Commit graph

210 commits

Author SHA1 Message Date
Brad Groux
1c86d90386 chore: prepare v6.0.1 release 2026-07-24 13:43:59 -05:00
Brad Groux
1bd43f9279
release: Veritas Kanban 6.0.0 (#985)
* build: prepare 6.0.0 release

* docs: link the 6.0.0 release pull request
2026-07-24 11:26:25 -05:00
Brad Groux
6c1ecd04ba
feat: bridge Buzz messages to workflow triggers (#978) 2026-07-24 09:28:57 -05:00
Brad Groux
3a9b06caf8
feat: add runtime hook bus (#977) 2026-07-24 09:13:54 -05:00
Brad Groux
37d256a3a6
feat: add harness compatibility matrix (#976) 2026-07-24 09:01:43 -05:00
Brad Groux
b6967d8954
feat: add reproducible harness conformance suites (#859) (#975) 2026-07-24 08:45:25 -05:00
Brad Groux
70e712975a
feat: compose Buzz ACP with run-scoped tools (#909) (#974) 2026-07-24 08:30:42 -05:00
Brad Groux
9c15d348fa
feat: consume credential leases in tool calls (#969) (#972) 2026-07-24 07:53:42 -05:00
Brad Groux
a21d1e9358
feat: bind credential evidence to tool catalogs (#968) (#971) 2026-07-24 07:41:21 -05:00
Brad Groux
9a9db9b5b6
feat: add ACP server view (#960) (#967) 2026-07-24 07:23:45 -05:00
Brad Groux
79992579ca
feat: add Grok Build ACP profile (#920) (#966) 2026-07-24 07:04:51 -05:00
Brad Groux
ec13643603
feat: add Copilot CLI ACP profile (#917) (#965) 2026-07-24 06:47:59 -05:00
Brad Groux
6365a8eec4
feat: add Buzz Agent ACP profile (#907) (#964) 2026-07-24 06:28:29 -05:00
Brad Groux
8b3bf216cb
feat: classify provider launch credentials (#932) (#963) 2026-07-24 06:11:33 -05:00
Brad Groux
f6ffa7c485
Add generic ACP stdio provider (#961)
* feat: add generic ACP stdio provider (#870)

* fix: declare Node process in ACP fixture
2026-07-24 05:54:03 -05:00
Brad Groux
0fbd9ee428
feat: add run-scoped tool control plane (#959)
Some checks are pending
CI / Lint & Type Check (push) Waiting to run
CI / Changed Tests (push) Waiting to run
CI / Workspace Unit Tests (push) Waiting to run
CI / Build (push) Waiting to run
CI / Security Audit (push) Waiting to run
Desktop Artifacts / Unsigned macOS Artifact (push) Waiting to run
Desktop Artifacts / Unsigned Linux Artifacts (push) Waiting to run
Desktop Artifacts / Unsigned Windows Artifacts (push) Waiting to run
* feat: add run-scoped tool control plane (#857)

* test: align provider capability fixtures
2026-07-24 05:10:20 -05:00
Brad Groux
6b9510c58f
feat: add provider-neutral conversation lifecycle (#856) (#958) 2026-07-24 04:07:40 -05:00
Brad Groux
c1be9f7322 feat: add durable run supervisor 2026-07-24 03:02:36 -05:00
Brad Groux
2c76424b6a
feat: add provider-native interactive approval broker (#953)
* feat: add provider-native approval broker

