7 Commits

Include renames

Author	SHA1	Message	Date
q792602257	30f09b6268	feat(host-agent): default planner transport to cloud	2026-07-14 20:42:27 +08:00
q792602257andClaude Opus 4.6	75879c8a52	feat(host-agent): add optional Appium/Runtime supervisor ... Adds an opt-in dependency supervisor inside the Host Agent that probes, spawns, and restarts the two local processes the macOS single-machine real-device workflow depends on: the Appium server (gates Driver.connect()) and the local Runtime API (local inspection). Default-off; gated by HOST_AGENT_DEPENDENCY_SUPERVISOR_ENABLED plus per-dependency *_SUPERVISED flags. Mitigates the live-incident failure mode where forgetting to start Appium silently keeps devices offline and tasks queued forever with no error surfaced in Host Agent logs. Behavior (per openspec change): - Adopt-don't-fight: probe (TCP + dependency-specific HTTP health check) before spawn. Healthy listener → adopted (never killed/restarted). Unhealthy listener → port-conflict error, skip. No listener → spawn. - Only supervisor-spawned processes are restarted on crash, with capped exponential backoff (1s/2s/4s/8s, capped at 30s) and a per-process-lifetime attempt ceiling (HOST_AGENT_DEPENDENCY_RESTART_MAX_ATTEMPTS, default 5). - Spawn failures (e.g. missing executable) logged distinctly from crashes. - Graceful stop terminates only spawned children; adopted processes untouched. - Supervisor starts before the heartbeat loop's first connect_devices() pass and stops alongside existing heartbeat/console teardown. Validation: ruff check + format clean, compileall clean, openspec validate --strict valid. Non-integration suite 503 passed / 44 deselected / 2 failed (both failures pre-existing from unrelated 03c7c30 LLM_PROVIDER_ENC_KEY; verified by stashing this change). macOS real-device manual verification (task 6.4) deferred to a macOS host. Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>	2026-07-14 09:28:57 +08:00
q792602257	8b7e5a2800	feat(host-agent): start local console by default	2026-07-14 07:31:31 +08:00
q792602257	c162c2501b	feat(cloud): remove static credentials and add host console	2026-07-13 19:45:53 +08:00
q792602257	efeb3eb926	Implement edge-host-self-enrollment ... Host Agent: - One-time local operator account bootstrap (PBKDF2-HMAC-SHA256, atomic 0600-permission write) gating the daemon's first unattended start via a new `setup` CLI subcommand. - Default control-plane URL now https://amcp.home.jerryyan.top (env var override unchanged). - Enrollment no longer requires a pre-issued token; falls back to zero-token self-service enrollment when none is configured. Cloud control plane: - CLOUD_SELF_SERVICE_ENROLLMENT_ENABLED (default false) opt-in flag. - SelfServiceEnrollmentAuthProvider + ChainedEnrollmentAuthProvider: configured tokens still take priority; self-service only applies when no token matches, preserving edge-host-enrollment's token-bound path. - Fixed a latent bug in sql_repository.py::enroll_host: the token-conflict lookup used `== enrollment_token_digest`, which SQLAlchemy compiles to `IS NULL` when the value is None, so every self-service enrollment after the first would have falsely collided with an existing NULL-digest host. Skipped that lookup entirely when the digest is None. Docs/deploy: .env.example, compose.yaml, compose.deploy.yaml, CLOUD_DEPLOYMENT.md, MACOS_IPHONE_SETUP.md updated for the new flag, URL default, and required `device-host-agent setup` step. Verification: 494 non-integration tests pass; openspec validate --strict passes. PostgreSQL-backed contract tests and full manual end-to-end verification were not run (no Postgres/Docker or reachable cloud-api in this environment); noted as unchecked in tasks.md 7.2/7.4.	2026-07-13 18:30:49 +08:00
q792602257	e61dcca801	feat(cloud): add edge host enrollment	2026-07-13 13:54:16 +08:00
q792602257	638216d6e7	feat(cloud): validate control plane and host configuration	2026-07-12 16:45:12 +08:00