Add reproducible offline workspace capsules

.github/dependabot.yml

@@ -0,0 +1,11 @@
+version: 2
+updates:
+  - package-ecosystem: npm
+    directory: "/"
+    schedule:
+      interval: weekly
+  - package-ecosystem: cargo
+    directory: "/desktop"
+    schedule:
+      interval: weekly
+    open-pull-requests-limit: 5

README.md

@@ -61,6 +61,8 @@ The daemon also owns an allowlisted DAP registry. Python debugging is provided t
 
 The Training Room is defined in `training/manifest.json` and `training/README.md`; it is an approval-gated, resume-safe control room for data, tokenizer, training, evaluation, and release jobs. `benchmarks/` contains the first common smoke suite for all three public model packs. `desktop/tauri.conf.json` is the reproducible desktop-shell configuration; native compilation remains a platform gate until Rust/Tauri is installed.
 
+`capsules/` adds reproducible offline workspace capsules: portable metadata for the exact model, runtime, Git revision, evidence hashes, tools, and Veritas result without exporting private source by default.
+
 ## Status
 
 This is a pre-production engineering release. The Liquid checkpoint is not included until its exact artifact, license, checksum, and evaluation are confirmed. The Qwen weight is downloaded separately from its official repository and should be verified before offline use.

SECURITY.md

@@ -15,3 +15,4 @@ Never include access tokens, private keys, credentials, private source, unredact
 - Keep private community data local unless the user explicitly changes its boundary.
 - Treat model output, plugins, dependencies, and imported artifacts as untrusted.
 - Require diff review and user approval before writes or publication.
+- Treat capsules as metadata by default; source/evidence export must be explicit and encrypted.

capsules/README.md

@@ -0,0 +1,5 @@
+# Reproducible Offline Capsules
+
+A capsule records the exact environment needed to understand or replay a task: workspace label and Git revision, model revision and runtime, tool list, evidence hashes, and Veritas results. It does not include source or evidence bytes unless the user explicitly chooses an encrypted export.
+
+This gives AIDE a capability cloud IDEs rarely make local and portable: a journalist or developer can share a verifiable task recipe without surrendering private documents.

capsules/create.mjs

@@ -0,0 +1,18 @@
+import { promises as fs } from 'node:fs';
+import crypto from 'node:crypto';
+
+const output = process.argv[2] || 'aide-capsule.json';
+const capsule = {
+  schema_version: '1.0',
+  capsule_id: `aide-${crypto.randomUUID()}`,
+  created_at: new Date().toISOString(),
+  privacy: 'metadata-only',
+  workspace: { root_label: process.env.AIDE_WORKSPACE_LABEL || 'local-workspace', git_revision: process.env.AIDE_GIT_REVISION || 'not-recorded' },
+  model: { id: process.env.AIDE_MODEL_ID || 'not-recorded', revision: process.env.AIDE_MODEL_REVISION || 'not-recorded', runtime: process.env.AIDE_MODEL_RUNTIME || 'not-recorded', quantization: process.env.AIDE_MODEL_QUANTIZATION || 'not-recorded' },
+  evidence: [],
+  verification: { checks: {}, status: 'unverified' },
+  tools: [],
+  notes: 'Metadata only. Source and evidence bytes are not included.'
+};
+await fs.writeFile(output, `${JSON.stringify(capsule, null, 2)}\n`, { flag: 'wx', mode: 0o600 });
+console.log(`created ${output}`);

capsules/manifest.schema.json

@@ -0,0 +1,19 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "title": "AIDE Reproducible Offline Capsule",
+  "type": "object",
+  "required": ["schema_version", "capsule_id", "privacy", "workspace", "model", "verification"],
+  "properties": {
+    "schema_version": {"const": "1.0"},
+    "capsule_id": {"type": "string"},
+    "created_at": {"type": "string", "format": "date-time"},
+    "privacy": {"enum": ["metadata-only", "encrypted-evidence", "explicit-source-export"]},
+    "workspace": {"type": "object", "required": ["root_label", "git_revision"], "properties": {"root_label": {"type": "string"}, "git_revision": {"type": "string"}}},
+    "model": {"type": "object", "required": ["id", "revision", "runtime"], "properties": {"id": {"type": "string"}, "revision": {"type": "string"}, "runtime": {"type": "string"}, "quantization": {"type": "string"}}},
+    "evidence": {"type": "array", "items": {"type": "object", "required": ["label", "sha256"], "properties": {"label": {"type": "string"}, "sha256": {"type": "string", "pattern": "^[a-f0-9]{64}$"}}}},
+    "verification": {"type": "object", "required": ["checks", "status"], "properties": {"checks": {"type": "object"}, "status": {"enum": ["verified", "blocked", "unverified"]}}},
+    "tools": {"type": "array", "items": {"type": "string"}},
+    "notes": {"type": "string"}
+  },
+  "additionalProperties": false
+}

capsules/test-create.mjs

@@ -0,0 +1,14 @@
+import assert from 'node:assert/strict';
+import { mkdtemp, readFile } from 'node:fs/promises';
+import { tmpdir } from 'node:os';
+import path from 'node:path';
+import { execFile } from 'node:child_process';
+import { promisify } from 'node:util';
+const run = promisify(execFile);
+const root = await mkdtemp(path.join(tmpdir(), 'aide-capsule-'));
+const output = path.join(root, 'capsule.json');
+await run(process.execPath, ['capsules/create.mjs', output], { cwd: process.cwd(), env: { ...process.env, AIDE_MODEL_ID: 'test-model' } });
+const capsule = JSON.parse(await readFile(output, 'utf8'));
+assert.equal(capsule.privacy, 'metadata-only');
+assert.equal(capsule.model.id, 'test-model');
+console.log('capsule test passed');

package.json

@@ -5,10 +5,11 @@
   "description": "Local-first sovereign development workbench",
   "type": "module",
   "scripts": {
-    "test": "node tests/smoke.mjs && node harness/test-orchestrator.mjs && node daemon/test-model-manager.mjs && node daemon/test-community-store.mjs && node daemon/test-lsp-manager.mjs && node daemon/test-dap-manager.mjs && node daemon/test-workspace-manager.mjs && node benchmarks/test-run.mjs",
+    "test": "node tests/smoke.mjs && node harness/test-orchestrator.mjs && node daemon/test-model-manager.mjs && node daemon/test-community-store.mjs && node daemon/test-lsp-manager.mjs && node daemon/test-dap-manager.mjs && node daemon/test-workspace-manager.mjs && node benchmarks/test-run.mjs && node capsules/test-create.mjs",
     "check": "node --check app.js && node --check daemon/server.mjs && node --check harness/orchestrator.mjs && node --check harness/checks.mjs",
     "veritas": "node harness/run-veritas.mjs",
     "benchmarks": "node benchmarks/run.mjs",
+    "capsule": "node capsules/create.mjs",
     "desktop:dev": "tauri dev --config desktop/tauri.conf.json",
     "desktop:prepare": "node desktop/prepare.mjs",
     "desktop:build": "npm run desktop:prepare && tauri build --config desktop/tauri.conf.json"