Commit Graph
106 Commits
Author SHA1 Message Date
DottaandPaperclip 2ea54f2c3f fix(runner): bind transitive Copilot permission policy sources
Co-Authored-By: Paperclip <noreply@paperclip.ing>
2026-09-30 20:11:36 -05:00
DottaandPaperclip fcf1866928 fix(runner): bind Copilot permission grants to visible targets
Co-Authored-By: Paperclip <noreply@paperclip.ing>
2026-09-30 19:59:38 -05:00
DottaandPaperclip fa8642d1eb test(runner): gate installed package staging regressions
Co-Authored-By: Paperclip <noreply@paperclip.ing>
2026-09-30 19:59:19 -05:00
DottaandPaperclip 9661dd6473 fix(runner): stage installed dependency pack inputs
Preserve non-bundled package contents outside the pnpm tree before npm packs them. Keep bundled and root-package behavior and clean-consumer assertions unchanged.

Co-Authored-By: Paperclip <noreply@paperclip.ing>
2026-09-30 19:59:19 -05:00
DottaandPaperclip 986f8cc534 Verify Cursor child usage lifecycle and fence profile v9
Mark missing and invalid child run ordinals as partial observations. Exercise the pinned vendor child construction and reuse methods on all three platforms and regenerate the Cursor-only execution identity.

Co-Authored-By: Paperclip <noreply@paperclip.ing>
2026-09-30 05:33:44 -05:00
DottaandPaperclip e95e28d9c8 Preserve partial Cursor native usage diagnostics and version ACP profiles
Co-Authored-By: Paperclip <noreply@paperclip.ing>
2026-09-30 05:12:44 -05:00
DottaandPaperclip 654ec2a9cc Fix Copilot materialization rollback and cover replay identity
Roll back only files and directories created by a failed materialization. Cover partial writes, retry, foreign entries, and session replay isolation. Refresh the Copilot v7 source binding.

Co-Authored-By: Paperclip <noreply@paperclip.ing>
2026-09-30 02:55:29 -05:00
DottaandPaperclip 913f374191 Preserve native Copilot assistant message identities
Verify and extract the pinned Copilot distribution, preserve native message IDs on the ordered ACP stream, and bind the guarded distribution to profile v7. Keep interim messages separate from final output.

Co-Authored-By: Paperclip <noreply@paperclip.ing>
2026-09-30 02:55:29 -05:00
DottaandPaperclip 770dc88a11 Bind Cursor plan waits to the native tool lifecycle
Carry the admitted native plan parent tool into canonical request identity and require its exact successful durable lifecycle before passive settlement. Preserve historical committed Cursor6 waits while versioning new admission to Cursor7.

Co-Authored-By: Paperclip <noreply@paperclip.ing>
2026-09-30 01:56:28 -05:00
DottaandPaperclip 951b06d08a fix(runner): fence warm ACPX owners on runtime contract changes
Co-Authored-By: Paperclip <noreply@paperclip.ing>
2026-09-29 21:40:17 -05:00
DottaandPaperclip a97b626081 fix(runner): preserve Pi native assistant boundaries and notices
Pin Pi profile 8 to native message provenance, preserve explicit empty starts and ends, and keep replay/history and native notices out of final assistant aggregation. Validate fresh, warm and loaded SDK sessions and exact native closure bytes.

