Repository navigation
harness canary: get opencode, qwen-code, sdk-governance-anthropic, prime-agent to a real verdict - #53
Merged
Merged
Conversation
…the unexported package.json
…din; treat qwen's declined-permission text as a rejection
… not npm (gsc#1390) npm i prime-agent 404s (no such package). Resolve the newest non-draft release (prereleases included: the Rust beta is what the updater serves), verify the linux-x64 tarball against SHA256SUMS, extract under ~/.local. The leg stays dispatch-only: beta.55 has no extension loader (gsc#1406).
opencode run auto-rejects an unanswered permission ask; the installer writes permission.bash=ask for attended users. The canary leg now sets OPENCODE_CONFIG_CONTENT for its own process only.
# Conflicts: # .github/workflows/harness-canary.yml # docs/harness-canary.md
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Gets the four red canary legs from the 10-07 first run to a real verdict.
@agenticcontrolplane/governance-anthropic/package.json, which the published 0.2.1exportsdoes not allow, so no call reached the gateway. Now resolves the main entry and reads the manifest from disk; falls back tounknowninstead of crashing.-pdeclinesrun_shell_command(no prompt possible), so the echo never ran. Leg now runsqwen-acp --yolo -p … </dev/null;--yoloskips only qwen's own prompt, the ACP PreToolUse hook still gates and audits. qwen's "permission was declined" text added to the rejection grep so a recurrence fails fast at governed-call.permission.bash = "ask"for attended users; headlessrunauto-rejects the ask even though the gateway row wasallow. Leg setsOPENCODE_CONFIG_CONTENT='{"permission":{"bash":{"echo *":"allow"}}}'for that one process. Verified locally against a mock model: current config rejects, override runs the echo with the plugin hook still firing. Installer config untouched.prime-agentis not on npm. Installs the newest non-draft GitHub release tarball (sha256-checked). Stays dispatch-only: beta.55 is a Rust rewrite with no extension loader, so the plugin is inert (drift #1406) and the leg is expected red until the plugin is ported.Hermes is fixed separately in the installer (agenticcontrolplane.com,
fix/installer-bash5-hermes).Verify: dispatch
harness-canary.ymlon this branch for each leg.