DASHBOARD_MESSAGES.en, {"detail.pull_request_commits":"Commits","detail.pull_request_checks":"GitHub checks","detail.pull_request_changed_files":"Files changed"});
 Object.assign(DASHBOARD_MESSAGES.nl, {"detail.pull_request_commits":"Commits","detail.pull_request_checks":"GitHub-controles","detail.pull_request_changed_files":"Gewijzigde bestanden"});
 Object.assign(DASHBOARD_MESSAGES.de, {"detail.pull_request_commits":"Commits","detail.pull_request_checks":"GitHub-Prüfungen","detail.pull_request_changed_files":"Geänderte Dateien"});
@@ -3904,6 +3904,12 @@ Object.assign(DASHBOARD_MESSAGES.es, {
   "ui.execution_status": "Estado de ejecución", "configuration.dashboard_settings": "Configuración de la consola de operaciones", "configuration.dashboard_stream_interval": "Intervalo de actualización de la consola de operaciones", "configuration.inbox_scan_interval": "Intervalo de exploración de entrada File Inbox", "configuration.operator_merge_interval_help": "Con qué frecuencia el Lifecycle Worker comprueba si ha cambiado el estado de una pull request que espera una fusión del operador.", "configuration.timeout_policy_description": "Límites fijos administrados por el host para cada acción del proveedor. Estos límites no se pueden editar en la consola de operaciones.", "dashboard.status_invalid": "El estado de la consola de operaciones no es válido.", "dashboard.status_unavailable": "La consola de operaciones no está disponible.", "header.skip": "Ir al contenido de la consola de operaciones", "logs.dashboard_unavailable": "El registro de la plataforma no está disponible.", "queue.defer_description": "¿Mover {title} fuera de la cola activa? El envío se conserva como entrada File Inbox diferida y no se ejecuta hasta que se devuelva explícitamente.", "queue.defer_failed": "El envío de entrada File Inbox no se pudo diferir de forma segura.", "queue.managed_branch_blocked": "La entrada File Inbox está en pausa porque este espacio de trabajo está en una rama de trabajo. El Execution Host solo puede reclamar trabajo desde main.", "queue.managed_branch_recovery": "La restauración devuelve un espacio de trabajo limpio a main y reinicia el Lifecycle Worker. No cambia ningún elemento de la cola.", "queue.managed_branch_recovery_ready": "Espacio de trabajo restaurado a main; el Lifecycle Worker vuelve a estar activo.", "queue.managed_branch_recovery_title": "Restaurar el espacio de trabajo de entrada File Inbox", "queue.runtime_invocation_blocked": "La entrada File Inbox está esperando porque la CLI local de Codex no puede iniciarse. Repare la instalación administrada de la CLI de Codex antes de volver a intentarlo.", "recovery.details": "¿Reintentar esta ejecución terminal mediante la ruta normal de entrada File Inbox? Engineering Platform vuelve a realizar la comprobación previa actual antes de crear una ejecución de sustitución. La ejecución fallida y sus evidencias no cambian.", "recovery.ready": "La recuperación está en cola; el Lifecycle Worker reclamará la ejecución de sustitución.", "refresh.refreshing": "Actualizando la consola de operaciones…", "status_reconciliation.confirmation": "Se colocará una conciliación Finalization específica en la cola de envíos de Engineering Platform. No cambia ningún comportamiento de producto ni de ejecución.", "ui.codex_cli_update_confirmation": "¿Instalar la actualización disponible de la CLI de Codex en esta máquina? La consola de operaciones verificará después la versión instalada.", "workspace.worktree_switch_confirmation": "¿Cambiar Engineering Platform a {branch} en {path}?\n\nEngineering Platform vuelve a comprobar:\n• no hay ninguna ejecución activa;\n• la cola de entrada File Inbox está vacía;\n• este árbol de trabajo registrado está limpio y exactamente en {branch}.\n\nDespués reinicia la consola de operaciones, el Lifecycle Worker y el Server Relay desde este árbol de trabajo.", "component.dashboard_relay": "Server Relay", "dashboard.health.DASHBOARD_RELAY_ACTIVE": "Server Relay activo", "dashboard.health.DASHBOARD_RELAY_UNAVAILABLE": "Server Relay no disponible", "dashboard.health.watcher": "Entrada File Inbox", "dashboard.health.watcher_state": "Estado del Lifecycle Worker", "state.WATCHER_IDLE": "No hay ejecución activa",
 });
 