* fix: register approval broker permission surfaces
2026-07-24 02:28:18 -05:00
Brad Groux
8904d6093f
feat: add Codex app-server adapter (#952) 2026-07-24 01:38:57 -05:00
Brad Groux
3b07a5cb4f
feat: add first-class Claude Code adapter (#951) 2026-07-24 01:00:09 -05:00
Brad Groux
b9b6273cf5
feat: add causal run event journal (#949) 2026-07-24 00:05:31 -05:00
Brad Groux
81730a451a
feat: import Buzz persona and team definitions (#948) 2026-07-23 23:31:16 -05:00
Brad Groux
f5333fd271
feat: add bidirectional Buzz Squad Chat adapter (#947)
Closes #906
2026-07-23 22:58:20 -05:00
Brad Groux
54417357f9
feat: add secure Buzz connection diagnostics (#946) 2026-07-23 22:07:25 -05:00
Brad Groux
32517e4df6
feat: make worktree lifecycle transactional (#934)
Some checks are pending
CI / Lint & Type Check (push) Waiting to run
CI / Workspace Unit Tests (push) Waiting to run
CI / Build (push) Waiting to run
CI / Security Audit (push) Waiting to run
Closes #858.
2026-07-23 19:44:42 -05:00
Brad Groux
0f8506b4ce
feat: add run-bound credential lease engine (#933) 2026-07-23 18:43:21 -05:00
Brad Groux
3a19eedf88
feat: persist provider completion results (#930) 2026-07-23 17:38:51 -05:00
Brad Groux
9f51d78c50
feat: add immutable run launch manifests (#926)
Closes #854.
2026-07-23 16:00:23 -05:00
Brad Groux
e6f21a849d
feat: add first-class harness support profiles (#925)
Closes #919. Adds versioned support evidence, fail-closed dispatch, redacted diagnostics, and shared API, CLI, and Settings status.
2026-07-23 14:52:07 -05:00
Brad Groux
55e621d147
release: prepare v5.2.5 (#922)
Prepare the v5.2.5 source, migration guidance, release documentation, and desktop publication evidence. Refs #914.
2026-07-23 10:17:10 -05:00
Brad Groux
694471af5d
fix: clarify desktop setup for existing data (#902) 2026-07-23 09:17:21 -05:00
Brad Groux
b704ab92d0
feat: add provider-neutral task envelope contracts (#891) (#894)
Some checks failed
CI / Lint & Type Check (push) Has been cancelled
CI / Workspace Unit Tests (push) Has been cancelled
CI / Build (push) Has been cancelled
CI / Security Audit (push) Has been cancelled
Co-authored-by: bradgroux <brad@digitalmeld.io>
2026-07-16 12:48:48 -05:00
Brad Groux
566ec0f7fe
feat: enforce provider runtime manifests (#887) (#890)
Co-authored-by: bradgroux <brad@digitalmeld.io>
2026-07-16 11:00:44 -05:00
Brad Groux
a42dc62ba4
feat: route agents by runtime manifests (#886) (#889)
Co-authored-by: bradgroux <brad@digitalmeld.io>
2026-07-16 10:54:05 -05:00
Brad Groux
6f020263c0
feat: add provider runtime manifests (#885) (#888)
Co-authored-by: bradgroux <brad@digitalmeld.io>
2026-07-16 10:46:54 -05:00
Brad Groux
44d1611741
feat: add governed SQLite journal maintenance (#884)
Some checks are pending
CI / Lint & Type Check (push) Waiting to run
CI / Workspace Unit Tests (push) Waiting to run
CI / Build (push) Waiting to run
CI / Security Audit (push) Waiting to run
* feat: add governed SQLite journal maintenance

* fix: update permission coverage for SQLite maintenance

---------

Co-authored-by: bradgroux <brad@digitalmeld.io>
2026-07-15 20:00:58 -05:00
Brad Groux
bd6b0932a6
fix: enforce SQLite filesystem startup posture (#881) (#883)
Some checks are pending
CI / Lint & Type Check (push) Waiting to run
CI / Workspace Unit Tests (push) Waiting to run
CI / Build (push) Waiting to run
CI / Security Audit (push) Waiting to run
Co-authored-by: bradgroux <brad@digitalmeld.io>
2026-07-15 17:49:13 -05:00
Brad Groux
7ff4acba8e
chore: prepare Veritas Kanban 5.2.4 (#845)
Some checks failed
CI / Lint & Type Check (push) Has been cancelled
CI / Workspace Unit Tests (push) Has been cancelled
CI / Build (push) Has been cancelled
CI / Security Audit (push) Has been cancelled
2026-07-13 02:16:02 -05:00
Brad Groux
d4c5b65859
chore: prepare Veritas Kanban 5.2.3 (#841)
Some checks are pending
CI / Lint & Type Check (push) Waiting to run
CI / Workspace Unit Tests (push) Waiting to run
CI / Build (push) Waiting to run
CI / Security Audit (push) Waiting to run
2026-07-13 00:44:16 -05:00
Brad Groux
4b84eccd1b
chore: prepare Veritas Kanban 5.2.2 (#827)
Tracks #809
2026-07-12 18:26:31 -05:00
Brad Groux
a58496839d
fix: workflow correctness — human gate blocking, retry bounds, HTTP errors, shared contracts, depends_on enforcement (#805)
Fixes #778, #780, #785, #786, #787

## #778 — Human gate blocking/resume correctness
- Introduce HumanGateBlockError in WorkflowStepExecutor; gate steps with
  on_false.escalate_to=human now throw this typed exception instead of a
  plain Error.
- executeRun() catches HumanGateBlockError before handleStepFailure() so the
  run transitions to blocked (not failed); persists _gateBlock context.
- Add approveGateStep() and rejectGateStep() service methods; fix route
  endpoints to persist state and validate run.status===blocked.

## #780 — Bounded retry_step cycles
- Add max_reroutes field to FailurePolicy and retryRouteCount to WorkflowRun
  in both shared and server type contracts.
- handleStepFailure increments and checks retryRouteCount on every retry_step
  reroute; defaults to MAX_REROUTES_DEFAULT=10; exhaustion fires on_exhausted
  policy or fails deterministically.
- retryRouteCount persists to disk/SQLite; survives process restart.

## #785 — WorkflowRunService domain errors → HTTP mapping
- Remove private NotFoundError and ValidationError from workflow-run-service.ts.
- Import and throw the shared AppError-based NotFoundError/ValidationError from
  middleware/error-handler.ts so central error middleware maps them to 404/400.

