* docs(desktop): clarify gzip scrub limits * fix(setup): own desktop build process cleanup * fix(doctor): compare desktop settings with resolved defaults * fix(desktop): refuse a build runtime whose export takes no task ends Several tasks pass --task-end to the build computer's export, so a runtime packed before it now fails at the start of the capture with the repack fix, as a runtime without synthetic seeds already did, rather than at export. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> * style(desktop): format the noisy-record draft files with the pinned oxfmt Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> * test(desktop): give the root-array draft test its own describe The records describe grew past the 150-line lint limit with it. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> * fix(doctor): inspect client-recorded desktop runners * fix(doctor): reuse matching runner probes * fix(setup): propagate cancellation to desktop actions * fix(desktop): rewrite a download's launch keys written with spaces around = The desktop entry parser accepts `Exec = notes %F` and an indented `TryExec =notes`, so the install script now matches those keys the same way instead of leaving the original program in place. Adds the feature's tasks.md. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> * fix(desktop): keep why a measured run failed in its solve record A solve that returned an outcome dropped the runner's error, so a run that failed to deploy, solve or verify was retried with no reason recorded. The record, the measure result and difficulty.json now carry it. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> * fix(setup): stop Hopper on cancel, never report a cancelled setup ready, and keep a failed action's client setting - The Hopper install gets setup's signal: Linux already honoured it, and the macOS installer now stops its downloads and stops before mounting or copying. - runSetup checks the signal after the final doctor and close, so a cancellation there raises instead of returning ready. - A failed pack or agentenv install no longer writes its archive or runner to client configs, so the setting the client already had stays. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> * fix(setup): keep the completed setup result in a cancellation after cleanup A cancellation during the final doctor or host close carried only the applied actions, dropping each client's result and backup path and the doctor report. It now carries the whole result as setup_result, as doctor's cancellation carries its report. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> * test(desktop): move launch execution to boundary suite * fix(desktop): redact build schema failure output * refactor(desktop): normalize schema failure once * fix(desktop): omit unsafe schema parser snippets * fix(desktop): preserve draft change and selected path evidence * test(desktop): group retained dconf note regressions * fix(desktop): respect archive entry format in draft checks * test(desktop): separate unowned-file draft note cases * fix(desktop): preserve explicitly selected journal documents * fix(xml): avoid scanning selected ancestors per tag * fix(desktop): exclude covered text runs from draft counts * fix: preserve text when drafting desktop checks * fix: restore nested desktop state aliases * refactor: share UUID recognition across draft checks * fix: retain multiline XML attribute context * fix: retain relationship identifiers in task drafts * docs: clarify desktop draft identifier handling * test(desktop): type formatting run cases as pairs * fix(desktop): carry document format into selector evaluation * test(desktop): separate markup boundary regression group * fix(desktop): propagate formats through draft selectors * fix(desktop): switch selector format within archive entries * test(desktop): remove duplicate seed filename case * fix(setup): retain diagnostics when cancellation overlaps failure * refactor(setup): keep command cancellation at its owner * test(setup): verify cancellation at the application boundary * test(desktop): pass JSON format in exported index parity * docs(desktop): clarify task checks before scratch export * fix(desktop): respell selected paths in file URLs * test(desktop): group captured document spelling cases * test(desktop): run installer scripts at boundary * style(desktop): remove trailing blank line * fix(desktop): bound draft preview serialization * fix(desktop): restore selected state aliases * fix(desktop): respect entry format in draft noise * test(desktop): match exported alias evidence at its JSON boundary * fix(desktop): retain app state logs in exported seeds * fix: align desktop numeric seed comparisons * test(desktop): keep one draft exclusion fixture import * test(desktop): retain log eligibility across draft test groups * fix(doctor): resolve empty registered desktop runner * style: fix desktop launch test formatting * style: format native command path schema * fix(desktop): map selected external launch paths * style(desktop): format seed document regressions * test(desktop): group launch URL regressions * fix(desktop): omit redundant nested state aliases * fix(desktop): compare added free text as a whole * fix(desktop): check recompressed seeds as shipped * docs(desktop): clarify recovered seed format * test(desktop): group shipped gzip seed checks * fix: retain quoted identifier text in task drafts * fix: recognize Unicode XML in desktop state readers * fix(desktop): bound nested draft checks * fix(desktop): explain missing arrays in truncated views * fix(desktop): find XML type references in archives * test(desktop): remove duplicated capture assertions * fix(desktop): retain nested omitted text boundaries * style(desktop): format draft value imports * test(desktop): group model and draft value checks * fix(desktop): map captured launch paths once * refactor: remove unused whole-text guard state * refactor: stop passing unused text children * test: align free-text checks with whole-note policy * fix: validate recompressed desktop archive seeds * style(desktop): format archive seed regression * fix(desktop): retain placed-item sibling guards * fix(desktop): preserve archive paths and bound doctor reads * fix(doctor): refuse non-files before descriptor admission * fix(setup): track