{ "schemaVersion": 1, "summary": { "requirementCount": 461, "completeCount": 461, "incompleteCount": 0, "findingCount": 0 }, "requirements": [ { "id": "REQ-ADAPTER-ADD-SURFACE-ERRORS", "title": "Bug #1: adapter add runs the install-as-first-update via conduct (cli.rs:6963) which on a non-zero exit prints only the exit code and DISCARDS the subprocess stdout/stderr, so the real error is invisible (the failure itself does propagate). Fix: include out.stderr/stdout in the ADAPTER_INSTALL_FAIL message (mirror run_update_post_step). Operator ruling: ALSO run the [update.post] composite step at install-time (today it runs only on explicit adapter update), so an install both surfaces detail and completes the delegated post-step. See docs/process/NEXT-MILESTONE-BUG-TRIAGE.md #1.", "requiredStages": [ "impl", "unit" ], "stages": { "doc": { "complete": false, "evidence": [] }, "impl": { "complete": true, "evidence": [ { "path": "crates/spt/src/cli.rs", "line": 8660 }, { "path": "crates/spt/src/cli.rs", "line": 8689 }, { "path": "crates/spt/src/cli.rs", "line": 8847 } ] }, "int": { "complete": false, "evidence": [] }, "unit": { "complete": true, "evidence": [ { "path": "crates/spt/src/cli.rs", "line": 17413 } ] } } }, { "id": "REQ-ADAPTER-FLOOR-ENFORCE", "title": "F-5 (REMOTE-TRUTH triage §F-5 + doyle rulings 2026-07-05): BOTH adapter acquisition verbs (spt adapter add + spt adapter update) REFUSE when the installed spt-core is BELOW the adapter's declared [adapter].min_spt_core_version floor — with an F-1 operator refusal naming the installed core, the floor, and the next action (update spt-core first). ROOT: the floor was PARSED + required (manifest.rs) but never compared to the running core — dead enforcement; and the [update].version_check knob that gated it was DOC'D-BUT-DEAD (never read by any production path — a contract lie). RULINGS: RETIRE version_check (drop the manifest field + schema + docs + the cfg(test) literals; a pre-existing manifest still setting it deserializes fine — serde ignores the unknown key, no deny_unknown_fields, so retiring is back-compatible); SEMVER-compare NOT string-compare (the 0.9.0 < 0.25.0 lexical trap); enforce on BOTH verbs; nothing installs / registry untouched on refuse (binds both verbs, no residuals). FIX: (1) a pure spt-runtime version_meets_floor(core, floor) -> bool (numeric per-component: split '.', u64, missing→0, non-numeric→0, first-diff decides, equal-when-zero-padded ⇒ satisfied) — mirrors the CLI version_is_newer parse (same numeric model, different question: freshness=strictly-newer vs floor=at-least). (2) ADD: the gate lives INSIDE registry::register (the choke point) via a register_with_core(core_version) seam register() delegates to with env!(CARGO_PKG_VERSION) — the floor check runs right after the manifest parse, BEFORE any registry write, returning the typed RegistryError::CoreFloor{adapter,core,floor} (Display = the ONE F-1 refusal both verbs surface); nothing recorded on refuse. (3) UPDATE: a PRE-SWAP peek (staged_floor_ok) extracts the staged .spt to a THROWAWAY temp, parses its manifest floor, and refuses BEFORE apply_release_crc_swap mutates the live pointer-mode home — so a refusal (or an unverifiable floor: FAIL-CLOSED) leaves the live install BYTE-UNTOUCHED; register@8932 stays as the defense-in-depth backstop for every other entry path. doyle bind: the register-only gate would let the crc-swap replace the live files with a floor-violating version while the record refuses (record and reality disagree — the exact contract-lie shape this milestone kills), so the pre-swap peek is the only correct answer. Red-first: perri negative repro on ADD (fresh home + synthetic low core + high-floor manifest → CoreFloor refuse, registry untouched) + the UPDATE pre-swap refuse (live home byte-untouched) + a floor-met positive control (0.25.0-on-0.25.0 installs); + version_meets_floor table incl. the 0.9<0.25 trap.", "requiredStages": [ "doc", "impl", "unit" ], "stages": { "doc": { "complete": true, "evidence": [ { "path": "docs/MANIFEST.md", "line": 43 } ] }, "impl": { "complete": true, "evidence": [ { "path": "crates/spt-runtime/src/manifest.rs", "line": 114 }, { "path": "crates/spt-runtime/src/registry.rs", "line": 312 }, { "path": "crates/spt/src/cli.rs", "line": 9159 } ] }, "int": { "complete": false, "evidence": [] }, "unit": { "complete": true, "evidence": [ { "path": "crates/spt-runtime/src/manifest.rs", "line": 2166 }, { "path": "crates/spt-runtime/src/registry.rs", "line": 998 }, { "path": "crates/spt-runtime/src/registry.rs", "line": 1034 }, { "path": "crates/spt/src/cli.rs", "line": 12711 }, { "path": "crates/spt/src/cli.rs", "line": 12741 } ] } } }, { "id": "REQ-ADAPTER-GH-TRANSPORT", "title": "The `gh_release` avenue (and `spt adapter add --release`) gain a fetch `transport`: `https` (current reqwest direct, public), `gh` (shell the pre-authorized `gh` CLI — the private-repo path; `gh` honors OAuth and `GH_TOKEN`, so spt custodies no token), or `auto` (default: prefer `gh` when installed+authed, else HTTPS). `--gh`/`--https` force it on `add`. Additive over the existing fetch path; verify->extract->register downstream is unchanged. (v0.13.2)", "requiredStages": [ "doc", "impl", "unit" ], "stages": { "doc": { "complete": true, "evidence": [ { "path": "CONTEXT.md", "line": 101 }, { "path": "docs/MANIFEST.md", "line": 487 } ] }, "impl": { "complete": true, "evidence": [ { "path": "crates/spt-runtime/src/manifest.rs", "line": 589 }, { "path": "crates/spt-runtime/src/manifest.rs", "line": 645 }, { "path": "crates/spt/src/cli.rs", "line": 4853 }, { "path": "crates/spt/src/cli.rs", "line": 4875 }, { "path": "crates/spt/src/cli.rs", "line": 4891 }, { "path": "crates/spt/src/cli.rs", "line": 4903 }, { "path": "crates/spt/src/cli.rs", "line": 4932 }, { "path": "crates/spt/src/cli.rs", "line": 5166 }, { "path": "crates/spt/src/cli.rs", "line": 8724 }, { "path": "crates/spt/src/cli.rs", "line": 9465 }, { "path": "crates/spt/src/cli.rs", "line": 9638 }, { "path": "crates/spt/src/cli.rs", "line": 9708 }, { "path": "crates/spt/src/cli.rs", "line": 9734 } ] }, "int": { "complete": false, "evidence": [] }, "unit": { "complete": true, "evidence": [ { "path": "crates/spt/src/cli.rs", "line": 11577 }, { "path": "crates/spt/src/cli.rs", "line": 11595 }, { "path": "crates/spt/src/cli.rs", "line": 11791 }, { "path": "crates/spt/src/cli.rs", "line": 11807 }, { "path": "crates/spt/src/cli.rs", "line": 11834 }, { "path": "crates/spt/src/cli.rs", "line": 11861 } ] } } }, { "id": "REQ-ADAPTER-LIVE-UPDATE", "title": "An adapter update is live and daemon-coordinated (the adapter analog of brain self-update, ADR-0004): for an endpoint with a running RESIDENT adapter binary (today the `[message-idle-translation-binary]`), the CLI keeps fetch+verify and hands the APPLY to the daemon over IPC, which per affected endpoint (1) STOPS the resident binary -> releases the OS file lock (fixes the Windows 'Access denied (os error 5)' overwrite failure), (2) swaps on disk ONLY files whose CRC differs from the staged archive (unchanged files + their still-running binaries untouched), (3) RE-CLONES the new on-disk manifest into the running `BrainLifecycle` (the in-memory manifest is cached at bringup and otherwise goes stale -> binaries+manifest back on the same page), (4) RESTARTS the resident binary from the new files. An endpoint NOT running -> CLI swaps directly (no lock, no cache). Only the resident class is cycled; ephemeral adapter binaries (Psyche loop, `[digest]` extractor, `[session.*]` runners, hooks) self-heal on next spawn and are excluded. The daemon keeps a per-endpoint registry of resident adapter children. (ADR-0025, v0.13.2)", "requiredStages": [ "doc", "impl", "unit", "int" ], "stages": { "doc": { "complete": true, "evidence": [ { "path": "docs/adr/0025-live-daemon-coordinated-adapter-update.md", "line": 3 }, { "path": "docs/adr/0025-live-daemon-coordinated-adapter-update.md", "line": 44 } ] }, "impl": { "complete": true, "evidence": [ { "path": "crates/spt-daemon/src/brain.rs", "line": 1096 }, { "path": "crates/spt-daemon/src/broker.rs", "line": 1791 }, { "path": "crates/spt-daemon/src/broker.rs", "line": 1862 }, { "path": "crates/spt-daemon/src/broker.rs", "line": 2495 }, { "path": "crates/spt-daemon/src/broker.rs", "line": 2656 }, { "path": "crates/spt-daemon/src/broker.rs", "line": 2669 }, { "path": "crates/spt-daemon/src/broker.rs", "line": 2796 }, { "path": "crates/spt-daemon/src/broker.rs", "line": 4080 }, { "path": "crates/spt-daemon/src/crc_swap.rs", "line": 37 }, { "path": "crates/spt-daemon/src/crc_swap.rs", "line": 106 }, { "path": "crates/spt-daemon/src/lifecycle.rs", "line": 321 }, { "path": "crates/spt-daemon/src/lifecycle.rs", "line": 347 }, { "path": "crates/spt-daemon/src/lifecycle.rs", "line": 455 }, { "path": "crates/spt-daemon/src/lifecycle.rs", "line": 463 }, { "path": "crates/spt-daemon/src/lifecycle.rs", "line": 482 }, { "path": "crates/spt-daemon/src/msg.rs", "line": 269 }, { "path": "crates/spt-daemon/src/msg.rs", "line": 275 }, { "path": "crates/spt-daemon/src/msg.rs", "line": 295 }, { "path": "crates/spt/src/cli.rs", "line": 9131 }, { "path": "crates/spt/src/cli.rs", "line": 9201 }, { "path": "crates/spt/src/cli.rs", "line": 9230 } ] }, "int": { "complete": true, "evidence": [ { "path": "crates/spt/tests/live_adapt_translation_swap_e2e.rs", "line": 107 } ] }, "unit": { "complete": true, "evidence": [ { "path": "crates/spt-daemon/src/broker.rs", "line": 5600 }, { "path": "crates/spt-daemon/src/broker.rs", "line": 5643 }, { "path": "crates/spt-daemon/src/broker.rs", "line": 5684 }, { "path": "crates/spt-daemon/src/crc_swap.rs", "line": 325 }, { "path": "crates/spt-daemon/src/crc_swap.rs", "line": 356 }, { "path": "crates/spt-daemon/src/crc_swap.rs", "line": 379 }, { "path": "crates/spt-daemon/src/crc_swap.rs", "line": 431 }, { "path": "crates/spt-daemon/src/lifecycle.rs", "line": 2686 }, { "path": "crates/spt-daemon/src/lifecycle.rs", "line": 2725 }, { "path": "crates/spt-daemon/src/lifecycle.rs", "line": 2771 }, { "path": "crates/spt-daemon/src/lifecycle.rs", "line": 2805 }, { "path": "crates/spt-daemon/src/lifecycle.rs", "line": 2857 }, { "path": "crates/spt/src/cli.rs", "line": 17129 }, { "path": "crates/spt/src/cli.rs", "line": 17298 }, { "path": "crates/spt/src/cli.rs", "line": 17330 } ] } } }, { "id": "REQ-ADAPTER-MULTIPLATFORM-SPT", "title": "A `.spt` adapter archive may pack multiple platforms in one signed asset: shared `manifest.toml` + `strings/` at the root, role binaries under per-Rust-target-triple subdirectories (ADR-0016 triple vocabulary, e.g. `x86_64-pc-windows-msvc/`); install/update extracts the shared root plus ONLY `current_platform()`'s triple subdir, flattened into `install_dir` so flat `/` resolution (REQ-INSTALL-11) is unchanged. Name stays `adapter.spt` (plain-tar or gzip, `--asset` optional default); one whole-archive Ed25519 signature over the fat archive (REQ-UPD-9 single-artifact verify). A legacy flat archive (no triple subdirs) extracts as today (free back-compat); a multi-platform archive sets `min_spt_core_version >= 0.13.2` (forward-compat gate, readable before extract); a multi-platform archive missing the recipient's triple -> typed `NoArtifactForPlatform`, never a silent no-op. Large adapters may still split per-platform (single-triple archives via `--asset`, or ADR-0016 update-set machinery). (ADR-0024, v0.13.2)", "requiredStages": [ "doc", "impl", "unit", "int" ], "stages": { "doc": { "complete": true, "evidence": [ { "path": "docs/adr/0024-multi-platform-adapter-spt-packaging.md", "line": 3 } ] }, "impl": { "complete": true, "evidence": [ { "path": "crates/spt-daemon/src/release.rs", "line": 240 }, { "path": "crates/spt/src/cli.rs", "line": 5009 }, { "path": "crates/spt/src/cli.rs", "line": 5099 } ] }, "int": { "complete": true, "evidence": [ { "path": "crates/spt/src/cli.rs", "line": 16964 }, { "path": "crates/spt/src/cli.rs", "line": 17028 }, { "path": "crates/spt/src/cli.rs", "line": 17071 } ] }, "unit": { "complete": true, "evidence": [ { "path": "crates/spt/src/cli.rs", "line": 16899 }, { "path": "crates/spt/src/cli.rs", "line": 16916 } ] } } }, { "id": "REQ-ADAPTER-PROOF-DIR-OVERRIDE", "title": "The author-time proof commands (`spt adapter digest-proof`, `spt adapter translate-proof`) gain a `--dir ` / `--manifest ` override so an author proofs a DEV binary against an on-disk manifest+install dir WITHOUT staging a full extracted GhReleaseManaged install (mirrors digest-proof's `--sample` pointing straight at a file). Fixes perri F-011: a bare-file-added gh_release adapter currently can't be resolved by the *-proof commands ('manifest is not present yet at '); un-stales the bare-file digest-proof int. (perri F-011, v0.13.x DX)", "requiredStages": [ "doc", "impl", "unit", "int" ], "stages": { "doc": { "complete": true, "evidence": [ { "path": "docs-site/src/harness-contract/patterns.md", "line": 346 }, { "path": "docs/MANIFEST.md", "line": 305 } ] }, "impl": { "complete": true, "evidence": [ { "path": "crates/spt/src/cli.rs", "line": 9045 }, { "path": "crates/spt/src/cli.rs", "line": 9057 }, { "path": "crates/spt/src/cli.rs", "line": 9788 } ] }, "int": { "complete": true, "evidence": [ { "path": "crates/spt/tests/translate_proof.rs", "line": 167 } ] }, "unit": { "complete": true, "evidence": [ { "path": "crates/spt/src/cli.rs", "line": 11696 } ] } } }, { "id": "REQ-ADAPTER-TEMPLATE-KEY-VALIDATION", "title": "P-1 core half (WORKER-TRUTH triage): `adapter add`/`adapter update` validate every declared role template — command, cwd, and [env] inject values — against the substitution-key catalog (spt-runtime BASE_KEYS + role-specific overrides) and REFUSE registration naming the offending key + role (fail-fast family of the [strings] pointer validation). Field driver: flynn's psyche died on the RETIRED {psyche_dir} key (adapter psyche_resume carried the old psyche_init cwd shape) — a permanent template config fault must die loudly at registration, not at the Nth per-event psyche turn via the 3-strike budget. The catalog stays the single source (runtime.rs FILL_KEYS — 'a catalog key must have a real fill'); validation reads it, never a second list.", "requiredStages": [ "impl", "unit", "int" ], "stages": { "doc": { "complete": false, "evidence": [] }, "impl": { "complete": true, "evidence": [ { "path": "crates/spt-runtime/src/manifest.rs", "line": 1147 }, { "path": "crates/spt-runtime/src/registry.rs", "line": 381 }, { "path": "crates/spt-runtime/src/runtime.rs", "line": 80 }, { "path": "crates/spt-runtime/src/runtime.rs", "line": 91 }, { "path": "crates/spt-runtime/src/runtime.rs", "line": 101 }, { "path": "crates/spt-runtime/src/runtime.rs", "line": 111 }, { "path": "crates/spt-runtime/src/runtime.rs", "line": 129 }, { "path": "crates/spt/src/cli.rs", "line": 9188 } ] }, "int": { "complete": true, "evidence": [ { "path": "crates/spt-runtime/src/registry.rs", "line": 905 } ] }, "unit": { "complete": true, "evidence": [ { "path": "crates/spt-runtime/src/manifest.rs", "line": 2216 }, { "path": "crates/spt-runtime/src/manifest.rs", "line": 2231 }, { "path": "crates/spt-runtime/src/manifest.rs", "line": 2243 }, { "path": "crates/spt-runtime/src/manifest.rs", "line": 2256 }, { "path": "crates/spt-runtime/src/manifest.rs", "line": 2272 }, { "path": "crates/spt-runtime/src/manifest.rs", "line": 2291 } ] } } }, { "id": "REQ-ADAPTER-TRANSLATE-PROOF", "title": "`spt adapter translate-proof --event [--session ]` — the author-time EMIT-half proof tool for `[message-idle-translation-binary]` (ADR-0022), symmetric to `spt adapter digest-proof` (REQ-TERM-5). It spawns and feeds the adapter's declared translation binary EXACTLY as the daemon does at idle-delivery — running the REAL `spt_daemon::translation` driver VERBATIM (no protocol reimplementation): `TranslationChild::spawn` the binary, send the `{type:\"init\",endpoint_id,node}` line then the `{type:\"event\",envelope}` line, and read back the emitted `{key}`/`{text}`/`{delay_ms}`/`{commit}` keystroke-command stream — then prints it author-readable (each Key with its `key_to_bytes` rendering, Text quoted, Delay in ms, Commit marker) with counts. It fills the SAME `{id}`→option and `{session_id}`→(--session, else a placeholder) keys into the `--event` envelope the daemon fills at runtime, so an envelope that proofs here feeds faithfully live. EMIT-half ONLY: it proves the binary's spawn+feed+emit contract; it does NOT exercise the daemon's atomic PTY apply / controller-buffering (that stays covered by the W2 inject_control_wedge int gate) — `--help` says so. Exit codes mirror digest-proof: 0 ok, 1 on spawn-fail / zero commands / no-commit-or-output / unparseable, 2 when the adapter declares no `[message-idle-translation-binary]` section. The `TranslationChild` Drop does the bounded no-zombie reap. (v0.13.x)", "requiredStages": [ "doc", "impl", "unit", "int" ], "stages": { "doc": { "complete": true, "evidence": [ { "path": "docs/adr/0022-spt-hosted-idle-delivery-translation-binary.md", "line": 73 } ] }, "impl": { "complete": true, "evidence": [ { "path": "crates/spt/src/cli.rs", "line": 9056 }, { "path": "crates/spt/src/cli.rs", "line": 9974 } ] }, "int": { "complete": true, "evidence": [ { "path": "crates/spt/tests/translate_proof.rs", "line": 54 } ] }, "unit": { "complete": true, "evidence": [ { "path": "crates/spt/src/cli.rs", "line": 13878 }, { "path": "crates/spt/src/cli.rs", "line": 13950 } ] } } }, { "id": "REQ-ADAPTER-UPDATE-INPLACE", "title": "Bug #18: spt adapter update fails at re-register with os error 2 because it derives the install dir from the update repo NAME (_github/) instead of updating in place at the adapter record source_dir; when the adapter repo is intentionally renamed across releases (spt-claude-code to claude-spt, supported), the derived dir is fresh/empty and re-register reads a missing manifest. Fix: adapter update installs and re-registers in place at the registered source_dir and tolerates a changed update repo/URL across a rename. See docs/process/NEXT-MILESTONE-BUG-TRIAGE.md #18.", "requiredStages": [ "impl", "unit" ], "stages": { "doc": { "complete": false, "evidence": [] }, "impl": { "complete": true, "evidence": [ { "path": "crates/spt/src/cli.rs", "line": 8651 }, { "path": "crates/spt/src/cli.rs", "line": 9488 } ] }, "int": { "complete": false, "evidence": [] }, "unit": { "complete": true, "evidence": [ { "path": "crates/spt/src/cli.rs", "line": 17374 } ] } } }, { "id": "REQ-ADAPTER-UPDATE-MESSAGE", "title": "An adapter manifest may declare `[update].message` — a plain (multi-line) human notice surfaced to stdout, markdown-rendered (the v0.13.0 helpfmt prose path), ONLY when `spt adapter update` actually APPLIES an update (version changed), not on a no-op. Read from the newly-installed manifest; avenue-agnostic (gh_release/delegated/file_pull). No `{key}` substitution. Use: an adapter telling the operator a post-update action, e.g. spt-claude-code's \"run `/reload-plugins` in any ongoing sessions\". (v0.13.2)", "requiredStages": [ "doc", "impl", "unit" ], "stages": { "doc": { "complete": true, "evidence": [ { "path": "CONTEXT.md", "line": 103 }, { "path": "CONTEXT.md", "line": 565 }, { "path": "docs-site/src/harness-contract/manifest.md", "line": 428 }, { "path": "docs/MANIFEST.md", "line": 490 } ] }, "impl": { "complete": true, "evidence": [ { "path": "crates/spt-runtime/src/manifest.rs", "line": 574 }, { "path": "crates/spt/src/cli.rs", "line": 9274 } ] }, "int": { "complete": false, "evidence": [] }, "unit": { "complete": true, "evidence": [ { "path": "crates/spt/src/cli.rs", "line": 11638 }, { "path": "crates/spt/src/cli.rs", "line": 11653 } ] } } }, { "id": "REQ-ADAPTER-UPDATE-POST", "title": "Composite adapter update — an avenue-agnostic `[update.post]` sub-table `{ command, self_verifies }` run AFTER the primary avenue (gh_release/file_pull/delegated) resolves, in the same `spt adapter update` (ADR-0029). Runs UNCONDITIONALLY (even on an adapter version no-op — the post-step's own idempotent check decides). PUBLISHED stdin JSON seam: one line `{adapter_applied, adapter_name, profile_name, version, previous_version, adapter_dir}` (additive keys; post-step ignores unknown). stdout decides the notice: custom text SUPERSEDES [update].message; a reserved sentinel fires the static [update].message; empty = no notice. exit code orthogonal (0 ok / nonzero failed). Precedence: dynamic-stdout > sentinel/manifest-message > nothing. NO [update.post] declared ⇒ today's adapter_applied→[update].message unchanged; post-step FAILS ⇒ loud warning + fall back to adapter_applied→message. FAILURE-ISOLATED: a committed gh_release pull is never rolled back if the post-step fails (independent channels). (v0.16.0)", "requiredStages": [ "doc", "impl", "unit", "int" ], "stages": { "doc": { "complete": true, "evidence": [ { "path": "docs/MANIFEST.md", "line": 493 }, { "path": "docs/adr/0029-adapter-update-arc-resolve-not-execute.md", "line": 3 } ] }, "impl": { "complete": true, "evidence": [ { "path": "crates/spt-runtime/src/manifest.rs", "line": 580 }, { "path": "crates/spt-runtime/src/manifest.rs", "line": 607 }, { "path": "crates/spt-runtime/src/manifest.rs", "line": 1117 }, { "path": "crates/spt/src/cli.rs", "line": 9289 }, { "path": "crates/spt/src/cli.rs", "line": 9297 }, { "path": "crates/spt/src/cli.rs", "line": 9308 }, { "path": "crates/spt/src/cli.rs", "line": 9331 }, { "path": "crates/spt/src/cli.rs", "line": 9609 } ] }, "int": { "complete": true, "evidence": [ { "path": "crates/spt/tests/adapter_post_step.rs", "line": 41 } ] }, "unit": { "complete": true, "evidence": [ { "path": "crates/spt-runtime/src/manifest.rs", "line": 1446 }, { "path": "crates/spt/src/cli.rs", "line": 11665 } ] } } }, { "id": "REQ-ADAPTER-VERSION-CMD", "title": "`spt adapter version ` prints a registered adapter's declared version — the EXISTING mandatory `[adapter].version` manifest field (manifest.rs already requires it; NOT a `[strings].version`, NOT `get-string`, no second version source). A new `AdapterCmd::Version{option}` resolves the option's merged view via `registry::resolve_option` like the sibling adapter subcommands and prints `manifest.adapter.version`; an unresolvable option errors (exit 1) the same way. (v0.13.2 W6)", "requiredStages": [ "doc", "impl", "unit" ], "stages": { "doc": { "complete": true, "evidence": [ { "path": "docs/MANIFEST.md", "line": 35 } ] }, "impl": { "complete": true, "evidence": [ { "path": "crates/spt/src/cli.rs", "line": 9021 }, { "path": "crates/spt/src/cli.rs", "line": 9758 } ] }, "int": { "complete": false, "evidence": [] }, "unit": { "complete": true, "evidence": [ { "path": "crates/spt/src/cli.rs", "line": 11756 }, { "path": "crates/spt/src/cli.rs", "line": 11767 } ] } } }, { "id": "REQ-API-1", "title": "api prefix and adapter_name on every machinery invocation", "requiredStages": [ "impl", "unit", "int" ], "stages": { "doc": { "complete": false, "evidence": [] }, "impl": { "complete": true, "evidence": [ { "path": "crates/spt/src/api/mod.rs", "line": 15 } ] }, "int": { "complete": true, "evidence": [ { "path": "crates/spt/tests/contract_e2e.rs", "line": 13 } ] }, "unit": { "complete": true, "evidence": [ { "path": "crates/spt/src/api/mod.rs", "line": 791 }, { "path": "crates/spt/src/api/mod.rs", "line": 898 } ] } } }, { "id": "REQ-API-2", "title": "The api subcommand surface (bind/listen/poll/state/worker/boundary/...)", "requiredStages": [ "impl", "unit", "int" ], "stages": { "doc": { "complete": false, "evidence": [] }, "impl": { "complete": true, "evidence": [ { "path": "crates/spt-store/src/history.rs", "line": 17 }, { "path": "crates/spt/src/api/delivery.rs", "line": 20 }, { "path": "crates/spt/src/api/delivery.rs", "line": 148 }, { "path": "crates/spt/src/api/reporting.rs", "line": 24 }, { "path": "crates/spt/src/api/reporting.rs", "line": 41 }, { "path": "crates/spt/src/api/reporting.rs", "line": 293 }, { "path": "crates/spt/src/api/reporting.rs", "line": 335 }, { "path": "crates/spt/src/api/reporting.rs", "line": 414 }, { "path": "crates/spt/src/api/reporting.rs", "line": 477 }, { "path": "crates/spt/src/api/reporting.rs", "line": 516 }, { "path": "crates/spt/src/api/worker.rs", "line": 17 }, { "path": "crates/spt/src/api/worker.rs", "line": 44 }, { "path": "crates/spt/src/api/worker.rs", "line": 109 }, { "path": "crates/spt/src/api/worker.rs", "line": 123 } ] }, "int": { "complete": true, "evidence": [ { "path": "crates/spt/tests/contract_e2e.rs", "line": 14 }, { "path": "crates/spt/tests/contract_e2e.rs", "line": 187 } ] }, "unit": { "complete": true, "evidence": [ { "path": "crates/spt-store/src/history.rs", "line": 82 }, { "path": "crates/spt/src/api/delivery.rs", "line": 328 }, { "path": "crates/spt/src/api/reporting.rs", "line": 1035 }, { "path": "crates/spt/src/api/reporting.rs", "line": 1046 }, { "path": "crates/spt/src/api/reporting.rs", "line": 1286 }, { "path": "crates/spt/src/api/reporting.rs", "line": 1332 }, { "path": "crates/spt/src/api/worker.rs", "line": 190 }, { "path": "crates/spt/src/api/worker.rs", "line": 288 } ] } } }, { "id": "REQ-API-3", "title": "commune/signoff are file-drops, not commands", "requiredStages": [ "impl", "unit", "int" ], "stages": { "doc": { "complete": false, "evidence": [] }, "impl": { "complete": true, "evidence": [ { "path": "crates/spt-live/src/ingest.rs", "line": 27 }, { "path": "crates/spt/src/api/reporting.rs", "line": 646 } ] }, "int": { "complete": true, "evidence": [ { "path": "crates/spt/tests/contract_e2e.rs", "line": 261 } ] }, "unit": { "complete": true, "evidence": [ { "path": "crates/spt-live/src/ingest.rs", "line": 382 }, { "path": "crates/spt/src/api/reporting.rs", "line": 1361 } ] } } }, { "id": "REQ-API-4", "title": "api resolves the adapter manifest (+ profile + install dir) from `--adapter name:profile` via the registry when `--manifest` is omitted; `--manifest` becomes an optional OVERRIDE (unregistered / local-dev manifests). Removes the require-both-flags redundancy — a registered adapter's