+Object.assign(DASHBOARD_MESSAGES.en, {"component.relay_access":"Relay access","component.tailscale_ipv4":"Tailscale IPv4","component.relay_probe":"Functional relay check","component.relay_reachable":"Reachable","component.relay_unreachable":"Unreachable","component.detail.DASHBOARD_RELAY_TAILSCALE_UNAVAILABLE":"Tailscale address unavailable","component.detail.DASHBOARD_RELAY_ENDPOINT_UNREACHABLE":"Relay endpoint unreachable"});
+Object.assign(DASHBOARD_MESSAGES.nl, {"component.relay_access":"Relay-toegang","component.tailscale_ipv4":"Tailscale-IPv4","component.relay_probe":"Functionele relaycontrole","component.relay_reachable":"Bereikbaar","component.relay_unreachable":"Niet bereikbaar","component.detail.DASHBOARD_RELAY_TAILSCALE_UNAVAILABLE":"Tailscale-adres niet beschikbaar","component.detail.DASHBOARD_RELAY_ENDPOINT_UNREACHABLE":"Relay-endpoint niet bereikbaar"});
+Object.assign(DASHBOARD_MESSAGES.de, {"component.relay_access":"Relay-Zugriff","component.tailscale_ipv4":"Tailscale-IPv4","component.relay_probe":"Funktionale Relay-Prüfung","component.relay_reachable":"Erreichbar","component.relay_unreachable":"Nicht erreichbar","component.detail.DASHBOARD_RELAY_TAILSCALE_UNAVAILABLE":"Tailscale-Adresse nicht verfügbar","component.detail.DASHBOARD_RELAY_ENDPOINT_UNREACHABLE":"Relay-Endpunkt nicht erreichbar"});
+Object.assign(DASHBOARD_MESSAGES.fr, {"component.relay_access":"Accès au relais","component.tailscale_ipv4":"IPv4 Tailscale","component.relay_probe":"Vérification fonctionnelle du relais","component.relay_reachable":"Accessible","component.relay_unreachable":"Inaccessible","component.detail.DASHBOARD_RELAY_TAILSCALE_UNAVAILABLE":"Adresse Tailscale indisponible","component.detail.DASHBOARD_RELAY_ENDPOINT_UNREACHABLE":"Point d’accès du relais inaccessible"});
+Object.assign(DASHBOARD_MESSAGES.es, {"component.relay_access":"Acceso al relé","component.tailscale_ipv4":"IPv4 de Tailscale","component.relay_probe":"Comprobación funcional del relé","component.relay_reachable":"Accesible","component.relay_unreachable":"No accesible","component.detail.DASHBOARD_RELAY_TAILSCALE_UNAVAILABLE":"Dirección de Tailscale no disponible","component.detail.DASHBOARD_RELAY_ENDPOINT_UNREACHABLE":"Punto de acceso del relé no accesible"});
+
 export class LocalizationContractError extends Error {
   constructor({ locale, key, surface = "Console" }) {
     super(`LOCALIZATION_MISSING locale=${locale} key=${key} surface=${surface}`);

{engineering_platform-2.3.58 → engineering_platform-2.3.66}/src/engineering_platform/console_route_ownership.py

@@ -37,6 +37,7 @@ ROUTE_OWNERSHIP_MATRIX: tuple[ConsoleRoute, ...] = (
     ConsoleRoute(("GET",), r"/(?:favicon\.ico|apple-touch-icon(?:-precomposed)?\.png)", PLATFORM, "console_shell", "Console icons"),
     ConsoleRoute(("GET",), r"/assets/[A-Za-z0-9_./-]+", PLATFORM, "console_shell", "Installed Console assets"),
     ConsoleRoute(("GET",), r"/health", PLATFORM, "platform_components", "Platform Components health", True),
+    ConsoleRoute(("GET",), r"/api/health", PLATFORM, "platform_components", "Platform Components health compatibility alias", True),
     ConsoleRoute(("GET",), r"/api/platform-status", PLATFORM, "platform_components", "Platform Components projection", True),
     ConsoleRoute(("GET",), r"/api/(?:dashboard-snapshot|status|events)", PLATFORM, "platform_components", "Platform status projection or stream", True),
     ConsoleRoute(("GET",), rf"/api/components/{PLATFORM_COMPONENT_ROUTE_PATTERN}/details", PLATFORM, "platform_components", "Component detail popout", True),

{engineering_platform-2.3.58 → engineering_platform-2.3.66}/src/engineering_platform/dashboard_state.py

@@ -39,6 +39,21 @@ def _successful_reviewer_agents(value: object) -> list[dict[str, object]]:
     return reviewers if all(item.get("status") == "completed" for item in reviewers) else []
 
