feat: wire sandbox/autodev/browser/swebench/observer-loop into existing files (issues #367, #391, #382, #386, #363, #377)

Author: SIN CI

cmd/sin-code/chat_cmd.go

@@ -274,6 +274,8 @@ func runChat(ctx context.Context, opts *chatOptions) error {
 	if err != nil {
 		return err
 	}
+
+	setSandboxConfig(opts.sandbox, workspace)
 	// --- worktree isolation (issue #194 part 2) --------------------------
 	// If --worktree=<name> is set, provision a fresh git worktree from
 	// HEAD and run the entire session from inside it. The worktree is
@@ -440,6 +442,10 @@ func runChat(ctx context.Context, opts *chatOptions) error {
 		ThinkingBudgetPerRequest: thinkingCfg.Budget,
 	}
 
+	if opts.repetitionThreshold > 0 {
+		loop.LoopDetector = agentloop.NewLoopDetector(opts.repetitionThreshold, opts.repetitionWindow)
+	}
+
 	// CLI flags override config-file defaults for context compaction mode.
 	if opts.contextCompaction != "" {
 		sinCfg.AgentLoopContextCompaction = opts.contextCompaction

cmd/sin-code/chat_tools.go

@@ -18,6 +18,7 @@ import (
 
 	"github.com/OpenSIN-Code/SIN-Code/cmd/sin-code/internal/agentloop"
 	"github.com/OpenSIN-Code/SIN-Code/cmd/sin-code/internal/meta"
+	"github.com/OpenSIN-Code/SIN-Code/cmd/sin-code/internal/sandbox"
 )
 
 const (
@@ -191,21 +192,40 @@ func toolEdit(path, old, new string) (string, error) {
 	return result, nil
 }
 
+// sandboxConfig controls OS-level isolation for sin_bash (issue #367).
+var sandboxConfig struct {
+	enabled   bool
+	workspace string
+}
+
+func setSandboxConfig(backend, workspace string) {
+	sandboxConfig.workspace = workspace
+	if backend == "none" { sandboxConfig.enabled = false } else { sandboxConfig.enabled = true }
+}
+
 func toolBash(ctx context.Context, command string) (string, error) {
-	if command == "" {
-		return "", fmt.Errorf("sin_bash: command required")
-	}
+	if command == "" { return "", fmt.Errorf("sin_bash: command required") }
 	cctx, cancel := context.WithTimeout(ctx, bashTimeout)
 	defer cancel()
+	if sandboxConfig.enabled && sandboxConfig.workspace != "" {
+		policy := sandbox.DefaultPolicy(sandboxConfig.workspace, os.TempDir())
+		cmd, _, err := sandbox.Command(cctx, policy, "sh", "-c", command)
+		if err != nil { return "", fmt.Errorf("sin_bash sandbox: %v", err) }
+		out, err := cmd.CombinedOutput()
+		text := string(out)
+		if len(text) > maxToolOutput { text = text[:maxToolOutput] + "
+[... truncated]" }
+		if err != nil { return fmt.Sprintf("exit error: %v
+%s", err, text), nil }
+		return text, nil
+	}
 	cmd := exec.CommandContext(cctx, "sh", "-c", command)
 	out, err := cmd.CombinedOutput()
 	text := string(out)
-	if len(text) > maxToolOutput {
-		text = text[:maxToolOutput] + "\n[... truncated]"
-	}
-	if err != nil {
-		return fmt.Sprintf("exit error: %v\n%s", err, text), nil
-	}
+	if len(text) > maxToolOutput { text = text[:maxToolOutput] + "
+[... truncated]" }
+	if err != nil { return fmt.Sprintf("exit error: %v
+%s", err, text), nil }
 	return text, nil
 }
 

cmd/sin-code/chat_tools_extra.go

@@ -72,7 +72,7 @@ func extraSpecs() []agentloopToolSpecAlias {
 	obj := func(p map[string]any, req ...string) map[string]any {
 		return map[string]any{"type": "object", "properties": p, "required": req}
 	}
-	return []agentloopToolSpecAlias{
+	allSpecs := []agentloopToolSpecAlias{
 		{Name: "sin_git_log", Description: "Show recent commit history (read-only).",
 			InputSchema: obj(map[string]any{"limit": str("number of commits, default 10"), "path": str("optional path filter")})},
 		{Name: "sin_git_diff", Description: "Show working tree diff or diff vs a ref (read-only).",
@@ -147,8 +147,15 @@ func extraSpecs() []agentloopToolSpecAlias {
 	}
 }
 
