12 Commits

Include renames

Author	SHA1	Message	Date
conductor	308bbb74b7	feat(event-driven): final integration seam — state ownership, orphan recovery, CLI contract, daemon governance, task binding ... §2/§3 state ownership: register_process_wait resume_mode ('fifo' default preserves T15; 'self' = waiter owns continuation via completion-file inotify, NO resume_cmd). ci_event_wait registers self-mode and stamps durable terminal operation state (COMPLETED/FAILED + authority evidence) before the envelope — a dead session can no longer downgrade operation truth. Daemon drive skips resume_cmd-less waits; resume() re-reads and never touches terminal records. §4 orphan sweep: bounded periodic reconciliation of RESUMING waits past ORPHAN_GRACE_SECS (failure detection, not scheduling) — truthful RESUME_UNVERIFIED/READY_TO_RETRY + lease release; deterministic tests. §5 CLI contract: ci_event_wait parses strictly; --watchdog supported; unknown flags exit 2 loudly. No silent argument loss. §6 governance: canonical daemon source IN REPO (bridge/daemon/); scripts/install_wr_daemon.py installs atomically + verifies sha256 convergence (--check/--restart). One implementation, one deploy path. §9 task binding: --task-id through cli/tool; task-bound resolution scopes pending operations; stored operation wins over model hints; fresh explicit-id operations normalize provisionally (ghost shas refused). tests/test_real_async_integration.py: 10 frozen tests. Full suite 2196/0.	2026-09-19 01:40:34 +01:00
conductor	f90695197d	fix(event-driven): durable-event + wait-record recheck on every cycle + H-matrix tests ... - Every cycle checks: wr status (daemon may transition to COMPLETED), durable event log (find_matching_event), completion file (inotify) - Removed debug print, relaxed test timing for inotify+disk I/O path - All 11 ci_event_wait + 32 other wait tests green	2026-09-19 00:11:51 +01:00
Nick	4b54451444	fix(event-driven): resolve short SHAs to full 40-char before authority read — 12-char prefix silently failed _fetch_runs equality (962e351 root cause)	2026-09-18 19:14:23 +01:00
Nick	09cd18ad54	fix(event-driven): orphaned-lease release + durable-event recheck on re-arm + paginated runs fetch (all pages) + behavioral deadline tests ... ROOT CAUSE (Defect A, 9db239f + 51416aa deadline_pending->success): ci_event_wait exited at deadline without releasing the daemon lease. The orphaned lease blocked the daemon from writing resume tokens to the FIFO for re-registered waits — so completion events that WERE persisted (10:43:01 for 9db239f, 12:01:49 for 51416aa) could never be delivered to a later waiter. Additionally: internal re-arms were timer-blind (no durable-event recheck), and _fetch_runs used a single 50-run page (scheduled merge-robot floods push older SHAs past it). FIXES: - lease release in run() finally block (orphan prevention) - durable-event recheck on every internal re-arm - _fetch_runs paginates up to 4 pages, collecting all matches - deploy_qualify --sha flag (explicit sha, env masked) - model sha = hint; stored target wins on mismatch - behavioral tests: terminal-before-deadline, nonterminal-never-returned	2026-09-18 17:09:40 +01:00
Nick	81c6d1f9c6	fix(hardening): operation-identity authority — explicit sha end-to-end, paginated runs fetch, model-sha-as-hint ... Defect A root cause: Gitea runs-list page flood (scheduled merge-robot runs push relevant SHAs past the limit=50 first page) + collect-only- first-page pagination -> terminal commit read as pending -> parked until deadline. FIX: _fetch_runs paginates up to 4 pages collecting all matches before verdict. Defect B root cause: authority_verdict spawned deploy_qualify reading DEPLOY_SHA from ambient env. FIX: explicit --sha arg (env masked when sha is explicit); _ci_runs_verdict/op_ci_alive take sha as parameter only; no env read remains in the authority path. Defect C root cause: model sha treated as lookup key — a typo derived a ghost operation. FIX: model sha is a HINT; unresolved sha + single pending op -> stored target used with model_sha_mismatch logged; bound op always wins over hints. deploy_qualify gained --sha flag (env kept for workflow backward-compat only). Tests: H-matrix (identity, prefix collision, env staleness, monotonicity, aggregator lag, operation-id-first) + full 2179 suite.	2026-09-18 10:25:59 +01:00
Nick	50a63e587f	fix(event-driven): authority resilience — commit-status 404 fallback to runs-based verdict ... Gitea's combined commit-status endpoint can 404 for the newest commit (observed live on auto-version bump commits: status object materializes late). When deploy_qualify returns pending AND the status endpoint is unreadable, fall back to the operation-scoped Actions-runs verdict (same evidence the two legs read). Also export DEPLOY_SHA in run() for python callers. Found via E10 fresh-process proof.	2026-09-18 02:54:20 +01:00
