forgexa-cli 1.54.2__tar.gz → 1.55.1__tar.gz

{forgexa_cli-1.54.2 → forgexa_cli-1.55.1}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: forgexa-cli
-Version: 1.54.2
+Version: 1.55.1
 Summary: Forgexa CLI — command-line client and AI agent runtime for the Forgexa platform
 Author-email: Jason Sun <dev.winds@gmail.com>
 License-Expression: MIT
@@ -35,7 +35,7 @@ Requires-Dist: socksio>=1.0.0; extra == "daemon"
 Command-line client and agent runtime for the [Forgexa](https://forgexa.net) platform.
 
 Communicates with the Forgexa server via REST API.
-Includes a built-in **daemon** that discovers ten local AI agent integrations (Claude Code, Codex, GitHub Copilot, Gemini CLI, OpenCode, Kimi Code, MiMo Code, Qwen Code, CodeBuddy, and Qoder CLI) and executes tasks on behalf of the server. MiMo Code (`mimo`, v0.1.14+), Qwen Code (`qwen`, v0.24.1+), CodeBuddy (`codebuddy`, v2.156.0+), and Qoder CLI (`qoder`, v1.1.59+) are selected explicitly; automatic routing and generated default fallback chains exclude all four. CodeBuddy and Qoder completed their local AgentHost start/resume acceptance gates. Authentication, endpoint, and model selection remain in each local CLI profile; Forgexa never stores or overrides them.
+Includes a built-in **daemon** that discovers twelve local AI agent integrations (Claude Code, Codex, GitHub Copilot, Gemini CLI, OpenCode, Kimi Code, MiMo Code, Qwen Code, CodeBuddy, Qoder CLI, TraeCode CLI, and ZCode) and executes tasks on behalf of the server. MiMo Code (`mimo`, v0.1.14+), Qwen Code (`qwen`, v0.24.1+), CodeBuddy (`codebuddy`, v2.156.0+), Qoder CLI (`qoder`, v1.1.59+), TraeCode CLI (`trae`), and ZCode (`zcode`) are selected explicitly; automatic routing and generated default fallback chains exclude all six. CodeBuddy and Qoder completed their local AgentHost start/resume acceptance gates. Authentication, endpoint, and model selection remain in each local CLI profile; Forgexa never stores or overrides them.
 
 ## Installation
 

{forgexa_cli-1.54.2 → forgexa_cli-1.55.1}/README.md

@@ -3,7 +3,7 @@
 Command-line client and agent runtime for the [Forgexa](https://forgexa.net) platform.
 
 Communicates with the Forgexa server via REST API.
-Includes a built-in **daemon** that discovers ten local AI agent integrations (Claude Code, Codex, GitHub Copilot, Gemini CLI, OpenCode, Kimi Code, MiMo Code, Qwen Code, CodeBuddy, and Qoder CLI) and executes tasks on behalf of the server. MiMo Code (`mimo`, v0.1.14+), Qwen Code (`qwen`, v0.24.1+), CodeBuddy (`codebuddy`, v2.156.0+), and Qoder CLI (`qoder`, v1.1.59+) are selected explicitly; automatic routing and generated default fallback chains exclude all four. CodeBuddy and Qoder completed their local AgentHost start/resume acceptance gates. Authentication, endpoint, and model selection remain in each local CLI profile; Forgexa never stores or overrides them.
+Includes a built-in **daemon** that discovers twelve local AI agent integrations (Claude Code, Codex, GitHub Copilot, Gemini CLI, OpenCode, Kimi Code, MiMo Code, Qwen Code, CodeBuddy, Qoder CLI, TraeCode CLI, and ZCode) and executes tasks on behalf of the server. MiMo Code (`mimo`, v0.1.14+), Qwen Code (`qwen`, v0.24.1+), CodeBuddy (`codebuddy`, v2.156.0+), Qoder CLI (`qoder`, v1.1.59+), TraeCode CLI (`trae`), and ZCode (`zcode`) are selected explicitly; automatic routing and generated default fallback chains exclude all six. CodeBuddy and Qoder completed their local AgentHost start/resume acceptance gates. Authentication, endpoint, and model selection remain in each local CLI profile; Forgexa never stores or overrides them.
 