 
+def _run_workspace_preflight(root: Path, run_id: object) -> dict[str, object]:
+    """Return workspace-preflight evidence only when it belongs to this run.
+
+    The dashboard may retain the most recent workspace preflight for technical
+    diagnostics, but the active-run card must never borrow a branch result
+    from another run.
+    """
+    if not isinstance(run_id, str) or not run_id:
+        return {}
+    preflight = latest_workspace_preflight(root)
+    if not isinstance(preflight, dict) or preflight.get("run_id") != run_id:
+        return {}
+    return preflight
+
+
 def _active_runner_checkpoint(root: Path) -> tuple[dict[str, object], dict[str, object]] | None:
     """Return a current checkpoint only while its recorded runner group exists.
 
@@ -349,6 +364,7 @@ def status(root: Path) -> bytes:
     try:
         if live is None:
             raise ValueError("No canonical live status")
+        run_workspace_preflight = _run_workspace_preflight(root, live.get("run_id"))
         live_liveness = lease_liveness(root, live.get("run_id"))
         if runner_liveness is not None and runner_liveness.get("state") == "LIVE":
             live_liveness = {**live_liveness, **runner_liveness}
@@ -392,8 +408,15 @@ def status(root: Path) -> bytes:
                 "predecessor_recovery_action": watcher.get("predecessor_recovery_action"),
                 "execution_mode": live.get("execution_mode"),
                 "target_repository": live.get("target_repository"),
+                "github_repository": live.get("github_repository"),
                 "checkout_path": live.get("checkout_path"),
+                # This is the observed branch from the preflight owned by the
+                # displayed run; active_branch remains the current checkout.
+                "target_branch": run_workspace_preflight.get("branch"),
                 "active_branch": live.get("active_branch"),
+                "candidate_sha": live.get("candidate_sha"),
+                "repair_iteration": live.get("repair_iteration"),
+                "workspace_preflight": run_workspace_preflight,
                 # Only a wholly successful specialist review survives its
                 # live phase as historical evidence for this active run. A
                 # partial, failed or stale reviewer projection remains hidden.

{engineering_platform-2.3.58 → engineering_platform-2.3.66}/src/engineering_platform/dashboard_supervisor.swift

@@ -8,17 +8,26 @@ let loopbackAddress = "127.0.0.1"
 func tailscaleAddress() -> String? {
     let process = Process()
     let output = Pipe()
+    let reader = output.fileHandleForReading
+    let writer = output.fileHandleForWriting
+    defer {
+        reader.closeFile()
+        writer.closeFile()
+    }
     process.executableURL = URL(fileURLWithPath: "/usr/local/bin/tailscale")
     process.arguments = ["ip", "-4"]
     process.standardOutput = output
     do {
         try process.run()
+        // The child owns its duplicated descriptor. Closing the parent's
+        // write end prevents retries from retaining one pipe per attempt.
+        writer.closeFile()
         process.waitUntilExit()
     } catch {
         return nil
     }
     guard process.terminationStatus == 0,
-          let text = String(data: output.fileHandleForReading.readDataToEndOfFile(), encoding: .utf8),
+          let text = String(data: reader.readDataToEndOfFile(), encoding: .utf8),
           let value = text.split(whereSeparator: \.isNewline).first
     else { return nil }
     return String(value)

{engineering_platform-2.3.58 → engineering_platform-2.3.66}/src/engineering_platform/evidence_projection.py

@@ -113,8 +113,9 @@ def project_output(command: Iterable[str], output: str, exit_code: int) -> Evide
 class ToolProxyEnvironment:
     """Temporary PATH proxy. It retains no output after the invocation ends."""
 
-    def __init__(self) -> None:
+    def __init__(self, *, deny_delivery_mutations: bool = False) -> None:
         self._temporary: TemporaryDirectory[str] | None = None
+        self._deny_delivery_mutations = deny_delivery_mutations
 
     def __enter__(self) -> Mapping[str, str]:
         self._temporary = TemporaryDirectory(prefix="engineering-platform-evidence-")
@@ -149,6 +150,10 @@ class ToolProxyEnvironment:
         environment["ENGINEERING_PLATFORM_EVIDENCE_ORIGINAL_PATH"] = environment.get("PATH", os.defpath)
         environment["PATH"] = f"{directory}{os.pathsep}{environment['ENGINEERING_PLATFORM_EVIDENCE_ORIGINAL_PATH']}"
         environment["ENGINEERING_PLATFORM_CONTEXT_ESCALATION_FILE"] = str(directory / "context-escalations.jsonl")
+        if self._deny_delivery_mutations:
+            # This is deliberately an invocation-scoped capability boundary,
+            # not a prompt convention.  The validation adapter opts into it.
+            environment["ENGINEERING_PLATFORM_DENY_DELIVERY_MUTATIONS"] = "1"
         return environment
 