Nick	2ebd9da139	feat(event-driven): structured-state routing + event-triggered cognition ... - PendingOperation = durable continuation object: continuation_state (ACTIVE_REASONING/WAITING_EXTERNAL/RESUMABLE/RECOVERY_REQUIRED), canonical op_type/authority, task_id — parked cognition is a first-class durable state a fresh process can read - ci_event_wait stamps cognitive-state transitions (WAITING_EXTERNAL on park, RESUMABLE/RECOVERY_REQUIRED on terminal) - DEPLOY_SHA export fix: CLI/python run() consumers previously got a silent 'pending' authority verdict forever — the authority subprocess never received the sha (found via E10 fresh-process proof) - await_intent_cli route-bash: Bash commands expressing external wait intent compile to the canonical continuation (new bash.ts harness tool routes through it); plain local sleeps execute normally - tests/test_await_intent.py: E-matrix (derivation truth table, provenance order, observability)	2026-09-18 00:39:23 +01:00
Nick	f7256aa29e	fix(t21.5): pending-class verdicts and not-started operations re-arm internally — residual nonterminal-return generator closed (§18 audit)	2026-09-17 17:38:06 +01:00
Nick	f64ee95aad	feat(t21.5): root-cause continuation + guard retirement + V1 parity ... - ci_event_wait: OPERATION_SPECS (op-specific completion authority: branch_ci/pull_request_checks -> own runs; master_ci/deploy/release -> deploy qualification); SINGLE LOGICAL AWAIT (all nonterminal conditions re-arm internally; model sees only terminal verdicts or real deadline) - await-operation tool: op_type parameter - runtime wait guard + cwd guard RETIRED (canonical hook = documented no-op; prevention lives in tests, not interception) - wr_root_resolver.py: ONE wait/resume root authority; split-brain fails loudly; start_wr_daemon.py resolves root once; governed reconciliation - construction_activation._auto_structural_awareness: PROJECT_BUILD bootstrap auto-registers Registry + spine manages edge (no manual bookkeeping); fixed latent dispatch_from_decision mode-object bug - research_memory_port.py: future-facing Memory port inside existing INWARD (provider contract, zero-result fast path, teachable-moment candidate seam; APPLICABILITY governs transfer) - v1_parity_manifest.py: 56 rows, 0 blocking mandatory-V1 items - G1-G12 gate evidence in store/scaffold/t21.5_gates.json	2026-09-17 12:56:52 +01:00
Nick	edd6d06300	fix(t21.3): bridge permissions (a+rwX for runner user) + ci_event_wait token propagation note	2026-09-16 20:29:43 +01:00
Nick	b51afea0cb	feat(reentry): durable event replay + drift-aware resume + 16O benchmark (T16 16C-fix/16O/16P) ... - event_wait.find_matching_event(): replays matching completion events from the durable bridge event log at registration. Root-caused from TWO production cycles: on a serialized single-runner machine the CI wake always lands before/around deploy registration — a forward-only FIFO rendezvous can never deliver it (both cycles fell back to the 900s deadline, truthfully). The event log exists precisely for this; the wake is still never the verdict. - ci_event_wait: event_replayed mode short-circuits to the authority read; 2 new held-outs (9 total). - drift_resume.py (16P): claim-vs-observation reconciliation with EXPECTED/BENIGN/MATERIAL/CONFLICTING/UNKNOWN classes; MATERIAL/ CONFLICTING/UNKNOWN block dependent work; user-locked claims escalate to CONFLICTING (reality never silently overrides user-locked authority). Held-outs driven by the REAL 16O fixture: the VAT regression blocks resume; the checkpoint commit resumes clean. - 16O benchmark persisted (store/evidence/t16/16O_benchmark.md): honest result — on a tiny fixture cold and scaffold-assisted re-entry cost about the same (8 vs 9 files); the scaffold's advantage is drift classification, recorded next actions, and intent, not raw step count. No fabricated win. Suite 1884 green; ratchets PASS.	2026-09-15 17:34:00 +01:00
Nick	e1a71efeb9	feat(ci): event-driven CI qualification wait over the existing W/R bridge (T16 16C/16D/16E) ... - deploy.yml sleep-30 polling loop REPLACED: registers a gitea-identity PROCESS_EVENT wait, yields in select() on the FIFO, resumes on the ci.yml notify-event-bridge WAKE, then re-reads the canonical Gitea verdict (deploy_qualify.py). Event payload is never completion truth. - ci.yml gains notify-event-bridge (always(), best-effort): a red CI wakes the waiter as loudly as a green one; bridge unreachable -> watchdog recovery covers the lost wake. - event_wait.py: register_process_wait gains provider/event_type/sha identity (16E: ONE bridge primitive; builder + gitea are adapters); open_fifo_reader + caller-owned fifo_fd close the 16Y#10 race (event before waiter in select()); await_resume_event returns eof instead of busy-looping on a caller-owned fd. - ci_event_wait.py watchdog: failure DETECTOR only — liveness-gated re-arm, one-shot authority recovery on lost events, truthful failure when no verdict exists; timestamps emitted for the 16D latency proof. - tests: 8 held-outs on the REAL daemon (shared wr_daemon fixture in conftest — no duplicated helpers). Daemon-side: /process-event passes through provider/event_type/sha (defaults preserve T15); lease_path sanitizes slash-bearing session ids (resume delivery was impossible for them — found live, fixed in daemon snapshot 79434e0). Suite 1861 green; ratchets PASS; Henxels rc=0.	2026-09-15 16:26:54 +01:00