Release 0.6.0

.archon/maintainer-standup/direction.md

@@ -26,6 +26,8 @@ This file is **committed and shared by all maintainers**. Edit deliberately —
 - **Not a general-purpose chat UI.** Adapters are conversation surfaces for *workflow execution*, not standalone chat experiences.
 - **Not a replacement for the AI coding agent itself.** Archon orchestrates Claude Code / Codex / Pi — it doesn't reimplement them.
 - **Not opinionated about the dev environment.** No mandatory editor integrations, framework lock-in, or Docker requirement beyond what users opt into.
+- **Not a deployment-infrastructure product.** Caddy is the single maintained reference reverse proxy (`--profile cloud`). Alternative proxies and infra recipes (Traefik, Nginx, k8s, ...) live in **docs** as community-maintained examples against the documented proxy contract (exposed port, health endpoint, `/internal/*` never proxied — see #2193), not as compose profiles Archon maintains: each maintained proxy config doubles a security-critical surface. Cite as `direction.md §deployment-recipes`.
+- **Not a programming language.** The workflow YAML coordinates (gates, joins, retries, sessions, artifacts, reusable structure); `bash:`/`script:` nodes compute; prompts judge. PRs that add computation to the YAML surface conflict — see §workflow-language.
 
 ## Community providers
 
@@ -45,6 +47,18 @@ Archon ships built-in providers for Claude (`@anthropic-ai/claude-agent-sdk`) an
 
 When citing this policy in a PR comment: `direction.md §community-providers`.
 
+## Workflow language (YAML surface)
+
+The workflow YAML is a **coordination language**, not a programming language. Admissibility test for any new YAML surface feature (field, node type, expression capability): (1) does the *engine* need to see it to govern the run? (2) is it declarative data, not evaluation? (3) could a script node + existing wiring express it today? A feature that computes rather than coordinates is declined with a pointer to the escape hatch. Full rationale, case law, and the five failure smells: `packages/docs-web/src/content/docs/reference/workflow-language-constitution.md`.
+
+Triage clauses — cite as `direction.md §<clause>`:
+
+- **§when-grammar** — `when:` never grows incrementally (no parentheses, functions, string ops, arithmetic). Standing answer: compute the decision in a `script:` node, gate on `$node.output.field`. Only sanctioned growth is adopting CEL wholesale in one versioned change — never home-grown operators.
+- **§load-time-composition** — composition/reuse features must fully resolve at load time (the executor runs a flat static DAG). Parameterization may carry **data**, never **structure**; dynamic/templated targets are declined. Runtime-resolved structure is a sub-run — a governance object with its own run record (#2121 Phase 2, co-designed with #1764) — not a language feature.
+- **§workaround-triage** — repeated YAML structure or deterministic logic embedded in prompts is a signal, triaged into three buckets: missing *coordination* primitive → design it constitutionally; missing *pattern* → document the pattern (e.g. polyglot validate = detect-AI → execute-bash → fix-AI); disguised *computation* → point at script nodes. The workaround corpus decides language shape; the feature-request queue doesn't.
+- **§schema-width** — new provider capabilities default into provider config or tier/alias presets, not new node fields; a node field is earned only by genuine per-node variance. Capability mismatches warn loudly, never silently no-op (`capabilities.ts` is the source of truth; docs derive from it — #2116).
+- **§implicit-behavior** — a new implicit behavior (auto-anything) must be documented in the canonical behavior list, individually defeatable, and fail-safe — convenience alone never qualifies.
+
 ## Open questions (no stance yet)
 
 These are direction calls we haven't made. PRs that touch these areas should surface the question for explicit decision rather than be silently accepted or rejected. The workflow may add to this list as new questions appear.

