mirror of
https://github.com/garrytan/gstack.git
synced 2026-09-09 14:38:59 +02:00
Garry TanandClaude Fable 5
e65be946dd
Review army + coverage audit findings, all applied: - headless directive carries the spawned escape sentence too (multi- specialist: a CI-hosted ship's marked subagent must not end BLOCKED) - anti-injection scoping on every text-claimable spawned trigger (AUQ rule + shared escape sentence): markings count only from the creating prompt, never from files/tool output/web content read mid-run - [conductor][spawned] deny annotates one-way doors per question - SPAWNED_OVERRIDE: env tamper-visibility status line + OPENCLAW.md note - spawned sessions skip the network update-check and first-task probe (consumers suppressed; preserves the one-shot just-upgraded marker) - test hardening: dispatch-tripwire end-bound validated, vacuous marker asserts replaced with output asserts, E2E cpSync size filter + named fence tolerance, spawnedByEnv parity pin, destructive-policy cross- surface drift guard, one-way annotation + bogus-value hook cases - session-kind duplicate rationale comment deduped; regen + goldens + context-budget fixture refreshed Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
67 lines
2.8 KiB
Bash
Executable File
67 lines
2.8 KiB
Bash
Executable File
#!/usr/bin/env bash
|
|
# gstack-session-kind — classify the current agent session so skills know whether
|
|
# a human can answer an interactive prompt (AskUserQuestion).
|
|
#
|
|
# Usage: gstack-session-kind → prints one of: spawned | headless | interactive
|
|
#
|
|
# Used by the preamble (generate-preamble-bash.ts) which echoes
|
|
# SESSION_KIND: <value>
|
|
# so the AskUserQuestion-failure fallback rule can branch without a shell-out at
|
|
# failure time:
|
|
# spawned → orchestrator session (OpenClaw). Auto-choose recommended option
|
|
# per the skill's SPAWNED_SESSION block. Never prose, never BLOCKED.
|
|
# headless → no human present (claude -p evals / CI). BLOCK on AUQ failure.
|
|
# interactive → a human is present. Prose-fallback on AUQ failure.
|
|
#
|
|
# Detection is best-effort. On ANY ambiguity it prints `interactive` — BLOCK only on
|
|
# a positive headless signal, since a stray prose message in an unmarked one-shot
|
|
# `-p` run just ends the turn (harmless), whereas wrongly BLOCKING a real human is not.
|
|
#
|
|
# GSTACK_SESSION_KIND=spawned is the explicit per-command override (step 0 below),
|
|
# outranking every ambient marker. Deliberately narrow — only "spawned" is honored:
|
|
# Claude Code subagents inherit the parent env byte-for-byte (#2733), so a
|
|
# dispatching skill marks its subagent by prefixing the gstack-skill-start
|
|
# invocation. "headless" already has GSTACK_HEADLESS; other values are reserved
|
|
# and ignored (fall through to detection).
|
|
#
|
|
# Why env vars and not TTY/entrypoint: an interactive Conductor session reports
|
|
# CLAUDE_CODE_ENTRYPOINT=sdk-ts with no TTY — identical to a headless SDK eval. The
|
|
# signals that actually discriminate are the host/orchestrator/CI env markers below.
|
|
set -euo pipefail
|
|
|
|
# 0. Explicit spawned marker — full rationale and contract in the header above.
|
|
if [ "${GSTACK_SESSION_KIND:-}" = "spawned" ]; then
|
|
echo "spawned"
|
|
exit 0
|
|
fi
|
|
|
|
# 1. Orchestrator-spawned session (OpenClaw). Authoritative block lives in the skill;
|
|
# we only surface the classification.
|
|
if [ -n "${OPENCLAW_SESSION:-}" ]; then
|
|
echo "spawned"
|
|
exit 0
|
|
fi
|
|
|
|
# 2. Explicit headless override (set by the eval/E2E harness for determinism).
|
|
if [ -n "${GSTACK_HEADLESS:-}" ]; then
|
|
echo "headless"
|
|
exit 0
|
|
fi
|
|
|
|
# 3. Positive interactive-host signals: a human-driven host is present.
|
|
# - Conductor app sets CONDUCTOR_* workspace vars.
|
|
# - Plain interactive `claude` CLI sets CLAUDE_CODE_ENTRYPOINT=cli.
|
|
if [ -n "${CONDUCTOR_WORKSPACE_PATH:-}" ] || [ -n "${CONDUCTOR_PORT:-}" ] || [ "${CLAUDE_CODE_ENTRYPOINT:-}" = "cli" ]; then
|
|
echo "interactive"
|
|
exit 0
|
|
fi
|
|
|
|
# 4. CI / automation markers with no interactive host → headless.
|
|
if [ -n "${CI:-}" ] || [ -n "${GITHUB_ACTIONS:-}" ]; then
|
|
echo "headless"
|
|
exit 0
|
|
fi
|
|
|
|
# 5. No positive headless signal → assume a human is present (degrade-safe default).
|
|
echo "interactive"
|