Co-Authored-By: Paperclip <noreply@paperclip.ing>
2026-09-29 16:30:28 -05:00
DottaandPaperclip c867cff960 fix(runner): bind candidate pack to Cursor v5 mode admission
Co-authored-by: Paperclip <noreply@paperclip.ing>
2026-09-29 16:25:03 -05:00
DottaandPaperclip 4af314a055 Admit and bind Cursor native session modes in profile v5
Co-Authored-By: Paperclip <noreply@paperclip.ing>
2026-09-29 16:23:41 -05:00
DottaandPaperclip c73e26107f fix(copilot): bind profile v5 to the final ACPX patch
Co-Authored-By: Paperclip <noreply@paperclip.ing>
2026-09-29 16:13:35 -05:00
DottaandPaperclip bd44f41e9e fix(runner): bound Rosetta interpreter build probes at 30 seconds
Co-Authored-By: Paperclip <noreply@paperclip.ing>
2026-09-29 16:05:33 -05:00
DottaandPaperclip ca28efc246 fix(runner): reject dev-only exceptions under wildcard exports
Treat unexpanded wildcard export targets as potentially exposing every scanned source, so they cannot bypass the reviewed private eval harness boundary.

Co-Authored-By: Paperclip <noreply@paperclip.ing>
2026-09-29 13:48:44 -05:00
DottaandPaperclip 1ac2b22990 fix(runner): parse import gates and pack explicit consumer inputs
Use the declared TypeScript parser to distinguish module references from fixture strings. Enforce declared public exports and the ADR0001 private development-only eval harness boundary, including public transitive exposure. Pack absolute dependency inputs from scratch without adopting publisher development toolchains.

Co-Authored-By: Paperclip <noreply@paperclip.ing>
2026-09-29 13:47:17 -05:00
DottaandPaperclip 28c82b358e fix(runner): load live console helpers from owning modules
Co-Authored-By: Paperclip <noreply@paperclip.ing>
2026-09-29 13:31:40 -05:00
DottaandPaperclip 7bd453d33d Integrate Pi v7 native tool and input contracts
Co-Authored-By: Paperclip <noreply@paperclip.ing>

* commit '72ded1794':
  test(runner): distinguish Pi blank transport from form support
  fix(runner): admit Pi MCP names and bound native questions
2026-09-29 12:13:58 -05:00
DottaandPaperclip bb00c85b69 fix(runner): admit Pi MCP names and bound native questions
Co-Authored-By: Paperclip <noreply@paperclip.ing>
2026-09-29 12:00:42 -05:00
DottaandPaperclip 49ba2e61fb Integrate reviewed Cursor and Copilot event fixes
Co-Authored-By: Paperclip <noreply@paperclip.ing>

* commit '2042ca14c42c0112304328b8f059847be4370f6c':
  Keep Copilot notices session-scoped and close early smoke resources
  Bound Cursor child summaries without splitting Unicode characters
2026-09-29 11:50:29 -05:00
DottaandPaperclip 2042ca14c4 Keep Copilot notices session-scoped and close early smoke resources
Copilot passthrough does not identify the originating turn. Retain bounded session evidence and source identity without typed turn projection or invented turn provenance. Acquire smoke resource cleanup before every fallible setup operation.

Co-Authored-By: Paperclip <noreply@paperclip.ing>
2026-09-29 11:49:53 -05:00
DottaandPaperclip 23614d28c8 merge: integrate reviewed Copilot and Cursor runtime repairs into Pi
Preserve Pi v6 and bounded startup pools, admit current Cursor and Copilot v4 identities, and combine additive Product flows and catalog assertions.

Co-Authored-By: Paperclip <noreply@paperclip.ing>
2026-09-29 11:33:28 -05:00
DottaandPaperclip 95dfde7c5c Merge current Cursor ACP runtime into Copilot v4
Preserve both profile-specific guards and complete terminal diagnostics; bind Copilot v4 to the regenerated ACPX patch.