.archon/scripts/__tests__/marketplace-fetch-source.test.ts

@@ -0,0 +1,95 @@
+import { describe, it, expect } from 'bun:test';
+import { mkdirSync, mkdtempSync, writeFileSync, rmSync } from 'node:fs';
+import { resolve, join } from 'node:path';
+import { tmpdir } from 'node:os';
+import { spawnSync } from 'node:child_process';
+
+const SCRIPT = resolve(import.meta.dir, '../marketplace-fetch-source.ts');
+
+interface FetchOutput {
+  files: string[];
+  errors: string[];
+}
+
+function runFetch(entryJson: Record<string, unknown>): { output: FetchOutput; stderr: string; exitCode: number } {
+  const artifactsDir = mkdtempSync(join(tmpdir(), 'fetch-test-'));
+  try {
+    mkdirSync(join(artifactsDir, 'source'), { recursive: true });
+    writeFileSync(join(artifactsDir, 'entry.json'), JSON.stringify(entryJson));
+
+    const result = spawnSync('bun', [SCRIPT], {
+      env: { ...process.env, ARTIFACTS_DIR: artifactsDir },
+      stdio: ['ignore', 'pipe', 'pipe'],
+    });
+
+    const exitCode = result.status ?? 1;
+    const stdout = result.stdout?.toString() ?? '';
+    const stderr = result.stderr?.toString() ?? '';
+
+    let output: FetchOutput = { files: [], errors: [] };
+    if (stdout) {
+      try {
+        output = JSON.parse(stdout);
+      } catch {}
+    }
+
+    return { output, stderr, exitCode };
+  } finally {
+    rmSync(artifactsDir, { recursive: true, force: true });
+  }
+}
+
+describe('marketplace-fetch-source: guard for missing sourceUrl/sha', () => {
+  it('exits 0 with empty files when sourceUrl is missing', () => {
+    const { output, stderr, exitCode } = runFetch({ sha: 'abc123' });
+    expect(exitCode).toBe(0);
+    expect(output.files).toHaveLength(0);
+    expect(stderr).toContain('sourceUrl');
+    expect(output.errors.length).toBeGreaterThan(0);
+    expect(output.errors[0]).toContain('sourceUrl');
+  });
+
+  it('exits 0 with empty files when sha is missing', () => {
+    const { output, stderr, exitCode } = runFetch({ sourceUrl: 'https://github.com/owner/repo/blob/main/path' });
+    expect(exitCode).toBe(0);
+    expect(output.files).toHaveLength(0);
+    expect(stderr).toContain('sha');
+    expect(output.errors.length).toBeGreaterThan(0);
+    expect(output.errors[0]).toContain('sha');
+  });
+
+  it('exits 0 with empty files when both sourceUrl and sha are missing', () => {
+    const { output, stderr, exitCode } = runFetch({});
+    expect(exitCode).toBe(0);
+    expect(output.files).toHaveLength(0);
+    expect(stderr).toContain('sourceUrl');
+    expect(stderr).toContain('sha');
+    expect(output.errors.length).toBeGreaterThan(0);
+  });
+
+  it('does not trigger guard when entry.json has both sourceUrl and sha', () => {
+    // Unrecognized URL makes the script stop deterministically at URL validation — no network.
+    const { stderr, exitCode } = runFetch({
+      sourceUrl: 'https://example.com/not-a-github-url',
+      sha: 'abc123def456',
+    });
+    expect(stderr).not.toContain('missing required field');
+    expect(stderr).toContain('Unrecognized sourceUrl format');
+    expect(exitCode).toBe(1);
+  });
+});
+
+describe('marketplace-fetch-source: missing entry.json', () => {
+  it('exits 1 when entry.json is absent', () => {
+    const artifactsDir = mkdtempSync(join(tmpdir(), 'fetch-test-'));
+    try {
+      const result = spawnSync('bun', [SCRIPT], {
+        env: { ...process.env, ARTIFACTS_DIR: artifactsDir },
+        stdio: ['ignore', 'pipe', 'pipe'],
+      });
+      expect(result.status ?? 1).toBe(1);
+    } finally {
+      rmSync(artifactsDir, { recursive: true, force: true });
+    }
+  });
+});

.archon/scripts/marketplace-fetch-source.ts

@@ -21,8 +21,8 @@ if (!existsSync(entryPath)) {
 }
 
 interface MarketplaceEntry {
-  sourceUrl: string;
-  sha: string;
+  sourceUrl?: string;
+  sha?: string;
 }
 
 const entry = JSON.parse(readFileSync(entryPath, 'utf8')) as MarketplaceEntry;
@@ -34,6 +34,21 @@ mkdirSync(sourceDir, { recursive: true });
 const errors: string[] = [];
 const files: string[] = [];
 