remaining cleanup resources across retries * test(desktop): specify XML format in heap pairing fixture * fix(setup): skip Hopper launch after cancelled copy * fix: preserve task measurement limits and cleanup * fix(desktop): retain reported solve sandbox cleanup * test(desktop): check retained log seed admission * fix(doctor): query agentenv for model endpoint * fix(doctor): preserve uncertainty for empty endpoint override * fix(desktop): redact runtime schema errors * fix(desktop): normalize captured file URLs * fix(desktop): report seeded files by capture path * fix(desktop): retain startup readiness failure stage * fix(desktop): retain JSON date checks * fix(desktop): preserve archive formatting checks * fix(desktop): preserve explicitly selected journal files * fix(desktop): report build command transport limits * docs(desktop): clarify unreadable dconf versions * test(desktop): remove duplicate history regression * fix(desktop): align XML names with exported reader * fix(desktop): create selected state alias targets * fix(desktop): inspect supported runtime archives * fix(desktop): keep ordinary text checks exact * fix(desktop): verify registered build host paths * fix(desktop): retain record identity in draft checks * test(desktop): preserve text reference numbers * fix(desktop): bound download install input reads * fix(desktop): match placed notes by whole text * test(desktop): match multiple task export results * fix(desktop): retain failed measurement file closes * fix(setup): retain completed actions on cancellation * test(setup): retain cancelled installer result * fix(desktop): scrub XML independently of reader compatibility * fix(desktop): preserve file aliases and reader diagnostics * style(desktop): format review fixes * fix(desktop): inspect archives with registered runner * test(desktop): verify registered archive interpreter * style(desktop): format capture review fixes * style(desktop): format review changes * feat(desktop): target agentenv-framework 0.9.1464 Desktop bundles, setup's --install-agentenv and the doctor's exact-version check now target 0.9.1464, which keeps an exported app's data/get call, holds the computer fixture above boot dialogs, leaves an unresolved setting's build unverified rather than failed, and mounts lock packages instead of copying them into the image. The web environment lane stays on 0.9.1431. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> * fix(desktop): retain per-solve sandbox cleanup roots * test(desktop): expect the solve cleanup helper among the shipped agentenv helpers Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> * feat(desktop): clean up a stopped solve's sandboxes through agentenv 0.9.1482 agentenv-framework 0.9.1482 lists the local sandboxes under a root (local_sandbox_ids) and rebuilds one killed while it wrote its port map for teardown. The solve cleanup helper now terminates each sandbox agentenv lists, keeping its Docker and host-process checks, and reports anything else left under the root. Desktop bundles, setup's --install-agentenv and the doctor's version check target 0.9.1482. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> * fix(desktop): verify a killed solve's cleanup once its sandbox root is empty A solve's sandboxes are all local under its private root, and agentenv now keeps a sandbox's folder until its teardown is confirmed. So when the helper ends without a report and REA's cleanup empties that root, the cleanup is verified: a cancelled solve ends as a cancellation and a solve past its deadline as a failed run, rather than as cleanup the measure cannot vouch for. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> * feat(desktop): target agentenv-framework 0.9.1485 0.9.1485 keeps a local sandbox's folder until its teardown is confirmed, which the solve cleanup's verified result relies on. (0.9.1484 failed to publish.) Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> * fix(desktop): record a solve stopped before it reports as failed, not as a refused request A helper killed from outside or stopped at its deadline left no report, so the measure refused with invalid input and told the caller to fix its model endpoint. A helper a signal ended now gives a failed solve of unknown cost, which the measure records and stops on; one that exits on its own without a report still ends the measure as a solve that could not run. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> * fix(desktop): check verifier behavior after selector changes * test(windows): verify rejected writes during cleanup by effect * fix(desktop): preserve selected alias target kinds in exports * fix(cli): retain caller capture paths in environment builds * fix(ghidra): classify oversized endpoint records consistently * test: align model and Evidence expectations with current contracts * fix(desktop): reconcile upstream sandbox cleanup recovery * fix(docs): link cleanup qualification as repository evidence --------- Co-authored-by: morluto <76467478+morluto@users.noreply.github.com> Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com>
5.6 KiB
Verification
Tests
src/domain/desktop/taskDifficulty.test.ts: the band for 0 and 3 of 3, 1 and 2 of 3, 1, 3 and 4 of 5 and an unfinished solve beside finished ones; 3 solves, 2 more, then a stop; an unfinished solve run again at most twice; the stop before a solve the largest cost so far would take past the budget, and after one of unknown cost; the record's counts, cost, turns and failures per check; and the README section replaced in place.tests/boundary/mcp/buildMeasureMcp.test.tscallsmeasure_build_taskthrough the MCP with a stand-in agentenv whoserun_bundleanswers solves in order: 1 of 3 then 2 more keeps the task at 2 of 5, each solve run once in the bundle with the model,claude-code,sandbox="local",emulate=Falseand the endpoint REA started with, anddifficulty.jsonand the README record it with the task's digest; 3 of 3 stops as too easy after running an unfinished solve again; the budget stops before a third solve; a task the bundle lacks is refused before any solve. All of them failed before the change: the module and the tool did not exist. After review, the unfinished solve's error,RuntimeError: deploy, is kept in the result anddifficulty.json; that test failed first, since the record dropped every solve's error.