Co-Authored-By: Paperclip <noreply@paperclip.ing>
2026-09-29 11:28:38 -05:00
DottaandPaperclip 62e642590f Bind Cursor instructions to native rules and gate every ACP connection
Co-Authored-By: Paperclip <noreply@paperclip.ing>
2026-09-29 11:24:48 -05:00
DottaandPaperclip 2ff6a8efea fix(copilot): refresh instructions under provider lifetime ownership
Co-Authored-By: Paperclip <noreply@paperclip.ing>
2026-09-29 11:17:22 -05:00
DottaandPaperclip 0f33a9080a fix(copilot): deliver native instructions with v4 session identity
Co-Authored-By: Paperclip <noreply@paperclip.ing>
2026-09-29 11:12:26 -05:00
Dotta 6766b9128e Merge branch 'codex/runner-copilot-acp' into codex/runner-pi-acp
* codex/runner-copilot-acp:
  Admit the verified Copilot v3 identity in Rust
  Admit the verified Cursor v3 identity in Rust
  Admit current ACP profiles and verify cross-language pin agreement
  Follow current Copilot profile identity in native installation admission
  Preserve authoritative Copilot guard errors for pending ACP requests
  Preserve Copilot policy rejection codes across sidecar transport
  Bind Copilot v3 identity to native detached-work admission
  Deny native Copilot detached work before permission dispatch
  Prove Cursor SDK interactions and retain profile v3 build evidence
  Bind Daytona image identity to Cursor isolation patch
  Retain Copilot detached-command early completion regression
  Prove Copilot permission recovery after provider death without replay

# Conflicts:
#	packages/paperclip-runner/src/drivers/acpx/qualified-profiles.ts
2026-09-29 10:10:17 -05:00
DottaandPaperclip fa393bff17 Preserve authoritative Copilot guard errors for pending ACP requests
Co-Authored-By: Paperclip <noreply@paperclip.ing>
2026-09-29 10:03:28 -05:00
DottaandPaperclip 860ac89c86 Bind Copilot v3 identity to native detached-work admission
Co-Authored-By: Paperclip <noreply@paperclip.ing>
2026-09-29 09:58:50 -05:00
DottaandPaperclip f9cd8dd256 Deny native Copilot detached work before permission dispatch
Co-Authored-By: Paperclip <noreply@paperclip.ing>
2026-09-29 09:58:05 -05:00
DottaandPaperclip fcb1421685 Retain Copilot detached-command early completion regression
Co-Authored-By: Paperclip <noreply@paperclip.ing>
2026-09-29 09:51:04 -05:00
DottaandPaperclip f221ca1910 Prove Copilot permission recovery after provider death without replay
Co-Authored-By: Paperclip <noreply@paperclip.ing>
2026-09-29 09:48:54 -05:00
DottaandPaperclip ff98929d3c Integrate Copilot v3 prerequisite
Co-Authored-By: Paperclip <noreply@paperclip.ing>

* commit '7bfaf3da4':
  Version Copilot protocol policy as profile v3
  Version patched Cursor isolation as profile v3
  Clarify Cursor admission and patched runtime isolation boundaries
  Fence Copilot ACP connection policy before protocol dispatch
  Bind Cursor typed-error constructor outside the native turn scope
  Isolate pinned Cursor ACP configuration and preserve typed failures
2026-09-29 09:48:52 -05:00
DottaandPaperclip 7bfaf3da4d Version Copilot protocol policy as profile v3
Co-Authored-By: Paperclip <noreply@paperclip.ing>
2026-09-29 09:48:23 -05:00
DottaandPaperclip 66c4073080 Integrate Cursor v3 prerequisite
Co-Authored-By: Paperclip <noreply@paperclip.ing>

* commit '526081b9d':
  Version patched Cursor isolation as profile v3
  Clarify Cursor admission and patched runtime isolation boundaries
  Bind Cursor typed-error constructor outside the native turn scope
  Isolate pinned Cursor ACP configuration and preserve typed failures
2026-09-29 09:48:23 -05:00
DottaandPaperclip 526081b9d6 Version patched Cursor isolation as profile v3
Co-Authored-By: Paperclip <noreply@paperclip.ing>
2026-09-29 09:46:57 -05:00
DottaandPaperclip be54e25078 feat(runner): bind Pi agent files and native questions
Normalize pinned Pi file paths before authorization and reject fallback symlink escapes. Add bounded native questions and registered agent-files policy for profile v6.

