feat(automation): add durable runner and signed approval recovery

This commit is contained in:
cesnimda
2026-10-29 14:33:50 +01:00
parent 4da3939547
commit 607ee1853e
29 changed files with 29694 additions and 7 deletions
+7 -7
View File
@@ -14,13 +14,13 @@ Atomic checksummed state with last-good backup, an OS-held repository lock, a du
## Scope and checkpoints
- [ ] AUTO-00: Audit actual source prompts, CLI 0.163.0, local/remote Git state and Phase 10 authority. Record missing/contradictory sources and sandbox failure.
- [ ] AUTO-01: Preserve original prompt bytes; implement strict queue validation and stage/checkpoint gates in `automation/backlog.json` and schemas.
- [ ] AUTO-02–03: Implement PowerShell entry point, bounded runner, atomic state, exclusive locking, pause/resume, windows and budgets in `automation/controller.py`.
- [ ] AUTO-04–05: Implement signed owner decisions, real test/report verification, safe feature commits and verified publication.
- [ ] AUTO-06: Implement status, current-stage and redacted logs plus local event notifications.
- [ ] AUTO-07: Write failing tests first, implement, then run disposable-repository end-to-end tests for every requested failure mode. No application services or real roadmap sessions.
- [ ] AUTO-08: Document install, authentication, protected approval setup, scheduling, recovery and exact first-entry owner action; record honest final acceptance.
- [x] AUTO-00: Audit actual source prompts, CLI 0.163.0, local/remote Git state and Phase 10 authority. Record source mismatches and sandbox failure; import the owner's subsequently supplied I18N/security packs.
- [x] AUTO-01: Preserve original prompt bytes; implement queue validation and stage/checkpoint gates in `automation/backlog.json` and schemas.
- [x] AUTO-02–03: Implement PowerShell entry point, bounded runner, atomic state, exclusive locking, pause/resume, windows and budgets in `automation/controller.py`.
- [x] AUTO-04–05: Implement signed owner decisions, test/report verification, safe feature commits and verified publication. Live-host/application qualification remains independently gated.
- [x] AUTO-06: Implement status, current-stage and redacted logs plus local event notifications.
- [x] AUTO-07: Red/green tests, 48 passing controller tests and six signature cases; disposable-repository end-to-end coverage, actual subprocess/Windows containment and real verifier paths. No application services or real roadmap sessions.
- [x] AUTO-08: Document install, authentication, protected approval setup, scheduling, recovery and exact first-entry owner action; record qualified final acceptance.
Files touched: new `automation/`, `scripts/Run-JobjaktBacklog.ps1`, `scripts/Approve-JobjaktBacklog.ps1`, documentation, and runtime ignore rules. No application callers, database schemas, production configuration or existing tests change.