 ## Installation
 

{forgexa_cli-1.54.2 → forgexa_cli-1.55.1}/forgexa_cli/__init__.py

@@ -1,2 +1,2 @@
 """forgexa-cli — Forgexa command-line client."""
-__version__ = "1.54.2"
+__version__ = "1.55.1"

{forgexa_cli-1.54.2 → forgexa_cli-1.55.1}/forgexa_cli/agent_core.py

@@ -2311,15 +2311,46 @@ def zcode_binary_fingerprint(binary: str | Path) -> str:
     return digest.hexdigest()
 
 
-def zcode_build_verification_issue(binary: str | Path, env: dict[str, str] | None = None) -> str | None:
-    """Return a fail-closed reason unless the binary fingerprint is allowlisted."""
+ZCODE_ALLOWED_SHA256_FILE = Path.home() / ".forgexa" / "zcode-allowed-sha256"
+
+
+def zcode_allowed_fingerprints(env: dict[str, str] | None = None) -> set[str]:
+    """Union of the env allowlist and the persistent approval file.
+
+    GUI-launched daemons (macOS Dock/Finder) never inherit shell exports, so
+    an explicit `forgexa zcode approve-build` writes the approval here where
+    every runtime can read it regardless of how it was launched.
+    """
     source_env = os.environ if env is None else env
     allowed = {
         value.strip().lower()
         for value in source_env.get("FORGEXA_ZCODE_ALLOWED_SHA256", "").split(",")
         if value.strip()
     }
+    try:
+        lines = ZCODE_ALLOWED_SHA256_FILE.read_text(encoding="utf-8").splitlines()
+    except OSError:
+        lines = []
+    for line in lines:
+        value = line.split("#", 1)[0].strip()
+        if value:
+            allowed.add(value.lower())
+    return allowed
+
+
+def zcode_build_verification_issue(binary: str | Path, env: dict[str, str] | None = None) -> str | None:
+    """Return a fail-closed reason unless the binary fingerprint is allowlisted."""
+    allowed = zcode_allowed_fingerprints(env)
     if not allowed:
+        try:
+            actual = zcode_binary_fingerprint(binary)
+        except OSError:
+            actual = ""
+        if actual:
+            return (
+                "ZCode build is not approved; run `forgexa zcode approve-build` or set "
+                f"FORGEXA_ZCODE_ALLOWED_SHA256={actual}"
+            )
         return "ZCode build is not approved; configure FORGEXA_ZCODE_ALLOWED_SHA256"
     try:
         actual = zcode_binary_fingerprint(binary)

{forgexa_cli-1.54.2 → forgexa_cli-1.55.1}/forgexa_cli/daemon.py

@@ -1150,7 +1150,7 @@ except (ImportError, ModuleNotFoundError):
 # DAEMON_VERSION is the protocol/logic version of the daemon code.
 # Kept in sync with pyproject.toml version via bump-version.sh.
 # CLIENT_TYPE identifies which packaging/distribution this daemon runs in.
-DAEMON_VERSION = "1.54.2"
+DAEMON_VERSION = "1.55.1"
 
 
 def _detect_client_type() -> str:
@@ -13150,6 +13150,30 @@ class RuntimeDaemon:
                                                         f"E2E test case {_tc_id} script_path "
                                                         f"'{_sp}' does not exist on disk."
                                                     )
+                                            # Contract lint on the script content
+                                            # (same deterministic rules as
+                                            # app.services.test_asset_validator):
+                                            # root-relative APIRequestContext
+                                            # paths and hardcoded admin route
+                                            # literals encode deployment-specific
+                                            # assumptions that only surface when
+                                            # the script runs outside the sandbox
+                                            # or gets externally reviewed. Feed
+                                            # them into the fix-retry loop here so
+                                            # they are repaired before push.
+                                            try:
+                                                from app.services.test_asset_validator import (
+                                                    lint_e2e_script_contract,
+                                                )
+                                                # Messages already carry the
+                                                # "{case_id}: " prefix.
+                                                issues.extend(
+                                                    lint_e2e_script_contract(
+                                                        _script, str(_tc_id)
+                                                    )
+                                                )
+                                            except Exception:
+                                                pass  # standalone vendored daemon
                         except (_json.JSONDecodeError, UnicodeDecodeError) as e:
                             issues.append(f"test-cases.json is not valid JSON: {e}")
                     elif _requires_structured_artifacts or _requires_e2e_artifacts:

{forgexa_cli-1.54.2 → forgexa_cli-1.55.1}/forgexa_cli/main.py

@@ -3573,6 +3573,45 @@ def cmd_upgrade(args: argparse.Namespace) -> None:
 # ── Argument parser ──
 
 
+def cmd_zcode_approve_build(args: argparse.Namespace) -> None:
+    from . import agent_core
+
+    binary = os.environ.get("FACTORY_ZCODE_PATH") or args.binary or shutil.which("zcode")
+    if not binary:
+        print("error: zcode binary not found; install it or pass --binary PATH", file=sys.stderr)
+        return
+    try:
+        fingerprint = agent_core.zcode_binary_fingerprint(binary)
+    except OSError as exc:
+        print(f"error: could not fingerprint {binary}: {exc}", file=sys.stderr)
+        return
+    path = agent_core.ZCODE_ALLOWED_SHA256_FILE
+    existing = ""
+    try:
+        existing = path.read_text(encoding="utf-8")
+    except OSError:
+        pass
+    approved = {
+        line.split("#", 1)[0].strip().lower()
+        for line in existing.splitlines() if line.split("#", 1)[0].strip()
+    }
+    if fingerprint.lower() in approved:
+        print(f"already approved: {fingerprint}")
+        print(f"allowlist file: {path}")
+        return
+    path.parent.mkdir(parents=True, exist_ok=True)
+    suffix = "" if (not existing or existing.endswith("\n")) else "\n"
+    path.write_text(
+        existing + suffix
+        + f"{fingerprint}  # {binary} approved by `forgexa zcode approve-build`\n",
+        encoding="utf-8",
+    )
+    print(f"approved ZCode build: {fingerprint}")
+    print(f"binary: {binary}")
+    print(f"written to: {path}")
+    print("running daemons and desktop sidecars pick this up on their next probe (no restart needed)")
+
+
 def main() -> None:
     global _SERVER_URL_OVERRIDE, _output_format
 