Co-Authored-By: Paperclip <noreply@paperclip.ing>
2026-09-29 09:45:30 -05:00
DottaandPaperclip d01c2439e0 Fence Copilot ACP connection policy before protocol dispatch
Co-Authored-By: Paperclip <noreply@paperclip.ing>
2026-09-29 09:45:26 -05:00
DottaandPaperclip 4eec13c06b Bind Cursor typed-error constructor outside the native turn scope
Co-Authored-By: Paperclip <noreply@paperclip.ing>
2026-09-29 09:44:37 -05:00
DottaandPaperclip f49907f42c Isolate pinned Cursor ACP configuration and preserve typed failures
Co-Authored-By: Paperclip <noreply@paperclip.ing>
2026-09-29 09:42:28 -05:00
DottaandPaperclip aec26ad83f fix(runner): pin patched Undici and Node in Pi profile v5
Co-Authored-By: Paperclip <noreply@paperclip.ing>
2026-09-28 17:33:50 -05:00
DottaandPaperclip a05c4ee3b0 fix(runner): scope Pi tool identities to native model iterations
Preserve exact delivery retries while separating reused native IDs across warm prompts. Add pinned SDK ordering, real semantic bridge, lifecycle and history regressions, and bump the verified Pi profile to v4.

Co-Authored-By: Paperclip <noreply@paperclip.ing>
2026-09-28 17:09:12 -05:00
DottaandPaperclip 7ab4636970 Integrate all three ACP providers through the shared verified registry
Retain each native builder, profile installer, extension adapter and image-content input. Update the pack dispatch test now that Pi is installed alongside Cursor and Copilot. Combined ACP tests pass 616 cases; actual distribution/wrapper package checks pass 34 cases.

Co-Authored-By: Paperclip <noreply@paperclip.ing>
2026-09-28 16:32:10 -05:00
DottaandPaperclip a55422a48d Integrate Cursor prerequisite without losing Copilot registrations
Combine both pinned native builders, isolated profile installers, capabilities, extension adapters and complete Daytona content inputs. Verify dispatch remains isolated between the two native installation factories.

Co-Authored-By: Paperclip <noreply@paperclip.ing>
2026-09-28 16:26:55 -05:00
DottaandPaperclip 06cf356a8b Preserve Pi validation failures and structured Bash output
Bump the immutable Pi profile to version 3 and reject prior warm snapshots. Bound and redact authenticated MCP validation errors while retaining failure status; preserve standard ACP tool values alongside terminal metadata.

Co-Authored-By: Paperclip <noreply@paperclip.ing>
2026-09-28 16:10:15 -05:00
DottaandPaperclip e405de788a test(runner): bind Copilot denial oracle to exact native write target
Reject unrelated edits and command mentions, normalize the private workspace path, and replay retained paid evidence offline without another prompt.

Co-Authored-By: Paperclip <noreply@paperclip.ing>
2026-09-28 16:02:12 -05:00
DottaandPaperclip e450bc4346 test(runner): retain Cursor native denial and billing evidence
Preserve the original grader failure and assess the same captured turn through exact tool-call correlation without another prompt.

Co-Authored-By: Paperclip <noreply@paperclip.ing>
2026-09-28 15:55:37 -05:00
DottaandPaperclip cb63ccd1d0 test(runner): add bounded native Cursor denial qualification
Co-Authored-By: Paperclip <noreply@paperclip.ing>
2026-09-28 15:51:38 -05:00
DottaandPaperclip 19ca0f558d fix(runner): tighten Copilot discovery evidence and cleanup
Reject auto as exact model evidence, release native leases on early workspace failure, and reject pending metadata requests immediately when the provider exits or sends malformed output. Extend early cleanup to the real-service probe.

Co-Authored-By: Paperclip <noreply@paperclip.ing>
2026-09-28 15:49:16 -05:00