7a0c47bfa4
Export an authenticated capture and environment manifest as a pinned agentenv bundle with provenance, a replay verifier and smoke task. Followups preserve immutable input ownership, bounded discovery, caller paths and numeric values; bind bundle writes and package copying to retained filesystem owners; verify POSIX modes; retain cleanup authority; and verify framework/npm executable selection. Default MCP remains stdio. Validation: pinned Linux toolchain, typecheck/build/lint/format/docs/knip, 452 focused tests, ten product-catalog cases, real GitHub response replay in the generated non-root Docker image, and the real pinned agentenv framework smoke workflow. Platform and resource-measurement limits are recorded in the feature verification document. Co-authored-by: gensokyo-dev <gensokyo-dev@users.noreply.github.com> Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com> Co-authored-by: Claude Fable 5.1 <noreply@anthropic.com>
900 B
900 B
Tasks
- Record the export contract, requirements and the lane.
- Thread the operation name and capture digest through the source loader.
- Plan the bundle: name rule, Dockerfile for both package sources, verifier, smoke task, README.
- Write the bundle with directory, tarball and input refusals and exclusive creation.
- Register the flat CLI command with described arguments and options.
- Add the agentenv scope, workflow, package script and verifier; wire ci.yml; extend the guard tests.
- Add services, conformance and cli-boundary coverage.
- Document the command, the bundle and the lane; record the spec.
- Run static, formatting, duplication, documentation and test gates and the local end-to-end run.
- Repair the review findings (README run command, absolute tool paths, single read, tarball cleanup) and re-run the gates and the end-to-end run.