P0: Audit and harden sin-code daemon/goal/auto as the reusable supervisor engine

[Delqhi]

Problem

SIN-Code already exposes daemon, goal and auto, but the broader OpenCode ↔ ChatGPT Web system still lacks a proven model-independent supervisor. Before building another runtime, determine whether SIN-Code can be the canonical execution engine.

Required implementation

• Document the actual daemon state machine, lease semantics, persistence, retry classes, verification gate and recovery behavior.
• Add an embeddable/backend-neutral supervisor API rather than coupling ownership to one agent loop.
• Support desired state, idempotent reconcile, attempt leases, checkpoints and non-terminal quiescence.
• Publish compatibility requirements for external OpenCode/ChatGPT/Orca adapters.
• Add migration guidance from existing goal queues.

Acceptance criteria

• A daemon restart resumes active goals without duplicate attempts.
• Completion requires fresh deterministic verification and observer/contract evidence where configured.
• The engine can run with a fake backend in hermetic integration tests.
• Documentation states which layer is authoritative and which tools are compatibility clients.

[Delqhi]

Completion Report — T-0042

Generated from .sin-gpt-web/taskplan.sqlite3 by sin-gpt-web-state.
Local agents should read this file together with TASKPLAN.md before continuing.

• Task: T-0042 — Audit SIN-Code daemon/goal/auto as canonical supervisor engine (SIN-Code P0: Audit and harden sin-code daemon/goal/auto as the reusable supervisor engine #519)
• Owner: local-agent
• Completed: 2026-08-04T14:56:07+00:00

Report

T-0042 — SIN-Code daemon/goal/auto audit

Decision

Reuse SIN-Code's verified agent loop and goal queue as an execution backend, but do not make the current daemon the global OpenCode ↔ ChatGPT Web control plane yet. Build the outer desired-state/reconcile layer in wow-my-zsh, then integrate SIN-Code through a versioned backend adapter.

Reusable strengths

• sin-code daemon is a real long-running worker pool with multi-repo triggers, atomic SQLite leasing, verification-gate enforcement, bounded continuations, recursive sub-goals, learning stores, structured progress output and headless sandboxing.
• autonomy.Queue.Lease performs an atomic SQL claim and supports reclaim of expired running goals.
• goalcontract and the stop-gate provide a strong independent completion authority.
• goal discover already supplies deduplicated discovery primitives.

Production blockers

1. Critical — leases are never renewed while an agent loop runs. The daemon leases once, then calls loop.Run. A task exceeding --lease can be reclaimed by a second worker while the original still edits the repository.
2. The queue has no lease owner/token, attempt row, PID/PGID, external backend session, heartbeat or semantic-progress timestamp.
3. Structured progress is emitted to a writer but not persisted as control-plane state.
4. The daemon has no explicit desired state, pause/drain/stop state machine or audited operator control. Empty queue is an implicit polling wait.
5. The daemon is coupled to SIN-Code's internal agent loop; it cannot own OpenCode, ChatGPT Web or Orca sessions through a backend-neutral adapter.
6. sin-code auto is intentionally budget-terminal and therefore unsuitable as the perpetual top-level supervisor.
7. Goal state and session/lesson/ledger stores remain separate; there is no single append-only program/attempt event authority.

Help/readiness observation

The earlier bounded sin-code daemon --help timeout was not reproduced. Installed v3.25.0 completed in 0.201 seconds; goal --help and auto --help completed in 0.038 and 0.035 seconds. Issue SIN-Code #521 remains useful for a regression test and bounded readiness diagnostics, but should be treated as intermittent/unconfirmed rather than a currently reproducible command bug.

Verification

• go test ./cmd/sin-code/internal/autonomy -run 'TestLease|TestContractPersistsThroughLease|TestGoalStore_LeaseGoal' -count=1 — pass.
• go test ./cmd/sin-code -run TestNewDaemonCmdFlags -count=1 — pass.
• Source evidence: cmd/sin-code/daemon_cmd.go:94-157,263-307,438-476; cmd/sin-code/internal/autonomy/queue.go:40-65,191-240,346-384; cmd/sin-code/auto_cmd.go:82-93,113-145,234-245.

Recommended architecture

• Outer control plane: sin-orchestrator in wow-my-zsh owns desired state, programs, work items, attempts, leases, callbacks, conversations and reconcile actions.
• SIN-Code adapter: submits bounded verified goals and consumes structured progress/results.
• SIN-Code hardening: add lease tokens/owners, renewal heartbeat and bounded readiness diagnostics in issues P0: Audit and harden sin-code daemon/goal/auto as the reusable supervisor engine #519–P1 bug: sin-code daemon help/readiness can hang and lacks bounded diagnostics #521.

Evidence

Audited SIN-Code daemon, goal queue and auto runtime with source-line evidence and focused tests. Confirmed reusable verified-loop/atomic-lease foundations; identified missing lease renewal as a critical duplicate-execution risk and selected an outer control-plane plus SIN-Code backend-adapter architecture. Report: .sin-gpt-web/reports/T-0042.md