+// Guard: sourceUrl/sha are required. If missing, output empty result so
+// downstream nodes proceed gracefully (e.g., PR without a marketplace entry).
+if (!sourceUrl || !sha) {
+  const missing: string[] = [];
+  if (!sourceUrl) missing.push('sourceUrl');
+  if (!sha) missing.push('sha');
+  const msg = `entry.json is missing required field(s): ${missing.join(', ')}. ` +
+    'This PR likely does not add a marketplace entry with source files. ' +
+    'Skipping source fetch.';
+  process.stderr.write(msg + '\n');
+  errors.push(msg);
+  console.log(JSON.stringify({ files, errors }));
+  process.exit(0);
+}
+
 // Parse GitHub blob/tree URL into owner/repo/path
 const blobMatch = sourceUrl.match(/^https:\/\/github\.com\/([^/]+)\/([^/]+)\/blob\/[^/]+\/(.+)$/);
 const treeMatch = sourceUrl.match(/^https:\/\/github\.com\/([^/]+)\/([^/]+)\/tree\/[^/]+\/(.+)$/);

.archon/workflows/defaults/archon-fix-github-issue.yaml

@@ -39,10 +39,11 @@ nodes:
 
   - id: fetch-issue
     bash: |
-      # Strip quotes, whitespace, markdown backticks from AI output
-      ISSUE_NUM=$(echo "$extract-issue-number.output" | tr -d "'\"\`\n " | grep -oE '[0-9]+' | head -1)
+      # $extract-issue-number.output is injected pre-quoted by Archon — do NOT
+      # wrap it in double quotes (that corrupts the value; see issue #1884).
+      ISSUE_NUM=$(echo $extract-issue-number.output | grep -oE '[0-9]+' | head -1)
       if [ -z "$ISSUE_NUM" ]; then
-        echo "Failed to extract issue number from: $extract-issue-number.output" >&2
+        echo "Failed to extract issue number from:" $extract-issue-number.output >&2
         exit 1
       fi
       gh issue view "$ISSUE_NUM" --json title,body,labels,comments,state,url,author

.archon/workflows/defaults/archon-idea-to-pr.yaml

@@ -74,83 +74,20 @@ nodes:
     context: fresh
 
   # ═══════════════════════════════════════════════════════════════════
-  # PHASE 6: CODE REVIEW
-  # ═══════════════════════════════════════════════════════════════════
-
-  - id: verify-pr-base
-    bash: |
-      set -euo pipefail
-      HEAD_BRANCH=$(git rev-parse --abbrev-ref HEAD)
-      PR_NUMBER=$(gh pr list --head "$HEAD_BRANCH" --state open --json number -q '.[0].number')
-      if [ -z "$PR_NUMBER" ]; then
-        echo "No open PR found for branch $HEAD_BRANCH" >&2
-        exit 1
-      fi
-      EXPECTED="$BASE_BRANCH"
-      ACTUAL=$(gh pr view "$PR_NUMBER" --json baseRefName -q '.baseRefName')
-      if [ "$ACTUAL" != "$EXPECTED" ]; then
-        echo "Base mismatch on PR #$PR_NUMBER: expected=$EXPECTED actual=$ACTUAL — re-targeting" >&2
-        gh pr edit "$PR_NUMBER" --base "$EXPECTED"
-      else
-        echo "PR base verified: $EXPECTED"
-      fi
-    depends_on: [finalize-pr]
-
-  - id: review-scope
-    command: archon-pr-review-scope
-    depends_on: [verify-pr-base]
-    context: fresh
-
-  - id: sync
-    command: archon-sync-pr-with-main
-    depends_on: [review-scope]
-    context: fresh
-
-  - id: code-review
-    command: archon-code-review-agent
-    depends_on: [sync]
-    context: fresh
-
-  - id: error-handling
-    command: archon-error-handling-agent
-    depends_on: [sync]
-    context: fresh
-
-  - id: test-coverage
-    command: archon-test-coverage-agent
-    depends_on: [sync]
-    context: fresh
-
-  - id: comment-quality
-    command: archon-comment-quality-agent
-    depends_on: [sync]
-    context: fresh
-
-  - id: docs-impact
-    command: archon-docs-impact-agent
-    depends_on: [sync]
-    context: fresh
-
-  - id: synthesize
-    command: archon-synthesize-review
-    depends_on: [code-review, error-handling, test-coverage, comment-quality, docs-impact]
-    trigger_rule: one_success
-    context: fresh
-
-  # ═══════════════════════════════════════════════════════════════════
-  # PHASE 7: FIX REVIEW ISSUES
+  # PHASE 6-7: CODE REVIEW + FIX (shared building block)
+  # Inlines archon-review-block: verify-pr-base -> review-scope -> sync ->
+  # 5 parallel review agents -> synthesize -> implement-fixes.
   # ═══════════════════════════════════════════════════════════════════
 
