run_dev_pipeline

Auto-generated from the registered MCP tool descriptions and input schemas. Do not edit by hand — run pnpm docs:tools to regenerate.

Run the multi-agent development pipeline. Accepts direct task instructions, a plan file, or a spec file. Implement, QA and gates use a per-run scratch worktree pinned to HEAD. Isolation of scratch-bound expert, install, gate and change-capture subprocesses is an OS sandbox with the source read-only when changes.isolation.mode is os-sandbox. Otherwise isolation is best-effort and changes.isolation.reason explains why bwrap or sandbox setup is unavailable. Pipeline-owned git runs hermetically with repository-local GIT_* variables removed, optional index refresh disabled, fsmonitor disabled and source hooks disabled. Gate subprocesses receive the hermetic git environment. Installs are scratch-local with inherited directory overrides removed, copy imports and HUSKY=0, and are killed as a process tree on timeout. Changes to the source repository’s shared git config are reported as a warning, or logged when the run throws or times out. Only in best-effort mode, an install descendant that ignores SIGTERM can write during the kill grace period before the config snapshot. The OS sandbox confines descendants too. Dependencies are installed inside the scratch, frozen from the HEAD root lockfile before implementation. OS-sandbox installs use private writable package stores and caches under a private TMPDIR with copy imports. Shared package stores and caches remain read-only. Best-effort installs prefer the local package cache and fetch missing packages. Returns changes (unified diff, baseSha, worktreePath, worktreeRemoved, dependencies, isolation, empty, status: changes, no_changes or tampered) for the operator to apply. changes.dependencies reports status installed, none or failed, with manager and failure reason when applicable. No root package.json or supported lockfile means none. Provisioning failure makes the quality gate unmeasured with the reason. worktreeRemoved reflects whether the scratch path exists after cleanup, and prune failures have a separate warning. Failed removal preserves the diff with a leftover-path warning. Dirty-source warnings identify HEAD and the number of omitted uncommitted paths. Scratch-bound expert CLIs and change capture run inside the same sandbox. The sandbox executable is pinned before execution. Change capture disables external diff and textconv. The scratch gitfile, commondir and gitdir are checked against their pre-run bytes. Modified metadata refuses the diff with status tampered and a warning. Cleanup removes only the scratch and worktree metadata paths recorded before execution, then prunes from the source repository. The sandbox permits writes to the scratch, its own git metadata and a private TMPDIR. Host IPC environment redirects are removed, /run/user is masked and existing Docker socket paths are masked. DNS resolver paths under /run remain available. Network and abstract-namespace sockets remain reachable. Supports dry-run (plan+vote only). Supports dispatch: ‘async’ (non-dryRun runs) — returns a jobId immediately, then poll get_job_result.

Parameters