live bringup / digest / capability needs only `--adapter` — and yields the precise install dir (the record's source_dir) rather than the --manifest parent, closing the copy-mode psyche-binary edge (v0.8.0)", "requiredStages": [ "doc", "impl", "unit" ], "stages": { "doc": { "complete": true, "evidence": [ { "path": "CONTEXT.md", "line": 177 } ] }, "impl": { "complete": true, "evidence": [ { "path": "crates/spt/src/api/mod.rs", "line": 539 } ] }, "int": { "complete": false, "evidence": [] }, "unit": { "complete": true, "evidence": [ { "path": "crates/spt/src/api/mod.rs", "line": 731 }, { "path": "crates/spt/src/api/mod.rs", "line": 755 }, { "path": "crates/spt/src/api/mod.rs", "line": 779 } ] } } }, { "id": "REQ-API-ENDPOINT-INFO", "title": "#7: spt api endpoint-info [] (JSON) lets an endpoint learn its ATTACHED (controlling) node — claude-spt surfaces local + attached node names on UserPromptSubmit so the agent knows whether getting a file to the user needs extra steps (user RC'd in from another machine). spt api * is the harness-contract agent-facing surface (JSON-first, rides perch identity/auth so the bare no- form self-resolves like whoami). Payload (committed DTO, additive-forever): { id, endpoint_type, adapter, local_node:{label,key}, attached_node:{label,key}|null, controlled:bool, project:, cwd, subnets:[...] } — attached_node from controller stamps (driven_by remote / self-node when controlled with no remote driver), null when uncontrolled. HARD dependency on #2 + #3 (stamps must be honest first). Adapter-side consumable -> perri release-ping on publish. Naming: chose 'spt api endpoint-info' over alt 'spt endpoint get-info' — api is the agent surface (doc rationale). See docs/process/NEXT-MILESTONE-PICKER-TRIAGE.md #7.", "requiredStages": [ "impl", "unit" ], "stages": { "doc": { "complete": false, "evidence": [] }, "impl": { "complete": true, "evidence": [ { "path": "crates/spt/src/api/reporting.rs", "line": 812 }, { "path": "crates/spt/src/api/reporting.rs", "line": 824 }, { "path": "crates/spt/src/api/reporting.rs", "line": 862 }, { "path": "crates/spt/src/api/reporting.rs", "line": 886 }, { "path": "crates/spt/src/api/reporting.rs", "line": 906 } ] }, "int": { "complete": false, "evidence": [] }, "unit": { "complete": true, "evidence": [ { "path": "crates/spt/src/api/reporting.rs", "line": 983 }, { "path": "crates/spt/src/api/reporting.rs", "line": 1015 } ] } } }, { "id": "REQ-ARCH-1", "title": "Many small acyclically-layered crates", "requiredStages": [ "impl" ], "stages": { "doc": { "complete": false, "evidence": [] }, "impl": { "complete": true, "evidence": [ { "path": "crates/spt-msg/src/lib.rs", "line": 18 }, { "path": "crates/spt-proto/src/lib.rs", "line": 12 }, { "path": "crates/spt-store/src/lib.rs", "line": 12 } ] }, "int": { "complete": false, "evidence": [] }, "unit": { "complete": false, "evidence": [] } } }, { "id": "REQ-ARCH-2", "title": "Public SDK surface is spt-proto, spt-runtime, spt-msg", "requiredStages": [ "impl" ], "stages": { "doc": { "complete": false, "evidence": [] }, "impl": { "complete": true, "evidence": [ { "path": "crates/spt-runtime/src/lib.rs", "line": 18 } ] }, "int": { "complete": false, "evidence": [] }, "unit": { "complete": false, "evidence": [] } } }, { "id": "REQ-ARCH-3", "title": "Wire-protocol version independent of crate semver, N-1 compat window", "requiredStages": [ "impl", "unit" ], "stages": { "doc": { "complete": false, "evidence": [] }, "impl": { "complete": true, "evidence": [ { "path": "crates/spt-proto/src/version.rs", "line": 34 }, { "path": "crates/spt-proto/src/version.rs", "line": 41 } ] }, "int": { "complete": false, "evidence": [] }, "unit": { "complete": true, "evidence": [ { "path": "crates/spt-proto/src/version.rs", "line": 51 }, { "path": "crates/spt-proto/src/version.rs", "line": 71 }, { "path": "crates/spt-proto/src/version.rs", "line": 83 } ] } } }, { "id": "REQ-ARCH-4", "title": "Copy-verbatim the commodity layer from the sister project", "requiredStages": [ "impl", "unit" ], "stages": { "doc": { "complete": false, "evidence": [] }, "impl": { "complete": true, "evidence": [ { "path": "crates/spt-proto/src/event.rs", "line": 165 }, { "path": "crates/spt-proto/src/event.rs", "line": 188 }, { "path": "crates/spt-proto/src/event.rs", "line": 208 }, { "path": "crates/spt-proto/src/event.rs", "line": 223 }, { "path": "crates/spt-proto/src/event.rs", "line": 273 } ] }, "int": { "complete": false, "evidence": [] }, "unit": { "complete": true, "evidence": [ { "path": "crates/spt-proto/src/event.rs", "line": 334 }, { "path": "crates/spt-proto/src/event.rs", "line": 344 }, { "path": "crates/spt-proto/src/event.rs", "line": 355 }, { "path": "crates/spt-proto/src/event.rs", "line": 366 }, { "path": "crates/spt-proto/src/event.rs", "line": 378 }, { "path": "crates/spt-proto/src/event.rs", "line": 391 }, { "path": "crates/spt-proto/src/event.rs", "line": 402 }, { "path": "crates/spt-proto/src/event.rs", "line": 419 }, { "path": "crates/spt-proto/src/event.rs", "line": 547 } ] } } }, { "id": "REQ-BIND-HONEST-SELF-STAMP", "title": "C2-ROOT (F028, doyle RCA 2026-07-03): the identity-attribution ROOT behind REQ-SESSIONS-LOG-ENDPOINT-ATTRIBUTION — three composing defects let a psyche-hosted SessionStart hook stamp a FOREIGN perch: (1) roster::detect_self_id leg (a) scans the owlery ONE level (roster.rs:107 read_dir(owlery)) so a NESTED psyche perch owlery//nested/-psyche can never self-resolve; (2) [session.psyche_init] (claude-spt manifest ~L347) spawns the psyche with NO env_remove + no pinned child identity, so whatever OWL_SESSION_ID/SPT_AGENT_ID reaches the child resolves to a foreign top-level perch; (3) the hook then writes info.json (session_id/pid rebind) + sessions.log on the mis-resolved victim. FIX (spt-core half): (i) identity PINNED at spawn — ManifestRuntime role spawns inject the child's OWN SPT_AGENT_ID= + OWL_SESSION_ID=, AND detect_self_id enumerates NESTED perches (fix the one-level owlery scan); (ii) BIND HONESTY — a session-start stamp may only write a perch whose resolved id AFFIRMATIVELY matches; never a fallback pick; refuse + loud-skip when unresolved (kin REQ-MSG-CLI-ORIGIN honest-default + #9 ancestry). ADAPTER half = PERRI touchpoint (psyche_init env scrubbing / relies on runtime pinning; hook loses silent fallback-perch behavior) — FLAG doyle BEFORE any manifest move (adapter glue-model rule). See triage C2 fix (i)+(ii).", "requiredStages": [ "impl", "unit", "int" ], "stages": { "doc": { "complete": false, "evidence": [] }, "impl": { "complete": true, "evidence": [ { "path": "crates/spt-store/src/perch.rs", "line": 452 }, { "path": "crates/spt/src/api/auth.rs", "line": 197 }, { "path": "crates/spt/src/roster.rs", "line": 112 } ] }, "int": { "complete": true, "evidence": [ { "path": "crates/spt/tests/bind_honest_cross_perch_e2e.rs", "line": 180 } ] }, "unit": { "complete": true, "evidence": [ { "path": "crates/spt/src/api/auth.rs", "line": 464 }, { "path": "crates/spt/src/roster.rs", "line": 377 } ] } } }, { "id": "REQ-BOUNDARY-ROTATION-CREDENTIAL", "title": "api boundary's rotation credential is designed, documented, and eventually anchor-proven (ADR-0032): the proof is the DEPARTED session's (prior sid / token) — --to-session-id is payload, never proof; the published surface documents the adapter prior-sid persistence pattern + loud-refusal requirement; the design-true end-state additionally accepts an OS-verified parent_pid-anchor ancestry proof making adapter sid-state optional", "requiredStages": [ "doc" ], "stages": { "doc": { "complete": true, "evidence": [ { "path": "docs-site/src/harness-contract/api.md", "line": 129 }, { "path": "docs/adr/0032-boundary-rotation-credential.md", "line": 3 } ] }, "impl": { "complete": false, "evidence": [] }, "int": { "complete": false, "evidence": [] }, "unit": { "complete": false, "evidence": [] } } }, { "id": "REQ-BROKER-ATTACH-JOURNAL-RESILIENT", "title": "A poisoned EffectJournal mutex or a sick NetHost runtime must NOT permanently brick all future attaches. Bug #16 (URGENT): a live spt-hosted endpoint (eel-a) attach fails with 'brain IPC read deadline elapsed' after a self-update brain-respawn — the broker survives the respawn and one journaled op (dispatch_net_stream_open journal.apply_once + loopback open_stream runtime.block_on nethost.rs:1060) enters a bad state, so every journaled attach silently kills its per-conn reply thread while non-journaled ops keep working. Fix: recover PoisonError via into_inner (effect.rs apply_once, replace the .expect panics) so one panic cannot brick all attaches; bound the loopback open_stream block_on (nethost.rs:1060) like the QUIC bounded_block_on so a sick runtime fails fast with an error frame not an opaque 10s deadline. Reinforces REQ-HAZARD-EFFECT-JOURNAL-PTY-WEDGE. See docs/process/NEXT-MILESTONE-BUG-TRIAGE.md #16.", "requiredStages": [ "impl", "unit" ], "stages": { "doc": { "complete": false, "evidence": [] }, "impl": { "complete": true, "evidence": [ { "path": "crates/spt-daemon/src/effect.rs", "line": 379 }, { "path": "crates/spt-daemon/src/nethost.rs", "line": 1073 } ] }, "int": { "complete": false, "evidence": [] }, "unit": { "complete": true, "evidence": [ { "path": "crates/spt-daemon/src/effect.rs", "line": 689 } ] } } }, { "id": "REQ-BROKER-SCREEN-GRID", "title": "Bugs #6 + #12 + #7/#8-artifacts: the broker is a raw-byte pump with no screen model — OutputLog replays the raw ring from seq 0 into a fresh terminal on attach, so an alt-screen TUI (Claude Code) corrupts scrollback (#6) and rc-to-a-pre-running-endpoint garbles (#12 — rc and endpoint run --attach are the SAME client fn, so it is replay content not a client-VT bug). Fix: a server-side VT/grid/screen model (tmux/mosh-style) that maintains authoritative screen + alt/main + cursor and synthesizes a CLEAN current-screen repaint on attach instead of replaying mid-stream ring bytes. Also eliminates residual-cell artifacts on animate/scroll/resize (#7/#8). Operator NON-NEGOTIABLE: accurate PTY representation with zero artifacts. (win32 vterm in the report means this server-side emulator, not ConPTY which is already the backend.) See docs/process/NEXT-MILESTONE-BUG-TRIAGE.md #6/#12.", "requiredStages": [ "doc", "impl", "unit", "int" ], "stages": { "doc": { "complete": true, "evidence": [ { "path": "docs/adr/0031-server-side-screen-grid-render-repaint.md", "line": 17 } ] }, "impl": { "complete": true, "evidence": [ { "path": "crates/spt-term/src/lib.rs", "line": 56 }, { "path": "crates/spt-term/src/screen.rs", "line": 213 }, { "path": "crates/spt-term/src/screen.rs", "line": 589 }, { "path": "crates/spt-term/src/screen.rs", "line": 808 } ] }, "int": { "complete": true, "evidence": [ { "path": "crates/spt-daemon/src/broker.rs", "line": 5300 }, { "path": "crates/spt-daemon/tests/attach.rs", "line": 590 } ] }, "unit": { "complete": true, "evidence": [ { "path": "crates/spt-daemon/src/broker.rs", "line": 5232 }, { "path": "crates/spt-term/src/screen.rs", "line": 873 }, { "path": "crates/spt-term/src/screen.rs", "line": 887 }, { "path": "crates/spt-term/src/screen.rs", "line": 909 }, { "path": "crates/spt-term/src/screen.rs", "line": 928 }, { "path": "crates/spt-term/src/screen.rs", "line": 941 }, { "path": "crates/spt-term/src/screen.rs", "line": 965 }, { "path": "crates/spt-term/src/screen.rs", "line": 975 }, { "path": "crates/spt-term/src/screen.rs", "line": 986 }, { "path": "crates/spt-term/src/screen.rs", "line": 997 }, { "path": "crates/spt-term/src/screen.rs", "line": 1007 }, { "path": "crates/spt-term/src/screen.rs", "line": 1015 } ] } } }, { "id": "REQ-CLI-1", "title": "spt endpoint noun namespace: absorbs fork/suspend/wake/shutdown/rename/stop/digest + access (ported 1:1: allow|revoke|open|list, decision 21) + description (ex-resources blurb; bare=show, set=author); merged endpoint list [--local|--subnet ] grouped by subnet with SELF pinned, --detail adding the ex-resources yellow-pages blurb projection; bare spt endpoint = the list (M8 decisions 1-2, 25). SUPERSEDED (F-025 item 3): the LISTING SHAPE now lives in REQ-ENDPOINT-LIST-NODE-GROUPED (node-grouped over unique instances, not grouped-by-subnet) + REQ-ENDPOINT-LIST-REST-FILTER (suspended-hidden + --show-all); the `--local` flag was dropped by REQ-ENDPOINT-LIST-MERGE-LOCAL (the list ALWAYS merges local). This REQ owns only the endpoint noun NAMESPACE + parse surface — not the render shape.", "requiredStages": [ "impl", "unit" ], "stages": { "doc": { "complete": false, "evidence": [] }, "impl": { "complete": true, "evidence": [ { "path": "crates/spt/src/cli.rs", "line": 271 }, { "path": "crates/spt/src/cli.rs", "line": 1271 }, { "path": "crates/spt/src/cli.rs", "line": 2687 } ] }, "int": { "complete": false, "evidence": [] }, "unit": { "complete": true, "evidence": [ { "path": "crates/spt/src/cli.rs", "line": 13216 } ] } } }, { "id": "REQ-CLI-2", "title": "spt daemon noun: run|stop|status (hidden daemon verb becomes daemon run; agent-endpoint shutdown keeps its name under endpoint); daemon status renders the pump heartbeat (last-tick recency) so a half-dead daemon is never rendered implied-healthy (M8 decisions 5, 23)", "requiredStages": [ "impl", "unit" ], "stages": { "doc": { "complete": false, "evidence": [] }, "impl": { "complete": true, "evidence": [ { "path": "crates/spt-daemon/src/daemon.rs", "line": 421 }, { "path": "crates/spt-daemon/src/endpoint.rs", "line": 97 }, { "path": "crates/spt-daemon/src/seedmap.rs", "line": 331 }, { "path": "crates/spt/src/cli.rs", "line": 503 }, { "path": "crates/spt/src/cli.rs", "line": 1378 }, { "path": "crates/spt/src/cli.rs", "line": 3728 }, { "path": "crates/spt/src/cli.rs", "line": 3874 }, { "path": "crates/spt/src/cli.rs", "line": 3943 } ] }, "int": { "complete": false, "evidence": [] }, "unit": { "complete": true, "evidence": [ { "path": "crates/spt-daemon/src/seedmap.rs", "line": 466 }, { "path": "crates/spt/src/cli.rs", "line": 13349 } ] } } }, { "id": "REQ-CLI-3", "title": "Agent hot path stays flat across the M8 reorg: send/ring/ready/whoami/how-to unchanged; notify moves to subnet notify while notif stays top-level; breaking renames land clean with no deprecation shims (zero external CLI consumers pre-spt-claude-code) (M8 decisions 3-4, 9)", "requiredStages": [ "impl", "unit" ], "stages": { "doc": { "complete": false, "evidence": [] }, "impl": { "complete": true, "evidence": [ { "path": "crates/spt/src/cli.rs", "line": 1265 } ] }, "int": { "complete": false, "evidence": [] }, "unit": { "complete": true, "evidence": [ { "path": "crates/spt/src/cli.rs", "line": 13181 } ] } } }, { "id": "REQ-CLI-4", "title": "User-facing CLI output is human-readable: DIRECT-USER commands (e.g. adapter update/list/use) render friendly prose instead of raw CODE:RESULT markers — \"claude-spt is up to date (0.2.0).