TreeLine, arm64
On the arm64 Ubuntu 24.04 build host with agentenv-framework 0.9.1431, REA's
MCP server started with LITELLM_BASE_URL and LITELLM_API_KEY, each task
measured with anthropic/claude-sonnet-5-5:
| Bundle | Task | Budget | Solves | Passes | Band | Turns | Cost |
|---|---|---|---|---|---|---|---|
d-tl3 |
rename-category |
$2.50 | 2 | 2 | undecided, budget stop | 16, 20 | $2.02 |
d-tl3 |
set-foundation-year |
$2.50 | 3 | 3 | too easy | 17, 18, 22 | $1.89 |
d-tl3 |
add-asimov-book |
$2.50 | 3 | 3 | too easy | 17, 17, 17 | $1.64 |
d-hard |
apply-corrections |
$9 | 3 | 3 | too easy | 106, 61, 74 | $5.14 |
rename-category stopped before a third solve because the largest cost so
far, $1.06, would have taken $2.02 past $2.50. apply-corrections hardens
the 15-book reading list with a second document the solver opens in TreeLine,
Documents/corrections.trln, listing ten corrections to apply: eight years
and two authors across all three categories, one of them "the same year as
The Quiet Glacier's", with guards on three books left alone. Checked offline
against the app's own views, it fails on the seed, passes when applied, and
fails each near miss: a correction left out, an author without its hyphen,
the cross-reference given another book's new year, and an untouched book
changed. Every solve opened the corrections in a second window and applied
all ten; one typed a year into the tree, saw the stray node and undid it.
No task landed in the band: the four measures cost $10.69 of the $15 the
validation allowed, and the $4.31 left could not cover 3 solves of another
hardened task at the $1.50 to $2.07 a solve apply-corrections cost. Each
solve's computer was torn down by its run. difficulty.json and the README
of each bundle list the tasks measured.
Forced-stop cleanup qualification, 2026-11-10
The original missing-identity review concern is addressed by the private root
owned by each SolveSandboxRoot and the provider guarantees shipped in the
pinned agentenv-framework==0.9.1485.
Upstream #555 exposes
local_sandbox_ids() for that root;
#561 makes incomplete
termination raise, so the teardown owner retains the work folder for retry.
Issue #546 is closed.
The published wheel was inspected, including folder creation before resource
startup, provider termination, and task teardown's folder-removal ordering.
The qualification record records the wheel digest and observations. In an isolated Linux arm64 container with the published provider, Python 3.12 and Docker Desktop's Linux daemon:
- A helper created a provider-owned folder and was killed with SIGKILL before returning any sandbox report. REA's cleanup helper discovered and removed it.
- Another helper started a real named/labeled Docker container, labeled network, and detached Linux process carrying the sandbox marker. After its process group was killed, REA's cleanup helper removed all three and emptied the root.
- A controlled Docker removal refusal made cleanup fail while preserving the work folder and container. Removing the refusal and retrying that same root removed the resources and folder.
- A separate unrelated container stayed running through every case and was removed by the qualification's own final cleanup.
The probe invoked the production solve_cleanup.py and actual published
LocalSandbox/LocalSandboxProvider with real Docker resources. It did not run
a paid model or a complete run_bundle solve. Linux process checks were inside
the qualification container's process namespace; this does not qualify native
macOS host-process cleanup. Existing conservative REA checks remain in place.
Controlled TypeScript cleanup/report/cancellation regressions also passed:
22 tests across AgentEnvSolveHelper, SolveSandboxRoot, and
DesktopBuildSolves.