Skip to content
Permalink

Comparing changes

Choose two branches to see what’s changed or to start a new pull request. If you need to, you can also or learn more about diff comparisons.

Open a pull request

Create a new pull request by comparing changes across two branches. If you need to, you can also . Learn more about diff comparisons here.
base repository: corbitsdev/corbits-code
Failed to load repositories. Confirm that selected base ref is valid, then try again.
Loading
base: main
Choose a base ref
...
head repository: corbitsdev/corbits-code
Failed to load repositories. Confirm that selected head ref is valid, then try again.
Loading
compare: cl-orchestrator-play
Choose a head ref
Checking mergeability… Don’t worry, you can still create the pull request.
  • 14 commits
  • 107 files changed
  • 1 contributor

Commits on Aug 10, 2026

  1. Remove single-agent session mode; add closed director registry 

    Orchestrator is the only product path (CL-5814): drop the first-run mode
picker, Settings session-mode rows, and dual-mode prompt/tool branching.
Legacy sessionMode on disk still loads without error and is ignored.

Also land the Level-1 closed director registry (16 ids + resolve + intent
defaults) so leaf packages can fill in place (CL-5818).
    @TheGreatAxios
    TheGreatAxios committed Aug 10, 2026
    Configuration menu
    Copy the full SHA
    945586a View commit details
    Browse the repository at this point in the history

  2. Note single-agent session mode removal in Unreleased 

    Document the CL-5814 product break: orchestrator-only primary, legacy
sessionMode ignored, first-run picker and Settings rows gone.
    @TheGreatAxios
    TheGreatAxios committed Aug 10, 2026
    Configuration menu
    Copy the full SHA
    58a2f84 View commit details
    Browse the repository at this point in the history

  3. Quiet transcript for task/manage_tasks and live fleet dispatches 

    Panel-owned tools no longer paint stream rows; fleet report only
announces terminal/stall transitions so the board owns live state.
    @TheGreatAxios
    TheGreatAxios committed Aug 10, 2026
    Configuration menu
    Copy the full SHA
    3278498 View commit details
    Browse the repository at this point in the history

  4. Fail closed director fleet and task intent contracts 

    Require real director prompts (not placeholders) and assert
task resolves directors and intents before the registry and
dispatch path ship full packages.
    @TheGreatAxios
    TheGreatAxios committed Aug 10, 2026
    Configuration menu
    Copy the full SHA
    98cd177 View commit details
    Browse the repository at this point in the history

  5. Wire live director packages into registry and task dispatch 

    Replace placeholder registry entries with the closed sixteen
packages, project them as default profiles, and resolve named
or intent-only task dispatches from the fleet.
    @TheGreatAxios
    TheGreatAxios committed Aug 10, 2026
    Configuration menu
    Copy the full SHA
    ba35419 View commit details
    Browse the repository at this point in the history

  6. Fill closed director packages with tool envelopes and write-path authz 

    Skywalker is the primary system role. Leaves mount small tool allowlists
instead of deny-everything, and docs directors lock write_file/edit_file
paths at the permission gate so prompt policy is not the only fence.
    @TheGreatAxios
    TheGreatAxios committed Aug 10, 2026
    Configuration menu
    Copy the full SHA
    f3f4924 View commit details
    Browse the repository at this point in the history

  7. Document the closed director fleet and lock Phase 5 acceptance tests 

    PRODUCT, ARCHITECTURE, and IMPLEMENTATION now describe Skywalker,
the 16-package registry, spawn matrix, intent map, and writePaths.
Registry tests cover greybeard spawn, review envelopes, and primary stance.
    @TheGreatAxios
    TheGreatAxios committed Aug 10, 2026
    Configuration menu
    Copy the full SHA
    c40751b View commit details
    Browse the repository at this point in the history

  8. Enforce director spawn allowlist and refuse bare task 

    Close the two dogfood gaps greybeard flagged: nested directors pass
spawn.allowlist into nested task so greybeard cannot mint implement,
and task without agent or intent fails closed instead of a generic leaf.
    @TheGreatAxios
    TheGreatAxios committed Aug 10, 2026
    Configuration menu
    Copy the full SHA
    dfee9e3 View commit details
    Browse the repository at this point in the history

  9. Name primary Skywalker and strip product write tools from the orchest… 

    …rator

Wire director identity headers (agent id, modelRole, optionalSkills) into
profiles and spawn, drive leaf effort from modelRole, inject arch/runtime
into the env block, and make never-implement structural on the primary
tool surface instead of prompt-only.
    @TheGreatAxios
    TheGreatAxios committed Aug 10, 2026
    Configuration menu
    Copy the full SHA
    828a9b9 View commit details
    Browse the repository at this point in the history

  10. Move orchestration chrome above the prompt and fix primary write-tool… 

    … honesty

Stack agents and tasks under the transcript so fleet work sits next to the
prompt, and stop telling Skywalker that product write tools are how files
change when those tools are unmounted.
    @TheGreatAxios
    TheGreatAxios committed Aug 10, 2026
    Configuration menu
    Copy the full SHA
    4bd2498 View commit details
    Browse the repository at this point in the history

  11. Stop painting the same fleet work three times 

    Transcript fleet notices drop per-lane done walls; chrome shows either the
board or the checklist, not both; done-only task lists collapse.
    @TheGreatAxios
    TheGreatAxios committed Aug 10, 2026
    Configuration menu
    Copy the full SHA
    9dcd942 View commit details
    Browse the repository at this point in the history

  12. Tighten docs writePaths and drop dead fleet task tracking 

    Docs directors no longer mount run_shell so writePaths cannot be
bypassed via shell. Bare allowlist names match only the workspace
root file. Remove unused taskCallIds machinery from the runtime bridge.
    @TheGreatAxios
    TheGreatAxios committed Aug 10, 2026
    Configuration menu
    Copy the full SHA
    8c587df View commit details
    Browse the repository at this point in the history

  13. Close write-path allowlist escape holes 

    The write-path allowlist matched the raw subject in addition to the
resolved workspace-relative path, so a glob like docs/* could accept
docs/../src/hack.ts (the subject string starts with docs/ even though
the resolved path escapes to src/). It also fell through to pattern
matching for paths resolving outside cwd.

Resolve the subject against cwd first and hard-deny anything outside
cwd without ever matching the raw subject. Globs now match only the
workspace-relative path, and bare names still compare root-only.

Also compose DOCS_TOOLS from READ_TOOLS minus run_shell so it tracks
the read surface instead of duplicating it.

Add tests for traversal escape, outside-cwd absolute paths, and the
existing positive cases.
    @TheGreatAxios
    TheGreatAxios committed Aug 10, 2026
    Configuration menu
    Copy the full SHA
    e4c89ab View commit details
    Browse the repository at this point in the history

  14. Fix writePaths doc and add registry run_shell guard test

    @TheGreatAxios
    TheGreatAxios committed Aug 10, 2026
    Configuration menu
    Copy the full SHA
    3c95a55 View commit details
    Browse the repository at this point in the history
Loading