8 Commits

Include renames

Author	SHA1	Message	Date
q792602257	a68f609453	Implement cloud-planner-proxy: AI planner routes through Cloud API ... Implements all 19 tasks of the cloud-planner-proxy OpenSpec change: - Cloud API: cloud.planner_config (CloudPlannerConfig, load/build helpers) reusing runtime.tool_calling_client provider clients (no new dependency needed -- device-cloud-platform already depends on device-agent-runtime). - Cloud API: new host-scoped POST /internal/v1/hosts/{host_id}/planner/decide internal endpoint, reusing existing bearer auth; logs only metadata (host id, tool name, latency, error class), never prompt/screenshot content. - Host Agent: new AI_PLANNER_TRANSPORT config (direct default | cloud) and host_agent/cloud_planner_client.py::CloudProxyToolCallingClient, a synchronous ToolCallingClient implementation (structural, not importing runtime) that calls the new endpoint via its own httpx.Client -- avoids bridging the async HostAgentClient across the worker-thread boundary that AIPlanner.plan() runs in (asyncio.to_thread in lease.py). - Host Agent wiring: create_execution_factories()/_host_agent_planner() select the cloud-proxy client only when AI_PLANNER_TRANSPORT=cloud; direct/unset transport is unchanged (still the default). - Tests: 22 new tests across Cloud API config, the new endpoint, the new client, and transport-selection wiring; full non-integration suite (492 tests) passes with no regressions. - Docs: docs/CLOUD_DEPLOYMENT.md documents the cloud transport, its trade-offs, and the credential split between Host Agent and Cloud API. proposal.md/design.md were corrected during implementation to reflect two findings: no new anthropic/openai dependency is actually needed, and CloudProxyToolCallingClient uses its own sync httpx.Client rather than a new HostAgentClient method, per the thread-boundary reasoning above.	2026-07-13 21:27:48 +08:00
q792602257	c162c2501b	feat(cloud): remove static credentials and add host console	2026-07-13 19:45:53 +08:00
q792602257	efeb3eb926	Implement edge-host-self-enrollment ... Host Agent: - One-time local operator account bootstrap (PBKDF2-HMAC-SHA256, atomic 0600-permission write) gating the daemon's first unattended start via a new `setup` CLI subcommand. - Default control-plane URL now https://amcp.home.jerryyan.top (env var override unchanged). - Enrollment no longer requires a pre-issued token; falls back to zero-token self-service enrollment when none is configured. Cloud control plane: - CLOUD_SELF_SERVICE_ENROLLMENT_ENABLED (default false) opt-in flag. - SelfServiceEnrollmentAuthProvider + ChainedEnrollmentAuthProvider: configured tokens still take priority; self-service only applies when no token matches, preserving edge-host-enrollment's token-bound path. - Fixed a latent bug in sql_repository.py::enroll_host: the token-conflict lookup used `== enrollment_token_digest`, which SQLAlchemy compiles to `IS NULL` when the value is None, so every self-service enrollment after the first would have falsely collided with an existing NULL-digest host. Skipped that lookup entirely when the digest is None. Docs/deploy: .env.example, compose.yaml, compose.deploy.yaml, CLOUD_DEPLOYMENT.md, MACOS_IPHONE_SETUP.md updated for the new flag, URL default, and required `device-host-agent setup` step. Verification: 494 non-integration tests pass; openspec validate --strict passes. PostgreSQL-backed contract tests and full manual end-to-end verification were not run (no Postgres/Docker or reachable cloud-api in this environment); noted as unchecked in tasks.md 7.2/7.4.	2026-07-13 18:30:49 +08:00
q792602257	e61dcca801	feat(cloud): add edge host enrollment	2026-07-13 13:54:16 +08:00
q792602257	7b717a05a9	test(openspec): map cloud integration scenarios	2026-07-13 08:21:44 +08:00
q792602257	a24efc1043	feat(host-protocol): renew and complete leases	2026-07-12 18:15:04 +08:00
q792602257	c7f8d0c128	feat(host-protocol): long poll assignments	2026-07-12 18:12:33 +08:00
q792602257	efb754fbe7	feat(host-protocol): accept heartbeat snapshots	2026-07-12 18:10:42 +08:00