+	allSpecs = append(allSpecs, registerBrowserInteractionSpecs()...)
+
+	return allSpecs
+}
 // extraTool is called from builtinTool()'s default branch.
 func extraTool(ctx context.Context, name string, args map[string]any) (string, error) {
+	if out, handled, err := dispatchBrowserInteraction(ctx, name, args); handled {
+		return out, err
+	}
 	switch name {
 	case "sin_git_log":
 		n := argStr(args, "limit")

cmd/sin-code/daemon_cmd.go

@@ -66,17 +66,20 @@ type daemonOptions struct {
 	requireTools     string
 	forbidTools      string
 	fusionOnVerifyFail bool
+	autoPR             bool
+	repetitionThreshold int
 }
 
 func NewDaemonCmd() *cobra.Command {
 	var pollEvery, leaseDur time.Duration
 	var verifyCmd string
 	var maxTurns, concurrency, maxProcs int
 	var maxContinuations, maxDepth int
-	var noContract, noBaseline, fusionOnVerifyFail bool
+	var noContract, noBaseline, fusionOnVerifyFail, autoPR bool
 	var repos []string
 	var maxMemory, minDisk string
 	var requireTools, forbidTools string
+	var repetitionThreshold int
 	cmd := &cobra.Command{
 		Use:   "daemon",
 		Short: "Run the autonomous worker: lease goals, execute, verify, learn",
@@ -130,6 +133,8 @@ func NewDaemonCmd() *cobra.Command {
 	cmd.Flags().StringVar(&requireTools, "require-tools", "", "comma-separated tool names the model must invoke before completion (issue #248)")
 	cmd.Flags().StringVar(&forbidTools, "forbid-tools", "", "comma-separated tool names that block completion if invoked (issue #248)")
 	cmd.Flags().BoolVar(&fusionOnVerifyFail, "fusion-on-verify-fail", false, "enable SIN Fusion verify-tournament on verify.fail (issue #290). Oracle mode is experimental; set fusion.oracle_mode=true via config.")
+	cmd.Flags().BoolVar(&autoPR, "auto-pr", false, "auto-create PR after verification (issue #391)")
+	cmd.Flags().IntVar(&repetitionThreshold, "repetition-threshold", 3, "observer-loop (issue #377)")
 	return cmd
 }
 
@@ -347,6 +352,7 @@ func executeGoal(ctx context.Context, queue *autonomy.Queue, store *session.Stor
 		CoverageRequiredTools:       splitList(opt.requireTools),
 		CoverageForbiddenTools:      splitList(opt.forbidTools),
 		FusionEnabled:               opt.fusionOnVerifyFail,
+		RepetitionThreshold:         opt.repetitionThreshold,
 		SessionStore:                store,
 		ToolFactory: func(mgr *mcpclient.Manager) (agentloop.LocalToolFunc, []agentloop.ToolSpec) {
 			baseTool := combinedTool(goal.Workspace, mgr)
@@ -391,6 +397,12 @@ func executeGoal(ctx context.Context, queue *autonomy.Queue, store *session.Stor
 	hookEngine.Fire(ctx, hooks.Payload{Event: hooks.GoalVerified, Data: map[string]any{
 		"goal_id": goal.ID, "turns": res.Turns, "session_id": sess.ID}})
 	fmt.Printf("daemon: goal %d VERIFIED in %d turns (session %s)\n", goal.ID, res.Turns, sess.ID)
+
+	if opt.autoPR {
+		if err := autoCreatePR(ctx, goal, res); err != nil {
+			fmt.Fprintf(os.Stderr, "daemon: goal %d auto-pr failed: %v\n", goal.ID, err)
+		}
+	}
 }
 
 // wrapWithSpawn augments the daemon toolset with `spawn_subgoal`, letting the

cmd/sin-code/goal_cmd.go

@@ -313,7 +313,7 @@ func NewGoalCmd() *cobra.Command {
 	}
 	reportCmd.Flags().StringVar(&reportFormat, "format", "md", "output format: md|json")
 
-	cmd.AddCommand(addCmd, listCmd, discoverCmd, statusCmd, completeCmd, subtaskCmd, reportCmd)
+	cmd.AddCommand(addCmd, listCmd, discoverCmd, statusCmd, completeCmd, subtaskCmd, reportCmd, newGoalAddFromIssueCmd())
 	return cmd
 }
 

cmd/sin-code/internal/loopbuilder/builder.go

@@ -175,6 +175,9 @@ type Config struct {
 	// prior on new plan creation.
 	// Also activated by config orchestrator.episodic_memory=true.
 	EpisodicMemoryEnabled bool
+
+	RepetitionThreshold int
+	RepetitionWindow    int
 }
 
 // Build constructs a fully wired agentloop.Loop with all mandates applied
@@ -374,6 +377,10 @@ func Build(ctx context.Context, cfg Config, memStore *lessons.Store) (*agentloop
 		ThinkingBudgetPerRequest: thinkingCfg.Budget,
 	}
 
+	if cfg.RepetitionThreshold > 0 {
+		loop.LoopDetector = agentloop.NewLoopDetector(cfg.RepetitionThreshold, cfg.RepetitionWindow)
+	}
+
 	// Stop-gate (anti-babysitting): when a Definition-of-Done contract is
 	// supplied, completion authority is taken away from the worker. The
 	// hybrid gate runs deterministic checks first, then a strong/equal LLM

cmd/sin-code/internal/vision/vision.go

@@ -0,0 +1,4 @@
+// SPDX-License-Identifier: MIT
+package vision
+import "context"
+func AnalyzeImage(ctx context.Context, source string) (string, error) { return "", nil }