\" not \"ADAPTER_UPDATE_UPTODATE:claude-spt: installed 0.2.0, latest 0.2.0\". Strictly bounded to the direct-user surface: the adapter-PARSED bringup tokens (SEEDED/BOUND/READY/NO_SEED on seed/listen, which adapters grep) stay machine-parseable — humanization is additive (a human line beside the marker, or a --porcelain/--quiet split), never a silent rename of a dual-contract marker. The user-facing bringup composition belongs to the adapter (perri); this REQ owns only the direct-user CLI surface. (v0.9.0)", "requiredStages": [], "stages": { "doc": { "complete": false, "evidence": [] }, "impl": { "complete": true, "evidence": [ { "path": "crates/spt/src/cli.rs", "line": 9092 } ] }, "int": { "complete": false, "evidence": [] }, "unit": { "complete": false, "evidence": [] } } }, { "id": "REQ-CLI-BROKEN-PIPE-TOLERANT", "title": "#10 (F026 micro): `spt | ` must not PANIC when stdout closes early. A closed downstream reader mid-print panics with 'failed printing to stdout: The pipe is being closed. (os error 232)' (live repro: `spt daemon status | Select -First N`). Fix: tolerate BrokenPipe process-wide — a write to a closed stdout exits 0 (SIGPIPE-equivalent: a consumer that stops reading is a normal end, not a crash), without leaking a Rust panic + backtrace to the user.", "requiredStages": [ "impl", "unit" ], "stages": { "doc": { "complete": false, "evidence": [] }, "impl": { "complete": true, "evidence": [ { "path": "crates/spt/src/main.rs", "line": 30 }, { "path": "crates/spt/src/main.rs", "line": 44 }, { "path": "crates/spt/src/main.rs", "line": 64 } ] }, "int": { "complete": false, "evidence": [] }, "unit": { "complete": true, "evidence": [ { "path": "crates/spt/src/main.rs", "line": 117 } ] } } }, { "id": "REQ-CLI-HELP-MARKDOWN", "title": "`spt --help` (and every subcommand --help) renders the inline Markdown authored in the clap doc-comments as terminal styling, never as literal markers: `**bold**` → ANSI bold, `` `code` `` → ANSI cyan, `[text](url)` → `text`. The markers are STRIPPED either way — a raw `**` or backtick must NEVER reach the user (the operator-reported v0.12.0 defect: help text reads `**ctrl-b**` and stray backticks verbatim). Color/bold escapes are emitted ONLY when the help is going to a real terminal AND color is not suppressed (NO_COLOR unset · CLICOLOR != 0 · CLICOLOR_FORCE forces on); a pipe / redirect / CI / NO_COLOR falls back to strip-only (clean plaintext, zero escapes) so machine-readable help is byte-identical regardless of marker syntax. Pure transform over the clap-rendered help string at the single run()/bare_invocation chokepoint; preserves pre-existing ANSI (CSI sequences passed through untouched), never spans markers across a newline, leaves unmatched/empty markers literal, and does not alter the help layout. (v0.12.1)", "requiredStages": [ "impl", "unit" ], "stages": { "doc": { "complete": false, "evidence": [] }, "impl": { "complete": true, "evidence": [ { "path": "crates/spt/src/helpfmt.rs", "line": 8 }, { "path": "crates/spt/src/helpfmt.rs", "line": 131 }, { "path": "crates/spt/src/helpfmt.rs", "line": 162 }, { "path": "crates/spt/src/helpfmt.rs", "line": 309 } ] }, "int": { "complete": false, "evidence": [] }, "unit": { "complete": true, "evidence": [ { "path": "crates/spt/src/helpfmt.rs", "line": 345 }, { "path": "crates/spt/src/helpfmt.rs", "line": 352 }, { "path": "crates/spt/src/helpfmt.rs", "line": 359 }, { "path": "crates/spt/src/helpfmt.rs", "line": 366 }, { "path": "crates/spt/src/helpfmt.rs", "line": 393 }, { "path": "crates/spt/src/helpfmt.rs", "line": 403 }, { "path": "crates/spt/src/helpfmt.rs", "line": 413 }, { "path": "crates/spt/src/helpfmt.rs", "line": 427 }, { "path": "crates/spt/src/helpfmt.rs", "line": 436 }, { "path": "crates/spt/src/helpfmt.rs", "line": 444 } ] } } }, { "id": "REQ-CLI-JSON", "title": "A global `--json` flag (clap global=true) honored by the READ/STATUS command set: endpoint list/whoami, daemon status, subnet status/show-code, endpoint description/role, adapter list/version, notif list, grant list, access list, shell list, how-to (endpoint digest already has it). Action commands do not honor it. A shared print_json() helper + a coverage TEST asserting every command in the set emits valid JSON (guards against the missing-shared-formatter drift). Output uses explicit per-command output DTOs with committed field names — internal structs are NOT serialized verbatim (their fields would become a public contract; JSON is a consumed wire-parity surface). (v0.16.0)", "requiredStages": [ "impl", "unit", "int" ], "stages": { "doc": { "complete": false, "evidence": [] }, "impl": { "complete": true, "evidence": [ { "path": "crates/spt/src/cli.rs", "line": 57 }, { "path": "crates/spt/src/cli.rs", "line": 445 }, { "path": "crates/spt/src/cli.rs", "line": 1203 }, { "path": "crates/spt/src/cli.rs", "line": 1439 }, { "path": "crates/spt/src/cli.rs", "line": 2517 }, { "path": "crates/spt/src/cli.rs", "line": 2568 }, { "path": "crates/spt/src/cli.rs", "line": 2601 }, { "path": "crates/spt/src/cli.rs", "line": 2657 }, { "path": "crates/spt/src/cli.rs", "line": 2693 }, { "path": "crates/spt/src/cli.rs", "line": 2705 }, { "path": "crates/spt/src/cli.rs", "line": 2724 }, { "path": "crates/spt/src/cli.rs", "line": 2732 }, { "path": "crates/spt/src/cli.rs", "line": 2756 }, { "path": "crates/spt/src/cli.rs", "line": 2804 }, { "path": "crates/spt/src/cli.rs", "line": 3947 }, { "path": "crates/spt/src/cli.rs", "line": 3984 }, { "path": "crates/spt/src/cli.rs", "line": 4045 }, { "path": "crates/spt/src/cli.rs", "line": 4409 }, { "path": "crates/spt/src/cli.rs", "line": 4421 }, { "path": "crates/spt/src/cli.rs", "line": 4456 }, { "path": "crates/spt/src/cli.rs", "line": 4474 }, { "path": "crates/spt/src/cli.rs", "line": 6552 }, { "path": "crates/spt/src/cli.rs", "line": 6571 }, { "path": "crates/spt/src/cli.rs", "line": 7194 }, { "path": "crates/spt/src/cli.rs", "line": 7203 }, { "path": "crates/spt/src/cli.rs", "line": 7213 }, { "path": "crates/spt/src/cli.rs", "line": 7264 }, { "path": "crates/spt/src/cli.rs", "line": 7358 }, { "path": "crates/spt/src/cli.rs", "line": 7397 }, { "path": "crates/spt/src/cli.rs", "line": 8368 }, { "path": "crates/spt/src/cli.rs", "line": 8397 }, { "path": "crates/spt/src/cli.rs", "line": 8413 }, { "path": "crates/spt/src/cli.rs", "line": 8452 }, { "path": "crates/spt/src/cli.rs", "line": 8461 }, { "path": "crates/spt/src/cli.rs", "line": 8537 }, { "path": "crates/spt/src/cli.rs", "line": 8619 }, { "path": "crates/spt/src/cli.rs", "line": 8631 }, { "path": "crates/spt/src/cli.rs", "line": 8639 }, { "path": "crates/spt/src/cli.rs", "line": 8931 }, { "path": "crates/spt/src/cli.rs", "line": 9762 }, { "path": "crates/spt/src/cli.rs", "line": 10149 }, { "path": "crates/spt/src/cli.rs", "line": 10160 }, { "path": "crates/spt/src/cli.rs", "line": 10470 }, { "path": "crates/spt/src/cli.rs", "line": 11169 }, { "path": "crates/spt/src/cli.rs", "line": 11179 }, { "path": "crates/spt/src/cli.rs", "line": 11252 } ] }, "int": { "complete": true, "evidence": [ { "path": "crates/spt/tests/json_emit.rs", "line": 54 } ] }, "unit": { "complete": true, "evidence": [ { "path": "crates/spt/src/cli.rs", "line": 13142 } ] } } }, { "id": "REQ-CLI-OUTPUT-MARKDOWN", "title": "Human-prose COMMAND OUTPUT (not just `--help`) renders the inline Markdown authored in its source strings as terminal styling, never literal markers: `` `code` `` → ANSI cyan, `**bold**` → ANSI bold, `[text](url)` → `text`, markers STRIPPED either way. REQ-CLI-HELP-MARKDOWN only hooked the clap `--help` chokepoint, so command output still printed raw Markdown (audit: `spt how-to` topic text showed `# headers`/backticks, `spt subnet`/`subnet status` hint footers showed stray backticks, the daemon-status `not running` line, the `ENDPOINT_RUN_STARTED` attach hint, and the daemon's `SUBNET_DETACHED` startup line — 13 prose surfaces). The same line-bounded pure `helpfmt::render` is applied at each emit site, color-gated by the OUTPUT STREAM's own tty (`stdout_color` for print/println, the new `stderr_color` for eprintln). HARNESS-SAFETY (binding): color is tty-gated, so an adapter (piped / non-tty / NO_COLOR) gets STRIP mode = zero ANSI + markers removed; every dual-contract MACHINE token on a rendered line (`ENDPOINT_RUN_STARTED:`, `NO_SUCH_TOPIC:`, `SUBNET_DETACHED:`) carries NO Markdown markers, so it survives strip byte-intact — the adapter parse is never perturbed. Pure-machine output (the `` envelope, bringup parse-tokens SEEDED/BOUND/READY/NO_SEED, `--json`, QR) is NEVER routed through the renderer. The one spt-daemon source string (`SUBNET_DETACHED`, the bin-local renderer is unreachable from the daemon crate) is authored marker-free instead. (v0.12.2)", "requiredStages": [ "impl", "unit" ], "stages": { "doc": { "complete": false, "evidence": [] }, "impl": { "complete": true, "evidence": [ { "path": "crates/spt-daemon/src/daemon.rs", "line": 144 }, { "path": "crates/spt/src/cli.rs", "line": 1991 }, { "path": "crates/spt/src/cli.rs", "line": 4198 }, { "path": "crates/spt/src/cli.rs", "line": 7294 }, { "path": "crates/spt/src/cli.rs", "line": 7420 }, { "path": "crates/spt/src/cli.rs", "line": 8392 }, { "path": "crates/spt/src/helpfmt.rs", "line": 44 } ] }, "int": { "complete": false, "evidence": [] }, "unit": { "complete": true, "evidence": [ { "path": "crates/spt/src/cli.rs", "line": 15859 }, { "path": "crates/spt/src/helpfmt.rs", "line": 377 }, { "path": "crates/spt/src/helpfmt.rs", "line": 454 }, { "path": "crates/spt/src/helpfmt.rs", "line": 477 }, { "path": "crates/spt/src/helpfmt.rs", "line": 491 } ] } } }, { "id": "REQ-CLI-WIN-VT-ENABLE", "title": "A7 (F028, operator, Win10 conhost): ANSI emitted without VT enable → garbled console. Evidence (raw PowerShell 7, Win10 conhost): literal `←[36m` in `endpoint list` + `--help`. ROOT: ENABLE_VIRTUAL_TERMINAL_PROCESSING is enabled ONLY on the rc attach path (rc.rs:746, REQ-RC-WIN-VT-OUTPUT) — plain CLI stdout never enables it, and the color decision doesn't fall back when the console can't render VT. FIX: lift the rc.rs VT-enable into a SHARED startup helper for every colored-output path; if SetConsoleMode fails (or stdout isn't a console), STRIP colors (the ansi_wrap/helpfmt color=false path already exists — plumb the decision, not new rendering). Windows Terminal masks this (VT always on) — TEST on raw conhost. See triage A7.", "requiredStages": [ "impl", "unit" ], "stages": { "doc": { "complete": false, "evidence": [] }, "impl": { "complete": true, "evidence": [ { "path": "crates/spt/src/helpfmt.rs", "line": 61 } ] }, "int": { "complete": false, "evidence": [] }, "unit": { "complete": true, "evidence": [ { "path": "crates/spt/src/helpfmt.rs", "line": 329 } ] } } }, { "id": "REQ-CONSENT-1", "title": "Consent grant store: capability x subject-agent x target-node rows, enforced at the target node, subnet-settable (replicates as security material near the trust store), revocable; gated-capability ids (remote-exec, instantiate-anywhere) reserved-but-refusing; v1 consumers are the shell spawn gates (CONTEXT Consent & security gates)", "requiredStages": [ "impl", "unit" ], "stages": { "doc": { "complete": false, "evidence": [] }, "impl": { "complete": true, "evidence": [ { "path": "crates/spt-daemon/src/grants.rs", "line": 27 }, { "path": "crates/spt-daemon/src/grants.rs", "line": 75 }, { "path": "crates/spt-daemon/src/grants.rs", "line": 98 }, { "path": "crates/spt-store/src/grants.rs", "line": 82 }, { "path": "crates/spt-store/src/grants.rs", "line": 109 }, { "path": "crates/spt-store/src/grants.rs", "line": 127 }, { "path": "crates/spt-store/src/grants.rs", "line": 142 }, { "path": "crates/spt/src/cli.rs", "line": 11166 } ] }, "int": { "complete": false, "evidence": [] }, "unit": { "complete": true, "evidence": [ { "path": "crates/spt-daemon/src/grants.rs", "line": 334 }, { "path": "crates/spt-daemon/src/grants.rs", "line": 380 }, { "path": "crates/spt-daemon/src/grants.rs", "line": 391 }, { "path": "crates/spt-store/src/grants.rs", "line": 165 }, { "path": "crates/spt-store/src/grants.rs", "line": 184 }, { "path": "crates/spt-store/src/grants.rs", "line": 204 }, { "path": "crates/spt/src/cli.rs", "line": 13600 } ] } } }, { "id": "REQ-CONSENT-2", "title": "Interactive consent escalation: an ungated high-risk action routes a consent prompt to the user's most-recently-active session; allow-once / allow-always (writes a grant) / deny; pre-consent flags (can_shutdown, shell_wake_spawn_anywhere) author grants via manifest/settings (CONTEXT Consent & security gates)", "requiredStages": [ "impl", "unit" ], "stages": { "doc": { "complete": false, "evidence": [] }, "impl": { "complete": true, "evidence": [ { "path": "crates/spt-daemon/src/grants.rs", "line": 140 }, { "path": "crates/spt-daemon/src/grants.rs", "line": 165 }, { "path": "crates/spt-daemon/src/grants.rs", "line": 199 }, { "path": "crates/spt-daemon/src/grants.rs", "line": 241 }, { "path": "crates/spt-daemon/src/grants.rs", "line": 269 }, { "path": "crates/spt-daemon/src/grants.rs", "line": 300 }, { "path": "crates/spt/src/cli.rs", "line": 10957 }, { "path": "crates/spt/src/cli.rs", "line": 11015 } ] }, "int": { "complete": false, "evidence": [] }, "unit": { "complete": true, "evidence": [ { "path": "crates/spt-daemon/src/grants.rs", "line": 419 }, { "path": "crates/spt-daemon/src/grants.rs", "line": 436 }, { "path": "crates/spt-daemon/src/grants.rs", "line": 472 }, { "path": "crates/spt-daemon/src/grants.rs", "line": 516 }, { "path": "crates/spt/src/cli.rs", "line": 15031 }, { "path": "crates/spt/src/cli.rs", "line": 15113 } ] } } }, { "id": "REQ-CONSENT-3", "title": "Per-capability approval gates (class-keyed): the require_approval enum may ride INDIVIDUAL [shell.capabilities] entries — gating the dangerous ACT, not just the spawn — with an optional class_key scoping the grant qualifier finer than the capability id ((owner endpoint x device class x node); a remembered HID-class attach grant never authorizes a storage-class attach). Reuses the grant store + interactive escalation + tighten-only floor (REQ-CONSENT-1/2 plumbing). Spawn gates govern EXISTENCE; capability gates govern ACTS — an explicitly distinct invariant (CONTEXT:283, ratified 2026-06-11 Gateway grill).", "requiredStages": [ "doc", "impl", "unit", "int" ], "stages": { "doc": { "complete": true, "evidence": [ { "path": "CONTEXT.md", "line": 347 } ] }, "impl": { "complete": true, "evidence": [ { "path": "crates/spt-daemon/src/linkhost.rs", "line": 124 }, { "path": "crates/spt-daemon/src/linkhost.rs", "line": 163 }, { "path": "crates/spt-daemon/src/linkhost.rs", "line": 292 }, { "path": "crates/spt-runtime/src/manifest.rs", "line": 733 }, { "path": "crates/spt-runtime/src/manifest.rs", "line": 983 }, { "path": "crates/spt/src/cli.rs", "line": 11083 } ] }, "int": { "complete": true, "evidence": [ { "path": "crates/spt/tests/shell_actgate_e2e.rs", "line": 16 } ] }, "unit": { "complete": true, "evidence": [ { "path": "crates/spt-daemon/src/linkhost.rs", "line": 1020 }, { "path": "crates/spt-daemon/src/linkhost.rs", "line": 1067 }, { "path": "crates/spt-runtime/src/manifest.rs", "line": 1781 } ] } } }, { "id": "REQ-CONTROLLER-LIVENESS-REAP", "title": "B-2 (REMOTE-TRUTH triage §B-2, REDUCED @bdc1242): a stale ONLINE+CONTROLLED stamp on a live-session perch self-heals — the info.json driven_by/controlled RECORD is made to match the broker's SINK-TABLE TRUTH. ROOT (persisted-stale-stamp class, doyle Q1): the livehost control reap gates on !has_session (reconcile_hosted_liveness), and a brain-only update KEEPS the session (REQ-UPD-3), so a controller stamp that went stale WHILE the session lived was never re-derived from broker truth. NOT a transport bug: (a) a persisted conn is the REQ-UPD-3 feature; (b) an idle-severed conn eventually EOFs via QUIC keepalive → handle_conn detach (path 1) — and the reason paths 1-3 previously failed to clean up was the B-1 broker floor-lock POISON WEDGE (cleanup panicked under the poisoned lock), now fixed. REDUCTION (doyle, my ground-truth): the prescription was 80% pre-built — converge_perch_stamps (broker.rs, REQ-HAZARD-CONTROL-STAMP-CONVERGENCE) ALREADY converges info.json driven_by/controlled to the broker's controller_by/has_controller on EVERY KIND_SESSIONS poll, and the livehost reconcile already TRIGGERS that poll per tick (query_live_session_endpoints). So NO new IPC query, NO new livehost arm, NO 5th detach path — the ONLY gap is that a controller whose WRITER THREAD died (severed conn: the writer failed a socket write, or a detach dropped by the prior B-1 wedge) still reports controller_by=Some/has_controller=true, so converge keeps the stale stamp. FIX: a broker-side lazy-reap in the KIND_SESSIONS snapshot closure — OutputLog::reap_dead_controller() drops a controller whose _writer.is_finished() BEFORE controller_by/has_controller are read, so the reply + the off-lock converge both see the honest (cleared) state and the stamp clears. LOCK-SAFE: the reap drops the sink in-memory ONLY (no stamp_driven_by → no info.json I/O under the log lock, the KH 7.12/5.16 lock-across-effect discipline); the OFF-lock converge_perch_stamps writes the honest stamp. KH 7.15 held by construction: the reap only ever CLEARS, never latches driven_by; a LIVE (idle, parked-on-rx.recv) controller is is_finished()==false so it is NEVER false-reaped. RESIDUAL (doyle Q2 accepted): a TRULY IDLE severed controller (writer parked on recv, no output, conn not yet EOF'd) stays is_finished()==false and converges only on output-resume / conn-EOF — that harder active-probe case is the RESERVED REQ-HAZARD-DRIVEN-BY-IDLE-REMOTE-EVICT (SessionInfo.controller_by doc), deliberately NOT built here so the reserved seed keeps its scope. Red-first: a dead-writer sink → reap clears it (controller_by honest None → converge clears the stamp); a live-writer sink → UNTOUCHED (no-false-reap control).", "requiredStages": [ "impl", "unit", "int" ], "stages": { "doc": { "complete": false, "evidence": [] }, "impl": { "complete": true, "evidence": [ { "path": "crates/spt-daemon/src/broker.rs", "line": 966 } ] }, "int": { "complete": true, "evidence": [ { "path": "crates/spt-daemon/tests/twohost.rs", "line": 941 } ] }, "unit": { "complete": true, "evidence": [ { "path": "crates/spt-daemon/src/broker.rs", "line": 5356 }, { "path": "crates/spt-daemon/src/broker.rs", "line": 5400 } ] } } }, { "id": "REQ-CONV-1", "title": "Peer address seeding, both cold starts: durable peer-addrs.json (identity dir) maps peer pubkey → last-known dialable address; the pump's resolver consults it FIRST with id-only discovery fallback on miss or dial failure (a stale addr never strands a peer); written by the pairing ceremony (both sides, from the live connection) and by the pump on successful connect; post-join first sync and post-restart resync converge in seconds, not ~1 min (M8 decisions 14, 20)", "requiredStages": [ "impl", "unit" ], "stages": { "doc": { "complete": false, "evidence": [] }, "impl": { "complete": true, "evidence": [ { "path": "crates/spt-daemon/src/nethost.rs", "line": 967 }, { "path": "crates/spt-daemon/src/pairhost.rs", "line": 94 }, { "path": "crates/spt-daemon/src/pairhost.rs", "line": 345 }, { "path": "crates/spt-daemon/src/pairhost.rs", "line": 387 }, { "path": "crates/spt-daemon/src/pairhost.rs", "line": 627 }, { "path": "crates/spt-daemon/src/pump/mod.rs", "line": 670 }, { "path": "crates/spt-daemon/src/pump/mod.rs", "line": 696 }, { "path": "crates/spt-net/src/net/endpoint.rs", "line": 552 }, { "path": "crates/spt-store/src/peeraddrs.rs", "line": 19 } ] }, "int": { "complete": false, "evidence": [] }, "unit": { "complete": true, "evidence": [ { "path": "crates/spt-daemon/src/pump/mod.rs", "line": 1271 }, { "path": "crates/spt-store/src/peeraddrs.rs", "line": 108 }, { "path": "crates/spt-store/src/peeraddrs.rs", "line": 134 }, { "path": "crates/spt-store/src/peeraddrs.rs", "line": 144 } ] } } }, { "id": "REQ-CONV-2", "title": "Event-driven advertisement: endpoint online/offline transitions (ready-listener start/stop, rest-state transition, perch death) trigger an immediate advertise_local + peer push as a WAKE of the existing pump loop (no second advertisement path — epoch lease + visibility gates ride unchanged); the cadence stays the steady-state floor (M8 decision 15)", "requiredStages": [ "impl", "unit" ], "stages": { "doc": { "complete": false, "evidence": [] }, "impl": { "complete": true, "evidence": [ { "path": "crates/spt-daemon/src/lifecycle.rs", "line": 812 }, { "path": "crates/spt-daemon/src/pump/registry.rs", "line": 119 }, { "path": "crates/spt-daemon/src/registryhost.rs", "line": 1024 }, { "path": "crates/spt-daemon/src/registryhost.rs", "line": 1035 }, { "path": "crates/spt-daemon/src/resting.rs", "line": 393 }, { "path": "crates/spt/src/cli.rs", "line": 5908 }, { "path": "crates/spt/src/cli.rs", "line": 5924 }, { "path": "crates/spt/src/cli.rs", "line": 5991 } ] }, "int": { "complete": false, "evidence": [] }, "unit": { "complete": true, "evidence": [ { "path": "crates/spt-daemon/src/pump/mod.rs", "line": 897 }, { "path": "crates/spt-daemon/src/pump/mod.rs", "line": 1022 }, { "path": "crates/spt-daemon/src/pump/registry.rs", "line": 224 } ] } } }, { "id": "REQ-CRC-SWAP-OLD-DISPLACE", "title": "C1 (F028, infra; memory crc-swap-old-litter-brick, RCA'd ENLYZEAM + confirmed systemic): crc_swap `.old`-litter bricks every subsequent adapter update. apply_crc_swap Phase-3 `let _ = remove_file(.old)` (spt-daemon/src/crc_swap.rs:129-133) silently fails whenever ANY pre-update process still image-maps the old binary (NORMAL on a live box — endpoint launch children survive updates). The NEXT update's first commit-op rename(exe->exe.old) = MoveFileExW(REPLACE_EXISTING) must delete the mapped .old -> win32 err 5 -> whole apply fails + rolls back FOREVER, context-free. FIX: (i) DISPLACE not replace — when .old exists, rename it aside to a unique suffix (rename succeeds on mapped files; spt's own updater already does spt.exe.old-); GC stale .old.* opportunistically. (ii) Wrap swap io errors with op + path (`rename claude-spt.exe -> claude-spt.exe.old: …`). Unit seam exists (crc_swap tests). See triage C1.", "requiredStages": [ "impl", "unit" ], "stages": { "doc": { "complete": false, "evidence": [] }, "impl": { "complete": true, "evidence": [ { "path": "crates/spt-daemon/src/crc_swap.rs", "line": 107 }, { "path": "crates/spt-daemon/src/crc_swap.rs", "line": 117 }, { "path": "crates/spt-daemon/src/crc_swap.rs", "line": 131 }, { "path": "crates/spt-daemon/src/crc_swap.rs", "line": 200 }, { "path": "crates/spt-daemon/src/crc_swap.rs", "line": 219 }, { "path": "crates/spt-daemon/src/crc_swap.rs", "line": 248 } ] }, "int": { "complete": false, "evidence": [] }, "unit": { "complete": true, "evidence": [ { "path": "crates/spt-daemon/src/crc_swap.rs", "line": 432 }, { "path": "crates/spt-daemon/src/crc_swap.rs", "line": 539 }, { "path": "crates/spt-daemon/src/crc_swap.rs", "line": 589 }, { "path": "crates/spt-daemon/src/crc_swap.rs", "line": 638 }, { "path": "crates/spt-daemon/src/crc_swap.rs", "line": 669 } ] } } }, { "id": "REQ-DAEMON-1", "title": "One per-machine spt-daemon owning all per-machine state", "requiredStages": [ "impl", "unit", "int" ], "stages": { "doc": { "complete": false, "evidence": [] }, "impl": { "complete": true, "evidence": [ { "path": "crates/spt-daemon/src/brainproc.rs", "line": 235 }, { "path": "crates/spt-daemon/src/config.rs", "line": 12 }, { "path": "crates/spt-daemon/src/lifecycle.rs", "line": 18 }, { "path": "crates/spt-daemon/src/lifecycle.rs", "line": 691 }, { "path": "crates/spt-daemon/src/livehost.rs", "line": 24 }, { "path": "crates/spt-daemon/src/livehost.rs", "line": 144 }, { "path": "crates/spt-daemon/src/livehost.rs", "line": 161 }, { "path": "crates/spt-daemon/src/livehost.rs", "line": 616 }, { "path": "crates/spt-daemon/src/livehost.rs", "line": 977 }, { "path": "crates/spt-daemon/src/relay.rs", "line": 15 }, { "path": "crates/spt-store/src/info.rs", "line": 326 }, { "path": "crates/spt/src/api/live.rs", "line": 13 }, { "path": "crates/spt/src/api/startup.rs", "line": 485 }, { "path": "crates/spt/src/api/startup.rs", "line": 604 } ] }, "int": { "complete": true, "evidence": [ { "path": "crates/spt-daemon/tests/daemon_lifecycle_real_brain.rs", "line": 2 }, { "path": "crates/spt-daemon/tests/daemon_lifecycle_real_brain.rs", "line": 21 }, { "path": "crates/spt/tests/live_bind_firsthost_e2e.rs", "line": 12 }, { "path": "crates/spt/tests/live_firsthost_e2e.rs", "line": 12 } ] }, "unit": { "complete": true, "evidence": [ { "path": "crates/spt-daemon/src/config.rs", "line": 297 }, { "path": "crates/spt-daemon/src/config.rs", "line": 305 }, { "path": "crates/spt-daemon/src/config.rs", "line": 321 }, { "path": "crates/spt-daemon/src/config.rs", "line": 329 }, { "path": "crates/spt-daemon/src/lifecycle.rs", "line": 1540 }, { "path": "crates/spt-daemon/src/lifecycle.rs", "line": 2266 }, { "path": "crates/spt-daemon/src/livehost.rs", "line": 1538 }, { "path": "crates/spt-daemon/src/livehost.rs", "line": 1575 }, { "path": "crates/spt-daemon/src/livehost.rs", "line": 1598 }, { "path": "crates/spt-daemon/src/livehost.rs", "line": 1627 }, { "path": "crates/spt-daemon/src/livehost.rs", "line": 1675 }, { "path": "crates/spt-daemon/src/livehost.rs", "line": 1718 }, { "path": "crates/spt-daemon/src/relay.rs", "line": 109 }, { "path": "crates/spt-daemon/src/relay.rs", "line": 135 }, { "path": "crates/spt-store/src/info.rs", "line": 778 } ] } } }, { "id": "REQ-DAEMON-2", "title": "Broker/brain split for seamless self-update", "requiredStages": [ "impl", "unit", "int" ], "stages": { "doc": { "complete": true, "evidence": [ { "path": "docs/TWO-HOST-RUNBOOK.md", "line": 375 } ] }, "impl": { "complete": true, "evidence": [ { "path": "crates/spt-daemon/src/brain.rs", "line": 23 }, { "path": "crates/spt-daemon/src/brain.rs", "line": 984 }, { "path": "crates/spt-daemon/src/brain.rs", "line": 1025 }, { "path": "crates/spt-daemon/src/brain.rs", "line": 1411 }, { "path": "crates/spt-daemon/src/broker.rs", "line": 32 }, { "path": "crates/spt-daemon/src/broker.rs", "line": 2531 }, { "path": "crates/spt-daemon/src/broker.rs", "line": 3565 }, { "path": "crates/spt-daemon/src/broker.rs", "line": 4018 }, { "path": "crates/spt-daemon/src/codec.rs", "line": 11 }, { "path": "crates/spt-daemon/src/daemon.rs", "line": 156 }, { "path": "crates/spt-daemon/src/daemon.rs", "line": 350 }, { "path": "crates/spt-daemon/src/msg.rs", "line": 13 }, { "path": "crates/spt-daemon/src/nethost.rs", "line": 27 }, { "path": "crates/spt-daemon/src/nethost.rs", "line": 148 }, { "path": "crates/spt-daemon/src/nethost.rs", "line": 644 }, { "path": "crates/spt-daemon/src/nethost.rs", "line": 881 }, { "path": "crates/spt-daemon/src/nethost.rs", "line": 1029 }, { "path": "crates/spt-daemon/src/nethost.rs", "line": 1134 }, { "path": "crates/spt-daemon/src/nethost.rs", "line": 1256 }, { "path": "crates/spt-daemon/src/transport.rs", "line": 10 } ] }, "int": { "complete": true, "evidence": [ { "path": "crates/spt-daemon/tests/broker.rs", "line": 17 }, { "path": "crates/spt-daemon/tests/netbroker.rs", "line": 91 }, { "path": "crates/spt-daemon/tests/netbroker.rs", "line": 111 }, { "path": "crates/spt-daemon/tests/netbroker.rs", "line": 191 }, { "path": "crates/spt-daemon/tests/netbroker.rs", "line": 318 }, { "path": "crates/spt-daemon/tests/netstream.rs", "line": 139 }, { "path": "crates/spt/tests/brain_survive.rs", "line": 59 } ] }, "unit": { "complete": true, "evidence": [ { "path": "crates/spt-daemon/src/codec.rs", "line": 62 }, { "path": "crates/spt-daemon/src/codec.rs", "line": 76 }, { "path": "crates/spt-daemon/src/codec.rs", "line": 88 }, { "path": "crates/spt-daemon/src/effect.rs", "line": 617 }, { "path": "crates/spt-daemon/src/msg.rs", "line": 1082 }, { "path": "crates/spt-daemon/src/msg.rs", "line": 1129 }, { "path": "crates/spt-daemon/src/msg.rs", "line": 1146 }, { "path": "crates/spt-daemon/src/msg.rs", "line": 1256 }, { "path": "crates/spt-daemon/src/nethost.rs", "line": 1327 }, { "path": "crates/spt-daemon/src/nethost.rs", "line": 1395 }, { "path": "crates/spt-daemon/src/transport.rs", "line": 110 }, { "path": "crates/spt-daemon/tests/resume.rs", "line": 147 } ] } } }, { "id": "REQ-DAEMON-3", "title": "Any api invocation auto-starts the daemon if absent", "requiredStages": [ "impl", "unit", "int" ], "stages": { "doc": { "complete": false, "evidence": [] }, "impl": { "complete": true, "evidence": [ { "path": "crates/spt-daemon/src/daemon.rs", "line": 14 }, { "path": "crates/spt-daemon/src/endpoint.rs", "line": 11 }, { "path": "crates/spt/src/api/mod.rs", "line": 331 }, { "path": "crates/spt/src/cli.rs", "line": 3726 }, { "path": "crates/spt/src/cli.rs", "line": 7123 }, { "path": "crates/spt/src/cli.rs", "line": 7144 } ] }, "int": { "complete": true, "evidence": [ { "path": "crates/spt/tests/contract_e2e.rs", "line": 49 }, { "path": "crates/spt/tests/contract_e2e.rs", "line": 477 } ] }, "unit": { "complete": true, "evidence": [ { "path": "crates/spt-daemon/src/daemon.rs", "line": 1642 }, { "path": "crates/spt/src/cli.rs", "line": 16602 } ] } } }, { "id": "REQ-DAEMON-4", "title": "Honor every KNOWN-HAZARDS invariant", "requiredStages": [ "impl", "unit", "int" ], "stages": { "doc": { "complete": false, "evidence": [] }, "impl": { "complete": true, "evidence": [ { "path": "crates/spt-daemon/src/lifecycle.rs", "line": 1233 }, { "path": "crates/spt-daemon/src/lifecycle.rs", "line": 1298 }, { "path": "crates/spt-daemon/src/lifecycle.rs", "line": 1320 } ] }, "int": { "complete": true, "evidence": [ { "path": "crates/spt-daemon/tests/daemon_e2e.rs", "line": 42 } ] }, "unit": { "complete": true, "evidence": [ { "path": "crates/spt-daemon/src/config.rs", "line": 441 }, { "path": "crates/spt-daemon/src/lifecycle.rs", "line": 2494 }, { "path": "crates/spt-daemon/src/lifecycle.rs", "line": 2564 }, { "path": "crates/spt-daemon/src/lifecycle.rs", "line": 2594 }, { "path": "crates/spt-daemon/src/lifecycle.rs", "line": 2627 } ] } } }, { "id": "REQ-DAEMON-5", "title": "Pump liveness: the peer pump writes a last-tick heartbeat consumed by daemon status / subnet status (decision 23 render legs in REQ-CLI-2/REQ-SUBNET-8); the daemon supervises the pump task — a panic is caught, logged loudly, and the pump restarts with capped backoff (≤5 min), so a 5.9-class death self-heals visibly instead of silently halving the daemon (M8 decision 23; field motivation: hfenduleam 2026-06-07 half-death)", "requiredStages": [ "impl", "unit" ], "stages": { "doc": { "complete": false, "evidence": [] }, "impl": { "complete": true, "evidence": [ { "path": "crates/spt-daemon/src/pump/mod.rs", "line": 479 }, { "path": "crates/spt-daemon/src/pump/mod.rs", "line": 777 }, { "path": "crates/spt-daemon/src/pump/mod.rs", "line": 790 }, { "path": "crates/spt-daemon/src/pump/mod.rs", "line": 808 }, { "path": "crates/spt-daemon/src/pump/mod.rs", "line": 849 } ] }, "int": { "complete": false, "evidence": [] }, "unit": { "complete": true, "evidence": [ { "path": "crates/spt-daemon/src/pump/mod.rs", "line": 1197 }, { "path": "crates/spt-daemon/src/pump/mod.rs", "line": 1221 }, { "path": "crates/spt-daemon/src/pump/mod.rs", "line": 1247 } ] } } }, { "id": "REQ-DAEMON-6", "title": "Service-aware `daemon start`/`stop`: when an OS service manager has a registered spt-daemon for this user, `spt daemon start` and `spt daemon stop` drive THAT service (so stop doesn't IPC-kill a unit that auto-restart-fights for the broker socket — the kitsubito 2026-06-08 loop). `start` graduates from a `run` alias to a first-class background verb (ensure-up, idempotent, non-blocking); stop routes managed→manager, manual→IPC. Linux=systemd user unit (`systemctl --user start|stop|is-active spt-daemon`, detected by unit-file presence); Windows=no controllable manager (the logon task is boot-only), so start=detached spawn / stop=IPC.", "requiredStages": [ "impl", "unit" ], "stages": { "doc": { "complete": false, "evidence": [] }, "impl": { "complete": true, "evidence": [ { "path": "crates/spt-daemon/src/daemon.rs", "line": 502 }, { "path": "crates/spt-daemon/src/daemon.rs", "line": 533 }, { "path": "crates/spt-daemon/src/service.rs", "line": 55 }, { "path": "crates/spt-daemon/src/service.rs", "line": 70 }, { "path": "crates/spt/src/cli.rs", "line": 3806 }, { "path": "crates/spt/src/cli.rs", "line": 3873 } ] }, "int": { "complete": false, "evidence": [] }, "unit": { "complete": true, "evidence": [ { "path": "crates/spt-daemon/src/service.rs", "line": 363 }, { "path": "crates/spt-daemon/src/service.rs", "line": 374 }, { "path": "crates/spt-daemon/src/service.rs", "line": 400 }, { "path": "crates/spt-daemon/src/service.rs", "line": 426 } ] } } }, { "id": "REQ-DAEMON-7", "title": "`daemon run` is foreground-consistent on every platform: the invoking process IS the daemon, blocks until signalled, never auto-detaches or respawns into an invisible background task. The detached/de-elevated background behavior lives ONLY in `start`. Windows: an ELEVATED `daemon run` refuses with guidance (use `start`, or an unelevated shell) instead of respawning detached/de-elevated and vanishing (KH 5.7 preserved — it still never serves elevated).", "requiredStages": [ "impl", "unit" ], "stages": { "doc": { "complete": false, "evidence": [] }, "impl": { "complete": true, "evidence": [ { "path": "crates/spt-daemon/src/daemon.rs", "line": 552 }, { "path": "crates/spt-daemon/src/deelevate.rs", "line": 610 }, { "path": "crates/spt-daemon/src/service.rs", "line": 89 }, { "path": "crates/spt/src/cli.rs", "line": 3727 } ] }, "int": { "complete": false, "evidence": [] }, "unit": { "complete": true, "evidence": [ { "path": "crates/spt-daemon/src/service.rs", "line": 389 }, { "path": "crates/spt/src/cli.rs", "line": 13349 } ] } } }, { "id": "REQ-DAEMON-8", "title": "Internal auto-start prefers the service: `ensure_running` (any spt command's implicit daemon start, REQ-DAEMON-3) routes through the service-aware start path — when a manager has a registered service it starts THAT, never a competing manual `spawn_detached` daemon that would fight the service for the socket.", "requiredStages": [ "impl", "unit" ], "stages": { "doc": { "complete": false, "evidence": [] }, "impl": { "complete": true, "evidence": [ { "path": "crates/spt-daemon/src/daemon.rs", "line": 452 }, { "path": "crates/spt-daemon/src/service.rs", "line": 56 } ] }, "int": { "complete": false, "evidence": [] }, "unit": { "complete": true, "evidence": [ { "path": "crates/spt-daemon/src/service.rs", "line": 363 }, { "path": "crates/spt-daemon/src/service.rs", "line": 400 } ] } } }, { "id": "REQ-DAEMON-9", "title": "Net-bind boot-race resilience: a daemon that comes up net-less (NetHost::start failed — e.g. the systemd unit autostarted before the network/DNS stack was ready, `Failed to create an address lookup service`) must SELF-HEAL — retry the net bring-up in the background with capped backoff and, on success, attach net to the broker + spawn the dispatcher/peer-pump (which today are gated on `net_up` at boot and so never start, leaving the node silently unreachable until a manual restart — kitsubito 2026-06-08). Status surfaces the net-less state honestly (a net-less broker renders as 'no connection', not only a pump-STALLED line with a bogus pre-boot heartbeat age). The installer's autostart unit waits for the network (`Wants=/After=network-online.target`) as belt-and-suspenders.", "requiredStages": [ "impl", "unit" ], "stages": { "doc": { "complete": false, "evidence": [] }, "impl": { "complete": true, "evidence": [ { "path": "crates/spt-daemon/src/brainproc.rs", "line": 282 }, { "path": "crates/spt-daemon/src/broker.rs", "line": 2586 }, { "path": "crates/spt-daemon/src/daemon.rs", "line": 200 }, { "path": "crates/spt-daemon/src/daemon.rs", "line": 351 }, { "path": "crates/spt-daemon/src/daemon.rs", "line": 388 }, { "path": "crates/spt/src/cli.rs", "line": 3910 } ] }, "int": { "complete": false, "evidence": [] }, "unit": { "complete": true, "evidence": [ { "path": "crates/spt-daemon/src/daemon.rs", "line": 1247 }, { "path": "crates/spt/src/cli.rs", "line": 16467 } ] } } }, { "id": "REQ-DAEMON-STATUS-JSON-TRUTH", "title": "D2 (F028, perri F-d): `daemon status --json` truth drift. managed_by/managed_active read null in JSON while the HUMAN view says 'managed-by: manual — at-logon task registered' (the two surfaces disagree); and pump staleness (the STALLED diagnosis, B5) is NOT computable from JSON — only a raw pump_heartbeat_ms is emitted, no derived staleness/stalled field. FIX: JSON managed_by/active match the human render, and add a derived pump-staleness/stalled field so B5's condition is machine-observable. See triage D2.", "requiredStages": [], "stages": { "doc": { "complete": false, "evidence": [] }, "impl": { "complete": false, "evidence": [] }, "int": { "complete": false, "evidence": [] }, "unit": { "complete": false, "evidence": [] } } }, { "id": "REQ-DAEMON-STDERR-PERSIST", "title": "W3 (LIFECYCLE-TRUTH, observability): broker + brain stderr tee to a rotating size-capped file under SPT_HOME (e.g. 2x5MB), stamped per generation. ROOT: detached daemon nulls stdio -> the 2026-07-06/07 incident window left ZERO logs (both RCAs ran