-  - id: implement-fixes
-    command: archon-implement-review-fixes
-    depends_on: [synthesize]
-    context: fresh
+  - id: review
+    include: archon-review-block
+    depends_on: [finalize-pr]
 
   # ═══════════════════════════════════════════════════════════════════
   # PHASE 8: FINAL SUMMARY & FOLLOW-UP
   # ═══════════════════════════════════════════════════════════════════
 
   - id: workflow-summary
     command: archon-workflow-summary
-    depends_on: [implement-fixes]
+    depends_on: [review]
     context: fresh

.archon/workflows/defaults/archon-issue-review-full.yaml

@@ -30,83 +30,20 @@ nodes:
     context: fresh
 
   # ═══════════════════════════════════════════════════════════════════
-  # PHASE 3: CODE REVIEW
+  # PHASE 3-4: CODE REVIEW + FIX (shared building block)
+  # Inlines archon-review-block: verify-pr-base -> review-scope -> sync ->
+  # 5 parallel review agents -> synthesize -> implement-fixes.
   # ═══════════════════════════════════════════════════════════════════
 
-  - id: verify-pr-base
-    bash: |
-      set -euo pipefail
-      HEAD_BRANCH=$(git rev-parse --abbrev-ref HEAD)
-      PR_NUMBER=$(gh pr list --head "$HEAD_BRANCH" --state open --json number -q '.[0].number')
-      if [ -z "$PR_NUMBER" ]; then
-        echo "No open PR found for branch $HEAD_BRANCH" >&2
-        exit 1
-      fi
-      EXPECTED="$BASE_BRANCH"
-      ACTUAL=$(gh pr view "$PR_NUMBER" --json baseRefName -q '.baseRefName')
-      if [ "$ACTUAL" != "$EXPECTED" ]; then
-        echo "Base mismatch on PR #$PR_NUMBER: expected=$EXPECTED actual=$ACTUAL — re-targeting" >&2
-        gh pr edit "$PR_NUMBER" --base "$EXPECTED"
-      else
-        echo "PR base verified: $EXPECTED"
-      fi
+  - id: review
+    include: archon-review-block
     depends_on: [implement]
 
-  - id: review-scope
-    command: archon-pr-review-scope
-    depends_on: [verify-pr-base]
-    context: fresh
-
-  - id: sync
-    command: archon-sync-pr-with-main
-    depends_on: [review-scope]
-    context: fresh
-
-  - id: code-review
-    command: archon-code-review-agent
-    depends_on: [sync]
-    context: fresh
-
-  - id: error-handling
-    command: archon-error-handling-agent
-    depends_on: [sync]
-    context: fresh
-
-  - id: test-coverage
-    command: archon-test-coverage-agent
-    depends_on: [sync]
-    context: fresh
-
-  - id: comment-quality
-    command: archon-comment-quality-agent
-    depends_on: [sync]
-    context: fresh
-
-  - id: docs-impact
-    command: archon-docs-impact-agent
-    depends_on: [sync]
-    context: fresh
-
-  - id: synthesize
-    command: archon-synthesize-review
-    depends_on: [code-review, error-handling, test-coverage, comment-quality, docs-impact]
-    trigger_rule: one_success
-    context: fresh
-
-  # ═══════════════════════════════════════════════════════════════════
-  # PHASE 4: FIX REVIEW ISSUES
-  # ═══════════════════════════════════════════════════════════════════
-
-  - id: implement-fixes
-    command: archon-implement-review-fixes
-    depends_on: [synthesize]
-    context: fresh
-
   # ═══════════════════════════════════════════════════════════════════
   # PHASE 5: FINAL SUMMARY
   # ═══════════════════════════════════════════════════════════════════
 
   - id: summary
     command: archon-workflow-summary
-    depends_on: [implement-fixes]
+    depends_on: [review]
     context: fresh