     def __exit__(self, *_: object) -> None:
@@ -172,13 +177,20 @@ class ToolProxyEnvironment:
 def proxy_main(name: str | None = None) -> None:
     """Run the proxied command and emit only its bounded invocation-local view."""
     name = name or Path(sys.argv[0]).name
+    if os.environ.get("ENGINEERING_PLATFORM_DENY_DELIVERY_MUTATIONS") == "1" and _is_delivery_mutation(name, sys.argv[1:]):
+        sys.stderr.write("Read-only assessment tool policy refused a delivery mutation.\n")
+        raise SystemExit(126)
     original_path = os.environ.get("ENGINEERING_PLATFORM_EVIDENCE_ORIGINAL_PATH", os.defpath)
     executable = shutil.which(name, path=original_path)
     if executable is None:
         raise SystemExit(f"Evidence proxy could not resolve {name}.")
     completed = subprocess.run(  # nosec B603
         (executable, *sys.argv[1:]), text=True, capture_output=True,
-        env={**os.environ, "PATH": original_path}, check=False,
+        # Retain the interposer for descendants.  Restoring only the original
+        # PATH let a proxied interpreter launch an unmediated `gh` child.
+        # The original path remains separately available for this launcher's
+        # own executable resolution above, avoiding recursive proxy loops.
+        env=os.environ.copy(), check=False,
     )
     raw = f"{completed.stdout}{completed.stderr}"
     if os.environ.get("ENGINEERING_PLATFORM_EVIDENCE_EXPAND") == "1":
@@ -188,6 +200,27 @@ def proxy_main(name: str | None = None) -> None:
     raise SystemExit(completed.returncode)
 
 
+def _is_delivery_mutation(name: str, arguments: Iterable[str]) -> bool:
+    """Recognize the small Git/GitHub write surface relevant to assessment.
+
+    This runs inside the PATH interposer, so it remains effective even if a
+    caller accidentally grants an owner-authorized lifecycle flag elsewhere.
+    It intentionally permits read-only inspection and CI-status observation.
+    """
+    args = tuple(arguments)
+    if name == "gh":
+        if len(args) >= 2 and args[0] == "pr" and args[1] in {"create", "edit", "ready", "merge"}:
+            return True
+        return bool(args and args[0] == "api" and any(value in {"PATCH", "POST", "PUT", "DELETE"} for value in args))
+    if name != "git" or not args:
+        return False
+    # Git accepts global options before the command (`git -C repo push`).
+    index = 0
+    while index < len(args) and args[index].startswith("-"):
+        index += 2 if args[index] in {"-C", "-c", "--git-dir", "--work-tree", "--namespace"} else 1
+    return index < len(args) and args[index] in {"commit", "push", "switch", "checkout", "branch", "merge", "reset", "rebase"}
+
+
 def context_escalation_main(_: str | None = None) -> None:
     """Validate and record one bounded historical-context escalation."""
     from .provider_context_scope import ContextEscalationReason, ContextEscalationRequest, HistoryBoundaryKind

{engineering_platform-2.3.58 → engineering_platform-2.3.66}/src/engineering_platform/execution_executor.py

@@ -50,6 +50,27 @@ _UNITTEST_FAILURE = re.compile(r"^(?:FAIL|ERROR): [^(]+ \(([^)]+)\)$", re.MULTIL
 _UNITTEST_COUNTS = re.compile(r"FAILED \((?P<details>[^)]*)\)")
 _UNITTEST_COUNT = re.compile(r"\b(?P<name>failures|errors)=(?P<count>\d+)\b")
 _TURN_ABORTED = re.compile(r'"type"\s*:\s*"turn_aborted"[^\n]*"reason"\s*:\s*"interrupted"', re.IGNORECASE)
+_ASSESSMENT_STATES = frozenset({"COMPLETE", "WAITING", "FAILED", "BLOCKED"})
+
+
+def _parse_validation_assessment(raw: object) -> AgentResult:
+    """Validate the small read-only contract before projecting AgentResult.
+
+    JSON Schema constrains cooperative providers, but terminal lifecycle code
+    must fail closed for malformed, old, or adapter-produced output too.
+    """
+    if not isinstance(raw, dict) or set(raw) != {"terminal_state", "diagnostic", "pull_request"}:
+        raise TypeError("validation assessment fields are invalid")
+    state, diagnostic, pull_request = raw["terminal_state"], raw["diagnostic"], raw["pull_request"]
+    if not isinstance(state, str) or state not in _ASSESSMENT_STATES:
+        raise TypeError("validation assessment terminal state is invalid")
+    if not isinstance(diagnostic, str) or len(diagnostic) > 500:
+        raise TypeError("validation assessment diagnostic is invalid")
+    if pull_request is not None and (
+        not isinstance(pull_request, int) or isinstance(pull_request, bool) or pull_request < 1
+    ):
+        raise TypeError("validation assessment pull request is invalid")
+    return AgentResult(state, pull_request=pull_request, diagnostic=diagnostic)
 