blind; rigs had to recreate everything). KNOWN-HAZARDS note: never inherit handles (REQ-HAZARD-DETACHED-DAEMON-STDIO) — open the file in-process, don't pipe.", "requiredStages": [ "impl", "unit" ], "stages": { "doc": { "complete": false, "evidence": [] }, "impl": { "complete": true, "evidence": [ { "path": "crates/spt-daemon/src/brainproc.rs", "line": 164 }, { "path": "crates/spt-daemon/src/stderrlog.rs", "line": 23 }, { "path": "crates/spt-daemon/src/stderrlog.rs", "line": 55 }, { "path": "crates/spt-daemon/src/stderrlog.rs", "line": 65 }, { "path": "crates/spt-daemon/src/stderrlog.rs", "line": 135 }, { "path": "crates/spt/src/cli.rs", "line": 3744 } ] }, "int": { "complete": false, "evidence": [] }, "unit": { "complete": true, "evidence": [ { "path": "crates/spt-daemon/src/stderrlog.rs", "line": 167 }, { "path": "crates/spt-daemon/src/stderrlog.rs", "line": 178 }, { "path": "crates/spt-daemon/src/stderrlog.rs", "line": 203 }, { "path": "crates/spt-daemon/src/stderrlog.rs", "line": 216 } ] } } }, { "id": "REQ-DAEMON-STOP-LIVE-SESSION-WARN", "title": "W3 (LIFECYCLE-TRUTH, promoted old follow-wave seed): `daemon stop` with live hosted sessions warns + requires --force (or names the sessions it will kill) instead of silently killing them.", "requiredStages": [ "impl", "unit" ], "stages": { "doc": { "complete": false, "evidence": [] }, "impl": { "complete": true, "evidence": [ { "path": "crates/spt/src/cli.rs", "line": 3836 }, { "path": "crates/spt/src/cli.rs", "line": 3853 }, { "path": "crates/spt/src/cli.rs", "line": 3875 } ] }, "int": { "complete": true, "evidence": [ { "path": "crates/spt/tests/attach_wedge_e2e.rs", "line": 263 } ] }, "unit": { "complete": true, "evidence": [ { "path": "crates/spt/src/cli.rs", "line": 16445 } ] } } }, { "id": "REQ-DIGEST-CURSOR", "title": "`spt endpoint digest` gains incremental turn-end consumption (extends REQ-TERM-4/5): `--last ` = the last N TURNS (the digest's natural unit; --last 1 = the latest turn = turn-end output); a per-entry STABLE SOURCE-DERIVED `seq` in the --json output (deterministic from the entry's append position in the source — transcript record index across the session ledger / digest.log index — so a live re-projection yields the same seq for the same committed entry; NOT a window-position index that renumbers on slide); `--after ` = entries newer than seq still in the window (full window + signal if seq predates it, mirroring the version-slide full-refresh). An in-flight (still-growing) entry is flagged `partial: true` with NO stable seq until finalized (consumer reprocesses partial, skips <= seq). Also emit per-entry `ts` where present (seq is the authoritative dedup+cursor key). The digest's agent text is sufficient fidelity (no raw-source mode). BINDING doc-guidance: an adapter's [digest] extractor / api digest-entry MUST classify delivered user-facing messages as turn-opening `input` (equiv to direct PTY user-input), else messaging-driven sessions collapse into a few giant turns and --last/seq lose granularity. (v0.16.0)", "requiredStages": [ "doc", "impl", "unit" ], "stages": { "doc": { "complete": true, "evidence": [ { "path": "docs/MANIFEST.md", "line": 420 }, { "path": "docs/MANIFEST.md", "line": 437 } ] }, "impl": { "complete": true, "evidence": [ { "path": "crates/spt-daemon/src/digest.rs", "line": 225 }, { "path": "crates/spt-daemon/src/digest.rs", "line": 291 }, { "path": "crates/spt-daemon/src/digest.rs", "line": 433 }, { "path": "crates/spt-store/src/sessions.rs", "line": 82 }, { "path": "crates/spt-store/src/sessions.rs", "line": 124 }, { "path": "crates/spt-term/src/digest.rs", "line": 68 }, { "path": "crates/spt-term/src/digest.rs", "line": 81 }, { "path": "crates/spt-term/src/digest.rs", "line": 119 }, { "path": "crates/spt-term/src/digest.rs", "line": 129 }, { "path": "crates/spt-term/src/digest.rs", "line": 154 }, { "path": "crates/spt-term/src/projection.rs", "line": 213 }, { "path": "crates/spt-term/src/projection.rs", "line": 347 }, { "path": "crates/spt-term/src/projection.rs", "line": 355 }, { "path": "crates/spt-term/src/projection.rs", "line": 372 }, { "path": "crates/spt-term/src/projection.rs", "line": 423 }, { "path": "crates/spt/src/cli.rs", "line": 434 }, { "path": "crates/spt/src/cli.rs", "line": 440 }, { "path": "crates/spt/src/cli.rs", "line": 1459 }, { "path": "crates/spt/src/cli.rs", "line": 1493 }, { "path": "crates/spt/src/cli.rs", "line": 1503 }, { "path": "crates/spt/src/cli.rs", "line": 1543 }, { "path": "crates/spt/src/cli.rs", "line": 1606 } ] }, "int": { "complete": false, "evidence": [] }, "unit": { "complete": true, "evidence": [ { "path": "crates/spt-store/src/sessions.rs", "line": 391 }, { "path": "crates/spt-store/src/sessions.rs", "line": 405 }, { "path": "crates/spt-store/src/sessions.rs", "line": 433 }, { "path": "crates/spt-term/src/projection.rs", "line": 889 }, { "path": "crates/spt-term/src/projection.rs", "line": 940 }, { "path": "crates/spt-term/src/projection.rs", "line": 954 }, { "path": "crates/spt-term/src/projection.rs", "line": 990 }, { "path": "crates/spt/src/cli.rs", "line": 15233 }, { "path": "crates/spt/src/cli.rs", "line": 15252 }, { "path": "crates/spt/src/cli.rs", "line": 15289 } ] } } }, { "id": "REQ-DIGEST-FETCHER-STRATEGY", "title": "Bug #17 (W6b, closes eel-a end-to-end): [digest] gains a `fetcher` strategy mirroring [history]'s locate/normalize split (CONTEXT §history: [digest] mirrors history's two strategies — locate ownership). ROOT: the pre-W6b [digest] had only the locate_normalize analog (spt-core resolves ONE `source` template + pre-reads the file), which CANNOT express a PARTITIONED transcript layout — CC's projects//.jsonl or a date-globbed rollout tree — the exact case CONTEXT already assigns to the adapter. spt-core (correctly) provides NO {project}/slug key (harness-specific cwd munging = the charter violation FIX-A was rejected for). Fix: strategy = fetcher makes the ADAPTER's extractor locate + read + emit normalized records; spt-core runs it bounded (no locate, no pre-read, no stdin) and consumes stdout, feeding only the harness-NEUTRAL inputs it owns — {session_id}, the perch-bound {cwd} (info.json.cwd), and the captured [env] direction=read vars (W6/REQ-DIGEST-PROFILE-ENV) — so the extractor globs the unique {session_id} under {read-var-root}/projects/ with no slug. Keeps locate_normalize (default, back-compat) for a trivial single-file harness. Distinct capability from REQ-DIGEST-PROFILE-ENV (which supplies the root env). See docs/process/NEXT-MILESTONE-BUG-TRIAGE.md #17.", "requiredStages": [ "doc", "impl", "unit", "int" ], "stages": { "doc": { "complete": true, "evidence": [ { "path": "docs-site/src/harness-contract/manifest.md", "line": 268 }, { "path": "docs/MANIFEST.md", "line": 270 } ] }, "impl": { "complete": true, "evidence": [ { "path": "crates/spt-daemon/src/digest.rs", "line": 274 }, { "path": "crates/spt-live/src/digest.rs", "line": 103 }, { "path": "crates/spt/src/cli.rs", "line": 9891 } ] }, "int": { "complete": true, "evidence": [ { "path": "crates/spt-live/src/digest.rs", "line": 242 } ] }, "unit": { "complete": true, "evidence": [ { "path": "crates/spt-runtime/src/manifest.rs", "line": 1955 } ] } } }, { "id": "REQ-DIGEST-GENERATION-SUPERSEDE", "title": "W3 (LIFECYCLE-TRUTH, digest projection truth — flynn filing spt-mobile d0aa3f4): a one-shot `endpoint digest --json` snapshot must return each logical activity row ONCE across a checkpoint/resume, not once per seq-generation. ROOT (spt-core-side, not a consumer bug): the K-session span (digest.rs activity_spanned, SPAN_SESSIONS=5) runs the [digest] extractor per session file and tags each row seq=(ledger_ordinal<<32)|localseq (REQ-DIGEST-CURSOR). A checkpoint/resume (self-/clear + Psyche rebuild) makes the harness REPLAY the prior generation's transcript into the NEW session file, so the ancestor's rows appear in BOTH the ancestor file AND the resume file at the SAME localseq — the span UNIONS them, one logical row surfacing under two full seqs (gen23,local208) + (gen25,local208), identical text/ts/localseq. Consumers dedup by exact seq (the documented authoritative key) so nothing collapses -> duplicate rows in every snapshot / `--after` view (`--follow from:0` is CLEAN — it reads current-generation only; the SPAN is the sole culprit). The trigger cannot disambiguate: `api boundary clear` records SessionTrigger::Clear for BOTH a fresh /clear (disjoint) and a carry-forward checkpoint (reporting.rs:94) — so a structural skip-ancestor needs new boundary metadata + adapter cooperation, deferred. FIX (doyle ruling — flynn Option 1 Supersede, projection-local, source-independent): within the span, collapse cross-generation replay dupes — an Activity record from an OLDER ordinal is dropped when an identical logical record (role, ts, text, tool) exists under a NEWER ordinal; keep the NEWEST-ordinal occurrence so the surviving seq is the live generation (snapshot + follow agree on seq). Cross-generation ONLY (never dedup within one ordinal — a session cannot replay itself; identical within-gen rows are real). Supersede runs on the raw span items BEFORE the window fold (project_timeline) so window_turns counts real turns, not phantoms; and a boundary divider adjacent to a now-fully-superseded ancestor is not left orphaned. Context entries (REQ-TERM-7, single digest.log) are not per-session-spanned -> untouched. Int = a two-session span rig where session B's extracted lines are a superset replay of A (same ts/text at same localseq) + B's own new tail: RED-first (pre-fix shows every A row twice); post-fix each logical row appears ONCE under B's generation, B's tail intact, the /clear boundary marker preserved when A retains rows.", "requiredStages": [ "impl", "unit", "int" ], "stages": { "doc": { "complete": false, "evidence": [] }, "impl": { "complete": true, "evidence": [ { "path": "crates/spt-daemon/src/digest.rs", "line": 191 }, { "path": "crates/spt-daemon/src/digest.rs", "line": 325 }, { "path": "crates/spt-daemon/src/digest.rs", "line": 351 } ] }, "int": { "complete": true, "evidence": [ { "path": "crates/spt-daemon/tests/two_origin_spanning.rs", "line": 190 } ] }, "unit": { "complete": true, "evidence": [ { "path": "crates/spt-daemon/src/digest.rs", "line": 682 }, { "path": "crates/spt-daemon/src/digest.rs", "line": 714 }, { "path": "crates/spt-daemon/src/digest.rs", "line": 727 }, { "path": "crates/spt-daemon/src/digest.rs", "line": 746 } ] } } }, { "id": "REQ-DIGEST-PROFILE-ENV", "title": "Bug #17: spt endpoint digest returns NO_DIGEST for a ccs-profile endpoint (claude-spt:ccs) though [digest] is wired and the transcript exists — under .ccs (CLAUDE_CONFIG_DIR relocation) not .claude. The on-demand digest runs the extractor in the daemon context WITHOUT the endpoint profile transcript-location env, so the env-aware resolver cannot find the relocated transcript. Fix: propagate/persist the endpoint profile transcript-location env (e.g. the ccs CLAUDE_CONFIG_DIR) to the on-demand digest extractor so a profile-relocated transcript resolves; confirm the exact extractor verdict via spt adapter digest-proof. Ownership spt-core (digest env/profile propagation), possibly with a claude-spt extractor-resolver assist. See docs/process/NEXT-MILESTONE-BUG-TRIAGE.md #17.", "requiredStages": [ "doc", "impl", "unit" ], "stages": { "doc": { "complete": true, "evidence": [ { "path": "docs/MANIFEST.md", "line": 209 }, { "path": "docs/MANIFEST.md", "line": 295 } ] }, "impl": { "complete": true, "evidence": [ { "path": "crates/spt-daemon/src/digest.rs", "line": 264 }, { "path": "crates/spt-runtime/src/runtime.rs", "line": 318 }, { "path": "crates/spt-runtime/src/runtime.rs", "line": 342 }, { "path": "crates/spt-runtime/src/runtime.rs", "line": 369 }, { "path": "crates/spt/src/api/startup.rs", "line": 290 }, { "path": "crates/spt/src/cli.rs", "line": 9882 } ] }, "int": { "complete": false, "evidence": [] }, "unit": { "complete": true, "evidence": [ { "path": "crates/spt-runtime/src/runtime.rs", "line": 1027 }, { "path": "crates/spt-runtime/src/runtime.rs", "line": 1058 }, { "path": "crates/spt-runtime/src/runtime.rs", "line": 1215 }, { "path": "crates/spt-store/src/info.rs", "line": 689 } ] } } }, { "id": "REQ-DOC-DELIVERY-VOCAB", "title": "W6 (LIFECYCLE-TRUTH, docs — remaining flynn/perri gaps folded): publish the full send-outcome vocabulary (SENT / SENT(WAN) / QUEUED window semantics / DEFERRED / NO_PERCH), digest --json row schema, api poll auth + MAC-stamp prefix, remaining --json shapes checklist (seed #3). Public docs use VERSION numbers, never wave codes; docs-publish drift gate applies.", "requiredStages": [ "doc" ], "stages": { "doc": { "complete": true, "evidence": [ { "path": "docs-site/src/messaging/overview.md", "line": 55 }, { "path": "docs-site/src/reference/json-shapes.md", "line": 3 } ] }, "impl": { "complete": false, "evidence": [] }, "int": { "complete": false, "evidence": [] }, "unit": { "complete": false, "evidence": [] } } }, { "id": "REQ-DOC-ECHO-COMMUNE-CONTRACT", "title": "W6 (LIFECYCLE-TRUTH, docs — this gap cost a full outage night, priority slot): publish the [session.echo_commune] I/O contract on the docs-site: key catalog core fills; core does NOT stdin-feed [history] (field-proven); self-locate guidance incl. CLAUDE_CONFIG_DIR / read_env; drop-file protocol (single-writer, ingest-deletes, resolver semantics from W1); stdout ingestion expectations. Public docs use VERSION numbers, never wave codes; docs-publish drift gate applies.", "requiredStages": [ "doc" ], "stages": { "doc": { "complete": true, "evidence": [ { "path": "docs-site/src/harness-contract/echo-commune.md", "line": 20 } ] }, "impl": { "complete": false, "evidence": [] }, "int": { "complete": false, "evidence": [] }, "unit": { "complete": false, "evidence": [] } } }, { "id": "REQ-DOC-ENDPOINT-DROP-RESOLUTION", "title": "D1 (F028, perri F-c; docs/truth): SI-1's resolution rule — a RELATIVE watched drop dir resolves against the ENDPOINT's cwd, never the daemon's (KH 7.28, shipped v0.22.0) — is documented NOWHERE public. Add it to harness-contract/manifest.md + the manifest schema field descriptions so an adapter author knows a relative commune_dir/signoff_dir is endpoint-resolved. docs-drift gate applies. See triage D1.", "requiredStages": [], "stages": { "doc": { "complete": false, "evidence": [] }, "impl": { "complete": false, "evidence": [] }, "int": { "complete": false, "evidence": [] }, "unit": { "complete": false, "evidence": [] } } }, { "id": "REQ-DOCS-1", "title": "Dual-audience docs (human + AI dev-agent), markdown once / two depths", "requiredStages": [ "doc", "impl" ], "stages": { "doc": { "complete": true, "evidence": [ { "path": "docs-site/src/index.md", "line": 50 } ] }, "impl": { "complete": true, "evidence": [ { "path": ".github/workflows/docs-publish.yml", "line": 12 }, { "path": "crates/xtask/src/main.rs", "line": 14 } ] }, "int": { "complete": false, "evidence": [] }, "unit": { "complete": false, "evidence": [] } } }, { "id": "REQ-DOCS-2", "title": "Sub-10-minute runnable killer quickstart per audience", "requiredStages": [ "doc", "int" ], "stages": { "doc": { "complete": true, "evidence": [ { "path": "docs-site/src/harness-contract/integration-checklist.md", "line": 3 }, { "path": "docs-site/src/quickstart/adapter.md", "line": 3 }, { "path": "docs-site/src/quickstart/messaging.md", "line": 3 } ] }, "impl": { "complete": false, "evidence": [] }, "int": { "complete": true, "evidence": [ { "path": "crates/spt/tests/quickstart_e2e.rs", "line": 14 } ] }, "unit": { "complete": false, "evidence": [] } } }, { "id": "REQ-DOCS-3", "title": "Diátaxis structure; one canonical way to do X", "requiredStages": [ "doc" ], "stages": { "doc": { "complete": true, "evidence": [ { "path": "docs-site/src/index.md", "line": 42 } ] }, "impl": { "complete": false, "evidence": [] }, "int": { "complete": false, "evidence": [] }, "unit": { "complete": false, "evidence": [] } } }, { "id": "REQ-DOCS-4", "title": "Agent-consumable layer (llms.txt, manifest schema, MCP, CLI help)", "requiredStages": [ "doc", "impl", "unit" ], "stages": { "doc": { "complete": true, "evidence": [ { "path": "docs/DOCS-STRATEGY.md", "line": 35 } ] }, "impl": { "complete": true, "evidence": [ { "path": "crates/spt-runtime/src/manifest.rs", "line": 905 }, { "path": "crates/xtask/src/main.rs", "line": 15 } ] }, "int": { "complete": false, "evidence": [] }, "unit": { "complete": true, "evidence": [ { "path": "crates/spt-runtime/src/manifest.rs", "line": 2109 } ] } } }, { "id": "REQ-DOCS-5", "title": "Anti-drift: rustdoc/schema/exports/CLI-help generated + CI-checked", "requiredStages": [ "impl", "int" ], "stages": { "doc": { "complete": false, "evidence": [] }, "impl": { "complete": true, "evidence": [ { "path": "crates/spt-runtime/src/manifest.rs", "line": 906 }, { "path": "crates/xtask/src/main.rs", "line": 114 } ] }, "int": { "complete": true, "evidence": [ { "path": ".github/workflows/ci.yml", "line": 198 }, { "path": "crates/spt-runtime/src/manifest.rs", "line": 2146 } ] }, "unit": { "complete": false, "evidence": [] } } }, { "id": "REQ-DOCS-6", "title": "spt how-to : in-binary task-oriented agent instructions (anti-drift; quickstart prompts point agents at it)", "requiredStages": [ "impl", "unit", "int" ], "stages": { "doc": { "complete": true, "evidence": [ { "path": "docs-site/src/quickstart/messaging.md", "line": 4 } ] }, "impl": { "complete": true, "evidence": [ { "path": "crates/spt/src/cli.rs", "line": 8363 } ] }, "int": { "complete": true, "evidence": [ { "path": "crates/spt/tests/quickstart_e2e.rs", "line": 39 } ] }, "unit": { "complete": true, "evidence": [ { "path": "crates/spt/src/cli.rs", "line": 16629 } ] } } }, { "id": "REQ-DOCS-NO-INTERNAL-CODES", "title": "Public CLI --help (the clap `///` doc-comments) and the generated `docs-site/src/cli/reference.md` MUST NOT contain internal tracker/decision codes — `REQ-*`, `F-###`, `M#-W#`, `ADR-####`. They are meaningless to an end user reading --help and ship to GH-Pages. A CI-gated scan (the `xtask check` docs gate) fails on any such token in the GENERATED reference.md (which by construction contains only clap help, so rustdoc `///` on fns/structs is OUT of scope and keeps its REQ/ADR cross-refs). Substance is kept; codes are rewritten to plain language. (v0.13.2 W6)", "requiredStages": [ "doc", "impl", "unit" ], "stages": { "doc": { "complete": true, "evidence": [ { "path": "docs/DOCS-STRATEGY.md", "line": 59 } ] }, "impl": { "complete": true, "evidence": [ { "path": "crates/xtask/src/main.rs", "line": 223 }, { "path": "crates/xtask/src/main.rs", "line": 277 } ] }, "int": { "complete": false, "evidence": [] }, "unit": { "complete": true, "evidence": [ { "path": "crates/xtask/src/main.rs", "line": 1488 }, { "path": "crates/xtask/src/main.rs", "line": 1509 } ] } } }, { "id": "REQ-ECHO-DROP-DIR-RESOLVE", "title": "W1 (LIFECYCLE-TRUTH): fire_echo resolves the manifest commune_dir through the SAME resolver its siblings use before any write. ROOT (pinned): fire_echo (spt-daemon lifecycle.rs:790) passes the RAW manifest commune_dir into run_echo_commune -> echo.rs:115-117 create_dir_all+join; a relative `.claude` under the WMI-launched daemon's System32 cwd = os error 5 deterministic (two live psyches stamped FAILED on it). Siblings already resolve correctly (ingest ~:583, psyche_drop_file :1072 via resolve_endpoint_drop_dir(raw, cwd)). FIX: fire_echo routes through resolve_endpoint_drop_dir; relative-with-no-cwd = SKIP LOUD (stderr), never a raw relative write — kills the latent-worse variant where a writable daemon cwd writes the drop to a WRONG dir silently (echo communes lost, no error). Hardening riders (same touch, no separate REQ): bounded EACCES retry on the drop write; echo claude spawn gets explicit cwd = endpoint cwd (perri ask).", "requiredStages": [ "impl", "unit" ], "stages": { "doc": { "complete": false, "evidence": [] }, "impl": { "complete": true, "evidence": [ { "path": "crates/spt-daemon/src/lifecycle.rs", "line": 268 }, { "path": "crates/spt-daemon/src/lifecycle.rs", "line": 842 }, { "path": "crates/spt-live/src/echo.rs", "line": 96 }, { "path": "crates/spt-live/src/echo.rs", "line": 146 }, { "path": "crates/spt-runtime/src/runtime.rs", "line": 665 }, { "path": "crates/spt-runtime/src/runtime.rs", "line": 725 } ] }, "int": { "complete": false, "evidence": [] }, "unit": { "complete": true, "evidence": [ { "path": "crates/spt-daemon/src/lifecycle.rs", "line": 2064 }, { "path": "crates/spt-daemon/src/lifecycle.rs", "line": 2118 }, { "path": "crates/spt-live/src/echo.rs", "line": 280 }, { "path": "crates/spt-runtime/src/runtime.rs", "line": 1100 } ] } } }, { "id": "REQ-EFFECTIVE-INSTANCE-STATE", "title": "A-1 (REMOTE-TRUTH triage §A + ADR-0033 §Decision): the effective instance state of a perch is DERIVED through ONE shared function — liveness discriminates warm/cold, stored rest intent refines within warm, absent intent NEVER defaults active. ROOT (certain): resting::apply_event derived its `from` off the stored rest_state field ALONE (resting.rs:225, `unwrap_or(RestState::Active)`) — a cold perch (offline) with no intent answered `from=Active`, so a Wake event found it 'already in target state' and returned Ok(None) = the field NO_EDGE-on-a-definitely-suspended-endpoint bug (the banked F-028 rest_state-void seed). advertised_status (registryhost.rs:821) ALREADY derived correctly (is_perch_alive→intent-refined / is_perch_unbound→Dormant / cold→Suspended) — the two readers disagreed. FIX (Q1 shared derivation, hazard-class): a pure `effective_rest_state(alive, unbound, intent) -> RestState` mirroring advertised_status, consumed by BOTH advertised_status (mapped RestState→Status, behavior identical) AND apply_event's `from` (real is_perch_alive/is_perch_unbound reads); void + cold ⇒ Suspended. Bonus: kills the spurious active→suspend echo a cold+void perch used to fire (on_rest_edge on a dead driver). Red-first: perch status=offline + no rest_state → daemon_rest_event(Wake) yields from=Suspended→to=Active EdgeReport, not Ok(None).", "requiredStages": [ "doc", "impl", "unit" ], "stages": { "doc": { "complete": true, "evidence": [ { "path": "docs/KNOWN-HAZARDS.md", "line": 598 } ] }, "impl": { "complete": true, "evidence": [ { "path": "crates/spt-daemon/src/registryhost.rs", "line": 821 }, { "path": "crates/spt-daemon/src/resting.rs", "line": 224 }, { "path": "crates/spt-daemon/src/resting.rs", "line": 279 } ] }, "int": { "complete": false, "evidence": [] }, "unit": { "complete": true, "evidence": [ { "path": "crates/spt-daemon/src/resting.rs", "line": 900 }, { "path": "crates/spt-daemon/src/resting.rs", "line": 934 }, { "path": "crates/spt-daemon/src/resting.rs", "line": 974 } ] } } }, { "id": "REQ-ELEVATE-1", "title": "Cross-platform self-elevating re-launch for privilege-gated commands: a pure decision seam `decide_elevation_path(os, elevation, interactive_tty, has_display, has_pkexec, has_term_emulator) -> ElevatePath{AlreadyElevated, InlineSudo, UacWindow, Pkexec, TerminalEmulator, PrintHint}` selecting how to re-acquire privilege, and the per-OS impure launchers it dispatches — Windows UAC console (ShellExecuteW `runas` on the abs-exe + verbatim argv; the elevated child does the work, prints 'You can close this window', and pauses for a keypress; the original prints 'Elevated terminal launched…' and exits 0; NEVER pipes the child's stdout back across the privilege boundary), Linux desktop pkexec (preferred, native polkit GUI auth) else x-terminal-emulator -e sudo (fallback list x-terminal-emulator→gnome-terminal→konsole→xterm), the existing interactive-TTY inline sudo, and the headless/no-path floor that prints the absolute-path command. Reused by every gated command (not subnet-specific). Generalizes should_auto_elevate.", "requiredStages": [ "doc", "impl", "unit" ], "stages": { "doc": { "complete": true, "evidence": [ { "path": "CONTEXT.md", "line": 750 } ] }, "impl": { "complete": true, "evidence": [ { "path": "crates/spt/src/cli.rs", "line": 6410 }, { "path": "crates/spt/src/cli.rs", "line": 6455 }, { "path": "crates/spt/src/cli.rs", "line": 6517 }, { "path": "crates/spt/src/elevation.rs", "line": 92 }, { "path": "crates/spt/src/elevation.rs", "line": 148 } ] }, "int": { "complete": false, "evidence": [] }, "unit": { "complete": true, "evidence": [ { "path": "crates/spt/src/elevation.rs", "line": 442 }, { "path": "crates/spt/src/elevation.rs", "line": 460 } ] } } }, { "id": "REQ-ENDPOINT-LIST-MERGE-LOCAL", "title": "`spt endpoint list` always merges this node's LOCAL (unadvertised) perches into the view; the `--local` flag is REMOVED (operator decision 2026-06-17). Rationale: `spt whoami` is a thin alias of `endpoint list` — a just-online agent running `whoami` must see its OWN perch, or it gets an omitted-self view ('chaos'). FIX: drop the `--local` flag + its `--detail` conflict test + the v0.10.0 REQ-PICKER-5 hint line (cli.rs:1678) + cmd_list_local; the bare list merges local perches into the subnet view; fix the whoami alias path accordingly. Run `cargo run -p xtask -- gen` (docs-drift, DEFAULT target). (v0.12.1)", "requiredStages": [ "doc", "impl", "unit" ], "stages": { "doc": { "complete": true, "evidence": [ { "path": "CONTEXT.md", "line": 777 } ] }, "impl": { "complete": true, "evidence": [ { "path": "crates/spt/src/cli.rs", "line": 2688 }, { "path": "crates/spt/src/cli.rs", "line": 2964 }, { "path": "crates/spt/src/cli.rs", "line": 3423 } ] }, "int": { "complete": false, "evidence": [] }, "unit": { "complete": true, "evidence": [ { "path": "crates/spt/src/cli.rs", "line": 12404 }, { "path": "crates/spt/src/cli.rs", "line": 13241 } ] } } }, { "id": "REQ-ENDPOINT-LIST-NODE-GROUPED", "title": "spt endpoint list is node-grouped over unique INSTANCES, not subnet-grouped over duplicated rows: one row per (id,node) instance — subnet duplication collapsed (ADR-0006 §1: subnet is never an identity axis), freshest-epoch wins a cross-subnet status disagreement (the resolve_among twin rule) — grouped under 'This node: