diff --git a/docs/architecture/rfcs/ledger/shared-goal-authority-state-provider-v0/2026-09-28-retirement-cadence.md b/docs/architecture/rfcs/ledger/shared-goal-authority-state-provider-v0/2026-09-28-retirement-cadence.md index ac12c113cf..bc5094f08f 100644 --- a/docs/architecture/rfcs/ledger/shared-goal-authority-state-provider-v0/2026-09-28-retirement-cadence.md +++ b/docs/architecture/rfcs/ledger/shared-goal-authority-state-provider-v0/2026-09-28-retirement-cadence.md @@ -257,6 +257,35 @@ Host、写状态、ACK 或扣额度。打包 App 显示可用 Codex 与不可用 或悄悄另建 Session 来通过。真实模型完成、自然试用、其他 runtime、Lark 与冻结 D2 的失败/未测继续分开，复用既有 R5/T4 Todo；启动成功不代表入组或发布默认。 +The ordinary lifecycle checkpoint compares the unconfigured SQLite candidate +with an explicitly configured canonical File control through the same full CLI +entrypoint. `test_installed_ordinary_lifecycle_keeps_archived_work_and_receipts_on_exit` +joins creation, unleased-claim refusal, leased claim/update, quota admission, +refresh/spend, completion, supersession, archival and current-state conversion +in both directions. Exact historical reads retain the archived records, latest +metadata and successor; original add/update/complete/spend retries neither revive +archived work nor append another settlement or authority revision. + +This bounded synthetic journey passes at source `df8262639` on CPython 3.14.8 +and the installed package `c51ec1a60` on CPython 3.12.15, both on macOS arm64 +with Node 24.21.0 / SQLite 3.53.4. Each command reopens an isolated real backend +and verifies the copied package's provenance. It extends CLI recovery evidence; +it does not qualify the packaged App interaction, actual model work, natural +cohort operation, latency/resource growth or other installation profiles. +The [D2 record](https://github.com/loopx-project/loopx/issues/4224#issuecomment-5965294711) +still has no completed applicable elapsed-soak certificate. Retain each older +report's source and failed/missing rows; do not restart its elapsed clock or +replace it with this functional comparison. + +普通生命周期 checkpoint 以同一完整 CLI 入口比较未配置时的 SQLite 候选与显式 +canonical File 对照，贯通创建、无 lease claim 拒绝、持 lease 的 claim/update、 +quota admission→refresh/spend、完成、替代、归档及双向导出当前状态。精确历史 +读取保留归档记录、最新元数据与 successor；原 add/update/complete/spend 重试 +不能复活旧任务、再次结算或追加 authority revision。上述源码与安装包 profile +通过的是隔离真实 backend 的有界合成旅程；App 交互、真实模型、自然试用、 +延迟/资源增长及其他安装 profile 继续未测。D2 旧报告按原 source 保留失败/缺失， +尚无适用的自然时间完成证书；本次功能对照不重启其时钟，也不替代该证书。 + ### One reusable validation matrix Record candidate and independent control revisions, actual runtime, complete diff --git a/tests/control_plane/test_sqlite_authority_cli.py b/tests/control_plane/test_sqlite_authority_cli.py index 3a1501828b..52205a065e 100644 --- a/tests/control_plane/test_sqlite_authority_cli.py +++ b/tests/control_plane/test_sqlite_authority_cli.py @@ -270,3 +270,144 @@ def todos(): assert sum(row.get("classification") == "validated_progress" for row in runs) == 1 finally: restart_effect_runtime() + + +@pytest.mark.parametrize("provider", ["file", "sqlite"]) +def test_installed_ordinary_lifecycle_keeps_archived_work_and_receipts_on_exit( + tmp_path, monkeypatch, provider, +): + """Use one ordinary command journey for the candidate and File control. + + This is bounded synthetic qualification, not elapsed usage or a model Turn. + A historical add/update/terminal retry must not resurrect archived work, + repeat settlement or replace newer metadata after a provider conversion. + """ + isolate_sqlite_runtime(tmp_path, monkeypatch) + monkeypatch.setenv("LOOPX_USAGE_PING", "0") + project, runtime = tmp_path / "project", tmp_path / "runtime" + project.mkdir() + registry = project / ".loopx/registry.json" + goal, agent, turn = "ordinary-lifecycle", "trial-agent", "ordinary-turn" + package = Path(os.environ.get("LOOPX_COLD_IMPORT_PACKAGE", str(Path(__file__).resolve().parents[2] / "loopx"))) + receiver = tmp_path / "receiver" + shutil.copytree(package, receiver / "loopx", ignore=shutil.ignore_patterns("__pycache__", "*.pyc")) + entry = ( + f"import sys; sys.path.insert(0, {str(receiver)!r}); import loopx; " + f"assert loopx.__file__ == {str(receiver / 'loopx/__init__.py')!r}; " + "from loopx.entrypoint import main; raise SystemExit(main())" + ) + + def command(*args, expected_code=0): + result = subprocess.run( + [sys.executable, "-I", "-c", entry, "--registry", str(registry), + "--runtime-root", str(runtime), "--format", "json", *args], + cwd=project, capture_output=True, text=True, timeout=90, + ) + assert result.returncode == expected_code, result.stdout + result.stderr + payload = json.loads(result.stdout) + assert payload.get("ok") is (expected_code == 0), payload + return payload + + def listed(*archived_ids): + payload = command("todo", "list", "--goal-id", goal, "--role", "agent") + assert not set(archived_ids).intersection(row["todo_id"] for row in payload["todos"]) + # Normal lists stay active-only; historical records require exact reads. + for archived_id in archived_ids: + exact = command("todo", "list", "--goal-id", goal, "--role", "agent", "--todo-id", archived_id) + assert exact["todo"]["todo_id"] == archived_id + payload["todos"].append(exact["todo"]) + return payload + + if provider == "file": + config = tmp_path / "storage-defaults.json" + config.write_text(json.dumps({"schema_version": "loopx_goal_storage_defaults_v1", + "new_goal_provider": "file", "canonical_creation": True, + "new_goal_handoff_mode": "hard_lease"})) + preview = command("machine-config", "preview", "--namespace", "goal_storage", "--config-json", str(config)) + command("machine-config", "apply", "--namespace", "goal_storage", "--config-json", str(config), + "--expected-plan-revision", str(preview["plan_revision"]), "--execute") + created = command("bootstrap", "--project", str(project), "--goal-id", goal, + "--objective", "Qualify ordinary lifecycle and reversible exit", "--no-global-sync") + assert created["storage_selection"]["provider"] == provider + assert created["storage_selection"]["handoff_mode"] == "hard_lease" + command("configure-goal", "--goal-id", goal, "--registered-agent", agent, + "--quota-compute", "1", "--execute") + add = ["todo", "add", "--goal-id", goal, "--role", "agent", "--text", "Complete a task 完整 🧭", + "--priority", "P1", "--task-class", "advancement_task", "--action-kind", "validate", + "--required-capability", "filesystem_read", "--operation-id", "ordinary-add"] + todo = command(*add)["todo_id"] + claim = ["todo", "claim", "--goal-id", goal, "--todo-id", todo, "--agent-id", agent, + "--claimed-by", agent, "--claim-operation-id", "ordinary-claim"] + assert command(*claim, expected_code=1)["error_code"] == "handoff_mode_requires_lease" + lease = command("task-lease", "acquire", "--goal-id", goal, "--todo-id", todo, + "--owner", agent, "--idempotency-key", "ordinary-lease") + proof = ["--task-lease-idempotency-key", "ordinary-lease", + "--task-lease-expected-version", str(lease["lease"]["version"])] + command(*claim, *proof) + guard = ["quota", "should-run", "--goal-id", goal, "--agent-id", agent, + "--todo-id", todo, "--codex-app", "--turn-instance-id", turn, + "--available-capability", "filesystem_read", "--scan-path", str(project)] + assert command(*guard)["normal_delivery_allowed"] is True + update = ["todo", "update", "--goal-id", goal, "--todo-id", todo, "--agent-id", agent, + "--note", "Keep the latest note 完整 🧭", "--update-operation-id", "ordinary-update", *proof] + command(*update) + refreshed = command("refresh-state", "--goal-id", goal, "--agent-id", agent, + "--todo-id", todo, "--turn-instance-id", turn, "--classification", "validated_progress", + "--delivery-batch-scale", "test_only", "--delivery-outcome", "outcome_progress", + "--no-global-sync", "--suppress-external-sinks", "--vision-state", "vision_on_track", + "--vision-summary", "Continue