## #786 — Shared workflow contracts
- Add provider? and command? fields to WorkflowAgent in
  shared/src/types/workflow.ts to match the server-side definition and expose
  them to web, CLI, and MCP consumers.

## #787 — depends_on enforcement during status transitions
- BlockingService refactored to merge both legacy blockedBy and canonical
  dependencies.depends_on (deduplication via Set) in getBlockingStatus(),
  canMoveToInProgress(), getDependentTasks(), and
  wouldCreateCircularDependency().
- Tasks route transition guard now triggers when either blockedBy or
  dependencies.depends_on is non-empty.

Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>
2026-07-10 12:16:51 -05:00
Brad Groux
999acb6317
Add canonical AGENTS guidance and validated Hermes/OpenClaw providers (#803)
* feat: add AGENTS.md, hermes-cli provider, and validated OpenClaw gateway dispatch

Issue #790: Add canonical AGENTS.md as the source-of-truth repository
instruction file for Codex, OpenClaw, Hermes, Claude, and other compatible
coding harnesses. Correct stale pnpm (9+ → ≥ 11.0.0) and Node (22+ → ≥ 22.22.1)
version requirements. Convert CLAUDE.md to a Claude-specific supplement.

Issue #791: Add first-class hermes-cli provider for Hermes Agent v2026.7.7.2.
- Add hermes-cli to AgentProvider type in shared/src/types/config.types.ts
- Add buildSafeHermesEnv utility with Hermes-specific env allowlist
- Add hermes-cli auth probe to AgentHealthService (hermes --version + API key check)
- Add hermes-cli provider adapter that spawns hermes -z <prompt> in task worktree
  without a shell, captures stdout/stderr/exit code, records session identity
- Add SIGTERM with bounded SIGKILL fallback for graceful stop
- Document limitations: resume not supported in this release

Issue #794: Fix OpenClaw gateway dispatch for task and workflow runs.
- Add OpenClawGatewayPreflightResult type and preflight() method to
  HttpOpenClawWorkflowAdapter that verifies sessions_spawn policy before dispatch
- Add HttpOpenClawTaskAdapter that uses sessions_spawn to dispatch tasks via the
  gateway HTTP API (replacing the broken request-file approach)
- Store childSessionKey in PendingAgent for durable session tracking
- Policy denial surfaces an actionable configHint pointing to gateway tool policy
- Add openclawSessionKey and hermesSessionId to PendingAgent interface

Add contract and regression tests:
- hermes-provider.test.ts: env utility, key sensitivity, health service
- openclaw-provider.test.ts: preflight scenarios (blocked, timeout, 403, ok: false, success)
  and spawnTask scenarios (policy denial, missing key, success, timeout, forbidden status)

Update docs/AGENT-PROVIDERS.md with Hermes and OpenClaw setup sections.
Update CHANGELOG.md Unreleased section.

Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>

* fix: address GPT review findings for harness providers

- preserve Hermes base allowlist when sandbox passthrough keys are present
- add hermes-cli sandbox capability mapping and built-in preset auth keys
- treat OpenClaw transport failures as unreachable in gateway preflight
- parse text-wrapped MCP tool results in OpenClaw task dispatch
- extend contract tests for the reviewed regressions

Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>

* fix: align OpenClaw dispatch with current gateway contract

Persist acknowledged child session keys atomically without overwriting newer attempt state.

Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>

---------

Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>
2026-07-10 11:27:33 -05:00
Brad Groux
6c043c76d4
Bump version to 5.2.1 (#766)
* Bump version to 5.2.1

* Stabilize workflow run metadata test

* Document v5.2.1 release notes and harden CI setup
2026-06-28 21:50:14 -05:00
Brad Groux
3c9065b8ab
Bump version to 5.2.0 (#757)
Some checks failed
CI / Security Audit (push) Has been cancelled
CI / Lint & Type Check (push) Has been cancelled
CI / Workspace Unit Tests (push) Has been cancelled
CI / Build (push) Has been cancelled
2026-06-26 15:11:19 -05:00
Brad Groux
5bd4377f32
Add external tracker schema introspection
Adds configurable external tracker schema introspection, mapping profiles, validation, dry-run create, and approved mock create support.
2026-06-26 14:28:59 -05:00
Brad Groux
7950fec5f4
Add reflection memory promotion queue
Adds a reviewed reflection candidate queue, API, Settings UI, duplicate merge flow, task lesson promotion, redaction, docs, and tests.
2026-06-26 14:00:51 -05:00
Brad Groux
b9a648afe7
Add ceremony enforcement gates (#750) 2026-06-26 13:35:45 -05:00
Brad Groux
13fc8ac083
Add human reply communication adapters (#749) 2026-06-26 13:08:22 -05:00
Brad Groux
1b29b2eb24
Add Squad Chat collaboration state (#748) 2026-06-26 12:42:14 -05:00