 
 def provider_turn_interruption(stdout: str, stderr: str) -> str | None:
@@ -520,6 +541,7 @@ class CodexCliClient:
         self.last_context_escalations = ()
         self.last_execution_seconds = None
         self.last_runtime_metadata = self._runtime_metadata()
+        assessment_contract = getattr(self, "_validation_contract", False)
         schema = {
             "type": "object",
             "additionalProperties": False,
@@ -572,6 +594,19 @@ class CodexCliClient:
                 },
             },
         }
+        if assessment_contract:
+            # A local-validation turn is an assessment of host receipts, not
+            # a delivery turn.  Keep the legacy PR echo only as a bounded
+            # compatibility signal; lifecycle fields are projected by EP.
+            schema = {
+                "type": "object", "additionalProperties": False,
+                "required": ["terminal_state", "diagnostic", "pull_request"],
+                "properties": {
+                    "terminal_state": {"type": "string", "enum": ["COMPLETE", "WAITING", "FAILED", "BLOCKED"]},
+                    "diagnostic": {"type": "string", "maxLength": 500},
+                    "pull_request": {"type": ["integer", "null"]},
+                },
+            }
         with tempfile.NamedTemporaryFile(
             "w", encoding="utf-8", suffix=".json", delete=False
         ) as handle:
@@ -588,11 +623,19 @@ class CodexCliClient:
                 str(root),
                 "--json",
             ]
+            if assessment_contract:
+                # These supported CLI switches keep account authentication
+                # while excluding user-configured MCP/app/tool surfaces and
+                # user- or project-scoped execpolicy rules from this
+                # receipt-only role. In particular, an inherited allow rule
+                # must not move an assessment command outside the read-only
+                # sandbox selected by the host.
+                command.extend(("--ignore-user-config", "--ignore-rules", "--ephemeral"))
             for extra_root in extra_roots:
                 command.extend(("--add-dir", str(extra_root)))
             command.extend(("--output-schema", str(schema_path), prompt))
             started = time.monotonic()
-            proxy = ToolProxyEnvironment()
+            proxy = ToolProxyEnvironment(deny_delivery_mutations=assessment_contract)
             with proxy as environment:
                 completed = self._run_invocation(tuple(command), root, environment)
             self.last_context_escalations = proxy.context_escalations()
@@ -623,7 +666,10 @@ class CodexCliClient:
             )
         try:
             raw = json.loads(_codex_final_message(completed.stdout))
-            result = AgentResult(**raw)
+            if assessment_contract:
+                result = _parse_validation_assessment(raw)
+            else:
+                result = AgentResult(**raw)
             if not isinstance(result.validation_evidence, (list, tuple)) or not isinstance(result.quality_evidence, (list, tuple)):
                 raise TypeError("execution evidence must be a list")
             if result.validation_disposition not in {"product_failure", "environmental_instability"}:
@@ -649,7 +695,7 @@ class CodexCliClient:
             if result.diagnostic is not None:
                 result = replace(result, diagnostic=redact_diagnostic(result.diagnostic))
             return result
-        except (IndexError, json.JSONDecodeError, TypeError) as error:
+        except (IndexError, KeyError, json.JSONDecodeError, TypeError) as error:
             interruption = provider_turn_interruption(completed.stdout, completed.stderr)
             raise CodexInvocationError(
                 "Provider turn interrupted before returning the required structured terminal result."
@@ -671,10 +717,12 @@ class CodexCliClient:
         if hasattr(self, "_sandbox_override"):
             raise RunnerError("nested validation sandbox override is invalid")
         self._sandbox_override = "read-only"
+        self._validation_contract = True
         try:
             return self.invoke(root, prompt)
         finally:
             del self._sandbox_override
+            del self._validation_contract
 
     def _run_invocation(
         self, command: tuple[str, ...], root: Path, environment: Mapping[str, str] | None = None