the ordinary lifecycle.", + "--vision-acceptance", "Retain current work and original receipts through exit.") + spend = shlex.split(refreshed["settlement_owed"]["command"])[1:] + assert command(*spend)["settlement_progress"]["state"] == "settled" + complete = ["todo", "complete", "--goal-id", goal, "--todo-id", todo, + "--agent-id", agent, "--turn-instance-id", turn, + "--evidence", "synthetic:ordinary-lifecycle-validated", *proof] + command(*complete) + # Replanning is a normal caller, too: replace another task through its owner, + # then retain both the archived predecessor and the new successor on exit. + obsolete = command("todo", "add", "--goal-id", goal, "--role", "agent", "--claimed-by", agent, + "--text", "Replace the obsolete task", "--operation-id", "ordinary-obsolete")["todo_id"] + other = command("task-lease", "acquire", "--goal-id", goal, "--todo-id", obsolete, + "--owner", agent, "--idempotency-key", "ordinary-other") + command("todo", "supersede", "--goal-id", goal, "--todo-id", obsolete, "--agent-id", agent, + "--reason", "Continue with the replacement", "--next-agent-todo", "Replacement remains runnable", + "--next-claimed-by", agent, "--task-lease-idempotency-key", "ordinary-other", + "--task-lease-expected-version", str(other["lease"]["version"])) + command("todo", "archive-completed", "--goal-id", goal, "--max-active-done", "0", "--execute") + before = listed(todo, obsolete) + rows = before["todos"] + completed = next(row for row in rows if row["todo_id"] == todo) + assert completed["status"] == "done" and completed["archive_state"] == "archive" + assert completed["claimed_by"] == agent and completed["priority"] == "P1" + assert completed["note"] == "Keep the latest note 完整 🧭" + assert completed["required_capabilities"] == ["filesystem_read"] + predecessor = next(row for row in rows if row["todo_id"] == obsolete) + assert predecessor["status"] == "done" and predecessor["archive_state"] == "archive" + replacement = next(row for row in rows if row["todo_id"] in predecessor["successor_todo_ids"]) + assert replacement["status"] == "open" and replacement["claimed_by"] == agent + assert before["authority_read"]["source_authority"] == f"{provider}_v0" + command("configure-goal", "--goal-id", goal, "--quota-compute", "0", "--execute") + target = "file" if provider == "sqlite" else "sqlite" + plan = tmp_path / "current-exit.json" + preview = command("authority-archive", "plan-migration", "--goal-id", goal, + "--provider", target, "--plan", str(plan)) + migration = ["authority-archive", "migrate", "--goal-id", goal, "--plan", str(plan), + "--plan-sha256", preview["plan_sha256"], "--execute"] + command(*migration) + assert command(*migration)["status"] == "already_applied" + after = listed(todo, obsolete) + assert after["authority_read"]["source_authority"] == f"{target}_v0" + assert after["authority_read"]["legacy_fallback_used"] is False + assert after["todos"] == rows + # Every invocation reopens the copied package's real backend. Original + # command identities survive conversion and cannot unarchive older state. + for args in (add, update, complete, spend): + command(*args) + replayed = listed(todo, obsolete) + assert replayed["todos"] == rows + assert replayed["authority_read"]["provider_revision"] == after["authority_read"]["provider_revision"] + command("configure-goal", "--goal-id", goal, "--quota-compute", "1", "--execute") + assert command(*guard)["effective_action"] == "heartbeat_settled_skip" + runs = [json.loads(line) for line in (runtime / "goals" / goal / "runs/index.jsonl").read_text().splitlines()] + assert sum(row.get("classification") == "quota_slot_spent" for row in runs) == 1 + assert sum(row.get("classification") == "validated_progress" for row in runs) == 1