Isolate native agent launches in leased fleet worktrees #791

Closed
opened 2026-07-30 06:25:55 +00:00 by coilyco-ops · 1 comment
Owner

workflow: pull-request-and-merge

Outcome

Every shadowed native agent launch creates an isolated fleet-shaped worktree workspace. A later launch cleans recoverable state from closed terminals without a daemon, heartbeat, exit hook, or user flag.

Acceptance

  • codex, claude, goose, and opencode use the behavior by default through the existing shell shadow.
  • Each launch gets one linked worktree for every expected repository and a PID plus process-start lease.
  • Startup preserves live, dirty, untracked, unpushed, unreadable, and *-workdir state.
  • A cached ten-minute pass returns clean recoverable canonical checkouts to main, fast-forwards them, and removes inactive remotely recoverable worktrees and branches.
  • An unexpected fleet-owned clone is deleted only after three consecutive qualifying passes prove clean main at origin/main with no local-only Git state.
  • No independent reconciler, timer, heartbeat, user-facing repo argument, automatic push, remote branch deletion, or commit is introduced.
  • Native Unix, Linux, macOS, and Windows release builds pass.
workflow: pull-request-and-merge ## Outcome Every shadowed native agent launch creates an isolated fleet-shaped worktree workspace. A later launch cleans recoverable state from closed terminals without a daemon, heartbeat, exit hook, or user flag. ## Acceptance * `codex`, `claude`, `goose`, and `opencode` use the behavior by default through the existing shell shadow. * Each launch gets one linked worktree for every expected repository and a PID plus process-start lease. * Startup preserves live, dirty, untracked, unpushed, unreadable, and `*-workdir` state. * A cached ten-minute pass returns clean recoverable canonical checkouts to `main`, fast-forwards them, and removes inactive remotely recoverable worktrees and branches. * An unexpected fleet-owned clone is deleted only after three consecutive qualifying passes prove clean `main` at `origin/main` with no local-only Git state. * No independent reconciler, timer, heartbeat, user-facing repo argument, automatic push, remote branch deletion, or commit is introduced. * Native Unix, Linux, macOS, and Windows release builds pass.
Author
Owner

Implementation checkpoint

PR #792 contains commit 8d82b537 and is mergeable.

Verification is green:

  • ward aos-test
  • ward aos-lint
  • ward test with 616 passing tests
  • ward pre-commit-all
  • ward aos-release-build for Darwin arm64, Linux amd64 and arm64, and Windows amd64
  • Forgejo CI run #2480, including ward-doctor, gate, and build-dev-base

The branch is pushed to the canonical remote. Merge remains intentionally gated on the issue thread receiving WARD-OUTCOME: done and PR #792 receiving a passed review summary.

## Implementation checkpoint PR #792 contains commit `8d82b537` and is mergeable. Verification is green: * `ward aos-test` * `ward aos-lint` * `ward test` with 616 passing tests * `ward pre-commit-all` * `ward aos-release-build` for Darwin arm64, Linux amd64 and arm64, and Windows amd64 * Forgejo CI run #2480, including `ward-doctor`, `gate`, and `build-dev-base` The branch is pushed to the canonical remote. Merge remains intentionally gated on the issue thread receiving `WARD-OUTCOME: done` and PR #792 receiving a passed review summary.
Sign in to join this conversation.
No milestone
No project
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set

Reference
coilyco-flight-deck/agentic-os#791
No description provided.