@@ -3789,6 +3828,19 @@ def main() -> None:
         help="Per-agent timeout for the live execution test (default: 90)",
     )
 
+    # zcode
+    zcode_p = sub.add_parser("zcode", help="ZCode integration helpers")
+    zcode_sub = zcode_p.add_subparsers(dest="zcode_cmd")
+    zcode_approve_p = zcode_sub.add_parser(
+        "approve-build",
+        help="Persistently approve the installed ZCode binary fingerprint "
+             "(works for GUI-launched daemons that never see shell exports)",
+    )
+    zcode_approve_p.add_argument(
+        "--binary", default=None, metavar="PATH",
+        help="Path to the zcode binary (default: $FACTORY_ZCODE_PATH or `zcode` on PATH)",
+    )
+
     # runtimes
     rt_p = sub.add_parser("runtimes", help="Runtime management")
     rt_sub = rt_p.add_subparsers(dest="rt_cmd")
@@ -3918,6 +3970,9 @@ def main() -> None:
         "logs":    cmd_daemon_logs,
         "agents":  cmd_daemon_agents,
         "check":   cmd_check,
+        "zcode": lambda a: {
+            "approve-build": cmd_zcode_approve_build,
+        }.get(a.zcode_cmd, lambda _: zcode_p.print_help())(a),
         "runtimes": lambda a: {
             "list": cmd_runtimes_list,
         }.get(a.rt_cmd, lambda _: rt_p.print_help())(a),

{forgexa_cli-1.54.2 → forgexa_cli-1.55.1}/forgexa_cli.egg-info/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: forgexa-cli
-Version: 1.54.2
+Version: 1.55.1
 Summary: Forgexa CLI — command-line client and AI agent runtime for the Forgexa platform
 Author-email: Jason Sun <dev.winds@gmail.com>
 License-Expression: MIT
@@ -35,7 +35,7 @@ Requires-Dist: socksio>=1.0.0; extra == "daemon"
 Command-line client and agent runtime for the [Forgexa](https://forgexa.net) platform.
 
 Communicates with the Forgexa server via REST API.
-Includes a built-in **daemon** that discovers ten local AI agent integrations (Claude Code, Codex, GitHub Copilot, Gemini CLI, OpenCode, Kimi Code, MiMo Code, Qwen Code, CodeBuddy, and Qoder CLI) and executes tasks on behalf of the server. MiMo Code (`mimo`, v0.1.14+), Qwen Code (`qwen`, v0.24.1+), CodeBuddy (`codebuddy`, v2.156.0+), and Qoder CLI (`qoder`, v1.1.59+) are selected explicitly; automatic routing and generated default fallback chains exclude all four. CodeBuddy and Qoder completed their local AgentHost start/resume acceptance gates. Authentication, endpoint, and model selection remain in each local CLI profile; Forgexa never stores or overrides them.
+Includes a built-in **daemon** that discovers twelve local AI agent integrations (Claude Code, Codex, GitHub Copilot, Gemini CLI, OpenCode, Kimi Code, MiMo Code, Qwen Code, CodeBuddy, Qoder CLI, TraeCode CLI, and ZCode) and executes tasks on behalf of the server. MiMo Code (`mimo`, v0.1.14+), Qwen Code (`qwen`, v0.24.1+), CodeBuddy (`codebuddy`, v2.156.0+), Qoder CLI (`qoder`, v1.1.59+), TraeCode CLI (`trae`), and ZCode (`zcode`) are selected explicitly; automatic routing and generated default fallback chains exclude all six. CodeBuddy and Qoder completed their local AgentHost start/resume acceptance gates. Authentication, endpoint, and model selection remain in each local CLI profile; Forgexa never stores or overrides them.
 
 ## Installation
 

{forgexa_cli-1.54.2 → forgexa_cli-1.55.1}/pyproject.toml

@@ -1,6 +1,6 @@
 [project]
 name = "forgexa-cli"
-version = "1.54.2"
+version = "1.55.1"
 description = "Forgexa CLI — command-line client and AI agent runtime for the Forgexa platform"
 requires-python = ">=3.9"
 license = "MIT"